@brydio/manifest 0.1.0-alpha.4 → 0.1.0-alpha.41

package/src/schema.d.ts

@@ -1,6 +1,54 @@
 import { z } from 'zod';
 import { FieldTypeInvalid, type FieldType } from './field-types.js';
+import { type OpenProblemCode } from './open-schema.js';
+import { type ConfirmProblemCode } from './confirm-email.js';
+import { type AnonymousProblemCode, type AnonymousSpec } from './anonymous.js';
+import { type EditorsProblemCode, type ReadersProblemCode } from './readers.js';
 export { COLOUR_TOKENS, FIELD_LIMITS, parseFieldType, RESERVED_FIELDS, structuredFields, type FieldKind, type FieldType, } from './field-types.js';
+/**
+ * What an app adds to `.brydio/app.json` to be more than a bundle of servers
+ * and skills: where it is shown, what it keeps, the tools that come from what
+ * it keeps, its screens, and what it asks the workspace for (contracts §4).
+ *
+ * Every key is optional, so every manifest E5 already imports still parses.
+ * A copy of Brydio's `apps/api/src/apps/manifest/manifest-ext.schema.ts`, the
+ * schema the server reads an installed app's manifest with. The two change
+ * together; `test/manifest.test.ts` parses the same manifests with both.
+ *
+ * Zod says what the additions *are*. The checks that are claims about one
+ * field against another — a search list naming a date, a placement naming a
+ * screen nobody declared — are `dataProblems` below, with a code each, so an
+ * import report can say which collection and which field, not just "invalid".
+ */
+declare const placementSettingSchema: z.ZodObject<{
+    type: z.ZodEnum<{
+        string: "string";
+        url: "url";
+    }>;
+    label: z.ZodString;
+    required: z.ZodOptional<z.ZodBoolean>;
+    placeholder: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+export type PlacementSettingSpec = z.infer<typeof placementSettingSchema>;
+/**
+ * How deep a folder's rows may nest, counting its own rows as the first
+ * level (ADR-A21): Issues → sprints → issues is two. Each level is listed
+ * only when a person opens its parent, so depth costs nothing while closed;
+ * the limit is for the sidebar's width and a person's patience.
+ */
+export declare const MAX_FOLDER_DEPTH = 4;
+/** The sizes a Home card or a project widget can be drawn at (CC11-F10). */
+export declare const HOME_CARD_SIZES: readonly ["small", "medium", "large"];
+export type HomeCardSize = (typeof HOME_CARD_SIZES)[number];
+/** The kinds drawn as a card, which say the sizes they draw well at. */
+export declare const SIZED_PLACEMENT_KINDS: readonly ["home", "project-widget"];
+/** A stable identity for one independently addable placement offering. */
+export declare const PLACEMENT_KEY: RegExp;
+export declare function effectivePlacementKey(one: {
+    key?: string;
+    kind: string;
+    screen: string;
+}): string;
 /** Most custom tools one app may declare (A3-F08). */
 export declare const MAX_CUSTOM_TOOLS = 20;
 /** A tool name the model and a policy row can both use as it is. */
@@ -16,26 +64,111 @@ declare const customToolSchema: z.ZodObject<{
     input: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     write: z.ZodOptional<z.ZodBoolean>;
     collection: z.ZodOptional<z.ZodString>;
+    public: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>;
 export type CustomToolSpec = z.infer<typeof customToolSchema>;
+/** Most secrets one app may declare (ADR-A24). */
+export declare const MAX_APP_SECRETS = 20;
+/** The longest value one secret may hold, in characters. */
+export declare const MAX_SECRET_CHARS: number;
+/** A secret's name, as a handler asks for it: `api_key`. */
+export declare const SECRET_NAME: RegExp;
+/**
+ * A secret the app needs (ADR-A24): named here, never valued here. The value
+ * is entered in the app's settings by an administrator, or stored by the
+ * app's own handler with `secrets.set`, and only that app's handlers can read
+ * it, with `secrets.get`. A screen never can.
+ *
+ * `install` (the default) is one value for the whole install; `instance` is
+ * one per instance.
