onboardconnect-agent 1.2.11 → 1.3.0

package/dist/sis/peoplesoft.js

@@ -0,0 +1,222 @@
+import { OcLogger } from "../logger.js";
+// ─── Oracle PeopleSoft Campus Solutions (Track A — real implementation) ─────────
+//
+// On-prem / LAN, behind Integration Broker (IB). The profile carries the IB base
+// URL (e.g. https://ps.campus.edu/PSIGW/RESTListeningConnector/<node>/), the ISU
+// user/password for Basic auth, and the node name. Service operations are named
+// per campus, so the service-op name is driven entirely by `payload.resource`.
+//
+// Auth model (driven by profile.authType):
+//   "basic"  → HTTP Basic with the ISU username/password (default IB pattern).
+//   "bearer" → a pre-issued bearer/OAuth token on the profile (profile.bearerToken).
+//   "soap"   → WS-Security UsernameToken against the SOAP listening connector;
+//              the request is built as a SOAP envelope instead of REST.
+//
+//   test   → ping a documented service op / the IB ping listener.
+//   read   → GET the REST service op, filtered by `match` (or SOAP get request).
+//   upsert → POST/PUT the Constituent/person service op with the mapped record;
+//            idempotency rides on the natural key in `payload.match` (EMPLID /
+//            sisStudentId).
+//
+// Plan / runbook: docs/runbooks/sis-writeback.md (PeopleSoft section).
+const ocLogger = new OcLogger("sis-peoplesoft");
+function ocTrimSlash(url) {
+    return url.replace(/\/+$/, "");
+}
+async function ocSafeText(res) {
+    try {
+        return (await res.text()).slice(0, 500);
+    }
+    catch {
+        return "<no body>";
+    }
+}
+/** Auth header for the IB REST listener. */
+function ocPsAuthHeader(ctx) {
+    const { profile } = ctx;
+    if (profile.authType === "bearer") {
+        if (!profile.bearerToken) {
+            throw new Error(`PeopleSoft profile "${profile.id}" uses bearer auth but has no bearerToken`);
+        }
+        return { Authorization: `Bearer ${profile.bearerToken}` };
+    }
+    // Default + SOAP path use the ISU username/password (Basic / WS-Security).
+    if (!profile.username || !profile.password) {
+        throw new Error(`PeopleSoft profile "${profile.id}" is missing username/password`);
+    }
+    const basic = Buffer.from(`${profile.username}:${profile.password}`).toString("base64");
+    return { Authorization: `Basic ${basic}` };
+}
+/**
+ * REST URL for a service operation. The IB REST listening connector path already
+ * includes the node; we trust profile.baseUrl to carry it (…/RESTListeningConnector/<node>/).
+ * The service-op name (and optional REST resource segments) comes from
+ * payload.resource. The natural keys in `match` become trailing path segments,
+ * which is how IB CI-based REST handlers usually receive their keys (e.g.
+ * .../EMPLID/123). Any unmatched filtering is also mirrored onto the query string.
+ */
+function ocPsRestUrl(ctx, base) {
+    const resource = ctx.payload.resource.replace(/^\/+|\/+$/g, "");
+    if (!resource) {
+        throw new Error("PeopleSoft call requires payload.resource to name the IB service operation");
+    }
+    const match = ctx.payload.match ?? {};
+    const keyValues = Object.values(match).map((v) => encodeURIComponent(String(v)));
+    const keyed = keyValues.length > 0;
+    let url = `${base}/${resource}`;
+    if (keyed)
+        url += `/${keyValues.join("/")}`;
+    return { url, keyed };
+}
+/** Coerce a vendor JSON object into a flat string row for the cloud. */
+function ocFlattenRow(obj) {
+    const row = {};
+    for (const [k, v] of Object.entries(obj ?? {})) {
+        if (v == null)
+            continue;
+        row[k] = typeof v === "object" ? JSON.stringify(v) : String(v);
+    }
+    return row;
+}
+/** XML-escape a value for inclusion in a SOAP envelope. */
+function ocXmlEscape(value) {
+    return value
+        .replace(/&/g, "&amp;")
+        .replace(/</g, "&lt;")
+        .replace(/>/g, "&gt;")
+        .replace(/"/g, "&quot;")
+        .replace(/'/g, "&apos;");
+}
+/**
+ * WS-Security SOAP request against the SOAP listening connector. The service-op
+ * name comes from payload.resource; the natural keys (match) and mapped record
+ * fields are emitted as child elements verbatim (names are campus/service
+ * specific). UsernameToken carries the ISU credentials.
+ */
+async function ocPsSoapCall(ctx, base) {
+    const { profile, payload } = ctx;
+    if (!profile.username || !profile.password) {
+        throw new Error(`PeopleSoft profile "${profile.id}" is missing username/password for WS-Security`);
+    }
+    const operation = payload.resource.replace(/[^A-Za-z0-9_.]/g, "");
+    if (!operation) {
+        throw new Error("PeopleSoft SOAP call requires payload.resource to name the service operation");
+    }
+    const match = payload.match ?? {};
+    const record = (payload.record ?? {});
+    const fields = { ...match, ...record };
+    const dataFields = Object.entries(fields)
+        .map(([k, v]) => {
+        const tag = ocXmlEscape(k);
+        return `<${tag}>${ocXmlEscape(typeof v === "object" ? JSON.stringify(v) : String(v))}</${tag}>`;
+    })
+        .join("");
+    const wsse = `<wsse:Security xmlns:wsse="http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd">` +
+        `<wsse:UsernameToken>` +
+        `<wsse:Username>${ocXmlEscape(profile.username)}</wsse:Username>` +
