@brydio/manifest 0.1.0-alpha.36 → 0.1.0-alpha.38

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@brydio/manifest",
-  "version": "0.1.0-alpha.36",
+  "version": "0.1.0-alpha.38",
   "description": "The shape of a Brydio app's manifest, its collections' schemas, and the checks that say what is wrong with one.",
   "type": "module",
   "license": "MIT",
@@ -10,7 +10,7 @@
     "url": "https://github.com/nakel-ola/brydio-sdk",
     "directory": "packages/manifest"
   },
-  "gitHead": "2d8e769d02c74fe201ce734f6d77def59ea99d53",
+  "gitHead": "4b6c80dcb849195171699f16022aab1f55d6e3b6",
   "exports": {
     ".": {
       "types": "./src/index.d.ts",

package/src/grants.d.ts

@@ -6,8 +6,16 @@
  * `apps/api/src/apps/manifest/grants.ts`, and the `grant_unknown` sentence in
  * `apps/api/src/apps/publishing/app-publish.service.ts`.
  */
-/** The host grants with a name of their own. A connection's is `connection:<name>`. */
-export declare const HOST_CAPABILITIES: readonly ["navigate", "message", "members", "projects", "files", "chats", "model", "secrets", "notify", "approvals"];
+/**
+ * The host grants with a name of their own. A connection's is `connection:<name>`.
+ *
+ * `chats` and `chat` differ: `chats` is the typed Brydio API's reach into the
+ * person's assistant conversations; `chat` is a handler's `chat.post`, the
+ * app posting one of its cards into a workspace room (FO03). `directory` is
+ * a handler's `directory.*` and a screen's `useProfile` (FO02); `webhooks`
+ * is a handler's `webhooks.send` (FO07).
+ */
+export declare const HOST_CAPABILITIES: readonly ["navigate", "message", "members", "projects", "files", "chats", "model", "secrets", "notify", "approvals", "chat", "directory", "webhooks"];
 /** The older name for `HOST_CAPABILITIES`, kept for what already imports it. */
 export declare const KNOWN_HOST_GRANTS: readonly string[];
 /** True for a host grant Brydio knows how to honour: a named capability, or one connection. */

package/src/grants.js

@@ -7,8 +7,30 @@
  * `apps/api/src/apps/publishing/app-publish.service.ts`.
  */
 import { BUNDLE_MANIFEST } from "./bundle.js";
-/** The host grants with a name of their own. A connection's is `connection:<name>`. */
-export const HOST_CAPABILITIES = ['navigate', 'message', 'members', 'projects', 'files', 'chats', 'model', 'secrets', 'notify', 'approvals'];
+/**
+ * The host grants with a name of their own. A connection's is `connection:<name>`.
+ *
+ * `chats` and `chat` differ: `chats` is the typed Brydio API's reach into the
+ * person's assistant conversations; `chat` is a handler's `chat.post`, the
+ * app posting one of its cards into a workspace room (FO03). `directory` is
+ * a handler's `directory.*` and a screen's `useProfile` (FO02); `webhooks`
+ * is a handler's `webhooks.send` (FO07).
+ */
+export const HOST_CAPABILITIES = [
+    'navigate',
+    'message',
+    'members',
+    'projects',
+    'files',
+    'chats',
+    'model',
+    'secrets',
+    'notify',
+    'approvals',
+    'chat',
+    'directory',
+    'webhooks',
+];
 /** The older name for `HOST_CAPABILITIES`, kept for what already imports it. */
 export const KNOWN_HOST_GRANTS = HOST_CAPABILITIES;
 const CONNECTION = /^connection:[a-z0-9][a-z0-9_-]{0,59}$/;

