studiograph 1.3.47 → 1.3.48-beta.1

package/dist/core/schema-registry.js

@@ -6,6 +6,7 @@
  */
 import { z } from 'zod';
 import { ENTITY_SCHEMAS, EntityBaseSchema } from './validation.js';
+import { BUILTIN_BODY_TEMPLATES } from './entity-body-templates.js';
 /**
  * Build a record of Zod field entries from an array of FieldDefinitions.
  */
@@ -49,6 +50,139 @@ function buildZodFields(fields) {
     }
     return result;
 }
+/** Unwrap optional/default/nullable wrappers to expose the inner type. */
+function unwrapZod(schema) {
+    let current = schema;
+    while (current instanceof z.ZodOptional ||
+        current instanceof z.ZodDefault ||
+        (current && typeof current === 'object' && 'innerType' in (current._def ?? {}))) {
+        const inner = current._def?.innerType ?? current.def?.innerType;
+        if (!inner)
+            break;
+        current = inner;
+    }
+    return current;
+}
+/** Infer a simple type string from a Zod schema */
+function inferZodType(schema) {
+    const inner = unwrapZod(schema);
+    if (inner instanceof z.ZodString) {
+        const format = readStringFormat(inner);
+        if (format)
+            return format;
+        return 'string';
+    }
+    if (inner instanceof z.ZodNumber)
+        return 'number';
+    if (inner instanceof z.ZodBoolean)
+        return 'boolean';
+    if (inner instanceof z.ZodEnum)
+        return 'enum';
+    if (inner instanceof z.ZodArray) {
+        const element = (inner._def?.element ?? inner.def?.element);
+        if (element instanceof z.ZodEnum)
+            return 'enum[]';
+        return inferZodType(element ?? z.string()) + '[]';
+    }
+    if (inner instanceof z.ZodLiteral)
+        return 'string';
+    return 'string';
+}
+/** Detect ZodString format checks (url, datetime, date, email). */
+function readStringFormat(schema) {
+    const checks = schema._def?.checks;
+    if (!Array.isArray(checks))
+        return null;
+    for (const c of checks) {
+        const fmt = c?.def?.format ?? c?.type;
+        if (fmt === 'url' || fmt === 'email' || fmt === 'datetime' || fmt === 'date')
+            return fmt;
+    }
+    return null;
+}
+/** Read `.meta()` (Zod v4 global registry) off a field, tolerating both the
+ *  outer wrapper and unwrapped inner node. Used to surface the date
+ *  `dateRole` + `label` that ride on the entity date vocabulary. */
+function readMeta(schema) {
+    const fn = schema?.meta;
+    if (typeof fn === 'function') {
+        const m = fn.call(schema);
+        if (m && typeof m === 'object')
+            return m;
+    }
+    return undefined;
+}
+/** Read enum values off a ZodEnum (Zod v4 stores entries as { value: value }). */
+function readEnumValues(schema) {
+    const inner = unwrapZod(schema);
+    if (!(inner instanceof z.ZodEnum))
+        return null;
+    if (Array.isArray(inner.options))
+        return [...inner.options];
+    const entries = (inner._def?.entries ?? inner.def?.entries);
+    if (entries)
+        return Object.values(entries);
+    return null;
+}
+/**
+ * Read the default value off a ZodDefault wrapper, if present. Used by
+ * describeEntitySchema so the agent can see "stage defaults to qualification".
+ */
+function readDefaultValue(schema) {
+    let current = schema;
+    while (current instanceof z.ZodOptional) {
+        current = current._def?.innerType;
+    }
+    if (current instanceof z.ZodDefault) {
+        const def = current._def?.defaultValue ?? current.def?.defaultValue;
+        return typeof def === 'function' ? def() : def;
+    }
+    return undefined;
+}
+/**
+ * Walk a Zod object schema and emit per-field descriptors. Surfaces enums,
+ * array element types, string formats (url/email/datetime), defaults, and
+ * descriptions — the metadata the agent needs to write valid frontmatter
+ * without memorizing schemas.
+ */
+export function describeZodObject(schema) {
+    const out = {};
+    if (!(schema instanceof z.ZodObject))
+        return out;
+    const shape = schema.shape;
+    for (const [name, field] of Object.entries(shape)) {
+        const inner = unwrapZod(field);
+        const descriptor = {
+            type: inferZodType(field),
+            optional: typeof field.isOptional === 'function' ? field.isOptional() : false,
+            description: field.description ?? inner?.description ?? '',
+        };
+        if (inner instanceof z.ZodEnum) {
+            const values = readEnumValues(inner);
+            if (values)
+                descriptor.enum = values;
+        }
+        else if (inner instanceof z.ZodArray) {
+            const element = (inner._def?.element ?? inner.def?.element);
+            if (element) {
+                descriptor.itemType = inferZodType(element);
+                const enumValues = readEnumValues(element);
+                if (enumValues)
+                    descriptor.itemEnum = enumValues;
+            }
+        }
+        const defaultValue = readDefaultValue(field);
+        if (defaultValue !== undefined)
+            descriptor.default = defaultValue;
+        const meta = readMeta(field);
+        if (meta?.dateRole)
+            descriptor.role = meta.dateRole;
+        if (typeof meta?.label === 'string')
+            descriptor.label = meta.label;
+        out[name] = descriptor;
+    }
+    return out;
+}
 export class SchemaRegistry {
     extensions;
     schemaCache = new Map();
@@ -103,6 +237,70 @@ export class SchemaRegistry {
     getFieldDefs(entityType) {
         return this.fieldDefsCache.get(entityType) ?? [];
     }
+    /**
+     * Get the body template for an entity type.
