robotrock 1.0.0 → 1.1.0

package/dist/schemas/index.js

@@ -108,6 +108,25 @@ function isBlockedHostname(hostname) {
   }
   return isBlockedIpv4(host) || isBlockedIpv6(host);
 }
+function isLoopbackHandlerUrl(urlString) {
+  let url;
+  try {
+    url = new URL(urlString);
+  } catch {
+    return false;
+  }
+  if (url.protocol !== "http:" && url.protocol !== "https:") {
+    return false;
+  }
+  if (url.username || url.password) {
+    return false;
+  }
+  const host = url.hostname.toLowerCase();
+  return host === "localhost" || host === "127.0.0.1" || host === "::1" || host === "[::1]" || host.endsWith(".localhost");
+}
+function isAllowedHandlerUrl(urlString) {
+  return isPublicHttpUrl(urlString) || isLoopbackHandlerUrl(urlString);
+}
 function isPublicHttpUrl(urlString) {
   let url;
   try {
@@ -124,6 +143,7 @@ function isPublicHttpUrl(urlString) {
   return !isBlockedHostname(url.hostname);
 }
 var PUBLIC_HTTP_URL_ERROR = "URL must be a public http:// or https:// address";
+var HANDLER_URL_ERROR = "Handler URL must be a public or loopback http:// or https:// address";
 
 // ../core/src/schemas/task.ts
 import { z } from "zod";
@@ -185,6 +205,9 @@ function validateContextPublicUrls(context) {
 var safeUrlSchema = z.string().refine((url) => isPublicHttpUrl(url), {
   message: PUBLIC_HTTP_URL_ERROR
 });
+var handlerUrlSchema = z.string().refine((url) => isAllowedHandlerUrl(url), {
+  message: HANDLER_URL_ERROR
+});
 var jsonSchema7Schema = z.custom(
   (val) => typeof val === "object" && val !== null,
   { message: "Must be a valid JSON Schema object" }
@@ -194,7 +217,7 @@ var uiSchemaSchema = z.custom((val) => typeof val === "object" && val !== null,
 });
 var webhookHandlerSchema = z.object({
   type: z.literal("webhook"),
-  url: safeUrlSchema,
+  url: handlerUrlSchema,
   headers: z.record(z.string(), z.string())
 });
 var triggerHandlerSchema = webhookHandlerSchema.extend({
@@ -345,13 +368,22 @@ var agentChatSeedMessageSchema = z.object({
     action: agentChatSeedActionSchema
   }).optional()
 });
+var eveAgentChatTransportSchema = z.object({
+  kind: z.literal("eve"),
+  chatId: z.string().min(1),
+  baseUrl: z.string().url(),
+  sessionId: z.string().optional(),
+  continuationToken: z.string().optional(),
+  streamIndex: z.number().int().nonnegative().optional(),
+  isStreaming: z.boolean().optional()
+});
 var createAgentChatBodySchema = z.object({
-  /** Trigger chat agent id (task slug). Required unless `parentChatId` is set. */
+  /** Agent id (eve agent name). Required unless `parentChatId` is set. */
   agentIdentifier: z.string().min(1).optional(),
   /** Inherit tenant/connection/agent from an existing chat (agent-spawned chats). */
   parentChatId: z.string().min(1).optional(),
-  /** Convex tenantTriggerConnections id; resolved from the tenant when omitted. */
-  connectionId: z.string().min(1).optional(),
+  /** Convex tenantEveConnections id; resolved from the tenant when omitted. */
+  eveConnectionId: z.string().min(1).optional(),
   /** Source application id; groups the chat under an inbox section. */
   app: z.string().min(1).optional(),
   assignTo: assignToSchema.optional(),
@@ -362,16 +394,47 @@ var createAgentChatBodySchema = z.object({
 }).refine((data) => Boolean(data.agentIdentifier || data.parentChatId), {
   message: "Provide either agentIdentifier or parentChatId"
 });
-var agentChatTransportBodySchema = z.object({
-  chatId: z.string().min(1),
-  publicAccessToken: z.string().min(1),
-  lastEventId: z.string().optional(),
-  isStreaming: z.boolean().optional()
+var agentChatAuditInputBodySchema = z.object({
+  eveSessionId: z.string().min(1),
+  userId: z.string().min(1),
+  actionId: z.string().min(1),
+  actionTitle: z.string().optional(),
+  prompt: z.string().optional(),
+  data: z.record(z.string(), z.unknown()).optional(),
+  idempotencyKey: z.string().optional(),
+  /** Eve input request id — used to merge staged HITL metadata. */
+  requestId: z.string().optional(),
+  /** Eve tool call id — fallback lookup for staged HITL metadata. */
+  toolCallId: z.string().optional()
+});
+var eveHitlStagedOptionSchema = z.object({
+  id: z.string(),
+  label: z.string()
+});
+var agentChatStageHitlBodySchema = z.object({
+  eveSessionId: z.string().min(1),
+  requests: z.array(
+    z.object({
+      requestId: z.string().min(1),
+      toolCallId: z.string().min(1),
+      toolName: z.string().min(1),
+      prompt: z.string().min(1),
+      display: z.enum(["confirmation", "select", "text"]).optional(),
+      allowFreeform: z.boolean().optional(),
+      options: z.array(eveHitlStagedOptionSchema).optional(),
+      toolInput: z.record(z.string(), z.unknown()).optional()
+    })
+  )
+});
+var agentChatLinkTaskBodySchema = z.object({
+  eveSessionId: z.string().min(1),
+  publicTaskId: z.string().min(1),
+  toolCallId: z.string().min(1)
 });
 
 // src/schemas/index.ts
-var safeUrlSchema2 = z2.string().refine((url) => isPublicHttpUrl(url), {
-  message: PUBLIC_HTTP_URL_ERROR
+var handlerUrlSchema2 = z2.string().refine((url) => isAllowedHandlerUrl(url), {
+  message: HANDLER_URL_ERROR
 });
 var jsonSchema7Schema2 = z2.custom(
   (val) => typeof val === "object" && val !== null,
@@ -382,7 +445,7 @@ var uiSchemaSchema2 = z2.custom((val) => typeof val === "object" && val !== null
 });
 var webhookHandlerSchema2 = z2.object({
   type: z2.literal("webhook"),
-  url: safeUrlSchema2,
+  url: handlerUrlSchema2,
   headers: z2.record(z2.string(), z2.string())
 });
 var triggerHandlerSchema2 = webhookHandlerSchema2.extend({

package/dist/schemas/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/schemas/index.ts","../../../core/src/utils/safe-url.ts","../../../core/src/schemas/task.ts","../../../core/src/schemas/context-urls.ts"],"sourcesContent":["import { z } from \"zod\";\nimport {\n  isPublicHttpUrl,\n  PUBLIC_HTTP_URL_ERROR,\n} from \"@robotrock/core/utils\";\nimport { validateContextPublicUrls } from \"@robotrock/core/schemas\";\n\nexport interface JSONSchema7 {\n  $id?: string;\n  $ref?: string;\n  $schema?: string;\n  $comment?: string;\n  type?: JSONSchema7TypeName | JSONSchema7TypeName[];\n  enum?: unknown[];\n  const?: unknown;\n  multipleOf?: number;\n  maximum?: number;\n  exclusiveMaximum?: number;\n  minimum?: number;\n  exclusiveMinimum?: number;\n  maxLength?: number;\n  minLength?: number;\n  pattern?: string;\n  format?: string;\n  items?: JSONSchema7 | JSONSchema7[];\n  additionalItems?: JSONSchema7 | boolean;\n  maxItems?: number;\n  minItems?: number;\n  uniqueItems?: boolean;\n  contains?: JSONSchema7;\n  maxProperties?: number;\n  minProperties?: number;\n  required?: string[];\n  properties?: Record<string, JSONSchema7>;\n  patternProperties?: Record<string, JSONSchema7>;\n  additionalProperties?: JSONSchema7 | boolean;\n  dependencies?: Record<string, JSONSchema7 | string[]>;\n  propertyNames?: JSONSchema7;\n  if?: JSONSchema7;\n  then?: JSONSchema7;\n  else?: JSONSchema7;\n  allOf?: JSONSchema7[];\n  anyOf?: JSONSchema7[];\n  oneOf?: JSONSchema7[];\n  not?: JSONSchema7;\n  title?: string;\n  description?: string;\n  default?: unknown;\n  readOnly?: boolean;\n  writeOnly?: boolean;\n  examples?: unknown[];\n}\n\nexport type JSONSchema7TypeName =\n  | \"string\"\n  | \"number\"\n  | \"integer\"\n  | \"boolean\"\n  | \"object\"\n  | \"array\"\n  | \"null\";\n\nexport type ExtendedJSONSchema7 = JSONSchema7 & {\n  enumNames?: string[];\n  [key: string]: unknown;\n};\n\nexport type UiSchema = {\n  \"ui:widget\"?: string;\n  \"ui:title\"?: string;\n  \"ui:description\"?: string;\n  \"ui:placeholder\"?: string;\n  \"ui:options\"?: Record<string, unknown>;\n  [key: string]: unknown;\n};\n\nconst safeUrlSchema = z.string().refine((url) => isPublicHttpUrl(url), {\n  message: PUBLIC_HTTP_URL_ERROR,\n});\n\nconst jsonSchema7Schema = z.custom<ExtendedJSONSchema7>(\n  (val) => typeof val === \"object\" && val !== null,\n  { message: \"Must be a valid JSON Schema object\" }\n);\n\nconst uiSchemaSchema = z.custom<UiSchema>((val) => typeof val === \"object\" && val !== null, {\n  message: \"Must be a valid UiSchema object\",\n});\n\nconst webhookHandlerSchema = z.object({\n  type: z.literal(\"webhook\"),\n  url: safeUrlSchema,\n  headers: z.record(z.string(), z.string()),\n});\n\nconst triggerHandlerSchema = webhookHandlerSchema.extend({\n  type: z.literal(\"trigger\"),\n  tokenId: z.string().min(1),\n});\n\nconst handlerSchema = z.discriminatedUnion(\"type\", [webhookHandlerSchema, triggerHandlerSchema]);\n\n/** Action config without handlers — used for chat widgets and agent tool input. */\nexport const taskActionInputSchema = z.object({\n  id: z.string().min(1),\n  title: z.string().min(1),\n  description: z.string().optional(),\n  schema: jsonSchema7Schema.optional(),\n  ui: uiSchemaSchema.optional(),\n  data: z.record(z.string(), z.unknown()).optional(),\n});\n\nconst taskActionSchema = taskActionInputSchema.extend({\n  handlers: z.array(handlerSchema).min(1).optional(),\n});\n\nconst uiFieldSchemaSchema: z.ZodType<Record<string, unknown>> = z\n  .object({\n    \"ui:widget\": z.string().optional(),\n    \"ui:title\": z.string().optional(),\n    \"ui:description\": z.string().optional(),\n    \"ui:options\": z.record(z.string(), z.unknown()).optional(),\n    items: z.lazy(() => z.record(z.string(), uiFieldSchemaSchema)).optional(),\n  })\n  .passthrough();\n\nconst contextUiSchema = z.record(z.string(), uiFieldSchemaSchema).optional();\n\nconst contextDataSchema = z\n  .object({\n    data: z.record(z.string(), z.unknown()),\n    ui: contextUiSchema,\n  })\n  .optional();\n\n/** Task context wire format version (always `2` today). */\nexport const TASK_CONTEXT_FORMAT_VERSION = 2 as const;\nexport type TaskContextFormatVersion = typeof TASK_CONTEXT_FORMAT_VERSION;\n\nconst taskContextObjectBaseSchema = z.object({\n  app: z.string().min(1).optional(),\n  type: z.string().min(1),\n  name: z.string().min(1),\n  description: z.string().optional(),\n  validUntil: z.string().optional(),\n  context: contextDataSchema,\n  contextVersion: z.literal(2).optional(),\n  /** @deprecated Use `contextVersion`. Accepted on ingest only. */\n  version: z.literal(2).optional(),\n  actions: z.array(taskActionSchema).min(1, \"At least one action is required\"),\n});\n\nfunction normalizeTaskContextVersion<T extends { contextVersion?: 2; version?: 2 }>(\n  data: T\n): Omit<T, \"version\" | \"contextVersion\"> & { contextVersion: 2 } {\n  const { version: legacyVersion, contextVersion, ...rest } = data;\n  return {\n    ...rest,\n    contextVersion: contextVersion ?? legacyVersion ?? TASK_CONTEXT_FORMAT_VERSION,\n  };\n}\n\nconst taskContextObjectSchema = taskContextObjectBaseSchema.transform(\n  normalizeTaskContextVersion\n);\n\nfunction refineContextPublicUrls<T extends { context?: z.infer<typeof contextDataSchema> }>(\n  data: T,\n  ctx: z.RefinementCtx\n) {\n  const error = validateContextPublicUrls(data.context);\n  if (error) {\n    ctx.addIssue({\n      code: z.ZodIssueCode.custom,\n      message: error,\n      path: [\"context\"],\n    });\n  }\n}\n\nexport const taskContextSchema = taskContextObjectSchema.superRefine(\n  refineContextPublicUrls\n);\n\n/**\n * Assignment targets at task create (not stored in task context JSON).\n * Unknown user emails are auto-provisioned as assignee memberships (count toward seat limits).\n */\nexport const assignToSchema = z\n  .object({\n    users: z.array(z.string().email()).optional(),\n    groups: z.array(z.string().min(1)).optional(),\n  })\n  .refine(\n    (data) => {\n      const groups = data.groups ?? [];\n      if (groups.includes(\"all\") && groups.length > 1) {\n        return false;\n      }\n      return true;\n    },\n    { message: 'Cannot combine \"all\" with other group slugs' }\n  );\n\n/** A short thread-scoped status update message (1-2 sentences). */\nexport const threadUpdateMessageSchema = z.string().min(1).max(500);\n\n/**\n * Lifecycle status carried by a thread update. Drives the icon and color shown\n * in the inbox status bar. Defaults to `info` when omitted.\n */\nexport const threadUpdateStatuses = [\n  \"info\",\n  \"queued\",\n  \"running\",\n  \"waiting\",\n  \"succeeded\",\n  \"failed\",\n  \"cancelled\",\n] as const;\n\nexport const threadUpdateStatusSchema = z.enum(threadUpdateStatuses);\n\n/** The default status applied when an update omits one. */\nexport const DEFAULT_THREAD_UPDATE_STATUS: ThreadUpdateStatus = \"info\";\n\n/** Shared shape for a thread update (standalone and at task creation). */\nexport const threadUpdateInputSchema = z.object({\n  message: threadUpdateMessageSchema,\n  status: threadUpdateStatusSchema.optional(),\n});\n\n/** Thread priority levels for inbox ordering and display. */\nexport const taskPriorities = [\"low\", \"normal\", \"high\", \"urgent\"] as const;\n\nexport const taskPrioritySchema = z.enum(taskPriorities);\n\nexport type TaskPriority = (typeof taskPriorities)[number];\n\nexport const DEFAULT_TASK_PRIORITY: TaskPriority = \"normal\";\n\nexport const LOWEST_TASK_PRIORITY: TaskPriority = \"low\";\n\nexport const TASK_PRIORITY_RANK: Record<TaskPriority, number> = {\n  low: 1,\n  normal: 2,\n  high: 3,\n  urgent: 4,\n};\n\nexport const agentTelemetrySchema = z.object({\n  version: z.string().min(1),\n});\n\nexport const createTaskBodySchema = taskContextObjectBaseSchema\n  .extend({\n    assignTo: assignToSchema.optional(),\n    /**\n     * Groups related tasks together. When omitted, the server generates one and\n     * returns it so the caller can reuse it on later tasks in the same thread.