@fabricorg/fabric-gen 0.6.3 → 0.7.0

package/dist/index.cjs

@@ -33,6 +33,7 @@ __export(index_exports, {
   FabricGenUsageError: () => FabricGenUsageError,
   GENERATOR_TARGETS: () => GENERATOR_TARGETS,
   checkApplication: () => checkApplication,
+  exportModuleManifestFile: () => exportModuleManifestFile,
   fabricGenCliExitCode: () => fabricGenCliExitCode,
   generateFromManifest: () => generateFromManifest,
   initializeCapability: () => initializeCapability,
@@ -44,7 +45,9 @@ module.exports = __toCommonJS(index_exports);
 var import_promises = require("fs/promises");
 var import_node_crypto = require("crypto");
 var import_node_path = __toESM(require("path"), 1);
+var import_node_url = require("url");
 var import_compiler = require("@fabricorg/compiler");
+var import_manifest = require("@fabricorg/platform/manifest");
 var import_gen_capability = require("@fabricorg/gen-capability");
 var import_gen_docs = require("@fabricorg/gen-docs");
 var import_gen_events = require("@fabricorg/gen-events");
@@ -70,6 +73,7 @@ var compareCanonicalStrings = (left, right) => left < right ? -1 : left > right
 var usage = [
   "Usage:",
   "  fabric-gen init capability <namespace> [--directory <path>]",
+  "  fabric-gen export --module <file> [--export <name>] --out <manifest.json>",
   "  fabric-gen init experience <application> [--directory <path>]",
   "  fabric-gen check-application [--config <path>]",
   "  fabric-gen promote-experience --config <path> --key <pem> [--out <path>]",
@@ -89,6 +93,13 @@ function flagValue(args, flag) {
   return value;
 }
 async function runFabricGenCommand(args) {
+  if (args[0] === "export") {
+    const moduleFile = flagValue(args, "--module");
+    const out = flagValue(args, "--out");
+    if (!moduleFile || !out) throw new FabricGenUsageError(usage);
+    const result2 = await exportModuleManifestFile({ moduleFile, out, exportName: flagValue(args, "--export") });
+    return `Exported "${result2.namespace}" from ${result2.exportName} to ${out}: ${result2.objectTypes} object types, ${result2.actions} actions, ${result2.eventTypes} event types.`;
+  }
   if (args[0] === "init") {
     if (!args[2] || args[2].startsWith("--")) {
       throw new FabricGenUsageError(usage);
@@ -138,6 +149,40 @@ async function runFabricGenCommand(args) {
   });
   return `${args.includes("--check") ? "Checked" : "Generated"} ${result.files.length} files.`;
 }
+function experienceReadme(application) {
+  return [
+    `# ${application} experience integration`,
+    "",
+    "| File | What it is |",
+    "| --- | --- |",
+    "| `fabric.experience.ts` | The server runtime and gateway, wired to your host. |",
+    "| `fabric.component-pack.ts` | The components this application is allowed to render. |",
+    "| `fabric.application.json` | What the deployment gate reads. |",
+    "| `fabric.assembly.lock.json` | The resolved assembly. Empty until you add capabilities. |",
+    "| `fabric.runtime.json` | Capabilities the running host actually registers. |",
+    "",
+    "## Install",
+    "",
+    "The scaffolded files import three packages this generator does not install:",
+    "",
+    "```bash",
+    "pnpm add @fabricorg/experience-runtime @fabricorg/experience-gateway @fabricorg/component-pack",
+    "```",
+    "",
+    "## Check it",
+    "",
+    "```bash",
+    "fabric-gen check-application --config fabric.application.json",
+    "```",
+    "",
+    "It passes on the scaffold and keeps passing as you add capabilities, as long",
+    "as the lockfile, the runtime capabilities, and every promoted release agree.",
+    "Regenerate the lockfile from your composition root with `resolveAssembly`;",
+    "`fabric.runtime.json` must list what that same root registers with the host,",
+    "which is what stops a deployment from serving a plan its host cannot answer.",
+    ""
+  ].join("\n");
+}
 async function initializeExperience(options) {
   if (!/^[a-z][a-z0-9-]*$/.test(options.application)) {
     throw new Error("Application name must use lowercase letters, numbers, and hyphens.");
@@ -189,6 +234,35 @@ async function initializeExperience(options) {
         releases: []
       }, null, 2)}
 `
+    ],
+    // The application config names these two files, so the scaffold has to
+    // produce them. Without them `fabric-gen check-application`, the very
+    // next step, failed on a missing file rather than on anything the
+    // author had done. The lockfile is resolved here, not hand-written, so
+    // it carries a real assembly digest from the first commit.
+    [
+      import_node_path.default.join(options.directory, "fabric.assembly.lock.json"),
+      `${JSON.stringify((0, import_assembly.resolveAssembly)({
+        manifest: {
+          formatVersion: 2,
+          application: options.application,
+          capabilities: [],
+          componentPacks: [],
+          bindings: [],
+          contracts: []
+        },
+        capabilities: [],
+        componentPacks: []
+      }).lockfile, null, 2)}
+`
+    ],
+    [
+      import_node_path.default.join(options.directory, "fabric.runtime.json"),
+      "[]\n"
+    ],
+    [
+      import_node_path.default.join(options.directory, "README.md"),
+      experienceReadme(options.application)
     ]
   ];
   await (0, import_promises.mkdir)(options.directory, { recursive: true });
@@ -262,14 +336,54 @@ async function checkApplication(options) {
     assemblyDigest: assembly.assemblyDigest
   };
 }
+async function exportModuleManifestFile(options) {
+  const absolute = import_node_path.default.resolve(options.moduleFile);
+  let loaded;
+  try {
+    loaded = await import((0, import_node_url.pathToFileURL)(absolute).href);
+  } catch (error) {
+    const reason = error instanceof Error ? error.message : String(error);
+    throw new Error(`Could not load module file "${options.moduleFile}": ${reason}
+A TypeScript file needs a runtime that strips types (Node 22.18 or newer); otherwise point --module at the built JavaScript.`);
+  }
+  const candidates = Object.entries(loaded).filter(([, value]) => isFabricModuleLike(value));
+  let entry;
+  if (options.exportName) {
+    const named = loaded[options.exportName];
+    if (named === void 0) throw new Error(`"${options.moduleFile}" has no export named "${options.exportName}". It exports: ${Object.keys(loaded).join(", ") || "nothing"}.`);
+    if (!isFabricModuleLike(named)) throw new Error(`Export "${options.exportName}" of "${options.moduleFile}" is not a FabricModule: it has no string "namespace".`);
+    entry = [options.exportName, named];
+  } else if (candidates.length === 1) {
+    entry = candidates[0];
+  } else if (candidates.length === 0) {
+    throw new Error(`"${options.moduleFile}" exports no FabricModule. Export one, with a string "namespace", or name it with --export.`);
+  } else {
+    throw new Error(`"${options.moduleFile}" exports ${candidates.length} modules (${candidates.map(([name]) => name).join(", ")}). Choose one with --export.`);
+  }
+  const manifest = (0, import_manifest.exportModuleManifest)(entry[1]);
+  (0, import_compiler.compileManifestBundle)({ manifestVersion: 2, modules: [manifest] });
+  await (0, import_promises.mkdir)(import_node_path.default.dirname(import_node_path.default.resolve(options.out)), { recursive: true });
+  await (0, import_promises.writeFile)(import_node_path.default.resolve(options.out), `${JSON.stringify(manifest, null, 2)}
+`, "utf8");
+  return {
+    namespace: manifest.namespace,
+    exportName: entry[0],
+    objectTypes: manifest.objectTypes.length,
+    actions: manifest.actions.length,
+    eventTypes: manifest.eventTypes.length
+  };
+}
+function isFabricModuleLike(value) {
+  return typeof value === "object" && value !== null && typeof value.namespace === "string";
+}
 async function initializeCapability(options) {
   if (!/^[a-z][a-z0-9-]*$/.test(options.namespace)) {
     throw new Error("Capability namespace must use lowercase letters, numbers, and hyphens.");
   }
   const displayName = options.namespace.split("-").map((part, index) => index === 0 ? `${part.charAt(0).toUpperCase()}${part.slice(1)}` : part).join(" ");
-  const manifestPath = import_node_path.default.join(options.directory, "fabric.manifest.json");
+  const modulePath = import_node_path.default.join(options.directory, "module.ts");
   const readmePath = import_node_path.default.join(options.directory, "README.md");
-  for (const file of [readmePath, manifestPath]) {
+  for (const file of [readmePath, modulePath]) {
     try {
       await (0, import_promises.access)(file);
       throw new Error(`Refusing to overwrite existing file "${file}".`);
@@ -278,33 +392,108 @@ async function initializeCapability(options) {
       if (error.code !== "ENOENT") throw error;
     }
   }
-  const manifest = {
-    manifestVersion: 2,
-    namespace: options.namespace,
-    objectTypes: [],
-    subjectTypes: [],
-    idPrefixes: [],
-    dependencies: [],
-    policies: [],
-    eventTypes: [],
-    actions: [],
-    views: [],
-    stateMachines: [],
-    capability: {
-      displayName,
-      description: `Governed ${displayName.toLowerCase()} capability.`,
-      stability: "experimental"
-    }
-  };
+  const module2 = [
+    `import type { ActionDefinition } from "@fabricorg/platform/actions";`,
+    `import type { FabricModule } from "@fabricorg/platform/modules";`,
+    "",
+    `/** One governed action. Every field below is checked when the manifest is exported. */`,
+    `const recordExample: ActionDefinition = {`,
+    `	actionId: "${options.namespace}.record_example",`,
+    `	namespace: "${options.namespace}",`,
+    "	version: 1,",
+    '	kind: "atomic",',
+    "	idempotent: true,",
+    "	mutatesDomain: true,",
+    '	emitsEvents: ["ExampleRecorded"],',
+    "	// The six execution dimensions. A strict certification profile requires all of them.",
+    "	execution: {",
+    '		connectivity: "online-required",',
+    '		authorityMoment: "execution",',
+    '		idempotency: "required",',
+    '		completion: "immediate",',
+    '		consistency: "authoritative-now",',
+    '		sensitivity: "internal",',
+    "	},",
+    "	schema: {",
+    "		parse(value: unknown): { exampleId: string } {",
+    "			const input = value as { exampleId?: unknown };",
+    '			if (typeof input?.exampleId !== "string") throw new Error("exampleId is required");',
+    "			return { exampleId: input.exampleId };",
+    "		},",
+    "		safeParse(value: unknown) {",
+    "			try {",
+    "				return { success: true as const, data: this.parse(value) };",
+    "			} catch (error) {",
+    '				return { success: false as const, error: { issues: [{ path: ["exampleId"], message: error instanceof Error ? error.message : String(error) }] } };',
+    "			}",
+    "		},",
+    "	},",
+    "	handler: async (_context, parameters) => ({",
+    "		success: true,",
+    "		data: {",
+    "			...(parameters as { exampleId: string }),",
+    "			_events: [{",
+    '				eventType: "ExampleRecorded",',
+    '				entityType: "Example",',
+    "				entityId: (parameters as { exampleId: string }).exampleId,",
+    "				payload: parameters,",
+    "			}],",
+    "		},",
+    "	}),",
+    "};",
+    "",
+    `export const ${camelCase(options.namespace)}Module: FabricModule = {`,
+    `	namespace: "${options.namespace}",`,
+    '	version: "0.1.0",',
+    "	capability: {",
+    `		displayName: "${displayName}",`,
+    `		description: "Governed ${displayName.toLowerCase()} capability.",`,
+    '		stability: "experimental",',
+    "	},",
+    "	objectTypes: [{",
+    '		type: "Example",',
+    "		schema: {",
+    '			type: "object",',
+    '			properties: { exampleId: { type: "string" } },',
+    '			required: ["exampleId"],',
+    "		},",
+    "	}],",
+    `	idPrefixes: [{ prefix: "exm", name: "Example", module: "${options.namespace}" }],`,
+    '	eventTypes: [{ eventType: "ExampleRecorded", schemaVersion: 1 }],',
+    "	actions: [recordExample],",
+    "};",
