@exponential_app/engine 0.0.0-stage → 0.1.1

package/dist/types/domain-contract/src/apps.d.ts

@@ -0,0 +1,612 @@
+export declare const APPS_COPY: {
+    nav: string;
+    title: string;
+    newApp: string;
+    untitled: string;
+    import: string;
+    version: string;
+    noVersion: string;
+    versions: string;
+    head: string;
+    noNote: string;
+    byAgent: string;
+    viewing: string;
+    restore: string;
+    restored: string;
+    restoredNote: string;
+    publish: string;
+    published: string;
+    publishedToast: string;
+    publishNothing: string;
+    empty: string;
+    chatEmpty: string;
+    previewEmpty: string;
+    versionsEmpty: string;
+    composerPlaceholder: string;
+    draftPlaceholder: string;
+    starterTitle: string;
+    starters: string[];
+    noDevice: string;
+    namePlaceholder: string;
+    descriptionPlaceholder: string;
+    deleteTitle: string;
+    deleteBody: string;
+    delete: string;
+    menu: {
+        versions: string;
+        settings: string;
+        export: string;
+        delete: string;
+        edit: string;
+    };
+    tabs: {
+        chat: string;
+        preview: string;
+        data: string;
+        versions: string;
+        settings: string;
+    };
+    settingsTitle: string;
+    records: string;
+    recordsOne: string;
+    recordsOf: string;
+    recordsNone: string;
+    tools: {
+        title: string;
+        hint: string;
+        none: string;
+        granted: string;
+        always: string;
+    };
+    preview: string;
+    frame: {
+        desktop: string;
+        phone: string;
+    };
+    runAs: {
+        me: string;
+        writesOff: string;
+    };
+    automations: {
+        title: string;
+        schedule: string;
+        scheduleZone: string;
+        create: string;
+        update: string;
+        delete: string;
+        event: string;
+        webhook: string;
+        paused: string;
+        failed: string;
+        ok: string;
+        never: string;
+        runsAs: string;
+        dropped: string;
+        droppedOne: string;
+        pausedReasons: {
+            sponsorGone: string;
+            sponsorReadOnly: string;
+            sponsorNotAllowed: string;
+        };
+    };
+    migrating: string;
+    migratingOf: string;
+    migrationFailed: string;
+    rollbackTitle: string;
+    rollbackBody: string;
+    webhooks: {
+        title: string;
+        ready: string;
+        unsigned: string;
+        copyUrl: string;
+        copied: string;
+        mint: string;
+        rotate: string;
+        secret: string;
+        copySecret: string;
+    };
+    runEmpty: string;
+    needsUpdate: string;
+    accounts: {
+        title: string;
+        connect: string;
+        reconnect: string;
+        connected: string;
+        notSetUp: string;
+        addServer: string;
+        usesServer: string;
+    };
+    mcpTools: {
+        title: string;
+        read: string;
+        write: string;
+    };
+    policies: {
+        title: string;
+        ops: {
+            read: string;
+            create: string;
+            update: string;
+            delete: string;
+        };
+        levels: {
+            member: string;
+            author: string;
+            owners: string;
+        };
+    };
+};
+export declare const APPS_PANES: {
+    chat: number;
+    preview: number;
+    chatMinWidth: number;
+    breakpoint: number;
+};
+export declare const APPS_PREVIEW: {
+    radius: number;
+    padding: number;
+    surfaceId: string;
+    $comment: string;
+    frames: string[];
+    defaultFrame: string;
+    phoneWidth: number;
+};
+export declare const APPS_TEST_IDS: {
+    list: string;
+    row: string;
+    newApp: string;
+    editor: string;
+    chat: string;
+    preview: string;
+    versions: string;
+    versionRow: string;
+    tabs: string;
+    composer: string;
+    viewing: string;
+    importApp: string;
