@tangle-network/agent-app 0.18.0 → 0.19.0

package/dist/{mcp-eZCmkgCF.d.ts → auth-BlS9GWfL.d.ts}

@@ -59,54 +59,4 @@ declare function authenticateToolRequest(request: Request, opts: AuthenticateOpt
  *  aliases (`args` / `arguments`) or a bare body. Returns null on non-JSON. */
 declare function readToolArgs<T>(request: Request): Promise<T | null>;
 
-/** Default route path each app tool is served at. A product mounts its routes
- *  at these paths (or supplies its own via {@link BuildMcpServerOptions.paths}). */
-declare const DEFAULT_APP_TOOL_PATHS: Record<AppToolName, string>;
-/** The portable MCP server entry the sandbox SDK accepts (transport + url +
- *  headers). Matches `AgentProfileMcpServer` structurally without importing the
- *  sandbox SDK — products spread it into their profile's `mcp` map. */
-interface AppToolMcpServer {
-    transport: 'http';
-    url: string;
-    headers: Record<string, string>;
-    enabled: true;
-    metadata: {
-        description: string;
-    };
-}
-interface BuildHttpMcpServerOptions {
-    /** Route path on the app the sandbox POSTs to (e.g. `/api/tools/propose`). */
-    path: string;
-    /** App base URL the sandbox reaches back to (no trailing slash required). */
-    baseUrl: string;
-    /** Per-user capability token, baked into the Authorization header. */
-    token: string;
-    ctx: AppToolContext;
-    /** Tool description the model sees. */
-    description: string;
-    headerNames?: ToolHeaderNames;
-}
-/**
- * Build ONE HTTP MCP server entry — the generic agent→app bridge. The
- * capability token + the user/workspace/thread ids ride in server-set headers
- * (never tool args), so the model can't forge identity or target another
- * workspace. Workspace/thread headers are omitted when their `ctx` value is
- * empty/null (e.g. an integration-invoke bridge that's user-scoped only). Used
- * directly for non-app-tool bridges (integration_invoke) and via
- * {@link buildAppToolMcpServer} for the four app tools.
- */
-declare function buildHttpMcpServer(opts: BuildHttpMcpServerOptions): AppToolMcpServer;
-interface BuildMcpServerOptions {
-    tool: AppToolName;
-    baseUrl: string;
-    token: string;
-    ctx: AppToolContext;
-    description: string;
-    headerNames?: ToolHeaderNames;
-    paths?: Partial<Record<AppToolName, string>>;
-}
-/** Build one of the four app-tool MCP servers — a thin wrapper over
- *  {@link buildHttpMcpServer} that maps the tool name to its route path. */
-declare function buildAppToolMcpServer(opts: BuildMcpServerOptions): AppToolMcpServer;
-
-export { APP_TOOL_NAMES as A, type BuildHttpMcpServerOptions as B, DEFAULT_APP_TOOL_PATHS as D, type OpenAIFunctionTool as O, type ToolAuthResult as T, type AppToolMcpServer as a, type AppToolName as b, type AuthenticateOptions as c, type BuildMcpServerOptions as d, DEFAULT_HEADER_NAMES as e, type ToolHeaderNames as f, authenticateToolRequest as g, buildAppToolMcpServer as h, buildAppToolOpenAITools as i, buildHttpMcpServer as j, isAppToolName as k, readToolArgs as r };
+export { APP_TOOL_NAMES as A, DEFAULT_HEADER_NAMES as D, type OpenAIFunctionTool as O, type ToolAuthResult as T, type AppToolName as a, type AuthenticateOptions as b, type ToolHeaderNames as c, authenticateToolRequest as d, buildAppToolOpenAITools as e, isAppToolName as i, readToolArgs as r };

package/dist/chunk-KOG473C4.js

@@ -0,0 +1,132 @@
+// src/skills/index.ts
+function inlineResource(name, content) {
+  return { kind: "inline", name, content };
+}
+function skillMountPath(id) {
+  return `~/.claude/skills/${id}/SKILL.md`;
+}
+function normalizeKey(key, anchor) {
+  const marker = `${anchor}/`;
+  const at = key.lastIndexOf(marker);
+  if (at >= 0) return key.slice(at);
+  return key.startsWith("./") ? key.slice(2) : key;
+}
+function toCorpusId(normalizedKey, anchor) {
+  const nested = normalizedKey.match(new RegExp(`${anchor}/([^/]+)/SKILL\\.md$`));
+  if (nested) return nested[1];
+  const flat = normalizedKey.match(new RegExp(`${anchor}/(.+)\\.md$`));
+  if (flat) return flat[1];
+  return normalizedKey;
+}
+function nodeBuiltins() {
+  const getBuiltin = globalThis.process?.getBuiltinModule;
+  if (typeof getBuiltin !== "function") return void 0;
+  return {
+    fs: getBuiltin("node:fs"),
+    path: getBuiltin("node:path"),
+    url: getBuiltin("node:url")
+  };
+}
+function fsWalkFlat(builtins, root) {
+  const { fs, path } = builtins;
+  const out = {};
+  if (!fs.existsSync(root)) return out;
+  const walk = (dir) => {
+    let entries;
+    try {
+      entries = fs.readdirSync(dir, { withFileTypes: true });
+    } catch {
+      return;
+    }
+    for (const entry of entries) {
+      if (entry.name.startsWith(".")) continue;
+      const full = path.join(dir, entry.name);
+      if (entry.isDirectory()) walk(full);
+      else if (entry.isFile() && entry.name.endsWith(".md")) out[full] = fs.readFileSync(full, "utf8");
+    }
+  };
+  walk(root);
+  return out;
+}
+function fsWalkNested(builtins, root) {
+  const { fs, path } = builtins;
+  const out = {};
+  if (!fs.existsSync(root)) return out;
+  let entries;
+  try {
+    entries = fs.readdirSync(root, { withFileTypes: true });
+  } catch {
+    return out;
+  }
+  for (const entry of entries) {
+    if (!entry.isDirectory()) continue;
+    const skillFile = path.join(root, entry.name, "SKILL.md");
+    if (!fs.existsSync(skillFile)) continue;
+    out[skillFile] = fs.readFileSync(skillFile, "utf8");
+  }
+  return out;
+}
+function resolveFsBase(builtins, fsBaseDir, importMetaUrl) {
+  const { path, url } = builtins;
+  if (path.isAbsolute(fsBaseDir)) return fsBaseDir;
+  const here = importMetaUrl ? path.dirname(url.fileURLToPath(importMetaUrl)) : process.cwd();
+  return path.join(here, fsBaseDir);
+}
+function loadMarkdownCorpus(options, importMetaUrl) {
+  const { anchor, globModules, fsBaseDir, fsLayout = "flat", skip } = options;
+  let modules;
+  let source;
+  if (globModules && Object.keys(globModules).length > 0) {
+    modules = globModules;
+    source = "vite";
+  } else {
+    const builtins = nodeBuiltins();
+    if (builtins && fsBaseDir) {
+      const root = resolveFsBase(builtins, fsBaseDir, importMetaUrl);
+      modules = fsLayout === "nested" ? fsWalkNested(builtins, root) : fsWalkFlat(builtins, root);
+      source = Object.keys(modules).length > 0 ? "fs" : "empty";
+    } else {
+      modules = {};
+      source = "empty";
+    }
+  }
+  const entries = [];
+  for (const [rawKey, content] of Object.entries(modules)) {
+    if (typeof content !== "string") continue;
+    const key = normalizeKey(rawKey, anchor);
+    if (skip && skip(key)) continue;
+    entries.push({ id: toCorpusId(key, anchor), key, content });
+  }
+  entries.sort((a, b) => a.id.localeCompare(b.id));
+  return { source, entries };
+}
+function corpusSkills(corpus, anchor) {
+  return corpus.map(
+    (entry) => ({
+      path: `${anchor}/${entry.id}.md`,
+      resource: inlineResource(`${anchor}-${entry.id}`, entry.content)
+    })
+  ).sort((a, b) => a.path.localeCompare(b.path));
+}
+function registrySkills(registry, tier = "free") {
+  return registry.filter((s) => s.tier === tier).map(
+    (s) => ({
+      path: skillMountPath(s.id),
+      resource: inlineResource(s.id, s.skillMd)
+    })
+  ).sort((a, b) => a.path.localeCompare(b.path));
+}
+function composeShellResources(input) {
+  const { skills = [], knowledge = [], evolvable = [], registry = [], predicate } = input;
+  const composed = [...skills, ...knowledge, ...evolvable, ...registry];
+  return predicate ? composed.filter(predicate) : composed;
+}
+
+export {
+  skillMountPath,
+  loadMarkdownCorpus,
+  corpusSkills,
+  registrySkills,
+  composeShellResources
+};
+//# sourceMappingURL=chunk-KOG473C4.js.map