+     * Workspace extension body_template overrides built-in defaults.
+     * Returns null for types with no template (e.g., note, dataset).
+     */
+    getBodyTemplate(entityType) {
+        // Workspace override takes priority
+        const ext = this.extensions[entityType];
+        if (ext?.body_template)
+            return ext.body_template;
+        // Fall back to built-in
+        return BUILTIN_BODY_TEMPLATES[entityType] ?? null;
+    }
+    /**
+     * Get field metadata for an entity type by introspecting the Zod schema.
+     * Returns field name, inferred type, required status, and description.
+     * Enum values, defaults, and array element metadata are surfaced when
+     * present so the agent can write valid frontmatter without memorizing
+     * schemas.
+     */
+    getFieldMetadata(entityType) {
+        const schema = this.getSchema(entityType);
+        const fields = [];
+        if (schema instanceof z.ZodObject) {
+            const descriptors = describeZodObject(schema);
+            for (const [name, d] of Object.entries(descriptors)) {
+                fields.push({
+                    name,
+                    type: d.type,
+                    required: !d.optional,
+                    description: d.description || undefined,
+                    ...(d.enum ? { enum: d.enum } : {}),
+                    ...(d.default !== undefined ? { default: d.default } : {}),
+                    ...(d.itemType ? { itemType: d.itemType } : {}),
+                    ...(d.itemEnum ? { itemEnum: d.itemEnum } : {}),
+                    ...(d.role ? { role: d.role } : {}),
+                    ...(d.label ? { label: d.label } : {}),
+                });
+            }
+        }
+        // Add extension fields
+        const extFields = this.getFieldDefs(entityType);
+        for (const f of extFields) {
+            if (!fields.some(existing => existing.name === f.name)) {
+                fields.push({
+                    name: f.name,
+                    type: f.type,
+                    required: f.required ?? false,
+                    description: f.description,
+                    ...(f.type === 'enum' && f.enum_values?.length ? { enum: [...f.enum_values] } : {}),
+                });
+            }
+        }
+        return fields;
+    }
+    /**
+     * The custom display label for an entity type, if one is defined in the
+     * workspace's schema extensions (e.g. a custom type "client" labelled
+     * "Client Account"). Returns undefined for built-in types and unlabelled
+     * extensions — callers fall back to title-casing the type key.
+     */
+    getCustomTypeLabel(type) {
+        return this.extensions[type]?.label;
+    }
     /**
      * Get all entity type names: built-in types + custom extension types.
      */

package/dist/core/schema-registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"schema-registry.js","sourceRoot":"","sources":["../../src/core/schema-registry.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAEnE;;GAEG;AACH,SAAS,cAAc,CAAC,MAAyB;IAC/C,MAAM,MAAM,GAAiC,EAAE,CAAC;IAEhD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,OAAqB,CAAC;QAE1B,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;YACnB,KAAK,QAAQ;gBACX,OAAO,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;gBACrB,MAAM;YACR,KAAK,QAAQ;gBACX,OAAO,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;gBACrB,MAAM;YACR,KAAK,SAAS;gBACZ,OAAO,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;gBACtB,MAAM;YACR,KAAK,MAAM,CAAC,CAAC,CAAC;gBACZ,MAAM,MAAM,GAAG,KAAK,CAAC,WAAW,CAAC;gBACjC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACnC,OAAO,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,kCAAkC;gBAC1D,CAAC;qBAAM,CAAC;oBACN,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,MAA+B,CAAC,CAAC;gBACpD,CAAC;gBACD,MAAM;YACR,CAAC;YACD,KAAK,UAAU;gBACb,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC9B,MAAM;YACR;gBACE,OAAO,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;QACzB,CAAC;QAED,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;YACtB,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAChD,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;YACpB,OAAO,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC/B,CAAC;QAED,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC;IAC/B,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,OAAO,cAAc;IACjB,UAAU,CAAkC;IAC5C,WAAW,GAA8B,IAAI,GAAG,EAAE,CAAC;IACnD,cAAc,GAAmC,IAAI,GAAG,EAAE,CAAC;IAEnE,YAAY,UAA4C;QACtD,IAAI,CAAC,UAAU,GAAG,UAAU,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,KAAK,EAAE,CAAC;IACf,CAAC;IAEO,KAAK;QACX,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;QAE1D,KAAK,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACnE,IAAI,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC9B,qCAAqC;gBACrC,MAAM,IAAI,GAAG,cAAc,CAAC,OAAsC,CAAC,CAAC