+    starter: string;
+    menu: string;
+    settings: string;
+    versionPreview: string;
+    versionRestore: string;
+    data: string;
+    previewToolbar: string;
+    previewFrame: string;
+    previewTemplate: string;
+    previewRunAs: string;
+    publish: string;
+    versionPublish: string;
+    automations: string;
+    automationRow: string;
+    webhooks: string;
+    webhookRow: string;
+    webhookSecret: string;
+    previewScreens: string;
+    run: string;
+    runMenu: string;
+    newMenu: string;
+    accounts: string;
+    accountRow: string;
+    importUpstreams: string;
+    importUpstream: string;
+    mcpTools: string;
+    mcpToolRow: string;
+    policies: string;
+    policyRow: string;
+};
+export declare const APPS_EDITOR_TABS: {
+    wide: string[];
+    phone: string[];
+    menu: string[];
+    default: string;
+    phoneDefault: string;
+    settingsMaxWidth: number;
+    search: string;
+};
+/** VAPP-242: THE RUN VIEW's `…` menu + THE NEW MENU, in order. */
+export declare const APPS_RUN: {
+    $comment: string;
+    menu: string[];
+    newMenu: string[];
+    editorPath: string;
+};
+/** VAPP-177: the editor's tabs (web ≥ md and desktop: Preview | Versions |
+ *  Settings; phones: Chat | Preview + the `…` menu's sheets). */
+export type AppEditorTab = `chat` | `preview` | `data` | `versions` | `settings`;
+/** The phone menu items that open a tab body as a sheet. */
+export type AppEditorSheet = `versions` | `settings`;
+/** A requested tab (web `?tab=`, the desktop settings nav) → the tab on
+ *  screen and, on phones, the sheet over it (`editorTabCases`). */
+export declare function editorTab(requested: string | null | undefined, phone: boolean): {
+    tab: AppEditorTab;
+    sheet: AppEditorSheet | null;
+};
+/** VAPP-176: a DRAFT = an app with no version yet (New app's "Untitled app"
+ *  until the editor session publishes). */
+export declare function isDraftApp(app: {
+    headVersion: number;
+}): boolean;
+export declare const APP_SLUG_MAX: number;
+export declare const APP_NAME_MAX: number;
+export declare const APP_DESCRIPTION_MAX: number;
+export declare const APP_NOTE_MAX: number;
+export declare const APP_PACKAGE_MAX_BYTES: number;
+export declare const APP_TEMPLATE_MAX_COMPONENTS: number;
+export declare const APP_SLUG_PATTERN: RegExp;
+export declare const APP_RECORD_KIND_PATTERN: RegExp;
+export declare const APP_RECORD_MAX_BYTES: number;
+export declare const APP_RECORD_KINDS_MAX: number;
+/** `v{n}`, or the "no version" copy while an app has no head. */
+export declare function versionLabel(headVersion: number): string;
+/** eApps V1 (#VAPP-210, fixture `publishCases`): an app's two pointers. */
+export interface AppVersions {
+    headVersion: number;
+    publishedVersion: number;
+}
+/** The version the editor's preview shows: an explicitly viewed one, else
+ *  nothing (no version), else the HEAD (the draft) while the viewer's own
+ *  editor session is live or nothing is published, else the PUBLISHED one. */
+export declare function shownVersion(app: AppVersions, editing: boolean, viewing: number | null): number;
+/** Publish is offered while the head is not the published version. */
+export declare function canPublish(app: AppVersions): boolean;
+/** The list's and the header's version pill: the PUBLISHED version. */
+export declare function listPill(app: AppVersions): string;
+/** The version a grant is made on and checked against (`apps.update
+ *  {headVersion}` carries it): the published one, else the head. */
+export declare function grantVersion(app: AppVersions): number;
+/** A Versions row's trailing: the published badge, the head badge + Publish,
+ *  or Preview + Publish. */
+export declare function versionRow(app: AppVersions, number: number): `published` | `head` | `version`;
+/** eApps R8 (#VAPP-233, fixture `migrationCases`): a version row's sweep columns. */