+        `<wsse:Password>${ocXmlEscape(profile.password)}</wsse:Password>` +
+        `</wsse:UsernameToken>` +
+        `</wsse:Security>`;
+    const envelope = `<?xml version="1.0" encoding="UTF-8"?>` +
+        `<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/">` +
+        `<soapenv:Header>${wsse}</soapenv:Header>` +
+        `<soapenv:Body><${operation}>${dataFields}</${operation}></soapenv:Body>` +
+        `</soapenv:Envelope>`;
+    const res = await fetch(ocTrimSlash(base), {
+        method: "POST",
+        headers: {
+            "Content-Type": "text/xml; charset=utf-8",
+            SOAPAction: operation,
+        },
+        body: envelope,
+    });
+    const text = await res.text();
+    if (!res.ok || /<(soapenv:|SOAP-ENV:)?Fault>/i.test(text)) {
+        throw new Error(`PeopleSoft SOAP ${operation} failed (${res.status}): ${text.slice(0, 500)}`);
+    }
+    const sisId = Object.values(match)[0];
+    ocLogger.info("peoplesoft soap call", { operation, sisId });
+    return { ...(sisId ? { sisId: String(sisId) } : {}), raw: text };
+}
+export async function ocPeoplesoftCall(ctx) {
+    const { payload, profile } = ctx;
+    const base = ocTrimSlash(profile.baseUrl);
+    // SOAP variant: routed entirely through the WS-Security envelope builder.
+    if (profile.authType === "soap") {
+        if (payload.operation === "test") {
+            // A SOAP "test" still exercises the listener + WS-Security credentials.
+            return ocPsSoapCall(ctx, base);
+        }
+        return ocPsSoapCall(ctx, base);
+    }
+    const authHeaders = ocPsAuthHeader(ctx);
+    const jsonHeaders = { ...authHeaders, Accept: "application/json" };
+    if (payload.operation === "test") {
+        // Ping the IB REST listener. Many sites expose a lightweight ping service op;
+        // when payload.resource is provided we hit it (HEAD-like GET), otherwise we
+        // probe the configured base. A 2xx/3xx/401-free response means the listener
+        // is reachable and the credentials were accepted.
+        const probe = payload.resource ? ocPsRestUrl(ctx, base).url : base;
+        const res = await fetch(probe, { headers: jsonHeaders });
+        if (!res.ok) {
+            throw new Error(`PeopleSoft test probe failed (${res.status}): ${await ocSafeText(res)}`);
+        }
+        return { raw: { ok: true, vendor: "peoplesoft", resource: payload.resource } };
+    }
+    if (payload.operation === "read") {
+        const { url } = ocPsRestUrl(ctx, base);
+        // Also mirror match keys onto the query string for service ops that filter by
+        // query rather than path segments.
+        const params = new URLSearchParams();
+        for (const [k, v] of Object.entries(payload.match ?? {}))
+            params.set(k, v);
+        const finalUrl = params.toString() ? `${url}?${params.toString()}` : url;
+        const res = await fetch(finalUrl, { headers: jsonHeaders });
+        if (!res.ok) {
+            throw new Error(`PeopleSoft read failed (${res.status}): ${await ocSafeText(res)}`);
+        }
+        const body = (await res.json());
+        // IB REST responses vary: a bare array, a single object, or a wrapper with a
+        // collection property. Normalise the common shapes.
+        let arr;
+        if (Array.isArray(body)) {
+            arr = body;
+        }
+        else if (body && typeof body === "object") {
+            const data = body.data ?? body.rows;
+            arr = Array.isArray(data) ? data : [body];
+        }
+        else {
+            arr = [body];
+        }
+        const rows = arr.map((r) => ocFlattenRow(r));
+        ocLogger.info("peoplesoft read", { resource: payload.resource, rows: rows.length });
+        return { rows, raw: body };
+    }
+    if (payload.operation === "upsert") {
+        const record = payload.record ?? {};
+        const { url, keyed } = ocPsRestUrl(ctx, base);
+        // When the natural key is present we PUT to the keyed instance URL (update);
+        // otherwise POST to the service op to create. This matches CI-based REST
+        // handlers that key updates on EMPLID / sisStudentId in the path.
+        const method = keyed ? "PUT" : "POST";
+        const res = await fetch(url, {
+            method,
+            headers: { ...jsonHeaders, "Content-Type": "application/json" },
+            body: JSON.stringify(record),
+        });
+        if (!res.ok) {
+            throw new Error(`PeopleSoft ${method} ${payload.resource} failed (${res.status}): ${await ocSafeText(res)}`);
+        }
+        const respBody = (await res.json().catch(() => ({})));
+        // Prefer an id the service op echoes back; fall back to the supplied natural
+        // key (the stable, caller-known handle for the record).
+        const matchVal = Object.values(payload.match ?? {})[0];
+        const echoed = respBody["EMPLID"] ?? respBody["id"] ?? respBody["sisStudentId"];
+        const sisId = echoed != null ? String(echoed) : matchVal != null ? String(matchVal) : undefined;
+        ocLogger.info("peoplesoft upsert", { resource: payload.resource, method, sisId });
+        return { ...(sisId ? { sisId } : {}), raw: respBody };
+    }
+    throw new Error(`Unsupported PeopleSoft operation: ${String(payload.operation)}`);
+}
+//# sourceMappingURL=peoplesoft.js.map