package/src/index.d.ts

@@ -7,10 +7,11 @@ export { APP_NAME_FORMAT, MANIFEST_LIMITS, SEMVER_FORMAT, baseManifestSchema, br
 export { BRAND_FIELDS, BRAND_LIMITS, brandFilePath, brandPathsOf, brandProblems, brandShapeOf, isBrandPath, pngVerdict, svgColours, toolsProblem, type BrandField, type RequirementCode, type RequirementFiles, type RequirementProblem, } from './requirements.js';
 export { BUNDLE_MANIFEST, BUNDLE_MAX_BYTES, BUNDLE_PATH_MAX_CHARS, bundleBytes, bundleHash, brandOf, bundleProblem, codeOf, isBundlePath, isScriptPath, sizeOf, type BundleFiles, type BundleProblem, type BundleProblemCode, } from './bundle.js';
 export { COLOUR_TOKENS, coeditedFields, FIELD_LIMITS, RESERVED_FIELDS, describeType, isCoedited, isSearchable, isSortable, isStructured, parseFieldType, structuredFields, valueProblem, valueSchema, FieldTypeInvalid, type DocumentOf, type FieldKind, type FieldType, type FieldValue, type FieldsOf, } from './field-types.js';
-export { appManifestSchema, collectionOf, collectionsOf, dataProblems, effectivePlacementKey, HOME_CARD_SIZES, labelOf, manifestExtensionsSchema, newAppManifestSchema, SIZED_PLACEMENT_KINDS, MAX_APP_SECRETS, MAX_SECRET_CHARS, PLACEMENT_KEY, SECRET_NAME, storedExtensionsSchema, type AppManifestWithData, type CollectionSpec, type DataProblem, type DataProblemCode, type DataProblemOptions, type HomeCardSize, type ManifestExtensions, type SecretSpec, } from './schema.js';
+export { appManifestSchema, appToolPrefix, collectionOf, crossAppTool, collectionsOf, dataProblems, effectivePlacementKey, HOME_CARD_SIZES, labelOf, manifestExtensionsSchema, newAppManifestSchema, SIZED_PLACEMENT_KINDS, MAX_APP_SECRETS, MAX_SECRET_CHARS, PLACEMENT_KEY, SECRET_NAME, storedExtensionsSchema, type AppManifestWithData, type CollectionSpec, type DataProblem, type DataProblemCode, type DataProblemOptions, type HomeCardSize, type ManifestExtensions, type SecretSpec, } from './schema.js';
 export { OPEN_LIMITS, OPEN_TYPES, choicesProblem, definitionOf, definitionTypeProblem, describeField, fieldTypeOf, hasChoices, isPlainOpenType, keyFromName, keyProblem, missingRequired, moveValue, openSchemaProblems, openSpec, openValueProblem, type Moved, type OpenField, type OpenFieldChange, type OpenFieldValue, type OpenProblem, type OpenProblemCode, type OpenSchemaFlag, type OpenType, } from './open-schema.js';
 export { CONFIRM_LIMITS, confirmEmailProblems, confirmEmailSpec, type ConfirmEmailDeclared, type ConfirmEmailSpec, type ConfirmProblemCode, } from './confirm-email.js';
 export { ANONYMOUS_LIMITS, ANONYMOUS_WRITER, anonymousProblems, anonymousSpec, type AnonymousDeclared, type AnonymousProblemCode, type AnonymousSpec, } from './anonymous.js';
+export { READERS_LIMIT, readersOf, readersProblems, type ReadersProblemCode } from './readers.js';
 export { DOCUMENT_LIMITS } from './document-limits.js';
 export { HOST_CAPABILITIES, KNOWN_HOST_GRANTS, isHostCapability, unknownHostGrant } from './grants.js';
 export { diffSchemas, migrationProblems, migrationSchema, migrationStepSchema, migrationsSchema, publishedMigrationProblems, schemaOf, type Migration, type MigrationCode, type MigrationProblem, type MigrationStep, type SchemaChange, } from './migrations.js';

