@betterportal/framework 0.0.1

package/lib/runtime/http.js

@@ -0,0 +1,114 @@
+function headerLookup(headers, key) {
+    if (headers instanceof Headers) {
+        return headers.get(key) ?? undefined;
+    }
+    const value = headers[key] ?? headers[key.toLowerCase()] ?? headers[key.toUpperCase()];
+    if (Array.isArray(value)) {
+        return value.find((entry) => typeof entry === "string" && entry.trim().length > 0);
+    }
+    return typeof value === "string" ? value : undefined;
+}
+function firstHeaderValue(headers, candidates) {
+    for (const candidate of candidates) {
+        const value = headerLookup(headers, candidate);
+        if (typeof value === "string" && value.trim().length > 0) {
+            return value;
+        }
+    }
+    return undefined;
+}
+function forwardedHostFromHeaderValue(value) {
+    if (!value)
+        return undefined;
+    const firstEntry = value.split(",")[0]?.trim();
+    if (!firstEntry)
+        return undefined;
+    for (const part of firstEntry.split(";")) {
+        const [rawKey, ...rawValueParts] = part.split("=");
+        if (rawKey?.trim().toLowerCase() !== "host")
+            continue;
+        const rawValue = rawValueParts.join("=").trim();
+        if (!rawValue)
+            return undefined;
+        return rawValue.replace(/^"|"$/g, "");
+    }
+    return undefined;
+}
+export function hostFromHeaderValue(value) {
+    if (!value || value.trim().length === 0) {
+        return null;
+    }
+    const forwardedHost = forwardedHostFromHeaderValue(value);
+    if (forwardedHost) {
+        return hostFromHeaderValue(forwardedHost);
+    }
+    const candidate = value.split(",")[0]?.trim();
+    if (!candidate)
+        return null;
+    try {
+        const parsed = new URL(candidate);
+        if (parsed.hostname) {
+            return normalizedHostFromUrl(parsed);
+        }
+    }
+    catch {
+        /* try as a scheme-less host below */
+    }
+    try {
+        return normalizedHostFromUrl(new URL(`https://${candidate}`));
+    }
+    catch {
+        return null;
+    }
+}
+function normalizedHostFromUrl(url) {
+    const hostname = url.hostname.toLowerCase();
+    if (!url.port || url.port === "80" || url.port === "443") {
+        return hostname;
+    }
+    return `${hostname}:${url.port}`;
+}
+function trustedProxyHeaderCandidates(options = {}) {
+    const candidates = [];
+    if (options.trustedProxyHeaders) {
+        candidates.push("forwarded", "x-forwarded-host", "x-original-host", "original-host");
+    }
+    if (options.cfProxy) {
+        candidates.push("cf-connecting-host", "cf-original-host");
+    }
+    return candidates;
+}
+export function resolveEmbeddedSourceHeader(headers, options = {}) {
+    // NOTE: hx-current-url is deliberately NOT trusted - it is set by client-side
+    // JS (HTMX) and is fully attacker-controllable, so it must never drive
+    // tenant/app resolution. Rely on browser-enforced referer/origin instead, and
+    // on proxy headers only when an upstream proxy is explicitly trusted.
+    return firstHeaderValue(headers, [
+        ":referer",
+        "referer",
+        ":origin",
+        "origin",
+        ...trustedProxyHeaderCandidates(options)
+    ]);
+}
+export function resolveThemeSourceHeader(headers, options = {}) {
+    return firstHeaderValue(headers, [
+        ":origin",
+        "origin",
+        ":referer",
+        "referer",
+        ":authority",
+        "authority",
+        ...trustedProxyHeaderCandidates(options)
+    ]);
+}
+export function resolveEmbeddedHostname(headers, options = {}) {
+    return hostFromHeaderValue(resolveEmbeddedSourceHeader(headers, options));
+}
+export function resolveThemeHostname(headers, options = {}) {
+    return hostFromHeaderValue(resolveThemeSourceHeader(headers, options));
+}
+export function toHtmlString(body) {
+    return typeof body === "string" ? body : body.toString();
+}
+//# sourceMappingURL=http.js.map

