@dp-bohrium/widget-sdk 0.4.1 → 0.6.0

package/conformance/file-responses/read-unversioned-range.json

@@ -0,0 +1,12 @@
+{
+  "ok": true,
+  "data": {
+    "content": "sim",
+    "encoding": "utf8",
+    "offset": 0,
+    "bytesRead": 3,
+    "nextOffset": 3,
+    "eof": false,
+    "truncated": true
+  }
+}

package/conformance/file-responses/read-versioned.json

@@ -0,0 +1,12 @@
+{
+  "ok": true,
+  "data": {
+    "content": "1\n\nH 0 0 0\n",
+    "encoding": "utf8",
+    "offset": 0,
+    "bytesRead": 11,
+    "nextOffset": 11,
+    "eof": true,
+    "revision": "rev-1"
+  }
+}

package/conformance/file-responses/resource-limit.json

@@ -0,0 +1 @@
+{"ok":false,"reason":"resource-limit","message":"request exceeds the file read budget","retryable":false}

package/conformance/file-responses/revision-conflict.json

@@ -0,0 +1,6 @@
+{
+  "ok": false,
+  "reason": "revision-conflict",
+  "message": "Host could not confirm this file operation",
+  "retryable": false
+}

package/conformance/file-responses/text-content.json

@@ -0,0 +1,7 @@
+{
+  "ok": true,
+  "data": {
+    "content": "simulation complete",
+    "encoding": "utf8"
+  }
+}

package/conformance/file-responses/write-outcome-unknown.json

@@ -0,0 +1,6 @@
+{
+  "ok": false,
+  "reason": "write-outcome-unknown",
+  "message": "Host could not confirm this file operation",
+  "retryable": false
+}

package/conformance/file-responses/write-success.json

@@ -0,0 +1,15 @@
+{
+  "ok": true,
+  "data": {
+    "file": {
+      "id": "file-001",
+      "kind": "file",
+      "name": "structure.xyz",
+      "revision": "rev-2",
+      "size": 11
+    },
+    "revision": "rev-2",
+    "bytesWritten": 11,
+    "mutationId": "save-001"
+  }
+}