package/dist/sis/peoplesoft.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"peoplesoft.js","sourceRoot":"","sources":["../../src/sis/peoplesoft.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAExC,mFAAmF;AACnF,EAAE;AACF,iFAAiF;AACjF,iFAAiF;AACjF,gFAAgF;AAChF,+EAA+E;AAC/E,EAAE;AACF,2CAA2C;AAC3C,+EAA+E;AAC/E,qFAAqF;AACrF,+EAA+E;AAC/E,wEAAwE;AACxE,EAAE;AACF,kEAAkE;AAClE,iFAAiF;AACjF,gFAAgF;AAChF,+EAA+E;AAC/E,4BAA4B;AAC5B,EAAE;AACF,uEAAuE;AAEvE,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,gBAAgB,CAAC,CAAC;AAEhD,SAAS,WAAW,CAAC,GAAW;IAC9B,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACjC,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,GAAa;IACrC,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,WAAW,CAAC;IACrB,CAAC;AACH,CAAC;AAED,4CAA4C;AAC5C,SAAS,cAAc,CAAC,GAAuB;IAC7C,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC;IACxB,IAAI,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAClC,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,uBAAuB,OAAO,CAAC,EAAE,2CAA2C,CAAC,CAAC;QAChG,CAAC;QACD,OAAO,EAAE,aAAa,EAAE,UAAU,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;IAC5D,CAAC;IACD,2EAA2E;IAC3E,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,uBAAuB,OAAO,CAAC,EAAE,gCAAgC,CAAC,CAAC;IACrF,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACxF,OAAO,EAAE,aAAa,EAAE,SAAS,KAAK,EAAE,EAAE,CAAC;AAC7C,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,WAAW,CAAC,GAAuB,EAAE,IAAY;IACxD,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IAChE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAC;IAChG,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;IACtC,MAAM,SAAS,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACjF,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;IACnC,IAAI,GAAG,GAAG,GAAG,IAAI,IAAI,QAAQ,EAAE,CAAC;IAChC,IAAI,KAAK;QAAE,GAAG,IAAI,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IAC5C,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;AACxB,CAAC;AAED,wEAAwE;AACxE,SAAS,YAAY,CAAC,GAA4B;IAChD,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,CAAC;QAC/C,IAAI,CAAC,IAAI,IAAI;YAAE,SAAS;QACxB,GAAG,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,2DAA2D;AAC3D,SAAS,WAAW,CAAC,KAAa;IAChC,OAAO,KAAK;SACT,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AAC7B,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,YAAY,CACzB,GAAuB,EACvB,IAAY;IAEZ,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC;IACjC,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CAAC,uBAAuB,OAAO,CAAC,EAAE,gDAAgD,CAAC,CAAC;IACrG,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC;IAClE,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,8EAA8E,CAAC,CAAC;IAClG,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;IAClC,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAA4B,CAAC;IACjE,MAAM,MAAM,GAAG,EAAE,GAAG,KAAK,EAAE,GAAG,MAAM,EAAE,CAAC;IACvC,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;SACtC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE;QACd,MAAM,GAAG,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;QAC3B,OAAO,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,GAAG,CAAC;IAClG,CAAC,CAAC;SACD,IAAI,CAAC,EAAE,CAAC,CAAC;IAEZ,MAAM,IAAI,GACR,gHAAgH;QAChH,sBAAsB;QACtB,kBAAkB,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB;QACjE,kBAAkB,WAAW,CAAC,OAAO,CAAC,QAAQ,CAAC,kBAAkB;QACjE,uBAAuB;QACvB,kBAAkB,CAAC;IAErB,MAAM,QAAQ,GACZ,wCAAwC;QACxC,8EAA8E;QAC9E,mBAAmB,IAAI,mBAAmB;QAC1C,kBAAkB,SAAS,IAAI,UAAU,KAAK,SAAS,kBAAkB;QACzE,qBAAqB,CAAC;IAExB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE;QACzC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,cAAc,EAAE,yBAAyB;YACzC,UAAU,EAAE,SAAS;SACtB;QACD,IAAI,EAAE,QAAQ;KACf,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,+BAA+B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,mBAAmB,SAAS,YAAY,GAAG,CAAC,MAAM,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAChG,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACtC,QAAQ,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5D,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;AACnE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAuB;IAC5D,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC;IACjC,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAE1C,0EAA0E;IAC1E,IAAI,OAAO,CAAC,QAAQ,KAAK,MAAM,EAAE,CAAC;QAChC,IAAI,OAAO,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;YACjC,wEAAwE;YACxE,OAAO,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACjC,CAAC;QACD,OAAO,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACjC,CAAC;IAED,MAAM,WAAW,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;IACxC,MAAM,WAAW,GAAG,EAAE,GAAG,WAAW,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAEnE,IAAI,OAAO,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;QACjC,8EAA8E;QAC9E,4EAA4E;QAC5E,4EAA4E;QAC5E,kDAAkD;QAClD,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QACnE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;QACzD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,iCAAiC,GAAG,CAAC,MAAM,MAAM,MAAM,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5F,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;IACjF,CAAC;IAED,IAAI,OAAO,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;QACjC,MAAM,EAAE,GAAG,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACvC,8EAA8E;QAC9E,mCAAmC;QACnC,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;YAAE,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC3E,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,IAAI,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QAEzE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;QAC5D,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,2BAA2B,GAAG,CAAC,MAAM,MAAM,MAAM,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACtF,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAY,CAAC;QAC3C,6EAA6E;QAC7E,oDAAoD;QACpD,IAAI,GAAc,CAAC;QACnB,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,GAAG,GAAG,IAAI,CAAC;QACb,CAAC;aAAM,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC5C,MAAM,IAAI,GAAI,IAA2C,CAAC,IAAI,IAAK,IAA2B,CAAC,IAAI,CAAC;YACpG,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC5C,CAAC;aAAM,CAAC;YACN,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;QACf,CAAC;QACD,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAA4B,CAAC,CAAC,CAAC;QACxE,QAAQ,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACpF,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;IAC7B,CAAC;IAED,IAAI,OAAO,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;QACpC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC9C,6EAA6E;QAC7E,yEAAyE;QACzE,kEAAkE;QAClE,MAAM,MAAM,GAAmB,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;QAEtD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,MAAM;YACN,OAAO,EAAE,EAAE,GAAG,WAAW,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/D,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;SAC7B,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CACb,cAAc,MAAM,IAAI,OAAO,CAAC,QAAQ,YAAY,GAAG,CAAC,MAAM,MAAM,MAAM,UAAU,CAAC,GAAG,CAAC,EAAE,CAC5F,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAA4B,CAAC;QACjF,6EAA6E;QAC7E,wDAAwD;QACxD,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACvD,MAAM,MAAM,GAAG,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,cAAc,CAAC,CAAC;QAChF,MAAM,KAAK,GAAG,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAChG,QAAQ,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAClF,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC;IACxD,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,qCAAqC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;AACpF,CAAC"}

