@tickernelz/paperclip-pro-shared 2026.925.0

package/dist/external-objects-server.js

@@ -0,0 +1,176 @@
+import { createHash } from "node:crypto";
+import { parseIssueReferenceHref } from "./issue-references.js";
+const EXTERNAL_URL_TOKEN_RE = /https?:\/\/[^\s<>()]+/gi;
+function preserveNewlinesAsWhitespace(value) {
+    return value.replace(/[^\n]/g, " ");
+}
+function stripMarkdownCode(markdown) {
+    if (!markdown)
+        return "";
+    let output = "";
+    let index = 0;
+    while (index < markdown.length) {
+        const remaining = markdown.slice(index);
+        const fenceMatch = /^(?:```+|~~~+)/.exec(remaining);
+        const atLineStart = index === 0 || markdown[index - 1] === "\n";
+        if (atLineStart && fenceMatch) {
+            const fence = fenceMatch[0];
+            const blockStart = index;
+            index += fence.length;
+            while (index < markdown.length && markdown[index] !== "\n")
+                index += 1;
+            if (index < markdown.length)
+                index += 1;
+            while (index < markdown.length) {
+                const lineStart = index === 0 || markdown[index - 1] === "\n";
+                if (lineStart && markdown.startsWith(fence, index)) {
+                    index += fence.length;
+                    while (index < markdown.length && markdown[index] !== "\n")
+                        index += 1;
+                    if (index < markdown.length)
+                        index += 1;
+                    break;
+                }
+                index += 1;
+            }
+            output += preserveNewlinesAsWhitespace(markdown.slice(blockStart, index));
+            continue;
+        }
+        if (markdown[index] === "`") {
+            let tickCount = 1;
+            while (index + tickCount < markdown.length && markdown[index + tickCount] === "`") {
+                tickCount += 1;
+            }
+            const fence = "`".repeat(tickCount);
+            const inlineStart = index;
+            index += tickCount;
+            const closeIndex = markdown.indexOf(fence, index);
+            if (closeIndex === -1) {
+                output += markdown.slice(inlineStart, inlineStart + tickCount);
+                index = inlineStart + tickCount;
+                continue;
+            }
+            index = closeIndex + tickCount;
+            output += preserveNewlinesAsWhitespace(markdown.slice(inlineStart, index));
+            continue;
+        }
+        output += markdown[index];
+        index += 1;
+    }
+    return output;
+}
+function trimTrailingPunctuation(token) {
+    let trimmed = token;
+    while (trimmed.length > 0) {
+        const last = trimmed[trimmed.length - 1];
+        if (!".,!?;:".includes(last) && last !== ")" && last !== "]")
+            break;
+        if ((last === ")" && (trimmed.match(/\(/g)?.length ?? 0) >= (trimmed.match(/\)/g)?.length ?? 0))
+            || (last === "]" && (trimmed.match(/\[/g)?.length ?? 0) >= (trimmed.match(/\]/g)?.length ?? 0))) {
+            break;
+        }
+        trimmed = trimmed.slice(0, -1);
+    }
+    return trimmed;
+}
+function sha256Hex(value) {
+    return createHash("sha256").update(value).digest("hex");
+}
+function stableStringify(value) {
+    if (Array.isArray(value)) {
+        return `[${value.map((entry) => stableStringify(entry)).join(",")}]`;
