@xemahq/contracts 0.81.0 → 0.82.0

package/dist/caller-context/lib/platform-sweep.js

@@ -0,0 +1,124 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PlatformSweepRefusal = exports.PlatformSweepGrantError = exports.PLATFORM_SWEEP_REACH = exports.PlatformSweepReach = exports.PlatformSweep = void 0;
+exports.parsePlatformSweep = parsePlatformSweep;
+exports.platformSweepGrant = platformSweepGrant;
+exports.admitPlatformSweep = admitPlatformSweep;
+const deployment_1 = require("../../deployment");
+Object.defineProperty(exports, "PlatformSweep", { enumerable: true, get: function () { return deployment_1.PlatformSweep; } });
+const org_authority_1 = require("./org-authority");
+var PlatformSweepReach;
+(function (PlatformSweepReach) {
+    PlatformSweepReach["ModelGatewaySessionMint"] = "model:gateway-session.mint@1";
+    PlatformSweepReach["CredentialResolve"] = "credential:resolve@1";
+    PlatformSweepReach["CredentialWrite"] = "credential:write@1";
+    PlatformSweepReach["CredentialRevoke"] = "credential:revoke@1";
+    PlatformSweepReach["MemberNotificationPublish"] = "notification:member.publish@1";
+    PlatformSweepReach["WorkspaceStorageErase"] = "workspace-storage:erase@1";
+    PlatformSweepReach["AppErase"] = "app-platform:app-erase@1";
+    PlatformSweepReach["ResourceRoleBindingWrite"] = "resource-role:binding.write@1";
+    PlatformSweepReach["OrgDataErase"] = "org-data:erase@1";
+    PlatformSweepReach["ContributionOrgSync"] = "contribution:org-sync@1";
+    PlatformSweepReach["EmbeddingCommitmentMigrationReport"] = "embedding-commitment:migration.report@1";
+    PlatformSweepReach["LegalHoldOrgErasureFence"] = "legal-hold:org-erasure-fence@1";
+    PlatformSweepReach["WorkspaceAllocationErase"] = "workspace:allocation.erase@1";
+    PlatformSweepReach["EndedHolderCheckWrite"] = "agent-session:session-sweep.ended-holder-check.write@1";
+    PlatformSweepReach["ConnectorInstallationVerify"] = "connector:installation-verify@1";
+    PlatformSweepReach["AuditCapabilityUsageRead"] = "audit:capability-usage.read@1";
+    PlatformSweepReach["LegalHoldResolve"] = "legal-hold:resolve@1";
+    PlatformSweepReach["AuthorizationFactsSnapshot"] = "authorization-facts:snapshot@1";
+})(PlatformSweepReach || (exports.PlatformSweepReach = PlatformSweepReach = {}));
+exports.PLATFORM_SWEEP_REACH = {
+    [deployment_1.PlatformSweep.EraseSweep]: [PlatformSweepReach.CredentialResolve, PlatformSweepReach.CredentialRevoke],
+    [deployment_1.PlatformSweep.OrgErasure]: [
+        PlatformSweepReach.OrgDataErase,
+        PlatformSweepReach.LegalHoldOrgErasureFence,
+        PlatformSweepReach.LegalHoldResolve,
+    ],
+    [deployment_1.PlatformSweep.AppErasure]: [PlatformSweepReach.AppErase],
+    [deployment_1.PlatformSweep.IndexMaintenance]: [
+        PlatformSweepReach.ModelGatewaySessionMint,
+        PlatformSweepReach.EmbeddingCommitmentMigrationReport,
+        PlatformSweepReach.AuditCapabilityUsageRead,
+        PlatformSweepReach.AuthorizationFactsSnapshot,
+    ],
+    [deployment_1.PlatformSweep.ConnectorSecretCustody]: [
+        PlatformSweepReach.CredentialResolve,
+        PlatformSweepReach.CredentialWrite,
+        PlatformSweepReach.CredentialRevoke,
+        PlatformSweepReach.ConnectorInstallationVerify,
+    ],
+    [deployment_1.PlatformSweep.CredentialRefresh]: [PlatformSweepReach.CredentialResolve, PlatformSweepReach.CredentialWrite],
+    [deployment_1.PlatformSweep.ConnectionHealthProbe]: [PlatformSweepReach.CredentialResolve],
+    [deployment_1.PlatformSweep.MemberNotification]: [PlatformSweepReach.MemberNotificationPublish],
+    [deployment_1.PlatformSweep.EndedHolderErasure]: [
+        PlatformSweepReach.WorkspaceStorageErase,
+        PlatformSweepReach.WorkspaceAllocationErase,
+        PlatformSweepReach.EndedHolderCheckWrite,
+    ],
+    [deployment_1.PlatformSweep.ScmProjectBindingMaintenance]: [PlatformSweepReach.ResourceRoleBindingWrite],
+    [deployment_1.PlatformSweep.ContributionConvergence]: [PlatformSweepReach.ContributionOrgSync],
+    [deployment_1.PlatformSweep.RetentionExpiryErasure]: [PlatformSweepReach.LegalHoldResolve],
+};
+const SWEEP_VALUES = new Set(Object.values(deployment_1.PlatformSweep));
+function parsePlatformSweep(name) {
+    return SWEEP_VALUES.has(name) ? name : undefined;
+}
+class PlatformSweepGrantError extends Error {
+    sweep;
+    constructor(sweep) {
+        super(`A platform sweep '${sweep}' names the ONE organization it runs over; none was given.`);
+        this.sweep = sweep;
+        this.name = 'PlatformSweepGrantError';
+    }
+}
+exports.PlatformSweepGrantError = PlatformSweepGrantError;
+function platformSweepGrant(sweep, orgId) {
+    const trimmed = orgId.trim();
+    if (trimmed === '') {
+        throw new PlatformSweepGrantError(sweep);
+    }
+    return { sweep, orgId: trimmed };
+}
+var PlatformSweepRefusal;
+(function (PlatformSweepRefusal) {
+    PlatformSweepRefusal["NoSweep"] = "no_sweep";
+    PlatformSweepRefusal["UnknownSweep"] = "unknown_sweep";
+    PlatformSweepRefusal["UnnamedService"] = "unnamed_service";
+    PlatformSweepRefusal["OrgMismatch"] = "org_mismatch";
+    PlatformSweepRefusal["OutOfReach"] = "out_of_reach";
+})(PlatformSweepRefusal || (exports.PlatformSweepRefusal = PlatformSweepRefusal = {}));
+function admitPlatformSweep(input) {
+    const stated = input.platformSweep;
+    if (stated === undefined || stated === '') {
+        return { admitted: false, refusal: PlatformSweepRefusal.NoSweep };
+    }
+    const sweep = parsePlatformSweep(stated);
+    if (sweep === undefined) {
+        return { admitted: false, refusal: PlatformSweepRefusal.UnknownSweep, stated };
+    }
+    if (input.callerService === undefined || input.callerService === '') {
+        return { admitted: false, refusal: PlatformSweepRefusal.UnnamedService, stated };
+    }
+    const requested = input.requestedOrgId.trim();
+    const sweepOrgId = input.orgAuthority?.source === org_authority_1.OrgAuthoritySource.OrgClaim
+        ? input.orgAuthority.tokenOrgId?.trim()
+        : undefined;
+    if (sweepOrgId === undefined ||
+        sweepOrgId === '' ||
+        requested === '' ||
+        sweepOrgId.toLowerCase() !== requested.toLowerCase()) {
+        return { admitted: false, refusal: PlatformSweepRefusal.OrgMismatch, stated };
+    }
+    if (!exports.PLATFORM_SWEEP_REACH[sweep].includes(input.reach)) {
+        return { admitted: false, refusal: PlatformSweepRefusal.OutOfReach, stated };
+    }
+    return {
+        admitted: true,
+        sweep,
+        callerService: input.callerService,
+        orgId: sweepOrgId,
+        reach: input.reach,
+    };
+}
+//# sourceMappingURL=platform-sweep.js.map

