@betterportal/framework 0.0.1

package/lib/contracts/binding.js

@@ -0,0 +1,69 @@
+import * as av from "anyvali";
+import { ConfigSchemaDescriptorSchema } from "./config.js";
+import { DeploymentModeSchema } from "./common.js";
+const NonEmptyStringSchema = av.string().minLength(1);
+export const AppRouteSchema = av.object({
+    id: NonEmptyStringSchema,
+    title: NonEmptyStringSchema,
+    path: NonEmptyStringSchema,
+    viewId: NonEmptyStringSchema,
+    serviceId: NonEmptyStringSchema,
+    enabled: av.bool().default(true)
+}, { unknownKeys: "strip" });
+export const TenantSchema = av.object({
+    id: NonEmptyStringSchema,
+    slug: NonEmptyStringSchema,
+    title: NonEmptyStringSchema,
+    branding: av.object({
+        logoUrl: av.optional(av.string().format("url")),
+        primaryColor: av.optional(NonEmptyStringSchema),
+        secondaryColor: av.optional(NonEmptyStringSchema)
+    }, { unknownKeys: "strip" }).default({})
+}, { unknownKeys: "strip" });
+export const FragmentAssignmentSchema = av.object({
+    serviceId: NonEmptyStringSchema,
+    fragmentId: NonEmptyStringSchema,
+    enabled: av.bool().default(true)
+}, { unknownKeys: "strip" });
+export const AppSchema = av.object({
+    id: NonEmptyStringSchema,
+    tenantId: NonEmptyStringSchema,
+    slug: NonEmptyStringSchema,
+    hostname: NonEmptyStringSchema,
+    title: NonEmptyStringSchema,
+    themeId: NonEmptyStringSchema,
+    routes: av.array(AppRouteSchema).default([]),
+    fragments: av.record(av.array(FragmentAssignmentSchema)).default({})
+}, { unknownKeys: "strip" });
+export const BindingTrustSchema = av.object({
+    credentialId: NonEmptyStringSchema,
+    issuer: NonEmptyStringSchema,
+    audience: NonEmptyStringSchema,
+    scopes: av.array(NonEmptyStringSchema).default([]),
+    rotationVersion: NonEmptyStringSchema
+}, { unknownKeys: "strip" });
+export const BindingRecordSchema = av.object({
+    bindingId: NonEmptyStringSchema,
+    serviceId: NonEmptyStringSchema,
+    tenantId: NonEmptyStringSchema,
+    appIds: av.array(NonEmptyStringSchema).default([]),
+    endpointBaseUrl: av.string().format("url"),
+    deploymentMode: DeploymentModeSchema,
+    enabled: av.bool().default(true),
+    importedManifestVersion: NonEmptyStringSchema,
+    lastSyncAtIso: av.optional(av.string().format("date-time")),
+    trust: BindingTrustSchema
+}, { unknownKeys: "strip" });
+export const ServiceCatalogEntrySchema = av.object({
+    serviceId: NonEmptyStringSchema,
+    title: NonEmptyStringSchema,
+    description: NonEmptyStringSchema,
+    category: av.enum_(["utility", "integration", "theme", "auth", "service"]),
+    manifestUrl: av.string().format("url"),
+    defaultEndpointBaseUrl: av.string().format("url"),
+    deploymentModes: av.array(DeploymentModeSchema).minItems(1),
+    tenantConfigSchemas: av.array(ConfigSchemaDescriptorSchema).default([]),
+    appConfigSchemas: av.array(ConfigSchemaDescriptorSchema).default([]),
+    hostedByBetterPortal: av.bool().default(false)
+}, { unknownKeys: "strip" });
+//# sourceMappingURL=binding.js.map

package/lib/contracts/binding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"binding.js","sourceRoot":"","sources":["../../src/contracts/binding.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAE9B,OAAO,EAAE,4BAA4B,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,oBAAoB,EAAE,MAAM,aAAa,CAAC;AAEnD,MAAM,oBAAoB,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AAEtD,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,CAAC,MAAM,CAAC;IACtC,EAAE,EAAE,oBAAoB;IACxB,KAAK,EAAE,oBAAoB;IAC3B,IAAI,EAAE,oBAAoB;IAC1B,MAAM,EAAE,oBAAoB;IAC5B,SAAS,EAAE,oBAAoB;IAC/B,OAAO,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;CACjC,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;AAG7B,MAAM,CAAC,MAAM,YAAY,GAAG,EAAE,CAAC,MAAM,CAAC;IACpC,EAAE,EAAE,oBAAoB;IACxB,IAAI,EAAE,oBAAoB;IAC1B,KAAK,EAAE,oBAAoB;IAC3B,QAAQ,EAAE,EAAE,CAAC,MAAM,CAAC;QAClB,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC/C,YAAY,EAAE,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC;QAC/C,cAAc,EAAE,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC;KAClD,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACzC,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;AAG7B,MAAM,CAAC,MAAM,wBAAwB,GAAG,EAAE,CAAC,MAAM,CAAC;IAChD,SAAS,EAAE,oBAAoB;IAC/B,UAAU,EAAE,oBAAoB;IAChC,OAAO,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;CACjC,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;AAG7B,MAAM,CAAC,MAAM,SAAS,GAAG,EAAE,CAAC,MAAM,CAAC;IACjC,EAAE,EAAE,oBAAoB;IACxB,QAAQ,EAAE,oBAAoB;IAC9B,IAAI,EAAE,oBAAoB;IAC1B,QAAQ,EAAE,oBAAoB;IAC9B,KAAK,EAAE,oBAAoB;IAC3B,OAAO,EAAE,oBAAoB;IAC7B,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5C,SAAS,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACrE,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;AAG7B,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,CAAC,MAAM,CAAC;IAC1C,YAAY,EAAE,oBAAoB;IAClC,MAAM,EAAE,oBAAoB;IAC5B,QAAQ,EAAE,oBAAoB;IAC9B,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAClD,eAAe,EAAE,oBAAoB;CACtC,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;AAG7B,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,CAAC,MAAM,CAAC;IAC3C,SAAS,EAAE,oBAAoB;IAC/B,SAAS,EAAE,oBAAoB;IAC/B,QAAQ,EAAE,oBAAoB;IAC9B,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAClD,eAAe,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC;IAC1C,cAAc,EAAE,oBAAoB;IACpC,OAAO,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAChC,uBAAuB,EAAE,oBAAoB;IAC7C,aAAa,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC3D,KAAK,EAAE,kBAAkB;CAC1B,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;AAG7B,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,CAAC,MAAM,CAAC;IACjD,SAAS,EAAE,oBAAoB;IAC/B,KAAK,EAAE,oBAAoB;IAC3B,WAAW,EAAE,oBAAoB;IACjC,QAAQ,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,SAAS,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,CAAU,CAAC;IACnF,WAAW,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC;IACtC,sBAAsB,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC;IACjD,eAAe,EAAE,EAAE,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC3D,mBAAmB,EAAE,EAAE,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACvE,gBAAgB,EAAE,EAAE,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACpE,oBAAoB,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CAC/C,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC"}

