@xemahq/kernel-contracts 0.32.0 → 0.34.0

package/dist/connector/lib/connector-http-request.js

@@ -0,0 +1,86 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ConnectorHttpRequestTemplateSchema = exports.ConnectorAuthInjectionSchema = exports.ConnectorHttpBodyModeSchema = exports.ConnectorHttpBodyMode = exports.ConnectorAuthInjectionKindSchema = exports.ConnectorAuthInjectionKind = exports.ConnectorHttpMethodSchema = exports.ConnectorHttpMethod = void 0;
+const zod_1 = require("zod");
+var ConnectorHttpMethod;
+(function (ConnectorHttpMethod) {
+    ConnectorHttpMethod["Get"] = "GET";
+    ConnectorHttpMethod["Post"] = "POST";
+    ConnectorHttpMethod["Put"] = "PUT";
+    ConnectorHttpMethod["Patch"] = "PATCH";
+    ConnectorHttpMethod["Delete"] = "DELETE";
+})(ConnectorHttpMethod || (exports.ConnectorHttpMethod = ConnectorHttpMethod = {}));
+exports.ConnectorHttpMethodSchema = zod_1.z.nativeEnum(ConnectorHttpMethod);
+var ConnectorAuthInjectionKind;
+(function (ConnectorAuthInjectionKind) {
+    ConnectorAuthInjectionKind["BearerHeader"] = "bearer_header";
+    ConnectorAuthInjectionKind["BasicHeader"] = "basic_header";
+    ConnectorAuthInjectionKind["Header"] = "header";
+    ConnectorAuthInjectionKind["QueryParam"] = "query_param";
+    ConnectorAuthInjectionKind["None"] = "none";
+})(ConnectorAuthInjectionKind || (exports.ConnectorAuthInjectionKind = ConnectorAuthInjectionKind = {}));
+exports.ConnectorAuthInjectionKindSchema = zod_1.z.nativeEnum(ConnectorAuthInjectionKind);
+var ConnectorHttpBodyMode;
+(function (ConnectorHttpBodyMode) {
+    ConnectorHttpBodyMode["None"] = "none";
+    ConnectorHttpBodyMode["JsonInput"] = "json_input";
+})(ConnectorHttpBodyMode || (exports.ConnectorHttpBodyMode = ConnectorHttpBodyMode = {}));
+exports.ConnectorHttpBodyModeSchema = zod_1.z.nativeEnum(ConnectorHttpBodyMode);
+exports.ConnectorAuthInjectionSchema = zod_1.z
+    .strictObject({
+    kind: exports.ConnectorAuthInjectionKindSchema,
+    headerName: zod_1.z.string().min(1).optional(),
+    valuePrefix: zod_1.z.string().optional(),
+    queryParamName: zod_1.z.string().min(1).optional(),
+})
+    .superRefine((value, ctx) => {
+    if (value.kind === ConnectorAuthInjectionKind.Header) {
+        if (value.headerName === undefined) {
+            ctx.addIssue({
+                code: 'custom',
+                path: ['headerName'],
+                message: 'auth.kind="header" requires headerName.',
+            });
+        }
+    }
+    else if (value.headerName !== undefined) {
+        ctx.addIssue({
+            code: 'custom',
+            path: ['headerName'],
+            message: `headerName is only valid for auth.kind="header" (got "${value.kind}").`,
+        });
+    }
+    if (value.kind !== ConnectorAuthInjectionKind.Header &&
+        value.valuePrefix !== undefined) {
+        ctx.addIssue({
+            code: 'custom',
+            path: ['valuePrefix'],
+            message: `valuePrefix is only valid for auth.kind="header" (got "${value.kind}").`,
+        });
+    }
+    if (value.kind === ConnectorAuthInjectionKind.QueryParam) {
+        if (value.queryParamName === undefined) {
+            ctx.addIssue({
+                code: 'custom',
+                path: ['queryParamName'],
+                message: 'auth.kind="query_param" requires queryParamName.',
+            });
+        }
+    }
+    else if (value.queryParamName !== undefined) {
+        ctx.addIssue({
+            code: 'custom',
+            path: ['queryParamName'],
+            message: `queryParamName is only valid for auth.kind="query_param" (got "${value.kind}").`,
+        });
+    }
+});
+exports.ConnectorHttpRequestTemplateSchema = zod_1.z.strictObject({
+    method: exports.ConnectorHttpMethodSchema,
+    pathTemplate: zod_1.z.string().min(1).startsWith('/'),
+    query: zod_1.z.record(zod_1.z.string(), zod_1.z.string()).readonly().optional(),
+    headers: zod_1.z.record(zod_1.z.string(), zod_1.z.string()).readonly().optional(),
+    bodyMode: exports.ConnectorHttpBodyModeSchema,
+    auth: exports.ConnectorAuthInjectionSchema,
+});
+//# sourceMappingURL=connector-http-request.js.map

package/dist/connector/lib/connector-http-request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connector-http-request.js","sourceRoot":"","sources":["../../../src/connector/lib/connector-http-request.ts"],"names":[],"mappings":";;;AAyBA,6BAAwB;AAMxB,IAAY,mBAMX;AAND,WAAY,mBAAmB;IAC7B,kCAAW,CAAA;IACX,oCAAa,CAAA;IACb,kCAAW,CAAA;IACX,sCAAe,CAAA;IACf,wCAAiB,CAAA;AACnB,CAAC,EANW,mBAAmB,mCAAnB,mBAAmB,QAM9B;AAGY,QAAA,yBAAyB,GAAG,OAAC,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC;AAO3E,IAAY,0BAcX;AAdD,WAAY,0BAA0B;IAEpC,4DAA8B,CAAA;IAE9B,0DAA4B,CAAA;IAE5B,+CAAiB,CAAA;IAEjB,wDAA0B,CAAA;IAK1B,2CAAa,CAAA;AACf,CAAC,EAdW,0BAA0B,0CAA1B,0BAA0B,QAcrC;AAGY,QAAA,gCAAgC,GAAG,OAAC,CAAC,UAAU,CAC1D,0BAA0B,CAC3B,CAAC;AAOF,IAAY,qBAQX;AARD,WAAY,qBAAqB;IAE/B,sCAAa,CAAA;IAKb,iDAAwB,CAAA;AAC1B,CAAC,EARW,qBAAqB,qCAArB,qBAAqB,QAQhC;AAGY,QAAA,2BAA2B,GAAG,OAAC,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAC;AAsBlE,QAAA,4BAA4B,GAAG,OAAC;KAC1C,YAAY,CAAC;IACZ,IAAI,EAAE,wCAAgC;IACtC,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACxC,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC7C,CAAC;KACD,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IAC1B,IAAI,KAAK,CAAC,IAAI,KAAK,0BAA0B,CAAC,MAAM,EAAE,CAAC;QACrD,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YACnC,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,YAAY,CAAC;gBACpB,OAAO,EAAE,yCAAyC;aACnD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;SAAM,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QAC1C,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,YAAY,CAAC;YACpB,OAAO,EAAE,yDAAyD,KAAK,CAAC,IAAI,KAAK;SAClF,CAAC,CAAC;IACL,CAAC;IACD,IACE,KAAK,CAAC,IAAI,KAAK,0BAA0B,CAAC,MAAM;QAChD,KAAK,CAAC,WAAW,KAAK,SAAS,EAC/B,CAAC;QACD,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,aAAa,CAAC;YACrB,OAAO,EAAE,0DAA0D,KAAK,CAAC,IAAI,KAAK;SACnF,CAAC,CAAC;IACL,CAAC;IACD,IAAI,KAAK,CAAC,IAAI,KAAK,0BAA0B,CAAC,UAAU,EAAE,CAAC;QACzD,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;YACvC,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,gBAAgB,CAAC;gBACxB,OAAO,EAAE,kDAAkD;aAC5D,CAAC,CAAC;QACL,CAAC;IACH,CAAC;SAAM,IAAI,KAAK,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QAC9C,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,gBAAgB,CAAC;YACxB,OAAO,EAAE,kEAAkE,KAAK,CAAC,IAAI,KAAK;SAC3F,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC;AAyBQ,QAAA,kCAAkC,GAAG,OAAC,CAAC,YAAY,CAAC;IAC/D,MAAM,EAAE,iCAAyB;IACjC,YAAY,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;IAC/C,KAAK,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC7D,OAAO,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC/D,QAAQ,EAAE,mCAA2B;IACrC,IAAI,EAAE,oCAA4B;CACnC,CAAC,CAAC"}