+ */
+declare const secretSchema: z.ZodObject<{
+    name: z.ZodString;
+    label: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    required: z.ZodOptional<z.ZodBoolean>;
+    scope: z.ZodOptional<z.ZodEnum<{
+        instance: "instance";
+        install: "install";
+    }>>;
+}, z.core.$strip>;
+export type SecretSpec = z.infer<typeof secretSchema>;
 declare const extensionShape: {
     placements: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        key: z.ZodOptional<z.ZodString>;
         kind: z.ZodEnum<{
+            home: "home";
+            "project-widget": "project-widget";
             "project-tab": "project-tab";
             "project-sidebar": "project-sidebar";
             "workspace-sidebar": "workspace-sidebar";
+            "public-page": "public-page";
+            "chat-card": "chat-card";
         }>;
         screen: z.ZodString;
+        sizes: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            small: "small";
+            medium: "medium";
+            large: "large";
+        }>>>;
         label: z.ZodOptional<z.ZodString>;
         icon: z.ZodOptional<z.ZodString>;
+        settings: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+            type: z.ZodEnum<{
+                string: "string";
+                url: "url";
+            }>;
+            label: z.ZodString;
+            required: z.ZodOptional<z.ZodBoolean>;
+            placeholder: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>>;
+        children: z.ZodOptional<z.ZodObject<{
+            tool: z.ZodString;
+            refreshSeconds: z.ZodOptional<z.ZodNumber>;
+            cap: z.ZodOptional<z.ZodNumber>;
+            noun: z.ZodOptional<z.ZodString>;
+            create: z.ZodOptional<z.ZodObject<{
+                tool: z.ZodString;
+                noun: z.ZodOptional<z.ZodString>;
+                titleField: z.ZodOptional<z.ZodString>;
+                parentField: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>;
+            nested: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                noun: z.ZodOptional<z.ZodString>;
+                create: z.ZodOptional<z.ZodObject<{
+                    tool: z.ZodString;
+                    noun: z.ZodOptional<z.ZodString>;
+                    titleField: z.ZodOptional<z.ZodString>;
+                    parentField: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>>;
+            }, z.core.$strip>>>;
+        }, z.core.$strip>>;
     }, z.core.$strip>>>;
     data: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
         schema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
         search: z.ZodOptional<z.ZodArray<z.ZodString>>;
         label: z.ZodOptional<z.ZodString>;
+        openSchema: z.ZodOptional<z.ZodObject<{
+            fields: z.ZodString;
+            table: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
+        publicRead: z.ZodOptional<z.ZodBoolean>;
+        publicSubmit: z.ZodOptional<z.ZodBoolean>;
+        confirmEmail: z.ZodOptional<z.ZodObject<{
+            field: z.ZodString;
+            subject: z.ZodOptional<z.ZodString>;
+            message: z.ZodOptional<z.ZodString>;
+            link: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strict>>;
+        anonymous: z.ZodOptional<z.ZodObject<{
+            group: z.ZodString;
+            minimum: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strict>>;
+        readers: z.ZodOptional<z.ZodString>;
+        editors: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>>;
     tools: z.ZodOptional<z.ZodObject<{
-        generated: z.ZodOptional<z.ZodBoolean>;
+        generated: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"read">]>>;
         custom: z.ZodOptional<z.ZodArray<z.ZodObject<{
             name: z.ZodString;
             description: z.ZodString;
@@ -43,6 +176,7 @@ declare const extensionShape: {
             input: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
             write: z.ZodOptional<z.ZodBoolean>;
             collection: z.ZodOptional<z.ZodString>;
+            public: z.ZodOptional<z.ZodBoolean>;
         }, z.core.$strip>>>;
     }, z.core.$strip>>;
     screens: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
@@ -53,6 +187,17 @@ declare const extensionShape: {
         collections: z.ZodOptional<z.ZodArray<z.ZodString>>;
         host: z.ZodOptional<z.ZodArray<z.ZodString>>;
     }, z.core.$strip>>;
+    /** The secrets its handlers read (ADR-A24): names only, never values. */
+    secrets: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        label: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+        required: z.ZodOptional<z.ZodBoolean>;
+        scope: z.ZodOptional<z.ZodEnum<{
+            instance: "instance";
+            install: "install";
+        }>>;
+    }, z.core.$strip>>>;
     /**
      * How records move when the schema changes between versions (A3-F07).
