studiograph 1.3.48-next.26 → 1.3.48-next.261

package/dist/core/refs.js

@@ -0,0 +1,80 @@
+/**
+ * Typed reference parsing for wikilink-style fields.
+ *
+ * A reference value (e.g. `task.assignee`) can name one of two things:
+ *
+ *   - an ENTITY in the graph:  `[[jane-doe]]`, `[[repo/jane-doe|Jane]]`
+ *   - a user ACCOUNT:          `[[user:42|@chris]]`
+ *
+ * The account form keys on the IMMUTABLE account id (`42`); the trailing
+ * `@chris` is a human/grep display cache only and is NEVER identity — a renamed
+ * handle leaves the stored label stale but the id keeps resolving. This keeps
+ * "who is assigned" stable across handle renames / recycling, which a
+ * handle-keyed ref could not.
+ *
+ * This module is dependency-free so it can be shared by the server, the core
+ * graph layer, and the web client (`@core/refs`). It is the single source of
+ * truth for ref parsing — ad-hoc `[[...]]` regexes elsewhere should defer here.
+ */
+const WIKILINK = /^\[\[(.+)\]\]$/;
+const USER_PREFIX = 'user:';
+/**
+ * Parse a raw reference value into a {@link ParsedRef}. Accepts the bracketed
+ * wikilink forms and a bare inner token. Returns null when there's nothing to
+ * resolve (empty / non-string / malformed).
+ */
+export function parseRef(raw) {
+    if (typeof raw !== 'string')
+        return null;
+    let s = raw.trim();
+    if (!s)
+        return null;
+    const m = s.match(WIKILINK);
+    if (m)
+        s = m[1].trim();
+    // Split the display label (everything after the first pipe).
+    let label;
+    const pipe = s.indexOf('|');
+    if (pipe >= 0) {
+        label = s.slice(pipe + 1).trim() || undefined;
+        s = s.slice(0, pipe).trim();
+    }
+    if (!s)
+        return null;
+    // Account reference: user:<id>
+    if (s.startsWith(USER_PREFIX)) {
+        const userId = s.slice(USER_PREFIX.length).trim();
+        if (!userId)
+            return null;
+        const handle = (label ?? '').replace(/^@/, '').trim() || undefined;
+        return { kind: 'user', userId, handle, label };
+    }
+    // Entity reference, optionally repo-qualified (repo/id).
+    let repo;
+    if (s.includes('/')) {
+        const parts = s.split('/');
+        s = (parts.pop() ?? '').trim();
+        const head = parts.join('/').trim();
+        if (head)
+            repo = head;
+    }
+    if (!s)
+        return null;
+    return { kind: 'entity', id: s, repo, label };
+}
+/** True when the raw value is an account/user reference (`[[user:…]]`). */
+export function isUserRef(raw) {
+    return parseRef(raw)?.kind === 'user';
+}
+/** Format a canonical account reference. The handle is a display cache only. */
+export function formatUserRef(userId, handle) {
+    const id = String(userId).trim();
+    const h = (handle ?? '').replace(/^@/, '').trim();
+    return h ? `[[user:${id}|@${h}]]` : `[[user:${id}]]`;
+}
+/** Format a canonical entity reference. */
+export function formatEntityRef(id, label) {
+    const l = (label ?? '').trim();
+    return l ? `[[${id}|${l}]]` : `[[${id}]]`;
+}
+//# sourceMappingURL=refs.js.map

package/dist/core/refs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"refs.js","sourceRoot":"","sources":["../../src/core/refs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAMH,MAAM,QAAQ,GAAG,gBAAgB,CAAC;AAClC,MAAM,WAAW,GAAG,OAAO,CAAC;AAE5B;;;;GAIG;AACH,MAAM,UAAU,QAAQ,CAAC,GAAY;IACnC,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACzC,IAAI,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACnB,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAEpB,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC5B,IAAI,CAAC;QAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAEvB,6DAA6D;IAC7D,IAAI,KAAyB,CAAC;IAC9B,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,IAAI,IAAI,CAAC,EAAE,CAAC;QACd,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC;QAC9C,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9B,CAAC;IACD,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAEpB,+BAA+B;IAC/B,IAAI,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAClD,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,MAAM,MAAM,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,SAAS,CAAC;QACnE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IACjD,CAAC;IAED,yDAAyD;IACzD,IAAI,IAAwB,CAAC;IAC7B,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACpB,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QACpC,IAAI,IAAI;YAAE,IAAI,GAAG,IAAI,CAAC;IACxB,CAAC;IACD,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAChD,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,SAAS,CAAC,GAAY;IACpC,OAAO,QAAQ,CAAC,GAAG,CAAC,EAAE,IAAI,KAAK,MAAM,CAAC;AACxC,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,aAAa,CAAC,MAAuB,EAAE,MAAe;IACpE,MAAM,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACjC,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAClD,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,EAAE,IAAI,CAAC;AACvD,CAAC;AAED,2CAA2C;AAC3C,MAAM,UAAU,eAAe,CAAC,EAAU,EAAE,KAAc;IACxD,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/B,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC;AAC5C,CAAC"}

package/dist/core/schema-registry.d.ts

@@ -6,6 +6,55 @@
  */
 import { z } from 'zod';
 import { FieldDefinition, SchemaExtension } from './types.js';
+import { type DateRole } from './validation.js';
+/**
+ * Whether a Zod field is system-managed (`.meta({ internal: true })`) and so
+ * must NOT be surfaced as a user/agent-editable field or seeded with an empty
+ * default. The single source of truth for "this field is set by the system,
+ * not by people" — consulted by `describeZodObject` (which feeds the
+ * `/api/schema/:type/fields` endpoint, the property panel, and the agent's
+ * `get_entity_schema`) and by the graph create/changeType field seeders.
+ */
+export declare function isInternalField(schema: z.ZodTypeAny): boolean;
+/**
+ * Per-field descriptor used by the `get_entity_schema` agent tool and the
+ * `/api/schema/:entityType/fields` HTTP endpoint. Optional members are only
+ * set when the underlying Zod node carries that information.
