@dp-bohrium/widget-contracts 0.0.1

package/conformance/host-runtime-config/invalid-missing-manifest-fields.json

@@ -0,0 +1,55 @@
+{
+  "schemaVersion": 1,
+  "hostApiVersion": 1,
+  "configId": "config-invalid",
+  "runId": "run-invalid",
+  "mode": "preview",
+  "issuedAt": "2026-09-03T10:00:00Z",
+  "expiresAt": "2026-09-03T10:01:00Z",
+  "recheckAt": "2026-09-03T10:00:30Z",
+  "securityProfile": "runtime-security-profile-v1",
+  "resourceBudget": {
+    "version": 1,
+    "bundle": { "compressedBytes": 1, "expandedBytes": 1, "fileCount": 1, "singleFileBytes": 1 },
+    "bridge": { "messageBytes": 1, "messagesPerSecond": 1, "pendingRequests": 1 },
+    "files": { "readBytesPerRequest": 1, "readBytesPerRun": 1, "callsPerMinute": 1, "listPageSize": 1 },
+    "timeouts": { "bundleLoadMs": 1, "handshakeMs": 1, "firstRenderMs": 1, "updateMs": 1, "capabilityMs": 1, "disposeGraceMs": 1 },
+    "concurrency": { "activeIframesPerPage": 1, "activeIframesPerRun": 1, "hiddenRecycleMs": 1 },
+    "retry": { "maxAttempts": 1, "initialDelayMs": 1, "maxDelayMs": 1, "totalMs": 1 },
+    "failure": { "consecutiveFailures": 1, "windowMs": 1 }
+  },
+  "runtime": { "origin": "https://widgets.example.test", "catalogRevision": "catalog-1" },
+  "network": {
+    "mode": "runtime-consent",
+    "policyVersion": "network-policy-1",
+    "limits": {
+      "timeoutMs": 10000,
+      "maxRedirects": 5,
+      "maxConcurrentRequests": 4,
+      "callsPerMinute": 60,
+      "requestHeaderBytes": 16384,
+      "responseHeaderBytes": 32768,
+      "requestBodyBytes": 1048576,
+      "responseBodyBytes": 8388608
+    }
+  },
+  "bindings": [
+    {
+      "status": "loadable",
+      "bindingId": "binding-invalid",
+      "widgetId": "widget-invalid",
+      "widgetVersionId": "widget-version-invalid",
+      "digest": "sha256:0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef",
+      "manifest": {
+        "name": "Incomplete manifest",
+        "widgetConfig": {
+          "entry": "entry.js",
+          "widgetSdkVersion": "0.0.1",
+          "slot": { "type": "panel", "panelType": "analysis-summary" }
+        }
+      },
+      "launch": { "url": "https://widgets.example.test/launch/one-time", "expiresAt": "2026-09-03T10:01:00Z" },
+      "grantedCapabilities": []
+    }
+  ]
+}

