@exponential_app/engine 0.0.0-stage → 0.1.0

package/dist/index.js

@@ -0,0 +1,526 @@
+import {
+  CAPABILITIES2,
+  RESERVED_CAPABILITY_NAMES2,
+  scopeIdValid2,
+  capabilityNameValid2,
+  capabilityDef2,
+  scopeDef2,
+  parseCapabilityCall2,
+  urlOrigin2,
+  brokerDecide2,
+  agentToolList2,
+  brokerAuditRow2
+} from "./chunks/index-md3hz6r2.js";
+import {
+  CONSENT_COPY2,
+  GRANTS_RECORD_VERSION2,
+  consentAnswer2,
+  grantWrite2,
+  grantsRecord2,
+  grantsOnPackage2,
+  consentSheet2,
+  manageSheet2
+} from "./chunks/index-nrr8x2kq.js";
+import {
+  STOPPED2,
+  lifecycleStep2
+} from "./chunks/index-m2845dn6.js";
+import {
+  PROVIDER_KEYS2,
+  FORBIDDEN_HOST_KEYS2,
+  NETWORK_POLICIES2,
+  IDENTITY_KINDS2,
+  AGENT_PROVIDERS2,
+  validateHostConfig2,
+  engineViewer2,
+  engineRecordRefusal2,
+  networkAllows2
+} from "./chunks/index-zw0575tv.js";
+import {
+  outboxWrites2,
+  outboxRequest2,
+  outboxRows2,
+  outboxOutcome2,
+  outboxVerb2,
+  outboxFlush2,
+  outboxReflected2,
+  outboxPrune2,
+  outboxPendingLabel2,
+  outboxMode2
+} from "./chunks/index-4ntgtkmb.js";
+import {
+  wrapLines2,
+  pdfNumber2,
+  pdfImage2,
+  renderPdf2
+} from "./chunks/index-ax4aay30.js";
+import {
+  CAPABILITY_TOOLS2,
+  MIME_BY_EXTENSION2,
+  toolDef2,
+  nativeCaller2,
+  schemaViolation2,
+  validateToolArguments2,
+  base64Encode2,
+  base64Decode2,
+  sniffMime2,
+  mimeFor2,
+  newNotificationId2,
+  toolResult2,
+  toolError2,
+  bridgeCall2,
+  pdfFileName2
+} from "./chunks/index-n0acffvs.js";
+import {
+  RUNNER_COPY2,
+  RUNNER_BUNDLE2,
+  RUNNER_SHELL2,
+  runnerConfig2,
+  runnerHasPermissions2,
+  runnerPackage2,
+  runnerFailure2,
+  runnerToast2
+} from "./chunks/index-t89cvabm.js";
+import {
+  StoreError2,
+  applyBatch2,
+  LocalRecordStore2,
+  MemoryPersistence2,
+  MemoryRecordStore2,
+  MemoryVault2,
+  MemoryBlobStore2,
+  localDeviceId2
+} from "./chunks/index-s3xjr701.js";
+// packages/eengine/src/broker.ts
+var refused = (verdict) => ({ refused: { code: verdict.verdict === `unknown` ? `UNKNOWN_TOOL` : `FORBIDDEN`, message: verdict.reason ?? `` } });
+
+class Broker {
+  setup;
+  grantsNow;
+  foreground = false;
+  persisted = Promise.resolve();
+  constructor(setup) {
+    this.setup = setup;
+    this.grantsNow = { ...setup.grants };
+  }
+  get appId() {
+    return this.setup.appId;
+  }
+  get manifest() {
+    return this.setup.manifest;
+  }
+  get capabilities() {
+    return this.setup.capabilities;
+  }
+  grants() {
+    return { ...this.grantsNow };
+  }
+  setForeground(foreground) {
+    this.foreground = foreground;
+  }
+  provided() {
+    return this.setup.capabilities.map((c) => c.name);
+  }
+  record(client, call, verdict, outcome) {
+    this.setup.audit?.record(brokerAuditRow2({ appId: this.setup.appId, client, call, verdict, outcome }));
+  }
+  async run(client, call, verdict) {
+    const capability = this.setup.capabilities.find((c) => c.name === verdict.capability);
+    if (!capability || !verdict.tool) {
+      this.record(client, call, verdict, `unreachable`);
+      return { refused: { code: `FORBIDDEN`, message: `unavailable` } };
+    }
+    const { result, outcome } = await bridgeCall2({
+      tool: `${capability.name}_${verdict.tool}`,
+      arguments: call.arguments ?? {},
+      context: { app: this.setup.appId, screens: this.setup.screens },
+      blobs: this.setup.blobs,
+      native: (tool, args) => capability.call(tool.slice(tool.indexOf(`_`) + 1), args)
+    });
+    this.record(client, call, verdict, outcome);
+    return { result };
+  }
+  call(from, client, name, args) {
+    const call = { from, name, arguments: args };
+    const verdict = brokerDecide2({ manifest: this.setup.manifest, grants: this.grantsNow, provided: this.provided(), foreground: this.foreground, call });
+    if (verdict.verdict === `call`)
+      return this.run(client, call, verdict);
+    if (verdict.verdict === `ask`) {
+      const entry = this.setup.manifest.find((m) => m.id === verdict.scope) ?? { id: verdict.scope ?? ``, why: `` };
+      const { components, data } = consentSheet2(this.setup.appName, entry);
+      return Promise.resolve({ ask: verdict, sheet: { scope: entry.id, components, data } });
+    }
+    this.record(client, call, verdict, null);
+    return Promise.resolve(refused(verdict));
+  }
+  answer(from, client, name, args, verdict, answer) {
+    const call = { from, name, arguments: args };
+    if (!verdict.scope)
+      return Promise.resolve(refused(verdict));
+    const next = consentAnswer2(this.grantsNow, verdict.scope, answer);
+    this.grantsNow = next.grants;
+    this.persist(next.grants);
+    const decided = { ...verdict, verdict: next.verdict, reason: next.reason };
+    if (next.verdict === `call`)
+      return this.run(client, call, decided);
+    this.record(client, call, decided, null);
+    return Promise.resolve(refused(decided));
+  }
+  setGrant(via, gesture, scope, value) {
+    const next = grantWrite2(this.setup.manifest, this.grantsNow, { via, gesture, scope, value });
+    if (next.refused)
+      return next.refused;
+    this.grantsNow = next.grants;
+    this.persist(next.grants);
+    return null;
+  }
+  permissionsSheet() {
+    return manageSheet2(this.setup.manifest, this.grantsNow);
+  }
+  persist(grants) {
+    const { key, value } = grantsRecord2(this.setup.appId, this.setup.signer, this.setup.manifest, grants);
+    this.persisted = this.persisted.then(() => this.setup.vault.write(key, value)).catch(() => {});
+  }
+}
+// packages/eengine/src/instance.ts
+import {
+  kindComputed,
+  kindRefs,
+  kindTransitions,
+  navigateTarget,
+  packageScreens,
+  parseRecordsSource,
+  parseSource,
+  recordPolicy,
+  recordsValue,
+  bridgePackage,
+  validatePackage,
+  verifyPackageFile
+} from "@exponential_app/eui/host";
+class LoadError extends Error {
+  kind;
+  issues;
+  constructor(kind, issues) {
+    super(`${kind}: ${issues.map((i) => `${i.path || `/`} ${i.message}`).join(`; `)}`);
+    this.kind = kind;
+    this.issues = issues;
+    this.name = `LoadError`;
+  }
+}
+var screenKey = (app) => `eengine/screen/${app}`;
+var isObject = (v) => !!v && typeof v === `object` && !Array.isArray(v);
+var packageOf = (file) => isObject(file) && isObject(file.package) ? file.package : file;
+var brokered = (answer) => {
+  if (!(`result` in answer))
+    return answer;
+  const { result } = answer;
+  if (result.isError)
+    return { refused: { code: `failed`, message: result.content[0]?.text ?? `failed` } };
+  return { value: result.structuredContent ?? null };
+};
+var failure = (code, error) => isObject(error) && typeof error.code === `string` && typeof error.message === `string` ? { code: error.code, message: error.message } : { code, message: error instanceof Error ? error.message : String(error) };
