@segmentstream/ontology 0.0.0-stage → 0.92.1

package/dist/groups.js

@@ -0,0 +1,280 @@
+const object = (value) => value !== null && typeof value === "object" && !Array.isArray(value);
+/** Strict validation of the `groups` section that `agent/segmentstream.json` authors. */
+export function groupPolicyIssues(value) {
+    const issues = [];
+    const issue = (path, message) => issues.push({ path, message });
+    function section(value, path, keys) {
+        if (value === undefined) {
+            return {};
+        }
+        if (!object(value)) {
+            issue(path, "must be an object");
+            return {};
+        }
+        for (const key of Object.keys(value)) {
+            if (!keys.includes(key)) {
+                issue([...path, key], "is not a known setting");
+            }
+        }
+        return value;
+    }
+    function number(value, path, min, max, integer = false) {
+        if (value !== undefined &&
+            (typeof value !== "number" ||
+                !Number.isFinite(value) ||
+                value < min ||
+                value > max ||
+                (integer && !Number.isInteger(value)))) {
+            issue(path, `must be ${integer ? "an integer" : "a number"} between ${min} and ${max}`);
+        }
+    }
+    function bool(value, path) {
+        if (value !== undefined && typeof value !== "boolean") {
+            issue(path, "must be a boolean");
+        }
+    }
+    function text(value, path, max = 8000) {
+        if (value !== undefined && (typeof value !== "string" || value.length > max)) {
+            issue(path, `must be text of at most ${max} characters`);
+        }
+    }
+    function smart(value, path, restricted = false) {
+        const s = section(value, path, [
+            "instructions",
+            "criteria",
+            "context",
+            "engagement",
+            "thresholds",
+            ...(restricted ? [] : ["model", "timeoutSeconds"]),
+        ]);
+        if (s.model !== undefined &&
+            (typeof s.model !== "string" || !/^[^\s/]+\/[^\s]+$/.test(s.model))) {
+            issue([...path, "model"], "must be a Gateway provider/model id");
+        }
+        number(s.timeoutSeconds, [...path, "timeoutSeconds"], 1, 30);
+        if (typeof s.instructions === "string") {
+            text(s.instructions, [...path, "instructions"]);
+        }
+        else if (s.instructions !== undefined) {
+            const instructions = section(s.instructions, [...path, "instructions"], ["append", "replace", "file"]);
+            if (Object.keys(instructions).length !== 1) {
+                issue([...path, "instructions"], "must specify exactly one of append, replace or file");
+            }
+            for (const [key, value] of Object.entries(instructions)) {
+                text(value, [...path, "instructions", key]);
+            }
+        }
+        const criteria = section(s.criteria, [...path, "criteria"], ["observe", "reply"]);
+        text(criteria.observe, [...path, "criteria", "observe"]);
+        text(criteria.reply, [...path, "criteria", "reply"]);
+        const instructionLength = typeof s.instructions === "string"
+            ? s.instructions.length
+            : object(s.instructions)
+                ? String(s.instructions.append ?? s.instructions.replace ?? "").length
+                : 0;
+        if (instructionLength +
+            String(criteria.observe ?? "").length +
+            String(criteria.reply ?? "").length >
+            8000) {
+            issue(path, "instructions and criteria must fit 8000 characters");
+        }
+        const c = section(s.context, [...path, "context"], [
+            "messages",
+            "includeChatGuidance",
+            ...(restricted
+                ? []
+                : ["includeAgentDescription", "includeAgentInstructions", "includeParticipants"]),
+        ]);
+        number(c.messages, [...path, "context", "messages"], 5, 60, true);
+        for (const key of ["includeAgentDescription", "includeChatGuidance", "includeParticipants"]) {
+            bool(c[key], [...path, "context", key]);
+        }
+        if (object(c.includeAgentInstructions)) {
+            const a = section(c.includeAgentInstructions, [...path, "context", "includeAgentInstructions"], ["maxChars"]);
+            number(a.maxChars, [...path, "context", "includeAgentInstructions", "maxChars"], 1, 6000, true);
+            if (a.maxChars === undefined) {
+                issue([...path, "context", "includeAgentInstructions"], "maxChars is required");
+            }
+        }
