@cratis/scene.react 4.18.1 → 4.20.0

package/dist/cjs/index.js

@@ -45,6 +45,7 @@ var DesignTimeContractVersion = require('./packages/DesignTimeContractVersion.js
 var DesignTimeExtensionPoint = require('./packages/DesignTimeExtensionPoint.js');
 var DesignTimeProvider = require('./packages/DesignTimeProvider.js');
 var EmbeddedPackageHost = require('./packages/EmbeddedPackageHost.js');
+var loadApprovedPackages = require('./packages/loadApprovedPackages.js');
 var loadDesignTimeContributions = require('./packages/loadDesignTimeContributions.js');
 var isNetworkAsset = require('./packages/isNetworkAsset.js');
 var PackageHostAssets = require('./packages/PackageHostAssets.js');
@@ -138,6 +139,8 @@ exports.designTimeExtensionPointLabels = DesignTimeExtensionPoint.designTimeExte
 exports.DesignTimeProvider = DesignTimeProvider.DesignTimeProvider;
 exports.useDesignTimeContext = DesignTimeProvider.useDesignTimeContext;
 exports.EmbeddedPackageHost = EmbeddedPackageHost.EmbeddedPackageHost;
+exports.loadApprovedPackages = loadApprovedPackages.loadApprovedPackages;
+exports.resolveApprovedPackageHost = loadApprovedPackages.resolveApprovedPackageHost;
 exports.loadDesignTimeContributions = loadDesignTimeContributions.loadDesignTimeContributions;
 exports.isNetworkAsset = isNetworkAsset.isNetworkAsset;
 exports.PackageHostAssets = PackageHostAssets.PackageHostAssets;

package/dist/cjs/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;"}
+{"version":3,"file":"index.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;"}

package/dist/cjs/packages/loadApprovedPackages.js

@@ -0,0 +1,122 @@
+'use strict';
+
+var PackageHostConfiguration = require('./PackageHostConfiguration.js');
+
+// Copyright (c) Cratis. All rights reserved.
+// Licensed under the MIT license. See LICENSE file in the project root for full license information.
+/**
+ * Loads the runtime bundles of an approved package set through the host's importers.
+ *
+ * Nothing executes unless the host's policy allows executable imports. A package whose module cannot be imported,
+ * lacks its declared export, or whose bundle manifest differs from the declaration (name, version, components,
+ * layouts, templates, themes) contributes nothing and is reported - the declaration planning used and the code
+ * running must be the same package. Packages load in ordinal name order, so the result does not depend on the
+ * order the set was written in.
+ */ async function loadApprovedPackages(set, importers, policy) {
+    const bundles = [];
+    const diagnostics = [];
+    const ordered = [
+        ...set.packages
+    ].sort((a, b)=>a.manifest.name < b.manifest.name ? -1 : a.manifest.name > b.manifest.name ? 1 : 0);
+    for (const { manifest, module } of ordered){
+        const label = `Package '${manifest.name}'`;
+        if (!policy.allowExecutableImports) {
+            diagnostics.push(`${label} brings executable code from '${module.npm}', but host policy forbids executable imports`);
+            continue;
+        }
+        const importer = Object.prototype.hasOwnProperty.call(importers, module.npm) ? importers[module.npm] : undefined;
+        if (!importer) {
+            diagnostics.push(`${label} is imported from '${module.npm}', which this host's build does not include`);
+            continue;
+        }
+        let loaded;
+        try {
+            loaded = await importer();
+        } catch (error) {
+            diagnostics.push(`${label} could not be loaded from '${module.npm}': ${error instanceof Error ? error.message : String(error)}`);
+            continue;
+        }
+        const bundle = loaded[module.export];
+        if (!bundle || typeof bundle !== 'object' || !bundle.manifest || !bundle.components) {
+            diagnostics.push(`${label} expects '${module.npm}' to export a package bundle named '${module.export}', which it does not`);
+            continue;
+        }
+        const mismatches = declarationMismatches(manifest, bundle);
+        if (mismatches.length > 0) {
+            diagnostics.push(...mismatches.map((mismatch)=>`${label} does not match the bundle '${module.export}' of '${module.npm}': ${mismatch}`));
+            continue;
+        }
+        bundles.push(bundle);
+    }
+    return {
+        bundles,
+        diagnostics
+    };
+}
+function declarationMismatches(declared, bundle) {
+    const actual = bundle.manifest;
+    const mismatches = [];
+    if (actual.name !== declared.name) mismatches.push(`the bundle is named '${actual.name}'`);
+    if (actual.version !== declared.version) mismatches.push(`the set declares version ${declared.version} but the bundle is ${actual.version}`);
+    if (actual.kind !== declared.kind) mismatches.push(`the set declares kind ${declared.kind} but the bundle is ${actual.kind}`);
+    const lists = [
+        'components',
+        'layouts',
+        'screenTemplates',
+        'dialogTemplates',
+        'themes'
+    ];
+    for (const list of lists){
+        const expected = [
+            ...declared[list] ?? []
+        ].sort();
+        const found = [
+            ...actual[list] ?? []
+        ].sort();
+        if (expected.join('\u0000') !== found.join('\u0000')) {
+            mismatches.push(`the set declares ${list} [${expected.join(', ')}] but the bundle declares [${found.join(', ')}]`);
+        }
+    }
+    return mismatches;
+}
+/**
+ * Loads the approved package set and resolves the effective profile over the built-in and approved bundles in one
+ * step. Packages that failed to load are reported in the result's `diagnostics` and block the host, so a profile
+ * is never rendered with a silently missing package.
+ */ async function resolveApprovedPackageHost(configuration) {
+    const { packageSet, importers, ...rest } = configuration;
+    const loaded = await loadApprovedPackages(packageSet, importers, configuration.policy);
+    const host = PackageHostConfiguration.resolvePackageHost({
+        ...rest,
+        bundles: [
+            ...configuration.bundles,
+            ...loaded.bundles
+        ]
+    });
+    if (loaded.diagnostics.length === 0) {
+        return host;
+    }
+    return {
+        ...host,
+        bundles: [],
+        components: {},
+        layouts: [],
+        screenTemplates: [],
+        dialogTemplates: [],
+        themes: [],
+        layout: undefined,
+        theme: undefined,
+        templates: [],
+        assets: [],
+        fonts: [],
+        blocked: true,
+        diagnostics: [
+            ...loaded.diagnostics,
+            ...host.diagnostics
+        ]
+    };
+}
+
+exports.loadApprovedPackages = loadApprovedPackages;
+exports.resolveApprovedPackageHost = resolveApprovedPackageHost;
+//# sourceMappingURL=loadApprovedPackages.js.map

