robotrock 0.8.1 → 0.8.4

package/dist/schemas/index.js

@@ -1,10 +1,187 @@
 // src/schemas/index.ts
+import { z as z2 } from "zod";
+
+// ../core/src/utils/safe-url.ts
+var BLOCKED_HOSTNAMES = /* @__PURE__ */ new Set([
+  "localhost",
+  "metadata.google.internal",
+  "metadata.goog"
+]);
+function normalizeHostname(hostname) {
+  return hostname.toLowerCase().replace(/^\[|\]$/g, "");
+}
+function isBlockedIpv4(host) {
+  const match = /^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/.exec(host);
+  if (!match) {
+    return false;
+  }
+  const octets = match.slice(1, 5).map((part) => Number(part));
+  if (octets.some((octet) => Number.isNaN(octet) || octet < 0 || octet > 255)) {
+    return true;
+  }
+  const [a, b, _c, _d] = octets;
+  if (a === void 0 || b === void 0) {
+    return true;
+  }
+  if (a === 127 || a === 0) return true;
+  if (a === 10) return true;
+  if (a === 169 && b === 254) return true;
+  if (a === 192 && b === 168) return true;
+  if (a === 172 && b >= 16 && b <= 31) return true;
+  if (a === 100 && b >= 64 && b <= 127) return true;
+  return false;
+}
+function ipv4FromNumericHost(host) {
+  if (/^\d+$/.test(host)) {
+    const num = Number(host);
+    if (!Number.isFinite(num) || num < 0 || num > 4294967295) {
+      return null;
+    }
+    const a = num >>> 24 & 255;
+    const b = num >>> 16 & 255;
+    const c = num >>> 8 & 255;
+    const d = num & 255;
+    return `${a}.${b}.${c}.${d}`;
+  }
+  const hexMatch = /^0x([0-9a-f]{1,8})$/i.exec(host);
+  if (hexMatch) {
+    const num = Number.parseInt(hexMatch[1], 16);
+    if (!Number.isFinite(num) || num < 0 || num > 4294967295) {
+      return null;
+    }
+    const a = num >>> 24 & 255;
+    const b = num >>> 16 & 255;
+    const c = num >>> 8 & 255;
+    const d = num & 255;
+    return `${a}.${b}.${c}.${d}`;
+  }
+  return null;
+}
+function isBlockedIpv4Mapped(host) {
+  const mappedDotted = /^::ffff:(\d{1,3}(?:\.\d{1,3}){3})$/i.exec(host);
+  if (mappedDotted) {
+    return isBlockedIpv4(mappedDotted[1]);
+  }
+  const mappedHex = /^::ffff:([0-9a-f]{1,4}):([0-9a-f]{1,4})$/i.exec(host);
+  if (mappedHex) {
+    const high = Number.parseInt(mappedHex[1], 16);
+    const low = Number.parseInt(mappedHex[2], 16);
+    if (Number.isFinite(high) && Number.isFinite(low)) {
+      const a = high >> 8 & 255;
+      const b = high & 255;
+      const c = low >> 8 & 255;
+      const d = low & 255;
+      return isBlockedIpv4(`${a}.${b}.${c}.${d}`);
+    }
+  }
+  return false;
+}
+function isBlockedIpv6(host) {
+  if (host === "::1" || host === "0:0:0:0:0:0:0:1") {
+    return true;
+  }
+  if (host.startsWith("fc") || host.startsWith("fd")) {
+    return true;
+  }
+  if (host.startsWith("fe80:")) {
+    return true;
+  }
+  if (isBlockedIpv4Mapped(host)) {
+    return true;
+  }
+  return false;
+}
+function isBlockedHostname(hostname) {
+  const host = normalizeHostname(hostname);
+  if (!host) {
+    return true;
+  }
+  if (BLOCKED_HOSTNAMES.has(host)) {
+    return true;
+  }
+  if (host.endsWith(".localhost") || host.endsWith(".local")) {
+    return true;
+  }
+  const numericIpv4 = ipv4FromNumericHost(host);
+  if (numericIpv4 && isBlockedIpv4(numericIpv4)) {
+    return true;
+  }
+  return isBlockedIpv4(host) || isBlockedIpv6(host);
+}
+function isPublicHttpUrl(urlString) {
+  let url;
+  try {
+    url = new URL(urlString);
+  } catch {
+    return false;
+  }
+  if (url.protocol !== "http:" && url.protocol !== "https:") {
+    return false;
+  }
+  if (url.username || url.password) {
+    return false;
+  }
+  return !isBlockedHostname(url.hostname);
+}
+var PUBLIC_HTTP_URL_ERROR = "URL must be a public http:// or https:// address";
+
+// ../core/src/schemas/task.ts
 import { z } from "zod";
-import {
-  isPublicHttpUrl,
-  PUBLIC_HTTP_URL_ERROR
-} from "@robotrock/core/utils";
-import { validateContextPublicUrls } from "@robotrock/core/schemas";
+
+// ../core/src/schemas/context-urls.ts
+function resolveLinkUrl(value) {
+  return value.startsWith("http://") || value.startsWith("https://") ? value : `https://${value}`;
+}
+function widgetType(ui, field) {
+  const fieldUi = ui?.[field];
+  if (typeof fieldUi !== "object" || fieldUi === null) {
+    return void 0;
+  }
+  const widget = fieldUi["ui:widget"];
+  return typeof widget === "string" ? widget : void 0;
+}
+function validateUrlValue(value, widget) {
+  if (widget === "image" || widget === "link") {
+    if (typeof value !== "string") {
+      return PUBLIC_HTTP_URL_ERROR;
+    }
+    const url = widget === "link" ? resolveLinkUrl(value) : value;
+    if (!isPublicHttpUrl(url)) {
+      return PUBLIC_HTTP_URL_ERROR;
+    }
+    return null;
+  }
+  if (widget === "attachments" && Array.isArray(value)) {
+    for (const item of value) {
+      if (typeof item !== "object" || item === null) {
+        continue;
+      }
+      const url = item.url;
+      if (typeof url === "string" && !isPublicHttpUrl(resolveLinkUrl(url))) {
+        return PUBLIC_HTTP_URL_ERROR;
+      }
+    }
+  }
+  return null;
+}
+function validateContextPublicUrls(context) {
+  if (!context?.data) {
+    return null;
+  }
+  for (const [field, value] of Object.entries(context.data)) {
+    const widget = widgetType(context.ui, field);
+    if (!widget) {
+      continue;
+    }
+    const error = validateUrlValue(value, widget);
+    if (error) {
+      return `context.data.${field}: ${error}`;
+    }
+  }
+  return null;
+}
+
+// ../core/src/schemas/task.ts
 var safeUrlSchema = z.string().refine((url) => isPublicHttpUrl(url), {
   message: PUBLIC_HTTP_URL_ERROR
 });
@@ -32,6 +209,7 @@ var taskActionSchema = z.object({
   schema: jsonSchema7Schema.optional(),
   ui: uiSchemaSchema.optional(),
   data: z.record(z.string(), z.unknown()).optional(),
+  // Optional handlers for this action - if present, must have at least 1
   handlers: z.array(handlerSchema).min(1).optional()
 });
 var uiFieldSchemaSchema = z.object({
@@ -47,6 +225,7 @@ var contextDataSchema = z.object({
   ui: contextUiSchema
 }).optional();
 var taskContextObjectSchema = z.object({
+  /** Source application id; omitted tasks are grouped in the default inbox. */
   app: z.string().min(1).optional(),
   type: z.string().min(1),
   name: z.string().min(1),
@@ -93,21 +272,12 @@ var threadUpdateStatuses = [
   "cancelled"
 ];
 var threadUpdateStatusSchema = z.enum(threadUpdateStatuses);
-var DEFAULT_THREAD_UPDATE_STATUS = "info";
 var threadUpdateInputSchema = z.object({
   message: threadUpdateMessageSchema,
   status: threadUpdateStatusSchema.optional()
 });
 var taskPriorities = ["low", "normal", "high", "urgent"];
 var taskPrioritySchema = z.enum(taskPriorities);
-var DEFAULT_TASK_PRIORITY = "normal";
-var LOWEST_TASK_PRIORITY = "low";
-var TASK_PRIORITY_RANK = {
-  low: 1,
-  normal: 2,
-  high: 3,
-  urgent: 4
-};
 var nonNegativeInt = z.number().int().nonnegative();
 var agentCostTokensSchema = z.object({
   input: nonNegativeInt.optional(),
@@ -120,17 +290,47 @@ var agentCostSchema = z.object({
   usd: z.number().nonnegative().optional()
 });
 var AGENT_INFO_MAX_KEYS = 32;
+var AGENT_TOOL_CALLS_MAX_KEYS = 64;
+var AGENT_OTEL_SPANS_MAX = 32;
+var agentToolCallsSchema = z.record(z.string().min(1), nonNegativeInt);
+var agentOtelSpanStatusSchema = z.enum(["ok", "error"]);
+var agentOtelSpanSummarySchema = z.object({
+  name: z.string().min(1),
+  durationMs: z.number().nonnegative(),
+  status: agentOtelSpanStatusSchema
+});
+var agentOtelSchema = z.object({
+  traceId: z.string().min(1),
+  spanId: z.string().min(1).optional(),
+  rootDurationMs: z.number().nonnegative().optional(),
+  spans: z.array(agentOtelSpanSummarySchema).max(AGENT_OTEL_SPANS_MAX).optional()
+});
 var agentTelemetrySchema = z.object({
+  /** Agent or app version (semver, git SHA, deploy tag — caller-defined). */
   version: z.string().min(1).optional(),
+  /** Total tool invocations. When omitted but `toolCalls` is set, the sum of counts is used. */
   toolCallCount: nonNegativeInt.optional(),
+  /** Per-tool invocation counts keyed by tool name. */
+  toolCalls: agentToolCallsSchema.optional(),
   cost: agentCostSchema.optional(),
-  info: z.record(z.string(), z.unknown()).optional()
+  /** Free-form metadata for experiments (model, prompt variant, etc.). */
+  info: z.record(z.string(), z.unknown()).optional(),
+  /** Structured OpenTelemetry span snapshot for feedback analysis. */
+  otel: agentOtelSchema.optional()
 }).refine(
   (data) => {
     const keys = data.info ? Object.keys(data.info) : [];
     return keys.length <= AGENT_INFO_MAX_KEYS;
   },
   { message: `agent.info may contain at most ${AGENT_INFO_MAX_KEYS} keys` }
+).refine(
+  (data) => {
+    const keys = data.toolCalls ? Object.keys(data.toolCalls) : [];
+    return keys.length <= AGENT_TOOL_CALLS_MAX_KEYS;
+  },
+  {
+    message: `agent.toolCalls may contain at most ${AGENT_TOOL_CALLS_MAX_KEYS} tool names`
+  }
 );
 var createTaskBodySchema = taskContextObjectSchema.extend({
   assignTo: assignToSchema.optional(),
@@ -149,26 +349,205 @@ var createTaskBodySchema = taskContextObjectSchema.extend({
    * the inbox status bar and the thread update log.