package/lib/contracts/common.d.ts

@@ -0,0 +1,23 @@
+import * as av from "anyvali";
+import type { Infer } from "anyvali";
+export declare const HttpMethodSchema: av.EnumSchema<readonly ["GET", "POST", "PUT", "PATCH", "DELETE", "OPTIONS"]>;
+export type HttpMethod = Infer<typeof HttpMethodSchema>;
+export declare const RenderModeSchema: av.EnumSchema<readonly ["page", "fragment", "embed"]>;
+export type RenderMode = Infer<typeof RenderModeSchema>;
+export declare const PluginCategorySchema: av.EnumSchema<readonly ["framework", "auth", "theme", "service", "utility", "integration"]>;
+export type PluginCategory = Infer<typeof PluginCategorySchema>;
+export declare const UuidV7Schema: av.StringSchema;
+export type UuidV7 = Infer<typeof UuidV7Schema>;
+export declare const PluginIdSchema: av.StringSchema;
+export type PluginId = Infer<typeof PluginIdSchema>;
+export declare const DeploymentModeSchema: av.EnumSchema<readonly ["bp-hosted", "customer-hosted", "third-party-saas", "self-hosted", "saas-managed"]>;
+export type DeploymentMode = Infer<typeof DeploymentModeSchema>;
+export declare const ConfigScopeSchema: av.EnumSchema<readonly ["tenant", "app"]>;
+export type ConfigScope = Infer<typeof ConfigScopeSchema>;
+export declare const ConfigVisibilitySchema: av.EnumSchema<readonly ["public", "protected", "secret"]>;
+export type ConfigVisibility = Infer<typeof ConfigVisibilitySchema>;
+export declare const ConfigOwnershipSchema: av.EnumSchema<readonly ["bp", "plugin", "mixed"]>;
+export type ConfigOwnership = Infer<typeof ConfigOwnershipSchema>;
+export declare const IdentityRealmSchema: av.EnumSchema<readonly ["runtime", "control-plane"]>;
+export type IdentityRealm = Infer<typeof IdentityRealmSchema>;
+//# sourceMappingURL=common.d.ts.map

package/lib/contracts/common.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.d.ts","sourceRoot":"","sources":["../../src/contracts/common.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAErC,eAAO,MAAM,gBAAgB,8EAA0E,CAAC;AACxG,MAAM,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAExD,eAAO,MAAM,gBAAgB,uDAAmD,CAAC;AACjF,MAAM,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAExD,eAAO,MAAM,oBAAoB,6FAAyF,CAAC;AAC3H,MAAM,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAEhE,eAAO,MAAM,YAAY,iBAA+F,CAAC;AACzH,MAAM,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAEhD,eAAO,MAAM,cAAc,iBAA4D,CAAC;AACxF,MAAM,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEpD,eAAO,MAAM,oBAAoB,6GAMtB,CAAC;AACZ,MAAM,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAEhE,eAAO,MAAM,iBAAiB,2CAAuC,CAAC;AACtE,MAAM,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE1D,eAAO,MAAM,sBAAsB,2DAAuD,CAAC;AAC3F,MAAM,MAAM,gBAAgB,GAAG,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEpE,eAAO,MAAM,qBAAqB,mDAA+C,CAAC;AAClF,MAAM,MAAM,eAAe,GAAG,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAElE,eAAO,MAAM,mBAAmB,sDAAkD,CAAC;AACnF,MAAM,MAAM,aAAa,GAAG,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC"}

package/lib/contracts/common.js

@@ -0,0 +1,18 @@
+import * as av from "anyvali";
+export const HttpMethodSchema = av.enum_(["GET", "POST", "PUT", "PATCH", "DELETE", "OPTIONS"]);
+export const RenderModeSchema = av.enum_(["page", "fragment", "embed"]);
+export const PluginCategorySchema = av.enum_(["framework", "auth", "theme", "service", "utility", "integration"]);
+export const UuidV7Schema = av.string().pattern("^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$");
+export const PluginIdSchema = av.string().pattern("^[a-z][a-z0-9]*(?:[.-][a-z0-9]+)*$");
+export const DeploymentModeSchema = av.enum_([
+    "bp-hosted",
+    "customer-hosted",
+    "third-party-saas",
+    "self-hosted",
+    "saas-managed"
+]);
+export const ConfigScopeSchema = av.enum_(["tenant", "app"]);
+export const ConfigVisibilitySchema = av.enum_(["public", "protected", "secret"]);
+export const ConfigOwnershipSchema = av.enum_(["bp", "plugin", "mixed"]);
+export const IdentityRealmSchema = av.enum_(["runtime", "control-plane"]);
+//# sourceMappingURL=common.js.map

