@opengeni/contracts 5.5.0 → 5.5.2-canary.40656248492001

package/dist/{chunk-3SIZGL3O.js → chunk-ZYVEJFNU.js}

@@ -1,6 +1,14 @@
+import {
+  SPREADSHEET_DEFAULT_COLUMN_WIDTH,
+  SPREADSHEET_DEFAULT_ROW_HEIGHT,
+  SPREADSHEET_MAX_DIMENSION_PIXELS
+} from "./chunk-RUQ4I6DO.js";
 import {
   COMMITTED_TRANSACTION_PROTOCOL_VERSION
-} from "./chunk-PX3VCKAU.js";
+} from "./chunk-WVCFSOUZ.js";
+import {
+  fnv1a64Limbs
+} from "./chunk-WQI7VNN4.js";
 
 // src/editable-artifact-committed-transaction.ts
 var MAX_COMMITTED_TRANSACTION_BYTES = 8 * 1024 * 1024;
@@ -17,9 +25,6 @@ var MAX_SAFE_U64_HIGH = 2097151;
 var U32_SIZE = 4294967296;
 var U32_MAX = 4294967295;
 var MAX_DATE_MILLISECONDS = 8640000000000000n;
-var FNV_OFFSET_LOW = 2216829733;
-var FNV_OFFSET_HIGH = 3421674724;
-var FNV_PRIME_LOW = 435;
 var HEX = Array.from({ length: 256 }, (_, value) => value.toString(16).padStart(2, "0"));
 function decodeCommittedTransactionSummary(bytes) {
   assertInput(bytes);
@@ -52,7 +57,7 @@ function decodeCommittedTransactionSummary(bytes) {
       bytes.byteLength < expectedLength ? "truncated OGACO002 payload" : "trailing bytes after OGACO002 envelope"
     );
   }
-  const [checksumLow, checksumHigh] = fnv1a64(bytes, payloadEnd);
+  const [checksumLow, checksumHigh] = fnv1a64Limbs(bytes, payloadEnd);
   if (view.getUint32(payloadEnd, true) !== checksumLow || view.getUint32(payloadEnd + 4, true) !== checksumHigh) {
     throw new TypeError("OGACO002 checksum mismatch");
   }
@@ -217,6 +222,17 @@ var Reader = class {
       case 5:
         this.stableId("selective undo target");
         return totalCells;
+      case 6:
+      case 7: {
+        this.skipGeneration("dimension sheet generation");
+        this.u32("dimension index");
+        const pixels = this.u32("dimension pixels");
+        const defaultPixels = tag === 6 ? SPREADSHEET_DEFAULT_ROW_HEIGHT : SPREADSHEET_DEFAULT_COLUMN_WIDTH;
+        if (pixels > SPREADSHEET_MAX_DIMENSION_PIXELS || pixels === defaultPixels) {
+          throw new TypeError("OGACO002 dimension pixels are noncanonical or outside bounds");
+        }
+        return totalCells;
+      }
       default:
         throw new TypeError(`invalid OGACO002 collaboration command tag: ${tag}`);
     }
@@ -381,18 +397,6 @@ function hexBytes(bytes) {
   for (const byte of bytes) result += HEX[byte];
   return result;
 }
-function fnv1a64(bytes, end) {
-  let low = FNV_OFFSET_LOW;
-  let high = FNV_OFFSET_HIGH;
-  for (let index = 0; index < end; index += 1) {
-    low = (low ^ bytes[index]) >>> 0;
-    const lowProduct = low * FNV_PRIME_LOW;
-    const carry = Math.floor(lowProduct / U32_SIZE);
-    high = high * FNV_PRIME_LOW + carry + low * 256 >>> 0;
-    low = lowProduct >>> 0;
-  }
-  return [low, high];
-}
 
 export {
   MAX_COMMITTED_TRANSACTION_BYTES,
@@ -401,4 +405,4 @@ export {
   MAX_COMMITTED_TRANSACTION_CELLS,
   decodeCommittedTransactionSummary
 };
-//# sourceMappingURL=chunk-3SIZGL3O.js.map
+//# sourceMappingURL=chunk-ZYVEJFNU.js.map

package/dist/chunk-ZYVEJFNU.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/editable-artifact-committed-transaction.ts"],"sourcesContent":["/**\n * Strict, allocation-bounded inspection of canonical OGACO002 transactions.\n *\n * The Rust kernel remains the authority for applying operations. This decoder\n * validates the complete envelope and every typed operation so metadata after\n * the operation stream cannot be located by trusting attacker-controlled\n * lengths. It intentionally does not construct an editable artifact model.\n */\n\nimport { COMMITTED_TRANSACTION_PROTOCOL_VERSION } from \"./editable-artifact-versions\";\nimport { fnv1a64Limbs } from \"./editable-artifact-binary\";\nimport {\n  SPREADSHEET_DEFAULT_ROW_HEIGHT,\n  SPREADSHEET_DEFAULT_COLUMN_WIDTH,\n  SPREADSHEET_MAX_DIMENSION_PIXELS,\n} from \"./spreadsheet-artifact-commands\";\n\nexport { COMMITTED_TRANSACTION_PROTOCOL_VERSION } from \"./editable-artifact-versions\";\nexport const MAX_COMMITTED_TRANSACTION_BYTES = 8 * 1024 * 1024;\nexport const MAX_COMMITTED_TRANSACTION_OPERATIONS = 4_096;\nexport const MAX_COMMITTED_TRANSACTION_CAUSAL_REPLICAS = 100_000;\nexport const MAX_COMMITTED_TRANSACTION_CELLS = 1_000_000;\n\nconst MAGIC = new Uint8Array([0x4f, 0x47, 0x41, 0x43, 0x4f, 0x30, 0x30, 0x32]); // OGACO002\nconst HEADER_BYTES = 24;\nconst CHECKSUM_BYTES = 8;\nconst HASH_BYTES = 32;\nconst STABLE_ID_BYTES = 16;\nconst MAX_OPERATION_STRING_BYTES = 4 * 1024 * 1024;\nconst MAX_SAFE_U64_HIGH = 0x1f_ffff;\nconst U32_SIZE = 0x1_0000_0000;\nconst U32_MAX = 0xffff_ffff;\nconst MAX_DATE_MILLISECONDS = 8_640_000_000_000_000n;\n\nconst HEX = Array.from({ length: 256 }, (_, value) => value.toString(16).padStart(2, \"0\"));\n\nexport type CommittedTransactionCausalEntry = Readonly<{\n  replicaId: string;\n  counter: number;\n}>;\n\nexport type CommittedTransactionSummary = Readonly<{\n  operationProtocolVersion: typeof COMMITTED_TRANSACTION_PROTOCOL_VERSION;\n  transactionId: string;\n  dot: CommittedTransactionCausalEntry;\n  resolvedCausalBase: readonly CommittedTransactionCausalEntry[];\n  operationIds: readonly string[];\n  priorStateHash: string;\n  resultingCausalFrontier: readonly CommittedTransactionCausalEntry[];\n  stateHash: string;\n}>;\n\n/**\n * Decodes only the metadata of one exact canonical OGACO002 byte envelope.\n *\n * This function is synchronous and never mutates or retains `bytes`. The\n * caller remains the owner of the exact canonical envelope.\n */\nexport function decodeCommittedTransactionSummary(bytes: Uint8Array): CommittedTransactionSummary {\n  assertInput(bytes);\n  if (bytes.byteLength > MAX_COMMITTED_TRANSACTION_BYTES) {\n    throw new RangeError(\"OGACO002 envelope exceeds its byte limit\");\n  }\n  if (bytes.byteLength < HEADER_BYTES + CHECKSUM_BYTES) {\n    throw new TypeError(\"truncated OGACO002 envelope\");\n  }\n\n  const view = new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength);\n  for (let index = 0; index < MAGIC.byteLength; index += 1) {\n    if (bytes[index] !