    */
   update: threadUpdateInputSchema.optional(),
+  /** Agent telemetry (version, cost, tool calls) — not shown in inbox UI. */
   agent: agentTelemetrySchema.optional()
 }).superRefine(refineContextPublicUrls);
-var threadUpdateBodySchema = threadUpdateInputSchema;
+
+// src/schemas/index.ts
+var safeUrlSchema2 = z2.string().refine((url) => isPublicHttpUrl(url), {
+  message: PUBLIC_HTTP_URL_ERROR
+});
+var jsonSchema7Schema2 = z2.custom(
+  (val) => typeof val === "object" && val !== null,
+  { message: "Must be a valid JSON Schema object" }
+);
+var uiSchemaSchema2 = z2.custom((val) => typeof val === "object" && val !== null, {
+  message: "Must be a valid UiSchema object"
+});
+var webhookHandlerSchema2 = z2.object({
+  type: z2.literal("webhook"),
+  url: safeUrlSchema2,
+  headers: z2.record(z2.string(), z2.string())
+});
+var triggerHandlerSchema2 = webhookHandlerSchema2.extend({
+  type: z2.literal("trigger"),
+  tokenId: z2.string().min(1)
+});
+var handlerSchema2 = z2.discriminatedUnion("type", [webhookHandlerSchema2, triggerHandlerSchema2]);
+var taskActionSchema2 = z2.object({
+  id: z2.string().min(1),
+  title: z2.string().min(1),
+  description: z2.string().optional(),
+  schema: jsonSchema7Schema2.optional(),
+  ui: uiSchemaSchema2.optional(),
+  data: z2.record(z2.string(), z2.unknown()).optional(),
+  handlers: z2.array(handlerSchema2).min(1).optional()
+});
+var uiFieldSchemaSchema2 = z2.object({
+  "ui:widget": z2.string().optional(),
+  "ui:title": z2.string().optional(),
+  "ui:description": z2.string().optional(),
+  "ui:options": z2.record(z2.string(), z2.unknown()).optional(),
+  items: z2.lazy(() => z2.record(z2.string(), uiFieldSchemaSchema2)).optional()
+}).passthrough();
+var contextUiSchema2 = z2.record(z2.string(), uiFieldSchemaSchema2).optional();
+var contextDataSchema2 = z2.object({
+  data: z2.record(z2.string(), z2.unknown()),
+  ui: contextUiSchema2
+}).optional();
+var taskContextObjectSchema2 = z2.object({
+  app: z2.string().min(1).optional(),
+  type: z2.string().min(1),
+  name: z2.string().min(1),
+  description: z2.string().optional(),
+  validUntil: z2.string().optional(),
+  context: contextDataSchema2,
+  version: z2.literal(2).optional(),
+  actions: z2.array(taskActionSchema2).min(1, "At least one action is required")
+});
+function refineContextPublicUrls2(data, ctx) {
+  const error = validateContextPublicUrls(data.context);
+  if (error) {
+    ctx.addIssue({
+      code: z2.ZodIssueCode.custom,
+      message: error,
+      path: ["context"]
+    });
+  }
+}
+var taskContextSchema2 = taskContextObjectSchema2.superRefine(
+  refineContextPublicUrls2
+);
+var assignToSchema2 = z2.object({
+  users: z2.array(z2.string().email()).optional(),
+  groups: z2.array(z2.string().min(1)).optional()
+}).refine(
+  (data) => {
+    const groups = data.groups ?? [];
+    if (groups.includes("all") && groups.length > 1) {
+      return false;
+    }
+    return true;
+  },
+  { message: 'Cannot combine "all" with other group slugs' }
+);
+var threadUpdateMessageSchema2 = z2.string().min(1).max(500);
+var threadUpdateStatuses2 = [
+  "info",
+  "queued",
+  "running",
+  "waiting",
+  "succeeded",
+  "failed",
+  "cancelled"
+];
+var threadUpdateStatusSchema2 = z2.enum(threadUpdateStatuses2);
+var DEFAULT_THREAD_UPDATE_STATUS = "info";
+var threadUpdateInputSchema2 = z2.object({
+  message: threadUpdateMessageSchema2,
+  status: threadUpdateStatusSchema2.optional()
+});
+var taskPriorities2 = ["low", "normal", "high", "urgent"];
+var taskPrioritySchema2 = z2.enum(taskPriorities2);
+var DEFAULT_TASK_PRIORITY = "normal";
+var LOWEST_TASK_PRIORITY = "low";
+var TASK_PRIORITY_RANK = {
+  low: 1,
+  normal: 2,
+  high: 3,
+  urgent: 4
+};
+var nonNegativeInt2 = z2.number().int().nonnegative();
+var agentCostTokensSchema2 = z2.object({
+  input: nonNegativeInt2.optional(),
+  output: nonNegativeInt2.optional(),
+  total: nonNegativeInt2.optional()
+});
+var agentCostSchema2 = z2.object({
+  tokens: agentCostTokensSchema2.optional(),
+  eur: z2.number().nonnegative().optional(),
+  usd: z2.number().nonnegative().optional()
+});
+var AGENT_INFO_MAX_KEYS2 = 32;
+var AGENT_TOOL_CALLS_MAX_KEYS2 = 64;
+var AGENT_OTEL_SPANS_MAX2 = 32;
+var agentToolCallsSchema2 = z2.record(z2.string().min(1), nonNegativeInt2);
+var agentOtelSpanStatusSchema2 = z2.enum(["ok", "error"]);
+var agentOtelSpanSummarySchema2 = z2.object({
+  name: z2.string().min(1),
+  durationMs: z2.number().nonnegative(),
+  status: agentOtelSpanStatusSchema2
+});
+var agentOtelSchema2 = z2.object({
+  traceId: z2.string().min(1),
+  spanId: z2.string().min(1).optional(),
+  rootDurationMs: z2.number().nonnegative().optional(),
+  spans: z2.array(agentOtelSpanSummarySchema2).max(AGENT_OTEL_SPANS_MAX2).optional()
+});
+var agentTelemetrySchema2 = z2.object({
+  version: z2.string().min(1).optional(),
+  toolCallCount: nonNegativeInt2.optional(),
+  toolCalls: agentToolCallsSchema2.optional(),
+  cost: agentCostSchema2.optional(),
+  info: z2.record(z2.string(), z2.unknown()).optional(),
+  otel: agentOtelSchema2.optional()
+}).refine(
+  (data) => {
+    const keys = data.info ? Object.keys(data.info) : [];
+    return keys.length <= AGENT_INFO_MAX_KEYS2;
+  },
+  { message: `agent.info may contain at most ${AGENT_INFO_MAX_KEYS2} keys` }
+).refine(
+  (data) => {
+    const keys = data.toolCalls ? Object.keys(data.toolCalls) : [];
+    return keys.length <= AGENT_TOOL_CALLS_MAX_KEYS2;
+  },
+  {
+    message: `agent.toolCalls may contain at most ${AGENT_TOOL_CALLS_MAX_KEYS2} tool names`
+  }
+);
+var createTaskBodySchema2 = taskContextObjectSchema2.extend({
+  assignTo: assignToSchema2.optional(),
+  /**
+   * Groups related tasks together. When omitted, the server generates one and
+   * returns it so the caller can reuse it on later tasks in the same thread.
+   */
+  threadId: z2.string().min(1).optional(),
+  /**
+   * Optional thread priority. When set, applies to the whole thread and
+   * overwrites any previous priority. Omit on later tasks to leave unchanged.
+   */
+  priority: taskPrioritySchema2.optional(),
+  /**
+   * Optional initial status update logged against the task's thread. Shows in
+   * the inbox status bar and the thread update log.
+   */
+  update: threadUpdateInputSchema2.optional(),
+  agent: agentTelemetrySchema2.optional()
+}).superRefine(refineContextPublicUrls2);
+var threadUpdateBodySchema = threadUpdateInputSchema2;
 export {
+  AGENT_OTEL_SPANS_MAX2 as AGENT_OTEL_SPANS_MAX,
   DEFAULT_TASK_PRIORITY,
   DEFAULT_THREAD_UPDATE_STATUS,
   LOWEST_TASK_PRIORITY,
   TASK_PRIORITY_RANK,
-  agentCostSchema,
-  agentCostTokensSchema,
-  agentTelemetrySchema,
-  assignToSchema,
-  createTaskBodySchema,
-  taskContextSchema,
-  taskPriorities,
-  taskPrioritySchema,
+  agentCostSchema2 as agentCostSchema,
+  agentCostTokensSchema2 as agentCostTokensSchema,
+  agentOtelSchema2 as agentOtelSchema,
+  agentOtelSpanStatusSchema2 as agentOtelSpanStatusSchema,
+  agentOtelSpanSummarySchema2 as agentOtelSpanSummarySchema,
+  agentTelemetrySchema2 as agentTelemetrySchema,
+  agentToolCallsSchema2 as agentToolCallsSchema,
+  assignToSchema2 as assignToSchema,
+  createTaskBodySchema2 as createTaskBodySchema,
+  taskContextSchema2 as taskContextSchema,
+  taskPriorities2 as taskPriorities,
+  taskPrioritySchema2 as taskPrioritySchema,
   threadUpdateBodySchema,
-  threadUpdateInputSchema,
-  threadUpdateMessageSchema,
-  threadUpdateStatusSchema,
-  threadUpdateStatuses
+  threadUpdateInputSchema2 as threadUpdateInputSchema,
+  threadUpdateMessageSchema2 as threadUpdateMessageSchema,
+  threadUpdateStatusSchema2 as threadUpdateStatusSchema,
+  threadUpdateStatuses2 as threadUpdateStatuses
 };
 //# sourceMappingURL=index.js.map

package/dist/schemas/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/schemas/index.ts"],"sourcesContent":["import { z } from \"zod\";\nimport {\n  isPublicHttpUrl,\n  PUBLIC_HTTP_URL_ERROR,\n} from \"@robotrock/core/utils\";\nimport { validateContextPublicUrls } from \"@robotrock/core/schemas\";\n\nexport interface JSONSchema7 {\n  $id?: string;\n  $ref?: string;\n  $schema?: string;\n  $comment?: string;\n  type?: JSONSchema7TypeName | JSONSchema7TypeName[];\n  enum?: unknown[];\n  const?: unknown;\n  multipleOf?: number;\n  maximum?: number;\n  exclusiveMaximum?: number;\n  minimum?: number;\n  exclusiveMinimum?: number;\n  maxLength?: number;\n  minLength?: number;\n  pattern?: string;\n  format?: string;\n  items?: JSONSchema7 | JSONSchema7[];\n  additionalItems?: JSONSchema7 | boolean;\n  maxItems?: number;\n  minItems?: number;\n  uniqueItems?: boolean;\n  contains?: JSONSchema7;\n  maxProperties?: number;\n  minProperties?: number;\n  required?: string[];\n  properties?: Record<string, JSONSchema7>;\n  patternProperties?: Record<string, JSONSchema7>;\n  additionalProperties?: JSONSchema7 | boolean;\n  dependencies?: Record<string, JSONSchema7 | string[]>;\n  propertyNames?: JSONSchema7;\n  if?: JSONSchema7;\n  then?: JSONSchema7;\n  else?: JSONSchema7;\n  allOf?: JSONSchema7[];\n  anyOf?: JSONSchema7[];\n  oneOf?: JSONSchema7[];\n  not?: JSONSchema7;\n  title?: string;\n  description?: string;\n  default?: unknown;\n  readOnly?: boolean;\n  writeOnly?: boolean;\n  examples?: unknown[];\n}\n\nexport type JSONSchema7TypeName =\n  | \"string\"\n  | \"number\"\n  | \"integer\"\n  | \"boolean\"\n  | \"object\"\n  | \"array\"\n  | \"null\";\n\nexport type ExtendedJSONSchema7 = JSONSchema7 & {\n  enumNames?: string[];\n  [key: string]: unknown;\n};\n\nexport type UiSchema = {\n  \"ui:widget\"?: string;\n  \"ui:title\"?: string;\n  \"ui:description\"?: string;\n  \"ui:placeholder\"?: string;\n  \"ui:options\"?: Record<string, unknown>;\n  [key: string]: unknown;\n};\n\nconst safeUrlSchema = z.string().refine((url) => isPublicHttpUrl(url), {\n  message: PUBLIC_HTTP_URL_ERROR,\n});\n\nconst jsonSchema7Schema = z.custom<ExtendedJSONSchema7>(\n  (val) => typeof val === \"object\" && val !== null,\n  { message: \"Must be a valid JSON Schema object\" }\n);\n\nconst uiSchemaSchema = z.custom<UiSchema>((val) => typeof val === \"object\" && val !