+        else {
+            bool(c.includeAgentInstructions, [...path, "context", "includeAgentInstructions"]);
+        }
+        const e = section(s.engagement, [...path, "engagement"], [
+            "policy",
+            "followUpMinutes",
+            "conversationMinutes",
+            "openQuestionMinutes",
+            "addresseeGate",
+            "agentAliases",
+            "idleMinutes",
+            "humanExchangeMinutes",
+            "humanQuestionMinutes",
+            "inferredMaxMinutes",
+            "burst",
+        ]);
+        if (e.policy !== undefined &&
+            e.policy !== "legacy" &&
+            e.policy !== "engaged" &&
+            e.policy !== "conversation") {
+            issue([...path, "engagement", "policy"], "must be legacy, engaged or conversation");
+        }
+        if (e.agentAliases !== undefined &&
+            (!Array.isArray(e.agentAliases) ||
+                e.agentAliases.length > 20 ||
+                e.agentAliases.some((a) => typeof a !== "string" || a.length < 1 || a.length > 128))) {
+            issue([...path, "engagement", "agentAliases"], "must contain at most 20 names of 1..128 characters");
+        }
+        for (const key of [
+            "idleMinutes",
+            "humanExchangeMinutes",
+            "humanQuestionMinutes",
+            "inferredMaxMinutes",
+        ]) {
+            number(e[key], [...path, "engagement", key], 1, 180);
+        }
+        const burst = section(e.burst, [...path, "engagement", "burst"], ["quietSeconds", "maxSeconds", "gapSeconds"]);
+        for (const key of ["quietSeconds", "maxSeconds", "gapSeconds"]) {
+            number(burst[key], [...path, "engagement", "burst", key], 1, 60);
+        }
+        if (burst.quietSeconds !== undefined &&
+            burst.maxSeconds !== undefined &&
+            Number(burst.quietSeconds) > Number(burst.maxSeconds)) {
+            issue([...path, "engagement", "burst"], "quietSeconds must not exceed maxSeconds");
+        }
+        for (const key of ["followUpMinutes", "conversationMinutes"]) {
+            number(e[key], [...path, "engagement", key], 1, 180);
+        }
+        if (e.openQuestionMinutes !== "unlimited") {
+            number(e.openQuestionMinutes, [...path, "engagement", "openQuestionMinutes"], 0, 1440);
+        }
+        bool(e.addresseeGate, [...path, "engagement", "addresseeGate"]);
+        const t = section(s.thresholds, [...path, "thresholds"], [
+            "engaged",
+            "neutral",
+            "humanThread",
+            "continuation",
+            "inferredContinuation",
+            "contested",
+            "ambient",
+            "humanExchange",
+            "reply",
+            "defer",
+        ]);
+        for (const [key, value] of Object.entries(t)) {
+            number(value, [...path, "thresholds", key], key === "reply" ? 0.5 : 0, 1);
+        }
+        // The top level's policy defaults to legacy; a chat or shadow policy may inherit conversation.
+        if ((t.reply !== undefined || t.defer !== undefined) &&
+            (path.length === 1
+                ? e.policy !== "conversation"
+                : e.policy !== undefined && e.policy !== "conversation")) {
+            issue([...path, "thresholds"], "reply and defer apply only to engagement.policy conversation");
+        }
+        // A chat or shadow policy may inherit `reply`; the agent checks each chat after inheritance.
+        if (path.length === 1
+            ? Number(t.defer ?? t.reply ?? 0.5) > Number(t.reply ?? 0.5)
+            : t.defer !== undefined && t.reply !== undefined && Number(t.defer) > Number(t.reply)) {
+            issue([...path, "thresholds"], "must satisfy defer <= reply");
+        }
+        const defaults = e.policy === "conversation"
+            ? [0.5, 0.9, 0.95]
+            : e.policy === "engaged"
+                ? [0.5, 0.75, 0.9]
+                : [0.5, 0.5, 0.5];
+        if ((!restricted &&
+            (Number(t.engaged ?? defaults[0]) > Number(t.neutral ?? defaults[1]) ||
+                Number(t.neutral ?? defaults[1]) > Number(t.humanThread ?? defaults[2]))) ||
+            (restricted &&
+                ((t.engaged !== undefined &&
+                    t.neutral !== undefined &&
+                    Number(t.engaged) > Number(t.neutral)) ||
+                    (t.neutral !== undefined &&
+                        t.humanThread !== undefined &&
+                        Number(t.neutral) > Number(t.humanThread))))) {
+            issue([...path, "thresholds"], "must satisfy engaged <= neutral <= humanThread");
+        }