+    }
+    if (value && typeof value === "object") {
+        const record = value;
+        return `{${Object.keys(record)
+            .sort()
+            .map((key) => `${JSON.stringify(key)}:${stableStringify(record[key])}`)
+            .join(",")}}`;
+    }
+    return JSON.stringify(value);
+}
+function normalizePathname(pathname) {
+    return pathname || "/";
+}
+export function findExternalObjectUrlMatches(markdown) {
+    if (!markdown)
+        return [];
+    const scrubbed = stripMarkdownCode(markdown);
+    const matches = [];
+    let match;
+    const re = new RegExp(EXTERNAL_URL_TOKEN_RE);
+    while ((match = re.exec(scrubbed)) !== null) {
+        const matchedText = trimTrailingPunctuation(match[0]);
+        if (!matchedText || parseIssueReferenceHref(matchedText))
+            continue;
+        matches.push({
+            index: match.index,
+            length: matchedText.length,
+            matchedText,
+        });
+    }
+    return matches;
+}
+export function canonicalizeExternalObjectUrl(value, options = {}) {
+    let url;
+    try {
+        url = new URL(value.trim());
+    }
+    catch {
+        return null;
+    }
+    if (url.protocol !== "http:" && url.protocol !== "https:")
+        return null;
+    if (url.username || url.password)
+        return null;
+    const scheme = url.protocol === "https:" ? "https" : "http";
+    const path = normalizePathname(url.pathname);
+    const sanitizedCanonicalUrl = `${scheme}://${url.host.toLowerCase()}${path}`;
+    const identityQueryParams = new Set(options.identityQueryParams ?? []);
+    const queryParamHashes = {};
+    for (const key of [...identityQueryParams].sort()) {
+        const values = url.searchParams.getAll(key);
+        if (values.length === 0)
+            continue;
+        queryParamHashes[key] = sha256Hex(values.join("\u0000"));
+    }
+    const canonicalIdentity = {
+        scheme,
+        host: url.host.toLowerCase(),
+        path,
+        ...(Object.keys(queryParamHashes).length > 0 ? { queryParamHashes } : {}),
+    };
+    return {
+        sanitizedCanonicalUrl,
+        sanitizedDisplayUrl: sanitizedCanonicalUrl,
+        canonicalIdentity,
+        canonicalIdentityHash: sha256Hex(stableStringify(canonicalIdentity)),
+        redactedMatchedText: sanitizedCanonicalUrl,
+    };
+}
+export function extractExternalObjectCanonicalUrls(markdown, options = {}) {
+    const seen = new Set();
+    const ordered = [];
+    for (const match of findExternalObjectUrlMatches(markdown)) {
+        const canonical = canonicalizeExternalObjectUrl(match.matchedText, options);
+        if (!canonical || seen.has(canonical.canonicalIdentityHash))
+            continue;
+        seen.add(canonical.canonicalIdentityHash);
+        ordered.push(canonical);
+    }
+    return ordered;
+}
+export function buildExternalObjectScopedIdentityKey(args) {
+    return [args.companyId, args.providerKey, args.objectType, args.canonicalIdentityHash].join(":");
+}
+export function buildExternalObjectMentionSourceKey(source) {
+    return [
+        source.companyId,
+        source.sourceIssueId,
+        source.sourceKind,
+        source.sourceRecordId ?? "",
+        source.documentKey ?? "",
+        source.propertyKey ?? "",
+    ].join(":");
+}
+//# sourceMappingURL=external-objects-server.js.map