== null, {\n  message: \"Must be a valid UiSchema object\",\n});\n\nconst webhookHandlerSchema = z.object({\n  type: z.literal(\"webhook\"),\n  url: safeUrlSchema,\n  headers: z.record(z.string(), z.string()),\n});\n\nconst triggerHandlerSchema = webhookHandlerSchema.extend({\n  type: z.literal(\"trigger\"),\n  tokenId: z.string().min(1),\n});\n\nconst handlerSchema = z.discriminatedUnion(\"type\", [webhookHandlerSchema, triggerHandlerSchema]);\n\nconst taskActionSchema = z.object({\n  id: z.string().min(1),\n  title: z.string().min(1),\n  description: z.string().optional(),\n  schema: jsonSchema7Schema.optional(),\n  ui: uiSchemaSchema.optional(),\n  data: z.record(z.string(), z.unknown()).optional(),\n  handlers: z.array(handlerSchema).min(1).optional(),\n});\n\nconst uiFieldSchemaSchema: z.ZodType<Record<string, unknown>> = z\n  .object({\n    \"ui:widget\": z.string().optional(),\n    \"ui:title\": z.string().optional(),\n    \"ui:description\": z.string().optional(),\n    \"ui:options\": z.record(z.string(), z.unknown()).optional(),\n    items: z.lazy(() => z.record(z.string(), uiFieldSchemaSchema)).optional(),\n  })\n  .passthrough();\n\nconst contextUiSchema = z.record(z.string(), uiFieldSchemaSchema).optional();\n\nconst contextDataSchema = z\n  .object({\n    data: z.record(z.string(), z.unknown()),\n    ui: contextUiSchema,\n  })\n  .optional();\n\nconst taskContextObjectSchema = z.object({\n  app: z.string().min(1).optional(),\n  type: z.string().min(1),\n  name: z.string().min(1),\n  description: z.string().optional(),\n  validUntil: z.string().optional(),\n  context: contextDataSchema,\n  version: z.literal(2).optional(),\n  actions: z.array(taskActionSchema).min(1, \"At least one action is required\"),\n});\n\nfunction refineContextPublicUrls<T extends { context?: z.infer<typeof contextDataSchema> }>(\n  data: T,\n  ctx: z.RefinementCtx\n) {\n  const error = validateContextPublicUrls(data.context);\n  if (error) {\n    ctx.addIssue({\n      code: z.ZodIssueCode.custom,\n      message: error,\n      path: [\"context\"],\n    });\n  }\n}\n\nexport const taskContextSchema = taskContextObjectSchema.superRefine(\n  refineContextPublicUrls\n);\n\n/**\n * Assignment targets at task create (not stored in task context JSON).\n * Unknown user emails are auto-provisioned as assignee memberships (count toward seat limits).\n */\nexport const assignToSchema = z\n  .object({\n    users: z.array(z.string().email()).optional(),\n    groups: z.array(z.string().min(1)).optional(),\n  })\n  .refine(\n    (data) => {\n      const groups = data.groups ?? [];\n      if (groups.includes(\"all\") && groups.length > 1) {\n        return false;\n      }\n      return true;\n    },\n    { message: 'Cannot combine \"all\" with other group slugs' }\n  );\n\n/** A short thread-scoped status update message (1-2 sentences). */\nexport const threadUpdateMessageSchema = z.string().min(1).max(500);\n\n/**\n * Lifecycle status carried by a thread update. Drives the icon and color shown\n * in the inbox status bar. Defaults to `info` when omitted.\n */\nexport const threadUpdateStatuses = [\n  \"info\",\n  \"queued\",\n  \"running\",\n  \"waiting\",\n  \"succeeded\",\n  \"failed\",\n  \"cancelled\",\n] as const;\n\nexport const threadUpdateStatusSchema = z.enum(threadUpdateStatuses);\n\n/** The default status applied when an update omits one. */\nexport const DEFAULT_THREAD_UPDATE_STATUS: ThreadUpdateStatus = \"info\";\n\n/** Shared shape for a thread update (standalone and at task creation). */\nexport const threadUpdateInputSchema = z.object({\n  message: threadUpdateMessageSchema,\n  status: threadUpdateStatusSchema.optional(),\n});\n\n/** Thread priority levels for inbox ordering and display. */\nexport const taskPriorities = [\"low\", \"normal\", \"high\", \"urgent\"] as const;\n\nexport const taskPrioritySchema = z.enum(taskPriorities);\n\nexport type TaskPriority = (typeof taskPriorities)[number];\n\nexport const DEFAULT_TASK_PRIORITY: TaskPriority = \"normal\";\n\nexport const LOWEST_TASK_PRIORITY: TaskPriority = \"low\";\n\nexport const TASK_PRIORITY_RANK: Record<TaskPriority, number> = {\n  low: 1,\n  normal: 2,\n  high: 3,\n  urgent: 4,\n};\n\nconst nonNegativeInt = z.number().int().nonnegative();\n\nexport const agentCostTokensSchema = z.object({\n  input: nonNegativeInt.optional(),\n  output: nonNegativeInt.optional(),\n  total: nonNegativeInt.optional(),\n});\n\nexport const agentCostSchema = z.object({\n  tokens: agentCostTokensSchema.optional(),\n  eur: z.number().nonnegative().optional(),\n  usd: z.number().nonnegative().optional(),\n});\n\nconst AGENT_INFO_MAX_KEYS = 32;\n\nexport const agentTelemetrySchema = z\n  .object({\n    version: z.string().min(1).optional(),\n    toolCallCount: nonNegativeInt.optional(),\n    cost: agentCostSchema.optional(),\n    info: z.record(z.string(), z.unknown()).optional(),\n  })\n  .refine(\n    (data) => {\n      const keys = data.info ? Object.keys(data.info) : [];\n      return keys.length <= AGENT_INFO_MAX_KEYS;\n    },\n    { message: `agent.info may contain at most ${AGENT_INFO_MAX_KEYS} keys` }\n  );\n\nexport const createTaskBodySchema = taskContextObjectSchema\n  .extend({\n    assignTo: assignToSchema.optional(),\n    /**\n     * Groups related tasks together. When omitted, the server generates one and\n     * returns it so the caller can reuse it on later tasks in the same thread.\n     */\n    threadId: z.string().min(1).optional(),\n    /**\n     * Optional thread priority. When set, applies to the whole thread and\n     * overwrites any previous priority. Omit on later tasks to leave unchanged.\n     */\n    priority: taskPrioritySchema.optional(),\n    /**\n     * Optional initial status update logged against the task's thread. Shows in\n     * the inbox status bar and the thread update log.\n     */\n    update: threadUpdateInputSchema.optional(),\n    agent: agentTelemetrySchema.optional(),\n  })\n  .superRefine(refineContextPublicUrls);\n\n/** POST /v1/threads/:threadId/updates body: a standalone thread update. */\nexport const threadUpdateBodySchema = threadUpdateInputSchema;\n\n/** Where a thread update originated. */\nexport type ThreadUpdateSource = \"api\" | \"task_create\" | \"dashboard\";\n\n/** Lifecycle status carried by a thread update. */\nexport type ThreadUpdateStatus = (typeof threadUpdateStatuses)[number];\n\n/** A logged thread update as returned by the API. */\nexport interface ThreadUpdate {\n  id: string;\n  threadId: string;\n  message: string;\n  status: ThreadUpdateStatus;\n  source: ThreadUpdateSource;\n  createdAt: number;\n}\n\nexport type AssignToInput = z.infer<typeof assignToSchema>;\nexport type CreateTaskBodyInput = z.input<typeof createTaskBodySchema>;\nexport type CreateTaskBody = z.output<typeof createTaskBodySchema>;\nexport type ThreadUpdateBodyInput = z.input<typeof threadUpdateBodySchema>;\nexport type ThreadUpdateBody = z.output<typeof threadUpdateBodySchema>;\nexport type ThreadUpdateInput = z.input<typeof threadUpdateInputSchema>;\nexport type TaskContextInput = z.input<typeof taskContextSchema>;\nexport type TaskContextOutput = z.output<typeof taskContextSchema>;\nexport type TaskContext = TaskContextOutput;\nexport type TaskAction = z.infer<typeof taskActionSchema>;\nexport type WebhookHandler = z.infer<typeof webhookHandlerSchema>;\nexport type TriggerHandler = z.infer<typeof triggerHandlerSchema>;\nexport type Handler = z.infer<typeof handlerSchema>;\nexport type AgentCostTokens = z.infer<typeof agentCostTokensSchema>;\nexport type AgentCost = z.infer<typeof agentCostSchema>;\nexport type AgentTelemetry = z.infer<typeof agentTelemetrySchema>;\nexport type AgentTelemetryInput = z.input<typeof agentTelemetrySchema>;\n\ntype InferObjectProperties<\n  Props,\n  Req extends PropertyKey,\n> = Props extends Record<string, unknown>\n  ? ({\n      [K in keyof Props as K extends Req ? K : never]-?: InferJsonSchema7<Props[K]>;\n    } & {\n      [K in keyof Props as K extends Req ? never : K]?: InferJsonSchema7<Props[K]>;\n    } extends infer O\n      ? { [K in keyof O]: O[K] }\n      : never)\n  : Record<string, unknown>;\n\ntype RequiredKeys<S> =\n  S extends { readonly required: readonly string[] } ? S[\"required\"][number] : never;\n\nexport type InferJsonSchema7<S> = [S] extends [undefined]\n  ? Record<string, never>\n  : S extends { readonly const: infer C }\n    ? C\n    : S extends {\n          readonly enum: readonly (infer E)[];\n        }\n      ? E\n      : S extends {\n            readonly type: \"object\";\n            readonly properties?: infer Props;\n          }\n        ? InferObjectProperties<Props, RequiredKeys<S>>\n        : S extends {\n              readonly type: \"object\";\n              readonly properties?: undefined;\n            }\n          ? Record<string, unknown>\n          : S extends {\n                readonly type: \"array\";\n                readonly items?: infer Items;\n              }\n            ? Items extends readonly unknown[]\n              ? InferJsonSchema7<Items[number]>[]\n              : Items extends object\n                ? InferJsonSchema7<Items>[]\n                : unknown[]\n            : S extends { readonly type: \"string\" }\n              ? string\n              : S extends { readonly type: \"number\" } | { readonly type: \"integer\" }\n                ? number\n                : S extends { readonly type: \"boolean\" }\n                  ? boolean\n                  : unknown;\n\nexport type TaskStatus = \"pending\" | \"open\" | \"handled\" | \"expired\";\n\nexport interface TaskResponse {\n  success: boolean;\n  task: {\n    taskId: string;\n    threadId: string;\n    status: \"pending\" | \"open\";\n    context: TaskContext;\n    validUntil: string;\n    submittedAt: string;\n  };\n  message: string;\n}\n\nexport interface ThreadUpdateResponse {\n  success: boolean;\n  update: ThreadUpdate;\n  message: string;\n}\n\nexport interface Task {\n  id: string;\n  threadId?: string;\n  createdAt: Date;\n  status: TaskStatus;\n  context: TaskContext;\n  validUntil: number;\n  handledAt?: number;\n  handled?: {\n    action: {\n      id: string;\n      data: unknown;\n    };\n    handledBy?: string;\n    userId?: string;\n    token?: string;\n  };\n}\n\nexport type InferActionData<T extends { schema?: unknown }> = [\n  Exclude<T[\"schema\"], undefined>,\n] extends [\n  never,\n]\n  ? Record<string, never>\n  : Exclude<T[\"schema\"], undefined> extends infer S\n    ? InferJsonSchema7<S>\n    : Record<string, never>;\n\nexport type TupleElementIndices<T extends readonly unknown[]> = T extends readonly [\n  unknown,\n  ...unknown[],\n]\n  ? Exclude<keyof T, keyof unknown[]>\n  : number;\n\nexport interface TaskResult<T = Record<string, unknown>> {\n  actionId: string;\n  data: T;\n  handledBy?: string;\n  handledAt: Date;\n}\n\nexport interface ApprovalResult<T = Record<string, unknown>> extends TaskResult<T> {\n  taskId: string;\n}\n\nexport type DiscriminatedApprovalResult<\n  TActions extends readonly { id: string; schema?: unknown }[],\n> = {\n  [I in TupleElementIndices<TActions>]: TActions[I] extends { id: string; schema?: unknown }\n    ? Omit<ApprovalResult<InferActionData<TActions[I]>>, \"actionId\" | \"data\"> & {\n        actionId: TActions[I][\"id\"];\n        data: InferActionData<TActions[I]>;\n      }\n    : never\n}[TupleElementIndices<TActions>];\n"],"mappings":";AAAA,SAAS,SAAS;AAClB;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,iCAAiC;AAuE1C,IAAM,gBAAgB,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,gBAAgB,GAAG,GAAG;AAAA,EACrE,SAAS;AACX,CAAC;AAED,IAAM,oBAAoB,EAAE;AAAA,EAC1B,CAAC,QAAQ,OAAO,QAAQ,YAAY,QAAQ;AAAA,EAC5C,EAAE,SAAS,qCAAqC;AAClD;AAEA,IAAM,iBAAiB,EAAE,OAAiB,CAAC,QAAQ,OAAO,QAAQ,YAAY,QAAQ,MAAM;AAAA,EAC1F,SAAS;AACX,CAAC;AAED,IAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,MAAM,EAAE,QAAQ,SAAS;AAAA,EACzB,KAAK;AAAA,EACL,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC;AAC1C,CAAC;AAED,IAAM,uBAAuB,qBAAqB,OAAO;AAAA,EACvD,MAAM,EAAE,QAAQ,SAAS;AAAA,EACzB,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC;AAC3B,CAAC;AAED,IAAM,gBAAgB,EAAE,mBAAmB,QAAQ,CAAC,sBAAsB,oBAAoB,CAAC;AAE/F,IAAM,mBAAmB,EAAE,OAAO;AAAA,EAChC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACpB,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACvB,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,QAAQ,kBAAkB,SAAS;AAAA,EACnC,IAAI,eAAe,SAAS;AAAA,EAC5B,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EACjD,UAAU,EAAE,MAAM,aAAa,EAAE,IAAI,CAAC,EAAE,SAAS;AACnD,CAAC;AAED,IAAM,sBAA0D,EAC7D,OAAO;AAAA,EACN,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,kBAAkB,EAAE,OAAO,EAAE,SAAS;AAAA,EACtC,cAAc,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EACzD,OAAO,EAAE,KAAK,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,mBAAmB,CAAC,EAAE,SAAS;AAC1E,CAAC,EACA,YAAY;AAEf,IAAM,kBAAkB,EAAE,OAAO,EAAE,OAAO,GAAG,mBAAmB,EAAE,SAAS;AAE3E,IAAM,oBAAoB,EACvB,OAAO;AAAA,EACN,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;AAAA,EACtC,IAAI;AACN,CAAC,EACA,SAAS;AAEZ,IAAM,0BAA0B,EAAE,OAAO;AAAA,EACvC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EAChC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACtB,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACtB,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,SAAS;AAAA,EACT,SAAS,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EAC/B,SAAS,EAAE,MAAM,gBAAgB,EAAE,IAAI,GAAG,iCAAiC;AAC7E,CAAC;AAED,SAAS,wBACP,MACA,KACA;AACA,QAAM,QAAQ,0BAA0B,KAAK,OAAO;AACpD,MAAI,OAAO;AACT,QAAI,SAAS;AAAA,MACX,MAAM,EAAE,aAAa;AAAA,MACrB,SAAS;AAAA,MACT,MAAM,CAAC,SAAS;AAAA,IAClB,CAAC;AAAA,EACH;AACF;AAEO,IAAM,oBAAoB,wBAAwB;AAAA,EACvD;AACF;AAMO,IAAM,iBAAiB,EAC3B,OAAO;AAAA,EACN,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,SAAS;AAAA,EAC5C,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,EAAE,SAAS;AAC9C,CAAC,EACA;AAAA,EACC,CAAC,SAAS;AACR,UAAM,SAAS,KAAK,UAAU,CAAC;AAC/B,QAAI,OAAO,SAAS,KAAK,KAAK,OAAO,SAAS,GAAG;AAC/C,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT;AAAA,EACA,EAAE,SAAS,8CAA8C;AAC3D;AAGK,IAAM,4BAA4B,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAM3D,IAAM,uBAAuB;AAAA,EAClC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEO,IAAM,2BAA2B,EAAE,KAAK,oBAAoB;AAG5D,IAAM,+BAAmD;AAGzD,IAAM,0BAA0B,EAAE,OAAO;AAAA,EAC9C,SAAS;AAAA,EACT,QAAQ,yBAAyB,SAAS;AAC5C,CAAC;AAGM,IAAM,iBAAiB,CAAC,OAAO,UAAU,QAAQ,QAAQ;AAEzD,IAAM,qBAAqB,EAAE,KAAK,cAAc;AAIhD,IAAM,wBAAsC;AAE5C,IAAM,uBAAqC;AAE3C,IAAM,qBAAmD;AAAA,EAC9D,KAAK;AAAA,EACL,QAAQ;AAAA,EACR,MAAM;AAAA,EACN,QAAQ;AACV;AAEA,IAAM,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAE7C,IAAM,wBAAwB,EAAE,OAAO;AAAA,EAC5C,OAAO,eAAe,SAAS;AAAA,EAC/B,QAAQ,eAAe,SAAS;AAAA,EAChC,OAAO,eAAe,SAAS;AACjC,CAAC;AAEM,IAAM,kBAAkB,EAAE,OAAO;AAAA,EACtC,QAAQ,sBAAsB,SAAS;AAAA,EACvC,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS;AAAA,EACvC,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS;AACzC,CAAC;AAED,IAAM,sBAAsB;AAErB,IAAM,uBAAuB,EACjC,OAAO;AAAA,EACN,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EACpC,eAAe,eAAe,SAAS;AAAA,EACvC,MAAM,gBAAgB,SAAS;AAAA,EAC/B,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AACnD,CAAC,EACA;AAAA,EACC,CAAC,SAAS;AACR,UAAM,OAAO,KAAK,OAAO,OAAO,KAAK,KAAK,IAAI,IAAI,CAAC;AACnD,WAAO,KAAK,UAAU;AAAA,EACxB;AAAA,EACA,EAAE,SAAS,kCAAkC,mBAAmB,QAAQ;AAC1E;AAEK,IAAM,uBAAuB,wBACjC,OAAO;AAAA,EACN,UAAU,eAAe,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA,EAKlC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA,EAKrC,UAAU,mBAAmB,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA,EAKtC,QAAQ,wBAAwB,SAAS;AAAA,EACzC,OAAO,qBAAqB,SAAS;AACvC,CAAC,EACA,YAAY,uBAAuB;AAG/B,IAAM,yBAAyB;","names":[]}
+{"version":3,"sources":["../../src/schemas/index.ts","../../../core/src/utils/safe-url.ts","../../../core/src/schemas/task.ts","../../../core/src/schemas/context-urls.ts"],"sourcesContent":["import { z } from \"zod\";\nimport {\n  isPublicHttpUrl,\n  PUBLIC_HTTP_URL_ERROR,\n} from \"@robotrock/core/utils\";\nimport { validateContextPublicUrls } from \"@robotrock/core/schemas\";\n\nexport interface JSONSchema7 {\n  $id?: string;\n  $ref?: string;\n  $schema?: string;\n  $comment?: string;\n  type?: JSONSchema7TypeName | JSONSchema7TypeName[];\n  enum?: unknown[];\n  const?: unknown;\n  multipleOf?: number;\n  maximum?: number;\n  exclusiveMaximum?: number;\n  minimum?: number;\n  exclusiveMinimum?: number;\n  maxLength?: number;\n  minLength?: number;\n  pattern?: string;\n  format?: string;\n  items?: JSONSchema7 | JSONSchema7[];\n  additionalItems?: JSONSchema7 | boolean;\n  maxItems?: number;\n  minItems?: number;\n  uniqueItems?: boolean;\n  contains?: JSONSchema7;\n  maxProperties?: number;\n  minProperties?: number;\n  required?: string[];\n  properties?: Record<string, JSONSchema7>;\n  patternProperties?: Record<string, JSONSchema7>;\n  additionalProperties?: JSONSchema7 | boolean;\n  dependencies?: Record<string, JSONSchema7 | string[]>;\n  propertyNames?: JSONSchema7;\n  if?: JSONSchema7;\n  then?: JSONSchema7;\n  else?: JSONSchema7;\n  allOf?: JSONSchema7[];\n  anyOf?: JSONSchema7[];\n  oneOf?: JSONSchema7[];\n  not?: JSONSchema7;\n  title?: string;\n  description?: string;\n  default?: unknown;\n  readOnly?: boolean;\n  writeOnly?: boolean;\n  examples?: unknown[];\n}\n\nexport type JSONSchema7TypeName =\n  | \"string\"\n  | \"number\"\n  | \"integer\"\n  | \"boolean\"\n  | \"object\"\n  | \"array\"\n  | \"null\";\n\nexport type ExtendedJSONSchema7 = JSONSchema7 & {\n  enumNames?: string[];\n  [key: string]: unknown;\n};\n\nexport type UiSchema = {\n  \"ui:widget\"?: string;\n  \"ui:title\"?: string;\n  \"ui:description\"?: string;\n  \"ui:placeholder\"?: string;\n  \"ui:options\"?: Record<string, unknown>;\n  [key: string]: unknown;\n};\n\nconst safeUrlSchema = z.string().refine((url) => isPublicHttpUrl(url), {\n  message: PUBLIC_HTTP_URL_ERROR,\n});\n\nconst jsonSchema7Schema = z.custom<ExtendedJSONSchema7>(\n  (val) => typeof val === \"object\" && val !== null,\n  { message: \"Must be a valid JSON Schema object\" }\n);\n\nconst uiSchemaSchema = z.custom<UiSchema>((val) => typeof val === \"object\" && val !== null, {\n  message: \"Must be a valid UiSchema object\",\n});\n\nconst webhookHandlerSchema = z.object({\n  type: z.literal(\"webhook\"),\n  url: safeUrlSchema,\n  headers: z.record(z.string(), z.string()),\n});\n\nconst triggerHandlerSchema = webhookHandlerSchema.extend({\n  type: z.literal(\"trigger\"),\n  tokenId: z.string().min(1),\n});\n\nconst handlerSchema = z.discriminatedUnion(\"type\", [webhookHandlerSchema, triggerHandlerSchema]);\n\nconst taskActionSchema = z.object({\n  id: z.string().min(1),\n  title: z.string().min(1),\n  description: z.string().optional(),\n  schema: jsonSchema7Schema.optional(),\n  ui: uiSchemaSchema.optional(),\n  data: z.record(z.string(), z.unknown()).optional(),\n  handlers: z.array(handlerSchema).min(1).optional(),\n});\n\nconst uiFieldSchemaSchema: z.ZodType<Record<string, unknown>> = z\n  .object({\n    \"ui:widget\": z.string().optional(),\n    \"ui:title\": z.string().optional(),\n    \"ui:description\": z.string().optional(),\n    \"ui:options\": z.record(z.string(), z.unknown()).optional(),\n    items: z.lazy(() => z.record(z.string(), uiFieldSchemaSchema)).optional(),\n  })\n  .passthrough();\n\nconst contextUiSchema = z.record(z.string(), uiFieldSchemaSchema).optional();\n\nconst contextDataSchema = z\n  .object({\n    data: z.record(z.string(), z.unknown()),\n    ui: contextUiSchema,\n  })\n  .optional();\n\nconst taskContextObjectSchema = z.object({\n  app: z.string().min(1).optional(),\n  type: z.string().min(1),\n  name: z.string().min(1),\n  description: z.string().optional(),\n  validUntil: z.string().optional(),\n  context: contextDataSchema,\n  version: z.literal(2).optional(),\n  actions: z.array(taskActionSchema).min(1, \"At least one action is required\"),\n});\n\nfunction refineContextPublicUrls<T extends { context?: z.infer<typeof contextDataSchema> }>(\n  data: T,\n  ctx: z.RefinementCtx\n) {\n  const error = validateContextPublicUrls(data.context);\n  if (error) {\n    ctx.addIssue({\n      code: z.ZodIssueCode.custom,\n      message: error,\n      path: [\"context\"],\n    });\n  }\n}\n\nexport const taskContextSchema = taskContextObjectSchema.superRefine(\n  refineContextPublicUrls\n);\n\n/**\n * Assignment targets at task create (not stored in task context JSON).\n * Unknown user emails are auto-provisioned as assignee memberships (count toward seat limits).\n */\nexport const assignToSchema = z\n  .object({\n    users: z.array(z.string().email()).optional(),\n    groups: z.array(z.string().min(1)).optional(),\n  })\n  .refine(\n    (data) => {\n      const groups = data.groups ?? [];\n      if (groups.includes(\"all\") && groups.length > 1) {\n        return false;\n      }\n      return true;\n    },\n    { message: 'Cannot combine \"all\" with other group slugs' }\n  );\n\n/** A short thread-scoped status update message (1-2 sentences). */\nexport const threadUpdateMessageSchema = z.string().min(1).max(500);\n\n/**\n * Lifecycle status carried by a thread update. Drives the icon and color shown\n * in the inbox status bar. Defaults to `info` when omitted.