package/dist/connector/lib/integration-provider-contribution.d.ts

@@ -1,10 +1,12 @@
 import { z } from 'zod';
+import { ConnectorAdapterKind } from './connector-adapter-kind';
 export declare const ContributedProviderDescriptorSchema: z.ZodObject<{
     description: z.ZodString;
     displayName: z.ZodString;
     providerKey: z.ZodString;
     iconName: z.ZodString;
     category: z.ZodString;
+    apiBaseUrl: z.ZodOptional<z.ZodString>;
     appAuthKind: z.ZodEnum<typeof import("./provider-descriptor").ProviderAppAuthKind>;
     appCredentialSchema: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodObject<{
         key: z.ZodString;
@@ -32,6 +34,7 @@ export declare const IntegrationProviderContributionManifestSchema: z.ZodObject<
         providerKey: z.ZodString;
         iconName: z.ZodString;
         category: z.ZodString;
+        apiBaseUrl: z.ZodOptional<z.ZodString>;
         appAuthKind: z.ZodEnum<typeof import("./provider-descriptor").ProviderAppAuthKind>;
         appCredentialSchema: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodObject<{
             key: z.ZodString;
@@ -62,9 +65,22 @@ export declare const IntegrationProviderContributionManifestSchema: z.ZodObject<
         adapterKind: z.ZodString;
         operations: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodObject<{
             capabilityRef: z.ZodType<import("../../capability").CapabilityRef, unknown, z.core.$ZodTypeInternals<import("../../capability").CapabilityRef, unknown>>;
-            adapterKind: z.ZodEnum<typeof import("./connector-adapter-kind").ConnectorAdapterKind>;
+            adapterKind: z.ZodEnum<typeof ConnectorAdapterKind>;
             scopes: z.ZodReadonly<z.ZodArray<z.ZodString>>;
             requiresConnection: z.ZodBoolean;
+            httpRequest: z.ZodOptional<z.ZodObject<{
+                method: z.ZodEnum<typeof import("./connector-http-request").ConnectorHttpMethod>;
+                pathTemplate: z.ZodString;
+                query: z.ZodOptional<z.ZodReadonly<z.ZodRecord<z.ZodString, z.ZodString>>>;
+                headers: z.ZodOptional<z.ZodReadonly<z.ZodRecord<z.ZodString, z.ZodString>>>;
+                bodyMode: z.ZodEnum<typeof import("./connector-http-request").ConnectorHttpBodyMode>;
+                auth: z.ZodObject<{
+                    kind: z.ZodEnum<typeof import("./connector-http-request").ConnectorAuthInjectionKind>;
+                    headerName: z.ZodOptional<z.ZodString>;
+                    valuePrefix: z.ZodOptional<z.ZodString>;
+                    queryParamName: z.ZodOptional<z.ZodString>;
+                }, z.core.$strict>;
+            }, z.core.$strict>>;
         }, z.core.$strict>>>>;
     }, z.core.$strict>>>;
 }, z.core.$strict>;

package/dist/connector/lib/integration-provider-contribution.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"integration-provider-contribution.d.ts","sourceRoot":"","sources":["../../../src/connector/lib/integration-provider-contribution.ts"],"names":[],"mappings":"AAwBA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AA2BxB,eAAO,MAAM,mCAAmC;;;;;;;;;;;;;;;;;;;;;;;;kBACK,CAAC;AAEtD,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CACjD,OAAO,mCAAmC,CAC3C,CAAC;AAQF,eAAO,MAAM,6CAA6C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAiDtD,CAAC;AAEL,MAAM,MAAM,uCAAuC,GAAG,CAAC,CAAC,KAAK,CAC3D,OAAO,6CAA6C,CACrD,CAAC"}
+{"version":3,"file":"integration-provider-contribution.d.ts","sourceRoot":"","sources":["../../../src/connector/lib/integration-provider-contribution.ts"],"names":[],"mappings":"AAwBA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AA0BhE,eAAO,MAAM,mCAAmC;;;;;;;;;;;;;;;;;;;;;;;;;kBACK,CAAC;AAEtD,MAAM,MAAM,6BAA6B,GAAG,CAAC,CAAC,KAAK,CACjD,OAAO,mCAAmC,CAC3C,CAAC;AAQF,eAAO,MAAM,6CAA6C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAqEtD,CAAC;AAEL,MAAM,MAAM,uCAAuC,GAAG,CAAC,CAAC,KAAK,CAC3D,OAAO,6CAA6C,CACrD,CAAC"}

package/dist/connector/lib/integration-provider-contribution.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.IntegrationProviderContributionManifestSchema = exports.ContributedProviderDescriptorSchema = void 0;
 const zod_1 = require("zod");
+const connector_adapter_kind_1 = require("./connector-adapter-kind");
 const connector_descriptor_1 = require("./connector-descriptor");
 const provider_descriptor_1 = require("./provider-descriptor");
 const CONTRIBUTED_PROVIDER_KEY_REGEX = /^[a-z][a-z0-9_-]*$/;
@@ -51,5 +52,15 @@ exports.IntegrationProviderContributionManifestSchema = zod_1.z
         }
         seenConnectorKeys.add(connector.connectorKey);
     });
+    const hasDeclarativeOperation = manifest.connectors.some((connector) => (connector.operations ?? []).some((op) => op.adapterKind === connector_adapter_kind_1.ConnectorAdapterKind.DeclarativeHttp));
+    if (hasDeclarativeOperation && manifest.provider.apiBaseUrl === undefined) {
+        ctx.addIssue({
+            code: 'custom',
+            path: ['provider', 'apiBaseUrl'],
+            message: `Provider "${manifest.provider.providerKey}" ships a declarative-http ` +
+                'connector operation but declares no apiBaseUrl — the generic ' +
+                'executor joins every operation path onto it, so it is required.',
+        });
+    }
 });
 //# sourceMappingURL=integration-provider-contribution.js.map

package/dist/connector/lib/integration-provider-contribution.js.map

@@ -1 +1 @@
-{"version":3,"file":"integration-provider-contribution.js","sourceRoot":"","sources":["../../../src/connector/lib/integration-provider-contribution.ts"],"names":[],"mappings":";;;AAwBA,6BAAwB;AAExB,iEAAmE;AACnE,+DAG+B;AAM/B,MAAM,8BAA8B,GAAG,oBAAoB,CAAC;AAQ5D,MAAM,+BAA+B,GAAG,mBAAmB,CAAC;AAO/C,QAAA,mCAAmC,GAC9C,kDAA4B,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;AAYzC,QAAA,6CAA6C,GAAG,OAAC;KAC3D,YAAY,CAAC;IACZ,QAAQ,EAAE,2CAAmC;IAC7C,UAAU,EAAE,OAAC,CAAC,KAAK,CAAC,gDAAyB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACjE,CAAC;KACD,WAAW,CAAC,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE;IAC7B,IAAA,qDAA+B,EAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;IAEtE,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACxE,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,UAAU,EAAE,aAAa,CAAC;YACjC,OAAO,EACL,gBAAgB,QAAQ,CAAC,QAAQ,CAAC,WAAW,wBAAwB;gBACrE,iBAAiB,8BAA8B,CAAC,MAAM,GAAG;SAC5D,CAAC,CAAC;IACL,CAAC;IAED,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC5C,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE;QAC/C,IAAI,CAAC,+BAA+B,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,CAAC;YAClE,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,YAAY,EAAE,KAAK,EAAE,cAAc,CAAC;gBAC3C,OAAO,EACL,iBAAiB,SAAS,CAAC,YAAY,wBAAwB;oBAC/D,YAAY,+BAA+B,CAAC,MAAM,GAAG;aACxD,CAAC,CAAC;QACL,CAAC;QACD,IAAI,SAAS,CAAC,WAAW,KAAK,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;YAC5D,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,YAAY,EAAE,KAAK,EAAE,aAAa,CAAC;gBAC1C,OAAO,EACL,cAAc,SAAS,CAAC,YAAY,wBAAwB;oBAC5D,IAAI,SAAS,CAAC,WAAW,2CAA2C;oBACpE,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,kCAAkC;oBACnE,kCAAkC;aACrC,CAAC,CAAC;QACL,CAAC;QACD,IAAI,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,CAAC;YAClD,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,YAAY,EAAE,KAAK,EAAE,cAAc,CAAC;gBAC3C,OAAO,EAAE,2BAA2B,SAAS,CAAC,YAAY,gBAAgB;aAC3E,CAAC,CAAC;QACL,CAAC;QACD,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"integration-provider-contribution.js","sourceRoot":"","sources":["../../../src/connector/lib/integration-provider-contribution.ts"],"names":[],"mappings":";;;AAwBA,6BAAwB;AAExB,qEAAgE;AAChE,iEAAmE;AACnE,+DAG+B;AAM/B,MAAM,8BAA8B,GAAG,oBAAoB,CAAC;AAQ5D,MAAM,+BAA+B,GAAG,mBAAmB,CAAC;AAO/C,QAAA,mCAAmC,GAC9C,kDAA4B,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;AAYzC,QAAA,6CAA6C,GAAG,OAAC;KAC3D,YAAY,CAAC;IACZ,QAAQ,EAAE,2CAAmC;IAC7C,UAAU,EAAE,OAAC,CAAC,KAAK,CAAC,gDAAyB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACjE,CAAC;KACD,WAAW,CAAC,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE;IAC7B,IAAA,qDAA+B,EAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;IAEtE,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACxE,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,UAAU,EAAE,aAAa,CAAC;YACjC,OAAO,EACL,gBAAgB,QAAQ,CAAC,QAAQ,CAAC,WAAW,wBAAwB;gBACrE,iBAAiB,8BAA8B,CAAC,MAAM,GAAG;SAC5D,CAAC,CAAC;IACL,CAAC;IAED,MAAM,iBAAiB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC5C,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE;QAC/C,IAAI,CAAC,+BAA+B,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,CAAC;YAClE,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,YAAY,EAAE,KAAK,EAAE,cAAc,CAAC;gBAC3C,OAAO,EACL,iBAAiB,SAAS,CAAC,YAAY,wBAAwB;oBAC/D,YAAY,+BAA+B,CAAC,MAAM,GAAG;aACxD,CAAC,CAAC;QACL,CAAC;QACD,IAAI,SAAS,CAAC,WAAW,KAAK,QAAQ,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;YAC5D,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,YAAY,EAAE,KAAK,EAAE,aAAa,CAAC;gBAC1C,OAAO,EACL,cAAc,SAAS,CAAC,YAAY,wBAAwB;oBAC5D,IAAI,SAAS,CAAC,WAAW,2CAA2C;oBACpE,IAAI,QAAQ,CAAC,QAAQ,CAAC,WAAW,kCAAkC;oBACnE,kCAAkC;aACrC,CAAC,CAAC;QACL,CAAC;QACD,IAAI,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,CAAC;YAClD,GAAG,CAAC,QAAQ,CAAC;gBACX,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,YAAY,EAAE,KAAK,EAAE,cAAc,CAAC;gBAC3C,OAAO,EAAE,2BAA2B,SAAS,CAAC,YAAY,gBAAgB;aAC3E,CAAC,CAAC;QACL,CAAC;QACD,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAMH,MAAM,uBAAuB,GAAG,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CACrE,CAAC,SAAS,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,IAAI,CAC/B,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,WAAW,KAAK,6CAAoB,CAAC,eAAe,CAChE,CACF,CAAC;IACF,IAAI,uBAAuB,IAAI,QAAQ,CAAC,QAAQ,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;QAC1E,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,UAAU,EAAE,YAAY,CAAC;YAChC,OAAO,EACL,aAAa,QAAQ,CAAC,QAAQ,CAAC,WAAW,6BAA6B;gBACvE,+DAA+D;gBAC/D,iEAAiE;SACpE,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/connector/lib/provider-descriptor.d.ts