+ */
+export interface SchemaFieldDescriptor {
+    type: string;
+    optional: boolean;
+    description: string;
+    enum?: string[];
+    default?: unknown;
+    itemType?: string;
+    itemEnum?: string[];
+    /** Date vocabulary metadata (only on `date` / `start_date`). `role`
+     *  distinguishes the primary date from a range start; `label` is the
+     *  type-specific display name (e.g. "Due date" on a task). */
+    role?: DateRole;
+    label?: string;
+    /** Reference-target type (e.g. `assignee` → `person`). Marks a wikilink
+     *  field that must resolve to a specific entity type. Pickers scope to it;
+     *  the write-path validator in entity-mutations.ts enforces it. */
+    refType?: string;
+}
+/**
+ * Walk a Zod object schema and emit per-field descriptors. Surfaces enums,
+ * array element types, string formats (url/email/datetime), defaults, and
+ * descriptions — the metadata the agent needs to write valid frontmatter
+ * without memorizing schemas.
+ */
+export declare function describeZodObject(schema: z.ZodTypeAny): Record<string, SchemaFieldDescriptor>;
+/**
+ * Built-in reference fields that must resolve to a specific entity type,
+ * keyed by entity type → field → required target type. Derived once from the
+ * `refType` `.meta()` markers on the built-in schemas (today: `task.assignee`
+ * → `person`). The write-path validator in entity-mutations.ts reads this to
+ * reject a wikilink that resolves to the wrong type. Extension fields aren't
+ * scanned here — only the built-in Zod schemas carry `refType` markers.
+ */
+export declare function builtinRefTypeFields(entityType: string): Record<string, string>;
 export declare class SchemaRegistry {
     private extensions;
     private schemaCache;
@@ -33,13 +82,30 @@ export declare class SchemaRegistry {
     /**
      * Get field metadata for an entity type by introspecting the Zod schema.
      * Returns field name, inferred type, required status, and description.
+     * Enum values, defaults, and array element metadata are surfaced when
+     * present so the agent can write valid frontmatter without memorizing
+     * schemas.
      */
     getFieldMetadata(entityType: string): Array<{
         name: string;
         type: string;
         required: boolean;
         description?: string;
+        enum?: string[];
+        default?: unknown;
+        itemType?: string;
+        itemEnum?: string[];
+        role?: DateRole;
+        label?: string;
+        refType?: string;
     }>;
+    /**
+     * The custom display label for an entity type, if one is defined in the
+     * workspace's schema extensions (e.g. a custom type "client" labelled
+     * "Client Account"). Returns undefined for built-in types and unlabelled
+     * extensions — callers fall back to title-casing the type key.
+     */
+    getCustomTypeLabel(type: string): string | undefined;
     /**
      * Get all entity type names: built-in types + custom extension types.
      */

package/dist/core/schema-registry.js

@@ -6,6 +6,7 @@
  */
 import { z } from 'zod';
 import { ENTITY_SCHEMAS, EntityBaseSchema } from './validation.js';
+import { BUILTIN_BODY_TEMPLATES } from './entity-body-templates.js';
 /**
  * Build a record of Zod field entries from an array of FieldDefinitions.
  */
@@ -49,44 +50,178 @@ function buildZodFields(fields) {
     }
     return result;
 }
-/** Built-in body templates for entity types (used when no workspace override exists) */
-const BUILTIN_BODY_TEMPLATES = {
-    person: '## Bio\n\n\n\n## Notes\n\n',
-    organization: '## Profile\n\n\n\n## Notes\n\n',
-    role: '## Responsibilities\n\n\n\n## Requirements\n\n\n\n## Notes\n\n',
-    'practice-area': '## Overview\n\n\n\n## Capabilities\n\n\n\n## Case Studies\n\n',
-    project: '## Overview\n\n\n\n## Deliverables\n\n\n\n## Notes\n\n',
-    meeting: '## Summary\n\n\n\n## Notes\n\n\n\n## Action Items\n\n',
-    decision: '## Context\n\n\n\n## Decision\n\n\n\n## Alternatives Considered\n\n\n\n## Rationale\n\n\n\n## Consequences\n\n',
-    task: '## Description\n\n\n\n## Notes\n\n',
-    document: '## Overview\n\n\n\n## Details\n\n',
-    reference: '## Description\n\n\n\n## Notes\n\n',
-    deliverable: '## Overview\n\n\n\n## Scope\n\n\n\n## Notes\n\n',
-    publication: '## Content\n\n\n\n## Distribution\n\n\n\n## Notes\n\n',
-    deal: '## Opportunity\n\n\n\n## Scope\n\n\n\n## Notes\n\n',
-    process: '## Overview\n\n\n\n## Steps\n\n\n\n## Best Practices\n\n**Do:**\n-\n\n**Don\'t:**\n-\n\n## Notes\n\n',
-    guideline: '## Overview\n\n\n\n## Guidelines\n\n\n\n## Examples\n\n\n\n## Notes\n\n',
-    'case-study': '## Objective\n\n\n\n## Solution\n\n\n\n## Outcome\n\n\n\n## Team\n\n',
-};
+/** Unwrap optional/default/nullable wrappers to expose the inner type. */
+function unwrapZod(schema) {
+    let current = schema;
+    while (current instanceof z.ZodOptional ||
+        current instanceof z.ZodDefault ||
+        (current && typeof current === 'object' && 'innerType' in (current._def ?? {}))) {
+        const inner = current._def?.innerType ?? current.def?.innerType;
+        if (!inner)
+            break;
+        current = inner;
+    }
+    return current;
+}
 /** Infer a simple type string from a Zod schema */
 function inferZodType(schema) {
-    if (schema instanceof z.ZodOptional || schema instanceof z.ZodDefault) {
-        return inferZodType(schema._def.innerType);
-    }
-    if (schema instanceof z.ZodString)
+    const inner = unwrapZod(schema);
+    if (inner instanceof z.ZodString) {
+        const format = readStringFormat(inner);
+        if (format)
+            return format;
         return 'string';
-    if (schema instanceof z.ZodNumber)
+    }
+    if (inner instanceof z.ZodNumber)
         return 'number';
-    if (schema instanceof z.ZodBoolean)
+    if (inner instanceof z.ZodBoolean)
         return 'boolean';
-    if (schema instanceof z.ZodEnum)
+    if (inner instanceof z.ZodEnum)
         return 'enum';
-    if (schema instanceof z.ZodArray)
-        return 'string[]';
-    if (schema instanceof z.ZodLiteral)
+    if (inner instanceof z.ZodArray) {
+        const element = (inner._def?.element ?? inner.def?.element);
+        if (element instanceof z.ZodEnum)
+            return 'enum[]';
+        return inferZodType(element ?? z.string()) + '[]';
+    }
+    if (inner instanceof z.ZodLiteral)
         return 'string';
     return 'string';
 }
+/** Detect ZodString format checks (url, datetime, date, email). */
+function readStringFormat(schema) {
+    const checks = schema._def?.checks;
+    if (!Array.isArray(checks))
+        return null;
+    for (const c of checks) {
+        const fmt = c?.def?.format ?? c?.type;
+        if (fmt === 'url' || fmt === 'email' || fmt === 'datetime' || fmt === 'date')
+            return fmt;
+    }
+    return null;
+}
+/** Read `.meta()` (Zod v4 global registry) off a field, tolerating both the
+ *  outer wrapper and unwrapped inner node. Used to surface the date
+ *  `dateRole` + `label` that ride on the entity date vocabulary. */
+function readMeta(schema) {
+    const fn = schema?.meta;
+    if (typeof fn === 'function') {
+        const m = fn.call(schema);
+        if (m && typeof m === 'object')
+            return m;
+    }
+    return undefined;
+}
+/**
+ * Whether a Zod field is system-managed (`.meta({ internal: true })`) and so
+ * must NOT be surfaced as a user/agent-editable field or seeded with an empty
+ * default. The single source of truth for "this field is set by the system,
+ * not by people" — consulted by `describeZodObject` (which feeds the
+ * `/api/schema/:type/fields` endpoint, the property panel, and the agent's
+ * `get_entity_schema`) and by the graph create/changeType field seeders.