+var parseLast = (stored) => {
+  if (!stored)
+    return null;
+  try {
+    const v = JSON.parse(stored);
+    return isObject(v) && typeof v.screen === `string` && isObject(v.params) ? { screen: v.screen, params: v.params } : null;
+  } catch {
+    return null;
+  }
+};
+
+class AppInstance {
+  config;
+  pkg;
+  appId;
+  signer;
+  broker;
+  stateNow = STOPPED2;
+  outboxNow = [];
+  lastScreen;
+  constructor(config, pkg, appId, signer, broker, lastScreen) {
+    this.config = config;
+    this.pkg = pkg;
+    this.appId = appId;
+    this.signer = signer;
+    this.broker = broker;
+    this.lastScreen = lastScreen;
+  }
+  static async load(config, file) {
+    const verification = await verifyPackageFile(file);
+    if (verification.status === `invalid`)
+      throw new LoadError(`signature`, verification.issues);
+    const pkg = bridgePackage(packageOf(file));
+    const issues = validatePackage(pkg);
+    if (issues.length)
+      throw new LoadError(`invalid`, issues);
+    const p = pkg;
+    const appId = typeof p.id === `string` ? p.id : ``;
+    const signer = verification.status === `valid` ? verification.author.key : null;
+    const manifest = Array.isArray(p.capabilities) ? p.capabilities : [];
+    const key = grantsRecord2(appId, signer ?? ``, manifest, {}).key;
+    const [storedGrants, lastScreen] = await Promise.all([config.vault.read(key).catch(() => null), config.vault.read(screenKey(appId)).catch(() => null)]);
+    const broker = new Broker({
+      appId,
+      appName: typeof p.name === `string` ? p.name : appId,
+      signer: signer ?? ``,
+      manifest,
+      grants: grantsOnPackage2(storedGrants, signer ?? ``, manifest),
+      capabilities: config.capabilities,
+      vault: config.vault,
+      blobs: config.blobs,
+      screens: packageScreens(p).map((s) => s.template),
+      audit: config.audit ?? null
+    });
+    return new AppInstance(config, p, appId, signer, broker, lastScreen);
+  }
+  get manifest() {
+    return this.broker.manifest;
+  }
+  grants() {
+    return this.broker.grants();
+  }
+  get state() {
+    return this.stateNow;
+  }
+  get outbox() {
+    return this.outboxNow;
+  }
+  get mode() {
+    return outboxMode2(!!this.config.sync);
+  }
+  me() {
+    return engineViewer2(this.config.identity).id ?? ``;
+  }
+  now() {
+    return this.config.clock?.() ?? new Date().toISOString();
+  }
+  async answerConsent(name, args, verdict, answer) {
+    return brokered(await this.broker.answer(`ui`, null, name, args, verdict, answer));
+  }
+  setGrant(via, gesture, scope, value) {
+    return this.broker.setGrant(via, gesture, scope, value);
+  }
+  permissionsSheet() {
+    return this.broker.permissionsSheet();
+  }
+  async event(event) {
+    const { state, effects } = lifecycleStep2(this.stateNow, event, { pkg: { id: this.appId, screens: this.pkg.screens }, lastScreen: parseLast(this.lastScreen) });
+    this.stateNow = state;
+    this.broker.setForeground(state.phase === `foreground`);
+    for (const effect of effects) {
+      if (effect.effect === `open`)
+        this.config.window.open(this.appId, effect.screen, effect.params, `replace`);
+      else if (effect.effect === `persist`) {
+        this.lastScreen = JSON.stringify({ screen: effect.screen, params: effect.params });
+        await this.config.vault.write(screenKey(this.appId), this.lastScreen).catch(() => {});
+      } else if (effect.effect === `flush`)
+        await this.flush();
+    }
+    return effects;
+  }
+  async recordsValue(source) {
+    const parsed = parseSource(source);
+    const query = parsed ? parseRecordsSource(parsed) : null;
+    if (!query)
+      return;
+    if (query.app !== null)
+      return null;
+    let rows = await this.config.storage.rows(this.appId);
+    if (this.outboxNow.length)
+      rows = outboxRows2(rows, this.outboxNow, this.me());
+    const records = this.pkg.records;
+    const def = query.from && isObject(records) ? records[query.from] : undefined;
+    const viewer = engineViewer2(this.config.identity);
+    return recordsValue(rows, query, {
+      me: viewer.id,
+      now: this.now(),
+      names: {},
+      computed: kindComputed(records, query.from),
+      refs: kindRefs(records, query.from),
+      transitions: kindTransitions(def),
+      role: viewer.role
+    });
+  }
+  subscribe(on) {
+    return this.config.storage.subscribe(this.appId, () => on());
+  }
+  async call(name, args, newIds = []) {
+    const a = isObject(args) ? args : {};
+    switch (name) {
+      case `records_upsert`:
+        return this.write(`upsert`, a, newIds);
+      case `records_delete`:
+        return this.write(`delete`, a, newIds);
+      case `records_batch`:
+        return this.write(`batch`, a, newIds);
+      case `app_navigate`: {
+        const target = navigateTarget(this.pkg, args);
+        if (`error` in target)
+          return { refused: { code: `BAD_REQUEST`, message: target.error } };
+        this.config.window.open(this.appId, target.screen, target.params, `replace`);
+        this.stateNow = { ...this.stateNow, screen: target.screen, params: target.params };
+        return { value: null };
+      }
+      default:
+        return brokered(await this.broker.call(`ui`, null, name, args));
+    }
+  }
+  async refusal(writes) {
+    const rows = await this.config.storage.rows(this.appId).catch(() => []);
+    const records = isObject(this.pkg.records) ? this.pkg.records : {};
+    for (const w of writes) {
+      const row = rows.find((r) => r.id === w.id);
+      const op = w.op;
+      const kind = w.op === `delete` ? row?.kind : w.kind;
+      const policy = recordPolicy(kind ? records[kind] : undefined);
+      const refusal = engineRecordRefusal2(this.config.identity, policy, op, w.op === `create` ? null : row ? { authorId: row.authorId ?? null, createdBy: row.createdBy } : null);
+      if (refusal)
+        return refusal;
+    }
+    return null;
+  }
+  async write(call, args, newIds) {
+    const writes = outboxWrites2(call, args, newIds);
+    const refusal = await this.refusal(writes);
+    if (refusal)
+      return { refused: { code: `FORBIDDEN`, message: refusal } };
+    const entry = { writeId: this.config.newId?.() ?? crypto.randomUUID(), appId: this.appId, call, writes, at: this.now(), state: `pending` };
+    const answer = call === `upsert` ? { id: writes[0]?.id } : call === `delete` ? null : { ids: writes.map((w) => w.id) };
+    if (this.mode === `direct`) {
+      try {
+        await this.config.storage.write(this.appId, batchOf(entry), this.me());
+        return { value: answer };
+      } catch (error) {
+        return { refused: failure(`STORE`, error) };