package/dist/cjs/packages/loadApprovedPackages.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loadApprovedPackages.js","sources":["../../../packages/loadApprovedPackages.ts"],"sourcesContent":["// Copyright (c) Cratis. All rights reserved.\n// Licensed under the MIT license. See LICENSE file in the project root for full license information.\n\nimport { ApprovedPackageSet } from './ApprovedPackageSet';\nimport { PackageHostConfiguration, ResolvedPackageHost, resolvePackageHost } from './PackageHostConfiguration';\nimport { ScenePackageBundle } from './ScenePackageBundle';\n\n/**\n * How a host loads the modules of an approved package set: one loader per npm package name the set may import.\n *\n * A bundler resolves imports at build time, so the host lists them as literal `import()` calls\n * (`{ '@acme/scene.charts': () => import('@acme/scene.charts') }`). A set naming a module the host's build does\n * not include is a diagnostic, never an attempt to load an arbitrary specifier.\n */\nexport type ApprovedPackageImporters = Record<string, () => Promise<Record<string, unknown>>>;\n\n/** The outcome of loading an approved package set. */\nexport interface LoadedApprovedPackages {\n    /** The bundles that loaded and match what the set declared, in ordinal package-name order. */\n    bundles: ScenePackageBundle[];\n\n    /** Every reason a package was not loaded or does not match its declaration. */\n    diagnostics: string[];\n}\n\n/**\n * Loads the runtime bundles of an approved package set through the host's importers.\n *\n * Nothing executes unless the host's policy allows executable imports. A package whose module cannot be imported,\n * lacks its declared export, or whose bundle manifest differs from the declaration (name, version, components,\n * layouts, templates, themes) contributes nothing and is reported - the declaration planning used and the code\n * running must be the same package. Packages load in ordinal name order, so the result does not depend on the\n * order the set was written in.\n */\nexport async function loadApprovedPackages(\n    set: ApprovedPackageSet,\n    importers: ApprovedPackageImporters,\n    policy: { allowExecutableImports: boolean },\n): Promise<LoadedApprovedPackages> {\n    const bundles: ScenePackageBundle[] = [];\n    const diagnostics: string[] = [];\n    const ordered = [...set.packages].sort((a, b) => (a.manifest.name < b.manifest.name ? -1 : a.manifest.name > b.manifest.name ? 1 : 0));\n\n    for (const { manifest, module } of ordered) {\n        const label = `Package '${manifest.name}'`;\n        if (!policy.allowExecutableImports) {\n            diagnostics.push(`${label} brings executable code from '${module.npm}', but host policy forbids executable imports`);\n            continue;\n        }\n\n        const importer = Object.prototype.hasOwnProperty.call(importers, module.npm) ? importers[module.npm] : undefined;\n        if (!importer) {\n            diagnostics.push(`${label} is imported from '${module.npm}', which this host's build does not include`);\n            continue;\n        }\n\n        let loaded: Record<string, unknown>;\n        try {\n            loaded = await importer();\n        } catch (error) {\n            diagnostics.push(`${label} could not be loaded from '${module.npm}': ${error instanceof Error ? error.message : String(error)}`);\n            continue;\n        }\n\n        const bundle = loaded[module.export] as ScenePackageBundle | undefined;\n        if (!bundle || typeof bundle !== 'object' || !bundle.manifest || !bundle.components) {\n            diagnostics.push(`${label} expects '${module.npm}' to export a package bundle named '${module.export}', which it does not`);\n            continue;\n        }\n\n        const mismatches = declarationMismatches(manifest, bundle);\n        if (mismatches.length > 0) {\n            diagnostics.push(...mismatches.map(mismatch => `${label} does not match the bundle '${module.export}' of '${module.npm}': ${mismatch}`));\n            continue;\n        }\n\n        bundles.push(bundle);\n    }\n\n    return { bundles, diagnostics };\n}\n\nfunction declarationMismatches(declared: ApprovedPackageSet['packages'][number]['manifest'], bundle: ScenePackageBundle): string[] {\n    const actual = bundle.manifest;\n    const mismatches: string[] = [];\n    if (actual.name !== declared.name) mismatches.push(`the bundle is named '${actual.name}'`);\n    if (actual.version !== declared.version) mismatches.push(`the set declares version ${declared.version} but the bundle is ${actual.version}`);\n    if (actual.kind !== declared.kind) mismatches.push(`the set declares kind ${declared.kind} but the bundle is ${actual.kind}`);\n\n    const lists = ['components', 'layouts', 'screenTemplates', 'dialogTemplates', 'themes'] as const;\n    for (const list of lists) {\n        const expected = [...(declared[list] ?? [])].sort();\n        const found = [...(actual[list] ?? [])].sort();\n        if (expected.join('\\u0000') !== found.join('\\u0000')) {\n            mismatches.push(`the set declares ${list} [${expected.join(', ')}] but the bundle declares [${found.join(', ')}]`);\n        }\n    }\n\n    return mismatches;\n}\n\n/** An approved package set and the importers that load it, resolved together with the built-in bundles. */\nexport interface ApprovedPackageHostConfiguration extends Omit<PackageHostConfiguration, 'bundles'> {\n    /** The bundles the host ships. */\n    bundles: ScenePackageBundle[];\n\n    /** The custom packages the host approved. */\n    packageSet: ApprovedPackageSet;\n\n    /** The importers for the set's modules. */\n    importers: ApprovedPackageImporters;\n}\n\n/**\n * Loads the approved package set and resolves the effective profile over the built-in and approved bundles in one\n * step. Packages that failed to load are reported in the result's `diagnostics` and block the host, so a profile\n * is never rendered with a silently missing package.