package/dist/chunk-KOG473C4.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/skills/index.ts"],"sourcesContent":["/**\n * Unified skill + corpus mounter for agent products.\n *\n * Every agent product hand-rolls the same two file-mount systems and then\n * drifts on the seams between them. (1) An ALWAYS-MOUNTED markdown corpus —\n * (`skills/<slug>/SKILL.md`, `doctrine` and `knowledge` markdown trees) — discovered\n * by a Vite `?raw` glob in the Worker bundle and by Node `fs` under the eval\n * CLI, then projected into `resources.files`. (2) A TIER-GATED installable\n * registry — a hand-authored array of `SkillEntry` whose free tier mounts at\n * the harness skill-discovery path and whose paid tier is installed on demand.\n * Both ride the same `resources.files` channel but use different provenance\n * (file-backed vs inline), different mount paths (relative corpus path vs\n * `~/.claude/skills/<id>/SKILL.md`), and different selection rules. This module\n * makes both DATA: a corpus loader that accepts a Vite glob-result map (or an\n * fs fallback), a registry adapter that tier-gates, and a single\n * `composeShellResources` that projects either onto the SDK file-mount shape.\n *\n * Substrate-free over storage, exact over the SDK boundary: the only inbound\n * seam is the glob-result map the consumer passes in (its call site keeps the\n * literal `import.meta.glob` Vite must static-analyze); the only outbound seam\n * is `@tangle-network/sandbox`'s `AgentProfileFileMount[]`, the exact shape the\n * agent profile's `resources.files` consumes. Node builtins are resolved lazily\n * via `process.getBuiltinModule` so a static `node:*` import never reaches the\n * Vite SSR bundle.\n */\n\nimport type { AgentProfileFileMount, AgentProfileResourceRef } from '@tangle-network/sandbox'\n\n/** Construct the inline arm of the SDK's `AgentProfileResourceRef`. Inlined here\n *  so this leaf subpath stays type-only over `@tangle-network/sandbox` — it\n *  carries no runtime dependency on the SDK, just its file-mount type contract. */\nfunction inlineResource(name: string, content: string): AgentProfileResourceRef {\n  return { kind: 'inline', name, content }\n}\n\n/** A Vite eager `?raw` glob result: glob key -> raw file body. The consumer\n *  produces this by calling `import.meta.glob('<lit>', { eager: true, query:\n *  '?raw', import: 'default' })` at its own call site — the literal must stay\n *  literal so Vite can static-analyze it; passing the result here keeps that\n *  constraint at the edge and the loader substrate-free. */\nexport type GlobModules = Record<string, string>\n\n/** One markdown document discovered from the corpus. */\nexport interface CorpusEntry {\n  /** Slug derived from the glob key (folder slug for `SKILL.md` layouts, or the\n   *  normalized relative path for flat `*.md` layouts). */\n  id: string\n  /** Glob/fs key the entry was loaded from, normalized to a stable relative\n   *  form (leading `./` and absolute prefixes stripped). */\n  key: string\n  /** Raw markdown body (including any frontmatter). */\n  content: string\n}\n\n/** A hand-authored, tier-gated installable skill. Mirrors the per-product\n *  registry entry (gtm/insurance `SkillEntry`); the runtime's certified `skill`\n *  artifact kind is unrelated. `skillMd` is the inline body — file provenance\n *  does not apply to the registry. */\nexport interface SkillEntry {\n  id: string\n  name: string\n  description: string\n  author?: { name: string; url?: string }\n  source?: string\n  category?: string\n  tags?: string[]\n  /** Gate keyword. `composeShellResources`/`registrySkills` treat `free` as\n   *  always-mounted; everything else is install-on-demand. */\n  tier: string\n  skillMd: string\n}\n\n/** Harness skill-discovery path the Claude Code / OpenCode backend reads\n *  natively. The registry mounts here; the corpus mounts at its relative path. */\nexport function skillMountPath(id: string): string {\n  return `~/.claude/skills/${id}/SKILL.md`\n}\n\n/** Strip a glob/fs key down to a stable relative form: drop a leading `./`,\n *  and for an absolute fs path keep only the tail from the last anchor segment\n *  the pattern implies. We normalize on the trailing `<dir>/.../*.md` so the\n *  Vite key (`./skills/x/SKILL.md`) and the fs key (`/abs/.../skills/x/SKILL.md`)\n *  collapse to the same value. */\nfunction normalizeKey(key: string, anchor: string): string {\n  const marker = `${anchor}/`\n  const at = key.lastIndexOf(marker)\n  if (at >= 0) return key.slice(at)\n  return key.startsWith('./') ? key.slice(2) : key\n}\n\n/** Folder-slug for a `<anchor>/<slug>/SKILL.md` layout; falls back to the\n *  normalized key (sans `<anchor>/` prefix, sans `.md`) for flat layouts. */\nfunction toCorpusId(normalizedKey: string, anchor: string): string {\n  const nested = normalizedKey.match(new RegExp(`${anchor}/([^/]+)/SKILL\\\\.md$`))\n  if (nested) return nested[1]!\n  const flat = normalizedKey.match(new RegExp(`${anchor}/(.+)\\\\.md$`))\n  if (flat) return flat[1]!\n  return normalizedKey\n}\n\n/** Resolve Node builtins lazily. `process.getBuiltinModule` (Node 22+) is\n *  absent in workerd, so this returns undefined there and the fs path is never\n *  taken — Workers always reach the loader through the Vite glob map. A static\n *  `import 'node:fs'` would break Vite SSR bundling in the consumer apps, so it\n *  is deliberately avoided. */\nfunction nodeBuiltins():\n  | { fs: typeof import('node:fs'); path: typeof import('node:path'); url: typeof import('node:url') }\n  | undefined {\n  const getBuiltin = (globalThis as { process?: { getBuiltinModule?: (id: string) => unknown } })\n    .process?.getBuiltinModule\n  if (typeof getBuiltin !== 'function') return undefined\n  return {\n    fs: getBuiltin('node:fs') as typeof import('node:fs'),\n    path: getBuiltin('node:path') as typeof import('node:path'),\n    url: getBuiltin('node:url') as typeof import('node:url'),\n  }\n}\n\n/** Options for {@link loadMarkdownCorpus}. */\nexport interface LoadCorpusOptions {\n  /** The anchor folder name that appears in both glob keys and fs paths\n   *  (`skills`, `doctrine`, `knowledge`). Used to normalize keys + derive ids. */\n  anchor: string\n  /** Vite glob-result map. When present and non-empty it is authoritative and\n   *  the fs path is skipped. Omit it (or pass an empty map) only outside Vite. */\n  globModules?: GlobModules\n  /** Absolute or `import.meta.url`-relative base dir the fs fallback walks when\n   *  `globModules` is empty. Required for the fs path to run; without it the fs\n   *  fallback returns no entries (Workers never need it). */\n  fsBaseDir?: string\n  /** Walk strategy for the fs fallback. `nested` finds `<dir>/<slug>/SKILL.md`\n   *  one level deep; `flat` recurses for every `*.md`. Default: `flat`. */\n  fsLayout?: 'nested' | 'flat'\n  /** Drop an entry by its normalized key after load. Covers the per-product\n   *  skip lists (corpus index/log files, scaffold templates, allow-lists). */\n  skip?: (normalizedKey: string) => boolean\n}\n\n/** Outcome of {@link loadMarkdownCorpus}: the entries plus which path produced\n *  them, so a caller can fail loud when both are empty rather than silently\n *  mounting nothing. */\nexport interface CorpusLoadResult {\n  source: 'vite' | 'fs' | 'empty'\n  entries: CorpusEntry[]\n}\n\nfunction fsWalkFlat(\n  builtins: NonNullable<ReturnType<typeof nodeBuiltins>>,\n  root: string,\n): GlobModules {\n  const { fs, path } = builtins\n  const out: GlobModules = {}\n  if (!fs.existsSync(root)) return out\n  const walk = (dir: string) => {\n    let entries: import('node:fs').Dirent[]\n    try {\n      entries = fs.readdirSync(dir, { withFileTypes: true })\n    } catch {\n      return\n    }\n    for (const entry of entries) {\n      if (entry.name.startsWith('.')) continue\n      const full = path.join(dir, entry.name)\n      if (entry.isDirectory()) walk(full)\n      else if (entry.isFile() && entry.name.endsWith('.md')) out[full] = fs.readFileSync(full, 'utf8')\n    }\n  }\n  walk(root)\n  return out\n}\n\nfunction fsWalkNested(\n  builtins: NonNullable<ReturnType<typeof nodeBuiltins>>,\n  root: string,\n): GlobModules {\n  const { fs, path } = builtins\n  const out: GlobModules = {}\n  if (!fs.existsSync(root)) return out\n  let entries: import('node:fs').Dirent[]\n  try {\n    entries = fs.readdirSync(root, { withFileTypes: true })\n  } catch {\n    return out\n  }\n  for (const entry of entries) {\n    if (!entry.isDirectory()) continue\n    const skillFile = path.join(root, entry.name, 'SKILL.md')\n    if (!fs.existsSync(skillFile)) continue\n    out[skillFile] = fs.readFileSync(skillFile, 'utf8')\n  }\n  return out\n}\n\n/** Resolve `fsBaseDir` against `import.meta.url` when relative-looking, so a\n *  consumer can pass a bare folder name (`'skills'`) and have it land beside\n *  the calling module. Absolute paths pass through. */\nfunction resolveFsBase(\n  builtins: NonNullable<ReturnType<typeof nodeBuiltins>>,\n  fsBaseDir: string,\n  importMetaUrl?: string,\n): string {\n  const { path, url } = builtins\n  if (path.isAbsolute(fsBaseDir)) return fsBaseDir\n  const here = importMetaUrl\n    ? path.dirname(url.fileURLToPath(importMetaUrl))\n    : process.cwd()\n  return path.join(here, fsBaseDir)\n}\n\n/**\n * Load a markdown corpus, preferring a Vite glob-result map and falling back to\n * a Node fs walk. Selection is by non-empty glob result — never an env flag.\n * Entries are normalized, optionally skip-filtered, and sorted by id for\n * determinism. The `import.meta.glob` literal stays at the CONSUMER call site\n * (passed in as `globModules`); this loader never constructs a glob.\n */\nexport function loadMarkdownCorpus(\n  options: LoadCorpusOptions,\n  importMetaUrl?: string,\n): CorpusLoadResult {\n  const { anchor, globModules, fsBaseDir, fsLayout = 'flat', skip } = options\n\n  let modules: GlobModules\n  let source: CorpusLoadResult['source']\n  if (globModules && Object.keys(globModules).length > 0) {\n    modules = globModules\n    source = 'vite'\n  } else {\n    const builtins = nodeBuiltins()\n    if (builtins && fsBaseDir) {\n      const root = resolveFsBase(builtins, fsBaseDir, importMetaUrl)\n      modules = fsLayout === 'nested' ? fsWalkNested(builtins, root) : fsWalkFlat(builtins, root)\n      source = Object.keys(modules).length > 0 ? 'fs' : 'empty'\n    } else {\n      modules = {}\n      source = 'empty'\n    }\n  }\n\n  const entries: CorpusEntry[] = []\n  for (const [rawKey, content] of Object.entries(modules)) {\n    if (typeof content !== 'string') continue\n    const key = normalizeKey(rawKey, anchor)\n    if (skip && skip(key)) continue\n    entries.push({ id: toCorpusId(key, anchor), key, content })\n  }\n  entries.sort((a, b) => a.id.localeCompare(b.id))\n  return { source, entries }\n}\n\n/** Project corpus entries onto SDK file mounts at a relative path under\n *  `<anchor>/`. Always-mounted: the corpus is the agent's baseline knowledge. */\nexport function corpusSkills(corpus: CorpusEntry[], anchor: string): AgentProfileFileMount[] {\n  return corpus\n    .map(\n      (entry) =>\n        ({\n          path: `${anchor}/${entry.id}.md`,\n          resource: inlineResource(`${anchor}-${entry.id}`, entry.content),\n        }) satisfies AgentProfileFileMount,\n    )\n    .sort((a, b) => a.path.localeCompare(b.path))\n}\n\n/** Project the registry's free-tier (or `tier`-matched) entries onto SDK file\n *  mounts at the harness skill-discovery path. Tier-gating is the registry's\n *  only selection rule — paid skills are installed on demand, not at boot. */\nexport function registrySkills(\n  registry: SkillEntry[],\n  tier: string = 'free',\n): AgentProfileFileMount[] {\n  return registry\n    .filter((s) => s.tier === tier)\n    .map(\n      (s) =>\n        ({\n          path: skillMountPath(s.id),\n          resource: inlineResource(s.id, s.skillMd),\n        }) satisfies AgentProfileFileMount,\n    )\n    .sort((a, b) => a.path.localeCompare(b.path))\n}\n\n/** Inputs to {@link composeShellResources}. Each channel is optional so a\n *  product mounts only the systems it has — corpus-only, registry-only, or\n *  both — without conflating them. */\nexport interface ComposeShellResourcesInput {\n  /** Corpus mounts (always-mounted baseline). Pass the result of\n   *  {@link corpusSkills}, or a hand-built mount list. */\n  skills?: AgentProfileFileMount[]\n  /** Knowledge-corpus mounts (a second always-mounted corpus, e.g. a domain\n   *  knowledge pack distinct from the skills corpus). */\n  knowledge?: AgentProfileFileMount[]\n  /** Evolvable / learned-guidance mounts (single-file corpora). */\n  evolvable?: AgentProfileFileMount[]\n  /** Registry mounts (tier-gated). Pass the result of {@link registrySkills}. */\n  registry?: AgentProfileFileMount[]\n  /** Final skip filter applied to the composed mount list by mount `path`. */\n  predicate?: (mount: AgentProfileFileMount) => boolean\n}\n\n/**\n * Compose every mount channel into one `resources.files`-ready array. Corpus\n * channels come first (baseline), the tier-gated registry last (so a registry\n * entry can override a corpus entry that mounts at the same path). The result\n * is exactly `AgentProfileFileMount[]` — assign it straight into\n * `profile.resources.files` with no cast.