package/src/index.js

@@ -7,10 +7,11 @@ export { APP_NAME_FORMAT, MANIFEST_LIMITS, SEMVER_FORMAT, baseManifestSchema, br
 export { BRAND_FIELDS, BRAND_LIMITS, brandFilePath, brandPathsOf, brandProblems, brandShapeOf, isBrandPath, pngVerdict, svgColours, toolsProblem, } from "./requirements.js";
 export { BUNDLE_MANIFEST, BUNDLE_MAX_BYTES, BUNDLE_PATH_MAX_CHARS, bundleBytes, bundleHash, brandOf, bundleProblem, codeOf, isBundlePath, isScriptPath, sizeOf, } from "./bundle.js";
 export { COLOUR_TOKENS, coeditedFields, FIELD_LIMITS, RESERVED_FIELDS, describeType, isCoedited, isSearchable, isSortable, isStructured, parseFieldType, structuredFields, valueProblem, valueSchema, FieldTypeInvalid, } from "./field-types.js";
-export { appManifestSchema, collectionOf, collectionsOf, dataProblems, effectivePlacementKey, HOME_CARD_SIZES, labelOf, manifestExtensionsSchema, newAppManifestSchema, SIZED_PLACEMENT_KINDS, MAX_APP_SECRETS, MAX_SECRET_CHARS, PLACEMENT_KEY, SECRET_NAME, storedExtensionsSchema, } from "./schema.js";
+export { appManifestSchema, appToolPrefix, collectionOf, crossAppTool, collectionsOf, dataProblems, effectivePlacementKey, HOME_CARD_SIZES, labelOf, manifestExtensionsSchema, newAppManifestSchema, SIZED_PLACEMENT_KINDS, MAX_APP_SECRETS, MAX_SECRET_CHARS, PLACEMENT_KEY, SECRET_NAME, storedExtensionsSchema, } from "./schema.js";
 export { OPEN_LIMITS, OPEN_TYPES, choicesProblem, definitionOf, definitionTypeProblem, describeField, fieldTypeOf, hasChoices, isPlainOpenType, keyFromName, keyProblem, missingRequired, moveValue, openSchemaProblems, openSpec, openValueProblem, } from "./open-schema.js";
 export { CONFIRM_LIMITS, confirmEmailProblems, confirmEmailSpec, } from "./confirm-email.js";
 export { ANONYMOUS_LIMITS, ANONYMOUS_WRITER, anonymousProblems, anonymousSpec, } from "./anonymous.js";
+export { READERS_LIMIT, readersOf, readersProblems } from "./readers.js";
 export { DOCUMENT_LIMITS } from "./document-limits.js";
 export { HOST_CAPABILITIES, KNOWN_HOST_GRANTS, isHostCapability, unknownHostGrant } from "./grants.js";
 export { diffSchemas, migrationProblems, migrationSchema, migrationStepSchema, migrationsSchema, publishedMigrationProblems, schemaOf, } from "./migrations.js";

package/src/readers.d.ts

@@ -0,0 +1,31 @@
+import { z } from 'zod';
+/**
+ * Record readers (P16): a record only the people it
+ * names may read.
+ *
+ * An app names one of the collection's own `string[]` fields, which holds
+ * user ids. When a record's list is empty, everyone who can read the
+ * instance reads it, as before; when it names anyone, nobody else finds it —
+ * not on a screen, not through a tool, not through the assistant, not on the
+ * co-edit socket. There is no admin past it: an app that wants its admins
+ * in puts them in the list. Brydio keeps the list in plain beside the record
+ * (`app_document.readers`), so every read can be narrowed before anything
+ * is decrypted. Mirrors Brydio's `apps/api/src/apps/manifest/readers.ts`;
+ * the two change together.
+ */
+export declare const readersSchema: z.ZodString;
+export type ReadersProblemCode = 'data_readers_field' | 'data_readers_anonymous';
+/** The most people one record's list may name. */
+export declare const READERS_LIMIT = 1000;
+export declare function readersProblems(collection: string, declared: {
+    schema: Record<string, unknown>;
+    readers?: string;
+    anonymous?: unknown;
+}): {
+    code: ReadersProblemCode;
+    collection: string;
+    field?: string;
+    message: string;
+}[];
+/** The plain list a record is kept with: its readers, or null for everyone who can read the instance. */
+export declare function readersOf(field: string | undefined, body: Record<string, unknown>): string[] | null;