+      }
+    }
+    this.outboxNow = [...this.outboxNow, entry];
+    if (this.stateNow.phase === `foreground`)
+      await this.flush();
+    return { value: answer };
+  }
+  async flush() {
+    const sync = this.config.sync;
+    if (!sync)
+      return;
+    const results = {};
+    for (const entry of this.outboxNow.filter((e) => e.state === `pending`)) {
+      const { call, input } = outboxRequest2(entry);
+      const result = await sync.push(this.appId, call, input).catch(() => ({ transport: true }));
+      results[entry.writeId] = result;
+      if (outboxOutcome2(entry, result) === `retry`)
+        break;
+    }
+    if (!Object.keys(results).length)
+      return;
+    const now = this.now();
+    const after = outboxFlush2(this.outboxNow, results, now).after;
+    const rows = await this.config.storage.rows(this.appId).catch(() => []);
+    this.outboxNow = outboxPrune2(after, rows, now);
+  }
+}
+function batchOf(entry) {
+  return {
+    writeId: entry.writeId,
+    writes: entry.writes.map((w) => w.op === `delete` ? { op: `delete`, id: w.id } : { op: `upsert`, id: w.id, kind: w.kind, data: w.data, create: w.op === `create` }),
+    at: entry.at
+  };
+}
+function createsOf(name, args) {
+  if (!isObject(args))
+    return 0;
+  if (name === `records_upsert`)
+    return typeof args.id === `string` ? 0 : 1;
+  if (name === `records_batch` && Array.isArray(args.writes))
+    return args.writes.filter((w) => isObject(w) && w.op !== `delete` && typeof w.id !== `string`).length;
+  return 0;
+}
+export {
+  AGENT_PROVIDERS2 as AGENT_PROVIDERS,
+  AppInstance,
+  Broker,
+  CAPABILITIES2 as CAPABILITIES,
+  CAPABILITY_TOOLS2 as CAPABILITY_TOOLS,
+  CONSENT_COPY2 as CONSENT_COPY,
+  FORBIDDEN_HOST_KEYS2 as FORBIDDEN_HOST_KEYS,
+  GRANTS_RECORD_VERSION2 as GRANTS_RECORD_VERSION,
+  IDENTITY_KINDS2 as IDENTITY_KINDS,
+  LoadError,
+  LocalRecordStore2 as LocalRecordStore,
+  MIME_BY_EXTENSION2 as MIME_BY_EXTENSION,
+  MemoryBlobStore2 as MemoryBlobStore,
+  MemoryPersistence2 as MemoryPersistence,
+  MemoryRecordStore2 as MemoryRecordStore,
+  MemoryVault2 as MemoryVault,
+  NETWORK_POLICIES2 as NETWORK_POLICIES,
+  PROVIDER_KEYS2 as PROVIDER_KEYS,
+  RESERVED_CAPABILITY_NAMES2 as RESERVED_CAPABILITY_NAMES,
+  RUNNER_BUNDLE2 as RUNNER_BUNDLE,
+  RUNNER_COPY2 as RUNNER_COPY,
+  RUNNER_SHELL2 as RUNNER_SHELL,
+  STOPPED2 as STOPPED,
+  StoreError2 as StoreError,
+  agentToolList2 as agentToolList,
+  applyBatch2 as applyBatch,
+  base64Decode2 as base64Decode,
+  base64Encode2 as base64Encode,
+  batchOf,
+  bridgeCall2 as bridgeCall,
+  brokerAuditRow2 as brokerAuditRow,
+  brokerDecide2 as brokerDecide,
+  capabilityDef2 as capabilityDef,
+  capabilityNameValid2 as capabilityNameValid,
+  consentAnswer2 as consentAnswer,
+  consentSheet2 as consentSheet,
+  createsOf,
+  engineRecordRefusal2 as engineRecordRefusal,
+  engineViewer2 as engineViewer,
+  grantWrite2 as grantWrite,
+  grantsOnPackage2 as grantsOnPackage,
+  grantsRecord2 as grantsRecord,
+  lifecycleStep2 as lifecycleStep,
+  localDeviceId2 as localDeviceId,
+  manageSheet2 as manageSheet,
+  mimeFor2 as mimeFor,
+  nativeCaller2 as nativeCaller,
+  networkAllows2 as networkAllows,
+  newNotificationId2 as newNotificationId,
+  outboxFlush2 as outboxFlush,
+  outboxMode2 as outboxMode,
+  outboxOutcome2 as outboxOutcome,
+  outboxPendingLabel2 as outboxPendingLabel,
+  outboxPrune2 as outboxPrune,
+  outboxReflected2 as outboxReflected,
+  outboxRequest2 as outboxRequest,
+  outboxRows2 as outboxRows,
+  outboxVerb2 as outboxVerb,
+  outboxWrites2 as outboxWrites,
+  packageOf,
+  parseCapabilityCall2 as parseCapabilityCall,
+  pdfFileName2 as pdfFileName,
+  pdfImage2 as pdfImage,
+  pdfNumber2 as pdfNumber,
+  renderPdf2 as renderPdf,
+  runnerConfig2 as runnerConfig,
+  runnerFailure2 as runnerFailure,
+  runnerHasPermissions2 as runnerHasPermissions,
+  runnerPackage2 as runnerPackage,
+  runnerToast2 as runnerToast,
+  schemaViolation2 as schemaViolation,
+  scopeDef2 as scopeDef,
+  scopeIdValid2 as scopeIdValid,
+  screenKey,
+  sniffMime2 as sniffMime,
+  toolDef2 as toolDef,
+  toolError2 as toolError,
+  toolResult2 as toolResult,
+  urlOrigin2 as urlOrigin,
+  validateHostConfig2 as validateHostConfig,
+  validateToolArguments2 as validateToolArguments,
+  wrapLines2 as wrapLines
+};
+
+//# debugId=D9EDE6EA8C5E519264756E2164756E21
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1,11 @@
+{
+  "version": 3,
+  "sources": ["../../../packages/eengine/src/broker.ts", "../../../packages/eengine/src/instance.ts"],
+  "sourcesContent": [
+    "// VAPP-269: the capability runtime, the twin of the crate's `capability.rs`.\n// ONE `Broker` per app instance answers app UI calls (`photos_pick`) and\n// agent calls (`photos__pick`) the same way: the package's manifest is the\n// ceiling, the person's consent next (the host paints the sheet and answers\n// through `answer`), then one audit row. Grants persist in the Vault and\n// change ONLY through `setGrant` with `consentUi` after a gesture.\n//\n// USER ACTIVATION (the web): `call` and `answer` reach the native provider\n// without awaiting anything but microtasks (the grants live in memory, the\n// Vault write runs after), so a picker opens inside the click's task.\n\nimport type { HubOutcome } from \"@exp/emcp\"\n\nimport { brokerAuditRow, brokerDecide, type BrokerAuditRow, type BrokerCall, type BrokerVerdict, type CallFrom, type Grants, type GrantValue, type ManifestEntry } from \"./capabilities\"\nimport { consentAnswer, consentSheet, grantsRecord, grantWrite, manageSheet, type ConsentAnswer, type GrantVia, type SurfaceComponent } from \"./consent\"\nimport { bridgeCall, type BlobStore, type McpCallResult, type NativeCapability } from \"./tools\"\n\n/** A refusal or a failure (eCore's shape: a code + a message). */\nexport interface Failure {\n  code: string\n  message: string\n}\n\n/** Where secrets live (Keychain, Keystore, libsecret; the web: IndexedDB). */\nexport interface Vault {\n  read(key: string): Promise<string | null>\n  write(key: string, value: string): Promise<void>\n  delete(key: string): Promise<void>\n}\n\n/** Where the broker's audit rows go. */\nexport interface CallAudit {\n  record(row: BrokerAuditRow): void\n}\n\n/** The ask sheet the person answers (consent.json `consentSheet`): a genUI surface. */\nexport interface ConsentSheet {\n  scope: string\n  components: SurfaceComponent[]\n  data: Record<string, unknown>\n}\n\n/** What a brokered call answers. */\nexport type BrokerAnswer =\n  | { result: McpCallResult }\n  /** The person decides first: paint the sheet, then `answer`. */\n  | { ask: BrokerVerdict; sheet: ConsentSheet }\n  /** `code` = `UNKNOWN_TOOL` for unknown, else `FORBIDDEN`; `message` = the reason. */\n  | { refused: Failure }\n\nexport interface BrokerSetup {\n  appId: string\n  appName: string\n  signer: string\n  manifest: readonly ManifestEntry[]\n  grants: Grants\n  capabilities: readonly NativeCapability[]\n  vault: Vault\n  /** The app's files: what capabilities read (`fileId`) and store. */\n  blobs: BlobStore\n  /** The package's screen names (a notification's tap opens one). */\n  screens: readonly string[]\n  audit?: CallAudit | null\n}\n\nconst refused = (verdict: BrokerVerdict): BrokerAnswer => ({ refused: { code: verdict.verdict === `unknown` ? `UNKNOWN_TOOL` : `FORBIDDEN`, message: verdict.reason ?? `` } })\n\n/** One app instance's broker. */\nexport class Broker {\n  private grantsNow: Grants\n  private foreground = false\n  /** The last grants write (tests and a closing page await it). */\n  persisted: Promise<void> = Promise.resolve()\n\n  constructor(private readonly setup: BrokerSetup) {\n    this.grantsNow = { ...setup.grants }\n  }\n\n  get appId(): string {\n    return this.setup.appId\n  }\n\n  get manifest(): readonly ManifestEntry[] {\n    return this.setup.manifest\n  }\n\n  get capabilities(): readonly NativeCapability[] {\n    return this.setup.capabilities\n  }\n\n  grants(): Grants {\n    return { ...this.grantsNow }\n  }\n\n  /** The lifecycle tells the broker whether a sheet may show. */\n  setForeground(foreground: boolean): void {\n    this.foreground = foreground\n  }\n\n  private provided(): string[] {\n    return this.setup.capabilities.map((c) => c.name)\n  }\n\n  private record(client: string | null, call: BrokerCall, verdict: BrokerVerdict, outcome: HubOutcome | null): void {\n    this.setup.audit?.record(brokerAuditRow({ appId: this.setup.appId, client, call, verdict, outcome }))\n  }\n\n  private async run(client: string | null, call: BrokerCall, verdict: BrokerVerdict): Promise<BrokerAnswer> {\n    const capability = this.setup.capabilities.find((c) => c.name === verdict.capability)\n    if (!capability || !verdict.tool) {\n      this.record(client, call, verdict, `unreachable`)\n      return { refused: { code: `FORBIDDEN`, message: `unavailable` } }\n    }\n    const { result, outcome } = await bridgeCall({\n      tool: `${capability.name}_${verdict.tool}`,\n      arguments: call.arguments ?? {},\n      context: { app: this.setup.appId, screens: this.setup.screens },\n      blobs: this.setup.blobs,\n      native: (tool, args) => capability.call(tool.slice(tool.indexOf(`_`) + 1), args),\n    })\n    this.record(client, call, verdict, outcome)\n    return { result }\n  }\n\n  /** One call from app UI (`client` = null) or an agent run (`client` = its run id). */\n  call(from: CallFrom, client: string | null, name: string, args: unknown): Promise<BrokerAnswer> {\n    const call: BrokerCall = { from, name, arguments: args }\n    const verdict = brokerDecide({ manifest: this.setup.manifest, grants: this.grantsNow, provided: this.provided(), foreground: this.foreground, call })\n    if (verdict.verdict === `call`) return this.run(client, call, verdict)\n    if (verdict.verdict === `ask`) {\n      const entry = this.setup.manifest.find((m) => m.id === verdict.scope) ?? { id: verdict.scope ?? ``, why: `` }\n      const { components, data } = consentSheet(this.setup.appName, entry)\n      return Promise.resolve({ ask: verdict, sheet: { scope: entry.id, components, data } })\n    }\n    this.record(client, call, verdict, null)\n    return Promise.resolve(refused(verdict))\n  }\n\n  /** The person's answer to the sheet for `verdict` (an Ask): store it per\n   *  consent.json, then run or refuse the call. The answer is the gesture. */\n  answer(from: CallFrom, client: string | null, name: string, args: unknown, verdict: BrokerVerdict, answer: ConsentAnswer): Promise<BrokerAnswer> {\n    const call: BrokerCall = { from, name, arguments: args }\n    if (!verdict.scope) return Promise.resolve(refused(verdict))\n    const next = consentAnswer(this.grantsNow, verdict.scope, answer)\n    this.grantsNow = next.grants\n    this.persist(next.grants)\n    const decided: BrokerVerdict = { ...verdict, verdict: next.verdict, reason: next.reason }\n    if (next.verdict === `call`) return this.run(client, call, decided)\n    this.record(client, call, decided, null)\n    return Promise.resolve(refused(decided))\n  }\n\n  /** Change a grant (the Permissions sheet's Switch). Only the ConsentUi\n   *  after a gesture; `value` null = revoke. Answers consent.json's refusal, or null. */\n  setGrant(via: GrantVia, gesture: boolean, scope: string, value: GrantValue | null): string | null {\n    const next = grantWrite(this.setup.manifest, this.grantsNow, { via, gesture, scope, value })\n    if (next.refused) return next.refused\n    this.grantsNow = next.grants\n    this.persist(next.grants)\n    return null\n  }\n\n  /** The Permissions sheet (consent.json `manageSheet`). */\n  permissionsSheet(): SurfaceComponent[] {\n    return manageSheet(this.setup.manifest, this.grantsNow)\n  }\n\n  private persist(grants: Grants): void {\n    const { key, value } = grantsRecord(this.setup.appId, this.setup.signer, this.setup.manifest, grants)\n    // A failed write only means the person is asked again next launch.\n    this.persisted = this.persisted.then(() => this.setup.vault.write(key, value)).catch(() => {})\n  }\n}\n",
+    "// VAPP-269: an `AppInstance`, one running app over a host's providers, the\n// twin of the crate's `instance.rs`: load and verify its package file,\n// drive its lifecycle (lifecycle.json) and carry out the effects, resolve\n// `records:<kind>` sources with genUI's one records query, dispatch\n// `records_*`, `app_navigate` and capability calls (the broker, the E5\n// bridge), and keep O1's outbox when the host has a sync provider\n// (outbox.json: direct writes otherwise).