\n */\nexport async function resolveApprovedPackageHost(configuration: ApprovedPackageHostConfiguration): Promise<ResolvedPackageHost> {\n    const { packageSet, importers, ...rest } = configuration;\n    const loaded = await loadApprovedPackages(packageSet, importers, configuration.policy);\n    const host = resolvePackageHost({ ...rest, bundles: [...configuration.bundles, ...loaded.bundles] });\n    if (loaded.diagnostics.length === 0) {\n        return host;\n    }\n\n    return {\n        ...host,\n        bundles: [],\n        components: {},\n        layouts: [],\n        screenTemplates: [],\n        dialogTemplates: [],\n        themes: [],\n        layout: undefined,\n        theme: undefined,\n        templates: [],\n        assets: [],\n        fonts: [],\n        blocked: true,\n        diagnostics: [...loaded.diagnostics, ...host.diagnostics],\n    };\n}\n"],"names":["loadApprovedPackages","set","importers","policy","bundles","diagnostics","ordered","packages","sort","a","b","manifest","name","module","label","allowExecutableImports","push","npm","importer","Object","prototype","hasOwnProperty","call","undefined","loaded","error","Error","message","String","bundle","export","components","mismatches","declarationMismatches","length","map","mismatch","declared","actual","version","kind","lists","list","expected","found","join","resolveApprovedPackageHost","configuration","packageSet","rest","host","resolvePackageHost","layouts","screenTemplates","dialogTemplates","themes","layout","theme","templates","assets","fonts","blocked"],"mappings":";;;;AAAA;AACA;AAwBA;;;;;;;;AAQC,IACM,eAAeA,oBAAAA,CAClBC,GAAuB,EACvBC,SAAmC,EACnCC,MAA2C,EAAA;AAE3C,IAAA,MAAMC,UAAgC,EAAE;AACxC,IAAA,MAAMC,cAAwB,EAAE;AAChC,IAAA,MAAMC,OAAAA,GAAU;AAAIL,QAAAA,GAAAA,GAAAA,CAAIM;KAAS,CAACC,IAAI,CAAC,CAACC,CAAAA,EAAGC,CAAAA,GAAOD,CAAAA,CAAEE,QAAQ,CAACC,IAAI,GAAGF,CAAAA,CAAEC,QAAQ,CAACC,IAAI,GAAG,EAAC,GAAIH,CAAAA,CAAEE,QAAQ,CAACC,IAAI,GAAGF,CAAAA,CAAEC,QAAQ,CAACC,IAAI,GAAG,CAAA,GAAI,CAAA,CAAA;AAEnI,IAAA,KAAK,MAAM,EAAED,QAAQ,EAAEE,MAAM,EAAE,IAAIP,OAAAA,CAAS;QACxC,MAAMQ,KAAAA,GAAQ,CAAC,SAAS,EAAEH,SAASC,IAAI,CAAC,CAAC,CAAC;QAC1C,IAAI,CAACT,MAAAA,CAAOY,sBAAsB,EAAE;YAChCV,WAAAA,CAAYW,IAAI,CAAC,CAAA,EAAGF,KAAAA,CAAM,8BAA8B,EAAED,MAAAA,CAAOI,GAAG,CAAC,6CAA6C,CAAC,CAAA;AACnH,YAAA;AACJ,QAAA;AAEA,QAAA,MAAMC,WAAWC,MAAAA,CAAOC,SAAS,CAACC,cAAc,CAACC,IAAI,CAACpB,SAAAA,EAAWW,MAAAA,CAAOI,GAAG,CAAA,GAAIf,SAAS,CAACW,MAAAA,CAAOI,GAAG,CAAC,GAAGM,SAAAA;AACvG,QAAA,IAAI,CAACL,QAAAA,EAAU;YACXb,WAAAA,CAAYW,IAAI,CAAC,CAAA,EAAGF,KAAAA,CAAM,mBAAmB,EAAED,MAAAA,CAAOI,GAAG,CAAC,2CAA2C,CAAC,CAAA;AACtG,YAAA;AACJ,QAAA;QAEA,IAAIO,MAAAA;QACJ,IAAI;AACAA,YAAAA,MAAAA,GAAS,MAAMN,QAAAA,EAAAA;AACnB,QAAA,CAAA,CAAE,OAAOO,KAAAA,EAAO;AACZpB,YAAAA,WAAAA,CAAYW,IAAI,CAAC,CAAA,EAAGF,KAAAA,CAAM,2BAA2B,EAAED,MAAAA,CAAOI,GAAG,CAAC,GAAG,EAAEQ,KAAAA,YAAiBC,KAAAA,GAAQD,MAAME,OAAO,GAAGC,OAAOH,KAAAA,CAAAA,CAAAA,CAAQ,CAAA;AAC/H,YAAA;AACJ,QAAA;AAEA,QAAA,MAAMI,MAAAA,GAASL,MAAM,CAACX,MAAAA,CAAOiB,MAAM,CAAC;AACpC,QAAA,IAAI,CAACD,MAAAA,IAAU,OAAOA,MAAAA,KAAW,QAAA,IAAY,CAACA,MAAAA,CAAOlB,QAAQ,IAAI,CAACkB,MAAAA,CAAOE,UAAU,EAAE;AACjF1B,YAAAA,WAAAA,CAAYW,IAAI,CAAC,CAAA,EAAGF,KAAAA,CAAM,UAAU,EAAED,MAAAA,CAAOI,GAAG,CAAC,oCAAoC,EAAEJ,MAAAA,CAAOiB,MAAM,CAAC,oBAAoB,CAAC,CAAA;AAC1H,YAAA;AACJ,QAAA;QAEA,MAAME,UAAAA,GAAaC,sBAAsBtB,QAAAA,EAAUkB,MAAAA,CAAAA;QACnD,IAAIG,UAAAA,CAAWE,MAAM,GAAG,CAAA,EAAG;YACvB7B,WAAAA,CAAYW,IAAI,IAAIgB,UAAAA,CAAWG,GAAG,CAACC,CAAAA,QAAAA,GAAY,GAAGtB,KAAAA,CAAM,4BAA4B,EAAED,MAAAA,CAAOiB,MAAM,CAAC,MAAM,EAAEjB,OAAOI,GAAG,CAAC,GAAG,EAAEmB,QAAAA,CAAAA,CAAU,CAAA,CAAA;AACtI,YAAA;AACJ,QAAA;AAEAhC,QAAAA,OAAAA,CAAQY,IAAI,CAACa,MAAAA,CAAAA;AACjB,IAAA;IAEA,OAAO;AAAEzB,QAAAA,OAAAA;AAASC,QAAAA;AAAY,KAAA;AAClC;AAEA,SAAS4B,qBAAAA,CAAsBI,QAA4D,EAAER,MAA0B,EAAA;IACnH,MAAMS,MAAAA,GAAST,OAAOlB,QAAQ;AAC9B,IAAA,MAAMqB,aAAuB,EAAE;AAC/B,IAAA,IAAIM,OAAO1B,IAAI,KAAKyB,QAAAA,CAASzB,IAAI,EAAEoB,UAAAA,CAAWhB,IAAI,CAAC,CAAC,qBAAqB,EAAEsB,MAAAA,CAAO1B,IAAI,CAAC,CAAC,CAAC,CAAA;AACzF,IAAA,IAAI0B,OAAOC,OAAO,KAAKF,SAASE,OAAO,EAAEP,WAAWhB,IAAI,CAAC,CAAC,yBAAyB,EAAEqB,SAASE,OAAO,CAAC,mBAAmB,EAAED,MAAAA,CAAOC,OAAO,CAAA,CAAE,CAAA;AAC3I,IAAA,IAAID,OAAOE,IAAI,KAAKH,SAASG,IAAI,EAAER,WAAWhB,IAAI,CAAC,CAAC,sBAAsB,EAAEqB,SAASG,IAAI,CAAC,mBAAmB,EAAEF,MAAAA,CAAOE,IAAI,CAAA,CAAE,CAAA;AAE5H,IAAA,MAAMC,KAAAA,GAAQ;AAAC,QAAA,YAAA;AAAc,QAAA,SAAA;AAAW,QAAA,iBAAA;AAAmB,QAAA,iBAAA;AAAmB,QAAA;AAAS,KAAA;IACvF,KAAK,MAAMC,QAAQD,KAAAA,CAAO;AACtB,QAAA,MAAME,QAAAA,GAAW;eAAKN,QAAQ,CAACK,IAAAA,CAAK,IAAI;AAAI,SAAA,CAAClC,IAAI,EAAA;AACjD,QAAA,MAAMoC,KAAAA,GAAQ;eAAKN,MAAM,CAACI,IAAAA,CAAK,IAAI;AAAI,SAAA,CAAClC,IAAI,EAAA;AAC5C,QAAA,IAAImC,SAASE,IAAI,CAAC,cAAcD,KAAAA,CAAMC,IAAI,CAAC,QAAA,CAAA,EAAW;AAClDb,YAAAA,UAAAA,CAAWhB,IAAI,CAAC,CAAC,iBAAiB,EAAE0B,IAAAA,CAAK,EAAE,EAAEC,QAAAA,CAASE,IAAI,CAAC,IAAA,CAAA,CAAM,2BAA2B,EAAED,KAAAA,CAAMC,IAAI,CAAC,IAAA,CAAA,CAAM,CAAC,CAAC,CAAA;AACrH,QAAA;AACJ,IAAA;IAEA,OAAOb,UAAAA;AACX;AAcA;;;;IAKO,eAAec,0BAAAA,CAA2BC,aAA+C,EAAA;AAC5F,IAAA,MAAM,EAAEC,UAAU,EAAE9C,SAAS,EAAE,GAAG+C,MAAM,GAAGF,aAAAA;AAC3C,IAAA,MAAMvB,SAAS,MAAMxB,oBAAAA,CAAqBgD,UAAAA,EAAY9C,SAAAA,EAAW6C,cAAc5C,MAAM,CAAA;AACrF,IAAA,MAAM+C,OAAOC,2CAAAA,CAAmB;AAAE,QAAA,GAAGF,IAAI;QAAE7C,OAAAA,EAAS;AAAI2C,YAAAA,GAAAA,aAAAA,CAAc3C,OAAO;AAAKoB,YAAAA,GAAAA,MAAAA,CAAOpB;AAAQ;AAAC,KAAA,CAAA;AAClG,IAAA,IAAIoB,MAAAA,CAAOnB,WAAW,CAAC6B,MAAM,KAAK,CAAA,EAAG;QACjC,OAAOgB,IAAAA;AACX,IAAA;IAEA,OAAO;AACH,QAAA,GAAGA,IAAI;AACP9C,QAAAA,OAAAA,EAAS,EAAE;AACX2B,QAAAA,UAAAA,EAAY,EAAC;AACbqB,QAAAA,OAAAA,EAAS,EAAE;AACXC,QAAAA,eAAAA,EAAiB,EAAE;AACnBC,QAAAA,eAAAA,EAAiB,EAAE;AACnBC,QAAAA,MAAAA,EAAQ,EAAE;QACVC,MAAAA,EAAQjC,SAAAA;QACRkC,KAAAA,EAAOlC,SAAAA;AACPmC,QAAAA,SAAAA,EAAW,EAAE;AACbC,QAAAA,MAAAA,EAAQ,EAAE;AACVC,QAAAA,KAAAA,EAAO,EAAE;QACTC,OAAAA,EAAS,IAAA;QACTxD,WAAAA,EAAa;AAAImB,YAAAA,GAAAA,MAAAA,CAAOnB,WAAW;AAAK6C,YAAAA,GAAAA,IAAAA,CAAK7C;AAAY;AAC7D,KAAA;AACJ;;;"}