+    }
+    function override(value, path, isChat) {
+        const v = section(value, path, isChat
+            ? ["mode", "smart", "participants"]
+            : ["mode", "smart", "participants", "chats", "observability"]);
+        if (v.mode !== undefined && v.mode !== "smart" && v.mode !== "mention") {
+            issue([...path, "mode"], "must be smart or mention");
+        }
+        smart(v.smart, [...path, "smart"], isChat);
+        if (v.participants !== undefined) {
+            if (!object(v.participants)) {
+                issue([...path, "participants"], "must be an object");
+            }
+            else {
+                for (const [id, participant] of Object.entries(v.participants)) {
+                    const p = section(participant, [...path, "participants", id], ["aliases"]);
+                    if (!Array.isArray(p.aliases) ||
+                        p.aliases.length > 10 ||
+                        p.aliases.some((a) => typeof a !== "string" || a.length < 1 || a.length > 32 || a.includes("@"))) {
+                        issue([...path, "participants", id, "aliases"], "must contain at most 10 names of 1..32 characters without @");
+                    }
+                }
+            }
+        }
+        if (!isChat) {
+            if (v.chats !== undefined) {
+                if (!object(v.chats)) {
+                    issue([...path, "chats"], "must be an object");
+                }
+                else {
+                    for (const [key, entry] of Object.entries(v.chats)) {
+                        if (!/^[a-z][a-z0-9_-]{0,31}:[^/\s]+(?:\/[^\s]+)?$/.test(key)) {
+                            issue([...path, "chats", key], "must be provider:externalId[/scope]");
+                        }
+                        override(entry, [...path, "chats", key], true);
+                    }
+                }
+            }
+            const o = section(v.observability, [...path, "observability"], ["storeRouterPayload", "shadow"]);
+            bool(o.storeRouterPayload, [...path, "observability", "storeRouterPayload"]);
+            smart(o.shadow, [...path, "observability", "shadow"]);
+        }
+    }
+    override(value, [], false);
+    return issues;
+}
+/** Expand authored files before bundling. The caller owns the workspace-relative filesystem boundary. */
+export function expandGroupFiles(input, read) {
+    if (groupPolicyIssues(input).length > 0) {
+        throw new Error("Group policy authoring is invalid.");
+    }
+    const smart = (value) => {
+        const instructions = value?.instructions;
+        if (typeof instructions !== "object" || instructions.file === undefined) {
+            return value;
+        }
+        const path = instructions.file;
+        if (!path ||
+            path.startsWith("/") ||
+            path.split(/[\\/]/).some((part) => part === "..") ||
+            path.includes("\0")) {
+            throw new Error("Group instruction files must stay within agent/.");
+        }
+        const text = read(path);
+        if (text.length > 8000) {
+            throw new Error("Group instruction files must fit 8000 characters.");
+        }
+        return { ...value, instructions: { replace: text } };
+    };
+    return {
+        ...input,
+        smart: smart(input.smart),
+        ...(input.chats === undefined
+            ? {}
+            : {
+                chats: Object.fromEntries(Object.entries(input.chats).map(([key, value]) => [
+                    key,
+                    { ...value, smart: smart(value.smart) },
+                ])),
+            }),
+        ...(input.observability === undefined
+            ? {}
+            : { observability: { ...input.observability, shadow: smart(input.observability.shadow) } }),
+    };
+}

package/dist/index.d.ts

@@ -0,0 +1,109 @@
+export { BlobValue, BlobUpload, uploads, BLOB_CONTENT_TYPES, MAX_BLOB_BYTES } from "./blob.js";
+export { Files } from "./files.js";
+export type { FileTarget, StageFile, OpenFile } from "./files.js";
+export { warehouse, compatibleWarehouseColumn, warehouseColumnType, validateWarehouseSource, } from "./source.js";
+export type { WarehouseSource } from "./source.js";
+export { m } from "./metric.js";
+export type { AggregateDeclarations, AggregateOptions, AlignmentGroup, Metric, MetricColumnCondition, MetricCondition, Metrics, MetricExpression, MetricOptions, ModelMetric, ModelMetricOptions, ModelMetrics, } from "./metric.js";
+export { METRIC_CONDITION_OPERATORS } from "./metric-filters.js";
+export type { MetricQueryValue, MetricConditionOperator } from "./metric-filters.js";