+    ""
+  ].join("\n");
   const readme = [
     `# ${displayName}`,
     "",
-    "Define domain objects, governed actions, events, and projections in `fabric.manifest.json`.",
+    "`module.ts` is the source of truth. It is TypeScript, so the shape of every",
+    "action, object type, and event is checked as you write it.",
+    "",
+    "## The loop",
     "",
     "```bash",
+    "# 1. Export the authored module to the normalized manifest the generators read.",
+    "fabric-gen export --module module.ts --out fabric.manifest.json",
+    "",
+    "# 2. Generate types, event contracts, the usage contract, and docs.",
     "fabric-gen --input fabric.manifest.json --out generated",
+    "",
+    "# 3. In CI, prove the generated files match the manifest.",
     "fabric-gen --input fabric.manifest.json --out generated --check",
     "```",
+    "",
+    "Commit both `fabric.manifest.json` and `generated/`. The manifest is the",
+    "contract other capabilities and applications compile against; regenerating",
+    "is how a consumer learns what changed.",
+    "",
+    "## What to edit",
+    "",
+    "- **Object types** carry a portable JSON Schema. They become generated TypeScript types.",
+    "- **Actions** declare six execution dimensions. A host refuses an action whose",
+    "  declaration does not match how it is invoked, so declare them honestly.",
+    "- **Events** are the capability's public vocabulary. Adding a field is compatible;",
+    "  removing or retyping one is not.",
     ""
   ].join("\n");
   await (0, import_promises.mkdir)(options.directory, { recursive: true });
@@ -312,8 +501,7 @@ async function initializeCapability(options) {
   try {
     for (const [file, content] of [
       [readmePath, readme],
-      [manifestPath, `${JSON.stringify(manifest, null, 2)}
-`]
+      [modulePath, module2]
     ]) {
       await (0, import_promises.writeFile)(file, content, { encoding: "utf8", flag: "wx" });
       created.push(file);
@@ -327,6 +515,9 @@ async function initializeCapability(options) {
   }
   return { created };
 }
+function camelCase(namespace) {
+  return namespace.split("-").map((part, index) => index === 0 ? part : `${part.charAt(0).toUpperCase()}${part.slice(1)}`).join("");
+}
 async function generateFromManifest(options) {
   const input = JSON.parse(await (0, import_promises.readFile)(options.inputPath, "utf8"));
   if (!input || typeof input !== "object" || Array.isArray(input)) throw new Error("Manifest input must be a JSON object.");
@@ -440,6 +631,7 @@ async function promoteExperience(options) {
   FabricGenUsageError,
   GENERATOR_TARGETS,
   checkApplication,
+  exportModuleManifestFile,
   fabricGenCliExitCode,
   generateFromManifest,
   initializeCapability,

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../index.ts"],"sourcesContent":["import { access, mkdir, readFile, readdir, rm, writeFile } from \"node:fs/promises\";\nimport { createPrivateKey } from \"node:crypto\";\nimport path from \"node:path\";\nimport { compileManifestBundle, runGenerator, type GeneratedFile, type GeneratorTarget } from \"@fabricorg/compiler\";\nimport { capabilityGenerator } from \"@fabricorg/gen-capability\";\nimport { docsGenerator } from \"@fabricorg/gen-docs\";\nimport { eventsGenerator } from \"@fabricorg/gen-events\";\nimport { typesGenerator } from \"@fabricorg/gen-types\";\nimport { prismaGenerator } from \"@fabricorg/gen-prisma\";\nimport { graphqlGenerator } from \"@fabricorg/gen-graphql\";\nimport { sduiGenerator } from \"@fabricorg/gen-sdui\";\nimport type { UsageContractDocument } from \"@fabricorg/gen-capability\";\nimport { createEs256ReleaseSigner, promoteExperienceRelease } from \"@fabricorg/sdui-composer\";\nimport { conformanceGenerator } from \"@fabricorg/gen-conformance\";\nimport {\n\tassertAssemblyLockfile,\n\tassertAssemblyRuntimeCompatible,\n\ttype AssemblyLockfile,\n\ttype AvailableCapability,\n} from \"@fabricorg/assembly\";\nimport {\n\tassertSduiReleaseIntegrity,\n\ttype SduiRelease,\n} from \"@fabricorg/sdui-release\";\n\nexport const GENERATOR_TARGETS: Record<string, GeneratorTarget> = {\n\ttypes: typesGenerator,\n\tevents: eventsGenerator,\n\tcapability: capabilityGenerator,\n\tdocs: docsGenerator,\n\tprisma: prismaGenerator,\n\tgraphql: graphqlGenerator,\n\tsdui: sduiGenerator,\n\tconformance: conformanceGenerator,\n};\nconst compareCanonicalStrings = (left: string, right: string): number => left < right ? -1 : left > right ? 1 : 0;\n\nexport interface GenerateOptions { inputPath: string; outputDirectory: string; targets: string[]; check?: boolean; }\nexport interface GenerateResult { changed: string[]; stale: string[]; files: GeneratedFile[]; }\nexport interface InitializeCapabilityOptions { directory: string; namespace: string; }\nexport interface InitializeCapabilityResult { created: string[]; }\nexport interface InitializeExperienceOptions { directory: string; application: string; }\nexport interface InitializeExperienceResult { created: string[]; }\nexport interface CheckApplicationOptions { configPath: string; }\nexport interface PromoteExperienceOptions {\n\tconfigPath: string;\n\t/** PEM-encoded ES256 private key. Never read from the configuration file. */\n\tprivateKeyPath: string;\n\toutputPath?: string;\n}\nexport interface PromoteExperienceResult {\n\tapplication: string;\n\treleaseDigest: string;\n\tassemblyDigest: string;\n\troutes: { views: number; intents: number };\n\toutputPath: string;\n}\nexport interface CheckApplicationResult {\n\tapplication: string;\n\tcapabilities: number;\n\treleases: number;\n\tassemblyDigest: string;\n}\n\nconst usage = [\n\t\"Usage:\",\n\t\"  fabric-gen init capability <namespace> [--directory <path>]\",\n\t\"  fabric-gen init experience <application> [--directory <path>]\",\n\t\"  fabric-gen check-application [--config <path>]\",\n\t\"  fabric-gen promote-experience --config <path> --key <pem> [--out <path>]\",\n\t\"  fabric-gen --input <manifest.json> --out <directory> [--targets <list>] [--check]\",\n].join(\"\\n\");\n\nexport class FabricGenUsageError extends Error {\n\toverride readonly name = \"FabricGenUsageError\";\n}\n\nexport function fabricGenCliExitCode(error: unknown): number {\n\treturn error instanceof FabricGenUsageError ? 2 : 1;\n}\n\nfunction flagValue(args: readonly string[], flag: string): string | undefined {\n\tconst index = args.indexOf(flag);\n\tif (index < 0) return undefined;\n\tconst value = args[index + 1];\n\tif (!value || value.startsWith(\"--\")) throw new FabricGenUsageError(usage);\n\treturn value;\n}\n\n/** Execute one CLI command and return its single human-readable result line. */\nexport async function runFabricGenCommand(args: readonly string[]): Promise<string> {\n\tif (args[0] === \"init\") {\n\t\tif (!args[2] || args[2].startsWith(\"--\")) {\n\t\t\tthrow new FabricGenUsageError(usage);\n\t\t}\n\t\tconst name = args[2];\n\t\tconst directory = flagValue(args, \"--directory\") ?? name;\n\t\tif (args[1] === \"capability\") {\n\t\t\tconst result = await initializeCapability({ directory, namespace: name });\n\t\t\treturn `Initialized capability \"${name}\" with ${result.created.length} files.`;\n\t\t}\n\t\tif (args[1] === \"experience\") {\n\t\t\tconst result = await initializeExperience({ directory, application: name });\n\t\t\treturn `Initialized experience integration \"${name}\" with ${result.created.length} files.`;\n\t\t}\n\t\tthrow new FabricGenUsageError(usage);\n\t}\n\tif (args[0] === \"promote-experience\") {\n\t\tconst configPath = flagValue(args, \"--config\");\n\t\tconst privateKeyPath = flagValue(args, \"--key\");\n\t\tif (!configPath) throw new FabricGenUsageError(\"promote-experience requires --config.\");\n\t\tif (!privateKeyPath) throw new FabricGenUsageError(\"promote-experience requires --key.\");\n\t\tconst outputPath = flagValue(args, \"--out\");\n\t\tconst result = await promoteExperience({\n\t\t\tconfigPath,\n\t\t\tprivateKeyPath,\n\t\t\t...(outputPath ? { outputPath } : {}),\n\t\t});\n\t\treturn [\n\t\t\t`Promoted ${result.application} release ${result.releaseDigest.slice(0, 12)} against assembly ${result.assemblyDigest.slice(0, 12)}.`,\n\t\t\t`Routes: ${result.routes.views} views, ${result.routes.intents} intents.`,\n\t\t\t`Wrote ${result.outputPath}`,\n\t\t].join(\"\\n\");\n\t}\n\n\tif (args[0] === \"check-application\") {\n\t\tconst configPath = flagValue(args, \"--config\") ?? \"fabric.application.json\";\n\t\tconst result = await checkApplication({ configPath });\n\t\treturn `Checked \"${result.application}\": ${result.capabilities} capabilities, ${result.releases} releases.`;\n\t}\n\tconst inputPath = flagValue(args, \"--input\");\n\tconst outputDirectory = flagValue(args, \"--out\");\n\tif (!inputPath || !outputDirectory) throw new FabricGenUsageError(usage);\n\tconst result = await generateFromManifest({\n\t\tinputPath,\n\t\toutputDirectory,\n\t\ttargets: (flagValue(args, \"--targets\") ?? \"types,events,capability,docs\")\n\t\t\t.split(\",\")\n\t\t\t.filter(Boolean),\n\t\tcheck: args.includes(\"--check\"),\n\t});\n\treturn `${args.includes(\"--check\") ? \"Checked\" : \"Generated\"} ${result.files.length} files.`;\n}\n\n/**\n * Add experience integration files to an existing application. It deliberately\n * does not create package.json, routes, authentication, billing, or navigation:\n * those remain owned by the Supastarter-derived application shell.\n */\nexport async function initializeExperience(\n\toptions: InitializeExperienceOptions,\n): Promise<InitializeExperienceResult> {\n\tif (!/^[a-z][a-z0-9-]*$/.test(options.application)) {\n\t\tthrow new Error(\"Application name must use lowercase letters, numbers, and hyphens.\");\n\t}\n\tconst functionName = options.application\n\t\t.split(\"-\")\n\t\t.map((part) => `${part.charAt(0).toUpperCase()}${part.slice(1)}`)\n\t\t.join(\"\");\n\tconst files = [\n\t\t[\n\t\t\tpath.join(options.directory, \"fabric.experience.ts\"),\n\t\t\t[\n\t\t\t\t'import { createExperienceServerRuntime } from \"@fabricorg/experience-runtime/server\";',\n\t\t\t\t'import { createExperienceGateway } from \"@fabricorg/experience-gateway\";',\n\t\t\t\t\"\",\n\t\t\t\t`export const create${functionName}ExperienceRuntime = (`,\n\t\t\t\t\"\\toptions: Parameters<typeof createExperienceServerRuntime>[0],\",\n\t\t\t\t\") => createExperienceServerRuntime(options);\",\n\t\t\t\t\"\",\n\t\t\t\t`export const create${functionName}ExperienceGateway = (`,\n\t\t\t\t\"\\toptions: Parameters<typeof createExperienceGateway>[0],\",\n\t\t\t\t\") => createExperienceGateway(options);\",\n\t\t\t\t\"\",\n\t\t\t].join(\"\\n\"),\n\t\t],\n\t\t[\n\t\t\tpath.join(options.directory, \"fabric.component-pack.ts\"),\n\t\t\t[\n\t\t\t\t'import { defineComponentPack } from \"@fabricorg/component-pack\";',\n\t\t\t\t\"\",\n\t\t\t\t`export const define${functionName}ComponentPack = (artifactDigest: string) =>`,\n\t\t\t\t\"\\tdefineComponentPack({\",\n\t\t\t\t`\\t\\tname: \"${options.application}\",`,\n\t\t\t\t`\\t\\tnamespace: \"${options.application}\",`,\n\t\t\t\t'\\t\\tversion: \"0.1.0\",',\n\t\t\t\t\"\\t\\tartifactDigest,\",\n\t\t\t\t'\\t\\ttokenContract: { name: \"fabric-family\", version: \"1.0.0\" },',\n\t\t\t\t\"\\t\\tcomponents: {\",\n\t\t\t\t'\\t\\t\\tText: { module: \"./components/text.js\", roles: [\"content\"], slots: [] },',\n\t\t\t\t\"\\t\\t},\",\n\t\t\t\t\"\\t});\",\n\t\t\t\t\"\",\n\t\t\t].join(\"\\n\"),\n\t\t],\n\t\t[\n\t\t\tpath.join(options.directory, \"fabric.application.json\"),\n\t\t\t`${JSON.stringify({\n\t\t\t\tformatVersion: 1,\n\t\t\t\tapplication: options.application,\n\t\t\t\tassembly: \"./fabric.assembly.lock.json\",\n\t\t\t\truntimeCapabilities: \"./fabric.runtime.json\",\n\t\t\t\treleases: [],\n\t\t\t}, null, 2)}\\n`,\n\t\t],\n\t] as const;\n\tawait mkdir(options.directory, { recursive: true });\n\tconst created: string[] = [];\n\ttry {\n\t\tfor (const [file, content] of files) {\n\t\t\tawait writeFile(file, content, { encoding: \"utf8\", flag: \"wx\" });\n\t\t\tcreated.push(file);\n\t\t}\n\t} catch (error) {\n\t\tawait Promise.all(created.map((file) => rm(file, { force: true })));\n\t\tif ((error as NodeJS.ErrnoException).code === \"EEXIST\") {\n\t\t\tthrow new Error(\"Refusing to overwrite an existing experience integration file.