package/dist/esm/index.js

@@ -43,6 +43,7 @@ export { DesignTimeContractVersion } from './packages/DesignTimeContractVersion.
 export { DesignTimeExtensionPoint, designTimeExtensionPointLabels } from './packages/DesignTimeExtensionPoint.js';
 export { DesignTimeProvider, useDesignTimeContext } from './packages/DesignTimeProvider.js';
 export { EmbeddedPackageHost } from './packages/EmbeddedPackageHost.js';
+export { loadApprovedPackages, resolveApprovedPackageHost } from './packages/loadApprovedPackages.js';
 export { loadDesignTimeContributions } from './packages/loadDesignTimeContributions.js';
 export { isNetworkAsset } from './packages/isNetworkAsset.js';
 export { PackageHostAssets } from './packages/PackageHostAssets.js';

package/dist/esm/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;"}
+{"version":3,"file":"index.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;"}

package/dist/esm/packages/ApprovedPackageSet.d.ts

@@ -0,0 +1,16 @@
+import { ScenePackage } from '@cratis/scene.model';
+export interface PackageModuleReference {
+    npm: string;
+    version: string;
+    export: string;
+    styles?: string[];
+}
+export interface ApprovedPackage {
+    manifest: ScenePackage;
+    module: PackageModuleReference;
+}
+export interface ApprovedPackageSet {
+    version: 1;
+    packages: ApprovedPackage[];
+}
+//# sourceMappingURL=ApprovedPackageSet.d.ts.map

package/dist/esm/packages/ApprovedPackageSet.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ApprovedPackageSet.d.ts","sourceRoot":"","sources":["../../../packages/ApprovedPackageSet.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAMnD,MAAM,WAAW,sBAAsB;IAEnC,GAAG,EAAE,MAAM,CAAC;IAGZ,OAAO,EAAE,MAAM,CAAC;IAGhB,MAAM,EAAE,MAAM,CAAC;IAGf,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;CACrB;AAGD,MAAM,WAAW,eAAe;IAC5B,QAAQ,EAAE,YAAY,CAAC;IACvB,MAAM,EAAE,sBAAsB,CAAC;CAClC;AAMD,MAAM,WAAW,kBAAkB;IAC/B,OAAO,EAAE,CAAC,CAAC;IACX,QAAQ,EAAE,eAAe,EAAE,CAAC;CAC/B"}

package/dist/esm/packages/ApprovedPackageSet.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=ApprovedPackageSet.js.map

package/dist/esm/packages/ApprovedPackageSet.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ApprovedPackageSet.js","sourceRoot":"","sources":["../../../packages/ApprovedPackageSet.ts"],"names":[],"mappings":""}

package/dist/esm/packages/index.d.ts

@@ -1,3 +1,4 @@
+export * from './ApprovedPackageSet';
 export * from './DesignTimeAction';
 export * from './DesignTimeActionOutcome';
 export * from './DesignTimeActionState';
@@ -12,6 +13,7 @@ export * from './DesignTimeProvider';
 export * from './DesignTimeResolution';
 export * from '../navigation';
 export * from './EmbeddedPackageHost';
+export * from './loadApprovedPackages';
 export * from './loadDesignTimeContributions';
 export * from './isNetworkAsset';
 export * from './PackageHostAssets';

package/dist/esm/packages/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../packages/index.ts"],"names":[],"mappings":"AAGA,cAAc,oBAAoB,CAAC;AACnC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,yBAAyB,CAAC;AACxC,cAAc,oBAAoB,CAAC;AACnC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,qBAAqB,CAAC;AACpC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,kCAAkC,CAAC;AACjD,cAAc,iCAAiC,CAAC;AAChD,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,eAAe,CAAC;AAC9B,cAAc,uBAAuB,CAAC;AACtC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,yBAAyB,CAAC;AACxC,cAAc,mBAAmB,CAAC;AAClC,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AACrC,cAAc,+BAA+B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../packages/index.ts"],"names":[],"mappings":"AAGA,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,yBAAyB,CAAC;AACxC,cAAc,oBAAoB,CAAC;AACnC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,qBAAqB,CAAC;AACpC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,kCAAkC,CAAC;AACjD,cAAc,iCAAiC,CAAC;AAChD,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,eAAe,CAAC;AAC9B,cAAc,uBAAuB,CAAC;AACtC,cAAc,wBAAwB,CAAC;AACvC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,yBAAyB,CAAC;AACxC,cAAc,mBAAmB,CAAC;AAClC,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AACrC,cAAc,+BAA+B,CAAC"}