package/lib/contracts/common.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"common.js","sourceRoot":"","sources":["../../src/contracts/common.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAG9B,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,CAAU,CAAC,CAAC;AAGxG,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,CAAU,CAAC,CAAC;AAGjF,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,aAAa,CAAU,CAAC,CAAC;AAG3H,MAAM,CAAC,MAAM,YAAY,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,uEAAuE,CAAC,CAAC;AAGzH,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,oCAAoC,CAAC,CAAC;AAGxF,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,CAAC,KAAK,CAAC;IAC3C,WAAW;IACX,iBAAiB;IACjB,kBAAkB;IAClB,aAAa;IACb,cAAc;CACN,CAAC,CAAC;AAGZ,MAAM,CAAC,MAAM,iBAAiB,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAU,CAAC,CAAC;AAGtE,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAU,CAAC,CAAC;AAG3F,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAU,CAAC,CAAC;AAGlF,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,SAAS,EAAE,eAAe,CAAU,CAAC,CAAC"}

package/lib/contracts/config.d.ts

@@ -0,0 +1,93 @@
+import * as av from "anyvali";
+import type { Infer } from "anyvali";
+export declare const ConfigFieldGroupDescriptorSchema: av.ObjectSchema<{
+    id: av.StringSchema;
+    title: av.StringSchema;
+    description: av.OptionalSchema<av.StringSchema>;
+    order: av.OptionalSchema<av.IntSchema>;
+    optional: av.OptionalSchema<av.BoolSchema>;
+}>;
+export type ConfigFieldGroupDescriptor = Infer<typeof ConfigFieldGroupDescriptorSchema>;
+export declare const ConfigFieldUiDescriptorSchema: av.ObjectSchema<{
+    control: av.OptionalSchema<av.EnumSchema<readonly ["text", "textarea", "password", "number", "checkbox", "select", "multiselect", "color", "date", "time", "datetime-local", "url", "email"]>>;
+    placeholder: av.OptionalSchema<av.StringSchema>;
+    options: av.OptionalSchema<av.ArraySchema<av.ObjectSchema<{
+        value: av.StringSchema;
+        label: av.StringSchema;
+    }>>>;
+    optionsSource: av.OptionalSchema<av.EnumSchema<readonly ["app.routes"]>>;
+    min: av.OptionalSchema<av.UnionSchema<[av.NumberSchema, av.StringSchema]>>;
+    max: av.OptionalSchema<av.UnionSchema<[av.NumberSchema, av.StringSchema]>>;
+    step: av.OptionalSchema<av.NumberSchema>;
+    rows: av.OptionalSchema<av.IntSchema>;
+}>;
+export type ConfigFieldUiDescriptor = Infer<typeof ConfigFieldUiDescriptorSchema>;
+export declare const ConfigFieldDescriptorSchema: av.ObjectSchema<{
+    key: av.StringSchema;
+    title: av.StringSchema;
+    description: av.StringSchema;
+    scope: av.EnumSchema<readonly ["tenant", "app"]>;
+    visibility: av.EnumSchema<readonly ["public", "protected", "secret"]>;
+    ownership: av.EnumSchema<readonly ["bp", "plugin", "mixed"]>;
+    sourceOfTruth: av.EnumSchema<readonly ["bp", "plugin", "external"]>;
+    groupId: av.OptionalSchema<av.StringSchema>;
+    order: av.OptionalSchema<av.IntSchema>;
+    defaultValue: av.OptionalSchema<av.BaseSchema<unknown, import("./json.js").JsonValue>>;
+    ui: av.OptionalSchema<av.ObjectSchema<{
+        control: av.OptionalSchema<av.EnumSchema<readonly ["text", "textarea", "password", "number", "checkbox", "select", "multiselect", "color", "date", "time", "datetime-local", "url", "email"]>>;
+        placeholder: av.OptionalSchema<av.StringSchema>;
+        options: av.OptionalSchema<av.ArraySchema<av.ObjectSchema<{
+            value: av.StringSchema;
+            label: av.StringSchema;
+        }>>>;
+        optionsSource: av.OptionalSchema<av.EnumSchema<readonly ["app.routes"]>>;
+        min: av.OptionalSchema<av.UnionSchema<[av.NumberSchema, av.StringSchema]>>;
+        max: av.OptionalSchema<av.UnionSchema<[av.NumberSchema, av.StringSchema]>>;
+        step: av.OptionalSchema<av.NumberSchema>;
+        rows: av.OptionalSchema<av.IntSchema>;
+    }>>;
+    required: av.BoolSchema;
+}>;
+export type ConfigFieldDescriptor = Infer<typeof ConfigFieldDescriptorSchema>;
+export declare const ConfigSchemaDescriptorSchema: av.ObjectSchema<{
+    id: av.StringSchema;
+    title: av.StringSchema;
+    description: av.StringSchema;
+    scope: av.EnumSchema<readonly ["tenant", "app"]>;
+    jsonSchema: av.BaseSchema<unknown, import("./json.js").JsonObject>;
+    groups: av.OptionalSchema<av.ArraySchema<av.ObjectSchema<{
+        id: av.StringSchema;
+        title: av.StringSchema;
+        description: av.OptionalSchema<av.StringSchema>;
+        order: av.OptionalSchema<av.IntSchema>;
+        optional: av.OptionalSchema<av.BoolSchema>;
+    }>>>;
+    fields: av.ArraySchema<av.ObjectSchema<{
+        key: av.StringSchema;
+        title: av.StringSchema;
+        description: av.StringSchema;
+        scope: av.EnumSchema<readonly ["tenant", "app"]>;
+        visibility: av.EnumSchema<readonly ["public", "protected", "secret"]>;
+        ownership: av.EnumSchema<readonly ["bp", "plugin", "mixed"]>;
+        sourceOfTruth: av.EnumSchema<readonly ["bp", "plugin", "external"]>;
+        groupId: av.OptionalSchema<av.StringSchema>;
+        order: av.OptionalSchema<av.IntSchema>;
+        defaultValue: av.OptionalSchema<av.BaseSchema<unknown, import("./json.js").JsonValue>>;
+        ui: av.OptionalSchema<av.ObjectSchema<{
+            control: av.OptionalSchema<av.EnumSchema<readonly ["text", "textarea", "password", "number", "checkbox", "select", "multiselect", "color", "date", "time", "datetime-local", "url", "email"]>>;
+            placeholder: av.OptionalSchema<av.StringSchema>;
+            options: av.OptionalSchema<av.ArraySchema<av.ObjectSchema<{
+                value: av.StringSchema;
+                label: av.StringSchema;
+            }>>>;
+            optionsSource: av.OptionalSchema<av.EnumSchema<readonly ["app.routes"]>>;
+            min: av.OptionalSchema<av.UnionSchema<[av.NumberSchema, av.StringSchema]>>;
+            max: av.OptionalSchema<av.UnionSchema<[av.NumberSchema, av.StringSchema]>>;
+            step: av.OptionalSchema<av.NumberSchema>;
+            rows: av.OptionalSchema<av.IntSchema>;
+        }>>;
+        required: av.BoolSchema;
+    }>>;
+}>;
+export type ConfigSchemaDescriptor = Infer<typeof ConfigSchemaDescriptorSchema>;
+//# sourceMappingURL=config.d.ts.map