\");\n\t\t}\n\t\tthrow error;\n\t}\n\treturn { created };\n}\n\ninterface ApplicationCheckConfig {\n\tformatVersion: 1;\n\tassembly: string;\n\truntimeCapabilities: string;\n\treleases: string[];\n}\n\nasync function readJson(file: string): Promise<unknown> {\n\treturn JSON.parse(await readFile(file, \"utf8\"));\n}\n\nfunction assertApplicationCheckConfig(value: unknown): asserts value is ApplicationCheckConfig {\n\tif (!value || typeof value !== \"object\" || Array.isArray(value)) {\n\t\tthrow new Error(\"Application check configuration must be a JSON object.\");\n\t}\n\tconst config = value as Record<string, unknown>;\n\tif (config.formatVersion !== 1) throw new Error(\"Application check configuration formatVersion must be 1.\");\n\tif (typeof config.assembly !== \"string\" || !config.assembly) {\n\t\tthrow new Error(\"Application check configuration assembly must be a file path.\");\n\t}\n\tif (typeof config.runtimeCapabilities !== \"string\" || !config.runtimeCapabilities) {\n\t\tthrow new Error(\"Application check configuration runtimeCapabilities must be a file path.\");\n\t}\n\tif (!Array.isArray(config.releases) || !config.releases.every((entry) => typeof entry === \"string\" && entry)) {\n\t\tthrow new Error(\"Application check configuration releases must be an array of file paths.\");\n\t}\n}\n\n/**\n * Verify an application's immutable composition inputs before deployment.\n * Every runtime capability must exactly match the approved lockfile, and every\n * promoted experience release must be intact and bound to that assembly.\n */\nexport async function checkApplication(\n\toptions: CheckApplicationOptions,\n): Promise<CheckApplicationResult> {\n\tconst configValue = await readJson(options.configPath);\n\tassertApplicationCheckConfig(configValue);\n\tconst base = path.dirname(options.configPath);\n\tconst resolve = (file: string): string => path.resolve(base, file);\n\tconst assembly = await readJson(resolve(configValue.assembly)) as AssemblyLockfile;\n\tassertAssemblyLockfile(assembly);\n\tconst runtimeCapabilities = await readJson(\n\t\tresolve(configValue.runtimeCapabilities),\n\t) as AvailableCapability[];\n\tif (!Array.isArray(runtimeCapabilities)) {\n\t\tthrow new Error(\"Runtime capabilities must be a JSON array.\");\n\t}\n\tassertAssemblyRuntimeCompatible(assembly, runtimeCapabilities);\n\tfor (const releasePath of configValue.releases) {\n\t\tconst release = await readJson(resolve(releasePath)) as SduiRelease;\n\t\ttry {\n\t\t\tassertSduiReleaseIntegrity(release);\n\t\t} catch (error) {\n\t\t\tthrow new Error(\n\t\t\t\t`Experience release \"${releasePath}\" is invalid: ${error instanceof Error ? error.message : String(error)}`,\n\t\t\t);\n\t\t}\n\t\tif (release.assemblyDigest !== assembly.assemblyDigest) {\n\t\t\tthrow new Error(\n\t\t\t\t`Experience release \"${release.document.name}@${release.document.version}\" belongs to assembly \"${release.assemblyDigest}\", not \"${assembly.assemblyDigest}\".`,\n\t\t\t);\n\t\t}\n\t}\n\treturn {\n\t\tapplication: assembly.application,\n\t\tcapabilities: assembly.capabilities.length,\n\t\treleases: configValue.releases.length,\n\t\tassemblyDigest: assembly.assemblyDigest,\n\t};\n}\n\n/**\n * Create the smallest useful capability source tree. The manifest is accepted\n * by the compiler immediately, while leaving domain vocabulary to the adopter.\n */\nexport async function initializeCapability(\n\toptions: InitializeCapabilityOptions,\n): Promise<InitializeCapabilityResult> {\n\tif (!/^[a-z][a-z0-9-]*$/.test(options.namespace)) {\n\t\tthrow new Error(\"Capability namespace must use lowercase letters, numbers, and hyphens.\");\n\t}\n\tconst displayName = options.namespace\n\t\t.split(\"-\")\n\t\t.map((part, index) => index === 0\n\t\t\t? `${part.charAt(0).toUpperCase()}${part.slice(1)}`\n\t\t\t: part)\n\t\t.join(\" \");\n\tconst manifestPath = path.join(options.directory, \"fabric.manifest.json\");\n\tconst readmePath = path.join(options.directory, \"README.md\");\n\tfor (const file of [readmePath, manifestPath]) {\n\t\ttry {\n\t\t\tawait access(file);\n\t\t\tthrow new Error(`Refusing to overwrite existing file \"${file}\".`);\n\t\t} catch (error) {\n\t\t\tif (error instanceof Error && error.message.startsWith(\"Refusing to overwrite\")) throw error;\n\t\t\tif ((error as NodeJS.ErrnoException).code !== \"ENOENT\") throw error;\n\t\t}\n\t}\n\tconst manifest = {\n\t\tmanifestVersion: 2,\n\t\tnamespace: options.namespace,\n\t\tobjectTypes: [],\n\t\tsubjectTypes: [],\n\t\tidPrefixes: [],\n\t\tdependencies: [],\n\t\tpolicies: [],\n\t\teventTypes: [],\n\t\tactions: [],\n\t\tviews: [],\n\t\tstateMachines: [],\n\t\tcapability: {\n\t\t\tdisplayName,\n\t\t\tdescription: `Governed ${displayName.toLowerCase()} capability.`,\n\t\t\tstability: \"experimental\",\n\t\t},\n\t};\n\tconst readme = [\n\t\t`# ${displayName}`,\n\t\t\"\",\n\t\t\"Define domain objects, governed actions, events, and projections in `fabric.manifest.json`.\",\n\t\t\"\",\n\t\t\"```bash\",\n\t\t\"fabric-gen --input fabric.manifest.json --out generated\",\n\t\t\"fabric-gen --input fabric.manifest.json --out generated --check\",\n\t\t\"```\",\n\t\t\"\",\n\t].join(\"\\n\");\n\tawait mkdir(options.directory, { recursive: true });\n\tconst created: string[] = [];\n\ttry {\n\t\tfor (const [file, content] of [\n\t\t\t[readmePath, readme],\n\t\t\t[manifestPath, `${JSON.stringify(manifest, null, 2)}\\n`],\n\t\t] as const) {\n\t\t\tawait writeFile(file, content, { encoding: \"utf8\", flag: \"wx\" });\n\t\t\tcreated.push(file);\n\t\t}\n\t} catch (error) {\n\t\tawait Promise.all(created.map((file) => rm(file, { force: true })));\n\t\tif ((error as NodeJS.ErrnoException).code === \"EEXIST\") {\n\t\t\tthrow new Error(\"Refusing to overwrite a file created during capability initialization.\");\n\t\t}\n\t\tthrow error;\n\t}\n\treturn { created };\n}\n\nexport async function generateFromManifest(options: GenerateOptions): Promise<GenerateResult> {\n\tconst input = JSON.parse(await readFile(options.inputPath, \"utf8\"));\n\tif (!input || typeof input !== \"object\" || Array.isArray(input)) throw new Error(\"Manifest input must be a JSON object.\");\n\tconst bundle = \"modules\" in input ? input : { manifestVersion: input.manifestVersion, modules: [input] };\n\tconst ir = compileManifestBundle(bundle);\n\tconst files = (await Promise.all(options.targets.map(async (name) => {\n\t\tconst target = GENERATOR_TARGETS[name];\n\t\tif (!target) throw new Error(`Unknown generator target \"${name}\".`);\n\t\treturn (await runGenerator(target, ir)).map((file) => ({ ...file, path: `${name}/${file.path}` }));\n\t}))).flat().sort((left, right) => compareCanonicalStrings(left.path, right.path));\n\tconst expected = new Set(files.map((file) => file.path));\n\tconst existing = await listFiles(options.outputDirectory);\n\tconst selectedPrefixes = options.targets.map((target) => `${target}/`);\n\tconst stale = existing.filter((file) => selectedPrefixes.some((prefix) => file.startsWith(prefix)) && !expected.has(file));\n\tif (!options.check) await Promise.all(stale.map((file) => rm(path.join(options.outputDirectory, file), { force: true })));\n\tconst changed: string[] = [];\n\tfor (const file of files) {\n\t\tconst target = path.join(options.outputDirectory, file.path);\n\t\tlet current: string | undefined;\n\t\ttry { current = await readFile(target, \"utf8\"); } catch { current = undefined; }\n\t\tif (current !== file.content) {\n\t\t\tchanged.push(file.path);\n\t\t\tif (!options.check) { await mkdir(path.dirname(target), { recursive: true }); await writeFile(target, file.content, \"utf8\"); }\n\t\t}\n\t}\n\tif (options.check && (changed.length || stale.length)) throw new Error(`Generated artifacts drifted: ${[...changed, ...stale.map((file) => `stale:${file}`)].join(\", \")}`);\n\treturn { changed, stale, files };\n}\n\nasync function listFiles(directory: string, prefix = \"\"): Promise<string[]> {\n\tlet entries;\n\ttry { entries = await readdir(directory, { withFileTypes: true }); } catch { return []; }\n\tconst nested = await Promise.all(entries.map((entry) => entry.isDirectory() ? listFiles(path.join(directory, entry.name), `${prefix}${entry.name}/`) : [`${prefix}${entry.name}`]));\n\treturn nested.flat().sort();\n}\n\ninterface ExperiencePromotionConfig {\n\tformatVersion: 1;\n\tapplication: string;\n\tissuer: string;\n\tkeyId: string;\n\tassembly: string;\n\trelease: string;\n\tcontracts: string[];\n}\n\nfunction assertExperiencePromotionConfig(value: unknown): asserts value is ExperiencePromotionConfig {\n\tif (!value || typeof value !== \"object\" || Array.isArray(value)) {\n\t\tthrow new Error(\"Experience promotion configuration must be a JSON object.\");\n\t}\n\tconst config = value as Record<string, unknown>;\n\tif (config.formatVersion !== 1) throw new Error(\"Experience promotion configuration formatVersion must be 1.\");\n\tfor (const field of [\"application\", \"issuer\", \"keyId\", \"assembly\", \"release\"] as const) {\n\t\tif (typeof config[field] !== \"string\" || !config[field]) {\n\t\t\tthrow new Error(`Experience promotion configuration ${field} must be a non-empty string.`);\n\t\t}\n\t}\n\t// The application name is interpolated into the default output path and\n\t// signed into the release body, so \"../../x\" would escape the configuration\n\t// directory and \"/etc/x\" would ignore it entirely.\n\tif (!/^[a-z][a-z0-9-]*$/.test(config.application as string)) {\n\t\tthrow new Error(\"Experience promotion configuration application must be lowercase letters, numbers, and hyphens.\");\n\t}\n\tif (!Array.isArray(config.contracts) || !config.contracts.every((entry) => typeof entry === \"string\" && entry)) {\n\t\tthrow new Error(\"Experience promotion configuration contracts must be an array of file paths.\");\n\t}\n\t// A signing key in a checked-in configuration file is a key in version\n\t// control. Enumerating two spellings only catches two spellings, so reject\n\t// anything that reads like one, and reject unknown fields so a future\n\t// spelling cannot arrive unnoticed.\n\tconst known = new Set([\"formatVersion\", \"application\", \"issuer\", \"keyId\", \"assembly\", \"release\", \"contracts\"]);\n\tfor (const field of Object.keys(config)) {\n\t\tif (/key|secret|credential|token|pem|password/i.test(field) && field !== \"keyId\") {\n\t\t\tthrow new Error(`Experience promotion configuration must not carry \"${field}\"; pass the signing key with --key.`);\n\t\t}\n\t\tif (!known.has(field)) {\n\t\t\tthrow new Error(`Experience promotion configuration has an unknown field \"${field}\".`);\n\t\t}\n\t}\n}\n\n/**\n * Turn a validated release into a signed one.\n *\n * Promotion is where a granted `capability://` reference becomes a concrete\n * action id and version, so it is also where that mapping has to be bound to\n * the assembly that approved it. The signing key is a command-line argument\n * rather than a configuration field, because a configuration file is the kind\n * of thing that ends up committed.