+ */
+export function isInternalField(schema) {
+    return readMeta(schema)?.internal === true;
+}
+/** Read enum values off a ZodEnum (Zod v4 stores entries as { value: value }). */
+function readEnumValues(schema) {
+    const inner = unwrapZod(schema);
+    if (!(inner instanceof z.ZodEnum))
+        return null;
+    if (Array.isArray(inner.options))
+        return [...inner.options];
+    const entries = (inner._def?.entries ?? inner.def?.entries);
+    if (entries)
+        return Object.values(entries);
+    return null;
+}
+/**
+ * Read the default value off a ZodDefault wrapper, if present. Used by
+ * describeEntitySchema so the agent can see "stage defaults to qualification".
+ */
+function readDefaultValue(schema) {
+    let current = schema;
+    while (current instanceof z.ZodOptional) {
+        current = current._def?.innerType;
+    }
+    if (current instanceof z.ZodDefault) {
+        const def = current._def?.defaultValue ?? current.def?.defaultValue;
+        return typeof def === 'function' ? def() : def;
+    }
+    return undefined;
+}
+/**
+ * Walk a Zod object schema and emit per-field descriptors. Surfaces enums,
+ * array element types, string formats (url/email/datetime), defaults, and
+ * descriptions — the metadata the agent needs to write valid frontmatter
+ * without memorizing schemas.
+ */
+export function describeZodObject(schema) {
+    const out = {};
+    if (!(schema instanceof z.ZodObject))
+        return out;
+    const shape = schema.shape;
+    for (const [name, field] of Object.entries(shape)) {
+        // System-managed fields (e.g. asset.indexable, note/dataset.source_file)
+        // are never user/agent-editable, so they're omitted from the descriptor
+        // map entirely — this is the single chokepoint that keeps them out of the
+        // /api/schema/:type/fields endpoint, the property panel, and the agent's
+        // get_entity_schema in one place.
+        if (isInternalField(field))
+            continue;
+        const inner = unwrapZod(field);
+        const descriptor = {
+            type: inferZodType(field),
+            optional: typeof field.isOptional === 'function' ? field.isOptional() : false,
+            description: field.description ?? inner?.description ?? '',
+        };
+        if (inner instanceof z.ZodEnum) {
+            const values = readEnumValues(inner);
+            if (values)
+                descriptor.enum = values;
+        }
+        else if (inner instanceof z.ZodArray) {
+            const element = (inner._def?.element ?? inner.def?.element);
+            if (element) {
+                descriptor.itemType = inferZodType(element);
+                const enumValues = readEnumValues(element);
+                if (enumValues)
+                    descriptor.itemEnum = enumValues;
+            }
+        }
+        const defaultValue = readDefaultValue(field);
+        if (defaultValue !== undefined)
+            descriptor.default = defaultValue;
+        const meta = readMeta(field);
+        if (meta?.dateRole)
+            descriptor.role = meta.dateRole;
+        if (typeof meta?.label === 'string')
+            descriptor.label = meta.label;
+        if (typeof meta?.refType === 'string')
+            descriptor.refType = meta.refType;
+        out[name] = descriptor;
+    }
+    return out;
+}
+/**
+ * Built-in reference fields that must resolve to a specific entity type,
+ * keyed by entity type → field → required target type. Derived once from the
+ * `refType` `.meta()` markers on the built-in schemas (today: `task.assignee`
+ * → `person`). The write-path validator in entity-mutations.ts reads this to
+ * reject a wikilink that resolves to the wrong type. Extension fields aren't
+ * scanned here — only the built-in Zod schemas carry `refType` markers.
+ */
+export function builtinRefTypeFields(entityType) {
+    const schema = ENTITY_SCHEMAS[entityType];
+    if (!schema)
+        return {};
+    const out = {};
+    for (const [name, d] of Object.entries(describeZodObject(schema))) {
+        if (d.refType)
+            out[name] = d.refType;
+    }
+    return out;
+}
 export class SchemaRegistry {
     extensions;
     schemaCache = new Map();
@@ -157,29 +292,55 @@ export class SchemaRegistry {
     /**
      * Get field metadata for an entity type by introspecting the Zod schema.
      * Returns field name, inferred type, required status, and description.
+     * Enum values, defaults, and array element metadata are surfaced when
+     * present so the agent can write valid frontmatter without memorizing
+     * schemas.