package/dist/caller-context/lib/platform-sweep.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform-sweep.js","sourceRoot":"","sources":["../../../src/caller-context/lib/platform-sweep.ts"],"names":[],"mappings":";;;AA2MA,gDAEC;AA+BD,gDAMC;AA6CD,gDA4CC;AA1RD,iDAAiD;AAUxC,8FAVA,0BAAa,OAUA;AARtB,mDAA+E;AAe/E,IAAY,kBAkFX;AAlFD,WAAY,kBAAkB;IAE5B,8EAAwD,CAAA;IAExD,gEAA0C,CAAA;IAM1C,4DAAsC,CAAA;IAEtC,8DAAwC,CAAA;IAKxC,iFAA2D,CAAA;IAK3D,yEAAmD,CAAA;IAMnD,2DAAqC,CAAA;IAKrC,gFAA0D,CAAA;IAO1D,uDAAiC,CAAA;IAKjC,qEAA+C,CAAA;IAK/C,oGAA8E,CAAA;IAK9E,iFAA2D,CAAA;IAE3D,+EAAyD,CAAA;IAMzD,sGAAgF,CAAA;IAEhF,qFAA+D,CAAA;IAK/D,gFAA0D,CAAA;IAK1D,+DAAyC,CAAA;IAMzC,mFAA6D,CAAA;AAC/D,CAAC,EAlFW,kBAAkB,kCAAlB,kBAAkB,QAkF7B;AAGY,QAAA,oBAAoB,GAE7B;IAIF,CAAC,0BAAa,CAAC,UAAU,CAAC,EAAE,CAAC,kBAAkB,CAAC,iBAAiB,EAAE,kBAAkB,CAAC,gBAAgB,CAAC;IAEvG,CAAC,0BAAa,CAAC,UAAU,CAAC,EAAE;QAC1B,kBAAkB,CAAC,YAAY;QAC/B,kBAAkB,CAAC,wBAAwB;QAC3C,kBAAkB,CAAC,gBAAgB;KACpC;IAED,CAAC,0BAAa,CAAC,UAAU,CAAC,EAAE,CAAC,kBAAkB,CAAC,QAAQ,CAAC;IAEzD,CAAC,0BAAa,CAAC,gBAAgB,CAAC,EAAE;QAChC,kBAAkB,CAAC,uBAAuB;QAC1C,kBAAkB,CAAC,kCAAkC;QACrD,kBAAkB,CAAC,wBAAwB;QAC3C,kBAAkB,CAAC,0BAA0B;KAC9C;IAED,CAAC,0BAAa,CAAC,sBAAsB,CAAC,EAAE;QACtC,kBAAkB,CAAC,iBAAiB;QACpC,kBAAkB,CAAC,eAAe;QAClC,kBAAkB,CAAC,gBAAgB;QACnC,kBAAkB,CAAC,2BAA2B;KAC/C;IAED,CAAC,0BAAa,CAAC,iBAAiB,CAAC,EAAE,CAAC,kBAAkB,CAAC,iBAAiB,EAAE,kBAAkB,CAAC,eAAe,CAAC;IAE7G,CAAC,0BAAa,CAAC,qBAAqB,CAAC,EAAE,CAAC,kBAAkB,CAAC,iBAAiB,CAAC;IAE7E,CAAC,0BAAa,CAAC,kBAAkB,CAAC,EAAE,CAAC,kBAAkB,CAAC,yBAAyB,CAAC;IAElF,CAAC,0BAAa,CAAC,kBAAkB,CAAC,EAAE;QAClC,kBAAkB,CAAC,qBAAqB;QACxC,kBAAkB,CAAC,wBAAwB;QAC3C,kBAAkB,CAAC,qBAAqB;KACzC;IAED,CAAC,0BAAa,CAAC,4BAA4B,CAAC,EAAE,CAAC,kBAAkB,CAAC,wBAAwB,CAAC;IAE3F,CAAC,0BAAa,CAAC,uBAAuB,CAAC,EAAE,CAAC,kBAAkB,CAAC,mBAAmB,CAAC;IAEjF,CAAC,0BAAa,CAAC,sBAAsB,CAAC,EAAE,CAAC,kBAAkB,CAAC,gBAAgB,CAAC;CAC9E,CAAC;AAEF,MAAM,YAAY,GAAwB,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,0BAAa,CAAC,CAAC,CAAC;AAGhF,SAAgB,kBAAkB,CAAC,IAAY;IAC7C,OAAO,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,IAAsB,CAAC,CAAC,CAAC,SAAS,CAAC;AACtE,CAAC;AAmBD,MAAa,uBAAwB,SAAQ,KAAK;IAC3B;IAArB,YAAqB,KAAoB;QACvC,KAAK,CAAC,qBAAqB,KAAK,4DAA4D,CAAC,CAAC;QAD3E,UAAK,GAAL,KAAK,CAAe;QAEvC,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AALD,0DAKC;AAOD,SAAgB,kBAAkB,CAAC,KAAoB,EAAE,KAAa;IACpE,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;QACnB,MAAM,IAAI,uBAAuB,CAAC,KAAK,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAwB,CAAC;AACzD,CAAC;AAKD,IAAY,oBAWX;AAXD,WAAY,oBAAoB;IAE9B,4CAAoB,CAAA;IAEpB,sDAA8B,CAAA;IAE9B,0DAAkC,CAAA;IAElC,oDAA4B,CAAA;IAE5B,mDAA2B,CAAA;AAC7B,CAAC,EAXW,oBAAoB,oCAApB,oBAAoB,QAW/B;AA6BD,SAAgB,kBAAkB,CAAC,KAOlC;IACC,MAAM,MAAM,GAAG,KAAK,CAAC,aAAa,CAAC;IACnC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,EAAE,EAAE,CAAC;QAC1C,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,oBAAoB,CAAC,OAAO,EAAE,CAAC;IACpE,CAAC;IACD,MAAM,KAAK,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IACzC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,oBAAoB,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC;IACjF,CAAC;IACD,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,IAAI,KAAK,CAAC,aAAa,KAAK,EAAE,EAAE,CAAC;QACpE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,oBAAoB,CAAC,cAAc,EAAE,MAAM,EAAE,CAAC;IACnF,CAAC;IACD,MAAM,SAAS,GAAG,KAAK,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;IAG9C,MAAM,UAAU,GACd,KAAK,CAAC,YAAY,EAAE,MAAM,KAAK,kCAAkB,CAAC,QAAQ;QACxD,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,UAAU,EAAE,IAAI,EAAE;QACvC,CAAC,CAAC,SAAS,CAAC;IAChB,IACE,UAAU,KAAK,SAAS;QACxB,UAAU,KAAK,EAAE;QACjB,SAAS,KAAK,EAAE;QAChB,UAAU,CAAC,WAAW,EAAE,KAAK,SAAS,CAAC,WAAW,EAAE,EACpD,CAAC;QACD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,oBAAoB,CAAC,WAAW,EAAE,MAAM,EAAE,CAAC;IAChF,CAAC;IACD,IAAI,CAAE,4BAAoB,CAAC,KAAK,CAAuB,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9E,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,oBAAoB,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC;IAC/E,CAAC;IACD,OAAO;QACL,QAAQ,EAAE,IAAI;QACd,KAAK;QACL,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,KAAK,EAAE,UAAU;QACjB,KAAK,EAAE,KAAK,CAAC,KAAK;KACnB,CAAC;AACJ,CAAC"}