== MAGIC[index]) throw new TypeError(\"invalid OGACO002 magic\");\n  }\n\n  const version = view.getUint16(8, true);\n  if (version !== COMMITTED_TRANSACTION_PROTOCOL_VERSION) {\n    throw new TypeError(`unsupported OGACO002 version: ${version}`);\n  }\n  if (view.getUint16(10, true) !== 0) {\n    throw new TypeError(\"reserved OGACO002 header bits are set\");\n  }\n\n  const operationCount = view.getUint32(12, true);\n  if (operationCount === 0 || operationCount > MAX_COMMITTED_TRANSACTION_OPERATIONS) {\n    throw new RangeError(\"OGACO002 operation count is outside its canonical bounds\");\n  }\n\n  const payloadLength = safeU64At(view, 16, \"OGACO002 payload length\", false);\n  const payloadEnd = checkedAdd(HEADER_BYTES, payloadLength, \"OGACO002 payload length\");\n  const expectedLength = checkedAdd(payloadEnd, CHECKSUM_BYTES, \"OGACO002 envelope length\");\n  if (bytes.byteLength !== expectedLength) {\n    throw new TypeError(\n      bytes.byteLength < expectedLength\n        ? \"truncated OGACO002 payload\"\n        : \"trailing bytes after OGACO002 envelope\",\n    );\n  }\n\n  const [checksumLow, checksumHigh] = fnv1a64Limbs(bytes, payloadEnd);\n  if (\n    view.getUint32(payloadEnd, true) !== checksumLow ||\n    view.getUint32(payloadEnd + 4, true) !== checksumHigh\n  ) {\n    throw new TypeError(\"OGACO002 checksum mismatch\");\n  }\n\n  const reader = new Reader(bytes, HEADER_BYTES, payloadEnd);\n  const transactionId = reader.stableId(\"transaction id\");\n  const dot = Object.freeze({\n    replicaId: reader.replicaId(\"transaction dot replica\"),\n    counter: reader.safeU64(\"transaction dot counter\", true),\n  });\n  const resolvedCausalBase = reader.frontier(\"resolved causal base\");\n  const priorStateHash = reader.stateHash(\"prior state hash\");\n\n  const operationIds: string[] = [];\n  const seenOperationIds = new Set<string>();\n  let totalCells = 0;\n  for (let index = 0; index < operationCount; index += 1) {\n    const operationId = reader.stableId(`operation ${index} id`);\n    if (seenOperationIds.has(operationId)) {\n      throw new TypeError(\"OGACO002 operation ids must be unique\");\n    }\n    seenOperationIds.add(operationId);\n    operationIds.push(operationId);\n    totalCells = reader.skipCommand(totalCells);\n  }\n\n  const resultingCausalFrontier = reader.frontier(\"resulting causal frontier\");\n  const stateHash = reader.stateHash(\"resulting state hash\");\n  reader.done();\n\n  return Object.freeze({\n    operationProtocolVersion: COMMITTED_TRANSACTION_PROTOCOL_VERSION,\n    transactionId,\n    dot,\n    resolvedCausalBase,\n    operationIds: Object.freeze(operationIds),\n    priorStateHash,\n    resultingCausalFrontier,\n    stateHash,\n  });\n}\n\nclass Reader {\n  readonly #bytes: Uint8Array;\n  readonly #view: DataView;\n  readonly #end: number;\n  #offset: number;\n\n  constructor(bytes: Uint8Array, offset: number, end: number) {\n    this.#bytes = bytes;\n    this.#view = new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength);\n    this.#offset = offset;\n    this.#end = end;\n  }\n\n  take(length: number, label: string): Uint8Array {\n    const offset = this.reserve(length, label);\n    return this.#bytes.subarray(offset, offset + length);\n  }\n\n  reserve(length: number, label: string): number {\n    if (!Number.isSafeInteger(length) || length < 0) {\n      throw new RangeError(`${label} has an invalid byte length`);\n    }\n    const offset = this.#offset;\n    const end = checkedAdd(offset, length, `${label} byte range`);\n    if (end > this.#end) throw new TypeError(`truncated ${label}`);\n    this.#offset = end;\n    return offset;\n  }\n\n  u8(label: string): number {\n    return this.#bytes[this.reserve(1, label)]!;\n  }\n\n  u32(label: string): number {\n    const offset = this.reserve(4, label);\n    return this.#view.getUint32(offset, true);\n  }\n\n  safeU64(label: string, positive: boolean): number {\n    const offset = this.reserve(8, label);\n    const value = safeU64At(this.#view, offset, label, positive);\n    return value;\n  }\n\n  replicaId(label: string): string {\n    const offset = this.reserve(8, label);\n    const low = this.#view.getUint32(offset, true);\n    const high = this.#view.getUint32(offset + 4, true);\n    if (low === 0 && high === 0) throw new TypeError(`${label} must be nonzero`);\n    return hexU64(high, low);\n  }\n\n  stableId(label: string): string {\n    const offset = this.reserve(STABLE_ID_BYTES, label);\n    const counterLow = this.#view.getUint32(offset, true);\n    const counterHigh = this.#view.getUint32(offset + 4, true);\n    const namespaceLow = this.#view.getUint32(offset + 8, true);\n    const namespaceHigh = this.#view.getUint32(offset + 12, true);\n    if (counterLow === 0 && counterHigh === 0 && namespaceLow === 0 && namespaceHigh === 0) {\n      throw new TypeError(`${label} reserves the all-zero value`);\n    }\n    return `${hexU64(namespaceHigh, namespaceLow)}${hexU64(counterHigh, counterLow)}`;\n  }\n\n  sheetObjectId(label: string): string {\n    const offset = this.#offset;\n    const id = this.stableId(label);\n    const counterIsZero =\n      this.#view.getUint32(offset, true) === 0 && this.#view.getUint32(offset + 4, true) === 0;\n    const namespaceIsZero =\n      this.#view.getUint32(offset + 8, true) === 0 && this.