package/dist/external-objects-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-objects-server.js","sourceRoot":"","sources":["../src/external-objects-server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAShE,MAAM,qBAAqB,GAAG,yBAAyB,CAAC;AAExD,SAAS,4BAA4B,CAAC,KAAa;IACjD,OAAO,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;AACtC,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB;IACzC,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,CAAC;IAEzB,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,KAAK,GAAG,CAAC,CAAC;IAEd,OAAO,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC/B,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,UAAU,GAAG,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACpD,MAAM,WAAW,GAAG,KAAK,KAAK,CAAC,IAAI,QAAQ,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC;QAEhE,IAAI,WAAW,IAAI,UAAU,EAAE,CAAC;YAC9B,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAE,CAAC;YAC7B,MAAM,UAAU,GAAG,KAAK,CAAC;YACzB,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;YACtB,OAAO,KAAK,GAAG,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,IAAI;gBAAE,KAAK,IAAI,CAAC,CAAC;YACvE,IAAI,KAAK,GAAG,QAAQ,CAAC,MAAM;gBAAE,KAAK,IAAI,CAAC,CAAC;YAExC,OAAO,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC;gBAC/B,MAAM,SAAS,GAAG,KAAK,KAAK,CAAC,IAAI,QAAQ,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC;gBAC9D,IAAI,SAAS,IAAI,QAAQ,CAAC,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,CAAC;oBACnD,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;oBACtB,OAAO,KAAK,GAAG,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,IAAI;wBAAE,KAAK,IAAI,CAAC,CAAC;oBACvE,IAAI,KAAK,GAAG,QAAQ,CAAC,MAAM;wBAAE,KAAK,IAAI,CAAC,CAAC;oBACxC,MAAM;gBACR,CAAC;gBACD,KAAK,IAAI,CAAC,CAAC;YACb,CAAC;YAED,MAAM,IAAI,4BAA4B,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;YAC1E,SAAS;QACX,CAAC;QAED,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC;YAC5B,IAAI,SAAS,GAAG,CAAC,CAAC;YAClB,OAAO,KAAK,GAAG,SAAS,GAAG,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,KAAK,GAAG,SAAS,CAAC,KAAK,GAAG,EAAE,CAAC;gBAClF,SAAS,IAAI,CAAC,CAAC;YACjB,CAAC;YACD,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACpC,MAAM,WAAW,GAAG,KAAK,CAAC;YAC1B,KAAK,IAAI,SAAS,CAAC;YACnB,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YAClD,IAAI,UAAU,KAAK,CAAC,CAAC,EAAE,CAAC;gBACtB,MAAM,IAAI,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,WAAW,GAAG,SAAS,CAAC,CAAC;gBAC/D,KAAK,GAAG,WAAW,GAAG,SAAS,CAAC;gBAChC,SAAS;YACX,CAAC;YACD,KAAK,GAAG,UAAU,GAAG,SAAS,CAAC;YAC/B,MAAM,IAAI,4BAA4B,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,CAAC,CAAC,CAAC;YAC3E,SAAS;QACX,CAAC;QAED,MAAM,IAAI,QAAQ,CAAC,KAAK,CAAE,CAAC;QAC3B,KAAK,IAAI,CAAC,CAAC;IACb,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAa;IAC5C,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;QAC1C,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG;YAAE,MAAM;QAEpE,IACE,CAAC,IAAI,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC,CAAC;eACzF,CAAC,IAAI,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC,CAAC,EAC/F,CAAC;YACD,MAAM;QACR,CAAC;QACD,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,SAAS,CAAC,KAAa;IAC9B,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IACvE,CAAC;IACD,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,KAAgC,CAAC;QAChD,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;aAC3B,IAAI,EAAE;aACN,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;aACtE,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAClB,CAAC;IACD,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED,SAAS,iBAAiB,CAAC,QAAgB;IACzC,OAAO,QAAQ,IAAI,GAAG,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,QAAgB;IAC3D,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,CAAC;IAEzB,MAAM,QAAQ,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,OAAO,GAA6B,EAAE,CAAC;IAC7C,IAAI,KAA6B,CAAC;IAClC,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,qBAAqB,CAAC,CAAC;IAE7C,OAAO,CAAC,KAAK,GAAG,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;QAC5C,MAAM,WAAW,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACtD,IAAI,CAAC,WAAW,IAAI,uBAAuB,CAAC,WAAW,CAAC;YAAE,SAAS;QAEnE,OAAO,CAAC,IAAI,CAAC;YACX,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,MAAM,EAAE,WAAW,CAAC,MAAM;YAC1B,WAAW;SACZ,CAAC,CAAC;IACL,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,6BAA6B,CAC3C,KAAa,EACb,OAAO,GAA6C,EAAE;IAEtD,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACvE,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAE9C,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;IAC5D,MAAM,IAAI,GAAG,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,qBAAqB,GAAG,GAAG,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,IAAI,EAAE,CAAC;IAC7E,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC;IACvE,MAAM,gBAAgB,GAA2B,EAAE,CAAC;IAEpD,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,mBAAmB,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QAClD,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC5C,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAClC,gBAAgB,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,iBAAiB,GAAoC;QACzD,MAAM;QACN,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE;QAC5B,IAAI;QACJ,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1E,CAAC;IAEF,OAAO;QACL,qBAAqB;QACrB,mBAAmB,EAAE,qBAAqB;QAC1C,iBAAiB;QACjB,qBAAqB,EAAE,SAAS,CAAC,eAAe,CAAC,iBAAiB,CAAC,CAAC;QACpE,mBAAmB,EAAE,qBAAqB;KAC3C,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,kCAAkC,CAChD,QAAgB,EAChB,OAAO,GAA6C,EAAE;IAEtD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,OAAO,GAAiC,EAAE,CAAC;IAEjD,KAAK,MAAM,KAAK,IAAI,4BAA4B,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3D,MAAM,SAAS,GAAG,6BAA6B,CAAC,KAAK,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAC5E,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,qBAAqB,CAAC;YAAE,SAAS;QACtE,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,qBAAqB,CAAC,CAAC;QAC1C,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC1B,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,MAAM,UAAU,oCAAoC,CAAC,IAKpD;IACC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,qBAAqB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACnG,CAAC;AAED,MAAM,UAAU,mCAAmC,CAAC,MAGpB;IAC9B,OAAO;QACL,MAAM,CAAC,SAAS;QAChB,MAAM,CAAC,aAAa;QACpB,MAAM,CAAC,UAAU;QACjB,MAAM,CAAC,cAAc,IAAI,EAAE;QAC3B,MAAM,CAAC,WAAW,IAAI,EAAE;QACxB,MAAM,CAAC,WAAW,IAAI,EAAE;KACzB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC"}