package/src/readers.js

@@ -0,0 +1,59 @@
+import { z } from 'zod';
+import { FIELD_LIMITS, parseFieldType } from "./field-types.js";
+/**
+ * Record readers (P16): a record only the people it
+ * names may read.
+ *
+ * An app names one of the collection's own `string[]` fields, which holds
+ * user ids. When a record's list is empty, everyone who can read the
+ * instance reads it, as before; when it names anyone, nobody else finds it —
+ * not on a screen, not through a tool, not through the assistant, not on the
+ * co-edit socket. There is no admin past it: an app that wants its admins
+ * in puts them in the list. Brydio keeps the list in plain beside the record
+ * (`app_document.readers`), so every read can be narrowed before anything
+ * is decrypted. Mirrors Brydio's `apps/api/src/apps/manifest/readers.ts`;
+ * the two change together.
+ */
+export const readersSchema = z.string().min(1).max(FIELD_LIMITS.nameChars);
+/** The most people one record's list may name. */
+export const READERS_LIMIT = 1_000;
+export function readersProblems(collection, declared) {
+    if (!declared.readers)
+        return [];
+    const problems = [];
+    const raw = declared.schema[declared.readers];
+    let listed = false;
+    try {
+        listed = raw !== undefined && parseFieldType(raw).kind === 'string[]';
+    }
+    catch {
+        // Refused as a field type already.
+    }
+    if (!listed) {
+        problems.push({
+            code: 'data_readers_field',
+            collection,
+            field: declared.readers,
+            message: `"${collection}" names "${declared.readers}" as its readers, which must be one of its own string[] fields holding user ids.`,
+        });
+    }
+    // An anonymous answer names nobody; a list of who may read it would.
+    if (declared.anonymous) {
+        problems.push({
+            code: 'data_readers_anonymous',
+            collection,
+            message: `"${collection}" can't be anonymous and name its readers.`,
+        });
+    }
+    return problems;
+}
+/** The plain list a record is kept with: its readers, or null for everyone who can read the instance. */
+export function readersOf(field, body) {
+    if (!field)
+        return null;
+    const value = body[field];
+    if (!Array.isArray(value))
+        return null;
+    const ids = [...new Set(value.filter((one) => typeof one === 'string' && one.length > 0))];
+    return ids.length ? ids.sort() : null;
+}