\n */\nexport async function promoteExperience(\n\toptions: PromoteExperienceOptions,\n): Promise<PromoteExperienceResult> {\n\tconst configValue = await readJson(options.configPath);\n\tassertExperiencePromotionConfig(configValue);\n\tconst base = path.dirname(options.configPath);\n\tconst resolve = (file: string): string => path.resolve(base, file);\n\n\tconst assembly = await readJson(resolve(configValue.assembly)) as AssemblyLockfile;\n\tassertAssemblyLockfile(assembly);\n\tconst release = await readJson(resolve(configValue.release)) as SduiRelease;\n\tassertSduiReleaseIntegrity(release);\n\tconst contracts = await Promise.all(\n\t\tconfigValue.contracts.map(async (file) => await readJson(resolve(file)) as UsageContractDocument),\n\t);\n\n\tconst privateKey = createPrivateKey(await readFile(options.privateKeyPath, \"utf8\"));\n\tconst promoted = await promoteExperienceRelease({\n\t\tapplication: configValue.application,\n\t\trelease,\n\t\tcontracts,\n\t\tassembly,\n\t\tissuer: configValue.issuer,\n\t\tsigner: createEs256ReleaseSigner({ keyId: configValue.keyId, privateKey }),\n\t});\n\n\tconst outputPath = options.outputPath\n\t\t? path.resolve(options.outputPath)\n\t\t: resolve(`${configValue.application}.experience-release.jws`);\n\tawait mkdir(path.dirname(outputPath), { recursive: true });\n\tawait writeFile(outputPath, `${promoted.compactJws}\\n`, \"utf8\");\n\n\treturn {\n\t\tapplication: configValue.application,\n\t\treleaseDigest: release.releaseDigest,\n\t\tassemblyDigest: assembly.assemblyDigest,\n\t\troutes: {\n\t\t\tviews: promoted.release.routes.views.length,\n\t\t\tintents: promoted.release.routes.intents.length,\n\t\t},\n\t\toutputPath,\n\t};\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,sBAAgE;AAChE,yBAAiC;AACjC,uBAAiB;AACjB,sBAA8F;AAC9F,4BAAoC;AACpC,sBAA8B;AAC9B,wBAAgC;AAChC,uBAA+B;AAC/B,wBAAgC;AAChC,yBAAiC;AACjC,sBAA8B;AAE9B,2BAAmE;AACnE,6BAAqC;AACrC,sBAKO;AACP,0BAGO;AAEA,IAAM,oBAAqD;AAAA,EACjE,OAAO;AAAA,EACP,QAAQ;AAAA,EACR,YAAY;AAAA,EACZ,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,MAAM;AAAA,EACN,aAAa;AACd;AACA,IAAM,0BAA0B,CAAC,MAAc,UAA0B,OAAO,QAAQ,KAAK,OAAO,QAAQ,IAAI;AA6BhH,IAAM,QAAQ;AAAA,EACb;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACD,EAAE,KAAK,IAAI;AAEJ,IAAM,sBAAN,cAAkC,MAAM;AAAA,EAC5B,OAAO;AAC1B;AAEO,SAAS,qBAAqB,OAAwB;AAC5D,SAAO,iBAAiB,sBAAsB,IAAI;AACnD;AAEA,SAAS,UAAU,MAAyB,MAAkC;AAC7E,QAAM,QAAQ,KAAK,QAAQ,IAAI;AAC/B,MAAI,QAAQ,EAAG,QAAO;AACtB,QAAM,QAAQ,KAAK,QAAQ,CAAC;AAC5B,MAAI,CAAC,SAAS,MAAM,WAAW,IAAI,EAAG,OAAM,IAAI,oBAAoB,KAAK;AACzE,SAAO;AACR;AAGA,eAAsB,oBAAoB,MAA0C;AACnF,MAAI,KAAK,CAAC,MAAM,QAAQ;AACvB,QAAI,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,EAAE,WAAW,IAAI,GAAG;AACzC,YAAM,IAAI,oBAAoB,KAAK;AAAA,IACpC;AACA,UAAM,OAAO,KAAK,CAAC;AACnB,UAAM,YAAY,UAAU,MAAM,aAAa,KAAK;AACpD,QAAI,KAAK,CAAC,MAAM,cAAc;AAC7B,YAAMA,UAAS,MAAM,qBAAqB,EAAE,WAAW,WAAW,KAAK,CAAC;AACxE,aAAO,2BAA2B,IAAI,UAAUA,QAAO,QAAQ,MAAM;AAAA,IACtE;AACA,QAAI,KAAK,CAAC,MAAM,cAAc;AAC7B,YAAMA,UAAS,MAAM,qBAAqB,EAAE,WAAW,aAAa,KAAK,CAAC;AAC1E,aAAO,uCAAuC,IAAI,UAAUA,QAAO,QAAQ,MAAM;AAAA,IAClF;AACA,UAAM,IAAI,oBAAoB,KAAK;AAAA,EACpC;AACA,MAAI,KAAK,CAAC,MAAM,sBAAsB;AACrC,UAAM,aAAa,UAAU,MAAM,UAAU;AAC7C,UAAM,iBAAiB,UAAU,MAAM,OAAO;AAC9C,QAAI,CAAC,WAAY,OAAM,IAAI,oBAAoB,uCAAuC;AACtF,QAAI,CAAC,eAAgB,OAAM,IAAI,oBAAoB,oCAAoC;AACvF,UAAM,aAAa,UAAU,MAAM,OAAO;AAC1C,UAAMA,UAAS,MAAM,kBAAkB;AAAA,MACtC;AAAA,MACA;AAAA,MACA,GAAI,aAAa,EAAE,WAAW,IAAI,CAAC;AAAA,IACpC,CAAC;AACD,WAAO;AAAA,MACN,YAAYA,QAAO,WAAW,YAAYA,QAAO,cAAc,MAAM,GAAG,EAAE,CAAC,qBAAqBA,QAAO,eAAe,MAAM,GAAG,EAAE,CAAC;AAAA,MAClI,WAAWA,QAAO,OAAO,KAAK,WAAWA,QAAO,OAAO,OAAO;AAAA,MAC9D,SAASA,QAAO,UAAU;AAAA,IAC3B,EAAE,KAAK,IAAI;AAAA,EACZ;AAEA,MAAI,KAAK,CAAC,MAAM,qBAAqB;AACpC,UAAM,aAAa,UAAU,MAAM,UAAU,KAAK;AAClD,UAAMA,UAAS,MAAM,iBAAiB,EAAE,WAAW,CAAC;AACpD,WAAO,YAAYA,QAAO,WAAW,MAAMA,QAAO,YAAY,kBAAkBA,QAAO,QAAQ;AAAA,EAChG;AACA,QAAM,YAAY,UAAU,MAAM,SAAS;AAC3C,QAAM,kBAAkB,UAAU,MAAM,OAAO;AAC/C,MAAI,CAAC,aAAa,CAAC,gBAAiB,OAAM,IAAI,oBAAoB,KAAK;AACvE,QAAM,SAAS,MAAM,qBAAqB;AAAA,IACzC;AAAA,IACA;AAAA,IACA,UAAU,UAAU,MAAM,WAAW,KAAK,gCACxC,MAAM,GAAG,EACT,OAAO,OAAO;AAAA,IAChB,OAAO,KAAK,SAAS,SAAS;AAAA,EAC/B,CAAC;AACD,SAAO,GAAG,KAAK,SAAS,SAAS,IAAI,YAAY,WAAW,IAAI,OAAO,MAAM,MAAM;AACpF;AAOA,eAAsB,qBACrB,SACsC;AACtC,MAAI,CAAC,oBAAoB,KAAK,QAAQ,WAAW,GAAG;AACnD,UAAM,IAAI,MAAM,oEAAoE;AAAA,EACrF;AACA,QAAM,eAAe,QAAQ,YAC3B,MAAM,GAAG,EACT,IAAI,CAAC,SAAS,GAAG,KAAK,OAAO,CAAC,EAAE,YAAY,CAAC,GAAG,KAAK,MAAM,CAAC,CAAC,EAAE,EAC/D,KAAK,EAAE;AACT,QAAM,QAAQ;AAAA,IACb;AAAA,MACC,iBAAAC,QAAK,KAAK,QAAQ,WAAW,sBAAsB;AAAA,MACnD;AAAA,QACC;AAAA,QACA;AAAA,QACA;AAAA,QACA,sBAAsB,YAAY;AAAA,QAClC;AAAA,QACA;AAAA,QACA;AAAA,QACA,sBAAsB,YAAY;AAAA,QAClC;AAAA,QACA;AAAA,QACA;AAAA,MACD,EAAE,KAAK,IAAI;AAAA,IACZ;AAAA,IACA;AAAA,MACC,iBAAAA,QAAK,KAAK,QAAQ,WAAW,0BAA0B;AAAA,MACvD;AAAA,QACC;AAAA,QACA;AAAA,QACA,sBAAsB,YAAY;AAAA,QAClC;AAAA,QACA,YAAc,QAAQ,WAAW;AAAA,QACjC,iBAAmB,QAAQ,WAAW;AAAA,QACtC;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACD,EAAE,KAAK,IAAI;AAAA,IACZ;AAAA,IACA;AAAA,MACC,iBAAAA,QAAK,KAAK,QAAQ,WAAW,yBAAyB;AAAA,MACtD,GAAG,KAAK,UAAU;AAAA,QACjB,eAAe;AAAA,QACf,aAAa,QAAQ;AAAA,QACrB,UAAU;AAAA,QACV,qBAAqB;AAAA,QACrB,UAAU,CAAC;AAAA,MACZ,GAAG,MAAM,CAAC,CAAC;AAAA;AAAA,IACZ;AAAA,EACD;AACA,YAAM,uBAAM,QAAQ,WAAW,EAAE,WAAW,KAAK,CAAC;AAClD,QAAM,UAAoB,CAAC;AAC3B,MAAI;AACH,eAAW,CAAC,MAAM,OAAO,KAAK,OAAO;AACpC,gBAAM,2BAAU,MAAM,SAAS,EAAE,UAAU,QAAQ,MAAM,KAAK,CAAC;AAC/D,cAAQ,KAAK,IAAI;AAAA,IAClB;AAAA,EACD,SAAS,OAAO;AACf,UAAM,QAAQ,IAAI,QAAQ,IAAI,CAAC,aAAS,oBAAG,MAAM,EAAE,OAAO,KAAK,CAAC,CAAC,CAAC;AAClE,QAAK,MAAgC,SAAS,UAAU;AACvD,YAAM,IAAI,MAAM,gEAAgE;AAAA,IACjF;AACA,UAAM;AAAA,EACP;AACA,SAAO,EAAE,QAAQ;AAClB;AASA,eAAe,SAAS,MAAgC;AACvD,SAAO,KAAK,MAAM,UAAM,0BAAS,MAAM,MAAM,CAAC;AAC/C;AAEA,SAAS,6BAA6B,OAAyD;AAC9F,MAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,GAAG;AAChE,UAAM,IAAI,MAAM,wDAAwD;AAAA,EACzE;AACA,QAAM,SAAS;AACf,MAAI,OAAO,kBAAkB,EAAG,OAAM,IAAI,MAAM,0DAA0D;AAC1G,MAAI,OAAO,OAAO,aAAa,YAAY,CAAC,OAAO,UAAU;AAC5D,UAAM,IAAI,MAAM,+DAA+D;AAAA,EAChF;AACA,MAAI,OAAO,OAAO,wBAAwB,YAAY,CAAC,OAAO,qBAAqB;AAClF,UAAM,IAAI,MAAM,0EAA0E;AAAA,EAC3F;AACA,MAAI,CAAC,MAAM,QAAQ,OAAO,QAAQ,KAAK,CAAC,OAAO,SAAS,MAAM,CAAC,UAAU,OAAO,UAAU,YAAY,KAAK,GAAG;AAC7G,UAAM,IAAI,MAAM,0EAA0E;AAAA,EAC3F;AACD;AAOA,eAAsB,iBACrB,SACkC;AAClC,QAAM,cAAc,MAAM,SAAS,QAAQ,UAAU;AACrD,+BAA6B,WAAW;AACxC,QAAM,OAAO,iBAAAA,QAAK,QAAQ,QAAQ,UAAU;AAC5C,QAAM,UAAU,CAAC,SAAyB,iBAAAA,QAAK,QAAQ,MAAM,IAAI;AACjE,QAAM,WAAW,MAAM,SAAS,QAAQ,YAAY,QAAQ,CAAC;AAC7D,8CAAuB,QAAQ;AAC/B,QAAM,sBAAsB,MAAM;AAAA,IACjC,QAAQ,YAAY,mBAAmB;AAAA,EACxC;AACA,MAAI,CAAC,MAAM,QAAQ,mBAAmB,GAAG;AACxC,UAAM,IAAI,MAAM,4CAA4C;AAAA,EAC7D;AACA,uDAAgC,UAAU,mBAAmB;AAC7D,aAAW,eAAe,YAAY,UAAU;AAC/C,UAAM,UAAU,MAAM,SAAS,QAAQ,WAAW,CAAC;AACnD,QAAI;AACH,0DAA2B,OAAO;AAAA,IACnC,SAAS,OAAO;AACf,YAAM,IAAI;AAAA,QACT,uBAAuB,WAAW,iBAAiB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,MAC1G;AAAA,IACD;AACA,QAAI,QAAQ,mBAAmB,SAAS,gBAAgB;AACvD,YAAM,IAAI;AAAA,QACT,uBAAuB,QAAQ,SAAS,IAAI,IAAI,QAAQ,SAAS,OAAO,0BAA0B,QAAQ,cAAc,WAAW,SAAS,cAAc;AAAA,MAC3J;AAAA,IACD;AAAA,EACD;AACA,SAAO;AAAA,IACN,aAAa,SAAS;AAAA,IACtB,cAAc,SAAS,aAAa;AAAA,IACpC,UAAU,YAAY,SAAS;AAAA,IAC/B,gBAAgB,SAAS;AAAA,EAC1B;AACD;AAMA,eAAsB,qBACrB,SACsC;AACtC,MAAI,CAAC,oBAAoB,KAAK,QAAQ,SAAS,GAAG;AACjD,UAAM,IAAI,MAAM,wEAAwE;AAAA,EACzF;AACA,QAAM,cAAc,QAAQ,UAC1B,MAAM,GAAG,EACT,IAAI,CAAC,MAAM,UAAU,UAAU,IAC7B,GAAG,KAAK,OAAO,CAAC,EAAE,YAAY,CAAC,GAAG,KAAK,MAAM,CAAC,CAAC,KAC/C,IAAI,EACN,KAAK,GAAG;AACV,QAAM,eAAe,iBAAAA,QAAK,KAAK,QAAQ,WAAW,sBAAsB;AACxE,QAAM,aAAa,iBAAAA,QAAK,KAAK,QAAQ,WAAW,WAAW;AAC3D,aAAW,QAAQ,CAAC,YAAY,YAAY,GAAG;AAC9C,QAAI;AACH,gBAAM,wBAAO,IAAI;AACjB,YAAM,IAAI,MAAM,wCAAwC,IAAI,IAAI;AAAA,IACjE,SAAS,OAAO;AACf,UAAI,iBAAiB,SAAS,MAAM,QAAQ,WAAW,uBAAuB,EAAG,OAAM;AACvF,UAAK,MAAgC,SAAS,SAAU,OAAM;AAAA,IAC/D;AAAA,EACD;AACA,QAAM,WAAW;AAAA,IAChB,iBAAiB;AAAA,IACjB,WAAW,QAAQ;AAAA,IACnB,aAAa,CAAC;AAAA,IACd,cAAc,CAAC;AAAA,IACf,YAAY,CAAC;AAAA,IACb,cAAc,CAAC;AAAA,IACf,UAAU,CAAC;AAAA,IACX,YAAY,CAAC;AAAA,IACb,SAAS,CAAC;AAAA,IACV,OAAO,CAAC;AAAA,IACR,eAAe,CAAC;AAAA,IAChB,YAAY;AAAA,MACX;AAAA,MACA,aAAa,YAAY,YAAY,YAAY,CAAC;AAAA,MAClD,WAAW;AAAA,IACZ;AAAA,EACD;AACA,QAAM,SAAS;AAAA,IACd,KAAK,WAAW;AAAA,IAChB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACD,EAAE,KAAK,IAAI;AACX,YAAM,uBAAM,QAAQ,WAAW,EAAE,WAAW,KAAK,CAAC;AAClD,QAAM,UAAoB,CAAC;AAC3B,MAAI;AACH,eAAW,CAAC,MAAM,OAAO,KAAK;AAAA,MAC7B,CAAC,YAAY,MAAM;AAAA,MACnB,CAAC,cAAc,GAAG,KAAK,UAAU,UAAU,MAAM,CAAC,CAAC;AAAA,CAAI;AAAA,IACxD,GAAY;AACX,gBAAM,2BAAU,MAAM,SAAS,EAAE,UAAU,QAAQ,MAAM,KAAK,CAAC;AAC/D,cAAQ,KAAK,IAAI;AAAA,IAClB;AAAA,EACD,SAAS,OAAO;AACf,UAAM,QAAQ,IAAI,QAAQ,IAAI,CAAC,aAAS,oBAAG,MAAM,EAAE,OAAO,KAAK,CAAC,CAAC,CAAC;AAClE,QAAK,MAAgC,SAAS,UAAU;AACvD,YAAM,IAAI,MAAM,wEAAwE;AAAA,IACzF;AACA,UAAM;AAAA,EACP;AACA,SAAO,EAAE,QAAQ;AAClB;AAEA,eAAsB,qBAAqB,SAAmD;AAC7F,QAAM,QAAQ,KAAK,MAAM,UAAM,0BAAS,QAAQ,WAAW,MAAM,CAAC;AAClE,MAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,EAAG,OAAM,IAAI,MAAM,uCAAuC;AACxH,QAAM,SAAS,aAAa,QAAQ,QAAQ,EAAE,iBAAiB,MAAM,iBAAiB,SAAS,CAAC,KAAK,EAAE;AACvG,QAAM,SAAK,uCAAsB,MAAM;AACvC,QAAM,SAAS,MAAM,QAAQ,IAAI,QAAQ,QAAQ,IAAI,OAAO,SAAS;AACpE,UAAM,SAAS,kBAAkB,IAAI;AACrC,QAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,6BAA6B,IAAI,IAAI;AAClE,YAAQ,UAAM,8BAAa,QAAQ,EAAE,GAAG,IAAI,CAAC,UAAU,EAAE,GAAG,MAAM,MAAM,GAAG,IAAI,IAAI,KAAK,IAAI,GAAG,EAAE;AAAA,EAClG,CAAC,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC,MAAM,UAAU,wBAAwB,KAAK,MAAM,MAAM,IAAI,CAAC;AAChF,QAAM,WAAW,IAAI,IAAI,MAAM,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC;AACvD,QAAM,WAAW,MAAM,UAAU,QAAQ,eAAe;AACxD,QAAM,mBAAmB,QAAQ,QAAQ,IAAI,CAAC,WAAW,GAAG,MAAM,GAAG;AACrE,QAAM,QAAQ,SAAS,OAAO,CAAC,SAAS,iBAAiB,KAAK,CAAC,WAAW,KAAK,WAAW,MAAM,CAAC,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC;AACzH,MAAI,CAAC,QAAQ,MAAO,OAAM,QAAQ,IAAI,MAAM,IAAI,CAAC,aAAS,oBAAG,iBAAAA,QAAK,KAAK,QAAQ,iBAAiB,IAAI,GAAG,EAAE,OAAO,KAAK,CAAC,CAAC,CAAC;AACxH,QAAM,UAAoB,CAAC;AAC3B,aAAW,QAAQ,OAAO;AACzB,UAAM,SAAS,iBAAAA,QAAK,KAAK,QAAQ,iBAAiB,KAAK,IAAI;AAC3D,QAAI;AACJ,QAAI;AAAE,gBAAU,UAAM,0BAAS,QAAQ,MAAM;AAAA,IAAG,QAAQ;AAAE,gBAAU;AAAA,IAAW;AAC/E,QAAI,YAAY,KAAK,SAAS;AAC7B,cAAQ,KAAK,KAAK,IAAI;AACtB,UAAI,CAAC,QAAQ,OAAO;AAAE,kBAAM,uBAAM,iBAAAA,QAAK,QAAQ,MAAM,GAAG,EAAE,WAAW,KAAK,CAAC;AAAG,kBAAM,2BAAU,QAAQ,KAAK,SAAS,MAAM;AAAA,MAAG;AAAA,IAC9H;AAAA,EACD;AACA,MAAI,QAAQ,UAAU,QAAQ,UAAU,MAAM,QAAS,OAAM,IAAI,MAAM,gCAAgC,CAAC,GAAG,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,SAAS,IAAI,EAAE,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE;AACzK,SAAO,EAAE,SAAS,OAAO,MAAM;AAChC;AAEA,eAAe,UAAU,WAAmB,SAAS,IAAuB;AAC3E,MAAI;AACJ,MAAI;AAAE,cAAU,UAAM,yBAAQ,WAAW,EAAE,eAAe,KAAK,CAAC;AAAA,EAAG,QAAQ;AAAE,WAAO,CAAC;AAAA,EAAG;AACxF,QAAM,SAAS,MAAM,QAAQ,IAAI,QAAQ,IAAI,CAAC,UAAU,MAAM,YAAY,IAAI,UAAU,iBAAAA,QAAK,KAAK,WAAW,MAAM,IAAI,GAAG,GAAG,MAAM,GAAG,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,MAAM,GAAG,MAAM,IAAI,EAAE,CAAC,CAAC;AAClL,SAAO,OAAO,KAAK,EAAE,KAAK;AAC3B;AAYA,SAAS,gCAAgC,OAA4D;AACpG,MAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,GAAG;AAChE,UAAM,IAAI,MAAM,2DAA2D;AAAA,EAC5E;AACA,QAAM,SAAS;AACf,MAAI,OAAO,kBAAkB,EAAG,OAAM,IAAI,MAAM,6DAA6D;AAC7G,aAAW,SAAS,CAAC,eAAe,UAAU,SAAS,YAAY,SAAS,GAAY;AACvF,QAAI,OAAO,OAAO,KAAK,MAAM,YAAY,CAAC,OAAO,KAAK,GAAG;AACxD,YAAM,IAAI,MAAM,sCAAsC,KAAK,8BAA8B;AAAA,IAC1F;AAAA,EACD;AAIA,MAAI,CAAC,oBAAoB,KAAK,OAAO,WAAqB,GAAG;AAC5D,UAAM,IAAI,MAAM,iGAAiG;AAAA,EAClH;AACA,MAAI,CAAC,MAAM,QAAQ,OAAO,SAAS,KAAK,CAAC,OAAO,UAAU,MAAM,CAAC,UAAU,OAAO,UAAU,YAAY,KAAK,GAAG;AAC/G,UAAM,IAAI,MAAM,8EAA8E;AAAA,EAC/F;AAKA,QAAM,QAAQ,oBAAI,IAAI,CAAC,iBAAiB,eAAe,UAAU,SAAS,YAAY,WAAW,WAAW,CAAC;AAC7G,aAAW,SAAS,OAAO,KAAK,MAAM,GAAG;AACxC,QAAI,4CAA4C,KAAK,KAAK,KAAK,UAAU,SAAS;AACjF,YAAM,IAAI,MAAM,sDAAsD,KAAK,qCAAqC;AAAA,IACjH;AACA,QAAI,CAAC,MAAM,IAAI,KAAK,GAAG;AACtB,YAAM,IAAI,MAAM,4DAA4D,KAAK,IAAI;AAAA,IACtF;AAAA,EACD;AACD;AAWA,eAAsB,kBACrB,SACmC;AACnC,QAAM,cAAc,MAAM,SAAS,QAAQ,UAAU;AACrD,kCAAgC,WAAW;AAC3C,QAAM,OAAO,iBAAAA,QAAK,QAAQ,QAAQ,UAAU;AAC5C,QAAM,UAAU,CAAC,SAAyB,iBAAAA,QAAK,QAAQ,MAAM,IAAI;AAEjE,QAAM,WAAW,MAAM,SAAS,QAAQ,YAAY,QAAQ,CAAC;AAC7D,8CAAuB,QAAQ;AAC/B,QAAM,UAAU,MAAM,SAAS,QAAQ,YAAY,OAAO,CAAC;AAC3D,sDAA2B,OAAO;AAClC,QAAM,YAAY,MAAM,QAAQ;AAAA,IAC/B,YAAY,UAAU,IAAI,OAAO,SAAS,MAAM,SAAS,QAAQ,IAAI,CAAC,CAA0B;AAAA,EACjG;AAEA,QAAM,iBAAa,qCAAiB,UAAM,0BAAS,QAAQ,gBAAgB,MAAM,CAAC;AAClF,QAAM,WAAW,UAAM,+CAAyB;AAAA,IAC/C,aAAa,YAAY;AAAA,IACzB;AAAA,IACA;AAAA,IACA;AAAA,IACA,QAAQ,YAAY;AAAA,IACpB,YAAQ,+CAAyB,EAAE,OAAO,YAAY,OAAO,WAAW,CAAC;AAAA,EAC1E,CAAC;AAED,QAAM,aAAa,QAAQ,aACxB,iBAAAA,QAAK,QAAQ,QAAQ,UAAU,IAC/B,QAAQ,GAAG,YAAY,WAAW,yBAAyB;AAC9D,YAAM,uBAAM,iBAAAA,QAAK,QAAQ,UAAU,GAAG,EAAE,WAAW,KAAK,CAAC;AACzD,YAAM,2BAAU,YAAY,GAAG,SAAS,UAAU;AAAA,GAAM,MAAM;AAE9D,SAAO;AAAA,IACN,aAAa,YAAY;AAAA,IACzB,eAAe,QAAQ;AAAA,IACvB,gBAAgB,SAAS;AAAA,IACzB,QAAQ;AAAA,MACP,OAAO,SAAS,QAAQ,OAAO,MAAM;AAAA,MACrC,SAAS,SAAS,QAAQ,OAAO,QAAQ;AAAA,IAC1C;AAAA,IACA;AAAA,EACD;AACD;","names":["result","path"]}