+export interface VersionMigration {
+    migrationState: string | null;
+    migrationTotal: number;
+    migrationDone: number;
+    migrationError: string | null;
+}
+/** A Versions row's sweep line (after its subtitle), or null. */
+export declare function versionMigration(row: VersionMigration): string | null;
+/** #VAPP-256 (`rollbackCases`): whether publishing `target` rolls back past a
+ *  version whose sweep ran, so the Publish asks first. */
+export declare function rollbackWarns(published: number, target: number, rows: readonly {
+    number: number;
+    migrationState?: string | null;
+}[]): boolean;
+export declare const rollbackTitle: (n: number) => string;
+export declare const rollbackBody: (n: number) => string;
+/** A name → its slug: lowercase ASCII letters, digits and single dashes,
+ *  diacritics stripped, cut at the cap, `app` when nothing is left; a taken
+ *  slug gets `-2`, `-3`, … */
+export declare function slugify(name: string, taken?: readonly string[]): string;
+export interface AppListLike {
+    slug: string;
+    name: string;
+}
+/** The list order: by name (case-insensitive). No built-in apps. */
+export declare function sortApps<T extends AppListLike>(apps: readonly T[]): T[];
+/** VAPP-213: the built-in skills every app editor session runs with
+ *  (fixtures/skills.json `builtin.editorDelivery`), apps first. */
+export declare const EDITOR_SKILLS: readonly string[];
+/** The editor WORKFLOW: what an app is and the MCP calls that read, save
+ *  and publish it. ONE source: the editor brief below and the built-in
+ *  `exponential-apps` skill's SKILL.md (packages/exponential-ui/scripts/
+ *  generate-skills.ts) both print it. */
+export declare function editorWorkflow(slug: string): string;
+/** The brief an app's EDITOR SESSION gets as the preface of its first
+ *  message (every new or continued session): what the app is, the MCP
+ *  calls that read and publish it, and the built-in skills it runs with. */
+export declare function editorBrief(app: {
+    name: string;
+    slug: string;
+    headVersion: number;
+    description?: string | null;
+}): string;
+/** VAPP-157: the app hosts' media rule (fixture `mediaPolicy`), a plain
+ *  string rule so the four hosts agree byte for byte: a `data:` image, audio
+ *  or video (never svg), or the instance's own `/api/attachments/<uuid>`
+ *  (relative or on `origin` exactly) with nothing after the id. */
+export declare const APP_MEDIA_POLICY: {
+    $comment: string;
+    origin: string;
+    dataMimePrefixes: string[];
+    deniedDataMimes: string[];
+    attachmentPath: string;
+    cases: {
+        src: string;
+        expected: boolean;
+        $why: string;
+    }[];
+};
+export declare function appMediaAllowed(src: string, origin: string): boolean;
+/** VAPP-179: the preview's templates, sorted by id (a JSON layer, Postgres
+ *  JSONB included, does not keep the declared order). */
+export declare function previewTemplates(pkg: {
+    templates?: Record<string, unknown>;
+} | null | undefined): string[];
+/** The template the preview shows: the picked one while the package has it,
+ *  else the first (`templateCases`). */
+export declare function previewTemplate(pkg: {
+    templates?: Record<string, unknown>;
+} | null | undefined, picked: string | null): string | null;
+/** #VAPP-251 (`surfaceStateCases`): what an app's pane shows: nothing to run,
+ *  the surface, or once the host had its chance and holds no surface (it
+ *  refused the package), `copy.needsUpdate`. */
+export type AppSurfaceState = `empty` | `surface` | `needsUpdate`;
+export declare function surfaceState(hasPackage: boolean, applied: boolean, hasSurface: boolean): AppSurfaceState;
+/** VAPP-198: one Run as option (`value` "" = me). */
+export interface RunAsOption {
+    value: string;
+    label: string;
+}
+/** VAPP-198: the preview toolbar's Run as options (`runAsCases`): null