@@ -28,6 +28,7 @@ export interface ProviderDescriptor {
     readonly description: string;
     readonly iconName: string;
     readonly category: string;
+    readonly apiBaseUrl?: string;
     readonly appAuthKind: ProviderAppAuthKind;
     readonly origin: ProviderOrigin;
     readonly appCredentialSchema?: readonly CredentialFieldSpec[];
@@ -47,6 +48,7 @@ export declare const ProviderDescriptorBaseSchema: z.ZodObject<{
     description: z.ZodString;
     iconName: z.ZodString;
     category: z.ZodString;
+    apiBaseUrl: z.ZodOptional<z.ZodString>;
     appAuthKind: z.ZodEnum<typeof ProviderAppAuthKind>;
     origin: z.ZodEnum<typeof ProviderOrigin>;
     appCredentialSchema: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodObject<{
@@ -76,6 +78,7 @@ export declare const ProviderDescriptorSchema: z.ZodObject<{
     description: z.ZodString;
     iconName: z.ZodString;
     category: z.ZodString;
+    apiBaseUrl: z.ZodOptional<z.ZodString>;
     appAuthKind: z.ZodEnum<typeof ProviderAppAuthKind>;
     origin: z.ZodEnum<typeof ProviderOrigin>;
     appCredentialSchema: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodObject<{

package/dist/connector/lib/provider-descriptor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provider-descriptor.d.ts","sourceRoot":"","sources":["../../../src/connector/lib/provider-descriptor.ts"],"names":[],"mappings":"AA0BA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAEL,KAAK,mBAAmB,EACzB,MAAM,uBAAuB,CAAC;AAQ/B,oBAAY,mBAAmB;IAO7B,MAAM,WAAW;IAMjB,UAAU,gBAAgB;IAO1B,IAAI,SAAS;CACd;AAaD,oBAAY,cAAc;IACxB,MAAM,WAAW;IACjB,QAAQ,aAAa;IACrB,KAAK,UAAU;CAChB;AAiBD,oBAAY,uBAAuB;IACjC,QAAQ,aAAa;IACrB,GAAG,QAAQ;CACZ;AAGD,eAAO,MAAM,+BAA+B,EAAE,SAAS,uBAAuB,EACb,CAAC;AAOlE,MAAM,WAAW,sBAAsB;IAErC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAElC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAQ1B,QAAQ,CAAC,oBAAoB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAQjE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;CACtC;AAOD,MAAM,WAAW,kBAAkB;IAEjC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAE7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAE7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAE7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAE1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAG1B,QAAQ,CAAC,WAAW,EAAE,mBAAmB,CAAC;IAE1C,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAQhC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,SAAS,mBAAmB,EAAE,CAAC;IAM9D,QAAQ,CAAC,cAAc,CAAC,EAAE,sBAAsB,CAAC;IAOjD,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;CACpC;AAOD,eAAO,MAAM,4BAA4B;;;;;;kBAMvC,CAAC;AAUH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;kBAWvC,CAAC;AASH,wBAAgB,+BAA+B,CAC7C,QAAQ,EAAE,IAAI,CAAC,kBAAkB,EAAE,aAAa,GAAG,aAAa,CAAC,GAAG;IAClE,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;CACnC,EACD,GAAG,EAAE,CAAC,CAAC,aAAa,EACpB,QAAQ,GAAE,SAAS,CAAC,MAAM,GAAG,MAAM,CAAC,EAAO,GAC1C,IAAI,CAWN;AAMD,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;kBAEpC,CAAC;AAOF,KAAK,aAAa,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;AACvC,KAAK,uBAAuB,CAAC,CAAC,IAAI,CAAC,SAAS,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,GAC5D,SAAS,uBAAuB,CAAC,CAAC,CAAC,EAAE,GACrC,CAAC,SAAS,MAAM,GACd;KAAG,CAAC,IAAI,MAAM,CAAC,GAAG,uBAAuB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS;CAAE,GAC7D,CAAC,CAAC;AACR,MAAM,MAAM,qCAAqC,GAAG;IAClD,aAAa,CACX,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,EAC5C,uBAAuB,CAAC,sBAAsB,CAAC,CAChD;IACD,aAAa,CACX,sBAAsB,EACtB,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAC7C;IACD,aAAa,CACX,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,EACxC,uBAAuB,CAAC,kBAAkB,CAAC,CAC5C;IACD,aAAa,CAAC,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;CAC5E,CAAC;AAOF,wBAAgB,6BAA6B,CAC3C,QAAQ,EAAE,IAAI,CAAC,kBAAkB,EAAE,aAAa,CAAC,GAChD,OAAO,CAET"}
+{"version":3,"file":"provider-descriptor.d.ts","sourceRoot":"","sources":["../../../src/connector/lib/provider-descriptor.ts"],"names":[],"mappings":"AA0BA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAEL,KAAK,mBAAmB,EACzB,MAAM,uBAAuB,CAAC;AAQ/B,oBAAY,mBAAmB;IAO7B,MAAM,WAAW;IAMjB,UAAU,gBAAgB;IAO1B,IAAI,SAAS;CACd;AAaD,oBAAY,cAAc;IACxB,MAAM,WAAW;IACjB,QAAQ,aAAa;IACrB,KAAK,UAAU;CAChB;AAiBD,oBAAY,uBAAuB;IACjC,QAAQ,aAAa;IACrB,GAAG,QAAQ;CACZ;AAGD,eAAO,MAAM,+BAA+B,EAAE,SAAS,uBAAuB,EACb,CAAC;AAOlE,MAAM,WAAW,sBAAsB;IAErC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAElC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAQ1B,QAAQ,CAAC,oBAAoB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAQjE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;CACtC;AAOD,MAAM,WAAW,kBAAkB;IAEjC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAE7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAE7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAE7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAE1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAS1B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAG7B,QAAQ,CAAC,WAAW,EAAE,mBAAmB,CAAC;IAE1C,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAQhC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,SAAS,mBAAmB,EAAE,CAAC;IAM9D,QAAQ,CAAC,cAAc,CAAC,EAAE,sBAAsB,CAAC;IAOjD,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;CACpC;AAOD,eAAO,MAAM,4BAA4B;;;;;;kBAMvC,CAAC;AAUH,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;kBAYvC,CAAC;AASH,wBAAgB,+BAA+B,CAC7C,QAAQ,EAAE,IAAI,CAAC,kBAAkB,EAAE,aAAa,GAAG,aAAa,CAAC,GAAG;IAClE,QAAQ,CAAC,cAAc,CAAC,EAAE,OAAO,CAAC;CACnC,EACD,GAAG,EAAE,CAAC,CAAC,aAAa,EACpB,QAAQ,GAAE,SAAS,CAAC,MAAM,GAAG,MAAM,CAAC,EAAO,GAC1C,IAAI,CAWN;AAMD,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;kBAEpC,CAAC;AAOF,KAAK,aAAa,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;AACvC,KAAK,uBAAuB,CAAC,CAAC,IAAI,CAAC,SAAS,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,GAC5D,SAAS,uBAAuB,CAAC,CAAC,CAAC,EAAE,GACrC,CAAC,SAAS,MAAM,GACd;KAAG,CAAC,IAAI,MAAM,CAAC,GAAG,uBAAuB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,SAAS;CAAE,GAC7D,CAAC,CAAC;AACR,MAAM,MAAM,qCAAqC,GAAG;IAClD,aAAa,CACX,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,EAC5C,uBAAuB,CAAC,sBAAsB,CAAC,CAChD;IACD,aAAa,CACX,sBAAsB,EACtB,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAC7C;IACD,aAAa,CACX,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,EACxC,uBAAuB,CAAC,kBAAkB,CAAC,CAC5C;IACD,aAAa,CAAC,kBAAkB,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;CAC5E,CAAC;AAOF,wBAAgB,6BAA6B,CAC3C,QAAQ,EAAE,IAAI,CAAC,kBAAkB,EAAE,aAAa,CAAC,GAChD,OAAO,CAET"}