package/lib/runtime/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../src/runtime/http.ts"],"names":[],"mappings":"AASA,SAAS,YAAY,CAAC,OAAkB,EAAE,GAAW;IACnD,IAAI,OAAO,YAAY,OAAO,EAAE,CAAC;QAC/B,OAAO,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,SAAS,CAAC;IACvC,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;IACvF,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IACrF,CAAC;IAED,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAkB,EAAE,UAA6B;IACzE,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,YAAY,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC/C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzD,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,4BAA4B,CAAC,KAAc;IAClD,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAE7B,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;IAC/C,IAAI,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC;IAElC,KAAK,MAAM,IAAI,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACzC,MAAM,CAAC,MAAM,EAAE,GAAG,aAAa,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACnD,IAAI,MAAM,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,MAAM;YAAE,SAAS;QACtD,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;QAChD,IAAI,CAAC,QAAQ;YAAE,OAAO,SAAS,CAAC;QAChC,OAAO,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACxC,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAAc;IAChD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,aAAa,GAAG,4BAA4B,CAAC,KAAK,CAAC,CAAC;IAC1D,IAAI,aAAa,EAAE,CAAC;QAClB,OAAO,mBAAmB,CAAC,aAAa,CAAC,CAAC;IAC5C,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;IAC9C,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAE5B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;QAClC,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACpB,OAAO,qBAAqB,CAAC,MAAM,CAAC,CAAC;QACvC,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,qCAAqC;IACvC,CAAC;IAED,IAAI,CAAC;QACH,OAAO,qBAAqB,CAAC,IAAI,GAAG,CAAC,WAAW,SAAS,EAAE,CAAC,CAAC,CAAC;IAChE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,GAAQ;IACrC,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IAC5C,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,KAAK,IAAI,IAAI,GAAG,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;QACzD,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,GAAG,QAAQ,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;AACnC,CAAC;AAED,SAAS,4BAA4B,CAAC,UAA0C,EAAE;IAChF,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,IAAI,OAAO,CAAC,mBAAmB,EAAE,CAAC;QAChC,UAAU,CAAC,IAAI,CAAC,WAAW,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,eAAe,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,UAAU,CAAC,IAAI,CAAC,oBAAoB,EAAE,kBAAkB,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,MAAM,UAAU,2BAA2B,CAAC,OAAkB,EAAE,UAA0C,EAAE;IAC1G,8EAA8E;IAC9E,uEAAuE;IACvE,8EAA8E;IAC9E,sEAAsE;IACtE,OAAO,gBAAgB,CAAC,OAAO,EAAE;QAC/B,UAAU;QACV,SAAS;QACT,SAAS;QACT,QAAQ;QACR,GAAG,4BAA4B,CAAC,OAAO,CAAC;KACzC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,OAAkB,EAAE,UAA0C,EAAE;IACvG,OAAO,gBAAgB,CAAC,OAAO,EAAE;QAC/B,SAAS;QACT,QAAQ;QACR,UAAU;QACV,SAAS;QACT,YAAY;QACZ,WAAW;QACX,GAAG,4BAA4B,CAAC,OAAO,CAAC;KACzC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,OAAkB,EAAE,UAA0C,EAAE;IACtG,OAAO,mBAAmB,CAAC,2BAA2B,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,OAAkB,EAAE,UAA0C,EAAE;IACnG,OAAO,mBAAmB,CAAC,wBAAwB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAoB;IAC/C,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;AAC3D,CAAC"}

package/lib/runtime/jsonSchema.d.ts

@@ -0,0 +1,4 @@
+import * as av from "anyvali";
+import { JsonObject } from "../contracts/json.js";
+export declare function toJsonSchemaDocument(schema: av.BaseSchema<unknown, unknown>): JsonObject;
+//# sourceMappingURL=jsonSchema.d.ts.map

package/lib/runtime/jsonSchema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jsonSchema.d.ts","sourceRoot":"","sources":["../../src/runtime/jsonSchema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,UAAU,EAA+B,MAAM,sBAAsB,CAAC;AA+B/E,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,UAAU,CAExF"}

package/lib/runtime/jsonSchema.js

@@ -0,0 +1,28 @@
+import * as av from "anyvali";
+import { JsonObjectSchema } from "../contracts/json.js";
+function sanitizeJsonValue(value) {
+    if (typeof value === "string" ||
+        typeof value === "number" ||
+        typeof value === "boolean" ||
+        value === null) {
+        return value;
+    }
+    if (Array.isArray(value)) {
+        return value.map((item) => sanitizeJsonValue(item));
+    }
+    if (typeof value === "object" && value !== null) {
+        const output = {};
+        for (const [key, entry] of Object.entries(value)) {
+            if (typeof entry === "function" || typeof entry === "undefined") {
+                continue;
+            }
+            output[key] = sanitizeJsonValue(entry);
+        }
+        return output;
+    }
+    return String(value);
+}
+export function toJsonSchemaDocument(schema) {
+    return JsonObjectSchema.parse(sanitizeJsonValue(av.exportSchema(schema, "portable")));
+}
+//# sourceMappingURL=jsonSchema.js.map