+{"version":3,"sources":["../index.ts"],"sourcesContent":["import { access, mkdir, readFile, readdir, rm, writeFile } from \"node:fs/promises\";\nimport { createPrivateKey } from \"node:crypto\";\nimport path from \"node:path\";\nimport { pathToFileURL } from \"node:url\";\nimport { compileManifestBundle, runGenerator, type GeneratedFile, type GeneratorTarget } from \"@fabricorg/compiler\";\nimport { exportModuleManifest } from \"@fabricorg/platform/manifest\";\nimport { capabilityGenerator } from \"@fabricorg/gen-capability\";\nimport { docsGenerator } from \"@fabricorg/gen-docs\";\nimport { eventsGenerator } from \"@fabricorg/gen-events\";\nimport { typesGenerator } from \"@fabricorg/gen-types\";\nimport { prismaGenerator } from \"@fabricorg/gen-prisma\";\nimport { graphqlGenerator } from \"@fabricorg/gen-graphql\";\nimport { sduiGenerator } from \"@fabricorg/gen-sdui\";\nimport type { UsageContractDocument } from \"@fabricorg/gen-capability\";\nimport { createEs256ReleaseSigner, promoteExperienceRelease } from \"@fabricorg/sdui-composer\";\nimport { conformanceGenerator } from \"@fabricorg/gen-conformance\";\nimport {\n\tassertAssemblyLockfile,\n\tresolveAssembly,\n\tassertAssemblyRuntimeCompatible,\n\ttype AssemblyLockfile,\n\ttype AvailableCapability,\n} from \"@fabricorg/assembly\";\nimport {\n\tassertSduiReleaseIntegrity,\n\ttype SduiRelease,\n} from \"@fabricorg/sdui-release\";\n\nexport const GENERATOR_TARGETS: Record<string, GeneratorTarget> = {\n\ttypes: typesGenerator,\n\tevents: eventsGenerator,\n\tcapability: capabilityGenerator,\n\tdocs: docsGenerator,\n\tprisma: prismaGenerator,\n\tgraphql: graphqlGenerator,\n\tsdui: sduiGenerator,\n\tconformance: conformanceGenerator,\n};\nconst compareCanonicalStrings = (left: string, right: string): number => left < right ? -1 : left > right ? 1 : 0;\n\nexport interface GenerateOptions { inputPath: string; outputDirectory: string; targets: string[]; check?: boolean; }\nexport interface GenerateResult { changed: string[]; stale: string[]; files: GeneratedFile[]; }\nexport interface InitializeCapabilityOptions { directory: string; namespace: string; }\nexport interface InitializeCapabilityResult { created: string[]; }\nexport interface InitializeExperienceOptions { directory: string; application: string; }\nexport interface InitializeExperienceResult { created: string[]; }\nexport interface CheckApplicationOptions { configPath: string; }\nexport interface PromoteExperienceOptions {\n\tconfigPath: string;\n\t/** PEM-encoded ES256 private key. Never read from the configuration file. */\n\tprivateKeyPath: string;\n\toutputPath?: string;\n}\nexport interface PromoteExperienceResult {\n\tapplication: string;\n\treleaseDigest: string;\n\tassemblyDigest: string;\n\troutes: { views: number; intents: number };\n\toutputPath: string;\n}\nexport interface CheckApplicationResult {\n\tapplication: string;\n\tcapabilities: number;\n\treleases: number;\n\tassemblyDigest: string;\n}\n\nconst usage = [\n\t\"Usage:\",\n\t\"  fabric-gen init capability <namespace> [--directory <path>]\",\n\t\"  fabric-gen export --module <file> [--export <name>] --out <manifest.json>\",\n\t\"  fabric-gen init experience <application> [--directory <path>]\",\n\t\"  fabric-gen check-application [--config <path>]\",\n\t\"  fabric-gen promote-experience --config <path> --key <pem> [--out <path>]\",\n\t\"  fabric-gen --input <manifest.json> --out <directory> [--targets <list>] [--check]\",\n].join(\"\\n\");\n\nexport class FabricGenUsageError extends Error {\n\toverride readonly name = \"FabricGenUsageError\";\n}\n\nexport function fabricGenCliExitCode(error: unknown): number {\n\treturn error instanceof FabricGenUsageError ? 2 : 1;\n}\n\nfunction flagValue(args: readonly string[], flag: string): string | undefined {\n\tconst index = args.indexOf(flag);\n\tif (index < 0) return undefined;\n\tconst value = args[index + 1];\n\tif (!value || value.startsWith(\"--\")) throw new FabricGenUsageError(usage);\n\treturn value;\n}\n\n/** Execute one CLI command and return its single human-readable result line. */\nexport async function runFabricGenCommand(args: readonly string[]): Promise<string> {\n\tif (args[0] === \"export\") {\n\t\tconst moduleFile = flagValue(args, \"--module\");\n\t\tconst out = flagValue(args, \"--out\");\n\t\tif (!moduleFile || !out) throw new FabricGenUsageError(usage);\n\t\tconst result = await exportModuleManifestFile({ moduleFile, out, exportName: flagValue(args, \"--export\") });\n\t\treturn `Exported \"${result.namespace}\" from ${result.exportName} to ${out}: ${result.objectTypes} object types, ${result.actions} actions, ${result.eventTypes} event types.`;\n\t}\n\tif (args[0] === \"init\") {\n\t\tif (!args[2] || args[2].startsWith(\"--\")) {\n\t\t\tthrow new FabricGenUsageError(usage);\n\t\t}\n\t\tconst name = args[2];\n\t\tconst directory = flagValue(args, \"--directory\") ?? name;\n\t\tif (args[1] === \"capability\") {\n\t\t\tconst result = await initializeCapability({ directory, namespace: name });\n\t\t\treturn `Initialized capability \"${name}\" with ${result.created.length} files.`;\n\t\t}\n\t\tif (args[1] === \"experience\") {\n\t\t\tconst result = await initializeExperience({ directory, application: name });\n\t\t\treturn `Initialized experience integration \"${name}\" with ${result.created.length} files.`;\n\t\t}\n\t\tthrow new FabricGenUsageError(usage);\n\t}\n\tif (args[0] === \"promote-experience\") {\n\t\tconst configPath = flagValue(args, \"--config\");\n\t\tconst privateKeyPath = flagValue(args, \"--key\");\n\t\tif (!configPath) throw new FabricGenUsageError(\"promote-experience requires --config.\");\n\t\tif (!privateKeyPath) throw new FabricGenUsageError(\"promote-experience requires --key.\");\n\t\tconst outputPath = flagValue(args, \"--out\");\n\t\tconst result = await promoteExperience({\n\t\t\tconfigPath,\n\t\t\tprivateKeyPath,\n\t\t\t...(outputPath ? { outputPath } : {}),\n\t\t});\n\t\treturn [\n\t\t\t`Promoted ${result.application} release ${result.releaseDigest.slice(0, 12)} against assembly ${result.assemblyDigest.slice(0, 12)}.`,\n\t\t\t`Routes: ${result.routes.views} views, ${result.routes.intents} intents.`,\n\t\t\t`Wrote ${result.outputPath}`,\n\t\t].join(\"\\n\");\n\t}\n\n\tif (args[0] === \"check-application\") {\n\t\tconst configPath = flagValue(args, \"--config\") ?? \"fabric.application.json\";\n\t\tconst result = await checkApplication({ configPath });\n\t\treturn `Checked \"${result.application}\": ${result.capabilities} capabilities, ${result.releases} releases.`;\n\t}\n\tconst inputPath = flagValue(args, \"--input\");\n\tconst outputDirectory = flagValue(args, \"--out\");\n\tif (!inputPath || !outputDirectory) throw new FabricGenUsageError(usage);\n\tconst result = await generateFromManifest({\n\t\tinputPath,\n\t\toutputDirectory,\n\t\ttargets: (flagValue(args, \"--targets\") ?? \"types,events,capability,docs\")\n\t\t\t.split(\",\")\n\t\t\t.filter(Boolean),\n\t\tcheck: args.includes(\"--check\"),\n\t});\n\treturn `${args.includes(\"--check\") ? \"Checked\" : \"Generated\"} ${result.files.length} files.`;\n}\n\n/**\n * Add experience integration files to an existing application. It deliberately\n * does not create package.json, routes, authentication, billing, or navigation:\n * those remain owned by the Supastarter-derived application shell.\n */\n/** What the scaffolded files are, and what has to be installed for them to compile. */\nfunction experienceReadme(application: string): string {\n\treturn [\n\t\t`# ${application} experience integration`,\n\t\t\"\",\n\t\t\"| File | What it is |\",\n\t\t\"| --- | --- |\",\n\t\t\"| `fabric.experience.ts` | The server runtime and gateway, wired to your host. |\",\n\t\t\"| `fabric.component-pack.ts` | The components this application is allowed to render. |\",\n\t\t\"| `fabric.application.json` | What the deployment gate reads. |\",\n\t\t\"| `fabric.assembly.lock.json` | The resolved assembly. Empty until you add capabilities. |\",\n\t\t\"| `fabric.runtime.json` | Capabilities the running host actually registers. |\",\n\t\t\"\",\n\t\t\"## Install\",\n\t\t\"\",\n\t\t\"The scaffolded files import three packages this generator does not install:\",\n\t\t\"\",\n\t\t\"```bash\",\n\t\t\"pnpm add @fabricorg/experience-runtime @fabricorg/experience-gateway @fabricorg/component-pack\",\n\t\t\"```\",\n\t\t\"\",\n\t\t\"## Check it\",\n\t\t\"\",\n\t\t\"```bash\",\n\t\t\"fabric-gen check-application --config fabric.application.json\",\n\t\t\"```\",\n\t\t\"\",\n\t\t\"It passes on the scaffold and keeps passing as you add capabilities, as long\",\n\t\t\"as the lockfile, the runtime capabilities, and every promoted release agree.\",\n\t\t\"Regenerate the lockfile from your composition root with `resolveAssembly`;\",\n\t\t\"`fabric.runtime.json` must list what that same root registers with the host,\",\n\t\t\"which is what stops a deployment from serving a plan its host cannot answer.\",\n\t\t\"\",\n\t].join(\"\\n\");\n}\n\nexport async function initializeExperience(\n\toptions: InitializeExperienceOptions,\n): Promise<InitializeExperienceResult> {\n\tif (!/^[a-z][a-z0-9-]*$/.test(options.application)) {\n\t\tthrow new Error(\"Application name must use lowercase letters, numbers, and hyphens.\");\n\t}\n\tconst functionName = options.application\n\t\t.split(\"-\")\n\t\t.map((part) => `${part.charAt(0).toUpperCase()}${part.slice(1)}`)\n\t\t.join(\"\");\n\tconst files = [\n\t\t[\n\t\t\tpath.join(options.directory, \"fabric.experience.ts\"),\n\t\t\t[\n\t\t\t\t'import { createExperienceServerRuntime } from \"@fabricorg/experience-runtime/server\";',\n\t\t\t\t'import { createExperienceGateway } from \"@fabricorg/experience-gateway\";',\n\t\t\t\t\"\",\n\t\t\t\t`export const create${functionName}ExperienceRuntime = (`,\n\t\t\t\t\"\\toptions: Parameters<typeof createExperienceServerRuntime>[0],\",\n\t\t\t\t\") => createExperienceServerRuntime(options);\",\n\t\t\t\t\"\",\n\t\t\t\t`export const create${functionName}ExperienceGateway = (`,\n\t\t\t\t\"\\toptions: Parameters<typeof createExperienceGateway>[0],\",\n\t\t\t\t\") => createExperienceGateway(options);\",\n\t\t\t\t\"\",\n\t\t\t].join(\"\\n\"),\n\t\t],\n\t\t[\n\t\t\tpath.join(options.directory, \"fabric.component-pack.ts\"),\n\t\t\t[\n\t\t\t\t'import { defineComponentPack } from \"@fabricorg/component-pack\";',\n\t\t\t\t\"\",\n\t\t\t\t`export const define${functionName}ComponentPack = (artifactDigest: string) =>`,\n\t\t\t\t\"\\tdefineComponentPack({\",\n\t\t\t\t`\\t\\tname: \"${options.application}\",`,\n\t\t\t\t`\\t\\tnamespace: \"${options.application}\",`,\n\t\t\t\t'\\t\\tversion: \"0.1.0\",',\n\t\t\t\t\"\\t\\tartifactDigest,\",\n\t\t\t\t'\\t\\ttokenContract: { name: \"fabric-family\", version: \"1.0.0\" },',\n\t\t\t\t\"\\t\\tcomponents: {\",\n\t\t\t\t'\\t\\t\\tText: { module: \"./components/text.js\", roles: [\"content\"], slots: [] },',\n\t\t\t\t\"\\t\\t},\",\n\t\t\t\t\"\\t});\",\n\t\t\t\t\"\",\n\t\t\t].join(\"\\n\"),\n\t\t],\n\t\t[\n\t\t\tpath.join(options.directory, \"fabric.application.json\"),\n\t\t\t`${JSON.stringify({\n\t\t\t\tformatVersion: 1,\n\t\t\t\tapplication: options.application,\n\t\t\t\tassembly: \"./fabric.assembly.lock.json\",\n\t\t\t\truntimeCapabilities: \"./fabric.runtime.json\",\n\t\t\t\treleases: [],\n\t\t\t}, null, 2)}\\n`,\n\t\t],\n\t\t// The application config names these two files, so the scaffold has to\n\t\t// produce them. Without them `fabric-gen check-application`, the very\n\t\t// next step, failed on a missing file rather than on anything the\n\t\t// author had done. The lockfile is resolved here, not hand-written, so\n\t\t// it carries a real assembly digest from the first commit.