\n\nimport {\n  kindComputed,\n  kindRefs,\n  kindTransitions,\n  navigateTarget,\n  packageScreens,\n  parseRecordsSource,\n  parseSource,\n  recordPolicy,\n  recordsValue,\n  bridgePackage,\n  validatePackage,\n  verifyPackageFile,\n  type PackageIssue,\n  type RecordOp,\n  type RecordRow,\n  type RecordsValue,\n} from \"@exponential_app/eui/host\"\n\nimport { Broker, type BrokerAnswer, type CallAudit, type ConsentSheet, type Failure, type Vault } from \"./broker\"\nimport type { BrokerVerdict, Grants, GrantValue, ManifestEntry } from \"./capabilities\"\nimport { grantsOnPackage, grantsRecord, type ConsentAnswer, type GrantVia, type SurfaceComponent } from \"./consent\"\nimport { lifecycleStep, STOPPED, type LifecycleEffect, type LifecycleEvent, type LifecycleState } from \"./lifecycle\"\nimport { outboxFlush, outboxMode, outboxOutcome, outboxPrune, outboxRequest, outboxRows, outboxWrites, type OutboxCall, type OutboxEntry, type OutboxResult, type OutboxWrite } from \"./outbox\"\nimport { engineRecordRefusal, engineViewer, type EngineIdentity, type NetworkPolicy } from \"./providers\"\nimport type { EngineRecordStore, WriteBatch } from \"./stores\"\nimport type { BlobStore, NativeCapability } from \"./tools\"\n\nexport type Presentation = `replace` | `push` | `sheet`\n\n/** Maps screens to windows (desktop), nav stacks and sheets (phones), the page (the web). */\nexport interface WindowHost {\n  open(app: string, screen: string, params: Record<string, string>, how: Presentation): void\n}\n\n/** An optional transport to an authority; absent = the store is the authority, no outbox. */\nexport interface SyncTransport {\n  push(app: string, call: OutboxCall, input: Record<string, unknown>): Promise<OutboxResult>\n}\n\n/** What a host hands the Engine (providers.json; no telemetry or update key: none exists). */\nexport interface EngineHostConfig {\n  host: { kind: string; platform: string; formFactor: string; locale: string }\n  storage: EngineRecordStore\n  blobs: BlobStore\n  identity: EngineIdentity\n  vault: Vault\n  window: WindowHost\n  /** ISO 8601 UTC with milliseconds (tests pin it). */\n  clock?: () => string\n  network: NetworkPolicy\n  sync?: SyncTransport | null\n  capabilities: readonly NativeCapability[]\n  audit?: CallAudit | null\n  newId?: () => string\n}\n\n/** Why a package could not load: `signature` (signed, does not verify) or `invalid` (genUI refuses it). */\nexport class LoadError extends Error {\n  constructor(\n    readonly kind: `signature` | `invalid`,\n    readonly issues: PackageIssue[],\n  ) {\n    super(`${kind}: ${issues.map((i) => `${i.path || `/`} ${i.message}`).join(`; `)}`)\n    this.name = `LoadError`\n  }\n}\n\n/** What a host function call answers. */\nexport type CallResult =\n  | { value: unknown }\n  /** The person decides first: paint the sheet, then `answerConsent` with the same call. */\n  | { ask: BrokerVerdict; sheet: ConsentSheet }\n  /** Refused (the failed-action toast's reason). */\n  | { refused: Failure }\n\n/** Where the instance keeps its last screen (lifecycle.json `persist`). */\nexport const screenKey = (app: string): string => `eengine/screen/${app}`\n\ntype Pkg = Record<string, unknown> & { id?: unknown; name?: unknown; records?: unknown; capabilities?: unknown; screens?: unknown }\n\nconst isObject = (v: unknown): v is Record<string, unknown> => !!v && typeof v === `object` && !Array.isArray(v)\n\n/** The package a file carries (`package`), or the value itself when it is a bare package. */\nexport const packageOf = (file: unknown): unknown => (isObject(file) && isObject(file.package) ? file.package : file)\n\n/** VAPP-271: app UI reads a capability's answer as its `structuredContent`\n *  (an action step's `results.<name>`); an `isError` result is the call's\n *  refusal, its text the toast. */\nconst brokered = (answer: BrokerAnswer): CallResult => {\n  if (!(`result` in answer)) return answer\n  const { result } = answer\n  if (result.isError) return { refused: { code: `failed`, message: result.content[0]?.text ?? `failed` } }\n  return { value: result.structuredContent ?? null }\n}\n\nconst failure = (code: string, error: unknown): Failure =>\n  isObject(error) && typeof error.code === `string` && typeof error.message === `string` ? { code: error.code, message: error.message } : { code, message: error instanceof Error ? error.message : String(error) }\n\nconst parseLast = (stored: string | null): { screen: string; params: Record<string, unknown> } | null => {\n  if (!stored) return null\n  try {\n    const v = JSON.parse(stored)\n    return isObject(v) && typeof v.screen === `string` && isObject(v.params) ? { screen: v.screen, params: v.params } : null\n  } catch {\n    return null\n  }\n}\n\n/** One running app. */\nexport class AppInstance {\n  private stateNow: LifecycleState = STOPPED\n  private outboxNow: OutboxEntry[] = []\n  private lastScreen: string | null\n\n  private constructor(\n    private readonly config: EngineHostConfig,\n    readonly pkg: Pkg,\n    readonly appId: string,\n    readonly signer: string | null,\n    readonly broker: Broker,\n    lastScreen: string | null,\n  ) {\n    this.lastScreen = lastScreen\n  }\n\n  /** Load a package file (or a bare package): verify its signature when it\n   *  carries one, validate the package, reconcile its grants. */\n  static async load(config: EngineHostConfig, file: unknown): Promise<AppInstance> {\n    const verification = await verifyPackageFile(file)\n    if (verification.status === `invalid`) throw new LoadError(`signature`, verification.issues)\n    // Round 9 §12: format 5 through the bridge while ACCEPT_V09 holds.\n    const pkg = bridgePackage(packageOf(file))\n    const issues = validatePackage(pkg)\n    if (issues.length) throw new LoadError(`invalid`, issues)\n    const p = pkg as Pkg\n    const appId = typeof p.id === `string` ? p.id : ``\n    const signer = verification.status === `valid` ? verification.author.key : null\n    const manifest: ManifestEntry[] = Array.isArray(p.capabilities) ? (p.capabilities as ManifestEntry[]) : []\n    const key = grantsRecord(appId, signer ?? ``, manifest, {}).key\n    const [storedGrants, lastScreen] = await Promise.all([config.vault.read(key).catch(() => null), config.vault.read(screenKey(appId)).catch(() => null)])\n    const broker = new Broker({\n      appId,\n      appName: typeof p.name === `string` ? p.name : appId,\n      signer: signer ?? ``,\n      manifest,\n      grants: grantsOnPackage(storedGrants, signer ?? ``, manifest),\n      capabilities: config.capabilities,\n      vault: config.vault,\n      blobs: config.blobs,\n      screens: packageScreens(p).map((s) => s.template),\n      audit: config.audit ?? null,\n    })\n    return new AppInstance(config, p, appId, signer, broker, lastScreen)\n  }\n\n  get manifest(): readonly ManifestEntry[] {\n    return this.broker.manifest\n  }\n\n  grants(): Grants {\n    return this.broker.grants()\n  }\n\n  get state(): LifecycleState {\n    return this.stateNow\n  }\n\n  /** The outbox entries still pending or acked (queue mode). */\n  get outbox(): readonly OutboxEntry[] {\n    return this.outboxNow\n  }\n\n  get mode(): `queue` | `direct` {\n    return outboxMode(!!this.config.sync)\n  }\n\n  private me(): string {\n    return engineViewer(this.config.identity).id ?? ``\n  }\n\n  private now(): string {\n    return this.config.clock?.