      */
     getFieldMetadata(entityType) {
         const schema = this.getSchema(entityType);
         const fields = [];
         if (schema instanceof z.ZodObject) {
-            const shape = schema.shape;
-            for (const [key, value] of Object.entries(shape)) {
-                const zodField = value;
-                const isOptional = zodField.isOptional();
-                const description = zodField.description;
-                const type = inferZodType(zodField);
-                fields.push({ name: key, type, required: !isOptional, description });
+            const descriptors = describeZodObject(schema);
+            for (const [name, d] of Object.entries(descriptors)) {
+                fields.push({
+                    name,
+                    type: d.type,
+                    required: !d.optional,
+                    description: d.description || undefined,
+                    ...(d.enum ? { enum: d.enum } : {}),
+                    ...(d.default !== undefined ? { default: d.default } : {}),
+                    ...(d.itemType ? { itemType: d.itemType } : {}),
+                    ...(d.itemEnum ? { itemEnum: d.itemEnum } : {}),
+                    ...(d.role ? { role: d.role } : {}),
+                    ...(d.label ? { label: d.label } : {}),
+                    ...(d.refType ? { refType: d.refType } : {}),
+                });
             }
         }
         // Add extension fields
         const extFields = this.getFieldDefs(entityType);
         for (const f of extFields) {
             if (!fields.some(existing => existing.name === f.name)) {
-                fields.push({ name: f.name, type: f.type, required: f.required ?? false, description: f.description });
+                fields.push({
+                    name: f.name,
+                    type: f.type,
+                    required: f.required ?? false,
+                    description: f.description,
+                    ...(f.type === 'enum' && f.enum_values?.length ? { enum: [...f.enum_values] } : {}),
+                });
             }
         }
         return fields;
     }
+    /**
+     * The custom display label for an entity type, if one is defined in the
+     * workspace's schema extensions (e.g. a custom type "client" labelled
+     * "Client Account"). Returns undefined for built-in types and unlabelled
+     * extensions — callers fall back to title-casing the type key.
+     */
+    getCustomTypeLabel(type) {
+        return this.extensions[type]?.label;
+    }
     /**
      * Get all entity type names: built-in types + custom extension types.
      */

package/dist/core/schema-registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"schema-registry.js","sourceRoot":"","sources":["../../src/core/schema-registry.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAC;AAEnE;;GAEG;AACH,SAAS,cAAc,CAAC,MAAyB;IAC/C,MAAM,MAAM,GAAiC,EAAE,CAAC;IAEhD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,OAAqB,CAAC;QAE1B,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;YACnB,KAAK,QAAQ;gBACX,OAAO,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;gBACrB,MAAM;YACR,KAAK,QAAQ;gBACX,OAAO,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;gBACrB,MAAM;YACR,KAAK,SAAS;gBACZ,OAAO,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;gBACtB,MAAM;YACR,KAAK,MAAM,CAAC,CAAC,CAAC;gBACZ,MAAM,MAAM,GAAG,KAAK,CAAC,WAAW,CAAC;gBACjC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACnC,OAAO,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,kCAAkC;gBAC1D,CAAC;qBAAM,CAAC;oBACN,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,MAA+B,CAAC,CAAC;gBACpD,CAAC;gBACD,MAAM;YACR,CAAC;YACD,KAAK,UAAU;gBACb,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC9B,MAAM;YACR;gBACE,OAAO,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;QACzB,CAAC;QAED,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;YACtB,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAChD,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;YACpB,OAAO,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC/B,CAAC;QAED,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC;IAC/B,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,wFAAwF;AACxF,MAAM,sBAAsB,GAA2B;IACrD,MAAM,EAAQ,4BAA4B;IAC1C,YAAY,EAAE,gCAAgC;IAC9C,IAAI,EAAU,gEAAgE;IAC9E,eAAe,EAAE,+DAA+D;IAChF,OAAO,EAAO,wDAAwD;IACtE,OAAO,EAAO,uDAAuD;IACrE,QAAQ,EAAM,gHAAgH;IAC9H,IAAI,EAAU,oCAAoC;IAClD,QAAQ,EAAM,mCAAmC;IACjD,SAAS,EAAK,oCAAoC;IAClD,WAAW,EAAG,iDAAiD;IAC/D,WAAW,EAAG,uDAAuD;IACrE,IAAI,EAAU,oDAAoD;IAClE,OAAO,EAAO,sGAAsG;IACpH,SAAS,EAAK,yEAAyE;IACvF,YAAY,EAAE,sEAAsE;CACrF,CAAC;AAEF,mDAAmD;AACnD,SAAS,YAAY,CAAC,MAAoB;IACxC,IAAI,MAAM,YAAY,CAAC,CAAC,WAAW,IAAI,MAAM,YAAY,CAAC,CAAC,UAAU,EAAE,CAAC;QACtE,OAAO,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,MAAM,YAAY,CAAC,CAAC,SAAS;QAAE,OAAO,QAAQ,CAAC;IACnD,IAAI,MAAM,YAAY,CAAC,CAAC,SAAS;QAAE,OAAO,QAAQ,CAAC;IACnD,IAAI,MAAM,YAAY,CAAC,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC;IACrD,IAAI,MAAM,YAAY,CAAC,CAAC,OAAO;QAAE,OAAO,MAAM,CAAC;IAC/C,IAAI,MAAM,YAAY,CAAC,CAAC,QAAQ;QAAE,OAAO,UAAU,CAAC;IACpD,IAAI,MAAM,YAAY,CAAC,CAAC,UAAU;QAAE,OAAO,QAAQ,CAAC;IACpD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,OAAO,cAAc;IACjB,UAAU,CAAkC;IAC5C,WAAW,GAA8B,IAAI,GAAG,EAAE,CAAC;IACnD,cAAc,GAAmC,IAAI,GAAG,EAAE,CAAC;IAEnE,YAAY,UAA4C;QACtD,IAAI,CAAC,UAAU,GAAG,UAAU,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,KAAK,EAAE,CAAC;IACf,CAAC;IAEO,KAAK;QACX,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;QAE1D,KAAK,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACnE,IAAI,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC9B,qCAAqC;gBACrC,MAAM,IAAI,GAAG,cAAc,CAAC,OAAsC,CAAC,CAAC;gBACpE,MAAM,gBAAgB,