package/dist/external-objects.d.ts

@@ -0,0 +1,32 @@
+import type { ExternalObjectMentionSourceKind } from "./constants.js";
+export interface ExternalObjectUrlMatch {
+    index: number;
+    length: number;
+    matchedText: string;
+}
+export interface ExternalObjectCanonicalIdentity {
+    scheme: "http" | "https";
+    host: string;
+    path: string;
+    queryParamHashes?: Record<string, string>;
+}
+export interface ExternalObjectUrlCanonicalizationOptions {
+    identityQueryParams?: readonly string[];
+}
+export interface ExternalObjectCanonicalUrl {
+    sanitizedCanonicalUrl: string;
+    sanitizedDisplayUrl: string;
+    canonicalIdentity: ExternalObjectCanonicalIdentity;
+    canonicalIdentityHash: string;
+    redactedMatchedText: string;
+}
+export interface ExternalObjectMentionSource {
+    companyId?: string;
+    sourceIssueId?: string;
+    sourceKind: ExternalObjectMentionSourceKind;
+    sourceRecordId?: string | null;
+    documentKey?: string | null;
+    propertyKey?: string | null;
+}
+export declare function formatExternalObjectMentionSourceLabel(source: ExternalObjectMentionSource): string;
+//# sourceMappingURL=external-objects.d.ts.map

package/dist/external-objects.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-objects.d.ts","sourceRoot":"","sources":["../src/external-objects.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,gBAAgB,CAAC;AAEtE,MAAM,WAAW,sBAAsB;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,+BAA+B;IAC9C,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC3C;AAED,MAAM,WAAW,wCAAwC;IACvD,mBAAmB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACzC;AAED,MAAM,WAAW,0BAA0B;IACzC,qBAAqB,EAAE,MAAM,CAAC;IAC9B,mBAAmB,EAAE,MAAM,CAAC;IAC5B,iBAAiB,EAAE,+BAA+B,CAAC;IACnD,qBAAqB,EAAE,MAAM,CAAC;IAC9B,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,2BAA2B;IAC1C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,UAAU,EAAE,+BAA+B,CAAC;IAC5C,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED,wBAAgB,sCAAsC,CAAC,MAAM,EAAE,2BAA2B,GAAG,MAAM,CAelG"}

