@tappify/extension-sdk 2.0.0

package/dist/chunk-PYJMJF44.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["/Users/vulakh/Desktop/Work/Tappify/extension-sdk/dist/chunk-PYJMJF44.cjs","../src/manifest/constants.ts"],"names":[],"mappings":"AAAA;ACEO,IAAM,OAAA,EAAS;AAAA,EACpB;AAAA,IACE,GAAA,EAAK,WAAA;AAAA,IACL,KAAA,EAAO,WAAA;AAAA,IACP,WAAA,EACE,+GAAA;AAAA,IACF,sBAAA,EAAwB,KAAA;AAAA,IACxB,qBAAA,EAAuB;AAAA,EACzB,CAAA;AAAA,EACA;AAAA,IACE,GAAA,EAAK,eAAA;AAAA,IACL,KAAA,EAAO,kBAAA;AAAA,IACP,WAAA,EAAa,4CAAA;AAAA,IACb,sBAAA,EAAwB,KAAA;AAAA,IACxB,qBAAA,EAAuB;AAAA,EACzB,CAAA;AAAA,EACA;AAAA,IACE,GAAA,EAAK,gBAAA;AAAA,IACL,KAAA,EAAO,gBAAA;AAAA,IACP,WAAA,EAAa,0DAAA;AAAA,IACb,sBAAA,EAAwB,KAAA;AAAA,IACxB,qBAAA,EAAuB;AAAA,EACzB,CAAA;AAAA,EACA;AAAA,IACE,GAAA,EAAK,qBAAA;AAAA,IACL,KAAA,EAAO,qBAAA;AAAA,IACP,WAAA,EAAa,qDAAA;AAAA,IACb,sBAAA,EAAwB,KAAA;AAAA,IACxB,qBAAA,EAAuB;AAAA,EACzB,CAAA;AAAA,EACA;AAAA,IACE,GAAA,EAAK,cAAA;AAAA,IACL,KAAA,EAAO,oBAAA;AAAA,IACP,WAAA,EAAa,kCAAA;AAAA,IACb,sBAAA,EAAwB,KAAA;AAAA,IACxB,qBAAA,EAAuB;AAAA,EACzB,CAAA;AAAA,EACA;AAAA,IACE,GAAA,EAAK,cAAA;AAAA,IACL,KAAA,EAAO,iBAAA;AAAA,IACP,WAAA,EAAa,kCAAA;AAAA,IACb,sBAAA,EAAwB,KAAA;AAAA,IACxB,qBAAA,EAAuB;AAAA,EACzB,CAAA;AAAA,EACA;AAAA,IACE,GAAA,EAAK,cAAA;AAAA,IACL,KAAA,EAAO,cAAA;AAAA,IACP,WAAA,EAAa,uCAAA;AAAA,IACb,sBAAA,EAAwB,KAAA;AAAA,IACxB,qBAAA,EAAuB;AAAA,EACzB,CAAA;AAAA,EACA;AAAA,IACE,GAAA,EAAK,eAAA;AAAA,IACL,KAAA,EAAO,yBAAA;AAAA,IACP,WAAA,EACE,kEAAA;AAAA,IACF,sBAAA,EAAwB,KAAA;AAAA,IACxB,qBAAA,EAAuB;AAAA,EACzB,CAAA;AAAA,EACA;AAAA,IACE,GAAA,EAAK,cAAA;AAAA,IACL,KAAA,EAAO,0BAAA;AAAA,IACP,WAAA,EACE,iFAAA;AAAA,IACF,sBAAA,EAAwB,KAAA;AAAA,IACxB,qBAAA,EAAuB;AAAA,EACzB,CAAA;AAAA,EACA;AAAA,IACE,GAAA,EAAK,gBAAA;AAAA,IACL,KAAA,EAAO,eAAA;AAAA,IACP,WAAA,EAAa,mCAAA;AAAA,IACb,sBAAA,EAAwB,KAAA;AAAA,IACxB,qBAAA,EAAuB;AAAA,EACzB,CAAA;AAAA,EACA;AAAA,IACE,GAAA,EAAK,UAAA;AAAA,IACL,KAAA,EAAO,qBAAA;AAAA,IACP,WAAA,EAAa,2CAAA;AAAA,IACb,sBAAA,EAAwB,KAAA;AAAA,IACxB,qBAAA,EAAuB;AAAA,EACzB,CAAA;AAAA,EACA;AAAA,IACE,GAAA,EAAK,YAAA;AAAA,IACL,KAAA,EAAO,uBAAA;AAAA,IACP,WAAA,EAAa,qDAAA;AAAA,IACb,sBAAA,EAAwB,IAAA;AAAA,IACxB,qBAAA,EAAuB;AAAA,EACzB,CAAA;AAAA,EACA;AAAA,IACE,GAAA,EAAK,sBAAA;AAAA,IACL,KAAA,EAAO,gCAAA;AAAA,IACP,WAAA,EAAa,oDAAA;AAAA,IACb,sBAAA,EAAwB,IAAA;AAAA,IACxB,qBAAA,EAAuB;AAAA,EACzB,CAAA;AAAA,EACA;AAAA,IACE,GAAA,EAAK,mBAAA;AAAA,IACL,KAAA,EAAO,iCAAA;AAAA,IACP,WAAA,EAAa,0DAAA;AAAA,IACb,sBAAA,EAAwB,IAAA;AAAA,IACxB,qBAAA,EAAuB;AAAA,EACzB,CAAA;AAAA,EACA;AAAA,IACE,GAAA,EAAK,aAAA;AAAA,IACL,KAAA,EAAO,mBAAA;AAAA,IACP,WAAA,EAAa,8DAAA;AAAA,IACb,sBAAA,EAAwB,KAAA;AAAA,IACxB,qBAAA,EAAuB;AAAA,EACzB,CAAA;AAAA,EACA;AAAA,IACE,GAAA,EAAK,WAAA;AAAA,IACL,KAAA,EAAO,iBAAA;AAAA,IACP,WAAA,EAAa,mDAAA;AAAA,IACb,sBAAA,EAAwB,KAAA;AAAA,IACxB,qBAAA,EAAuB;AAAA,EACzB,CAAA;AAAA,EACA;AAAA,IACE,GAAA,EAAK,eAAA;AAAA,IACL,KAAA,EAAO,oBAAA;AAAA,IACP,WAAA,EACE,qEAAA;AAAA,IACF,sBAAA,EAAwB,KAAA;AAAA,IACxB,qBAAA,EAAuB;AAAA,EACzB,CAAA;AAAA,EACA;AAAA,IACE,GAAA,EAAK,gBAAA;AAAA,IACL,KAAA,EAAO,4BAAA;AAAA,IACP,WAAA,EACE,sGAAA;AAAA,IACF,sBAAA,EAAwB,IAAA;AAAA,IACxB,qBAAA,EAAuB;AAAA,EACzB,CAAA;AAAA,EACA;AAAA,IACE,GAAA,EAAK,WAAA;AAAA,IACL,KAAA,EAAO,qBAAA;AAAA,IACP,WAAA,EACE,8FAAA;AAAA,IACF,sBAAA,EAAwB,KAAA;AAAA,IACxB,qBAAA,EAAuB;AAAA,EACzB;AACF,CAAA;AAMO,IAAM,WAAA,EAAkC,MAAA,CAAO,GAAA,CAAI,CAAA,KAAA,EAAA,GAAS,KAAA,CAAM,GAAG,CAAA;AAErE,IAAM,MAAA,EAAQ;AAAA,EACnB,SAAA;AAAA,EACA,UAAA;AAAA,EACA,SAAA;AAAA,EACA,aAAA;AAAA,EACA;AACF,CAAA;AAIO,IAAM,OAAA,EAAS;AAAA,EACpB,mBAAA;AAAA,EACA,YAAA;AAAA,EACA;AACF,CAAA;AAGO,IAAM,MAAA,EAAQ;AAAA,EACnB;AAAA,IACE,GAAA,EAAK,UAAA;AAAA,IACL,KAAA,EAAO,MAAA;AAAA,IACP,KAAA,EAAO,wBAAA;AAAA,IACP,KAAA,EAAO,CAAC,SAAA,EAAW,UAAA,EAAY,SAAS,CAAA;AAAA,IACxC,MAAA,EAAQ,CAAC,mBAAmB,CAAA;AAAA,IAC5B,IAAA,EAAM,IAAA;AAAA,IACN,OAAA,EAAS;AAAA,EACX,CAAA;AAAA,EACA;AAAA,IACE,GAAA,EAAK,WAAA;AAAA,IACL,KAAA,EAAO,WAAA;AAAA,IACP,KAAA,EAAO,yBAAA;AAAA,IACP,KAAA,EAAO,CAAC,SAAA,EAAW,aAAA,EAAe,SAAS,CAAA;AAAA,IAC3C,MAAA,EAAQ,CAAC,mBAAA,EAAqB,YAAY,CAAA;AAAA,IAC1C,IAAA,EAAM,IAAA;AAAA,IACN,OAAA,EAAS;AAAA,EACX,CAAA;AAAA,EACA;AAAA,IACE,GAAA,EAAK,aAAA;AAAA,IACL,KAAA,EAAO,aAAA;AAAA,IACP,KAAA,EAAO,2BAAA;AAAA,IACP,KAAA,EAAO,CAAC,SAAA,EAAW,YAAY,CAAA;AAAA,IAC/B,MAAA,EAAQ,CAAC,iBAAiB,CAAA;AAAA,IAC1B,IAAA,EAAM,IAAA;AAAA,IACN,OAAA,EAAS;AAAA,EACX,CAAA;AAAA,EACA;AAAA,IACE,GAAA,EAAK,SAAA;AAAA,IACL,KAAA,EAAO,WAAA;AAAA,IACP,KAAA,EAAO,MAAA;AAAA,IACP,KAAA,EAAO,CAAC,CAAA;AAAA,IACR,MAAA,EAAQ,CAAC,CAAA;AAAA,IACT,IAAA,EAAM,KAAA;AAAA,IACN,OAAA,EAAS;AAAA,EACX;AACF,CAAA;AAMO,IAAM,UAAA,EAAiC,KAAA,CAAM,GAAA,CAAI,CAAA,IAAA,EAAA,GAAQ,IAAA,CAAK,GAAG,CAAA;AAEjE,IAAM,OAAA,EAAS;AAAA,EACpB,EAAE,GAAA,EAAK,oBAAA,EAAsB,KAAA,EAAO,WAAW,CAAA;AAAA,EAC/C,EAAE,GAAA,EAAK,mBAAA,EAAqB,KAAA,EAAO,UAAU,CAAA;AAAA,EAC7C,EAAE,GAAA,EAAK,sBAAA,EAAwB,KAAA,EAAO,WAAW,CAAA;AAAA,EACjD,EAAE,GAAA,EAAK,oBAAA,EAAsB,KAAA,EAAO,SAAS;AAC/C,CAAA;AAKO,IAAM,WAAA,EAAmC,MAAA,CAAO,GAAA,CAAI,CAAA,KAAA,EAAA,GAAS,KAAA,CAAM,GAAG,CAAA;AAEtE,IAAM,MAAA,EAAQ;AAAA,EACnB,MAAA;AAAA,EACA,KAAA;AAAA,EACA,QAAA;AAAA,EACA,QAAA;AAAA,EACA,QAAA;AAAA,EACA,WAAA;AAAA,EACA,QAAA;AAAA,EACA,UAAA;AAAA,EACA,SAAA;AAAA,EACA,WAAA;AAAA,EACA,SAAA;AAAA,EACA,MAAA;AAAA,EACA,SAAA;AAAA,EACA,QAAA;AAAA,EACA,WAAA;AAAA,EACA,OAAA;AAAA,EACA,QAAA;AAAA,EACA,SAAA;AAAA,EACA;AACF,CAAA;AAGO,IAAM,WAAA,EAAa;AAAA,EACxB,aAAA;AAAA,EACA,eAAA;AAAA,EACA,mBAAA;AAAA,EACA,SAAA;AAAA,EACA,aAAA;AAAA,EACA,aAAA;AAAA,EACA,WAAA;AAAA,EACA,gBAAA;AAAA,EACA,cAAA;AAAA,EACA,QAAA;AAAA,EACA,OAAA;AAAA,EACA,UAAA;AAAA,EACA,SAAA;AAAA,EACA,MAAA;AAAA,EACA,iBAAA;AAAA,EACA,WAAA;AAAA,EACA,YAAA;AAAA,EACA;AACF,CAAA;AAGO,IAAM,OAAA,EAAS;AAAA,EACpB,iBAAA;AAAA,EACA,kBAAA;AAAA,EACA,qBAAA;AAAA,EACA,qBAAA;AAAA,EACA,eAAA;AAAA,EACA,mBAAA;AAAA,EACA,eAAA;AAAA,EACA,iBAAA;AAAA,EACA,mBAAA;AAAA,EACA,wBAAA;AAAA,EACA,sBAAA;AAAA,EACA,wBAAA;AAAA,EACA,oBAAA;AAAA,EACA,aAAA;AAAA,EACA,iBAAA;AAAA,EACA,gBAAA;AAAA,EACA,iBAAA;AAAA,EACA,iBAAA;AAAA,EACA,uBAAA;AAAA,EACA,gBAAA;AAAA,EACA;AACF,CAAA;AAIO,IAAM,kBAAA,EAAuC,CAAC,CAAC,CAAA;AAY/C,IAAM,aAAA,EAAgD;AAAA,EAC3D,OAAA,EAAS,eAAA;AAAA,EACT,MAAA,EAAQ,gBAAA;AAAA,EACR,QAAA,EAAU,qBAAA;AAAA,EACV,OAAA,EAAS,qBAAA;AAAA,EACT,OAAA,EAAS,cAAA;AAAA,EACT,OAAA,EAAS,cAAA;AAAA,EACT,OAAA,EAAS;AACX,CAAA;AAOO,IAAM,UAAA,EAA0D;AAAA,EACrE,KAAA,EAAO,CAAC,OAAA,EAAS,OAAO,CAAA;AAAA,EACxB,MAAA,EAAQ,CAAC,OAAA,EAAS,QAAQ,CAAA;AAAA,EAC1B,KAAA,EAAO,CAAC,SAAA,EAAW,MAAM,CAAA;AAAA,EACzB,IAAA,EAAM,CAAC,OAAO,CAAA;AAAA,EACd,UAAA,EAAY,CAAC,OAAA,EAAS,MAAA,EAAQ,OAAO;AACvC,CAAA;AAEO,IAAM,UAAA,EAAY,CAAC,GAAA,EAAA,GACxB,MAAA,CAAO,IAAA,CAAK,CAAA,KAAA,EAAA,GAAS,KAAA,CAAM,IAAA,IAAQ,GAAG,CAAA;AAEjC,IAAM,SAAA,EAAW,CAAC,GAAA,EAAA,GACvB,KAAA,CAAM,IAAA,CAAK,CAAA,IAAA,EAAA,GAAQ,IAAA,CAAK,IAAA,IAAQ,GAAG,CAAA;AAE9B,IAAM,UAAA,EAAY,CAAC,GAAA,EAAA,GACxB,MAAA,CAAO,IAAA,CAAK,CAAA,KAAA,EAAA,GAAS,KAAA,CAAM,IAAA,IAAQ,GAAG,CAAA;AAEjC,IAAM,aAAA,EAAe,CAAC,IAAA,EAAA,oCAC3B,QAAA,iBAAS,IAAI,CAAA,6BAAG,OAAA,UAAS,CAAC,GAAA;AD5D5B;AACA;AACE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACF,6hBAAC","file":"/Users/vulakh/Desktop/Work/Tappify/extension-sdk/dist/chunk-PYJMJF44.cjs","sourcesContent":[null,"import type { ToolDeclaration } from './types';\n\nexport const SCOPES = [\n  {\n    key: 'ui:render',\n    label: 'Render UI',\n    description:\n      'Render the declared pages, tabs, widgets, row actions and settings panel, and open chat with a visible prompt',\n    requiresSecurityReview: false,\n    requiresJustification: false,\n  },\n  {\n    key: 'projects:read',\n    label: 'Read the project',\n    description: 'Project name, platforms and store identity',\n    requiresSecurityReview: false,\n    requiresJustification: false,\n  },\n  {\n    key: 'analytics:read',\n    label: 'Read analytics',\n    description: 'Downloads, impressions, page views and conversion series',\n    requiresSecurityReview: false,\n    requiresJustification: false,\n  },\n  {\n    key: 'store.metadata:read',\n    label: 'Read store metadata',\n    description: 'Listing metadata, keyword set and keyword positions',\n    requiresSecurityReview: false,\n    requiresJustification: false,\n  },\n  {\n    key: 'reviews:read',\n    label: 'Read store reviews',\n    description: 'Review text, ratings and replies',\n    requiresSecurityReview: false,\n    requiresJustification: false,\n  },\n  {\n    key: 'crashes:read',\n    label: 'Read crash data',\n    description: 'Crash-free rate and issue counts',\n    requiresSecurityReview: false,\n    requiresJustification: false,\n  },\n  {\n    key: 'revenue:read',\n    label: 'Read revenue',\n    description: 'MRR, revenue series and refund counts',\n    requiresSecurityReview: false,\n    requiresJustification: true,\n  },\n  {\n    key: 'metrics:write',\n    label: 'Write connector metrics',\n    description:\n      'Write the metrics this extension declares into the metrics store',\n    requiresSecurityReview: false,\n    requiresJustification: false,\n  },\n  {\n    key: 'alerts:write',\n    label: 'Raise alerts and banners',\n    description:\n      'Turn declared webhooks into alerts and banners, at most three a day per project',\n    requiresSecurityReview: false,\n    requiresJustification: true,\n  },\n  {\n    key: 'insights:write',\n    label: 'Post insights',\n    description: 'Post insights to Home and to chat',\n    requiresSecurityReview: false,\n    requiresJustification: true,\n  },\n  {\n    key: 'ai:tools',\n    label: 'Add assistant tools',\n    description: 'Offer tools and mentions to the assistant',\n    requiresSecurityReview: false,\n    requiresJustification: false,\n  },\n  {\n    key: 'ai:actions',\n    label: 'Run assistant actions',\n    description: 'Run declared actions, each behind the approval card',\n    requiresSecurityReview: true,\n    requiresJustification: true,\n  },\n  {\n    key: 'store.metadata:write',\n    label: 'Propose store metadata changes',\n    description: 'Propose listing changes through a Tappify approval',\n    requiresSecurityReview: true,\n    requiresJustification: true,\n  },\n  {\n    key: 'autopilot:trigger',\n    label: 'Trigger automated store actions',\n    description: 'Start automated store actions on the owner’s behalf',\n    requiresSecurityReview: true,\n    requiresJustification: true,\n  },\n  {\n    key: 'work:create',\n    label: 'Create work items',\n    description: 'Create issues, pages or messages in the vendor’s system',\n    requiresSecurityReview: false,\n    requiresJustification: true,\n  },\n  {\n    key: 'work:sync',\n    label: 'Sync work items',\n    description: 'Two-way comments and status on created work items',\n    requiresSecurityReview: false,\n    requiresJustification: true,\n  },\n  {\n    key: 'storage:write',\n    label: 'Use hosted storage',\n    description:\n      'Read and write this extension’s own hosted storage collections',\n    requiresSecurityReview: false,\n    requiresJustification: false,\n  },\n  {\n    key: 'messaging:send',\n    label: 'Send messages to end users',\n    description:\n      'Send messages or push notifications to the owner’s end users through owner-supplied credentials',\n    requiresSecurityReview: true,\n    requiresJustification: true,\n  },\n  {\n    key: 'ai:skills',\n    label: 'Shape the assistant',\n    description:\n      'Add skills, prompt templates and context providers that shape the assistant’s behaviour',\n    requiresSecurityReview: false,\n    requiresJustification: true,\n  },\n] as const;\n\nexport type ScopeDefinition = (typeof SCOPES)[number];\n/** Every scope an extension can ask for under `scopes` in its manifest. */\nexport type ScopeKey = ScopeDefinition['key'];\n\nexport const SCOPE_KEYS: readonly ScopeKey[] = SCOPES.map(scope => scope.key);\n\nexport const SLOTS = [\n  'kpi-row',\n  'insights',\n  'sidebar',\n  'below-chart',\n  'below-list',\n] as const;\n/** The anchors on a host page a widget can be declared at. */\nexport type SlotId = (typeof SLOTS)[number];\n\nexport const CHARTS = [\n  'installs-activity',\n  'conversion',\n  'release-cadence',\n] as const;\nexport type HostChart = (typeof CHARTS)[number];\n\nexport const PAGES = [\n  {\n    key: 'overview',\n    label: 'Home',\n    route: '/projects/:id/overview',\n    slots: ['kpi-row', 'insights', 'sidebar'],\n    charts: ['installs-activity'],\n    tabs: true,\n    banners: true,\n  },\n  {\n    key: 'analytics',\n    label: 'Analytics',\n    route: '/projects/:id/analytics',\n    slots: ['kpi-row', 'below-chart', 'sidebar'],\n    charts: ['installs-activity', 'conversion'],\n    tabs: true,\n    banners: true,\n  },\n  {\n    key: 'deployments',\n    label: 'Deployments',\n    route: '/projects/:id/deployments',\n    slots: ['sidebar', 'below-list'],\n    charts: ['release-cadence'],\n    tabs: true,\n    banners: false,\n  },\n  {\n    key: 'ai_chat',\n    label: 'Assistant',\n    route: 'chat',\n    slots: [],\n    charts: [],\n    tabs: false,\n    banners: false,\n  },\n] as const;\n\nexport type PageDefinition = (typeof PAGES)[number];\n/** The host pages a contribution can attach a tab, widget or banner to. */\nexport type HostPage = PageDefinition['key'];\n\nexport const PAGE_KEYS: readonly HostPage[] = PAGES.map(page => page.key);\n\nexport const TABLES = [\n  { key: 'analytics.keywords', label: 'Keywords' },\n  { key: 'analytics.reviews', label: 'Reviews' },\n  { key: 'deployments.releases', label: 'Releases' },\n  { key: 'deployments.builds', label: 'Builds' },\n] as const;\n\nexport type TableDefinition = (typeof TABLES)[number];\nexport type HostTable = TableDefinition['key'];\n\nexport const TABLE_KEYS: readonly HostTable[] = TABLES.map(table => table.key);\n\nexport const KINDS = [\n  'page',\n  'tab',\n  'widget',\n  'series',\n  'banner',\n  'rowAction',\n  'marker',\n  'settings',\n  'storage',\n  'connector',\n  'webhook',\n  'tool',\n  'mention',\n  'action',\n  'knowledge',\n  'skill',\n  'prompt',\n  'context',\n  'work',\n] as const;\nexport type ContributionKind = (typeof KINDS)[number];\n\nexport const CATEGORIES = [\n  'market_data',\n  'subscriptions',\n  'product_analytics',\n  'crashes',\n  'attribution',\n  'experiments',\n  'messaging',\n  'session_replay',\n  'localization',\n  'design',\n  'ci_cd',\n  'trackers',\n  'support',\n  'chat',\n  'ad_monetization',\n  'warehouse',\n  'compliance',\n  'additional_stores',\n] as const;\nexport type ExtensionCategory = (typeof CATEGORIES)[number];\n\nexport const EVENTS = [\n  'release.shipped',\n  'metadata.changed',\n  'keyword.set_changed',\n  'screenshots.updated',\n  'price.changed',\n  'featuring.started',\n  'score.changed',\n  'incident.opened',\n  'incident.resolved',\n  'playbook.step_approved',\n  'review.thread_opened',\n  'review.thread_resolved',\n  'approval.requested',\n  'digest.sent',\n  'install.created',\n  'install.paused',\n  'install.resumed',\n  'install.revoked',\n  'install.token_rotated',\n  'scopes.changed',\n  'settings.changed',\n] as const;\n/** Every event Tappify emits, which a mount or a server can subscribe to. */\nexport type HostEventName = (typeof EVENTS)[number];\n\nexport const SERVED_SDK_MAJORS: readonly number[] = [2];\n\n/** The `kind` of every read `tap.data.query` accepts, one per scope it needs. */\nexport type DataQueryKind =\n  | 'project'\n  | 'series'\n  | 'keywords'\n  | 'listing'\n  | 'reviews'\n  | 'crashes'\n  | 'revenue';\n\nexport const QUERY_SCOPES: Record<DataQueryKind, ScopeKey> = {\n  project: 'projects:read',\n  series: 'analytics:read',\n  keywords: 'store.metadata:read',\n  listing: 'store.metadata:read',\n  reviews: 'reviews:read',\n  crashes: 'crashes:read',\n  revenue: 'revenue:read',\n};\n\n/**\n * The keys a tool's answer carries for each `returns` kind it may declare.\n * `validateToolResponse`, `tappify extension doctor` and the host all read\n * this one table, so a wrong body fails the same way wherever it is checked.\n */\nexport const CARD_KEYS: Record<ToolDeclaration['returns'], string[]> = {\n  value: ['label', 'value'],\n  series: ['label', 'points'],\n  table: ['columns', 'rows'],\n  list: ['items'],\n  comparison: ['label', 'left', 'right'],\n};\n\nexport const findScope = (key: string): ScopeDefinition | undefined =>\n  SCOPES.find(scope => scope.key === key);\n\nexport const findPage = (key: string): PageDefinition | undefined =>\n  PAGES.find(page => page.key === key);\n\nexport const findTable = (key: string): TableDefinition | undefined =>\n  TABLES.find(table => table.key === key);\n\nexport const slotsForPage = (page: string): readonly SlotId[] =>\n  findPage(page)?.slots ?? [];\n"]}

package/dist/chunk-QHM7XNRK.mjs

@@ -0,0 +1,33 @@
+import {
+  TapError
+} from "./chunk-CSTYBKZC.mjs";
+
+// src/client/context.ts
+import { createContext, useContext } from "react";
+var REGISTRY_KEY = "__tappifyExtensionSdkTapContextV2__";
+var registry = globalThis;
+function resolveContext() {
+  const existing = registry[REGISTRY_KEY];
+  if (existing) return existing;
+  const created = createContext(null);
+  created.displayName = "TapContext";
+  registry[REGISTRY_KEY] = created;
+  return created;
+}
+var TapContext = resolveContext();
+function useTap() {
+  const tap = useContext(TapContext);
+  if (tap === null) {
+    throw new TapError(
+      "TAP_OUTSIDE_HOST",
+      "useTap() ran outside a Tappify mount. Render this component from an entry declared in tappify.extension.json, or wrap it in renderWithTap() from @tappify/extension-sdk/testing."
