@cloudcrane/app-spec 0.4.0 → 0.7.0

package/dist/src/reach.js

@@ -0,0 +1,102 @@
+import { USE_NAMES } from "./uses.js";
+// What it can reach, checked against the code: a coded or page component's code may name only the sites in `network`
+// and use only the device features in `uses`, so what the person is shown before the app opens is everything it does.
+// Refusals, not warnings. The same reading CloudCrane's checks give an app's code (its apps.rules.ts and
+// blueprints/capabilities.ts), so a spec that passes here passes there.
+/** Example domains and schema.org name no site an app talks to. */
+const EXAMPLE_DOMAIN = /^(?:[a-z0-9-]+\.)*example\.(?:com|org|net)$|^(?:[a-z0-9-]+\.)+(?:example|test|invalid|localhost)$/i;
+const notASite = (host) => EXAMPLE_DOMAIN.test(host.replace(/:\d+$/, "")) || /^(?:[a-z0-9-]+\.)*schema\.org(?::\d+)?$/.test(host);
+/** Links and the page's own tags carry nothing with them: their addresses aren't sites the code talks to. */
+const OWN_TAG = /<(a|script|link|iframe|embed|object|form)\b[^>]*>/gi;
+const ADDRESS_ATTR = /(?<=\s)(href|src|data|action)\s*=\s*("[^"]*"|'[^']*'|[^\s>]+)/gi;
+/** Every host an https:// or wss:// address in the code names, lower-case, once each. */
+export function hostsNamedIn(code) {
+    const text = code.replace(OWN_TAG, (tag) => tag.replace(ADDRESS_ATTR, '$1=""'));
+    const hosts = new Set();
+    for (const m of text.matchAll(/\b(?:https|wss):\/\/([^\s/?#"'`<>\\()[\]{},;$]+)/gi)) {
+        const authority = m[1];
+        const host = authority
+            .slice(authority.lastIndexOf("@") + 1)
+            .toLowerCase()
+            .replace(/\.$/, "")
+            .replace(/:443$/, "");
+        if (host && !notASite(host))
+            hosts.add(host);
+    }
+    return [...hosts];
+}
+/** Calls that reach the network, and where their address starts. */
+const REQUESTS = [
+    /(?<![\w$])fetch\s*\(\s*/g,
+    /\bnew\s+(?:WebSocket|EventSource)\s*\(\s*/g,
+    /\.sendBeacon\s*\(\s*/g,
+    /\.open\s*\(\s*(["'`])[A-Za-z]+\1\s*,\s*/g,
+];
+/** Whether a request's address is put together while the app runs, so no one can read which site it reaches. */
+export function buildsAddressAtRuntime(code) {
+    for (const pattern of REQUESTS) {
+        if (pattern.source.startsWith("\\.open") && !/XMLHttpRequest/.test(code))
+            continue;
+        for (const m of code.matchAll(pattern)) {
+            const rest = code.slice(m.index + m[0].length, m.index + m[0].length + 300);
+            const quote = rest[0];
+            if (quote !== '"' && quote !== "'" && quote !== "`")
+                return true;
+            const end = rest.indexOf(quote, 1);
+            let start = rest.slice(1, end === -1 ? undefined : end);
+            if (quote === "`" && start.includes("${"))
+                start = start.slice(0, start.indexOf("${"));
+            if (!start)
+                return true;
+            const absolute = /^([a-z][a-z0-9+.-]*:|\/\/)/i.test(start);
+            if (absolute && !/^(?:[a-z][a-z0-9+.-]*:)?\/\/[a-z0-9-]+(\.[a-z0-9-]+)*/i.test(start))
+                return true;
+        }
+    }
+    return false;
+}
+/** How code uses each device feature a spec can declare. */
+const USED_BY = {
+    camera: [/\bgetUserMedia\b/],
+    microphone: [/\bgetUserMedia\b/],
+    location: [/\bgeolocation\b/],
+    motion: [/\bDevice(Motion|Orientation)Event\b/, /\bdevice(motion|orientation)\b/],
+    "screen-awake": [/\bwakeLock\b/],
+    gamepad: [/\bgetGamepads\b/, /\bgamepad(dis)?connected\b/],
+    voice: [/\b(webkit)?SpeechRecognition\b/],
+    contacts: [/\bnavigator\.contacts\b/, /\bContactsManager\b/],
+    nfc: [/\bNDEF(Reader|Message|Record)\b/],
+};
+/** Features a spec can't declare, so code that uses them is refused. */
+const NOT_FOR_SPECS = [
+    ["Bluetooth", /\bnavigator\.bluetooth\b/],
+    ["direct connections to other phones (RTCPeerConnection)", /\b(webkit)?RTCPeerConnection\b/],
+    ["USB, serial or HID devices", /\bnavigator\.(usb|serial|hid)\b/],