;gBACpE,MAAM,gBAAgB,GAAG,SAAS,CAAC,iBAAiB,IAAI,EAAE,CAAC;gBAC3D,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAChC,MAAM,SAAS,GAAG,cAAc,CAAC,gBAAgB,CAAC,CAAC;oBACnD,MAAM,QAAQ,GAAI,IAAyB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;oBAC9D,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;gBAC1C,CAAC;gBACD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;YACrD,CAAC;iBAAM,CAAC;gBACN,gDAAgD;gBAChD,MAAM,YAAY,GAAG,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC;gBAC5C,MAAM,SAAS,GAAG,cAAc,CAAC,YAAY,CAAC,CAAC;gBAC/C,MAAM,MAAM,GAAI,gBAAqC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;gBACtF,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBACtC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,SAAS,CAAC,UAAkB;QAC1B,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAE,CAAC;QAC3C,CAAC;QACD,IAAI,UAAU,IAAI,cAAc,EAAE,CAAC;YACjC,OAAO,cAAc,CAAC,UAAyC,CAAC,CAAC;QACnE,CAAC;QACD,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAED;;;;;OAKG;IACH,YAAY,CAAC,UAAkB;QAC7B,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;IACnD,CAAC;IAED;;OAEG;IACH,WAAW;QACT,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC5C,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,CACrD,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,cAAc,CAAC,CAC5B,CAAC;QACF,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC;IAED;;;OAGG;IACH,eAAe;QACb,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9C,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;QAC1D,MAAM,KAAK,GAAa,CAAC,gCAAgC,EAAE,EAAE,CAAC,CAAC;QAE/D,KAAK,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACnE,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC5C,MAAM,MAAM,GAAG,SAAS;gBACtB,CAAC,CAAC,CAAC,SAAS,CAAC,iBAAiB,IAAI,EAAE,CAAC;gBACrC,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;YAE7B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YAElC,IAAI,SAAS,EAAE,CAAC;gBACd,KAAK,CAAC,IAAI,CAAC,KAAK,OAAO,yBAAyB,CAAC,CAAC;YACpD,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,GAAG,SAAS,CAAC,WAAW;oBAChC,CAAC,CAAC,KAAK,SAAS,CAAC,WAAW,GAAG;oBAC/B,CAAC,CAAC,EAAE,CAAC;gBACP,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,IAAI,OAAO,CAAC;gBACzC,KAAK,CAAC,IAAI,CAAC,KAAK,OAAO,0BAA0B,IAAI,GAAG,CAAC,CAAC;gBAC1D,IAAI,SAAS,CAAC,KAAK,IAAI,SAAS,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;oBACnD,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,KAAK,OAAO,OAAO,KAAK,yBAAyB,IAAI,GAAG,CAAC;gBACrF,CAAC;YACH,CAAC;YAED,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;gBACrD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,MAAM;oBAChE,CAAC,CAAC,SAAS,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;oBACxC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;gBACf,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnE,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,IAAI,OAAO,OAAO,KAAK,GAAG,IAAI,QAAQ,EAAE,CAAC,CAAC;YACpE,CAAC;YAED,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;QAED,6BAA6B;QAC7B,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;YAC1D,KAAK,CAAC,GAAG,EAAE,CAAC;QACd,CAAC;QAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;CACF"}
+{"version":3,"file":"schema-registry.js","sourceRoot":"","sources":["../../src/core/schema-registry.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAiB,MAAM,iBAAiB,CAAC;AAClF,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAEpE;;GAEG;AACH,SAAS,cAAc,CAAC,MAAyB;IAC/C,MAAM,MAAM,GAAiC,EAAE,CAAC;IAEhD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,OAAqB,CAAC;QAE1B,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;YACnB,KAAK,QAAQ;gBACX,OAAO,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;gBACrB,MAAM;YACR,KAAK,QAAQ;gBACX,OAAO,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;gBACrB,MAAM;YACR,KAAK,SAAS;gBACZ,OAAO,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;gBACtB,MAAM;YACR,KAAK,MAAM,CAAC,CAAC,CAAC;gBACZ,MAAM,MAAM,GAAG,KAAK,CAAC,WAAW,CAAC;gBACjC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACnC,OAAO,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,kCAAkC;gBAC1D,CAAC;qBAAM,CAAC;oBACN,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,MAA+B,CAAC,CAAC;gBACpD,CAAC;gBACD,MAAM;YACR,CAAC;YACD,KAAK,UAAU;gBACb,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC9B,MAAM;YACR;gBACE,OAAO,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;QACzB,CAAC;QAED,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;YACtB,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAChD,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;YACpB,OAAO,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC/B,CAAC;QAED,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC;IAC/B,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,0EAA0E;AAC1E,SAAS,SAAS,CAAC,MAAoB;IACrC,IAAI,OAAO,GAAQ,MAAM,CAAC;IAC1B,OACE,OAAO,YAAY,CAAC,CAAC,WAAW;QAChC,OAAO,YAAY,CAAC,CAAC,UAAU;QAC/B,