+    );
+  }
+  return tap;
+}
+
+export {
+  TapContext,
+  useTap
+};
+//# sourceMappingURL=chunk-QHM7XNRK.mjs.map

package/dist/chunk-QHM7XNRK.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/client/context.ts"],"sourcesContent":["import { createContext, useContext, type Context } from 'react';\nimport { TapError } from './errors';\nimport type { Tap } from './types';\n\nconst REGISTRY_KEY = '__tappifyExtensionSdkTapContextV2__';\n\ninterface ContextRegistry {\n  [REGISTRY_KEY]?: Context<Tap | null>;\n}\n\nconst registry: typeof globalThis & ContextRegistry = globalThis;\n\nfunction resolveContext(): Context<Tap | null> {\n  const existing = registry[REGISTRY_KEY];\n  if (existing) return existing;\n\n  const created = createContext<Tap | null>(null);\n  created.displayName = 'TapContext';\n  registry[REGISTRY_KEY] = created;\n  return created;\n}\n\nexport const TapContext: Context<Tap | null> = resolveContext();\n\n/**\n * Returns the whole bridge the host mounted this component with.\n *\n * @remarks\n * Throws `TapError` with code `TAP_OUTSIDE_HOST` when no Tappify mount is above\n * the component. The object it returns does not re-render the component when the\n * host changes a member; read through `useTapFilters`, `useTapTheme` and the\n * other slice hooks where that matters.\n *\n * @example\n * ```tsx\n * import { TapButton, useTap } from '@tappify/extension-sdk';\n *\n * function CopyId() {\n *   const tap = useTap();\n *   return (\n *     <TapButton onClick={() => void tap.ui.copy(tap.project.id)}>\n *       Copy project id\n *     </TapButton>\n *   );\n * }\n * ```\n */\nexport function useTap(): Tap {\n  const tap = useContext(TapContext);\n  if (tap === null) {\n    throw new TapError(\n      'TAP_OUTSIDE_HOST',\n      'useTap() ran outside a Tappify mount. Render this component from an entry declared in tappify.extension.json, or wrap it in renderWithTap() from @tappify/extension-sdk/testing.',\n    );\n  }\n  return tap;\n}\n"],"mappings":";;;;;AAAA,SAAS,eAAe,kBAAgC;AAIxD,IAAM,eAAe;AAMrB,IAAM,WAAgD;AAEtD,SAAS,iBAAsC;AAC7C,QAAM,WAAW,SAAS,YAAY;AACtC,MAAI,SAAU,QAAO;AAErB,QAAM,UAAU,cAA0B,IAAI;AAC9C,UAAQ,cAAc;AACtB,WAAS,YAAY,IAAI;AACzB,SAAO;AACT;AAEO,IAAM,aAAkC,eAAe;AAyBvD,SAAS,SAAc;AAC5B,QAAM,MAAM,WAAW,UAAU;AACjC,MAAI,QAAQ,MAAM;AAChB,UAAM,IAAI;AAAA,MACR;AAAA,MACA;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;","names":[]}

package/dist/chunk-RMUWRESK.cjs

@@ -0,0 +1,365 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
+
+var _chunkPYJMJF44cjs = require('./chunk-PYJMJF44.cjs');
+
+
+
+var _chunk2DBSVKAUcjs = require('./chunk-2DBSVKAU.cjs');
+
+// src/server/codes.ts
+var SERVER_ERROR_CODES = {
+  ROUTE_UNKNOWN: "TAP_ROUTE_UNKNOWN",
+  HANDLER_MISSING: "TAP_HANDLER_MISSING",
+  INTERNAL_ERROR: "TAP_INTERNAL_ERROR",
+  TOKEN_MISSING: "TAP_TOKEN_MISSING",
+  TOKEN_INVALID: "TAP_TOKEN_INVALID",
+  TOKEN_AUDIENCE: "TAP_TOKEN_AUDIENCE",
+  EVENT_ID_MISSING: "TAP_EVENT_ID_MISSING",
+  BODY_INVALID: "TAP_BODY_INVALID",
+  BODY_TOO_LARGE: "TAP_BODY_TOO_LARGE",
+  WEBHOOK_REJECTED: "TAP_WEBHOOK_REJECTED"
+};
+
+// src/server/token.ts
+
+
+
+
+var _jose = require('jose');
+var DEFAULT_JWKS_URL = "https://api.tappify.ai/api/v1/extensions/.well-known/jwks.json";
+var CLOCK_TOLERANCE_SECONDS = 60;
+var remoteSets = /* @__PURE__ */ new Map();
+function keySet(options) {
+  if (options.jwks) return _jose.createLocalJWKSet.call(void 0, options.jwks);
+  const url = _nullishCoalesce(options.jwksUrl, () => ( DEFAULT_JWKS_URL));
+  const cached = remoteSets.get(url);
+  if (cached) return cached;
+  const created = _jose.createRemoteJWKSet.call(void 0, new URL(url));
+  remoteSets.set(url, created);
+  return created;
+}
+function readString(payload, key) {
+  const value = payload[key];
+  return typeof value === "string" ? value : void 0;
+}
+function toClaims(payload, audience) {
+  const aud = payload.aud;
+  const matches = aud === audience || Array.isArray(aud) && aud.includes(audience);
+  if (!matches) {
+    throw new (0, _chunk2DBSVKAUcjs.TapError)(
+      "TAP_TOKEN_AUDIENCE",
+      `This install token was issued for a different extension. Create the handler with the same extensionId as the "id" in tappify.extension.json, so its audience is "${audience}".`
+    );
+  }
+  const installId = readString(payload, "installId");
+  const extensionId = readString(payload, "extensionId");
+  const organizationId = readString(payload, "organizationId");
+  if (installId === void 0 || extensionId === void 0 || organizationId === void 0) {
+    throw new (0, _chunk2DBSVKAUcjs.TapError)(
+      "TAP_TOKEN_INVALID",
+      `The install token is missing the installId, extensionId or organizationId claim. Verify against ${DEFAULT_JWKS_URL} and do not reuse tokens across environments.`
+    );
+  }
+  const scopes = payload.scopes;
+  const userId = readString(payload, "userId");
+  const claims = {
+    iss: _nullishCoalesce(readString(payload, "iss"), () => ( "")),
+    aud: audience,
+    exp: typeof payload.exp === "number" ? payload.exp : 0,
+    iat: typeof payload.iat === "number" ? payload.iat : 0,
+    installId,
+    extensionId,
+    projectId: _nullishCoalesce(readString(payload, "projectId"), () => ( null)),
+    organizationId,
+    scopes: Array.isArray(scopes) ? scopes.filter((scope) => typeof scope === "string") : []
+  };
+  if (userId !== void 0) claims.userId = userId;
+  return claims;
+}
+async function verifyTappifyToken(token, options) {
+  const audience = `ext:${options.extensionId}`;
+  let payload;
+  try {
+    const verified = await _jose.jwtVerify.call(void 0, token, keySet(options), {
+      algorithms: ["RS256"],
+      clockTolerance: CLOCK_TOLERANCE_SECONDS
+    });
+    payload = verified.payload;
+  } catch (e) {
+    throw new (0, _chunk2DBSVKAUcjs.TapError)(
+      "TAP_TOKEN_INVALID",
+      "The install token did not verify. Check that your server reads the Authorization header unchanged, that its clock is correct, and that jwksUrl points at the Tappify environment that called you."
+    );
+  }
+  return toClaims(payload, audience);
+}
+
+// src/server/wire.ts
+var INTERNAL_MESSAGE = "The extension server failed to handle this call. Check your own logs; Tappify records the failure against your extension.";
+function json(data, status = 200) {
+  return new Response(JSON.stringify(data), {
+    status,
+    headers: { "content-type": "application/json" }
+  });
+}
+function wireError(code, message, status) {
+  return json({ error: { code, message } }, status);
+}
+function failure(code, message, status) {
+  return wireError(code, message, status);
+}
+function readUnknown(value, key) {
+  if (typeof value !== "object" || value === null) return void 0;
+  return value[key];
+}
+function readRecord(value, key) {
+  const nested = readUnknown(value, key);
+  return typeof nested === "object" && nested !== null ? nested : {};
+}
+function readText(value, key) {
+  const nested = readUnknown(value, key);
+  return typeof nested === "string" ? nested : null;
+}
+
+// src/server/handler.ts
+var MAX_BODY_BYTES = 1048576;
+var WORK_OPERATIONS = [
+  "list_containers",
+  "create",
+  "attach",
+  "comment",
+  "status",
+  "resolve"
+];
+var TOKEN_FAILURES = [
+  SERVER_ERROR_CODES.TOKEN_INVALID,
+  SERVER_ERROR_CODES.TOKEN_AUDIENCE
+];
+function toInstall(payload, claims) {
+  const raw = readRecord(payload, "install");
+  return {
+    id: claims.installId,
+    extensionId: claims.extensionId,
+    projectId: _nullishCoalesce(claims.projectId, () => ( readText(raw, "projectId"))),
+    organizationId: claims.organizationId
+  };
+}
+function toPlatform(value) {
+  return value === "ios" || value === "android" ? value : "all";
+}
+function toPreset(value) {
+  return value === "7d" || value === "30d" || value === "90d" ? value : void 0;
+}
+function toContext(payload) {
+  const raw = readRecord(payload, "context");
+  const filters = readRecord(raw, "filters");
+  const rawRange = readRecord(filters, "range");
+  const from = _nullishCoalesce(_nullishCoalesce(readText(raw, "from"), () => ( readText(rawRange, "from"))), () => ( ""));
+  const to = _nullishCoalesce(_nullishCoalesce(readText(raw, "to"), () => ( readText(rawRange, "to"))), () => ( ""));
+  const range = {
+    from: _nullishCoalesce(readText(rawRange, "from"), () => ( from)),
+    to: _nullishCoalesce(readText(rawRange, "to"), () => ( to))
+  };
+  const preset = toPreset(readText(rawRange, "preset"));
+  if (preset !== void 0) range.preset = preset;