package/conformance/host-runtime-config/invalid-static-origins.json

@@ -0,0 +1,60 @@
+{
+  "schemaVersion": 1,
+  "hostApiVersion": 1,
+  "configId": "config-static-origins",
+  "runId": "run-static-origins",
+  "mode": "preview",
+  "issuedAt": "2026-09-11T10:00:00Z",
+  "expiresAt": "2026-09-11T10:01:00Z",
+  "recheckAt": "2026-09-11T10:00:30Z",
+  "securityProfile": "runtime-security-profile-v1",
+  "resourceBudget": {
+    "version": 1,
+    "bundle": { "compressedBytes": 1, "expandedBytes": 1, "fileCount": 1, "singleFileBytes": 1 },
+    "bridge": { "messageBytes": 1, "messagesPerSecond": 1, "pendingRequests": 1 },
+    "files": { "readBytesPerRequest": 1, "readBytesPerRun": 1, "callsPerMinute": 1, "listPageSize": 1 },
+    "timeouts": { "bundleLoadMs": 1, "handshakeMs": 1, "firstRenderMs": 1, "updateMs": 1, "capabilityMs": 1, "disposeGraceMs": 1 },
+    "concurrency": { "activeIframesPerPage": 1, "activeIframesPerRun": 1, "hiddenRecycleMs": 1 },
+    "retry": { "maxAttempts": 1, "initialDelayMs": 1, "maxDelayMs": 1, "totalMs": 1 },
+    "failure": { "consecutiveFailures": 1, "windowMs": 1 }
+  },
+  "runtime": { "origin": "https://widgets.example.test", "catalogRevision": "catalog-1" },
+  "network": {
+    "mode": "runtime-consent",
+    "policyVersion": "network-policy-1",
+    "limits": {
+      "timeoutMs": 10000,
+      "maxRedirects": 5,
+      "maxConcurrentRequests": 4,
+      "callsPerMinute": 60,
+      "requestHeaderBytes": 16384,
+      "responseHeaderBytes": 32768,
+      "requestBodyBytes": 1048576,
+      "responseBodyBytes": 8388608
+    }
+  },
+  "bindings": [
+    {
+      "status": "loadable",
+      "bindingId": "binding-static",
+      "widgetId": "widget-static",
+      "widgetVersionId": "widget-static-version",
+      "digest": "sha256:0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef",
+      "manifest": {
+        "name": "Static Origins",
+        "widgetConfig": {
+          "schemaVersion": 1,
+          "hostApiVersion": 1,
+          "widgetSdkVersion": "0.0.1",
+          "entry": "entry.js",
+          "slot": { "type": "panel", "panelType": "static-origins" },
+          "outboundOrigins": ["https://api.example.test"],
+          "samples": [{ "id": "normal", "title": "Normal", "request": "samples/panel.json" }]
+        }
+      },
+      "launch": { "url": "https://widgets.example.test/launch/one-time", "expiresAt": "2026-09-11T10:01:00Z" },
+      "grantedCapabilities": [],
+      "grantedOutboundOrigins": ["https://api.example.test"]
+    }
+  ]
+}

package/conformance/host-runtime-config/valid.json

@@ -0,0 +1,85 @@
+{
+  "schemaVersion": 1,
+  "hostApiVersion": 1,
+  "configId": "config-1",
+  "runId": "run-1",
+  "mode": "preview",
+  "issuedAt": "2026-09-03T10:00:00Z",
+  "expiresAt": "2026-09-03T10:01:00Z",
+  "recheckAt": "2026-09-03T10:00:30Z",
+  "securityProfile": "runtime-security-profile-v1",
+  "resourceBudget": {
+    "version": 1,
+    "bundle": { "compressedBytes": 1, "expandedBytes": 1, "fileCount": 1, "singleFileBytes": 1 },
+    "bridge": { "messageBytes": 1, "messagesPerSecond": 1, "pendingRequests": 1 },
+    "files": { "readBytesPerRequest": 1, "readBytesPerRun": 1, "callsPerMinute": 1, "listPageSize": 1 },
+    "timeouts": { "bundleLoadMs": 1, "handshakeMs": 1, "firstRenderMs": 1, "updateMs": 1, "capabilityMs": 1, "disposeGraceMs": 1 },
+    "concurrency": { "activeIframesPerPage": 1, "activeIframesPerRun": 1, "hiddenRecycleMs": 1 },
+    "retry": { "maxAttempts": 1, "initialDelayMs": 1, "maxDelayMs": 1, "totalMs": 1 },
+    "failure": { "consecutiveFailures": 1, "windowMs": 1 }
+  },
+  "runtime": {
+    "origin": "https://widgets.example.test",
+    "catalogRevision": "catalog-2026-09-11.1"
+  },
+  "network": {
+    "mode": "runtime-consent",
+    "policyVersion": "network-policy-v1",
+    "limits": {
+      "timeoutMs": 10000,
+      "maxRedirects": 5,
+      "maxConcurrentRequests": 4,
+      "callsPerMinute": 60,
+      "requestHeaderBytes": 16384,
+      "responseHeaderBytes": 32768,
+      "requestBodyBytes": 1048576,
+      "responseBodyBytes": 8388608
+    }
+  },
+  "bindings": [
+    {
+      "status": "loadable",
+      "bindingId": "binding-1",
+      "widgetId": "widget-1",
+      "widgetVersionId": "widget-version-1",
+      "digest": "sha256:0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef",
+      "manifest": {
+        "name": "Analysis Summary",
+        "description": "A complete manifest.",
+        "widgetConfig": {
+          "schemaVersion": 1,
+          "hostApiVersion": 1,
+          "widgetSdkVersion": "0.0.1",
+          "entry": "entry.js",
+          "slot": { "type": "panel", "panelType": "analysis-summary" },
+          "requestedCapabilities": { "network": { "fetch": true } },
+          "samples": [{ "id": "normal", "title": "Normal", "request": "samples/panel.json" }]
+        }
+      },
+      "launch": { "url": "https://widgets.example.test/launch/one-time", "expiresAt": "2026-09-03T10:01:00Z" },
+      "grantedCapabilities": [
+        {
+          "name": "network.fetch",
+          "limits": {
+            "timeoutMs": 10000,
+            "maxRedirects": 5,
+            "maxConcurrentRequests": 4,
+            "callsPerMinute": 60,
+            "requestHeaderBytes": 16384,
+            "responseHeaderBytes": 32768,
+            "requestBodyBytes": 1048576,
+            "responseBodyBytes": 8388608
+          }
+        }
+      ]
+    },
+    {
+      "status": "fallback",
+      "bindingId": "binding-2",
+      "widgetId": "widget-2",
+      "widgetVersionId": "widget-version-2",
+      "slot": { "type": "file-preview", "extensions": ["cif"] },
+      "reason": "not-approved"
+    }
+  ]
+}