\n     */\n    threadId: z.string().min(1).optional(),\n    /**\n     * Optional thread priority. When set, applies to the whole thread and\n     * overwrites any previous priority. Omit on later tasks to leave unchanged.\n     */\n    priority: taskPrioritySchema.optional(),\n    /**\n     * Optional initial status update logged against the task's thread. Shows in\n     * the inbox status bar and the thread update log.\n     */\n    update: threadUpdateInputSchema.optional(),\n    agent: agentTelemetrySchema.optional(),\n  })\n  .transform(normalizeTaskContextVersion)\n  .superRefine(refineContextPublicUrls);\n\n/** POST /v1/threads/:threadId/updates body: a standalone thread update. */\nexport const threadUpdateBodySchema = threadUpdateInputSchema;\n\n/** Where a thread update originated. */\nexport type ThreadUpdateSource = \"api\" | \"task_create\" | \"dashboard\";\n\n/** Lifecycle status carried by a thread update. */\nexport type ThreadUpdateStatus = (typeof threadUpdateStatuses)[number];\n\n/** A logged thread update as returned by the API. */\nexport interface ThreadUpdate {\n  id: string;\n  threadId: string;\n  message: string;\n  status: ThreadUpdateStatus;\n  source: ThreadUpdateSource;\n  createdAt: number;\n}\n\nexport type AssignToInput = z.infer<typeof assignToSchema>;\nexport type CreateTaskBodyInput = z.input<typeof createTaskBodySchema>;\nexport type CreateTaskBody = z.output<typeof createTaskBodySchema>;\nexport type ThreadUpdateBodyInput = z.input<typeof threadUpdateBodySchema>;\nexport type ThreadUpdateBody = z.output<typeof threadUpdateBodySchema>;\nexport type ThreadUpdateInput = z.input<typeof threadUpdateInputSchema>;\nexport type TaskContextInput = z.input<typeof taskContextSchema>;\nexport type TaskContextOutput = z.output<typeof taskContextSchema>;\nexport type TaskContext = TaskContextOutput;\nexport type TaskActionInput = z.infer<typeof taskActionInputSchema>;\nexport type TaskAction = z.infer<typeof taskActionSchema>;\nexport type WebhookHandler = z.infer<typeof webhookHandlerSchema>;\nexport type TriggerHandler = z.infer<typeof triggerHandlerSchema>;\nexport type Handler = z.infer<typeof handlerSchema>;\nexport type AgentTelemetry = z.infer<typeof agentTelemetrySchema>;\nexport type AgentTelemetryInput = z.input<typeof agentTelemetrySchema>;\n\ntype InferObjectProperties<\n  Props,\n  Req extends PropertyKey,\n> = Props extends Record<string, unknown>\n  ? ({\n      [K in keyof Props as K extends Req ? K : never]-?: InferJsonSchema7<Props[K]>;\n    } & {\n      [K in keyof Props as K extends Req ? never : K]?: InferJsonSchema7<Props[K]>;\n    } extends infer O\n      ? { [K in keyof O]: O[K] }\n      : never)\n  : Record<string, unknown>;\n\ntype RequiredKeys<S> =\n  S extends { readonly required: readonly string[] } ? S[\"required\"][number] : never;\n\nexport type InferJsonSchema7<S> = [S] extends [undefined]\n  ? Record<string, never>\n  : S extends { readonly const: infer C }\n    ? C\n    : S extends {\n          readonly enum: readonly (infer E)[];\n        }\n      ? E\n      : S extends {\n            readonly type: \"object\";\n            readonly properties?: infer Props;\n          }\n        ? InferObjectProperties<Props, RequiredKeys<S>>\n        : S extends {\n              readonly type: \"object\";\n              readonly properties?: undefined;\n            }\n          ? Record<string, unknown>\n          : S extends {\n                readonly type: \"array\";\n                readonly items?: infer Items;\n              }\n            ? Items extends readonly unknown[]\n              ? InferJsonSchema7<Items[number]>[]\n              : Items extends object\n                ? InferJsonSchema7<Items>[]\n                : unknown[]\n            : S extends { readonly type: \"string\" }\n              ? string\n              : S extends { readonly type: \"number\" } | { readonly type: \"integer\" }\n                ? number\n                : S extends { readonly type: \"boolean\" }\n                  ? boolean\n                  : unknown;\n\nexport type TaskStatus = \"pending\" | \"open\" | \"handled\" | \"expired\";\n\nexport interface TaskResponse {\n  success: boolean;\n  task: {\n    taskId: string;\n    threadId: string;\n    status: \"pending\" | \"open\";\n    context: TaskContext;\n    validUntil: string;\n    submittedAt: string;\n  };\n  message: string;\n}\n\nexport interface ThreadUpdateResponse {\n  success: boolean;\n  update: ThreadUpdate;\n  message: string;\n}\n\nexport interface Task {\n  id: string;\n  threadId?: string;\n  createdAt: Date;\n  status: TaskStatus;\n  context: TaskContext;\n  validUntil: number;\n  handledAt?: number;\n  handled?: {\n    action: {\n      id: string;\n      data: unknown;\n    };\n    handledBy?: string;\n    userId?: string;\n    token?: string;\n  };\n}\n\nexport type InferActionData<T extends { schema?: unknown }> = [\n  Exclude<T[\"schema\"], undefined>,\n] extends [\n  never,\n]\n  ? Record<string, never>\n  : Exclude<T[\"schema\"], undefined> extends infer S\n    ? InferJsonSchema7<S>\n    : Record<string, never>;\n\nexport type TupleElementIndices<T extends readonly unknown[]> = T extends readonly [\n  unknown,\n  ...unknown[],\n]\n  ? Exclude<keyof T, keyof unknown[]>\n  : number;\n\nexport interface TaskResult<T = Record<string, unknown>> {\n  actionId: string;\n  data: T;\n  handledBy?: string;\n  handledAt: Date;\n}\n\nexport interface ApprovalResult<T = Record<string, unknown>> extends TaskResult<T> {\n  taskId: string;\n}\n\nexport type DiscriminatedApprovalResult<\n  TActions extends readonly { id: string; schema?: unknown }[],\n> = {\n  [I in TupleElementIndices<TActions>]: TActions[I] extends { id: string; schema?: unknown }\n    ? Omit<ApprovalResult<InferActionData<TActions[I]>>, \"actionId\" | \"data\"> & {\n        actionId: TActions[I][\"id\"];\n        data: InferActionData<TActions[I]>;\n      }\n    : never\n}[TupleElementIndices<TActions>];\n","const BLOCKED_HOSTNAMES = new Set([\n  \"localhost\",\n  \"metadata.google.internal\",\n  \"metadata.goog\",\n]);\n\nfunction normalizeHostname(hostname: string): string {\n  return hostname.toLowerCase().replace(/^\\[|\\]$/g, \"\");\n}\n\nfunction isBlockedIpv4(host: string): boolean {\n  const match = /^(\\d{1,3})\\.(\\d{1,3})\\.(\\d{1,3})\\.(\\d{1,3})$/.exec(host);\n  if (!match) {\n    return false;\n  }\n\n  const octets = match.slice(1, 5).map((part) => Number(part));\n  if (octets.some((octet) => Number.isNaN(octet) || octet < 0 || octet > 255)) {\n    return true;\n  }\n\n  const [a, b, _c, _d] = octets;\n  if (a === undefined || b === undefined) {\n    return true;\n  }\n  if (a === 127 || a === 0) return true;\n  if (a === 10) return true;\n  if (a === 169 && b === 254) return true;\n  if (a === 192 && b === 168) return true;\n  if (a === 172 && b >= 16 && b <= 31) return true;\n  if (a === 100 && b >= 64 && b <= 127) return true;\n\n  return false;\n}\n\nfunction ipv4FromNumericHost(host: string): string | null {\n  if (/^\\d+$/.test(host)) {\n    const num = Number(host);\n    if (!Number.isFinite(num) || num < 0 || num > 0xffffffff) {\n      return null;\n    }\n    const a = (num >>> 24) & 0xff;\n    const b = (num >>> 16) & 0xff;\n    const c = (num >>> 8) & 0xff;\n    const d = num & 0xff;\n    return `${a}.${b}.${c}.${d}`;\n  }\n\n  const hexMatch = /^0x([0-9a-f]{1,8})$/i.exec(host);\n  if (hexMatch) {\n    const num = Number.parseInt(hexMatch[1]!, 16);\n    if (!Number.isFinite(num) || num < 0 || num > 0xffffffff) {\n      return null;\n    }\n    const a = (num >>> 24) & 0xff;\n    const b = (num >>> 16) & 0xff;\n    const c = (num >>> 8) & 0xff;\n    const d = num & 0xff;\n    return `${a}.${b}.${c}.${d}`;\n  }\n\n  return null;\n}\n\nfunction isBlockedIpv4Mapped(host: string): boolean {\n  const mappedDotted = /^::ffff:(\\d{1,3}(?:\\.\\d{1,3}){3})$/i.exec(host);\n  if (mappedDotted) {\n    return isBlockedIpv4(mappedDotted[1]!);\n  }\n\n  const mappedHex = /^::ffff:([0-9a-f]{1,4}):([0-9a-f]{1,4})$/i.exec(host);\n  if (mappedHex) {\n    const high = Number.parseInt(mappedHex[1]!, 16);\n    const low = Number.parseInt(mappedHex[2]!, 16);\n    if (Number.isFinite(high) && Number.isFinite(low)) {\n      const a = (high >> 8) & 0xff;\n      const b = high & 0xff;\n      const c = (low >> 8) & 0xff;\n      const d = low & 0xff;\n      return isBlockedIpv4(`${a}.${b}.${c}.${d}`);\n    }\n  }\n\n  return false;\n}\n\nfunction isBlockedIpv6(host: string): boolean {\n  if (host === \"::1\" || host === \"0:0:0:0:0:0:0:1\") {\n    return true;\n  }\n  if (host.startsWith(\"fc\") || host.startsWith(\"fd\")) {\n    return true;\n  }\n  if (host.startsWith(\"fe80:\")) {\n    return true;\n  }\n  if (isBlockedIpv4Mapped(host)) {\n    return true;\n  }\n  return false;\n}\n\nfunction isBlockedHostname(hostname: string): boolean {\n  const host = normalizeHostname(hostname);\n  if (!host) {\n    return true;\n  }\n  if (BLOCKED_HOSTNAMES.has(host)) {\n    return true;\n  }\n  if (host.endsWith(\".localhost\") || host.endsWith(\".local\")) {\n    return true;\n  }\n\n  const numericIpv4 = ipv4FromNumericHost(host);\n  if (numericIpv4 && isBlockedIpv4(numericIpv4)) {\n    return true;\n  }\n\n  return isBlockedIpv4(host) || isBlockedIpv6(host);\n}\n\n/**\n * Returns true when the URL uses http(s) and targets a public, non-reserved host.\n */\nexport function isPublicHttpUrl(urlString: string): boolean {\n  let url: URL;\n  try {\n    url = new URL(urlString);\n  } catch {\n    return false;\n  }\n\n  if (url.protocol !== \"http:\" && url.protocol !== \"https:\") {\n    return false;\n  }\n  if (url.username || url.password) {\n    return false;\n  }\n\n  return !isBlockedHostname(url.hostname);\n}\n\nexport const PUBLIC_HTTP_URL_ERROR =\n  \"URL must be a public http:// or https:// address\";\n\nconst FORBIDDEN_HANDLER_HEADERS = new Set([\n  \"host\",\n  \"connection\",\n  \"content-length\",\n  \"transfer-encoding\",\n  \"te\",\n  \"trailer\",\n  \"upgrade\",\n  \"proxy-authorization\",\n  \"proxy-connection\",\n  \"keep-alive\",\n  \"x-robotrock-signature\",\n  \"x-robotrock-delivery-id\",\n  \"x-robotrock-delivery-attempt\",\n]);\n\n/**\n * Allow only safe custom webhook headers; blocks overrides of delivery metadata.\n */\nexport function filterHandlerHeaders(\n  headers: Record<string, string> | undefined\n): Record<string, string> {\n  if (!headers) {\n    return {};\n  }\n\n  const filtered: Record<string, string> = {};\n  for (const [rawKey, value] of Object.entries(headers)) {\n    const key = rawKey.toLowerCase().trim();\n    if (!key || FORBIDDEN_HANDLER_HEADERS.has(key)) {\n      continue;\n    }\n    if (!/^[a-z0-9][a-z0-9._-]*$/.test(key)) {\n      continue;\n    }\n    filtered[key] = value;\n  }\n  return filtered;\n}\n","import { z } from \"zod\";\nimport { isPublicHttpUrl, PUBLIC_HTTP_URL_ERROR } from \"../utils/safe-url\";\nimport { validateContextPublicUrls } from \"./context-urls\";\nimport type { JSONSchema7 } from \"./json-schema\";\n\n/**\n * Extended JSONSchema7 type that includes RJSF extensions like enumNames\n */\nexport type ExtendedJSONSchema7 = JSONSchema7 & {\n  enumNames?: string[];\n  [key: string]: unknown;\n};\n\n/**\n * UI Schema for RJSF form customization\n */\nexport type UiSchema = {\n  \"ui:widget\"?: string;\n  \"ui:title\"?: string;\n  \"ui:description\"?: string;\n  \"ui:placeholder\"?: string;\n  \"ui:options\"?: Record<string, unknown>;\n  [key: string]: unknown;\n};\n\n// Helper schemas\nconst safeUrlSchema = z.string().refine((url) => isPublicHttpUrl(url), {\n  message: PUBLIC_HTTP_URL_ERROR,\n});\n\n// JSONSchema7 validation\nconst jsonSchema7Schema = z.custom<ExtendedJSONSchema7>(\n  (val) => typeof val === \"object\" && val !== null,\n  { message: \"Must be a valid JSON Schema object\" }\n);\n\n// UiSchema validation\nconst uiSchemaSchema = z.custom<UiSchema>((val) => typeof val === \"object\" && val !== null, {\n  message: \"Must be a valid UiSchema object\",\n});\n\n// Handler schemas (per-action handlers for webhooks, triggers, etc.)