+  return {
+    projectId: readText(raw, "projectId"),
+    platform: toPlatform(readText(raw, "platform")),
+    from,
+    to,
+    filters: {
+      range,
+      platform: toPlatform(readText(filters, "platform")),
+      country: _nullishCoalesce(readText(filters, "country"), () => ( "all"))
+    }
+  };
+}
+function toCredentials(payload) {
+  const raw = readRecord(payload, "credentials");
+  const credentials = {};
+  for (const [name, value] of Object.entries(raw)) {
+    if (typeof value === "string") credentials[name] = value;
+  }
+  return credentials;
+}
+function tooLarge() {
+  return new (0, _chunk2DBSVKAUcjs.TapServerError)(
+    SERVER_ERROR_CODES.BODY_TOO_LARGE,
+    "A Tappify request body is at most 1 MB. Return a cursor or an id the host can follow instead of inlining the payload.",
+    413
+  );
+}
+async function readBody(request) {
+  if (request.method === "GET" || request.method === "HEAD") return {};
+  const length = request.headers.get("content-length");
+  if (length !== null && Number(length) > MAX_BODY_BYTES) throw tooLarge();
+  const bytes = await request.arrayBuffer();
+  if (bytes.byteLength > MAX_BODY_BYTES) throw tooLarge();
+  if (bytes.byteLength === 0) return {};
+  const text = new TextDecoder().decode(bytes);
+  try {
+    return JSON.parse(text);
+  } catch (e2) {
+    throw new (0, _chunk2DBSVKAUcjs.TapServerError)(
+      SERVER_ERROR_CODES.BODY_INVALID,
+      "The request body was not JSON. Do not parse or re-encode the body before handing the Request to createTappifyHandler().",
+      400
+    );
+  }
+}
+function route(handler, input, event, noContent = false) {
+  return { handler, input, event, noContent };
+}
+function handlerFor(map, name) {
+  return _optionalChain([map, 'optionalAccess', _ => _[name]]);
+}
+function resolveRoute(options, method, segments, url, payload) {
+  const [head, name] = segments;
+  const bodyInput = _nullishCoalesce(readUnknown(payload, "input"), () => ( {}));
+  if (head === "metrics" && method === "POST") {
+    return route(options.metrics, bodyInput);
+  }
+  if (head === "tools" && method === "POST" && name !== void 0) {
+    return route(handlerFor(options.tools, name), bodyInput);
+  }
+  if (head === "mentions" && method === "GET" && name !== void 0) {
+    return route(handlerFor(options.mentions, name), {
+      q: _nullishCoalesce(url.searchParams.get("q"), () => ( ""))
+    });
+  }
+  if (head === "actions" && method === "POST" && name !== void 0) {
+    return route(handlerFor(options.actions, name), bodyInput);
+  }
+  if (head === "procedures" && method === "POST" && name !== void 0) {
+    return route(handlerFor(options.procedures, name), bodyInput);
+  }
+  if (head === "context" && method === "GET" && name !== void 0) {
+    return route(handlerFor(options.context, name), void 0);
+  }
+  if (head === "work" && method === "POST" && name !== void 0) {
+    const operation = WORK_OPERATIONS.find((candidate) => candidate === name);
+    return route(
+      operation === void 0 ? void 0 : _optionalChain([options, 'access', _2 => _2.work, 'optionalAccess', _3 => _3[operation]]),
+      bodyInput
+    );
+  }
+  if (head === "events" && method === "POST") {
+    const envelope = readRecord(payload, "event");
+    const eventName = readText(envelope, "name");
+    if (eventName === null) {
+      throw new (0, _chunk2DBSVKAUcjs.TapServerError)(
+        SERVER_ERROR_CODES.BODY_INVALID,
+        'The events body has no event.name. Post the envelope Tappify sends unchanged, with the event name under "event".',
+        400
+      );
+    }
+    const declared = _chunkPYJMJF44cjs.EVENTS.find((candidate) => candidate === eventName);
+    return route(
+      declared === void 0 ? void 0 : _optionalChain([options, 'access', _4 => _4.events, 'optionalAccess', _5 => _5[declared]]),
+      void 0,
+      _nullishCoalesce(readUnknown(envelope, "payload"), () => ( {})),
+      true
+    );
+  }
+  return null;
+}
+function createTappifyHandler(options) {
+  const basePath = _nullishCoalesce(options.basePath, () => ( ""));
+  return async function handle(request) {
+    const url = new URL(request.url);
+    const path = url.pathname.startsWith(basePath) ? url.pathname.slice(basePath.length) : url.pathname;
+    const segments = path.split("/").filter((segment) => segment !== "");
+    if (segments[0] !== "tappify") {
+      return failure(
+        SERVER_ERROR_CODES.ROUTE_UNKNOWN,
+        `Nothing is mounted at ${path}. Tappify calls paths under /tappify; set basePath if your framework mounts the handler under a prefix.`,
+        404
+      );
+    }
+    const rest = segments.slice(1);
+    if (rest[0] === "health" && request.method === "GET") {
+      const health = options.health ? await options.health() : { ok: true };
+      return json(health);
+    }
+    const authorization = _nullishCoalesce(request.headers.get("authorization"), () => ( ""));
+    const token = authorization.startsWith("Bearer ") ? authorization.slice("Bearer ".length) : "";
+    if (token === "") {
+      return failure(
+        SERVER_ERROR_CODES.TOKEN_MISSING,
+        "This route needs an install token. Tappify sends it as Authorization: Bearer <token>; forward the header unchanged from your framework.",
+        401
+      );
+    }
+    const eventId = request.headers.get("x-tappify-event-id");
+    if (eventId === null || eventId === "") {
+      return failure(
+        SERVER_ERROR_CODES.EVENT_ID_MISSING,
+        "Every Tappify call carries X-Tappify-Event-Id for idempotency. Forward the header unchanged, and use it as the key when you deduplicate.",
+        400
+      );
+    }
+    try {
+      const claims = await verifyTappifyToken(token, {
+        extensionId: options.extensionId,
+        jwksUrl: options.jwksUrl,
+        jwks: options.jwks
+      });
+      const payload = await readBody(request);
+      const matched = resolveRoute(options, request.method, rest, url, payload);
+      if (matched === null) {
+        return failure(
+          SERVER_ERROR_CODES.ROUTE_UNKNOWN,
+          `Tappify has no ${request.method} ${path} route. The paths it calls are listed under "Vendor server endpoints" in the reference; check the method and the spelling.`,
+          404
+        );
+      }
+      if (matched.handler === void 0) {
+        return failure(
+          SERVER_ERROR_CODES.HANDLER_MISSING,
+          `No handler is registered for ${request.method} ${path}. Add it to createTappifyHandler(), or remove the contribution from tappify.extension.json.`,
+          404
+        );
+      }
+      const documents = readRecord(payload, "documents");
+      const typed = {
+        install: toInstall(payload, claims),
+        context: toContext(payload),
+        input: matched.input,
+        credentials: toCredentials(payload),
+        documents,
+        event: matched.event,
+        eventId,
+        claims,
+        request
+      };
+      const result = await matched.handler(typed);
+      return matched.noContent ? new Response(null, { status: 204 }) : json(result);
+    } catch (error) {
+      if (_chunk2DBSVKAUcjs.TapServerError.is(error)) {
+        return wireError(error.code, error.message, _nullishCoalesce(error.status, () => ( 400)));
+      }
+      if (_chunk2DBSVKAUcjs.TapError.is(error)) {
+        const tokenFailure = TOKEN_FAILURES.find(
+          (candidate) => candidate === error.code
+        );
+        if (tokenFailure !== void 0) {
+          return failure(tokenFailure, error.message, 401);
+        }
+        return wireError(error.code, error.message, 400);
+      }
+      return failure(SERVER_ERROR_CODES.INTERNAL_ERROR, INTERNAL_MESSAGE, 500);
+    }
+  };
+}
+
+
+
+
+
+
+
+
+
+
+exports.SERVER_ERROR_CODES = SERVER_ERROR_CODES; exports.INTERNAL_MESSAGE = INTERNAL_MESSAGE; exports.wireError = wireError; exports.readRecord = readRecord; exports.readText = readText; exports.DEFAULT_JWKS_URL = DEFAULT_JWKS_URL; exports.verifyTappifyToken = verifyTappifyToken; exports.createTappifyHandler = createTappifyHandler;
+//# sourceMappingURL=chunk-RMUWRESK.cjs.map