package/lib/contracts/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/contracts/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAMrC,eAAO,MAAM,gCAAgC;;;;;;EAMjB,CAAC;AAC7B,MAAM,MAAM,0BAA0B,GAAG,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAExF,eAAO,MAAM,6BAA6B;;;;;;;;;;;;EA0Bd,CAAC;AAC7B,MAAM,MAAM,uBAAuB,GAAG,KAAK,CAAC,OAAO,6BAA6B,CAAC,CAAC;AAElF,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;EAaZ,CAAC;AAC7B,MAAM,MAAM,qBAAqB,GAAG,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAE9E,eAAO,MAAM,4BAA4B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAQb,CAAC;AAC7B,MAAM,MAAM,sBAAsB,GAAG,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC"}

package/lib/contracts/config.js

@@ -0,0 +1,62 @@
+import * as av from "anyvali";
+import { ConfigOwnershipSchema, ConfigScopeSchema, ConfigVisibilitySchema } from "./common.js";
+import { JsonObjectSchema, JsonValueSchema } from "./json.js";
+const NonEmptyStringSchema = av.string().minLength(1);
+export const ConfigFieldGroupDescriptorSchema = av.object({
+    id: NonEmptyStringSchema,
+    title: NonEmptyStringSchema,
+    description: av.optional(av.string()),
+    order: av.optional(av.int()),
+    optional: av.optional(av.bool())
+}, { unknownKeys: "strip" });
+export const ConfigFieldUiDescriptorSchema = av.object({
+    control: av.optional(av.enum_([
+        "text",
+        "textarea",
+        "password",
+        "number",
+        "checkbox",
+        "select",
+        "multiselect",
+        "color",
+        "date",
+        "time",
+        "datetime-local",
+        "url",
+        "email"
+    ])),
+    placeholder: av.optional(av.string()),
+    options: av.optional(av.array(av.object({
+        value: NonEmptyStringSchema,
+        label: NonEmptyStringSchema
+    }, { unknownKeys: "strip" }))),
+    optionsSource: av.optional(av.enum_(["app.routes"])),
+    min: av.optional(av.union([av.number(), av.string()])),
+    max: av.optional(av.union([av.number(), av.string()])),
+    step: av.optional(av.number()),
+    rows: av.optional(av.int().min(1))
+}, { unknownKeys: "strip" });
+export const ConfigFieldDescriptorSchema = av.object({
+    key: NonEmptyStringSchema,
+    title: NonEmptyStringSchema,
+    description: NonEmptyStringSchema,
+    scope: ConfigScopeSchema,
+    visibility: ConfigVisibilitySchema,
+    ownership: ConfigOwnershipSchema,
+    sourceOfTruth: av.enum_(["bp", "plugin", "external"]),
+    groupId: av.optional(NonEmptyStringSchema),
+    order: av.optional(av.int()),
+    defaultValue: av.optional(JsonValueSchema),
+    ui: av.optional(ConfigFieldUiDescriptorSchema),
+    required: av.bool().default(false)
+}, { unknownKeys: "strip" });
+export const ConfigSchemaDescriptorSchema = av.object({
+    id: NonEmptyStringSchema,
+    title: NonEmptyStringSchema,
+    description: NonEmptyStringSchema,
+    scope: ConfigScopeSchema,
+    jsonSchema: JsonObjectSchema,
+    groups: av.optional(av.array(ConfigFieldGroupDescriptorSchema)),
+    fields: av.array(ConfigFieldDescriptorSchema).default([])
+}, { unknownKeys: "strip" });
+//# sourceMappingURL=config.js.map