package/dist/esm/packages/index.js

@@ -1,3 +1,4 @@
+export * from './ApprovedPackageSet';
 export * from './DesignTimeAction';
 export * from './DesignTimeActionOutcome';
 export * from './DesignTimeActionState';
@@ -12,6 +13,7 @@ export * from './DesignTimeProvider';
 export * from './DesignTimeResolution';
 export * from '../navigation';
 export * from './EmbeddedPackageHost';
+export * from './loadApprovedPackages';
 export * from './loadDesignTimeContributions';
 export * from './isNetworkAsset';
 export * from './PackageHostAssets';

package/dist/esm/packages/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../packages/index.ts"],"names":[],"mappings":"AAGA,cAAc,oBAAoB,CAAC;AACnC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,yBAAyB,CAAC;AACxC,cAAc,oBAAoB,CAAC;AACnC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,qBAAqB,CAAC;AACpC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,kCAAkC,CAAC;AACjD,cAAc,iCAAiC,CAAC;AAChD,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,eAAe,CAAC;AAC9B,cAAc,uBAAuB,CAAC;AACtC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,yBAAyB,CAAC;AACxC,cAAc,mBAAmB,CAAC;AAClC,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AACrC,cAAc,+BAA+B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../packages/index.ts"],"names":[],"mappings":"AAGA,cAAc,sBAAsB,CAAC;AACrC,cAAc,oBAAoB,CAAC;AACnC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,yBAAyB,CAAC;AACxC,cAAc,oBAAoB,CAAC;AACnC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,qBAAqB,CAAC;AACpC,cAAc,6BAA6B,CAAC;AAC5C,cAAc,4BAA4B,CAAC;AAC3C,cAAc,kCAAkC,CAAC;AACjD,cAAc,iCAAiC,CAAC;AAChD,cAAc,sBAAsB,CAAC;AACrC,cAAc,wBAAwB,CAAC;AACvC,cAAc,eAAe,CAAC;AAC9B,cAAc,uBAAuB,CAAC;AACtC,cAAc,wBAAwB,CAAC;AACvC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,yBAAyB,CAAC;AACxC,cAAc,mBAAmB,CAAC;AAClC,cAAc,yBAAyB,CAAC;AACxC,cAAc,uBAAuB,CAAC;AACtC,cAAc,sBAAsB,CAAC;AACrC,cAAc,yBAAyB,CAAC;AACxC,cAAc,sBAAsB,CAAC;AACrC,cAAc,+BAA+B,CAAC"}

package/dist/esm/packages/loadApprovedPackages.d.ts

@@ -0,0 +1,18 @@
+import { ApprovedPackageSet } from './ApprovedPackageSet';
+import { PackageHostConfiguration, ResolvedPackageHost } from './PackageHostConfiguration';
+import { ScenePackageBundle } from './ScenePackageBundle';
+export type ApprovedPackageImporters = Record<string, () => Promise<Record<string, unknown>>>;
+export interface LoadedApprovedPackages {
+    bundles: ScenePackageBundle[];
+    diagnostics: string[];
+}
+export declare function loadApprovedPackages(set: ApprovedPackageSet, importers: ApprovedPackageImporters, policy: {
+    allowExecutableImports: boolean;
+}): Promise<LoadedApprovedPackages>;
+export interface ApprovedPackageHostConfiguration extends Omit<PackageHostConfiguration, 'bundles'> {
+    bundles: ScenePackageBundle[];
+    packageSet: ApprovedPackageSet;
+    importers: ApprovedPackageImporters;
+}
+export declare function resolveApprovedPackageHost(configuration: ApprovedPackageHostConfiguration): Promise<ResolvedPackageHost>;
+//# sourceMappingURL=loadApprovedPackages.d.ts.map

package/dist/esm/packages/loadApprovedPackages.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loadApprovedPackages.d.ts","sourceRoot":"","sources":["../../../packages/loadApprovedPackages.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,wBAAwB,EAAE,mBAAmB,EAAsB,MAAM,4BAA4B,CAAC;AAC/G,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAS1D,MAAM,MAAM,wBAAwB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;AAG9F,MAAM,WAAW,sBAAsB;IAEnC,OAAO,EAAE,kBAAkB,EAAE,CAAC;IAG9B,WAAW,EAAE,MAAM,EAAE,CAAC;CACzB;AAWD,wBAAsB,oBAAoB,CACtC,GAAG,EAAE,kBAAkB,EACvB,SAAS,EAAE,wBAAwB,EACnC,MAAM,EAAE;IAAE,sBAAsB,EAAE,OAAO,CAAA;CAAE,GAC5C,OAAO,CAAC,sBAAsB,CAAC,CA0CjC;AAsBD,MAAM,WAAW,gCAAiC,SAAQ,IAAI,CAAC,wBAAwB,EAAE,SAAS,CAAC;IAE/F,OAAO,EAAE,kBAAkB,EAAE,CAAC;IAG9B,UAAU,EAAE,kBAAkB,CAAC;IAG/B,SAAS,EAAE,wBAAwB,CAAC;CACvC;AAOD,wBAAsB,0BAA0B,CAAC,aAAa,EAAE,gCAAgC,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAwB9H"}