package/dist/caller-context/lib/receiver-audience.d.ts

@@ -0,0 +1,13 @@
+export declare const RECEIVER_AUDIENCE_PREFIX = "workload:";
+export declare const RECEIVER_WORKLOAD_NAME_PATTERN: RegExp;
+export declare const MAX_RECEIVER_WORKLOAD_NAME_CHARS = 63;
+declare const receiverAudienceBrand: unique symbol;
+export type ReceiverAudience = string & {
+    readonly [receiverAudienceBrand]: true;
+};
+export declare function isReceiverAudience(value: unknown): value is ReceiverAudience;
+export declare function receiverAudienceOf(workloadName: string): ReceiverAudience;
+export declare function receiverWorkloadOf(audience: string): string | undefined;
+export declare function isReservedReceiverAudienceSpelling(value: string): boolean;
+export {};
+//# sourceMappingURL=receiver-audience.d.ts.map

package/dist/caller-context/lib/receiver-audience.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"receiver-audience.d.ts","sourceRoot":"","sources":["../../../src/caller-context/lib/receiver-audience.ts"],"names":[],"mappings":"AAsBA,eAAO,MAAM,wBAAwB,cAAc,CAAC;AAGpD,eAAO,MAAM,8BAA8B,QAAoC,CAAC;AAGhF,eAAO,MAAM,gCAAgC,KAAK,CAAC;AAEnD,OAAO,CAAC,MAAM,qBAAqB,EAAE,OAAO,MAAM,CAAC;AAGnD,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG;IAAE,QAAQ,CAAC,CAAC,qBAAqB,CAAC,EAAE,IAAI,CAAA;CAAE,CAAC;AAWnF,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,gBAAgB,CAM5E;AAGD,wBAAgB,kBAAkB,CAAC,YAAY,EAAE,MAAM,GAAG,gBAAgB,CAQzE;AAGD,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAIvE;AAGD,wBAAgB,kCAAkC,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAEzE"}

package/dist/caller-context/lib/receiver-audience.js

@@ -0,0 +1,36 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MAX_RECEIVER_WORKLOAD_NAME_CHARS = exports.RECEIVER_WORKLOAD_NAME_PATTERN = exports.RECEIVER_AUDIENCE_PREFIX = void 0;
+exports.isReceiverAudience = isReceiverAudience;
+exports.receiverAudienceOf = receiverAudienceOf;
+exports.receiverWorkloadOf = receiverWorkloadOf;
+exports.isReservedReceiverAudienceSpelling = isReservedReceiverAudienceSpelling;
+exports.RECEIVER_AUDIENCE_PREFIX = 'workload:';
+exports.RECEIVER_WORKLOAD_NAME_PATTERN = /^[a-z][a-z0-9]*(?:-[a-z0-9]+)*$/;
+exports.MAX_RECEIVER_WORKLOAD_NAME_CHARS = 63;
+function isReceiverWorkloadName(value) {
+    return (typeof value === 'string' &&
+        value.length <= exports.MAX_RECEIVER_WORKLOAD_NAME_CHARS &&
+        exports.RECEIVER_WORKLOAD_NAME_PATTERN.test(value));
+}
+function isReceiverAudience(value) {
+    return (typeof value === 'string' &&
+        value.startsWith(exports.RECEIVER_AUDIENCE_PREFIX) &&
+        isReceiverWorkloadName(value.slice(exports.RECEIVER_AUDIENCE_PREFIX.length)));
+}
+function receiverAudienceOf(workloadName) {
+    if (!isReceiverWorkloadName(workloadName)) {
+        throw new Error(`'${String(workloadName)}' is not a workload name a receiver audience can be built from: expected ` +
+            `${exports.RECEIVER_WORKLOAD_NAME_PATTERN.source}, at most ${exports.MAX_RECEIVER_WORKLOAD_NAME_CHARS} characters.`);
+    }
+    return `${exports.RECEIVER_AUDIENCE_PREFIX}${workloadName}`;
+}
+function receiverWorkloadOf(audience) {
+    return isReceiverAudience(audience)
+        ? audience.slice(exports.RECEIVER_AUDIENCE_PREFIX.length)
+        : undefined;
+}
+function isReservedReceiverAudienceSpelling(value) {
+    return value.startsWith(exports.RECEIVER_AUDIENCE_PREFIX);
+}
+//# sourceMappingURL=receiver-audience.js.map