package/conformance/invalid-bridge-messages/network-fetch-mixed-case-forbidden-header.json

@@ -0,0 +1,21 @@
+{
+  "protocolVersion": 1,
+  "channelId": "0123456789abcdef0123456789abcdef",
+  "messageId": "widget-network-invalid-header-1",
+  "sequence": 4,
+  "type": "capability-request",
+  "payload": {
+    "requestId": "network-invalid-header-1",
+    "request": {
+      "operation": "network.fetch",
+      "input": {
+        "url": "https://api.example.test/private",
+        "auth": "required",
+        "method": "GET",
+        "headers": {
+          "pRoXy-AuThOrIzAtIoN": "must-stay-host-private"
+        }
+      }
+    }
+  }
+}

package/conformance/invalid-manifests/missing-target.json

@@ -0,0 +1,11 @@
+{
+  "name": "Missing target",
+  "widgetConfig": {
+    "schemaVersion": 1,
+    "hostApiVersion": 1,
+    "widgetSdkVersion": "0.0.1",
+    "entry": "dist/widget.js",
+    "slot": { "type": "tool-result" },
+    "samples": [{ "id": "normal", "title": "Normal", "request": "samples/normal.json" }]
+  }
+}

package/conformance/invalid-manifests/presentation-duplicate-surfaces.json

@@ -0,0 +1,16 @@
+{
+  "name": "Invalid duplicate presentation surfaces",
+  "widgetConfig": {
+    "schemaVersion": 1,
+    "hostApiVersion": 1,
+    "widgetSdkVersion": "0.0.1",
+    "entry": "dist/widget.js",
+    "slot": { "type": "panel", "panelType": "sciforge-research" },
+    "requestedCapabilities": {
+      "presentation": { "surfaces": ["floating", "floating"] }
+    },
+    "samples": [
+      { "id": "normal", "title": "Panel", "request": "samples/panel.json" }
+    ]
+  }
+}

package/conformance/invalid-manifests/presentation-empty-surfaces.json

@@ -0,0 +1,14 @@
+{
+  "name": "Invalid empty presentation surfaces",
+  "widgetConfig": {
+    "schemaVersion": 1,
+    "hostApiVersion": 1,
+    "widgetSdkVersion": "0.0.1",
+    "entry": "dist/widget.js",
+    "slot": { "type": "panel", "panelType": "sciforge-research" },
+    "requestedCapabilities": { "presentation": { "surfaces": [] } },
+    "samples": [
+      { "id": "normal", "title": "Panel", "request": "samples/panel.json" }
+    ]
+  }
+}