package/src/schema.d.ts

@@ -3,6 +3,7 @@ import { FieldTypeInvalid, type FieldType } from './field-types.js';
 import { type OpenProblemCode } from './open-schema.js';
 import { type ConfirmProblemCode } from './confirm-email.js';
 import { type AnonymousProblemCode, type AnonymousSpec } from './anonymous.js';
+import { type ReadersProblemCode } from './readers.js';
 export { COLOUR_TOKENS, FIELD_LIMITS, parseFieldType, RESERVED_FIELDS, structuredFields, type FieldKind, type FieldType, } from './field-types.js';
 /**
  * What an app adds to `.brydio/app.json` to be more than a bundle of servers
@@ -102,6 +103,7 @@ declare const extensionShape: {
             "project-sidebar": "project-sidebar";
             "workspace-sidebar": "workspace-sidebar";
             "public-page": "public-page";
+            "chat-card": "chat-card";
         }>;
         screen: z.ZodString;
         sizes: z.ZodOptional<z.ZodArray<z.ZodEnum<{
@@ -162,6 +164,7 @@ declare const extensionShape: {
             group: z.ZodString;
             minimum: z.ZodOptional<z.ZodNumber>;
         }, z.core.$strict>>;
+        readers: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>>;
     tools: z.ZodOptional<z.ZodObject<{
         generated: z.ZodOptional<z.ZodBoolean>;
@@ -240,7 +243,7 @@ export interface DataProblem {
     field?: string;
     message: string;
 }
-export type DataProblemCode = FieldTypeInvalid['code'] | OpenProblemCode | ConfirmProblemCode | AnonymousProblemCode | 'data_too_many_collections' | 'data_too_many_fields' | 'data_collection_name_format' | 'data_field_name_format' | 'data_field_reserved' | 'data_label_format' | 'data_label_taken' | 'data_project_field_twice' | 'data_search_unknown_field' | 'data_search_not_text' | 'grant_collection_missing' | 'grant_tool_missing' | 'custom_name_taken' | 'custom_collection_unknown' | 'custom_input_invalid' | 'placement_key_taken' | 'placement_screen_unknown' | 'placement_home_sizes' | 'placement_sizes_not_home' | 'placement_widget_sizes' | 'placement_tab_retired' | 'placement_public_shape' | 'placement_public_nothing' | 'placement_children_too_deep' | 'placement_create_tool_unknown' | 'placement_create_not_write' | 'secret_name_taken' | 'grant_secrets_missing';
+export type DataProblemCode = FieldTypeInvalid['code'] | OpenProblemCode | ConfirmProblemCode | AnonymousProblemCode | ReadersProblemCode | 'data_too_many_collections' | 'data_too_many_fields' | 'data_collection_name_format' | 'data_field_name_format' | 'data_field_reserved' | 'data_label_format' | 'data_label_taken' | 'data_project_field_twice' | 'data_search_unknown_field' | 'data_search_not_text' | 'grant_collection_missing' | 'grant_tool_missing' | 'custom_name_taken' | 'custom_collection_unknown' | 'custom_input_invalid' | 'placement_key_taken' | 'placement_screen_unknown' | 'placement_home_sizes' | 'placement_sizes_not_home' | 'placement_widget_sizes' | 'placement_tab_retired' | 'placement_public_shape' | 'placement_public_nothing' | 'placement_chat_card_shape' | 'grant_tool_cross_app_self' | 'placement_children_too_deep' | 'placement_create_tool_unknown' | 'placement_create_not_write' | 'secret_name_taken' | 'grant_secrets_missing';
 type Additions = z.infer<z.ZodObject<typeof extensionShape>>;
 /**
  * Everything wrong with an app's additions that a type cannot say.
@@ -256,6 +259,17 @@ export interface DataProblemOptions {
     retired?: boolean;
 }
 export declare function dataProblems(additions: Additions, options?: DataProblemOptions): DataProblem[];
+/**
+ * Another installed app's tool, as `grants.tools` names it (FO07): the name
+ * the assistant knows it by, `<slug>__<tool>`. Null for anything else.
+ * A handler calls it with `tools.call('<slug>__<tool>', input)`.
+ */