+    ["payments", /\bPaymentRequest\b/],
+];
+export function reachProblems(spec) {
+    const problems = [];
+    const sites = new Set(spec.network.map((n) => n.site));
+    const declared = new Set(spec.uses.map((u) => u.what));
+    for (const [name, component] of Object.entries(spec.components)) {
+        const at = `components.${name}.code`;
+        const code = component.code;
+        for (const host of hostsNamedIn(code))
+            if (!sites.has(host))
+                problems.push({ at, problem: `talks to ${host}, which network doesn't list: add it with why and what it's sent, or take it out` });
+        if (buildsAddressAtRuntime(code))
+            problems.push({ at, problem: "builds a request's address while it runs, so no one can tell which site it reaches: write each address out in full" });
+        // camera and microphone share getUserMedia: either one declared covers it.
+        for (const what of USE_NAMES) {
+            if (declared.has(what) || !USED_BY[what].some((p) => p.test(code)))
+                continue;
+            if ((what === "camera" || what === "microphone") && (declared.has("camera") || declared.has("microphone")))
+                continue;
+            problems.push({ at, problem: `uses ${what} but uses doesn't declare it: add it with why, or take it out` });
+        }
+        for (const [what, pattern] of NOT_FOR_SPECS)
+            if (pattern.test(code))
+                problems.push({ at, problem: `uses ${what}, which a spec can't declare` });
+    }
+    return problems;
+}

package/dist/src/schema.d.ts

@@ -28,6 +28,8 @@ export declare const CodedComponent: z.ZodEffects<z.ZodEffects<z.ZodObject<{
     kind: z.ZodLiteral<"coded">;
     /** game: a canvas, a loop and touch, the code a script; page: a whole HTML page, drawn full screen (what an app written as HTML becomes). */
     kit: z.ZodEnum<["game", "page"]>;
+    /** Optional: the native widget or screen it stands in for, like "CupertinoSlidingSegmentedControl", so `blackbox coverage` can say which the catalog lacks. */
+    replaces: z.ZodOptional<z.ZodString>;
     inputs: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodEnum<["number", "string", "boolean", "list", "map"]>>>;
     events: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodEnum<["number", "string", "boolean", "list", "map"]>>>>;
     code: z.ZodString;
@@ -37,10 +39,12 @@ export declare const CodedComponent: z.ZodEffects<z.ZodEffects<z.ZodObject<{
     kit: "game" | "page";
     inputs: Record<string, "string" | "number" | "boolean" | "map" | "list">;
     events: Record<string, Record<string, "string" | "number" | "boolean" | "map" | "list">>;
+    replaces?: string | undefined;
 }, {
     code: string;
     kind: "coded";
     kit: "game" | "page";
+    replaces?: string | undefined;
     inputs?: Record<string, "string" | "number" | "boolean" | "map" | "list"> | undefined;
     events?: Record<string, Record<string, "string" | "number" | "boolean" | "map" | "list">> | undefined;
 }>, {
@@ -49,10 +53,12 @@ export declare const CodedComponent: z.ZodEffects<z.ZodEffects<z.ZodObject<{
     kit: "game" | "page";
     inputs: Record<string, "string" | "number" | "boolean" | "map" | "list">;
     events: Record<string, Record<string, "string" | "number" | "boolean" | "map" | "list">>;
+    replaces?: string | undefined;
 }, {
     code: string;
     kind: "coded";
     kit: "game" | "page";
+    replaces?: string | undefined;
     inputs?: Record<string, "string" | "number" | "boolean" | "map" | "list"> | undefined;
     events?: Record<string, Record<string, "string" | "number" | "boolean" | "map" | "list">> | undefined;
 }>, {
@@ -61,13 +67,17 @@ export declare const CodedComponent: z.ZodEffects<z.ZodEffects<z.ZodObject<{
     kit: "game" | "page";
     inputs: Record<string, "string" | "number" | "boolean" | "map" | "list">;
     events: Record<string, Record<string, "string" | "number" | "boolean" | "map" | "list">>;
+    replaces?: string | undefined;