\nconst webhookHandlerSchema = z.object({\n  type: z.literal(\"webhook\"),\n  url: safeUrlSchema,\n  headers: z.record(z.string(), z.string()),\n});\n\nconst triggerHandlerSchema = webhookHandlerSchema.extend({\n  type: z.literal(\"trigger\"),\n  tokenId: z.string().min(1),\n});\n\nconst handlerSchema = z.discriminatedUnion(\"type\", [webhookHandlerSchema, triggerHandlerSchema]);\n\n/** Action config without handlers — used for chat widgets and agent tool input. */\nexport const taskActionInputSchema = z.object({\n  id: z.string().min(1),\n  title: z.string().min(1),\n  description: z.string().optional(),\n  schema: jsonSchema7Schema.optional(),\n  ui: uiSchemaSchema.optional(),\n  data: z.record(z.string(), z.unknown()).optional(),\n});\n\n// Action schema with JSONSchema-based feedback and optional handlers\nconst taskActionSchema = taskActionInputSchema.extend({\n  // Optional handlers for this action - if present, must have at least 1\n  handlers: z.array(handlerSchema).min(1).optional(),\n});\n\n// UI Field Schema\nconst uiFieldSchemaSchema: z.ZodType<Record<string, unknown>> = z\n  .object({\n    \"ui:widget\": z.string().optional(),\n    \"ui:title\": z.string().optional(),\n    \"ui:description\": z.string().optional(),\n    \"ui:options\": z.record(z.string(), z.unknown()).optional(),\n    items: z.lazy(() => z.record(z.string(), uiFieldSchemaSchema)).optional(),\n  })\n  .passthrough();\n\n// Context UI Schema\nconst contextUiSchema = z.record(z.string(), uiFieldSchemaSchema).optional();\n\n// Context data schema\nconst contextDataSchema = z\n  .object({\n    data: z.record(z.string(), z.unknown()),\n    ui: contextUiSchema,\n  })\n  .optional();\n\nexport const TASK_CONTEXT_FORMAT_VERSION = 2 as const;\nexport type TaskContextFormatVersion = typeof TASK_CONTEXT_FORMAT_VERSION;\n\n// Main TaskContext schema\nconst taskContextObjectBaseSchema = z.object({\n  /** Source application id; omitted tasks are grouped in the default inbox. */\n  app: z.string().min(1).optional(),\n  type: z.string().min(1),\n  name: z.string().min(1),\n  description: z.string().optional(),\n  validUntil: z.string().optional(),\n  context: contextDataSchema,\n  /** Task context wire format version. @default 2 */\n  contextVersion: z.literal(2).optional(),\n  /** @deprecated Use `contextVersion`. Accepted on ingest only. */\n  version: z.literal(2).optional(),\n  actions: z.array(taskActionSchema).min(1, \"At least one action is required\"),\n});\n\nfunction normalizeTaskContextVersion<T extends { contextVersion?: 2; version?: 2 }>(\n  data: T\n): Omit<T, \"version\" | \"contextVersion\"> & { contextVersion: 2 } {\n  const { version: legacyVersion, contextVersion, ...rest } = data;\n  return {\n    ...rest,\n    contextVersion: contextVersion ?? legacyVersion ?? TASK_CONTEXT_FORMAT_VERSION,\n  };\n}\n\nconst taskContextObjectSchema = taskContextObjectBaseSchema.transform(\n  normalizeTaskContextVersion\n);\n\nfunction refineContextPublicUrls<T extends { context?: z.infer<typeof contextDataSchema> }>(\n  data: T,\n  ctx: z.RefinementCtx\n) {\n  const error = validateContextPublicUrls(data.context);\n  if (error) {\n    ctx.addIssue({\n      code: z.ZodIssueCode.custom,\n      message: error,\n      path: [\"context\"],\n    });\n  }\n}\n\nexport const taskContextSchema = taskContextObjectSchema.superRefine(\n  refineContextPublicUrls\n);\n\n/**\n * Assignment targets at task create (not stored in task context JSON).\n * Unknown user emails are auto-provisioned as assignee memberships (count toward seat limits).\n */\nexport const assignToSchema = z\n  .object({\n    users: z.array(z.string().email()).optional(),\n    groups: z.array(z.string().min(1)).optional(),\n  })\n  .refine(\n    (data) => {\n      const groups = data.groups ?? [];\n      if (groups.includes(\"all\") && groups.length > 1) {\n        return false;\n      }\n      return true;\n    },\n    { message: 'Cannot combine \"all\" with other group slugs' }\n  );\n\n/** A short thread-scoped status update message (1-2 sentences). */\nexport const threadUpdateMessageSchema = z.string().min(1).max(500);\n\n/**\n * Lifecycle status carried by a thread update. Drives the icon and color shown\n * in the inbox status bar. Defaults to `info` when omitted.\n */\nexport const threadUpdateStatuses = [\n  \"info\",\n  \"queued\",\n  \"running\",\n  \"waiting\",\n  \"succeeded\",\n  \"failed\",\n  \"cancelled\",\n] as const;\n\nexport const threadUpdateStatusSchema = z.enum(threadUpdateStatuses);\n\n/** The default status applied when an update omits one. */\nexport const DEFAULT_THREAD_UPDATE_STATUS: ThreadUpdateStatus = \"info\";\n\n/** Shared shape for a thread update (standalone and at task creation). */\nexport const threadUpdateInputSchema = z.object({\n  message: threadUpdateMessageSchema,\n  status: threadUpdateStatusSchema.optional(),\n});\n\n/** Thread priority levels for inbox ordering and display. */\nexport const taskPriorities = [\"low\", \"normal\", \"high\", \"urgent\"] as const;\n\nexport const taskPrioritySchema = z.enum(taskPriorities);\n\nexport type TaskPriority = (typeof taskPriorities)[number];\n\nexport const DEFAULT_TASK_PRIORITY: TaskPriority = \"normal\";\n\nexport const LOWEST_TASK_PRIORITY: TaskPriority = \"low\";\n\nexport const TASK_PRIORITY_RANK: Record<TaskPriority, number> = {\n  low: 1,\n  normal: 2,\n  high: 3,\n  urgent: 4,\n};\n\n/**\n * Agent release at task create (not shown in inbox reviewer UI).\n * Used for feedback analysis over deploys.\n */\nexport const agentTelemetrySchema = z.object({\n  /** Agent or app version (semver, git SHA, deploy tag — caller-defined). */\n  version: z.string().min(1),\n});\n\n/** POST /v1 body: task context plus optional assignment. */\nexport const createTaskBodySchema = taskContextObjectBaseSchema\n  .extend({\n    assignTo: assignToSchema.optional(),\n    /**\n     * Groups related tasks together. When omitted, the server generates one and\n     * returns it so the caller can reuse it on later tasks in the same thread.\n     */\n    threadId: z.string().min(1).optional(),\n    /**\n     * Optional thread priority. When set, applies to the whole thread and\n     * overwrites any previous priority. Omit on later tasks to leave unchanged.\n     */\n    priority: taskPrioritySchema.optional(),\n    /**\n     * Optional initial status update logged against the task's thread. Shows in\n     * the inbox status bar and the thread update log.\n     */\n    update: threadUpdateInputSchema.optional(),\n    /** Agent release version — not shown in inbox UI. */\n    agent: agentTelemetrySchema.optional(),\n  })\n  .transform(normalizeTaskContextVersion)\n  .superRefine(refineContextPublicUrls);\n\n/** POST /v1/threads/:threadId/updates body: a standalone thread update. */\nexport const threadUpdateBodySchema = threadUpdateInputSchema;\n\n/** Action widget config for a seeded assistant message (mirrors the `requestActionInput` tool input). */\nexport const agentChatSeedActionSchema = z.object({\n  /** Stable action id echoed back on submit; auto-derived from title when omitted. */\n  id: z.string().min(1).optional(),\n  title: z.string().min(1),\n  description: z.string().optional(),\n  /** JSON Schema object for the form fields. */\n  schema: z.record(z.string(), z.unknown()).optional(),\n  /** RJSF ui schema overrides (ui:widget, ui:enumNames, etc.). */\n  ui: z.record(z.string(), z.unknown()).optional(),\n  /** Optional default field values. */\n  data: z.record(z.string(), z.unknown()).optional(),\n});\n\n/** A single pre-seeded chat message injected into a programmatic agent chat. */\nexport const agentChatSeedMessageSchema = z.object({\n  role: z.enum([\"user\", \"assistant\"]),\n  text: z.string().min(1),\n  /** Optional display-name override for the message sender. */\n  senderName: z.string().min(1).optional(),\n  /**\n   * Optional structured input request rendered as a styled RobotRock action\n   * widget below the message text. Use this instead of asking the user to reply\n   * in plain text so the request is always a proper action form.\n   */\n  requestActionInput: z\n    .object({\n      prompt: z.string().optional(),\n      action: agentChatSeedActionSchema,\n    })\n    .optional(),\n});\n\n/**\n * POST /v1/agent-chats body: create + assign one or more agent chat sessions.\n * Either `agentIdentifier` (new chat) or `parentChatId` (spawned from a chat) is required.\n */\nexport const createAgentChatBodySchema = z\n  .object({\n    /** Trigger chat agent id (task slug). Required unless `parentChatId` is set. */\n    agentIdentifier: z.string().min(1).optional(),\n    /** Inherit tenant/connection/agent from an existing chat (agent-spawned chats). */\n    parentChatId: z.string().min(1).optional(),\n    /** Convex tenantTriggerConnections id; resolved from the tenant when omitted. */\n    connectionId: z.string().min(1).optional(),\n    /** Source application id; groups the chat under an inbox section. */\n    app: z.string().min(1).optional(),\n    assignTo: assignToSchema.optional(),\n    title: z.string().min(1),\n    messages: z.array(agentChatSeedMessageSchema).default([]),\n    /** Provenance label stored on the session (\"cron\" | \"agent\" | ...). */\n    source: z.string().min(1).optional(),\n  })\n  .refine((data) => Boolean(data.agentIdentifier || data.parentChatId), {\n    message: \"Provide either agentIdentifier or parentChatId\",\n  });\n\n/** POST /v1/agent-chats/transport body: store a backend-minted public token. */\nexport const agentChatTransportBodySchema = z.object({\n  chatId: z.string().min(1),\n  publicAccessToken: z.string().min(1),\n  lastEventId: z.string().optional(),\n  isStreaming: z.boolean().optional(),\n});\n\n/** Where a thread update originated. */\nexport type ThreadUpdateSource = \"api\" | \"task_create\" | \"dashboard\";\n\n/** Lifecycle status carried by a thread update. */\nexport type ThreadUpdateStatus = (typeof threadUpdateStatuses)[number];\n\n/** A logged thread update as returned by the API. */\nexport interface ThreadUpdate {\n  id: string;\n  threadId: string;\n  message: string;\n  status: ThreadUpdateStatus;\n  source: ThreadUpdateSource;\n  createdAt: number;\n}\n\n// Type exports\nexport type AssignToInput = z.infer<typeof assignToSchema>;\nexport type CreateTaskBodyInput = z.input<typeof createTaskBodySchema>;\nexport type CreateTaskBody = z.output<typeof createTaskBodySchema>;\nexport type ThreadUpdateBodyInput = z.input<typeof threadUpdateBodySchema>;\nexport type ThreadUpdateBody = z.output<typeof threadUpdateBodySchema>;\nexport type ThreadUpdateInput = z.input<typeof threadUpdateInputSchema>;\nexport type AgentChatSeedAction = z.output<typeof agentChatSeedActionSchema>;\nexport type AgentChatSeedMessage = z.output<typeof agentChatSeedMessageSchema>;\nexport type CreateAgentChatBodyInput = z.input<typeof createAgentChatBodySchema>;\nexport type CreateAgentChatBody = z.output<typeof createAgentChatBodySchema>;\nexport type AgentChatTransportBody = z.output<typeof agentChatTransportBodySchema>;\nexport type TaskContextInput = z.input<typeof taskContextSchema>;\nexport type TaskContextOutput = z.output<typeof taskContextSchema>;\nexport type TaskContext = TaskContextOutput;\nexport type SafeUrl = z.infer<typeof safeUrlSchema>;\nexport type TaskActionInput = z.infer<typeof taskActionInputSchema>;\nexport type TaskAction = z.infer<typeof taskActionSchema>;\nexport type WebhookHandler = z.infer<typeof webhookHandlerSchema>;\nexport type TriggerHandler = z.infer<typeof triggerHandlerSchema>;\nexport type Handler = z.infer<typeof handlerSchema>;\nexport type ContextData = z.infer<typeof contextDataSchema>;\nexport type ContextUiSchema = z.infer<typeof contextUiSchema>;\nexport type UiFieldSchema = z.infer<typeof uiFieldSchemaSchema>;\nexport type AgentTelemetry = z.infer<typeof agentTelemetrySchema>;\nexport type AgentTelemetryInput = z.input<typeof agentTelemetrySchema>;\n","import { isPublicHttpUrl, PUBLIC_HTTP_URL_ERROR } from \"../utils/safe-url\";\n\ntype ContextInput = {\n  data?: Record<string, unknown>;\n  ui?: Record<string, unknown>;\n};\n\nfunction resolveLinkUrl(value: string): string {\n  return value.startsWith(\"http://\") || value.startsWith(\"https://\")\n    ? value\n    : `https://${value}`;\n}\n\nfunction widgetType(\n  ui: Record<string, unknown> | undefined,\n  field: string\n): string | undefined {\n  const fieldUi = ui?.[field];\n  if (typeof fieldUi !== \"object\" || fieldUi === null) {\n    return undefined;\n  }\n  const widget = (fieldUi as Record<string, unknown>)[\"ui:widget\"];\n  return typeof widget === \"string\" ? widget : undefined;\n}\n\nfunction validateUrlValue(value: unknown, widget: string): string | null {\n  if (widget === \"image\" || widget === \"link\") {\n    if (typeof value !== \"string\") {\n      return PUBLIC_HTTP_URL_ERROR;\n    }\n    const url = widget === \"link\" ? resolveLinkUrl(value) : value;\n    if (!isPublicHttpUrl(url)) {\n      return PUBLIC_HTTP_URL_ERROR;\n    }\n    return null;\n  }\n\n  if (widget === \"attachments\" && Array.isArray(value)) {\n    for (const item of value) {\n      if (typeof item !== \"object\" || item === null) {\n        continue;\n      }\n      const url = (item as { url?: unknown }).url;\n      if (typeof url === \"string\" && !isPublicHttpUrl(resolveLinkUrl(url))) {\n        return PUBLIC_HTTP_URL_ERROR;\n      }\n    }\n  }\n\n  return null;\n}\n\n/**\n * Validates URL-bearing context widget values (image, link, attachments).\n * Returns an error message or null when valid.\n */\nexport function validateContextPublicUrls(\n  context: ContextInput | undefined\n): string | null {\n  if (!context?.data) {\n    return null;\n  }\n\n  for (const [field, value] of Object.entries(context.data)) {\n    const widget = widgetType(context.ui, field);\n    if (!widget) {\n      continue;\n    }\n    const error = validateUrlValue(value, widget);\n    if (error) {\n      return `context.data.