package/dist/esm/packages/loadApprovedPackages.js

@@ -0,0 +1,119 @@
+import { resolvePackageHost } from './PackageHostConfiguration.js';
+
+// Copyright (c) Cratis. All rights reserved.
+// Licensed under the MIT license. See LICENSE file in the project root for full license information.
+/**
+ * Loads the runtime bundles of an approved package set through the host's importers.
+ *
+ * Nothing executes unless the host's policy allows executable imports. A package whose module cannot be imported,
+ * lacks its declared export, or whose bundle manifest differs from the declaration (name, version, components,
+ * layouts, templates, themes) contributes nothing and is reported - the declaration planning used and the code
+ * running must be the same package. Packages load in ordinal name order, so the result does not depend on the
+ * order the set was written in.
+ */ async function loadApprovedPackages(set, importers, policy) {
+    const bundles = [];
+    const diagnostics = [];
+    const ordered = [
+        ...set.packages
+    ].sort((a, b)=>a.manifest.name < b.manifest.name ? -1 : a.manifest.name > b.manifest.name ? 1 : 0);
+    for (const { manifest, module } of ordered){
+        const label = `Package '${manifest.name}'`;
+        if (!policy.allowExecutableImports) {
+            diagnostics.push(`${label} brings executable code from '${module.npm}', but host policy forbids executable imports`);
+            continue;
+        }
+        const importer = Object.prototype.hasOwnProperty.call(importers, module.npm) ? importers[module.npm] : undefined;
+        if (!importer) {
+            diagnostics.push(`${label} is imported from '${module.npm}', which this host's build does not include`);
+            continue;
+        }
+        let loaded;
+        try {
+            loaded = await importer();
+        } catch (error) {
+            diagnostics.push(`${label} could not be loaded from '${module.npm}': ${error instanceof Error ? error.message : String(error)}`);
+            continue;
+        }
+        const bundle = loaded[module.export];
+        if (!bundle || typeof bundle !== 'object' || !bundle.manifest || !bundle.components) {
+            diagnostics.push(`${label} expects '${module.npm}' to export a package bundle named '${module.export}', which it does not`);
+            continue;
+        }
+        const mismatches = declarationMismatches(manifest, bundle);
+        if (mismatches.length > 0) {
+            diagnostics.push(...mismatches.map((mismatch)=>`${label} does not match the bundle '${module.export}' of '${module.npm}': ${mismatch}`));
+            continue;
+        }
+        bundles.push(bundle);
+    }
+    return {
+        bundles,
+        diagnostics
+    };
+}
+function declarationMismatches(declared, bundle) {
+    const actual = bundle.manifest;
+    const mismatches = [];
+    if (actual.name !== declared.name) mismatches.push(`the bundle is named '${actual.name}'`);
+    if (actual.version !== declared.version) mismatches.push(`the set declares version ${declared.version} but the bundle is ${actual.version}`);
+    if (actual.kind !== declared.kind) mismatches.push(`the set declares kind ${declared.kind} but the bundle is ${actual.kind}`);
+    const lists = [
+        'components',
+        'layouts',
+        'screenTemplates',
+        'dialogTemplates',
+        'themes'
+    ];
+    for (const list of lists){
+        const expected = [
+            ...declared[list] ?? []
+        ].sort();
+        const found = [
+            ...actual[list] ?? []
+        ].sort();
+        if (expected.join('\u0000') !== found.join('\u0000')) {
+            mismatches.push(`the set declares ${list} [${expected.join(', ')}] but the bundle declares [${found.join(', ')}]`);
+        }
+    }
+    return mismatches;
+}
+/**
+ * Loads the approved package set and resolves the effective profile over the built-in and approved bundles in one
+ * step. Packages that failed to load are reported in the result's `diagnostics` and block the host, so a profile
+ * is never rendered with a silently missing package.
+ */ async function resolveApprovedPackageHost(configuration) {
+    const { packageSet, importers, ...rest } = configuration;
+    const loaded = await loadApprovedPackages(packageSet, importers, configuration.policy);
+    const host = resolvePackageHost({
+        ...rest,
+        bundles: [
+            ...configuration.bundles,
+            ...loaded.bundles
+        ]
+    });
+    if (loaded.diagnostics.length === 0) {
+        return host;
+    }
+    return {
+        ...host,
+        bundles: [],
+        components: {},
+        layouts: [],
+        screenTemplates: [],
+        dialogTemplates: [],
+        themes: [],
+        layout: undefined,
+        theme: undefined,
+        templates: [],
+        assets: [],
+        fonts: [],
+        blocked: true,
+        diagnostics: [
+            ...loaded.diagnostics,
+            ...host.diagnostics
+        ]
+    };
+}
+
+export { loadApprovedPackages, resolveApprovedPackageHost };
+//# sourceMappingURL=loadApprovedPackages.js.map