package/dist/connector/lib/provider-descriptor.js

@@ -36,6 +36,7 @@ exports.ProviderDescriptorBaseSchema = zod_1.z.strictObject({
     description: zod_1.z.string().min(1),
     iconName: zod_1.z.string().min(1),
     category: zod_1.z.string().min(1),
+    apiBaseUrl: zod_1.z.string().url().optional(),
     appAuthKind: zod_1.z.nativeEnum(ProviderAppAuthKind),
     origin: zod_1.z.nativeEnum(ProviderOrigin),
     appCredentialSchema: zod_1.z.array(onboarding_manifest_1.CredentialFieldSpecSchema).readonly().optional(),

package/dist/connector/lib/provider-descriptor.js.map

@@ -1 +1 @@
-{"version":3,"file":"provider-descriptor.js","sourceRoot":"","sources":["../../../src/connector/lib/provider-descriptor.ts"],"names":[],"mappings":";;;AAyNA,0EAiBC;AA0CD,sEAIC;AA9PD,6BAAwB;AAExB,+DAG+B;AAQ/B,IAAY,mBAqBX;AArBD,WAAY,mBAAmB;IAO7B,wCAAiB,CAAA;IAMjB,iDAA0B,CAAA;IAO1B,oCAAa,CAAA;AACf,CAAC,EArBW,mBAAmB,mCAAnB,mBAAmB,QAqB9B;AAaD,IAAY,cAIX;AAJD,WAAY,cAAc;IACxB,mCAAiB,CAAA;IACjB,uCAAqB,CAAA;IACrB,iCAAe,CAAA;AACjB,CAAC,EAJW,cAAc,8BAAd,cAAc,QAIzB;AAiBD,IAAY,uBAGX;AAHD,WAAY,uBAAuB;IACjC,gDAAqB,CAAA;IACrB,sCAAW,CAAA;AACb,CAAC,EAHW,uBAAuB,uCAAvB,uBAAuB,QAGlC;AAGY,QAAA,+BAA+B,GAC1C,CAAC,uBAAuB,CAAC,GAAG,EAAE,uBAAuB,CAAC,QAAQ,CAAC,CAAC;AAgFrD,QAAA,4BAA4B,GAAG,OAAC,CAAC,YAAY,CAAC;IACzD,gBAAgB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAClC,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC1B,oBAAoB,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC5E,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC5C,kBAAkB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACjD,CAAC,CAAC;AAUU,QAAA,4BAA4B,GAAG,OAAC,CAAC,YAAY,CAAC;IACzD,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,WAAW,EAAE,OAAC,CAAC,UAAU,CAAC,mBAAmB,CAAC;IAC9C,MAAM,EAAE,OAAC,CAAC,UAAU,CAAC,cAAc,CAAC;IACpC,mBAAmB,EAAE,OAAC,CAAC,KAAK,CAAC,+CAAyB,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC7E,cAAc,EAAE,oCAA4B,CAAC,QAAQ,EAAE;IACvD,gBAAgB,EAAE,OAAC,CAAC,OAAO,EAAE;CAC9B,CAAC,CAAC;AASH,SAAgB,+BAA+B,CAC7C,QAEC,EACD,GAAoB,EACpB,WAAyC,EAAE;IAE3C,IACE,QAAQ,CAAC,WAAW,KAAK,mBAAmB,CAAC,MAAM;QACnD,QAAQ,CAAC,cAAc,KAAK,SAAS,EACrC,CAAC;QACD,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,GAAG,QAAQ,EAAE,gBAAgB,CAAC;YACrC,OAAO,EAAE,aAAa,QAAQ,CAAC,WAAW,0DAA0D;SACrG,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAMY,QAAA,wBAAwB,GAAG,oCAA4B,CAAC,WAAW,CAC9E,+BAA+B,CAChC,CAAC;AAkCF,SAAgB,6BAA6B,CAC3C,QAAiD;IAEjD,OAAO,QAAQ,CAAC,WAAW,KAAK,mBAAmB,CAAC,IAAI,CAAC;AAC3D,CAAC"}
+{"version":3,"file":"provider-descriptor.js","sourceRoot":"","sources":["../../../src/connector/lib/provider-descriptor.ts"],"names":[],"mappings":";;;AAmOA,0EAiBC;AA0CD,sEAIC;AAxQD,6BAAwB;AAExB,+DAG+B;AAQ/B,IAAY,mBAqBX;AArBD,WAAY,mBAAmB;IAO7B,wCAAiB,CAAA;IAMjB,iDAA0B,CAAA;IAO1B,oCAAa,CAAA;AACf,CAAC,EArBW,mBAAmB,mCAAnB,mBAAmB,QAqB9B;AAaD,IAAY,cAIX;AAJD,WAAY,cAAc;IACxB,mCAAiB,CAAA;IACjB,uCAAqB,CAAA;IACrB,iCAAe,CAAA;AACjB,CAAC,EAJW,cAAc,8BAAd,cAAc,QAIzB;AAiBD,IAAY,uBAGX;AAHD,WAAY,uBAAuB;IACjC,gDAAqB,CAAA;IACrB,sCAAW,CAAA;AACb,CAAC,EAHW,uBAAuB,uCAAvB,uBAAuB,QAGlC;AAGY,QAAA,+BAA+B,GAC1C,CAAC,uBAAuB,CAAC,GAAG,EAAE,uBAAuB,CAAC,QAAQ,CAAC,CAAC;AAyFrD,QAAA,4BAA4B,GAAG,OAAC,CAAC,YAAY,CAAC;IACzD,gBAAgB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAClC,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IAC1B,oBAAoB,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC5E,cAAc,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC5C,kBAAkB,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACjD,CAAC,CAAC;AAUU,QAAA,4BAA4B,GAAG,OAAC,CAAC,YAAY,CAAC;IACzD,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACvC,WAAW,EAAE,OAAC,CAAC,UAAU,CAAC,mBAAmB,CAAC;IAC9C,MAAM,EAAE,OAAC,CAAC,UAAU,CAAC,cAAc,CAAC;IACpC,mBAAmB,EAAE,OAAC,CAAC,KAAK,CAAC,+CAAyB,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAC7E,cAAc,EAAE,oCAA4B,CAAC,QAAQ,EAAE;IACvD,gBAAgB,EAAE,OAAC,CAAC,OAAO,EAAE;CAC9B,CAAC,CAAC;AASH,SAAgB,+BAA+B,CAC7C,QAEC,EACD,GAAoB,EACpB,WAAyC,EAAE;IAE3C,IACE,QAAQ,CAAC,WAAW,KAAK,mBAAmB,CAAC,MAAM;QACnD,QAAQ,CAAC,cAAc,KAAK,SAAS,EACrC,CAAC;QACD,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,GAAG,QAAQ,EAAE,gBAAgB,CAAC;YACrC,OAAO,EAAE,aAAa,QAAQ,CAAC,WAAW,0DAA0D;SACrG,CAAC,CAAC;IACL,CAAC;AACH,CAAC;AAMY,QAAA,wBAAwB,GAAG,oCAA4B,CAAC,WAAW,CAC9E,+BAA+B,CAChC,CAAC;AAkCF,SAAgB,6BAA6B,CAC3C,QAAiD;IAEjD,OAAO,QAAQ,CAAC,WAAW,KAAK,mBAAmB,CAAC,IAAI,CAAC;AAC3D,CAAC"}