      * Checked against the previous version when a version is published, and
@@ -99,7 +244,7 @@ export interface DataProblem {
     field?: string;
     message: string;
 }
-export type DataProblemCode = FieldTypeInvalid['code'] | 'data_too_many_collections' | 'data_too_many_fields' | 'data_collection_name_format' | 'data_field_name_format' | 'data_field_reserved' | 'data_label_format' | 'data_label_taken' | 'data_project_field_twice' | 'data_search_unknown_field' | 'data_search_not_text' | 'grant_collection_missing' | 'grant_tool_missing' | 'custom_name_taken' | 'custom_collection_unknown' | 'custom_input_invalid' | 'placement_screen_unknown';
+export type DataProblemCode = FieldTypeInvalid['code'] | OpenProblemCode | ConfirmProblemCode | AnonymousProblemCode | ReadersProblemCode | EditorsProblemCode | 'data_too_many_collections' | 'data_too_many_fields' | 'data_collection_name_format' | 'data_field_name_format' | 'data_field_reserved' | 'data_label_format' | 'data_label_taken' | 'data_project_field_twice' | 'data_search_unknown_field' | 'data_search_not_text' | 'grant_collection_missing' | 'grant_tool_missing' | 'custom_name_taken' | 'custom_collection_unknown' | 'custom_input_invalid' | 'placement_key_taken' | 'placement_screen_unknown' | 'placement_home_sizes' | 'placement_sizes_not_home' | 'placement_widget_sizes' | 'placement_tab_retired' | 'placement_public_shape' | 'placement_public_nothing' | 'placement_chat_card_shape' | 'grant_tool_cross_app_self' | 'placement_children_too_deep' | 'placement_create_tool_unknown' | 'placement_create_not_write' | 'secret_name_taken' | 'grant_secrets_missing';
 type Additions = z.infer<z.ZodObject<typeof extensionShape>>;
 /**
  * Everything wrong with an app's additions that a type cannot say.
@@ -108,28 +253,101 @@ type Additions = z.infer<z.ZodObject<typeof extensionShape>>;
  * report; the zod schemas below run it too, so a parse never accepts what
  * this refuses.
  */
-export declare function dataProblems(additions: Additions, options?: {
+export interface DataProblemOptions {
+    /** Off where the grants are the install's record, not the manifest's. */
     grants?: boolean;
-}): DataProblem[];
+    /** On for a manifest being written now: refuses kinds that are retired, such as `project-tab`. */
+    retired?: boolean;
+}
+export declare function dataProblems(additions: Additions, options?: DataProblemOptions): DataProblem[];
+/**
+ * Another installed app's tool, as `grants.tools` names it (FO07): the name
+ * the assistant knows it by, `<slug>__<tool>`. Null for anything else.
+ * A handler calls it with `tools.call('<slug>__<tool>', input)`.