package/lib/runtime/jsonSchema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jsonSchema.js","sourceRoot":"","sources":["../../src/runtime/jsonSchema.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAc,gBAAgB,EAAa,MAAM,sBAAsB,CAAC;AAE/E,SAAS,iBAAiB,CAAC,KAAc;IACvC,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,OAAO,KAAK,KAAK,QAAQ;QACzB,OAAO,KAAK,KAAK,SAAS;QAC1B,KAAK,KAAK,IAAI,EACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC;IACtD,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,MAAM,MAAM,GAAe,EAAE,CAAC;QAC9B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACjD,IAAI,OAAO,KAAK,KAAK,UAAU,IAAI,OAAO,KAAK,KAAK,WAAW,EAAE,CAAC;gBAChE,SAAS;YACX,CAAC;YAED,MAAM,CAAC,GAAG,CAAC,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAC;QACzC,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAAuC;IAC1E,OAAO,gBAAgB,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,UAAU,CAAY,CAAC,CAAC,CAAC;AACnG,CAAC"}

package/lib/runtime/manifest.d.ts

@@ -0,0 +1,3 @@
+import { PluginManifestSchema, type PluginManifest } from "../contracts/manifest.js";
+export declare function createPluginManifest(manifest: Parameters<typeof PluginManifestSchema.parse>[0]): PluginManifest;
+//# sourceMappingURL=manifest.d.ts.map

package/lib/runtime/manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../src/runtime/manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,KAAK,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAErF,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,UAAU,CAAC,OAAO,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,cAAc,CAE/G"}

package/lib/runtime/manifest.js

@@ -0,0 +1,5 @@
+import { PluginManifestSchema } from "../contracts/manifest.js";
+export function createPluginManifest(manifest) {
+    return PluginManifestSchema.parse(manifest);
+}
+//# sourceMappingURL=manifest.js.map

package/lib/runtime/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../src/runtime/manifest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAuB,MAAM,0BAA0B,CAAC;AAErF,MAAM,UAAU,oBAAoB,CAAC,QAA0D;IAC7F,OAAO,oBAAoB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;AAC9C,CAAC"}

package/lib/runtime/media.d.ts

@@ -0,0 +1,20 @@
+import { RenderMode } from "../contracts/common.js";
+export interface AcceptEntry {
+    mediaType: string;
+    parameters: Readonly<Record<string, string>>;
+    quality: number;
+}
+export type RequestedRepresentation = {
+    kind: "json";
+} | {
+    kind: "ndjson";
+} | {
+    kind: "metadata";
+} | {
+    kind: "html";
+    theme?: string;
+    mode?: RenderMode;
+};
+export declare function parseAcceptHeader(headerValue?: string): AcceptEntry[];
+export declare function resolveRequestedRepresentation(headerValue?: string): RequestedRepresentation;
+//# sourceMappingURL=media.d.ts.map

package/lib/runtime/media.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"media.d.ts","sourceRoot":"","sources":["../../src/runtime/media.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAoB,MAAM,wBAAwB,CAAC;AAEtE,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAC7C,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,uBAAuB,GAC/B;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,GAClB;IAAE,IAAI,EAAE,UAAU,CAAA;CAAE,GACpB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,UAAU,CAAA;CAAE,CAAC;AAiBxD,wBAAgB,iBAAiB,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,WAAW,EAAE,CAoCrE;AAED,wBAAgB,8BAA8B,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,uBAAuB,CA4B5F"}