 }, {
     code: string;
     kind: "coded";
     kit: "game" | "page";
+    replaces?: string | undefined;
     inputs?: Record<string, "string" | "number" | "boolean" | "map" | "list"> | undefined;
     events?: Record<string, Record<string, "string" | "number" | "boolean" | "map" | "list">> | undefined;
 }>;
+/** The kinds of thing a ported app may not do that its original did. */
+export declare const GAP_KINDS: readonly ["background", "widget", "notifications", "purchases", "accounts", "sync", "device", "other"];
 export declare const SpecSchema: z.ZodEffects<z.ZodObject<{
     v: z.ZodLiteral<1>;
     manifest: z.ZodObject<{
@@ -167,6 +177,11 @@ export declare const SpecSchema: z.ZodEffects<z.ZodObject<{
             to: number;
             cel: string;
         }>, "many">;
+        /**
+         * What it keeps: the saved fields that are personal (health, money, people's names), as pointers into the saved
+         * data, like /days or /people. They stay on the phone; CloudCrane never puts them in a remix, screenshot or report.
+         */
+        personal: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
     }, "strict", z.ZodTypeAny, {
         version: number;
         key: string;
@@ -182,6 +197,7 @@ export declare const SpecSchema: z.ZodEffects<z.ZodObject<{
             cel: string;
         }[];
         initial?: unknown;
+        personal?: string[] | undefined;
     }, {
         version: number;
         key: string;
@@ -197,6 +213,7 @@ export declare const SpecSchema: z.ZodEffects<z.ZodObject<{
             path: string;
             source: string;
         }[] | undefined;
+        personal?: string[] | undefined;
     }>;
     logic: z.ZodObject<{
         consts: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnion<[z.ZodNumber, z.ZodString, z.ZodBoolean]>>>;
@@ -213,18 +230,22 @@ export declare const SpecSchema: z.ZodEffects<z.ZodObject<{
         /** Values the screens read, kept up to date: a data-model pointer and the CEL that computes it. */
         computed: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
         /** Examples each function must reproduce: recorded from the source's own tests, or given. */
+        /**
+         * Examples each function must reproduce: `recorded` from the module's own tests, `app` from calls recorded while
+         * the original app ran, `hint` written by hand.
+         */
         vectors: z.ZodDefault<z.ZodArray<z.ZodObject<{
             fn: z.ZodString;
             in: z.ZodArray<z.ZodUnknown, "many">;
             out: z.ZodUnknown;
-            from: z.ZodEnum<["recorded", "hint"]>;
+            from: z.ZodEnum<["recorded", "app", "hint"]>;
         }, "strict", z.ZodTypeAny, {
-            from: "recorded" | "hint";
+            from: "recorded" | "app" | "hint";
             fn: string;
             in: unknown[];
             out?: unknown;
         }, {
-            from: "recorded" | "hint";
+            from: "recorded" | "app" | "hint";
             fn: string;
             in: unknown[];
             out?: unknown;
@@ -237,7 +258,7 @@ export declare const SpecSchema: z.ZodEffects<z.ZodObject<{
         }>;
         computed: Record<string, string>;
         vectors: {
-            from: "recorded" | "hint";
+            from: "recorded" | "app" | "hint";
             fn: string;
             in: unknown[];
             out?: unknown;
@@ -250,21 +271,28 @@ export declare const SpecSchema: z.ZodEffects<z.ZodObject<{
         }> | undefined;
         computed?: Record<string, string> | undefined;
         vectors?: {
-            from: "recorded" | "hint";
+            from: "recorded" | "app" | "hint";
             fn: string;
             in: unknown[];
             out?: unknown;
         }[] | undefined;
     }>;
+    /**
+     * What it can reach: each site, why, and what it's sent, in the person's words ("the city you typed"). Shown to the
+     * person before the app opens; a site the code names but this doesn't list is refused.