+ */
+export declare function crossAppTool(name: string): {
+    app: string;
+    tool: string;
+} | null;
+/** An app's name as the front of its tools' assistant names: `issue-tracker` → `issue_tracker`. */
+export declare const appToolPrefix: (name: string) => string;
 /** The additions alone, for code that has the rest of the manifest already. */
 export declare const manifestExtensionsSchema: z.ZodObject<{
     placements: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        key: z.ZodOptional<z.ZodString>;
         kind: z.ZodEnum<{
+            home: "home";
+            "project-widget": "project-widget";
             "project-tab": "project-tab";
             "project-sidebar": "project-sidebar";
             "workspace-sidebar": "workspace-sidebar";
+            "public-page": "public-page";
+            "chat-card": "chat-card";
         }>;
         screen: z.ZodString;
+        sizes: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            small: "small";
+            medium: "medium";
+            large: "large";
+        }>>>;
         label: z.ZodOptional<z.ZodString>;
         icon: z.ZodOptional<z.ZodString>;
+        settings: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+            type: z.ZodEnum<{
+                string: "string";
+                url: "url";
+            }>;
+            label: z.ZodString;
+            required: z.ZodOptional<z.ZodBoolean>;
+            placeholder: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>>;
+        children: z.ZodOptional<z.ZodObject<{
+            tool: z.ZodString;
+            refreshSeconds: z.ZodOptional<z.ZodNumber>;
+            cap: z.ZodOptional<z.ZodNumber>;
+            noun: z.ZodOptional<z.ZodString>;
+            create: z.ZodOptional<z.ZodObject<{
+                tool: z.ZodString;
+                noun: z.ZodOptional<z.ZodString>;
+                titleField: z.ZodOptional<z.ZodString>;
+                parentField: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>;
+            nested: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                noun: z.ZodOptional<z.ZodString>;
+                create: z.ZodOptional<z.ZodObject<{
+                    tool: z.ZodString;
+                    noun: z.ZodOptional<z.ZodString>;
+                    titleField: z.ZodOptional<z.ZodString>;
+                    parentField: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>>;
+            }, z.core.$strip>>>;
+        }, z.core.$strip>>;
     }, z.core.$strip>>>;
     data: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
         schema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
         search: z.ZodOptional<z.ZodArray<z.ZodString>>;
         label: z.ZodOptional<z.ZodString>;
+        openSchema: z.ZodOptional<z.ZodObject<{
+            fields: z.ZodString;
+            table: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
+        publicRead: z.ZodOptional<z.ZodBoolean>;
+        publicSubmit: z.ZodOptional<z.ZodBoolean>;
+        confirmEmail: z.ZodOptional<z.ZodObject<{
+            field: z.ZodString;
+            subject: z.ZodOptional<z.ZodString>;
+            message: z.ZodOptional<z.ZodString>;
+            link: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strict>>;
+        anonymous: z.ZodOptional<z.ZodObject<{
+            group: z.ZodString;
+            minimum: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strict>>;
+        readers: z.ZodOptional<z.ZodString>;
+        editors: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>>;
     tools: z.ZodOptional<z.ZodObject<{
-        generated: z.ZodOptional<z.ZodBoolean>;
+        generated: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"read">]>>;
         custom: z.ZodOptional<z.ZodArray<z.ZodObject<{
             name: z.ZodString;
             description: z.ZodString;
@@ -137,6 +355,7 @@ export declare const manifestExtensionsSchema: z.ZodObject<{
             input: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
             write: z.ZodOptional<z.ZodBoolean>;
             collection: z.ZodOptional<z.ZodString>;
+            public: z.ZodOptional<z.ZodBoolean>;
         }, z.core.$strip>>>;
     }, z.core.$strip>>;
     screens: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
@@ -147,6 +366,16 @@ export declare const manifestExtensionsSchema: z.ZodObject<{
         collections: z.ZodOptional<z.ZodArray<z.ZodString>>;
         host: z.ZodOptional<z.ZodArray<z.ZodString>>;
     }, z.core.$strip>>;
+    secrets: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        label: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+        required: z.ZodOptional<z.ZodBoolean>;
+        scope: z.ZodOptional<z.ZodEnum<{