package/dist/sis/workday.d.ts

@@ -0,0 +1,4 @@
+import type { OcSisCallResult } from "@oc/types";
+import type { OcSisVendorContext } from "../sis.js";
+export declare function ocWorkdayCall(ctx: OcSisVendorContext): Promise<OcSisCallResult>;
+//# sourceMappingURL=workday.d.ts.map

package/dist/sis/workday.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"workday.d.ts","sourceRoot":"","sources":["../../src/sis/workday.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AACjD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAqQpD,wBAAsB,aAAa,CAAC,GAAG,EAAE,kBAAkB,GAAG,OAAO,CAAC,eAAe,CAAC,CAuFrF"}

package/dist/sis/workday.js

@@ -0,0 +1,303 @@
+import { OcLogger } from "../logger.js";
+// ─── Workday Student (Track A — real implementation) ────────────────────────────
+//
+// SaaS, tenant-scoped host. The profile carries the tenant-scoped base URL
+// (e.g. https://wd2-impl-services1.workday.com), the Workday tenant name, the
+// registered API Client credentials, and the web-service / REST API version.
+//
+// Auth model: OAuth 2.0 against the tenant token endpoint
+// (POST /ccx/oauth2/<tenant>/token). Two grants are supported:
+//   - client_credentials  (authType "oauth_client_credentials")
+//   - refresh_token        (authType "oauth_refresh_token", profile.refreshToken)
+// The bearer token is cached per profile id until shortly before expiry, then
+// re-fetched — mirroring the Ethos JWT cache.
+//
+//   test   → obtain a token + a cheap authenticated GET to validate creds.
+//   read   → GET the REST resource, optionally filtered by `match`.
+//   upsert → person/student write. REST where the resource is exposed as REST
+//            (/ccx/api/.../<tenant>/...); for writes that require the SOAP Web
+//            Service (WWS), build a SOAP envelope and POST it to
+//            /ccx/service/<tenant>/... . Idempotency rides on Workday Reference
+//            IDs (Student_ID / Applicant_ID) carried in `payload.match`.
+//
+// Plan / runbook: docs/runbooks/sis-writeback.md (Workday section).
+const ocLogger = new OcLogger("sis-workday");
+// Refresh the bearer this many ms before its nominal expiry to avoid edge races.
+const OC_WD_TOKEN_SKEW_MS = 60_000;
+// Workday access tokens default to ~1h. Cache conservatively when the token
+// response omits expires_in.
+const OC_WD_DEFAULT_TTL_MS = 50 * 60_000;
+// Per-profile token cache (process-lifetime). Keyed by profile id so multiple
+// Workday profiles on one agent never share a bearer.
+const ocWorkdayTokenCache = new Map();
+function ocTrimSlash(url) {
+    return url.replace(/\/+$/, "");
+}
+async function ocSafeText(res) {
+    try {
+        return (await res.text()).slice(0, 500);
+    }
+    catch {
+        return "<no body>";
+    }
+}
+/** Tenant name from the profile — required for every endpoint path. */
+function ocWorkdayTenant(ctx) {
+    const tenant = ctx.profile.tenant?.trim();
+    if (!tenant) {
+        throw new Error(`Workday profile "${ctx.profile.id}" has no tenant configured`);
+    }
+    return tenant;
+}
+/** Token endpoint: explicit profile.tokenUrl wins, else derived from base + tenant. */
+function ocWorkdayTokenUrl(ctx, base, tenant) {
+    const explicit = ctx.profile.tokenUrl?.trim();
+    return explicit ? ocTrimSlash(explicit) : `${base}/ccx/oauth2/${tenant}/token`;
+}
+/** Obtain (and cache) an OAuth2 bearer token for the tenant. */
+async function ocWorkdayGetToken(ctx) {
+    const { profile } = ctx;
+    if (!profile.clientId || !profile.clientSecret) {
+        throw new Error(`Workday profile "${profile.id}" is missing clientId/clientSecret`);
+    }
+    const cached = ocWorkdayTokenCache.get(profile.id);
+    if (cached && cached.expiresAt - OC_WD_TOKEN_SKEW_MS > Date.now()) {
+        return cached.accessToken;
+    }
+    const base = ocTrimSlash(profile.baseUrl);
+    const tenant = ocWorkdayTenant(ctx);
+    const tokenUrl = ocWorkdayTokenUrl(ctx, base, tenant);
+    // Workday registers the API Client with either grant. refresh_token is the
+    // common ISU pattern; client_credentials is used for service-to-service ISUs.
+    const form = new URLSearchParams();
+    if (profile.authType === "oauth_refresh_token") {
+        if (!profile.refreshToken) {
+            throw new Error(`Workday profile "${profile.id}" uses refresh_token grant but has no refreshToken`);
+        }
+        form.set("grant_type", "refresh_token");
+        form.set("refresh_token", profile.refreshToken);
+    }
+    else {
+        form.set("grant_type", "client_credentials");
+    }
+    // Client auth via HTTP Basic (client_id:client_secret) — Workday's documented
+    // form for the token endpoint.
+    const basic = Buffer.from(`${profile.clientId}:${profile.clientSecret}`).toString("base64");
+    const res = await fetch(tokenUrl, {
+        method: "POST",
+        headers: {
+            Authorization: `Basic ${basic}`,
+            "Content-Type": "application/x-www-form-urlencoded",
+            Accept: "application/json",
+        },
+        body: form.toString(),
+    });
+    if (!res.ok) {
+        throw new Error(`Workday auth failed (${res.status}): ${await ocSafeText(res)}`);
+    }
+    const body = (await res.json().catch(() => ({})));
+    if (!body.access_token) {
+        throw new Error("Workday auth returned no access_token");
+    }
+    const ttl = typeof body.expires_in === "number" ? body.expires_in * 1000 : OC_WD_DEFAULT_TTL_MS;
+    ocWorkdayTokenCache.set(profile.id, {
+        accessToken: body.access_token,
+        expiresAt: Date.now() + ttl,
+    });
+    return body.access_token;
+}
+function ocWorkdayJsonHeaders(token) {
+    return {
+        Authorization: `Bearer ${token}`,
+        Accept: "application/json",
+        "Content-Type": "application/json",
+    };
+}
+/** REST API version segment, defaulting to "v1" when the profile omits it. */
+function ocWorkdayVersion(ctx) {
+    return ctx.profile.version?.trim() || "v1";
+}
+/**
+ * Build the REST URL for a resource. The profile's `resource` is the API
+ * service + path tail (e.g. "studentRecords/v1/<tenant>/students" is too brittle
+ * to hardcode, so we accept either a fully-formed tail or a bare resource and
+ * assemble /ccx/api/<resource-or-version>/<tenant>/...). Campus-specific service
+ * names are driven entirely from payload.resource rather than hardcoded here.
+ */
+function ocWorkdayRestUrl(ctx, base, tenant) {
+    const version = ocWorkdayVersion(ctx);
+    // A resource that already contains a slash is treated as a full service path
+    // tail "<service>/<version?>/<path>"; otherwise we frame it as
+    // "<resource>/<version>". Either way the tenant is injected before the path.
+    const resource = ctx.payload.resource.replace(/^\/+/, "");
+    return `${base}/ccx/api/${resource}/${tenant}`.replace(/\/+$/, "") + `?version=${encodeURIComponent(version)}`;
+}
+/** Coerce a vendor JSON object into a flat string row for the cloud. */
+function ocFlattenRow(obj) {
+    const row = {};
+    for (const [k, v] of Object.entries(obj ?? {})) {
+        if (v == null)
+            continue;
+        row[k] = typeof v === "object" ? JSON.stringify(v) : String(v);
+    }
+    return row;
+}
+/** XML-escape a value for inclusion in a SOAP envelope. */
+function ocXmlEscape(value) {
+    return value
+        .replace(/&/g, "&amp;")
+        .replace(/</g, "&lt;")
+        .replace(/>/g, "&gt;")