package/conformance/invalid-manifests/presentation-unknown-surface.json

@@ -0,0 +1,16 @@
+{
+  "name": "Invalid unknown presentation surface",
+  "widgetConfig": {
+    "schemaVersion": 1,
+    "hostApiVersion": 1,
+    "widgetSdkVersion": "0.0.1",
+    "entry": "dist/widget.js",
+    "slot": { "type": "panel", "panelType": "sciforge-research" },
+    "requestedCapabilities": {
+      "presentation": { "surfaces": ["popover"] }
+    },
+    "samples": [
+      { "id": "normal", "title": "Panel", "request": "samples/panel.json" }
+    ]
+  }
+}

package/conformance/invalid-manifests/unknown-field.json

@@ -0,0 +1,12 @@
+{
+  "name": "Unknown field",
+  "widgetConfig": {
+    "schemaVersion": 1,
+    "hostApiVersion": 1,
+    "widgetSdkVersion": "0.0.1",
+    "entry": "dist/widget.js",
+    "slot": { "type": "panel", "panelType": "analysis-summary" },
+    "samples": [{ "id": "normal", "title": "Normal", "request": "samples/normal.json" }],
+    "internalToken": "must-not-be-accepted"
+  }
+}

package/conformance/invalid-network-requests/mixed-case-forbidden-header.json

@@ -0,0 +1,11 @@
+{
+  "operation": "network.fetch",
+  "input": {
+    "url": "https://api.example.test/private",
+    "auth": "optional",
+    "method": "GET",
+    "headers": {
+      "x-aPi-kEy": "must-stay-host-private"
+    }
+  }
+}

package/conformance/invalid-presentation-grants/duplicate-surfaces.json

@@ -0,0 +1,5 @@
+{
+  "name": "ui.presentation",
+  "surfaces": ["floating", "floating"],
+  "requiresHostConfirmation": true
+}

package/conformance/invalid-presentation-grants/empty-surfaces.json

@@ -0,0 +1,5 @@
+{
+  "name": "ui.presentation",
+  "surfaces": [],
+  "requiresHostConfirmation": true
+}

package/conformance/invalid-presentation-grants/false-confirmation.json

@@ -0,0 +1,5 @@
+{
+  "name": "ui.presentation",
+  "surfaces": ["floating"],
+  "requiresHostConfirmation": false
+}

package/conformance/invalid-presentation-grants/missing-confirmation.json

@@ -0,0 +1,4 @@
+{
+  "name": "ui.presentation",
+  "surfaces": ["floating"]
+}

package/conformance/invalid-presentation-grants/unknown-surface.json

@@ -0,0 +1,5 @@
+{
+  "name": "ui.presentation",
+  "surfaces": ["popover"],
+  "requiresHostConfirmation": true
+}

package/conformance/invalid-presentation-requests/change-surface-missing-surface.json

@@ -0,0 +1,4 @@
+{
+  "operation": "ui.presentation",
+  "input": { "action": "change-surface" }
+}

package/conformance/invalid-presentation-requests/close-with-surface.json

@@ -0,0 +1,4 @@
+{
+  "operation": "ui.presentation",
+  "input": { "action": "close", "surface": "workspace" }
+}

package/conformance/invalid-presentation-requests/focus-boundary-missing-direction.json

@@ -0,0 +1,4 @@
+{
+  "operation": "ui.presentation",
+  "input": { "action": "focus-boundary" }
+}

package/conformance/invalid-presentation-requests/focus-boundary-unknown-direction.json

@@ -0,0 +1,4 @@
+{
+  "operation": "ui.presentation",
+  "input": { "action": "focus-boundary", "direction": "sideways" }
+}

package/conformance/invalid-presentation-requests/focus-boundary-with-coordinates.json

@@ -0,0 +1,9 @@
+{
+  "operation": "ui.presentation",
+  "input": {
+    "action": "focus-boundary",
+    "direction": "forward",
+    "x": 10,
+    "y": 20
+  }
+}

package/conformance/invalid-presentation-requests/focus-boundary-with-event-provenance.json