${field}: ${error}`;\n    }\n  }\n\n  return null;\n}\n"],"mappings":";AAAA,SAAS,KAAAA,UAAS;;;ACAlB,IAAM,oBAAoB,oBAAI,IAAI;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,SAAS,kBAAkB,UAA0B;AACnD,SAAO,SAAS,YAAY,EAAE,QAAQ,YAAY,EAAE;AACtD;AAEA,SAAS,cAAc,MAAuB;AAC5C,QAAM,QAAQ,+CAA+C,KAAK,IAAI;AACtE,MAAI,CAAC,OAAO;AACV,WAAO;AAAA,EACT;AAEA,QAAM,SAAS,MAAM,MAAM,GAAG,CAAC,EAAE,IAAI,CAAC,SAAS,OAAO,IAAI,CAAC;AAC3D,MAAI,OAAO,KAAK,CAAC,UAAU,OAAO,MAAM,KAAK,KAAK,QAAQ,KAAK,QAAQ,GAAG,GAAG;AAC3E,WAAO;AAAA,EACT;AAEA,QAAM,CAAC,GAAG,GAAG,IAAI,EAAE,IAAI;AACvB,MAAI,MAAM,UAAa,MAAM,QAAW;AACtC,WAAO;AAAA,EACT;AACA,MAAI,MAAM,OAAO,MAAM,EAAG,QAAO;AACjC,MAAI,MAAM,GAAI,QAAO;AACrB,MAAI,MAAM,OAAO,MAAM,IAAK,QAAO;AACnC,MAAI,MAAM,OAAO,MAAM,IAAK,QAAO;AACnC,MAAI,MAAM,OAAO,KAAK,MAAM,KAAK,GAAI,QAAO;AAC5C,MAAI,MAAM,OAAO,KAAK,MAAM,KAAK,IAAK,QAAO;AAE7C,SAAO;AACT;AAEA,SAAS,oBAAoB,MAA6B;AACxD,MAAI,QAAQ,KAAK,IAAI,GAAG;AACtB,UAAM,MAAM,OAAO,IAAI;AACvB,QAAI,CAAC,OAAO,SAAS,GAAG,KAAK,MAAM,KAAK,MAAM,YAAY;AACxD,aAAO;AAAA,IACT;AACA,UAAM,IAAK,QAAQ,KAAM;AACzB,UAAM,IAAK,QAAQ,KAAM;AACzB,UAAM,IAAK,QAAQ,IAAK;AACxB,UAAM,IAAI,MAAM;AAChB,WAAO,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AAAA,EAC5B;AAEA,QAAM,WAAW,uBAAuB,KAAK,IAAI;AACjD,MAAI,UAAU;AACZ,UAAM,MAAM,OAAO,SAAS,SAAS,CAAC,GAAI,EAAE;AAC5C,QAAI,CAAC,OAAO,SAAS,GAAG,KAAK,MAAM,KAAK,MAAM,YAAY;AACxD,aAAO;AAAA,IACT;AACA,UAAM,IAAK,QAAQ,KAAM;AACzB,UAAM,IAAK,QAAQ,KAAM;AACzB,UAAM,IAAK,QAAQ,IAAK;AACxB,UAAM,IAAI,MAAM;AAChB,WAAO,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AAAA,EAC5B;AAEA,SAAO;AACT;AAEA,SAAS,oBAAoB,MAAuB;AAClD,QAAM,eAAe,sCAAsC,KAAK,IAAI;AACpE,MAAI,cAAc;AAChB,WAAO,cAAc,aAAa,CAAC,CAAE;AAAA,EACvC;AAEA,QAAM,YAAY,4CAA4C,KAAK,IAAI;AACvE,MAAI,WAAW;AACb,UAAM,OAAO,OAAO,SAAS,UAAU,CAAC,GAAI,EAAE;AAC9C,UAAM,MAAM,OAAO,SAAS,UAAU,CAAC,GAAI,EAAE;AAC7C,QAAI,OAAO,SAAS,IAAI,KAAK,OAAO,SAAS,GAAG,GAAG;AACjD,YAAM,IAAK,QAAQ,IAAK;AACxB,YAAM,IAAI,OAAO;AACjB,YAAM,IAAK,OAAO,IAAK;AACvB,YAAM,IAAI,MAAM;AAChB,aAAO,cAAc,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;AAAA,IAC5C;AAAA,EACF;AAEA,SAAO;AACT;AAEA,SAAS,cAAc,MAAuB;AAC5C,MAAI,SAAS,SAAS,SAAS,mBAAmB;AAChD,WAAO;AAAA,EACT;AACA,MAAI,KAAK,WAAW,IAAI,KAAK,KAAK,WAAW,IAAI,GAAG;AAClD,WAAO;AAAA,EACT;AACA,MAAI,KAAK,WAAW,OAAO,GAAG;AAC5B,WAAO;AAAA,EACT;AACA,MAAI,oBAAoB,IAAI,GAAG;AAC7B,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,SAAS,kBAAkB,UAA2B;AACpD,QAAM,OAAO,kBAAkB,QAAQ;AACvC,MAAI,CAAC,MAAM;AACT,WAAO;AAAA,EACT;AACA,MAAI,kBAAkB,IAAI,IAAI,GAAG;AAC/B,WAAO;AAAA,EACT;AACA,MAAI,KAAK,SAAS,YAAY,KAAK,KAAK,SAAS,QAAQ,GAAG;AAC1D,WAAO;AAAA,EACT;AAEA,QAAM,cAAc,oBAAoB,IAAI;AAC5C,MAAI,eAAe,cAAc,WAAW,GAAG;AAC7C,WAAO;AAAA,EACT;AAEA,SAAO,cAAc,IAAI,KAAK,cAAc,IAAI;AAClD;AAKO,SAAS,gBAAgB,WAA4B;AAC1D,MAAI;AACJ,MAAI;AACF,UAAM,IAAI,IAAI,SAAS;AAAA,EACzB,QAAQ;AACN,WAAO;AAAA,EACT;AAEA,MAAI,IAAI,aAAa,WAAW,IAAI,aAAa,UAAU;AACzD,WAAO;AAAA,EACT;AACA,MAAI,IAAI,YAAY,IAAI,UAAU;AAChC,WAAO;AAAA,EACT;AAEA,SAAO,CAAC,kBAAkB,IAAI,QAAQ;AACxC;AAEO,IAAM,wBACX;;;AChJF,SAAS,SAAS;;;ACOlB,SAAS,eAAe,OAAuB;AAC7C,SAAO,MAAM,WAAW,SAAS,KAAK,MAAM,WAAW,UAAU,IAC7D,QACA,WAAW,KAAK;AACtB;AAEA,SAAS,WACP,IACA,OACoB;AACpB,QAAM,UAAU,KAAK,KAAK;AAC1B,MAAI,OAAO,YAAY,YAAY,YAAY,MAAM;AACnD,WAAO;AAAA,EACT;AACA,QAAM,SAAU,QAAoC,WAAW;AAC/D,SAAO,OAAO,WAAW,WAAW,SAAS;AAC/C;AAEA,SAAS,iBAAiB,OAAgB,QAA+B;AACvE,MAAI,WAAW,WAAW,WAAW,QAAQ;AAC3C,QAAI,OAAO,UAAU,UAAU;AAC7B,aAAO;AAAA,IACT;AACA,UAAM,MAAM,WAAW,SAAS,eAAe,KAAK,IAAI;AACxD,QAAI,CAAC,gBAAgB,GAAG,GAAG;AACzB,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT;AAEA,MAAI,WAAW,iBAAiB,MAAM,QAAQ,KAAK,GAAG;AACpD,eAAW,QAAQ,OAAO;AACxB,UAAI,OAAO,SAAS,YAAY,SAAS,MAAM;AAC7C;AAAA,MACF;AACA,YAAM,MAAO,KAA2B;AACxC,UAAI,OAAO,QAAQ,YAAY,CAAC,gBAAgB,eAAe,GAAG,CAAC,GAAG;AACpE,eAAO;AAAA,MACT;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;AAMO,SAAS,0BACd,SACe;AACf,MAAI,CAAC,SAAS,MAAM;AAClB,WAAO;AAAA,EACT;AAEA,aAAW,CAAC,OAAO,KAAK,KAAK,OAAO,QAAQ,QAAQ,IAAI,GAAG;AACzD,UAAM,SAAS,WAAW,QAAQ,IAAI,KAAK;AAC3C,QAAI,CAAC,QAAQ;AACX;AAAA,IACF;AACA,UAAM,QAAQ,iBAAiB,OAAO,MAAM;AAC5C,QAAI,OAAO;AACT,aAAO,gBAAgB,KAAK,KAAK,KAAK;AAAA,IACxC;AAAA,EACF;AAEA,SAAO;AACT;;;ADjDA,IAAM,gBAAgB,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,gBAAgB,GAAG,GAAG;AAAA,EACrE,SAAS;AACX,CAAC;AAGD,IAAM,oBAAoB,EAAE;AAAA,EAC1B,CAAC,QAAQ,OAAO,QAAQ,YAAY,QAAQ;AAAA,EAC5C,EAAE,SAAS,qCAAqC;AAClD;AAGA,IAAM,iBAAiB,EAAE,OAAiB,CAAC,QAAQ,OAAO,QAAQ,YAAY,QAAQ,MAAM;AAAA,EAC1F,SAAS;AACX,CAAC;AAGD,IAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,MAAM,EAAE,QAAQ,SAAS;AAAA,EACzB,KAAK;AAAA,EACL,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC;AAC1C,CAAC;AAED,IAAM,uBAAuB,qBAAqB,OAAO;AAAA,EACvD,MAAM,EAAE,QAAQ,SAAS;AAAA,EACzB,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC;AAC3B,CAAC;AAED,IAAM,gBAAgB,EAAE,mBAAmB,QAAQ,CAAC,sBAAsB,oBAAoB,CAAC;AAGxF,IAAM,wBAAwB,EAAE,OAAO;AAAA,EAC5C,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACpB,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACvB,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,QAAQ,kBAAkB,SAAS;AAAA,EACnC,IAAI,eAAe,SAAS;AAAA,EAC5B,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AACnD,CAAC;AAGD,IAAM,mBAAmB,sBAAsB,OAAO;AAAA;AAAA,EAEpD,UAAU,EAAE,MAAM,aAAa,EAAE,IAAI,CAAC,EAAE,SAAS;AACnD,CAAC;AAGD,IAAM,sBAA0D,EAC7D,OAAO;AAAA,EACN,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,kBAAkB,EAAE,OAAO,EAAE,SAAS;AAAA,EACtC,cAAc,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EACzD,OAAO,EAAE,KAAK,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,mBAAmB,CAAC,EAAE,SAAS;AAC1E,CAAC,EACA,YAAY;AAGf,IAAM,kBAAkB,EAAE,OAAO,EAAE,OAAO,GAAG,mBAAmB,EAAE,SAAS;AAG3E,IAAM,oBAAoB,EACvB,OAAO;AAAA,EACN,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;AAAA,EACtC,IAAI;AACN,CAAC,EACA,SAAS;AAEL,IAAM,8BAA8B;AAI3C,IAAM,8BAA8B,EAAE,OAAO;AAAA;AAAA,EAE3C,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EAChC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACtB,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACtB,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,SAAS;AAAA;AAAA,EAET,gBAAgB,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA;AAAA,EAEtC,SAAS,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EAC/B,SAAS,EAAE,MAAM,gBAAgB,EAAE,IAAI,GAAG,iCAAiC;AAC7E,CAAC;AAED,SAAS,4BACP,MAC+D;AAC/D,QAAM,EAAE,SAAS,eAAe,gBAAgB,GAAG,KAAK,IAAI;AAC5D,SAAO;AAAA,IACL,GAAG;AAAA,IACH,gBAAgB,kBAAkB,iBAAiB;AAAA,EACrD;AACF;AAEA,IAAM,0BAA0B,4BAA4B;AAAA,EAC1D;AACF;AAEA,SAAS,wBACP,MACA,KACA;AACA,QAAM,QAAQ,0BAA0B,KAAK,OAAO;AACpD,MAAI,OAAO;AACT,QAAI,SAAS;AAAA,MACX,MAAM,EAAE,aAAa;AAAA,MACrB,SAAS;AAAA,MACT,MAAM,CAAC,SAAS;AAAA,IAClB,CAAC;AAAA,EACH;AACF;AAEO,IAAM,oBAAoB,wBAAwB;AAAA,EACvD;AACF;AAMO,IAAM,iBAAiB,EAC3B,OAAO;AAAA,EACN,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,SAAS;AAAA,EAC5C,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,EAAE,SAAS;AAC9C,CAAC,EACA;AAAA,EACC,CAAC,SAAS;AACR,UAAM,SAAS,KAAK,UAAU,CAAC;AAC/B,QAAI,OAAO,SAAS,KAAK,KAAK,OAAO,SAAS,GAAG;AAC/C,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT;AAAA,EACA,EAAE,SAAS,8CAA8C;AAC3D;AAGK,IAAM,4BAA4B,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAM3D,IAAM,uBAAuB;AAAA,EAClC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEO,IAAM,2BAA2B,EAAE,KAAK,oBAAoB;AAM5D,IAAM,0BAA0B,EAAE,OAAO;AAAA,EAC9C,SAAS;AAAA,EACT,QAAQ,yBAAyB,SAAS;AAC5C,CAAC;AAGM,IAAM,iBAAiB,CAAC,OAAO,UAAU,QAAQ,QAAQ;AAEzD,IAAM,qBAAqB,EAAE,KAAK,cAAc;AAmBhD,IAAM,uBAAuB,EAAE,OAAO;AAAA;AAAA,EAE3C,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC;AAC3B,CAAC;AAGM,IAAM,uBAAuB,4BACjC,OAAO;AAAA,EACN,UAAU,eAAe,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA,EAKlC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA,EAKrC,UAAU,mBAAmB,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA,EAKtC,QAAQ,wBAAwB,SAAS;AAAA;AAAA,EAEzC,OAAO,qBAAqB,SAAS;AACvC,CAAC,EACA,UAAU,2BAA2B,EACrC,YAAY,uBAAuB;AAM/B,IAAM,4BAA4B,EAAE,OAAO;AAAA;AAAA,EAEhD,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EAC/B,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACvB,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA,EAEjC,QAAQ,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA;AAAA,EAEnD,IAAI,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA;AAAA,EAE/C,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AACnD,CAAC;AAGM,IAAM,6BAA6B,EAAE,OAAO;AAAA,EACjD,MAAM,EAAE,KAAK,CAAC,QAAQ,WAAW,CAAC;AAAA,EAClC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA;AAAA,EAEtB,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMvC,oBAAoB,EACjB,OAAO;AAAA,IACN,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,IAC5B,QAAQ;AAAA,EACV,CAAC,EACA,SAAS;AACd,CAAC;AAMM,IAAM,4BAA4B,EACtC,OAAO;AAAA;AAAA,EAEN,iBAAiB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA;AAAA,EAE5C,cAAc,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA;AAAA,EAEzC,cAAc,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA;AAAA,EAEzC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EAChC,UAAU,eAAe,SAAS;AAAA,EAClC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACvB,UAAU,EAAE,MAAM,0BAA0B,EAAE,QAAQ,CAAC,CAAC;AAAA;AAAA,EAExD,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AACrC,CAAC,EACA,OAAO,CAAC,SAAS,QAAQ,KAAK,mBAAmB,KAAK,YAAY,GAAG;AAAA,EACpE,SAAS;AACX,CAAC;AAGI,IAAM,+BAA+B,EAAE,OAAO;AAAA,EACnD,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACxB,mBAAmB,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACnC,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,aAAa,EAAE,QAAQ,EAAE,SAAS;AACpC,CAAC;;;AF1OD,IAAMC,iBAAgBC,GAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,gBAAgB,GAAG,GAAG;AAAA,EACrE,SAAS;AACX,CAAC;AAED,IAAMC,qBAAoBD,GAAE;AAAA,EAC1B,CAAC,QAAQ,OAAO,QAAQ,YAAY,QAAQ;AAAA,EAC5C,EAAE,SAAS,qCAAqC;AAClD;AAEA,IAAME,kBAAiBF,GAAE,OAAiB,CAAC,QAAQ,OAAO,QAAQ,YAAY,QAAQ,MAAM;AAAA,EAC1F,SAAS;AACX,CAAC;AAED,IAAMG,wBAAuBH,GAAE,OAAO;AAAA,EACpC,MAAMA,GAAE,QAAQ,SAAS;AAAA,EACzB,KAAKD;AAAA,EACL,SAASC,GAAE,OAAOA,GAAE,OAAO,GAAGA,GAAE,OAAO,CAAC;AAC1C,CAAC;AAED,IAAMI,wBAAuBD,sBAAqB,OAAO;AAAA,EACvD,MAAMH,GAAE,QAAQ,SAAS;AAAA,EACzB,SAASA,GAAE,OAAO,EAAE,IAAI,CAAC;AAC3B,CAAC;AAED,IAAMK,iBAAgBL,GAAE,mBAAmB,QAAQ,CAACG,uBAAsBC,qBAAoB,CAAC;AAGxF,IAAME,yBAAwBN,GAAE,OAAO;AAAA,EAC5C,IAAIA,GAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACpB,OAAOA,GAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACvB,aAAaA,GAAE,OAAO,EAAE,SAAS;AAAA,EACjC,QAAQC,mBAAkB,SAAS;AAAA,EACnC,IAAIC,gBAAe,SAAS;AAAA,EAC5B,MAAMF,GAAE,OAAOA,GAAE,OAAO,GAAGA,GAAE,QAAQ,CAAC,EAAE,SAAS;AACnD,CAAC;AAED,IAAMO,oBAAmBD,uBAAsB,OAAO;AAAA,EACpD,UAAUN,GAAE,MAAMK,cAAa,EAAE,IAAI,CAAC,EAAE,SAAS;AACnD,CAAC;AAED,IAAMG,uBAA0DR,GAC7D,OAAO;AAAA,EACN,aAAaA,GAAE,OAAO,EAAE,SAAS;AAAA,EACjC,YAAYA,GAAE,OAAO,EAAE,SAAS;AAAA,EAChC,kBAAkBA,GAAE,OAAO,EAAE,SAAS;AAAA,EACtC,cAAcA,GAAE,OAAOA,GAAE,OAAO,GAAGA,GAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EACzD,OAAOA,GAAE,KAAK,MAAMA,GAAE,OAAOA,GAAE,OAAO,GAAGQ,oBAAmB,CAAC,EAAE,SAAS;AAC1E,CAAC,EACA,YAAY;AAEf,IAAMC,mBAAkBT,GAAE,OAAOA,GAAE,OAAO,GAAGQ,oBAAmB,EAAE,SAAS;AAE3E,IAAME,qBAAoBV,GACvB,OAAO;AAAA,EACN,MAAMA,GAAE,OAAOA,GAAE,OAAO,GAAGA,GAAE,QAAQ,CAAC;AAAA,EACtC,IAAIS;AACN,CAAC,EACA,SAAS;AAGL,IAAME,+BAA8B;AAG3C,IAAMC,+BAA8BZ,GAAE,OAAO;AAAA,EAC3C,KAAKA,GAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EAChC,MAAMA,GAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACtB,MAAMA,GAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACtB,aAAaA,GAAE,OAAO,EAAE,SAAS;AAAA,EACjC,YAAYA,GAAE,OAAO,EAAE,SAAS;AAAA,EAChC,SAASU;AAAA,EACT,gBAAgBV,GAAE,QAAQ,CAAC,EAAE,SAAS;AAAA;AAAA,EAEtC,SAASA,GAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EAC/B,SAASA,GAAE,MAAMO,iBAAgB,EAAE,IAAI,GAAG,iCAAiC;AAC7E,CAAC;AAED,SAASM,6BACP,MAC+D;AAC/D,QAAM,EAAE,SAAS,eAAe,gBAAgB,GAAG,KAAK,IAAI;AAC5D,SAAO;AAAA,IACL,GAAG;AAAA,IACH,gBAAgB,kBAAkB,iBAAiBF;AAAA,EACrD;AACF;AAEA,IAAMG,2BAA0BF,6BAA4B;AAAA,EAC1DC;AACF;AAEA,SAASE,yBACP,MACA,KACA;AACA,QAAM,QAAQ,0BAA0B,KAAK,OAAO;AACpD,MAAI,OAAO;AACT,QAAI,SAAS;AAAA,MACX,MAAMf,GAAE,aAAa;AAAA,MACrB,SAAS;AAAA,MACT,MAAM,CAAC,SAAS;AAAA,IAClB,CAAC;AAAA,EACH;AACF;AAEO,IAAMgB,qBAAoBF,yBAAwB;AAAA,EACvDC;AACF;AAMO,IAAME,kBAAiBjB,GAC3B,OAAO;AAAA,EACN,OAAOA,GAAE,MAAMA,GAAE,OAAO,EAAE,MAAM,CAAC,EAAE,SAAS;AAAA,EAC5C,QAAQA,GAAE,MAAMA,GAAE,OAAO,EAAE,IAAI,CAAC,CAAC,EAAE,SAAS;AAC9C,CAAC,EACA;AAAA,EACC,CAAC,SAAS;AACR,UAAM,SAAS,KAAK,UAAU,CAAC;AAC/B,QAAI,OAAO,SAAS,KAAK,KAAK,OAAO,SAAS,GAAG;AAC/C,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT;AAAA,EACA,EAAE,SAAS,8CAA8C;AAC3D;AAGK,IAAMkB,6BAA4BlB,GAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAM3D,IAAMmB,wBAAuB;AAAA,EAClC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEO,IAAMC,4BAA2BpB,GAAE,KAAKmB,qBAAoB;AAG5D,IAAM,+BAAmD;AAGzD,IAAME,2BAA0BrB,GAAE,OAAO;AAAA,EAC9C,SAASkB;AAAA,EACT,QAAQE,0BAAyB,SAAS;AAC5C,CAAC;AAGM,IAAME,kBAAiB,CAAC,OAAO,UAAU,QAAQ,QAAQ;AAEzD,IAAMC,sBAAqBvB,GAAE,KAAKsB,eAAc;AAIhD,IAAM,wBAAsC;AAE5C,IAAM,uBAAqC;AAE3C,IAAM,qBAAmD;AAAA,EAC9D,KAAK;AAAA,EACL,QAAQ;AAAA,EACR,MAAM;AAAA,EACN,QAAQ;AACV;AAEO,IAAME,wBAAuBxB,GAAE,OAAO;AAAA,EAC3C,SAASA,GAAE,OAAO,EAAE,IAAI,CAAC;AAC3B,CAAC;AAEM,IAAMyB,wBAAuBb,6BACjC,OAAO;AAAA,EACN,UAAUK,gBAAe,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA,EAKlC,UAAUjB,GAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA,EAKrC,UAAUuB,oBAAmB,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA,EAKtC,QAAQF,yBAAwB,SAAS;AAAA,EACzC,OAAOG,sBAAqB,SAAS;AACvC,CAAC,EACA,UAAUX,4BAA2B,EACrC,YAAYE,wBAAuB;AAG/B,IAAM,yBAAyBM;","names":["z","safeUrlSchema","z","jsonSchema7Schema","uiSchemaSchema","webhookHandlerSchema","triggerHandlerSchema","handlerSchema","taskActionInputSchema","taskActionSchema","uiFieldSchemaSchema","contextUiSchema","contextDataSchema","TASK_CONTEXT_FORMAT_VERSION","taskContextObjectBaseSchema","normalizeTaskContextVersion","taskContextObjectSchema","refineContextPublicUrls","taskContextSchema","assignToSchema","threadUpdateMessageSchema","threadUpdateStatuses","threadUpdateStatusSchema","threadUpdateInputSchema","taskPriorities","taskPrioritySchema","agentTelemetrySchema","createTaskBodySchema"]}