+ *  unless the viewer is a team owner with another member; else Me, then
+ *  every other member by name (case-insensitive, then id; no name = id). */
+export declare function runAsOptions(members: readonly {
+    userId: string;
+    name?: string | null;
+    role: string;
+}[], me: string | null, role: string | null): RunAsOption[] | null;
+/** #FEED-204 (`editorDeviceCases`, the fixture's EDITOR DEVICE): the device
+ *  an app editor's composer shows and sends on. `candidates` = the member's
+ *  online devices (with a root: the targets a move accepts), default flagged. */
+export interface EditorDeviceChoice {
+    /** The device; null = none online and no root to fall back on. */
+    deviceId: string | null;
+    /** A live root: the row names its device and cannot change. */
+    locked: boolean;
+    /** An ended root's next send goes to another device. */
+    move: boolean;
+}
+export declare function editorDevice(root: {
+    status: string;
+    deviceId: string | null;
+} | null, candidates: readonly {
+    deviceId: string;
+    isDefault?: boolean;
+}[], remembered: string | null): EditorDeviceChoice;
+/** #VAPP-220 (`automationRowCases`): one row of the Settings tab's
+ *  Automations group, from tRPC `appAccess.appTools` `automations`. */
+export interface AutomationRowInput {
+    name: string;
+    on: {
+        schedule: {
+            cron: string;
+            tz?: string;
+        };
+    } | {
+        record: {
+            kind: string;
+            op: `create` | `update` | `delete`;
+        };
+    } | {
+        event: string;
+    } | {
+        webhook: {
+            name: string;
+        };
+    };
+    paused: string | null;
+    lastStatus: string | null;
+}
+export type AutomationStatus = `paused` | `failed` | `ok` | `never`;
+export declare function automationRow(row: AutomationRowInput): {
+    trigger: string;
+    status: AutomationStatus;
+    label: string;
+};
+/** #VAPP-243 (`automationSponsorCases`): who an automation runs as, or why
+ *  it is paused (a pause wins); null = the second line is the trigger alone. */
+export declare function automationSponsor(paused: string | null, sponsorName: string | null): string | null;
+/** #VAPP-255 (`automationDroppedCases`): the runs the rate cap dropped in the
+ *  last 24 h; null = nothing to say. */
+export declare function automationDropped(n: number): string | null;
+/** #VAPP-238 (`webhookRowCases`): one row of the Settings tab's Webhooks
+ *  group, from tRPC `appAccess.appTools` `hooks`; `isOwner` = `canToggle`. */
+export interface WebhookRowInput {
+    name: string;
+    hasSecret: boolean;
+}
+export type WebhookStatus = `ready` | `unsigned`;
+export type WebhookAction = `mint` | `rotate`;
+export declare function webhookRow(row: WebhookRowInput, isOwner: boolean): {
+    status: WebhookStatus;
+    label: string;
+    action: WebhookAction | null;
+    actionLabel: string | null;
+};
+/** #VAPP-243 (`accountRowCases`): one row of the Settings tab's Accounts
+ *  group, from tRPC `appAccess.appTools` `upstreams` (the viewer's own
+ *  connection to each upstream the app declares). */
+export interface AccountRowInput {
+    name: string;
+    serverId: string | null;
+    state: string | null;
+}
+export type AccountStatus = `notSetUp` | `connected` | `disconnected` | `connecting` | `failed` | `reconnect` | `expired`;
+export type AccountAction = `connect` | `reconnect`;
+export declare function accountRow(row: AccountRowInput): {
+    status: AccountStatus;
+    label: string | null;
+    action: AccountAction | null;
+    actionLabel: string | null;
+};
+/** #VAPP-254 (`upstreamPickerCases`): an Accounts or import row's server
+ *  picker, and the second line naming the real server. */
+export interface UpstreamPickerRow {
+    name: string;
+    serverId: string | null;
+    serverName: string | null;
+}
+export declare const UPSTREAM_PICKER_NONE: string;