+export * from "./legacy.js";
+export { action, isAction } from "./action.js";
+export { ActionConfirmation, ConfirmationFact } from "./confirmation.js";
+export type { ConfirmContext } from "./confirmation.js";
+export type { Action, ActionConfig, ActionConfigWithConnections, ActionContext, ActionIdentity, ActionEncodedInput, ActionHints, ActionInput, ActionResult, ActionWriteTarget, Actions, AnyAction, PrepareContext, PrepareError, } from "./action.js";
+export { CONNECTION_ERROR_REASONS, CONNECTION_KEY, CONNECTION_METHODS, connection, ConnectionError, Connections, ConnectionTransport, isConnection, MAXIMUM_CONNECTION_BODY_BYTES, MAXIMUM_CONNECTION_RESPONSE_BYTES, } from "./connection.js";
+export type { AnyConnectionHandle, Connection, ConnectionCall, ConnectionClient, ConnectionErrorReason, ConnectionHandle, ConnectionHeaders, ConnectionMethod, ConnectionOptions, ConnectionReply, ConnectionRequest, ConnectionRequestOptions, ConnectionResponse, ConnectionStreamReply, ConnectionStreamResponse, ConnectionsOf, ConnectionStub, StubRequest, StubResponse, } from "./connection.js";
+export type { DiscoveryOptions, EntityPermissions, JsonSchemaObject, MemberOptions, OntologyConfig, ResolvedAction, ResolvedConnection, ResolvedEntity, ResolvedIndex, ResolvedProperty, ResolvedRelationship, } from "./analyze.js";
+export { Diagnostic, DIAGNOSTIC_CODES, formatDiagnostics, InvalidOntology } from "./diagnostics.js";
+export type { DiagnosticCode } from "./diagnostics.js";
+export { entity, isEntity } from "./entity.js";
+export type { ActionsBuilder, AnyEntity, ActionHandle, ActionInvoker, MetricQueryGroupKey, AnyStoredEntity, BatchCreateValues, BatchKey, BatchUpdateRecord, BatchUpdateValues, BatchUpsertValues, CreateValues, DraftEntity, Entity, EntityDefinition, EntityRecord, EntityWrites, FreshMetricQueryInput, FreshMetricQueryRow, IndexDefinition, IndexField, InvocableActions, NoActions, Properties, RecordRef, Relationships, SystemFields, UpdateValues, } from "./entity.js";
+export { ActionRejected, BatchErrorDetails, Conflict, DeploymentInterrupted, DeploymentSwitching, LimitErrorDetails, NotFound, PermissionDenied, ScopeViolated, } from "./errors.js";
+export type { ActionError } from "./errors.js";
+export { browserAuthenticationCompatible } from "./manifest-compatibility.js";
+export { ActionManifest, actionConnectionKeys, canonicalJson, ConnectionManifest, EntityManifest, EntityPermissionsManifest, decodeManifestDocument, encodeManifest, formatManifest, IndexManifest, isValueMatched, MANIFEST_VERSION, manifestHash, ModelMetricManifest, OntologyManifest, OntologyManifestWire, PropertyManifest, RelationshipManifest, RoleManifest, ActionTriggerManifest, ScopeManifest, CronTriggerManifest, isActionTrigger, isCronTrigger, isWebhookTrigger, OtherTriggerManifest, WebhookTriggerManifest, WorkflowManifest, WorkflowTriggerManifest, SelectOptionManifest, SignInManifest, signInPolicyOf, channelPolicyOf, } from "./manifest.js";
+export { SYSTEM_PROPERTIES } from "./names.js";
+export type { SystemProperty } from "./names.js";
+export { isMe, isMeMarker, MAX_ME_HOPS, me, ME_KEY, MeMarker, mePathOf, meToWire, MeTypeId, } from "./me.js";
+export type { MeReference } from "./me.js";
+export { check, defineOntology } from "./ontology.js";
+export { webhookDeliveryJsonSchema } from "./analyze.js";
+export { webhookToken, webhookTokenMatches, WEBHOOK_TOKEN_CONTEXT } from "./webhook-token.js";
+export type { Ontology } from "./ontology.js";
+export { DEFAULT_MEMBER_PERMISSIONS, effectiveScope, generatedActionPermissions, grants, isAllowed, parsePermission, permissionsOf, principalScopes, READ_VERB, readScope, rolesGranting, scopesOf, USER_MEMBER_VERBS, WILDCARD, WILDCARD_ENTITY_VERBS, } from "./permissions.js";
+export type { ParsedPermission, PermissionHolder, RolePermissions, ScopedPermission, ScopeFilter, ScopeValue, ScopeWhere, UserMemberVerb, } from "./permissions.js";
+export { p, PROPERTY_TYPES, propertyDefinition } from "./property.js";
+export type { AnyProperty, NumberOptions, Property, PropertyDefinition, PropertyOf, PropertyOptions, BlobOptions, ListOptions, PropertyType, ReferenceOptions, SelectOption, SelectOptionInput, TextOptions, } from "./property.js";
+export { ON_DELETE, rel } from "./relationship.js";
+export type { AnyRelationship, EntityTarget, LazyEntity, ManyOptions, ManyRelationship, OnDelete, OneOptions, OneRelationship, Phrase, } from "./relationship.js";
+export { renderCatalog } from "./render.js";
+export type { RenderOptions } from "./render.js";
+export { member, role, roleEntries, rolePermissions } from "./role.js";