\n\t\t[\n\t\t\tpath.join(options.directory, \"fabric.assembly.lock.json\"),\n\t\t\t`${JSON.stringify(resolveAssembly({\n\t\t\t\tmanifest: {\n\t\t\t\t\tformatVersion: 2,\n\t\t\t\t\tapplication: options.application,\n\t\t\t\t\tcapabilities: [],\n\t\t\t\t\tcomponentPacks: [],\n\t\t\t\t\tbindings: [],\n\t\t\t\t\tcontracts: [],\n\t\t\t\t},\n\t\t\t\tcapabilities: [],\n\t\t\t\tcomponentPacks: [],\n\t\t\t}).lockfile, null, 2)}\\n`,\n\t\t],\n\t\t[\n\t\t\tpath.join(options.directory, \"fabric.runtime.json\"),\n\t\t\t\"[]\\n\",\n\t\t],\n\t\t[\n\t\t\tpath.join(options.directory, \"README.md\"),\n\t\t\texperienceReadme(options.application),\n\t\t],\n\t] as const;\n\tawait mkdir(options.directory, { recursive: true });\n\tconst created: string[] = [];\n\ttry {\n\t\tfor (const [file, content] of files) {\n\t\t\tawait writeFile(file, content, { encoding: \"utf8\", flag: \"wx\" });\n\t\t\tcreated.push(file);\n\t\t}\n\t} catch (error) {\n\t\tawait Promise.all(created.map((file) => rm(file, { force: true })));\n\t\tif ((error as NodeJS.ErrnoException).code === \"EEXIST\") {\n\t\t\tthrow new Error(\"Refusing to overwrite an existing experience integration file.\");\n\t\t}\n\t\tthrow error;\n\t}\n\treturn { created };\n}\n\ninterface ApplicationCheckConfig {\n\tformatVersion: 1;\n\tassembly: string;\n\truntimeCapabilities: string;\n\treleases: string[];\n}\n\nasync function readJson(file: string): Promise<unknown> {\n\treturn JSON.parse(await readFile(file, \"utf8\"));\n}\n\nfunction assertApplicationCheckConfig(value: unknown): asserts value is ApplicationCheckConfig {\n\tif (!value || typeof value !== \"object\" || Array.isArray(value)) {\n\t\tthrow new Error(\"Application check configuration must be a JSON object.\");\n\t}\n\tconst config = value as Record<string, unknown>;\n\tif (config.formatVersion !== 1) throw new Error(\"Application check configuration formatVersion must be 1.\");\n\tif (typeof config.assembly !== \"string\" || !config.assembly) {\n\t\tthrow new Error(\"Application check configuration assembly must be a file path.\");\n\t}\n\tif (typeof config.runtimeCapabilities !== \"string\" || !config.runtimeCapabilities) {\n\t\tthrow new Error(\"Application check configuration runtimeCapabilities must be a file path.\");\n\t}\n\tif (!Array.isArray(config.releases) || !config.releases.every((entry) => typeof entry === \"string\" && entry)) {\n\t\tthrow new Error(\"Application check configuration releases must be an array of file paths.\");\n\t}\n}\n\n/**\n * Verify an application's immutable composition inputs before deployment.\n * Every runtime capability must exactly match the approved lockfile, and every\n * promoted experience release must be intact and bound to that assembly.\n */\nexport async function checkApplication(\n\toptions: CheckApplicationOptions,\n): Promise<CheckApplicationResult> {\n\tconst configValue = await readJson(options.configPath);\n\tassertApplicationCheckConfig(configValue);\n\tconst base = path.dirname(options.configPath);\n\tconst resolve = (file: string): string => path.resolve(base, file);\n\tconst assembly = await readJson(resolve(configValue.assembly)) as AssemblyLockfile;\n\tassertAssemblyLockfile(assembly);\n\tconst runtimeCapabilities = await readJson(\n\t\tresolve(configValue.runtimeCapabilities),\n\t) as AvailableCapability[];\n\tif (!Array.isArray(runtimeCapabilities)) {\n\t\tthrow new Error(\"Runtime capabilities must be a JSON array.\");\n\t}\n\tassertAssemblyRuntimeCompatible(assembly, runtimeCapabilities);\n\tfor (const releasePath of configValue.releases) {\n\t\tconst release = await readJson(resolve(releasePath)) as SduiRelease;\n\t\ttry {\n\t\t\tassertSduiReleaseIntegrity(release);\n\t\t} catch (error) {\n\t\t\tthrow new Error(\n\t\t\t\t`Experience release \"${releasePath}\" is invalid: ${error instanceof Error ? error.message : String(error)}`,\n\t\t\t);\n\t\t}\n\t\tif (release.assemblyDigest !== assembly.assemblyDigest) {\n\t\t\tthrow new Error(\n\t\t\t\t`Experience release \"${release.document.name}@${release.document.version}\" belongs to assembly \"${release.assemblyDigest}\", not \"${assembly.assemblyDigest}\".`,\n\t\t\t);\n\t\t}\n\t}\n\treturn {\n\t\tapplication: assembly.application,\n\t\tcapabilities: assembly.capabilities.length,\n\t\treleases: configValue.releases.length,\n\t\tassemblyDigest: assembly.assemblyDigest,\n\t};\n}\n\n/**\n * Create the smallest useful capability source tree. The manifest is accepted\n * by the compiler immediately, while leaving domain vocabulary to the adopter.\n */\nexport interface ExportModuleManifestFileOptions {\n\tmoduleFile: string;\n\tout: string;\n\texportName?: string;\n}\n\nexport interface ExportModuleManifestFileResult {\n\tnamespace: string;\n\texportName: string;\n\tobjectTypes: number;\n\tactions: number;\n\teventTypes: number;\n}\n\n/**\n * Turn an authored FabricModule into the normalized manifest every generator reads.\n *\n * This is the seam between the two halves of the authoring loop. The module is\n * TypeScript, so the compiler checks it as you write; the manifest is the\n * normalized JSON the code generators and the assembly compiler consume. Until\n * this command existed, nothing shipped connected them: `init capability`\n * scaffolded an empty manifest, and an author who filled it in by hand was\n * guessing at the shape of `exportModuleManifest`'s output.\n */\nexport async function exportModuleManifestFile(\n\toptions: ExportModuleManifestFileOptions,\n): Promise<ExportModuleManifestFileResult> {\n\tconst absolute = path.resolve(options.moduleFile);\n\tlet loaded: Record<string, unknown>;\n\ttry {\n\t\tloaded = (await import(pathToFileURL(absolute).href)) as Record<string, unknown>;\n\t} catch (error) {\n\t\tconst reason = error instanceof Error ? error.message : String(error);\n\t\tthrow new Error(`Could not load module file \"${options.moduleFile}\": ${reason}\\nA TypeScript file needs a runtime that strips types (Node 22.18 or newer); otherwise point --module at the built JavaScript.`);\n\t}\n\tconst candidates = Object.entries(loaded).filter(([, value]) => isFabricModuleLike(value));\n\tlet entry: [string, unknown] | undefined;\n\tif (options.exportName) {\n\t\tconst named = loaded[options.exportName];\n\t\tif (named === undefined) throw new Error(`\"${options.moduleFile}\" has no export named \"${options.exportName}\". It exports: ${Object.keys(loaded).join(\", \") || \"nothing\"}.`);\n\t\tif (!isFabricModuleLike(named)) throw new Error(`Export \"${options.exportName}\" of \"${options.moduleFile}\" is not a FabricModule: it has no string \"namespace\".`);\n\t\tentry = [options.exportName, named];\n\t} else if (candidates.length === 1) {\n\t\tentry = candidates[0];\n\t} else if (candidates.length === 0) {\n\t\tthrow new Error(`\"${options.moduleFile}\" exports no FabricModule. Export one, with a string \"namespace\", or name it with --export.`);\n\t} else {\n\t\tthrow new Error(`\"${options.moduleFile}\" exports ${candidates.length} modules (${candidates.map(([name]) => name).join(\", \")}). Choose one with --export.`);\n\t}\n\tconst manifest = exportModuleManifest(entry[1] as Parameters<typeof exportModuleManifest>[0]);\n\t// Compile it here so the author learns about a bad field from this command,\n\t// standing in their own module, rather than from a generator two steps later.\n\tcompileManifestBundle({ manifestVersion: 2, modules: [manifest] });\n\tawait mkdir(path.dirname(path.resolve(options.out)), { recursive: true });\n\tawait writeFile(path.resolve(options.out), `${JSON.stringify(manifest, null, 2)}\\n`, \"utf8\");\n\treturn {\n\t\tnamespace: manifest.namespace,\n\t\texportName: entry[0],\n\t\tobjectTypes: manifest.objectTypes.length,\n\t\tactions: manifest.actions.length,\n\t\teventTypes: manifest.eventTypes.length,\n\t};\n}\n\nfunction isFabricModuleLike(value: unknown): boolean {\n\treturn typeof value === \"object\" && value !== null && typeof (value as { namespace?: unknown }).namespace === \"string\";\n}\n\nexport async function initializeCapability(\n\toptions: InitializeCapabilityOptions,\n): Promise<InitializeCapabilityResult> {\n\tif (!/^[a-z][a-z0-9-]*$/.test(options.namespace)) {\n\t\tthrow new Error(\"Capability namespace must use lowercase letters, numbers, and hyphens.\");\n\t}\n\tconst displayName = options.namespace\n\t\t.split(\"-\")\n\t\t.map((part, index) => index === 0\n\t\t\t? `${part.charAt(0).toUpperCase()}${part.slice(1)}`\n\t\t\t: part)\n\t\t.join(\" \");\n\tconst modulePath = path.join(options.directory, \"module.ts\");\n\tconst readmePath = path.join(options.directory, \"README.md\");\n\tfor (const file of [readmePath, modulePath]) {\n\t\ttry {\n\t\t\tawait access(file);\n\t\t\tthrow new Error(`Refusing to overwrite existing file \"${file}\".`);\n\t\t} catch (error) {\n\t\t\tif (error instanceof Error && error.message.startsWith(\"Refusing to overwrite\")) throw error;\n\t\t\tif ((error as NodeJS.ErrnoException).code !== \"ENOENT\") throw error;\n\t\t}\n\t}\n\t// The scaffold is a working module, not an empty shell. An empty manifest\n\t// teaches nothing about the shape it has to reach, and a manifest authored\n\t// by hand is a guess at the output of exportModuleManifest(). The module is\n\t// the source; `fabric-gen export` produces the manifest from it.\n\tconst module = [\n\t\t`import type { ActionDefinition } from \"@fabricorg/platform/actions\";`,\n\t\t`import type { FabricModule } from \"@fabricorg/platform/modules\";`,\n\t\t\"\",\n\t\t`/** One governed action. Every field below is checked when the manifest is exported. */`,\n\t\t`const recordExample: ActionDefinition = {`,\n\t\t`\\tactionId: \"${options.namespace}.record_example\",`,\n\t\t`\\tnamespace: \"${options.namespace}\",`,\n\t\t\"\\tversion: 1,\",\n\t\t'\\tkind: \"atomic\",',\n\t\t\"\\tidempotent: true,\",\n\t\t\"\\tmutatesDomain: true,\",\n\t\t'\\temitsEvents: [\"ExampleRecorded\"],',\n\t\t\"\\t// The six execution dimensions. A strict certification profile requires all of them.\",\n\t\t\"\\texecution: {\",\n\t\t'\\t\\tconnectivity: \"online-required\",',\n\t\t'\\t\\tauthorityMoment: \"execution\",',\n\t\t'\\t\\tidempotency: \"required\",',\n\t\t'\\t\\tcompletion: \"immediate\",',\n\t\t'\\t\\tconsistency: \"authoritative-now\",',\n\t\t'\\t\\tsensitivity: \"internal\",',\n\t\t\"\\t},\",\n\t\t\"\\tschema: {\",\n\t\t\"\\t\\tparse(value: unknown): { exampleId: string } {\",\n\t\t\"\\t\\t\\tconst input = value as { exampleId?: unknown };\",\n\t\t'\\t\\t\\tif (typeof input?.exampleId !== \"string\") throw new Error(\"exampleId is required\");',\n\t\t\"\\t\\t\\treturn { exampleId: input.exampleId };\",\n\t\t\"\\t\\t},\",\n\t\t\"\\t\\tsafeParse(value: unknown) {\",\n\t\t\"\\t\\t\\ttry {\",\n\t\t\"\\t\\t\\t\\treturn { success: true as const, data: this.parse(value) };\",\n\t\t\"\\t\\t\\t} catch (error) {\",\n\t\t'\\t\\t\\t\\treturn { success: false as const, error: { issues: [{ path: [\"exampleId\"], message: error instanceof Error ? error.message : String(error) }] } };',\n\t\t\"\\t\\t\\t}\",\n\t\t\"\\t\\t},\",\n\t\t\"\\t},\",\n\t\t\"\\thandler: async (_context, parameters) => ({\",\n\t\t\"\\t\\tsuccess: true,\",\n\t\t\"\\t\\tdata: {\",\n\t\t\"\\t\\t\\t...(parameters as { exampleId: string }),\",\n\t\t\"\\t\\t\\t_events: [{\",\n\t\t'\\t\\t\\t\\teventType: \"ExampleRecorded\",',\n\t\t\"\\t\\t\\t\\tentityType: \\\"Example\\\",\",\n\t\t\"\\t\\t\\t\\tentityId: (parameters as { exampleId: string }).exampleId,\",\n\t\t\"\\t\\t\\t\\tpayload: parameters,\",\n\t\t\"\\t\\t\\t}],\",\n\t\t\"\\t\\t},\",\n\t\t\"\\t}),\",\n\t\t\"};\",\n\t\t\"\",\n\t\t`export const ${camelCase(options.namespace)}Module: FabricModule = {`,\n\t\t`\\tnamespace: \"${options.namespace}\",`,\n\t\t'\\tversion: \"0.1.0\",',\n\t\t\"\\tcapability: {\",\n\t\t`\\t\\tdisplayName: \"${displayName}\",`,\n\t\t`\\t\\tdescription: \"Governed ${displayName.toLowerCase()} capability.