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,WAAW,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,EAC/E,CAAC;QACD,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,SAAS,IAAI,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC;QAChE,IAAI,CAAC,KAAK;YAAE,MAAM;QAClB,OAAO,GAAG,KAAK,CAAC;IAClB,CAAC;IACD,OAAO,OAAuB,CAAC;AACjC,CAAC;AAED,mDAAmD;AACnD,SAAS,YAAY,CAAC,MAAoB;IACxC,MAAM,KAAK,GAAQ,SAAS,CAAC,MAAM,CAAC,CAAC;IACrC,IAAI,KAAK,YAAY,CAAC,CAAC,SAAS,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,KAAK,YAAY,CAAC,CAAC,SAAS;QAAE,OAAO,QAAQ,CAAC;IAClD,IAAI,KAAK,YAAY,CAAC,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC;IACpD,IAAI,KAAK,YAAY,CAAC,CAAC,OAAO;QAAE,OAAO,MAAM,CAAC;IAC9C,IAAI,KAAK,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,IAAI,KAAK,CAAC,GAAG,EAAE,OAAO,CAA6B,CAAC;QACxF,IAAI,OAAO,YAAY,CAAC,CAAC,OAAO;YAAE,OAAO,QAAQ,CAAC;QAClD,OAAO,YAAY,CAAC,OAAO,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC;IACpD,CAAC;IACD,IAAI,KAAK,YAAY,CAAC,CAAC,UAAU;QAAE,OAAO,QAAQ,CAAC;IACnD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,mEAAmE;AACnE,SAAS,gBAAgB,CAAC,MAAoB;IAC5C,MAAM,MAAM,GAAI,MAAc,CAAC,IAAI,EAAE,MAA2B,CAAC;IACjE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,CAAC,EAAE,GAAG,EAAE,MAAM,IAAI,CAAC,EAAE,IAAI,CAAC;QACtC,IAAI,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,UAAU,IAAI,GAAG,KAAK,MAAM;YAAE,OAAO,GAAG,CAAC;IAC3F,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;oEAEoE;AACpE,SAAS,QAAQ,CAAC,MAAoB;IACpC,MAAM,EAAE,GAAI,MAAc,EAAE,IAAI,CAAC;IACjC,IAAI,OAAO,EAAE,KAAK,UAAU,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1B,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO,CAA4B,CAAC;IACtE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,kFAAkF;AAClF,SAAS,cAAc,CAAC,MAAoB;IAC1C,MAAM,KAAK,GAAQ,SAAS,CAAC,MAAM,CAAC,CAAC;IACrC,IAAI,CAAC,CAAC,KAAK,YAAY,CAAC,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/C,IAAI,KAAK,CAAC,OAAO,CAAE,KAAa,CAAC,OAAO,CAAC;QAAE,OAAO,CAAC,GAAI,KAAa,CAAC,OAAO,CAAC,CAAC;IAC9E,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,IAAI,KAAK,CAAC,GAAG,EAAE,OAAO,CAAuC,CAAC;IAClG,IAAI,OAAO;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC3C,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,SAAS,gBAAgB,CAAC,MAAoB;IAC5C,IAAI,OAAO,GAAQ,MAAM,CAAC;IAC1B,OAAO,OAAO,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC;QACxC,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC;IACpC,CAAC;IACD,IAAI,OAAO,YAAY,CAAC,CAAC,UAAU,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,EAAE,YAAY,IAAI,OAAO,CAAC,GAAG,EAAE,YAAY,CAAC;QACpE,OAAO,OAAO,GAAG,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;IACjD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAsBD;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAC/B,MAAoB;IAEpB,MAAM,GAAG,GAA0C,EAAE,CAAC;IACtD,IAAI,CAAC,CAAC,MAAM,YAAY,CAAC,CAAC,SAAS,CAAC;QAAE,OAAO,GAAG,CAAC;IACjD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAqC,CAAC;IAE3D,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAClD,MAAM,KAAK,GAAQ,SAAS,CAAC,KAAK,CAAC,CAAC;QACpC,MAAM,UAAU,GAA0B;YACxC,IAAI,EAAE,YAAY,CAAC,KAAK,CAAC;YACzB,QAAQ,EAAE,OAAQ,KAAa,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC,CAAE,KAAa,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,KAAK;YAC/F,WAAW,EAAG,KAAa,CAAC,WAAW,IAAK,KAAa,EAAE,WAAW,IAAI,EAAE;SAC7E,CAAC;QAEF,IAAI,KAAK,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC;YAC/B,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;YACrC,IAAI,MAAM;gBAAE,UAAU,CAAC,IAAI,GAAG,MAAM,CAAC;QACvC,CAAC;aAAM,IAAI,KAAK,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC;YACvC,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,IAAI,KAAK,CAAC,GAAG,EAAE,OAAO,CAA6B,CAAC;YACxF,IAAI,OAAO,EAAE,CAAC;gBACZ,UAAU,CAAC,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;gBAC5C,MAAM,UAAU,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;gBAC3C,IAAI,UAAU;oBAAE,UAAU,CAAC,QAAQ,GAAG,UAAU,CAAC;YACnD,CAAC;QACH,CAAC;QAED,MAAM,YAAY,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,YAAY,KAAK,SAAS;YAAE,UAAU,CAAC,OAAO,GAAG,YAAY,CAAC;QAElE,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,IAAI,EAAE,QAAQ;YAAE,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,QAAoB,CAAC;QAChE,IAAI,OAAO,IAAI,EAAE,KAAK,KAAK,QAAQ;YAAE,UAAU,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QAEnE,GAAG,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC;IACzB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,OAAO,cAAc;IACjB,UAAU,CAAkC;IAC5C,WAAW,GAA8B,IAAI,GAAG,EAAE,CAAC;IACnD,cAAc,GAAmC,IAAI,GAAG,EAAE,CAAC;IAEnE,YAAY,UAA4C;QACtD,IAAI,CAAC,UAAU,GAAG,UAAU,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,KAAK,EAAE,CAAC;IACf,CAAC;IAEO,KAAK;QACX,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;QAE1D,KAAK,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACnE,IAAI,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC9B,qCAAqC;gBACrC,MAAM,IAAI,GAAG,cAAc,CAAC,OAAsC,CAAC