+        .replace(/"/g, "&quot;")
+        .replace(/'/g, "&apos;");
+}
+/**
+ * Does this upsert require the SOAP Web Service (WWS) rather than REST?
+ * Driven by the profile authType ("soap") or an explicit hint on the record
+ * (record.__transport === "soap") so a single profile can mix REST reads with a
+ * SOAP student write without code changes.
+ */
+function ocWorkdayWantsSoap(ctx) {
+    if (ctx.profile.authType === "soap")
+        return true;
+    const record = ctx.payload.record ?? {};
+    return record["__transport"] === "soap";
+}
+/**
+ * SOAP WWS upsert. Builds a generic Workday-style envelope: the operation name
+ * comes from payload.resource (e.g. "Put_Student"), the OAuth bearer is carried
+ * in the HTTP Authorization header, the Reference ID(s) from payload.match seed
+ * idempotency, and the mapped record fields become child elements. Exact field
+ * element names are campus/service specific, so they are emitted verbatim from
+ * payload.record rather than hardcoded.
+ */
+async function ocWorkdaySoapUpsert(ctx, base, tenant, token) {
+    const operation = ctx.payload.resource.replace(/[^A-Za-z0-9_]/g, "");
+    if (!operation) {
+        throw new Error("Workday SOAP upsert requires payload.resource to name the WWS operation");
+    }
+    const match = ctx.payload.match ?? {};
+    const record = (ctx.payload.record ?? {});
+    // Reference IDs (Student_ID / Applicant_ID etc.) carry idempotency. Each match
+    // key becomes a typed Workday Reference ID element.
+    const referenceIds = Object.entries(match)
+        .map(([type, value]) => `<wd:ID wd:type="${ocXmlEscape(type)}">${ocXmlEscape(String(value))}</wd:ID>`)
+        .join("");
+    // Mapped record fields → child elements (names emitted verbatim; values escaped).
+    const dataFields = Object.entries(record)
+        .filter(([k]) => k !== "__transport")
+        .map(([k, v]) => {
+        const tag = ocXmlEscape(k);
+        return `<wd:${tag}>${ocXmlEscape(typeof v === "object" ? JSON.stringify(v) : String(v))}</wd:${tag}>`;
+    })
+        .join("");
+    const envelope = `<?xml version="1.0" encoding="UTF-8"?>` +
+        `<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:wd="urn:com.workday/bsvc">` +
+        `<soapenv:Body>` +
+        `<wd:${operation}_Request>` +
+        (referenceIds ? `<wd:Reference>${referenceIds}</wd:Reference>` : "") +
+        `<wd:Data>${dataFields}</wd:Data>` +
+        `</wd:${operation}_Request>` +
+        `</soapenv:Body>` +
+        `</soapenv:Envelope>`;
+    const url = `${base}/ccx/service/${tenant}/${ocWorkdayVersion(ctx)}`;
+    const res = await fetch(url, {
+        method: "POST",
+        headers: {
+            Authorization: `Bearer ${token}`,
+            "Content-Type": "text/xml; charset=utf-8",
+            SOAPAction: operation,
+        },
+        body: envelope,
+    });
+    const text = await res.text();
+    if (!res.ok || /<(soapenv:)?Fault>/i.test(text)) {
+        throw new Error(`Workday SOAP ${operation} failed (${res.status}): ${text.slice(0, 500)}`);
+    }
+    // Surface the first match value (the Workday Reference ID) as the sisId — it is
+    // the stable, caller-supplied handle for the upserted record.
+    const sisId = Object.values(match)[0];
+    ocLogger.info("workday soap upsert", { operation, sisId });
+    return { ...(sisId ? { sisId: String(sisId) } : {}), raw: text };
+}
+export async function ocWorkdayCall(ctx) {
+    const { payload, profile } = ctx;
+    const base = ocTrimSlash(profile.baseUrl);
+    const tenant = ocWorkdayTenant(ctx);
+    const token = await ocWorkdayGetToken(ctx);
+    if (payload.operation === "test") {
+        // Token already exercised the client creds. Add a cheap authenticated GET so
+        // a misconfigured base URL / tenant is caught too. The Workday common API
+        // "workers" endpoint is a safe, universally-present probe.
+        const probe = `${base}/ccx/api/v1/${tenant}/workers?limit=1`;
+        const res = await fetch(probe, { headers: ocWorkdayJsonHeaders(token) });
+        if (!res.ok) {
+            throw new Error(`Workday test probe failed (${res.status}): ${await ocSafeText(res)}`);
+        }
+        return { raw: { ok: true, vendor: "workday", tenant } };
+    }
+    if (payload.operation === "read") {
+        const match = payload.match ?? {};
+        const url = ocWorkdayRestUrl(ctx, base, tenant);
+        // Append match keys as query filters (Workday REST collections accept field
+        // filters; exact param names are service-specific so we pass them through).
+        const params = new URLSearchParams();
+        for (const [k, v] of Object.entries(match))
+            params.set(k, v);
+        const sep = url.includes("?") ? "&" : "?";
+        const finalUrl = params.toString() ? `${url}${sep}${params.toString()}` : url;
+        const res = await fetch(finalUrl, { headers: ocWorkdayJsonHeaders(token) });
+        if (!res.ok) {
+            throw new Error(`Workday read failed (${res.status}): ${await ocSafeText(res)}`);
+        }
+        const body = (await res.json());
+        // Workday REST collections wrap rows in { data: [...] }; tolerate a bare array
+        // or a single object too.
+        const arr = Array.isArray(body)
+            ? body
+            : Array.isArray(body?.data)
+                ? body.data
+                : [body];
+        const rows = arr.map((r) => ocFlattenRow(r));
+        ocLogger.info("workday read", { resource: payload.resource, rows: rows.length });
+        return { rows, raw: body };
+    }
+    if (payload.operation === "upsert") {
+        if (ocWorkdayWantsSoap(ctx)) {
+            return ocWorkdaySoapUpsert(ctx, base, tenant, token);
+        }
+        // REST upsert. Idempotency rides on the Workday Reference ID in `match`: when
+        // present we target the instance directly with a PUT; otherwise POST to the
+        // collection to create. The first match value is the instance reference id.
+        const record = payload.record ?? {};
+        const match = payload.match ?? {};
+        const refId = Object.values(match)[0];
+        const collectionUrl = ocWorkdayRestUrl(ctx, base, tenant);
+        let url;
+        let method;
+        if (refId) {
+            // Insert the reference id as a path segment before the ?version query.
+            const [path, query] = collectionUrl.split("?");
+            url = `${path}/${encodeURIComponent(String(refId))}${query ? `?${query}` : ""}`;
+            method = "PUT";
+        }
+        else {
+            url = collectionUrl;
+            method = "POST";
+        }
+        const res = await fetch(url, {
+            method,
+            headers: ocWorkdayJsonHeaders(token),
+            body: JSON.stringify(record),
+        });
+        if (!res.ok) {
+            throw new Error(`Workday ${method} ${payload.resource} failed (${res.status}): ${await ocSafeText(res)}`);
+        }
+        const respBody = (await res.json().catch(() => ({})));
+        const sisId = respBody.id ?? (refId != null ? String(refId) : undefined);
+        ocLogger.info("workday upsert", { resource: payload.resource, method, sisId });
+        return { ...(sisId ? { sisId } : {}), raw: respBody };
+    }
+    throw new Error(`Unsupported Workday operation: ${String(payload.operation)}`);
+}
+//# sourceMappingURL=workday.js.map