\n */\nexport const threadUpdateStatuses = [\n  \"info\",\n  \"queued\",\n  \"running\",\n  \"waiting\",\n  \"succeeded\",\n  \"failed\",\n  \"cancelled\",\n] as const;\n\nexport const threadUpdateStatusSchema = z.enum(threadUpdateStatuses);\n\n/** The default status applied when an update omits one. */\nexport const DEFAULT_THREAD_UPDATE_STATUS: ThreadUpdateStatus = \"info\";\n\n/** Shared shape for a thread update (standalone and at task creation). */\nexport const threadUpdateInputSchema = z.object({\n  message: threadUpdateMessageSchema,\n  status: threadUpdateStatusSchema.optional(),\n});\n\n/** Thread priority levels for inbox ordering and display. */\nexport const taskPriorities = [\"low\", \"normal\", \"high\", \"urgent\"] as const;\n\nexport const taskPrioritySchema = z.enum(taskPriorities);\n\nexport type TaskPriority = (typeof taskPriorities)[number];\n\nexport const DEFAULT_TASK_PRIORITY: TaskPriority = \"normal\";\n\nexport const LOWEST_TASK_PRIORITY: TaskPriority = \"low\";\n\nexport const TASK_PRIORITY_RANK: Record<TaskPriority, number> = {\n  low: 1,\n  normal: 2,\n  high: 3,\n  urgent: 4,\n};\n\nconst nonNegativeInt = z.number().int().nonnegative();\n\nexport const agentCostTokensSchema = z.object({\n  input: nonNegativeInt.optional(),\n  output: nonNegativeInt.optional(),\n  total: nonNegativeInt.optional(),\n});\n\nexport const agentCostSchema = z.object({\n  tokens: agentCostTokensSchema.optional(),\n  eur: z.number().nonnegative().optional(),\n  usd: z.number().nonnegative().optional(),\n});\n\nconst AGENT_INFO_MAX_KEYS = 32;\nconst AGENT_TOOL_CALLS_MAX_KEYS = 64;\nexport const AGENT_OTEL_SPANS_MAX = 32;\n\nexport const agentToolCallsSchema = z.record(z.string().min(1), nonNegativeInt);\n\nexport const agentOtelSpanStatusSchema = z.enum([\"ok\", \"error\"]);\n\nexport const agentOtelSpanSummarySchema = z.object({\n  name: z.string().min(1),\n  durationMs: z.number().nonnegative(),\n  status: agentOtelSpanStatusSchema,\n});\n\nexport const agentOtelSchema = z.object({\n  traceId: z.string().min(1),\n  spanId: z.string().min(1).optional(),\n  rootDurationMs: z.number().nonnegative().optional(),\n  spans: z.array(agentOtelSpanSummarySchema).max(AGENT_OTEL_SPANS_MAX).optional(),\n});\n\nexport const agentTelemetrySchema = z\n  .object({\n    version: z.string().min(1).optional(),\n    toolCallCount: nonNegativeInt.optional(),\n    toolCalls: agentToolCallsSchema.optional(),\n    cost: agentCostSchema.optional(),\n    info: z.record(z.string(), z.unknown()).optional(),\n    otel: agentOtelSchema.optional(),\n  })\n  .refine(\n    (data) => {\n      const keys = data.info ? Object.keys(data.info) : [];\n      return keys.length <= AGENT_INFO_MAX_KEYS;\n    },\n    { message: `agent.info may contain at most ${AGENT_INFO_MAX_KEYS} keys` }\n  )\n  .refine(\n    (data) => {\n      const keys = data.toolCalls ? Object.keys(data.toolCalls) : [];\n      return keys.length <= AGENT_TOOL_CALLS_MAX_KEYS;\n    },\n    {\n      message: `agent.toolCalls may contain at most ${AGENT_TOOL_CALLS_MAX_KEYS} tool names`,\n    }\n  );\n\nexport const createTaskBodySchema = taskContextObjectSchema\n  .extend({\n    assignTo: assignToSchema.optional(),\n    /**\n     * Groups related tasks together. When omitted, the server generates one and\n     * returns it so the caller can reuse it on later tasks in the same thread.\n     */\n    threadId: z.string().min(1).optional(),\n    /**\n     * Optional thread priority. When set, applies to the whole thread and\n     * overwrites any previous priority. Omit on later tasks to leave unchanged.\n     */\n    priority: taskPrioritySchema.optional(),\n    /**\n     * Optional initial status update logged against the task's thread. Shows in\n     * the inbox status bar and the thread update log.\n     */\n    update: threadUpdateInputSchema.optional(),\n    agent: agentTelemetrySchema.optional(),\n  })\n  .superRefine(refineContextPublicUrls);\n\n/** POST /v1/threads/:threadId/updates body: a standalone thread update. */\nexport const threadUpdateBodySchema = threadUpdateInputSchema;\n\n/** Where a thread update originated. */\nexport type ThreadUpdateSource = \"api\" | \"task_create\" | \"dashboard\";\n\n/** Lifecycle status carried by a thread update. */\nexport type ThreadUpdateStatus = (typeof threadUpdateStatuses)[number];\n\n/** A logged thread update as returned by the API. */\nexport interface ThreadUpdate {\n  id: string;\n  threadId: string;\n  message: string;\n  status: ThreadUpdateStatus;\n  source: ThreadUpdateSource;\n  createdAt: number;\n}\n\nexport type AssignToInput = z.infer<typeof assignToSchema>;\nexport type CreateTaskBodyInput = z.input<typeof createTaskBodySchema>;\nexport type CreateTaskBody = z.output<typeof createTaskBodySchema>;\nexport type ThreadUpdateBodyInput = z.input<typeof threadUpdateBodySchema>;\nexport type ThreadUpdateBody = z.output<typeof threadUpdateBodySchema>;\nexport type ThreadUpdateInput = z.input<typeof threadUpdateInputSchema>;\nexport type TaskContextInput = z.input<typeof taskContextSchema>;\nexport type TaskContextOutput = z.output<typeof taskContextSchema>;\nexport type TaskContext = TaskContextOutput;\nexport type TaskAction = z.infer<typeof taskActionSchema>;\nexport type WebhookHandler = z.infer<typeof webhookHandlerSchema>;\nexport type TriggerHandler = z.infer<typeof triggerHandlerSchema>;\nexport type Handler = z.infer<typeof handlerSchema>;\nexport type AgentCostTokens = z.infer<typeof agentCostTokensSchema>;\nexport type AgentCost = z.infer<typeof agentCostSchema>;\nexport type AgentToolCalls = z.infer<typeof agentToolCallsSchema>;\nexport type AgentOtelSpanStatus = z.infer<typeof agentOtelSpanStatusSchema>;\nexport type AgentOtelSpanSummary = z.infer<typeof agentOtelSpanSummarySchema>;\nexport type AgentOtel = z.infer<typeof agentOtelSchema>;\nexport type AgentTelemetry = z.infer<typeof agentTelemetrySchema>;\nexport type AgentTelemetryInput = z.input<typeof agentTelemetrySchema>;\n\ntype InferObjectProperties<\n  Props,\n  Req extends PropertyKey,\n> = Props extends Record<string, unknown>\n  ? ({\n      [K in keyof Props as K extends Req ? K : never]-?: InferJsonSchema7<Props[K]>;\n    } & {\n      [K in keyof Props as K extends Req ? never : K]?: InferJsonSchema7<Props[K]>;\n    } extends infer O\n      ? { [K in keyof O]: O[K] }\n      : never)\n  : Record<string, unknown>;\n\ntype RequiredKeys<S> =\n  S extends { readonly required: readonly string[] } ? S[\"required\"][number] : never;\n\nexport type InferJsonSchema7<S> = [S] extends [undefined]\n  ? Record<string, never>\n  : S extends { readonly const: infer C }\n    ? C\n    : S extends {\n          readonly enum: readonly (infer E)[];\n        }\n      ? E\n      : S extends {\n            readonly type: \"object\";\n            readonly properties?: infer Props;\n          }\n        ? InferObjectProperties<Props, RequiredKeys<S>>\n        : S extends {\n              readonly type: \"object\";\n              readonly properties?: undefined;\n            }\n          ? Record<string, unknown>\n          : S extends {\n                readonly type: \"array\";\n                readonly items?: infer Items;\n              }\n            ? Items extends readonly unknown[]\n              ? InferJsonSchema7<Items[number]>[]\n              : Items extends object\n                ? InferJsonSchema7<Items>[]\n                : unknown[]\n            : S extends { readonly type: \"string\" }\n              ? string\n              : S extends { readonly type: \"number\" } | { readonly type: \"integer\" }\n                ? number\n                : S extends { readonly type: \"boolean\" }\n                  ? boolean\n                  : unknown;\n\nexport type TaskStatus = \"pending\" | \"open\" | \"handled\" | \"expired\";\n\nexport interface TaskResponse {\n  success: boolean;\n  task: {\n    taskId: string;\n    threadId: string;\n    status: \"pending\" | \"open\";\n    context: TaskContext;\n    validUntil: string;\n    submittedAt: string;\n  };\n  message: string;\n}\n\nexport interface ThreadUpdateResponse {\n  success: boolean;\n  update: ThreadUpdate;\n  message: string;\n}\n\nexport interface Task {\n  id: string;\n  threadId?: string;\n  createdAt: Date;\n  status: TaskStatus;\n  context: TaskContext;\n  validUntil: number;\n  handledAt?: number;\n  handled?: {\n    action: {\n      id: string;\n      data: unknown;\n    };\n    handledBy?: string;\n    userId?: string;\n    token?: string;\n  };\n}\n\nexport type InferActionData<T extends { schema?: unknown }> = [\n  Exclude<T[\"schema\"], undefined>,\n] extends [\n  never,\n]\n  ? Record<string, never>\n  : Exclude<T[\"schema\"], undefined> extends infer S\n    ? InferJsonSchema7<S>\n    : Record<string, never>;\n\nexport type TupleElementIndices<T extends readonly unknown[]> = T extends readonly [\n  unknown,\n  ...unknown[],\n]\n  ? Exclude<keyof T, keyof unknown[]>\n  : number;\n\nexport interface TaskResult<T = Record<string, unknown>> {\n  actionId: string;\n  data: T;\n  handledBy?: string;\n  handledAt: Date;\n}\n\nexport interface ApprovalResult<T = Record<string, unknown>> extends TaskResult<T> {\n  taskId: string;\n}\n\nexport type DiscriminatedApprovalResult<\n  TActions extends readonly { id: string; schema?: unknown }[],\n> = {\n  [I in TupleElementIndices<TActions>]: TActions[I] extends { id: string; schema?: unknown }\n    ? Omit<ApprovalResult<InferActionData<TActions[I]>>, \"actionId\" | \"data\"> & {\n        actionId: TActions[I][\"id\"];\n        data: InferActionData<TActions[I]>;\n      }\n    : never\n}[TupleElementIndices<TActions>];\n","const BLOCKED_HOSTNAMES = new Set([\n  \"localhost\",\n  \"metadata.google.internal\",\n  \"metadata.goog\",\n]);\n\nfunction normalizeHostname(hostname: string): string {\n  return hostname.toLowerCase().replace(/^\\[|\\]$/g, \"\");\n}\n\nfunction isBlockedIpv4(host: string): boolean {\n  const match = /^(\\d{1,3})\\.(\\d{1,3})\\.(\\d{1,3})\\.(\\d{1,3})$/.exec(host);\n  if (!match) {\n    return false;\n  }\n\n  const octets = match.slice(1, 5).map((part) => Number(part));\n  if (octets.some((octet) => Number.isNaN(octet) || octet < 0 || octet > 255)) {\n    return true;\n  }\n\n  const [a, b, _c, _d] = octets;\n  if (a === undefined || b === undefined) {\n    return true;\n  }\n  if (a === 127 || a === 0) return true;\n  if (a === 10) return true;\n  if (a === 169 && b === 254) return true;\n  if (a === 192 && b === 168) return true;\n  if (a === 172 && b >= 16 && b <= 31) return true;\n  if (a === 100 && b >= 64 && b <= 127) return true;\n\n  return false;\n}\n\nfunction ipv4FromNumericHost(host: string): string | null {\n  if (/^\\d+$/.test(host)) {\n    const num = Number(host);\n    if (!Number.isFinite(num) || num < 0 || num > 0xffffffff) {\n      return null;\n    }\n    const a = (num >>> 24) & 0xff;\n    const b = (num >>> 16) & 0xff;\n    const c = (num >>> 8) & 0xff;\n    const d = num & 0xff;\n    return `${a}.${b}.${c}.${d}`;\n  }\n\n  const hexMatch = /^0x([0-9a-f]{1,8})$/i.exec(host);\n  if (hexMatch) {\n    const num = Number.parseInt(hexMatch[1]!, 16);\n    if (!Number.isFinite(num) || num < 0 || num > 0xffffffff) {\n      return null;\n    }\n    const a = (num >>> 24) & 0xff;\n    const b = (num >>> 16) & 0xff;\n    const c = (num >>> 8) & 0xff;\n    const d = num & 0xff;\n    return `${a}.