() ?? new Date().toISOString()\n  }\n\n  /** The person answered the sheet of an Ask for this call (the answer is the gesture). */\n  async answerConsent(name: string, args: unknown, verdict: BrokerVerdict, answer: ConsentAnswer): Promise<CallResult> {\n    return brokered(await this.broker.answer(`ui`, null, name, args, verdict, answer))\n  }\n\n  /** The Permissions sheet's Switch: only the ConsentUi, after a gesture. Answers the refusal, or null. */\n  setGrant(via: GrantVia, gesture: boolean, scope: string, value: GrantValue | null): string | null {\n    return this.broker.setGrant(via, gesture, scope, value)\n  }\n\n  /** The Permissions sheet (a genUI surface). */\n  permissionsSheet(): SurfaceComponent[] {\n    return this.broker.permissionsSheet()\n  }\n\n  /** One lifecycle event: the next state, with its effects carried out\n   *  (open → the WindowHost, persist → the Vault, flush → the outbox).\n   *  Answers the effects (sources and automations are the host's). */\n  async event(event: LifecycleEvent): Promise<LifecycleEffect[]> {\n    const { state, effects } = lifecycleStep(this.stateNow, event, { pkg: { id: this.appId, screens: this.pkg.screens }, lastScreen: parseLast(this.lastScreen) })\n    this.stateNow = state\n    this.broker.setForeground(state.phase === `foreground`)\n    for (const effect of effects) {\n      if (effect.effect === `open`) this.config.window.open(this.appId, effect.screen, effect.params, `replace`)\n      else if (effect.effect === `persist`) {\n        this.lastScreen = JSON.stringify({ screen: effect.screen, params: effect.params })\n        await this.config.vault.write(screenKey(this.appId), this.lastScreen).catch(() => {})\n      } else if (effect.effect === `flush`) await this.flush()\n    }\n    return effects\n  }\n\n  /** A `records:<kind>?…` source's value (genUI's records query over the\n   *  store's rows with the outbox laid over them); undefined = not a records source. */\n  async recordsValue(source: string): Promise<RecordsValue | null | undefined> {\n    const parsed = parseSource(source)\n    const query = parsed ? parseRecordsSource(parsed) : null\n    if (!query) return undefined\n    if (query.app !== null) return null\n    let rows: RecordRow[] = await this.config.storage.rows(this.appId)\n    if (this.outboxNow.length) rows = outboxRows(rows, this.outboxNow, this.me())\n    const records = this.pkg.records\n    const def = query.from && isObject(records) ? records[query.from] : undefined\n    const viewer = engineViewer(this.config.identity)\n    return recordsValue(rows, query, {\n      me: viewer.id,\n      now: this.now(),\n      names: {},\n      computed: kindComputed(records, query.from),\n      refs: kindRefs(records, query.from),\n      transitions: kindTransitions(def),\n      role: viewer.role,\n    })\n  }\n\n  /** Called with every change to the app's rows (re-resolve the bound sources). */\n  subscribe(on: () => void): () => void {\n    return this.config.storage.subscribe(this.appId, () => on())\n  }\n\n  /** A host function call from the app's UI: `records_upsert` /\n   *  `records_delete` / `records_batch`, `app_navigate`, or a capability\n   *  (`<capability>.<tool>`, through the broker). `newIds` = the client ids of\n   *  its creates, in order. */\n  async call(name: string, args: unknown, newIds: readonly string[] = []): Promise<CallResult> {\n    const a = isObject(args) ? args : {}\n    switch (name) {\n      case `records_upsert`:\n        return this.write(`upsert`, a, newIds)\n      case `records_delete`:\n        return this.write(`delete`, a, newIds)\n      case `records_batch`:\n        return this.write(`batch`, a, newIds)\n      case `app_navigate`: {\n        const target = navigateTarget(this.pkg, args)\n        if (`error` in target) return { refused: { code: `BAD_REQUEST`, message: target.error } }\n        this.config.window.open(this.appId, target.screen, target.params, `replace`)\n        this.stateNow = { ...this.stateNow, screen: target.screen, params: target.params }\n        return { value: null }\n      }\n      default:\n        return brokered(await this.broker.call(`ui`, null, name, args))\n    }\n  }\n\n  /** The kind policy check for a write, as the identity sees it. */\n  private async refusal(writes: OutboxWrite[]): Promise<string | null> {\n    const rows = await this.config.storage.rows(this.appId).catch(() => [] as RecordRow[])\n    const records = isObject(this.pkg.records) ? this.pkg.records : {}\n    for (const w of writes) {\n      const row = rows.find((r) => r.id === w.id)\n      const op: RecordOp = w.op\n      const kind = w.op === `delete` ? row?.kind : w.kind\n      const policy = recordPolicy(kind ? records[kind] : undefined)\n      const refusal = engineRecordRefusal(this.config.identity, policy, op, w.op === `create` ? null : row ? { authorId: row.authorId ?? null, createdBy: row.createdBy } : null)\n      if (refusal) return refusal\n    }\n    return null\n  }\n\n  private async write(call: OutboxCall, args: Record<string, unknown>, newIds: readonly string[]): Promise<CallResult> {\n    const writes = outboxWrites(call, args, newIds)\n    const refusal = await this.refusal(writes)\n    if (refusal) return { refused: { code: `FORBIDDEN`, message: refusal } }\n    const entry: OutboxEntry = { writeId: this.config.newId?.() ?? crypto.randomUUID(), appId: this.appId, call, writes, at: this.now(), state: `pending` }\n    const answer = call === `upsert` ? { id: writes[0]?.id } : call === `delete` ? null : { ids: writes.map((w) => w.id) }\n    if (this.mode === `direct`) {\n      try {\n        await this.config.storage.write(this.appId, batchOf(entry), this.me())\n        return { value: answer }\n      } catch (error) {\n        return { refused: failure(`STORE`, error) }\n      }\n    }\n    this.outboxNow = [...this.outboxNow, entry]\n    if (this.stateNow.phase === `foreground`) await this.flush()\n    return { value: answer }\n  }\n\n  /** Flush the outbox through the sync provider (FIFO, a retry stops it). */\n  async flush(): Promise<void> {\n    const sync = this.config.sync\n    if (!sync) return\n    const results: Record<string, OutboxResult> = {}\n    for (const entry of this.outboxNow.filter((e) => e.state === `pending`)) {\n      const { call, input } = outboxRequest(entry)\n      const result = await sync.push(this.appId, call, input).catch((): OutboxResult => ({ transport: true }))\n      results[entry.writeId] = result\n      if (outboxOutcome(entry, result) === `retry`) break\n    }\n    if (!Object.keys(results).length) return\n    const now = this.now()\n    const after = outboxFlush(this.outboxNow, results, now).after\n    // Acked entries keep overlaying until the store reflects them (outboxPrune).\n    const rows = await this.config.storage.rows(this.appId).catch(() => [] as RecordRow[])\n    this.outboxNow = outboxPrune(after, rows, now)\n  }\n}\n\n/** An outbox entry as one store batch. */\nexport function batchOf(entry: OutboxEntry): WriteBatch {\n  return {\n    writeId: entry.writeId,\n    writes: entry.writes.map((w) => (w.op === `delete` ? { op: `delete`, id: w.id } : { op: `upsert`, id: w.id, kind: w.kind, data: w.data, create: w.op === `create` })),\n    at: entry.at,\n  }\n}\n\n/** How many client ids a call's creates take (the runner generates them). */\nexport function createsOf(name: string, args: unknown): number {\n  if (!isObject(args)) return 0\n  if (name === `records_upsert`) return typeof args.id === `string` ? 0 : 1\n  if (name === `records_batch` && Array.isArray(args.writes)) return args.writes.filter((w) => isObject(w) && w.op !== `delete` && typeof w.id !== `string`).length\n  return 0\n}\n"