\n */\nexport function composeShellResources(input: ComposeShellResourcesInput): AgentProfileFileMount[] {\n  const { skills = [], knowledge = [], evolvable = [], registry = [], predicate } = input\n  const composed = [...skills, ...knowledge, ...evolvable, ...registry]\n  return predicate ? composed.filter(predicate) : composed\n}\n"],"mappings":";AA+BA,SAAS,eAAe,MAAc,SAA0C;AAC9E,SAAO,EAAE,MAAM,UAAU,MAAM,QAAQ;AACzC;AAyCO,SAAS,eAAe,IAAoB;AACjD,SAAO,oBAAoB,EAAE;AAC/B;AAOA,SAAS,aAAa,KAAa,QAAwB;AACzD,QAAM,SAAS,GAAG,MAAM;AACxB,QAAM,KAAK,IAAI,YAAY,MAAM;AACjC,MAAI,MAAM,EAAG,QAAO,IAAI,MAAM,EAAE;AAChC,SAAO,IAAI,WAAW,IAAI,IAAI,IAAI,MAAM,CAAC,IAAI;AAC/C;AAIA,SAAS,WAAW,eAAuB,QAAwB;AACjE,QAAM,SAAS,cAAc,MAAM,IAAI,OAAO,GAAG,MAAM,sBAAsB,CAAC;AAC9E,MAAI,OAAQ,QAAO,OAAO,CAAC;AAC3B,QAAM,OAAO,cAAc,MAAM,IAAI,OAAO,GAAG,MAAM,aAAa,CAAC;AACnE,MAAI,KAAM,QAAO,KAAK,CAAC;AACvB,SAAO;AACT;AAOA,SAAS,eAEK;AACZ,QAAM,aAAc,WACjB,SAAS;AACZ,MAAI,OAAO,eAAe,WAAY,QAAO;AAC7C,SAAO;AAAA,IACL,IAAI,WAAW,SAAS;AAAA,IACxB,MAAM,WAAW,WAAW;AAAA,IAC5B,KAAK,WAAW,UAAU;AAAA,EAC5B;AACF;AA8BA,SAAS,WACP,UACA,MACa;AACb,QAAM,EAAE,IAAI,KAAK,IAAI;AACrB,QAAM,MAAmB,CAAC;AAC1B,MAAI,CAAC,GAAG,WAAW,IAAI,EAAG,QAAO;AACjC,QAAM,OAAO,CAAC,QAAgB;AAC5B,QAAI;AACJ,QAAI;AACF,gBAAU,GAAG,YAAY,KAAK,EAAE,eAAe,KAAK,CAAC;AAAA,IACvD,QAAQ;AACN;AAAA,IACF;AACA,eAAW,SAAS,SAAS;AAC3B,UAAI,MAAM,KAAK,WAAW,GAAG,EAAG;AAChC,YAAM,OAAO,KAAK,KAAK,KAAK,MAAM,IAAI;AACtC,UAAI,MAAM,YAAY,EAAG,MAAK,IAAI;AAAA,eACzB,MAAM,OAAO,KAAK,MAAM,KAAK,SAAS,KAAK,EAAG,KAAI,IAAI,IAAI,GAAG,aAAa,MAAM,MAAM;AAAA,IACjG;AAAA,EACF;AACA,OAAK,IAAI;AACT,SAAO;AACT;AAEA,SAAS,aACP,UACA,MACa;AACb,QAAM,EAAE,IAAI,KAAK,IAAI;AACrB,QAAM,MAAmB,CAAC;AAC1B,MAAI,CAAC,GAAG,WAAW,IAAI,EAAG,QAAO;AACjC,MAAI;AACJ,MAAI;AACF,cAAU,GAAG,YAAY,MAAM,EAAE,eAAe,KAAK,CAAC;AAAA,EACxD,QAAQ;AACN,WAAO;AAAA,EACT;AACA,aAAW,SAAS,SAAS;AAC3B,QAAI,CAAC,MAAM,YAAY,EAAG;AAC1B,UAAM,YAAY,KAAK,KAAK,MAAM,MAAM,MAAM,UAAU;AACxD,QAAI,CAAC,GAAG,WAAW,SAAS,EAAG;AAC/B,QAAI,SAAS,IAAI,GAAG,aAAa,WAAW,MAAM;AAAA,EACpD;AACA,SAAO;AACT;AAKA,SAAS,cACP,UACA,WACA,eACQ;AACR,QAAM,EAAE,MAAM,IAAI,IAAI;AACtB,MAAI,KAAK,WAAW,SAAS,EAAG,QAAO;AACvC,QAAM,OAAO,gBACT,KAAK,QAAQ,IAAI,cAAc,aAAa,CAAC,IAC7C,QAAQ,IAAI;AAChB,SAAO,KAAK,KAAK,MAAM,SAAS;AAClC;AASO,SAAS,mBACd,SACA,eACkB;AAClB,QAAM,EAAE,QAAQ,aAAa,WAAW,WAAW,QAAQ,KAAK,IAAI;AAEpE,MAAI;AACJ,MAAI;AACJ,MAAI,eAAe,OAAO,KAAK,WAAW,EAAE,SAAS,GAAG;AACtD,cAAU;AACV,aAAS;AAAA,EACX,OAAO;AACL,UAAM,WAAW,aAAa;AAC9B,QAAI,YAAY,WAAW;AACzB,YAAM,OAAO,cAAc,UAAU,WAAW,aAAa;AAC7D,gBAAU,aAAa,WAAW,aAAa,UAAU,IAAI,IAAI,WAAW,UAAU,IAAI;AAC1F,eAAS,OAAO,KAAK,OAAO,EAAE,SAAS,IAAI,OAAO;AAAA,IACpD,OAAO;AACL,gBAAU,CAAC;AACX,eAAS;AAAA,IACX;AAAA,EACF;AAEA,QAAM,UAAyB,CAAC;AAChC,aAAW,CAAC,QAAQ,OAAO,KAAK,OAAO,QAAQ,OAAO,GAAG;AACvD,QAAI,OAAO,YAAY,SAAU;AACjC,UAAM,MAAM,aAAa,QAAQ,MAAM;AACvC,QAAI,QAAQ,KAAK,GAAG,EAAG;AACvB,YAAQ,KAAK,EAAE,IAAI,WAAW,KAAK,MAAM,GAAG,KAAK,QAAQ,CAAC;AAAA,EAC5D;AACA,UAAQ,KAAK,CAAC,GAAG,MAAM,EAAE,GAAG,cAAc,EAAE,EAAE,CAAC;AAC/C,SAAO,EAAE,QAAQ,QAAQ;AAC3B;AAIO,SAAS,aAAa,QAAuB,QAAyC;AAC3F,SAAO,OACJ;AAAA,IACC,CAAC,WACE;AAAA,MACC,MAAM,GAAG,MAAM,IAAI,MAAM,EAAE;AAAA,MAC3B,UAAU,eAAe,GAAG,MAAM,IAAI,MAAM,EAAE,IAAI,MAAM,OAAO;AAAA,IACjE;AAAA,EACJ,EACC,KAAK,CAAC,GAAG,MAAM,EAAE,KAAK,cAAc,EAAE,IAAI,CAAC;AAChD;AAKO,SAAS,eACd,UACA,OAAe,QACU;AACzB,SAAO,SACJ,OAAO,CAAC,MAAM,EAAE,SAAS,IAAI,EAC7B;AAAA,IACC,CAAC,OACE;AAAA,MACC,MAAM,eAAe,EAAE,EAAE;AAAA,MACzB,UAAU,eAAe,EAAE,IAAI,EAAE,OAAO;AAAA,IAC1C;AAAA,EACJ,EACC,KAAK,CAAC,GAAG,MAAM,EAAE,KAAK,cAAc,EAAE,IAAI,CAAC;AAChD;AA2BO,SAAS,sBAAsB,OAA4D;AAChG,QAAM,EAAE,SAAS,CAAC,GAAG,YAAY,CAAC,GAAG,YAAY,CAAC,GAAG,WAAW,CAAC,GAAG,UAAU,IAAI;AAClF,QAAM,WAAW,CAAC,GAAG,QAAQ,GAAG,WAAW,GAAG,WAAW,GAAG,QAAQ;AACpE,SAAO,YAAY,SAAS,OAAO,SAAS,IAAI;AAClD;","names":[]}