package/dist/sis/workday.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workday.js","sourceRoot":"","sources":["../../src/sis/workday.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAExC,mFAAmF;AACnF,EAAE;AACF,2EAA2E;AAC3E,8EAA8E;AAC9E,6EAA6E;AAC7E,EAAE;AACF,0DAA0D;AAC1D,+DAA+D;AAC/D,gEAAgE;AAChE,kFAAkF;AAClF,8EAA8E;AAC9E,8CAA8C;AAC9C,EAAE;AACF,2EAA2E;AAC3E,oEAAoE;AACpE,8EAA8E;AAC9E,+EAA+E;AAC/E,iEAAiE;AACjE,gFAAgF;AAChF,yEAAyE;AACzE,EAAE;AACF,oEAAoE;AAEpE,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAAC,aAAa,CAAC,CAAC;AAE7C,iFAAiF;AACjF,MAAM,mBAAmB,GAAG,MAAM,CAAC;AACnC,4EAA4E;AAC5E,6BAA6B;AAC7B,MAAM,oBAAoB,GAAG,EAAE,GAAG,MAAM,CAAC;AAOzC,8EAA8E;AAC9E,sDAAsD;AACtD,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAA0B,CAAC;AAE9D,SAAS,WAAW,CAAC,GAAW;IAC9B,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACjC,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,GAAa;IACrC,IAAI,CAAC;QACH,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,WAAW,CAAC;IACrB,CAAC;AACH,CAAC;AAED,uEAAuE;AACvE,SAAS,eAAe,CAAC,GAAuB;IAC9C,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;IAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,oBAAoB,GAAG,CAAC,OAAO,CAAC,EAAE,4BAA4B,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,uFAAuF;AACvF,SAAS,iBAAiB,CAAC,GAAuB,EAAE,IAAY,EAAE,MAAc;IAC9E,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC9C,OAAO,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,eAAe,MAAM,QAAQ,CAAC;AACjF,CAAC;AAED,gEAAgE;AAChE,KAAK,UAAU,iBAAiB,CAAC,GAAuB;IACtD,MAAM,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC;IACxB,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,oBAAoB,OAAO,CAAC,EAAE,oCAAoC,CAAC,CAAC;IACtF,CAAC;IAED,MAAM,MAAM,GAAG,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACnD,IAAI,MAAM,IAAI,MAAM,CAAC,SAAS,GAAG,mBAAmB,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QAClE,OAAO,MAAM,CAAC,WAAW,CAAC;IAC5B,CAAC;IAED,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAEtD,2EAA2E;IAC3E,8EAA8E;IAC9E,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;IACnC,IAAI,OAAO,CAAC,QAAQ,KAAK,qBAAqB,EAAE,CAAC;QAC/C,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CAAC,oBAAoB,OAAO,CAAC,EAAE,oDAAoD,CAAC,CAAC;QACtG,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,eAAe,CAAC,CAAC;QACxC,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;IAClD,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,oBAAoB,CAAC,CAAC;IAC/C,CAAC;IAED,8EAA8E;IAC9E,+BAA+B;IAC/B,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC5F,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE;QAChC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,aAAa,EAAE,SAAS,KAAK,EAAE;YAC/B,cAAc,EAAE,mCAAmC;YACnD,MAAM,EAAE,kBAAkB;SAC3B;QACD,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;KACtB,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CAAC,wBAAwB,GAAG,CAAC,MAAM,MAAM,MAAM,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACnF,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAG/C,CAAC;IACF,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,CAAC,oBAAoB,CAAC;IAChG,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE;QAClC,WAAW,EAAE,IAAI,CAAC,YAAY;QAC9B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,GAAG;KAC5B,CAAC,CAAC;IACH,OAAO,IAAI,CAAC,YAAY,CAAC;AAC3B,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAa;IACzC,OAAO;QACL,aAAa,EAAE,UAAU,KAAK,EAAE;QAChC,MAAM,EAAE,kBAAkB;QAC1B,cAAc,EAAE,kBAAkB;KACnC,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,SAAS,gBAAgB,CAAC,GAAuB;IAC/C,OAAO,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC;AAC7C,CAAC;AAED;;;;;;GAMG;AACH,SAAS,gBAAgB,CAAC,GAAuB,EAAE,IAAY,EAAE,MAAc;IAC7E,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACtC,6EAA6E;IAC7E,+DAA+D;IAC/D,6EAA6E;IAC7E,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC1D,OAAO,GAAG,IAAI,YAAY,QAAQ,IAAI,MAAM,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,YAAY,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;AACjH,CAAC;AAED,wEAAwE;AACxE,SAAS,YAAY,CAAC,GAA4B;IAChD,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,CAAC;QAC/C,IAAI,CAAC,IAAI,IAAI;YAAE,SAAS;QACxB,GAAG,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,2DAA2D;AAC3D,SAAS,WAAW,CAAC,KAAa;IAChC,OAAO,KAAK;SACT,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;AAC7B,CAAC;AAED;;;;;GAKG;AACH,SAAS,kBAAkB,CAAC,GAAuB;IACjD,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACjD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;IACxC,OAAQ,MAAkC,CAAC,aAAa,CAAC,KAAK,MAAM,CAAC;AACvE,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,mBAAmB,CAChC,GAAuB,EACvB,IAAY,EACZ,MAAc,EACd,KAAa;IAEb,MAAM,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;IACrE,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,yEAAyE,CAAC,CAAC;IAC7F,CAAC;IACD,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;IACtC,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAA4B,CAAC;IAErE,+EAA+E;IAC/E,oDAAoD;IACpD,MAAM,YAAY,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