@@ -0,0 +1,8 @@
+{
+  "operation": "ui.presentation",
+  "input": {
+    "action": "focus-boundary",
+    "direction": "forward",
+    "isTrusted": true
+  }
+}

package/conformance/invalid-presentation-requests/focus-boundary-with-generation.json

@@ -0,0 +1,8 @@
+{
+  "operation": "ui.presentation",
+  "input": {
+    "action": "focus-boundary",
+    "direction": "forward",
+    "runtimeGeneration": "generation-1"
+  }
+}

package/conformance/invalid-presentation-requests/focus-boundary-with-identity.json

@@ -0,0 +1,12 @@
+{
+  "operation": "ui.presentation",
+  "input": {
+    "action": "focus-boundary",
+    "direction": "forward",
+    "principal": "user-1",
+    "runId": "run-1",
+    "widgetId": "widget-1",
+    "widgetVersionId": "widget-version-1",
+    "instanceId": "instance-1"
+  }
+}

package/conformance/invalid-presentation-requests/focus-boundary-with-key.json

@@ -0,0 +1,8 @@
+{
+  "operation": "ui.presentation",
+  "input": {
+    "action": "focus-boundary",
+    "direction": "forward",
+    "key": "Escape"
+  }
+}

package/conformance/invalid-presentation-requests/focus-boundary-with-modifiers.json

@@ -0,0 +1,11 @@
+{
+  "operation": "ui.presentation",
+  "input": {
+    "action": "focus-boundary",
+    "direction": "backward",
+    "altKey": false,
+    "ctrlKey": false,
+    "metaKey": false,
+    "shiftKey": true
+  }
+}

package/conformance/invalid-presentation-requests/focus-boundary-with-selector.json

@@ -0,0 +1,8 @@
+{
+  "operation": "ui.presentation",
+  "input": {
+    "action": "focus-boundary",
+    "direction": "forward",
+    "selector": "#host-secret"
+  }
+}

package/conformance/invalid-presentation-requests/focus-boundary-with-surface.json

@@ -0,0 +1,8 @@
+{
+  "operation": "ui.presentation",
+  "input": {
+    "action": "focus-boundary",
+    "direction": "forward",
+    "surface": "overlay"
+  }
+}

package/conformance/invalid-presentation-requests/focus-boundary-with-target.json

@@ -0,0 +1,8 @@
+{
+  "operation": "ui.presentation",
+  "input": {
+    "action": "focus-boundary",
+    "direction": "forward",
+    "target": "panel-2"
+  }
+}

package/conformance/invalid-presentation-requests/focus-boundary-with-timestamp.json

@@ -0,0 +1,8 @@
+{
+  "operation": "ui.presentation",
+  "input": {
+    "action": "focus-boundary",
+    "direction": "forward",
+    "timestamp": 1234
+  }
+}

package/conformance/invalid-presentation-requests/focus-boundary-with-z-index.json

@@ -0,0 +1,8 @@
+{
+  "operation": "ui.presentation",
+  "input": {
+    "action": "focus-boundary",
+    "direction": "forward",
+    "zIndex": 9999
+  }
+}

package/conformance/invalid-presentation-requests/present-missing-surface.json

@@ -0,0 +1,4 @@
+{
+  "operation": "ui.presentation",
+  "input": { "action": "present" }
+}

package/conformance/invalid-presentation-requests/unknown-surface.json

@@ -0,0 +1,4 @@
+{
+  "operation": "ui.presentation",
+  "input": { "action": "present", "surface": "popover" }
+}

package/conformance/invalid-presentation-requests/widget-controls-coordinates.json

@@ -0,0 +1,9 @@
+{
+  "operation": "ui.presentation",
+  "input": {
+    "action": "present",
+    "surface": "floating",
+    "x": 120,
+    "y": 80
+  }
+}

package/conformance/invalid-presentation-requests/widget-controls-geometry.json

@@ -0,0 +1,8 @@
+{
+  "operation": "ui.presentation",
+  "input": {
+    "action": "present",
+    "surface": "floating",
+    "geometry": { "x": 120, "y": 80, "width": 640, "height": 480 }
+  }
+}

package/conformance/invalid-presentation-requests/widget-controls-instance-id.json