package/dist/chunk-RMUWRESK.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["/Users/vulakh/Desktop/Work/Tappify/extension-sdk/dist/chunk-RMUWRESK.cjs","../src/server/codes.ts","../src/server/token.ts","../src/server/wire.ts","../src/server/handler.ts"],"names":[],"mappings":"AAAA;AACE;AACF,wDAA6B;AAC7B;AACE;AACA;AACF,wDAA6B;AAC7B;AACA;ACIO,IAAM,mBAAA,EAAqB;AAAA,EAChC,aAAA,EAAe,mBAAA;AAAA,EACf,eAAA,EAAiB,qBAAA;AAAA,EACjB,cAAA,EAAgB,oBAAA;AAAA,EAChB,aAAA,EAAe,mBAAA;AAAA,EACf,aAAA,EAAe,mBAAA;AAAA,EACf,cAAA,EAAgB,oBAAA;AAAA,EAChB,gBAAA,EAAkB,sBAAA;AAAA,EAClB,YAAA,EAAc,kBAAA;AAAA,EACd,cAAA,EAAgB,oBAAA;AAAA,EAChB,gBAAA,EAAkB;AACpB,CAAA;ADFA;AACA;AEtBA;AACE;AACA;AACA;AAAA,4BAGK;AAWA,IAAM,iBAAA,EACX,gEAAA;AAEF,IAAM,wBAAA,EAA0B,EAAA;AAEhC,IAAM,WAAA,kBAAa,IAAI,GAAA,CAA6B,CAAA;AAEpD,SAAS,MAAA,CAAO,OAAA,EAA8C;AAC5D,EAAA,GAAA,CAAI,OAAA,CAAQ,IAAA,EAAM,OAAO,qCAAA,OAAkB,CAAQ,IAAI,CAAA;AAEvD,EAAA,MAAM,IAAA,mBAAM,OAAA,CAAQ,OAAA,UAAW,kBAAA;AAC/B,EAAA,MAAM,OAAA,EAAS,UAAA,CAAW,GAAA,CAAI,GAAG,CAAA;AACjC,EAAA,GAAA,CAAI,MAAA,EAAQ,OAAO,MAAA;AAEnB,EAAA,MAAM,QAAA,EAAU,sCAAA,IAAuB,GAAA,CAAI,GAAG,CAAC,CAAA;AAC/C,EAAA,UAAA,CAAW,GAAA,CAAI,GAAA,EAAK,OAAO,CAAA;AAC3B,EAAA,OAAO,OAAA;AACT;AAEA,SAAS,UAAA,CAAW,OAAA,EAAqB,GAAA,EAAiC;AACxE,EAAA,MAAM,MAAA,EAAQ,OAAA,CAAQ,GAAG,CAAA;AACzB,EAAA,OAAO,OAAO,MAAA,IAAU,SAAA,EAAW,MAAA,EAAQ,KAAA,CAAA;AAC7C;AAEA,SAAS,QAAA,CAAS,OAAA,EAAqB,QAAA,EAAiC;AACtE,EAAA,MAAM,IAAA,EAAM,OAAA,CAAQ,GAAA;AACpB,EAAA,MAAM,QAAA,EACJ,IAAA,IAAQ,SAAA,GAAa,KAAA,CAAM,OAAA,CAAQ,GAAG,EAAA,GAAK,GAAA,CAAI,QAAA,CAAS,QAAQ,CAAA;AAElE,EAAA,GAAA,CAAI,CAAC,OAAA,EAAS;AACZ,IAAA,MAAM,IAAI,+BAAA;AAAA,MACR,oBAAA;AAAA,MACA,CAAA,iKAAA,EAAoK,QAAQ,CAAA,EAAA;AAAA,IAC9K,CAAA;AAAA,EACF;AAEA,EAAA,MAAM,UAAA,EAAY,UAAA,CAAW,OAAA,EAAS,WAAW,CAAA;AACjD,EAAA,MAAM,YAAA,EAAc,UAAA,CAAW,OAAA,EAAS,aAAa,CAAA;AACrD,EAAA,MAAM,eAAA,EAAiB,UAAA,CAAW,OAAA,EAAS,gBAAgB,CAAA;AAE3D,EAAA,GAAA,CACE,UAAA,IAAc,KAAA,EAAA,GACd,YAAA,IAAgB,KAAA,EAAA,GAChB,eAAA,IAAmB,KAAA,CAAA,EACnB;AACA,IAAA,MAAM,IAAI,+BAAA;AAAA,MACR,mBAAA;AAAA,MACA,CAAA,gGAAA,EAAmG,gBAAgB,CAAA,6CAAA;AAAA,IACrH,CAAA;AAAA,EACF;AAEA,EAAA,MAAM,OAAA,EAAS,OAAA,CAAQ,MAAA;AACvB,EAAA,MAAM,OAAA,EAAS,UAAA,CAAW,OAAA,EAAS,QAAQ,CAAA;AAE3C,EAAA,MAAM,OAAA,EAAwB;AAAA,IAC5B,GAAA,mBAAK,UAAA,CAAW,OAAA,EAAS,KAAK,CAAA,UAAK,IAAA;AAAA,IACnC,GAAA,EAAK,QAAA;AAAA,IACL,GAAA,EAAK,OAAO,OAAA,CAAQ,IAAA,IAAQ,SAAA,EAAW,OAAA,CAAQ,IAAA,EAAM,CAAA;AAAA,IACrD,GAAA,EAAK,OAAO,OAAA,CAAQ,IAAA,IAAQ,SAAA,EAAW,OAAA,CAAQ,IAAA,EAAM,CAAA;AAAA,IACrD,SAAA;AAAA,IACA,WAAA;AAAA,IACA,SAAA,mBAAW,UAAA,CAAW,OAAA,EAAS,WAAW,CAAA,UAAK,MAAA;AAAA,IAC/C,cAAA;AAAA,IACA,MAAA,EAAQ,KAAA,CAAM,OAAA,CAAQ,MAAM,EAAA,EACxB,MAAA,CAAO,MAAA,CAAO,CAAC,KAAA,EAAA,GAA2B,OAAO,MAAA,IAAU,QAAQ,EAAA,EACnE,CAAC;AAAA,EACP,CAAA;AAEA,EAAA,GAAA,CAAI,OAAA,IAAW,KAAA,CAAA,EAAW,MAAA,CAAO,OAAA,EAAS,MAAA;AAC1C,EAAA,OAAO,MAAA;AACT;AA2BA,MAAA,SAAsB,kBAAA,CACpB,KAAA,EACA,OAAA,EACwB;AACxB,EAAA,MAAM,SAAA,EAAW,CAAA,IAAA,EAAO,OAAA,CAAQ,WAAW,CAAA,CAAA;AAEvC,EAAA;AACA,EAAA;AACsC,IAAA;AAClB,MAAA;AACJ,MAAA;AACjB,IAAA;AACkB,IAAA;AACb,EAAA;AACI,IAAA;AACR,MAAA;AACA,MAAA;AACF,IAAA;AACF,EAAA;AAEiC,EAAA;AACnC;AFxC8C;AACA;AG7F5C;AAE0D;AAChB,EAAA;AACxC,IAAA;AAC2B,IAAA;AAC5B,EAAA;AACH;AAMY;AACgC,EAAA;AAC5C;AAMY;AAC4B,EAAA;AACxC;AAEkE;AACrB,EAAA;AACE,EAAA;AAC/C;AAK2B;AACY,EAAA;AACA,EAAA;AAGvC;AAEqE;AAC9B,EAAA;AACD,EAAA;AACtC;AH4E8C;AACA;AIxFvB;AAE2B;AAChD,EAAA;AACA,EAAA;AACA,EAAA;AACA,EAAA;AACA,EAAA;AACA,EAAA;AACF;AAEsD;AACjC,EAAA;AACA,EAAA;AACrB;AAM4E;AACjC,EAAA;AAClC,EAAA;AACM,IAAA;AACS,IAAA;AACoB,IAAA;AACjB,IAAA;AACzB,EAAA;AACF;AAE0E;AACpC,EAAA;AACtC;AAEgE;AAClB,EAAA;AAG9C;AAEyD;AACd,EAAA;AACA,EAAA;AACG,EAAA;AACN,EAAA;AACK,EAAA;AAEf,EAAA;AACU,IAAA;AACJ,IAAA;AAClC,EAAA;AAE2C,EAAA;AACF,EAAA;AAElC,EAAA;AAC+B,IAAA;AACD,IAAA;AACnC,IAAA;AACA,IAAA;AACS,IAAA;AACP,MAAA;AACuC,MAAA;AACH,MAAA;AACtC,IAAA;AACF,EAAA;AACF;AAE8D;AAC5B,EAAA;AACa,EAAA;AACF,EAAA;AACV,IAAA;AACjC,EAAA;AACO,EAAA;AACT;AAEoC;AACvB,EAAA;AACU,IAAA;AACnB,IAAA;AACA,IAAA;AACF,EAAA;AACF;AAE4D;AAClB,EAAA;AAEL,EAAA;AACK,EAAA;AAEA,EAAA;AACD,EAAA;AACH,EAAA;AAEO,EAAA;AACvC,EAAA;AACoB,IAAA;AAChB,EAAA;AACI,IAAA;AACW,MAAA;AACnB,MAAA;AACA,MAAA;AACF,IAAA;AACF,EAAA;AACF;AAsBE;AAE0C,EAAA;AAC5C;AAK+B;AACZ,EAAA;AACnB;AAKE;AAIqB,EAAA;AACkB,EAAA;AAEF,EAAA;AACI,IAAA;AACzC,EAAA;AACmC,EAAA;AACM,IAAA;AACzC,EAAA;AACsC,EAAA;AACM,IAAA;AACR,MAAA;AACjC,IAAA;AACH,EAAA;AACqC,EAAA;AACM,IAAA;AAC3C,EAAA;AACwC,EAAA;AACN,IAAA;AAClC,EAAA;AACqC,EAAA;AACM,IAAA;AAC3C,EAAA;AAC4C,EAAA;AACH,IAAA;AAChC,IAAA;AACyC,MAAA;AAC9C,MAAA;AACF,IAAA;AACF,EAAA;AAC4C,EAAA;AACL,IAAA;AACA,IAAA;AACb,IAAA;AACZ,MAAA;AACW,QAAA;AACnB,QAAA;AACA,QAAA;AACF,MAAA;AACF,IAAA;AAC6B,IAAA;AACtB,IAAA;AACwC,MAAA;AAC7C,MAAA;AACqC,uBAAA;AACrC,MAAA;AACF,IAAA;AACF,EAAA;AAEO,EAAA;AACT;AA0CuB;AACgB,EAAA;AAE6B,EAAA;AACjC,IAAA;AACM,IAAA;AAIG,IAAA;AACT,IAAA;AACtB,MAAA;AACc,QAAA;AACU,QAAA;AAC7B,QAAA;AACF,MAAA;AACF,IAAA;AAE6B,IAAA;AAEO,IAAA;AAExB,MAAA;AAEQ,MAAA;AACpB,IAAA;AAE0C,IAAA;AACH,IAAA;AAIrB,IAAA;AACT,MAAA;AACc,QAAA;AACnB,QAAA;AACA,QAAA;AACF,MAAA;AACF,IAAA;AAEoC,IAAA;AACI,IAAA;AAC/B,MAAA;AACc,QAAA;AACnB,QAAA;AACA,QAAA;AACF,MAAA;AACF,IAAA;AAEI,IAAA;AACsC,MAAA;AACjB,QAAA;AACJ,QAAA;AACH,QAAA;AACf,MAAA;AAEqC,MAAA;AACA,MAAA;AAEhB,MAAA;AACb,QAAA;AACc,UAAA;AACiB,UAAA;AACpC,UAAA;AACF,QAAA;AACF,MAAA;AAEmC,MAAA;AAC1B,QAAA;AACc,UAAA;AACa,UAAA;AAChC,UAAA;AACF,QAAA;AACF,MAAA;AAEsC,MAAA;AAEU,MAAA;AACZ,QAAA;AACR,QAAA;AACX,QAAA;AACmB,QAAA;AAClC,QAAA;AACe,QAAA;AACf,QAAA;AACA,QAAA;AACA,QAAA;AACF,MAAA;AAEqC,MAAA;AAEpB,MAAA;AAEH,IAAA;AACgB,MAAA;AACO,QAAA;AACrC,MAAA;AACwB,MAAA;AACc,QAAA;AACD,UAAA;AACnC,QAAA;AACgC,QAAA;AACK,UAAA;AACrC,QAAA;AACmC,QAAA;AACrC,MAAA;AACkC,MAAA;AACpC,IAAA;AACF,EAAA;AACF;AJ7B8C;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA","file":"/Users/vulakh/Desktop/Work/Tappify/extension-sdk/dist/chunk-RMUWRESK.cjs","sourcesContent":[null,"import type { TapErrorCode } from '../client/errors';\n\n/**\n * The codes `createTappifyHandler` answers with itself, keyed by a short name.\n *\n * @remarks\n * Every one of these comes from the SDK, not from your own handlers: a route or\n * handler that is not there, a token that is missing or does not verify, a missing\n * event id, a body that is not JSON or is over 1 MB, a webhook Tappify rejected,\n * and the catch-all for an error a handler let escape. Throw a `TapServerError`\n * with a code of your own for anything your server decides.\n */\nexport const SERVER_ERROR_CODES = {\n  ROUTE_UNKNOWN: 'TAP_ROUTE_UNKNOWN',\n  HANDLER_MISSING: 'TAP_HANDLER_MISSING',\n  INTERNAL_ERROR: 'TAP_INTERNAL_ERROR',\n  TOKEN_MISSING: 'TAP_TOKEN_MISSING',\n  TOKEN_INVALID: 'TAP_TOKEN_INVALID',\n  TOKEN_AUDIENCE: 'TAP_TOKEN_AUDIENCE',\n  EVENT_ID_MISSING: 'TAP_EVENT_ID_MISSING',\n  BODY_INVALID: 'TAP_BODY_INVALID',\n  BODY_TOO_LARGE: 'TAP_BODY_TOO_LARGE',\n  WEBHOOK_REJECTED: 'TAP_WEBHOOK_REJECTED',\n} as const satisfies Record<string, TapErrorCode>;\n\n/** Every code the handler answers with itself, as a union of its own values. */\nexport type TapServerErrorCode =\n  (typeof SERVER_ERROR_CODES)[keyof typeof SERVER_ERROR_CODES];\n","import {\n  createLocalJWKSet,\n  createRemoteJWKSet,\n  jwtVerify,\n  type JWTPayload,\n  type JWTVerifyGetKey,\n} from 'jose';\nimport { TapError } from '../client/errors';\nimport type { TappifyClaims, VerifyTokenOptions } from './types';\n\n/**\n * The key set `verifyTappifyToken` fetches when no `jwksUrl` or `jwks` is given.\n *\n * @remarks\n * This is production. Point `jwksUrl` at the environment that is calling you when\n * you run against another one, and pass `jwks` in tests.\n */\nexport const DEFAULT_JWKS_URL =\n  'https://api.tappify.ai/api/v1/extensions/.well-known/jwks.json';\n\nconst CLOCK_TOLERANCE_SECONDS = 60;\n\nconst remoteSets = new Map<string, JWTVerifyGetKey>();\n\nfunction keySet(options: VerifyTokenOptions): JWTVerifyGetKey {\n  if (options.jwks) return createLocalJWKSet(options.jwks);\n\n  const url = options.jwksUrl ?? DEFAULT_JWKS_URL;\n  const cached = remoteSets.get(url);\n  if (cached) return cached;\n\n  const created = createRemoteJWKSet(new URL(url));\n  remoteSets.set(url, created);\n  return created;\n}\n\nfunction readString(payload: JWTPayload, key: string): string | undefined {\n  const value = payload[key];\n  return typeof value === 'string' ? value : undefined;\n}\n\nfunction toClaims(payload: JWTPayload, audience: string): TappifyClaims {\n  const aud = payload.aud;\n  const matches =\n    aud === audience || (Array.isArray(aud) && aud.includes(audience));\n\n  if (!matches) {\n    throw new TapError(\n      'TAP_TOKEN_AUDIENCE',\n      `This install token was issued for a different extension. Create the handler with the same extensionId as the \"id\" in tappify.extension.json, so its audience is \"${audience}\".