package/dist/external-objects.js

@@ -0,0 +1,17 @@
+export function formatExternalObjectMentionSourceLabel(source) {
+    switch (source.sourceKind) {
+        case "title":
+            return "Title";
+        case "description":
+            return "Description";
+        case "comment":
+            return "Comment";
+        case "document":
+            return source.documentKey ? `Document: ${source.documentKey}` : "Document";
+        case "property":
+            return source.propertyKey ? `Property: ${source.propertyKey}` : "Property";
+        case "plugin":
+            return "Plugin";
+    }
+}
+//# sourceMappingURL=external-objects.js.map

package/dist/external-objects.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-objects.js","sourceRoot":"","sources":["../src/external-objects.ts"],"names":[],"mappings":"AAoCA,MAAM,UAAU,sCAAsC,CAAC,MAAmC;IACxF,QAAQ,MAAM,CAAC,UAAU,EAAE,CAAC;QAC1B,KAAK,OAAO;YACV,OAAO,OAAO,CAAC;QACjB,KAAK,aAAa;YAChB,OAAO,aAAa,CAAC;QACvB,KAAK,SAAS;YACZ,OAAO,SAAS,CAAC;QACnB,KAAK,UAAU;YACb,OAAO,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;QAC7E,KAAK,UAAU;YACb,OAAO,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,aAAa,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC;QAC7E,KAAK,QAAQ;YACX,OAAO,QAAQ,CAAC;IACpB,CAAC;AACH,CAAC"}

package/dist/external-objects.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=external-objects.test.d.ts.map

package/dist/external-objects.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-objects.test.d.ts","sourceRoot":"","sources":["../src/external-objects.test.ts"],"names":[],"mappings":""}

