aimeat 2.7.0 → 3.0.0

package/dist/src/middleware/subdomain.js.map

@@ -1 +1 @@
-{"version":3,"file":"subdomain.js","sourceRoot":"","sources":["../../../src/middleware/subdomain.ts"],"names":[],"mappings":"AA6CA;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAoB;IACtD,qEAAqE;IACrE,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC5D,kGAAkG;IAClG,CAAC;IAAC,MAAM,CAAC,CAAC,kDAAkD,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACrD,MAAM,aAAa,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAEjE;;;;;OAKG;IACH,MAAM,aAAa,GAAG,CAAC,GAAY,EAAiB,EAAE;QACpD,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAChD,KAAK,MAAM,MAAM,IAAI,CAAC,OAAO,EAAE,aAAa,EAAE,QAAQ,CAAC,EAAE,CAAC;YACxD,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,GAAG,MAAM,CAAC;gBAAE,SAAS;YACtD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;YAClD,8EAA8E;YAC9E,OAAO,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QACtD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,OAAO,CAAC,GAAY,EAAE,IAAc,EAAE,IAAkB,EAAE,EAAE;QAC1D,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC;QACrB,GAAG,CAAC,SAAS,GAAG,KAAK,CAAC;QACtB,GAAG,CAAC,eAAe,GAAG,KAAK,CAAC;QAE5B,yEAAyE;QACzE,wDAAwD;QACxD,MAAM,UAAU,GAAG,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAC1C,MAAM,SAAS,GAAG,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC1C,MAAM,eAAe,GAAG,GAAG,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;QACtD,IAAI,SAAS,IAAI,eAAe,IAAI,UAAU,EAAE,CAAC;YAC/C,IAAI,SAAS,IAAI,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,SAAS,CAAC,IAAI,EAAE,KAAK,GAAG;gBAAE,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC;YAC3F,IAAI,eAAe,IAAI,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,eAAe,CAAC,IAAI,EAAE,KAAK,GAAG;gBAAE,GAAG,CAAC,eAAe,GAAG,IAAI,CAAC;YACnH,0FAA0F;YAC1F,2FAA2F;YAC3F,4FAA4F;YAC5F,yFAAyF;YACzF,GAAG,CAAC,SAAS,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC,GAAG,CAAC,CAAC;YAC5F,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QAED,2EAA2E;QAC3E,4EAA4E;QAC5E,uDAAuD;QACvD,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAChD,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;gBACrB,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC,2CAA2C;gBACjE,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YACD,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,GAAG,OAAO,CAAC,EAAE,CAAC;gBACjC,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC;gBACrB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;gBACnD,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;oBAAE,GAAG,CAAC,SAAS,GAAG,KAAK,CAAC,CAAC,oBAAoB;gBAC9E,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;QACH,CAAC;QACD,IAAI,aAAa,EAAE,CAAC;YAClB,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;gBAC3B,GAAG,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC,yDAAyD;gBACrF,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YACD,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,GAAG,aAAa,CAAC,EAAE,CAAC;gBACvC,GAAG,CAAC,eAAe,GAAG,IAAI,CAAC;gBAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;gBACzD,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;oBAAE,GAAG,CAAC,SAAS,GAAG,KAAK,CAAC,CAAC,8BAA8B;gBACxF,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;QACH,CAAC;QACD,IAAI,QAAQ,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,GAAG,QAAQ,CAAC,EAAE,CAAC;YACnE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;YACpD,6EAA6E;YAC7E,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,GAAG,CAAC,SAAS,GAAG,KAAK,CAAC;QAC3D,CAAC;QACD,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"subdomain.js","sourceRoot":"","sources":["../../../src/middleware/subdomain.ts"],"names":[],"mappings":"AAuCA,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AA6B5C;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAoB;IACtD,qEAAqE;IACrE,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QAC5D,kGAAkG;IAClG,CAAC;IAAC,MAAM,CAAC,CAAC,kDAAkD,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACrD,MAAM,aAAa,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACjE,MAAM,MAAM,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAEnD;;;;;;;;OAQG;IACH,MAAM,MAAM,GAAG,CAAC,GAAY,EAAU,EAAE;QACtC,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAC1D,oFAAoF;QACpF,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QACnE,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC/B,OAAO,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAClD,CAAC,CAAC;IAEF;;;OAGG;IACH,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAE,MAAc,EAAW,EAAE;QACzD,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QACnC,IAAI,IAAI,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC;QACjC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,GAAG,MAAM,CAAC;YAAE,OAAO,KAAK,CAAC;QAC/C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;QAClD,qFAAqF;QACrF,OAAO,KAAK,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC9C,CAAC,CAAC;IAEF;;;;;;;;;;;;;OAaG;IACH,MAAM,MAAM,GAAG,CAAC,GAAY,EAAE,MAAc,EAAE,UAAkB,EAAW,EAAE;QAC3E,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC5B,IAAI,CAAC,GAAG;YAAE,OAAO,KAAK,CAAC;QACvB,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACzB,IAAI,KAAK,KAAK,EAAE,IAAI,KAAK,KAAK,GAAG;YAAE,OAAO,KAAK,CAAC;QAChD,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;YAAE,OAAO,IAAI,CAAC;QAC5C,MAAM,CAAC,IAAI,CAAC,mEAAmE,EAAE;YAC/E,MAAM,EAAE,IAAI,EAAE,IAAI,IAAI,QAAQ,EAAE,MAAM,EAAE,UAAU,IAAI,kBAAkB,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI;SACzF,CAAC,CAAC;QACH,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IAEF;;;;;OAKG;IACH,MAAM,aAAa,GAAG,CAAC,GAAY,EAAiB,EAAE;QACpD,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAChD,KAAK,MAAM,MAAM,IAAI,CAAC,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC;YAChE,IAAI,CAAC,MAAM;gBAAE,SAAS;YACtB,2FAA2F;YAC3F,8FAA8F;YAC9F,6FAA6F;YAC7F,4FAA4F;YAC5F,IAAI,IAAI,KAAK,MAAM;gBAAE,OAAO,IAAI,CAAC;YACjC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,GAAG,MAAM,CAAC;gBAAE,SAAS;YAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;YAClD,8EAA8E;YAC9E,OAAO,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QACtD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,OAAO,CAAC,GAAY,EAAE,IAAc,EAAE,IAAkB,EAAE,EAAE;QAC1D,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC;QACrB,GAAG,CAAC,SAAS,GAAG,KAAK,CAAC;QACtB,GAAG,CAAC,eAAe,GAAG,KAAK,CAAC;QAC5B,GAAG,CAAC,QAAQ,GAAG,KAAK,CAAC;QAErB,yEAAyE;QACzE,6FAA6F;QAC7F,+FAA+F;QAC/F,0FAA0F;QAC1F,8DAA8D;QAC9D,MAAM,UAAU,GAAG,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QAC1C,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,EAAE,cAAc,EAAE,OAAO,CAAC,CAAC;QACnD,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,EAAE,oBAAoB,EAAE,aAAa,CAAC,CAAC;QACrE,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,EAAE,aAAa,EAAE,MAAM,CAAC,CAAC;QAChD,IAAI,KAAK,IAAI,WAAW,IAAI,IAAI,IAAI,UAAU,EAAE,CAAC;YAC/C,GAAG,CAAC,SAAS,GAAG,KAAK,CAAC;YACtB,GAAG,CAAC,eAAe,GAAG,WAAW,CAAC;YAClC,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAC;YACpB,0FAA0F;YAC1F,2FAA2F;YAC3F,4FAA4F;YAC5F,yFAAyF;YACzF,GAAG,CAAC,SAAS,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC,GAAG,CAAC,CAAC;YAC5F,OAAO,IAAI,EAAE,CAAC;QAChB,CAAC;QAED,2EAA2E;QAC3E,4EAA4E;QAC5E,uDAAuD;QACvD,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAChD,IAAI,OAAO,EAAE,CAAC;YACZ,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;gBACrB,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC,CAAC,2CAA2C;gBACjE,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YACD,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,GAAG,OAAO,CAAC,EAAE,CAAC;gBACjC,GAAG,CAAC,SAAS,GAAG,IAAI,CAAC;gBACrB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;gBACnD,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;oBAAE,GAAG,CAAC,SAAS,GAAG,KAAK,CAAC,CAAC,oBAAoB;gBAC9E,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;QACH,CAAC;QACD,IAAI,aAAa,EAAE,CAAC;YAClB,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;gBAC3B,GAAG,CAAC,eAAe,GAAG,IAAI,CAAC,CAAC,yDAAyD;gBACrF,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YACD,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,GAAG,aAAa,CAAC,EAAE,CAAC;gBACvC,GAAG,CAAC,eAAe,GAAG,IAAI,CAAC;gBAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;gBACzD,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;oBAAE,GAAG,CAAC,SAAS,GAAG,KAAK,CAAC,CAAC,8BAA8B;gBACxF,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;QACH,CAAC;QACD,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;gBACpB,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC,2DAA2D;gBAChF,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YACD,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,GAAG,MAAM,CAAC,EAAE,CAAC;gBAChC,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAC;gBACpB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;gBAClD,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;oBAAE,GAAG,CAAC,SAAS,GAAG,KAAK,CAAC,CAAC,mBAAmB;gBAC7E,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;QACH,CAAC;QACD,IAAI,QAAQ,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,GAAG,QAAQ,CAAC,EAAE,CAAC;YACnE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC;YACpD,6EAA6E;YAC7E,IAAI,KAAK,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;gBAAE,GAAG,CAAC,SAAS,GAAG,KAAK,CAAC;QAC3D,CAAC;QACD,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;AACJ,CAAC"}