+            instance: "instance";
+            install: "install";
+        }>>;
+    }, z.core.$strip>>>;
     migrations: z.ZodOptional<z.ZodArray<z.ZodObject<{
         version: z.ZodString;
         steps: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -183,22 +412,80 @@ export declare const manifestExtensionsSchema: z.ZodObject<{
  */
 export declare const storedExtensionsSchema: z.ZodObject<{
     placements: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        key: z.ZodOptional<z.ZodString>;
         kind: z.ZodEnum<{
+            home: "home";
+            "project-widget": "project-widget";
             "project-tab": "project-tab";
             "project-sidebar": "project-sidebar";
             "workspace-sidebar": "workspace-sidebar";
+            "public-page": "public-page";
+            "chat-card": "chat-card";
         }>;
         screen: z.ZodString;
+        sizes: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            small: "small";
+            medium: "medium";
+            large: "large";
+        }>>>;
         label: z.ZodOptional<z.ZodString>;
         icon: z.ZodOptional<z.ZodString>;
+        settings: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+            type: z.ZodEnum<{
+                string: "string";
+                url: "url";
+            }>;
+            label: z.ZodString;
+            required: z.ZodOptional<z.ZodBoolean>;
+            placeholder: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>>;
+        children: z.ZodOptional<z.ZodObject<{
+            tool: z.ZodString;
+            refreshSeconds: z.ZodOptional<z.ZodNumber>;
+            cap: z.ZodOptional<z.ZodNumber>;
+            noun: z.ZodOptional<z.ZodString>;
+            create: z.ZodOptional<z.ZodObject<{
+                tool: z.ZodString;
+                noun: z.ZodOptional<z.ZodString>;
+                titleField: z.ZodOptional<z.ZodString>;
+                parentField: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>;
+            nested: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                noun: z.ZodOptional<z.ZodString>;
+                create: z.ZodOptional<z.ZodObject<{
+                    tool: z.ZodString;
+                    noun: z.ZodOptional<z.ZodString>;
+                    titleField: z.ZodOptional<z.ZodString>;
+                    parentField: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>>;
+            }, z.core.$strip>>>;
+        }, z.core.$strip>>;
     }, z.core.$strip>>>;
     data: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
         schema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
         search: z.ZodOptional<z.ZodArray<z.ZodString>>;
         label: z.ZodOptional<z.ZodString>;
+        openSchema: z.ZodOptional<z.ZodObject<{
+            fields: z.ZodString;
+            table: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
+        publicRead: z.ZodOptional<z.ZodBoolean>;
+        publicSubmit: z.ZodOptional<z.ZodBoolean>;
+        confirmEmail: z.ZodOptional<z.ZodObject<{
+            field: z.ZodString;
+            subject: z.ZodOptional<z.ZodString>;
+            message: z.ZodOptional<z.ZodString>;
+            link: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strict>>;
+        anonymous: z.ZodOptional<z.ZodObject<{
+            group: z.ZodString;
+            minimum: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strict>>;
+        readers: z.ZodOptional<z.ZodString>;
+        editors: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>>;
     tools: z.ZodOptional<z.ZodObject<{
-        generated: z.ZodOptional<z.ZodBoolean>;
+        generated: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"read">]>>;
         custom: z.ZodOptional<z.ZodArray<z.ZodObject<{
             name: z.ZodString;
             description: z.ZodString;
@@ -206,6 +493,7 @@ export declare const storedExtensionsSchema: z.ZodObject<{
             input: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
             write: z.ZodOptional<z.ZodBoolean>;
             collection: z.ZodOptional<z.ZodString>;
+            public: z.ZodOptional<z.ZodBoolean>;
         }, z.core.$strip>>>;
     }, z.core.$strip>>;
     screens: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
@@ -216,6 +504,16 @@ export declare const storedExtensionsSchema: z.ZodObject<{
         collections: z.ZodOptional<z.ZodArray<z.ZodString>>;
         host: z.ZodOptional<z.ZodArray<z.ZodString>>;
     }, z.core.$strip>>;
+    secrets: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        label: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+        required: z.ZodOptional<z.ZodBoolean>;
+        scope: z.ZodOptional<z.ZodEnum<{
+            instance: "instance";