package/dist/esm/packages/loadApprovedPackages.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loadApprovedPackages.js","sources":["../../../packages/loadApprovedPackages.ts"],"sourcesContent":["// Copyright (c) Cratis. All rights reserved.\n// Licensed under the MIT license. See LICENSE file in the project root for full license information.\n\nimport { ApprovedPackageSet } from './ApprovedPackageSet';\nimport { PackageHostConfiguration, ResolvedPackageHost, resolvePackageHost } from './PackageHostConfiguration';\nimport { ScenePackageBundle } from './ScenePackageBundle';\n\n/**\n * How a host loads the modules of an approved package set: one loader per npm package name the set may import.\n *\n * A bundler resolves imports at build time, so the host lists them as literal `import()` calls\n * (`{ '@acme/scene.charts': () => import('@acme/scene.charts') }`). A set naming a module the host's build does\n * not include is a diagnostic, never an attempt to load an arbitrary specifier.\n */\nexport type ApprovedPackageImporters = Record<string, () => Promise<Record<string, unknown>>>;\n\n/** The outcome of loading an approved package set. */\nexport interface LoadedApprovedPackages {\n    /** The bundles that loaded and match what the set declared, in ordinal package-name order. */\n    bundles: ScenePackageBundle[];\n\n    /** Every reason a package was not loaded or does not match its declaration. */\n    diagnostics: string[];\n}\n\n/**\n * Loads the runtime bundles of an approved package set through the host's importers.\n *\n * Nothing executes unless the host's policy allows executable imports. A package whose module cannot be imported,\n * lacks its declared export, or whose bundle manifest differs from the declaration (name, version, components,\n * layouts, templates, themes) contributes nothing and is reported - the declaration planning used and the code\n * running must be the same package. Packages load in ordinal name order, so the result does not depend on the\n * order the set was written in.\n */\nexport async function loadApprovedPackages(\n    set: ApprovedPackageSet,\n    importers: ApprovedPackageImporters,\n    policy: { allowExecutableImports: boolean },\n): Promise<LoadedApprovedPackages> {\n    const bundles: ScenePackageBundle[] = [];\n    const diagnostics: string[] = [];\n    const ordered = [...set.packages].sort((a, b) => (a.manifest.name < b.manifest.name ? -1 : a.manifest.name > b.manifest.name ? 1 : 0));\n\n    for (const { manifest, module } of ordered) {\n        const label = `Package '${manifest.name}'`;\n        if (!policy.allowExecutableImports) {\n            diagnostics.push(`${label} brings executable code from '${module.npm}', but host policy forbids executable imports`);\n            continue;\n        }\n\n        const importer = Object.prototype.hasOwnProperty.call(importers, module.npm) ? importers[module.npm] : undefined;\n        if (!importer) {\n            diagnostics.push(`${label} is imported from '${module.npm}', which this host's build does not include`);\n            continue;\n        }\n\n        let loaded: Record<string, unknown>;\n        try {\n            loaded = await importer();\n        } catch (error) {\n            diagnostics.push(`${label} could not be loaded from '${module.npm}': ${error instanceof Error ? error.message : String(error)}`);\n            continue;\n        }\n\n        const bundle = loaded[module.export] as ScenePackageBundle | undefined;\n        if (!bundle || typeof bundle !== 'object' || !bundle.manifest || !bundle.components) {\n            diagnostics.push(`${label} expects '${module.npm}' to export a package bundle named '${module.export}', which it does not`);\n            continue;\n        }\n\n        const mismatches = declarationMismatches(manifest, bundle);\n        if (mismatches.length > 0) {\n            diagnostics.push(...mismatches.map(mismatch => `${label} does not match the bundle '${module.export}' of '${module.npm}': ${mismatch}`));\n            continue;\n        }\n\n        bundles.push(bundle);\n    }\n\n    return { bundles, diagnostics };\n}\n\nfunction declarationMismatches(declared: ApprovedPackageSet['packages'][number]['manifest'], bundle: ScenePackageBundle): string[] {\n    const actual = bundle.manifest;\n    const mismatches: string[] = [];\n    if (actual.name !== declared.name) mismatches.push(`the bundle is named '${actual.name}'`);\n    if (actual.version !== declared.version) mismatches.push(`the set declares version ${declared.version} but the bundle is ${actual.version}`);\n    if (actual.kind !== declared.kind) mismatches.push(`the set declares kind ${declared.kind} but the bundle is ${actual.kind}`);\n\n    const lists = ['components', 'layouts', 'screenTemplates', 'dialogTemplates', 'themes'] as const;\n    for (const list of lists) {\n        const expected = [...(declared[list] ?? [])].sort();\n        const found = [...(actual[list] ?? [])].sort();\n        if (expected.join('\\u0000') !== found.join('\\u0000')) {\n            mismatches.push(`the set declares ${list} [${expected.join(', ')}] but the bundle declares [${found.join(', ')}]`);\n        }\n    }\n\n    return mismatches;\n}\n\n/** An approved package set and the importers that load it, resolved together with the built-in bundles. */\nexport interface ApprovedPackageHostConfiguration extends Omit<PackageHostConfiguration, 'bundles'> {\n    /** The bundles the host ships. */\n    bundles: ScenePackageBundle[];\n\n    /** The custom packages the host approved. */\n    packageSet: ApprovedPackageSet;\n\n    /** The importers for the set's modules. */\n    importers: ApprovedPackageImporters;\n}\n\n/**\n * Loads the approved package set and resolves the effective profile over the built-in and approved bundles in one\n * step. Packages that failed to load are reported in the result's `diagnostics` and block the host, so a profile\n * is never rendered with a silently missing package.