,CAAC;gBACpE,MAAM,gBAAgB,GAAG,SAAS,CAAC,iBAAiB,IAAI,EAAE,CAAC;gBAC3D,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAChC,MAAM,SAAS,GAAG,cAAc,CAAC,gBAAgB,CAAC,CAAC;oBACnD,MAAM,QAAQ,GAAI,IAAyB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;oBAC9D,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;gBAC1C,CAAC;gBACD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;YACrD,CAAC;iBAAM,CAAC;gBACN,gDAAgD;gBAChD,MAAM,YAAY,GAAG,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC;gBAC5C,MAAM,SAAS,GAAG,cAAc,CAAC,YAAY,CAAC,CAAC;gBAC/C,MAAM,MAAM,GAAI,gBAAqC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;gBACtF,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBACtC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,SAAS,CAAC,UAAkB;QAC1B,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAE,CAAC;QAC3C,CAAC;QACD,IAAI,UAAU,IAAI,cAAc,EAAE,CAAC;YACjC,OAAO,cAAc,CAAC,UAAyC,CAAC,CAAC;QACnE,CAAC;QACD,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAED;;;;;OAKG;IACH,YAAY,CAAC,UAAkB;QAC7B,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;IACnD,CAAC;IAED;;;;OAIG;IACH,eAAe,CAAC,UAAkB;QAChC,oCAAoC;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QACxC,IAAI,GAAG,EAAE,aAAa;YAAE,OAAO,GAAG,CAAC,aAAa,CAAC;QACjD,wBAAwB;QACxB,OAAO,sBAAsB,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC;IACpD,CAAC;IAED;;;;;;OAMG;IACH,gBAAgB,CAAC,UAAkB;QAYjC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAC1C,MAAM,MAAM,GAWP,EAAE,CAAC;QAER,IAAI,MAAM,YAAY,CAAC,CAAC,SAAS,EAAE,CAAC;YAClC,MAAM,WAAW,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;YAC9C,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;gBACpD,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI;oBACJ,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ;oBACrB,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,SAAS;oBACvC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACnC,GAAG,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC1D,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC/C,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC/C,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACnC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACvC,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,uBAAuB;QACvB,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;QAChD,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;YAC1B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvD,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,KAAK;oBAC7B,WAAW,EAAE,CAAC,CAAC,WAAW;oBAC1B,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACpF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;OAKG;IACH,kBAAkB,CAAC,IAAY;QAC7B,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,WAAW;QACT,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC5C,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,CACrD,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,cAAc,CAAC,CAC5B,CAAC;QACF,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC;IAED;;;OAGG;IACH,eAAe;QACb,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9C,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;QAC1D,MAAM,KAAK,GAAa,CAAC,gCAAgC,EAAE,EAAE,CAAC,CAAC;QAE/D,KAAK,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACnE,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC5C,MAAM,MAAM,GAAG,SAAS;gBACtB,CAAC,CAAC,CAAC,SAAS,CAAC,iBAAiB,IAAI,EAAE,CAAC;gBACrC,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;YAE7B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YAElC,IAAI,SAAS,EAAE,CAAC;gBACd,KAAK,CAAC,IAAI,CAAC,KAAK,OAAO,yBAAyB,CAAC,CAAC;YACpD,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,GAAG,SAAS,CAAC,WAAW;oBAChC,CAAC,CAAC,KAAK,SAAS,CAAC,WAAW,GAAG;oBAC/B,CAAC,CAAC,EAAE,CAAC;gBACP,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,IAAI,OAAO,CAAC;gBACzC,KAAK,CAAC,IAAI,CAAC,KAAK,OAAO,0BAA0B,IAAI,GAAG,CAAC,CAAC;gBAC1D,IAAI,SAAS,CAAC,KAAK,IAAI,SAAS,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;oBACnD,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,KAAK,OAAO,OAAO,KAAK,yBAAyB,IAAI,GAAG,CAAC;gBACrF,CAAC;YACH,CAAC;YAED,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;gBACrD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,MAAM;oBAChE,CAAC,CAAC,SAAS,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;oBACxC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;gBACf,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnE,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,IAAI,OAAO,OAAO,KAAK,GAAG,IAAI,QAAQ,EAAE,CAAC,CAAC;YACpE,CAAC;YAED,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;QAED,6BAA6B;QAC7B,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;YAC1D,KAAK,CAAC,GAAG,EAAE,CAAC;QACd,CAAC;QAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;CACF"}

package/dist/core/schemas/connector.d.ts

@@ -0,0 +1,67 @@
+/**
+ * Phase 9a — connector config schema (WARN-MODE).