package/dist/caller-context/lib/receiver-audience.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"receiver-audience.js","sourceRoot":"","sources":["../../../src/caller-context/lib/receiver-audience.ts"],"names":[],"mappings":";;;AA4CA,gDAMC;AAGD,gDAQC;AAGD,gDAIC;AAGD,gFAEC;AAnDY,QAAA,wBAAwB,GAAG,WAAW,CAAC;AAGvC,QAAA,8BAA8B,GAAG,iCAAiC,CAAC;AAGnE,QAAA,gCAAgC,GAAG,EAAE,CAAC;AAOnD,SAAS,sBAAsB,CAAC,KAAc;IAC5C,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,MAAM,IAAI,wCAAgC;QAChD,sCAA8B,CAAC,IAAI,CAAC,KAAK,CAAC,CAC3C,CAAC;AACJ,CAAC;AAGD,SAAgB,kBAAkB,CAAC,KAAc;IAC/C,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,UAAU,CAAC,gCAAwB,CAAC;QAC1C,sBAAsB,CAAC,KAAK,CAAC,KAAK,CAAC,gCAAwB,CAAC,MAAM,CAAC,CAAC,CACrE,CAAC;AACJ,CAAC;AAGD,SAAgB,kBAAkB,CAAC,YAAoB;IACrD,IAAI,CAAC,sBAAsB,CAAC,YAAY,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,KAAK,CACb,IAAI,MAAM,CAAC,YAAY,CAAC,2EAA2E;YACjG,GAAG,sCAA8B,CAAC,MAAM,aAAa,wCAAgC,cAAc,CACtG,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,gCAAwB,GAAG,YAAY,EAAsB,CAAC;AAC1E,CAAC;AAGD,SAAgB,kBAAkB,CAAC,QAAgB;IACjD,OAAO,kBAAkB,CAAC,QAAQ,CAAC;QACjC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,gCAAwB,CAAC,MAAM,CAAC;QACjD,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAGD,SAAgB,kCAAkC,CAAC,KAAa;IAC9D,OAAO,KAAK,CAAC,UAAU,CAAC,gCAAwB,CAAC,CAAC;AACpD,CAAC"}

package/dist/caller-context/lib/receiver-operation.d.ts

@@ -0,0 +1,10 @@
+export declare const RECEIVER_OPERATION_ID_PATTERN: RegExp;
+export declare const MAX_RECEIVER_OPERATION_ID_CHARS: number;
+declare const receiverOperationIdBrand: unique symbol;
+export type ReceiverOperationId = string & {
+    readonly [receiverOperationIdBrand]: true;
+};
+export declare function isReceiverOperationId(value: unknown): value is ReceiverOperationId;
+export declare function receiverOperationId(text: string): ReceiverOperationId;
+export {};
+//# sourceMappingURL=receiver-operation.d.ts.map

package/dist/caller-context/lib/receiver-operation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"receiver-operation.d.ts","sourceRoot":"","sources":["../../../src/caller-context/lib/receiver-operation.ts"],"names":[],"mappings":"AA6BA,eAAO,MAAM,6BAA6B,EAAE,MAA6B,CAAC;AAG1E,eAAO,MAAM,+BAA+B,EAAE,MAA+B,CAAC;AAE9E,OAAO,CAAC,MAAM,wBAAwB,EAAE,OAAO,MAAM,CAAC;AAGtD,MAAM,MAAM,mBAAmB,GAAG,MAAM,GAAG;IAAE,QAAQ,CAAC,CAAC,wBAAwB,CAAC,EAAE,IAAI,CAAA;CAAE,CAAC;AAGzF,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,mBAAmB,CAMlF;AAGD,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,MAAM,GAAG,mBAAmB,CASrE"}

package/dist/caller-context/lib/receiver-operation.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MAX_RECEIVER_OPERATION_ID_CHARS = exports.RECEIVER_OPERATION_ID_PATTERN = void 0;
+exports.isReceiverOperationId = isReceiverOperationId;
+exports.receiverOperationId = receiverOperationId;
+const deployment_1 = require("../../deployment");
+exports.RECEIVER_OPERATION_ID_PATTERN = deployment_1.OPERATION_ID_PATTERN;
+exports.MAX_RECEIVER_OPERATION_ID_CHARS = deployment_1.MAX_OPERATION_ID_CHARS;
+function isReceiverOperationId(value) {
+    return (typeof value === 'string' &&
+        value.length <= exports.MAX_RECEIVER_OPERATION_ID_CHARS &&
+        exports.RECEIVER_OPERATION_ID_PATTERN.test(value));
+}
+function receiverOperationId(text) {
+    if (!isReceiverOperationId(text)) {
+        throw new Error(`'${String(text)}' is not a receiver operation id: expected ` +
+            `<domain>:<operation>@<version> (${exports.RECEIVER_OPERATION_ID_PATTERN.source}), ` +
+            `at most ${exports.MAX_RECEIVER_OPERATION_ID_CHARS} characters.`);
+    }
+    return text;
+}
+//# sourceMappingURL=receiver-operation.js.map

package/dist/caller-context/lib/receiver-operation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"receiver-operation.js","sourceRoot":"","sources":["../../../src/caller-context/lib/receiver-operation.ts"],"names":[],"mappings":";;;AAwCA,sDAMC;AAGD,kDASC;AArCD,iDAAgF;AAQnE,QAAA,6BAA6B,GAAW,iCAAoB,CAAC;AAG7D,QAAA,+BAA+B,GAAW,mCAAsB,CAAC;AAQ9E,SAAgB,qBAAqB,CAAC,KAAc;IAClD,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,MAAM,IAAI,uCAA+B;QAC/C,qCAA6B,CAAC,IAAI,CAAC,KAAK,CAAC,CAC1C,CAAC;AACJ,CAAC;AAGD,SAAgB,mBAAmB,CAAC,IAAY;IAC9C,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CACb,IAAI,MAAM,CAAC,IAAI,CAAC,6CAA6C;YAC3D,mCAAmC,qCAA6B,CAAC,MAAM,KAAK;YAC5E,WAAW,uCAA+B,cAAc,CAC3D,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/caller-context/lib/request-context.d.ts

@@ -0,0 +1,49 @@
+import { TokenClass } from '../../subject';
+import type { SubjectRef, ActingForRef, DelegatedAuthority } from '../../subject';
+import type { OrgAuthorityVerdict } from './org-authority';
+import type { AdmittedPlatformSweep } from './platform-sweep';
+import type { LentCapabilityAdmission } from './lent-capability';
+import type { VerifiedWorkerContext } from './worker-context';
+import type { OrgRole } from '../../tenant';
+import type { PipelineApprovalMode } from './approval-mode';
+export interface RequestContext {
+    orgId: string;
+    orgAuthority?: OrgAuthorityVerdict;
+    projectId?: string;
+    subject: SubjectRef;
+    tokenClass: TokenClass;
+    actorChain: ActingForRef[];
+    actorId: string;
+    actorType: 'human' | 'agent' | 'service';
+    orgRoles?: Record<string, OrgRole>;
+    orgRole?: OrgRole;
+    correlationId: string;
+    causationId?: string;
+    authorization?: string;
+    bearerToken?: string;
+    pipelineRunId?: string;
+    pipelinePhaseKey?: string;
+    pipelinePackageId?: string;
+    approvalModeOverride?: PipelineApprovalMode;
+    clientId?: string;
+    principalId?: string;
+    callerService?: string;
+    endUserSession?: boolean;
+    platformSweep?: string;
+    declaredOrgRelay?: true;
+    workloadGrants?: readonly string[];
+    admittedPlatformSweep?: AdmittedPlatformSweep;
+    presentingService?: string;
+    workerContext?: VerifiedWorkerContext;
+    roles: string[];
+    realmId?: string;
+    issuer?: string;
+    actAs?: string;
+    delegationId?: string;
+    delegation?: DelegatedAuthority;
+    lentCapabilityAdmission?: LentCapabilityAdmission;
+}
+export declare const REQUEST_CONTEXT: unique symbol;
+export declare function getRequestContext(req: object): RequestContext;
+export declare function tryGetRequestContext(req: object): RequestContext | undefined;
+//# sourceMappingURL=request-context.d.ts.map