#view.getUint32(offset + 12, true) === 0;\n    if (counterIsZero || namespaceIsZero) {\n      throw new TypeError(`${label} requires nonzero namespace and counter`);\n    }\n    return id;\n  }\n\n  stateHash(label: string): string {\n    return `sha256:${hexBytes(this.take(HASH_BYTES, label))}`;\n  }\n\n  frontier(label: string): readonly CommittedTransactionCausalEntry[] {\n    const count = this.u32(`${label} count`);\n    if (count > MAX_COMMITTED_TRANSACTION_CAUSAL_REPLICAS) {\n      throw new RangeError(`${label} exceeds its replica limit`);\n    }\n    const entries: CommittedTransactionCausalEntry[] = [];\n    let previousLow = 0;\n    let previousHigh = 0;\n    let hasPrevious = false;\n    for (let index = 0; index < count; index += 1) {\n      const replicaOffset = this.#offset;\n      const replicaId = this.replicaId(`${label} replica ${index}`);\n      const replicaLow = this.#view.getUint32(replicaOffset, true);\n      const replicaHigh = this.#view.getUint32(replicaOffset + 4, true);\n      if (\n        hasPrevious &&\n        (replicaHigh < previousHigh || (replicaHigh === previousHigh && replicaLow <= previousLow))\n      ) {\n        throw new TypeError(`${label} replicas must be unique and strictly ordered`);\n      }\n      const counter = this.safeU64(`${label} counter ${index}`, true);\n      entries.push(Object.freeze({ replicaId, counter }));\n      previousLow = replicaLow;\n      previousHigh = replicaHigh;\n      hasPrevious = true;\n    }\n    return Object.freeze(entries);\n  }\n\n  skipCommand(totalCells: number): number {\n    const tag = this.u8(\"collaboration command tag\");\n    switch (tag) {\n      case 0: {\n        this.sheetObjectId(\"created sheet id\");\n        this.skipString(\"created sheet name\");\n        const after = this.u8(\"created sheet predecessor flag\");\n        if (after === 1) this.skipGeneration(\"created sheet predecessor\");\n        else if (after !== 0) throw new TypeError(\"invalid created sheet predecessor flag\");\n        return totalCells;\n      }\n      case 1:\n        this.skipGeneration(\"renamed sheet generation\");\n        this.skipString(\"renamed sheet name\");\n        return totalCells;\n      case 2:\n        this.skipGeneration(\"deleted sheet generation\");\n        return totalCells;\n      case 3:\n        return this.skipSetCells(totalCells);\n      case 4: {\n        this.skipGeneration(\"cleared sheet generation\");\n        const startRow = this.u32(\"clear range start row\");\n        const startColumn = this.u32(\"clear range start column\");\n        const endRow = this.u32(\"clear range end row\");\n        const endColumn = this.u32(\"clear range end column\");\n        if (startRow > endRow || startColumn > endColumn) {\n          throw new TypeError(\"OGACO002 clear range is not normalized\");\n        }\n        return totalCells;\n      }\n      case 5:\n        this.stableId(\"selective undo target\");\n        return totalCells;\n      case 6:\n      case 7: {\n        this.skipGeneration(\"dimension sheet generation\");\n        this.u32(\"dimension index\");\n        const pixels = this.u32(\"dimension pixels\");\n        const defaultPixels =\n          tag === 6 ? SPREADSHEET_DEFAULT_ROW_HEIGHT : SPREADSHEET_DEFAULT_COLUMN_WIDTH;\n        if (pixels > SPREADSHEET_MAX_DIMENSION_PIXELS || pixels === defaultPixels) {\n          throw new TypeError(\"OGACO002 dimension pixels are noncanonical or outside bounds\");\n        }\n        return totalCells;\n      }\n      default:\n        throw new TypeError(`invalid OGACO002 collaboration command tag: ${tag}`);\n    }\n  }\n\n  skipSetCells(totalCells: number): number {\n    this.skipGeneration(\"cell block sheet generation\");\n    const anchorRow = this.u32(\"cell block anchor row\");\n    const anchorColumn = this.u32(\"cell block anchor column\");\n    const rows = this.u32(\"cell block rows\");\n    const columns = this.u32(\"cell block columns\");\n    if (rows === 0 || columns === 0) {\n      throw new TypeError(\"OGACO002 cell block dimensions must be nonzero\");\n    }\n    if (anchorRow > U32_MAX - (rows - 1) || anchorColumn > U32_MAX - (columns - 1)) {\n      throw new RangeError(\"OGACO002 cell block coordinates overflow u32\");\n    }\n    if (rows > Math.floor(MAX_COMMITTED_TRANSACTION_CELLS / columns)) {\n      throw new RangeError(\"OGACO002 cell block exceeds its cell limit\");\n    }\n    const cellCount = rows * columns;\n    const nextTotal = totalCells + cellCount;\n    if (nextTotal > MAX_COMMITTED_TRANSACTION_CELLS) {\n      throw new RangeError(\"OGACO002 transaction exceeds its cell limit\");\n    }\n    for (let index = 0; index < cellCount; index += 1) this.skipCell();\n    return nextTotal;\n  }\n\n  skipCell(): void {\n    const formulaTag = this.u8(\"cell formula tag\");\n    if (formulaTag === 1) {\n      if (this.skipString(\"cell formula\") === 0) {\n        throw new TypeError(\"OGACO002 formula must not be empty\");\n      }\n      return;\n    } else if (formulaTag !== 0) {\n      throw new TypeError(`invalid OGACO002 cell formula tag: ${formulaTag}`);\n    }\n\n    const valueTag = this.u8(\"cell value tag\");\n    switch (valueTag) {\n      case 0:\n      case 1:\n      case 2:\n        return;\n      case 3:\n        this.skipNumber();\n        return;\n      case 4:\n        this.skipString(\"cell text\");\n        return;\n      case 5:\n        this.skipFormulaError();\n        return;\n      case 6:\n        this.skipDate();\n        return;\n      default:\n        throw new TypeError(`invalid OGACO002 cell value tag: ${valueTag}`);\n    }\n  }\n\n  skipNumber(): void {\n    const offset = this.reserve(8, \"cell number\");\n    const low = this.#view.getUint32(offset, true);\n    const high = this.#view.getUint32(offset + 4, true);\n    if (low === 0 && high === 0x8000_0000) {\n      throw new TypeError(\"OGACO002 cell number uses negative zero\");\n    }\n    if ((high & 0x7ff0_0000) === 0x7ff0_0000) {\n      throw new TypeError(\"OGACO002 cell numbers must be finite\");\n    }\n  }\n\n  skipDate(): void {\n    const offset = this.reserve(8, \"cell date\");\n    const milliseconds = this.