package/dist/src/middleware/workspace-access.d.ts

@@ -1,9 +1,9 @@
 /**
  * @file workspace-access.ts
- * @description Express middleware that gates memory operations on `organism.{id}.*` keys by
- *   organism membership, namespace role (meta = admin/creator write, shared = member, member.{owner}
- *   = self), and the consent layer. Memberships are keyed by the BARE owner name (matching
- *   organisms.ts and consent.ts). Mounted by the memory routes for every organism-namespace key.
+ * @description Express wrapper over the organism-namespace access rule. The rule itself lives in
+ *   services/organism-namespace-access.ts, because it is not about HTTP: the MCP write path needs
+ *   the same answer and could not call a RequestHandler. This file turns a request into a caller and
+ *   a refusal into a response, and decides nothing on its own.
  * @structure
  *   - workspaceAccessMiddleware(config, storage) — RequestHandler that allows or 401/403/404s
  * @usage const ws = workspaceAccessMiddleware(config, storage); router.get('/v1/memory/:key', ws, ...);
@@ -18,6 +18,8 @@
  *   v1.4.0 -- 2026-07-15 -- An org manager (creator/admin) bypasses the consent check for organism keys —
  *     full read+write access to every workspace under the organism (the member.{owner}.* self-write and
  *     meta.* admin-role gates still apply).
+ *   v2.0.0 -- 2026-08-11 -- The rule moves to services/organism-namespace-access.ts so every door gets
+ *     it. This file keeps its behaviour and becomes the Express half of it.
  */
 import type { RequestHandler } from 'express';
 import type { AimeatConfig } from '../config.js';

package/dist/src/middleware/workspace-access.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workspace-access.d.ts","sourceRoot":"","sources":["../../../src/middleware/workspace-access.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAC9C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAGvD;;;;;;;;;;GAUG;AACH,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,YAAY,EACpB,OAAO,EAAE,OAAO,GACf,cAAc,CA8JhB"}
+{"version":3,"file":"workspace-access.d.ts","sourceRoot":"","sources":["../../../src/middleware/workspace-access.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAC9C,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AACjD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAIvD;;;;;;;;;;GAUG;AACH,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,YAAY,EACpB,OAAO,EAAE,OAAO,GACf,cAAc,CAkBhB"}

package/dist/src/middleware/workspace-access.js

@@ -1,4 +1,5 @@
 import { error } from './envelope.js';
+import { checkOrganismNamespaceAccess } from '../services/organism-namespace-access.js';
 /**
  * Workspace access middleware — Phase 2.3
  *
@@ -12,149 +13,19 @@ import { error } from './envelope.js';
  */
 export function workspaceAccessMiddleware(config, storage) {
     return async (req, res, next) => {
-        // Extract memory key from request
         // Memory routes use :key param in URLs like /v1/memory/:key
         const key = req.params.key;
-        if (!key)
+        if (!key || !key.startsWith('organism.'))
             return next();
-        // Only intercept organism.* namespace keys
-        const match = key.match(/^organism\.([^.]+)\./);
-        if (!match)
-            return next();
-        const organismId = match[1];
-        const ownerName = req.auth?.owner;
-        // Require authentication for all workspace operations
-        if (!ownerName) {
-            res.status(401).json(error(config.nodeId, 'AUTH_REQUIRED', 'Authentication required for workspace access'));
-            return;
-        }
-        // Look up the organism
-        const organism = await storage.getOrganism(organismId);
-        if (!organism) {
-            res.status(404).json(error(config.nodeId, 'NOT_FOUND', `Organism not found: ${organismId}`));
-            return;
-        }
-        // Check if the request is from an organism agent
-        if (req.auth?.sub && organism.agentGaiis.includes(req.auth.sub)) {
-            // Agent access — allowed for shared namespace reads and writes
-            if (key.startsWith(`organism.${organismId}.shared.`)) {
-                return next();
-            }
-            // Agents can read meta namespace
-            if (key.startsWith(`organism.${organismId}.meta.`) && ['GET', 'HEAD'].includes(req.method)) {
-                return next();
-            }
-            res.status(403).json(error(config.nodeId, 'ACCESS_DENIED', 'Agent not authorized for this workspace namespace'));
-            return;
-        }
-        // Confirm the user is a registered GHII on this node.
-        const userGhii = await storage.getGHIIByOwner(ownerName);
-        if (!userGhii) {
-            res.status(403).json(error(config.nodeId, 'ACCESS_DENIED', 'Not a member of this organism'));
+        const refusal = await checkOrganismNamespaceAccess({ storage, config }, {
+            principal: req.auth?.sub ?? '',
+            owner: req.auth?.owner ?? '',
+            roles: req.auth?.roles ?? [],
+        }, key, ['GET', 'HEAD'].includes(req.method) ? 'read' : 'write');
+        if (refusal) {
+            res.status(refusal.status).json(error(config.nodeId, refusal.code, refusal.message));
             return;
         }
-        // Memberships are keyed by the BARE owner name — organisms.ts (join/leave/admin) and
-        // consent.ts (organism resolution) both look up membership with req.auth.owner, NOT the
-        // full GHII. Looking it up by userGhii.ghii here silently 403'd every real member.
-        const membership = await storage.getMembership(organismId, ownerName);
-        if (!membership || membership.status !== 'active') {
-            res.status(403).json(error(config.nodeId, 'ACCESS_DENIED', 'Not an active member of this organism'));
-            return;
-        }
-        // An org manager (creator/admin) has automatic read+write access to every workspace under the
-        // organism — they already manage its access, invites, export and archive. So, like the human owner
-        // principal, their sessions (incl. their agents) do not need a per-workspace contributor consent.
-        const isOrgManager = membership.role === 'creator' || membership.role === 'admin';
-        // --- Consent check (Phase 2.3) ---
-        // Determine if consent is required for this operation.
-        // Consent is NOT required for:
-        //   - Writes to the member's own namespace (organism.{id}.member.{owner}.*)
-        // Consent IS required for:
-        //   - All READ operations on shared/meta namespaces
-        //   - Writes to shared namespace (not own member namespace)
-        const ownMemberPrefix = `organism.${organismId}.member.${ownerName}.`;
-        const isOwnMemberNamespace = key.startsWith(ownMemberPrefix);
-        // A human owner-role session (not an agent) acting as an active member is the principal — it
-        // does not consent to itself. The consent layer governs AGENT access (and cross-node sharing);
-        // agent sessions below still require a matching grant. This is what lets a logged-in human use
-        // their own project workspace from the UI without provisioning an agent-owned consent.
-        const isHumanOwnerSession = (req.auth?.roles ?? []).includes('owner') && !(req.auth?.roles ?? []).includes('agent');
-        // An AGENT of the workspace's OWN creator (same owner) is the creator's tool — like the human owner
-        // session, it does not consent to itself. Without this, a same-owner sub-agent (e.g. a CrewAI crew)
-        // could not write to its owner's organism workspace at all. Cross-owner member agents still need a
-        // granted 'workspace-contribution' consent. Scoped to workspace keys (organism.{id}.w.{ws}.*).
-        let isOwnWorkspaceAgent = false;
-        let wsCreator = null;
-        const wsMatch = key.match(/^organism\.[^.]+\.w\.([^.]+)\./);
-        const wsId = wsMatch ? wsMatch[1] : null;
-        if (wsId && !isHumanOwnerSession) {
-            const regKey = `organism.${organismId}.meta.workspaces`;
-            const { items } = await storage.listAllMemory({ prefix: regKey, limit: 1000 });
-            for (const rec of items) {
-                if (rec.key !== regKey)
-                    continue;
-                const list = rec.value?.workspaces ?? [];
-                const entry = list.find(w => w.id === wsId);
-                if (entry) {
-                    wsCreator = entry.createdBy ?? (rec.ownerGaii.includes('#') ? rec.ownerGaii.split('#')[1] : rec.ownerGaii).split('@')[0];
-                    if (wsCreator === ownerName)
-                        isOwnWorkspaceAgent = true;
-                    break;
-                }
-            }
-        }
-        // Consent needed unless writing your own member namespace, you're the human owner-principal, you're
-        // an agent of the workspace's own creator, or you're an org manager (creator/admin — full access).
-        const needsConsent = !isOwnMemberNamespace && !isHumanOwnerSession && !isOwnWorkspaceAgent && !isOrgManager;
-        if (needsConsent) {
-            let hasConsent = false;
-            if (wsId) {
-                // Workspace CONTENT (organism.{id}.w.{ws}.*): write requires the creator's 'contributor' ROLE
-                // grant — and only that, so the creator can revoke write by removing the grant. A 'viewer' grant
-                // gives read only (not matched here). The role is granted to the OWNER (recipient ghii:owner@node),
-                // so all the owner's agents inherit it. (Unlike the writer's own request-time consent, a
-                // creator-owned grant is revocable by the creator.)
-                if (wsCreator) {
-                    const creatorGhii = `${wsCreator}@${config.nodeId}`;
-                    const recipient = `ghii:${ownerName}@${config.nodeId}`;
-                    const pattern = `organism.${organismId}.w.${wsId}.**`;
-                    const grants = await storage.listConsents(creatorGhii, { status: 'active' });
-                    hasConsent = grants.some(c => c.purpose === 'workspace-contributor' && c.dataPattern === pattern && c.recipient === recipient);
-                }
-            }
-            else {
-                // Flat organism namespace (organism.{id}.shared.* etc.): the writer's own contribution consent,
-                // owned by the member's OWNER GHII or one of their agents (whichever made the grant).
-                const ownerGhii = `${ownerName}@${config.nodeId}`;
-                const agents = await storage.getAgentsByOwner(ownerName);
-                const accessorPattern = `organism.${organismId}`;
-                for (const accessor of [ownerGhii, ...agents.map(a => a.gaii)]) {
-                    if ((await storage.findMatchingConsents(accessor, key, accessorPattern)).length > 0) {
-                        hasConsent = true;
-                        break;
-                    }
-                }
-            }
-            if (!hasConsent) {
-                res.status(403).json(error(config.nodeId, 'CONSENT_REQUIRED', `Active consent required for organism workspace access (key: ${key})`));
-                return;
-            }
-        }
-        // Meta namespace: only admins/creators can write
-        if (key.startsWith(`organism.${organismId}.meta.`) && !['GET', 'HEAD'].includes(req.method)) {
-            if (membership.role !== 'admin' && membership.role !== 'creator') {
-                res.status(403).json(error(config.nodeId, 'ACCESS_DENIED', 'Admin access required for meta namespace'));
-                return;
-            }
-        }
-        // Member namespace: only the specific member can write
-        const memberMatch = key.match(/^organism\.[^.]+\.member\.([^.]+)\./);
-        if (memberMatch && !['GET', 'HEAD'].includes(req.method)) {
-            if (memberMatch[1] !== ownerName) {
-                res.status(403).json(error(config.nodeId, 'ACCESS_DENIED', 'Cannot write to another member\'s workspace'));
-                return;
-            }
-        }
         next();
     };
 }