+            install: "install";
+        }>>;
+    }, z.core.$strip>>>;
     migrations: z.ZodOptional<z.ZodArray<z.ZodObject<{
         version: z.ZodString;
         steps: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -266,7 +564,14 @@ export declare const appManifestSchema: z.ZodObject<{
         terms: z.ZodOptional<z.ZodString>;
         support: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>;
-    icon: z.ZodOptional<z.ZodString>;
+    logo: z.ZodOptional<z.ZodObject<{
+        color: z.ZodString;
+        mono: z.ZodString;
+    }, z.core.$strip>>;
+    icon: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+        color: z.ZodString;
+        mono: z.ZodString;
+    }, z.core.$strip>]>>;
     brandColor: z.ZodOptional<z.ZodString>;
     brandColorDark: z.ZodOptional<z.ZodString>;
     defaultPrompts: z.ZodOptional<z.ZodArray<z.ZodString>>;
@@ -280,22 +585,80 @@ export declare const appManifestSchema: z.ZodObject<{
     }, z.core.$strip>>;
     metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     placements: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        key: z.ZodOptional<z.ZodString>;
         kind: z.ZodEnum<{
+            home: "home";
+            "project-widget": "project-widget";
             "project-tab": "project-tab";
             "project-sidebar": "project-sidebar";
             "workspace-sidebar": "workspace-sidebar";
+            "public-page": "public-page";
+            "chat-card": "chat-card";
         }>;
         screen: z.ZodString;
+        sizes: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            small: "small";
+            medium: "medium";
+            large: "large";
+        }>>>;
         label: z.ZodOptional<z.ZodString>;
         icon: z.ZodOptional<z.ZodString>;
+        settings: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+            type: z.ZodEnum<{
+                string: "string";
+                url: "url";
+            }>;
+            label: z.ZodString;
+            required: z.ZodOptional<z.ZodBoolean>;
+            placeholder: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>>;
+        children: z.ZodOptional<z.ZodObject<{
+            tool: z.ZodString;
+            refreshSeconds: z.ZodOptional<z.ZodNumber>;
+            cap: z.ZodOptional<z.ZodNumber>;
+            noun: z.ZodOptional<z.ZodString>;
+            create: z.ZodOptional<z.ZodObject<{
+                tool: z.ZodString;
+                noun: z.ZodOptional<z.ZodString>;
+                titleField: z.ZodOptional<z.ZodString>;
+                parentField: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>;
+            nested: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                noun: z.ZodOptional<z.ZodString>;
+                create: z.ZodOptional<z.ZodObject<{
+                    tool: z.ZodString;
+                    noun: z.ZodOptional<z.ZodString>;
+                    titleField: z.ZodOptional<z.ZodString>;
+                    parentField: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>>;
+            }, z.core.$strip>>>;
+        }, z.core.$strip>>;
     }, z.core.$strip>>>;
     data: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
         schema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
         search: z.ZodOptional<z.ZodArray<z.ZodString>>;
         label: z.ZodOptional<z.ZodString>;
+        openSchema: z.ZodOptional<z.ZodObject<{
+            fields: z.ZodString;
+            table: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
+        publicRead: z.ZodOptional<z.ZodBoolean>;
+        publicSubmit: z.ZodOptional<z.ZodBoolean>;
+        confirmEmail: z.ZodOptional<z.ZodObject<{
+            field: z.ZodString;
+            subject: z.ZodOptional<z.ZodString>;
+            message: z.ZodOptional<z.ZodString>;
+            link: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strict>>;
+        anonymous: z.ZodOptional<z.ZodObject<{
+            group: z.ZodString;
+            minimum: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strict>>;
+        readers: z.ZodOptional<z.ZodString>;
+        editors: z.ZodOptional<z.ZodString>;
     }, z.core.$strip>>>;
     tools: z.ZodOptional<z.ZodObject<{
-        generated: z.ZodOptional<z.ZodBoolean>;
+        generated: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"read">]>>;
         custom: z.ZodOptional<z.ZodArray<z.ZodObject<{
             name: z.ZodString;
             description: z.ZodString;
@@ -303,6 +666,7 @@ export declare const appManifestSchema: z.ZodObject<{
             input: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
             write: z.ZodOptional<z.ZodBoolean>;
             collection: z.ZodOptional<z.ZodString>;