package/dist/contribution/lib/contribution-kind.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"contribution-kind.d.ts","sourceRoot":"","sources":["../../../src/contribution/lib/contribution-kind.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAoBxB,oBAAY,gBAAgB;IAE1B,WAAW,iBAAiB;IAC5B,OAAO,aAAa;IACpB,YAAY,kBAAkB;IAC9B,UAAU,gBAAgB;IAC1B,YAAY,kBAAkB;IAC9B,UAAU,gBAAgB;IAC1B,WAAW,iBAAiB;IAC5B,wBAAwB,+BAA+B;IACvD,UAAU,gBAAgB;IAQ1B,YAAY,kBAAkB;IAM9B,WAAW,iBAAiB;IAW5B,cAAc,oBAAoB;IAElC,kBAAkB,yBAAyB;IAE3C,IAAI,SAAS;IAEb,UAAU,gBAAgB;IAE1B,oBAAoB,0BAA0B;IAE9C,oBAAoB,2BAA2B;IAE/C,yBAAyB,gCAAgC;IAGzD,mBAAmB,yBAAyB;IAI5C,cAAc,oBAAoB;IAElC,eAAe,qBAAqB;IAEpC,iBAAiB,uBAAuB;IAExC,yBAAyB,gCAAgC;IAEzD,WAAW,iBAAiB;IAI5B,UAAU,gBAAgB;IAE1B,YAAY,kBAAkB;IAE9B,cAAc,oBAAoB;IAgBlC,UAAU,eAAe;IAezB,iBAAiB,uBAAuB;IAcxC,YAAY,kBAAkB;IAkB9B,UAAU,gBAAgB;CAC3B;AAMD,eAAO,MAAM,sBAAsB,oCAAiC,CAAC;AAErE,MAAM,MAAM,qBAAqB,GAAG,GAAG,gBAAgB,EAAE,CAAC"}
+{"version":3,"file":"contribution-kind.d.ts","sourceRoot":"","sources":["../../../src/contribution/lib/contribution-kind.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAkDxB,oBAAY,gBAAgB;IAS1B,WAAW,iBAAiB;IAO5B,OAAO,aAAa;IACpB,YAAY,kBAAkB;IAQ9B,UAAU,gBAAgB;IAK1B,YAAY,kBAAkB;IAC9B,UAAU,gBAAgB;IAC1B,WAAW,iBAAiB;IAS5B,wBAAwB,+BAA+B;IACvD,UAAU,gBAAgB;IAQ1B,YAAY,kBAAkB;IAM9B,WAAW,iBAAiB;IAW5B,cAAc,oBAAoB;IAMlC,kBAAkB,yBAAyB;IAK3C,IAAI,SAAS;IAEb,UAAU,gBAAgB;IAM1B,oBAAoB,0BAA0B;IAK9C,oBAAoB,2BAA2B;IAK/C,yBAAyB,gCAAgC;IAGzD,mBAAmB,yBAAyB;IAI5C,cAAc,oBAAoB;IAElC,eAAe,qBAAqB;IAEpC,iBAAiB,uBAAuB;IAMxC,yBAAyB,gCAAgC;IAEzD,WAAW,iBAAiB;IAI5B,UAAU,gBAAgB;IAO1B,YAAY,kBAAkB;IAM9B,cAAc,oBAAoB;IAgBlC,UAAU,eAAe;IAezB,iBAAiB,uBAAuB;IAcxC,YAAY,kBAAkB;IAkB9B,UAAU,gBAAgB;CAC3B;AAMD,eAAO,MAAM,sBAAsB,oCAAiC,CAAC;AAErE,MAAM,MAAM,qBAAqB,GAAG,GAAG,gBAAgB,EAAE,CAAC"}

package/dist/contribution/lib/contribution-kind.js.map

@@ -1 +1 @@
-{"version":3,"file":"contribution-kind.js","sourceRoot":"","sources":["../../../src/contribution/lib/contribution-kind.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAoBxB,IAAY,gBAsIX;AAtID,WAAY,gBAAgB;IAE1B,gDAA4B,CAAA;IAC5B,wCAAoB,CAAA;IACpB,kDAA8B,CAAA;IAC9B,8CAA0B,CAAA;IAC1B,kDAA8B,CAAA;IAC9B,8CAA0B,CAAA;IAC1B,gDAA4B,CAAA;IAC5B,2EAAuD,CAAA;IACvD,8CAA0B,CAAA;IAQ1B,kDAA8B,CAAA;IAM9B,gDAA4B,CAAA;IAW5B,sDAAkC,CAAA;IAElC,+DAA2C,CAAA;IAE3C,iCAAa,CAAA;IAEb,8CAA0B,CAAA;IAE1B,kEAA8C,CAAA;IAE9C,mEAA+C,CAAA;IAE/C,6EAAyD,CAAA;IAGzD,gEAA4C,CAAA;IAI5C,sDAAkC,CAAA;IAElC,wDAAoC,CAAA;IAEpC,4DAAwC,CAAA;IAExC,6EAAyD,CAAA;IAEzD,gDAA4B,CAAA;IAI5B,8CAA0B,CAAA;IAE1B,kDAA8B,CAAA;IAE9B,sDAAkC,CAAA;IAgBlC,6CAAyB,CAAA;IAezB,4DAAwC,CAAA;IAcxC,kDAA8B,CAAA;IAkB9B,8CAA0B,CAAA;AAC5B,CAAC,EAtIW,gBAAgB,gCAAhB,gBAAgB,QAsI3B;AAMY,QAAA,sBAAsB,GAAG,OAAC,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC"}
+{"version":3,"file":"contribution-kind.js","sourceRoot":"","sources":["../../../src/contribution/lib/contribution-kind.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAkDxB,IAAY,gBAoMX;AApMD,WAAY,gBAAgB;IAS1B,gDAA4B,CAAA;IAO5B,wCAAoB,CAAA;IACpB,kDAA8B,CAAA;IAQ9B,8CAA0B,CAAA;IAK1B,kDAA8B,CAAA;IAC9B,8CAA0B,CAAA;IAC1B,gDAA4B,CAAA;IAS5B,2EAAuD,CAAA;IACvD,8CAA0B,CAAA;IAQ1B,kDAA8B,CAAA;IAM9B,gDAA4B,CAAA;IAW5B,sDAAkC,CAAA;IAMlC,+DAA2C,CAAA;IAK3C,iCAAa,CAAA;IAEb,8CAA0B,CAAA;IAM1B,kEAA8C,CAAA;IAK9C,mEAA+C,CAAA;IAK/C,6EAAyD,CAAA;IAGzD,gEAA4C,CAAA;IAI5C,sDAAkC,CAAA;IAElC,wDAAoC,CAAA;IAEpC,4DAAwC,CAAA;IAMxC,6EAAyD,CAAA;IAEzD,gDAA4B,CAAA;IAI5B,8CAA0B,CAAA;IAO1B,kDAA8B,CAAA;IAM9B,sDAAkC,CAAA;IAgBlC,6CAAyB,CAAA;IAezB,4DAAwC,CAAA;IAcxC,kDAA8B,CAAA;IAkB9B,8CAA0B,CAAA;AAC5B,CAAC,EApMW,gBAAgB,gCAAhB,gBAAgB,QAoM3B;AAMY,QAAA,sBAAsB,GAAG,OAAC,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC"}

package/dist/principal/index.d.ts

@@ -0,0 +1,6 @@
+export * from './lib/delegation-grant';
+export * from './lib/delegation-chain';
+export * from './lib/clamp-authority';
+export * from './lib/execution-principal';
+export * from './lib/app-invocation-identity';
+//# sourceMappingURL=index.d.ts.map

package/dist/principal/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/principal/index.ts"],"names":[],"mappings":"AAAA,cAAc,wBAAwB,CAAC;AACvC,cAAc,wBAAwB,CAAC;AACvC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,+BAA+B,CAAC"}

package/dist/principal/index.js

@@ -0,0 +1,22 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./lib/delegation-grant"), exports);
+__exportStar(require("./lib/delegation-chain"), exports);
+__exportStar(require("./lib/clamp-authority"), exports);
+__exportStar(require("./lib/execution-principal"), exports);
+__exportStar(require("./lib/app-invocation-identity"), exports);
+//# sourceMappingURL=index.js.map

package/dist/principal/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/principal/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,yDAAuC;AACvC,yDAAuC;AACvC,wDAAsC;AACtC,4DAA0C;AAC1C,gEAA8C"}

package/dist/principal/lib/app-invocation-identity.d.ts

@@ -0,0 +1,22 @@
+import { z } from 'zod';
+import { type SubjectRef } from '../../subject';
+export declare enum AppInvocationMode {
+    OnBehalfOfUser = "on-behalf-of-user",
+    AsApp = "as-app"
+}
+export declare const AppInvocationModeSchema: z.ZodEnum<typeof AppInvocationMode>;
+export interface OnBehalfOfUserIdentity {
+    mode: AppInvocationMode.OnBehalfOfUser;
+    user: SubjectRef;
+    appId: string;
+}
+export interface AsAppIdentity {
+    mode: AppInvocationMode.AsApp;
+    appId: string;
+}
+export type AppInvocationIdentity = OnBehalfOfUserIdentity | AsAppIdentity;
+export declare const OnBehalfOfUserIdentitySchema: z.ZodType<OnBehalfOfUserIdentity>;
+export declare const AsAppIdentitySchema: z.ZodType<AsAppIdentity>;
+export declare const AppInvocationIdentitySchema: z.ZodType<AppInvocationIdentity>;
+export declare function resolveInvocationActor(identity: AppInvocationIdentity): SubjectRef;
+//# sourceMappingURL=app-invocation-identity.d.ts.map