package/dist/src/middleware/workspace-access.js.map

@@ -1 +1 @@
-{"version":3,"file":"workspace-access.js","sourceRoot":"","sources":["../../../src/middleware/workspace-access.ts"],"names":[],"mappings":"AAwBA,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAEtC;;;;;;;;;;GAUG;AACH,MAAM,UAAU,yBAAyB,CACvC,MAAoB,EACpB,OAAgB;IAEhB,OAAO,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC9B,kCAAkC;QAClC,4DAA4D;QAC5D,MAAM,GAAG,GAAI,GAAG,CAAC,MAAiC,CAAC,GAAG,CAAC;QACvD,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,EAAE,CAAC;QAExB,2CAA2C;QAC3C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAChD,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,EAAE,CAAC;QAE1B,MAAM,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,SAAS,GAAG,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC;QAElC,sDAAsD;QACtD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,8CAA8C,CAAC,CAAC,CAAC;YAC5G,OAAO;QACT,CAAC;QAED,uBAAuB;QACvB,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;QACvD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,uBAAuB,UAAU,EAAE,CAAC,CAAC,CAAC;YAC7F,OAAO;QACT,CAAC;QAED,iDAAiD;QACjD,IAAI,GAAG,CAAC,IAAI,EAAE,GAAG,IAAI,QAAQ,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAChE,+DAA+D;YAC/D,IAAI,GAAG,CAAC,UAAU,CAAC,YAAY,UAAU,UAAU,CAAC,EAAE,CAAC;gBACrD,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YACD,iCAAiC;YACjC,IAAI,GAAG,CAAC,UAAU,CAAC,YAAY,UAAU,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC3F,OAAO,IAAI,EAAE,CAAC;YAChB,CAAC;YACD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,mDAAmD,CAAC,CAAC,CAAC;YACjH,OAAO;QACT,CAAC;QAED,sDAAsD;QACtD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QAEzD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,+BAA+B,CAAC,CAAC,CAAC;YAC7F,OAAO;QACT,CAAC;QAED,qFAAqF;QACrF,wFAAwF;QACxF,mFAAmF;QACnF,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QACtE,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAClD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,uCAAuC,CAAC,CAAC,CAAC;YACrG,OAAO;QACT,CAAC;QACD,8FAA8F;QAC9F,mGAAmG;QACnG,kGAAkG;QAClG,MAAM,YAAY,GAAG,UAAU,CAAC,IAAI,KAAK,SAAS,IAAI,UAAU,CAAC,IAAI,KAAK,OAAO,CAAC;QAElF,oCAAoC;QACpC,uDAAuD;QACvD,+BAA+B;QAC/B,4EAA4E;QAC5E,2BAA2B;QAC3B,oDAAoD;QACpD,4DAA4D;QAC5D,MAAM,eAAe,GAAG,YAAY,UAAU,WAAW,SAAS,GAAG,CAAC;QACtE,MAAM,oBAAoB,GAAG,GAAG,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;QAE7D,6FAA6F;QAC7F,+FAA+F;QAC/F,+FAA+F;QAC/F,uFAAuF;QACvF,MAAM,mBAAmB,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAEpH,oGAAoG;QACpG,oGAAoG;QACpG,mGAAmG;QACnG,+FAA+F;QAC/F,IAAI,mBAAmB,GAAG,KAAK,CAAC;QAChC,IAAI,SAAS,GAAkB,IAAI,CAAC;QACpC,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACzC,IAAI,IAAI,IAAI,CAAC,mBAAmB,EAAE,CAAC;YACjC,MAAM,MAAM,GAAG,YAAY,UAAU,kBAAkB,CAAC;YACxD,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,OAAO,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAC/E,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;gBACxB,IAAI,GAAG,CAAC,GAAG,KAAK,MAAM;oBAAE,SAAS;gBACjC,MAAM,IAAI,GAAI,GAAG,CAAC,KAA2E,EAAE,UAAU,IAAI,EAAE,CAAC;gBAChH,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,IAAI,CAAC,CAAC;gBAC5C,IAAI,KAAK,EAAE,CAAC;oBACV,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;oBACzH,IAAI,SAAS,KAAK,SAAS;wBAAE,mBAAmB,GAAG,IAAI,CAAC;oBACxD,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;QAED,oGAAoG;QACpG,mGAAmG;QACnG,MAAM,YAAY,GAAG,CAAC,oBAAoB,IAAI,CAAC,mBAAmB,IAAI,CAAC,mBAAmB,IAAI,CAAC,YAAY,CAAC;QAE5G,IAAI,YAAY,EAAE,CAAC;YACjB,IAAI,UAAU,GAAG,KAAK,CAAC;YAEvB,IAAI,IAAI,EAAE,CAAC;gBACT,8FAA8F;gBAC9F,iGAAiG;gBACjG,oGAAoG;gBACpG,yFAAyF;gBACzF,oDAAoD;gBACpD,IAAI,SAAS,EAAE,CAAC;oBACd,MAAM,WAAW,GAAG,GAAG,SAAS,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;oBACpD,MAAM,SAAS,GAAG,QAAQ,SAAS,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;oBACvD,MAAM,OAAO,GAAG,YAAY,UAAU,MAAM,IAAI,KAAK,CAAC;oBACtD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;oBAC7E,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,uBAAuB,IAAI,CAAC,CAAC,WAAW,KAAK,OAAO,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC;gBACjI,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,gGAAgG;gBAChG,sFAAsF;gBACtF,MAAM,SAAS,GAAG,GAAG,SAAS,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;gBAClD,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAC;gBACzD,MAAM,eAAe,GAAG,YAAY,UAAU,EAAE,CAAC;gBACjD,KAAK,MAAM,QAAQ,IAAI,CAAC,SAAS,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;oBAC/D,IAAI,CAAC,MAAM,OAAO,CAAC,oBAAoB,CAAC,QAAQ,EAAE,GAAG,EAAE,eAAe,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBAAC,UAAU,GAAG,IAAI,CAAC;wBAAC,MAAM;oBAAC,CAAC;gBACpH,CAAC;YACH,CAAC;YAED,IAAI,CAAC,UAAU,EAAE,CAAC;gBAChB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,EAC1D,+DAA+D,GAAG,GAAG,CAAC,CAAC,CAAC;gBAC1E,OAAO;YACT,CAAC;QACH,CAAC;QAED,iDAAiD;QACjD,IAAI,GAAG,CAAC,UAAU,CAAC,YAAY,UAAU,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAC5F,IAAI,UAAU,CAAC,IAAI,KAAK,OAAO,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBACjE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,0CAA0C,CAAC,CAAC,CAAC;gBACxG,OAAO;YACT,CAAC;QACH,CAAC;QAED,uDAAuD;QACvD,MAAM,WAAW,GAAG,GAAG,CAAC,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACrE,IAAI,WAAW,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YACzD,IAAI,WAAW,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAC;gBACjC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE,6CAA6C,CAAC,CAAC,CAAC;gBAC3G,OAAO;YACT,CAAC;QACH,CAAC;QAED,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"workspace-access.js","sourceRoot":"","sources":["../../../src/middleware/workspace-access.ts"],"names":[],"mappings":"AA0BA,OAAO,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AACtC,OAAO,EAAE,4BAA4B,EAAE,MAAM,0CAA0C,CAAC;AAExF;;;;;;;;;;GAUG;AACH,MAAM,UAAU,yBAAyB,CACvC,MAAoB,EACpB,OAAgB;IAEhB,OAAO,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC9B,4DAA4D;QAC5D,MAAM,GAAG,GAAI,GAAG,CAAC,MAAiC,CAAC,GAAG,CAAC;QACvD,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC;YAAE,OAAO,IAAI,EAAE,CAAC;QAExD,MAAM,OAAO,GAAG,MAAM,4BAA4B,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE;YACtE,SAAS,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,IAAI,EAAE;YAC9B,KAAK,EAAG,GAAG,CAAC,IAAI,EAAE,KAAgB,IAAI,EAAE;YACxC,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE;SAC7B,EAAE,GAAG,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAEjE,IAAI,OAAO,EAAE,CAAC;YACZ,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;YACrF,OAAO;QACT,CAAC;QACD,IAAI,EAAE,CAAC;IACT,CAAC,CAAC;AACJ,CAAC"}