+            public: z.ZodOptional<z.ZodBoolean>;
         }, z.core.$strip>>>;
     }, z.core.$strip>>;
     screens: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
@@ -313,6 +677,193 @@ export declare const appManifestSchema: z.ZodObject<{
         collections: z.ZodOptional<z.ZodArray<z.ZodString>>;
         host: z.ZodOptional<z.ZodArray<z.ZodString>>;
     }, z.core.$strip>>;
+    secrets: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        label: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+        required: z.ZodOptional<z.ZodBoolean>;
+        scope: z.ZodOptional<z.ZodEnum<{
+            instance: "instance";
+            install: "install";
+        }>>;
+    }, z.core.$strip>>>;
+    migrations: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        version: z.ZodString;
+        steps: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
+            op: z.ZodLiteral<"add">;
+            collection: z.ZodString;
+            field: z.ZodString;
+            default: z.ZodOptional<z.ZodUnknown>;
+        }, z.core.$strip>, z.ZodObject<{
+            op: z.ZodLiteral<"rename">;
+            collection: z.ZodString;
+            from: z.ZodString;
+            to: z.ZodString;
+        }, z.core.$strip>, z.ZodObject<{
+            op: z.ZodLiteral<"drop">;
+            collection: z.ZodString;
+            field: z.ZodString;
+        }, z.core.$strip>, z.ZodObject<{
+            op: z.ZodLiteral<"dropCollection">;
+            collection: z.ZodString;
+        }, z.core.$strip>, z.ZodObject<{
+            op: z.ZodLiteral<"replace">;
+            collection: z.ZodString;
+            field: z.ZodString;
+            from: z.ZodString;
+            to: z.ZodString;
+        }, z.core.$strip>], "op">>;
+    }, z.core.$strip>>>;
+    sdk: z.ZodOptional<z.ZodString>;
+}, z.core.$strip>;
+/**
+ * A manifest being written now, as `brydio validate`, `build` and `dev` read
+ * it: the same, and nothing retired (`placement_tab_retired`) — which a
+ * published version may still hold.
+ */
+export declare const newAppManifestSchema: z.ZodObject<{
+    name: z.ZodString;
+    version: z.ZodString;
+    displayName: z.ZodOptional<z.ZodString>;
+    summary: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+    author: z.ZodOptional<z.ZodObject<{
+        name: z.ZodString;
+        email: z.ZodOptional<z.ZodString>;
+        url: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    homepage: z.ZodOptional<z.ZodString>;
+    repository: z.ZodOptional<z.ZodString>;
+    license: z.ZodOptional<z.ZodString>;
+    keywords: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    links: z.ZodOptional<z.ZodObject<{
+        privacy: z.ZodOptional<z.ZodString>;
+        terms: z.ZodOptional<z.ZodString>;
+        support: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
+    logo: z.ZodOptional<z.ZodObject<{
+        color: z.ZodString;
+        mono: z.ZodString;
+    }, z.core.$strip>>;
+    icon: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+        color: z.ZodString;
+        mono: z.ZodString;
+    }, z.core.$strip>]>>;
+    brandColor: z.ZodOptional<z.ZodString>;
+    brandColorDark: z.ZodOptional<z.ZodString>;
+    defaultPrompts: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    skills: z.ZodOptional<z.ZodString>;
+    servers: z.ZodOptional<z.ZodString>;
+    integrations: z.ZodOptional<z.ZodString>;
+    requires: z.ZodOptional<z.ZodObject<{
+        servers: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        integrations: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        builtin: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    }, z.core.$strip>>;
+    metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    placements: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        key: z.ZodOptional<z.ZodString>;
+        kind: z.ZodEnum<{
+            home: "home";
+            "project-widget": "project-widget";
+            "project-tab": "project-tab";
+            "project-sidebar": "project-sidebar";
+            "workspace-sidebar": "workspace-sidebar";
+            "public-page": "public-page";
+            "chat-card": "chat-card";
+        }>;
+        screen: z.ZodString;
+        sizes: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            small: "small";
+            medium: "medium";
+            large: "large";
+        }>>>;
+        label: z.ZodOptional<z.ZodString>;
+        icon: z.ZodOptional<z.ZodString>;
+        settings: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+            type: z.ZodEnum<{
+                string: "string";
+                url: "url";
+            }>;
+            label: z.ZodString;
+            required: z.ZodOptional<z.ZodBoolean>;