#view.getBigInt64(offset, true);\n    if (milliseconds < -MAX_DATE_MILLISECONDS || milliseconds > MAX_DATE_MILLISECONDS) {\n      throw new TypeError(\"OGACO002 cell date is outside the ECMAScript range\");\n    }\n  }\n\n  skipFormulaError(): void {\n    const tag = this.u8(\"formula error tag\");\n    if (tag <= 8) return;\n    if (tag === 9) {\n      this.skipString(\"custom formula error\");\n      return;\n    }\n    throw new TypeError(`invalid OGACO002 formula error tag: ${tag}`);\n  }\n\n  skipGeneration(label: string): void {\n    this.sheetObjectId(`${label} sheet id`);\n    this.stableId(`${label} creation operation id`);\n  }\n\n  skipString(label: string): number {\n    const length = this.u32(`${label} length`);\n    if (length > MAX_OPERATION_STRING_BYTES) {\n      throw new RangeError(`${label} exceeds its byte limit`);\n    }\n    const value = this.take(length, label);\n    assertUtf8(value, label);\n    return length;\n  }\n\n  done(): void {\n    if (this.#offset !== this.#end) throw new TypeError(\"trailing bytes in OGACO002 payload\");\n  }\n}\n\nfunction assertInput(bytes: Uint8Array): void {\n  if (!(bytes instanceof Uint8Array)) {\n    throw new TypeError(\"OGACO002 bytes must be a Uint8Array\");\n  }\n  if (typeof SharedArrayBuffer !== \"undefined\" && bytes.buffer instanceof SharedArrayBuffer) {\n    throw new TypeError(\"OGACO002 bytes must not use shared mutable memory\");\n  }\n}\n\nfunction safeU64At(view: DataView, offset: number, label: string, positive: boolean): number {\n  const low = view.getUint32(offset, true);\n  const high = view.getUint32(offset + 4, true);\n  if (high > MAX_SAFE_U64_HIGH)\n    throw new RangeError(`${label} exceeds JavaScript safe integer range`);\n  const value = high * U32_SIZE + low;\n  if (positive && value === 0) throw new TypeError(`${label} must be nonzero`);\n  return value;\n}\n\nfunction checkedAdd(left: number, right: number, label: string): number {\n  const result = left + right;\n  if (!Number.isSafeInteger(result)) throw new RangeError(`${label} exceeds safe integer range`);\n  return result;\n}\n\n/** Allocation-free UTF-8 scalar validation equivalent to Rust `str::from_utf8`. */\nfunction assertUtf8(bytes: Uint8Array, label: string): void {\n  for (let index = 0; index < bytes.length;) {\n    const first = bytes[index]!;\n    if (first <= 0x7f) {\n      index += 1;\n      continue;\n    }\n    const second = bytes[index + 1];\n    if (first >= 0xc2 && first <= 0xdf && continuation(second)) {\n      index += 2;\n      continue;\n    }\n    const third = bytes[index + 2];\n    if (\n      ((first === 0xe0 && between(second, 0xa0, 0xbf)) ||\n        (first >= 0xe1 && first <= 0xec && continuation(second)) ||\n        (first === 0xed && between(second, 0x80, 0x9f)) ||\n        (first >= 0xee && first <= 0xef && continuation(second))) &&\n      continuation(third)\n    ) {\n      index += 3;\n      continue;\n    }\n    const fourth = bytes[index + 3];\n    if (\n      ((first === 0xf0 && between(second, 0x90, 0xbf)) ||\n        (first >= 0xf1 && first <= 0xf3 && continuation(second)) ||\n        (first === 0xf4 && between(second, 0x80, 0x8f))) &&\n      continuation(third) &&\n      continuation(fourth)\n    ) {\n      index += 4;\n      continue;\n    }\n    throw new TypeError(`${label} is not canonical UTF-8`);\n  }\n}\n\nfunction continuation(value: number | undefined): boolean {\n  return value !== undefined && value >= 0x80 && value <= 0xbf;\n}\n\nfunction between(value: number | undefined, minimum: number, maximum: number): boolean {\n  return value !== undefined && value >= minimum && value <= maximum;\n}\n\nfunction hexU64(high: number, low: number): string {\n  return `${high.toString(16).padStart(8, \"0\")}${low.toString(16).padStart(8, \"0\")}`;\n}\n\nfunction hexBytes(bytes: Uint8Array): string {\n  let result = \"\";\n  for (const byte of bytes) result += HEX[byte];\n  return result;\n}\n"],"mappings":";;;;;;;;;;;;;AAkBO,IAAM,kCAAkC,IAAI,OAAO;AACnD,IAAM,uCAAuC;AAC7C,IAAM,4CAA4C;AAClD,IAAM,kCAAkC;AAE/C,IAAM,QAAQ,IAAI,WAAW,CAAC,IAAM,IAAM,IAAM,IAAM,IAAM,IAAM,IAAM,EAAI,CAAC;AAC7E,IAAM,eAAe;AACrB,IAAM,iBAAiB;AACvB,IAAM,aAAa;AACnB,IAAM,kBAAkB;AACxB,IAAM,6BAA6B,IAAI,OAAO;AAC9C,IAAM,oBAAoB;AAC1B,IAAM,WAAW;AACjB,IAAM,UAAU;AAChB,IAAM,wBAAwB;AAE9B,IAAM,MAAM,MAAM,KAAK,EAAE,QAAQ,IAAI,GAAG,CAAC,GAAG,UAAU,MAAM,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC;AAwBlF,SAAS,kCAAkC,OAAgD;AAChG,cAAY,KAAK;AACjB,MAAI,MAAM,aAAa,iCAAiC;AACtD,UAAM,IAAI,WAAW,0CAA0C;AAAA,EACjE;AACA,MAAI,MAAM,aAAa,eAAe,gBAAgB;AACpD,UAAM,IAAI,UAAU,6BAA6B;AAAA,EACnD;AAEA,QAAM,OAAO,IAAI,SAAS,MAAM,QAAQ,MAAM,YAAY,MAAM,UAAU;AAC1E,WAAS,QAAQ,GAAG,QAAQ,MAAM,YAAY,SAAS,GAAG;AACxD,QAAI,MAAM,KAAK,MAAM,MAAM,KAAK,EAAG,OAAM,IAAI,UAAU,wBAAwB;AAAA,EACjF;AAEA,QAAM,UAAU,KAAK,UAAU,GAAG,IAAI;AACtC,MAAI,YAAY,wCAAwC;AACtD,UAAM,IAAI,UAAU,iCAAiC,OAAO,EAAE;AAAA,EAChE;AACA,MAAI,KAAK,UAAU,IAAI,IAAI,MAAM,GAAG;AAClC,UAAM,IAAI,UAAU,uCAAuC;AAAA,EAC7D;AAEA,QAAM,iBAAiB,KAAK,UAAU,IAAI,IAAI;AAC9C,MAAI,mBAAmB,KAAK,iBAAiB,sCAAsC;AACjF,UAAM,IAAI,WAAW,0DAA0D;AAAA,EACjF;AAEA,QAAM,gBAAgB,UAAU,MAAM,IAAI,2BAA2B,KAAK;AAC1E,QAAM,aAAa,WAAW,cAAc,eAAe,yBAAyB;AACpF,QAAM,iBAAiB,WAAW,YAAY,gBAAgB,0BAA0B;AACxF,MAAI,MAAM,eAAe,gBAAgB;AACvC,UAAM,IAAI;AAAA,MACR,MAAM,aAAa,iBACf,+BACA;AAAA,IACN;AAAA,EACF;AAEA,QAAM,CAAC,aAAa,YAAY,IAAI,aAAa,OAAO,UAAU;AAClE,MACE,KAAK,UAAU,YAAY,IAAI,MAAM,eACrC,KAAK,UAAU,aAAa,GAAG,IAAI,MAAM,cACzC;AACA,UAAM,IAAI,UAAU,4BAA4B;AAAA,EAClD;AAEA,QAAM,SAAS,IAAI,OAAO,OAAO,cAAc,UAAU;AACzD,QAAM,gBAAgB,OAAO,SAAS,gBAAgB;AACtD,QAAM,MAAM,OAAO,OAAO;AAAA,IACxB,WAAW,OAAO,UAAU,yBAAyB;AAAA,IACrD,SAAS,OAAO,QAAQ,2BAA2B,IAAI;AAAA,EACzD,CAAC;AACD,QAAM,qBAAqB,OAAO,SAAS,sBAAsB;AACjE,QAAM,iBAAiB,OAAO,UAAU,kBAAkB;AAE1D,QAAM,eAAyB,CAAC;AAChC,QAAM,mBAAmB,oBAAI,IAAY;AACzC,MAAI,aAAa;AACjB,WAAS,QAAQ,GAAG,QAAQ,gBAAgB,SAAS,GAAG;AACtD,UAAM,cAAc,OAAO,SAAS,aAAa,KAAK,KAAK;AAC3D,QAAI,iBAAiB,IAAI,WAAW,GAAG;AACrC,YAAM,IAAI,UAAU,uCAAuC;AAAA,IAC7D;AACA,qBAAiB,IAAI,WAAW;AAChC,iBAAa,KAAK,WAAW;AAC7B,iBAAa,OAAO,YAAY,UAAU;AAAA,EAC5C;AAEA,QAAM,0BAA0B,OAAO,SAAS,2BAA2B;AAC3E,QAAM,YAAY,OAAO,UAAU,sBAAsB;AACzD,SAAO,KAAK;AAEZ,SAAO,OAAO,OAAO;AAAA,IACnB,0BAA0B;AAAA,IAC1B;AAAA,IACA;AAAA,IACA;AAAA,IACA,cAAc,OAAO,OAAO,YAAY;AAAA,IACxC;AAAA,IACA;AAAA,IACA;AAAA,EACF,CAAC;AACH;AAEA,IAAM,SAAN,MAAa;AAAA,EACF;AAAA,EACA;AAAA,EACA;AAAA,EACT;AAAA,EAEA,YAAY,OAAmB,QAAgB,KAAa;AAC1D,SAAK,SAAS;AACd,SAAK,QAAQ,IAAI,SAAS,MAAM,QAAQ,MAAM,YAAY,MAAM,UAAU;AAC1E,SAAK,UAAU;AACf,SAAK,OAAO;AAAA,EACd;AAAA,EAEA,KAAK,QAAgB,OAA2B;AAC9C,UAAM,SAAS,KAAK,QAAQ,QAAQ,KAAK;AACzC,WAAO,KAAK,OAAO,SAAS,QAAQ,SAAS,MAAM;AAAA,EACrD;AAAA,EAEA,QAAQ,QAAgB,OAAuB;AAC7C,QAAI,CAAC,OAAO,cAAc,MAAM,KAAK,SAAS,GAAG;AAC/C,YAAM,IAAI,WAAW,GAAG,KAAK,6BAA6B;AAAA,IAC5D;AACA,UAAM,SAAS,KAAK;AACpB,UAAM,MAAM,WAAW,QAAQ,QAAQ,GAAG,KAAK,aAAa;AAC5D,QAAI,MAAM,KAAK,KAAM,OAAM,IAAI,UAAU,aAAa,KAAK,EAAE;AAC7D,SAAK,UAAU;AACf,WAAO;AAAA,EACT;AAAA,EAEA,GAAG,OAAuB;AACxB,WAAO,KAAK,OAAO,KAAK,QAAQ,GAAG,KAAK,CAAC;AAAA,EAC3C;AAAA,EAEA,IAAI,OAAuB;AACzB,UAAM,SAAS,KAAK,QAAQ,GAAG,KAAK;AACpC,WAAO,KAAK,MAAM,UAAU,QAAQ,IAAI;AAAA,EAC1C;AAAA,EAEA,QAAQ,OAAe,UAA2B;AAChD,UAAM,SAAS,KAAK,QAAQ,GAAG,KAAK;AACpC,UAAM,QAAQ,UAAU,KAAK,OAAO,QAAQ,OAAO,QAAQ;AAC3D,WAAO;AAAA,EACT;AAAA,EAEA,UAAU,OAAuB;AAC/B,UAAM,SAAS,KAAK,QAAQ,GAAG,KAAK;AACpC,UAAM,MAAM,KAAK,MAAM,UAAU,QAAQ,IAAI;AAC7C,UAAM,OAAO,KAAK,MAAM,UAAU,SAAS,GAAG,IAAI;AAClD,QAAI,QAAQ,KAAK,SAAS,EAAG,OAAM,IAAI,UAAU,GAAG,KAAK,kBAAkB;AAC3E,WAAO,OAAO,MAAM,GAAG;AAAA,EACzB;AAAA,EAEA,SAAS,OAAuB;AAC9B,UAAM,SAAS,KAAK,QAAQ,iBAAiB,KAAK;AAClD,UAAM,aAAa,KAAK,MAAM,UAAU,QAAQ,IAAI;AACpD,UAAM,cAAc,KAAK,MAAM,UAAU,SAAS,GAAG,IAAI;AACzD,UAAM,eAAe,KAAK,MAAM,UAAU,SAAS,GAAG,IAAI;AAC1D,UAAM,gBAAgB,KAAK,MAAM,UAAU,SAAS,IAAI,IAAI;AAC5D,QAAI,eAAe,KAAK,gBAAgB,KAAK,iBAAiB,KAAK,kBAAkB,GAAG;AACtF,YAAM,IAAI,UAAU,GAAG,KAAK,8BAA8B;AAAA,IAC5D;AACA,WAAO,GAAG,OAAO,eAAe,YAAY,CAAC,GAAG,OAAO,aAAa,UAAU,CAAC;AAAA,EACjF;AAAA,EAEA,cAAc,OAAuB;AACnC,UAAM,SAAS,KAAK;AACpB,UAAM,KAAK,KAAK,SAAS,KAAK;AAC9B,UAAM,gBACJ,KAAK,MAAM,UAAU,QAAQ,IAAI,MAAM,KAAK,KAAK,MAAM,UAAU,SAAS,GAAG,IAAI,MAAM;AACzF,UAAM,kBACJ,KAAK,MAAM,UAAU,SAAS,GAAG,IAAI,MAAM,KAAK,KAAK,MAAM,UAAU,SAAS,IAAI,IAAI,MAAM;AAC9F,QAAI,iBAAiB,iBAAiB;AACpC,YAAM,IAAI,UAAU,GAAG,KAAK,yCAAyC;AAAA,IACvE;AACA,WAAO;AAAA,EACT;AAAA,EAEA,UAAU,OAAuB;AAC/B,WAAO,UAAU,SAAS,KAAK,KAAK,YAAY,KAAK,CAAC,CAAC;AAAA,EACzD;AAAA,EAEA,SAAS,OAA2D;AAClE,UAAM,QAAQ,KAAK,IAAI,GAAG,KAAK,QAAQ;AACvC,QAAI,QAAQ,2CAA2C;AACrD,YAAM,IAAI,WAAW,GAAG,KAAK,4BAA4B;AAAA,IAC3D;AACA,UAAM,UAA6C,CAAC;AACpD,QAAI,cAAc;AAClB,QAAI,eAAe;AACnB,QAAI,cAAc;AAClB,aAAS,QAAQ,GAAG,QAAQ,OAAO,SAAS,GAAG;AAC7C,YAAM,gBAAgB,KAAK;AAC3B,YAAM,YAAY,KAAK,UAAU,GAAG,KAAK,YAAY,KAAK,EAAE;AAC5D,YAAM,aAAa,KAAK,MAAM,UAAU,eAAe,IAAI;AAC3D,YAAM,cAAc,KAAK,MAAM,UAAU,gBAAgB,GAAG,IAAI;AAChE,UACE,gBACC,cAAc,gBAAiB,gBAAgB,gBAAgB,cAAc,cAC9E;AACA,cAAM,IAAI,UAAU,GAAG,KAAK,+CAA+C;AAAA,MAC7E;AACA,YAAM,UAAU,KAAK,QAAQ,GAAG,KAAK,YAAY,KAAK,IAAI,IAAI;AAC9D,cAAQ,KAAK,OAAO,OAAO,EAAE,WAAW,QAAQ,CAAC,CAAC;AAClD,oBAAc;AACd,qBAAe;AACf,oBAAc;AAAA,IAChB;AACA,WAAO,OAAO,OAAO,OAAO;AAAA,EAC9B;AAAA,EAEA,YAAY,YAA4B;AACtC,UAAM,MAAM,KAAK,GAAG,2BAA2B;AAC/C,YAAQ,KAAK;AAAA,MACX,KAAK,GAAG;AACN,aAAK,cAAc,kBAAkB;AACrC,aAAK,WAAW,oBAAoB;AACpC,cAAM,QAAQ,KAAK,GAAG,gCAAgC;AACtD,YAAI,UAAU,EAAG,MAAK,eAAe,2BAA2B;AAAA,iBACvD,UAAU,EAAG,OAAM,IAAI,UAAU,wCAAwC;AAClF,eAAO;AAAA,MACT;AAAA,MACA,KAAK;AACH,aAAK,eAAe,0BAA0B;AAC9C,aAAK,WAAW,oBAAoB;AACpC,eAAO;AAAA,MACT,KAAK;AACH,aAAK,eAAe,0BAA0B;AAC9C,eAAO;AAAA,MACT,KAAK;AACH,eAAO,KAAK,aAAa,UAAU;AAAA,MACrC,KAAK,GAAG;AACN,aAAK,eAAe,0BAA0B;AAC9C,cAAM,WAAW,KAAK,IAAI,uBAAuB;AACjD,cAAM,cAAc,KAAK,IAAI,0BAA0B;AACvD,cAAM,SAAS,KAAK,IAAI,qBAAqB;AAC7C,cAAM,YAAY,KAAK,IAAI,wBAAwB;AACnD,YAAI,WAAW,UAAU,cAAc,WAAW;AAChD,gBAAM,IAAI,UAAU,wCAAwC;AAAA,QAC9D;AACA,eAAO;AAAA,MACT;AAAA,MACA,KAAK;AACH,aAAK,SAAS,uBAAuB;AACrC,eAAO;AAAA,MACT,KAAK;AAAA,MACL,KAAK,GAAG;AACN,aAAK,eAAe,4BAA4B;AAChD,aAAK,IAAI,iBAAiB;AAC1B,cAAM,SAAS,KAAK,IAAI,kBAAkB;AAC1C,cAAM,gBACJ,QAAQ,IAAI,iCAAiC;AAC/C,YAAI,SAAS,oCAAoC,WAAW,eAAe;AACzE,gBAAM,IAAI,UAAU,8DAA8D;AAAA,QACpF;AACA,eAAO;AAAA,MACT;AAAA,MACA;AACE,cAAM,IAAI,UAAU,+CAA+C,GAAG,EAAE;AAAA,IAC5E;AAAA,EACF;AAAA,EAEA,aAAa,YAA4B;AACvC,SAAK,eAAe,6BAA6B;AACjD,UAAM,YAAY,KAAK,IAAI,uBAAuB;AAClD,UAAM,eAAe,KAAK,IAAI,0BAA0B;AACxD,UAAM,OAAO,KAAK,IAAI,iBAAiB;AACvC,UAAM,UAAU,KAAK,IAAI,oBAAoB;AAC7C,QAAI,SAAS,KAAK,YAAY,GAAG;AAC/B,YAAM,IAAI,UAAU,gDAAgD;AAAA,IACtE;AACA,QAAI,YAAY,WAAW,OAAO,MAAM,eAAe,WAAW,UAAU,IAAI;AAC9E,YAAM,IAAI,WAAW,8CAA8C;AAAA,IACrE;AACA,QAAI,OAAO,KAAK,MAAM,kCAAkC,OAAO,GAAG;AAChE,YAAM,IAAI,WAAW,4CAA4C;AAAA,IACnE;AACA,UAAM,YAAY,OAAO;AACzB,UAAM,YAAY,aAAa;AAC/B,QAAI,YAAY,iCAAiC;AAC/C,YAAM,IAAI,WAAW,6CAA6C;AAAA,IACpE;AACA,aAAS,QAAQ,GAAG,QAAQ,WAAW,SAAS,EAAG,MAAK,SAAS;AACjE,WAAO;AAAA,EACT;AAAA,EAEA,WAAiB;AACf,UAAM,aAAa,KAAK,GAAG,kBAAkB;AAC7C,QAAI,eAAe,GAAG;AACpB,UAAI,KAAK,WAAW,cAAc,MAAM,GAAG;AACzC,cAAM,IAAI,UAAU,oCAAoC;AAAA,MAC1D;AACA;AAAA,IACF,WAAW,eAAe,GAAG;AAC3B,YAAM,IAAI,UAAU,sCAAsC,UAAU,EAAE;AAAA,IACxE;AAEA,UAAM,WAAW,KAAK,GAAG,gBAAgB;AACzC,YAAQ,UAAU;AAAA,MAChB,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AACH;AAAA,MACF,KAAK;AACH,aAAK,WAAW;AAChB;AAAA,MACF,KAAK;AACH,aAAK,WAAW,WAAW;AAC3B;AAAA,MACF,KAAK;AACH,aAAK,iBAAiB;AACtB;AAAA,MACF,KAAK;AACH,aAAK,SAAS;AACd;AAAA,MACF;AACE,cAAM,IAAI,UAAU,oCAAoC,QAAQ,EAAE;AAAA,IACtE;AAAA,EACF;AAAA,EAEA,aAAmB;AACjB,UAAM,SAAS,KAAK,QAAQ,GAAG,aAAa;AAC5C,UAAM,MAAM,KAAK,MAAM,UAAU,QAAQ,IAAI;AAC7C,UAAM,OAAO,KAAK,MAAM,UAAU,SAAS,GAAG,IAAI;AAClD,QAAI,QAAQ,KAAK,SAAS,YAAa;AACrC,YAAM,IAAI,UAAU,yCAAyC;AAAA,IAC/D;AACA,SAAK,OAAO,gBAAiB,YAAa;AACxC,YAAM,IAAI,UAAU,sCAAsC;AAAA,IAC5D;AAAA,EACF;AAAA,EAEA,WAAiB;AACf,UAAM,SAAS,KAAK,QAAQ,GAAG,WAAW;AAC1C,UAAM,eAAe,KAAK,MAAM,YAAY,QAAQ,IAAI;AACxD,QAAI,eAAe,CAAC,yBAAyB,eAAe,uBAAuB;AACjF,YAAM,IAAI,UAAU,oDAAoD;AAAA,IAC1E;AAAA,EACF;AAAA,EAEA,mBAAyB;AACvB,UAAM,MAAM,KAAK,GAAG,mBAAmB;AACvC,QAAI,OAAO,EAAG;AACd,QAAI,QAAQ,GAAG;AACb,WAAK,WAAW,sBAAsB;AACtC;AAAA,IACF;AACA,UAAM,IAAI,UAAU,uCAAuC,GAAG,EAAE;AAAA,EAClE;AAAA,EAEA,eAAe,OAAqB;AAClC,SAAK,cAAc,GAAG,KAAK,WAAW;AACtC,SAAK,SAAS,GAAG,KAAK,wBAAwB;AAAA,EAChD;AAAA,EAEA,WAAW,OAAuB;AAChC,UAAM,SAAS,KAAK,IAAI,GAAG,KAAK,SAAS;AACzC,QAAI,SAAS,4BAA4B;AACvC,YAAM,IAAI,WAAW,GAAG,KAAK,yBAAyB;AAAA,IACxD;AACA,UAAM,QAAQ,KAAK,KAAK,QAAQ,KAAK;AACrC,eAAW,OAAO,KAAK;AACvB,WAAO;AAAA,EACT;AAAA,EAEA,OAAa;AACX,QAAI,KAAK,YAAY,KAAK,KAAM,OAAM,IAAI,UAAU,oCAAoC;AAAA,EAC1F;AACF;AAEA,SAAS,YAAY,OAAyB;AAC5C,MAAI,EAAE,iBAAiB,aAAa;AAClC,UAAM,IAAI,UAAU,qCAAqC;AAAA,EAC3D;AACA,MAAI,OAAO,sBAAsB,eAAe,MAAM,kBAAkB,mBAAmB;AACzF,UAAM,IAAI,UAAU,mDAAmD;AAAA,EACzE;AACF;AAEA,SAAS,UAAU,MAAgB,QAAgB,OAAe,UAA2B;AAC3F,QAAM,MAAM,KAAK,UAAU,QAAQ,IAAI;AACvC,QAAM,OAAO,KAAK,UAAU,SAAS,GAAG,IAAI;AAC5C,MAAI,OAAO;AACT,UAAM,IAAI,WAAW,GAAG,KAAK,wCAAwC;AACvE,QAAM,QAAQ,OAAO,WAAW;AAChC,MAAI,YAAY,UAAU,EAAG,OAAM,IAAI,UAAU,GAAG,KAAK,kBAAkB;AAC3E,SAAO;AACT;AAEA,SAAS,WAAW,MAAc,OAAe,OAAuB;AACtE,QAAM,SAAS,OAAO;AACtB,MAAI,CAAC,OAAO,cAAc,MAAM,EAAG,OAAM,IAAI,WAAW,GAAG,KAAK,6BAA6B;AAC7F,SAAO;AACT;AAGA,SAAS,WAAW,OAAmB,OAAqB;AAC1D,WAAS,QAAQ,GAAG,QAAQ,MAAM,UAAS;AACzC,UAAM,QAAQ,MAAM,KAAK;AACzB,QAAI,SAAS,KAAM;AACjB,eAAS;AACT;AAAA,IACF;AACA,UAAM,SAAS,MAAM,QAAQ,CAAC;AAC9B,QAAI,SAAS,OAAQ,SAAS,OAAQ,aAAa,MAAM,GAAG;AAC1D,eAAS;AACT;AAAA,IACF;AACA,UAAM,QAAQ,MAAM,QAAQ,CAAC;AAC7B,SACI,UAAU,OAAQ,QAAQ,QAAQ,KAAM,GAAI,KAC3C,SAAS,OAAQ,SAAS,OAAQ,aAAa,MAAM,KACrD,UAAU,OAAQ,QAAQ,QAAQ,KAAM,GAAI,KAC5C,SAAS,OAAQ,SAAS,OAAQ,aAAa,MAAM,MACxD,aAAa,KAAK,GAClB;AACA,eAAS;AACT;AAAA,IACF;AACA,UAAM,SAAS,MAAM,QAAQ,CAAC;AAC9B,SACI,UAAU,OAAQ,QAAQ,QAAQ,KAAM,GAAI,KAC3C,SAAS,OAAQ,SAAS,OAAQ,aAAa,MAAM,KACrD,UAAU,OAAQ,QAAQ,QAAQ,KAAM,GAAI,MAC/C,aAAa,KAAK,KAClB,aAAa,MAAM,GACnB;AACA,eAAS;AACT;AAAA,IACF;AACA,UAAM,IAAI,UAAU,GAAG,KAAK,yBAAyB;AAAA,EACvD;AACF;AAEA,SAAS,aAAa,OAAoC;AACxD,SAAO,UAAU,UAAa,SAAS,OAAQ,SAAS;AAC1D;AAEA,SAAS,QAAQ,OAA2B,SAAiB,SAA0B;AACrF,SAAO,UAAU,UAAa,SAAS,WAAW,SAAS;AAC7D;AAEA,SAAS,OAAO,MAAc,KAAqB;AACjD,SAAO,GAAG,KAAK,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,GAAG,IAAI,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC;AAClF;AAEA,SAAS,SAAS,OAA2B;AAC3C,MAAI,SAAS;AACb,aAAW,QAAQ,MAAO,WAAU,IAAI,IAAI;AAC5C,SAAO;AACT;","names":[]}

package/dist/claude-provider-account-authority.d.ts

@@ -0,0 +1,18 @@
+import type { z } from "zod";
+/** Same opaque pool selection shape; Claude's live authority is revalidated separately. */
+export declare const ClaudeProviderAccountAuthoritySnapshotV1: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    scope: z.ZodLiteral<"organization">;
+}, z.core.$strict>, z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    scope: z.ZodLiteral<"workspace">;
+}, z.core.$strict>, z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    scope: z.ZodLiteral<"user">;
+    authorityGeneration: z.ZodNumber;
+}, z.core.$strict>], "scope">;
+export type ClaudeProviderAccountAuthoritySnapshotV1 = z.infer<typeof ClaudeProviderAccountAuthoritySnapshotV1>;
+export declare const WORKSPACE_CLAUDE_PROVIDER_ACCOUNT_AUTHORITY_SNAPSHOT_V1: {
+    readonly version: 1;
+    readonly scope: "workspace";
+};

package/dist/claude-subscription-oauth.d.ts

@@ -1,4 +1,23 @@
 import { z } from "zod";
+export declare const ClaudeSubscriptionSetupTokenRequest: z.ZodObject<{
+    token: z.ZodString;
+    scope: z.ZodDefault<z.ZodEnum<{
+        user: "user";
+        workspace: "workspace";
+    }>>;
+    label: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+    reconnectAccountId: z.ZodOptional<z.ZodString>;
+    expectedCredentialVersion: z.ZodOptional<z.ZodNumber>;
+}, z.core.$strict>;
+export type ClaudeSubscriptionSetupTokenRequest = z.infer<typeof ClaudeSubscriptionSetupTokenRequest>;
+export declare const ClaudeSubscriptionOAuthStartRequest: z.ZodObject<{
+    scope: z.ZodDefault<z.ZodEnum<{
+        user: "user";
+        workspace: "workspace";
+    }>>;
+    reconnectAccountId: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type ClaudeSubscriptionOAuthStartRequest = z.infer<typeof ClaudeSubscriptionOAuthStartRequest>;
 export declare const ClaudeSubscriptionOAuthStartResponse: z.ZodObject<{
     attemptId: z.ZodString;
     authorizationUrl: z.ZodString;
@@ -12,6 +31,12 @@ export declare const ClaudeSubscriptionOAuthCompleteRequest: z.ZodObject<{
 export type ClaudeSubscriptionOAuthCompleteRequest = z.infer<typeof ClaudeSubscriptionOAuthCompleteRequest>;
 export declare const ClaudeSubscriptionOAuthCompleteResponse: z.ZodObject<{
     connected: z.ZodLiteral<true>;
+    accountId: z.ZodString;
+    scope: z.ZodEnum<{
+        organization: "organization";
+        user: "user";
+        workspace: "workspace";
+    }>;
     credentialVersion: z.ZodNumber;
 }, z.core.$strict>;
 export type ClaudeSubscriptionOAuthCompleteResponse = z.infer<typeof ClaudeSubscriptionOAuthCompleteResponse>;

package/dist/claude-subscription-usage.d.ts

@@ -24,9 +24,43 @@ export declare const ClaudeUsageWindow: z.ZodObject<{
         rejected: "rejected";
     }>>;
     observedAt: z.ZodString;
+    source: z.ZodOptional<z.ZodEnum<{
+        provider: "provider";
+        response_headers: "response_headers";
+    }>>;
 }, z.core.$strict>;
 export type ClaudeUsageWindow = z.infer<typeof ClaudeUsageWindow>;
-/** Provider observations, never an estimate based on OpenGeni token counts. */
+/** One response's dispatch authority; never combine statuses from different responses. */
+export declare const ClaudeUsageRequestStatus: z.ZodObject<{
+    status: z.ZodNullable<z.ZodEnum<{
+        allowed: "allowed";
+        allowed_warning: "allowed_warning";
+        rejected: "rejected";
+    }>>;
+    resetsAt: z.ZodNullable<z.ZodString>;
+    representativeClaim: z.ZodNullable<z.ZodEnum<{
+        five_hour: "five_hour";
+        overage: "overage";
+        seven_day: "seven_day";
+        seven_day_opus: "seven_day_opus";
+        seven_day_overage_included: "seven_day_overage_included";
+        seven_day_sonnet: "seven_day_sonnet";
+    }>>;