package/lib/contracts/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/contracts/config.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAE9B,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAC/F,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAE9D,MAAM,oBAAoB,GAAG,EAAE,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;AAEtD,MAAM,CAAC,MAAM,gCAAgC,GAAG,EAAE,CAAC,MAAM,CAAC;IACxD,EAAE,EAAE,oBAAoB;IACxB,KAAK,EAAE,oBAAoB;IAC3B,WAAW,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC;IACrC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC;IAC5B,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;CACjC,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;AAG7B,MAAM,CAAC,MAAM,6BAA6B,GAAG,EAAE,CAAC,MAAM,CAAC;IACrD,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,CAAC;QAC5B,MAAM;QACN,UAAU;QACV,UAAU;QACV,QAAQ;QACR,UAAU;QACV,QAAQ;QACR,aAAa;QACb,OAAO;QACP,MAAM;QACN,MAAM;QACN,gBAAgB;QAChB,KAAK;QACL,OAAO;KACC,CAAC,CAAC;IACZ,WAAW,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC;IACrC,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC;QACtC,KAAK,EAAE,oBAAoB;QAC3B,KAAK,EAAE,oBAAoB;KAC5B,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IAC9B,aAAa,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,YAAY,CAAU,CAAC,CAAC;IAC7D,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACtD,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACtD,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC;IAC9B,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;CACnC,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;AAG7B,MAAM,CAAC,MAAM,2BAA2B,GAAG,EAAE,CAAC,MAAM,CAAC;IACnD,GAAG,EAAE,oBAAoB;IACzB,KAAK,EAAE,oBAAoB;IAC3B,WAAW,EAAE,oBAAoB;IACjC,KAAK,EAAE,iBAAiB;IACxB,UAAU,EAAE,sBAAsB;IAClC,SAAS,EAAE,qBAAqB;IAChC,aAAa,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,UAAU,CAAU,CAAC;IAC9D,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,oBAAoB,CAAC;IAC1C,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC;IAC5B,YAAY,EAAE,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC;IAC1C,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,6BAA6B,CAAC;IAC9C,QAAQ,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CACnC,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;AAG7B,MAAM,CAAC,MAAM,4BAA4B,GAAG,EAAE,CAAC,MAAM,CAAC;IACpD,EAAE,EAAE,oBAAoB;IACxB,KAAK,EAAE,oBAAoB;IAC3B,WAAW,EAAE,oBAAoB;IACjC,KAAK,EAAE,iBAAiB;IACxB,UAAU,EAAE,gBAAgB;IAC5B,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAC/D,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAC1D,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC"}

package/lib/contracts/controlPlane.d.ts

@@ -0,0 +1,63 @@
+import type { BetterPortalApp, BetterPortalConfig, BetterPortalTenant, TenantServiceRegistration, PlatformService, SharedServiceDefinition } from "./platformConfig.js";
+export interface ScopedServiceConfig {
+    readonly managementOrigins: ReadonlyArray<string>;
+    readonly tenants: ReadonlyArray<ScopedTenant>;
+    /** Apps whose service config may be managed for this service. This can be broader than runtime apps. */
+    readonly configApps?: ReadonlyArray<ScopedConfigApp>;
+    readonly apps: ReadonlyArray<ScopedApp>;
+}
+export interface ScopedTenant {
+    readonly id: string;
+    readonly slug: string;
+    readonly title: string;
+    readonly active: boolean;
+    readonly branding: BetterPortalTenant["branding"];
+    /** Service registrations needed by themes/services to resolve route URLs. Secrets redacted. */
+    readonly services: ReadonlyArray<ScopedTenantService>;
+    readonly activatedPlatformServices: ReadonlyArray<string>;
+}
+export type ScopedTenantService = Omit<TenantServiceRegistration, "apiKeyHash"> & {
+    readonly source?: "tenant" | "platform" | "shared";
+    readonly sharedServiceId?: string;
+    readonly baseUrl?: string;
+    readonly logoUrl?: string;
+    readonly category?: string;
+    readonly tags?: ReadonlyArray<string>;
+};
+export interface ScopedApp {
+    readonly id: string;
+    readonly tenantId: string;
+    readonly slug: string;
+    readonly title: string;
+    readonly hostnames: ReadonlyArray<string>;
+    readonly originOverrides: ReadonlyArray<string>;
+    readonly refererOverrides: ReadonlyArray<string>;
+    readonly themeId: string;
+    readonly shell?: BetterPortalApp["shell"];
+    readonly themeConfig: BetterPortalApp["themeConfig"];
+    readonly defaultRoute: string;
+    readonly routes: ReadonlyArray<BetterPortalApp["routes"][number]>;
+    readonly menu: BetterPortalApp["menu"];
+    readonly slots: BetterPortalApp["slots"];
+    readonly fragments: BetterPortalApp["fragments"];
+    readonly auth?: BetterPortalApp["auth"];
+}
+export interface ScopedConfigApp {
+    readonly id: string;
+    readonly tenantId: string;
+    readonly title: string;
+}
+export interface PlatformConfigStore {
+    loadConfig(): Promise<BetterPortalConfig>;
+    saveConfig(config: BetterPortalConfig): Promise<void>;
+    validateApiKey(apiKey: string): Promise<{
+        scope: "tenant" | "platform";
+        serviceId: string | undefined;
+        tenantId?: string;
+        service: TenantServiceRegistration | PlatformService | SharedServiceDefinition;
+    } | null>;
+    getScopedConfig(serviceId: string, scope: "tenant" | "platform", tenantId?: string): Promise<ScopedServiceConfig>;
+    invalidate(): void;
+    onChange(listener: () => void): () => void;
+}
+//# sourceMappingURL=controlPlane.d.ts.map