+export type { Role, RoleOptions, RolePermission } from "./role.js";
+export type { FeedbackOptions, ResolvedFeedback } from "./feedback-config.js";
+export { after, changed, cron, cronNeverFires, cronProblem, isWorkflow, isWorkflowTrigger, MAX_ACTION_TRIGGERS, MAX_WORKFLOWS, nextCronTime, webhook, workflow, } from "./workflow.js";
+export { MAX_WEBHOOK_BODY_BYTES, MAX_META_WEBHOOK_BODY_BYTES, MAX_WEBHOOK_HEADERS, MAX_WEBHOOKS, WEBHOOK_BASE_PATH, WEBHOOK_SIGNATURE_SCHEMES, webhookDelivery, webhookHeaderProblem, webhookPath, } from "./webhooks.js";
+export type { WebhookDelivery, WebhookSignatureScheme } from "./webhooks.js";
+export type { ActionEvent, ActionTrigger, AfterOptions, AnyActionHandle, AnyWorkflow, ChangedBounds, CronOptions, CronProblem, CronTrigger, TriggerFunction, TriggerRecord, WebhookOptions, WebhookSignature, WebhookVerification, WebhookTrigger, Workflow, WorkflowFunction, WorkflowOptions, WorkflowRunContext, WorkflowTrigger, } from "./workflow.js";
+export { CHANNEL_PROVIDERS, DEFAULT_SIGN_IN_POLICY, SIGN_IN_METHODS, SIGN_IN_POLICIES, } from "./sign-in.js";
+export type { ChannelProvider, SignInCheck, SignInMethod, SignInOptions, SignInPolicy, } from "./sign-in.js";
+export type { EmailTemplate } from "./emails.js";
+export { OntologyActions, OntologyReads, OntologyRuntime, OntologyWrites } from "./runtime.js";
+export type { ActionRunOptions } from "./runtime.js";
+export type { BatchOptions, BatchRecordResult, BatchResult, BatchReturning, BatchSummaryResult, CreateManyInput, FieldCondition, OntologyRuntimeService, FindOptions, FreshMetricQueryOptions, GetOptions, Principal, RecordWhere, StoredRecord, StoredValues, UpsertResult, UpdateManyInput, UpsertManyInput, } from "./runtime.js";
+export { User } from "./user.js";
+export type { UserHandle, UserMemberWrites } from "./user.js";
+export { AgentChat } from "./agent-chat.js";
+export { UserIdentity, USER_IDENTITY_ORIGINS } from "./user-identity.js";
+export type { UserIdentityOrigin } from "./user-identity.js";
+export { AppFeedback, AppFeedbackFile, APP_FEEDBACK_ENTITIES, APP_FEEDBACK_FILE_MAX_BYTES, } from "./app-feedback.js";
+export { ChatDelivery, ChatPostInput, ChatPostResult } from "./chat.js";
+export { DEFAULT_QUERY_LIMIT, entityQueryResultSchema, entityQuerySchema, entityQuerySchemas, entityRecordSchema, FILTER_OPERATORS, LIST_FILTER_OPERATORS, MANY_QUANTIFIERS, MAX_IN_VALUES, MAX_QUERY_LIMIT, OrderBy, Query, queryFields, queryJsonSchema, queryLinks, QueryResult, queryResultJsonSchema, queryResultSchema, SortDirection, WHERE_COMBINATORS, } from "./query.js";
+export type { EntityQuerySchemas, FieldFilter, FilterOperator, JsonRecord, ListFilterOperator, ManyFilter, QueryField, QueryLink, StorageType, Where, } from "./query.js";
+export { InvalidQuery, InvalidValues, MemberNotFound, PrincipalRejected, StoredRecordMismatch, UnknownAction, UnknownRole, ValidationIssue, UndeclaredWrite, WriteOutsideAction, } from "./runtime/errors.js";
+export { generatedActionManifests, generatedActions, upsertActionName, } from "./runtime/generated-actions.js";
+export type { GeneratedActionManifest, GeneratedActions } from "./runtime/generated-actions.js";
+export { Change, Edit, EditKind, HistoryEntry } from "./runtime/history.js";
+export { ActionOutcome, ActionValidation, findAction, PREPARE_TIMEOUT, resolveAction, runAction, } from "./runtime/pipeline.js";
+export type { ActionRequest, AfterCommit, CommittedAction, FoundAction, } from "./runtime/pipeline.js";
+export { API_KEY_ITERATIONS, API_KEY_PREFIX, checkSignIn, createApiKey, createServiceUser, findApiKey, generateApiKey, grantMemberRoles, hashApiKeySecret, listApiKeys, listMembers, countUsersWithoutEmailIdentity, countUsersWithoutSegmentStreamIdentity, MEMBER_HISTORY_ACTIONS, parseApiKey, principalsOntology, resolvePrincipalByApiKey, resolvePrincipalByIdentity, reconcileWorkflowUsers, resolveWorkflowUser, revokeApiKey, WORKFLOW_USER_PROVIDER, workflowSubject, revokeMemberRoles, setMemberActive, setMemberBlocked, revokeMemberSessions, setUserRoles, SIGN_IN_RECORD_INTERVAL_MS, updateMemberRoles, } from "./runtime/principals.js";
+export type { ApiKeyParts, ApiKeySummary, CreatedApiKey, IdentityClaims, MemberKey, MemberRolesChange, MemberStatus, MemberSummary, PrincipalsManifest, } from "./runtime/principals.js";
+export { backendLayer, postgresLayer, sqlServiceRuntime } from "./runtime/service-binding.js";
+export { makeOntologyRuntime } from "./runtime/sql-runtime.js";
+export type { SqlOntologyRuntime, WriteScope } from "./runtime/sql-runtime.js";
+export { BASE_PATH, deriveApi } from "./service/api.js";