package/dist/design-canvas/index.d.ts

@@ -5,7 +5,8 @@ export { A as AddElementOperation, a as AddPageOperation, b as ApplyDataOperatio
 import { d as SceneStore, N as NewSceneDecision, a as SceneDocumentRecord } from '../store-CUStmtdH.js';
 export { S as SceneDecision, b as SceneExportFormat, c as SceneExportRecord, e as SceneStoreScope } from '../store-CUStmtdH.js';
 import { c as McpToolDefinition } from '../mcp-rpc-DLw_r9PQ.js';
-import { f as ToolHeaderNames, a as AppToolMcpServer } from '../mcp-eZCmkgCF.js';
+import { c as ToolHeaderNames } from '../auth-BlS9GWfL.js';
+import { A as AppToolMcpServer } from '../mcp-BShTlESm.js';
 import { b as AppToolContext } from '../types-2rOJo8Hc.js';
 
 /**

package/dist/index.d.ts

@@ -1,5 +1,6 @@
 export { AppToolRuntimeExecutor, CapabilityTokenOptions, DispatchOptions, ExpiringCapabilityTokenOptions, HandleToolRequestOptions, ResolveToolCapabilitiesOptions, ResolvedToolCapabilities, RuntimeExecutorOptions, ToolCapability, ToolInputError, createAppToolRuntimeExecutor, createCapabilityToken, createExpiringCapabilityToken, dispatchAppTool, handleAppToolRequest, outcomeStatus, resolveToolCapabilities, restrictTaxonomy, verifyCapabilityToken, verifyExpiringCapabilityToken } from './tools/index.js';
-export { A as APP_TOOL_NAMES, a as AppToolMcpServer, b as AppToolName, c as AuthenticateOptions, B as BuildHttpMcpServerOptions, d as BuildMcpServerOptions, D as DEFAULT_APP_TOOL_PATHS, e as DEFAULT_HEADER_NAMES, O as OpenAIFunctionTool, T as ToolAuthResult, f as ToolHeaderNames, g as authenticateToolRequest, h as buildAppToolMcpServer, i as buildAppToolOpenAITools, j as buildHttpMcpServer, k as isAppToolName, r as readToolArgs } from './mcp-eZCmkgCF.js';
+export { A as APP_TOOL_NAMES, a as AppToolName, b as AuthenticateOptions, D as DEFAULT_HEADER_NAMES, O as OpenAIFunctionTool, T as ToolAuthResult, c as ToolHeaderNames, d as authenticateToolRequest, e as buildAppToolOpenAITools, i as isAppToolName, r as readToolArgs } from './auth-BlS9GWfL.js';
+export { A as AppToolMcpServer, B as BuildHttpMcpServerOptions, a as BuildMcpServerOptions, D as DEFAULT_APP_TOOL_PATHS, b as buildAppToolMcpServer, c as buildHttpMcpServer } from './mcp-BShTlESm.js';
 export { C as CreateMcpToolHandlerOptions, M as MCP_PROTOCOL_VERSIONS, a as McpProtocolVersion, b as McpServerInfo, c as McpToolDefinition, d as createMcpToolHandler } from './mcp-rpc-DLw_r9PQ.js';
 export { A as AddCitationArgs, a as AddCitationResult, b as AppToolContext, c as AppToolHandlers, d as AppToolOutcome, e as AppToolProducedEvent, f as AppToolTaxonomy, R as RenderUiArgs, g as RenderUiResult, S as ScheduleFollowupArgs, h as ScheduleFollowupResult, i as SubmitProposalArgs, j as SubmitProposalResult } from './types-2rOJo8Hc.js';
 export { BuildDelegationOptions, DELEGATION_MCP_SERVER_KEY, DELEGATION_TOOLS, DelegationMcpServer, buildDelegationMcpServer, delegationMcpForConfig } from './delegation/index.js';