package/dist/caller-context/lib/request-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-context.d.ts","sourceRoot":"","sources":["../../../src/caller-context/lib/request-context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,KAAK,EACV,UAAU,EACV,YAAY,EACZ,kBAAkB,EACnB,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAC3D,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AACjE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAC5C,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAE5D,MAAM,WAAW,cAAc;IAQ7B,KAAK,EAAE,MAAM,CAAC;IAyBd,YAAY,CAAC,EAAE,mBAAmB,CAAC;IACnC,SAAS,CAAC,EAAE,MAAM,CAAC;IAMnB,OAAO,EAAE,UAAU,CAAC;IAOpB,UAAU,EAAE,UAAU,CAAC;IAMvB,UAAU,EAAE,YAAY,EAAE,CAAC;IAE3B,OAAO,EAAE,MAAM,CAAC;IAMhB,SAAS,EAAE,OAAO,GAAG,OAAO,GAAG,SAAS,CAAC;IASzC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IASnC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;IAErB,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAE1B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,oBAAoB,CAAC,EAAE,oBAAoB,CAAC;IAmC5C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAyBlB,WAAW,CAAC,EAAE,MAAM,CAAC;IAyBrB,aAAa,CAAC,EAAE,MAAM,CAAC;IAcvB,cAAc,CAAC,EAAE,OAAO,CAAC;IAUzB,aAAa,CAAC,EAAE,MAAM,CAAC;IAWvB,gBAAgB,CAAC,EAAE,IAAI,CAAC;IAWxB,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IASnC,qBAAqB,CAAC,EAAE,qBAAqB,CAAC;IAU9C,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAkB3B,aAAa,CAAC,EAAE,qBAAqB,CAAC;IAEtC,KAAK,EAAE,MAAM,EAAE,CAAC;IAEhB,OAAO,CAAC,EAAE,MAAM,CAAC;IAQjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAYhB,KAAK,CAAC,EAAE,MAAM,CAAC;IAgBf,YAAY,CAAC,EAAE,MAAM,CAAC;IA2BtB,UAAU,CAAC,EAAE,kBAAkB,CAAC;IAQhC,uBAAuB,CAAC,EAAE,uBAAuB,CAAC;CACnD;AAeD,eAAO,MAAM,eAAe,eAAqD,CAAC;AAalF,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,CAQ7D;AASD,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CA+B5E"}

package/dist/caller-context/lib/request-context.js

@@ -0,0 +1,25 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.REQUEST_CONTEXT = void 0;
+exports.getRequestContext = getRequestContext;
+exports.tryGetRequestContext = tryGetRequestContext;
+exports.REQUEST_CONTEXT = Symbol.for('xema.platform-common.request-context');
+function getRequestContext(req) {
+    const ctx = tryGetRequestContext(req);
+    if (!ctx) {
+        throw new Error('RequestContext not found on request. Ensure RequestContextMiddleware is applied.');
+    }
+    return ctx;
+}
+function tryGetRequestContext(req) {
+    const direct = req[exports.REQUEST_CONTEXT];
+    if (direct !== undefined) {
+        return direct;
+    }
+    const raw = req.raw;
+    if (raw !== null && typeof raw === 'object') {
+        return raw[exports.REQUEST_CONTEXT];
+    }
+    return undefined;
+}
+//# sourceMappingURL=request-context.js.map

package/dist/caller-context/lib/request-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-context.js","sourceRoot":"","sources":["../../../src/caller-context/lib/request-context.ts"],"names":[],"mappings":";;;AAuXA,8CAQC;AASD,oDA+BC;AA7DY,QAAA,eAAe,GAAG,MAAM,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;AAalF,SAAgB,iBAAiB,CAAC,GAAW;IAC3C,MAAM,GAAG,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,MAAM,IAAI,KAAK,CACb,kFAAkF,CACnF,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AASD,SAAgB,oBAAoB,CAAC,GAAW;IAC9C,MAAM,MAAM,GAAI,GAA+B,CAAC,uBAAe,CAAC,CAAC;IACjE,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,MAAwB,CAAC;IAClC,CAAC;IAoBD,MAAM,GAAG,GAAI,GAAyB,CAAC,GAAG,CAAC;IAC3C,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5C,OAAQ,GAA+B,CAAC,uBAAe,CAE1C,CAAC;IAChB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/caller-context/lib/resolve-acting-user.d.ts

@@ -0,0 +1,8 @@
+import type { SubjectRef } from '../../subject';
+import type { RequestContext } from './request-context';
+export declare class ActingUserUnresolvableError extends Error {
+    constructor(ctx: Pick<RequestContext, 'subject' | 'actorChain'>);
+}
+export declare function tryResolveActingUserSubject(ctx: Pick<RequestContext, 'subject' | 'actorChain'>): SubjectRef | undefined;
+export declare function resolveActingUserSubject(ctx: Pick<RequestContext, 'subject' | 'actorChain'>): SubjectRef;
+//# sourceMappingURL=resolve-acting-user.d.ts.map

package/dist/caller-context/lib/resolve-acting-user.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-acting-user.d.ts","sourceRoot":"","sources":["../../../src/caller-context/lib/resolve-acting-user.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAEhD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAUxD,qBAAa,2BAA4B,SAAQ,KAAK;gBACxC,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,SAAS,GAAG,YAAY,CAAC;CAgBhE;AAyBD,wBAAgB,2BAA2B,CACzC,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,SAAS,GAAG,YAAY,CAAC,GAClD,UAAU,GAAG,SAAS,CAcxB;AAWD,wBAAgB,wBAAwB,CACtC,GAAG,EAAE,IAAI,CAAC,cAAc,EAAE,SAAS,GAAG,YAAY,CAAC,GAClD,UAAU,CAMZ"}