+export type { DeriveApiOptions, OntologyApi } from "./service/api.js";
+export { WorkloadExecution } from "./runtime/workload.js";
+export { CurrentPrincipal } from "./service/authentication.js";
+export { deployedConnections, LocalConnectionContextError, localConnections, OIDC_TOKEN_HEADER, parseLocalConnectionContext, readLocalConnectionContext, RUNTIME_CONTEXT_FD, } from "./service/connections.js";
+export type { ConnectionAudit, ConnectionTransportFactory, LocalConnection, LocalConnectionContext, } from "./service/connections.js";
+export { configFromEnv, ENVIRONMENT_VARIABLES, NEON_AUTH_ENVIRONMENT_VARIABLES, OntologyServiceConfigError, RUNTIME_IDENTITY_ENVIRONMENT_VARIABLES, } from "./service/config.js";
+export type { ActionCommitted, AfterCommitHook, NeonAuthEnvironment, OntologyEnvironment, OntologyServiceConfig, } from "./service/config.js";
+export type { Decide, DecisionRequest } from "./service/decisions.js";
+export { IdentityInUse, NotInvited, OntologyBackend } from "./service/runtime-contract.js";
+export type { AgentIdentity, AgentMember, AgentLimits, AgentLimitScope, ChannelSignInInput, AgentResolution, ResolveIdentityInput, AgentPairing, AgentStore, SeenChat, GeneratedActionsProvider, IdentityProvider, OAuthClient, OAuthClientAuthMethod, OAuthGrant, OAuthDevice, DevicePoll, OAuthRequest, OAuthStore, OAuthToken, OAuthTokenKind, OntologyServiceRuntime, RunActionInput, SignInIdentity, UsedOAuthToken, } from "./service/runtime-contract.js";
+export { createOntologyService, ONTOLOGY_HASH_HEADER, REQUEST_ID_HEADER, } from "./service/service.js";
+export { AGENT_PATH } from "./service/agent/server.js";
+export { AGENT_TASK_PATH, AGENT_TASK_RESULT_PATH } from "./service/agent/tasks.js";
+export { ACT_AS_HEADER, ACT_AS_PROVIDER_HEADER, AGENT_TASK_HEADER, } from "./service/runtime-identity.js";
+export type { RuntimeIdentityConfig } from "./service/runtime-identity.js";
+export { MCP_PATH, MCP_PROTOCOL_VERSIONS } from "./service/mcp/server.js";
+export { MCP_TOOL_NAME_MAX_LENGTH, mcpToolName } from "./names.js";
+export type { OntologyService } from "./service/service.js";
+export { applyMigration, CatalogInvalid, CatalogMismatch, isNoopMigration, migrate, MIGRATION_REFUSAL_CODES, MIGRATION_STEP_CLASSIFICATIONS, MIGRATION_STEP_KINDS, MigrationFailed, MigrationPlan, MigrationRefusal, MigrationRefused, MigrationStep, OntologyStorage, planMigration, preparePreviewDatabase, readCatalog, readRetainedStorage, readRuntimeTables, readHistoryActivityIndexes, readStorageNames, RetainedEntity, RetainedStorage, } from "./migrate/index.js";
+export { deploymentFromEnv, DeploymentAdmissionError, requireDeploymentCapability, } from "./deployment.js";
+export type { DeploymentObservation, DeploymentCapabilities, DeploymentAdmissionCode, } from "./deployment.js";
+export type { ApplyMigrationError, ApplyMigrationOptions, CatalogInput, MigrateInput, MigrationOptions, MigrationRefusalCode, MigrationResult, MigrationStepClassification, MigrationStepKind, PlanMigrationInput, StorageNames, } from "./migrate/index.js";
+export type { BlobStorageBinding } from "./storage/provider.js";
+export { runBlobStorageMaintenance } from "./storage/operator.js";
+export { runNewUserHook } from "./runtime/new-user-hook.js";
+export { sqlAgentStore, resolveChannelIdentity, resolveChannelSignIn } from "./runtime/agents.js";
+export { DEFAULT_AGENT_LIMITS, PLATFORM_CHANNEL_LIMITS, clampChannelLimits, effectiveChannelLimits, } from "./runtime/agent-counters.js";
+export type { ChannelAppProvider } from "./service/channel/provider.js";
+export type { RuntimeSource, ActionRuntime } from "./runtime-source.js";
+export { callbackIdentityToken, serveWorkflowCallback } from "./service/workflow-callback.js";
+export { compiledWorkflowId, triggerPath, vercelWorkflowEngine, WorkflowStepFailed, } from "./service/workflows.js";
+export type { WorkflowEngine, WorkflowPage, WorkflowRunRecord, WorkflowStepRecord, } from "./service/workflows.js";
+export { validateBrowserSignIn } from "./sign-in.js";
+export type { BrowserSignInOptions, BrowserSignInMethod } from "./sign-in.js";

package/dist/index.js

@@ -0,0 +1,70 @@
+export { BlobValue, BlobUpload, uploads, BLOB_CONTENT_TYPES, MAX_BLOB_BYTES } from "./blob.js";
+export { Files } from "./files.js";
+export { warehouse, compatibleWarehouseColumn, warehouseColumnType, validateWarehouseSource, } from "./source.js";
+export { m } from "./metric.js";
+export { METRIC_CONDITION_OPERATORS } from "./metric-filters.js";
+// The earlier names of metrics, deprecated, and the readers that accept them.