+            placeholder: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>>;
+        children: z.ZodOptional<z.ZodObject<{
+            tool: z.ZodString;
+            refreshSeconds: z.ZodOptional<z.ZodNumber>;
+            cap: z.ZodOptional<z.ZodNumber>;
+            noun: z.ZodOptional<z.ZodString>;
+            create: z.ZodOptional<z.ZodObject<{
+                tool: z.ZodString;
+                noun: z.ZodOptional<z.ZodString>;
+                titleField: z.ZodOptional<z.ZodString>;
+                parentField: z.ZodOptional<z.ZodString>;
+            }, z.core.$strip>>;
+            nested: z.ZodOptional<z.ZodArray<z.ZodObject<{
+                noun: z.ZodOptional<z.ZodString>;
+                create: z.ZodOptional<z.ZodObject<{
+                    tool: z.ZodString;
+                    noun: z.ZodOptional<z.ZodString>;
+                    titleField: z.ZodOptional<z.ZodString>;
+                    parentField: z.ZodOptional<z.ZodString>;
+                }, z.core.$strip>>;
+            }, z.core.$strip>>>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>>;
+    data: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+        schema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
+        search: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        label: z.ZodOptional<z.ZodString>;
+        openSchema: z.ZodOptional<z.ZodObject<{
+            fields: z.ZodString;
+            table: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>;
+        publicRead: z.ZodOptional<z.ZodBoolean>;
+        publicSubmit: z.ZodOptional<z.ZodBoolean>;
+        confirmEmail: z.ZodOptional<z.ZodObject<{
+            field: z.ZodString;
+            subject: z.ZodOptional<z.ZodString>;
+            message: z.ZodOptional<z.ZodString>;
+            link: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strict>>;
+        anonymous: z.ZodOptional<z.ZodObject<{
+            group: z.ZodString;
+            minimum: z.ZodOptional<z.ZodNumber>;
+        }, z.core.$strict>>;
+        readers: z.ZodOptional<z.ZodString>;
+        editors: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>>;
+    tools: z.ZodOptional<z.ZodObject<{
+        generated: z.ZodOptional<z.ZodUnion<readonly [z.ZodBoolean, z.ZodLiteral<"read">]>>;
+        custom: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            name: z.ZodString;
+            description: z.ZodString;
+            handler: z.ZodString;
+            input: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+            write: z.ZodOptional<z.ZodBoolean>;
+            collection: z.ZodOptional<z.ZodString>;
+            public: z.ZodOptional<z.ZodBoolean>;
+        }, z.core.$strip>>>;
+    }, z.core.$strip>>;
+    screens: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+        entry: z.ZodString;
+    }, z.core.$strip>>>;
+    grants: z.ZodOptional<z.ZodObject<{
+        tools: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        collections: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        host: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strip>>;
+    secrets: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        label: z.ZodString;
+        description: z.ZodOptional<z.ZodString>;
+        required: z.ZodOptional<z.ZodBoolean>;
+        scope: z.ZodOptional<z.ZodEnum<{
+            instance: "instance";
+            install: "install";
+        }>>;
+    }, z.core.$strip>>>;
     migrations: z.ZodOptional<z.ZodArray<z.ZodObject<{
         version: z.ZodString;
         steps: z.ZodArray<z.ZodDiscriminatedUnion<[z.ZodObject<{
@@ -361,6 +912,23 @@ export interface CollectionSpec {
     search: string[];
     /** The one `project` field, whose value is copied to `app_document.project_id`. */
     projectField: string | null;
+    /**
+     * Fields defined at runtime (P5): the companion collection, and the field
+     * naming a row's table (null: one table per instance). The store reads the
+     * live definitions; `fields` here holds only the manifest's own.
+     */
+    openSchema?: {
+        fields: string;
+        table: string | null;
+    };
+    /** On a companion: the open collection whose fields its records define (P5). */
+    definesFieldsOf?: string;
+    /** Answers kept with no writer, read only a whole group of at least `minimum` at a time (P13). */
+    anonymous?: AnonymousSpec;
+    /** The string[] field naming who alone may read a record, when it names anyone (P16). */
+    readers?: string;
+    /** The string[] field naming who alone may change a record, when it names anyone (DW06). */
+    editors?: string;
 }
 /**
  * The singular a collection's tools are named with: the manifest's, else the