+     */
     network: z.ZodDefault<z.ZodArray<z.ZodObject<{
         site: z.ZodString;
         why: z.ZodString;
+        sends: z.ZodString;
     }, "strict", z.ZodTypeAny, {
         site: string;
         why: string;
+        sends: string;
     }, {
         site: string;
         why: string;
+        sends: string;
     }>, "many">>;
     /** The device features the app uses, by CloudCrane's names, each once with why; anything not listed is blocked. */
     uses: z.ZodDefault<z.ZodArray<z.ZodObject<{
@@ -277,6 +305,59 @@ export declare const SpecSchema: z.ZodEffects<z.ZodObject<{
         why: string;
         what: "camera" | "microphone" | "location" | "motion" | "screen-awake" | "gamepad" | "voice" | "contacts" | "nfc";
     }>, "many">>;
+    /**
+     * What it does: each screen in words, and what it shows when there's nothing yet, while it loads, offline, and when
+     * something fails. Optional; without it the blueprint describes the one surface from its words.
+     */
+    screens: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        says: z.ZodString;
+        states: z.ZodOptional<z.ZodObject<{
+            empty: z.ZodOptional<z.ZodString>;
+            loading: z.ZodOptional<z.ZodString>;
+            offline: z.ZodOptional<z.ZodString>;
+            error: z.ZodOptional<z.ZodString>;
+        }, "strict", z.ZodTypeAny, {
+            error?: string | undefined;
+            empty?: string | undefined;
+            loading?: string | undefined;
+            offline?: string | undefined;
+        }, {
+            error?: string | undefined;
+            empty?: string | undefined;
+            loading?: string | undefined;
+            offline?: string | undefined;
+        }>>;
+    }, "strict", z.ZodTypeAny, {
+        id: string;
+        says: string;
+        states?: {
+            error?: string | undefined;
+            empty?: string | undefined;
+            loading?: string | undefined;
+            offline?: string | undefined;
+        } | undefined;
+    }, {
+        id: string;
+        says: string;
+        states?: {
+            error?: string | undefined;
+            empty?: string | undefined;
+            loading?: string | undefined;
+            offline?: string | undefined;
+        } | undefined;
+    }>, "many">>;
+    /** How it looks on the phone: the orientation it holds and whether it fills the screen (Android honours both). */
+    screen: z.ZodOptional<z.ZodObject<{
+        orientation: z.ZodOptional<z.ZodEnum<["portrait", "landscape", "any"]>>;
+        fullscreen: z.ZodOptional<z.ZodBoolean>;
+    }, "strict", z.ZodTypeAny, {
+        orientation?: "any" | "portrait" | "landscape" | undefined;
+        fullscreen?: boolean | undefined;
+    }, {
+        orientation?: "any" | "portrait" | "landscape" | undefined;
+        fullscreen?: boolean | undefined;
+    }>>;
     journeys: z.ZodArray<z.ZodObject<{
         id: z.ZodString;
         title: z.ZodString;
@@ -325,6 +406,8 @@ export declare const SpecSchema: z.ZodEffects<z.ZodObject<{
         kind: z.ZodLiteral<"coded">;
         /** game: a canvas, a loop and touch, the code a script; page: a whole HTML page, drawn full screen (what an app written as HTML becomes). */
         kit: z.ZodEnum<["game", "page"]>;
+        /** Optional: the native widget or screen it stands in for, like "CupertinoSlidingSegmentedControl", so `blackbox coverage` can say which the catalog lacks. */
+        replaces: z.ZodOptional<z.ZodString>;