+{"version":3,"sources":["../../src/schemas/index.ts","../../../core/src/utils/safe-url.ts","../../../core/src/schemas/task.ts","../../../core/src/schemas/context-urls.ts"],"sourcesContent":["import { z } from \"zod\";\nimport {\n  isAllowedHandlerUrl,\n  HANDLER_URL_ERROR,\n} from \"@robotrock/core/utils\";\nimport { validateContextPublicUrls } from \"@robotrock/core/schemas\";\n\nexport interface JSONSchema7 {\n  $id?: string;\n  $ref?: string;\n  $schema?: string;\n  $comment?: string;\n  type?: JSONSchema7TypeName | JSONSchema7TypeName[];\n  enum?: unknown[];\n  const?: unknown;\n  multipleOf?: number;\n  maximum?: number;\n  exclusiveMaximum?: number;\n  minimum?: number;\n  exclusiveMinimum?: number;\n  maxLength?: number;\n  minLength?: number;\n  pattern?: string;\n  format?: string;\n  items?: JSONSchema7 | JSONSchema7[];\n  additionalItems?: JSONSchema7 | boolean;\n  maxItems?: number;\n  minItems?: number;\n  uniqueItems?: boolean;\n  contains?: JSONSchema7;\n  maxProperties?: number;\n  minProperties?: number;\n  required?: string[];\n  properties?: Record<string, JSONSchema7>;\n  patternProperties?: Record<string, JSONSchema7>;\n  additionalProperties?: JSONSchema7 | boolean;\n  dependencies?: Record<string, JSONSchema7 | string[]>;\n  propertyNames?: JSONSchema7;\n  if?: JSONSchema7;\n  then?: JSONSchema7;\n  else?: JSONSchema7;\n  allOf?: JSONSchema7[];\n  anyOf?: JSONSchema7[];\n  oneOf?: JSONSchema7[];\n  not?: JSONSchema7;\n  title?: string;\n  description?: string;\n  default?: unknown;\n  readOnly?: boolean;\n  writeOnly?: boolean;\n  examples?: unknown[];\n}\n\nexport type JSONSchema7TypeName =\n  | \"string\"\n  | \"number\"\n  | \"integer\"\n  | \"boolean\"\n  | \"object\"\n  | \"array\"\n  | \"null\";\n\nexport type ExtendedJSONSchema7 = JSONSchema7 & {\n  enumNames?: string[];\n  [key: string]: unknown;\n};\n\nexport type UiSchema = {\n  \"ui:widget\"?: string;\n  \"ui:title\"?: string;\n  \"ui:description\"?: string;\n  \"ui:placeholder\"?: string;\n  \"ui:options\"?: Record<string, unknown>;\n  [key: string]: unknown;\n};\n\nconst handlerUrlSchema = z.string().refine((url) => isAllowedHandlerUrl(url), {\n  message: HANDLER_URL_ERROR,\n});\n\nconst jsonSchema7Schema = z.custom<ExtendedJSONSchema7>(\n  (val) => typeof val === \"object\" && val !== null,\n  { message: \"Must be a valid JSON Schema object\" }\n);\n\nconst uiSchemaSchema = z.custom<UiSchema>((val) => typeof val === \"object\" && val !== null, {\n  message: \"Must be a valid UiSchema object\",\n});\n\nconst webhookHandlerSchema = z.object({\n  type: z.literal(\"webhook\"),\n  url: handlerUrlSchema,\n  headers: z.record(z.string(), z.string()),\n});\n\nconst triggerHandlerSchema = webhookHandlerSchema.extend({\n  type: z.literal(\"trigger\"),\n  tokenId: z.string().min(1),\n});\n\nconst handlerSchema = z.discriminatedUnion(\"type\", [webhookHandlerSchema, triggerHandlerSchema]);\n\n/** Action config without handlers — used for chat widgets and agent tool input. */\nexport const taskActionInputSchema = z.object({\n  id: z.string().min(1),\n  title: z.string().min(1),\n  description: z.string().optional(),\n  schema: jsonSchema7Schema.optional(),\n  ui: uiSchemaSchema.optional(),\n  data: z.record(z.string(), z.unknown()).optional(),\n});\n\nconst taskActionSchema = taskActionInputSchema.extend({\n  handlers: z.array(handlerSchema).min(1).optional(),\n});\n\nconst uiFieldSchemaSchema: z.ZodType<Record<string, unknown>> = z\n  .object({\n    \"ui:widget\": z.string().optional(),\n    \"ui:title\": z.string().optional(),\n    \"ui:description\": z.string().optional(),\n    \"ui:options\": z.record(z.string(), z.unknown()).optional(),\n    items: z.lazy(() => z.record(z.string(), uiFieldSchemaSchema)).optional(),\n  })\n  .passthrough();\n\nconst contextUiSchema = z.record(z.string(), uiFieldSchemaSchema).optional();\n\nconst contextDataSchema = z\n  .object({\n    data: z.record(z.string(), z.unknown()),\n    ui: contextUiSchema,\n  })\n  .optional();\n\n/** Task context wire format version (always `2` today). */\nexport const TASK_CONTEXT_FORMAT_VERSION = 2 as const;\nexport type TaskContextFormatVersion = typeof TASK_CONTEXT_FORMAT_VERSION;\n\nconst taskContextObjectBaseSchema = z.object({\n  app: z.string().min(1).optional(),\n  type: z.string().min(1),\n  name: z.string().min(1),\n  description: z.string().optional(),\n  validUntil: z.string().optional(),\n  context: contextDataSchema,\n  contextVersion: z.literal(2).optional(),\n  /** @deprecated Use `contextVersion`. Accepted on ingest only. */\n  version: z.literal(2).optional(),\n  actions: z.array(taskActionSchema).min(1, \"At least one action is required\"),\n});\n\nfunction normalizeTaskContextVersion<T extends { contextVersion?: 2; version?: 2 }>(\n  data: T\n): Omit<T, \"version\" | \"contextVersion\"> & { contextVersion: 2 } {\n  const { version: legacyVersion, contextVersion, ...rest } = data;\n  return {\n    ...rest,\n    contextVersion: contextVersion ?? legacyVersion ?? TASK_CONTEXT_FORMAT_VERSION,\n  };\n}\n\nconst taskContextObjectSchema = taskContextObjectBaseSchema.transform(\n  normalizeTaskContextVersion\n);\n\nfunction refineContextPublicUrls<T extends { context?: z.infer<typeof contextDataSchema> }>(\n  data: T,\n  ctx: z.RefinementCtx\n) {\n  const error = validateContextPublicUrls(data.context);\n  if (error) {\n    ctx.addIssue({\n      code: z.ZodIssueCode.custom,\n      message: error,\n      path: [\"context\"],\n    });\n  }\n}\n\nexport const taskContextSchema = taskContextObjectSchema.superRefine(\n  refineContextPublicUrls\n);\n\n/**\n * Assignment targets at task create (not stored in task context JSON).\n * Unknown user emails are auto-provisioned as assignee memberships (count toward seat limits).\n */\nexport const assignToSchema = z\n  .object({\n    users: z.array(z.string().email()).optional(),\n    groups: z.array(z.string().min(1)).optional(),\n  })\n  .refine(\n    (data) => {\n      const groups = data.groups ?? [];\n      if (groups.includes(\"all\") && groups.length > 1) {\n        return false;\n      }\n      return true;\n    },\n    { message: 'Cannot combine \"all\" with other group slugs' }\n  );\n\n/** A short thread-scoped status update message (1-2 sentences). */\nexport const threadUpdateMessageSchema = z.string().min(1).max(500);\n\n/**\n * Lifecycle status carried by a thread update. Drives the icon and color shown\n * in the inbox status bar. Defaults to `info` when omitted.\n */\nexport const threadUpdateStatuses = [\n  \"info\",\n  \"queued\",\n  \"running\",\n  \"waiting\",\n  \"succeeded\",\n  \"failed\",\n  \"cancelled\",\n] as const;\n\nexport const threadUpdateStatusSchema = z.enum(threadUpdateStatuses);\n\n/** The default status applied when an update omits one. */\nexport const DEFAULT_THREAD_UPDATE_STATUS: ThreadUpdateStatus = \"info\";\n\n/** Shared shape for a thread update (standalone and at task creation). */\nexport const threadUpdateInputSchema = z.object({\n  message: threadUpdateMessageSchema,\n  status: threadUpdateStatusSchema.optional(),\n});\n\n/** Thread priority levels for inbox ordering and display. */\nexport const taskPriorities = [\"low\", \"normal\", \"high\", \"urgent\"] as const;\n\nexport const taskPrioritySchema = z.enum(taskPriorities);\n\nexport type TaskPriority = (typeof taskPriorities)[number];\n\nexport const DEFAULT_TASK_PRIORITY: TaskPriority = \"normal\";\n\nexport const LOWEST_TASK_PRIORITY: TaskPriority = \"low\";\n\nexport const TASK_PRIORITY_RANK: Record<TaskPriority, number> = {\n  low: 1,\n  normal: 2,\n  high: 3,\n  urgent: 4,\n};\n\nexport const agentTelemetrySchema = z.object({\n  version: z.string().min(1),\n});\n\nexport const createTaskBodySchema = taskContextObjectBaseSchema\n  .extend({\n    assignTo: assignToSchema.optional(),\n    /**\n     * Groups related tasks together. When omitted, the server generates one and\n     * returns it so the caller can reuse it on later tasks in the same thread.\n     */\n    threadId: z.string().min(1).optional(),\n    /**\n     * Optional thread priority. When set, applies to the whole thread and\n     * overwrites any previous priority. Omit on later tasks to leave unchanged.\n     */\n    priority: taskPrioritySchema.optional(),\n    /**\n     * Optional initial status update logged against the task's thread. Shows in\n     * the inbox status bar and the thread update log.\n     */\n    update: threadUpdateInputSchema.optional(),\n    agent: agentTelemetrySchema.optional(),\n  })\n  .transform(normalizeTaskContextVersion)\n  .superRefine(refineContextPublicUrls);\n\n/** POST /v1/threads/:threadId/updates body: a standalone thread update. */\nexport const threadUpdateBodySchema = threadUpdateInputSchema;\n\n/** Where a thread update originated. */\nexport type ThreadUpdateSource = \"api\" | \"task_create\" | \"dashboard\";\n\n/** Lifecycle status carried by a thread update. */\nexport type ThreadUpdateStatus = (typeof threadUpdateStatuses)[number];\n\n/** A logged thread update as returned by the API. */\nexport interface ThreadUpdate {\n  id: string;\n  threadId: string;\n  message: string;\n  status: ThreadUpdateStatus;\n  source: ThreadUpdateSource;\n  createdAt: number;\n}\n\nexport type AssignToInput = z.infer<typeof assignToSchema>;\nexport type CreateTaskBodyInput = z.input<typeof createTaskBodySchema>;\nexport type CreateTaskBody = z.output<typeof createTaskBodySchema>;\nexport type ThreadUpdateBodyInput = z.input<typeof threadUpdateBodySchema>;\nexport type ThreadUpdateBody = z.output<typeof threadUpdateBodySchema>;\nexport type ThreadUpdateInput = z.input<typeof threadUpdateInputSchema>;\nexport type TaskContextInput = z.input<typeof taskContextSchema>;\nexport type TaskContextOutput = z.output<typeof taskContextSchema>;\nexport type TaskContext = TaskContextOutput;\nexport type TaskActionInput = z.infer<typeof taskActionInputSchema>;\nexport type TaskAction = z.infer<typeof taskActionSchema>;\nexport type WebhookHandler = z.infer<typeof webhookHandlerSchema>;\nexport type TriggerHandler = z.infer<typeof triggerHandlerSchema>;\nexport type Handler = z.infer<typeof handlerSchema>;\nexport type AgentTelemetry = z.infer<typeof agentTelemetrySchema>;\nexport type AgentTelemetryInput = z.input<typeof agentTelemetrySchema>;\n\ntype InferObjectProperties<\n  Props,\n  Req extends PropertyKey,\n> = Props extends Record<string, unknown>\n  ? ({\n      [K in keyof Props as K extends Req ? K : never]-?: InferJsonSchema7<Props[K]>;\n    } & {\n      [K in keyof Props as K extends Req ? never : K]?: InferJsonSchema7<Props[K]>;\n    } extends infer O\n      ? { [K in keyof O]: O[K] }\n      : never)\n  : Record<string, unknown>;\n\ntype RequiredKeys<S> =\n  S extends { readonly required: readonly string[] } ? S[\"required\"][number] : never;\n\nexport type InferJsonSchema7<S> = [S] extends [undefined]\n  ? Record<string, never>\n  : S extends { readonly const: infer C }\n    ? C\n    : S extends {\n          readonly enum: readonly (infer E)[];\n        }\n      ? E\n      : S extends {\n            readonly type: \"object\";\n            readonly properties?: infer Props;\n          }\n        ? InferObjectProperties<Props, RequiredKeys<S>>\n        : S extends {\n              readonly type: \"object\";\n              readonly properties?: undefined;\n            }\n          ? Record<string, unknown>\n          : S extends {\n                readonly type: \"array\";\n                readonly items?: infer Items;\n              }\n            ? Items extends readonly unknown[]\n              ? InferJsonSchema7<Items[number]>[]\n              : Items extends object\n                ? InferJsonSchema7<Items>[]\n                : unknown[]\n            : S extends { readonly type: \"string\" }\n              ? string\n              : S extends { readonly type: \"number\" } | { readonly type: \"integer\" }\n                ? number\n                : S extends { readonly type: \"boolean\" }\n                  ? boolean\n                  : unknown;\n\nexport type TaskStatus = \"pending\" | \"open\" | \"handled\" | \"expired\";\n\nexport interface TaskResponse {\n  success: boolean;\n  task: {\n    taskId: string;\n    threadId: string;\n    status: \"pending\" | \"open\";\n    context: TaskContext;\n    validUntil: string;\n    submittedAt: string;\n  };\n  message: string;\n}\n\nexport interface ThreadUpdateResponse {\n  success: boolean;\n  update: ThreadUpdate;\n  message: string;\n}\n\nexport interface Task {\n  id: string;\n  threadId?: string;\n  createdAt: Date;\n  status: TaskStatus;\n  context: TaskContext;\n  validUntil: number;\n  handledAt?: number;\n  handled?: {\n    action: {\n      id: string;\n      data: unknown;\n    };\n    handledBy?: string;\n    userId?: string;\n    token?: string;\n  };\n}\n\nexport type InferActionData<T extends { schema?: unknown }> = [\n  Exclude<T[\"schema\"], undefined>,\n] extends [\n  never,\n]\n  ? Record<string, never>\n  : Exclude<T[\"schema\"], undefined> extends infer S\n    ? InferJsonSchema7<S>\n    : Record<string, never>;\n\nexport type TupleElementIndices<T extends readonly unknown[]> = T extends readonly [\n  unknown,\n  ...unknown[],\n]\n  ? Exclude<keyof T, keyof unknown[]>\n  : number;\n\nexport interface TaskResult<T = Record<string, unknown>> {\n  actionId: string;\n  data: T;\n  handledBy?: string;\n  handledAt: Date;\n}\n\nexport interface ApprovalResult<T = Record<string, unknown>> extends TaskResult<T> {\n  taskId: string;\n}\n\nexport type DiscriminatedApprovalResult<\n  TActions extends readonly { id: string; schema?: unknown }[],\n> = {\n  [I in TupleElementIndices<TActions>]: TActions[I] extends { id: string; schema?: unknown }\n    ? Omit<ApprovalResult<InferActionData<TActions[I]>>, \"actionId\" | \"data\"> & {\n        actionId: TActions[I][\"id\"];\n        data: InferActionData<TActions[I]>;\n      }\n    : never\n}[TupleElementIndices<TActions>];\n","const BLOCKED_HOSTNAMES = new Set([\n  \"localhost\",\n  \"metadata.google.internal\",\n  \"metadata.goog\",\n]);\n\nfunction normalizeHostname(hostname: string): string {\n  return hostname.toLowerCase().replace(/^\\[|\\]$/g, \"\");\n}\n\nfunction isBlockedIpv4(host: string): boolean {\n  const match = /^(\\d{1,3})\\.(\\d{1,3})\\.(\\d{1,3})\\.