package/dist/principal/lib/app-invocation-identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-invocation-identity.d.ts","sourceRoot":"","sources":["../../../src/principal/lib/app-invocation-identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAGL,KAAK,UAAU,EAChB,MAAM,eAAe,CAAC;AAmBvB,oBAAY,iBAAiB;IAE3B,cAAc,sBAAsB;IAEpC,KAAK,WAAW;CACjB;AAED,eAAO,MAAM,uBAAuB,qCAAkC,CAAC;AAMvE,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,iBAAiB,CAAC,cAAc,CAAC;IAEvC,IAAI,EAAE,UAAU,CAAC;IAEjB,KAAK,EAAE,MAAM,CAAC;CACf;AAMD,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,iBAAiB,CAAC,KAAK,CAAC;IAE9B,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,MAAM,qBAAqB,GAAG,sBAAsB,GAAG,aAAa,CAAC;AAa3E,eAAO,MAAM,4BAA4B,EAChB,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;AAE3D,eAAO,MAAM,mBAAmB,EAAiB,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;AAE1E,eAAO,MAAM,2BAA2B,EAGlC,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;AASvC,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,qBAAqB,GAC9B,UAAU,CAOZ"}

package/dist/principal/lib/app-invocation-identity.js

@@ -0,0 +1,36 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AppInvocationIdentitySchema = exports.AsAppIdentitySchema = exports.OnBehalfOfUserIdentitySchema = exports.AppInvocationModeSchema = exports.AppInvocationMode = void 0;
+exports.resolveInvocationActor = resolveInvocationActor;
+const zod_1 = require("zod");
+const subject_1 = require("../../subject");
+var AppInvocationMode;
+(function (AppInvocationMode) {
+    AppInvocationMode["OnBehalfOfUser"] = "on-behalf-of-user";
+    AppInvocationMode["AsApp"] = "as-app";
+})(AppInvocationMode || (exports.AppInvocationMode = AppInvocationMode = {}));
+exports.AppInvocationModeSchema = zod_1.z.nativeEnum(AppInvocationMode);
+const onBehalfOfUserShape = zod_1.z.object({
+    mode: zod_1.z.literal(AppInvocationMode.OnBehalfOfUser),
+    user: subject_1.SubjectRefSchema,
+    appId: zod_1.z.string().min(1),
+});
+const asAppShape = zod_1.z.object({
+    mode: zod_1.z.literal(AppInvocationMode.AsApp),
+    appId: zod_1.z.string().min(1),
+});
+exports.OnBehalfOfUserIdentitySchema = onBehalfOfUserShape;
+exports.AsAppIdentitySchema = asAppShape;
+exports.AppInvocationIdentitySchema = zod_1.z.discriminatedUnion('mode', [
+    onBehalfOfUserShape,
+    asAppShape,
+]);
+function resolveInvocationActor(identity) {
+    switch (identity.mode) {
+        case AppInvocationMode.OnBehalfOfUser:
+            return identity.user;
+        case AppInvocationMode.AsApp:
+            return { kind: subject_1.SubjectKind.App, id: identity.appId };
+    }
+}
+//# sourceMappingURL=app-invocation-identity.js.map

package/dist/principal/lib/app-invocation-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-invocation-identity.js","sourceRoot":"","sources":["../../../src/principal/lib/app-invocation-identity.ts"],"names":[],"mappings":";;;AAqFA,wDASC;AA9FD,6BAAwB;AACxB,2CAIuB;AAmBvB,IAAY,iBAKX;AALD,WAAY,iBAAiB;IAE3B,yDAAoC,CAAA;IAEpC,qCAAgB,CAAA;AAClB,CAAC,EALW,iBAAiB,iCAAjB,iBAAiB,QAK5B;AAEY,QAAA,uBAAuB,GAAG,OAAC,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;AA0BvE,MAAM,mBAAmB,GAAG,OAAC,CAAC,MAAM,CAAC;IACnC,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,cAAc,CAAC;IACjD,IAAI,EAAE,0BAAgB;IACtB,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACzB,CAAC,CAAC;AAEH,MAAM,UAAU,GAAG,OAAC,CAAC,MAAM,CAAC;IAC1B,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,KAAK,CAAC;IACxC,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACzB,CAAC,CAAC;AAEU,QAAA,4BAA4B,GACvC,mBAAwD,CAAC;AAE9C,QAAA,mBAAmB,GAAG,UAAsC,CAAC;AAE7D,QAAA,2BAA2B,GAAG,OAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACtE,mBAAmB;IACnB,UAAU;CACX,CAAqC,CAAC;AASvC,SAAgB,sBAAsB,CACpC,QAA+B;IAE/B,QAAQ,QAAQ,CAAC,IAAI,EAAE,CAAC;QACtB,KAAK,iBAAiB,CAAC,cAAc;YACnC,OAAO,QAAQ,CAAC,IAAI,CAAC;QACvB,KAAK,iBAAiB,CAAC,KAAK;YAC1B,OAAO,EAAE,IAAI,EAAE,qBAAW,CAAC,GAAG,EAAE,EAAE,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;IACzD,CAAC;AACH,CAAC"}

package/dist/principal/lib/clamp-authority.d.ts

@@ -0,0 +1,4 @@
+import type { CapabilityRef } from '../../capability';
+export declare function clampAuthority(executorGrants: ReadonlySet<CapabilityRef>, actorEffective: ReadonlySet<CapabilityRef>): Set<CapabilityRef>;
+export declare function clampAuthorityChain(authoritySets: ReadonlyArray<ReadonlySet<CapabilityRef>>): Set<CapabilityRef>;
+//# sourceMappingURL=clamp-authority.d.ts.map

package/dist/principal/lib/clamp-authority.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"clamp-authority.d.ts","sourceRoot":"","sources":["../../../src/principal/lib/clamp-authority.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AA4BtD,wBAAgB,cAAc,CAC5B,cAAc,EAAE,WAAW,CAAC,aAAa,CAAC,EAC1C,cAAc,EAAE,WAAW,CAAC,aAAa,CAAC,GACzC,GAAG,CAAC,aAAa,CAAC,CAapB;AASD,wBAAgB,mBAAmB,CACjC,aAAa,EAAE,aAAa,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,GACvD,GAAG,CAAC,aAAa,CAAC,CAQpB"}

package/dist/principal/lib/clamp-authority.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.clampAuthority = clampAuthority;
+exports.clampAuthorityChain = clampAuthorityChain;
+function clampAuthority(executorGrants, actorEffective) {
+    const [smaller, larger] = executorGrants.size <= actorEffective.size
+        ? [executorGrants, actorEffective]
+        : [actorEffective, executorGrants];
+    const intersection = new Set();
+    for (const ref of smaller) {
+        if (larger.has(ref)) {
+            intersection.add(ref);
+        }
+    }
+    return intersection;
+}
+function clampAuthorityChain(authoritySets) {
+    if (authoritySets.length === 0) {
+        return new Set();
+    }
+    return authoritySets.reduce((acc, next) => clampAuthority(acc, next), new Set(authoritySets[0]));
+}
+//# sourceMappingURL=clamp-authority.js.map

package/dist/principal/lib/clamp-authority.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clamp-authority.js","sourceRoot":"","sources":["../../../src/principal/lib/clamp-authority.ts"],"names":[],"mappings":";;AA4BA,wCAgBC;AASD,kDAUC;AAnCD,SAAgB,cAAc,CAC5B,cAA0C,EAC1C,cAA0C;IAE1C,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,GACrB,cAAc,CAAC,IAAI,IAAI,cAAc,CAAC,IAAI;QACxC,CAAC,CAAC,CAAC,cAAc,EAAE,cAAc,CAAC;QAClC,CAAC,CAAC,CAAC,cAAc,EAAE,cAAc,CAAC,CAAC;IAEvC,MAAM,YAAY,GAAG,IAAI,GAAG,EAAiB,CAAC;IAC9C,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACpB,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AASD,SAAgB,mBAAmB,CACjC,aAAwD;IAExD,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,OAAO,IAAI,GAAG,EAAiB,CAAC;IAClC,CAAC;IACD,OAAO,aAAa,CAAC,MAAM,CACzB,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,EACxC,IAAI,GAAG,CAAgB,aAAa,CAAC,CAAC,CAAC,CAAC,CACzC,CAAC;AACJ,CAAC"}