         inputs: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodEnum<["number", "string", "boolean", "list", "map"]>>>;
         events: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodString, z.ZodEnum<["number", "string", "boolean", "list", "map"]>>>>;
         code: z.ZodString;
@@ -334,10 +417,12 @@ export declare const SpecSchema: z.ZodEffects<z.ZodObject<{
         kit: "game" | "page";
         inputs: Record<string, "string" | "number" | "boolean" | "map" | "list">;
         events: Record<string, Record<string, "string" | "number" | "boolean" | "map" | "list">>;
+        replaces?: string | undefined;
     }, {
         code: string;
         kind: "coded";
         kit: "game" | "page";
+        replaces?: string | undefined;
         inputs?: Record<string, "string" | "number" | "boolean" | "map" | "list"> | undefined;
         events?: Record<string, Record<string, "string" | "number" | "boolean" | "map" | "list">> | undefined;
     }>, {
@@ -346,10 +431,12 @@ export declare const SpecSchema: z.ZodEffects<z.ZodObject<{
         kit: "game" | "page";
         inputs: Record<string, "string" | "number" | "boolean" | "map" | "list">;
         events: Record<string, Record<string, "string" | "number" | "boolean" | "map" | "list">>;
+        replaces?: string | undefined;
     }, {
         code: string;
         kind: "coded";
         kit: "game" | "page";
+        replaces?: string | undefined;
         inputs?: Record<string, "string" | "number" | "boolean" | "map" | "list"> | undefined;
         events?: Record<string, Record<string, "string" | "number" | "boolean" | "map" | "list">> | undefined;
     }>, {
@@ -358,10 +445,12 @@ export declare const SpecSchema: z.ZodEffects<z.ZodObject<{
         kit: "game" | "page";
         inputs: Record<string, "string" | "number" | "boolean" | "map" | "list">;
         events: Record<string, Record<string, "string" | "number" | "boolean" | "map" | "list">>;
+        replaces?: string | undefined;
     }, {
         code: string;
         kind: "coded";
         kit: "game" | "page";
+        replaces?: string | undefined;
         inputs?: Record<string, "string" | "number" | "boolean" | "map" | "list"> | undefined;
         events?: Record<string, Record<string, "string" | "number" | "boolean" | "map" | "list">> | undefined;
     }>>, Record<string, {
@@ -370,13 +459,34 @@ export declare const SpecSchema: z.ZodEffects<z.ZodObject<{
         kit: "game" | "page";
         inputs: Record<string, "string" | "number" | "boolean" | "map" | "list">;
         events: Record<string, Record<string, "string" | "number" | "boolean" | "map" | "list">>;
+        replaces?: string | undefined;
     }>, Record<string, {
         code: string;
         kind: "coded";
         kit: "game" | "page";
+        replaces?: string | undefined;
         inputs?: Record<string, "string" | "number" | "boolean" | "map" | "list"> | undefined;
         events?: Record<string, Record<string, "string" | "number" | "boolean" | "map" | "list">> | undefined;
     }>>>;
+    /** The page-kit component that is the whole app: the spec is then that page, compiled to its HTML as written (see page.ts). */
+    page: z.ZodOptional<z.ZodString>;
+    /**
+     * What the original app does that this one doesn't, said plainly so no one is promised it: a native feature with
+     * no web equivalent yet (background jobs, home-screen widgets, push notifications, in-app purchases...).