package/dist/src/models/agent-onboarding-schemas.d.ts

@@ -101,6 +101,15 @@ export type AgentMode = 'autonomous' | 'interactive' | 'task-runner' | 'coordina
  * progression label even when steps are filtered out.
  */
 export declare function createDefaultSteps(mode?: AgentMode): AgentOnboardingStep[];
+/**
+ * Re-derive the step list for `mode`, carrying progress over to every step that exists in both
+ * flows. Returns null when the flow is already the right one, so a caller can tell "nothing to do"
+ * from "here is the new list" without comparing the arrays itself.
+ *
+ * A step that only the OLD flow had is dropped, which is the point: an agent that turns out to be a
+ * workstation is not failing `configure_delivery`, it was never being asked.
+ */
+export declare function deriveStepsForMode(current: AgentOnboardingStep[], mode?: AgentMode): AgentOnboardingStep[] | null;
 export declare const IdentifyPlatformSchema: z.ZodObject<{
     platform: z.ZodString;
     platform_version: z.ZodOptional<z.ZodString>;

package/dist/src/models/agent-onboarding-schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-onboarding-schemas.d.ts","sourceRoot":"","sources":["../../../src/models/agent-onboarding-schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAEnE,eAAO,MAAM,mBAAmB,8UAiBtB,CAAC;AAEX,MAAM,MAAM,gBAAgB,GAAG,OAAO,mBAAmB,CAAC,MAAM,CAAC,CAAC;AAElE,UAAU,cAAc;IACtB,EAAE,EAAE,gBAAgB,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,OAAO,CAAC;IAClB,gBAAgB,EAAE,WAAW,GAAG,UAAU,GAAG,eAAe,CAAC;CAC9D;AA6CD,MAAM,MAAM,SAAS,GAAG,OAAO,GAAG,QAAQ,CAAC;AAE3C;;;;;;GAMG;AACH,MAAM,WAAW,SAAS;IACxB,0FAA0F;IAC1F,KAAK,EAAE,SAAS,CAAC;IACjB;qFACiF;IACjF,SAAS,EAAE,OAAO,CAAC;IACnB,wFAAwF;IACxF,eAAe,EAAE,OAAO,CAAC;IACzB,gBAAgB,EAAE,WAAW,GAAG,UAAU,GAAG,eAAe,CAAC;IAC7D;;iGAE6F;IAC7F,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB;sFACkF;IAClF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yEAAyE;IACzE,YAAY,EAAE;QAAE,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAChF;;2FAEuF;IACvF,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,0FAA0F;IAC1F,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;GAKG;AACH,eAAO,MAAM,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAuGnE,CAAC;AAEH,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAElE;AA2CD,MAAM,MAAM,SAAS,GAAG,YAAY,GAAG,aAAa,GAAG,aAAa,GAAG,aAAa,GAAG,aAAa,CAAC;AAErG;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,CAAC,EAAE,SAAS,GAAG,mBAAmB,EAAE,CAe1E;AAED,eAAO,MAAM,sBAAsB;;;;iBAOjC,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;iBAG7B,CAAC;AAEH,eAAO,MAAM,oBAAoB;;iBAE/B,CAAC;AAEH,eAAO,MAAM,qBAAqB;;;;;iBAKhC,CAAC;AAEH,eAAO,MAAM,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC,OAAO,CAAC,CAKrE,CAAC;AAEF,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAE5E"}
+{"version":3,"file":"agent-onboarding-schemas.d.ts","sourceRoot":"","sources":["../../../src/models/agent-onboarding-schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAEnE,eAAO,MAAM,mBAAmB,8UAiBtB,CAAC;AAEX,MAAM,MAAM,gBAAgB,GAAG,OAAO,mBAAmB,CAAC,MAAM,CAAC,CAAC;AAElE,UAAU,cAAc;IACtB,EAAE,EAAE,gBAAgB,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,OAAO,CAAC;IAClB,gBAAgB,EAAE,WAAW,GAAG,UAAU,GAAG,eAAe,CAAC;CAC9D;AA6CD,MAAM,MAAM,SAAS,GAAG,OAAO,GAAG,QAAQ,CAAC;AAE3C;;;;;;GAMG;AACH,MAAM,WAAW,SAAS;IACxB,0FAA0F;IAC1F,KAAK,EAAE,SAAS,CAAC;IACjB;qFACiF;IACjF,SAAS,EAAE,OAAO,CAAC;IACnB,wFAAwF;IACxF,eAAe,EAAE,OAAO,CAAC;IACzB,gBAAgB,EAAE,WAAW,GAAG,UAAU,GAAG,eAAe,CAAC;IAC7D;;iGAE6F;IAC7F,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB;sFACkF;IAClF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yEAAyE;IACzE,YAAY,EAAE;QAAE,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAChF;;2FAEuF;IACvF,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,0FAA0F;IAC1F,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;GAKG;AACH,eAAO,MAAM,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,gBAAgB,EAAE,SAAS,CAAC,CAuGnE,CAAC;AAEH,wBAAgB,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAElE;AA2CD,MAAM,MAAM,SAAS,GAAG,YAAY,GAAG,aAAa,GAAG,aAAa,GAAG,aAAa,GAAG,aAAa,CAAC;AAErG;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,CAAC,EAAE,SAAS,GAAG,mBAAmB,EAAE,CAe1E;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,mBAAmB,EAAE,EAC9B,IAAI,CAAC,EAAE,SAAS,GACf,mBAAmB,EAAE,GAAG,IAAI,CAa9B;AAED,eAAO,MAAM,sBAAsB;;;;iBAOjC,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;iBAG7B,CAAC;AAEH,eAAO,MAAM,oBAAoB;;iBAE/B,CAAC;AAEH,eAAO,MAAM,qBAAqB;;;;;iBAKhC,CAAC;AAEH,eAAO,MAAM,YAAY,EAAE,OAAO,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC,OAAO,CAAC,CAKrE,CAAC;AAEF,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAE5E"}

package/dist/src/models/agent-onboarding-schemas.js

@@ -273,6 +273,28 @@ export function createDefaultSteps(mode) {
         validationMethod: def.validationMethod,
     }));
 }
+/**
+ * Re-derive the step list for `mode`, carrying progress over to every step that exists in both
+ * flows. Returns null when the flow is already the right one, so a caller can tell "nothing to do"
+ * from "here is the new list" without comparing the arrays itself.
+ *
+ * A step that only the OLD flow had is dropped, which is the point: an agent that turns out to be a
+ * workstation is not failing `configure_delivery`, it was never being asked.
+ */
+export function deriveStepsForMode(current, mode) {
+    const target = createDefaultSteps(mode);
+    const currentIds = new Set(current.map(s => s.id));
+    const flowChanged = target.length !== current.length || target.some(s => !currentIds.has(s.id));
+    if (!flowChanged)
+        return null;
+    const prevById = new Map(current.map(s => [s.id, s]));
+    return target.map(fresh => {
+        const prev = prevById.get(fresh.id);
+        return prev
+            ? { ...fresh, status: prev.status, validatedAt: prev.validatedAt, details: prev.details, failureReason: prev.failureReason }
+            : fresh;
+    });
+}
 export const IdentifyPlatformSchema = z.object({
     platform: z.string().min(1).max(50),
     platform_version: z.string().max(50).optional(),