+export declare function crossAppTool(name: string): {
+    app: string;
+    tool: string;
+} | null;
+/** An app's name as the front of its tools' assistant names: `issue-tracker` → `issue_tracker`. */
+export declare const appToolPrefix: (name: string) => string;
 /** The additions alone, for code that has the rest of the manifest already. */
 export declare const manifestExtensionsSchema: z.ZodObject<{
     placements: z.ZodOptional<z.ZodArray<z.ZodObject<{
@@ -267,6 +281,7 @@ export declare const manifestExtensionsSchema: z.ZodObject<{
             "project-sidebar": "project-sidebar";
             "workspace-sidebar": "workspace-sidebar";
             "public-page": "public-page";
+            "chat-card": "chat-card";
         }>;
         screen: z.ZodString;
         sizes: z.ZodOptional<z.ZodArray<z.ZodEnum<{
@@ -327,6 +342,7 @@ export declare const manifestExtensionsSchema: z.ZodObject<{
             group: z.ZodString;
             minimum: z.ZodOptional<z.ZodNumber>;
         }, z.core.$strict>>;
+        readers: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>>;
     tools: z.ZodOptional<z.ZodObject<{
         generated: z.ZodOptional<z.ZodBoolean>;
@@ -402,6 +418,7 @@ export declare const storedExtensionsSchema: z.ZodObject<{
             "project-sidebar": "project-sidebar";
             "workspace-sidebar": "workspace-sidebar";
             "public-page": "public-page";
+            "chat-card": "chat-card";
         }>;
         screen: z.ZodString;
         sizes: z.ZodOptional<z.ZodArray<z.ZodEnum<{
@@ -462,6 +479,7 @@ export declare const storedExtensionsSchema: z.ZodObject<{
             group: z.ZodString;
             minimum: z.ZodOptional<z.ZodNumber>;
         }, z.core.$strict>>;
+        readers: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>>;
     tools: z.ZodOptional<z.ZodObject<{
         generated: z.ZodOptional<z.ZodBoolean>;
@@ -572,6 +590,7 @@ export declare const appManifestSchema: z.ZodObject<{
             "project-sidebar": "project-sidebar";
             "workspace-sidebar": "workspace-sidebar";
             "public-page": "public-page";
+            "chat-card": "chat-card";
         }>;
         screen: z.ZodString;
         sizes: z.ZodOptional<z.ZodArray<z.ZodEnum<{
@@ -632,6 +651,7 @@ export declare const appManifestSchema: z.ZodObject<{
             group: z.ZodString;
             minimum: z.ZodOptional<z.ZodNumber>;
         }, z.core.$strict>>;
+        readers: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>>;
     tools: z.ZodOptional<z.ZodObject<{
         generated: z.ZodOptional<z.ZodBoolean>;
@@ -746,6 +766,7 @@ export declare const newAppManifestSchema: z.ZodObject<{
             "project-sidebar": "project-sidebar";
             "workspace-sidebar": "workspace-sidebar";
             "public-page": "public-page";
+            "chat-card": "chat-card";
         }>;
         screen: z.ZodString;
         sizes: z.ZodOptional<z.ZodArray<z.ZodEnum<{
@@ -806,6 +827,7 @@ export declare const newAppManifestSchema: z.ZodObject<{
             group: z.ZodString;
             minimum: z.ZodOptional<z.ZodNumber>;
         }, z.core.$strict>>;
+        readers: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>>;
     tools: z.ZodOptional<z.ZodObject<{
         generated: z.ZodOptional<z.ZodBoolean>;
@@ -898,6 +920,8 @@ export interface CollectionSpec {
     definesFieldsOf?: string;
     /** Answers kept with no writer, read only a whole group of at least `minimum` at a time (P13). */
     anonymous?: AnonymousSpec;
+    /** The string[] field naming who alone may read a record, when it names anyone (P16). */
+    readers?: string;
 }
 /**
  * The singular a collection's tools are named with: the manifest's, else the