+     */
+    gaps: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        kind: z.ZodEnum<["background", "widget", "notifications", "purchases", "accounts", "sync", "device", "other"]>;
+        what: z.ZodString;
+        why: z.ZodOptional<z.ZodString>;
+    }, "strict", z.ZodTypeAny, {
+        kind: "notifications" | "other" | "background" | "widget" | "purchases" | "accounts" | "sync" | "device";
+        what: string;
+        why?: string | undefined;
+    }, {
+        kind: "notifications" | "other" | "background" | "widget" | "purchases" | "accounts" | "sync" | "device";
+        what: string;
+        why?: string | undefined;
+    }>, "many">>;
     /** What a remix may change and what stays as the partner made it. */
     mods: z.ZodDefault<z.ZodObject<{
         open: z.ZodArray<z.ZodString, "many">;
@@ -395,6 +505,7 @@ export declare const SpecSchema: z.ZodEffects<z.ZodObject<{
         kit: "game" | "page";
         inputs: Record<string, "string" | "number" | "boolean" | "map" | "list">;
         events: Record<string, Record<string, "string" | "number" | "boolean" | "map" | "list">>;
+        replaces?: string | undefined;
     }>;
     surface: {
         catalog: string;
@@ -432,6 +543,7 @@ export declare const SpecSchema: z.ZodEffects<z.ZodObject<{
             cel: string;
         }[];
         initial?: unknown;
+        personal?: string[] | undefined;
     };
     logic: {
         consts: Record<string, string | number | boolean>;
@@ -441,7 +553,7 @@ export declare const SpecSchema: z.ZodEffects<z.ZodObject<{
         }>;
         computed: Record<string, string>;
         vectors: {
-            from: "recorded" | "hint";
+            from: "recorded" | "app" | "hint";
             fn: string;
             in: unknown[];
             out?: unknown;
@@ -450,6 +562,7 @@ export declare const SpecSchema: z.ZodEffects<z.ZodObject<{
     network: {
         site: string;
         why: string;
+        sends: string;
     }[];
     uses: {
         why: string;
@@ -473,6 +586,26 @@ export declare const SpecSchema: z.ZodEffects<z.ZodObject<{
         open: string[];
         locked: string[];
     };
+    page?: string | undefined;
+    screens?: {
+        id: string;
+        says: string;
+        states?: {
+            error?: string | undefined;
+            empty?: string | undefined;
+            loading?: string | undefined;
+            offline?: string | undefined;
+        } | undefined;
+    }[] | undefined;
+    screen?: {
+        orientation?: "any" | "portrait" | "landscape" | undefined;
+        fullscreen?: boolean | undefined;
+    } | undefined;
+    gaps?: {
+        kind: "notifications" | "other" | "background" | "widget" | "purchases" | "accounts" | "sync" | "device";
+        what: string;
+        why?: string | undefined;
+    }[] | undefined;
 }, {
     surface: {
         catalog: string;
@@ -510,6 +643,7 @@ export declare const SpecSchema: z.ZodEffects<z.ZodObject<{
             path: string;
             source: string;
         }[] | undefined;
+        personal?: string[] | undefined;
     };
     logic: {
         consts?: Record<string, string | number | boolean> | undefined;
@@ -519,7 +653,7 @@ export declare const SpecSchema: z.ZodEffects<z.ZodObject<{
         }> | undefined;
         computed?: Record<string, string> | undefined;
         vectors?: {
-            from: "recorded" | "hint";
+            from: "recorded" | "app" | "hint";
             fn: string;
             in: unknown[];
             out?: unknown;
@@ -537,23 +671,45 @@ export declare const SpecSchema: z.ZodEffects<z.ZodObject<{
         code: string;
         kind: "coded";
         kit: "game" | "page";
+        replaces?: string | undefined;
         inputs?: Record<string, "string" | "number" | "boolean" | "map" | "list"> | undefined;
         events?: Record<string, Record<string, "string" | "number" | "boolean" | "map" | "list">> | undefined;
     }> | undefined;
+    page?: string | undefined;
     network?: {
         site: string;
         why: string;
+        sends: string;
     }[] | undefined;
     uses?: {
         why: string;
         what: "camera" | "microphone" | "location" | "motion" | "screen-awake" | "gamepad" | "voice" | "contacts" | "nfc";
     }[] | undefined;
+    screens?: {
+        id: string;
+        says: string;
+        states?: {
+            error?: string | undefined;
+            empty?: string | undefined;
+            loading?: string | undefined;
+            offline?: string | undefined;
+        } | undefined;
+    }[] | undefined;
+    screen?: {
+        orientation?: "any" | "portrait" | "landscape" | undefined;
+        fullscreen?: boolean | undefined;
+    } | undefined;
     promises?: {
         text: string;