\n */\nexport async function resolveApprovedPackageHost(configuration: ApprovedPackageHostConfiguration): Promise<ResolvedPackageHost> {\n    const { packageSet, importers, ...rest } = configuration;\n    const loaded = await loadApprovedPackages(packageSet, importers, configuration.policy);\n    const host = resolvePackageHost({ ...rest, bundles: [...configuration.bundles, ...loaded.bundles] });\n    if (loaded.diagnostics.length === 0) {\n        return host;\n    }\n\n    return {\n        ...host,\n        bundles: [],\n        components: {},\n        layouts: [],\n        screenTemplates: [],\n        dialogTemplates: [],\n        themes: [],\n        layout: undefined,\n        theme: undefined,\n        templates: [],\n        assets: [],\n        fonts: [],\n        blocked: true,\n        diagnostics: [...loaded.diagnostics, ...host.diagnostics],\n    };\n}\n"],"names":["loadApprovedPackages","set","importers","policy","bundles","diagnostics","ordered","packages","sort","a","b","manifest","name","module","label","allowExecutableImports","push","npm","importer","Object","prototype","hasOwnProperty","call","undefined","loaded","error","Error","message","String","bundle","export","components","mismatches","declarationMismatches","length","map","mismatch","declared","actual","version","kind","lists","list","expected","found","join","resolveApprovedPackageHost","configuration","packageSet","rest","host","resolvePackageHost","layouts","screenTemplates","dialogTemplates","themes","layout","theme","templates","assets","fonts","blocked"],"mappings":";;AAAA;AACA;AAwBA;;;;;;;;AAQC,IACM,eAAeA,oBAAAA,CAClBC,GAAuB,EACvBC,SAAmC,EACnCC,MAA2C,EAAA;AAE3C,IAAA,MAAMC,UAAgC,EAAE;AACxC,IAAA,MAAMC,cAAwB,EAAE;AAChC,IAAA,MAAMC,OAAAA,GAAU;AAAIL,QAAAA,GAAAA,GAAAA,CAAIM;KAAS,CAACC,IAAI,CAAC,CAACC,CAAAA,EAAGC,CAAAA,GAAOD,CAAAA,CAAEE,QAAQ,CAACC,IAAI,GAAGF,CAAAA,CAAEC,QAAQ,CAACC,IAAI,GAAG,EAAC,GAAIH,CAAAA,CAAEE,QAAQ,CAACC,IAAI,GAAGF,CAAAA,CAAEC,QAAQ,CAACC,IAAI,GAAG,CAAA,GAAI,CAAA,CAAA;AAEnI,IAAA,KAAK,MAAM,EAAED,QAAQ,EAAEE,MAAM,EAAE,IAAIP,OAAAA,CAAS;QACxC,MAAMQ,KAAAA,GAAQ,CAAC,SAAS,EAAEH,SAASC,IAAI,CAAC,CAAC,CAAC;QAC1C,IAAI,CAACT,MAAAA,CAAOY,sBAAsB,EAAE;YAChCV,WAAAA,CAAYW,IAAI,CAAC,CAAA,EAAGF,KAAAA,CAAM,8BAA8B,EAAED,MAAAA,CAAOI,GAAG,CAAC,6CAA6C,CAAC,CAAA;AACnH,YAAA;AACJ,QAAA;AAEA,QAAA,MAAMC,WAAWC,MAAAA,CAAOC,SAAS,CAACC,cAAc,CAACC,IAAI,CAACpB,SAAAA,EAAWW,MAAAA,CAAOI,GAAG,CAAA,GAAIf,SAAS,CAACW,MAAAA,CAAOI,GAAG,CAAC,GAAGM,SAAAA;AACvG,QAAA,IAAI,CAACL,QAAAA,EAAU;YACXb,WAAAA,CAAYW,IAAI,CAAC,CAAA,EAAGF,KAAAA,CAAM,mBAAmB,EAAED,MAAAA,CAAOI,GAAG,CAAC,2CAA2C,CAAC,CAAA;AACtG,YAAA;AACJ,QAAA;QAEA,IAAIO,MAAAA;QACJ,IAAI;AACAA,YAAAA,MAAAA,GAAS,MAAMN,QAAAA,EAAAA;AACnB,QAAA,CAAA,CAAE,OAAOO,KAAAA,EAAO;AACZpB,YAAAA,WAAAA,CAAYW,IAAI,CAAC,CAAA,EAAGF,KAAAA,CAAM,2BAA2B,EAAED,MAAAA,CAAOI,GAAG,CAAC,GAAG,EAAEQ,KAAAA,YAAiBC,KAAAA,GAAQD,MAAME,OAAO,GAAGC,OAAOH,KAAAA,CAAAA,CAAAA,CAAQ,CAAA;AAC/H,YAAA;AACJ,QAAA;AAEA,QAAA,MAAMI,MAAAA,GAASL,MAAM,CAACX,MAAAA,CAAOiB,MAAM,CAAC;AACpC,QAAA,IAAI,CAACD,MAAAA,IAAU,OAAOA,MAAAA,KAAW,QAAA,IAAY,CAACA,MAAAA,CAAOlB,QAAQ,IAAI,CAACkB,MAAAA,CAAOE,UAAU,EAAE;AACjF1B,YAAAA,WAAAA,CAAYW,IAAI,CAAC,CAAA,EAAGF,KAAAA,CAAM,UAAU,EAAED,MAAAA,CAAOI,GAAG,CAAC,oCAAoC,EAAEJ,MAAAA,CAAOiB,MAAM,CAAC,oBAAoB,CAAC,CAAA;AAC1H,YAAA;AACJ,QAAA;QAEA,MAAME,UAAAA,GAAaC,sBAAsBtB,QAAAA,EAAUkB,MAAAA,CAAAA;QACnD,IAAIG,UAAAA,CAAWE,MAAM,GAAG,CAAA,EAAG;YACvB7B,WAAAA,CAAYW,IAAI,IAAIgB,UAAAA,CAAWG,GAAG,CAACC,CAAAA,QAAAA,GAAY,GAAGtB,KAAAA,CAAM,4BAA4B,EAAED,MAAAA,CAAOiB,MAAM,CAAC,MAAM,EAAEjB,OAAOI,GAAG,CAAC,GAAG,EAAEmB,QAAAA,CAAAA,CAAU,CAAA,CAAA;AACtI,YAAA;AACJ,QAAA;AAEAhC,QAAAA,OAAAA,CAAQY,IAAI,CAACa,MAAAA,CAAAA;AACjB,IAAA;IAEA,OAAO;AAAEzB,QAAAA,OAAAA;AAASC,QAAAA;AAAY,KAAA;AAClC;AAEA,SAAS4B,qBAAAA,CAAsBI,QAA4D,EAAER,MAA0B,EAAA;IACnH,MAAMS,MAAAA,GAAST,OAAOlB,QAAQ;AAC9B,IAAA,MAAMqB,aAAuB,EAAE;AAC/B,IAAA,IAAIM,OAAO1B,IAAI,KAAKyB,QAAAA,CAASzB,IAAI,EAAEoB,UAAAA,CAAWhB,IAAI,CAAC,CAAC,qBAAqB,EAAEsB,MAAAA,CAAO1B,IAAI,CAAC,CAAC,CAAC,CAAA;AACzF,IAAA,IAAI0B,OAAOC,OAAO,KAAKF,SAASE,OAAO,EAAEP,WAAWhB,IAAI,CAAC,CAAC,yBAAyB,EAAEqB,SAASE,OAAO,CAAC,mBAAmB,EAAED,MAAAA,CAAOC,OAAO,CAAA,CAAE,CAAA;AAC3I,IAAA,IAAID,OAAOE,IAAI,KAAKH,SAASG,IAAI,EAAER,WAAWhB,IAAI,CAAC,CAAC,sBAAsB,EAAEqB,SAASG,IAAI,CAAC,mBAAmB,EAAEF,MAAAA,CAAOE,IAAI,CAAA,CAAE,CAAA;AAE5H,IAAA,MAAMC,KAAAA,GAAQ;AAAC,QAAA,YAAA;AAAc,QAAA,SAAA;AAAW,QAAA,iBAAA;AAAmB,QAAA,iBAAA;AAAmB,QAAA;AAAS,KAAA;IACvF,KAAK,MAAMC,QAAQD,KAAAA,CAAO;AACtB,QAAA,MAAME,QAAAA,GAAW;eAAKN,QAAQ,CAACK,IAAAA,CAAK,IAAI;AAAI,SAAA,CAAClC,IAAI,EAAA;AACjD,QAAA,MAAMoC,KAAAA,GAAQ;eAAKN,MAAM,CAACI,IAAAA,CAAK,IAAI;AAAI,SAAA,CAAClC,IAAI,EAAA;AAC5C,QAAA,IAAImC,SAASE,IAAI,CAAC,cAAcD,KAAAA,CAAMC,IAAI,CAAC,QAAA,CAAA,EAAW;AAClDb,YAAAA,UAAAA,CAAWhB,IAAI,CAAC,CAAC,iBAAiB,EAAE0B,IAAAA,CAAK,EAAE,EAAEC,QAAAA,CAASE,IAAI,CAAC,IAAA,CAAA,CAAM,2BAA2B,EAAED,KAAAA,CAAMC,IAAI,CAAC,IAAA,CAAA,CAAM,CAAC,CAAC,CAAA;AACrH,QAAA;AACJ,IAAA;IAEA,OAAOb,UAAAA;AACX;AAcA;;;;IAKO,eAAec,0BAAAA,CAA2BC,aAA+C,EAAA;AAC5F,IAAA,MAAM,EAAEC,UAAU,EAAE9C,SAAS,EAAE,GAAG+C,MAAM,GAAGF,aAAAA;AAC3C,IAAA,MAAMvB,SAAS,MAAMxB,oBAAAA,CAAqBgD,UAAAA,EAAY9C,SAAAA,EAAW6C,cAAc5C,MAAM,CAAA;AACrF,IAAA,MAAM+C,OAAOC,kBAAAA,CAAmB;AAAE,QAAA,GAAGF,IAAI;QAAE7C,OAAAA,EAAS;AAAI2C,YAAAA,GAAAA,aAAAA,CAAc3C,OAAO;AAAKoB,YAAAA,GAAAA,MAAAA,CAAOpB;AAAQ;AAAC,KAAA,CAAA;AAClG,IAAA,IAAIoB,MAAAA,CAAOnB,WAAW,CAAC6B,MAAM,KAAK,CAAA,EAAG;QACjC,OAAOgB,IAAAA;AACX,IAAA;IAEA,OAAO;AACH,QAAA,GAAGA,IAAI;AACP9C,QAAAA,OAAAA,EAAS,EAAE;AACX2B,QAAAA,UAAAA,EAAY,EAAC;AACbqB,QAAAA,OAAAA,EAAS,EAAE;AACXC,QAAAA,eAAAA,EAAiB,EAAE;AACnBC,QAAAA,eAAAA,EAAiB,EAAE;AACnBC,QAAAA,MAAAA,EAAQ,EAAE;QACVC,MAAAA,EAAQjC,SAAAA;QACRkC,KAAAA,EAAOlC,SAAAA;AACPmC,QAAAA,SAAAA,EAAW,EAAE;AACbC,QAAAA,MAAAA,EAAQ,EAAE;AACVC,QAAAA,KAAAA,EAAO,EAAE;QACTC,OAAAA,EAAS,IAAA;QACTxD,WAAAA,EAAa;AAAImB,YAAAA,GAAAA,MAAAA,CAAOnB,WAAW;AAAK6C,YAAAA,GAAAA,IAAAA,CAAK7C;AAAY;AAC7D,KAAA;AACJ;;"}