package/conformance/host-runtime-config/invalid-host-service-expiry.json

@@ -0,0 +1,85 @@
+{
+  "schemaVersion": 1,
+  "hostApiVersion": 1,
+  "configId": "config-public-1",
+  "hostId": "host-public-1",
+  "runId": "run-public-1",
+  "mode": "preview",
+  "issuedAt": "2026-09-03T10:00:00Z",
+  "expiresAt": "2026-09-03T11:00:00Z",
+  "recheckAt": "2026-09-03T10:30:00Z",
+  "securityProfile": "runtime-security-profile-v1",
+  "resourceBudget": {
+    "version": 1,
+    "bundle": { "compressedBytes": 1, "expandedBytes": 1, "fileCount": 1, "singleFileBytes": 1 },
+    "bridge": { "messageBytes": 1, "messagesPerSecond": 1, "pendingRequests": 1 },
+    "files": { "readBytesPerRequest": 1, "readBytesPerRun": 1, "callsPerMinute": 1, "listPageSize": 1 },
+    "timeouts": { "bundleLoadMs": 1, "handshakeMs": 1, "firstRenderMs": 1, "updateMs": 1, "capabilityMs": 1, "disposeGraceMs": 1 },
+    "concurrency": { "activeIframesPerPage": 1, "activeIframesPerRun": 1, "hiddenRecycleMs": 1 },
+    "retry": { "maxAttempts": 1, "initialDelayMs": 1, "maxDelayMs": 1, "totalMs": 1 },
+    "failure": { "consecutiveFailures": 1, "windowMs": 1 }
+  },
+  "runtime": {
+    "origin": "https://widgets.example.test",
+    "catalogRevision": "catalog-public-1",
+    "profile": "public-isolated"
+  },
+  "network": {
+    "mode": "unavailable",
+    "policyVersion": "network-policy-v1",
+    "limits": {
+      "timeoutMs": 10000,
+      "maxRedirects": 5,
+      "maxConcurrentRequests": 4,
+      "callsPerMinute": 60,
+      "requestHeaderBytes": 16384,
+      "responseHeaderBytes": 32768,
+      "requestBodyBytes": 1048576,
+      "responseBodyBytes": 8388608
+    }
+  },
+  "bindings": [
+    {
+      "status": "loadable",
+      "bindingId": "binding-public-1",
+      "widgetId": "widget-public-1",
+      "widgetVersionId": "widget-version-public-1",
+      "digest": "sha256:0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef",
+      "trustClass": "external",
+      "runtimeProfile": "public-isolated",
+      "manifest": {
+        "name": "Public User Profile",
+        "widgetConfig": {
+          "schemaVersion": 1,
+          "hostApiVersion": 1,
+          "widgetSdkVersion": "0.1.0",
+          "entry": "entry.js",
+          "contribution": { "type": "panel", "id": "public-user-profile" },
+          "requestedPermissions": ["host.user.profile.read"],
+          "samples": [{ "id": "normal", "title": "Normal", "request": "samples/panel.json" }]
+        }
+      },
+      "launch": { "url": "https://widgets.example.test/launch/public", "expiresAt": "2026-09-03T11:00:00Z" },
+      "grantedCapabilities": [
+        {
+          "name": "service.invoke",
+          "services": [{ "service": "host.user", "actions": ["profile.read"] }],
+          "limits": { "callsPerMinute": 10, "requestBytes": 4096, "responseBytes": 16384 }
+        }
+      ],
+      "serviceAuthorization": {
+        "kind": "host-service-authorization",
+        "policy": "host-user-data-v1",
+        "status": "granted",
+        "hostId": "host-public-1",
+        "widgetVersionId": "widget-version-public-1",
+        "bundleDigest": "sha256:0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef",
+        "reviewRevision": "review-public-1",
+        "grantRevision": "grant-public-1",
+        "reviewedPermissions": ["host.user.profile.read"],
+        "grantedPermissions": ["host.user.profile.read"],
+        "expiresAt": "2026-09-03T10:00:00Z"
+      }
+    }
+  ]
+}