package/lib/runtime/media.js

@@ -0,0 +1,70 @@
+import { RenderModeSchema } from "../contracts/common.js";
+function parseParameter(raw) {
+    const separatorIndex = raw.indexOf("=");
+    if (separatorIndex <= 0) {
+        return null;
+    }
+    const key = raw.slice(0, separatorIndex).trim().toLowerCase();
+    const value = raw.slice(separatorIndex + 1).trim().replace(/^"|"$/g, "");
+    if (key.length === 0 || value.length === 0) {
+        return null;
+    }
+    return [key, value];
+}
+export function parseAcceptHeader(headerValue) {
+    if (!headerValue || headerValue.trim().length === 0) {
+        return [{ mediaType: "application/json", parameters: {}, quality: 1 }];
+    }
+    return headerValue
+        .split(",")
+        .map((rawEntry) => rawEntry.trim())
+        .filter((rawEntry) => rawEntry.length > 0)
+        .map((rawEntry) => {
+        const parts = rawEntry.split(";").map((part) => part.trim()).filter((part) => part.length > 0);
+        const mediaType = parts[0].toLowerCase();
+        const parameters = {};
+        let quality = 1;
+        for (const parameter of parts.slice(1)) {
+            const parsed = parseParameter(parameter);
+            if (!parsed) {
+                continue;
+            }
+            const [key, value] = parsed;
+            if (key === "q") {
+                const parsedQuality = Number(value);
+                if (Number.isFinite(parsedQuality) && parsedQuality >= 0 && parsedQuality <= 1) {
+                    quality = parsedQuality;
+                }
+                continue;
+            }
+            parameters[key] = value;
+        }
+        return { mediaType, parameters, quality };
+    })
+        .sort((left, right) => right.quality - left.quality);
+}
+export function resolveRequestedRepresentation(headerValue) {
+    const entries = parseAcceptHeader(headerValue);
+    for (const entry of entries) {
+        if (entry.mediaType === "application/vnd.betterportal.metadata+json") {
+            return { kind: "metadata" };
+        }
+        if (entry.mediaType === "application/x-ndjson") {
+            return { kind: "ndjson" };
+        }
+        if (entry.mediaType === "application/json" || entry.mediaType === "*/*") {
+            return { kind: "json" };
+        }
+        if (entry.mediaType === "text/html") {
+            const modeCandidate = entry.parameters.mode;
+            const mode = modeCandidate ? RenderModeSchema.parse(modeCandidate) : undefined;
+            return {
+                kind: "html",
+                theme: entry.parameters.theme,
+                mode
+            };
+        }
+    }
+    return { kind: "json" };
+}
+//# sourceMappingURL=media.js.map

package/lib/runtime/media.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"media.js","sourceRoot":"","sources":["../../src/runtime/media.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AActE,SAAS,cAAc,CAAC,GAAW;IACjC,MAAM,cAAc,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,cAAc,IAAI,CAAC,EAAE,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC9D,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,cAAc,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACzE,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,WAAoB;IACpD,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,OAAO,CAAC,EAAE,SAAS,EAAE,kBAAkB,EAAE,UAAU,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;IACzE,CAAC;IAED,OAAO,WAAW;SACf,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;SAClC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;SACzC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE;QAChB,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC/F,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QACzC,MAAM,UAAU,GAA2B,EAAE,CAAC;QAC9C,IAAI,OAAO,GAAG,CAAC,CAAC;QAEhB,KAAK,MAAM,SAAS,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YACvC,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,CAAC;YACzC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,SAAS;YACX,CAAC;YAED,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,MAAM,CAAC;YAC5B,IAAI,GAAG,KAAK,GAAG,EAAE,CAAC;gBAChB,MAAM,aAAa,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;gBACpC,IAAI,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,aAAa,IAAI,CAAC,IAAI,aAAa,IAAI,CAAC,EAAE,CAAC;oBAC/E,OAAO,GAAG,aAAa,CAAC;gBAC1B,CAAC;gBACD,SAAS;YACX,CAAC;YAED,UAAU,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC1B,CAAC;QAED,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;IAC5C,CAAC,CAAC;SACD,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;AACzD,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,WAAoB;IACjE,MAAM,OAAO,GAAG,iBAAiB,CAAC,WAAW,CAAC,CAAC;IAE/C,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,SAAS,KAAK,4CAA4C,EAAE,CAAC;YACrE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;QAC9B,CAAC;QAED,IAAI,KAAK,CAAC,SAAS,KAAK,sBAAsB,EAAE,CAAC;YAC/C,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;QAC5B,CAAC;QAED,IAAI,KAAK,CAAC,SAAS,KAAK,kBAAkB,IAAI,KAAK,CAAC,SAAS,KAAK,KAAK,EAAE,CAAC;YACxE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;QAC1B,CAAC;QAED,IAAI,KAAK,CAAC,SAAS,KAAK,WAAW,EAAE,CAAC;YACpC,MAAM,aAAa,GAAG,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;YAC5C,MAAM,IAAI,GAAG,aAAa,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAC/E,OAAO;gBACL,IAAI,EAAE,MAAM;gBACZ,KAAK,EAAE,KAAK,CAAC,UAAU,CAAC,KAAK;gBAC7B,IAAI;aACL,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC1B,CAAC"}