+export * from "./legacy.js";
+export { action, isAction } from "./action.js";
+export { ActionConfirmation, ConfirmationFact } from "./confirmation.js";
+export { CONNECTION_ERROR_REASONS, CONNECTION_KEY, CONNECTION_METHODS, connection, ConnectionError, Connections, ConnectionTransport, isConnection, MAXIMUM_CONNECTION_BODY_BYTES, MAXIMUM_CONNECTION_RESPONSE_BYTES, } from "./connection.js";
+export { Diagnostic, DIAGNOSTIC_CODES, formatDiagnostics, InvalidOntology } from "./diagnostics.js";
+export { entity, isEntity } from "./entity.js";
+export { ActionRejected, BatchErrorDetails, Conflict, DeploymentInterrupted, DeploymentSwitching, LimitErrorDetails, NotFound, PermissionDenied, ScopeViolated, } from "./errors.js";
+export { browserAuthenticationCompatible } from "./manifest-compatibility.js";
+export { ActionManifest, actionConnectionKeys, canonicalJson, ConnectionManifest, EntityManifest, EntityPermissionsManifest, decodeManifestDocument, encodeManifest, formatManifest, IndexManifest, isValueMatched, MANIFEST_VERSION, manifestHash, ModelMetricManifest, OntologyManifest, OntologyManifestWire, PropertyManifest, RelationshipManifest, RoleManifest, ActionTriggerManifest, ScopeManifest, CronTriggerManifest, isActionTrigger, isCronTrigger, isWebhookTrigger, OtherTriggerManifest, WebhookTriggerManifest, WorkflowManifest, WorkflowTriggerManifest, SelectOptionManifest, SignInManifest, signInPolicyOf, channelPolicyOf, } from "./manifest.js";
+export { SYSTEM_PROPERTIES } from "./names.js";
+export { isMe, isMeMarker, MAX_ME_HOPS, me, ME_KEY, MeMarker, mePathOf, meToWire, MeTypeId, } from "./me.js";
+export { check, defineOntology } from "./ontology.js";
+export { webhookDeliveryJsonSchema } from "./analyze.js";
+export { webhookToken, webhookTokenMatches, WEBHOOK_TOKEN_CONTEXT } from "./webhook-token.js";
+export { DEFAULT_MEMBER_PERMISSIONS, effectiveScope, generatedActionPermissions, grants, isAllowed, parsePermission, permissionsOf, principalScopes, READ_VERB, readScope, rolesGranting, scopesOf, USER_MEMBER_VERBS, WILDCARD, WILDCARD_ENTITY_VERBS, } from "./permissions.js";
+export { p, PROPERTY_TYPES, propertyDefinition } from "./property.js";
+export { ON_DELETE, rel } from "./relationship.js";
+export { renderCatalog } from "./render.js";
+export { member, role, roleEntries, rolePermissions } from "./role.js";
+export { after, changed, cron, cronNeverFires, cronProblem, isWorkflow, isWorkflowTrigger, MAX_ACTION_TRIGGERS, MAX_WORKFLOWS, nextCronTime, webhook, workflow, } from "./workflow.js";
+export { MAX_WEBHOOK_BODY_BYTES, MAX_META_WEBHOOK_BODY_BYTES, MAX_WEBHOOK_HEADERS, MAX_WEBHOOKS, WEBHOOK_BASE_PATH, WEBHOOK_SIGNATURE_SCHEMES, webhookDelivery, webhookHeaderProblem, webhookPath, } from "./webhooks.js";
+export { CHANNEL_PROVIDERS, DEFAULT_SIGN_IN_POLICY, SIGN_IN_METHODS, SIGN_IN_POLICIES, } from "./sign-in.js";
+export { OntologyActions, OntologyReads, OntologyRuntime, OntologyWrites } from "./runtime.js";
+export { User } from "./user.js";
+export { AgentChat } from "./agent-chat.js";
+export { UserIdentity, USER_IDENTITY_ORIGINS } from "./user-identity.js";
+export { AppFeedback, AppFeedbackFile, APP_FEEDBACK_ENTITIES, APP_FEEDBACK_FILE_MAX_BYTES, } from "./app-feedback.js";
+export { ChatDelivery, ChatPostInput, ChatPostResult } from "./chat.js";
+// The query language of `find` and of the service's list, query and traversal routes.
+export { DEFAULT_QUERY_LIMIT, entityQueryResultSchema, entityQuerySchema, entityQuerySchemas, entityRecordSchema, FILTER_OPERATORS, LIST_FILTER_OPERATORS, MANY_QUANTIFIERS, MAX_IN_VALUES, MAX_QUERY_LIMIT, OrderBy, Query, queryFields, queryJsonSchema, queryLinks, QueryResult, queryResultJsonSchema, queryResultSchema, SortDirection, WHERE_COMBINATORS, } from "./query.js";
+// The SQL runtime: data access, the action pipeline, generated actions, history and principals.