package/conformance/host-runtime-config/invalid-host-service-identity.json

@@ -0,0 +1,85 @@
+{
+  "schemaVersion": 1,
+  "hostApiVersion": 1,
+  "configId": "config-public-1",
+  "hostId": "host-public-1",
+  "runId": "run-public-1",
+  "mode": "preview",
+  "issuedAt": "2026-09-03T10:00:00Z",
+  "expiresAt": "2026-09-03T11:00:00Z",
+  "recheckAt": "2026-09-03T10:30:00Z",
+  "securityProfile": "runtime-security-profile-v1",
+  "resourceBudget": {
+    "version": 1,
+    "bundle": { "compressedBytes": 1, "expandedBytes": 1, "fileCount": 1, "singleFileBytes": 1 },
+    "bridge": { "messageBytes": 1, "messagesPerSecond": 1, "pendingRequests": 1 },
+    "files": { "readBytesPerRequest": 1, "readBytesPerRun": 1, "callsPerMinute": 1, "listPageSize": 1 },
+    "timeouts": { "bundleLoadMs": 1, "handshakeMs": 1, "firstRenderMs": 1, "updateMs": 1, "capabilityMs": 1, "disposeGraceMs": 1 },
+    "concurrency": { "activeIframesPerPage": 1, "activeIframesPerRun": 1, "hiddenRecycleMs": 1 },
+    "retry": { "maxAttempts": 1, "initialDelayMs": 1, "maxDelayMs": 1, "totalMs": 1 },
+    "failure": { "consecutiveFailures": 1, "windowMs": 1 }
+  },
+  "runtime": {
+    "origin": "https://widgets.example.test",
+    "catalogRevision": "catalog-public-1",
+    "profile": "public-isolated"
+  },
+  "network": {
+    "mode": "unavailable",
+    "policyVersion": "network-policy-v1",
+    "limits": {
+      "timeoutMs": 10000,
+      "maxRedirects": 5,
+      "maxConcurrentRequests": 4,
+      "callsPerMinute": 60,
+      "requestHeaderBytes": 16384,
+      "responseHeaderBytes": 32768,
+      "requestBodyBytes": 1048576,
+      "responseBodyBytes": 8388608
+    }
+  },
+  "bindings": [
+    {
+      "status": "loadable",
+      "bindingId": "binding-public-1",
+      "widgetId": "widget-public-1",
+      "widgetVersionId": "widget-version-public-1",
+      "digest": "sha256:0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef",
+      "trustClass": "external",
+      "runtimeProfile": "public-isolated",
+      "manifest": {
+        "name": "Public User Profile",
+        "widgetConfig": {
+          "schemaVersion": 1,
+          "hostApiVersion": 1,
+          "widgetSdkVersion": "0.1.0",
+          "entry": "entry.js",
+          "contribution": { "type": "panel", "id": "public-user-profile" },
+          "requestedPermissions": ["host.user.profile.read"],
+          "samples": [{ "id": "normal", "title": "Normal", "request": "samples/panel.json" }]
+        }
+      },
+      "launch": { "url": "https://widgets.example.test/launch/public", "expiresAt": "2026-09-03T11:00:00Z" },
+      "grantedCapabilities": [
+        {
+          "name": "service.invoke",
+          "services": [{ "service": "host.user", "actions": ["profile.read"] }],
+          "limits": { "callsPerMinute": 10, "requestBytes": 4096, "responseBytes": 16384 }
+        }
+      ],
+      "serviceAuthorization": {
+        "kind": "host-service-authorization",
+        "policy": "host-user-data-v1",
+        "status": "granted",
+        "hostId": "wrong-host",
+        "widgetVersionId": "widget-version-public-1",
+        "bundleDigest": "sha256:0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef",
+        "reviewRevision": "review-public-1",
+        "grantRevision": "grant-public-1",
+        "reviewedPermissions": ["host.user.profile.read"],
+        "grantedPermissions": ["host.user.profile.read"],
+        "expiresAt": "2026-09-03T11:00:00Z"
+      }
+    }
+  ]
+}