package/dist/src/models/agent-onboarding-schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-onboarding-schemas.js","sourceRoot":"","sources":["../../../src/models/agent-onboarding-schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,cAAc;IACd,mBAAmB;IACnB,eAAe;IACf,qBAAqB;IACrB,iBAAiB;IACjB,mBAAmB;IACnB,oBAAoB;IACpB,kBAAkB;IAClB,kBAAkB;IAClB,oBAAoB;IACpB,kBAAkB;IAClB,gBAAgB;IAChB,kBAAkB;IAClB,mBAAmB;IACnB,0BAA0B;IAC1B,aAAa;CACL,CAAC;AAaX,gGAAgG;AAChG,qEAAqE;AACrE,MAAM,iBAAiB,GAA2B;IAChD,YAAY,EAAE,+CAA+C;IAC7D,iBAAiB,EAAE,oDAAoD;IACvE,aAAa,EAAE,gDAAgD;IAC/D,mBAAmB,EAAE,sDAAsD;IAC3E,eAAe,EAAE,kDAAkD;IACnE,iBAAiB,EAAE,oDAAoD;IACvE,kBAAkB,EAAE,qDAAqD;IACzE,gBAAgB,EAAE,mDAAmD;IACrE,gBAAgB,EAAE,mDAAmD;IACrE,kBAAkB,EAAE,qDAAqD;IACzE,gBAAgB,EAAE,mDAAmD;IACrE,cAAc,EAAE,iDAAiD;IACjE,gBAAgB,EAAE,mDAAmD;IACrE,iBAAiB,EAAE,oDAAoD;IACvE,wBAAwB,EAAE,2DAA2D;IACrF,WAAW,EAAE,8CAA8C;CAC5D,CAAC;AAEF,MAAM,gBAAgB,GAAqB;IACzC,EAAE,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,iBAAiB,CAAC,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW,EAAE;IACnJ,EAAE,EAAE,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,WAAW,EAAE,iBAAiB,CAAC,iBAAiB,EAAE,QAAQ,EAAE,IAAI,EAAE,gBAAgB,EAAE,UAAU,EAAE;IACjK,EAAE,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,WAAW,EAAE,iBAAiB,CAAC,aAAa,EAAE,QAAQ,EAAE,IAAI,EAAE,gBAAgB,EAAE,UAAU,EAAE;IAC5J,EAAE,EAAE,EAAE,qBAAqB,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,WAAW,EAAE,iBAAiB,CAAC,mBAAmB,EAAE,QAAQ,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW,EAAE;IACxK,EAAE,EAAE,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAE,iBAAiB,CAAC,eAAe,EAAE,QAAQ,EAAE,IAAI,EAAE,gBAAgB,EAAE,UAAU,EAAE;IAC3J,EAAE,EAAE,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,WAAW,EAAE,iBAAiB,CAAC,iBAAiB,EAAE,QAAQ,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW,EAAE;IAClK,EAAE,EAAE,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,WAAW,EAAE,iBAAiB,CAAC,kBAAkB,EAAE,QAAQ,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW,EAAE;IACrK,EAAE,EAAE,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,iBAAiB,CAAC,gBAAgB,EAAE,QAAQ,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW,EAAE;IAC/J,EAAE,EAAE,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,iBAAiB,CAAC,gBAAgB,EAAE,QAAQ,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW,EAAE;IAC/J,EAAE,EAAE,EAAE,oBAAoB,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,WAAW,EAAE,iBAAiB,CAAC,kBAAkB,EAAE,QAAQ,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW,EAAE;IACtK,EAAE,EAAE,EAAE,kBAAkB,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE,WAAW,EAAE,iBAAiB,CAAC,gBAAgB,EAAE,QAAQ,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW,EAAE;IACtK,EAAE,EAAE,EAAE,gBAAgB,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE,WAAW,EAAE,iBAAiB,CAAC,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW,EAAE;IAClK,EAAE,EAAE,EAAE,kBAAkB,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,iBAAiB,CAAC,gBAAgB,EAAE,QAAQ,EAAE,KAAK,EAAE,gBAAgB,EAAE,UAAU,EAAE;IAChK,mGAAmG;IACnG,oGAAoG;IACpG,2FAA2F;IAC3F,EAAE,EAAE,EAAE,mBAAmB,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,WAAW,EAAE,iBAAiB,CAAC,iBAAiB,EAAE,QAAQ,EAAE,KAAK,EAAE,gBAAgB,EAAE,WAAW,EAAE;IACpK,EAAE,EAAE,EAAE,0BAA0B,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,mCAAmC,EAAE,WAAW,EAAE,iBAAiB,CAAC,wBAAwB,EAAE,QAAQ,EAAE,KAAK,EAAE,gBAAgB,EAAE,WAAW,EAAE;IAClM,EAAE,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,WAAW,EAAE,iBAAiB,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,gBAAgB,EAAE,WAAW,EAAE;CACtJ,CAAC;AAqCF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,UAAU,GAAkD,MAAM,CAAC,MAAM,CAAC;IACrF,YAAY,EAAE;QACZ,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW;QACtF,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI;QAC9B,WAAW,EAAE,+FAA+F;KAC7G;IACD,iBAAiB,EAAE;QACjB,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,gBAAgB,EAAE,UAAU;QACrF,IAAI,EAAE,qCAAqC;QAC3C,YAAY,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,qDAAqD,EAAE;QAC7F,IAAI,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,gBAAgB,EAAE,EAAE,EAAE;KACnD;IACD,aAAa,EAAE;QACb,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,gBAAgB,EAAE,UAAU;QACrF,IAAI,EAAE,2CAA2C;QACjD,YAAY,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,iDAAiD,EAAE;QACzF,IAAI,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE;KAChD;IACD,mBAAmB,EAAE;QACnB,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW;QACrF,IAAI,EAAE,kCAAkC;QACxC,YAAY,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,4BAA4B,EAAE;QACnE,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE;KACjF;IACD,eAAe,EAAE;QACf,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,gBAAgB,EAAE,UAAU;QACrF,IAAI,EAAE,2CAA2C;QACjD,YAAY,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,mDAAmD,EAAE;QAC3F,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE;KAC1B;IACD,iBAAiB,EAAE;QACjB,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW;QACrF,IAAI,EAAE,qBAAqB;QAC3B,YAAY,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,wBAAwB,EAAE;QAChE,IAAI,EAAE,EAAE,OAAO,EAAE,6CAA6C,EAAE;KACjE;IACD,kBAAkB,EAAE;QAClB,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW;QACtF,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI;QAC9B,WAAW,EAAE,uJAAuJ;KACrK;IACD,gBAAgB,EAAE;QAChB,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW;QACrF,IAAI,EAAE,+BAA+B;QACrC,YAAY,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,yBAAyB,EAAE;QACjE,IAAI,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE;KAC5D;IACD,gBAAgB,EAAE;QAChB,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW;QACrF,IAAI,EAAE,2BAA2B;QACjC,YAAY,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,oCAAoC,EAAE;QAC7E,IAAI,EAAE,EAAE,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,mCAAmC,EAAE,YAAY,EAAE,0BAA0B,EAAE,CAAC,EAAE;KACvI;IACD,kBAAkB,EAAE;QAClB,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW;QACrF,IAAI,EAAE,sBAAsB;QAC5B,YAAY,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,6CAA6C,EAAE;QACrF,IAAI,EAAE,EAAE,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,+BAA+B,EAAE;KAC9E;IACD,gBAAgB,EAAE;QAChB,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW;QACrF,IAAI,EAAE,qBAAqB;QAC3B,YAAY,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE;QACpD,IAAI,EAAE,EAAE,GAAG,EAAE,wBAAwB,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,uBAAuB,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,EAAE;KAC9H;IACD,cAAc,EAAE;QACd,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW;QACrF,IAAI,EAAE,qBAAqB;QAC3B,YAAY,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE;QACpD,IAAI,EAAE,EAAE,GAAG,EAAE,gCAAgC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE;KACnG;IACD,gBAAgB,EAAE;QAChB,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,gBAAgB,EAAE,UAAU;QACtF,IAAI,EAAE,oCAAoC;QAC1C,YAAY,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,oDAAoD,EAAE;QAC5F,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;KACvB;IACD,iBAAiB,EAAE;QACjB,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,gBAAgB,EAAE,WAAW;QACtF,IAAI,EAAE,qBAAqB,EAAE,SAAS,EAAE,uBAAuB;QAC/D,YAAY,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE;QACpD,IAAI,EAAE,EAAE,GAAG,EAAE,sBAAsB,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,eAAe,EAAE,GAAG,EAAE,wDAAwD,EAAE,CAAC,EAAE,EAAE;KACjL;IACD,wBAAwB,EAAE;QACxB,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,gBAAgB,EAAE,WAAW;QACtF,IAAI,EAAE,qBAAqB,EAAE,SAAS,EAAE,uBAAuB;QAC/D,YAAY,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE;QACpD,IAAI,EAAE,EAAE,GAAG,EAAE,sBAAsB,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC;wBACjE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,eAAe,EAAE,GAAG,EAAE,wDAAwD;wBACpG,cAAc,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,GAAG,EAAE,2BAA2B,EAAE,EAAE,EAAE,QAAQ,EAAE;wBACzF,oBAAoB,EAAE,MAAM;wBAC5B,WAAW,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,2BAA2B,EAAE,EAAE;qBACpF,CAAC,EAAE,EAAE;KACP;IACD,WAAW,EAAE;QACX,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,gBAAgB,EAAE,WAAW;QACtF,IAAI,EAAE,qBAAqB,EAAE,SAAS,EAAE,uBAAuB;QAC/D,YAAY,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE;QACpD,IAAI,EAAE,EAAE,GAAG,EAAE,sBAAsB,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC;wBACjE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,eAAe,EAAE,GAAG,EAAE,wDAAwD;wBACpG,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,gBAAgB,EAAE;qBAC1G,CAAC,EAAE,EAAE;KACP;CACF,CAAC,CAAC;AAEH,MAAM,UAAU,YAAY,CAAC,MAAc;IACzC,OAAQ,UAAwC,CAAC,MAAM,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,oBAAoB,GAAoC;IAC5D,cAAc;IACd,mBAAmB;IACnB,eAAe;IACf,qBAAqB;IACrB,kBAAkB;IAClB,oBAAoB;IACpB,gBAAgB;CACjB,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,MAAM,oBAAoB,GAAoC;IAC5D,cAAc;IACd,mBAAmB;IACnB,qBAAqB;IACrB,iBAAiB;CAClB,CAAC;AAIF;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAgB;IACjD,IAAI,OAAO,GAAiC,IAAI,CAAC;IACjD,IAAI,IAAI,KAAK,aAAa;QAAE,OAAO,GAAG,IAAI,GAAG,CAAmB,oBAAoB,CAAC,CAAC;SACjF,IAAI,IAAI,KAAK,aAAa;QAAE,OAAO,GAAG,IAAI,GAAG,CAAmB,oBAAoB,CAAC,CAAC;IAC3F,OAAO,gBAAgB;SACpB,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;SAC9C,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACX,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,MAAM,EAAE,SAAkB;QAC1B,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;KACvC,CAAC,CAAC,CAAC;AACR,CAAC;AAED,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IACnC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC/C;;oFAEgF;IAChF,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,QAAQ,EAAE;CACnF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAClC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;CACpC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;CAChD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QACzB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;QAChC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE;KAC/C,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAChB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,YAAY,GAAiD;IACxE,iBAAiB,EAAE,sBAAsB;IACzC,aAAa,EAAE,kBAAkB;IACjC,eAAe,EAAE,oBAAoB;IACrC,gBAAgB,EAAE,qBAAqB;CACxC,CAAC;AAEF,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;AACrD,CAAC"}
+{"version":3,"file":"agent-onboarding-schemas.js","sourceRoot":"","sources":["../../../src/models/agent-onboarding-schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,cAAc;IACd,mBAAmB;IACnB,eAAe;IACf,qBAAqB;IACrB,iBAAiB;IACjB,mBAAmB;IACnB,oBAAoB;IACpB,kBAAkB;IAClB,kBAAkB;IAClB,oBAAoB;IACpB,kBAAkB;IAClB,gBAAgB;IAChB,kBAAkB;IAClB,mBAAmB;IACnB,0BAA0B;IAC1B,aAAa;CACL,CAAC;AAaX,gGAAgG;AAChG,qEAAqE;AACrE,MAAM,iBAAiB,GAA2B;IAChD,YAAY,EAAE,+CAA+C;IAC7D,iBAAiB,EAAE,oDAAoD;IACvE,aAAa,EAAE,gDAAgD;IAC/D,mBAAmB,EAAE,sDAAsD;IAC3E,eAAe,EAAE,kDAAkD;IACnE,iBAAiB,EAAE,oDAAoD;IACvE,kBAAkB,EAAE,qDAAqD;IACzE,gBAAgB,EAAE,mDAAmD;IACrE,gBAAgB,EAAE,mDAAmD;IACrE,kBAAkB,EAAE,qDAAqD;IACzE,gBAAgB,EAAE,mDAAmD;IACrE,cAAc,EAAE,iDAAiD;IACjE,gBAAgB,EAAE,mDAAmD;IACrE,iBAAiB,EAAE,oDAAoD;IACvE,wBAAwB,EAAE,2DAA2D;IACrF,WAAW,EAAE,8CAA8C;CAC5D,CAAC;AAEF,MAAM,gBAAgB,GAAqB;IACzC,EAAE,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,iBAAiB,CAAC,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW,EAAE;IACnJ,EAAE,EAAE,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,WAAW,EAAE,iBAAiB,CAAC,iBAAiB,EAAE,QAAQ,EAAE,IAAI,EAAE,gBAAgB,EAAE,UAAU,EAAE;IACjK,EAAE,EAAE,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,WAAW,EAAE,iBAAiB,CAAC,aAAa,EAAE,QAAQ,EAAE,IAAI,EAAE,gBAAgB,EAAE,UAAU,EAAE;IAC5J,EAAE,EAAE,EAAE,qBAAqB,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,WAAW,EAAE,iBAAiB,CAAC,mBAAmB,EAAE,QAAQ,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW,EAAE;IACxK,EAAE,EAAE,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAE,iBAAiB,CAAC,eAAe,EAAE,QAAQ,EAAE,IAAI,EAAE,gBAAgB,EAAE,UAAU,EAAE;IAC3J,EAAE,EAAE,EAAE,mBAAmB,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,WAAW,EAAE,iBAAiB,CAAC,iBAAiB,EAAE,QAAQ,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW,EAAE;IAClK,EAAE,EAAE,EAAE,oBAAoB,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,oBAAoB,EAAE,WAAW,EAAE,iBAAiB,CAAC,kBAAkB,EAAE,QAAQ,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW,EAAE;IACrK,EAAE,EAAE,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,iBAAiB,CAAC,gBAAgB,EAAE,QAAQ,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW,EAAE;IAC/J,EAAE,EAAE,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,iBAAiB,CAAC,gBAAgB,EAAE,QAAQ,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW,EAAE;IAC/J,EAAE,EAAE,EAAE,oBAAoB,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,oBAAoB,EAAE,WAAW,EAAE,iBAAiB,CAAC,kBAAkB,EAAE,QAAQ,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW,EAAE;IACtK,EAAE,EAAE,EAAE,kBAAkB,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE,WAAW,EAAE,iBAAiB,CAAC,gBAAgB,EAAE,QAAQ,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW,EAAE;IACtK,EAAE,EAAE,EAAE,gBAAgB,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,wBAAwB,EAAE,WAAW,EAAE,iBAAiB,CAAC,cAAc,EAAE,QAAQ,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW,EAAE;IAClK,EAAE,EAAE,EAAE,kBAAkB,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,iBAAiB,CAAC,gBAAgB,EAAE,QAAQ,EAAE,KAAK,EAAE,gBAAgB,EAAE,UAAU,EAAE;IAChK,mGAAmG;IACnG,oGAAoG;IACpG,2FAA2F;IAC3F,EAAE,EAAE,EAAE,mBAAmB,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,mBAAmB,EAAE,WAAW,EAAE,iBAAiB,CAAC,iBAAiB,EAAE,QAAQ,EAAE,KAAK,EAAE,gBAAgB,EAAE,WAAW,EAAE;IACpK,EAAE,EAAE,EAAE,0BAA0B,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,mCAAmC,EAAE,WAAW,EAAE,iBAAiB,CAAC,wBAAwB,EAAE,QAAQ,EAAE,KAAK,EAAE,gBAAgB,EAAE,WAAW,EAAE;IAClM,EAAE,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,gBAAgB,EAAE,WAAW,EAAE,iBAAiB,CAAC,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,gBAAgB,EAAE,WAAW,EAAE;CACtJ,CAAC;AAqCF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,UAAU,GAAkD,MAAM,CAAC,MAAM,CAAC;IACrF,YAAY,EAAE;QACZ,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW;QACtF,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI;QAC9B,WAAW,EAAE,+FAA+F;KAC7G;IACD,iBAAiB,EAAE;QACjB,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,gBAAgB,EAAE,UAAU;QACrF,IAAI,EAAE,qCAAqC;QAC3C,YAAY,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,qDAAqD,EAAE;QAC7F,IAAI,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,gBAAgB,EAAE,EAAE,EAAE;KACnD;IACD,aAAa,EAAE;QACb,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,gBAAgB,EAAE,UAAU;QACrF,IAAI,EAAE,2CAA2C;QACjD,YAAY,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,iDAAiD,EAAE;QACzF,IAAI,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE;KAChD;IACD,mBAAmB,EAAE;QACnB,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW;QACrF,IAAI,EAAE,kCAAkC;QACxC,YAAY,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,4BAA4B,EAAE;QACnE,IAAI,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE;KACjF;IACD,eAAe,EAAE;QACf,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,gBAAgB,EAAE,UAAU;QACrF,IAAI,EAAE,2CAA2C;QACjD,YAAY,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,mDAAmD,EAAE;QAC3F,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE;KAC1B;IACD,iBAAiB,EAAE;QACjB,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW;QACrF,IAAI,EAAE,qBAAqB;QAC3B,YAAY,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,wBAAwB,EAAE;QAChE,IAAI,EAAE,EAAE,OAAO,EAAE,6CAA6C,EAAE;KACjE;IACD,kBAAkB,EAAE;QAClB,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW;QACtF,IAAI,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI;QAC9B,WAAW,EAAE,uJAAuJ;KACrK;IACD,gBAAgB,EAAE;QAChB,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW;QACrF,IAAI,EAAE,+BAA+B;QACrC,YAAY,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,yBAAyB,EAAE;QACjE,IAAI,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE;KAC5D;IACD,gBAAgB,EAAE;QAChB,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW;QACrF,IAAI,EAAE,2BAA2B;QACjC,YAAY,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,oCAAoC,EAAE;QAC7E,IAAI,EAAE,EAAE,OAAO,EAAE,gBAAgB,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,mCAAmC,EAAE,YAAY,EAAE,0BAA0B,EAAE,CAAC,EAAE;KACvI;IACD,kBAAkB,EAAE;QAClB,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW;QACrF,IAAI,EAAE,sBAAsB;QAC5B,YAAY,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,6CAA6C,EAAE;QACrF,IAAI,EAAE,EAAE,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAE,+BAA+B,EAAE;KAC9E;IACD,gBAAgB,EAAE;QAChB,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW;QACrF,IAAI,EAAE,qBAAqB;QAC3B,YAAY,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE;QACpD,IAAI,EAAE,EAAE,GAAG,EAAE,wBAAwB,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,uBAAuB,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,EAAE;KAC9H;IACD,cAAc,EAAE;QACd,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,gBAAgB,EAAE,WAAW;QACrF,IAAI,EAAE,qBAAqB;QAC3B,YAAY,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE;QACpD,IAAI,EAAE,EAAE,GAAG,EAAE,gCAAgC,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE;KACnG;IACD,gBAAgB,EAAE;QAChB,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,eAAe,EAAE,KAAK,EAAE,gBAAgB,EAAE,UAAU;QACtF,IAAI,EAAE,oCAAoC;QAC1C,YAAY,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,oDAAoD,EAAE;QAC5F,IAAI,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;KACvB;IACD,iBAAiB,EAAE;QACjB,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,gBAAgB,EAAE,WAAW;QACtF,IAAI,EAAE,qBAAqB,EAAE,SAAS,EAAE,uBAAuB;QAC/D,YAAY,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE;QACpD,IAAI,EAAE,EAAE,GAAG,EAAE,sBAAsB,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,eAAe,EAAE,GAAG,EAAE,wDAAwD,EAAE,CAAC,EAAE,EAAE;KACjL;IACD,wBAAwB,EAAE;QACxB,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,gBAAgB,EAAE,WAAW;QACtF,IAAI,EAAE,qBAAqB,EAAE,SAAS,EAAE,uBAAuB;QAC/D,YAAY,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE;QACpD,IAAI,EAAE,EAAE,GAAG,EAAE,sBAAsB,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC;wBACjE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,eAAe,EAAE,GAAG,EAAE,wDAAwD;wBACpG,cAAc,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,GAAG,EAAE,2BAA2B,EAAE,EAAE,EAAE,QAAQ,EAAE;wBACzF,oBAAoB,EAAE,MAAM;wBAC5B,WAAW,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,2BAA2B,EAAE,EAAE;qBACpF,CAAC,EAAE,EAAE;KACP;IACD,WAAW,EAAE;QACX,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,gBAAgB,EAAE,WAAW;QACtF,IAAI,EAAE,qBAAqB,EAAE,SAAS,EAAE,uBAAuB;QAC/D,YAAY,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE;QACpD,IAAI,EAAE,EAAE,GAAG,EAAE,sBAAsB,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC;wBACjE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,eAAe,EAAE,GAAG,EAAE,wDAAwD;wBACpG,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,gBAAgB,EAAE;qBAC1G,CAAC,EAAE,EAAE;KACP;CACF,CAAC,CAAC;AAEH,MAAM,UAAU,YAAY,CAAC,MAAc;IACzC,OAAQ,UAAwC,CAAC,MAAM,CAAC,CAAC;AAC3D,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,oBAAoB,GAAoC;IAC5D,cAAc;IACd,mBAAmB;IACnB,eAAe;IACf,qBAAqB;IACrB,kBAAkB;IAClB,oBAAoB;IACpB,gBAAgB;CACjB,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,MAAM,oBAAoB,GAAoC;IAC5D,cAAc;IACd,mBAAmB;IACnB,qBAAqB;IACrB,iBAAiB;CAClB,CAAC;AAIF;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAgB;IACjD,IAAI,OAAO,GAAiC,IAAI,CAAC;IACjD,IAAI,IAAI,KAAK,aAAa;QAAE,OAAO,GAAG,IAAI,GAAG,CAAmB,oBAAoB,CAAC,CAAC;SACjF,IAAI,IAAI,KAAK,aAAa;QAAE,OAAO,GAAG,IAAI,GAAG,CAAmB,oBAAoB,CAAC,CAAC;IAC3F,OAAO,gBAAgB;SACpB,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;SAC9C,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACX,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,WAAW,EAAE,GAAG,CAAC,WAAW;QAC5B,MAAM,EAAE,SAAkB;QAC1B,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,gBAAgB,EAAE,GAAG,CAAC,gBAAgB;KACvC,CAAC,CAAC,CAAC;AACR,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAChC,OAA8B,EAC9B,IAAgB;IAEhB,MAAM,MAAM,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACnD,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAChG,IAAI,CAAC,WAAW;QAAE,OAAO,IAAI,CAAC;IAE9B,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAU,CAAC,CAAC,CAAC;IAC/D,OAAO,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;QACxB,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACpC,OAAO,IAAI;YACT,CAAC,CAAC,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE;YAC5H,CAAC,CAAC,KAAK,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IACnC,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC/C;;oFAEgF;IAChF,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,QAAQ,EAAE;CACnF,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAClC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;CACpC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;CAChD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QACzB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;QAChC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE;KAC/C,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAChB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,YAAY,GAAiD;IACxE,iBAAiB,EAAE,sBAAsB;IACzC,aAAa,EAAE,kBAAkB;IACjC,eAAe,EAAE,oBAAoB;IACrC,gBAAgB,EAAE,qBAAqB;CACxC,CAAC;AAEF,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,OAAO,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC;AACrD,CAAC"}