+export declare function upstreamPicker(row: UpstreamPickerRow, servers: readonly {
+    id: string;
+    name: string;
+}[]): {
+    value: string;
+    options: {
+        value: string;
+        label: string;
+    }[];
+} | null;
+export declare function accountCaption(row: UpstreamPickerRow): string | null;
+/** #VAPP-243 (`policyRowCases`): a kind's EFFECTIVE record policy as the
+ *  Record access row's caption, ops in record-policy.json order. */
+export type PolicyOp = `read` | `create` | `update` | `delete`;
+export type PolicyLevel = `member` | `author` | `owners`;
+export declare const POLICY_OPS: readonly PolicyOp[];
+export declare function policyCaption(policy: Record<PolicyOp, PolicyLevel>): string;
+/** The declared kinds in code-point order (the group's rows). */
+export declare function policyKinds(records: unknown): string[];
+/** VAPP-221 (eApps R7): the app hosts' FileUpload uploads (fixture
+ *  `appFiles`): every picked file POSTs to `uploadPath` as one part
+ *  `partName`; the answer's `url` lands in the FileUpload's bound list. */
+export declare const APP_FILES: {
+    $comment: string;
+    uploadPath: string;
+    partName: string;
+    failedVerb: string;
+    failedThing: string;
+    targetCases: ({
+        $why: string;
+        name: string;
+        components: ({
+            id: string;
+            component: string;
+            children: string[];
+            name?: undefined;
+            files?: undefined;
+        } | {
+            id: string;
+            component: string;
+            name: string;
+            files: {
+                path: string;
+            };
+            children?: undefined;
+        })[];
+        expected: string;
+    } | {
+        $why: string;
+        name: string;
+        components: {
+            id: string;
+            component: string;
+            files: {
+                path: string;
+            };
+        }[];
+        expected: string;
+    } | {
+        $why: string;
+        name: string;
+        components: ({
+            id: string;
+            component: string;
+            name: string;
+            files: never[];
+        } | {
+            id: string;
+            component: string;
+            name: string;
+            files: {
+                path: string;
+            };
+        })[];
+        expected: null;
+    } | {
+        $why: string;
+        name: string;
+        components: {
+            id: string;
+            component: string;
+            name: string;
+            value: {
+                path: string;
+            };
+        }[];
+        expected: null;
+    })[];
+    urlCases: ({
+        $why: string;
+        list: {
+            name: string;
+            size: number;
+            type: string;
+        }[];
+        fileName: string;
+        url: string;
+        expected: ({
+            name: string;
+            size: number;
+            type: string;
+            url?: undefined;
+        } | {
+            name: string;
+            size: number;
+            type: string;
+            url: string;
+        })[];
+    } | {
+        $why: string;
+        list: {
+            name: string;
+            url: string;
+        }[];
+        fileName: string;
+        url: string;
+        expected: {
+            name: string;
+            url: string;
+        }[];
+    } | {
+        $why: string;
+        list: (string | {
+            name: string;
+        })[];
+        fileName: string;
+        url: string;
+        expected: (string | {
+            name: string;
+            url: string;
+        })[];
+    } | {
+        $why: string;
+        list: {
+            name: string;
+        }[];
+        fileName: string;
+        url: string;
+        expected: null;
+    } | {
+        $why: string;
+        list: null;
+        fileName: string;
+        url: string;
+        expected: null;
+    })[];
+};