package/dist/index.js

@@ -1,58 +1,3 @@
-import {
-  ApprovalEventSchema,
-  BrandTokensSchema,
-  ConversionMetricsSchema,
-  CopyContentSchema,
-  EmailContentSchema,
-  ImageContentSchema,
-  VideoContentSchema,
-  parseAssetSpec,
-  safeParseAssetSpec
-} from "./chunk-5PTGEJZL.js";
-import {
-  DEFAULT_SEQUENCES_MCP_DESCRIPTION,
-  MAX_CAPTION_BATCH,
-  SEQUENCES_MCP_PROTOCOL_VERSIONS,
-  SEQUENCE_EXPORT_FORMATS,
-  SEQUENCE_MCP_TOOLS,
-  SEQUENCE_MEDIA_KINDS,
-  SEQUENCE_OPERATION_TYPES,
-  SEQUENCE_TRACK_KINDS,
-  applySequenceOperation,
-  applySequenceOperations,
-  assertSequenceMediaUrl,
-  buildCaptionChunks,
-  buildContactSheetManifest,
-  buildEdl,
-  buildOtio,
-  buildSequencesMcpServerEntry,
-  buildSrt,
-  buildVtt,
-  captionCoverage,
-  captionTrackNameForLanguage,
-  createSequencesMcpHandler,
-  findSequenceMcpTool,
-  lastClipEndFrame,
-  normalizeLanguageTag,
-  parseSequenceOperations,
-  planLanguageFanout,
-  resolveCaptionPlacement,
-  resolveCaptionTarget,
-  resolvePlaceClipTrack,
-  validateAddCaption,
-  validateCreateTrack,
-  validateDeleteClip,
-  validateExtendSequence,
-  validateMoveClip,
-  validatePlaceClip,
-  validateQueueExport,
-  validateSequenceOperation,
-  validateSequenceOperations,
-  validateSetClipDisabled,
-  validateSetClipText,
-  validateSplitClip,
-  validateTrimClip
-} from "./chunk-6UOE5CTA.js";
 import {
   CANVAS_ELEMENT_KINDS,
   CANVAS_MCP_TOOLS,
@@ -101,57 +46,6 @@ import {
   validateSceneOperations,
   validateSlotValue
 } from "./chunk-JZAJE3JL.js";
-import {
-  MIN_SEQUENCE_CLIP_FRAMES,
-  assertClipFitsSequence,
-  chooseCaptionPlacement,
-  clampClipDuration,
-  clampClipStart,
-  formatSeconds,
-  formatTimecode,
-  framesToSeconds,
-  secondsToFrames,
-  snapshotFrame,
-  trackIntervals
-} from "./chunk-ZYBWGSAZ.js";
-import {
-  HubExecClient,
-  invokeIntegrationHub,
-  resolveIntegrationAction
-} from "./chunk-L2TG5DBW.js";
-import {
-  DEFAULT_MISSION_STEP_KINDS,
-  MISSION_CONTROL_CHANNEL_ID,
-  MissionConcurrencyError,
-  RetryableStepError,
-  applyMissionEvent,
-  asMissionStreamEvent,
-  budgetGateProposalId,
-  buildAgentMissionPlan,
-  createInMemoryMissionStore,
-  createMissionEngine,
-  createMissionService,
-  isMissionStopRequested,
-  isMissionTerminal,
-  mergeMissionState,
-  noopEventSink,
-  parseMissionBlocks,
-  parseSessionStreamEnvelope,
-  reduceMissionEvents,
-  stepAgentActivity,
-  stepGateProposalId,
-  volumeGateProposalId
-} from "./chunk-UDXMR3AD.js";
-import {
-  addSecurityHeaders,
-  checkRateLimit,
-  clearCookieHeader,
-  extractRequestContext,
-  parseJsonObjectBody,
-  readCookieValue,
-  requireString,
-  serializeCookie
-} from "./chunk-SCG5JJ4C.js";
 import {
   DEFAULT_REDACTION_PATTERNS,
   buildRedactedDocument,
@@ -177,17 +71,73 @@ import {
   stepActivityFlowTrace
 } from "./chunk-AFDROJ64.js";
 import {
-  createKnowledgeLoop,
-  createReviewerDecider,
-  reviewCandidate
-} from "./chunk-EEPJGZJW.js";
+  ApprovalEventSchema,
+  BrandTokensSchema,
+  ConversionMetricsSchema,
+  CopyContentSchema,
+  EmailContentSchema,
+  ImageContentSchema,
+  VideoContentSchema,
+  parseAssetSpec,
+  safeParseAssetSpec
+} from "./chunk-5PTGEJZL.js";
 import {
-  DEFAULT_HARNESS,
-  KNOWN_HARNESSES,
-  coerceHarness,
-  isHarness,
-  resolveSessionHarness
-} from "./chunk-SD2H4FWY.js";
+  DEFAULT_SEQUENCES_MCP_DESCRIPTION,
+  MAX_CAPTION_BATCH,
+  SEQUENCES_MCP_PROTOCOL_VERSIONS,
+  SEQUENCE_EXPORT_FORMATS,
+  SEQUENCE_MCP_TOOLS,
+  SEQUENCE_MEDIA_KINDS,
+  SEQUENCE_OPERATION_TYPES,
+  SEQUENCE_TRACK_KINDS,
+  applySequenceOperation,
+  applySequenceOperations,
+  assertSequenceMediaUrl,
+  buildCaptionChunks,
+  buildContactSheetManifest,
+  buildEdl,
+  buildOtio,
+  buildSequencesMcpServerEntry,
+  buildSrt,
+  buildVtt,
+  captionCoverage,
+  captionTrackNameForLanguage,
+  createSequencesMcpHandler,
+  findSequenceMcpTool,
+  lastClipEndFrame,
+  normalizeLanguageTag,
+  parseSequenceOperations,
+  planLanguageFanout,
+  resolveCaptionPlacement,
+  resolveCaptionTarget,
+  resolvePlaceClipTrack,
+  validateAddCaption,
+  validateCreateTrack,
+  validateDeleteClip,
+  validateExtendSequence,
+  validateMoveClip,
+  validatePlaceClip,
+  validateQueueExport,
+  validateSequenceOperation,
+  validateSequenceOperations,
+  validateSetClipDisabled,
+  validateSetClipText,
+  validateSplitClip,
+  validateTrimClip
+} from "./chunk-6UOE5CTA.js";
+import {
+  MIN_SEQUENCE_CLIP_FRAMES,
+  assertClipFitsSequence,
+  chooseCaptionPlacement,
+  clampClipDuration,
+  clampClipStart,
+  formatSeconds,
+  formatTimecode,
+  framesToSeconds,
+  secondsToFrames,
+  snapshotFrame,
+  trackIntervals
+} from "./chunk-ZYBWGSAZ.js";
 import {
   agentAppConfigJsonSchema,
   defineAgentApp
@@ -241,6 +191,56 @@ import {
   resolveToolId,
   resolveToolName
 } from "./chunk-CPI3RILI.js";
+import {
+  HubExecClient,
+  invokeIntegrationHub,
+  resolveIntegrationAction
+} from "./chunk-L2TG5DBW.js";
+import {
+  DEFAULT_MISSION_STEP_KINDS,
+  MISSION_CONTROL_CHANNEL_ID,
+  MissionConcurrencyError,
+  RetryableStepError,
+  applyMissionEvent,
+  asMissionStreamEvent,
+  budgetGateProposalId,
+  buildAgentMissionPlan,
+  createInMemoryMissionStore,
+  createMissionEngine,
+  createMissionService,
+  isMissionStopRequested,
+  isMissionTerminal,
+  mergeMissionState,
+  noopEventSink,
+  parseMissionBlocks,
+  parseSessionStreamEnvelope,
+  reduceMissionEvents,
+  stepAgentActivity,
+  stepGateProposalId,
+  volumeGateProposalId
+} from "./chunk-UDXMR3AD.js";
+import {
+  addSecurityHeaders,
+  checkRateLimit,
+  clearCookieHeader,
+  extractRequestContext,
+  parseJsonObjectBody,
+  readCookieValue,
+  requireString,
+  serializeCookie
+} from "./chunk-SCG5JJ4C.js";
+import {
+  createKnowledgeLoop,
+  createReviewerDecider,
+  reviewCandidate
+} from "./chunk-EEPJGZJW.js";
+import {
+  DEFAULT_HARNESS,
+  KNOWN_HARNESSES,
+  coerceHarness,
+  isHarness,
+  resolveSessionHarness
+} from "./chunk-SD2H4FWY.js";
 import {
   createCapabilityToken,
   createExpiringCapabilityToken,