package/dist/caller-context/lib/resolve-acting-user.js

@@ -0,0 +1,44 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ActingUserUnresolvableError = void 0;
+exports.tryResolveActingUserSubject = tryResolveActingUserSubject;
+exports.resolveActingUserSubject = resolveActingUserSubject;
+const subject_1 = require("../../subject");
+class ActingUserUnresolvableError extends Error {
+    constructor(ctx) {
+        const chain = (ctx.actorChain ?? [])
+            .map((a) => `${a.kind}:${a.id}`)
+            .join(',');
+        super('No acting USER could be resolved from the request context. ' +
+            `subject=${ctx.subject.kind}:${ctx.subject.id} ` +
+            `actingFor=${ctx.subject.actingFor
+                ? `${ctx.subject.actingFor.kind}:${ctx.subject.actingFor.id}`
+                : 'none'} actorChain=[${chain}]. ` +
+            'Ownership cannot be attributed to a non-human actor (fail-closed).');
+        this.name = 'ActingUserUnresolvableError';
+    }
+}
+exports.ActingUserUnresolvableError = ActingUserUnresolvableError;
+function tryResolveActingUserSubject(ctx) {
+    if (ctx.subject.kind === subject_1.SubjectKind.User) {
+        return { kind: subject_1.SubjectKind.User, id: ctx.subject.id };
+    }
+    const actingFor = ctx.subject.actingFor;
+    if (actingFor && actingFor.kind === subject_1.SubjectKind.User) {
+        return { kind: subject_1.SubjectKind.User, id: actingFor.id };
+    }
+    for (const actor of ctx.actorChain ?? []) {
+        if (actor.kind === subject_1.SubjectKind.User) {
+            return { kind: subject_1.SubjectKind.User, id: actor.id };
+        }
+    }
+    return undefined;
+}
+function resolveActingUserSubject(ctx) {
+    const user = tryResolveActingUserSubject(ctx);
+    if (user === undefined) {
+        throw new ActingUserUnresolvableError(ctx);
+    }
+    return user;
+}
+//# sourceMappingURL=resolve-acting-user.js.map

package/dist/caller-context/lib/resolve-acting-user.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-acting-user.js","sourceRoot":"","sources":["../../../src/caller-context/lib/resolve-acting-user.ts"],"names":[],"mappings":";;;AAuDA,kEAgBC;AAWD,4DAQC;AA1FD,2CAA4C;AAa5C,MAAa,2BAA4B,SAAQ,KAAK;IACpD,YAAY,GAAmD;QAC7D,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC;aACjC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC;aAC/B,IAAI,CAAC,GAAG,CAAC,CAAC;QACb,KAAK,CACH,6DAA6D;YAC3D,WAAW,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,EAAE,GAAG;YAChD,aACE,GAAG,CAAC,OAAO,CAAC,SAAS;gBACnB,CAAC,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE;gBAC7D,CAAC,CAAC,MACN,gBAAgB,KAAK,KAAK;YAC1B,oEAAoE,CACvE,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;IAC5C,CAAC;CACF;AAjBD,kEAiBC;AAyBD,SAAgB,2BAA2B,CACzC,GAAmD;IAEnD,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,qBAAW,CAAC,IAAI,EAAE,CAAC;QAC1C,OAAO,EAAE,IAAI,EAAE,qBAAW,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;IACxD,CAAC;IACD,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC;IACxC,IAAI,SAAS,IAAI,SAAS,CAAC,IAAI,KAAK,qBAAW,CAAC,IAAI,EAAE,CAAC;QACrD,OAAO,EAAE,IAAI,EAAE,qBAAW,CAAC,IAAI,EAAE,EAAE,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC;IACtD,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,UAAU,IAAI,EAAE,EAAE,CAAC;QACzC,IAAI,KAAK,CAAC,IAAI,KAAK,qBAAW,CAAC,IAAI,EAAE,CAAC;YACpC,OAAO,EAAE,IAAI,EAAE,qBAAW,CAAC,IAAI,EAAE,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;QAClD,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAWD,SAAgB,wBAAwB,CACtC,GAAmD;IAEnD,MAAM,IAAI,GAAG,2BAA2B,CAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,IAAI,2BAA2B,CAAC,GAAG,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/caller-context/lib/worker-context.d.ts

@@ -0,0 +1,13 @@
+export declare enum WorkerContextAttributionKind {
+    Session = "session",
+    Allocation = "allocation"
+}
+export interface WorkerContextAttribution {
+    readonly kind: WorkerContextAttributionKind;
+    readonly id: string;
+}
+export interface VerifiedWorkerContext {
+    readonly mintedBy: string;
+    readonly attribution?: WorkerContextAttribution;
+}
+//# sourceMappingURL=worker-context.d.ts.map

package/dist/caller-context/lib/worker-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-context.d.ts","sourceRoot":"","sources":["../../../src/caller-context/lib/worker-context.ts"],"names":[],"mappings":"AASA,oBAAY,4BAA4B;IACtC,OAAO,YAAY;IACnB,UAAU,eAAe;CAC1B;AAGD,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,IAAI,EAAE,4BAA4B,CAAC;IAC5C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACrB;AAGD,MAAM,WAAW,qBAAqB;IAEpC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAE1B,QAAQ,CAAC,WAAW,CAAC,EAAE,wBAAwB,CAAC;CACjD"}

package/dist/caller-context/lib/worker-context.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WorkerContextAttributionKind = void 0;
+var WorkerContextAttributionKind;
+(function (WorkerContextAttributionKind) {
+    WorkerContextAttributionKind["Session"] = "session";
+    WorkerContextAttributionKind["Allocation"] = "allocation";
+})(WorkerContextAttributionKind || (exports.WorkerContextAttributionKind = WorkerContextAttributionKind = {}));
+//# sourceMappingURL=worker-context.js.map

package/dist/caller-context/lib/worker-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-context.js","sourceRoot":"","sources":["../../../src/caller-context/lib/worker-context.ts"],"names":[],"mappings":";;;AASA,IAAY,4BAGX;AAHD,WAAY,4BAA4B;IACtC,mDAAmB,CAAA;IACnB,yDAAyB,CAAA;AAC3B,CAAC,EAHW,4BAA4B,4CAA5B,4BAA4B,QAGvC"}

package/dist/connector/index.d.ts

@@ -22,4 +22,7 @@ export * from './lib/credential-auth-type';
 export * from './lib/credential-owner-scope';
 export * from './lib/runtime-materialization-audience';
 export * from './lib/sealed-connection-credential';
+export * from './lib/adapter-key.enum';
+export * from './lib/routes';
+export * from './lib/webhook-entity-kind.enum';
 //# sourceMappingURL=index.d.ts.map