`,\n    );\n  }\n\n  const installId = readString(payload, 'installId');\n  const extensionId = readString(payload, 'extensionId');\n  const organizationId = readString(payload, 'organizationId');\n\n  if (\n    installId === undefined ||\n    extensionId === undefined ||\n    organizationId === undefined\n  ) {\n    throw new TapError(\n      'TAP_TOKEN_INVALID',\n      `The install token is missing the installId, extensionId or organizationId claim. Verify against ${DEFAULT_JWKS_URL} and do not reuse tokens across environments.`,\n    );\n  }\n\n  const scopes = payload.scopes;\n  const userId = readString(payload, 'userId');\n\n  const claims: TappifyClaims = {\n    iss: readString(payload, 'iss') ?? '',\n    aud: audience,\n    exp: typeof payload.exp === 'number' ? payload.exp : 0,\n    iat: typeof payload.iat === 'number' ? payload.iat : 0,\n    installId,\n    extensionId,\n    projectId: readString(payload, 'projectId') ?? null,\n    organizationId,\n    scopes: Array.isArray(scopes)\n      ? scopes.filter((scope): scope is string => typeof scope === 'string')\n      : [],\n  };\n\n  if (userId !== undefined) claims.userId = userId;\n  return claims;\n}\n\n/**\n * Verifies an install token against Tappify's signing keys and returns its\n * claims.\n *\n * @remarks\n * Checks the RS256 signature, the expiry with 60 seconds of clock tolerance, and\n * that the audience is `ext:<extensionId>`. Rejects with a `TapError` carrying\n * `TAP_TOKEN_INVALID` when the signature, the expiry or a required claim is wrong,\n * and `TAP_TOKEN_AUDIENCE` when the token was issued for another extension. A\n * remote key set is fetched once per url and cached for the process, so calling\n * this per request costs nothing after the first. `createTappifyHandler` already\n * verifies every route but health, so call this only outside the handler, or\n * where you accept a Tappify token on a route of your own.\n *\n * @example\n * ```ts\n * import { verifyTappifyToken } from '@tappify/extension-sdk/server';\n *\n * async function whoCalled(request: Request): Promise<string> {\n *   const token = (request.headers.get('authorization') ?? '').replace('Bearer ', '');\n *   const claims = await verifyTappifyToken(token, { extensionId: 'starter' });\n *   return claims.installId;\n * }\n * ```\n */\nexport async function verifyTappifyToken(\n  token: string,\n  options: VerifyTokenOptions,\n): Promise<TappifyClaims> {\n  const audience = `ext:${options.extensionId}`;\n\n  let payload: JWTPayload;\n  try {\n    const verified = await jwtVerify(token, keySet(options), {\n      algorithms: ['RS256'],\n      clockTolerance: CLOCK_TOLERANCE_SECONDS,\n    });\n    payload = verified.payload;\n  } catch {\n    throw new TapError(\n      'TAP_TOKEN_INVALID',\n      'The install token did not verify. Check that your server reads the Authorization header unchanged, that its clock is correct, and that jwksUrl points at the Tappify environment that called you.',\n    );\n  }\n\n  return toClaims(payload, audience);\n}\n","import type { TapServerErrorCode } from './codes';\n\nexport const INTERNAL_MESSAGE =\n  'The extension server failed to handle this call. Check your own logs; Tappify records the failure against your extension.';\n\nexport function json(data: unknown, status = 200): Response {\n  return new Response(JSON.stringify(data), {\n    status,\n    headers: { 'content-type': 'application/json' },\n  });\n}\n\nexport function wireError(\n  code: string,\n  message: string,\n  status: number,\n): Response {\n  return json({ error: { code, message } }, status);\n}\n\nexport function failure(\n  code: TapServerErrorCode,\n  message: string,\n  status: number,\n): Response {\n  return wireError(code, message, status);\n}\n\nexport function readUnknown(value: unknown, key: string): unknown {\n  if (typeof value !== 'object' || value === null) return undefined;\n  return (value as Record<string, unknown>)[key];\n}\n\nexport function readRecord(\n  value: unknown,\n  key: string,\n): Record<string, unknown> {\n  const nested = readUnknown(value, key);\n  return typeof nested === 'object' && nested !== null\n    ? (nested as Record<string, unknown>)\n    : {};\n}\n\nexport function readText(value: unknown, key: string): string | null {\n  const nested = readUnknown(value, key);\n  return typeof nested === 'string' ? nested : null;\n}\n","import { TapError, TapServerError } from '../client/errors';\nimport type { TapCredentialValues, TapDateRange } from '../client/types';\nimport { EVENTS } from '../manifest/constants';\nimport { SERVER_ERROR_CODES, type TapServerErrorCode } from './codes';\nimport { verifyTappifyToken } from './token';\nimport type {\n  ContextBlock,\n  MentionItems,\n  MetricsInput,\n  MetricsResponse,\n  TappifyCallContext,\n  TappifyClaims,\n  TappifyDocuments,\n  TappifyHandlerOptions,\n  TappifyHealth,\n  TappifyInstall,\n  TappifyRequest,\n  WorkOperation,\n} from './types';\nimport {\n  INTERNAL_MESSAGE,\n  failure,\n  json,\n  readRecord,\n  readText,\n  readUnknown,\n  wireError,\n} from './wire';\n\n/**\n * What `createTappifyHandler` returns: a `fetch` handler, which is what Cloudflare\n * Workers, Vercel and the two adapters all take.\n */\nexport type TappifyFetchHandler = (request: Request) => Promise<Response>;\n\nconst MAX_BODY_BYTES = 1_048_576;\n\nconst WORK_OPERATIONS: readonly WorkOperation[] = [\n  'list_containers',\n  'create',\n  'attach',\n  'comment',\n  'status',\n  'resolve',\n];\n\nconst TOKEN_FAILURES: readonly TapServerErrorCode[] = [\n  SERVER_ERROR_CODES.TOKEN_INVALID,\n  SERVER_ERROR_CODES.TOKEN_AUDIENCE,\n];\n\n/**\n * The token is signed by Tappify and the body is not, so the claims win wherever\n * they carry a value and the body only fills what the token leaves out.\n */\nfunction toInstall(payload: unknown, claims: TappifyClaims): TappifyInstall {\n  const raw = readRecord(payload, 'install');\n  return {\n    id: claims.installId,\n    extensionId: claims.extensionId,\n    projectId: claims.projectId ?? readText(raw, 'projectId'),\n    organizationId: claims.organizationId,\n  };\n}\n\nfunction toPlatform(value: string | null): TappifyCallContext['platform'] {\n  return value === 'ios' || value === 'android' ? value : 'all';\n}\n\nfunction toPreset(value: string | null): TapDateRange['preset'] {\n  return value === '7d' || value === '30d' || value === '90d'\n    ? value\n    : undefined;\n}\n\nfunction toContext(payload: unknown): TappifyCallContext {\n  const raw = readRecord(payload, 'context');\n  const filters = readRecord(raw, 'filters');\n  const rawRange = readRecord(filters, 'range');\n  const from = readText(raw, 'from') ?? readText(rawRange, 'from') ?? '';\n  const to = readText(raw, 'to') ?? readText(rawRange, 'to') ?? '';\n\n  const range: TapDateRange = {\n    from: readText(rawRange, 'from') ?? from,\n    to: readText(rawRange, 'to') ?? to,\n  };\n\n  const preset = toPreset(readText(rawRange, 'preset'));\n  if (preset !== undefined) range.preset = preset;\n\n  return {\n    projectId: readText(raw, 'projectId'),\n    platform: toPlatform(readText(raw, 'platform')),\n    from,\n    to,\n    filters: {\n      range,\n      platform: toPlatform(readText(filters, 'platform')),\n      country: readText(filters, 'country') ?? 'all',\n    },\n  };\n}\n\nfunction toCredentials(payload: unknown): TapCredentialValues {\n  const raw = readRecord(payload, 'credentials');\n  const credentials: Record<string, string> = {};\n  for (const [name, value] of Object.entries(raw)) {\n    if (typeof value === 'string') credentials[name] = value;\n  }\n  return credentials;\n}\n\nfunction tooLarge(): TapServerError {\n  return new TapServerError(\n    SERVER_ERROR_CODES.BODY_TOO_LARGE,\n    'A Tappify request body is at most 1 MB. Return a cursor or an id the host can follow instead of inlining the payload.',\n    413,\n  );\n}\n\nasync function readBody(request: Request): Promise<unknown> {\n  if (request.method === 'GET' || request.method === 'HEAD') return {};\n\n  const length = request.headers.get('content-length');\n  if (length !== null && Number(length) > MAX_BODY_BYTES) throw tooLarge();\n\n  const bytes = await request.arrayBuffer();\n  if (bytes.byteLength > MAX_BODY_BYTES) throw tooLarge();\n  if (bytes.byteLength === 0) return {};\n\n  const text = new TextDecoder().decode(bytes);\n  try {\n    return JSON.parse(text);\n  } catch {\n    throw new TapServerError(\n      SERVER_ERROR_CODES.BODY_INVALID,\n      'The request body was not JSON. Do not parse or re-encode the body before handing the Request to createTappifyHandler().',\n      400,\n    );\n  }\n}\n\n/**\n * The route table holds handlers whose declared input and event types the\n * manifest augmentations narrow. Method syntax keeps the parameter bivariant,\n * so a narrowed handler still fits a table the wire types as `unknown`.