package/dist/src/models/company-schemas.d.ts

@@ -0,0 +1,85 @@
+/**
+ * @file company-schemas.ts
+ * @description The company registry: a company is a first-class entity on the node, the
+ *   same way an app is. Creating one reserves {slug}.co.<apex> — the co family is to
+ *   companies exactly what the apps family is to apps.
+ *
+ *   The registry is deliberately NOT the subdomain-site table the apps family uses: those
+ *   labels live in one flat namespace, and a company called "tinki" must not collide with
+ *   an app called "tinki" — they are different hosts. So companies resolve from their own
+ *   slug column, and the two families can hold the same word without either knowing.
+ *
+ *   The record also carries the LEGAL IDENTITY (name, business id, VAT id, address, IBAN).
+ *   That is the same shape an invoice's seller party snapshot needs, so a founder types it
+ *   once at company creation and every later invoice prefills from it — which is the whole
+ *   program's measure: one less side cost before the first sale.
+ *
+ * @structure CompanyFrontPage · CompanyRecord · CompanyQuery · NewCompanyInput
+ * @usage import type { CompanyRecord } from '../models/company-schemas.js';
+ * @version-history
+ *   v1.1.0 — 2026-08-08 — Front page kind 'portfolio': a company's own HTML page.
+ *   v1.0.0 — 2026-08-07 — Company-in-a-box: the company registry + co origin.
+ */
+/**
+ * What {slug}.co.<apex> serves.
+ * - 'app'      → one of the owner's published apps ("owner/file.html"), served exactly like
+ *                an app origin serves it (isolated, session-less, same CSP).
+ * - 'portfolio' → a standalone HTML page the owner published for THIS company, stored as a
+ *                public storage file and served on the co origin the same way a personal
+ *                portfolio is served on the portfolio origin.
+ * - 'redirect' → an absolute URL (the company's own site elsewhere).
+ * - 'none'     → the address is reserved but nothing is published yet; the host answers 404,
+ *                the same as any unmapped subdomain. Reserving a name and publishing a page
+ *                are two separate acts, and pretending otherwise would serve a lie.
+ */
+export type CompanyFrontPageKind = 'app' | 'portfolio' | 'redirect' | 'none';
+export interface CompanyFrontPage {
+    kind: CompanyFrontPageKind;
+    /**
+     * "owner/file.html" for kind 'app'; an absolute https URL for 'redirect'; '' for both
+     * 'portfolio' (the page is addressed by the company id, not by a target string) and 'none'.
+     */
+    target: string;
+}
+export type CompanyStatus = 'active' | 'suspended';
+export interface CompanyRecord {
+    id: string;
+    /** The address label: {slug}.co.<apex>. Unique across the co family, lowercase. */
+    slug: string;
+    /** Owner GHII. Authorization compares against resolveIdentity(), never a client-supplied id. */
+    ownerGhii: string;
+    /** Trade name shown to people. */
+    name: string;
+    description: string | null;
+    /** The organism this company's data lives in (workspaces, finance area, team). */
+    organismId: string | null;
+    frontPage: CompanyFrontPage;
+    businessId: string | null;
+    vatId: string | null;
+    streetAddress: string | null;
+    postalCode: string | null;
+    city: string | null;
+    /** ISO 3166-1 alpha-2. */
+    country: string | null;
+    email: string | null;
+    phone: string | null;
+    iban: string | null;
+    bic: string | null;
+    /** E-invoicing address (verkkolaskuosoite / OVT) and operator id. */
+    einvoiceAddress: string | null;
+    einvoiceOperator: string | null;
+    status: CompanyStatus;
+    createdAt: string;
+    updatedAt: string;
+}
+export interface CompanyQuery {
+    ownerGhii?: string;
+    status?: CompanyStatus;
+    limit?: number;
+    offset?: number;
+}
+/** Fields a caller may set when creating a company (id/slug-normalisation happen in the service). */
+export type NewCompanyInput = Pick<CompanyRecord, 'name' | 'description' | 'organismId' | 'businessId' | 'vatId' | 'streetAddress' | 'postalCode' | 'city' | 'country' | 'email' | 'phone' | 'iban' | 'bic' | 'einvoiceAddress' | 'einvoiceOperator'> & {
+    slug?: string;
+};
+//# sourceMappingURL=company-schemas.d.ts.map

package/dist/src/models/company-schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"company-schemas.d.ts","sourceRoot":"","sources":["../../../src/models/company-schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,oBAAoB,GAAG,KAAK,GAAG,WAAW,GAAG,UAAU,GAAG,MAAM,CAAC;AAE7E,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,oBAAoB,CAAC;IAC3B;;;OAGG;IACH,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,WAAW,CAAC;AAEnD,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,mFAAmF;IACnF,IAAI,EAAE,MAAM,CAAC;IACb,gGAAgG;IAChG,SAAS,EAAE,MAAM,CAAC;IAClB,kCAAkC;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,kFAAkF;IAClF,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,SAAS,EAAE,gBAAgB,CAAC;IAE5B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,0BAA0B;IAC1B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,qEAAqE;IACrE,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,MAAM,EAAE,aAAa,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,YAAY;IAC3B,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,qGAAqG;AACrG,MAAM,MAAM,eAAe,GAAG,IAAI,CAAC,aAAa,EAC9C,MAAM,GAAG,aAAa,GAAG,YAAY,GAAG,YAAY,GAAG,OAAO,GAAG,eAAe,GAChF,YAAY,GAAG,MAAM,GAAG,SAAS,GAAG,OAAO,GAAG,OAAO,GAAG,MAAM,GAAG,KAAK,GACtE,iBAAiB,GAAG,kBAAkB,CACvC,GAAG;IAAE,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC"}

package/dist/src/models/company-schemas.js

@@ -0,0 +1,24 @@
+/**
+ * @file company-schemas.ts
+ * @description The company registry: a company is a first-class entity on the node, the
+ *   same way an app is. Creating one reserves {slug}.co.<apex> — the co family is to
+ *   companies exactly what the apps family is to apps.
+ *
+ *   The registry is deliberately NOT the subdomain-site table the apps family uses: those
+ *   labels live in one flat namespace, and a company called "tinki" must not collide with
+ *   an app called "tinki" — they are different hosts. So companies resolve from their own
+ *   slug column, and the two families can hold the same word without either knowing.
+ *
+ *   The record also carries the LEGAL IDENTITY (name, business id, VAT id, address, IBAN).
+ *   That is the same shape an invoice's seller party snapshot needs, so a founder types it
+ *   once at company creation and every later invoice prefills from it — which is the whole
+ *   program's measure: one less side cost before the first sale.
+ *
+ * @structure CompanyFrontPage · CompanyRecord · CompanyQuery · NewCompanyInput
+ * @usage import type { CompanyRecord } from '../models/company-schemas.js';
+ * @version-history
+ *   v1.1.0 — 2026-08-08 — Front page kind 'portfolio': a company's own HTML page.
+ *   v1.0.0 — 2026-08-07 — Company-in-a-box: the company registry + co origin.
+ */
+export {};
+//# sourceMappingURL=company-schemas.js.map

package/dist/src/models/company-schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"company-schemas.js","sourceRoot":"","sources":["../../../src/models/company-schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG"}

package/dist/src/models/company-smtp-schemas.d.ts

@@ -0,0 +1,31 @@
+/**
+ * @file company-smtp-schemas.ts
+ * @description A company's own sending identity: the SMTP server its outbound mail leaves
+ *   through, so a customer sees mail from the company's domain rather than the node's shared
+ *   sender. The password is never carried in this record — it lives encrypted in storage and
+ *   is decrypted only at send time, so no read path can return it.
+ * @structure CompanySmtpRecord (stored) · CompanySmtpPublic (what any read returns)
+ * @version-history
+ *   v1.0.0 — 2026-08-07 — Per-company sending identity for the outbound door.
+ */
+export interface CompanySmtpRecord {
+    companyId: string;
+    ownerGhii: string;
+    host: string;
+    port: number;
+    secure: boolean;
+    username: string | null;
+    /** AES-256-GCM ciphertext (services/encryption.ts). Never leaves the server. */
+    passwordEnc: string | null;
+    fromAddress: string;
+    fromName: string | null;
+    replyTo: string | null;
+    createdAt: string;
+    updatedAt: string;
+}
+/** The shape every read returns: the password is replaced by whether one is set. */
+export type CompanySmtpPublic = Omit<CompanySmtpRecord, 'passwordEnc'> & {
+    passwordSet: boolean;
+};
+export declare function toPublicSmtp(row: CompanySmtpRecord): CompanySmtpPublic;
+//# sourceMappingURL=company-smtp-schemas.d.ts.map

package/dist/src/models/company-smtp-schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"company-smtp-schemas.d.ts","sourceRoot":"","sources":["../../../src/models/company-smtp-schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,OAAO,CAAC;IAChB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,gFAAgF;IAChF,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,oFAAoF;AACpF,MAAM,MAAM,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,EAAE,aAAa,CAAC,GAAG;IAAE,WAAW,EAAE,OAAO,CAAA;CAAE,CAAC;AAElG,wBAAgB,YAAY,CAAC,GAAG,EAAE,iBAAiB,GAAG,iBAAiB,CAGtE"}

package/dist/src/models/company-smtp-schemas.js

@@ -0,0 +1,15 @@
+/**
+ * @file company-smtp-schemas.ts
+ * @description A company's own sending identity: the SMTP server its outbound mail leaves
+ *   through, so a customer sees mail from the company's domain rather than the node's shared
+ *   sender. The password is never carried in this record — it lives encrypted in storage and
+ *   is decrypted only at send time, so no read path can return it.
+ * @structure CompanySmtpRecord (stored) · CompanySmtpPublic (what any read returns)
+ * @version-history
+ *   v1.0.0 — 2026-08-07 — Per-company sending identity for the outbound door.
+ */
+export function toPublicSmtp(row) {
+    const { passwordEnc, ...rest } = row;
+    return { ...rest, passwordSet: !!passwordEnc };
+}
+//# sourceMappingURL=company-smtp-schemas.js.map

package/dist/src/models/company-smtp-schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"company-smtp-schemas.js","sourceRoot":"","sources":["../../../src/models/company-smtp-schemas.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAqBH,MAAM,UAAU,YAAY,CAAC,GAAsB;IACjD,MAAM,EAAE,WAAW,EAAE,GAAG,IAAI,EAAE,GAAG,GAAG,CAAC;IACrC,OAAO,EAAE,GAAG,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;AACjD,CAAC"}