(\\d{1,3})$/.exec(host);\n  if (!match) {\n    return false;\n  }\n\n  const octets = match.slice(1, 5).map((part) => Number(part));\n  if (octets.some((octet) => Number.isNaN(octet) || octet < 0 || octet > 255)) {\n    return true;\n  }\n\n  const [a, b, _c, _d] = octets;\n  if (a === undefined || b === undefined) {\n    return true;\n  }\n  if (a === 127 || a === 0) return true;\n  if (a === 10) return true;\n  if (a === 169 && b === 254) return true;\n  if (a === 192 && b === 168) return true;\n  if (a === 172 && b >= 16 && b <= 31) return true;\n  if (a === 100 && b >= 64 && b <= 127) return true;\n\n  return false;\n}\n\nfunction ipv4FromNumericHost(host: string): string | null {\n  if (/^\\d+$/.test(host)) {\n    const num = Number(host);\n    if (!Number.isFinite(num) || num < 0 || num > 0xffffffff) {\n      return null;\n    }\n    const a = (num >>> 24) & 0xff;\n    const b = (num >>> 16) & 0xff;\n    const c = (num >>> 8) & 0xff;\n    const d = num & 0xff;\n    return `${a}.${b}.${c}.${d}`;\n  }\n\n  const hexMatch = /^0x([0-9a-f]{1,8})$/i.exec(host);\n  if (hexMatch) {\n    const num = Number.parseInt(hexMatch[1]!, 16);\n    if (!Number.isFinite(num) || num < 0 || num > 0xffffffff) {\n      return null;\n    }\n    const a = (num >>> 24) & 0xff;\n    const b = (num >>> 16) & 0xff;\n    const c = (num >>> 8) & 0xff;\n    const d = num & 0xff;\n    return `${a}.${b}.${c}.${d}`;\n  }\n\n  return null;\n}\n\nfunction isBlockedIpv4Mapped(host: string): boolean {\n  const mappedDotted = /^::ffff:(\\d{1,3}(?:\\.\\d{1,3}){3})$/i.exec(host);\n  if (mappedDotted) {\n    return isBlockedIpv4(mappedDotted[1]!);\n  }\n\n  const mappedHex = /^::ffff:([0-9a-f]{1,4}):([0-9a-f]{1,4})$/i.exec(host);\n  if (mappedHex) {\n    const high = Number.parseInt(mappedHex[1]!, 16);\n    const low = Number.parseInt(mappedHex[2]!, 16);\n    if (Number.isFinite(high) && Number.isFinite(low)) {\n      const a = (high >> 8) & 0xff;\n      const b = high & 0xff;\n      const c = (low >> 8) & 0xff;\n      const d = low & 0xff;\n      return isBlockedIpv4(`${a}.${b}.${c}.${d}`);\n    }\n  }\n\n  return false;\n}\n\nfunction isBlockedIpv6(host: string): boolean {\n  if (host === \"::1\" || host === \"0:0:0:0:0:0:0:1\") {\n    return true;\n  }\n  if (host.startsWith(\"fc\") || host.startsWith(\"fd\")) {\n    return true;\n  }\n  if (host.startsWith(\"fe80:\")) {\n    return true;\n  }\n  if (isBlockedIpv4Mapped(host)) {\n    return true;\n  }\n  return false;\n}\n\nfunction isBlockedHostname(hostname: string): boolean {\n  const host = normalizeHostname(hostname);\n  if (!host) {\n    return true;\n  }\n  if (BLOCKED_HOSTNAMES.has(host)) {\n    return true;\n  }\n  if (host.endsWith(\".localhost\") || host.endsWith(\".local\")) {\n    return true;\n  }\n\n  const numericIpv4 = ipv4FromNumericHost(host);\n  if (numericIpv4 && isBlockedIpv4(numericIpv4)) {\n    return true;\n  }\n\n  return isBlockedIpv4(host) || isBlockedIpv6(host);\n}\n\n/**\n * True when a handler URL targets the local machine. Convex cloud cannot POST\n * these directly; loopback deliveries are queued in Redis and drained by a local\n * worker (see apps/api handler-outbound).\n */\nexport function isLoopbackHandlerUrl(urlString: string): boolean {\n  let url: URL;\n  try {\n    url = new URL(urlString);\n  } catch {\n    return false;\n  }\n\n  if (url.protocol !== \"http:\" && url.protocol !== \"https:\") {\n    return false;\n  }\n  if (url.username || url.password) {\n    return false;\n  }\n\n  const host = url.hostname.toLowerCase();\n  return (\n    host === \"localhost\" ||\n    host === \"127.0.0.1\" ||\n    host === \"::1\" ||\n    host === \"[::1]\" ||\n    host.endsWith(\".localhost\")\n  );\n}\n\n/**\n * Webhook/trigger handler URLs may target a public host or loopback (local dev).\n */\nexport function isAllowedHandlerUrl(urlString: string): boolean {\n  return isPublicHttpUrl(urlString) || isLoopbackHandlerUrl(urlString);\n}\n\n/**\n * Returns true when the URL uses http(s) and targets a public, non-reserved host.\n */\nexport function isPublicHttpUrl(urlString: string): boolean {\n  let url: URL;\n  try {\n    url = new URL(urlString);\n  } catch {\n    return false;\n  }\n\n  if (url.protocol !== \"http:\" && url.protocol !== \"https:\") {\n    return false;\n  }\n  if (url.username || url.password) {\n    return false;\n  }\n\n  return !isBlockedHostname(url.hostname);\n}\n\nexport const PUBLIC_HTTP_URL_ERROR =\n  \"URL must be a public http:// or https:// address\";\n\nexport const HANDLER_URL_ERROR =\n  \"Handler URL must be a public or loopback http:// or https:// address\";\n\nconst FORBIDDEN_HANDLER_HEADERS = new Set([\n  \"host\",\n  \"connection\",\n  \"content-length\",\n  \"transfer-encoding\",\n  \"te\",\n  \"trailer\",\n  \"upgrade\",\n  \"proxy-authorization\",\n  \"proxy-connection\",\n  \"keep-alive\",\n  \"x-robotrock-signature\",\n  \"x-robotrock-delivery-id\",\n  \"x-robotrock-delivery-attempt\",\n]);\n\n/**\n * Allow only safe custom webhook headers; blocks overrides of delivery metadata.\n */\nexport function filterHandlerHeaders(\n  headers: Record<string, string> | undefined\n): Record<string, string> {\n  if (!headers) {\n    return {};\n  }\n\n  const filtered: Record<string, string> = {};\n  for (const [rawKey, value] of Object.entries(headers)) {\n    const key = rawKey.toLowerCase().trim();\n    if (!key || FORBIDDEN_HANDLER_HEADERS.has(key)) {\n      continue;\n    }\n    if (!/^[a-z0-9][a-z0-9._-]*$/.test(key)) {\n      continue;\n    }\n    filtered[key] = value;\n  }\n  return filtered;\n}\n","import { z } from \"zod\";\nimport {\n  isAllowedHandlerUrl,\n  isPublicHttpUrl,\n  HANDLER_URL_ERROR,\n  PUBLIC_HTTP_URL_ERROR,\n} from \"../utils/safe-url\";\nimport { validateContextPublicUrls } from \"./context-urls\";\nimport type { JSONSchema7 } from \"./json-schema\";\n\n/**\n * Extended JSONSchema7 type that includes RJSF extensions like enumNames\n */\nexport type ExtendedJSONSchema7 = JSONSchema7 & {\n  enumNames?: string[];\n  [key: string]: unknown;\n};\n\n/**\n * UI Schema for RJSF form customization\n */\nexport type UiSchema = {\n  \"ui:widget\"?: string;\n  \"ui:title\"?: string;\n  \"ui:description\"?: string;\n  \"ui:placeholder\"?: string;\n  \"ui:options\"?: Record<string, unknown>;\n  [key: string]: unknown;\n};\n\n// Helper schemas\nexport const safeUrlSchema = z.string().refine((url) => isPublicHttpUrl(url), {\n  message: PUBLIC_HTTP_URL_ERROR,\n});\n\nconst handlerUrlSchema = z.string().refine((url) => isAllowedHandlerUrl(url), {\n  message: HANDLER_URL_ERROR,\n});\n\n// JSONSchema7 validation\nconst jsonSchema7Schema = z.custom<ExtendedJSONSchema7>(\n  (val) => typeof val === \"object\" && val !== null,\n  { message: \"Must be a valid JSON Schema object\" }\n);\n\n// UiSchema validation\nconst uiSchemaSchema = z.custom<UiSchema>((val) => typeof val === \"object\" && val !== null, {\n  message: \"Must be a valid UiSchema object\",\n});\n\n// Handler schemas (per-action handlers for webhooks, triggers, etc.)\nconst webhookHandlerSchema = z.object({\n  type: z.literal(\"webhook\"),\n  url: handlerUrlSchema,\n  headers: z.record(z.string(), z.string()),\n});\n\nconst triggerHandlerSchema = webhookHandlerSchema.extend({\n  type: z.literal(\"trigger\"),\n  tokenId: z.string().min(1),\n});\n\nconst handlerSchema = z.discriminatedUnion(\"type\", [webhookHandlerSchema, triggerHandlerSchema]);\n\n/** Action config without handlers — used for chat widgets and agent tool input. */\nexport const taskActionInputSchema = z.object({\n  id: z.string().min(1),\n  title: z.string().min(1),\n  description: z.string().optional(),\n  schema: jsonSchema7Schema.optional(),\n  ui: uiSchemaSchema.optional(),\n  data: z.record(z.string(), z.unknown()).optional(),\n});\n\n// Action schema with JSONSchema-based feedback and optional handlers\nconst taskActionSchema = taskActionInputSchema.extend({\n  // Optional handlers for this action - if present, must have at least 1\n  handlers: z.array(handlerSchema).min(1).optional(),\n});\n\n// UI Field Schema\nconst uiFieldSchemaSchema: z.ZodType<Record<string, unknown>> = z\n  .object({\n    \"ui:widget\": z.string().optional(),\n    \"ui:title\": z.string().optional(),\n    \"ui:description\": z.string().optional(),\n    \"ui:options\": z.record(z.string(), z.unknown()).optional(),\n    items: z.lazy(() => z.record(z.string(), uiFieldSchemaSchema)).optional(),\n  })\n  .passthrough();\n\n// Context UI Schema\nconst contextUiSchema = z.record(z.string(), uiFieldSchemaSchema).optional();\n\n// Context data schema\nconst contextDataSchema = z\n  .object({\n    data: z.record(z.string(), z.unknown()),\n    ui: contextUiSchema,\n  })\n  .optional();\n\nexport const TASK_CONTEXT_FORMAT_VERSION = 2 as const;\nexport type TaskContextFormatVersion = typeof TASK_CONTEXT_FORMAT_VERSION;\n\n// Main TaskContext schema\nconst taskContextObjectBaseSchema = z.object({\n  /** Source application id; omitted tasks are grouped in the default inbox. */\n  app: z.string().min(1).optional(),\n  type: z.string().min(1),\n  name: z.string().min(1),\n  description: z.string().optional(),\n  validUntil: z.string().optional(),\n  context: contextDataSchema,\n  /** Task context wire format version. @default 2 */\n  contextVersion: z.literal(2).optional(),\n  /** @deprecated Use `contextVersion`. Accepted on ingest only. */\n  version: z.literal(2).optional(),\n  actions: z.array(taskActionSchema).min(1, \"At least one action is required\"),\n});\n\nfunction normalizeTaskContextVersion<T extends { contextVersion?: 2; version?: 2 }>(\n  data: T\n): Omit<T, \"version\" | \"contextVersion\"> & { contextVersion: 2 } {\n  const { version: legacyVersion, contextVersion, ...rest } = data;\n  return {\n    ...rest,\n    contextVersion: contextVersion ?? legacyVersion ?? TASK_CONTEXT_FORMAT_VERSION,\n  };\n}\n\nconst taskContextObjectSchema = taskContextObjectBaseSchema.transform(\n  normalizeTaskContextVersion\n);\n\nfunction refineContextPublicUrls<T extends { context?: z.infer<typeof contextDataSchema> }>(\n  data: T,\n  ctx: z.RefinementCtx\n) {\n  const error = validateContextPublicUrls(data.context);\n  if (error) {\n    ctx.addIssue({\n      code: z.ZodIssueCode.custom,\n      message: error,\n      path: [\"context\"],\n    });\n  }\n}\n\nexport const taskContextSchema = taskContextObjectSchema.superRefine(\n  refineContextPublicUrls\n);\n\n/**\n * Assignment targets at task create (not stored in task context JSON).\n * Unknown user emails are auto-provisioned as assignee memberships (count toward seat limits).\n */\nexport const assignToSchema = z\n  .object({\n    users: z.array(z.string().email()).optional(),\n    groups: z.array(z.string().min(1)).optional(),\n  })\n  .refine(\n    (data) => {\n      const groups = data.groups ?? [];\n      if (groups.includes(\"all\") && groups.length > 1) {\n        return false;\n      }\n      return true;\n    },\n    { message: 'Cannot combine \"all\" with other group slugs' }\n  );\n\n/** A short thread-scoped status update message (1-2 sentences). */\nexport const threadUpdateMessageSchema = z.string().min(1).max(500);\n\n/**\n * Lifecycle status carried by a thread update. Drives the icon and color shown\n * in the inbox status bar. Defaults to `info` when omitted.\n */\nexport const threadUpdateStatuses = [\n  \"info\",\n  \"queued\",\n  \"running\",\n  \"waiting\",\n  \"succeeded\",\n  \"failed\",\n  \"cancelled\",\n] as const;\n\nexport const threadUpdateStatusSchema = z.enum(threadUpdateStatuses);\n\n/** The default status applied when an update omits one. */\nexport const DEFAULT_THREAD_UPDATE_STATUS: ThreadUpdateStatus = \"info\";\n\n/** Shared shape for a thread update (standalone and at task creation). */\nexport const threadUpdateInputSchema = z.object({\n  message: threadUpdateMessageSchema,\n  status: threadUpdateStatusSchema.optional(),\n});\n\n/** Thread priority levels for inbox ordering and display. */\nexport const taskPriorities = [\"low\", \"normal\", \"high\", \"urgent\"] as const;\n\nexport const taskPrioritySchema = z.enum(taskPriorities);\n\nexport type TaskPriority = (typeof taskPriorities)[number];\n\nexport const DEFAULT_TASK_PRIORITY: TaskPriority = \"normal\";\n\nexport const LOWEST_TASK_PRIORITY: TaskPriority = \"low\";\n\nexport const TASK_PRIORITY_RANK: Record<TaskPriority, number> = {\n  low: 1,\n  normal: 2,\n  high: 3,\n  urgent: 4,\n};\n\n/**\n * Agent release at task create (not shown in inbox reviewer UI).\n * Used for feedback analysis over deploys.\n */\nexport const agentTelemetrySchema = z.object({\n  /** Agent or app version (semver, git SHA, deploy tag — caller-defined). */\n  version: z.string().min(1),\n});\n\n/** POST /v1 body: task context plus optional assignment. */\nexport const createTaskBodySchema = taskContextObjectBaseSchema\n  .extend({\n    assignTo: assignToSchema.optional(),\n    /**\n     * Groups related tasks together. When omitted, the server generates one and\n     * returns it so the caller can reuse it on later tasks in the same thread.\n     */\n    threadId: z.string().min(1).optional(),\n    /**\n     * Optional thread priority. When set, applies to the whole thread and\n     * overwrites any previous priority. Omit on later tasks to leave unchanged.\n     */\n    priority: taskPrioritySchema.optional(),\n    /**\n     * Optional initial status update logged against the task's thread. Shows in\n     * the inbox status bar and the thread update log.