GAAG,SAAS,CAAC,iBAAiB,IAAI,EAAE,CAAC;gBAC3D,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAChC,MAAM,SAAS,GAAG,cAAc,CAAC,gBAAgB,CAAC,CAAC;oBACnD,MAAM,QAAQ,GAAI,IAAyB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;oBAC9D,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;gBAC1C,CAAC;gBACD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;YACrD,CAAC;iBAAM,CAAC;gBACN,gDAAgD;gBAChD,MAAM,YAAY,GAAG,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC;gBAC5C,MAAM,SAAS,GAAG,cAAc,CAAC,YAAY,CAAC,CAAC;gBAC/C,MAAM,MAAM,GAAI,gBAAqC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;gBACtF,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBACtC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,SAAS,CAAC,UAAkB;QAC1B,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAE,CAAC;QAC3C,CAAC;QACD,IAAI,UAAU,IAAI,cAAc,EAAE,CAAC;YACjC,OAAO,cAAc,CAAC,UAAyC,CAAC,CAAC;QACnE,CAAC;QACD,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAED;;;;;OAKG;IACH,YAAY,CAAC,UAAkB;QAC7B,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;IACnD,CAAC;IAED;;;;OAIG;IACH,eAAe,CAAC,UAAkB;QAChC,oCAAoC;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QACxC,IAAI,GAAG,EAAE,aAAa;YAAE,OAAO,GAAG,CAAC,aAAa,CAAC;QACjD,wBAAwB;QACxB,OAAO,sBAAsB,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC;IACpD,CAAC;IAED;;;OAGG;IACH,gBAAgB,CAAC,UAAkB;QACjC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAC1C,MAAM,MAAM,GAAmF,EAAE,CAAC;QAElG,IAAI,MAAM,YAAY,CAAC,CAAC,SAAS,EAAE,CAAC;YAClC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;YAC3B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBACjD,MAAM,QAAQ,GAAG,KAAqB,CAAC;gBACvC,MAAM,UAAU,GAAG,QAAQ,CAAC,UAAU,EAAE,CAAC;gBACzC,MAAM,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAC;gBACzC,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;gBACpC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC;YACvE,CAAC;QACH,CAAC;QAED,uBAAuB;QACvB,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;QAChD,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;YAC1B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvD,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;YACzG,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;OAEG;IACH,WAAW;QACT,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC5C,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,CACrD,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,cAAc,CAAC,CAC5B,CAAC;QACF,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC;IAED;;;OAGG;IACH,eAAe;QACb,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9C,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;QAC1D,MAAM,KAAK,GAAa,CAAC,gCAAgC,EAAE,EAAE,CAAC,CAAC;QAE/D,KAAK,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACnE,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC5C,MAAM,MAAM,GAAG,SAAS;gBACtB,CAAC,CAAC,CAAC,SAAS,CAAC,iBAAiB,IAAI,EAAE,CAAC;gBACrC,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;YAE7B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YAElC,IAAI,SAAS,EAAE,CAAC;gBACd,KAAK,CAAC,IAAI,CAAC,KAAK,OAAO,yBAAyB,CAAC,CAAC;YACpD,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,GAAG,SAAS,CAAC,WAAW;oBAChC,CAAC,CAAC,KAAK,SAAS,CAAC,WAAW,GAAG;oBAC/B,CAAC,CAAC,EAAE,CAAC;gBACP,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,IAAI,OAAO,CAAC;gBACzC,KAAK,CAAC,IAAI,CAAC,KAAK,OAAO,0BAA0B,IAAI,GAAG,CAAC,CAAC;gBAC1D,IAAI,SAAS,CAAC,KAAK,IAAI,SAAS,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;oBACnD,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,KAAK,OAAO,OAAO,KAAK,yBAAyB,IAAI,GAAG,CAAC;gBACrF,CAAC;YACH,CAAC;YAED,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;gBACrD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,MAAM;oBAChE,CAAC,CAAC,SAAS,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;oBACxC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;gBACf,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnE,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,IAAI,OAAO,OAAO,KAAK,GAAG,IAAI,QAAQ,EAAE,CAAC,CAAC;YACpE,CAAC;YAED,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;QAED,6BAA6B;QAC7B,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;YAC1D,KAAK,CAAC,GAAG,EAAE,CAAC;QACd,CAAC;QAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;CACF"}
+{"version":3,"file":"schema-registry.js","sourceRoot":"","sources":["../../src/core/schema-registry.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAiB,MAAM,iBAAiB,CAAC;AAClF,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAEpE;;GAEG;AACH,SAAS,cAAc,CAAC,MAAyB;IAC/C,MAAM,MAAM,GAAiC,EAAE,CAAC;IAEhD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,OAAqB,CAAC;QAE1B,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;YACnB,KAAK,QAAQ;gBACX,OAAO,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;gBACrB,MAAM;YACR,KAAK,QAAQ;gBACX,OAAO,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;gBACrB,MAAM;YACR,KAAK,SAAS;gBACZ,OAAO,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;gBACtB,MAAM;YACR,KAAK,MAAM,CAAC,CAAC,CAAC;gBACZ,MAAM,MAAM,GAAG,KAAK,CAAC,WAAW,CAAC;gBACjC,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACnC,OAAO,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,kCAAkC;gBAC1D,CAAC;qBAAM,CAAC;oBACN,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,MAA+B,CAAC,CAAC;gBACpD,CAAC;gBACD,MAAM;YACR,CAAC;YACD,KAAK,UAAU;gBACb,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;gBAC9B,MAAM;YACR;gBACE,OAAO,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC;QACzB,CAAC;QAED,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;YACtB,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAChD,CAAC;QAED,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;YACpB,OAAO,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC;QAC/B,CAAC;QAED,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC;IAC/B,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,0EAA0E;AAC1E,SAAS,SAAS,CAAC,MAAoB;IACrC,IAAI,OAAO,GAAQ,MAAM,CAAC;IAC1B,OACE,OAAO,YAAY,CAAC,CAAC,WAAW;QAChC,OAAO,YAAY,CAAC,CAAC,UAAU;QAC/B,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,WAAW,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,EAC/E,CAAC;QACD,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,SAAS,IAAI,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC;QAChE,IAAI,CAAC,KAAK;YAAE,MAAM;QAClB,OAAO,GAAG,KAAK,CAAC;IAClB,CAAC;IACD,OAAO,OAAuB,CAAC;AACjC,CAAC;AAED,mDAAmD;AACnD,SAAS,YAAY,CAAC,MAAoB;IACxC,MAAM,KAAK,GAAQ,SAAS,CAAC,MAAM,CAAC,CAAC;IACrC,IAAI,KAAK,YAAY,CAAC,CAAC,SAAS,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;QACvC,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAC1B,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,IAAI,KAAK,YAAY,CAAC,CAAC,SAAS;QAAE,OAAO,QAAQ,CAAC;IAClD,IAAI,KAAK,YAAY,CAAC,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC;IACpD,IAAI,KAAK,YAAY,CAAC,CAAC,OAAO;QAAE,OAAO,MAAM,CAAC;IAC9C,IAAI,KAAK,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,IAAI,KAAK,CAAC,GAAG,EAAE,OAAO,CAA6B,CAAC;QACxF,IAAI,OAAO,YAAY,CAAC,CAAC,OAAO;YAAE,OAAO,QAAQ,CAAC;QAClD,OAAO,YAAY,CAAC,OAAO,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,IAAI,CAAC;IACpD,CAAC;IACD,IAAI,KAAK,YAAY,CAAC,CAAC,UAAU;QAAE,OAAO,QAAQ,CAAC;IACnD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,mEAAmE;AACnE,SAAS,gBAAgB,CAAC,MAAoB;IAC5C,MAAM,MAAM,GAAI,MAAc,CAAC,IAAI,EAAE,MAA2B,CAAC;IACjE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IACxC,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,CAAC,EAAE,GAAG,EAAE,MAAM,IAAI,CAAC,EAAE,IAAI,CAAC;QACtC,IAAI,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,OAAO,IAAI,GAAG,KAAK,UAAU,IAAI,GAAG,KAAK,MAAM;YAAE,OAAO,GAAG,CAAC;IAC3F,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;oEAEoE;AACpE,SAAS,QAAQ,CAAC,MAAoB;IACpC,MAAM,EAAE,GAAI,MAAc,EAAE,IAAI,CAAC;IACjC,IAAI,OAAO,EAAE,KAAK,UAAU,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC1B,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO,CAA4B,CAAC;IACtE,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,MAAoB;IAClD,OAAO,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,KAAK,IAAI,CAAC;AAC7C,CAAC;AAED,kFAAkF;AAClF,SAAS,cAAc,CAAC,MAAoB;IAC1C,MAAM,KAAK,GAAQ,SAAS,CAAC,MAAM,CAAC,CAAC;IACrC,IAAI,CAAC,CAAC,KAAK,YAAY,CAAC,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/C,IAAI,KAAK,CAAC,OAAO,CAAE,KAAa,CAAC,OAAO,CAAC;QAAE,OAAO,CAAC,GAAI,KAAa,CAAC,OAAO,CAAC,CAAC;IAC9E,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,IAAI,KAAK,CAAC,GAAG,EAAE,OAAO,CAAuC,CAAC;IAClG,IAAI,OAAO;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC3C,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,SAAS,gBAAgB,CAAC,MAAoB;IAC5C,IAAI,OAAO,GAAQ,MAAM,CAAC;IAC1B,OAAO,OAAO,YAAY,CAAC,CAAC,WAAW,EAAE,CAAC;QACxC,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC;IACpC,CAAC;IACD,IAAI,OAAO,YAAY,CAAC,CAAC,UAAU,EAAE,CAAC;QACpC,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,EAAE,YAAY,IAAI,OAAO,CAAC,GAAG,EAAE,YAAY,CAAC;QACpE,OAAO,OAAO,GAAG,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;IACjD,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AA0BD;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAC/B,MAAoB;IAEpB,MAAM,GAAG,GAA0C,EAAE,CAAC;IACtD,IAAI,CAAC,CAAC,MAAM,YAAY,CAAC,CAAC,SAAS,CAAC;QAAE,OAAO,GAAG,CAAC;IACjD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAqC,CAAC;IAE3D,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAClD,yEAAyE;QACzE,wEAAwE;QACxE,0EAA0E;QAC1E,yEAAyE;QACzE,kCAAkC;QAClC,IAAI,eAAe,CAAC,KAAK,CAAC;YAAE,SAAS;QACrC,MAAM,KAAK,GAAQ,SAAS,CAAC,KAAK,CAAC,CAAC;QACpC,MAAM,UAAU,GAA0B;YACxC,IAAI,EAAE,YAAY,CAAC,KAAK,CAAC;YACzB,QAAQ,EAAE,OAAQ,KAAa,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC,CAAE,KAAa,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,KAAK;YAC/F,WAAW,EAAG,KAAa,CAAC,WAAW,IAAK,KAAa,EAAE,WAAW,IAAI,EAAE;SAC7E,CAAC;QAEF,IAAI,KAAK,YAAY,CAAC,CAAC,OAAO,EAAE,CAAC;YAC/B,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;YACrC,IAAI,MAAM;gBAAE,UAAU,CAAC,IAAI,GAAG,MAAM,CAAC;QACvC,CAAC;aAAM,IAAI,KAAK,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC;YACvC,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,IAAI,KAAK,CAAC,GAAG,EAAE,OAAO,CAA6B,CAAC;YACxF,IAAI,OAAO,EAAE,CAAC;gBACZ,UAAU,CAAC,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;gBAC5C,MAAM,UAAU,GAAG,cAAc,CAAC,OAAO,CAAC,CAAC;gBAC3C,IAAI,UAAU;oBAAE,UAAU,CAAC,QAAQ,GAAG,UAAU,CAAC;YACnD,CAAC;QACH,CAAC;QAED,MAAM,YAAY,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,YAAY,KAAK,SAAS;YAAE,UAAU,CAAC,OAAO,GAAG,YAAY,CAAC;QAElE,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC7B,IAAI,IAAI,EAAE,QAAQ;YAAE,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,QAAoB,CAAC;QAChE,IAAI,OAAO,IAAI,EAAE,KAAK,KAAK,QAAQ;YAAE,UAAU,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACnE,IAAI,OAAO,IAAI,EAAE,OAAO,KAAK,QAAQ;YAAE,UAAU,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC;QAEzE,GAAG,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC;IACzB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAAC,UAAkB;IACrD,MAAM,MAAM,GAAG,cAAc,CAAC,UAAyC,CAAC,CAAC;IACzE,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IACvB,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;QAClE,IAAI,CAAC,CAAC,OAAO;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC;IACvC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,OAAO,cAAc;IACjB,UAAU,CAAkC;IAC5C,WAAW,GAA8B,IAAI,GAAG,EAAE,CAAC;IACnD,cAAc,GAAmC,IAAI,GAAG,EAAE,CAAC;IAEnE,YAAY,UAA4C;QACtD,IAAI,CAAC,UAAU,GAAG,UAAU,IAAI,EAAE,CAAC;QACnC,IAAI,CAAC,KAAK,EAAE,CAAC;IACf,CAAC;IAEO