package/dist/mcp-BShTlESm.d.ts

@@ -0,0 +1,54 @@
+import { b as AppToolContext } from './types-2rOJo8Hc.js';
+import { c as ToolHeaderNames, a as AppToolName } from './auth-BlS9GWfL.js';
+
+/** Default route path each app tool is served at. A product mounts its routes
+ *  at these paths (or supplies its own via {@link BuildMcpServerOptions.paths}). */
+declare const DEFAULT_APP_TOOL_PATHS: Record<AppToolName, string>;
+/** The portable MCP server entry the sandbox SDK accepts (transport + url +
+ *  headers). Matches `AgentProfileMcpServer` structurally without importing the
+ *  sandbox SDK — products spread it into their profile's `mcp` map. */
+interface AppToolMcpServer {
+    transport: 'http';
+    url: string;
+    headers: Record<string, string>;
+    enabled: true;
+    metadata: {
+        description: string;
+    };
+}
+interface BuildHttpMcpServerOptions {
+    /** Route path on the app the sandbox POSTs to (e.g. `/api/tools/propose`). */
+    path: string;
+    /** App base URL the sandbox reaches back to (no trailing slash required). */
+    baseUrl: string;
+    /** Per-user capability token, baked into the Authorization header. */
+    token: string;
+    ctx: AppToolContext;
+    /** Tool description the model sees. */
+    description: string;
+    headerNames?: ToolHeaderNames;
+}
+/**
+ * Build ONE HTTP MCP server entry — the generic agent→app bridge. The
+ * capability token + the user/workspace/thread ids ride in server-set headers
+ * (never tool args), so the model can't forge identity or target another
+ * workspace. Workspace/thread headers are omitted when their `ctx` value is
+ * empty/null (e.g. an integration-invoke bridge that's user-scoped only). Used
+ * directly for non-app-tool bridges (integration_invoke) and via
+ * {@link buildAppToolMcpServer} for the four app tools.
+ */
+declare function buildHttpMcpServer(opts: BuildHttpMcpServerOptions): AppToolMcpServer;
+interface BuildMcpServerOptions {
+    tool: AppToolName;
+    baseUrl: string;
+    token: string;
+    ctx: AppToolContext;
+    description: string;
+    headerNames?: ToolHeaderNames;
+    paths?: Partial<Record<AppToolName, string>>;
+}
+/** Build one of the four app-tool MCP servers — a thin wrapper over
+ *  {@link buildHttpMcpServer} that maps the tool name to its route path. */
+declare function buildAppToolMcpServer(opts: BuildMcpServerOptions): AppToolMcpServer;
+
+export { type AppToolMcpServer as A, type BuildHttpMcpServerOptions as B, DEFAULT_APP_TOOL_PATHS as D, type BuildMcpServerOptions as a, buildAppToolMcpServer as b, buildHttpMcpServer as c };

package/dist/model-resolution/index.d.ts

@@ -0,0 +1,83 @@
+/**
+ * Chat-time model resolution: a precedence resolver and a fail-closed catalog
+ * validator that sit on top of a product's boot-time model config.
+ *
+ * `resolveChatModel` picks the model id for a chat turn by precedence:
+ *   request id > env MODEL_NAME > provider default > sandbox default.
+ *
+ * `validateChatModelId` is the fail-closed gate: it returns a typed outcome and
+ * accepts an id only if it is in the constructed allowlist OR served by the live
+ * router catalog (loaded through an injected boundary). A bare id with no
+ * provider prefix resolves to its canonical id only when the suffix is unique
+ * across the catalog, so an ambiguous suffix is rejected rather than silently
+ * assigned a provider.
+ *
+ * The product injects one value — `modelDefaults` — and supplies the catalog
+ * loader per call. `ModelInfo` is the router /v1/models wire shape and
+ * `canonicalModelId` the bare->prefixed id helper, both defined locally so this
+ * engine module carries no UI-package coupling.
+ */
+/** The router /v1/models entry shape this module reads. Minimal on purpose. */
+interface ModelInfo {
+    id: string;
+    name?: string;
+    _provider?: string;
+    provider?: string;
+}
+/** Which execution path the chat turn runs on. Product-supplied per turn. */
+type ChatBackend = 'router' | 'sandbox';
+type ChatModelSource = 'request' | 'env:MODEL_NAME' | 'default' | 'sandbox-default';
+interface ResolvedChatModel {
+    backend: ChatBackend;
+    model?: string;
+    source: ChatModelSource;
+}
+interface ChatModelValidationSuccess {
+    succeeded: true;
+    value: string;
+}
+interface ChatModelValidationFailure {
+    succeeded: false;
+    error: string;
+}
+type ChatModelValidationResult = ChatModelValidationSuccess | ChatModelValidationFailure;
+/** The catalog-fetch boundary: maps a router base URL to the raw model list. */
+type LoadModels = (routerBaseUrl: string) => Promise<ModelInfo[]>;
+/**
+ * The single product-injected seam.
+ *
+ * - `routerModel` / `sandboxOpenaiModel`: the two `DEFAULT_*` ids used by the
+ *   precedence ladder and seeded into the allowlist.
+ * - `routerBaseUrl`: catalog endpoint base; overridable per validate call.
+ * - `extraAllowlist`: additional ids accepted without a catalog round-trip.
+ */
+interface ChatModelDefaults {
+    routerModel: string;
+    sandboxOpenaiModel: string;
+    routerBaseUrl?: string;
+    extraAllowlist?: string[];
+}
+interface ResolveChatModelOptions {
+    requestedModel?: string;
+    backend: ChatBackend;
+    /** Env to read (defaults to process.env). Inject for non-node runtimes. */
+    env?: Record<string, string | undefined>;
+}
+interface ValidateChatModelIdOptions {
+    routerBaseUrl?: string;
+    /** Catalog loader. No default body is baked in; the consumer supplies it. */
+    loadModels: LoadModels;
+}
+interface ChatModelResolution {
+    resolveChatModel: (options: ResolveChatModelOptions) => ResolvedChatModel;
+    validateChatModelId: (modelId: unknown, options: ValidateChatModelIdOptions) => Promise<ChatModelValidationResult>;
+    DEFAULT_ROUTER_MODEL: string;
+    DEFAULT_SANDBOX_OPENAI_MODEL: string;
+    DEFAULT_ROUTER_BASE_URL?: string;
+}
+declare function createChatModelResolution(defaults: ChatModelDefaults): ChatModelResolution;
+declare function cleanModelId(value: unknown): string | undefined;
+declare function isWellFormedModelId(modelId: string): boolean;
+declare function catalogIdsForModel(model: ModelInfo): string[];
+
+export { type ChatBackend, type ChatModelDefaults, type ChatModelResolution, type ChatModelSource, type ChatModelValidationFailure, type ChatModelValidationResult, type ChatModelValidationSuccess, type LoadModels, type ModelInfo, type ResolveChatModelOptions, type ResolvedChatModel, type ValidateChatModelIdOptions, catalogIdsForModel, cleanModelId, createChatModelResolution, isWellFormedModelId };