package/dist/connector/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/connector/index.ts"],"names":[],"mappings":"AAAA,cAAc,oBAAoB,CAAC;AACnC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,oCAAoC,CAAC;AACnD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,kBAAkB,CAAC;AACjC,cAAc,uBAAuB,CAAC;AACtC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,mCAAmC,CAAC;AAClD,cAAc,wCAAwC,CAAC;AACvD,cAAc,2BAA2B,CAAC;AAC1C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,iCAAiC,CAAC;AAChD,cAAc,uBAAuB,CAAC;AACtC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC;AAClC,cAAc,0BAA0B,CAAC;AACzC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,sCAAsC,CAAC;AACrD,cAAc,qCAAqC,CAAC;AACpD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,wCAAwC,CAAC;AACvD,cAAc,oCAAoC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/connector/index.ts"],"names":[],"mappings":"AAAA,cAAc,oBAAoB,CAAC;AACnC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,oCAAoC,CAAC;AACnD,cAAc,8BAA8B,CAAC;AAC7C,cAAc,kBAAkB,CAAC;AACjC,cAAc,uBAAuB,CAAC;AACtC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,mCAAmC,CAAC;AAClD,cAAc,wCAAwC,CAAC;AACvD,cAAc,2BAA2B,CAAC;AAC1C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,iCAAiC,CAAC;AAChD,cAAc,uBAAuB,CAAC;AACtC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC;AAClC,cAAc,0BAA0B,CAAC;AACzC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,sCAAsC,CAAC;AACrD,cAAc,qCAAqC,CAAC;AACpD,cAAc,4BAA4B,CAAC;AAC3C,cAAc,8BAA8B,CAAC;AAC7C,cAAc,wCAAwC,CAAC;AACvD,cAAc,oCAAoC,CAAC;AACnD,cAAc,wBAAwB,CAAC;AACvC,cAAc,cAAc,CAAC;AAC7B,cAAc,gCAAgC,CAAC"}

package/dist/connector/index.js

@@ -38,4 +38,7 @@ __exportStar(require("./lib/credential-auth-type"), exports);
 __exportStar(require("./lib/credential-owner-scope"), exports);
 __exportStar(require("./lib/runtime-materialization-audience"), exports);
 __exportStar(require("./lib/sealed-connection-credential"), exports);
+__exportStar(require("./lib/adapter-key.enum"), exports);
+__exportStar(require("./lib/routes"), exports);
+__exportStar(require("./lib/webhook-entity-kind.enum"), exports);
 //# sourceMappingURL=index.js.map

package/dist/connector/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/connector/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,qDAAmC;AACnC,+DAA6C;AAC7C,qEAAmD;AACnD,+DAA6C;AAC7C,mDAAiC;AACjC,wDAAsC;AACtC,+DAA6C;AAC7C,oEAAkD;AAClD,yEAAuD;AACvD,4DAA0C;AAC1C,4DAA0C;AAC1C,kEAAgD;AAChD,wDAAsC;AACtC,6DAA2C;AAC3C,wDAAsC;AACtC,oDAAkC;AAClC,2DAAyC;AACzC,6DAA2C;AAC3C,uEAAqD;AACrD,sEAAoD;AACpD,6DAA2C;AAC3C,+DAA6C;AAC7C,yEAAuD;AACvD,qEAAmD"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/connector/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,qDAAmC;AACnC,+DAA6C;AAC7C,qEAAmD;AACnD,+DAA6C;AAC7C,mDAAiC;AACjC,wDAAsC;AACtC,+DAA6C;AAC7C,oEAAkD;AAClD,yEAAuD;AACvD,4DAA0C;AAC1C,4DAA0C;AAC1C,kEAAgD;AAChD,wDAAsC;AACtC,6DAA2C;AAC3C,wDAAsC;AACtC,oDAAkC;AAClC,2DAAyC;AACzC,6DAA2C;AAC3C,uEAAqD;AACrD,sEAAoD;AACpD,6DAA2C;AAC3C,+DAA6C;AAC7C,yEAAuD;AACvD,qEAAmD;AACnD,yDAAuC;AACvC,+CAA6B;AAC7B,iEAA+C"}

package/dist/connector/lib/adapter-key.enum.d.ts

@@ -0,0 +1,11 @@
+export declare enum AdapterKey {
+    SCM = "SCM",
+    TRACKER = "TRACKER",
+    DOCUMENTATION = "DOCUMENTATION",
+    NPM_REGISTRY = "NPM_REGISTRY",
+    CONTAINER_REGISTRY = "CONTAINER_REGISTRY",
+    MAIL_INTAKE = "MAIL_INTAKE",
+    MAIL_EGRESS = "MAIL_EGRESS",
+    CONVERSATION = "CONVERSATION"
+}
+//# sourceMappingURL=adapter-key.enum.d.ts.map

package/dist/connector/lib/adapter-key.enum.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter-key.enum.d.ts","sourceRoot":"","sources":["../../../src/connector/lib/adapter-key.enum.ts"],"names":[],"mappings":"AAgBA,oBAAY,UAAU;IACpB,GAAG,QAAQ;IACX,OAAO,YAAY;IACnB,aAAa,kBAAkB;IAE/B,YAAY,iBAAiB;IAE7B,kBAAkB,uBAAuB;IAEzC,WAAW,gBAAgB;IAE3B,WAAW,gBAAgB;IAE3B,YAAY,iBAAiB;CAC9B"}

package/dist/connector/lib/adapter-key.enum.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AdapterKey = void 0;
+var AdapterKey;
+(function (AdapterKey) {
+    AdapterKey["SCM"] = "SCM";
+    AdapterKey["TRACKER"] = "TRACKER";
+    AdapterKey["DOCUMENTATION"] = "DOCUMENTATION";
+    AdapterKey["NPM_REGISTRY"] = "NPM_REGISTRY";
+    AdapterKey["CONTAINER_REGISTRY"] = "CONTAINER_REGISTRY";
+    AdapterKey["MAIL_INTAKE"] = "MAIL_INTAKE";
+    AdapterKey["MAIL_EGRESS"] = "MAIL_EGRESS";
+    AdapterKey["CONVERSATION"] = "CONVERSATION";
+})(AdapterKey || (exports.AdapterKey = AdapterKey = {}));
+//# sourceMappingURL=adapter-key.enum.js.map

package/dist/connector/lib/adapter-key.enum.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter-key.enum.js","sourceRoot":"","sources":["../../../src/connector/lib/adapter-key.enum.ts"],"names":[],"mappings":";;;AAgBA,IAAY,UAcX;AAdD,WAAY,UAAU;IACpB,yBAAW,CAAA;IACX,iCAAmB,CAAA;IACnB,6CAA+B,CAAA;IAE/B,2CAA6B,CAAA;IAE7B,uDAAyC,CAAA;IAEzC,yCAA2B,CAAA;IAE3B,yCAA2B,CAAA;IAE3B,2CAA6B,CAAA;AAC/B,CAAC,EAdW,UAAU,0BAAV,UAAU,QAcrB"}