+export { InvalidQuery, InvalidValues, MemberNotFound, PrincipalRejected, StoredRecordMismatch, UnknownAction, UnknownRole, ValidationIssue, UndeclaredWrite, WriteOutsideAction, } from "./runtime/errors.js";
+export { generatedActionManifests, generatedActions, upsertActionName, } from "./runtime/generated-actions.js";
+export { Change, Edit, EditKind, HistoryEntry } from "./runtime/history.js";
+export { ActionOutcome, ActionValidation, findAction, PREPARE_TIMEOUT, resolveAction, runAction, } from "./runtime/pipeline.js";
+export { API_KEY_ITERATIONS, API_KEY_PREFIX, checkSignIn, createApiKey, createServiceUser, findApiKey, generateApiKey, grantMemberRoles, hashApiKeySecret, listApiKeys, listMembers, countUsersWithoutEmailIdentity, countUsersWithoutSegmentStreamIdentity, MEMBER_HISTORY_ACTIONS, parseApiKey, principalsOntology, resolvePrincipalByApiKey, resolvePrincipalByIdentity, reconcileWorkflowUsers, resolveWorkflowUser, revokeApiKey, WORKFLOW_USER_PROVIDER, workflowSubject, revokeMemberRoles, setMemberActive, setMemberBlocked, revokeMemberSessions, setUserRoles, SIGN_IN_RECORD_INTERVAL_MS, updateMemberRoles, } from "./runtime/principals.js";
+export { backendLayer, postgresLayer, sqlServiceRuntime } from "./runtime/service-binding.js";
+export { makeOntologyRuntime } from "./runtime/sql-runtime.js";
+// The HTTP service derived from the ontology.
+export { BASE_PATH, deriveApi } from "./service/api.js";
+export { WorkloadExecution } from "./runtime/workload.js";
+export { CurrentPrincipal } from "./service/authentication.js";
+export { deployedConnections, LocalConnectionContextError, localConnections, OIDC_TOKEN_HEADER, parseLocalConnectionContext, readLocalConnectionContext, RUNTIME_CONTEXT_FD, } from "./service/connections.js";
+export { configFromEnv, ENVIRONMENT_VARIABLES, NEON_AUTH_ENVIRONMENT_VARIABLES, OntologyServiceConfigError, RUNTIME_IDENTITY_ENVIRONMENT_VARIABLES, } from "./service/config.js";
+export { IdentityInUse, NotInvited, OntologyBackend } from "./service/runtime-contract.js";
+export { createOntologyService, ONTOLOGY_HASH_HEADER, REQUEST_ID_HEADER, } from "./service/service.js";
+// The app's own agent: pairing channel accounts with members, and acting as them, or as a
+// workflow's user in the tasks workflows hand it.
+export { AGENT_PATH } from "./service/agent/server.js";
+export { AGENT_TASK_PATH, AGENT_TASK_RESULT_PATH } from "./service/agent/tasks.js";
+export { ACT_AS_HEADER, ACT_AS_PROVIDER_HEADER, AGENT_TASK_HEADER, } from "./service/runtime-identity.js";
+// The MCP server the service serves beside the HTTP API.
+export { MCP_PATH, MCP_PROTOCOL_VERSIONS } from "./service/mcp/server.js";
+export { MCP_TOOL_NAME_MAX_LENGTH, mcpToolName } from "./names.js";
+// Migrations: the planner, the applier and the physical mapping they share with the runtime.
+export { applyMigration, CatalogInvalid, CatalogMismatch, isNoopMigration, migrate, MIGRATION_REFUSAL_CODES, MIGRATION_STEP_CLASSIFICATIONS, MIGRATION_STEP_KINDS, MigrationFailed, MigrationPlan, MigrationRefusal, MigrationRefused, MigrationStep, OntologyStorage, planMigration, preparePreviewDatabase, readCatalog, readRetainedStorage, readRuntimeTables, readHistoryActivityIndexes, readStorageNames, RetainedEntity, RetainedStorage, } from "./migrate/index.js";
+export { deploymentFromEnv, DeploymentAdmissionError, requireDeploymentCapability, } from "./deployment.js";
+export { runBlobStorageMaintenance } from "./storage/operator.js";
+export { runNewUserHook } from "./runtime/new-user-hook.js";
+export { sqlAgentStore, resolveChannelIdentity, resolveChannelSignIn } from "./runtime/agents.js";
+export { DEFAULT_AGENT_LIMITS, PLATFORM_CHANNEL_LIMITS, clampChannelLimits, effectiveChannelLimits, } from "./runtime/agent-counters.js";
+export { callbackIdentityToken, serveWorkflowCallback } from "./service/workflow-callback.js";
+export { compiledWorkflowId, triggerPath, vercelWorkflowEngine, WorkflowStepFailed, } from "./service/workflows.js";
+export { validateBrowserSignIn } from "./sign-in.js";