package/conformance/host-runtime-config/invalid-host-service-permission.json

@@ -0,0 +1,85 @@
+{
+  "schemaVersion": 1,
+  "hostApiVersion": 1,
+  "configId": "config-public-1",
+  "hostId": "host-public-1",
+  "runId": "run-public-1",
+  "mode": "preview",
+  "issuedAt": "2026-09-03T10:00:00Z",
+  "expiresAt": "2026-09-03T11:00:00Z",
+  "recheckAt": "2026-09-03T10:30:00Z",
+  "securityProfile": "runtime-security-profile-v1",
+  "resourceBudget": {
+    "version": 1,
+    "bundle": { "compressedBytes": 1, "expandedBytes": 1, "fileCount": 1, "singleFileBytes": 1 },
+    "bridge": { "messageBytes": 1, "messagesPerSecond": 1, "pendingRequests": 1 },
+    "files": { "readBytesPerRequest": 1, "readBytesPerRun": 1, "callsPerMinute": 1, "listPageSize": 1 },
+    "timeouts": { "bundleLoadMs": 1, "handshakeMs": 1, "firstRenderMs": 1, "updateMs": 1, "capabilityMs": 1, "disposeGraceMs": 1 },
+    "concurrency": { "activeIframesPerPage": 1, "activeIframesPerRun": 1, "hiddenRecycleMs": 1 },
+    "retry": { "maxAttempts": 1, "initialDelayMs": 1, "maxDelayMs": 1, "totalMs": 1 },
+    "failure": { "consecutiveFailures": 1, "windowMs": 1 }
+  },
+  "runtime": {
+    "origin": "https://widgets.example.test",
+    "catalogRevision": "catalog-public-1",
+    "profile": "public-isolated"
+  },
+  "network": {
+    "mode": "unavailable",
+    "policyVersion": "network-policy-v1",
+    "limits": {
+      "timeoutMs": 10000,
+      "maxRedirects": 5,
+      "maxConcurrentRequests": 4,
+      "callsPerMinute": 60,
+      "requestHeaderBytes": 16384,
+      "responseHeaderBytes": 32768,
+      "requestBodyBytes": 1048576,
+      "responseBodyBytes": 8388608
+    }
+  },
+  "bindings": [
+    {
+      "status": "loadable",
+      "bindingId": "binding-public-1",
+      "widgetId": "widget-public-1",
+      "widgetVersionId": "widget-version-public-1",
+      "digest": "sha256:0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef",
+      "trustClass": "external",
+      "runtimeProfile": "public-isolated",
+      "manifest": {
+        "name": "Public User Profile",
+        "widgetConfig": {
+          "schemaVersion": 1,
+          "hostApiVersion": 1,
+          "widgetSdkVersion": "0.1.0",
+          "entry": "entry.js",
+          "contribution": { "type": "panel", "id": "public-user-profile" },
+          "requestedPermissions": ["host.user.profile.read"],
+          "samples": [{ "id": "normal", "title": "Normal", "request": "samples/panel.json" }]
+        }
+      },
+      "launch": { "url": "https://widgets.example.test/launch/public", "expiresAt": "2026-09-03T11:00:00Z" },
+      "grantedCapabilities": [
+        {
+          "name": "service.invoke",
+          "services": [{ "service": "host.user", "actions": ["profile.read"] }],
+          "limits": { "callsPerMinute": 10, "requestBytes": 4096, "responseBytes": 16384 }
+        }
+      ],
+      "serviceAuthorization": {
+        "kind": "host-service-authorization",
+        "policy": "host-user-data-v1",
+        "status": "granted",
+        "hostId": "host-public-1",
+        "widgetVersionId": "widget-version-public-1",
+        "bundleDigest": "sha256:0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef",
+        "reviewRevision": "review-public-1",
+        "grantRevision": "grant-public-1",
+        "reviewedPermissions": ["host.user.email.read"],
+        "grantedPermissions": ["host.user.profile.read"],
+        "expiresAt": "2026-09-03T11:00:00Z"
+      }
+    }
+  ]
+}