\n */\ntype AnyRouteHandler = {\n  route(request: TappifyRequest<unknown, unknown>): unknown;\n}['route'];\n\ninterface Route {\n  handler: AnyRouteHandler | undefined;\n  input: unknown;\n  event: unknown;\n  noContent: boolean;\n}\n\nfunction route(\n  handler: AnyRouteHandler | undefined,\n  input: unknown,\n  event?: unknown,\n  noContent = false,\n): Route {\n  return { handler, input, event, noContent };\n}\n\nfunction handlerFor(\n  map: Partial<Record<string, AnyRouteHandler>> | undefined,\n  name: string,\n): AnyRouteHandler | undefined {\n  return map?.[name];\n}\n\nfunction resolveRoute(\n  options: TappifyHandlerOptions,\n  method: string,\n  segments: string[],\n  url: URL,\n  payload: unknown,\n): Route | null {\n  const [head, name] = segments;\n  const bodyInput = readUnknown(payload, 'input') ?? {};\n\n  if (head === 'metrics' && method === 'POST') {\n    return route(options.metrics, bodyInput);\n  }\n  if (head === 'tools' && method === 'POST' && name !== undefined) {\n    return route(handlerFor(options.tools, name), bodyInput);\n  }\n  if (head === 'mentions' && method === 'GET' && name !== undefined) {\n    return route(handlerFor(options.mentions, name), {\n      q: url.searchParams.get('q') ?? '',\n    });\n  }\n  if (head === 'actions' && method === 'POST' && name !== undefined) {\n    return route(handlerFor(options.actions, name), bodyInput);\n  }\n  if (head === 'procedures' && method === 'POST' && name !== undefined) {\n    return route(handlerFor(options.procedures, name), bodyInput);\n  }\n  if (head === 'context' && method === 'GET' && name !== undefined) {\n    return route(handlerFor(options.context, name), undefined);\n  }\n  if (head === 'work' && method === 'POST' && name !== undefined) {\n    const operation = WORK_OPERATIONS.find(candidate => candidate === name);\n    return route(\n      operation === undefined ? undefined : options.work?.[operation],\n      bodyInput,\n    );\n  }\n  if (head === 'events' && method === 'POST') {\n    const envelope = readRecord(payload, 'event');\n    const eventName = readText(envelope, 'name');\n    if (eventName === null) {\n      throw new TapServerError(\n        SERVER_ERROR_CODES.BODY_INVALID,\n        'The events body has no event.name. Post the envelope Tappify sends unchanged, with the event name under \"event\".',\n        400,\n      );\n    }\n    const declared = EVENTS.find(candidate => candidate === eventName);\n    return route(\n      declared === undefined ? undefined : options.events?.[declared],\n      undefined,\n      readUnknown(envelope, 'payload') ?? {},\n      true,\n    );\n  }\n\n  return null;\n}\n\n/**\n * Builds the one `fetch` handler that answers every route Tappify calls on your\n * server.\n *\n * @remarks\n * It routes the paths under `/tappify`, minus `basePath` when your framework mounts\n * it under a prefix, and hands each matched handler a `TappifyRequest`. Every\n * route but `GET /tappify/health` needs a bearer install token, which it verifies\n * with `verifyTappifyToken`, and an `X-Tappify-Event-Id` header; a missing token is\n * 401 `TAP_TOKEN_MISSING`, a missing id 400 `TAP_EVENT_ID_MISSING`, an unknown path\n * 404 `TAP_ROUTE_UNKNOWN` and a declared name with no handler 404\n * `TAP_HANDLER_MISSING`. A body that is not JSON is 400 `TAP_BODY_INVALID` and one\n * over 1 MB is 413 `TAP_BODY_TOO_LARGE`. A `TapServerError` a handler throws is\n * answered with its own code and status, and a `TapError` other than the two token\n * failures with its own code and 400; anything else becomes 500\n * `TAP_INTERNAL_ERROR` with a fixed message, so an internal failure never reaches\n * the owner. An events route answers 204 with no body, and every other route\n * answers the handler's return value as JSON. Export the options object as well as\n * the handler: `createTestClient` takes the options.\n *\n * @example\n * ```ts\n * import {\n *   createTappifyHandler,\n *   type TappifyHandlerOptions,\n * } from '@tappify/extension-sdk/server';\n *\n * const handlerOptions: TappifyHandlerOptions = {\n *   extensionId: 'starter',\n *   health: () => ({ ok: true, version: '0.1.0' }),\n *   procedures: {\n *     getSummary: () => ({ installs: 1260, delta: 0.087, topKeyword: 'photo editor' }),\n *   },\n * };\n *\n * const handler = createTappifyHandler(handlerOptions);\n * ```\n */\nexport function createTappifyHandler(\n  options: TappifyHandlerOptions,\n): TappifyFetchHandler {\n  const basePath = options.basePath ?? '';\n\n  return async function handle(request: Request): Promise<Response> {\n    const url = new URL(request.url);\n    const path = url.pathname.startsWith(basePath)\n      ? url.pathname.slice(basePath.length)\n      : url.pathname;\n\n    const segments = path.split('/').filter(segment => segment !== '');\n    if (segments[0] !== 'tappify') {\n      return failure(\n        SERVER_ERROR_CODES.ROUTE_UNKNOWN,\n        `Nothing is mounted at ${path}. Tappify calls paths under /tappify; set basePath if your framework mounts the handler under a prefix.`,\n        404,\n      );\n    }\n\n    const rest = segments.slice(1);\n\n    if (rest[0] === 'health' && request.method === 'GET') {\n      const health: TappifyHealth = options.health\n        ? await options.health()\n        : { ok: true };\n      return json(health);\n    }\n\n    const authorization = request.headers.get('authorization') ?? '';\n    const token = authorization.startsWith('Bearer ')\n      ? authorization.slice('Bearer '.length)\n      : '';\n\n    if (token === '') {\n      return failure(\n        SERVER_ERROR_CODES.TOKEN_MISSING,\n        'This route needs an install token. Tappify sends it as Authorization: Bearer <token>; forward the header unchanged from your framework.',\n        401,\n      );\n    }\n\n    const eventId = request.headers.get('x-tappify-event-id');\n    if (eventId === null || eventId === '') {\n      return failure(\n        SERVER_ERROR_CODES.EVENT_ID_MISSING,\n        'Every Tappify call carries X-Tappify-Event-Id for idempotency. Forward the header unchanged, and use it as the key when you deduplicate.',\n        400,\n      );\n    }\n\n    try {\n      const claims = await verifyTappifyToken(token, {\n        extensionId: options.extensionId,\n        jwksUrl: options.jwksUrl,\n        jwks: options.jwks,\n      });\n\n      const payload = await readBody(request);\n      const matched = resolveRoute(options, request.method, rest, url, payload);\n\n      if (matched === null) {\n        return failure(\n          SERVER_ERROR_CODES.ROUTE_UNKNOWN,\n          `Tappify has no ${request.method} ${path} route. The paths it calls are listed under \"Vendor server endpoints\" in the reference; check the method and the spelling.`,\n          404,\n        );\n      }\n\n      if (matched.handler === undefined) {\n        return failure(\n          SERVER_ERROR_CODES.HANDLER_MISSING,\n          `No handler is registered for ${request.method} ${path}. Add it to createTappifyHandler(), or remove the contribution from tappify.extension.json.`,\n          404,\n        );\n      }\n\n      const documents = readRecord(payload, 'documents');\n\n      const typed: TappifyRequest<unknown, unknown> = {\n        install: toInstall(payload, claims),\n        context: toContext(payload),\n        input: matched.input,\n        credentials: toCredentials(payload),\n        documents: documents as TappifyDocuments,\n        event: matched.event,\n        eventId,\n        claims,\n        request,\n      };\n\n      const result = await matched.handler(typed);\n      return matched.noContent\n        ? new Response(null, { status: 204 })\n        : json(result);\n    } catch (error) {\n      if (TapServerError.is(error)) {\n        return wireError(error.code, error.message, error.status ?? 400);\n      }\n      if (TapError.is(error)) {\n        const tokenFailure = TOKEN_FAILURES.find(\n          candidate => candidate === error.code,\n        );\n        if (tokenFailure !== undefined) {\n          return failure(tokenFailure, error.message, 401);\n        }\n        return wireError(error.code, error.message, 400);\n      }\n      return failure(SERVER_ERROR_CODES.INTERNAL_ERROR, INTERNAL_MESSAGE, 500);\n    }\n  };\n}\n\nexport type {\n  ContextBlock,\n  MentionItems,\n  MetricsInput,\n  MetricsResponse,\n  TappifyClaims,\n};\n"]}