;SACvC,GAAG,CACF,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAChB,mBAAmB,WAAW,CAAC,IAAI,CAAC,KAAK,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,UAAU,CAChF;SACA,IAAI,CAAC,EAAE,CAAC,CAAC;IAEZ,kFAAkF;IAClF,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;SACtC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,aAAa,CAAC;SACpC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE;QACd,MAAM,GAAG,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;QAC3B,OAAO,OAAO,GAAG,IAAI,WAAW,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,GAAG,GAAG,CAAC;IACxG,CAAC,CAAC;SACD,IAAI,CAAC,EAAE,CAAC,CAAC;IAEZ,MAAM,QAAQ,GACZ,wCAAwC;QACxC,8GAA8G;QAC9G,gBAAgB;QAChB,OAAO,SAAS,WAAW;QAC3B,CAAC,YAAY,CAAC,CAAC,CAAC,iBAAiB,YAAY,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC;QACpE,YAAY,UAAU,YAAY;QAClC,QAAQ,SAAS,WAAW;QAC5B,iBAAiB;QACjB,qBAAqB,CAAC;IAExB,MAAM,GAAG,GAAG,GAAG,IAAI,gBAAgB,MAAM,IAAI,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;IACrE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAC3B,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,KAAK,EAAE;YAChC,cAAc,EAAE,yBAAyB;YACzC,UAAU,EAAE,SAAS;SACtB;QACD,IAAI,EAAE,QAAQ;KACf,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,gBAAgB,SAAS,YAAY,GAAG,CAAC,MAAM,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAC7F,CAAC;IACD,gFAAgF;IAChF,8DAA8D;IAC9D,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACtC,QAAQ,CAAC,IAAI,CAAC,qBAAqB,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;IAC3D,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;AACnE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,GAAuB;IACzD,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC;IACjC,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,MAAM,iBAAiB,CAAC,GAAG,CAAC,CAAC;IAE3C,IAAI,OAAO,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;QACjC,6EAA6E;QAC7E,0EAA0E;QAC1E,2DAA2D;QAC3D,MAAM,KAAK,GAAG,GAAG,IAAI,eAAe,MAAM,kBAAkB,CAAC;QAC7D,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACzE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,8BAA8B,GAAG,CAAC,MAAM,MAAM,MAAM,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACzF,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,EAAE,CAAC;IAC1D,CAAC;IAED,IAAI,OAAO,CAAC,SAAS,KAAK,MAAM,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,gBAAgB,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAChD,4EAA4E;QAC5E,4EAA4E;QAC5E,MAAM,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QACrC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7D,MAAM,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC;QAC1C,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,GAAG,GAAG,GAAG,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;QAE9E,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,oBAAoB,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC5E,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,wBAAwB,GAAG,CAAC,MAAM,MAAM,MAAM,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACnF,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAY,CAAC;QAC3C,+EAA+E;QAC/E,0BAA0B;QAC1B,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAC7B,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,KAAK,CAAC,OAAO,CAAE,IAA6B,EAAE,IAAI,CAAC;gBACnD,CAAC,CAAE,IAA4B,CAAC,IAAI;gBACpC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACb,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAA4B,CAAC,CAAC,CAAC;QACxE,QAAQ,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QACjF,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;IAC7B,CAAC;IAED,IAAI,OAAO,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;QACnC,IAAI,kBAAkB,CAAC,GAAG,CAAC,EAAE,CAAC;YAC5B,OAAO,mBAAmB,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QACvD,CAAC;QAED,8EAA8E;QAC9E,4EAA4E;QAC5E,4EAA4E;QAC5E,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,aAAa,GAAG,gBAAgB,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAE1D,IAAI,GAAW,CAAC;QAChB,IAAI,MAAsB,CAAC;QAC3B,IAAI,KAAK,EAAE,CAAC;YACV,uEAAuE;YACvE,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC/C,GAAG,GAAG,GAAG,IAAI,IAAI,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YAChF,MAAM,GAAG,KAAK,CAAC;QACjB,CAAC;aAAM,CAAC;YACN,GAAG,GAAG,aAAa,CAAC;YACpB,MAAM,GAAG,MAAM,CAAC;QAClB,CAAC;QAED,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,MAAM;YACN,OAAO,EAAE,oBAAoB,CAAC,KAAK,CAAC;YACpC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC;SAC7B,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CACb,WAAW,MAAM,IAAI,OAAO,CAAC,QAAQ,YAAY,GAAG,CAAC,MAAM,MAAM,MAAM,UAAU,CAAC,GAAG,CAAC,EAAE,CACzF,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAoB,CAAC;QACzE,MAAM,KAAK,GAAG,QAAQ,CAAC,EAAE,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACzE,QAAQ,CAAC,IAAI,CAAC,gBAAgB,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/E,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,CAAC;IACxD,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,kCAAkC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;AACjF,CAAC"}