package/lib/runtime/registry.d.ts

@@ -0,0 +1,67 @@
+import type { HttpMethod } from "../contracts/common.js";
+import type { BetterPortalRegistry, RegisteredRoute, RegisteredThemeRenderer } from "../contracts/registry.js";
+import type { PluginManifest } from "../contracts/manifest.js";
+export interface ResolvedRoute {
+    readonly route: RegisteredRoute;
+    readonly params: Record<string, string>;
+}
+/**
+ * Resolve a request path to a registered route.
+ * Static segments have priority over dynamic params (Next.js convention).
+ */
+export declare function resolveRoute(registry: BetterPortalRegistry, path: string, method: HttpMethod): ResolvedRoute | null;
+export interface ResolvedRenderer {
+    readonly renderer: RegisteredThemeRenderer;
+    readonly themeId: string;
+}
+/**
+ * Resolve a theme renderer for a route.
+ * Method-specific renderers have priority over default (no method).
+ */
+export declare function resolveRenderer(route: RegisteredRoute, themeId: string, type: "page" | "component" | "fragment", method?: HttpMethod, componentId?: string, fragmentKey?: string): ResolvedRenderer | null;
+export interface ManifestBaseFields {
+    pluginId: string;
+    title: string;
+    description: string;
+    category?: PluginManifest["category"];
+    deploymentModes?: ReadonlyArray<PluginManifest["deploymentModes"][number]>;
+    capabilities?: ReadonlyArray<string>;
+    configSchemas?: PluginManifest["configSchemas"];
+    permissions?: PluginManifest["permissions"];
+    adminApis?: PluginManifest["adminApis"];
+    webhooks?: PluginManifest["webhooks"];
+    cacheHints?: PluginManifest["cacheHints"];
+}
+/**
+ * Build a PluginManifest from the registry, auto-deriving:
+ * - version (from package.json)
+ * - supportedThemes (from route themeRenderers)
+ * - supportedRenderModes (from renderer types)
+ * - views (from non-fragment routes)
+ * - capabilities (from themes + view types)
+ */
+export declare function buildManifestFromRegistry(registry: BetterPortalRegistry, packageJson: {
+    version: string;
+}, base: ManifestBaseFields): PluginManifest;
+export interface BpSchemaOutput {
+    manifest: PluginManifest;
+    routes: Array<{
+        viewId: string;
+        path: string;
+        methods: ReadonlyArray<HttpMethod>;
+        paramNames: ReadonlyArray<string>;
+        themes: string[];
+        hasFragments: boolean;
+        fragments: Array<{
+            fragmentLocation: string;
+            fragmentId: string;
+            themes: string[];
+        }>;
+        components: string[];
+    }>;
+}
+/**
+ * Build /.well-known/bp/schema.json output.
+ */
+export declare function buildBpSchema(registry: BetterPortalRegistry, manifest: PluginManifest): BpSchemaOutput;
+//# sourceMappingURL=registry.d.ts.map