package/lib/contracts/controlPlane.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"controlPlane.d.ts","sourceRoot":"","sources":["../../src/contracts/controlPlane.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,eAAe,EACf,kBAAkB,EAClB,kBAAkB,EAClB,yBAAyB,EACzB,eAAe,EACf,uBAAuB,EACxB,MAAM,qBAAqB,CAAC;AAI7B,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,iBAAiB,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAClD,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC,YAAY,CAAC,CAAC;IAC9C,wGAAwG;IACxG,QAAQ,CAAC,UAAU,CAAC,EAAE,aAAa,CAAC,eAAe,CAAC,CAAC;IACrD,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,SAAS,CAAC,CAAC;CACzC;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC,UAAU,CAAC,CAAC;IAClD,+FAA+F;IAC/F,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC,mBAAmB,CAAC,CAAC;IACtD,QAAQ,CAAC,yBAAyB,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CAC3D;AAED,MAAM,MAAM,mBAAmB,GAAG,IAAI,CAAC,yBAAyB,EAAE,YAAY,CAAC,GAAG;IAChF,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,GAAG,UAAU,GAAG,QAAQ,CAAC;IACnD,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;CACvC,CAAC;AAEF,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAC1C,QAAQ,CAAC,eAAe,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAChD,QAAQ,CAAC,gBAAgB,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IACjD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC,OAAO,CAAC,CAAC;IAC1C,QAAQ,CAAC,WAAW,EAAE,eAAe,CAAC,aAAa,CAAC,CAAC;IACrD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC,eAAe,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAClE,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC;IACvC,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC,OAAO,CAAC,CAAC;IACzC,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC,WAAW,CAAC,CAAC;IACjD,QAAQ,CAAC,IAAI,CAAC,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC;CACzC;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAID,MAAM,WAAW,mBAAmB;IAClC,UAAU,IAAI,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC1C,UAAU,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEtD,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC;QACtC,KAAK,EAAE,QAAQ,GAAG,UAAU,CAAC;QAC7B,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;QAC9B,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,OAAO,EAAE,yBAAyB,GAAG,eAAe,GAAG,uBAAuB,CAAC;KAChF,GAAG,IAAI,CAAC,CAAC;IAEV,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,GAAG,UAAU,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAElH,UAAU,IAAI,IAAI,CAAC;IAEnB,QAAQ,CAAC,QAAQ,EAAE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC;CAC5C"}

package/lib/contracts/controlPlane.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=controlPlane.js.map

package/lib/contracts/controlPlane.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"controlPlane.js","sourceRoot":"","sources":["../../src/contracts/controlPlane.ts"],"names":[],"mappings":""}

package/lib/contracts/json.d.ts

@@ -0,0 +1,9 @@
+import * as av from "anyvali";
+export type JsonPrimitive = string | number | boolean | null;
+export type JsonValue = JsonPrimitive | JsonObject | JsonValue[];
+export interface JsonObject {
+    [key: string]: JsonValue;
+}
+export declare const JsonValueSchema: av.BaseSchema<unknown, JsonValue>;
+export declare const JsonObjectSchema: av.BaseSchema<unknown, JsonObject>;
+//# sourceMappingURL=json.d.ts.map

package/lib/contracts/json.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"json.d.ts","sourceRoot":"","sources":["../../src/contracts/json.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAE9B,MAAM,MAAM,aAAa,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;AAC7D,MAAM,MAAM,SAAS,GAAG,aAAa,GAAG,UAAU,GAAG,SAAS,EAAE,CAAC;AACjE,MAAM,WAAW,UAAU;IACzB,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;CAC1B;AAID,eAAO,MAAM,eAAe,EAAe,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;AAC7E,eAAO,MAAM,gBAAgB,EAA0B,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC"}

package/lib/contracts/json.js

@@ -0,0 +1,6 @@
+import * as av from "anyvali";
+// AnyVali does not currently expose a convenient recursive builder for JSON values.
+// Keep the runtime contract JSON-shaped while retaining the explicit TS types above.
+export const JsonValueSchema = av.any();
+export const JsonObjectSchema = av.record(av.any());
+//# sourceMappingURL=json.js.map

package/lib/contracts/json.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"json.js","sourceRoot":"","sources":["../../src/contracts/json.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAQ9B,oFAAoF;AACpF,qFAAqF;AACrF,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,CAAC,GAAG,EAAuC,CAAC;AAC7E,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,CAAuC,CAAC"}