+/** The upload url of an app (`uploadPath` with its id). */
+export declare function appUploadPath(appId: string): string;
+/** The absolute `files` path of the FIRST FileUpload (component order)
+ *  named `name` (its `name`, else its id); null when it has no absolute
+ *  `{path}` binding (`targetCases`). */
+export declare function appUploadTarget(components: readonly Record<string, unknown>[], name: string): string | null;
+/** `list` with `url` on every object entry named `fileName`; null = nothing
+ *  to write (no list, no such entry) (`urlCases`). */
+export declare function withUploadedUrl(list: unknown, fileName: string, url: string): unknown[] | null;
+/** VAPP-218 (U1): the screens contract (`screens.$comment`). */
+export declare const APPS_SCREENS: {
+    $comment: string;
+    sidebarWidth: number;
+    reserved: string[];
+};
+/** Which navigation the preview frame paints for a package's screens:
+ *  none without screens, the phone bottom bar on a phone (or the Phone
+ *  frame), else the sidebar (`screenShellCases`). */
+export declare function screenShell(screenCount: number, phone: boolean): `sidebar` | `bar` | null;
+/** The web deep link to an app screen: `/t/<team>/apps/<app>/<screen>`,
+ *  then the params sorted by key (`screenPathCases`). */
+export declare function screenPath(teamSlug: string, appSlug: string, screen: string, params?: Record<string, string>): string;
+/** A screen route's query → its params: every string key but the editor's
+ *  own (`screens.reserved`), sorted (`screenQueryCases`). */
+export declare function screenParamsFromQuery(query: Record<string, unknown>): Record<string, string>;

package/dist/types/eengine/fixtures/providers.json

@@ -0,0 +1,55 @@
+{
+  "$comment": "VAPP-260 (Engine E0, epic VAPP-259, docs/spec/apps.md §13.1): WHAT A HOST HANDS THE ENGINE, the `HostConfig`. Each key of `providers` is `required` (the Engine refuses to start without it: `missing`) or optional (absent = its `default`); `list: true` = zero or more. There is NO telemetry and NO update provider: `forbidden` keys are refused by name (`forbidden`), so an exported runner can never grow an analytics, crash-report or over-the-air channel through its config (a new package version = a rebundle, decided 2026-11-05); any other unknown key is `unknown`. `network` is one of `networkPolicies`; `identity.kind` one of `identityKinds`. A capability is mounted under its name (capabilities.json), each name once (`duplicateCapability`); an agent provider (Agents' `AgentProvider`: `acp`, `localModel`, `remoteSession`) once per id (`duplicateAgent`). `validateHostConfig(config)` -> the issues `{key, code}` in `providers` order, then forbidden and unknown keys sorted. HOSTS (`hosts`): what each host kind provides, informative and checked against the validator (each must pass). IDENTITY (`identityCases`, `engineViewer`): `member` = the signed-in member with their team role and app access (Exponential); `local` = ONE person on one device and no account (the softcoded app, eDE Local desktops, exported apps): the viewer = `{id: the device uuid, role: owner, access: write}`, so genUI's `recordRefusal` allows every op of every kind policy (`member`, `author`, `owners` all collapse to \"me\"), and records the instance writes carry the device uuid as author; `peer` = a P2P key (Spezl), judged like `member` with the key as id and role `member`. NETWORK (`networkCases`, `networkAllows`): `off` = nothing leaves the device (upstreams, `http.fetch` and a sync transport are refused `offline`); `upstreamsOnly` = the package's declared `upstreams` and the sync transport, never `http.fetch`; `any` = all three (an `http.fetch` still needs its manifest origin and consent: capabilities.json). A refusal is `{allowed: false, reason}`.",
+  "providers": {
+    "host": { "required": true, "doc": "HostInfo: host kind, platform, form factor, locale, Engine version" },