,KAAK;QACX,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;QAE1D,KAAK,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACnE,IAAI,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC9B,qCAAqC;gBACrC,MAAM,IAAI,GAAG,cAAc,CAAC,OAAsC,CAAC,CAAC;gBACpE,MAAM,gBAAgB,GAAG,SAAS,CAAC,iBAAiB,IAAI,EAAE,CAAC;gBAC3D,IAAI,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAChC,MAAM,SAAS,GAAG,cAAc,CAAC,gBAAgB,CAAC,CAAC;oBACnD,MAAM,QAAQ,GAAI,IAAyB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;oBAC9D,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;gBAC1C,CAAC;gBACD,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;YACrD,CAAC;iBAAM,CAAC;gBACN,gDAAgD;gBAChD,MAAM,YAAY,GAAG,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC;gBAC5C,MAAM,SAAS,GAAG,cAAc,CAAC,YAAY,CAAC,CAAC;gBAC/C,MAAM,MAAM,GAAI,gBAAqC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,WAAW,EAAE,CAAC;gBACtF,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;gBACtC,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;YACjD,CAAC;QACH,CAAC;IACH,CAAC;IAED;;;OAGG;IACH,SAAS,CAAC,UAAkB;QAC1B,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAE,CAAC;QAC3C,CAAC;QACD,IAAI,UAAU,IAAI,cAAc,EAAE,CAAC;YACjC,OAAO,cAAc,CAAC,UAAyC,CAAC,CAAC;QACnE,CAAC;QACD,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAED;;;;;OAKG;IACH,YAAY,CAAC,UAAkB;QAC7B,OAAO,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;IACnD,CAAC;IAED;;;;OAIG;IACH,eAAe,CAAC,UAAkB;QAChC,oCAAoC;QACpC,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC;QACxC,IAAI,GAAG,EAAE,aAAa;YAAE,OAAO,GAAG,CAAC,aAAa,CAAC;QACjD,wBAAwB;QACxB,OAAO,sBAAsB,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC;IACpD,CAAC;IAED;;;;;;OAMG;IACH,gBAAgB,CAAC,UAAkB;QAajC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;QAC1C,MAAM,MAAM,GAWP,EAAE,CAAC;QAER,IAAI,MAAM,YAAY,CAAC,CAAC,SAAS,EAAE,CAAC;YAClC,MAAM,WAAW,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;YAC9C,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;gBACpD,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI;oBACJ,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,QAAQ,EAAE,CAAC,CAAC,CAAC,QAAQ;oBACrB,WAAW,EAAE,CAAC,CAAC,WAAW,IAAI,SAAS;oBACvC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACnC,GAAG,CAAC,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC1D,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC/C,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC/C,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACnC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACtC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAC7C,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,uBAAuB;QACvB,MAAM,SAAS,GAAG,IAAI,CAAC,YAAY,CAAC,UAAU,CAAC,CAAC;QAChD,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;YAC1B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvD,MAAM,CAAC,IAAI,CAAC;oBACV,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ,IAAI,KAAK;oBAC7B,WAAW,EAAE,CAAC,CAAC,WAAW;oBAC1B,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACpF,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;;OAKG;IACH,kBAAkB,CAAC,IAAY;QAC7B,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC;IACtC,CAAC;IAED;;OAEG;IACH,WAAW;QACT,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAC5C,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,CACrD,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,cAAc,CAAC,CAC5B,CAAC;QACF,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;IACpD,CAAC;IAED;;;OAGG;IACH,eAAe;QACb,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9C,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC;QAC1D,MAAM,KAAK,GAAa,CAAC,gCAAgC,EAAE,EAAE,CAAC,CAAC;QAE/D,KAAK,MAAM,CAAC,OAAO,EAAE,SAAS,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACnE,MAAM,SAAS,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC5C,MAAM,MAAM,GAAG,SAAS;gBACtB,CAAC,CAAC,CAAC,SAAS,CAAC,iBAAiB,IAAI,EAAE,CAAC;gBACrC,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC;YAE7B,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;gBAAE,SAAS;YAElC,IAAI,SAAS,EAAE,CAAC;gBACd,KAAK,CAAC,IAAI,CAAC,KAAK,OAAO,yBAAyB,CAAC,CAAC;YACpD,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,GAAG,SAAS,CAAC,WAAW;oBAChC,CAAC,CAAC,KAAK,SAAS,CAAC,WAAW,GAAG;oBAC/B,CAAC,CAAC,EAAE,CAAC;gBACP,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,IAAI,OAAO,CAAC;gBACzC,KAAK,CAAC,IAAI,CAAC,KAAK,OAAO,0BAA0B,IAAI,GAAG,CAAC,CAAC;gBAC1D,IAAI,SAAS,CAAC,KAAK,IAAI,SAAS,CAAC,KAAK,KAAK,OAAO,EAAE,CAAC;oBACnD,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,KAAK,OAAO,OAAO,KAAK,yBAAyB,IAAI,GAAG,CAAC;gBACrF,CAAC;YACH,CAAC;YAED,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;gBACrD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,WAAW,EAAE,MAAM;oBAChE,CAAC,CAAC,SAAS,KAAK,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;oBACxC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;gBACf,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnE,KAAK,CAAC,IAAI,CAAC,OAAO,KAAK,CAAC,IAAI,OAAO,OAAO,KAAK,GAAG,IAAI,QAAQ,EAAE,CAAC,CAAC;YACpE,CAAC;YAED,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACjB,CAAC;QAED,6BAA6B;QAC7B,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;YAC1D,KAAK,CAAC,GAAG,EAAE,CAAC;QACd,CAAC;QAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;CACF"}

package/dist/core/schemas/connector.d.ts

@@ -0,0 +1,67 @@
+/**
+ * Phase 9a — connector config schema (WARN-MODE).
+ *
+ * Registry-driven validator that flags secret-shaped material in a connector
+ * config blob (HTTP or stdio). Reuses the connector-leak walker that powers
+ * the export sanitizer and import gate (`connectorImportLeaks`) — the two
+ * MUST agree so a literal token can't slip through one path while another
+ * rejects it.