package/dist/connector/lib/routes.d.ts

@@ -0,0 +1,3 @@
+export declare const DOMAIN_WEBHOOK_INGESTION_ROUTE: "/webhooks/provider-data";
+export declare const WEBHOOK_INGESTION_CONTROLLER_PATH: "webhooks/provider-data";
+//# sourceMappingURL=routes.d.ts.map

package/dist/connector/lib/routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../../src/connector/lib/routes.ts"],"names":[],"mappings":"AAYA,eAAO,MAAM,8BAA8B,EAAG,yBAAkC,CAAC;AAGjF,eAAO,MAAM,iCAAiC,EAAG,wBAAiC,CAAC"}

package/dist/connector/lib/routes.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WEBHOOK_INGESTION_CONTROLLER_PATH = exports.DOMAIN_WEBHOOK_INGESTION_ROUTE = void 0;
+exports.DOMAIN_WEBHOOK_INGESTION_ROUTE = '/webhooks/provider-data';
+exports.WEBHOOK_INGESTION_CONTROLLER_PATH = 'webhooks/provider-data';
+//# sourceMappingURL=routes.js.map

package/dist/connector/lib/routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../../src/connector/lib/routes.ts"],"names":[],"mappings":";;;AAYa,QAAA,8BAA8B,GAAG,yBAAkC,CAAC;AAGpE,QAAA,iCAAiC,GAAG,wBAAiC,CAAC"}

package/dist/connector/lib/webhook-entity-kind.enum.d.ts

@@ -0,0 +1,13 @@
+export declare enum WebhookEntityKind {
+    ISSUE = "issue",
+    CHANGE_REQUEST = "change_request",
+    PUSH = "push",
+    REPOSITORY = "repository",
+    INSTALLATION = "installation",
+    ITEM = "item",
+    COMMENT = "comment",
+    PAGE = "page",
+    SPACE = "space",
+    MESSAGE = "message"
+}
+//# sourceMappingURL=webhook-entity-kind.enum.d.ts.map

package/dist/connector/lib/webhook-entity-kind.enum.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-entity-kind.enum.d.ts","sourceRoot":"","sources":["../../../src/connector/lib/webhook-entity-kind.enum.ts"],"names":[],"mappings":"AAYA,oBAAY,iBAAiB;IAE3B,KAAK,UAAU;IACf,cAAc,mBAAmB;IACjC,IAAI,SAAS;IACb,UAAU,eAAe;IACzB,YAAY,iBAAiB;IAG7B,IAAI,SAAS;IACb,OAAO,YAAY;IAGnB,IAAI,SAAS;IACb,KAAK,UAAU;IAGf,OAAO,YAAY;CACpB"}

package/dist/connector/lib/webhook-entity-kind.enum.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WebhookEntityKind = void 0;
+var WebhookEntityKind;
+(function (WebhookEntityKind) {
+    WebhookEntityKind["ISSUE"] = "issue";
+    WebhookEntityKind["CHANGE_REQUEST"] = "change_request";
+    WebhookEntityKind["PUSH"] = "push";
+    WebhookEntityKind["REPOSITORY"] = "repository";
+    WebhookEntityKind["INSTALLATION"] = "installation";
+    WebhookEntityKind["ITEM"] = "item";
+    WebhookEntityKind["COMMENT"] = "comment";
+    WebhookEntityKind["PAGE"] = "page";
+    WebhookEntityKind["SPACE"] = "space";
+    WebhookEntityKind["MESSAGE"] = "message";
+})(WebhookEntityKind || (exports.WebhookEntityKind = WebhookEntityKind = {}));
+//# sourceMappingURL=webhook-entity-kind.enum.js.map

package/dist/connector/lib/webhook-entity-kind.enum.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webhook-entity-kind.enum.js","sourceRoot":"","sources":["../../../src/connector/lib/webhook-entity-kind.enum.ts"],"names":[],"mappings":";;;AAYA,IAAY,iBAkBX;AAlBD,WAAY,iBAAiB;IAE3B,oCAAe,CAAA;IACf,sDAAiC,CAAA;IACjC,kCAAa,CAAA;IACb,8CAAyB,CAAA;IACzB,kDAA6B,CAAA;IAG7B,kCAAa,CAAA;IACb,wCAAmB,CAAA;IAGnB,kCAAa,CAAA;IACb,oCAAe,CAAA;IAGf,wCAAmB,CAAA;AACrB,CAAC,EAlBW,iBAAiB,iCAAjB,iBAAiB,QAkB5B"}

package/dist/deliverable-validation/index.d.ts

@@ -0,0 +1,4 @@
+export * from './lib/phase';
+export * from './lib/outcome';
+export * from './lib/validator-declaration';
+//# sourceMappingURL=index.d.ts.map

package/dist/deliverable-validation/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/deliverable-validation/index.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,6BAA6B,CAAC"}

package/dist/deliverable-validation/index.js

@@ -0,0 +1,20 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./lib/phase"), exports);
+__exportStar(require("./lib/outcome"), exports);
+__exportStar(require("./lib/validator-declaration"), exports);
+//# sourceMappingURL=index.js.map

package/dist/deliverable-validation/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/deliverable-validation/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,8CAA4B;AAC5B,gDAA8B;AAC9B,8DAA4C"}

package/dist/deliverable-validation/lib/outcome.d.ts

@@ -0,0 +1,30 @@
+import { z } from 'zod';
+export declare enum DeliverableValidationStatus {
+    Invalid = "invalid",
+    Incomplete = "incomplete",
+    Complete = "complete",
+    Pending = "pending"
+}
+export declare enum DeliverableValidationIssueSeverity {
+    Warning = "warning",
+    Error = "error"
+}
+export declare const deliverableValidationStatusSchema: z.ZodEnum<typeof DeliverableValidationStatus>;
+export declare const deliverableValidationIssueSchema: z.ZodObject<{
+    severity: z.ZodEnum<typeof DeliverableValidationIssueSeverity>;
+    code: z.ZodString;
+    message: z.ZodString;
+    path: z.ZodNullable<z.ZodString>;
+}, z.core.$strict>;
+export declare const deliverableValidationOutcomeSchema: z.ZodObject<{
+    status: z.ZodEnum<typeof DeliverableValidationStatus>;
+    issues: z.ZodArray<z.ZodObject<{
+        severity: z.ZodEnum<typeof DeliverableValidationIssueSeverity>;
+        code: z.ZodString;
+        message: z.ZodString;
+        path: z.ZodNullable<z.ZodString>;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type DeliverableValidationIssue = z.infer<typeof deliverableValidationIssueSchema>;
+export type DeliverableValidationOutcome = z.infer<typeof deliverableValidationOutcomeSchema>;
+//# sourceMappingURL=outcome.d.ts.map