package/dist/external-objects.test.js

@@ -0,0 +1,93 @@
+import { describe, expect, it } from "vitest";
+import { formatExternalObjectMentionSourceLabel } from "./external-objects.js";
+import { buildExternalObjectMentionSourceKey, buildExternalObjectScopedIdentityKey, canonicalizeExternalObjectUrl, extractExternalObjectCanonicalUrls, findExternalObjectUrlMatches, } from "./external-objects-server.js";
+import { externalObjectProviderKeySchema, externalObjectTypeSchema } from "./validators/external-object.js";
+describe("external object references", () => {
+    it("extracts external urls without changing internal issue reference behavior", () => {
+        expect(findExternalObjectUrlMatches("See PAP-1, /issues/PAP-2, https://paperclip.ing/PAP/issues/PAP-3, and https://github.com/acme/app/pull/4.")).toEqual([{ index: 70, length: 34, matchedText: "https://github.com/acme/app/pull/4" }]);
+    });
+    it("ignores urls inside inline and fenced code", () => {
+        const markdown = [
+            "Use https://github.com/acme/app/pull/1 here.",
+            "`https://github.com/acme/app/pull/2` should not count.",
+            "```",
+            "https://github.com/acme/app/pull/3",
+            "```",
+        ].join("\n");
+        expect(findExternalObjectUrlMatches(markdown).map((match) => match.matchedText)).toEqual([
+            "https://github.com/acme/app/pull/1",
+        ]);
+    });
+    it("canonicalizes urls by stripping query and fragment by default", () => {
+        expect(canonicalizeExternalObjectUrl("HTTPS://GitHub.com/acme/app/pull/1?token=secret#discussion")).toMatchObject({
+            sanitizedCanonicalUrl: "https://github.com/acme/app/pull/1",
+            sanitizedDisplayUrl: "https://github.com/acme/app/pull/1",
+            redactedMatchedText: "https://github.com/acme/app/pull/1",
+            canonicalIdentity: {
+                scheme: "https",
+                host: "github.com",
+                path: "/acme/app/pull/1",
+            },
+        });
+    });
+    it("rejects urls with userinfo", () => {
+        expect(canonicalizeExternalObjectUrl("https://token:secret@github.com/acme/app/pull/1")).toBeNull();
+    });
+    it("hashes provider-required query identity values without storing plaintext", () => {
+        const first = canonicalizeExternalObjectUrl("https://deploy.test/run?id=secret-run&token=drop", {
+            identityQueryParams: ["id"],
+        });
+        const second = canonicalizeExternalObjectUrl("https://deploy.test/run?id=secret-run&token=other", {
+            identityQueryParams: ["id"],
+        });
+        expect(first?.sanitizedCanonicalUrl).toBe("https://deploy.test/run");
+        expect(first?.canonicalIdentity.queryParamHashes?.id).toHaveLength(64);
+        expect(first?.canonicalIdentity.queryParamHashes?.id).not.toContain("secret-run");
+        expect(second?.canonicalIdentityHash).toBe(first?.canonicalIdentityHash);
+    });
+    it("dedupes extracted canonical urls by canonical identity", () => {
+        expect(extractExternalObjectCanonicalUrls("https://github.com/acme/app/pull/1?token=a and https://github.com/acme/app/pull/1#discussion").map((entry) => entry.sanitizedCanonicalUrl)).toEqual(["https://github.com/acme/app/pull/1"]);
+    });
+    it("includes company id in scoped object identity keys", () => {
+        const base = {
+            providerKey: "github",
+            objectType: "pull_request",
+            canonicalIdentityHash: "hash",
+        };
+        expect(buildExternalObjectScopedIdentityKey({ companyId: "company-a", ...base })).not.toBe(buildExternalObjectScopedIdentityKey({ companyId: "company-b", ...base }));
+    });
+    it("builds source keys for replacing mentions from the same source", () => {
+        const oldMentionSource = buildExternalObjectMentionSourceKey({
+            companyId: "company-a",
+            sourceIssueId: "issue-1",
+            sourceKind: "comment",
+            sourceRecordId: "comment-1",
+        });
+        const newMentionSource = buildExternalObjectMentionSourceKey({
+            companyId: "company-a",
+            sourceIssueId: "issue-1",
+            sourceKind: "comment",
+            sourceRecordId: "comment-1",
+        });
+        const anotherCompanySource = buildExternalObjectMentionSourceKey({
+            companyId: "company-b",
+            sourceIssueId: "issue-1",
+            sourceKind: "comment",
+            sourceRecordId: "comment-1",
+        });
+        expect(newMentionSource).toBe(oldMentionSource);
+        expect(anotherCompanySource).not.toBe(oldMentionSource);
+    });
+    it("formats stable source labels", () => {
+        expect(formatExternalObjectMentionSourceLabel({ sourceKind: "title" })).toBe("Title");
+        expect(formatExternalObjectMentionSourceLabel({ sourceKind: "document", documentKey: "plan" })).toBe("Document: plan");
+        expect(formatExternalObjectMentionSourceLabel({ sourceKind: "property", propertyKey: "pr" })).toBe("Property: pr");
+    });
+    it("validates provider keys and object types", () => {
+        expect(externalObjectProviderKeySchema.parse("github.enterprise")).toBe("github.enterprise");
+        expect(externalObjectTypeSchema.parse("pull_request")).toBe("pull_request");
+        expect(externalObjectProviderKeySchema.safeParse("GitHub").success).toBe(false);
+        expect(externalObjectTypeSchema.safeParse("pull-request").success).toBe(false);
+    });
+});
+//# sourceMappingURL=external-objects.test.js.map