package/lib/runtime/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/runtime/registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAc,MAAM,wBAAwB,CAAC;AAErE,OAAO,KAAK,EACV,oBAAoB,EACpB,eAAe,EACf,uBAAuB,EAExB,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAsB,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAMnF,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACzC;AA2BD;;;GAGG;AACH,wBAAgB,YAAY,CAC1B,QAAQ,EAAE,oBAAoB,EAC9B,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,UAAU,GACjB,aAAa,GAAG,IAAI,CAoCtB;AAID,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,QAAQ,EAAE,uBAAuB,CAAC;IAC3C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAC7B,KAAK,EAAE,eAAe,EACtB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,UAAU,EACvC,MAAM,CAAC,EAAE,UAAU,EACnB,WAAW,CAAC,EAAE,MAAM,EACpB,WAAW,CAAC,EAAE,MAAM,GACnB,gBAAgB,GAAG,IAAI,CAyCzB;AAID,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,cAAc,CAAC,UAAU,CAAC,CAAC;IACtC,eAAe,CAAC,EAAE,aAAa,CAAC,cAAc,CAAC,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3E,YAAY,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACrC,aAAa,CAAC,EAAE,cAAc,CAAC,eAAe,CAAC,CAAC;IAChD,WAAW,CAAC,EAAE,cAAc,CAAC,aAAa,CAAC,CAAC;IAC5C,SAAS,CAAC,EAAE,cAAc,CAAC,WAAW,CAAC,CAAC;IACxC,QAAQ,CAAC,EAAE,cAAc,CAAC,UAAU,CAAC,CAAC;IACtC,UAAU,CAAC,EAAE,cAAc,CAAC,YAAY,CAAC,CAAC;CAC3C;AAiBD;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,oBAAoB,EAC9B,WAAW,EAAE;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,EAChC,IAAI,EAAE,kBAAkB,GACvB,cAAc,CAkEhB;AA4FD,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,cAAc,CAAC;IACzB,MAAM,EAAE,KAAK,CAAC;QACZ,MAAM,EAAE,MAAM,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC;QACnC,UAAU,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;QAClC,MAAM,EAAE,MAAM,EAAE,CAAC;QACjB,YAAY,EAAE,OAAO,CAAC;QACtB,SAAS,EAAE,KAAK,CAAC;YAAE,gBAAgB,EAAE,MAAM,CAAC;YAAC,UAAU,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,MAAM,EAAE,CAAA;SAAE,CAAC,CAAC;QACrF,UAAU,EAAE,MAAM,EAAE,CAAC;KACtB,CAAC,CAAC;CACJ;AAED;;GAEG;AACH,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,oBAAoB,EAC9B,QAAQ,EAAE,cAAc,GACvB,cAAc,CA8BhB"}