${b}.${c}.${d}`;\n  }\n\n  return null;\n}\n\nfunction isBlockedIpv4Mapped(host: string): boolean {\n  const mappedDotted = /^::ffff:(\\d{1,3}(?:\\.\\d{1,3}){3})$/i.exec(host);\n  if (mappedDotted) {\n    return isBlockedIpv4(mappedDotted[1]!);\n  }\n\n  const mappedHex = /^::ffff:([0-9a-f]{1,4}):([0-9a-f]{1,4})$/i.exec(host);\n  if (mappedHex) {\n    const high = Number.parseInt(mappedHex[1]!, 16);\n    const low = Number.parseInt(mappedHex[2]!, 16);\n    if (Number.isFinite(high) && Number.isFinite(low)) {\n      const a = (high >> 8) & 0xff;\n      const b = high & 0xff;\n      const c = (low >> 8) & 0xff;\n      const d = low & 0xff;\n      return isBlockedIpv4(`${a}.${b}.${c}.${d}`);\n    }\n  }\n\n  return false;\n}\n\nfunction isBlockedIpv6(host: string): boolean {\n  if (host === \"::1\" || host === \"0:0:0:0:0:0:0:1\") {\n    return true;\n  }\n  if (host.startsWith(\"fc\") || host.startsWith(\"fd\")) {\n    return true;\n  }\n  if (host.startsWith(\"fe80:\")) {\n    return true;\n  }\n  if (isBlockedIpv4Mapped(host)) {\n    return true;\n  }\n  return false;\n}\n\nfunction isBlockedHostname(hostname: string): boolean {\n  const host = normalizeHostname(hostname);\n  if (!host) {\n    return true;\n  }\n  if (BLOCKED_HOSTNAMES.has(host)) {\n    return true;\n  }\n  if (host.endsWith(\".localhost\") || host.endsWith(\".local\")) {\n    return true;\n  }\n\n  const numericIpv4 = ipv4FromNumericHost(host);\n  if (numericIpv4 && isBlockedIpv4(numericIpv4)) {\n    return true;\n  }\n\n  return isBlockedIpv4(host) || isBlockedIpv6(host);\n}\n\n/**\n * Returns true when the URL uses http(s) and targets a public, non-reserved host.\n */\nexport function isPublicHttpUrl(urlString: string): boolean {\n  let url: URL;\n  try {\n    url = new URL(urlString);\n  } catch {\n    return false;\n  }\n\n  if (url.protocol !== \"http:\" && url.protocol !== \"https:\") {\n    return false;\n  }\n  if (url.username || url.password) {\n    return false;\n  }\n\n  return !isBlockedHostname(url.hostname);\n}\n\nexport const PUBLIC_HTTP_URL_ERROR =\n  \"URL must be a public http:// or https:// address\";\n\nconst FORBIDDEN_HANDLER_HEADERS = new Set([\n  \"host\",\n  \"connection\",\n  \"content-length\",\n  \"transfer-encoding\",\n  \"te\",\n  \"trailer\",\n  \"upgrade\",\n  \"proxy-authorization\",\n  \"proxy-connection\",\n  \"keep-alive\",\n  \"x-robotrock-signature\",\n  \"x-robotrock-delivery-id\",\n  \"x-robotrock-delivery-attempt\",\n]);\n\n/**\n * Allow only safe custom webhook headers; blocks overrides of delivery metadata.\n */\nexport function filterHandlerHeaders(\n  headers: Record<string, string> | undefined\n): Record<string, string> {\n  if (!headers) {\n    return {};\n  }\n\n  const filtered: Record<string, string> = {};\n  for (const [rawKey, value] of Object.entries(headers)) {\n    const key = rawKey.toLowerCase().trim();\n    if (!key || FORBIDDEN_HANDLER_HEADERS.has(key)) {\n      continue;\n    }\n    if (!/^[a-z0-9][a-z0-9._-]*$/.test(key)) {\n      continue;\n    }\n    filtered[key] = value;\n  }\n  return filtered;\n}\n","import { z } from \"zod\";\nimport { isPublicHttpUrl, PUBLIC_HTTP_URL_ERROR } from \"../utils/safe-url\";\nimport { validateContextPublicUrls } from \"./context-urls\";\nimport type { JSONSchema7 } from \"./json-schema\";\n\n/**\n * Extended JSONSchema7 type that includes RJSF extensions like enumNames\n */\nexport type ExtendedJSONSchema7 = JSONSchema7 & {\n  enumNames?: string[];\n  [key: string]: unknown;\n};\n\n/**\n * UI Schema for RJSF form customization\n */\nexport type UiSchema = {\n  \"ui:widget\"?: string;\n  \"ui:title\"?: string;\n  \"ui:description\"?: string;\n  \"ui:placeholder\"?: string;\n  \"ui:options\"?: Record<string, unknown>;\n  [key: string]: unknown;\n};\n\n// Helper schemas\nconst safeUrlSchema = z.string().refine((url) => isPublicHttpUrl(url), {\n  message: PUBLIC_HTTP_URL_ERROR,\n});\n\n// JSONSchema7 validation\nconst jsonSchema7Schema = z.custom<ExtendedJSONSchema7>(\n  (val) => typeof val === \"object\" && val !== null,\n  { message: \"Must be a valid JSON Schema object\" }\n);\n\n// UiSchema validation\nconst uiSchemaSchema = z.custom<UiSchema>((val) => typeof val === \"object\" && val !== null, {\n  message: \"Must be a valid UiSchema object\",\n});\n\n// Handler schemas (per-action handlers for webhooks, triggers, etc.)\nconst webhookHandlerSchema = z.object({\n  type: z.literal(\"webhook\"),\n  url: safeUrlSchema,\n  headers: z.record(z.string(), z.string()),\n});\n\nconst triggerHandlerSchema = webhookHandlerSchema.extend({\n  type: z.literal(\"trigger\"),\n  tokenId: z.string().min(1),\n});\n\nconst handlerSchema = z.discriminatedUnion(\"type\", [webhookHandlerSchema, triggerHandlerSchema]);\n\n// Action schema with JSONSchema-based feedback and optional handlers\nconst taskActionSchema = z.object({\n  id: z.string().min(1),\n  title: z.string().min(1),\n  description: z.string().optional(),\n  schema: jsonSchema7Schema.optional(),\n  ui: uiSchemaSchema.optional(),\n  data: z.record(z.string(), z.unknown()).optional(),\n  // Optional handlers for this action - if present, must have at least 1\n  handlers: z.array(handlerSchema).min(1).optional(),\n});\n\n// UI Field Schema\nconst uiFieldSchemaSchema: z.ZodType<Record<string, unknown>> = z\n  .object({\n    \"ui:widget\": z.string().optional(),\n    \"ui:title\": z.string().optional(),\n    \"ui:description\": z.string().optional(),\n    \"ui:options\": z.record(z.string(), z.unknown()).optional(),\n    items: z.lazy(() => z.record(z.string(), uiFieldSchemaSchema)).optional(),\n  })\n  .passthrough();\n\n// Context UI Schema\nconst contextUiSchema = z.record(z.string(), uiFieldSchemaSchema).optional();\n\n// Context data schema\nconst contextDataSchema = z\n  .object({\n    data: z.record(z.string(), z.unknown()),\n    ui: contextUiSchema,\n  })\n  .optional();\n\n// Main TaskContext schema\nconst taskContextObjectSchema = z.object({\n  /** Source application id; omitted tasks are grouped in the default inbox. */\n  app: z.string().min(1).optional(),\n  type: z.string().min(1),\n  name: z.string().min(1),\n  description: z.string().optional(),\n  validUntil: z.string().optional(),\n  context: contextDataSchema,\n  version: z.literal(2).optional(),\n  actions: z.array(taskActionSchema).min(1, \"At least one action is required\"),\n});\n\nfunction refineContextPublicUrls<T extends { context?: z.infer<typeof contextDataSchema> }>(\n  data: T,\n  ctx: z.RefinementCtx\n) {\n  const error = validateContextPublicUrls(data.context);\n  if (error) {\n    ctx.addIssue({\n      code: z.ZodIssueCode.custom,\n      message: error,\n      path: [\"context\"],\n    });\n  }\n}\n\nexport const taskContextSchema = taskContextObjectSchema.superRefine(\n  refineContextPublicUrls\n);\n\n/**\n * Assignment targets at task create (not stored in task context JSON).\n * Unknown user emails are auto-provisioned as assignee memberships (count toward seat limits).\n */\nexport const assignToSchema = z\n  .object({\n    users: z.array(z.string().email()).optional(),\n    groups: z.array(z.string().min(1)).optional(),\n  })\n  .refine(\n    (data) => {\n      const groups = data.groups ?? [];\n      if (groups.includes(\"all\") && groups.length > 1) {\n        return false;\n      }\n      return true;\n    },\n    { message: 'Cannot combine \"all\" with other group slugs' }\n  );\n\n/** A short thread-scoped status update message (1-2 sentences). */\nexport const threadUpdateMessageSchema = z.string().min(1).max(500);\n\n/**\n * Lifecycle status carried by a thread update. Drives the icon and color shown\n * in the inbox status bar. Defaults to `info` when omitted.\n */\nexport const threadUpdateStatuses = [\n  \"info\",\n  \"queued\",\n  \"running\",\n  \"waiting\",\n  \"succeeded\",\n  \"failed\",\n  \"cancelled\",\n] as const;\n\nexport const threadUpdateStatusSchema = z.enum(threadUpdateStatuses);\n\n/** The default status applied when an update omits one. */\nexport const DEFAULT_THREAD_UPDATE_STATUS: ThreadUpdateStatus = \"info\";\n\n/** Shared shape for a thread update (standalone and at task creation). */\nexport const threadUpdateInputSchema = z.object({\n  message: threadUpdateMessageSchema,\n  status: threadUpdateStatusSchema.optional(),\n});\n\n/** Thread priority levels for inbox ordering and display. */\nexport const taskPriorities = [\"low\", \"normal\", \"high\", \"urgent\"] as const;\n\nexport const taskPrioritySchema = z.enum(taskPriorities);\n\nexport type TaskPriority = (typeof taskPriorities)[number];\n\nexport const DEFAULT_TASK_PRIORITY: TaskPriority = \"normal\";\n\nexport const LOWEST_TASK_PRIORITY: TaskPriority = \"low\";\n\nexport const TASK_PRIORITY_RANK: Record<TaskPriority, number> = {\n  low: 1,\n  normal: 2,\n  high: 3,\n  urgent: 4,\n};\n\nconst nonNegativeInt = z.number().int().nonnegative();\n\n/** Token usage for a single agent run (optional breakdown). */\nexport const agentCostTokensSchema = z.object({\n  input: nonNegativeInt.optional(),\n  output: nonNegativeInt.optional(),\n  total: nonNegativeInt.optional(),\n});\n\n/** Monetary and token cost for a single agent run. */\nexport const agentCostSchema = z.object({\n  tokens: agentCostTokensSchema.optional(),\n  eur: z.number().nonnegative().optional(),\n  usd: z.number().nonnegative().optional(),\n});\n\nconst AGENT_INFO_MAX_KEYS = 32;\nexport const AGENT_TOOL_CALLS_MAX_KEYS = 64;\nexport const AGENT_OTEL_SPANS_MAX = 32;\n\n/** Per-tool invocation counts keyed by tool name (e.g. `{ readFile: 3, grep: 2 }`). */\nexport const agentToolCallsSchema = z.record(z.string().min(1), nonNegativeInt);\n\nexport const agentOtelSpanStatusSchema = z.enum([\"ok\", \"error\"]);\n\n/** Compact OpenTelemetry span summary for feedback analysis. */\nexport const agentOtelSpanSummarySchema = z.object({\n  name: z.string().min(1),\n  durationMs: z.number().nonnegative(),\n  status: agentOtelSpanStatusSchema,\n});\n\n/**\n * Structured OpenTelemetry snapshot at task create (not shown in inbox UI).\n * Pair with full traces in your observability backend via `traceId`.\n */\nexport const agentOtelSchema = z.object({\n  traceId: z.string().min(1),\n  spanId: z.string().min(1).optional(),\n  rootDurationMs: z.number().nonnegative().optional(),\n  spans: z.array(agentOtelSpanSummarySchema).max(AGENT_OTEL_SPANS_MAX).optional(),\n});\n\n/**\n * Agent-only telemetry at task create (not shown in inbox reviewer UI).\n * Use to track version, cost, tool calls, and experiment metadata.