package/lib/contracts/manifest.d.ts

@@ -0,0 +1,158 @@
+import * as av from "anyvali";
+import type { Infer } from "anyvali";
+export declare const AdminApiDescriptorSchema: av.ObjectSchema<{
+    id: av.StringSchema;
+    title: av.StringSchema;
+    description: av.StringSchema;
+    path: av.StringSchema;
+    methods: av.ArraySchema<av.EnumSchema<readonly ["GET", "POST", "PUT", "PATCH", "DELETE"]>>;
+    supportsCustomUi: av.BoolSchema;
+}>;
+export type AdminApiDescriptor = Infer<typeof AdminApiDescriptorSchema>;
+export declare const WebhookEventDescriptorSchema: av.ObjectSchema<{
+    id: av.StringSchema;
+    title: av.StringSchema;
+    description: av.OptionalSchema<av.StringSchema>;
+    payloadSchema: av.BaseSchema<unknown, import("./json.js").JsonObject>;
+}>;
+export type WebhookEventDescriptor = Infer<typeof WebhookEventDescriptorSchema>;
+export declare const PluginManifestSchema: av.ObjectSchema<{
+    pluginId: av.StringSchema;
+    title: av.StringSchema;
+    description: av.StringSchema;
+    version: av.StringSchema;
+    category: av.EnumSchema<readonly ["framework", "auth", "theme", "service", "utility", "integration"]>;
+    deploymentModes: av.ArraySchema<av.EnumSchema<readonly ["bp-hosted", "customer-hosted", "third-party-saas", "self-hosted", "saas-managed"]>>;
+    capabilities: av.ArraySchema<av.StringSchema>;
+    supportedThemes: av.ArraySchema<av.StringSchema>;
+    supportedRenderModes: av.ArraySchema<av.EnumSchema<readonly ["page", "fragment", "embed"]>>;
+    views: av.ArraySchema<av.ObjectSchema<{
+        viewId: av.StringSchema;
+        title: av.StringSchema;
+        description: av.StringSchema;
+        path: av.StringSchema;
+        methods: av.ArraySchema<av.EnumSchema<readonly ["GET", "POST", "PUT", "PATCH", "DELETE", "OPTIONS"]>>;
+        paramsSchema: av.BaseSchema<unknown, import("./json.js").JsonObject>;
+        querySchema: av.BaseSchema<unknown, import("./json.js").JsonObject>;
+        headersSchema: av.BaseSchema<unknown, import("./json.js").JsonObject>;
+        bodySchema: av.BaseSchema<unknown, import("./json.js").JsonObject>;
+        jsonResponseSchema: av.BaseSchema<unknown, import("./json.js").JsonObject>;
+        metadataResponseSchema: av.BaseSchema<unknown, import("./json.js").JsonObject>;
+        renderable: av.BoolSchema;
+        raw: av.OptionalSchema<av.BoolSchema>;
+        streaming: av.OptionalSchema<av.ObjectSchema<{
+            itemSchema: av.BaseSchema<unknown, import("./json.js").JsonObject>;
+            summarySchema: av.OptionalSchema<av.BaseSchema<unknown, import("./json.js").JsonObject>>;
+        }>>;
+        html: av.ObjectSchema<{
+            themeRenderers: av.RecordSchema<av.ObjectSchema<{
+                defaultRenderer: av.StringSchema;
+                renderModes: av.ArraySchema<av.EnumSchema<readonly ["page", "fragment", "embed"]>>;
+                slots: av.ArraySchema<av.StringSchema>;
+                renderers: av.ArraySchema<av.ObjectSchema<{
+                    id: av.StringSchema;
+                    title: av.StringSchema;
+                    slotId: av.StringSchema;
+                    renderModes: av.ArraySchema<av.EnumSchema<readonly ["page", "fragment", "embed"]>>;
+                }>>;
+            }>>;
+        }>;
+        auth: av.ObjectSchema<{
+            required: av.BoolSchema;
+            permissions: av.ArraySchema<av.ObjectSchema<{
+                serviceId: av.StringSchema;
+                viewId: av.StringSchema;
+                permissions: av.ArraySchema<av.EnumSchema<readonly ["read", "create", "update", "delete"]>>;
+            }>>;
+        }>;
+        role: av.OptionalSchema<av.StringSchema>;
+        dependencies: av.ArraySchema<av.StringSchema>;
+        chrome: av.OptionalSchema<av.IntersectionSchema<[av.ObjectSchema<{
+            hideMenu: av.OptionalSchema<av.BoolSchema>;
+            hideHeader: av.OptionalSchema<av.BoolSchema>;
+            hideFooter: av.OptionalSchema<av.BoolSchema>;
+            fullScreen: av.OptionalSchema<av.BoolSchema>;
+        }>, av.RecordSchema<av.UnionSchema<[av.StringSchema, av.NumberSchema, av.BoolSchema]>>]>>;
+        demoScenarios: av.ArraySchema<av.ObjectSchema<{
+            id: av.StringSchema;
+            title: av.StringSchema;
+            description: av.OptionalSchema<av.StringSchema>;
+            match: av.OptionalSchema<av.ObjectSchema<{
+                query: av.OptionalSchema<av.RecordSchema<av.AnySchema>>;
+                params: av.OptionalSchema<av.RecordSchema<av.AnySchema>>;
+                headers: av.OptionalSchema<av.RecordSchema<av.StringSchema>>;
+                request: av.OptionalSchema<av.RecordSchema<av.AnySchema>>;
+            }>>;
+            response: av.BaseSchema<unknown, import("./json.js").JsonValue>;
+        }>>;
+        cacheHints: av.ObjectSchema<{
+            ttlSeconds: av.IntSchema;
+            varyBy: av.ArraySchema<av.StringSchema>;
+        }>;
+    }>>;
+    configSchemas: av.ArraySchema<av.ObjectSchema<{
+        id: av.StringSchema;
+        title: av.StringSchema;
+        description: av.StringSchema;
+        scope: av.EnumSchema<readonly ["tenant", "app"]>;
+        jsonSchema: av.BaseSchema<unknown, import("./json.js").JsonObject>;
+        groups: av.OptionalSchema<av.ArraySchema<av.ObjectSchema<{
+            id: av.StringSchema;
+            title: av.StringSchema;
+            description: av.OptionalSchema<av.StringSchema>;
+            order: av.OptionalSchema<av.IntSchema>;
+            optional: av.OptionalSchema<av.BoolSchema>;
+        }>>>;
+        fields: av.ArraySchema<av.ObjectSchema<{
+            key: av.StringSchema;
+            title: av.StringSchema;
+            description: av.StringSchema;
+            scope: av.EnumSchema<readonly ["tenant", "app"]>;
+            visibility: av.EnumSchema<readonly ["public", "protected", "secret"]>;
+            ownership: av.EnumSchema<readonly ["bp", "plugin", "mixed"]>;
+            sourceOfTruth: av.EnumSchema<readonly ["bp", "plugin", "external"]>;
+            groupId: av.OptionalSchema<av.StringSchema>;
+            order: av.OptionalSchema<av.IntSchema>;
+            defaultValue: av.OptionalSchema<av.BaseSchema<unknown, import("./json.js").JsonValue>>;
+            ui: av.OptionalSchema<av.ObjectSchema<{
+                control: av.OptionalSchema<av.EnumSchema<readonly ["text", "textarea", "password", "number", "checkbox", "select", "multiselect", "color", "date", "time", "datetime-local", "url", "email"]>>;
+                placeholder: av.OptionalSchema<av.StringSchema>;
+                options: av.OptionalSchema<av.ArraySchema<av.ObjectSchema<{
+                    value: av.StringSchema;
+                    label: av.StringSchema;
+                }>>>;
+                optionsSource: av.OptionalSchema<av.EnumSchema<readonly ["app.routes"]>>;
+                min: av.OptionalSchema<av.UnionSchema<[av.NumberSchema, av.StringSchema]>>;
+                max: av.OptionalSchema<av.UnionSchema<[av.NumberSchema, av.StringSchema]>>;
+                step: av.OptionalSchema<av.NumberSchema>;
+                rows: av.OptionalSchema<av.IntSchema>;
+            }>>;
+            required: av.BoolSchema;
+        }>>;
+    }>>;
+    permissions: av.ArraySchema<av.ObjectSchema<{
+        id: av.StringSchema;
+        title: av.StringSchema;
+        description: av.StringSchema;
+        defaultRoles: av.ArraySchema<av.StringSchema>;
+    }>>;
+    adminApis: av.ArraySchema<av.ObjectSchema<{
+        id: av.StringSchema;
+        title: av.StringSchema;
+        description: av.StringSchema;
+        path: av.StringSchema;
+        methods: av.ArraySchema<av.EnumSchema<readonly ["GET", "POST", "PUT", "PATCH", "DELETE"]>>;
+        supportsCustomUi: av.BoolSchema;
+    }>>;
+    webhooks: av.ArraySchema<av.ObjectSchema<{
+        id: av.StringSchema;
+        title: av.StringSchema;
+        description: av.OptionalSchema<av.StringSchema>;
+        payloadSchema: av.BaseSchema<unknown, import("./json.js").JsonObject>;
+    }>>;
+    cacheHints: av.ObjectSchema<{
+        metadataTtlSeconds: av.IntSchema;
+    }>;
+}>;
+export type PluginManifest = Infer<typeof PluginManifestSchema>;
+//# sourceMappingURL=manifest.d.ts.map