package/dist/principal/lib/delegation-chain.d.ts

@@ -0,0 +1,26 @@
+import { z } from 'zod';
+import { type SubjectRef } from '../../subject';
+import type { DelegationGrant } from './delegation-grant';
+export declare const MAX_DELEGATION_DEPTH = 3;
+export declare enum DelegationErrorCode {
+    ChainTooDeep = "DELEGATION_CHAIN_TOO_DEEP",
+    Cycle = "DELEGATION_CHAIN_CYCLE",
+    Discontinuous = "DELEGATION_CHAIN_DISCONTINUOUS",
+    NotAnchoredAtActor = "DELEGATION_CHAIN_NOT_ANCHORED_AT_ACTOR",
+    NotAnchoredAtExecutor = "DELEGATION_CHAIN_NOT_ANCHORED_AT_EXECUTOR",
+    EmptyChainMismatch = "DELEGATION_CHAIN_EMPTY_MISMATCH"
+}
+export declare const DelegationErrorCodeSchema: z.ZodEnum<typeof DelegationErrorCode>;
+export declare class DelegationChainError extends Error {
+    readonly code: DelegationErrorCode;
+    constructor(args: {
+        code: DelegationErrorCode;
+        message: string;
+    });
+}
+export declare function resolveDelegationChain(args: {
+    actor: SubjectRef;
+    executor: SubjectRef;
+    chain: readonly DelegationGrant[];
+}): readonly DelegationGrant[];
+//# sourceMappingURL=delegation-chain.d.ts.map

package/dist/principal/lib/delegation-chain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegation-chain.d.ts","sourceRoot":"","sources":["../../../src/principal/lib/delegation-chain.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAsB,KAAK,UAAU,EAAE,MAAM,eAAe,CAAC;AACpE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAQ1D,eAAO,MAAM,oBAAoB,IAAI,CAAC;AAMtC,oBAAY,mBAAmB;IAE7B,YAAY,8BAA8B;IAE1C,KAAK,2BAA2B;IAEhC,aAAa,mCAAmC;IAEhD,kBAAkB,2CAA2C;IAE7D,qBAAqB,8CAA8C;IAMnE,kBAAkB,oCAAoC;CACvD;AAED,eAAO,MAAM,yBAAyB,uCAAoC,CAAC;AAM3E,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;gBAEvB,IAAI,EAAE;QAAE,IAAI,EAAE,mBAAmB,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE;CAKjE;AAuBD,wBAAgB,sBAAsB,CAAC,IAAI,EAAE;IAC3C,KAAK,EAAE,UAAU,CAAC;IAClB,QAAQ,EAAE,UAAU,CAAC;IACrB,KAAK,EAAE,SAAS,eAAe,EAAE,CAAC;CACnC,GAAG,SAAS,eAAe,EAAE,CAoE7B"}

package/dist/principal/lib/delegation-chain.js

@@ -0,0 +1,81 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DelegationChainError = exports.DelegationErrorCodeSchema = exports.DelegationErrorCode = exports.MAX_DELEGATION_DEPTH = void 0;
+exports.resolveDelegationChain = resolveDelegationChain;
+const zod_1 = require("zod");
+const subject_1 = require("../../subject");
+exports.MAX_DELEGATION_DEPTH = 3;
+var DelegationErrorCode;
+(function (DelegationErrorCode) {
+    DelegationErrorCode["ChainTooDeep"] = "DELEGATION_CHAIN_TOO_DEEP";
+    DelegationErrorCode["Cycle"] = "DELEGATION_CHAIN_CYCLE";
+    DelegationErrorCode["Discontinuous"] = "DELEGATION_CHAIN_DISCONTINUOUS";
+    DelegationErrorCode["NotAnchoredAtActor"] = "DELEGATION_CHAIN_NOT_ANCHORED_AT_ACTOR";
+    DelegationErrorCode["NotAnchoredAtExecutor"] = "DELEGATION_CHAIN_NOT_ANCHORED_AT_EXECUTOR";
+    DelegationErrorCode["EmptyChainMismatch"] = "DELEGATION_CHAIN_EMPTY_MISMATCH";
+})(DelegationErrorCode || (exports.DelegationErrorCode = DelegationErrorCode = {}));
+exports.DelegationErrorCodeSchema = zod_1.z.nativeEnum(DelegationErrorCode);
+class DelegationChainError extends Error {
+    code;
+    constructor(args) {
+        super(args.message);
+        this.name = 'DelegationChainError';
+        this.code = args.code;
+    }
+}
+exports.DelegationChainError = DelegationChainError;
+function subjectsEqual(a, b) {
+    return (0, subject_1.subjectRefToString)(a) === (0, subject_1.subjectRefToString)(b);
+}
+function resolveDelegationChain(args) {
+    const { actor, executor, chain } = args;
+    if (chain.length === 0) {
+        if (!subjectsEqual(actor, executor)) {
+            throw new DelegationChainError({
+                code: DelegationErrorCode.EmptyChainMismatch,
+                message: `Empty delegation chain requires actor === executor, but actor "${(0, subject_1.subjectRefToString)(actor)}" ≠ executor "${(0, subject_1.subjectRefToString)(executor)}".`,
+            });
+        }
+        return Object.freeze([]);
+    }
+    if (chain.length > exports.MAX_DELEGATION_DEPTH) {
+        throw new DelegationChainError({
+            code: DelegationErrorCode.ChainTooDeep,
+            message: `Delegation chain has ${chain.length} hops; the maximum is ${exports.MAX_DELEGATION_DEPTH}.`,
+        });
+    }
+    if (!subjectsEqual(chain[0].from, actor)) {
+        throw new DelegationChainError({
+            code: DelegationErrorCode.NotAnchoredAtActor,
+            message: `Delegation chain must start at actor "${(0, subject_1.subjectRefToString)(actor)}", but its first hop starts at "${(0, subject_1.subjectRefToString)(chain[0].from)}".`,
+        });
+    }
+    const last = chain[chain.length - 1];
+    if (!subjectsEqual(last.to, executor)) {
+        throw new DelegationChainError({
+            code: DelegationErrorCode.NotAnchoredAtExecutor,
+            message: `Delegation chain must end at executor "${(0, subject_1.subjectRefToString)(executor)}", but its last hop ends at "${(0, subject_1.subjectRefToString)(last.to)}".`,
+        });
+    }
+    const seen = new Set();
+    const firstKey = (0, subject_1.subjectRefToString)(chain[0].from);
+    seen.add(firstKey);
+    for (let i = 0; i < chain.length; i += 1) {
+        if (i > 0 && !subjectsEqual(chain[i - 1].to, chain[i].from)) {
+            throw new DelegationChainError({
+                code: DelegationErrorCode.Discontinuous,
+                message: `Delegation chain is not contiguous at hop ${i}: previous "to" "${(0, subject_1.subjectRefToString)(chain[i - 1].to)}" ≠ this "from" "${(0, subject_1.subjectRefToString)(chain[i].from)}".`,
+            });
+        }
+        const toKey = (0, subject_1.subjectRefToString)(chain[i].to);
+        if (seen.has(toKey)) {
+            throw new DelegationChainError({
+                code: DelegationErrorCode.Cycle,
+                message: `Delegation chain contains a cycle: subject "${toKey}" appears more than once.`,
+            });
+        }
+        seen.add(toKey);
+    }
+    return Object.freeze([...chain]);
+}
+//# sourceMappingURL=delegation-chain.js.map