package/dist/external-objects.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-objects.test.js","sourceRoot":"","sources":["../src/external-objects.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,sCAAsC,EAAE,MAAM,uBAAuB,CAAC;AAC/E,OAAO,EACL,mCAAmC,EACnC,oCAAoC,EACpC,6BAA6B,EAC7B,kCAAkC,EAClC,4BAA4B,GAC7B,MAAM,8BAA8B,CAAC;AACtC,OAAO,EAAE,+BAA+B,EAAE,wBAAwB,EAAE,MAAM,iCAAiC,CAAC;AAE5G,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;IAC1C,EAAE,CAAC,2EAA2E,EAAE,GAAG,EAAE;QACnF,MAAM,CACJ,4BAA4B,CAC1B,2GAA2G,CAC5G,CACF,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,WAAW,EAAE,oCAAoC,EAAE,CAAC,CAAC,CAAC;IAC5F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,QAAQ,GAAG;YACf,8CAA8C;YAC9C,wDAAwD;YACxD,KAAK;YACL,oCAAoC;YACpC,KAAK;SACN,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEb,MAAM,CAAC,4BAA4B,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC;YACvF,oCAAoC;SACrC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,CAAC,6BAA6B,CAAC,4DAA4D,CAAC,CAAC,CAAC,aAAa,CAAC;YAChH,qBAAqB,EAAE,oCAAoC;YAC3D,mBAAmB,EAAE,oCAAoC;YACzD,mBAAmB,EAAE,oCAAoC;YACzD,iBAAiB,EAAE;gBACjB,MAAM,EAAE,OAAO;gBACf,IAAI,EAAE,YAAY;gBAClB,IAAI,EAAE,kBAAkB;aACzB;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,6BAA6B,CAAC,iDAAiD,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACtG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0EAA0E,EAAE,GAAG,EAAE;QAClF,MAAM,KAAK,GAAG,6BAA6B,CAAC,kDAAkD,EAAE;YAC9F,mBAAmB,EAAE,CAAC,IAAI,CAAC;SAC5B,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,6BAA6B,CAAC,mDAAmD,EAAE;YAChG,mBAAmB,EAAE,CAAC,IAAI,CAAC;SAC5B,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;QACrE,MAAM,CAAC,KAAK,EAAE,iBAAiB,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QACvE,MAAM,CAAC,KAAK,EAAE,iBAAiB,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QAClF,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,CACJ,kCAAkC,CAChC,8FAA8F,CAC/F,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAC9C,CAAC,OAAO,CAAC,CAAC,oCAAoC,CAAC,CAAC,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,IAAI,GAAG;YACX,WAAW,EAAE,QAAQ;YACrB,UAAU,EAAE,cAAc;YAC1B,qBAAqB,EAAE,MAAM;SAC9B,CAAC;QAEF,MAAM,CAAC,oCAAoC,CAAC,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CACxF,oCAAoC,CAAC,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,IAAI,EAAE,CAAC,CAC1E,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,MAAM,gBAAgB,GAAG,mCAAmC,CAAC;YAC3D,SAAS,EAAE,WAAW;YACtB,aAAa,EAAE,SAAS;YACxB,UAAU,EAAE,SAAS;YACrB,cAAc,EAAE,WAAW;SAC5B,CAAC,CAAC;QACH,MAAM,gBAAgB,GAAG,mCAAmC,CAAC;YAC3D,SAAS,EAAE,WAAW;YACtB,aAAa,EAAE,SAAS;YACxB,UAAU,EAAE,SAAS;YACrB,cAAc,EAAE,WAAW;SAC5B,CAAC,CAAC;QACH,MAAM,oBAAoB,GAAG,mCAAmC,CAAC;YAC/D,SAAS,EAAE,WAAW;YACtB,aAAa,EAAE,SAAS;YACxB,UAAU,EAAE,SAAS;YACrB,cAAc,EAAE,WAAW;SAC5B,CAAC,CAAC;QAEH,MAAM,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QAChD,MAAM,CAAC,oBAAoB,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,CAAC,sCAAsC,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtF,MAAM,CAAC,sCAAsC,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAClG,gBAAgB,CACjB,CAAC;QACF,MAAM,CAAC,sCAAsC,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAChG,cAAc,CACf,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,CAAC,+BAA+B,CAAC,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC7F,MAAM,CAAC,wBAAwB,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC5E,MAAM,CAAC,+BAA+B,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChF,MAAM,CAAC,wBAAwB,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/feature-catalog.d.ts