\n */\nexport const agentTelemetrySchema = z\n  .object({\n    /** Agent or app version (semver, git SHA, deploy tag — caller-defined). */\n    version: z.string().min(1).optional(),\n    /** Total tool invocations. When omitted but `toolCalls` is set, the sum of counts is used. */\n    toolCallCount: nonNegativeInt.optional(),\n    /** Per-tool invocation counts keyed by tool name. */\n    toolCalls: agentToolCallsSchema.optional(),\n    cost: agentCostSchema.optional(),\n    /** Free-form metadata for experiments (model, prompt variant, etc.). */\n    info: z.record(z.string(), z.unknown()).optional(),\n    /** Structured OpenTelemetry span snapshot for feedback analysis. */\n    otel: agentOtelSchema.optional(),\n  })\n  .refine(\n    (data) => {\n      const keys = data.info ? Object.keys(data.info) : [];\n      return keys.length <= AGENT_INFO_MAX_KEYS;\n    },\n    { message: `agent.info may contain at most ${AGENT_INFO_MAX_KEYS} keys` }\n  )\n  .refine(\n    (data) => {\n      const keys = data.toolCalls ? Object.keys(data.toolCalls) : [];\n      return keys.length <= AGENT_TOOL_CALLS_MAX_KEYS;\n    },\n    {\n      message: `agent.toolCalls may contain at most ${AGENT_TOOL_CALLS_MAX_KEYS} tool names`,\n    }\n  );\n\n/** Sum invocation counts from an agent.toolCalls map. */\nexport function sumAgentToolCalls(\n  toolCalls: Record<string, number> | undefined\n): number {\n  if (!toolCalls) return 0;\n  return Object.values(toolCalls).reduce((sum, count) => sum + count, 0);\n}\n\n/** POST /v1 body: task context plus optional assignment. */\nexport const createTaskBodySchema = taskContextObjectSchema\n  .extend({\n    assignTo: assignToSchema.optional(),\n    /**\n     * Groups related tasks together. When omitted, the server generates one and\n     * returns it so the caller can reuse it on later tasks in the same thread.\n     */\n    threadId: z.string().min(1).optional(),\n    /**\n     * Optional thread priority. When set, applies to the whole thread and\n     * overwrites any previous priority. Omit on later tasks to leave unchanged.\n     */\n    priority: taskPrioritySchema.optional(),\n    /**\n     * Optional initial status update logged against the task's thread. Shows in\n     * the inbox status bar and the thread update log.\n     */\n    update: threadUpdateInputSchema.optional(),\n    /** Agent telemetry (version, cost, tool calls) — not shown in inbox UI. */\n    agent: agentTelemetrySchema.optional(),\n  })\n  .superRefine(refineContextPublicUrls);\n\n/** POST /v1/threads/:threadId/updates body: a standalone thread update. */\nexport const threadUpdateBodySchema = threadUpdateInputSchema;\n\n/** Where a thread update originated. */\nexport type ThreadUpdateSource = \"api\" | \"task_create\" | \"dashboard\";\n\n/** Lifecycle status carried by a thread update. */\nexport type ThreadUpdateStatus = (typeof threadUpdateStatuses)[number];\n\n/** A logged thread update as returned by the API. */\nexport interface ThreadUpdate {\n  id: string;\n  threadId: string;\n  message: string;\n  status: ThreadUpdateStatus;\n  source: ThreadUpdateSource;\n  createdAt: number;\n}\n\n// Type exports\nexport type AssignToInput = z.infer<typeof assignToSchema>;\nexport type CreateTaskBodyInput = z.input<typeof createTaskBodySchema>;\nexport type CreateTaskBody = z.output<typeof createTaskBodySchema>;\nexport type ThreadUpdateBodyInput = z.input<typeof threadUpdateBodySchema>;\nexport type ThreadUpdateBody = z.output<typeof threadUpdateBodySchema>;\nexport type ThreadUpdateInput = z.input<typeof threadUpdateInputSchema>;\nexport type TaskContextInput = z.input<typeof taskContextSchema>;\nexport type TaskContextOutput = z.output<typeof taskContextSchema>;\nexport type TaskContext = TaskContextOutput;\nexport type SafeUrl = z.infer<typeof safeUrlSchema>;\nexport type TaskAction = z.infer<typeof taskActionSchema>;\nexport type WebhookHandler = z.infer<typeof webhookHandlerSchema>;\nexport type TriggerHandler = z.infer<typeof triggerHandlerSchema>;\nexport type Handler = z.infer<typeof handlerSchema>;\nexport type ContextData = z.infer<typeof contextDataSchema>;\nexport type ContextUiSchema = z.infer<typeof contextUiSchema>;\nexport type UiFieldSchema = z.infer<typeof uiFieldSchemaSchema>;\nexport type AgentCostTokens = z.infer<typeof agentCostTokensSchema>;\nexport type AgentCost = z.infer<typeof agentCostSchema>;\nexport type AgentToolCalls = z.infer<typeof agentToolCallsSchema>;\nexport type AgentOtelSpanStatus = z.infer<typeof agentOtelSpanStatusSchema>;\nexport type AgentOtelSpanSummary = z.infer<typeof agentOtelSpanSummarySchema>;\nexport type AgentOtel = z.infer<typeof agentOtelSchema>;\nexport type AgentTelemetry = z.infer<typeof agentTelemetrySchema>;\nexport type AgentTelemetryInput = z.input<typeof agentTelemetrySchema>;\n","import { isPublicHttpUrl, PUBLIC_HTTP_URL_ERROR } from \"../utils/safe-url\";\n\ntype ContextInput = {\n  data?: Record<string, unknown>;\n  ui?: Record<string, unknown>;\n};\n\nfunction resolveLinkUrl(value: string): string {\n  return value.startsWith(\"http://\") || value.startsWith(\"https://\")\n    ? value\n    : `https://${value}`;\n}\n\nfunction widgetType(\n  ui: Record<string, unknown> | undefined,\n  field: string\n): string | undefined {\n  const fieldUi = ui?.[field];\n  if (typeof fieldUi !== \"object\" || fieldUi === null) {\n    return undefined;\n  }\n  const widget = (fieldUi as Record<string, unknown>)[\"ui:widget\"];\n  return typeof widget === \"string\" ? widget : undefined;\n}\n\nfunction validateUrlValue(value: unknown, widget: string): string | null {\n  if (widget === \"image\" || widget === \"link\") {\n    if (typeof value !== \"string\") {\n      return PUBLIC_HTTP_URL_ERROR;\n    }\n    const url = widget === \"link\" ? resolveLinkUrl(value) : value;\n    if (!isPublicHttpUrl(url)) {\n      return PUBLIC_HTTP_URL_ERROR;\n    }\n    return null;\n  }\n\n  if (widget === \"attachments\" && Array.isArray(value)) {\n    for (const item of value) {\n      if (typeof item !== \"object\" || item === null) {\n        continue;\n      }\n      const url = (item as { url?: unknown }).url;\n      if (typeof url === \"string\" && !isPublicHttpUrl(resolveLinkUrl(url))) {\n        return PUBLIC_HTTP_URL_ERROR;\n      }\n    }\n  }\n\n  return null;\n}\n\n/**\n * Validates URL-bearing context widget values (image, link, attachments).\n * Returns an error message or null when valid.\n */\nexport function validateContextPublicUrls(\n  context: ContextInput | undefined\n): string | null {\n  if (!context?.data) {\n    return null;\n  }\n\n  for (const [field, value] of Object.entries(context.data)) {\n    const widget = widgetType(context.ui, field);\n    if (!widget) {\n      continue;\n    }\n    const error = validateUrlValue(value, widget);\n    if (error) {\n      return `context.data.${field}: ${error}`;\n    }\n  }\n\n  return null;\n}\n"],"mappings":";AAAA,SAAS,KAAAA,UAAS;;;ACAlB,IAAM,oBAAoB,oBAAI,IAAI;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,SAAS,kBAAkB,UAA0B;AACnD,SAAO,SAAS,YAAY,EAAE,QAAQ,YAAY,EAAE;AACtD;AAEA,SAAS,cAAc,MAAuB;AAC5C,QAAM,QAAQ,+CAA+C,KAAK,IAAI;AACtE,MAAI,CAAC,OAAO;AACV,WAAO;AAAA,EACT;AAEA,QAAM,SAAS,MAAM,MAAM,GAAG,CAAC,EAAE,IAAI,CAAC,SAAS,OAAO,IAAI,CAAC;AAC3D,MAAI,OAAO,KAAK,CAAC,UAAU,OAAO,MAAM,KAAK,KAAK,QAAQ,KAAK,QAAQ,GAAG,GAAG;AAC3E,WAAO;AAAA,EACT;AAEA,QAAM,CAAC,GAAG,GAAG,IAAI,EAAE,IAAI;AACvB,MAAI,MAAM,UAAa,MAAM,QAAW;AACtC,WAAO;AAAA,EACT;AACA,MAAI,MAAM,OAAO,MAAM,EAAG,QAAO;AACjC,MAAI,MAAM,GAAI,QAAO;AACrB,MAAI,MAAM,OAAO,MAAM,IAAK,QAAO;AACnC,MAAI,MAAM,OAAO,MAAM,IAAK,QAAO;AACnC,MAAI,MAAM,OAAO,KAAK,MAAM,KAAK,GAAI,QAAO;AAC5C,MAAI,MAAM,OAAO,KAAK,MAAM,KAAK,IAAK,QAAO;AAE7C,SAAO;AACT;AAEA,SAAS,oBAAoB,MAA6B;AACxD,MAAI,QAAQ,KAAK,IAAI,GAAG;AACtB,UAAM,MAAM,OAAO,IAAI;AACvB,QAAI,CAAC,OAAO,SAAS,GAAG,KAAK,MAAM,KAAK,MAAM,YAAY;AACxD,aAAO;AAAA,IACT;AACA,UAAM,IAAK,QAAQ,KAAM;AACzB,UAAM,IAAK,QAAQ,KAAM;AACzB,UAAM,IAAK,QAAQ,IAAK;AACxB,UAAM,IAAI,MAAM;AAChB,WAAO,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AAAA,EAC5B;AAEA,QAAM,WAAW,uBAAuB,KAAK,IAAI;AACjD,MAAI,UAAU;AACZ,UAAM,MAAM,OAAO,SAAS,SAAS,CAAC,GAAI,EAAE;AAC5C,QAAI,CAAC,OAAO,SAAS,GAAG,KAAK,MAAM,KAAK,MAAM,YAAY;AACxD,aAAO;AAAA,IACT;AACA,UAAM,IAAK,QAAQ,KAAM;AACzB,UAAM,IAAK,QAAQ,KAAM;AACzB,UAAM,IAAK,QAAQ,IAAK;AACxB,UAAM,IAAI,MAAM;AAChB,WAAO,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AAAA,EAC5B;AAEA,SAAO;AACT;AAEA,SAAS,oBAAoB,MAAuB;AAClD,QAAM,eAAe,sCAAsC,KAAK,IAAI;AACpE,MAAI,cAAc;AAChB,WAAO,cAAc,aAAa,CAAC,CAAE;AAAA,EACvC;AAEA,QAAM,YAAY,4CAA4C,KAAK,IAAI;AACvE,MAAI,WAAW;AACb,UAAM,OAAO,OAAO,SAAS,UAAU,CAAC,GAAI,EAAE;AAC9C,UAAM,MAAM,OAAO,SAAS,UAAU,CAAC,GAAI,EAAE;AAC7C,QAAI,OAAO,SAAS,IAAI,KAAK,OAAO,SAAS,GAAG,GAAG;AACjD,YAAM,IAAK,QAAQ,IAAK;AACxB,YAAM,IAAI,OAAO;AACjB,YAAM,IAAK,OAAO,IAAK;AACvB,YAAM,IAAI,MAAM;AAChB,aAAO,cAAc,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;AAAA,IAC5C;AAAA,EACF;AAEA,SAAO;AACT;AAEA,SAAS,cAAc,MAAuB;AAC5C,MAAI,SAAS,SAAS,SAAS,mBAAmB;AAChD,WAAO;AAAA,EACT;AACA,MAAI,KAAK,WAAW,IAAI,KAAK,KAAK,WAAW,IAAI,GAAG;AAClD,WAAO;AAAA,EACT;AACA,MAAI,KAAK,WAAW,OAAO,GAAG;AAC5B,WAAO;AAAA,EACT;AACA,MAAI,oBAAoB,IAAI,GAAG;AAC7B,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,SAAS,kBAAkB,UAA2B;AACpD,QAAM,OAAO,kBAAkB,QAAQ;AACvC,MAAI,CAAC,MAAM;AACT,WAAO;AAAA,EACT;AACA,MAAI,kBAAkB,IAAI,IAAI,GAAG;AAC/B,WAAO;AAAA,EACT;AACA,MAAI,KAAK,SAAS,YAAY,KAAK,KAAK,SAAS,QAAQ,GAAG;AAC1D,WAAO;AAAA,EACT;AAEA,QAAM,cAAc,oBAAoB,IAAI;AAC5C,MAAI,eAAe,cAAc,WAAW,GAAG;AAC7C,WAAO;AAAA,EACT;AAEA,SAAO,cAAc,IAAI,KAAK,cAAc,IAAI;AAClD;AAKO,SAAS,gBAAgB,WAA4B;AAC1D,MAAI;AACJ,MAAI;AACF,UAAM,IAAI,IAAI,SAAS;AAAA,EACzB,QAAQ;AACN,WAAO;AAAA,EACT;AAEA,MAAI,IAAI,aAAa,WAAW,IAAI,aAAa,UAAU;AACzD,WAAO;AAAA,EACT;AACA,MAAI,IAAI,YAAY,IAAI,UAAU;AAChC,WAAO;AAAA,EACT;AAEA,SAAO,CAAC,kBAAkB,IAAI,QAAQ;AACxC;AAEO,IAAM,wBACX;;;AChJF,SAAS,SAAS;;;ACOlB,SAAS,eAAe,OAAuB;AAC7C,SAAO,MAAM,WAAW,SAAS,KAAK,MAAM,WAAW,UAAU,IAC7D,QACA,WAAW,KAAK;AACtB;AAEA,SAAS,WACP,IACA,OACoB;AACpB,QAAM,UAAU,KAAK,KAAK;AAC1B,MAAI,OAAO,YAAY,YAAY,YAAY,MAAM;AACnD,WAAO;AAAA,EACT;AACA,QAAM,SAAU,QAAoC,WAAW;AAC/D,SAAO,OAAO,WAAW,WAAW,SAAS;AAC/C;AAEA,SAAS,iBAAiB,OAAgB,QAA+B;AACvE,MAAI,WAAW,WAAW,WAAW,QAAQ;AAC3C,QAAI,OAAO,UAAU,UAAU;AAC7B,aAAO;AAAA,IACT;AACA,UAAM,MAAM,WAAW,SAAS,eAAe,KAAK,IAAI;AACxD,QAAI,CAAC,gBAAgB,GAAG,GAAG;AACzB,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT;AAEA,MAAI,WAAW,iBAAiB,MAAM,QAAQ,KAAK,GAAG;AACpD,eAAW,QAAQ,OAAO;AACxB,UAAI,OAAO,SAAS,YAAY,SAAS,MAAM;AAC7C;AAAA,MACF;AACA,YAAM,MAAO,KAA2B;AACxC,UAAI,OAAO,QAAQ,YAAY,CAAC,gBAAgB,eAAe,GAAG,CAAC,GAAG;AACpE,eAAO;AAAA,MACT;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;AAMO,SAAS,0BACd,SACe;AACf,MAAI,CAAC,SAAS,MAAM;AAClB,WAAO;AAAA,EACT;AAEA,aAAW,CAAC,OAAO,KAAK,KAAK,OAAO,QAAQ,QAAQ,IAAI,GAAG;AACzD,UAAM,SAAS,WAAW,QAAQ,IAAI,KAAK;AAC3C,QAAI,CAAC,QAAQ;AACX;AAAA,IACF;AACA,UAAM,QAAQ,iBAAiB,OAAO,MAAM;AAC5C,QAAI,OAAO;AACT,aAAO,gBAAgB,KAAK,KAAK,KAAK;AAAA,IACxC;AAAA,EACF;AAEA,SAAO;AACT;;;ADjDA,IAAM,gBAAgB,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,gBAAgB,GAAG,GAAG;AAAA,EACrE,SAAS;AACX,CAAC;AAGD,IAAM,oBAAoB,EAAE;AAAA,EAC1B,CAAC,QAAQ,OAAO,QAAQ,YAAY,QAAQ;AAAA,EAC5C,EAAE,SAAS,qCAAqC;AAClD;AAGA,IAAM,iBAAiB,EAAE,OAAiB,CAAC,QAAQ,OAAO,QAAQ,YAAY,QAAQ,MAAM;AAAA,EAC1F,SAAS;AACX,CAAC;AAGD,IAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,MAAM,EAAE,QAAQ,SAAS;AAAA,EACzB,KAAK;AAAA,EACL,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC;AAC1C,CAAC;AAED,IAAM,uBAAuB,qBAAqB,OAAO;AAAA,EACvD,MAAM,EAAE,QAAQ,SAAS;AAAA,EACzB,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC;AAC3B,CAAC;AAED,IAAM,gBAAgB,EAAE,mBAAmB,QAAQ,CAAC,sBAAsB,oBAAoB,CAAC;AAG/F,IAAM,mBAAmB,EAAE,OAAO;AAAA,EAChC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACpB,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACvB,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,QAAQ,kBAAkB,SAAS;AAAA,EACnC,IAAI,eAAe,SAAS;AAAA,EAC5B,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA;AAAA,EAEjD,UAAU,EAAE,MAAM,aAAa,EAAE,IAAI,CAAC,EAAE,SAAS;AACnD,CAAC;AAGD,IAAM,sBAA0D,EAC7D,OAAO;AAAA,EACN,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,kBAAkB,EAAE,OAAO,EAAE,SAAS;AAAA,EACtC,cAAc,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EACzD,OAAO,EAAE,KAAK,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,mBAAmB,CAAC,EAAE,SAAS;AAC1E,CAAC,EACA,YAAY;AAGf,IAAM,kBAAkB,EAAE,OAAO,EAAE,OAAO,GAAG,mBAAmB,EAAE,SAAS;AAG3E,IAAM,oBAAoB,EACvB,OAAO;AAAA,EACN,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;AAAA,EACtC,IAAI;AACN,CAAC,EACA,SAAS;AAGZ,IAAM,0BAA0B,EAAE,OAAO;AAAA;AAAA,EAEvC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EAChC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACtB,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACtB,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,SAAS;AAAA,EACT,SAAS,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EAC/B,SAAS,EAAE,MAAM,gBAAgB,EAAE,IAAI,GAAG,iCAAiC;AAC7E,CAAC;AAED,SAAS,wBACP,MACA,KACA;AACA,QAAM,QAAQ,0BAA0B,KAAK,OAAO;AACpD,MAAI,OAAO;AACT,QAAI,SAAS;AAAA,MACX,MAAM,EAAE,aAAa;AAAA,MACrB,SAAS;AAAA,MACT,MAAM,CAAC,SAAS;AAAA,IAClB,CAAC;AAAA,EACH;AACF;AAEO,IAAM,oBAAoB,wBAAwB;AAAA,EACvD;AACF;AAMO,IAAM,iBAAiB,EAC3B,OAAO;AAAA,EACN,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,SAAS;AAAA,EAC5C,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,EAAE,SAAS;AAC9C,CAAC,EACA;AAAA,EACC,CAAC,SAAS;AACR,UAAM,SAAS,KAAK,UAAU,CAAC;AAC/B,QAAI,OAAO,SAAS,KAAK,KAAK,OAAO,SAAS,GAAG;AAC/C,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT;AAAA,EACA,EAAE,SAAS,8CAA8C;AAC3D;AAGK,IAAM,4BAA4B,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAM3D,IAAM,uBAAuB;AAAA,EAClC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEO,IAAM,2BAA2B,EAAE,KAAK,oBAAoB;AAM5D,IAAM,0BAA0B,EAAE,OAAO;AAAA,EAC9C,SAAS;AAAA,EACT,QAAQ,yBAAyB,SAAS;AAC5C,CAAC;AAGM,IAAM,iBAAiB,CAAC,OAAO,UAAU,QAAQ,QAAQ;AAEzD,IAAM,qBAAqB,EAAE,KAAK,cAAc;AAevD,IAAM,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAG7C,IAAM,wBAAwB,EAAE,OAAO;AAAA,EAC5C,OAAO,eAAe,SAAS;AAAA,EAC/B,QAAQ,eAAe,SAAS;AAAA,EAChC,OAAO,eAAe,SAAS;AACjC,CAAC;AAGM,IAAM,kBAAkB,EAAE,OAAO;AAAA,EACtC,QAAQ,sBAAsB,SAAS;AAAA,EACvC,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS;AAAA,EACvC,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS;AACzC,CAAC;AAED,IAAM,sBAAsB;AACrB,IAAM,4BAA4B;AAClC,IAAM,uBAAuB;AAG7B,IAAM,uBAAuB,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,cAAc;AAEvE,IAAM,4BAA4B,EAAE,KAAK,CAAC,MAAM,OAAO,CAAC;AAGxD,IAAM,6BAA6B,EAAE,OAAO;AAAA,EACjD,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACtB,YAAY,EAAE,OAAO,EAAE,YAAY;AAAA,EACnC,QAAQ;AACV,CAAC;AAMM,IAAM,kBAAkB,EAAE,OAAO;AAAA,EACtC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACzB,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EACnC,gBAAgB,EAAE,OAAO,EAAE,YAAY,EAAE,SAAS;AAAA,EAClD,OAAO,EAAE,MAAM,0BAA0B,EAAE,IAAI,oBAAoB,EAAE,SAAS;AAChF,CAAC;AAMM,IAAM,uBAAuB,EACjC,OAAO;AAAA;AAAA,EAEN,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA;AAAA,EAEpC,eAAe,eAAe,SAAS;AAAA;AAAA,EAEvC,WAAW,qBAAqB,SAAS;AAAA,EACzC,MAAM,gBAAgB,SAAS;AAAA;AAAA,EAE/B,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA;AAAA,EAEjD,MAAM,gBAAgB,SAAS;AACjC,CAAC,EACA;AAAA,EACC,CAAC,SAAS;AACR,UAAM,OAAO,KAAK,OAAO,OAAO,KAAK,KAAK,IAAI,IAAI,CAAC;AACnD,WAAO,KAAK,UAAU;AAAA,EACxB;AAAA,EACA,EAAE,SAAS,kCAAkC,mBAAmB,QAAQ;AAC1E,EACC;AAAA,EACC,CAAC,SAAS;AACR,UAAM,OAAO,KAAK,YAAY,OAAO,KAAK,KAAK,SAAS,IAAI,CAAC;AAC7D,WAAO,KAAK,UAAU;AAAA,EACxB;AAAA,EACA;AAAA,IACE,SAAS,uCAAuC,yBAAyB;AAAA,EAC3E;AACF;AAWK,IAAM,uBAAuB,wBACjC,OAAO;AAAA,EACN,UAAU,eAAe,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA,EAKlC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA,EAKrC,UAAU,mBAAmB,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA,EAKtC,QAAQ,wBAAwB,SAAS;AAAA;AAAA,EAEzC,OAAO,qBAAqB,SAAS;AACvC,CAAC,EACA,YAAY,uBAAuB;;;AF1NtC,IAAMC,iBAAgBC,GAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,gBAAgB,GAAG,GAAG;AAAA,EACrE,SAAS;AACX,CAAC;AAED,IAAMC,qBAAoBD,GAAE;AAAA,EAC1B,CAAC,QAAQ,OAAO,QAAQ,YAAY,QAAQ;AAAA,EAC5C,EAAE,SAAS,qCAAqC;AAClD;AAEA,IAAME,kBAAiBF,GAAE,OAAiB,CAAC,QAAQ,OAAO,QAAQ,YAAY,QAAQ,MAAM;AAAA,EAC1F,SAAS;AACX,CAAC;AAED,IAAMG,wBAAuBH,GAAE,OAAO;AAAA,EACpC,MAAMA,GAAE,QAAQ,SAAS;AAAA,EACzB,KAAKD;AAAA,EACL,SAASC,GAAE,OAAOA,GAAE,OAAO,GAAGA,GAAE,OAAO,CAAC;AAC1C,CAAC;AAED,IAAMI,wBAAuBD,sBAAqB,OAAO;AAAA,EACvD,MAAMH,GAAE,QAAQ,SAAS;AAAA,EACzB,SAASA,GAAE,OAAO,EAAE,IAAI,CAAC;AAC3B,CAAC;AAED,IAAMK,iBAAgBL,GAAE,mBAAmB,QAAQ,CAACG,uBAAsBC,qBAAoB,CAAC;AAE/F,IAAME,oBAAmBN,GAAE,OAAO;AAAA,EAChC,IAAIA,GAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACpB,OAAOA,GAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACvB,aAAaA,GAAE,OAAO,EAAE,SAAS;AAAA,EACjC,QAAQC,mBAAkB,SAAS;AAAA,EACnC,IAAIC,gBAAe,SAAS;AAAA,EAC5B,MAAMF,GAAE,OAAOA,GAAE,OAAO,GAAGA,GAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EACjD,UAAUA,GAAE,MAAMK,cAAa,EAAE,IAAI,CAAC,EAAE,SAAS;AACnD,CAAC;AAED,IAAME,uBAA0DP,GAC7D,OAAO;AAAA,EACN,aAAaA,GAAE,OAAO,EAAE,SAAS;AAAA,EACjC,YAAYA,GAAE,OAAO,EAAE,SAAS;AAAA,EAChC,kBAAkBA,GAAE,OAAO,EAAE,SAAS;AAAA,EACtC,cAAcA,GAAE,OAAOA,GAAE,OAAO,GAAGA,GAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EACzD,OAAOA,GAAE,KAAK,MAAMA,GAAE,OAAOA,GAAE,OAAO,GAAGO,oBAAmB,CAAC,EAAE,SAAS;AAC1E,CAAC,EACA,YAAY;AAEf,IAAMC,mBAAkBR,GAAE,OAAOA,GAAE,OAAO,GAAGO,oBAAmB,EAAE,SAAS;AAE3E,IAAME,qBAAoBT,GACvB,OAAO;AAAA,EACN,MAAMA,GAAE,OAAOA,GAAE,OAAO,GAAGA,GAAE,QAAQ,CAAC;AAAA,EACtC,IAAIQ;AACN,CAAC,EACA,SAAS;AAEZ,IAAME,2BAA0BV,GAAE,OAAO;AAAA,EACvC,KAAKA,GAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EAChC,MAAMA,GAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACtB,MAAMA,GAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACtB,aAAaA,GAAE,OAAO,EAAE,SAAS;AAAA,EACjC,YAAYA,GAAE,OAAO,EAAE,SAAS;AAAA,EAChC,SAASS;AAAA,EACT,SAAST,GAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EAC/B,SAASA,GAAE,MAAMM,iBAAgB,EAAE,IAAI,GAAG,iCAAiC;AAC7E,CAAC;AAED,SAASK,yBACP,MACA,KACA;AACA,QAAM,QAAQ,0BAA0B,KAAK,OAAO;AACpD,MAAI,OAAO;AACT,QAAI,SAAS;AAAA,MACX,MAAMX,GAAE,aAAa;AAAA,MACrB,SAAS;AAAA,MACT,MAAM,CAAC,SAAS;AAAA,IAClB,CAAC;AAAA,EACH;AACF;AAEO,IAAMY,qBAAoBF,yBAAwB;AAAA,EACvDC;AACF;AAMO,IAAME,kBAAiBb,GAC3B,OAAO;AAAA,EACN,OAAOA,GAAE,MAAMA,GAAE,OAAO,EAAE,MAAM,CAAC,EAAE,SAAS;AAAA,EAC5C,QAAQA,GAAE,MAAMA,GAAE,OAAO,EAAE,IAAI,CAAC,CAAC,EAAE,SAAS;AAC9C,CAAC,EACA;AAAA,EACC,CAAC,SAAS;AACR,UAAM,SAAS,KAAK,UAAU,CAAC;AAC/B,QAAI,OAAO,SAAS,KAAK,KAAK,OAAO,SAAS,GAAG;AAC/C,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT;AAAA,EACA,EAAE,SAAS,8CAA8C;AAC3D;AAGK,IAAMc,6BAA4Bd,GAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAM3D,IAAMe,wBAAuB;AAAA,EAClC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEO,IAAMC,4BAA2BhB,GAAE,KAAKe,qBAAoB;AAG5D,IAAM,+BAAmD;AAGzD,IAAME,2BAA0BjB,GAAE,OAAO;AAAA,EAC9C,SAASc;AAAA,EACT,QAAQE,0BAAyB,SAAS;AAC5C,CAAC;AAGM,IAAME,kBAAiB,CAAC,OAAO,UAAU,QAAQ,QAAQ;AAEzD,IAAMC,sBAAqBnB,GAAE,KAAKkB,eAAc;AAIhD,IAAM,wBAAsC;AAE5C,IAAM,uBAAqC;AAE3C,IAAM,qBAAmD;AAAA,EAC9D,KAAK;AAAA,EACL,QAAQ;AAAA,EACR,MAAM;AAAA,EACN,QAAQ;AACV;AAEA,IAAME,kBAAiBpB,GAAE,OAAO,EAAE,IAAI,EAAE,YAAY;AAE7C,IAAMqB,yBAAwBrB,GAAE,OAAO;AAAA,EAC5C,OAAOoB,gBAAe,SAAS;AAAA,EAC/B,QAAQA,gBAAe,SAAS;AAAA,EAChC,OAAOA,gBAAe,SAAS;AACjC,CAAC;AAEM,IAAME,mBAAkBtB,GAAE,OAAO;AAAA,EACtC,QAAQqB,uBAAsB,SAAS;AAAA,EACvC,KAAKrB,GAAE,OAAO,EAAE,YAAY,EAAE,SAAS;AAAA,EACvC,KAAKA,GAAE,OAAO,EAAE,YAAY,EAAE,SAAS;AACzC,CAAC;AAED,IAAMuB,uBAAsB;AAC5B,IAAMC,6BAA4B;AAC3B,IAAMC,wBAAuB;AAE7B,IAAMC,wBAAuB1B,GAAE,OAAOA,GAAE,OAAO,EAAE,IAAI,CAAC,GAAGoB,eAAc;AAEvE,IAAMO,6BAA4B3B,GAAE,KAAK,CAAC,MAAM,OAAO,CAAC;AAExD,IAAM4B,8BAA6B5B,GAAE,OAAO;AAAA,EACjD,MAAMA,GAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACtB,YAAYA,GAAE,OAAO,EAAE,YAAY;AAAA,EACnC,QAAQ2B;AACV,CAAC;AAEM,IAAME,mBAAkB7B,GAAE,OAAO;AAAA,EACtC,SAASA,GAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACzB,QAAQA,GAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EACnC,gBAAgBA,GAAE,OAAO,EAAE,YAAY,EAAE,SAAS;AAAA,EAClD,OAAOA,GAAE,MAAM4B,2BAA0B,EAAE,IAAIH,qBAAoB,EAAE,SAAS;AAChF,CAAC;AAEM,IAAMK,wBAAuB9B,GACjC,OAAO;AAAA,EACN,SAASA,GAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EACpC,eAAeoB,gBAAe,SAAS;AAAA,EACvC,WAAWM,sBAAqB,SAAS;AAAA,EACzC,MAAMJ,iBAAgB,SAAS;AAAA,EAC/B,MAAMtB,GAAE,OAAOA,GAAE,OAAO,GAAGA,GAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EACjD,MAAM6B,iBAAgB,SAAS;AACjC,CAAC,EACA;AAAA,EACC,CAAC,SAAS;AACR,UAAM,OAAO,KAAK,OAAO,OAAO,KAAK,KAAK,IAAI,IAAI,CAAC;AACnD,WAAO,KAAK,UAAUN;AAAA,EACxB;AAAA,EACA,EAAE,SAAS,kCAAkCA,oBAAmB,QAAQ;AAC1E,EACC;AAAA,EACC,CAAC,SAAS;AACR,UAAM,OAAO,KAAK,YAAY,OAAO,KAAK,KAAK,SAAS,IAAI,CAAC;AAC7D,WAAO,KAAK,UAAUC;AAAA,EACxB;AAAA,EACA;AAAA,IACE,SAAS,uCAAuCA,0BAAyB;AAAA,EAC3E;AACF;AAEK,IAAMO,wBAAuBrB,yBACjC,OAAO;AAAA,EACN,UAAUG,gBAAe,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA,EAKlC,UAAUb,GAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA,EAKrC,UAAUmB,oBAAmB,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA,EAKtC,QAAQF,yBAAwB,SAAS;AAAA,EACzC,OAAOa,sBAAqB,SAAS;AACvC,CAAC,EACA,YAAYnB,wBAAuB;AAG/B,IAAM,yBAAyBM;","names":["z","safeUrlSchema","z","jsonSchema7Schema","uiSchemaSchema","webhookHandlerSchema","triggerHandlerSchema","handlerSchema","taskActionSchema","uiFieldSchemaSchema","contextUiSchema","contextDataSchema","taskContextObjectSchema","refineContextPublicUrls","taskContextSchema","assignToSchema","threadUpdateMessageSchema","threadUpdateStatuses","threadUpdateStatusSchema","threadUpdateInputSchema","taskPriorities","taskPrioritySchema","nonNegativeInt","agentCostTokensSchema","agentCostSchema","AGENT_INFO_MAX_KEYS","AGENT_TOOL_CALLS_MAX_KEYS","AGENT_OTEL_SPANS_MAX","agentToolCallsSchema","agentOtelSpanStatusSchema","agentOtelSpanSummarySchema","agentOtelSchema","agentTelemetrySchema","createTaskBodySchema"]}