+ *
+ * Registry-driven validator that flags secret-shaped material in a connector
+ * config blob (HTTP or stdio). Reuses the connector-leak walker that powers
+ * the export sanitizer and import gate (`connectorImportLeaks`) — the two
+ * MUST agree so a literal token can't slip through one path while another
+ * rejects it.
+ *
+ * Coverage:
+ *   - headers / query / oauth.client_secret / token: secret-named keys MUST
+ *     be `$ENV_VAR` placeholders
+ *   - stdio env / args: raw token-prefixed values flagged
+ *   - URL with embedded credentials anywhere: flagged
+ *
+ * In 9a the validator only logs; Phase 9b routes writers through it, 9c
+ * flips rejection on.
+ */
+import { z } from 'zod';
+import type { SchemaViolation } from './workspace.js';
+/**
+ * Loose top-level shape — connector configs come in two flavours (http and
+ * stdio) and we want both to pass through. Strict shape enforcement is for
+ * Phase 9b once we know what the wire-data actually looks like.
+ */
+export declare const ConnectorConfigSchema: z.ZodObject<{
+    name: z.ZodString;
+    type: z.ZodOptional<z.ZodEnum<{
+        http: "http";
+        stdio: "stdio";
+    }>>;
+    url: z.ZodOptional<z.ZodString>;
+    headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    query: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    args: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    oauth: z.ZodOptional<z.ZodObject<{
+        client_id: z.ZodOptional<z.ZodString>;
+        client_secret: z.ZodOptional<z.ZodString>;
+    }, z.core.$loose>>;
+    token: z.ZodOptional<z.ZodString>;
+}, z.core.$loose>;
+/**
+ * Walk a single connector config and return structured violations.
+ * `connectorImportLeaks` is designed for an array of connectors and returns
+ * paths prefixed with `connectors.<i>.…` — we wrap the single config in a
+ * one-element array and strip the prefix before returning.
+ */
+export declare function validateConnectorConfig(input: unknown): SchemaViolation[];
+/**
+ * Warn-mode entry point: validate + log each violation. Returns the
+ * violations so callers can inspect.
+ */
+export declare function warnOnConnectorConfigViolations(input: unknown): SchemaViolation[];
+/**
+ * Phase 9c — strict-or-warn entry point used by save sites.
+ *
+ * When `STUDIOGRAPH_SCHEMA_STRICT` is on (default), throws
+ * `SchemaViolationError` on the first non-empty violation list. Otherwise
+ * delegates to the warn-mode logger.
+ *
+ * `ConnectorManager.saveWorkspaceConfig` should call this. Strict mode
+ * means a connector with a literal Authorization header (post-strip) is
+ * a bug — `stripSecrets` failed to do its job — and we reject loudly
+ * instead of silently writing a leak.
+ */
+export declare function enforceConnectorConfig(input: unknown): SchemaViolation[];

package/dist/core/schemas/connector.js

@@ -0,0 +1,100 @@
+/**
+ * Phase 9a — connector config schema (WARN-MODE).
+ *
+ * Registry-driven validator that flags secret-shaped material in a connector
+ * config blob (HTTP or stdio). Reuses the connector-leak walker that powers
+ * the export sanitizer and import gate (`connectorImportLeaks`) — the two
+ * MUST agree so a literal token can't slip through one path while another
+ * rejects it.
+ *
+ * Coverage:
+ *   - headers / query / oauth.client_secret / token: secret-named keys MUST
+ *     be `$ENV_VAR` placeholders
+ *   - stdio env / args: raw token-prefixed values flagged
+ *   - URL with embedded credentials anywhere: flagged
+ *
+ * In 9a the validator only logs; Phase 9b routes writers through it, 9c
+ * flips rejection on.
+ */
+import { z } from 'zod';
+import { connectorImportLeaks } from '../secrets/bundle.js';
+import { formatViolation, isSchemaStrict, SchemaViolationError } from './workspace.js';
+/**
+ * Loose top-level shape — connector configs come in two flavours (http and
+ * stdio) and we want both to pass through. Strict shape enforcement is for
+ * Phase 9b once we know what the wire-data actually looks like.