package/lib/contracts/manifest.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.d.ts","sourceRoot":"","sources":["../../src/contracts/manifest.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,SAAS,CAAC;AAQrC,eAAO,MAAM,wBAAwB;;;;;;;EAOT,CAAC;AAC7B,MAAM,MAAM,kBAAkB,GAAG,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAExE,eAAO,MAAM,4BAA4B;;;;;EAKb,CAAC;AAC7B,MAAM,MAAM,sBAAsB,GAAG,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAEhF,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAkBL,CAAC;AAC7B,MAAM,MAAM,cAAc,GAAG,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC"}

package/lib/contracts/manifest.js

@@ -0,0 +1,40 @@
+import * as av from "anyvali";
+import { ConfigSchemaDescriptorSchema } from "./config.js";
+import { DeploymentModeSchema, PluginCategorySchema, RenderModeSchema } from "./common.js";
+import { JsonObjectSchema } from "./json.js";
+import { ViewMetadataSchema, ViewPermissionDefinitionSchema } from "./view.js";
+const AdminMethodSchema = av.enum_(["GET", "POST", "PUT", "PATCH", "DELETE"]);
+export const AdminApiDescriptorSchema = av.object({
+    id: av.string().minLength(1),
+    title: av.string().minLength(1),
+    description: av.string().minLength(1),
+    path: av.string().minLength(1),
+    methods: av.array(AdminMethodSchema).minItems(1),
+    supportsCustomUi: av.bool().default(false)
+}, { unknownKeys: "strip" });
+export const WebhookEventDescriptorSchema = av.object({
+    id: av.string().minLength(1),
+    title: av.string().minLength(1),
+    description: av.optional(av.string()),
+    payloadSchema: JsonObjectSchema
+}, { unknownKeys: "strip" });
+export const PluginManifestSchema = av.object({
+    pluginId: av.string().minLength(1),
+    title: av.string().minLength(1),
+    description: av.string().minLength(1),
+    version: av.string().minLength(1),
+    category: PluginCategorySchema,
+    deploymentModes: av.array(DeploymentModeSchema).minItems(1),
+    capabilities: av.array(av.string().minLength(1)).default([]),
+    supportedThemes: av.array(av.string().minLength(1)).default([]),
+    supportedRenderModes: av.array(RenderModeSchema).default([]),
+    views: av.array(ViewMetadataSchema).default([]),
+    configSchemas: av.array(ConfigSchemaDescriptorSchema).default([]),
+    permissions: av.array(ViewPermissionDefinitionSchema).default([]),
+    adminApis: av.array(AdminApiDescriptorSchema).default([]),
+    webhooks: av.array(WebhookEventDescriptorSchema).default([]),
+    cacheHints: av.object({
+        metadataTtlSeconds: av.int().min(0).default(1800)
+    }, { unknownKeys: "strip" }).default({ metadataTtlSeconds: 1800 })
+}, { unknownKeys: "strip" });
+//# sourceMappingURL=manifest.js.map

package/lib/contracts/manifest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest.js","sourceRoot":"","sources":["../../src/contracts/manifest.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAE9B,OAAO,EAAE,4BAA4B,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC3F,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,kBAAkB,EAAE,8BAA8B,EAAE,MAAM,WAAW,CAAC;AAE/E,MAAM,iBAAiB,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAU,CAAC,CAAC;AAEvF,MAAM,CAAC,MAAM,wBAAwB,GAAG,EAAE,CAAC,MAAM,CAAC;IAChD,EAAE,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAC5B,KAAK,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAC/B,WAAW,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IACrC,IAAI,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAC9B,OAAO,EAAE,EAAE,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IAChD,gBAAgB,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CAC3C,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;AAG7B,MAAM,CAAC,MAAM,4BAA4B,GAAG,EAAE,CAAC,MAAM,CAAC;IACpD,EAAE,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAC5B,KAAK,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAC/B,WAAW,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC;IACrC,aAAa,EAAE,gBAAgB;CAChC,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC;AAG7B,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,CAAC,MAAM,CAAC;IAC5C,QAAQ,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAClC,KAAK,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IAC/B,WAAW,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IACrC,OAAO,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC;IACjC,QAAQ,EAAE,oBAAoB;IAC9B,eAAe,EAAE,EAAE,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC3D,YAAY,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5D,eAAe,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC/D,oBAAoB,EAAE,EAAE,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5D,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC/C,aAAa,EAAE,EAAE,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACjE,WAAW,EAAE,EAAE,CAAC,KAAK,CAAC,8BAA8B,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACjE,SAAS,EAAE,EAAE,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACzD,QAAQ,EAAE,EAAE,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5D,UAAU,EAAE,EAAE,CAAC,MAAM,CAAC;QACpB,kBAAkB,EAAE,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;KAClD,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC;CACnE,EAAE,EAAE,WAAW,EAAE,OAAO,EAAE,CAAC,CAAC"}