@@ -0,0 +1,59 @@
+import { z } from "zod";
+import { instanceExperimentalSettingsSchema } from "./validators/instance.js";
+/**
+ * Feature catalog for cloud-managed instances.
+ *
+ * The instance-settings zod schema is the feature manifest; this module adds
+ * only metadata about the flags the schema already declares. Keys are derived
+ * from the schema type, so adding, removing, or renaming a boolean flag in
+ * `instanceExperimentalSettingsSchema` without updating the metadata map is a
+ * compile error (and vice versa).
+ *
+ * Tiers:
+ * - `preference`: tenant-controllable taste setting; the cloud harness does
+ *   not manage it.
+ * - `managed`: the cloud harness may set this per fleet/stack via
+ *   `PAPERCLIP_MANAGED_CONFIG`.
+ * - `floor`: pinned by code on managed instances; no flag value may widen it.
+ */
+export declare const FEATURE_TIERS: readonly ["preference", "managed", "floor"];
+export type FeatureTier = (typeof FEATURE_TIERS)[number];
+type ExperimentalSettings = z.infer<typeof instanceExperimentalSettingsSchema>;
+/**
+ * The boolean flag keys of the experimental settings schema. Non-flag keys
+ * (activation timestamps, numeric tuning values) are excluded.
+ */
+export type InstanceFeatureKey = {
+    [K in keyof ExperimentalSettings]: ExperimentalSettings[K] extends boolean ? K : never;
+}[keyof ExperimentalSettings];
+export interface FeatureCatalogEntry {
+    title: string;
+    description: string;
+    tier: FeatureTier;
+    /** Desired default on cloud-managed instances. */
+    cloudDefault: boolean;
+    /** Must match the schema default; enforced by test. */
+    selfHostedDefault: boolean;
+}
+export declare const INSTANCE_FEATURE_CATALOG: Record<InstanceFeatureKey, FeatureCatalogEntry>;
+export declare const INSTANCE_FEATURE_KEYS: InstanceFeatureKey[];
+/**
+ * Shape of the `feature-catalog.json` release artifact the cloud harness
+ * imports per app release and validates feature writes against.
+ */
+export declare const featureCatalogArtifactSchema: z.ZodObject<{
+    catalogVersion: z.ZodString;
+    features: z.ZodRecord<z.ZodString, z.ZodObject<{
+        tier: z.ZodEnum<{
+            floor: "floor";
+            managed: "managed";
+            preference: "preference";
+        }>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type FeatureCatalogArtifact = z.infer<typeof featureCatalogArtifactSchema>;
+export declare function buildFeatureCatalogArtifact(catalogVersion: string): FeatureCatalogArtifact;
+/** Deterministic serialization (sorted keys, trailing newline) for the artifact file. */
+export declare function renderFeatureCatalogArtifact(catalogVersion: string): string;
+export {};
+//# sourceMappingURL=feature-catalog.d.ts.map

package/dist/feature-catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"feature-catalog.d.ts","sourceRoot":"","sources":["../src/feature-catalog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,kCAAkC,EAAE,MAAM,0BAA0B,CAAC;AAE9E;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,aAAa,YAAI,YAAY,EAAE,SAAS,EAAE,OAAO,CAAU,CAAC;AAEzE,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;AAEzD,KAAK,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAE/E;;;GAGG;AACH,MAAM,MAAM,kBAAkB,GAAG;KAC9B,CAAC,IAAI,MAAM,oBAAoB,GAAG,oBAAoB,CAAC,CAAC,CAAC,SAAS,OAAO,GAAG,CAAC,GAAG,KAAK;CACvF,CAAC,MAAM,oBAAoB,CAAC,CAAC;AAE9B,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,WAAW,CAAC;IAClB,kDAAkD;IAClD,YAAY,EAAE,OAAO,CAAC;IACtB,uDAAuD;IACvD,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AAED,eAAO,MAAM,wBAAwB,EAAE,MAAM,CAAC,kBAAkB,EAAE,mBAAmB,CA8RpF,CAAC;AAEF,eAAO,MAAM,qBAAqB,EAAmD,kBAAkB,EAAE,CAAC;AAE1G;;;GAGG;AACH,eAAO,MAAM,4BAA4B;;;;;;;;;kBAQ9B,CAAC;AAEZ,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAElF,wBAAgB,2BAA2B,CAAC,cAAc,EAAE,MAAM,GAAG,sBAAsB,CAS1F;AAED,yFAAyF;AACzF,wBAAgB,4BAA4B,CAAC,cAAc,EAAE,MAAM,GAAG,MAAM,CAE3E"}