package/lib/runtime/registry.js

@@ -0,0 +1,290 @@
+import { toJsonSchemaDocument } from "./jsonSchema.js";
+function buildCandidates(registry) {
+    return registry.routes.map((route) => {
+        const segments = route.path.split("/").filter(Boolean);
+        const paramIndices = new Map();
+        let staticCount = 0;
+        for (let i = 0; i < segments.length; i++) {
+            if (segments[i].startsWith(":")) {
+                paramIndices.set(i, segments[i].slice(1));
+            }
+            else {
+                staticCount++;
+            }
+        }
+        return { route, segments, paramIndices, staticCount };
+    });
+}
+/**
+ * Resolve a request path to a registered route.
+ * Static segments have priority over dynamic params (Next.js convention).
+ */
+export function resolveRoute(registry, path, method) {
+    const requestSegments = path.split("/").filter(Boolean);
+    const candidates = buildCandidates(registry);
+    const matches = [];
+    for (const candidate of candidates) {
+        if (candidate.segments.length !== requestSegments.length)
+            continue;
+        if (!candidate.route.methods.includes(method))
+            continue;
+        const params = {};
+        let match = true;
+        for (let i = 0; i < candidate.segments.length; i++) {
+            const paramName = candidate.paramIndices.get(i);
+            if (paramName) {
+                params[paramName] = requestSegments[i];
+            }
+            else if (candidate.segments[i] !== requestSegments[i]) {
+                match = false;
+                break;
+            }
+        }
+        if (match) {
+            matches.push({ candidate, params });
+        }
+    }
+    if (matches.length === 0)
+        return null;
+    // Sort: more static segments = higher priority (static > dynamic)
+    matches.sort((a, b) => b.candidate.staticCount - a.candidate.staticCount);
+    return {
+        route: matches[0].candidate.route,
+        params: matches[0].params
+    };
+}
+/**
+ * Resolve a theme renderer for a route.
+ * Method-specific renderers have priority over default (no method).
+ */
+export function resolveRenderer(route, themeId, type, method, componentId, fragmentKey) {
+    const themeSet = route.themeRenderers[themeId];
+    if (!themeSet)
+        return null;
+    let pool;
+    switch (type) {
+        case "page":
+            pool = themeSet.pages;
+            break;
+        case "component":
+            pool = themeSet.components;
+            break;
+        case "fragment":
+            pool = themeSet.fragments;
+            break;
+    }
+    // Filter by target
+    let candidates;
+    if (type === "component" && componentId) {
+        candidates = pool.filter((r) => r.rendererId === componentId);
+    }
+    else if (type === "fragment" && fragmentKey) {
+        const [location, id] = fragmentKey.split(".");
+        candidates = pool.filter((r) => r.fragmentLocation === location && r.fragmentId === id);
+    }
+    else {
+        candidates = pool.filter((r) => r.rendererId === "default");
+    }
+    if (candidates.length === 0)
+        return null;
+    // Method-specific wins over generic
+    if (method) {
+        const methodSpecific = candidates.find((r) => r.method === method);
+        if (methodSpecific)
+            return { renderer: methodSpecific, themeId };
+    }
+    // Fallback to no-method renderer
+    const generic = candidates.find((r) => r.method === undefined);
+    return generic ? { renderer: generic, themeId } : null;
+}
+const CONFIG_ADMIN_APIS = [
+    { id: "config.schema", title: "Config Schema", description: "BetterPortal-managed config schemas for this service.", path: "/.well-known/bp/config/schema", methods: ["GET"], supportsCustomUi: false },
+    { id: "config.values", title: "Config Values", description: "Read and write BetterPortal-managed config values.", path: "/.well-known/bp/config", methods: ["GET", "POST"], supportsCustomUi: false }
+];
+function deriveAdminApis(base) {
+    const explicit = base.adminApis ?? [];
+    const hasConfigSchemas = (base.configSchemas?.length ?? 0) > 0;
+    if (!hasConfigSchemas)
+        return [...explicit];
+    const explicitIds = new Set(explicit.map((a) => a.id));
+    const derived = CONFIG_ADMIN_APIS.filter((a) => !explicitIds.has(a.id));
+    return [...explicit, ...derived];
+}
+/**
+ * Build a PluginManifest from the registry, auto-deriving:
+ * - version (from package.json)
+ * - supportedThemes (from route themeRenderers)
+ * - supportedRenderModes (from renderer types)
+ * - views (from non-fragment routes)
+ * - capabilities (from themes + view types)
+ */
+export function buildManifestFromRegistry(registry, packageJson, base) {
+    const themes = new Set();
+    const renderModes = new Set();
+    const capabilities = new Set();
+    for (const capability of base.capabilities ?? []) {
+        capabilities.add(capability);
+    }
+    capabilities.add("view.json");
+    capabilities.add("view.metadata");
+    for (const route of registry.routes) {
+        // Streaming views (spec/streaming.md section 5)
+        if (route.schemas.item) {
+            capabilities.add("stream.ndjson");
+        }
+        for (const [themeId, rendererSet] of Object.entries(route.themeRenderers)) {
+            themes.add(themeId);
+            capabilities.add(`theme.${themeId}`);
+            if (rendererSet.pages.length > 0)
+                renderModes.add("page");
+            if (rendererSet.fragments.length > 0)
+                renderModes.add("fragment");
+            if (rendererSet.pages.length > 0 || rendererSet.components.length > 0) {
+                capabilities.add("view.html");
+            }
+            if (rendererSet.stream) {
+                capabilities.add("view.sse-render");
+                capabilities.add("view.html");
+                renderModes.add("fragment");
+            }
+        }
+    }
+    const seenViewIds = new Set();