+ *
+ * Coverage:
+ *   - headers / query / oauth.client_secret / token: secret-named keys MUST
+ *     be `$ENV_VAR` placeholders
+ *   - stdio env / args: raw token-prefixed values flagged
+ *   - URL with embedded credentials anywhere: flagged
+ *
+ * In 9a the validator only logs; Phase 9b routes writers through it, 9c
+ * flips rejection on.
+ */
+import { z } from 'zod';
+import type { SchemaViolation } from './workspace.js';
+/**
+ * Loose top-level shape — connector configs come in two flavours (http and
+ * stdio) and we want both to pass through. Strict shape enforcement is for
+ * Phase 9b once we know what the wire-data actually looks like.
+ */
+export declare const ConnectorConfigSchema: z.ZodObject<{
+    name: z.ZodString;
+    type: z.ZodOptional<z.ZodEnum<{
+        stdio: "stdio";
+        http: "http";
+    }>>;
+    url: z.ZodOptional<z.ZodString>;
+    headers: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    query: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    env: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+    args: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    oauth: z.ZodOptional<z.ZodObject<{
+        client_id: z.ZodOptional<z.ZodString>;
+        client_secret: z.ZodOptional<z.ZodString>;
+    }, z.core.$loose>>;
+    token: z.ZodOptional<z.ZodString>;
+}, z.core.$loose>;
+/**
+ * Walk a single connector config and return structured violations.
+ * `connectorImportLeaks` is designed for an array of connectors and returns
+ * paths prefixed with `connectors.<i>.…` — we wrap the single config in a
+ * one-element array and strip the prefix before returning.
+ */
+export declare function validateConnectorConfig(input: unknown): SchemaViolation[];
+/**
+ * Warn-mode entry point: validate + log each violation. Returns the
+ * violations so callers can inspect.
+ */
+export declare function warnOnConnectorConfigViolations(input: unknown): SchemaViolation[];
+/**
+ * Phase 9c — strict-or-warn entry point used by save sites.
+ *
+ * When `STUDIOGRAPH_SCHEMA_STRICT` is on (default), throws
+ * `SchemaViolationError` on the first non-empty violation list. Otherwise
+ * delegates to the warn-mode logger.
+ *
+ * `ConnectorManager.saveWorkspaceConfig` should call this. Strict mode
+ * means a connector with a literal Authorization header (post-strip) is
+ * a bug — `stripSecrets` failed to do its job — and we reject loudly
+ * instead of silently writing a leak.
+ */
+export declare function enforceConnectorConfig(input: unknown): SchemaViolation[];

package/dist/core/schemas/connector.js

@@ -0,0 +1,100 @@
+/**
+ * Phase 9a — connector config schema (WARN-MODE).
+ *
+ * Registry-driven validator that flags secret-shaped material in a connector
+ * config blob (HTTP or stdio). Reuses the connector-leak walker that powers
+ * the export sanitizer and import gate (`connectorImportLeaks`) — the two
+ * MUST agree so a literal token can't slip through one path while another
+ * rejects it.
+ *
+ * Coverage:
+ *   - headers / query / oauth.client_secret / token: secret-named keys MUST
+ *     be `$ENV_VAR` placeholders
+ *   - stdio env / args: raw token-prefixed values flagged
+ *   - URL with embedded credentials anywhere: flagged
+ *
+ * In 9a the validator only logs; Phase 9b routes writers through it, 9c
+ * flips rejection on.
+ */
+import { z } from 'zod';
+import { connectorImportLeaks } from '../secrets/bundle.js';
+import { formatViolation, isSchemaStrict, SchemaViolationError } from './workspace.js';
+/**
+ * Loose top-level shape — connector configs come in two flavours (http and
+ * stdio) and we want both to pass through. Strict shape enforcement is for
+ * Phase 9b once we know what the wire-data actually looks like.
+ */
+export const ConnectorConfigSchema = z
+    .object({
+    name: z.string(),
+    type: z.enum(['http', 'stdio']).optional(),
+    url: z.string().optional(),
+    headers: z.record(z.string(), z.string()).optional(),
+    query: z.record(z.string(), z.string()).optional(),
+    env: z.record(z.string(), z.string()).optional(),
+    args: z.array(z.string()).optional(),
+    oauth: z
+        .object({
+        client_id: z.string().optional(),
+        client_secret: z.string().optional(),
+    })
+        .passthrough()
+        .optional(),
+    token: z.string().optional(),
+})
+    .passthrough();
+/**
+ * Walk a single connector config and return structured violations.
+ * `connectorImportLeaks` is designed for an array of connectors and returns
+ * paths prefixed with `connectors.<i>.…` — we wrap the single config in a
+ * one-element array and strip the prefix before returning.
+ */
+export function validateConnectorConfig(input) {
+    if (!input || typeof input !== 'object')
+        return [];
+    const leaks = connectorImportLeaks([input]);
+    return leaks.map((path) => {
+        // Drop the `connectors.0.` prefix produced by connectorImportLeaks so
+        // the violation reads naturally for a single-connector save.
+        const stripped = path.replace(/^connectors\.0\./, '');
+        return {
+            path: stripped,
+            reason: 'value-shape',
+        };
+    });
+}
+/**
+ * Warn-mode entry point: validate + log each violation. Returns the
+ * violations so callers can inspect.
+ */
+export function warnOnConnectorConfigViolations(input) {
+    const violations = validateConnectorConfig(input);
+    for (const v of violations) {
+        // eslint-disable-next-line no-console
+        console.warn(formatViolation('connector_config', v));
+    }
+    return violations;
+}
+/**
+ * Phase 9c — strict-or-warn entry point used by save sites.
+ *
+ * When `STUDIOGRAPH_SCHEMA_STRICT` is on (default), throws
+ * `SchemaViolationError` on the first non-empty violation list. Otherwise
+ * delegates to the warn-mode logger.
+ *
+ * `ConnectorManager.saveWorkspaceConfig` should call this. Strict mode
+ * means a connector with a literal Authorization header (post-strip) is
+ * a bug — `stripSecrets` failed to do its job — and we reject loudly
+ * instead of silently writing a leak.
+ */
+export function enforceConnectorConfig(input) {
+    if (!isSchemaStrict()) {
+        return warnOnConnectorConfigViolations(input);
+    }
+    const violations = validateConnectorConfig(input);
+    if (violations.length > 0) {
+        throw new SchemaViolationError('connector_config', violations);
+    }
+    return violations;
+}
+//# sourceMappingURL=connector.js.map