+    "storage": { "required": true, "doc": "RecordStore: query, write (writeId), history, subscribe (MemoryRecordStore, SqliteRecordStore = elocal's app-records table, SyncedRecordStore)" },
+    "blobs": { "required": true, "doc": "BlobStore: put/get record files (FsBlobStore, the server's attachments)" },
+    "identity": { "required": true, "doc": "Identity: the viewer (member, local or peer)" },
+    "vault": { "required": true, "doc": "emcp Vault: grants, upstream tokens (Keychain, Keystore, libsecret, sealed server column)" },
+    "window": { "required": true, "doc": "WindowHost: open a screen (window, nav stack, sheet), report lifecycle events" },
+    "clock": { "required": false, "default": "system", "doc": "Clock: now (tests pin it)" },
+    "zone": { "required": false, "default": "device", "doc": "HostZone: the IANA zone of today/now/month (the team's in Exponential)" },
+    "network": { "required": false, "default": "upstreamsOnly", "doc": "NetworkPolicy" },
+    "sync": { "required": false, "default": null, "doc": "SyncTransport: pull deltas, push outbox entries (Exponential: Electric in, tRPC out; Spezl: P2P); absent = writes apply locally, no outbox" },
+    "agents": { "required": false, "default": [], "list": true, "doc": "AgentProvider (Agents): acp, localModel, remoteSession; each gets its tools only as a hub grant" },
+    "capabilities": { "required": false, "default": [], "list": true, "doc": "Capability: a native tool provider on the in-process hub (capabilities.json)" },
+    "consent": { "required": false, "default": "sheet", "doc": "ConsentUi: the Engine's own genUI sheet unless the host paints it (consent.json)" }
+  },
+  "forbidden": ["analytics", "crashReporter", "telemetry", "updateChannel", "updates"],
+  "networkPolicies": ["off", "upstreamsOnly", "any"],
+  "identityKinds": ["member", "local", "peer"],
+  "hosts": {
+    "exponential": { "host": {}, "storage": {}, "blobs": {}, "identity": { "kind": "member" }, "vault": {}, "window": {}, "zone": {}, "network": "any", "sync": {}, "agents": [{ "id": "acp" }, { "id": "remoteSession" }], "capabilities": [{ "name": "files" }, { "name": "share" }, { "name": "notifications" }] },
+    "softcoded": { "host": {}, "storage": {}, "blobs": {}, "identity": { "kind": "local" }, "vault": {}, "window": {}, "network": "upstreamsOnly", "agents": [{ "id": "localModel" }] },
+    "ede": { "host": {}, "storage": {}, "blobs": {}, "identity": { "kind": "local" }, "vault": {}, "window": {}, "network": "any", "agents": [{ "id": "acp" }], "capabilities": [{ "name": "files" }, { "name": "notifications" }, { "name": "shell" }, { "name": "windows" }, { "name": "focus" }, { "name": "launch" }] },
+    "spezl": { "host": {}, "storage": {}, "blobs": {}, "identity": { "kind": "peer" }, "vault": {}, "window": {}, "network": "any", "sync": {}, "agents": [{ "id": "acp" }] },
+    "exported": { "host": {}, "storage": {}, "blobs": {}, "identity": { "kind": "local" }, "vault": {}, "window": {}, "network": "off", "capabilities": [{ "name": "photos" }, { "name": "print" }, { "name": "share" }] }
+  },
+  "validateCases": [
+    { "name": "the minimum", "config": { "host": {}, "storage": {}, "blobs": {}, "identity": { "kind": "local" }, "vault": {}, "window": {} }, "expected": [] },
+    { "name": "every required key missing", "config": {}, "expected": [{ "key": "host", "code": "missing" }, { "key": "storage", "code": "missing" }, { "key": "blobs", "code": "missing" }, { "key": "identity", "code": "missing" }, { "key": "vault", "code": "missing" }, { "key": "window", "code": "missing" }] },
+    { "name": "no telemetry, no update channel", "config": { "host": {}, "storage": {}, "blobs": {}, "identity": { "kind": "local" }, "vault": {}, "window": {}, "updates": {}, "telemetry": {}, "theme": {} }, "expected": [{ "key": "telemetry", "code": "forbidden" }, { "key": "theme", "code": "unknown" }, { "key": "updates", "code": "forbidden" }] },