package/conformance/host-runtime-config/invalid-host-service-status.json

@@ -0,0 +1,65 @@
+{
+  "schemaVersion": 1,
+  "hostApiVersion": 1,
+  "configId": "config-public-required",
+  "hostId": "host-public-1",
+  "runId": "run-public-1",
+  "mode": "preview",
+  "issuedAt": "2026-09-03T10:00:00Z",
+  "expiresAt": "2026-09-03T11:00:00Z",
+  "recheckAt": "2026-09-03T10:30:00Z",
+  "securityProfile": "runtime-security-profile-v1",
+  "resourceBudget": {
+    "version": 1,
+    "bundle": { "compressedBytes": 1, "expandedBytes": 1, "fileCount": 1, "singleFileBytes": 1 },
+    "bridge": { "messageBytes": 1, "messagesPerSecond": 1, "pendingRequests": 1 },
+    "files": { "readBytesPerRequest": 1, "readBytesPerRun": 1, "callsPerMinute": 1, "listPageSize": 1 },
+    "timeouts": { "bundleLoadMs": 1, "handshakeMs": 1, "firstRenderMs": 1, "updateMs": 1, "capabilityMs": 1, "disposeGraceMs": 1 },
+    "concurrency": { "activeIframesPerPage": 1, "activeIframesPerRun": 1, "hiddenRecycleMs": 1 },
+    "retry": { "maxAttempts": 1, "initialDelayMs": 1, "maxDelayMs": 1, "totalMs": 1 },
+    "failure": { "consecutiveFailures": 1, "windowMs": 1 }
+  },
+  "runtime": { "origin": "https://widgets.example.test", "catalogRevision": "catalog-public-1", "profile": "public-isolated" },
+  "network": {
+    "mode": "unavailable",
+    "policyVersion": "network-policy-v1",
+    "limits": { "timeoutMs": 10000, "maxRedirects": 5, "maxConcurrentRequests": 4, "callsPerMinute": 60, "requestHeaderBytes": 16384, "responseHeaderBytes": 32768, "requestBodyBytes": 1048576, "responseBodyBytes": 8388608 }
+  },
+  "bindings": [
+    {
+      "status": "loadable",
+      "bindingId": "binding-public-required",
+      "widgetId": "widget-public-1",
+      "widgetVersionId": "widget-version-public-1",
+      "digest": "sha256:0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef",
+      "trustClass": "external",
+      "runtimeProfile": "public-isolated",
+      "manifest": {
+        "name": "Public User Profile",
+        "widgetConfig": {
+          "schemaVersion": 1,
+          "hostApiVersion": 1,
+          "widgetSdkVersion": "0.1.0",
+          "entry": "entry.js",
+          "contribution": { "type": "panel", "id": "public-user-profile" },
+          "requestedPermissions": ["host.user.profile.read"],
+          "samples": [{ "id": "normal", "title": "Normal", "request": "samples/panel.json" }]
+        }
+      },
+      "launch": { "url": "https://widgets.example.test/launch/public-required", "expiresAt": "2026-09-03T11:00:00Z" },
+      "grantedCapabilities": [],
+      "serviceAuthorization": {
+        "kind": "host-service-authorization",
+        "policy": "host-user-data-v1",
+        "status": "authorization-required",
+        "hostId": "host-public-1",
+        "widgetVersionId": "widget-version-public-1",
+        "bundleDigest": "sha256:0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef",
+        "reviewRevision": "review-public-1",
+        "reviewedPermissions": ["host.user.profile.read"],
+        "grantedPermissions": ["host.user.profile.read"],
+        "expiresAt": "2026-09-03T11:00:00Z"
+      }
+    }
+  ]
+}

package/conformance/host-runtime-config/invalid-missing-manifest-fields.json

@@ -0,0 +1,55 @@
+{
+  "schemaVersion": 1,
+  "hostApiVersion": 1,
+  "configId": "config-invalid",
+  "runId": "run-invalid",
+  "mode": "preview",
+  "issuedAt": "2026-09-03T10:00:00Z",
+  "expiresAt": "2026-09-03T10:01:00Z",
+  "recheckAt": "2026-09-03T10:00:30Z",
+  "securityProfile": "runtime-security-profile-v1",
+  "resourceBudget": {
+    "version": 1,
+    "bundle": { "compressedBytes": 1, "expandedBytes": 1, "fileCount": 1, "singleFileBytes": 1 },
+    "bridge": { "messageBytes": 1, "messagesPerSecond": 1, "pendingRequests": 1 },
+    "files": { "readBytesPerRequest": 1, "readBytesPerRun": 1, "callsPerMinute": 1, "listPageSize": 1 },
+    "timeouts": { "bundleLoadMs": 1, "handshakeMs": 1, "firstRenderMs": 1, "updateMs": 1, "capabilityMs": 1, "disposeGraceMs": 1 },
+    "concurrency": { "activeIframesPerPage": 1, "activeIframesPerRun": 1, "hiddenRecycleMs": 1 },
+    "retry": { "maxAttempts": 1, "initialDelayMs": 1, "maxDelayMs": 1, "totalMs": 1 },
+    "failure": { "consecutiveFailures": 1, "windowMs": 1 }
+  },
+  "runtime": { "origin": "https://widgets.example.test", "catalogRevision": "catalog-1" },
+  "network": {
+    "mode": "runtime-consent",
+    "policyVersion": "network-policy-1",
+    "limits": {
+      "timeoutMs": 10000,
+      "maxRedirects": 5,
+      "maxConcurrentRequests": 4,
+      "callsPerMinute": 60,
+      "requestHeaderBytes": 16384,
+      "responseHeaderBytes": 32768,
+      "requestBodyBytes": 1048576,
+      "responseBodyBytes": 8388608
+    }
+  },
+  "bindings": [
+    {
+      "status": "loadable",
+      "bindingId": "binding-invalid",
+      "widgetId": "widget-invalid",
+      "widgetVersionId": "widget-version-invalid",
+      "digest": "sha256:0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef",
+      "manifest": {
+        "name": "Incomplete manifest",
+        "widgetConfig": {
+          "entry": "entry.js",
+          "widgetSdkVersion": "0.0.1",
+          "contribution": { "type": "panel", "id": "analysis-summary" }
+        }
+      },
+      "launch": { "url": "https://widgets.example.test/launch/one-time", "expiresAt": "2026-09-03T10:01:00Z" },
+      "grantedCapabilities": []
+    }
+  ]
+}