+    overageStatus: z.ZodNullable<z.ZodEnum<{
+        allowed: "allowed";
+        allowed_warning: "allowed_warning";
+        rejected: "rejected";
+    }>>;
+    overageResetsAt: z.ZodNullable<z.ZodString>;
+    upstreamModelId: z.ZodNullable<z.ZodString>;
+    observedAt: z.ZodString;
+    source: z.ZodOptional<z.ZodEnum<{
+        provider: "provider";
+        response_headers: "response_headers";
+    }>>;
+}, z.core.$strict>;
+export type ClaudeUsageRequestStatus = z.infer<typeof ClaudeUsageRequestStatus>;
+/** Provider observations, never an estimate based on Opengeni token counts. */
 export declare const ClaudeSubscriptionUsage: z.ZodObject<{
     connected: z.ZodBoolean;
     credentialVersion: z.ZodNullable<z.ZodNumber>;
@@ -47,6 +81,10 @@ export declare const ClaudeSubscriptionUsage: z.ZodObject<{
             rejected: "rejected";
         }>>;
         observedAt: z.ZodString;
+        source: z.ZodOptional<z.ZodEnum<{
+            provider: "provider";
+            response_headers: "response_headers";
+        }>>;
     }, z.core.$strict>>;
     observedAt: z.ZodNullable<z.ZodString>;
     source: z.ZodNullable<z.ZodEnum<{
@@ -61,5 +99,61 @@ export declare const ClaudeSubscriptionUsage: z.ZodObject<{
         unavailable: "unavailable";
     }>;
     refreshCheckedAt: z.ZodNullable<z.ZodString>;
+    requestStatus: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+        status: z.ZodNullable<z.ZodEnum<{
+            allowed: "allowed";
+            allowed_warning: "allowed_warning";
+            rejected: "rejected";
+        }>>;
+        resetsAt: z.ZodNullable<z.ZodString>;
+        representativeClaim: z.ZodNullable<z.ZodEnum<{
+            five_hour: "five_hour";
+            overage: "overage";
+            seven_day: "seven_day";
+            seven_day_opus: "seven_day_opus";
+            seven_day_overage_included: "seven_day_overage_included";
+            seven_day_sonnet: "seven_day_sonnet";
+        }>>;
+        overageStatus: z.ZodNullable<z.ZodEnum<{
+            allowed: "allowed";
+            allowed_warning: "allowed_warning";
+            rejected: "rejected";
+        }>>;
+        overageResetsAt: z.ZodNullable<z.ZodString>;
+        upstreamModelId: z.ZodNullable<z.ZodString>;
+        observedAt: z.ZodString;
+        source: z.ZodOptional<z.ZodEnum<{
+            provider: "provider";
+            response_headers: "response_headers";
+        }>>;
+    }, z.core.$strict>>>;
+    requestRestrictions: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        status: z.ZodNullable<z.ZodEnum<{
+            allowed: "allowed";
+            allowed_warning: "allowed_warning";
+            rejected: "rejected";
+        }>>;
+        resetsAt: z.ZodNullable<z.ZodString>;
+        representativeClaim: z.ZodNullable<z.ZodEnum<{
+            five_hour: "five_hour";
+            overage: "overage";
+            seven_day: "seven_day";
+            seven_day_opus: "seven_day_opus";
+            seven_day_overage_included: "seven_day_overage_included";
+            seven_day_sonnet: "seven_day_sonnet";
+        }>>;
+        overageStatus: z.ZodNullable<z.ZodEnum<{
+            allowed: "allowed";
+            allowed_warning: "allowed_warning";
+            rejected: "rejected";
+        }>>;
+        overageResetsAt: z.ZodNullable<z.ZodString>;
+        upstreamModelId: z.ZodNullable<z.ZodString>;
+        observedAt: z.ZodString;
+        source: z.ZodOptional<z.ZodEnum<{
+            provider: "provider";
+            response_headers: "response_headers";
+        }>>;
+    }, z.core.$strict>>>;
 }, z.core.$strict>;
 export type ClaudeSubscriptionUsage = z.infer<typeof ClaudeSubscriptionUsage>;

package/dist/client-error-report.d.ts

@@ -1,29 +1,175 @@
 /**
- * Wire grammar of the content-free web client error beacon
- * (`POST /v1/client-errors`).
+ * Wire grammar of the web client error beacon (`POST /v1/client-errors`).
  *
- * A report is only a closed error kind, the matched route PATTERN (never a
- * concrete URL), and the bundle revision. The web client that projects a
+ * A report is a closed error kind, the matched route PATTERN (never a concrete
+ * URL), the bundle revision, and optional error diagnostics: the error's name,
+ * message and stack, plus React's component stack for a render failure. The
+ * diagnostics are error text, not analytics. They can occasionally contain a
+ * fragment of user content (an error message that quotes a value), so they are
+ * scrubbed of obvious credentials and query strings by
+ * {@link scrubClientErrorText} and bounded per field by
+ * {@link CLIENT_ERROR_DETAIL_MAX_BYTES} in the browser, and the API re-applies
+ * the same projection to whatever it receives. The web client that projects a
  * report, the API route that admits it, and the public structured-log
- * projection that prints it all validate against these exact values, so the
+ * projection that prints it all validate against these exact rules, so the
  * browser can only send what the API accepts and logs.
+ *
+ * The same route also admits the closed operational signals below (requests
+ * that never reached the server, live-stream health, and web vitals). They
+ * follow the same rules: closed values only, a route pattern or page label,
+ * never a URL, message, identifier, or user content.
  */
 export declare const CLIENT_ERRORS_PATH = "/v1/client-errors";
 export declare const CLIENT_ERROR_KINDS: readonly ["route_error", "unhandled_rejection", "window_error", "chunk_load"];
 export type ClientErrorKind = (typeof CLIENT_ERROR_KINDS)[number];
-/** Largest accepted report body. A valid report is well under 256 bytes. */
-export declare const CLIENT_ERROR_REPORT_MAX_BYTES = 512;
+/**
+ * Largest UTF-8 byte length of each error diagnostic field. A longer value is
+ * cut at the end, so a stack keeps its innermost frames.