+    { "name": "a bad network policy and identity kind", "config": { "host": {}, "storage": {}, "blobs": {}, "identity": { "kind": "guest" }, "vault": {}, "window": {}, "network": "lan" }, "expected": [{ "key": "identity", "code": "invalid" }, { "key": "network", "code": "invalid" }] },
+    { "name": "a capability or agent twice", "config": { "host": {}, "storage": {}, "blobs": {}, "identity": { "kind": "member" }, "vault": {}, "window": {}, "agents": [{ "id": "acp" }, { "id": "acp" }], "capabilities": [{ "name": "photos" }, { "name": "photos" }] }, "expected": [{ "key": "agents", "code": "duplicateAgent" }, { "key": "capabilities", "code": "duplicateCapability" }] },
+    { "name": "a capability under a reserved or invalid name", "config": { "host": {}, "storage": {}, "blobs": {}, "identity": { "kind": "member" }, "vault": {}, "window": {}, "capabilities": [{ "name": "records" }, { "name": "Bad_Name" }] }, "expected": [{ "key": "capabilities", "code": "invalidCapability" }] },
+    { "name": "an unknown agent provider", "config": { "host": {}, "storage": {}, "blobs": {}, "identity": { "kind": "member" }, "vault": {}, "window": {}, "agents": [{ "id": "openclaw" }] }, "expected": [{ "key": "agents", "code": "invalid" }] }
+  ],
+  "agentProviders": ["acp", "localModel", "remoteSession"],
+  "identityCases": [
+    { "name": "local: an author-only update of someone else's record", "identity": { "kind": "local", "deviceId": "d-1" }, "policy": { "read": "author", "create": "owners", "update": "author", "delete": "owners" }, "op": "update", "row": { "authorId": "u-imported" }, "expected": { "viewer": { "id": "d-1", "role": "owner", "access": "write" }, "refusal": null } },
+    { "name": "local: an owners-only delete", "identity": { "kind": "local", "deviceId": "d-1" }, "policy": { "read": "member", "create": "member", "update": "author", "delete": "owners" }, "op": "delete", "row": { "authorId": "d-1" }, "expected": { "viewer": { "id": "d-1", "role": "owner", "access": "write" }, "refusal": null } },
+    { "name": "member: the policy applies", "identity": { "kind": "member", "userId": "u-1", "role": "member", "access": "write" }, "policy": { "read": "member", "create": "member", "update": "author", "delete": "author" }, "op": "update", "row": { "authorId": "u-2" }, "expected": { "viewer": { "id": "u-1", "role": "member", "access": "write" }, "refusal": "Only the record's author or a team owner can change it" } },
+    { "name": "peer: a key judged as a member", "identity": { "kind": "peer", "key": "pk-9" }, "policy": { "read": "member", "create": "member", "update": "author", "delete": "author" }, "op": "update", "row": { "authorId": "pk-9" }, "expected": { "viewer": { "id": "pk-9", "role": "member", "access": "write" }, "refusal": null } }
+  ],
+  "networkCases": [
+    { "policy": "off", "target": "upstream", "declared": true, "expected": { "allowed": false, "reason": "offline" } },
+    { "policy": "off", "target": "sync", "declared": true, "expected": { "allowed": false, "reason": "offline" } },
+    { "policy": "off", "target": "http", "declared": true, "expected": { "allowed": false, "reason": "offline" } },
+    { "policy": "upstreamsOnly", "target": "upstream", "declared": true, "expected": { "allowed": true, "reason": null } },
+    { "policy": "upstreamsOnly", "target": "upstream", "declared": false, "expected": { "allowed": false, "reason": "notDeclared" } },
+    { "policy": "upstreamsOnly", "target": "sync", "declared": true, "expected": { "allowed": true, "reason": null } },
+    { "policy": "upstreamsOnly", "target": "http", "declared": true, "expected": { "allowed": false, "reason": "network" } },
+    { "policy": "any", "target": "http", "declared": true, "expected": { "allowed": true, "reason": null } },
+    { "policy": "any", "target": "upstream", "declared": false, "expected": { "allowed": false, "reason": "notDeclared" } }
+  ]
+}