package/dist/sis.d.ts

@@ -0,0 +1,9 @@
+import type { OcSisCallPayload, OcSisCallResult } from "@oc/types";
+import type { OcStore, OcSisProfile } from "./store.js";
+/** A resolved vendor call: the validated payload + the profile's credentials. */
+export interface OcSisVendorContext {
+    payload: OcSisCallPayload;
+    profile: OcSisProfile;
+}
+export declare function executeSisCall(payload: OcSisCallPayload, store: OcStore): Promise<OcSisCallResult>;
+//# sourceMappingURL=sis.d.ts.map

package/dist/sis.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sis.d.ts","sourceRoot":"","sources":["../src/sis.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AACnE,OAAO,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAcxD,iFAAiF;AACjF,MAAM,WAAW,kBAAkB;IACjC,OAAO,EAAE,gBAAgB,CAAC;IAC1B,OAAO,EAAE,YAAY,CAAC;CACvB;AAED,wBAAsB,cAAc,CAClC,OAAO,EAAE,gBAAgB,EACzB,KAAK,EAAE,OAAO,GACb,OAAO,CAAC,eAAe,CAAC,CAgC1B"}

package/dist/sis.js

@@ -0,0 +1,30 @@
+import { ocEthosCall } from "./sis/ethos.js";
+import { ocPeoplesoftCall } from "./sis/peoplesoft.js";
+import { ocWorkdayCall } from "./sis/workday.js";
+export async function executeSisCall(payload, store) {
+    if (!payload || typeof payload !== "object") {
+        throw new Error("Invalid SIS call payload");
+    }
+    if (!payload.profileId) {
+        throw new Error("SIS call is missing profileId");
+    }
+    const profile = await store.loadSisCredentials(payload.profileId);
+    if (!profile) {
+        throw new Error(`SIS profile "${payload.profileId}" is not configured on this agent — add it under Settings → SIS Profiles`);
+    }
+    if (profile.vendor !== payload.vendor) {
+        throw new Error(`SIS profile "${payload.profileId}" is a ${profile.vendor} profile but the step requested ${payload.vendor}`);
+    }
+    const ctx = { payload, profile };
+    switch (payload.vendor) {
+        case "ethos":
+            return ocEthosCall(ctx);
+        case "peoplesoft":
+            return ocPeoplesoftCall(ctx);
+        case "workday":
+            return ocWorkdayCall(ctx);
+        default:
+            throw new Error(`Unsupported SIS vendor: ${String(payload.vendor)}`);
+    }
+}
+//# sourceMappingURL=sis.js.map

package/dist/sis.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sis.js","sourceRoot":"","sources":["../src/sis.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAC7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAiBjD,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,OAAyB,EACzB,KAAc;IAEd,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC9C,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnD,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,kBAAkB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAClE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,gBAAgB,OAAO,CAAC,SAAS,0EAA0E,CAC5G,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CACb,gBAAgB,OAAO,CAAC,SAAS,UAAU,OAAO,CAAC,MAAM,mCAAmC,OAAO,CAAC,MAAM,EAAE,CAC7G,CAAC;IACJ,CAAC;IAED,MAAM,GAAG,GAAuB,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IAErD,QAAQ,OAAO,CAAC,MAAM,EAAE,CAAC;QACvB,KAAK,OAAO;YACV,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;QAC1B,KAAK,YAAY;YACf,OAAO,gBAAgB,CAAC,GAAG,CAAC,CAAC;QAC/B,KAAK,SAAS;YACZ,OAAO,aAAa,CAAC,GAAG,CAAC,CAAC;QAC5B;YACE,MAAM,IAAI,KAAK,CAAC,2BAA2B,MAAM,CAAE,OAAgC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACnG,CAAC;AACH,CAAC"}