+    const views = registry.routes
+        .filter((route) => {
+        if (seenViewIds.has(route.viewId))
+            return false;
+        seenViewIds.add(route.viewId);
+        // Exclude fragment-only routes (routes that have fragment renderers but no pages)
+        const hasAnyPage = Object.values(route.themeRenderers).some((set) => set.pages.length > 0 || set.stream !== undefined);
+        return hasAnyPage || Object.keys(route.themeRenderers).length === 0;
+    })
+        .map((route) => routeToViewMetadata(route));
+    return {
+        pluginId: base.pluginId,
+        title: base.title,
+        description: base.description,
+        version: packageJson.version,
+        category: base.category ?? "service",
+        deploymentModes: base.deploymentModes ? [...base.deploymentModes] : ["self-hosted"],
+        capabilities: [...capabilities],
+        supportedThemes: [...themes],
+        supportedRenderModes: [...renderModes],
+        views,
+        configSchemas: base.configSchemas ?? [],
+        permissions: base.permissions ?? [],
+        adminApis: deriveAdminApis(base),
+        webhooks: base.webhooks ?? [],
+        cacheHints: base.cacheHints ?? { metadataTtlSeconds: 1800 }
+    };
+}
+function routeToViewMetadata(route) {
+    const themeRenderers = {};
+    for (const [themeId, set] of Object.entries(route.themeRenderers)) {
+        const modes = [];
+        const renderers = [];
+        if (set.pages.length > 0)
+            modes.push("page");
+        if (set.fragments.length > 0 || set.stream)
+            modes.push("fragment");
+        for (const page of set.pages) {
+            renderers.push({
+                id: page.rendererId,
+                title: page.rendererId === "default" ? "Default Content" : page.rendererId,
+                slotId: "main",
+                renderModes: ["page", "fragment"]
+            });
+        }
+        for (const fragment of set.fragments) {
+            const slotId = fragment.fragmentLocation && fragment.fragmentId
+                ? `${fragment.fragmentLocation}.${fragment.fragmentId}`
+                : fragment.rendererId;
+            renderers.push({
+                id: fragment.rendererId,
+                title: fragment.rendererId,
+                slotId,
+                renderModes: ["fragment"]
+            });
+        }
+        themeRenderers[themeId] = {
+            defaultRenderer: "default",
+            renderModes: modes,
+            slots: [...new Set(renderers.map((r) => r.slotId))],
+            renderers
+        };
+    }
+    const renderable = route.raw === true
+        ? false
+        : Object.values(route.themeRenderers).some((set) => set.pages.length > 0 || set.components.length > 0 || set.fragments.length > 0 || Boolean(set.stream));
+    return {
+        viewId: route.viewId,
+        title: route.title,
+        description: route.description,
+        path: route.path,
+        methods: [...route.methods],
+        paramsSchema: {},
+        querySchema: route.schemas.query ? toJsonSchemaDocument(route.schemas.query) : {},
+        headersSchema: route.schemas.headers ? toJsonSchemaDocument(route.schemas.headers) : {},
+        bodySchema: route.schemas.multipart
+            ? toJsonSchemaDocument(route.schemas.multipart)
+            : route.schemas.request ? toJsonSchemaDocument(route.schemas.request) : {},
+        jsonResponseSchema: route.schemas.response ? toJsonSchemaDocument(route.schemas.response) : {},
+        metadataResponseSchema: {},
+        renderable,
+        ...(route.raw === true ? { raw: true } : {}),
+        ...(route.schemas.item ? {
+            streaming: {
+                itemSchema: toJsonSchemaDocument(route.schemas.item),
+                ...(route.schemas.summary ? { summarySchema: toJsonSchemaDocument(route.schemas.summary) } : {})
+            }
+        } : {}),
+        html: { themeRenderers },
+        auth: route.auth,
+        ...(route.role ? { role: route.role } : {}),
+        dependencies: [...(route.dependencies ?? [])],
+        ...(route.chrome ? { chrome: route.chrome } : {}),
+        demoScenarios: route.demoScenarios.map((s) => ({
+            id: s.id,
+            title: s.title,
+            ...(s.description ? { description: s.description } : {}),
+            ...(s.match ? { match: s.match } : {}),
+            response: s.response
+        })),
+        cacheHints: route.cacheHints
+    };
+}
+/**
+ * Build /.well-known/bp/schema.json output.
+ */
+export function buildBpSchema(registry, manifest) {
+    return {
+        manifest,
+        routes: registry.routes.map((route) => {
+            // Aggregate fragments across themes: same (location, fragmentId) groups themes that support it
+            const fragMap = new Map();
+            for (const [themeId, set] of Object.entries(route.themeRenderers)) {
+                for (const f of set.fragments) {
+                    if (!f.fragmentLocation || !f.fragmentId)
+                        continue;
+                    const key = `${f.fragmentLocation}::${f.fragmentId}`;
+                    const existing = fragMap.get(key);
+                    if (existing)
+                        existing.themes.push(themeId);
+                    else
+                        fragMap.set(key, { fragmentLocation: f.fragmentLocation, fragmentId: f.fragmentId, themes: [themeId] });
+                }
+            }
+            return {
+                viewId: route.viewId,
+                path: route.path,
+                methods: route.methods,
+                paramNames: route.paramNames,
+                themes: Object.keys(route.themeRenderers),
+                hasFragments: fragMap.size > 0,
+                fragments: Array.from(fragMap.values()),
+                components: Object.values(route.themeRenderers).flatMap((set) => set.components.map((c) => c.rendererId))
+            };
+        })
+    };
+}
+//# sourceMappingURL=registry.js.map