+ */
+export const ConnectorConfigSchema = z
+    .object({
+    name: z.string(),
+    type: z.enum(['http', 'stdio']).optional(),
+    url: z.string().optional(),
+    headers: z.record(z.string(), z.string()).optional(),
+    query: z.record(z.string(), z.string()).optional(),
+    env: z.record(z.string(), z.string()).optional(),
+    args: z.array(z.string()).optional(),
+    oauth: z
+        .object({
+        client_id: z.string().optional(),
+        client_secret: z.string().optional(),
+    })
+        .passthrough()
+        .optional(),
+    token: z.string().optional(),
+})
+    .passthrough();
+/**
+ * Walk a single connector config and return structured violations.
+ * `connectorImportLeaks` is designed for an array of connectors and returns
+ * paths prefixed with `connectors.<i>.…` — we wrap the single config in a
+ * one-element array and strip the prefix before returning.
+ */
+export function validateConnectorConfig(input) {
+    if (!input || typeof input !== 'object')
+        return [];
+    const leaks = connectorImportLeaks([input]);
+    return leaks.map((path) => {
+        // Drop the `connectors.0.` prefix produced by connectorImportLeaks so
+        // the violation reads naturally for a single-connector save.
+        const stripped = path.replace(/^connectors\.0\./, '');
+        return {
+            path: stripped,
+            reason: 'value-shape',
+        };
+    });
+}
+/**
+ * Warn-mode entry point: validate + log each violation. Returns the
+ * violations so callers can inspect.
+ */
+export function warnOnConnectorConfigViolations(input) {
+    const violations = validateConnectorConfig(input);
+    for (const v of violations) {
+        // eslint-disable-next-line no-console
+        console.warn(formatViolation('connector_config', v));
+    }
+    return violations;
+}
+/**
+ * Phase 9c — strict-or-warn entry point used by save sites.
+ *
+ * When `STUDIOGRAPH_SCHEMA_STRICT` is on (default), throws
+ * `SchemaViolationError` on the first non-empty violation list. Otherwise
+ * delegates to the warn-mode logger.
+ *
+ * `ConnectorManager.saveWorkspaceConfig` should call this. Strict mode
+ * means a connector with a literal Authorization header (post-strip) is
+ * a bug — `stripSecrets` failed to do its job — and we reject loudly
+ * instead of silently writing a leak.
+ */
+export function enforceConnectorConfig(input) {
+    if (!isSchemaStrict()) {
+        return warnOnConnectorConfigViolations(input);
+    }
+    const violations = validateConnectorConfig(input);
+    if (violations.length > 0) {
+        throw new SchemaViolationError('connector_config', violations);
+    }
+    return violations;
+}
+//# sourceMappingURL=connector.js.map

package/dist/core/schemas/connector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connector.js","sourceRoot":"","sources":["../../../src/core/schemas/connector.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,oBAAoB,EAAE,MAAM,sBAAsB,CAAC;AAE5D,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAEvF;;;;GAIG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC;KACnC,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC1C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC1B,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACpD,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAClD,GAAG,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAChD,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACpC,KAAK,EAAE,CAAC;SACL,MAAM,CAAC;QACN,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAChC,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;KACrC,CAAC;SACD,WAAW,EAAE;SACb,QAAQ,EAAE;IACb,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC7B,CAAC;KACD,WAAW,EAAE,CAAC;AAEjB;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAAc;IACpD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,EAAE,CAAC;IACnD,MAAM,KAAK,GAAG,oBAAoB,CAAC,CAAC,KAAgC,CAAC,CAAC,CAAC;IACvE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACxB,sEAAsE;QACtE,6DAA6D;QAC7D,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;QACtD,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,aAAsB;SAC/B,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,+BAA+B,CAAC,KAAc;IAC5D,MAAM,UAAU,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;IAClD,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,sCAAsC;QACtC,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,CAAC;IACvD,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAc;IACnD,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;QACtB,OAAO,+BAA+B,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC;IACD,MAAM,UAAU,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;IAClD,IAAI,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,oBAAoB,CAAC,kBAAkB,EAAE,UAAU,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/core/schemas/workspace.d.ts

@@ -0,0 +1,122 @@
+/**
+ * Phase 9a — workspace.json schema (WARN-MODE).
+ *
+ * Registry-driven validator that flags secret-shaped material anywhere in a
+ * workspace.json blob. In 9a the validator runs but only *logs* violations;
+ * the write proceeds. Phase 9b will route writers through the validator, and
+ * 9c will flip rejections on.
+ *
+ * The detector reuses `findSecretLeaks()` from `bundle.ts` — the goal is
+ * that import-time, export-time, and save-time agree on what "looks like a
+ * secret" so leaks can't slip through one path while another rejects them.
+ *
+ * Output format is the structured single-line shape from the plan §5:
+ *   [schema-warn] workspace_config: field '<path>' has secret-shaped value
+ *     (registry: <key.name>, classification: <classification>)
+ *
+ * One line per violation. No multi-line stack traces. Cheap to grep, cheap
+ * for downstream log routing to redact further once Phase 11's sanitize()
+ * is wired.