package/conformance/host-runtime-config/invalid-static-origins.json

@@ -0,0 +1,60 @@
+{
+  "schemaVersion": 1,
+  "hostApiVersion": 1,
+  "configId": "config-static-origins",
+  "runId": "run-static-origins",
+  "mode": "preview",
+  "issuedAt": "2026-09-11T10:00:00Z",
+  "expiresAt": "2026-09-11T10:01:00Z",
+  "recheckAt": "2026-09-11T10:00:30Z",
+  "securityProfile": "runtime-security-profile-v1",
+  "resourceBudget": {
+    "version": 1,
+    "bundle": { "compressedBytes": 1, "expandedBytes": 1, "fileCount": 1, "singleFileBytes": 1 },
+    "bridge": { "messageBytes": 1, "messagesPerSecond": 1, "pendingRequests": 1 },
+    "files": { "readBytesPerRequest": 1, "readBytesPerRun": 1, "callsPerMinute": 1, "listPageSize": 1 },
+    "timeouts": { "bundleLoadMs": 1, "handshakeMs": 1, "firstRenderMs": 1, "updateMs": 1, "capabilityMs": 1, "disposeGraceMs": 1 },
+    "concurrency": { "activeIframesPerPage": 1, "activeIframesPerRun": 1, "hiddenRecycleMs": 1 },
+    "retry": { "maxAttempts": 1, "initialDelayMs": 1, "maxDelayMs": 1, "totalMs": 1 },
+    "failure": { "consecutiveFailures": 1, "windowMs": 1 }
+  },
+  "runtime": { "origin": "https://widgets.example.test", "catalogRevision": "catalog-1" },
+  "network": {
+    "mode": "runtime-consent",
+    "policyVersion": "network-policy-1",
+    "limits": {
+      "timeoutMs": 10000,
+      "maxRedirects": 5,
+      "maxConcurrentRequests": 4,
+      "callsPerMinute": 60,
+      "requestHeaderBytes": 16384,
+      "responseHeaderBytes": 32768,
+      "requestBodyBytes": 1048576,
+      "responseBodyBytes": 8388608
+    }
+  },
+  "bindings": [
+    {
+      "status": "loadable",
+      "bindingId": "binding-static",
+      "widgetId": "widget-static",
+      "widgetVersionId": "widget-static-version",
+      "digest": "sha256:0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef",
+      "manifest": {
+        "name": "Static Origins",
+        "widgetConfig": {
+          "schemaVersion": 1,
+          "hostApiVersion": 1,
+          "widgetSdkVersion": "0.0.1",
+          "entry": "entry.js",
+          "contribution": { "type": "panel", "id": "static-origins" },
+          "outboundOrigins": ["https://api.example.test"],
+          "samples": [{ "id": "normal", "title": "Normal", "request": "samples/panel.json" }]
+        }
+      },
+      "launch": { "url": "https://widgets.example.test/launch/one-time", "expiresAt": "2026-09-11T10:01:00Z" },
+      "grantedCapabilities": [],
+      "grantedOutboundOrigins": ["https://api.example.test"]
+    }
+  ]
+}

package/conformance/host-runtime-config/valid-host-service-authorization-required.json