+  ],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiEA,IAAM,UAAU,CAAC,aAA0C,EAAE,SAAS,EAAE,MAAM,QAAQ,YAAY,YAAY,iBAAiB,aAAa,SAAS,QAAQ,UAAU,GAAG,EAAE;AAAA;AAGrK,MAAM,OAAO;AAAA,EAMW;AAAA,EALrB;AAAA,EACA,aAAa;AAAA,EAErB,YAA2B,QAAQ,QAAQ;AAAA,EAE3C,WAAW,CAAkB,OAAoB;AAAA,IAApB;AAAA,IAC3B,KAAK,YAAY,KAAK,MAAM,OAAO;AAAA;AAAA,MAGjC,KAAK,GAAW;AAAA,IAClB,OAAO,KAAK,MAAM;AAAA;AAAA,MAGhB,QAAQ,GAA6B;AAAA,IACvC,OAAO,KAAK,MAAM;AAAA;AAAA,MAGhB,YAAY,GAAgC;AAAA,IAC9C,OAAO,KAAK,MAAM;AAAA;AAAA,EAGpB,MAAM,GAAW;AAAA,IACf,OAAO,KAAK,KAAK,UAAU;AAAA;AAAA,EAI7B,aAAa,CAAC,YAA2B;AAAA,IACvC,KAAK,aAAa;AAAA;AAAA,EAGZ,QAAQ,GAAa;AAAA,IAC3B,OAAO,KAAK,MAAM,aAAa,IAAI,CAAC,MAAM,EAAE,IAAI;AAAA;AAAA,EAG1C,MAAM,CAAC,QAAuB,MAAkB,SAAwB,SAAkC;AAAA,IAChH,KAAK,MAAM,OAAO,OAAO,gBAAe,EAAE,OAAO,KAAK,MAAM,OAAO,QAAQ,MAAM,SAAS,QAAQ,CAAC,CAAC;AAAA;AAAA,QAGxF,GAAG,CAAC,QAAuB,MAAkB,SAA+C;AAAA,IACxG,MAAM,aAAa,KAAK,MAAM,aAAa,KAAK,CAAC,MAAM,EAAE,SAAS,QAAQ,UAAU;AAAA,IACpF,IAAI,CAAC,cAAc,CAAC,QAAQ,MAAM;AAAA,MAChC,KAAK,OAAO,QAAQ,MAAM,SAAS,aAAa;AAAA,MAChD,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,SAAS,cAAc,EAAE;AAAA,IAClE;AAAA,IACA,QAAQ,QAAQ,YAAY,MAAM,YAAW;AAAA,MAC3C,MAAM,GAAG,WAAW,QAAQ,QAAQ;AAAA,MACpC,WAAW,KAAK,aAAa,CAAC;AAAA,MAC9B,SAAS,EAAE,KAAK,KAAK,MAAM,OAAO,SAAS,KAAK,MAAM,QAAQ;AAAA,MAC9D,OAAO,KAAK,MAAM;AAAA,MAClB,QAAQ,CAAC,MAAM,SAAS,WAAW,KAAK,KAAK,MAAM,KAAK,QAAQ,GAAG,IAAI,CAAC,GAAG,IAAI;AAAA,IACjF,CAAC;AAAA,IACD,KAAK,OAAO,QAAQ,MAAM,SAAS,OAAO;AAAA,IAC1C,OAAO,EAAE,OAAO;AAAA;AAAA,EAIlB,IAAI,CAAC,MAAgB,QAAuB,MAAc,MAAsC;AAAA,IAC9F,MAAM,OAAmB,EAAE,MAAM,MAAM,WAAW,KAAK;AAAA,IACvD,MAAM,UAAU,cAAa,EAAE,UAAU,KAAK,MAAM,UAAU,QAAQ,KAAK,WAAW,UAAU,KAAK,SAAS,GAAG,YAAY,KAAK,YAAY,KAAK,CAAC;AAAA,IACpJ,IAAI,QAAQ,YAAY;AAAA,MAAQ,OAAO,KAAK,IAAI,QAAQ,MAAM,OAAO;AAAA,IACrE,IAAI,QAAQ,YAAY,OAAO;AAAA,MAC7B,MAAM,QAAQ,KAAK,MAAM,SAAS,KAAK,CAAC,MAAM,EAAE,OAAO,QAAQ,KAAK,KAAK,EAAE,IAAI,QAAQ,SAAS,IAAI,KAAK,GAAG;AAAA,MAC5G,QAAQ,YAAY,SAAS,cAAa,KAAK,MAAM,SAAS,KAAK;AAAA,MACnE,OAAO,QAAQ,QAAQ,EAAE,KAAK,SAAS,OAAO,EAAE,OAAO,MAAM,IAAI,YAAY,KAAK,EAAE,CAAC;AAAA,IACvF;AAAA,IACA,KAAK,OAAO,QAAQ,MAAM,SAAS,IAAI;AAAA,IACvC,OAAO,QAAQ,QAAQ,QAAQ,OAAO,CAAC;AAAA;AAAA,EAKzC,MAAM,CAAC,MAAgB,QAAuB,MAAc,MAAe,SAAwB,QAA8C;AAAA,IAC/I,MAAM,OAAmB,EAAE,MAAM,MAAM,WAAW,KAAK;AAAA,IACvD,IAAI,CAAC,QAAQ;AAAA,MAAO,OAAO,QAAQ,QAAQ,QAAQ,OAAO,CAAC;AAAA,IAC3D,MAAM,OAAO,eAAc,KAAK,WAAW,QAAQ,OAAO,MAAM;AAAA,IAChE,KAAK,YAAY,KAAK;AAAA,IACtB,KAAK,QAAQ,KAAK,MAAM;AAAA,IACxB,MAAM,UAAyB,KAAK,SAAS,SAAS,KAAK,SAAS,QAAQ,KAAK,OAAO;AAAA,IACxF,IAAI,KAAK,YAAY;AAAA,MAAQ,OAAO,KAAK,IAAI,QAAQ,MAAM,OAAO;AAAA,IAClE,KAAK,OAAO,QAAQ,MAAM,SAAS,IAAI;AAAA,IACvC,OAAO,QAAQ,QAAQ,QAAQ,OAAO,CAAC;AAAA;AAAA,EAKzC,QAAQ,CAAC,KAAe,SAAkB,OAAe,OAAyC;AAAA,IAChG,MAAM,OAAO,YAAW,KAAK,MAAM,UAAU,KAAK,WAAW,EAAE,KAAK,SAAS,OAAO,MAAM,CAAC;AAAA,IAC3F,IAAI,KAAK;AAAA,MAAS,OAAO,KAAK;AAAA,IAC9B,KAAK,YAAY,KAAK;AAAA,IACtB,KAAK,QAAQ,KAAK,MAAM;AAAA,IACxB,OAAO;AAAA;AAAA,EAIT,gBAAgB,GAAuB;AAAA,IACrC,OAAO,aAAY,KAAK,MAAM,UAAU,KAAK,SAAS;AAAA;AAAA,EAGhD,OAAO,CAAC,QAAsB;AAAA,IACpC,QAAQ,KAAK,UAAU,cAAa,KAAK,MAAM,OAAO,KAAK,MAAM,QAAQ,KAAK,MAAM,UAAU,MAAM;AAAA,IAEpG,KAAK,YAAY,KAAK,UAAU,KAAK,MAAM,KAAK,MAAM,MAAM,MAAM,KAAK,KAAK,CAAC,EAAE,MAAM,MAAM,EAAE;AAAA;AAEjG;;ACpKA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AA0DO,MAAM,kBAAkB,MAAM;AAAA,EAExB;AAAA,EACA;AAAA,EAFX,WAAW,CACA,MACA,QACT;AAAA,IACA,MAAM,GAAG,SAAS,OAAO,IAAI,CAAC,MAAM,GAAG,EAAE,QAAQ,OAAO,EAAE,SAAS,EAAE,KAAK,IAAI,GAAG;AAAA,IAHxE;AAAA,IACA;AAAA,IAGT,KAAK,OAAO;AAAA;AAEhB;AAWO,IAAM,YAAY,CAAC,QAAwB,kBAAkB;AAIpE,IAAM,WAAW,CAAC,MAA6C,CAAC,CAAC,KAAK,OAAO,MAAM,YAAY,CAAC,MAAM,QAAQ,CAAC;AAGxG,IAAM,YAAY,CAAC,SAA4B,SAAS,IAAI,KAAK,SAAS,KAAK,OAAO,IAAI,KAAK,UAAU;AAKhH,IAAM,WAAW,CAAC,WAAqC;AAAA,EACrD,IAAI,EAAE,YAAY;AAAA,IAAS,OAAO;AAAA,EAClC,QAAQ,WAAW;AAAA,EACnB,IAAI,OAAO;AAAA,IAAS,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,SAAS,OAAO,QAAQ,IAAI,QAAQ,SAAS,EAAE;AAAA,EACvG,OAAO,EAAE,OAAO,OAAO,qBAAqB,KAAK;AAAA;AAGnD,IAAM,UAAU,CAAC,MAAc,UAC7B,SAAS,KAAK,KAAK,OAAO,MAAM,SAAS,YAAY,OAAO,MAAM,YAAY,WAAW,EAAE,MAAM,MAAM,MAAM,SAAS,MAAM,QAAQ,IAAI,EAAE,MAAM,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE;AAElN,IAAM,YAAY,CAAC,WAAsF;AAAA,EACvG,IAAI,CAAC;AAAA,IAAQ,OAAO;AAAA,EACpB,IAAI;AAAA,IACF,MAAM,IAAI,KAAK,MAAM,MAAM;AAAA,IAC3B,OAAO,SAAS,CAAC,KAAK,OAAO,EAAE,WAAW,YAAY,SAAS,EAAE,MAAM,IAAI,EAAE,QAAQ,EAAE,QAAQ,QAAQ,EAAE,OAAO,IAAI;AAAA,IACpH,MAAM;AAAA,IACN,OAAO;AAAA;AAAA;AAAA;AAKJ,MAAM,YAAY;AAAA,EAMJ;AAAA,EACR;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EATH,WAA2B;AAAA,EAC3B,YAA2B,CAAC;AAAA,EAC5B;AAAA,EAEA,WAAW,CACA,QACR,KACA,OACA,QACA,QACT,YACA;AAAA,IANiB;AAAA,IACR;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IAGT,KAAK,aAAa;AAAA;AAAA,eAKP,IAAI,CAAC,QAA0B,MAAqC;AAAA,IAC/E,MAAM,eAAe,MAAM,kBAAkB,IAAI;AAAA,IACjD,IAAI,aAAa,WAAW;AAAA,MAAW,MAAM,IAAI,UAAU,aAAa,aAAa,MAAM;AAAA,IAE3F,MAAM,MAAM,cAAc,UAAU,IAAI,CAAC;AAAA,IACzC,MAAM,SAAS,gBAAgB,GAAG;AAAA,IAClC,IAAI,OAAO;AAAA,MAAQ,MAAM,IAAI,UAAU,WAAW,MAAM;AAAA,IACxD,MAAM,IAAI;AAAA,IACV,MAAM,QAAQ,OAAO,EAAE,OAAO,WAAW,EAAE,KAAK;AAAA,IAChD,MAAM,SAAS,aAAa,WAAW,UAAU,aAAa,OAAO,MAAM;AAAA,IAC3E,MAAM,WAA4B,MAAM,QAAQ,EAAE,YAAY,IAAK,EAAE,eAAmC,CAAC;AAAA,IACzG,MAAM,MAAM,cAAa,OAAO,UAAU,IAAI,UAAU,CAAC,CAAC,EAAE;AAAA,IAC5D,OAAO,cAAc,cAAc,MAAM,QAAQ,IAAI,CAAC,OAAO,MAAM,KAAK,GAAG,EAAE,MAAM,MAAM,IAAI,GAAG,OAAO,MAAM,KAAK,UAAU,KAAK,CAAC,EAAE,MAAM,MAAM,IAAI,CAAC,CAAC;AAAA,IACtJ,MAAM,SAAS,IAAI,OAAO;AAAA,MACxB;AAAA,MACA,SAAS,OAAO,EAAE,SAAS,WAAW,EAAE,OAAO;AAAA,MAC/C,QAAQ,UAAU;AAAA,MAClB;AAAA,MACA,QAAQ,iBAAgB,cAAc,UAAU,IAAI,QAAQ;AAAA,MAC5D,cAAc,OAAO;AAAA,MACrB,OAAO,OAAO;AAAA,MACd,OAAO,OAAO;AAAA,MACd,SAAS,eAAe,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ;AAAA,MAChD,OAAO,OAAO,SAAS;AAAA,IACzB,CAAC;AAAA,IACD,OAAO,IAAI,YAAY,QAAQ,GAAG,OAAO,QAAQ,QAAQ,UAAU;AAAA;AAAA,MAGjE,QAAQ,GAA6B;AAAA,IACvC,OAAO,KAAK,OAAO;AAAA;AAAA,EAGrB,MAAM,GAAW;AAAA,IACf,OAAO,KAAK,OAAO,OAAO;AAAA;AAAA,MAGxB,KAAK,GAAmB;AAAA,IAC1B,OAAO,KAAK;AAAA;AAAA,MAIV,MAAM,GAA2B;AAAA,IACnC,OAAO,KAAK;AAAA;AAAA,MAGV,IAAI,GAAuB;AAAA,IAC7B,OAAO,YAAW,CAAC,CAAC,KAAK,OAAO,IAAI;AAAA;AAAA,EAG9B,EAAE,GAAW;AAAA,IACnB,OAAO,cAAa,KAAK,OAAO,QAAQ,EAAE,MAAM;AAAA;AAAA,EAG1C,GAAG,GAAW;AAAA,IACpB,OAAO,KAAK,OAAO,QAAQ,KAAK,IAAI,KAAK,EAAE,YAAY;AAAA;AAAA,QAInD,aAAa,CAAC,MAAc,MAAe,SAAwB,QAA4C;AAAA,IACnH,OAAO,SAAS,MAAM,KAAK,OAAO,OAAO,MAAM,MAAM,MAAM,MAAM,SAAS,MAAM,CAAC;AAAA;AAAA,EAInF,QAAQ,CAAC,KAAe,SAAkB,OAAe,OAAyC;AAAA,IAChG,OAAO,KAAK,OAAO,SAAS,KAAK,SAAS,OAAO,KAAK;AAAA;AAAA,EAIxD,gBAAgB,GAAuB;AAAA,IACrC,OAAO,KAAK,OAAO,iBAAiB;AAAA;AAAA,QAMhC,KAAK,CAAC,OAAmD;AAAA,IAC7D,QAAQ,OAAO,YAAY,eAAc,KAAK,UAAU,OAAO,EAAE,KAAK,EAAE,IAAI,KAAK,OAAO,SAAS,KAAK,IAAI,QAAQ,GAAG,YAAY,UAAU,KAAK,UAAU,EAAE,CAAC;AAAA,IAC7J,KAAK,WAAW;AAAA,IAChB,KAAK,OAAO,cAAc,MAAM,UAAU,YAAY;AAAA,IACtD,WAAW,UAAU,SAAS;AAAA,MAC5B,IAAI,OAAO,WAAW;AAAA,QAAQ,KAAK,OAAO,OAAO,KAAK,KAAK,OAAO,OAAO,QAAQ,OAAO,QAAQ,SAAS;AAAA,MACzG,KAAK,IAAI,OAAO,WAAW,WAAW;AAAA,QACpC,KAAK,aAAa,KAAK,UAAU,EAAE,QAAQ,OAAO,QAAQ,QAAQ,OAAO,OAAO,CAAC;AAAA,QACjF,MAAM,KAAK,OAAO,MAAM,MAAM,UAAU,KAAK,KAAK,GAAG,KAAK,UAAU,EAAE,MAAM,MAAM,EAAE;AAAA,MACtF,EAAE,KAAK,IAAI,OAAO,WAAW;AAAA,QAAS,MAAM,KAAK,MAAM;AAAA,IACzD;AAAA,IACA,OAAO;AAAA;AAAA,QAKH,YAAY,CAAC,QAA0D;AAAA,IAC3E,MAAM,SAAS,YAAY,MAAM;AAAA,IACjC,MAAM,QAAQ,SAAS,mBAAmB,MAAM,IAAI;AAAA,IACpD,IAAI,CAAC;AAAA,MAAO;AAAA,IACZ,IAAI,MAAM,QAAQ;AAAA,MAAM,OAAO;AAAA,IAC/B,IAAI,OAAoB,MAAM,KAAK,OAAO,QAAQ,KAAK,KAAK,KAAK;AAAA,IACjE,IAAI,KAAK,UAAU;AAAA,MAAQ,OAAO,YAAW,MAAM,KAAK,WAAW,KAAK,GAAG,CAAC;AAAA,IAC5E,MAAM,UAAU,KAAK,IAAI;AAAA,IACzB,MAAM,MAAM,MAAM,QAAQ,SAAS,OAAO,IAAI,QAAQ,MAAM,QAAQ;AAAA,IACpE,MAAM,SAAS,cAAa,KAAK,OAAO,QAAQ;AAAA,IAChD,OAAO,aAAa,MAAM,OAAO;AAAA,MAC/B,IAAI,OAAO;AAAA,MACX,KAAK,KAAK,IAAI;AAAA,MACd,OAAO,CAAC;AAAA,MACR,UAAU,aAAa,SAAS,MAAM,IAAI;AAAA,MAC1C,MAAM,SAAS,SAAS,MAAM,IAAI;AAAA,MAClC,aAAa,gBAAgB,GAAG;AAAA,MAChC,MAAM,OAAO;AAAA,IACf,CAAC;AAAA;AAAA,EAIH,SAAS,CAAC,IAA4B;AAAA,IACpC,OAAO,KAAK,OAAO,QAAQ,UAAU,KAAK,OAAO,MAAM,GAAG,CAAC;AAAA;AAAA,QAOvD,IAAI,CAAC,MAAc,MAAe,SAA4B,CAAC,GAAwB;AAAA,IAC3F,MAAM,IAAI,SAAS,IAAI,IAAI,OAAO,CAAC;AAAA,IACnC,QAAQ;AAAA,MACN,KAAK;AAAA,QACH,OAAO,KAAK,MAAM,UAAU,GAAG,MAAM;AAAA,MACvC,KAAK;AAAA,QACH,OAAO,KAAK,MAAM,UAAU,GAAG,MAAM;AAAA,MACvC,KAAK;AAAA,QACH,OAAO,KAAK,MAAM,SAAS,GAAG,MAAM;AAAA,MACtC,KAAK,gBAAgB;AAAA,QACnB,MAAM,SAAS,eAAe,KAAK,KAAK,IAAI;AAAA,QAC5C,IAAI,WAAW;AAAA,UAAQ,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,SAAS,OAAO,MAAM,EAAE;AAAA,QACxF,KAAK,OAAO,OAAO,KAAK,KAAK,OAAO,OAAO,QAAQ,OAAO,QAAQ,SAAS;AAAA,QAC3E,KAAK,WAAW,KAAK,KAAK,UAAU,QAAQ,OAAO,QAAQ,QAAQ,OAAO,OAAO;AAAA,QACjF,OAAO,EAAE,OAAO,KAAK;AAAA,MACvB;AAAA,MACA;AAAA,QACE,OAAO,SAAS,MAAM,KAAK,OAAO,KAAK,MAAM,MAAM,MAAM,IAAI,CAAC;AAAA;AAAA;AAAA,QAKtD,OAAO,CAAC,QAA+C;AAAA,IACnE,MAAM,OAAO,MAAM,KAAK,OAAO,QAAQ,KAAK,KAAK,KAAK,EAAE,MAAM,MAAM,CAAC,CAAgB;AAAA,IACrF,MAAM,UAAU,SAAS,KAAK,IAAI,OAAO,IAAI,KAAK,IAAI,UAAU,CAAC;AAAA,IACjE,WAAW,KAAK,QAAQ;AAAA,MACtB,MAAM,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE;AAAA,MAC1C,MAAM,KAAe,EAAE;AAAA,MACvB,MAAM,OAAO,EAAE,OAAO,WAAW,KAAK,OAAO,EAAE;AAAA,MAC/C,MAAM,SAAS,aAAa,OAAO,QAAQ,QAAQ,SAAS;AAAA,MAC5D,MAAM,UAAU,qBAAoB,KAAK,OAAO,UAAU,QAAQ,IAAI,EAAE,OAAO,WAAW,OAAO,MAAM,EAAE,UAAU,IAAI,YAAY,MAAM,WAAW,IAAI,UAAU,IAAI,IAAI;AAAA,MAC1K,IAAI;AAAA,QAAS,OAAO;AAAA,IACtB;AAAA,IACA,OAAO;AAAA;AAAA,QAGK,KAAK,CAAC,MAAkB,MAA+B,QAAgD;AAAA,IACnH,MAAM,SAAS,cAAa,MAAM,MAAM,MAAM;AAAA,IAC9C,MAAM,UAAU,MAAM,KAAK,QAAQ,MAAM;AAAA,IACzC,IAAI;AAAA,MAAS,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,SAAS,QAAQ,EAAE;AAAA,IACvE,MAAM,QAAqB,EAAE,SAAS,KAAK,OAAO,QAAQ,KAAK,OAAO,WAAW,GAAG,OAAO,KAAK,OAAO,MAAM,QAAQ,IAAI,KAAK,IAAI,GAAG,OAAO,UAAU;AAAA,IACtJ,MAAM,SAAS,SAAS,WAAW,EAAE,IAAI,OAAO,IAAI,GAAG,IAAI,SAAS,WAAW,OAAO,EAAE,KAAK,OAAO,IAAI,CAAC,MAAM,EAAE,EAAE,EAAE;AAAA,IACrH,IAAI,KAAK,SAAS,UAAU;AAAA,MAC1B,IAAI;AAAA,QACF,MAAM,KAAK,OAAO,QAAQ,MAAM,KAAK,OAAO,QAAQ,KAAK,GAAG,KAAK,GAAG,CAAC;AAAA,QACrE,OAAO,EAAE,OAAO,OAAO;AAAA,QACvB,OAAO,OAAO;AAAA,QACd,OAAO,EAAE,SAAS,QAAQ,SAAS,KAAK,EAAE;AAAA;AAAA,IAE9C;AAAA,IACA,KAAK,YAAY,CAAC,GAAG,KAAK,WAAW,KAAK;AAAA,IAC1C,IAAI,KAAK,SAAS,UAAU;AAAA,MAAc,MAAM,KAAK,MAAM;AAAA,IAC3D,OAAO,EAAE,OAAO,OAAO;AAAA;AAAA,QAInB,KAAK,GAAkB;AAAA,IAC3B,MAAM,OAAO,KAAK,OAAO;AAAA,IACzB,IAAI,CAAC;AAAA,MAAM;AAAA,IACX,MAAM,UAAwC,CAAC;AAAA,IAC/C,WAAW,SAAS,KAAK,UAAU,OAAO,CAAC,MAAM,EAAE,UAAU,SAAS,GAAG;AAAA,MACvE,QAAQ,MAAM,UAAU,eAAc,KAAK;AAAA,MAC3C,MAAM,SAAS,MAAM,KAAK,KAAK,KAAK,OAAO,MAAM,KAAK,EAAE,MAAM,OAAqB,EAAE,WAAW,KAAK,EAAE;AAAA,MACvG,QAAQ,MAAM,WAAW;AAAA,MACzB,IAAI,eAAc,OAAO,MAAM,MAAM;AAAA,QAAS;AAAA,IAChD;AAAA,IACA,IAAI,CAAC,OAAO,KAAK,OAAO,EAAE;AAAA,MAAQ;AAAA,IAClC,MAAM,MAAM,KAAK,IAAI;AAAA,IACrB,MAAM,QAAQ,aAAY,KAAK,WAAW,SAAS,GAAG,EAAE;AAAA,IAExD,MAAM,OAAO,MAAM,KAAK,OAAO,QAAQ,KAAK,KAAK,KAAK,EAAE,MAAM,MAAM,CAAC,CAAgB;AAAA,IACrF,KAAK,YAAY,aAAY,OAAO,MAAM,GAAG;AAAA;AAEjD;AAGO,SAAS,OAAO,CAAC,OAAgC;AAAA,EACtD,OAAO;AAAA,IACL,SAAS,MAAM;AAAA,IACf,QAAQ,MAAM,OAAO,IAAI,CAAC,MAAO,EAAE,OAAO,WAAW,EAAE,IAAI,UAAU,IAAI,EAAE,GAAG,IAAI,EAAE,IAAI,UAAU,IAAI,EAAE,IAAI,MAAM,EAAE,MAAM,MAAM,EAAE,MAAM,QAAQ,EAAE,OAAO,SAAS,CAAE;AAAA,IACpK,IAAI,MAAM;AAAA,EACZ;AAAA;AAIK,SAAS,SAAS,CAAC,MAAc,MAAuB;AAAA,EAC7D,IAAI,CAAC,SAAS,IAAI;AAAA,IAAG,OAAO;AAAA,EAC5B,IAAI,SAAS;AAAA,IAAkB,OAAO,OAAO,KAAK,OAAO,WAAW,IAAI;AAAA,EACxE,IAAI,SAAS,mBAAmB,MAAM,QAAQ,KAAK,MAAM;AAAA,IAAG,OAAO,KAAK,OAAO,OAAO,CAAC,MAAM,SAAS,CAAC,KAAK,EAAE,OAAO,YAAY,OAAO,EAAE,OAAO,QAAQ,EAAE;AAAA,EAC3J,OAAO;AAAA;",
+  "debugId": "D9EDE6EA8C5E519264756E2164756E21",
+  "names": []
+}

package/dist/lifecycle.js

@@ -0,0 +1,11 @@
+import {
+  STOPPED2,
+  lifecycleStep2
+} from "./chunks/index-m2845dn6.js";
+export {
+  STOPPED2 as STOPPED,
+  lifecycleStep2 as lifecycleStep
+};
+
+//# debugId=955508557E6A53D264756E2164756E21
+//# sourceMappingURL=lifecycle.js.map

package/dist/lifecycle.js.map

@@ -0,0 +1,9 @@
+{
+  "version": 3,
+  "sources": [],
+  "sourcesContent": [
+  ],
+  "mappings": "",
+  "debugId": "955508557E6A53D264756E2164756E21",
+  "names": []
+}

package/dist/outbox.js

@@ -0,0 +1,27 @@
+import {
+  outboxWrites2,
+  outboxRequest2,
+  outboxRows2,
+  outboxOutcome2,
+  outboxVerb2,
+  outboxFlush2,
+  outboxReflected2,
+  outboxPrune2,
+  outboxPendingLabel2,
+  outboxMode2
+} from "./chunks/index-4ntgtkmb.js";
+export {
+  outboxFlush2 as outboxFlush,
+  outboxMode2 as outboxMode,
+  outboxOutcome2 as outboxOutcome,
+  outboxPendingLabel2 as outboxPendingLabel,
+  outboxPrune2 as outboxPrune,
+  outboxReflected2 as outboxReflected,
+  outboxRequest2 as outboxRequest,
+  outboxRows2 as outboxRows,
+  outboxVerb2 as outboxVerb,
+  outboxWrites2 as outboxWrites
+};
+
+//# debugId=8976AFB03DE36DC164756E2164756E21
+//# sourceMappingURL=outbox.js.map

package/dist/outbox.js.map

@@ -0,0 +1,9 @@
+{
+  "version": 3,
+  "sources": [],
+  "sourcesContent": [
+  ],
+  "mappings": "",
+  "debugId": "8976AFB03DE36DC164756E2164756E21",
+  "names": []
+}

package/dist/pdf.js

@@ -0,0 +1,15 @@
+import {
+  wrapLines2,
+  pdfNumber2,
+  pdfImage2,
+  renderPdf2
+} from "./chunks/index-ax4aay30.js";
+export {
+  pdfImage2 as pdfImage,
+  pdfNumber2 as pdfNumber,
+  renderPdf2 as renderPdf,
+  wrapLines2 as wrapLines
+};
+
+//# debugId=17B1C0D8E0B4B30F64756E2164756E21
+//# sourceMappingURL=pdf.js.map