@@ -0,0 +1,8 @@
+{
+  "operation": "ui.presentation",
+  "input": {
+    "action": "present",
+    "surface": "floating",
+    "instanceId": "instance-1"
+  }
+}

package/conformance/invalid-presentation-requests/widget-controls-principal.json

@@ -0,0 +1,8 @@
+{
+  "operation": "ui.presentation",
+  "input": {
+    "action": "present",
+    "surface": "floating",
+    "principal": "user-1"
+  }
+}

package/conformance/invalid-presentation-requests/widget-controls-run-id.json

@@ -0,0 +1,4 @@
+{
+  "operation": "ui.presentation",
+  "input": { "action": "present", "surface": "floating", "runId": "run-1" }
+}

package/conformance/invalid-presentation-requests/widget-controls-widget-id.json

@@ -0,0 +1,8 @@
+{
+  "operation": "ui.presentation",
+  "input": {
+    "action": "present",
+    "surface": "floating",
+    "widgetId": "widget-1"
+  }
+}

package/conformance/invalid-presentation-requests/widget-controls-widget-version-id.json

@@ -0,0 +1,8 @@
+{
+  "operation": "ui.presentation",
+  "input": {
+    "action": "present",
+    "surface": "floating",
+    "widgetVersionId": "widget-version-1"
+  }
+}

package/conformance/invalid-presentation-requests/widget-controls-z-index.json

@@ -0,0 +1,4 @@
+{
+  "operation": "ui.presentation",
+  "input": { "action": "present", "surface": "floating", "zIndex": 9999 }
+}

package/conformance/invalid-render-inputs/malformed.json

@@ -0,0 +1,17 @@
+{
+  "schemaVersion": 1,
+  "requestId": "request-malformed-1",
+  "instanceId": "instance-malformed-1",
+  "revision": 1,
+  "slot": "panel",
+  "state": "complete",
+  "content": {
+    "slot": "tool-result",
+    "tool": {
+      "name": "literature__search",
+      "callId": "call-malformed-1",
+      "status": "succeeded"
+    },
+    "input": {}
+  }
+}

package/conformance/manifests/valid-file-preview.json

@@ -0,0 +1,12 @@
+{
+  "name": "Structure Preview",
+  "widgetConfig": {
+    "schemaVersion": 1,
+    "hostApiVersion": 1,
+    "widgetSdkVersion": "0.0.1",
+    "entry": "dist/widget.js",
+    "slot": { "type": "file-preview", "extensions": ["cif", "xyz"] },
+    "requestedCapabilities": { "files": { "metadata": true, "read": true } },
+    "samples": [{ "id": "normal", "title": "CIF file", "request": "samples/file-preview.json" }]
+  }
+}

package/conformance/manifests/valid-network.json

@@ -0,0 +1,15 @@
+{
+  "name": "Network Analysis",
+  "description": "A Host-mediated network Widget.",
+  "widgetConfig": {
+    "schemaVersion": 1,
+    "hostApiVersion": 1,
+    "widgetSdkVersion": "0.0.1",
+    "entry": "entry.js",
+    "slot": { "type": "panel", "panelType": "network-analysis" },
+    "requestedCapabilities": { "network": { "fetch": true } },
+    "samples": [
+      { "id": "normal", "title": "Normal", "request": "samples/panel.json" }
+    ]
+  }
+}

package/conformance/manifests/valid-panel.json

@@ -0,0 +1,11 @@
+{
+  "name": "Analysis Summary",
+  "widgetConfig": {
+    "schemaVersion": 1,
+    "hostApiVersion": 1,
+    "widgetSdkVersion": "0.0.1",
+    "entry": "dist/widget.js",
+    "slot": { "type": "panel", "panelType": "analysis-summary" },
+    "samples": [{ "id": "normal", "title": "Summary", "request": "samples/panel.json" }]
+  }
+}