+ */
+export declare const CLIENT_ERROR_DETAIL_MAX_BYTES: {
+    readonly name: 128;
+    readonly message: 1024;
+    readonly stack: 4096;
+    readonly componentStack: 4096;
+};
+export type ClientErrorDetailField = keyof typeof CLIENT_ERROR_DETAIL_MAX_BYTES;
+export declare const CLIENT_ERROR_DETAIL_FIELDS: ClientErrorDetailField[];
+/**
+ * Largest accepted report body. The detail fields total 9,344 bytes; JSON
+ * escaping at most doubles that, which leaves room for the closed fields.
+ */
+export declare const CLIENT_ERROR_REPORT_MAX_BYTES: number;
 /**
  * A route pattern of at most 160 characters that is `/`, `unknown`, or up to
  * twelve `/`-separated segments that are each either a lowercase literal
- * (`variable-sets`) or a `$param` placeholder. The grammar excludes digits in
+ * (`rigs`) or a `$param` placeholder. The grammar excludes digits in
  * literals, so a concrete id cannot pass as one.
  */
 export declare const CLIENT_ERROR_ROUTE_PATTERN: RegExp;
 /** The bundle revision token (a commit SHA, `dev`, or `unknown`). */
 export declare const CLIENT_ERROR_REVISION_PATTERN: RegExp;
+/** Error diagnostics. Every field is optional and already scrubbed and bounded. */
+export type ClientErrorDetail = Partial<Record<ClientErrorDetailField, string>>;
 export type ClientErrorReport = {
     kind: ClientErrorKind;
     route: string;
     revision: string;
+    error?: ClientErrorDetail;
+};
+/**
+ * Remove what an error text must never carry while keeping what makes it
+ * useful. Query strings and fragments are dropped from http(s) URLs (keeping a
+ * stack frame's `:line:column`); authorization values, JWTs, well-known API
+ * token formats, the values of `token=`/`password:`-style assignments, and
+ * long opaque letter-and-digit runs become `[redacted]`; control characters
+ * other than tab and newline become spaces. Messages, file names, route paths,
+ * UUIDs and stack frames survive. Applying it twice changes nothing.
+ */
+export declare function scrubClientErrorText(text: string): string;
+/**
+ * Cut `text` to at most `maxBytes` UTF-8 bytes on a character boundary, ending
+ * with a truncation marker when anything was removed.
+ */
+export declare function boundClientErrorText(text: string, maxBytes: number): string;
+/** Whether `text` is already exactly what the projection would produce for it. */
+export declare function isProjectedClientErrorText(text: string, field: ClientErrorDetailField): boolean;
+/**
+ * Project raw diagnostics into a {@link ClientErrorDetail}: non-string and
+ * blank fields are dropped, the rest scrubbed and then bounded. Returns
+ * `undefined` when nothing remains. Bounding after scrubbing keeps a cut from
+ * splitting a credential into a fragment the scrubber no longer recognizes;
+ * the marker cannot form one, so the result is stable under re-projection.
+ */
+export declare function projectClientErrorDetail(raw: Partial<Record<ClientErrorDetailField, unknown>> | null | undefined): ClientErrorDetail | undefined;
+/**
+ * Content-free operational signals that share the error beacon route. A
+ * signal report carries a `signal` discriminator and only closed values; a
+ * report without `signal` is a {@link ClientErrorReport}. Older API servers
+ * reject signal reports as invalid, so the extension is backward compatible in
+ * both directions.
+ */
+export declare const CLIENT_SIGNALS: readonly ["request_failure", "stream", "web_vital", "desktop_bridge_missing"];
+export type ClientSignal = (typeof CLIENT_SIGNALS)[number];
+/**
+ * Key product mutations whose failure before any HTTP response is counted.
+ * `send_message` includes sends the server queues behind an active turn.
+ */
+export declare const CLIENT_REQUEST_ACTIONS: readonly ["create_session", "send_message", "steer_message", "composer_submit", "retry_turn", "connect_integration", "connect_model", "checkout_start"];
+export type ClientRequestAction = (typeof CLIENT_REQUEST_ACTIONS)[number];
+/**
+ * Why a request never produced an HTTP response: the browser reported no
+ * connectivity (`offline`), the client's own deadline expired (`timeout`), or
+ * the transport failed (`network`). Cancellations the user or the app
+ * initiated are never reported.
+ */
+export declare const CLIENT_REQUEST_FAILURE_REASONS: readonly ["network", "timeout", "offline"];
+export type ClientRequestFailureReason = (typeof CLIENT_REQUEST_FAILURE_REASONS)[number];
+/** Browser live streams: one session's event stream, or the workspace live stream. */
+export declare const CLIENT_STREAMS: readonly ["session", "workspace"];
+export type ClientStream = (typeof CLIENT_STREAMS)[number];
+/**
+ * Live stream health: a live stream dropped and started reconnecting
+ * (`reconnect`), stopped reconnecting (`reconnect_exhausted`), or stayed
+ * disconnected for longer than the long-disconnect threshold while the tab
+ * was visible (`long_disconnect`).
+ */
+export declare const CLIENT_STREAM_EVENTS: readonly ["reconnect", "reconnect_exhausted", "long_disconnect"];
+export type ClientStreamEvent = (typeof CLIENT_STREAM_EVENTS)[number];
+/** Core Web Vitals plus time to first byte, measured once per document. */
+export declare const CLIENT_WEB_VITAL_METRICS: readonly ["lcp", "inp", "cls", "ttfb"];
+export type ClientWebVitalMetric = (typeof CLIENT_WEB_VITAL_METRICS)[number];
+/**
+ * Largest accepted value: seconds for the timing metrics, the unitless layout
+ * shift score for `cls`.
+ */
+export declare const CLIENT_WEB_VITAL_MAX_VALUE: Readonly<Record<ClientWebVitalMetric, number>>;
+/**
+ * The closed page labels of the web console's product-journey projection
+ * (`journeyPage` in apps/web/src/lib/analytics-journey.ts; a drift test keeps
+ * the two identical). Workspace pages are the first path segment after
+ * `/workspaces/<id>/`; the rest are exact top-level routes.
+ */
+export declare const CLIENT_PAGES: readonly ["sessions", "priority", "plugins", "capabilities", "documents", "state", "memory", "schedules", "automations", "bot-templates", "artifacts", "settings", "organization", "insights", "machines", "computer-use", "files", "agents", "secrets", "rigs", "playground", "read-only-chats", "inbox", "sites", "meetings", "home", "session-link", "identity-link", "checkout-return", "integration-return", "teams-connect", "device", "connect-agent", "native-sign-in", "reset-password", "setup-account", "account-auth", "site-auth", "personal-security", "other"];
+export type ClientPage = (typeof CLIENT_PAGES)[number];
+export type ClientRequestFailureReport = {
+    signal: "request_failure";
+    action: ClientRequestAction;
+    reason: ClientRequestFailureReason;
+    route: string;
+    revision: string;
+};
+export type ClientStreamReport = {
+    signal: "stream";
+    stream: ClientStream;
+    event: ClientStreamEvent;
+    route: string;
+    revision: string;
+};
+export type ClientWebVitalReport = {
+    signal: "web_vital";
+    metric: ClientWebVitalMetric;
+    page: ClientPage;
+    /** Seconds for timing metrics, the unitless score for `cls`. */
+    value: number;
+    revision: string;
+};
+/** Desktop app platforms, as the desktop bridge names them. */
+export declare const CLIENT_DESKTOP_PLATFORMS: readonly ["macos", "windows", "linux"];
+export type ClientDesktopPlatform = (typeof CLIENT_DESKTOP_PLATFORMS)[number];
+/** A desktop app version as its user agent writes it (`Opengeni/<version>`). */
+export declare const CLIENT_DESKTOP_APP_VERSION_PATTERN: RegExp;
+/**
+ * The page runs in the Opengeni desktop app's own window (its user agent says
+ * so) but the shell's bridge is missing. Sent at most once per page load.
+ */
+export type ClientDesktopBridgeMissingReport = {
+    signal: "desktop_bridge_missing";
+    platform: ClientDesktopPlatform;
+    /** The app version from the user agent, or `unknown`. */
+    appVersion: string;
+    route: string;
+    revision: string;
 };
+export type ClientSignalReport = ClientRequestFailureReport | ClientStreamReport | ClientWebVitalReport | ClientDesktopBridgeMissingReport;
+/** Every body the beacon route accepts. */
+export type ClientBeaconReport = ClientErrorReport | ClientSignalReport;