+ */
+import { z } from 'zod';
+/**
+ * Phase 9c — strict-mode error.
+ *
+ * Thrown when `STUDIOGRAPH_SCHEMA_STRICT` is on (default) and the
+ * workspace or connector validator finds at least one violation.
+ *
+ * **The error message MUST NOT contain the offending value.** Only the
+ * field path, registry classification, and a remediation hint are
+ * exposed — exactly what a route handler can log and surface to the
+ * user without re-leaking the secret.
+ *
+ * Routes that catch this translate it to:
+ *   - HTTP 400 with error code `schema_violation` (config-api, etc.)
+ *   - CLI exit 1 with a red message (sync, clone, join, ...)
+ *
+ * Callers can read `violations` and `scope` to build their own message.
+ */
+export declare class SchemaViolationError extends Error {
+    static readonly code: "schema_violation";
+    readonly code: "schema_violation";
+    readonly scope: 'workspace_config' | 'connector_config';
+    readonly violations: ReadonlyArray<SchemaViolation>;
+    constructor(scope: 'workspace_config' | 'connector_config', violations: SchemaViolation[]);
+}
+/**
+ * Phase 9c — runtime check for strict mode.
+ *
+ * Read at validation time (not cached at boot) so operators can flip the
+ * env in a hotfix without restarting the process. Default behaviour
+ * (env unset) is strict — `'0'` and `'false'` are the only opt-outs.
+ */
+export declare function isSchemaStrict(): boolean;
+/**
+ * A structured violation. Returned by `validateWorkspaceConfig()` so callers
+ * can choose to log, reject, or aggregate. The default warn-mode wiring
+ * passes these straight to `console.warn` via `formatViolation()` below.
+ */
+export interface SchemaViolation {
+    /** Dotted path within the validated object. */
+    path: string;
+    /** Canonical registry key this path resolves to, if any. */
+    registryKey?: string;
+    /** Registry classification (`bootstrap`, `workspace-secret`, …). */
+    classification?: string;
+    /** Why the detector flagged the value. */
+    reason: 'registry' | 'value-shape' | 'connector';
+}
+/**
+ * Top-level shape. Loose by design in 9a — we keep unknown fields so
+ * upstream callers (workspace.ts writeConfig, dual-write mirrors) don't
+ * regress on perfectly valid existing data. Phase 9b/c can tighten this to
+ * `.strict()` once the warn-mode telemetry shows what real data looks like.
+ */
+export declare const WorkspaceConfigSchema: z.ZodObject<{
+    version: z.ZodOptional<z.ZodString>;
+    team_name: z.ZodOptional<z.ZodString>;
+    name: z.ZodOptional<z.ZodString>;
+    slug: z.ZodOptional<z.ZodString>;
+    created_at: z.ZodOptional<z.ZodString>;
+    repos: z.ZodOptional<z.ZodArray<z.ZodUnknown>>;
+}, z.core.$loose>;
+/**
+ * Run the secret-leak walker over a workspace.json blob and return a list of
+ * structured violations. The walker uses `findSecretLeaks()` from bundle.ts,
+ * which understands:
+ *   - registry-named paths (`r2_config.secret_access_key` → bootstrap)
+ *   - bootstrap field names (`jwtSecret`, `apiKey`)
+ *   - value-shape patterns (`sk-*`, `Bearer *`, `https://user:pass@…`, etc.)
+ *
+ * The validator does NOT mutate, throw, or reject — it just produces the
+ * violation list. Callers that want strict behaviour wrap it in their own
+ * `if (violations.length) throw` check (Phase 9c).
+ */
+export declare function validateWorkspaceConfig(input: unknown): SchemaViolation[];
+/**
+ * Format a single violation as the warn-mode log line. Stable, greppable,
+ * one line per violation. Phase 11's `sanitize()` is responsible for any
+ * further redaction once the centralized logger lands.
+ */
+export declare function formatViolation(scope: 'workspace_config' | 'connector_config', v: SchemaViolation): string;
+/**
+ * Warn-mode entry point: validate + log each violation via `console.warn`.
+ * Returns the violation list so callers (tests, telemetry) can also
+ * inspect what was found.
+ *
+ * The logger seam is `console.warn` for 9a; Phase 11 will swap this for the
+ * centralized `log.warn` once that lands. Using `console.warn` here keeps
+ * the import graph small and avoids a Phase-11 dependency.
+ */
+export declare function warnOnWorkspaceConfigViolations(input: unknown): SchemaViolation[];
+/**
+ * Phase 9c — strict-or-warn entry point used by save sites.
+ *
+ * When `STUDIOGRAPH_SCHEMA_STRICT` is on (default), throws
+ * `SchemaViolationError` on the first non-empty violation list. Otherwise
+ * delegates to `warnOnWorkspaceConfigViolations` for log-only behaviour.
+ *
+ * This is the canonical helper that `Workspace.writeConfig` should call.
+ * Tests can flip the env to exercise both modes.
+ */
+export declare function enforceWorkspaceConfig(input: unknown): SchemaViolation[];