package/dist/principal/lib/delegation-chain.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegation-chain.js","sourceRoot":"","sources":["../../../src/principal/lib/delegation-chain.ts"],"names":[],"mappings":";;;AAwEA,wDAwEC;AAhJD,6BAAwB;AACxB,2CAAoE;AASvD,QAAA,oBAAoB,GAAG,CAAC,CAAC;AAMtC,IAAY,mBAiBX;AAjBD,WAAY,mBAAmB;IAE7B,iEAA0C,CAAA;IAE1C,uDAAgC,CAAA;IAEhC,uEAAgD,CAAA;IAEhD,oFAA6D,CAAA;IAE7D,0FAAmE,CAAA;IAMnE,6EAAsD,CAAA;AACxD,CAAC,EAjBW,mBAAmB,mCAAnB,mBAAmB,QAiB9B;AAEY,QAAA,yBAAyB,GAAG,OAAC,CAAC,UAAU,CAAC,mBAAmB,CAAC,CAAC;AAM3E,MAAa,oBAAqB,SAAQ,KAAK;IACpC,IAAI,CAAsB;IAEnC,YAAY,IAAoD;QAC9D,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpB,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;QACnC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IACxB,CAAC;CACF;AARD,oDAQC;AAED,SAAS,aAAa,CAAC,CAAa,EAAE,CAAa;IACjD,OAAO,IAAA,4BAAkB,EAAC,CAAC,CAAC,KAAK,IAAA,4BAAkB,EAAC,CAAC,CAAC,CAAC;AACzD,CAAC;AAmBD,SAAgB,sBAAsB,CAAC,IAItC;IACC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;IAIxC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,oBAAoB,CAAC;gBAC7B,IAAI,EAAE,mBAAmB,CAAC,kBAAkB;gBAC5C,OAAO,EAAE,kEAAkE,IAAA,4BAAkB,EAC3F,KAAK,CACN,iBAAiB,IAAA,4BAAkB,EAAC,QAAQ,CAAC,IAAI;aACnD,CAAC,CAAC;QACL,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC3B,CAAC;IAED,IAAI,KAAK,CAAC,MAAM,GAAG,4BAAoB,EAAE,CAAC;QACxC,MAAM,IAAI,oBAAoB,CAAC;YAC7B,IAAI,EAAE,mBAAmB,CAAC,YAAY;YACtC,OAAO,EAAE,wBAAwB,KAAK,CAAC,MAAM,yBAAyB,4BAAoB,GAAG;SAC9F,CAAC,CAAC;IACL,CAAC;IAGD,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,oBAAoB,CAAC;YAC7B,IAAI,EAAE,mBAAmB,CAAC,kBAAkB;YAC5C,OAAO,EAAE,yCAAyC,IAAA,4BAAkB,EAClE,KAAK,CACN,mCAAmC,IAAA,4BAAkB,EAAC,KAAK,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,IAAI;SAC3E,CAAC,CAAC;IACL,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC;IACtC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,CAAC,EAAE,CAAC;QACtC,MAAM,IAAI,oBAAoB,CAAC;YAC7B,IAAI,EAAE,mBAAmB,CAAC,qBAAqB;YAC/C,OAAO,EAAE,0CAA0C,IAAA,4BAAkB,EACnE,QAAQ,CACT,gCAAgC,IAAA,4BAAkB,EAAC,IAAI,CAAC,EAAE,CAAC,IAAI;SACjE,CAAC,CAAC;IACL,CAAC;IAID,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,QAAQ,GAAG,IAAA,4BAAkB,EAAC,KAAK,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,CAAC;IACpD,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9D,MAAM,IAAI,oBAAoB,CAAC;gBAC7B,IAAI,EAAE,mBAAmB,CAAC,aAAa;gBACvC,OAAO,EAAE,6CAA6C,CAAC,oBAAoB,IAAA,4BAAkB,EAC3F,KAAK,CAAC,CAAC,GAAG,CAAC,CAAE,CAAC,EAAE,CACjB,oBAAoB,IAAA,4BAAkB,EAAC,KAAK,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC,IAAI;aAC5D,CAAC,CAAC;QACL,CAAC;QACD,MAAM,KAAK,GAAG,IAAA,4BAAkB,EAAC,KAAK,CAAC,CAAC,CAAE,CAAC,EAAE,CAAC,CAAC;QAC/C,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YACpB,MAAM,IAAI,oBAAoB,CAAC;gBAC7B,IAAI,EAAE,mBAAmB,CAAC,KAAK;gBAC/B,OAAO,EAAE,+CAA+C,KAAK,2BAA2B;aACzF,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC;AACnC,CAAC"}

package/dist/principal/lib/delegation-grant.d.ts

@@ -0,0 +1,10 @@
+import { z } from 'zod';
+import { type SubjectRef } from '../../subject';
+export interface DelegationGrant {
+    from: SubjectRef;
+    to: SubjectRef;
+    grantedAt: string;
+    reason?: string;
+}
+export declare const DelegationGrantSchema: z.ZodType<DelegationGrant>;
+//# sourceMappingURL=delegation-grant.d.ts.map

package/dist/principal/lib/delegation-grant.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegation-grant.d.ts","sourceRoot":"","sources":["../../../src/principal/lib/delegation-grant.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAoB,KAAK,UAAU,EAAE,MAAM,eAAe,CAAC;AAkBlE,MAAM,WAAW,eAAe;IAE9B,IAAI,EAAE,UAAU,CAAC;IAEjB,EAAE,EAAE,UAAU,CAAC;IAEf,SAAS,EAAE,MAAM,CAAC;IAElB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,eAAO,MAAM,qBAAqB,EAK5B,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC"}

package/dist/principal/lib/delegation-grant.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DelegationGrantSchema = void 0;
+const zod_1 = require("zod");
+const subject_1 = require("../../subject");
+exports.DelegationGrantSchema = zod_1.z.object({
+    from: subject_1.SubjectRefSchema,
+    to: subject_1.SubjectRefSchema,
+    grantedAt: zod_1.z.string().datetime(),
+    reason: zod_1.z.string().min(1).optional(),
+});
+//# sourceMappingURL=delegation-grant.js.map

package/dist/principal/lib/delegation-grant.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegation-grant.js","sourceRoot":"","sources":["../../../src/principal/lib/delegation-grant.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,2CAAkE;AA6BrD,QAAA,qBAAqB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC5C,IAAI,EAAE,0BAAgB;IACtB,EAAE,EAAE,0BAAgB;IACpB,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,MAAM,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACrC,CAA+B,CAAC"}

package/dist/principal/lib/execution-principal.d.ts

@@ -0,0 +1,20 @@
+import { z } from 'zod';
+import { type SubjectRef, type TokenClass } from '../../subject';
+import { type ExecutionEnvironmentRef } from '../../execution-environment';
+import { type AppChannel } from '../../app-runtime';
+import { type DelegationGrant } from './delegation-grant';
+export interface ExecutionPrincipal {
+    actor: SubjectRef;
+    executor: SubjectRef;
+    delegationChain: DelegationGrant[];
+    tokenClass: TokenClass;
+    environment: ExecutionEnvironmentRef;
+    orgId: string;
+    appId?: string;
+    releaseId?: string;
+    channel?: AppChannel;
+    tenantId?: string;
+    purpose?: string;
+}
+export declare const ExecutionPrincipalSchema: z.ZodType<ExecutionPrincipal>;
+//# sourceMappingURL=execution-principal.d.ts.map

package/dist/principal/lib/execution-principal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-principal.d.ts","sourceRoot":"","sources":["../../../src/principal/lib/execution-principal.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAGL,KAAK,UAAU,EACf,KAAK,UAAU,EAChB,MAAM,eAAe,CAAC;AACvB,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAoB,KAAK,UAAU,EAAE,MAAM,mBAAmB,CAAC;AACtE,OAAO,EAAyB,KAAK,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAwBjF,MAAM,WAAW,kBAAkB;IAEjC,KAAK,EAAE,UAAU,CAAC;IAElB,QAAQ,EAAE,UAAU,CAAC;IAErB,eAAe,EAAE,eAAe,EAAE,CAAC;IAEnC,UAAU,EAAE,UAAU,CAAC;IAEvB,WAAW,EAAE,uBAAuB,CAAC;IAErC,KAAK,EAAE,MAAM,CAAC;IAEd,KAAK,CAAC,EAAE,MAAM,CAAC;IAEf,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,OAAO,CAAC,EAAE,UAAU,CAAC;IAErB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,eAAO,MAAM,wBAAwB,EAY/B,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC"}

package/dist/principal/lib/execution-principal.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ExecutionPrincipalSchema = void 0;
+const zod_1 = require("zod");
+const subject_1 = require("../../subject");
+const execution_environment_1 = require("../../execution-environment");
+const app_runtime_1 = require("../../app-runtime");
+const delegation_grant_1 = require("./delegation-grant");
+exports.ExecutionPrincipalSchema = zod_1.z.object({
+    actor: subject_1.SubjectRefSchema,
+    executor: subject_1.SubjectRefSchema,
+    delegationChain: zod_1.z.array(delegation_grant_1.DelegationGrantSchema),
+    tokenClass: subject_1.TokenClassSchema,
+    environment: execution_environment_1.ExecutionEnvironmentRefSchema,
+    orgId: zod_1.z.string().min(1),
+    appId: zod_1.z.string().min(1).optional(),
+    releaseId: zod_1.z.string().min(1).optional(),
+    channel: app_runtime_1.AppChannelSchema.optional(),
+    tenantId: zod_1.z.string().min(1).optional(),
+    purpose: zod_1.z.string().min(1).optional(),
+});
+//# sourceMappingURL=execution-principal.js.map

package/dist/principal/lib/execution-principal.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execution-principal.js","sourceRoot":"","sources":["../../../src/principal/lib/execution-principal.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,2CAKuB;AACvB,uEAGqC;AACrC,mDAAsE;AACtE,yDAAiF;AAiDpE,QAAA,wBAAwB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC/C,KAAK,EAAE,0BAAgB;IACvB,QAAQ,EAAE,0BAAgB;IAC1B,eAAe,EAAE,OAAC,CAAC,KAAK,CAAC,wCAAqB,CAAC;IAC/C,UAAU,EAAE,0BAAgB;IAC5B,WAAW,EAAE,qDAA6B;IAC1C,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACnC,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACvC,OAAO,EAAE,8BAAgB,CAAC,QAAQ,EAAE;IACpC,QAAQ,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACtC,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACtC,CAAkC,CAAC"}