package/src/schema.js

@@ -5,6 +5,7 @@ import { migrationsSchema } from "./migrations.js";
 import { openSchemaProblems } from "./open-schema.js";
 import { confirmEmailProblems, confirmEmailSchema } from "./confirm-email.js";
 import { anonymousProblems, anonymousSchema, anonymousSpec } from "./anonymous.js";
+import { readersProblems, readersSchema } from "./readers.js";
 export { COLOUR_TOKENS, FIELD_LIMITS, parseFieldType, RESERVED_FIELDS, structuredFields, } from "./field-types.js";
 /**
  * What an app adds to `.brydio/app.json` to be more than a bundle of servers
@@ -72,8 +73,12 @@ const placementSchema = z.object({
      * `children` or `settings` (`placement_public_shape`), and it reaches only
      * collections marked `publicRead` or `publicSubmit` and tools marked
      * `public`.
+     * `chat-card`: a screen drawn inside a chat message the app posted with
+     * a handler's `chat.post` (FO03). Nobody places it by hand, so it has no
+     * `sizes`, `children` or `settings` (`placement_chat_card_shape`); its
+     * screen sees `placement.kind === 'chat-card'` and the card's `route`.
      */
-    kind: z.enum(['project-tab', 'project-widget', 'project-sidebar', 'workspace-sidebar', 'home', 'public-page']),
+    kind: z.enum(['project-tab', 'project-widget', 'project-sidebar', 'workspace-sidebar', 'home', 'public-page', 'chat-card']),
     screen: z.string().min(1).max(FIELD_LIMITS.nameChars),
     /** For `home` and `project-widget` only, and required there: the sizes the screen draws well at. */
     sizes: z.array(z.enum(HOME_CARD_SIZES)).max(3).optional(),
@@ -148,6 +153,8 @@ const collectionSchema = z.object({
      * batch, a watch and a create naming its own writer.
      */
     anonymous: anonymousSchema.optional(),
+    /** One of its string[] fields: the user ids who alone may read a record, when it names any (P16). */
+    readers: readersSchema.optional(),
 });
 const screenSchema = z.object({
     /**
@@ -385,6 +392,10 @@ export function dataProblems(additions, options = {}) {
     for (const [collection, declared] of collections) {
         problems.push(...anonymousProblems(collection, declared));
     }
+    // A collection whose records name their readers names a list of user ids to keep them in (P16).
+    for (const [collection, declared] of collections) {
+        problems.push(...readersProblems(collection, declared));
+    }
     // What the app keeps must be what it asks to keep (A3-F06-S01): a
     // collection the grants leave out would be data a workspace never agreed to
     // hold, found only when the first write is refused.
@@ -454,6 +465,14 @@ export function dataProblems(additions, options = {}) {
                 message: `The public page "${placement.screen}" can have no children or settings: it is one screen at its own address.`,
             });
         }
+        // A chat card is drawn at the message's own size, in a message nobody
+        // places by hand (FO03): nothing to size, configure or list.
+        if (placement.kind === 'chat-card' && (placement.sizes?.length || placement.children || placement.settings)) {
+            problems.push({
+                code: 'placement_chat_card_shape',
+                message: `The chat card "${placement.screen}" cannot have sizes, children or settings.`,
+            });
+        }
     }
     // A public page with nothing public could show a visitor nothing at all.
     if ((additions.placements ?? []).some(placement => placement.kind === 'public-page')) {
@@ -551,6 +570,20 @@ function customToolProblems(additions, options) {
         }));
     const seen = new Set();
     const granted = additions.grants?.tools ?? [];
+    // Another app's tool, asked for by its assistant name `<slug>__<tool>`
+    // (FO07): never an unknown custom tool of this app, but naming the app
+    // itself would be a way round its own grants.
+    const name = additions.name;
+    const own = typeof name === 'string' ? appToolPrefix(name) : null;
+    for (const grant of granted) {
+        const qualified = crossAppTool(grant);
+        if (qualified && own !== null && qualified.app === own) {
+            problems.push({
+                code: 'grant_tool_cross_app_self',
+                message: `${grant} names this app's own tool: ask for ${qualified.tool} instead.`,
+            });
+        }
+    }
     for (const tool of custom) {
         if (generated.has(tool.name) || seen.has(tool.name)) {
             problems.push({
@@ -587,6 +620,22 @@ function customToolProblems(additions, options) {
     }
     return problems;
 }
+/**
+ * Another installed app's tool, as `grants.tools` names it (FO07): the name
+ * the assistant knows it by, `<slug>__<tool>`. Null for anything else.
+ * A handler calls it with `tools.call('<slug>__<tool>', input)`.
+ */
+export function crossAppTool(name) {
+    const at = name.indexOf('__');
+    if (at <= 0 || at + 2 >= name.length)
+        return null;
+    return { app: name.slice(0, at), tool: name.slice(at + 2) };
+}
+/** An app's name as the front of its tools' assistant names: `issue-tracker` → `issue_tracker`. */
+export const appToolPrefix = (name) => name
+    .replace(/[^A-Za-z0-9_]+/g, '_')
+    .replace(/_+/g, '_')
+    .replace(/^_+|_+$/g, '');
 /**
  * Each secret declared once, and asked for (ADR-A24): an app that declares
  * secrets without the `secrets` host grant could never read one.
@@ -619,7 +668,7 @@ const refuse = (additions, ctx, options = {}) => {
         ctx.addIssue({
             code: 'custom',
             message: problem.message,
-            path: problem.code === 'grant_tool_missing'
+            path: problem.code === 'grant_tool_missing' || problem.code === 'grant_tool_cross_app_self'
                 ? ['grants', 'tools']
                 : problem.code === 'grant_secrets_missing'
                     ? ['grants', 'host']
@@ -696,6 +745,7 @@ export function collectionsOf(manifest) {
                 : {}),
             ...(owner ? { definesFieldsOf: owner.name } : {}),
             ...(declared.anonymous ? { anonymous: anonymousSpec(declared.anonymous) } : {}),
+            ...(declared.readers ? { readers: declared.readers } : {}),
         };
     });
 }