         id: string;
         kind?: "data" | undefined;
     }[] | undefined;
     tests?: Record<string, unknown>[] | undefined;
+    gaps?: {
+        kind: "notifications" | "other" | "background" | "widget" | "purchases" | "accounts" | "sync" | "device";
+        what: string;
+        why?: string | undefined;
+    }[] | undefined;
     mods?: {
         open: string[];
         locked: string[];
@@ -565,6 +721,7 @@ export declare const SpecSchema: z.ZodEffects<z.ZodObject<{
         kit: "game" | "page";
         inputs: Record<string, "string" | "number" | "boolean" | "map" | "list">;
         events: Record<string, Record<string, "string" | "number" | "boolean" | "map" | "list">>;
+        replaces?: string | undefined;
     }>;
     surface: {
         catalog: string;
@@ -602,6 +759,7 @@ export declare const SpecSchema: z.ZodEffects<z.ZodObject<{
             cel: string;
         }[];
         initial?: unknown;
+        personal?: string[] | undefined;
     };
     logic: {
         consts: Record<string, string | number | boolean>;
@@ -611,7 +769,7 @@ export declare const SpecSchema: z.ZodEffects<z.ZodObject<{
         }>;
         computed: Record<string, string>;
         vectors: {
-            from: "recorded" | "hint";
+            from: "recorded" | "app" | "hint";
             fn: string;
             in: unknown[];
             out?: unknown;
@@ -620,6 +778,7 @@ export declare const SpecSchema: z.ZodEffects<z.ZodObject<{
     network: {
         site: string;
         why: string;
+        sends: string;
     }[];
     uses: {
         why: string;
@@ -643,6 +802,26 @@ export declare const SpecSchema: z.ZodEffects<z.ZodObject<{
         open: string[];
         locked: string[];
     };
+    page?: string | undefined;
+    screens?: {
+        id: string;
+        says: string;
+        states?: {
+            error?: string | undefined;
+            empty?: string | undefined;
+            loading?: string | undefined;
+            offline?: string | undefined;
+        } | undefined;
+    }[] | undefined;
+    screen?: {
+        orientation?: "any" | "portrait" | "landscape" | undefined;
+        fullscreen?: boolean | undefined;
+    } | undefined;
+    gaps?: {
+        kind: "notifications" | "other" | "background" | "widget" | "purchases" | "accounts" | "sync" | "device";
+        what: string;
+        why?: string | undefined;
+    }[] | undefined;
 }, {
     surface: {
         catalog: string;
@@ -680,6 +859,7 @@ export declare const SpecSchema: z.ZodEffects<z.ZodObject<{
             path: string;
             source: string;
         }[] | undefined;
+        personal?: string[] | undefined;
     };
     logic: {
         consts?: Record<string, string | number | boolean> | undefined;
@@ -689,7 +869,7 @@ export declare const SpecSchema: z.ZodEffects<z.ZodObject<{
         }> | undefined;
         computed?: Record<string, string> | undefined;
         vectors?: {
-            from: "recorded" | "hint";
+            from: "recorded" | "app" | "hint";
             fn: string;
             in: unknown[];
             out?: unknown;
@@ -707,23 +887,45 @@ export declare const SpecSchema: z.ZodEffects<z.ZodObject<{
         code: string;
         kind: "coded";
         kit: "game" | "page";
+        replaces?: string | undefined;
         inputs?: Record<string, "string" | "number" | "boolean" | "map" | "list"> | undefined;
         events?: Record<string, Record<string, "string" | "number" | "boolean" | "map" | "list">> | undefined;
     }> | undefined;
+    page?: string | undefined;
     network?: {
         site: string;
         why: string;
+        sends: string;
     }[] | undefined;
     uses?: {
         why: string;
         what: "camera" | "microphone" | "location" | "motion" | "screen-awake" | "gamepad" | "voice" | "contacts" | "nfc";
     }[] | undefined;
+    screens?: {
+        id: string;
+        says: string;
+        states?: {
+            error?: string | undefined;
+            empty?: string | undefined;
+            loading?: string | undefined;
+            offline?: string | undefined;
+        } | undefined;
+    }[] | undefined;
+    screen?: {
+        orientation?: "any" | "portrait" | "landscape" | undefined;
+        fullscreen?: boolean | undefined;
+    } | undefined;
     promises?: {
         text: string;
         id: string;
         kind?: "data" | undefined;
     }[] | undefined;
     tests?: Record<string, unknown>[] | undefined;
+    gaps?: {
+        kind: "notifications" | "other" | "background" | "widget" | "purchases" | "accounts" | "sync" | "device";
+        what: string;
+        why?: string | undefined;
+    }[] | undefined;
     mods?: {
         open: string[];
         locked: string[];