\n     */\n    update: threadUpdateInputSchema.optional(),\n    /** Agent release version — not shown in inbox UI. */\n    agent: agentTelemetrySchema.optional(),\n  })\n  .transform(normalizeTaskContextVersion)\n  .superRefine(refineContextPublicUrls);\n\n/** POST /v1/threads/:threadId/updates body: a standalone thread update. */\nexport const threadUpdateBodySchema = threadUpdateInputSchema;\n\n/** Action widget config for a seeded assistant message (mirrors the `requestActionInput` tool input). */\nexport const agentChatSeedActionSchema = z.object({\n  /** Stable action id echoed back on submit; auto-derived from title when omitted. */\n  id: z.string().min(1).optional(),\n  title: z.string().min(1),\n  description: z.string().optional(),\n  /** JSON Schema object for the form fields. */\n  schema: z.record(z.string(), z.unknown()).optional(),\n  /** RJSF ui schema overrides (ui:widget, ui:enumNames, etc.). */\n  ui: z.record(z.string(), z.unknown()).optional(),\n  /** Optional default field values. */\n  data: z.record(z.string(), z.unknown()).optional(),\n});\n\n/** A single pre-seeded chat message injected into a programmatic agent chat. */\nexport const agentChatSeedMessageSchema = z.object({\n  role: z.enum([\"user\", \"assistant\"]),\n  text: z.string().min(1),\n  /** Optional display-name override for the message sender. */\n  senderName: z.string().min(1).optional(),\n  /**\n   * Optional structured input request rendered as a styled RobotRock action\n   * widget below the message text. Use this instead of asking the user to reply\n   * in plain text so the request is always a proper action form.\n   */\n  requestActionInput: z\n    .object({\n      prompt: z.string().optional(),\n      action: agentChatSeedActionSchema,\n    })\n    .optional(),\n});\n\n/**\n * POST /v1/agent-chats body: create + assign one or more agent chat sessions.\n * Either `agentIdentifier` (new chat) or `parentChatId` (spawned from a chat) is required.\n */\nconst eveAgentChatTransportSchema = z.object({\n  kind: z.literal(\"eve\"),\n  chatId: z.string().min(1),\n  baseUrl: z.string().url(),\n  sessionId: z.string().optional(),\n  continuationToken: z.string().optional(),\n  streamIndex: z.number().int().nonnegative().optional(),\n  isStreaming: z.boolean().optional(),\n});\n\nexport const createAgentChatBodySchema = z\n  .object({\n    /** Agent id (eve agent name). Required unless `parentChatId` is set. */\n    agentIdentifier: z.string().min(1).optional(),\n    /** Inherit tenant/connection/agent from an existing chat (agent-spawned chats). */\n    parentChatId: z.string().min(1).optional(),\n    /** Convex tenantEveConnections id; resolved from the tenant when omitted. */\n    eveConnectionId: z.string().min(1).optional(),\n    /** Source application id; groups the chat under an inbox section. */\n    app: z.string().min(1).optional(),\n    assignTo: assignToSchema.optional(),\n    title: z.string().min(1),\n    messages: z.array(agentChatSeedMessageSchema).default([]),\n    /** Provenance label stored on the session (\"cron\" | \"agent\" | ...). */\n    source: z.string().min(1).optional(),\n  })\n  .refine((data) => Boolean(data.agentIdentifier || data.parentChatId), {\n    message: \"Provide either agentIdentifier or parentChatId\",\n  });\n\n/** POST /v1/agent-chats/transport body: persist live-chat cursor for the browser. */\nexport const agentChatTransportBodySchema = eveAgentChatTransportSchema;\n\n/** POST /v1/agent-chats/audit-input body: log Eve HITL choices from agent hooks. */\nexport const agentChatAuditInputBodySchema = z.object({\n  eveSessionId: z.string().min(1),\n  userId: z.string().min(1),\n  actionId: z.string().min(1),\n  actionTitle: z.string().optional(),\n  prompt: z.string().optional(),\n  data: z.record(z.string(), z.unknown()).optional(),\n  idempotencyKey: z.string().optional(),\n  /** Eve input request id — used to merge staged HITL metadata. */\n  requestId: z.string().optional(),\n  /** Eve tool call id — fallback lookup for staged HITL metadata. */\n  toolCallId: z.string().optional(),\n});\n\nconst eveHitlStagedOptionSchema = z.object({\n  id: z.string(),\n  label: z.string(),\n});\n\n/** POST /v1/agent-chats/stage-hitl body: persist pending Eve HITL requests on the chat. */\nexport const agentChatStageHitlBodySchema = z.object({\n  eveSessionId: z.string().min(1),\n  requests: z.array(\n    z.object({\n      requestId: z.string().min(1),\n      toolCallId: z.string().min(1),\n      toolName: z.string().min(1),\n      prompt: z.string().min(1),\n      display: z.enum([\"confirmation\", \"select\", \"text\"]).optional(),\n      allowFreeform: z.boolean().optional(),\n      options: z.array(eveHitlStagedOptionSchema).optional(),\n      toolInput: z.record(z.string(), z.unknown()).optional(),\n    })\n  ),\n});\n\n/** POST /v1/agent-chats/link-task body: associate an inbox task with an Eve chat session. */\nexport const agentChatLinkTaskBodySchema = z.object({\n  eveSessionId: z.string().min(1),\n  publicTaskId: z.string().min(1),\n  toolCallId: z.string().min(1),\n});\n\n/** Where a thread update originated. */\nexport type ThreadUpdateSource = \"api\" | \"task_create\" | \"dashboard\";\n\n/** Lifecycle status carried by a thread update. */\nexport type ThreadUpdateStatus = (typeof threadUpdateStatuses)[number];\n\n/** A logged thread update as returned by the API. */\nexport interface ThreadUpdate {\n  id: string;\n  threadId: string;\n  message: string;\n  status: ThreadUpdateStatus;\n  source: ThreadUpdateSource;\n  createdAt: number;\n}\n\n// Type exports\nexport type AssignToInput = z.infer<typeof assignToSchema>;\nexport type CreateTaskBodyInput = z.input<typeof createTaskBodySchema>;\nexport type CreateTaskBody = z.output<typeof createTaskBodySchema>;\nexport type ThreadUpdateBodyInput = z.input<typeof threadUpdateBodySchema>;\nexport type ThreadUpdateBody = z.output<typeof threadUpdateBodySchema>;\nexport type ThreadUpdateInput = z.input<typeof threadUpdateInputSchema>;\nexport type AgentChatSeedAction = z.output<typeof agentChatSeedActionSchema>;\nexport type AgentChatSeedMessage = z.output<typeof agentChatSeedMessageSchema>;\nexport type CreateAgentChatBodyInput = z.input<typeof createAgentChatBodySchema>;\nexport type CreateAgentChatBody = z.output<typeof createAgentChatBodySchema>;\nexport type AgentChatTransportBody = z.output<typeof agentChatTransportBodySchema>;\nexport type AgentChatAuditInputBody = z.output<typeof agentChatAuditInputBodySchema>;\nexport type AgentChatStageHitlBody = z.output<typeof agentChatStageHitlBodySchema>;\nexport type AgentChatLinkTaskBody = z.output<typeof agentChatLinkTaskBodySchema>;\nexport type TaskContextInput = z.input<typeof taskContextSchema>;\nexport type TaskContextOutput = z.output<typeof taskContextSchema>;\nexport type TaskContext = TaskContextOutput;\nexport type SafeUrl = z.infer<typeof safeUrlSchema>;\nexport type TaskActionInput = z.infer<typeof taskActionInputSchema>;\nexport type TaskAction = z.infer<typeof taskActionSchema>;\nexport type WebhookHandler = z.infer<typeof webhookHandlerSchema>;\nexport type TriggerHandler = z.infer<typeof triggerHandlerSchema>;\nexport type Handler = z.infer<typeof handlerSchema>;\nexport type ContextData = z.infer<typeof contextDataSchema>;\nexport type ContextUiSchema = z.infer<typeof contextUiSchema>;\nexport type UiFieldSchema = z.infer<typeof uiFieldSchemaSchema>;\nexport type AgentTelemetry = z.infer<typeof agentTelemetrySchema>;\nexport type AgentTelemetryInput = z.input<typeof agentTelemetrySchema>;\n","import { isPublicHttpUrl, PUBLIC_HTTP_URL_ERROR } from \"../utils/safe-url\";\n\ntype ContextInput = {\n  data?: Record<string, unknown>;\n  ui?: Record<string, unknown>;\n};\n\nfunction resolveLinkUrl(value: string): string {\n  return value.startsWith(\"http://\") || value.startsWith(\"https://\")\n    ? value\n    : `https://${value}`;\n}\n\nfunction widgetType(\n  ui: Record<string, unknown> | undefined,\n  field: string\n): string | undefined {\n  const fieldUi = ui?.[field];\n  if (typeof fieldUi !== \"object\" || fieldUi === null) {\n    return undefined;\n  }\n  const widget = (fieldUi as Record<string, unknown>)[\"ui:widget\"];\n  return typeof widget === \"string\" ? widget : undefined;\n}\n\nfunction validateUrlValue(value: unknown, widget: string): string | null {\n  if (widget === \"image\" || widget === \"link\") {\n    if (typeof value !== \"string\") {\n      return PUBLIC_HTTP_URL_ERROR;\n    }\n    const url = widget === \"link\" ? resolveLinkUrl(value) : value;\n    if (!isPublicHttpUrl(url)) {\n      return PUBLIC_HTTP_URL_ERROR;\n    }\n    return null;\n  }\n\n  if (widget === \"attachments\" && Array.isArray(value)) {\n    for (const item of value) {\n      if (typeof item !== \"object\" || item === null) {\n        continue;\n      }\n      const url = (item as { url?: unknown }).url;\n      if (typeof url === \"string\" && !isPublicHttpUrl(resolveLinkUrl(url))) {\n        return PUBLIC_HTTP_URL_ERROR;\n      }\n    }\n  }\n\n  return null;\n}\n\n/**\n * Validates URL-bearing context widget values (image, link, attachments).\n * Returns an error message or null when valid.\n */\nexport function validateContextPublicUrls(\n  context: ContextInput | undefined\n): string | null {\n  if (!context?.data) {\n    return null;\n  }\n\n  for (const [field, value] of Object.entries(context.data)) {\n    const widget = widgetType(context.ui, field);\n    if (!widget) {\n      continue;\n    }\n    const error = validateUrlValue(value, widget);\n    if (error) {\n      return `context.data.${field}: ${error}`;\n    }\n  }\n\n  return null;\n}\n"],"mappings":";AAAA,SAAS,KAAAA,UAAS;;;ACAlB,IAAM,oBAAoB,oBAAI,IAAI;AAAA,EAChC;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,SAAS,kBAAkB,UAA0B;AACnD,SAAO,SAAS,YAAY,EAAE,QAAQ,YAAY,EAAE;AACtD;AAEA,SAAS,cAAc,MAAuB;AAC5C,QAAM,QAAQ,+CAA+C,KAAK,IAAI;AACtE,MAAI,CAAC,OAAO;AACV,WAAO;AAAA,EACT;AAEA,QAAM,SAAS,MAAM,MAAM,GAAG,CAAC,EAAE,IAAI,CAAC,SAAS,OAAO,IAAI,CAAC;AAC3D,MAAI,OAAO,KAAK,CAAC,UAAU,OAAO,MAAM,KAAK,KAAK,QAAQ,KAAK,QAAQ,GAAG,GAAG;AAC3E,WAAO;AAAA,EACT;AAEA,QAAM,CAAC,GAAG,GAAG,IAAI,EAAE,IAAI;AACvB,MAAI,MAAM,UAAa,MAAM,QAAW;AACtC,WAAO;AAAA,EACT;AACA,MAAI,MAAM,OAAO,MAAM,EAAG,QAAO;AACjC,MAAI,MAAM,GAAI,QAAO;AACrB,MAAI,MAAM,OAAO,MAAM,IAAK,QAAO;AACnC,MAAI,MAAM,OAAO,MAAM,IAAK,QAAO;AACnC,MAAI,MAAM,OAAO,KAAK,MAAM,KAAK,GAAI,QAAO;AAC5C,MAAI,MAAM,OAAO,KAAK,MAAM,KAAK,IAAK,QAAO;AAE7C,SAAO;AACT;AAEA,SAAS,oBAAoB,MAA6B;AACxD,MAAI,QAAQ,KAAK,IAAI,GAAG;AACtB,UAAM,MAAM,OAAO,IAAI;AACvB,QAAI,CAAC,OAAO,SAAS,GAAG,KAAK,MAAM,KAAK,MAAM,YAAY;AACxD,aAAO;AAAA,IACT;AACA,UAAM,IAAK,QAAQ,KAAM;AACzB,UAAM,IAAK,QAAQ,KAAM;AACzB,UAAM,IAAK,QAAQ,IAAK;AACxB,UAAM,IAAI,MAAM;AAChB,WAAO,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AAAA,EAC5B;AAEA,QAAM,WAAW,uBAAuB,KAAK,IAAI;AACjD,MAAI,UAAU;AACZ,UAAM,MAAM,OAAO,SAAS,SAAS,CAAC,GAAI,EAAE;AAC5C,QAAI,CAAC,OAAO,SAAS,GAAG,KAAK,MAAM,KAAK,MAAM,YAAY;AACxD,aAAO;AAAA,IACT;AACA,UAAM,IAAK,QAAQ,KAAM;AACzB,UAAM,IAAK,QAAQ,KAAM;AACzB,UAAM,IAAK,QAAQ,IAAK;AACxB,UAAM,IAAI,MAAM;AAChB,WAAO,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AAAA,EAC5B;AAEA,SAAO;AACT;AAEA,SAAS,oBAAoB,MAAuB;AAClD,QAAM,eAAe,sCAAsC,KAAK,IAAI;AACpE,MAAI,cAAc;AAChB,WAAO,cAAc,aAAa,CAAC,CAAE;AAAA,EACvC;AAEA,QAAM,YAAY,4CAA4C,KAAK,IAAI;AACvE,MAAI,WAAW;AACb,UAAM,OAAO,OAAO,SAAS,UAAU,CAAC,GAAI,EAAE;AAC9C,UAAM,MAAM,OAAO,SAAS,UAAU,CAAC,GAAI,EAAE;AAC7C,QAAI,OAAO,SAAS,IAAI,KAAK,OAAO,SAAS,GAAG,GAAG;AACjD,YAAM,IAAK,QAAQ,IAAK;AACxB,YAAM,IAAI,OAAO;AACjB,YAAM,IAAK,OAAO,IAAK;AACvB,YAAM,IAAI,MAAM;AAChB,aAAO,cAAc,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;AAAA,IAC5C;AAAA,EACF;AAEA,SAAO;AACT;AAEA,SAAS,cAAc,MAAuB;AAC5C,MAAI,SAAS,SAAS,SAAS,mBAAmB;AAChD,WAAO;AAAA,EACT;AACA,MAAI,KAAK,WAAW,IAAI,KAAK,KAAK,WAAW,IAAI,GAAG;AAClD,WAAO;AAAA,EACT;AACA,MAAI,KAAK,WAAW,OAAO,GAAG;AAC5B,WAAO;AAAA,EACT;AACA,MAAI,oBAAoB,IAAI,GAAG;AAC7B,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,SAAS,kBAAkB,UAA2B;AACpD,QAAM,OAAO,kBAAkB,QAAQ;AACvC,MAAI,CAAC,MAAM;AACT,WAAO;AAAA,EACT;AACA,MAAI,kBAAkB,IAAI,IAAI,GAAG;AAC/B,WAAO;AAAA,EACT;AACA,MAAI,KAAK,SAAS,YAAY,KAAK,KAAK,SAAS,QAAQ,GAAG;AAC1D,WAAO;AAAA,EACT;AAEA,QAAM,cAAc,oBAAoB,IAAI;AAC5C,MAAI,eAAe,cAAc,WAAW,GAAG;AAC7C,WAAO;AAAA,EACT;AAEA,SAAO,cAAc,IAAI,KAAK,cAAc,IAAI;AAClD;AAOO,SAAS,qBAAqB,WAA4B;AAC/D,MAAI;AACJ,MAAI;AACF,UAAM,IAAI,IAAI,SAAS;AAAA,EACzB,QAAQ;AACN,WAAO;AAAA,EACT;AAEA,MAAI,IAAI,aAAa,WAAW,IAAI,aAAa,UAAU;AACzD,WAAO;AAAA,EACT;AACA,MAAI,IAAI,YAAY,IAAI,UAAU;AAChC,WAAO;AAAA,EACT;AAEA,QAAM,OAAO,IAAI,SAAS,YAAY;AACtC,SACE,SAAS,eACT,SAAS,eACT,SAAS,SACT,SAAS,WACT,KAAK,SAAS,YAAY;AAE9B;AAKO,SAAS,oBAAoB,WAA4B;AAC9D,SAAO,gBAAgB,SAAS,KAAK,qBAAqB,SAAS;AACrE;AAKO,SAAS,gBAAgB,WAA4B;AAC1D,MAAI;AACJ,MAAI;AACF,UAAM,IAAI,IAAI,SAAS;AAAA,EACzB,QAAQ;AACN,WAAO;AAAA,EACT;AAEA,MAAI,IAAI,aAAa,WAAW,IAAI,aAAa,UAAU;AACzD,WAAO;AAAA,EACT;AACA,MAAI,IAAI,YAAY,IAAI,UAAU;AAChC,WAAO;AAAA,EACT;AAEA,SAAO,CAAC,kBAAkB,IAAI,QAAQ;AACxC;AAEO,IAAM,wBACX;AAEK,IAAM,oBACX;;;ACxLF,SAAS,SAAS;;;ACOlB,SAAS,eAAe,OAAuB;AAC7C,SAAO,MAAM,WAAW,SAAS,KAAK,MAAM,WAAW,UAAU,IAC7D,QACA,WAAW,KAAK;AACtB;AAEA,SAAS,WACP,IACA,OACoB;AACpB,QAAM,UAAU,KAAK,KAAK;AAC1B,MAAI,OAAO,YAAY,YAAY,YAAY,MAAM;AACnD,WAAO;AAAA,EACT;AACA,QAAM,SAAU,QAAoC,WAAW;AAC/D,SAAO,OAAO,WAAW,WAAW,SAAS;AAC/C;AAEA,SAAS,iBAAiB,OAAgB,QAA+B;AACvE,MAAI,WAAW,WAAW,WAAW,QAAQ;AAC3C,QAAI,OAAO,UAAU,UAAU;AAC7B,aAAO;AAAA,IACT;AACA,UAAM,MAAM,WAAW,SAAS,eAAe,KAAK,IAAI;AACxD,QAAI,CAAC,gBAAgB,GAAG,GAAG;AACzB,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT;AAEA,MAAI,WAAW,iBAAiB,MAAM,QAAQ,KAAK,GAAG;AACpD,eAAW,QAAQ,OAAO;AACxB,UAAI,OAAO,SAAS,YAAY,SAAS,MAAM;AAC7C;AAAA,MACF;AACA,YAAM,MAAO,KAA2B;AACxC,UAAI,OAAO,QAAQ,YAAY,CAAC,gBAAgB,eAAe,GAAG,CAAC,GAAG;AACpE,eAAO;AAAA,MACT;AAAA,IACF;AAAA,EACF;AAEA,SAAO;AACT;AAMO,SAAS,0BACd,SACe;AACf,MAAI,CAAC,SAAS,MAAM;AAClB,WAAO;AAAA,EACT;AAEA,aAAW,CAAC,OAAO,KAAK,KAAK,OAAO,QAAQ,QAAQ,IAAI,GAAG;AACzD,UAAM,SAAS,WAAW,QAAQ,IAAI,KAAK;AAC3C,QAAI,CAAC,QAAQ;AACX;AAAA,IACF;AACA,UAAM,QAAQ,iBAAiB,OAAO,MAAM;AAC5C,QAAI,OAAO;AACT,aAAO,gBAAgB,KAAK,KAAK,KAAK;AAAA,IACxC;AAAA,EACF;AAEA,SAAO;AACT;;;AD5CO,IAAM,gBAAgB,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,gBAAgB,GAAG,GAAG;AAAA,EAC5E,SAAS;AACX,CAAC;AAED,IAAM,mBAAmB,EAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,oBAAoB,GAAG,GAAG;AAAA,EAC5E,SAAS;AACX,CAAC;AAGD,IAAM,oBAAoB,EAAE;AAAA,EAC1B,CAAC,QAAQ,OAAO,QAAQ,YAAY,QAAQ;AAAA,EAC5C,EAAE,SAAS,qCAAqC;AAClD;AAGA,IAAM,iBAAiB,EAAE,OAAiB,CAAC,QAAQ,OAAO,QAAQ,YAAY,QAAQ,MAAM;AAAA,EAC1F,SAAS;AACX,CAAC;AAGD,IAAM,uBAAuB,EAAE,OAAO;AAAA,EACpC,MAAM,EAAE,QAAQ,SAAS;AAAA,EACzB,KAAK;AAAA,EACL,SAAS,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,OAAO,CAAC;AAC1C,CAAC;AAED,IAAM,uBAAuB,qBAAqB,OAAO;AAAA,EACvD,MAAM,EAAE,QAAQ,SAAS;AAAA,EACzB,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC;AAC3B,CAAC;AAED,IAAM,gBAAgB,EAAE,mBAAmB,QAAQ,CAAC,sBAAsB,oBAAoB,CAAC;AAGxF,IAAM,wBAAwB,EAAE,OAAO;AAAA,EAC5C,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACpB,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACvB,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,QAAQ,kBAAkB,SAAS;AAAA,EACnC,IAAI,eAAe,SAAS;AAAA,EAC5B,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AACnD,CAAC;AAGD,IAAM,mBAAmB,sBAAsB,OAAO;AAAA;AAAA,EAEpD,UAAU,EAAE,MAAM,aAAa,EAAE,IAAI,CAAC,EAAE,SAAS;AACnD,CAAC;AAGD,IAAM,sBAA0D,EAC7D,OAAO;AAAA,EACN,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,kBAAkB,EAAE,OAAO,EAAE,SAAS;AAAA,EACtC,cAAc,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EACzD,OAAO,EAAE,KAAK,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,mBAAmB,CAAC,EAAE,SAAS;AAC1E,CAAC,EACA,YAAY;AAGf,IAAM,kBAAkB,EAAE,OAAO,EAAE,OAAO,GAAG,mBAAmB,EAAE,SAAS;AAG3E,IAAM,oBAAoB,EACvB,OAAO;AAAA,EACN,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC;AAAA,EACtC,IAAI;AACN,CAAC,EACA,SAAS;AAEL,IAAM,8BAA8B;AAI3C,IAAM,8BAA8B,EAAE,OAAO;AAAA;AAAA,EAE3C,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EAChC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACtB,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACtB,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAChC,SAAS;AAAA;AAAA,EAET,gBAAgB,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA;AAAA,EAEtC,SAAS,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EAC/B,SAAS,EAAE,MAAM,gBAAgB,EAAE,IAAI,GAAG,iCAAiC;AAC7E,CAAC;AAED,SAAS,4BACP,MAC+D;AAC/D,QAAM,EAAE,SAAS,eAAe,gBAAgB,GAAG,KAAK,IAAI;AAC5D,SAAO;AAAA,IACL,GAAG;AAAA,IACH,gBAAgB,kBAAkB,iBAAiB;AAAA,EACrD;AACF;AAEA,IAAM,0BAA0B,4BAA4B;AAAA,EAC1D;AACF;AAEA,SAAS,wBACP,MACA,KACA;AACA,QAAM,QAAQ,0BAA0B,KAAK,OAAO;AACpD,MAAI,OAAO;AACT,QAAI,SAAS;AAAA,MACX,MAAM,EAAE,aAAa;AAAA,MACrB,SAAS;AAAA,MACT,MAAM,CAAC,SAAS;AAAA,IAClB,CAAC;AAAA,EACH;AACF;AAEO,IAAM,oBAAoB,wBAAwB;AAAA,EACvD;AACF;AAMO,IAAM,iBAAiB,EAC3B,OAAO;AAAA,EACN,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,SAAS;AAAA,EAC5C,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,EAAE,SAAS;AAC9C,CAAC,EACA;AAAA,EACC,CAAC,SAAS;AACR,UAAM,SAAS,KAAK,UAAU,CAAC;AAC/B,QAAI,OAAO,SAAS,KAAK,KAAK,OAAO,SAAS,GAAG;AAC/C,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT;AAAA,EACA,EAAE,SAAS,8CAA8C;AAC3D;AAGK,IAAM,4BAA4B,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAM3D,IAAM,uBAAuB;AAAA,EAClC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEO,IAAM,2BAA2B,EAAE,KAAK,oBAAoB;AAM5D,IAAM,0BAA0B,EAAE,OAAO;AAAA,EAC9C,SAAS;AAAA,EACT,QAAQ,yBAAyB,SAAS;AAC5C,CAAC;AAGM,IAAM,iBAAiB,CAAC,OAAO,UAAU,QAAQ,QAAQ;AAEzD,IAAM,qBAAqB,EAAE,KAAK,cAAc;AAmBhD,IAAM,uBAAuB,EAAE,OAAO;AAAA;AAAA,EAE3C,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC;AAC3B,CAAC;AAGM,IAAM,uBAAuB,4BACjC,OAAO;AAAA,EACN,UAAU,eAAe,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA,EAKlC,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA,EAKrC,UAAU,mBAAmB,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA,EAKtC,QAAQ,wBAAwB,SAAS;AAAA;AAAA,EAEzC,OAAO,qBAAqB,SAAS;AACvC,CAAC,EACA,UAAU,2BAA2B,EACrC,YAAY,uBAAuB;AAM/B,IAAM,4BAA4B,EAAE,OAAO;AAAA;AAAA,EAEhD,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EAC/B,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACvB,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA,EAEjC,QAAQ,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA;AAAA,EAEnD,IAAI,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA;AAAA,EAE/C,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AACnD,CAAC;AAGM,IAAM,6BAA6B,EAAE,OAAO;AAAA,EACjD,MAAM,EAAE,KAAK,CAAC,QAAQ,WAAW,CAAC;AAAA,EAClC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA;AAAA,EAEtB,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMvC,oBAAoB,EACjB,OAAO;AAAA,IACN,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,IAC5B,QAAQ;AAAA,EACV,CAAC,EACA,SAAS;AACd,CAAC;AAMD,IAAM,8BAA8B,EAAE,OAAO;AAAA,EAC3C,MAAM,EAAE,QAAQ,KAAK;AAAA,EACrB,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACxB,SAAS,EAAE,OAAO,EAAE,IAAI;AAAA,EACxB,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA,EAC/B,mBAAmB,EAAE,OAAO,EAAE,SAAS;AAAA,EACvC,aAAa,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS;AAAA,EACrD,aAAa,EAAE,QAAQ,EAAE,SAAS;AACpC,CAAC;AAEM,IAAM,4BAA4B,EACtC,OAAO;AAAA;AAAA,EAEN,iBAAiB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA;AAAA,EAE5C,cAAc,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA;AAAA,EAEzC,iBAAiB,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA;AAAA,EAE5C,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EAChC,UAAU,eAAe,SAAS;AAAA,EAClC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACvB,UAAU,EAAE,MAAM,0BAA0B,EAAE,QAAQ,CAAC,CAAC;AAAA;AAAA,EAExD,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AACrC,CAAC,EACA,OAAO,CAAC,SAAS,QAAQ,KAAK,mBAAmB,KAAK,YAAY,GAAG;AAAA,EACpE,SAAS;AACX,CAAC;AAMI,IAAM,gCAAgC,EAAE,OAAO;AAAA,EACpD,cAAc,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC9B,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACxB,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC1B,aAAa,EAAE,OAAO,EAAE,SAAS;AAAA,EACjC,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EACjD,gBAAgB,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA,EAEpC,WAAW,EAAE,OAAO,EAAE,SAAS;AAAA;AAAA,EAE/B,YAAY,EAAE,OAAO,EAAE,SAAS;AAClC,CAAC;AAED,IAAM,4BAA4B,EAAE,OAAO;AAAA,EACzC,IAAI,EAAE,OAAO;AAAA,EACb,OAAO,EAAE,OAAO;AAClB,CAAC;AAGM,IAAM,+BAA+B,EAAE,OAAO;AAAA,EACnD,cAAc,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC9B,UAAU,EAAE;AAAA,IACV,EAAE,OAAO;AAAA,MACP,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,MAC3B,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,MAC5B,UAAU,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,MAC1B,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,MACxB,SAAS,EAAE,KAAK,CAAC,gBAAgB,UAAU,MAAM,CAAC,EAAE,SAAS;AAAA,MAC7D,eAAe,EAAE,QAAQ,EAAE,SAAS;AAAA,MACpC,SAAS,EAAE,MAAM,yBAAyB,EAAE,SAAS;AAAA,MACrD,WAAW,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,IACxD,CAAC;AAAA,EACH;AACF,CAAC;AAGM,IAAM,8BAA8B,EAAE,OAAO;AAAA,EAClD,cAAc,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC9B,cAAc,EAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EAC9B,YAAY,EAAE,OAAO,EAAE,IAAI,CAAC;AAC9B,CAAC;;;AFpSD,IAAMC,oBAAmBC,GAAE,OAAO,EAAE,OAAO,CAAC,QAAQ,oBAAoB,GAAG,GAAG;AAAA,EAC5E,SAAS;AACX,CAAC;AAED,IAAMC,qBAAoBD,GAAE;AAAA,EAC1B,CAAC,QAAQ,OAAO,QAAQ,YAAY,QAAQ;AAAA,EAC5C,EAAE,SAAS,qCAAqC;AAClD;AAEA,IAAME,kBAAiBF,GAAE,OAAiB,CAAC,QAAQ,OAAO,QAAQ,YAAY,QAAQ,MAAM;AAAA,EAC1F,SAAS;AACX,CAAC;AAED,IAAMG,wBAAuBH,GAAE,OAAO;AAAA,EACpC,MAAMA,GAAE,QAAQ,SAAS;AAAA,EACzB,KAAKD;AAAA,EACL,SAASC,GAAE,OAAOA,GAAE,OAAO,GAAGA,GAAE,OAAO,CAAC;AAC1C,CAAC;AAED,IAAMI,wBAAuBD,sBAAqB,OAAO;AAAA,EACvD,MAAMH,GAAE,QAAQ,SAAS;AAAA,EACzB,SAASA,GAAE,OAAO,EAAE,IAAI,CAAC;AAC3B,CAAC;AAED,IAAMK,iBAAgBL,GAAE,mBAAmB,QAAQ,CAACG,uBAAsBC,qBAAoB,CAAC;AAGxF,IAAME,yBAAwBN,GAAE,OAAO;AAAA,EAC5C,IAAIA,GAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACpB,OAAOA,GAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACvB,aAAaA,GAAE,OAAO,EAAE,SAAS;AAAA,EACjC,QAAQC,mBAAkB,SAAS;AAAA,EACnC,IAAIC,gBAAe,SAAS;AAAA,EAC5B,MAAMF,GAAE,OAAOA,GAAE,OAAO,GAAGA,GAAE,QAAQ,CAAC,EAAE,SAAS;AACnD,CAAC;AAED,IAAMO,oBAAmBD,uBAAsB,OAAO;AAAA,EACpD,UAAUN,GAAE,MAAMK,cAAa,EAAE,IAAI,CAAC,EAAE,SAAS;AACnD,CAAC;AAED,IAAMG,uBAA0DR,GAC7D,OAAO;AAAA,EACN,aAAaA,GAAE,OAAO,EAAE,SAAS;AAAA,EACjC,YAAYA,GAAE,OAAO,EAAE,SAAS;AAAA,EAChC,kBAAkBA,GAAE,OAAO,EAAE,SAAS;AAAA,EACtC,cAAcA,GAAE,OAAOA,GAAE,OAAO,GAAGA,GAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EACzD,OAAOA,GAAE,KAAK,MAAMA,GAAE,OAAOA,GAAE,OAAO,GAAGQ,oBAAmB,CAAC,EAAE,SAAS;AAC1E,CAAC,EACA,YAAY;AAEf,IAAMC,mBAAkBT,GAAE,OAAOA,GAAE,OAAO,GAAGQ,oBAAmB,EAAE,SAAS;AAE3E,IAAME,qBAAoBV,GACvB,OAAO;AAAA,EACN,MAAMA,GAAE,OAAOA,GAAE,OAAO,GAAGA,GAAE,QAAQ,CAAC;AAAA,EACtC,IAAIS;AACN,CAAC,EACA,SAAS;AAGL,IAAME,+BAA8B;AAG3C,IAAMC,+BAA8BZ,GAAE,OAAO;AAAA,EAC3C,KAAKA,GAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA,EAChC,MAAMA,GAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACtB,MAAMA,GAAE,OAAO,EAAE,IAAI,CAAC;AAAA,EACtB,aAAaA,GAAE,OAAO,EAAE,SAAS;AAAA,EACjC,YAAYA,GAAE,OAAO,EAAE,SAAS;AAAA,EAChC,SAASU;AAAA,EACT,gBAAgBV,GAAE,QAAQ,CAAC,EAAE,SAAS;AAAA;AAAA,EAEtC,SAASA,GAAE,QAAQ,CAAC,EAAE,SAAS;AAAA,EAC/B,SAASA,GAAE,MAAMO,iBAAgB,EAAE,IAAI,GAAG,iCAAiC;AAC7E,CAAC;AAED,SAASM,6BACP,MAC+D;AAC/D,QAAM,EAAE,SAAS,eAAe,gBAAgB,GAAG,KAAK,IAAI;AAC5D,SAAO;AAAA,IACL,GAAG;AAAA,IACH,gBAAgB,kBAAkB,iBAAiBF;AAAA,EACrD;AACF;AAEA,IAAMG,2BAA0BF,6BAA4B;AAAA,EAC1DC;AACF;AAEA,SAASE,yBACP,MACA,KACA;AACA,QAAM,QAAQ,0BAA0B,KAAK,OAAO;AACpD,MAAI,OAAO;AACT,QAAI,SAAS;AAAA,MACX,MAAMf,GAAE,aAAa;AAAA,MACrB,SAAS;AAAA,MACT,MAAM,CAAC,SAAS;AAAA,IAClB,CAAC;AAAA,EACH;AACF;AAEO,IAAMgB,qBAAoBF,yBAAwB;AAAA,EACvDC;AACF;AAMO,IAAME,kBAAiBjB,GAC3B,OAAO;AAAA,EACN,OAAOA,GAAE,MAAMA,GAAE,OAAO,EAAE,MAAM,CAAC,EAAE,SAAS;AAAA,EAC5C,QAAQA,GAAE,MAAMA,GAAE,OAAO,EAAE,IAAI,CAAC,CAAC,EAAE,SAAS;AAC9C,CAAC,EACA;AAAA,EACC,CAAC,SAAS;AACR,UAAM,SAAS,KAAK,UAAU,CAAC;AAC/B,QAAI,OAAO,SAAS,KAAK,KAAK,OAAO,SAAS,GAAG;AAC/C,aAAO;AAAA,IACT;AACA,WAAO;AAAA,EACT;AAAA,EACA,EAAE,SAAS,8CAA8C;AAC3D;AAGK,IAAMkB,6BAA4BlB,GAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,GAAG;AAM3D,IAAMmB,wBAAuB;AAAA,EAClC;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEO,IAAMC,4BAA2BpB,GAAE,KAAKmB,qBAAoB;AAG5D,IAAM,+BAAmD;AAGzD,IAAME,2BAA0BrB,GAAE,OAAO;AAAA,EAC9C,SAASkB;AAAA,EACT,QAAQE,0BAAyB,SAAS;AAC5C,CAAC;AAGM,IAAME,kBAAiB,CAAC,OAAO,UAAU,QAAQ,QAAQ;AAEzD,IAAMC,sBAAqBvB,GAAE,KAAKsB,eAAc;AAIhD,IAAM,wBAAsC;AAE5C,IAAM,uBAAqC;AAE3C,IAAM,qBAAmD;AAAA,EAC9D,KAAK;AAAA,EACL,QAAQ;AAAA,EACR,MAAM;AAAA,EACN,QAAQ;AACV;AAEO,IAAME,wBAAuBxB,GAAE,OAAO;AAAA,EAC3C,SAASA,GAAE,OAAO,EAAE,IAAI,CAAC;AAC3B,CAAC;AAEM,IAAMyB,wBAAuBb,6BACjC,OAAO;AAAA,EACN,UAAUK,gBAAe,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA,EAKlC,UAAUjB,GAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA,EAKrC,UAAUuB,oBAAmB,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA,EAKtC,QAAQF,yBAAwB,SAAS;AAAA,EACzC,OAAOG,sBAAqB,SAAS;AACvC,CAAC,EACA,UAAUX,4BAA2B,EACrC,YAAYE,wBAAuB;AAG/B,IAAM,yBAAyBM;","names":["z","handlerUrlSchema","z","jsonSchema7Schema","uiSchemaSchema","webhookHandlerSchema","triggerHandlerSchema","handlerSchema","taskActionInputSchema","taskActionSchema","uiFieldSchemaSchema","contextUiSchema","contextDataSchema","TASK_CONTEXT_FORMAT_VERSION","taskContextObjectBaseSchema","normalizeTaskContextVersion","taskContextObjectSchema","refineContextPublicUrls","taskContextSchema","assignToSchema","threadUpdateMessageSchema","threadUpdateStatuses","threadUpdateStatusSchema","threadUpdateInputSchema","taskPriorities","taskPrioritySchema","agentTelemetrySchema","createTaskBodySchema"]}

package/dist/tenant-5YKDrdC-.d.ts

@@ -0,0 +1,23 @@
+import { SessionContext } from 'eve/context';
+
+type TenantRole = "admin" | "member";
+type TenantCaller = {
+    userId: string;
+    email: string;
+    name: string;
+    tenantSlug: string;
+    connectionId?: string;
+    role: TenantRole;
+    isAdmin: boolean;
+    groups: string[];
+    workosUserId?: string;
+};
+/** Resolve the authenticated RobotRock dashboard user for the current session. */
+declare function tryResolveTenantCaller(ctx: SessionContext): TenantCaller | null;
+/** Like {@link tryResolveTenantCaller} but throws when the session has no user. */
+declare function requireTenantCaller(ctx: SessionContext): TenantCaller;
+declare function isAdminCaller(ctx: SessionContext): boolean;
+/** Require an authenticated tenant admin for the current session. */
+declare function requireAdminCaller(ctx: SessionContext): TenantCaller;
+
+export { type TenantRole as T, type TenantCaller as a, requireTenantCaller as b, isAdminCaller as i, requireAdminCaller as r, tryResolveTenantCaller as t };

package/dist/{tool-approval-bridge-DbwUEBHv.d.ts → tool-approval-bridge-C4bTm8vu.d.ts}

@@ -1,5 +1,5 @@
 import { z } from 'zod';
-import { R as RobotRock, a as SendToHumanInput, S as SendToHumanActionInput, n as SendUpdateInput } from './client-CzVmjXpz.js';
+import { R as RobotRock, a as SendToHumanInput, S as SendToHumanActionInput, n as SendUpdateInput } from './client-XTnFHGFE.js';
 import { DiscriminatedApprovalResult, ThreadUpdate } from './schemas/index.js';
 import { ToolApprovalResponse } from 'ai';
 

package/dist/trigger/index.d.ts

@@ -1,7 +1,7 @@
 import * as _trigger_dev_sdk from '@trigger.dev/sdk';
 import { R as RobotRockPlatformOtelFields } from '../otel-platform-DzHyHkGk.js';
 export { a as RobotRockHandlerWebhookPayload } from '../otel-platform-DzHyHkGk.js';
-import { S as SendToHumanActionInput, a as SendToHumanInput } from '../client-CzVmjXpz.js';
+import { S as SendToHumanActionInput, a as SendToHumanInput } from '../client-XTnFHGFE.js';
 export { ApprovalResult, DiscriminatedApprovalResult, TaskContextInput, TaskResult } from '../schemas/index.js';
 import '@opentelemetry/api';
 import '@robotrock/core';