@@ -0,0 +1,65 @@
+{
+  "schemaVersion": 1,
+  "hostApiVersion": 1,
+  "configId": "config-public-required",
+  "hostId": "host-public-1",
+  "runId": "run-public-1",
+  "mode": "preview",
+  "issuedAt": "2026-09-03T10:00:00Z",
+  "expiresAt": "2026-09-03T11:00:00Z",
+  "recheckAt": "2026-09-03T10:30:00Z",
+  "securityProfile": "runtime-security-profile-v1",
+  "resourceBudget": {
+    "version": 1,
+    "bundle": { "compressedBytes": 1, "expandedBytes": 1, "fileCount": 1, "singleFileBytes": 1 },
+    "bridge": { "messageBytes": 1, "messagesPerSecond": 1, "pendingRequests": 1 },
+    "files": { "readBytesPerRequest": 1, "readBytesPerRun": 1, "callsPerMinute": 1, "listPageSize": 1 },
+    "timeouts": { "bundleLoadMs": 1, "handshakeMs": 1, "firstRenderMs": 1, "updateMs": 1, "capabilityMs": 1, "disposeGraceMs": 1 },
+    "concurrency": { "activeIframesPerPage": 1, "activeIframesPerRun": 1, "hiddenRecycleMs": 1 },
+    "retry": { "maxAttempts": 1, "initialDelayMs": 1, "maxDelayMs": 1, "totalMs": 1 },
+    "failure": { "consecutiveFailures": 1, "windowMs": 1 }
+  },
+  "runtime": { "origin": "https://widgets.example.test", "catalogRevision": "catalog-public-1", "profile": "public-isolated" },
+  "network": {
+    "mode": "unavailable",
+    "policyVersion": "network-policy-v1",
+    "limits": { "timeoutMs": 10000, "maxRedirects": 5, "maxConcurrentRequests": 4, "callsPerMinute": 60, "requestHeaderBytes": 16384, "responseHeaderBytes": 32768, "requestBodyBytes": 1048576, "responseBodyBytes": 8388608 }
+  },
+  "bindings": [
+    {
+      "status": "loadable",
+      "bindingId": "binding-public-required",
+      "widgetId": "widget-public-1",
+      "widgetVersionId": "widget-version-public-1",
+      "digest": "sha256:0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef",
+      "trustClass": "external",
+      "runtimeProfile": "public-isolated",
+      "manifest": {
+        "name": "Public User Profile",
+        "widgetConfig": {
+          "schemaVersion": 1,
+          "hostApiVersion": 1,
+          "widgetSdkVersion": "0.1.0",
+          "entry": "entry.js",
+          "contribution": { "type": "panel", "id": "public-user-profile" },
+          "requestedPermissions": ["host.user.profile.read"],
+          "samples": [{ "id": "normal", "title": "Normal", "request": "samples/panel.json" }]
+        }
+      },
+      "launch": { "url": "https://widgets.example.test/launch/public-required", "expiresAt": "2026-09-03T11:00:00Z" },
+      "grantedCapabilities": [],
+      "serviceAuthorization": {
+        "kind": "host-service-authorization",
+        "policy": "host-user-data-v1",
+        "status": "authorization-required",
+        "hostId": "host-public-1",
+        "widgetVersionId": "widget-version-public-1",
+        "bundleDigest": "sha256:0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef",
+        "reviewRevision": "review-public-1",
+        "reviewedPermissions": ["host.user.profile.read"],
+        "grantedPermissions": [],
+        "expiresAt": "2026-09-03T11:00:00Z"
+      }
+    }
+  ]
+}