\",`,\n\t\t'\\t\\tstability: \"experimental\",',\n\t\t\"\\t},\",\n\t\t\"\\tobjectTypes: [{\",\n\t\t'\\t\\ttype: \"Example\",',\n\t\t\"\\t\\tschema: {\",\n\t\t'\\t\\t\\ttype: \"object\",',\n\t\t'\\t\\t\\tproperties: { exampleId: { type: \"string\" } },',\n\t\t'\\t\\t\\trequired: [\"exampleId\"],',\n\t\t\"\\t\\t},\",\n\t\t\"\\t}],\",\n\t\t`\\tidPrefixes: [{ prefix: \"exm\", name: \"Example\", module: \"${options.namespace}\" }],`,\n\t\t'\\teventTypes: [{ eventType: \"ExampleRecorded\", schemaVersion: 1 }],',\n\t\t\"\\tactions: [recordExample],\",\n\t\t\"};\",\n\t\t\"\",\n\t].join(\"\\n\");\n\tconst readme = [\n\t\t`# ${displayName}`,\n\t\t\"\",\n\t\t\"`module.ts` is the source of truth. It is TypeScript, so the shape of every\",\n\t\t\"action, object type, and event is checked as you write it.\",\n\t\t\"\",\n\t\t\"## The loop\",\n\t\t\"\",\n\t\t\"```bash\",\n\t\t\"# 1. Export the authored module to the normalized manifest the generators read.\",\n\t\t\"fabric-gen export --module module.ts --out fabric.manifest.json\",\n\t\t\"\",\n\t\t\"# 2. Generate types, event contracts, the usage contract, and docs.\",\n\t\t\"fabric-gen --input fabric.manifest.json --out generated\",\n\t\t\"\",\n\t\t\"# 3. In CI, prove the generated files match the manifest.\",\n\t\t\"fabric-gen --input fabric.manifest.json --out generated --check\",\n\t\t\"```\",\n\t\t\"\",\n\t\t\"Commit both `fabric.manifest.json` and `generated/`. The manifest is the\",\n\t\t\"contract other capabilities and applications compile against; regenerating\",\n\t\t\"is how a consumer learns what changed.\",\n\t\t\"\",\n\t\t\"## What to edit\",\n\t\t\"\",\n\t\t\"- **Object types** carry a portable JSON Schema. They become generated TypeScript types.\",\n\t\t\"- **Actions** declare six execution dimensions. A host refuses an action whose\",\n\t\t\"  declaration does not match how it is invoked, so declare them honestly.\",\n\t\t\"- **Events** are the capability's public vocabulary. Adding a field is compatible;\",\n\t\t\"  removing or retyping one is not.\",\n\t\t\"\",\n\t].join(\"\\n\");\n\tawait mkdir(options.directory, { recursive: true });\n\tconst created: string[] = [];\n\ttry {\n\t\tfor (const [file, content] of [\n\t\t\t[readmePath, readme],\n\t\t\t[modulePath, module],\n\t\t] as const) {\n\t\t\tawait writeFile(file, content, { encoding: \"utf8\", flag: \"wx\" });\n\t\t\tcreated.push(file);\n\t\t}\n\t} catch (error) {\n\t\tawait Promise.all(created.map((file) => rm(file, { force: true })));\n\t\tif ((error as NodeJS.ErrnoException).code === \"EEXIST\") {\n\t\t\tthrow new Error(\"Refusing to overwrite a file created during capability initialization.\");\n\t\t}\n\t\tthrow error;\n\t}\n\treturn { created };\n}\n\nfunction camelCase(namespace: string): string {\n\treturn namespace.split(\"-\").map((part, index) => index === 0 ? part : `${part.charAt(0).toUpperCase()}${part.slice(1)}`).join(\"\");\n}\n\nexport async function generateFromManifest(options: GenerateOptions): Promise<GenerateResult> {\n\tconst input = JSON.parse(await readFile(options.inputPath, \"utf8\"));\n\tif (!input || typeof input !== \"object\" || Array.isArray(input)) throw new Error(\"Manifest input must be a JSON object.\");\n\tconst bundle = \"modules\" in input ? input : { manifestVersion: input.manifestVersion, modules: [input] };\n\tconst ir = compileManifestBundle(bundle);\n\tconst files = (await Promise.all(options.targets.map(async (name) => {\n\t\tconst target = GENERATOR_TARGETS[name];\n\t\tif (!target) throw new Error(`Unknown generator target \"${name}\".`);\n\t\treturn (await runGenerator(target, ir)).map((file) => ({ ...file, path: `${name}/${file.path}` }));\n\t}))).flat().sort((left, right) => compareCanonicalStrings(left.path, right.path));\n\tconst expected = new Set(files.map((file) => file.path));\n\tconst existing = await listFiles(options.outputDirectory);\n\tconst selectedPrefixes = options.targets.map((target) => `${target}/`);\n\tconst stale = existing.filter((file) => selectedPrefixes.some((prefix) => file.startsWith(prefix)) && !expected.has(file));\n\tif (!options.check) await Promise.all(stale.map((file) => rm(path.join(options.outputDirectory, file), { force: true })));\n\tconst changed: string[] = [];\n\tfor (const file of files) {\n\t\tconst target = path.join(options.outputDirectory, file.path);\n\t\tlet current: string | undefined;\n\t\ttry { current = await readFile(target, \"utf8\"); } catch { current = undefined; }\n\t\tif (current !== file.content) {\n\t\t\tchanged.push(file.path);\n\t\t\tif (!options.check) { await mkdir(path.dirname(target), { recursive: true }); await writeFile(target, file.content, \"utf8\"); }\n\t\t}\n\t}\n\tif (options.check && (changed.length || stale.length)) throw new Error(`Generated artifacts drifted: ${[...changed, ...stale.map((file) => `stale:${file}`)].join(\", \")}`);\n\treturn { changed, stale, files };\n}\n\nasync function listFiles(directory: string, prefix = \"\"): Promise<string[]> {\n\tlet entries;\n\ttry { entries = await readdir(directory, { withFileTypes: true }); } catch { return []; }\n\tconst nested = await Promise.all(entries.map((entry) => entry.isDirectory() ? listFiles(path.join(directory, entry.name), `${prefix}${entry.name}/`) : [`${prefix}${entry.name}`]));\n\treturn nested.flat().sort();\n}\n\ninterface ExperiencePromotionConfig {\n\tformatVersion: 1;\n\tapplication: string;\n\tissuer: string;\n\tkeyId: string;\n\tassembly: string;\n\trelease: string;\n\tcontracts: string[];\n}\n\nfunction assertExperiencePromotionConfig(value: unknown): asserts value is ExperiencePromotionConfig {\n\tif (!value || typeof value !== \"object\" || Array.isArray(value)) {\n\t\tthrow new Error(\"Experience promotion configuration must be a JSON object.\");\n\t}\n\tconst config = value as Record<string, unknown>;\n\tif (config.formatVersion !== 1) throw new Error(\"Experience promotion configuration formatVersion must be 1.\");\n\tfor (const field of [\"application\", \"issuer\", \"keyId\", \"assembly\", \"release\"] as const) {\n\t\tif (typeof config[field] !== \"string\" || !config[field]) {\n\t\t\tthrow new Error(`Experience promotion configuration ${field} must be a non-empty string.`);\n\t\t}\n\t}\n\t// The application name is interpolated into the default output path and\n\t// signed into the release body, so \"../../x\" would escape the configuration\n\t// directory and \"/etc/x\" would ignore it entirely.\n\tif (!/^[a-z][a-z0-9-]*$/.test(config.application as string)) {\n\t\tthrow new Error(\"Experience promotion configuration application must be lowercase letters, numbers, and hyphens.\");\n\t}\n\tif (!Array.isArray(config.contracts) || !config.contracts.every((entry) => typeof entry === \"string\" && entry)) {\n\t\tthrow new Error(\"Experience promotion configuration contracts must be an array of file paths.\");\n\t}\n\t// A signing key in a checked-in configuration file is a key in version\n\t// control. Enumerating two spellings only catches two spellings, so reject\n\t// anything that reads like one, and reject unknown fields so a future\n\t// spelling cannot arrive unnoticed.\n\tconst known = new Set([\"formatVersion\", \"application\", \"issuer\", \"keyId\", \"assembly\", \"release\", \"contracts\"]);\n\tfor (const field of Object.keys(config)) {\n\t\tif (/key|secret|credential|token|pem|password/i.test(field) && field !== \"keyId\") {\n\t\t\tthrow new Error(`Experience promotion configuration must not carry \"${field}\"; pass the signing key with --key.`);\n\t\t}\n\t\tif (!known.has(field)) {\n\t\t\tthrow new Error(`Experience promotion configuration has an unknown field \"${field}\".`);\n\t\t}\n\t}\n}\n\n/**\n * Turn a validated release into a signed one.\n *\n * Promotion is where a granted `capability://` reference becomes a concrete\n * action id and version, so it is also where that mapping has to be bound to\n * the assembly that approved it. The signing key is a command-line argument\n * rather than a configuration field, because a configuration file is the kind\n * of thing that ends up committed.\n */\nexport async function promoteExperience(\n\toptions: PromoteExperienceOptions,\n): Promise<PromoteExperienceResult> {\n\tconst configValue = await readJson(options.configPath);\n\tassertExperiencePromotionConfig(configValue);\n\tconst base = path.dirname(options.configPath);\n\tconst resolve = (file: string): string => path.resolve(base, file);\n\n\tconst assembly = await readJson(resolve(configValue.assembly)) as AssemblyLockfile;\n\tassertAssemblyLockfile(assembly);\n\tconst release = await readJson(resolve(configValue.release)) as SduiRelease;\n\tassertSduiReleaseIntegrity(release);\n\tconst contracts = await Promise.all(\n\t\tconfigValue.contracts.map(async (file) => await readJson(resolve(file)) as UsageContractDocument),\n\t);\n\n\tconst privateKey = createPrivateKey(await readFile(options.privateKeyPath, \"utf8\"));\n\tconst promoted = await promoteExperienceRelease({\n\t\tapplication: configValue.application,\n\t\trelease,\n\t\tcontracts,\n\t\tassembly,\n\t\tissuer: configValue.issuer,\n\t\tsigner: createEs256ReleaseSigner({ keyId: configValue.keyId, privateKey }),\n\t});\n\n\tconst outputPath = options.outputPath\n\t\t? path.resolve(options.outputPath)\n\t\t: resolve(`${configValue.application}.experience-release.jws`);\n\tawait mkdir(path.dirname(outputPath), { recursive: true });\n\tawait writeFile(outputPath, `${promoted.compactJws}\\n`, \"utf8\");\n\n\treturn {\n\t\tapplication: configValue.application,\n\t\treleaseDigest: release.releaseDigest,\n\t\tassemblyDigest: assembly.assemblyDigest,\n\t\troutes: {\n\t\t\tviews: promoted.release.routes.views.length,\n\t\t\tintents: promoted.release.routes.intents.length,\n\t\t},\n\t\toutputPath,\n\t};\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,sBAAgE;AAChE,yBAAiC;AACjC,uBAAiB;AACjB,sBAA8B;AAC9B,sBAA8F;AAC9F,sBAAqC;AACrC,4BAAoC;AACpC,sBAA8B;AAC9B,wBAAgC;AAChC,uBAA+B;AAC/B,wBAAgC;AAChC,yBAAiC;AACjC,sBAA8B;AAE9B,2BAAmE;AACnE,6BAAqC;AACrC,sBAMO;AACP,0BAGO;AAEA,IAAM,oBAAqD;AAAA,EACjE,OAAO;AAAA,EACP,QAAQ;AAAA,EACR,YAAY;AAAA,EACZ,MAAM;AAAA,EACN,QAAQ;AAAA,EACR,SAAS;AAAA,EACT,MAAM;AAAA,EACN,aAAa;AACd;AACA,IAAM,0BAA0B,CAAC,MAAc,UAA0B,OAAO,QAAQ,KAAK,OAAO,QAAQ,IAAI;AA6BhH,IAAM,QAAQ;AAAA,EACb;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACD,EAAE,KAAK,IAAI;AAEJ,IAAM,sBAAN,cAAkC,MAAM;AAAA,EAC5B,OAAO;AAC1B;AAEO,SAAS,qBAAqB,OAAwB;AAC5D,SAAO,iBAAiB,sBAAsB,IAAI;AACnD;AAEA,SAAS,UAAU,MAAyB,MAAkC;AAC7E,QAAM,QAAQ,KAAK,QAAQ,IAAI;AAC/B,MAAI,QAAQ,EAAG,QAAO;AACtB,QAAM,QAAQ,KAAK,QAAQ,CAAC;AAC5B,MAAI,CAAC,SAAS,MAAM,WAAW,IAAI,EAAG,OAAM,IAAI,oBAAoB,KAAK;AACzE,SAAO;AACR;AAGA,eAAsB,oBAAoB,MAA0C;AACnF,MAAI,KAAK,CAAC,MAAM,UAAU;AACzB,UAAM,aAAa,UAAU,MAAM,UAAU;AAC7C,UAAM,MAAM,UAAU,MAAM,OAAO;AACnC,QAAI,CAAC,cAAc,CAAC,IAAK,OAAM,IAAI,oBAAoB,KAAK;AAC5D,UAAMA,UAAS,MAAM,yBAAyB,EAAE,YAAY,KAAK,YAAY,UAAU,MAAM,UAAU,EAAE,CAAC;AAC1G,WAAO,aAAaA,QAAO,SAAS,UAAUA,QAAO,UAAU,OAAO,GAAG,KAAKA,QAAO,WAAW,kBAAkBA,QAAO,OAAO,aAAaA,QAAO,UAAU;AAAA,EAC/J;AACA,MAAI,KAAK,CAAC,MAAM,QAAQ;AACvB,QAAI,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,EAAE,WAAW,IAAI,GAAG;AACzC,YAAM,IAAI,oBAAoB,KAAK;AAAA,IACpC;AACA,UAAM,OAAO,KAAK,CAAC;AACnB,UAAM,YAAY,UAAU,MAAM,aAAa,KAAK;AACpD,QAAI,KAAK,CAAC,MAAM,cAAc;AAC7B,YAAMA,UAAS,MAAM,qBAAqB,EAAE,WAAW,WAAW,KAAK,CAAC;AACxE,aAAO,2BAA2B,IAAI,UAAUA,QAAO,QAAQ,MAAM;AAAA,IACtE;AACA,QAAI,KAAK,CAAC,MAAM,cAAc;AAC7B,YAAMA,UAAS,MAAM,qBAAqB,EAAE,WAAW,aAAa,KAAK,CAAC;AAC1E,aAAO,uCAAuC,IAAI,UAAUA,QAAO,QAAQ,MAAM;AAAA,IAClF;AACA,UAAM,IAAI,oBAAoB,KAAK;AAAA,EACpC;AACA,MAAI,KAAK,CAAC,MAAM,sBAAsB;AACrC,UAAM,aAAa,UAAU,MAAM,UAAU;AAC7C,UAAM,iBAAiB,UAAU,MAAM,OAAO;AAC9C,QAAI,CAAC,WAAY,OAAM,IAAI,oBAAoB,uCAAuC;AACtF,QAAI,CAAC,eAAgB,OAAM,IAAI,oBAAoB,oCAAoC;AACvF,UAAM,aAAa,UAAU,MAAM,OAAO;AAC1C,UAAMA,UAAS,MAAM,kBAAkB;AAAA,MACtC;AAAA,MACA;AAAA,MACA,GAAI,aAAa,EAAE,WAAW,IAAI,CAAC;AAAA,IACpC,CAAC;AACD,WAAO;AAAA,MACN,YAAYA,QAAO,WAAW,YAAYA,QAAO,cAAc,MAAM,GAAG,EAAE,CAAC,qBAAqBA,QAAO,eAAe,MAAM,GAAG,EAAE,CAAC;AAAA,MAClI,WAAWA,QAAO,OAAO,KAAK,WAAWA,QAAO,OAAO,OAAO;AAAA,MAC9D,SAASA,QAAO,UAAU;AAAA,IAC3B,EAAE,KAAK,IAAI;AAAA,EACZ;AAEA,MAAI,KAAK,CAAC,MAAM,qBAAqB;AACpC,UAAM,aAAa,UAAU,MAAM,UAAU,KAAK;AAClD,UAAMA,UAAS,MAAM,iBAAiB,EAAE,WAAW,CAAC;AACpD,WAAO,YAAYA,QAAO,WAAW,MAAMA,QAAO,YAAY,kBAAkBA,QAAO,QAAQ;AAAA,EAChG;AACA,QAAM,YAAY,UAAU,MAAM,SAAS;AAC3C,QAAM,kBAAkB,UAAU,MAAM,OAAO;AAC/C,MAAI,CAAC,aAAa,CAAC,gBAAiB,OAAM,IAAI,oBAAoB,KAAK;AACvE,QAAM,SAAS,MAAM,qBAAqB;AAAA,IACzC;AAAA,IACA;AAAA,IACA,UAAU,UAAU,MAAM,WAAW,KAAK,gCACxC,MAAM,GAAG,EACT,OAAO,OAAO;AAAA,IAChB,OAAO,KAAK,SAAS,SAAS;AAAA,EAC/B,CAAC;AACD,SAAO,GAAG,KAAK,SAAS,SAAS,IAAI,YAAY,WAAW,IAAI,OAAO,MAAM,MAAM;AACpF;AAQA,SAAS,iBAAiB,aAA6B;AACtD,SAAO;AAAA,IACN,KAAK,WAAW;AAAA,IAChB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACD,EAAE,KAAK,IAAI;AACZ;AAEA,eAAsB,qBACrB,SACsC;AACtC,MAAI,CAAC,oBAAoB,KAAK,QAAQ,WAAW,GAAG;AACnD,UAAM,IAAI,MAAM,oEAAoE;AAAA,EACrF;AACA,QAAM,eAAe,QAAQ,YAC3B,MAAM,GAAG,EACT,IAAI,CAAC,SAAS,GAAG,KAAK,OAAO,CAAC,EAAE,YAAY,CAAC,GAAG,KAAK,MAAM,CAAC,CAAC,EAAE,EAC/D,KAAK,EAAE;AACT,QAAM,QAAQ;AAAA,IACb;AAAA,MACC,iBAAAC,QAAK,KAAK,QAAQ,WAAW,sBAAsB;AAAA,MACnD;AAAA,QACC;AAAA,QACA;AAAA,QACA;AAAA,QACA,sBAAsB,YAAY;AAAA,QAClC;AAAA,QACA;AAAA,QACA;AAAA,QACA,sBAAsB,YAAY;AAAA,QAClC;AAAA,QACA;AAAA,QACA;AAAA,MACD,EAAE,KAAK,IAAI;AAAA,IACZ;AAAA,IACA;AAAA,MACC,iBAAAA,QAAK,KAAK,QAAQ,WAAW,0BAA0B;AAAA,MACvD;AAAA,QACC;AAAA,QACA;AAAA,QACA,sBAAsB,YAAY;AAAA,QAClC;AAAA,QACA,YAAc,QAAQ,WAAW;AAAA,QACjC,iBAAmB,QAAQ,WAAW;AAAA,QACtC;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,MACD,EAAE,KAAK,IAAI;AAAA,IACZ;AAAA,IACA;AAAA,MACC,iBAAAA,QAAK,KAAK,QAAQ,WAAW,yBAAyB;AAAA,MACtD,GAAG,KAAK,UAAU;AAAA,QACjB,eAAe;AAAA,QACf,aAAa,QAAQ;AAAA,QACrB,UAAU;AAAA,QACV,qBAAqB;AAAA,QACrB,UAAU,CAAC;AAAA,MACZ,GAAG,MAAM,CAAC,CAAC;AAAA;AAAA,IACZ;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,IAMA;AAAA,MACC,iBAAAA,QAAK,KAAK,QAAQ,WAAW,2BAA2B;AAAA,MACxD,GAAG,KAAK,cAAU,iCAAgB;AAAA,QACjC,UAAU;AAAA,UACT,eAAe;AAAA,UACf,aAAa,QAAQ;AAAA,UACrB,cAAc,CAAC;AAAA,UACf,gBAAgB,CAAC;AAAA,UACjB,UAAU,CAAC;AAAA,UACX,WAAW,CAAC;AAAA,QACb;AAAA,QACA,cAAc,CAAC;AAAA,QACf,gBAAgB,CAAC;AAAA,MAClB,CAAC,EAAE,UAAU,MAAM,CAAC,CAAC;AAAA;AAAA,IACtB;AAAA,IACA;AAAA,MACC,iBAAAA,QAAK,KAAK,QAAQ,WAAW,qBAAqB;AAAA,MAClD;AAAA,IACD;AAAA,IACA;AAAA,MACC,iBAAAA,QAAK,KAAK,QAAQ,WAAW,WAAW;AAAA,MACxC,iBAAiB,QAAQ,WAAW;AAAA,IACrC;AAAA,EACD;AACA,YAAM,uBAAM,QAAQ,WAAW,EAAE,WAAW,KAAK,CAAC;AAClD,QAAM,UAAoB,CAAC;AAC3B,MAAI;AACH,eAAW,CAAC,MAAM,OAAO,KAAK,OAAO;AACpC,gBAAM,2BAAU,MAAM,SAAS,EAAE,UAAU,QAAQ,MAAM,KAAK,CAAC;AAC/D,cAAQ,KAAK,IAAI;AAAA,IAClB;AAAA,EACD,SAAS,OAAO;AACf,UAAM,QAAQ,IAAI,QAAQ,IAAI,CAAC,aAAS,oBAAG,MAAM,EAAE,OAAO,KAAK,CAAC,CAAC,CAAC;AAClE,QAAK,MAAgC,SAAS,UAAU;AACvD,YAAM,IAAI,MAAM,gEAAgE;AAAA,IACjF;AACA,UAAM;AAAA,EACP;AACA,SAAO,EAAE,QAAQ;AAClB;AASA,eAAe,SAAS,MAAgC;AACvD,SAAO,KAAK,MAAM,UAAM,0BAAS,MAAM,MAAM,CAAC;AAC/C;AAEA,SAAS,6BAA6B,OAAyD;AAC9F,MAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,GAAG;AAChE,UAAM,IAAI,MAAM,wDAAwD;AAAA,EACzE;AACA,QAAM,SAAS;AACf,MAAI,OAAO,kBAAkB,EAAG,OAAM,IAAI,MAAM,0DAA0D;AAC1G,MAAI,OAAO,OAAO,aAAa,YAAY,CAAC,OAAO,UAAU;AAC5D,UAAM,IAAI,MAAM,+DAA+D;AAAA,EAChF;AACA,MAAI,OAAO,OAAO,wBAAwB,YAAY,CAAC,OAAO,qBAAqB;AAClF,UAAM,IAAI,MAAM,0EAA0E;AAAA,EAC3F;AACA,MAAI,CAAC,MAAM,QAAQ,OAAO,QAAQ,KAAK,CAAC,OAAO,SAAS,MAAM,CAAC,UAAU,OAAO,UAAU,YAAY,KAAK,GAAG;AAC7G,UAAM,IAAI,MAAM,0EAA0E;AAAA,EAC3F;AACD;AAOA,eAAsB,iBACrB,SACkC;AAClC,QAAM,cAAc,MAAM,SAAS,QAAQ,UAAU;AACrD,+BAA6B,WAAW;AACxC,QAAM,OAAO,iBAAAA,QAAK,QAAQ,QAAQ,UAAU;AAC5C,QAAM,UAAU,CAAC,SAAyB,iBAAAA,QAAK,QAAQ,MAAM,IAAI;AACjE,QAAM,WAAW,MAAM,SAAS,QAAQ,YAAY,QAAQ,CAAC;AAC7D,8CAAuB,QAAQ;AAC/B,QAAM,sBAAsB,MAAM;AAAA,IACjC,QAAQ,YAAY,mBAAmB;AAAA,EACxC;AACA,MAAI,CAAC,MAAM,QAAQ,mBAAmB,GAAG;AACxC,UAAM,IAAI,MAAM,4CAA4C;AAAA,EAC7D;AACA,uDAAgC,UAAU,mBAAmB;AAC7D,aAAW,eAAe,YAAY,UAAU;AAC/C,UAAM,UAAU,MAAM,SAAS,QAAQ,WAAW,CAAC;AACnD,QAAI;AACH,0DAA2B,OAAO;AAAA,IACnC,SAAS,OAAO;AACf,YAAM,IAAI;AAAA,QACT,uBAAuB,WAAW,iBAAiB,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,MAC1G;AAAA,IACD;AACA,QAAI,QAAQ,mBAAmB,SAAS,gBAAgB;AACvD,YAAM,IAAI;AAAA,QACT,uBAAuB,QAAQ,SAAS,IAAI,IAAI,QAAQ,SAAS,OAAO,0BAA0B,QAAQ,cAAc,WAAW,SAAS,cAAc;AAAA,MAC3J;AAAA,IACD;AAAA,EACD;AACA,SAAO;AAAA,IACN,aAAa,SAAS;AAAA,IACtB,cAAc,SAAS,aAAa;AAAA,IACpC,UAAU,YAAY,SAAS;AAAA,IAC/B,gBAAgB,SAAS;AAAA,EAC1B;AACD;AA8BA,eAAsB,yBACrB,SAC0C;AAC1C,QAAM,WAAW,iBAAAA,QAAK,QAAQ,QAAQ,UAAU;AAChD,MAAI;AACJ,MAAI;AACH,aAAU,MAAM,WAAO,+BAAc,QAAQ,EAAE;AAAA,EAChD,SAAS,OAAO;AACf,UAAM,SAAS,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;AACpE,UAAM,IAAI,MAAM,+BAA+B,QAAQ,UAAU,MAAM,MAAM;AAAA,6HAAgI;AAAA,EAC9M;AACA,QAAM,aAAa,OAAO,QAAQ,MAAM,EAAE,OAAO,CAAC,CAAC,EAAE,KAAK,MAAM,mBAAmB,KAAK,CAAC;AACzF,MAAI;AACJ,MAAI,QAAQ,YAAY;AACvB,UAAM,QAAQ,OAAO,QAAQ,UAAU;AACvC,QAAI,UAAU,OAAW,OAAM,IAAI,MAAM,IAAI,QAAQ,UAAU,0BAA0B,QAAQ,UAAU,kBAAkB,OAAO,KAAK,MAAM,EAAE,KAAK,IAAI,KAAK,SAAS,GAAG;AAC3K,QAAI,CAAC,mBAAmB,KAAK,EAAG,OAAM,IAAI,MAAM,WAAW,QAAQ,UAAU,SAAS,QAAQ,UAAU,wDAAwD;AAChK,YAAQ,CAAC,QAAQ,YAAY,KAAK;AAAA,EACnC,WAAW,WAAW,WAAW,GAAG;AACnC,YAAQ,WAAW,CAAC;AAAA,EACrB,WAAW,WAAW,WAAW,GAAG;AACnC,UAAM,IAAI,MAAM,IAAI,QAAQ,UAAU,6FAA6F;AAAA,EACpI,OAAO;AACN,UAAM,IAAI,MAAM,IAAI,QAAQ,UAAU,aAAa,WAAW,MAAM,aAAa,WAAW,IAAI,CAAC,CAAC,IAAI,MAAM,IAAI,EAAE,KAAK,IAAI,CAAC,8BAA8B;AAAA,EAC3J;AACA,QAAM,eAAW,sCAAqB,MAAM,CAAC,CAA+C;AAG5F,6CAAsB,EAAE,iBAAiB,GAAG,SAAS,CAAC,QAAQ,EAAE,CAAC;AACjE,YAAM,uBAAM,iBAAAA,QAAK,QAAQ,iBAAAA,QAAK,QAAQ,QAAQ,GAAG,CAAC,GAAG,EAAE,WAAW,KAAK,CAAC;AACxE,YAAM,2BAAU,iBAAAA,QAAK,QAAQ,QAAQ,GAAG,GAAG,GAAG,KAAK,UAAU,UAAU,MAAM,CAAC,CAAC;AAAA,GAAM,MAAM;AAC3F,SAAO;AAAA,IACN,WAAW,SAAS;AAAA,IACpB,YAAY,MAAM,CAAC;AAAA,IACnB,aAAa,SAAS,YAAY;AAAA,IAClC,SAAS,SAAS,QAAQ;AAAA,IAC1B,YAAY,SAAS,WAAW;AAAA,EACjC;AACD;AAEA,SAAS,mBAAmB,OAAyB;AACpD,SAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,OAAQ,MAAkC,cAAc;AAC/G;AAEA,eAAsB,qBACrB,SACsC;AACtC,MAAI,CAAC,oBAAoB,KAAK,QAAQ,SAAS,GAAG;AACjD,UAAM,IAAI,MAAM,wEAAwE;AAAA,EACzF;AACA,QAAM,cAAc,QAAQ,UAC1B,MAAM,GAAG,EACT,IAAI,CAAC,MAAM,UAAU,UAAU,IAC7B,GAAG,KAAK,OAAO,CAAC,EAAE,YAAY,CAAC,GAAG,KAAK,MAAM,CAAC,CAAC,KAC/C,IAAI,EACN,KAAK,GAAG;AACV,QAAM,aAAa,iBAAAA,QAAK,KAAK,QAAQ,WAAW,WAAW;AAC3D,QAAM,aAAa,iBAAAA,QAAK,KAAK,QAAQ,WAAW,WAAW;AAC3D,aAAW,QAAQ,CAAC,YAAY,UAAU,GAAG;AAC5C,QAAI;AACH,gBAAM,wBAAO,IAAI;AACjB,YAAM,IAAI,MAAM,wCAAwC,IAAI,IAAI;AAAA,IACjE,SAAS,OAAO;AACf,UAAI,iBAAiB,SAAS,MAAM,QAAQ,WAAW,uBAAuB,EAAG,OAAM;AACvF,UAAK,MAAgC,SAAS,SAAU,OAAM;AAAA,IAC/D;AAAA,EACD;AAKA,QAAMC,UAAS;AAAA,IACd;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,eAAgB,QAAQ,SAAS;AAAA,IACjC,gBAAiB,QAAQ,SAAS;AAAA,IAClC;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,gBAAgB,UAAU,QAAQ,SAAS,CAAC;AAAA,IAC5C,gBAAiB,QAAQ,SAAS;AAAA,IAClC;AAAA,IACA;AAAA,IACA,mBAAqB,WAAW;AAAA,IAChC,4BAA8B,YAAY,YAAY,CAAC;AAAA,IACvD;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,4DAA6D,QAAQ,SAAS;AAAA,IAC9E;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACD,EAAE,KAAK,IAAI;AACX,QAAM,SAAS;AAAA,IACd,KAAK,WAAW;AAAA,IAChB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACD,EAAE,KAAK,IAAI;AACX,YAAM,uBAAM,QAAQ,WAAW,EAAE,WAAW,KAAK,CAAC;AAClD,QAAM,UAAoB,CAAC;AAC3B,MAAI;AACH,eAAW,CAAC,MAAM,OAAO,KAAK;AAAA,MAC7B,CAAC,YAAY,MAAM;AAAA,MACnB,CAAC,YAAYA,OAAM;AAAA,IACpB,GAAY;AACX,gBAAM,2BAAU,MAAM,SAAS,EAAE,UAAU,QAAQ,MAAM,KAAK,CAAC;AAC/D,cAAQ,KAAK,IAAI;AAAA,IAClB;AAAA,EACD,SAAS,OAAO;AACf,UAAM,QAAQ,IAAI,QAAQ,IAAI,CAAC,aAAS,oBAAG,MAAM,EAAE,OAAO,KAAK,CAAC,CAAC,CAAC;AAClE,QAAK,MAAgC,SAAS,UAAU;AACvD,YAAM,IAAI,MAAM,wEAAwE;AAAA,IACzF;AACA,UAAM;AAAA,EACP;AACA,SAAO,EAAE,QAAQ;AAClB;AAEA,SAAS,UAAU,WAA2B;AAC7C,SAAO,UAAU,MAAM,GAAG,EAAE,IAAI,CAAC,MAAM,UAAU,UAAU,IAAI,OAAO,GAAG,KAAK,OAAO,CAAC,EAAE,YAAY,CAAC,GAAG,KAAK,MAAM,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE;AACjI;AAEA,eAAsB,qBAAqB,SAAmD;AAC7F,QAAM,QAAQ,KAAK,MAAM,UAAM,0BAAS,QAAQ,WAAW,MAAM,CAAC;AAClE,MAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,EAAG,OAAM,IAAI,MAAM,uCAAuC;AACxH,QAAM,SAAS,aAAa,QAAQ,QAAQ,EAAE,iBAAiB,MAAM,iBAAiB,SAAS,CAAC,KAAK,EAAE;AACvG,QAAM,SAAK,uCAAsB,MAAM;AACvC,QAAM,SAAS,MAAM,QAAQ,IAAI,QAAQ,QAAQ,IAAI,OAAO,SAAS;AACpE,UAAM,SAAS,kBAAkB,IAAI;AACrC,QAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,6BAA6B,IAAI,IAAI;AAClE,YAAQ,UAAM,8BAAa,QAAQ,EAAE,GAAG,IAAI,CAAC,UAAU,EAAE,GAAG,MAAM,MAAM,GAAG,IAAI,IAAI,KAAK,IAAI,GAAG,EAAE;AAAA,EAClG,CAAC,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC,MAAM,UAAU,wBAAwB,KAAK,MAAM,MAAM,IAAI,CAAC;AAChF,QAAM,WAAW,IAAI,IAAI,MAAM,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC;AACvD,QAAM,WAAW,MAAM,UAAU,QAAQ,eAAe;AACxD,QAAM,mBAAmB,QAAQ,QAAQ,IAAI,CAAC,WAAW,GAAG,MAAM,GAAG;AACrE,QAAM,QAAQ,SAAS,OAAO,CAAC,SAAS,iBAAiB,KAAK,CAAC,WAAW,KAAK,WAAW,MAAM,CAAC,KAAK,CAAC,SAAS,IAAI,IAAI,CAAC;AACzH,MAAI,CAAC,QAAQ,MAAO,OAAM,QAAQ,IAAI,MAAM,IAAI,CAAC,aAAS,oBAAG,iBAAAD,QAAK,KAAK,QAAQ,iBAAiB,IAAI,GAAG,EAAE,OAAO,KAAK,CAAC,CAAC,CAAC;AACxH,QAAM,UAAoB,CAAC;AAC3B,aAAW,QAAQ,OAAO;AACzB,UAAM,SAAS,iBAAAA,QAAK,KAAK,QAAQ,iBAAiB,KAAK,IAAI;AAC3D,QAAI;AACJ,QAAI;AAAE,gBAAU,UAAM,0BAAS,QAAQ,MAAM;AAAA,IAAG,QAAQ;AAAE,gBAAU;AAAA,IAAW;AAC/E,QAAI,YAAY,KAAK,SAAS;AAC7B,cAAQ,KAAK,KAAK,IAAI;AACtB,UAAI,CAAC,QAAQ,OAAO;AAAE,kBAAM,uBAAM,iBAAAA,QAAK,QAAQ,MAAM,GAAG,EAAE,WAAW,KAAK,CAAC;AAAG,kBAAM,2BAAU,QAAQ,KAAK,SAAS,MAAM;AAAA,MAAG;AAAA,IAC9H;AAAA,EACD;AACA,MAAI,QAAQ,UAAU,QAAQ,UAAU,MAAM,QAAS,OAAM,IAAI,MAAM,gCAAgC,CAAC,GAAG,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,SAAS,IAAI,EAAE,CAAC,EAAE,KAAK,IAAI,CAAC,EAAE;AACzK,SAAO,EAAE,SAAS,OAAO,MAAM;AAChC;AAEA,eAAe,UAAU,WAAmB,SAAS,IAAuB;AAC3E,MAAI;AACJ,MAAI;AAAE,cAAU,UAAM,yBAAQ,WAAW,EAAE,eAAe,KAAK,CAAC;AAAA,EAAG,QAAQ;AAAE,WAAO,CAAC;AAAA,EAAG;AACxF,QAAM,SAAS,MAAM,QAAQ,IAAI,QAAQ,IAAI,CAAC,UAAU,MAAM,YAAY,IAAI,UAAU,iBAAAA,QAAK,KAAK,WAAW,MAAM,IAAI,GAAG,GAAG,MAAM,GAAG,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,MAAM,GAAG,MAAM,IAAI,EAAE,CAAC,CAAC;AAClL,SAAO,OAAO,KAAK,EAAE,KAAK;AAC3B;AAYA,SAAS,gCAAgC,OAA4D;AACpG,MAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,GAAG;AAChE,UAAM,IAAI,MAAM,2DAA2D;AAAA,EAC5E;AACA,QAAM,SAAS;AACf,MAAI,OAAO,kBAAkB,EAAG,OAAM,IAAI,MAAM,6DAA6D;AAC7G,aAAW,SAAS,CAAC,eAAe,UAAU,SAAS,YAAY,SAAS,GAAY;AACvF,QAAI,OAAO,OAAO,KAAK,MAAM,YAAY,CAAC,OAAO,KAAK,GAAG;AACxD,YAAM,IAAI,MAAM,sCAAsC,KAAK,8BAA8B;AAAA,IAC1F;AAAA,EACD;AAIA,MAAI,CAAC,oBAAoB,KAAK,OAAO,WAAqB,GAAG;AAC5D,UAAM,IAAI,MAAM,iGAAiG;AAAA,EAClH;AACA,MAAI,CAAC,MAAM,QAAQ,OAAO,SAAS,KAAK,CAAC,OAAO,UAAU,MAAM,CAAC,UAAU,OAAO,UAAU,YAAY,KAAK,GAAG;AAC/G,UAAM,IAAI,MAAM,8EAA8E;AAAA,EAC/F;AAKA,QAAM,QAAQ,oBAAI,IAAI,CAAC,iBAAiB,eAAe,UAAU,SAAS,YAAY,WAAW,WAAW,CAAC;AAC7G,aAAW,SAAS,OAAO,KAAK,MAAM,GAAG;AACxC,QAAI,4CAA4C,KAAK,KAAK,KAAK,UAAU,SAAS;AACjF,YAAM,IAAI,MAAM,sDAAsD,KAAK,qCAAqC;AAAA,IACjH;AACA,QAAI,CAAC,MAAM,IAAI,KAAK,GAAG;AACtB,YAAM,IAAI,MAAM,4DAA4D,KAAK,IAAI;AAAA,IACtF;AAAA,EACD;AACD;AAWA,eAAsB,kBACrB,SACmC;AACnC,QAAM,cAAc,MAAM,SAAS,QAAQ,UAAU;AACrD,kCAAgC,WAAW;AAC3C,QAAM,OAAO,iBAAAA,QAAK,QAAQ,QAAQ,UAAU;AAC5C,QAAM,UAAU,CAAC,SAAyB,iBAAAA,QAAK,QAAQ,MAAM,IAAI;AAEjE,QAAM,WAAW,MAAM,SAAS,QAAQ,YAAY,QAAQ,CAAC;AAC7D,8CAAuB,QAAQ;AAC/B,QAAM,UAAU,MAAM,SAAS,QAAQ,YAAY,OAAO,CAAC;AAC3D,sDAA2B,OAAO;AAClC,QAAM,YAAY,MAAM,QAAQ;AAAA,IAC/B,YAAY,UAAU,IAAI,OAAO,SAAS,MAAM,SAAS,QAAQ,IAAI,CAAC,CAA0B;AAAA,EACjG;AAEA,QAAM,iBAAa,qCAAiB,UAAM,0BAAS,QAAQ,gBAAgB,MAAM,CAAC;AAClF,QAAM,WAAW,UAAM,+CAAyB;AAAA,IAC/C,aAAa,YAAY;AAAA,IACzB;AAAA,IACA;AAAA,IACA;AAAA,IACA,QAAQ,YAAY;AAAA,IACpB,YAAQ,+CAAyB,EAAE,OAAO,YAAY,OAAO,WAAW,CAAC;AAAA,EAC1E,CAAC;AAED,QAAM,aAAa,QAAQ,aACxB,iBAAAA,QAAK,QAAQ,QAAQ,UAAU,IAC/B,QAAQ,GAAG,YAAY,WAAW,yBAAyB;AAC9D,YAAM,uBAAM,iBAAAA,QAAK,QAAQ,UAAU,GAAG,EAAE,WAAW,KAAK,CAAC;AACzD,YAAM,2BAAU,YAAY,GAAG,SAAS,UAAU;AAAA,GAAM,MAAM;AAE9D,SAAO;AAAA,IACN,aAAa,YAAY;AAAA,IACzB,eAAe,QAAQ;AAAA,IACvB,gBAAgB,SAAS;AAAA,IACzB,QAAQ;AAAA,MACP,OAAO,SAAS,QAAQ,OAAO,MAAM;AAAA,MACrC,SAAS,SAAS,QAAQ,OAAO,QAAQ;AAAA,IAC1C;AAAA,IACA;AAAA,EACD;AACD;","names":["result","path","module"]}

package/dist/index.d.cts

@@ -57,11 +57,6 @@ declare class FabricGenUsageError extends Error {
 declare function fabricGenCliExitCode(error: unknown): number;
 /** Execute one CLI command and return its single human-readable result line. */
 declare function runFabricGenCommand(args: readonly string[]): Promise<string>;
-/**
- * Add experience integration files to an existing application. It deliberately
- * does not create package.json, routes, authentication, billing, or navigation:
- * those remain owned by the Supastarter-derived application shell.
- */
 declare function initializeExperience(options: InitializeExperienceOptions): Promise<InitializeExperienceResult>;
 /**
  * Verify an application's immutable composition inputs before deployment.
@@ -73,6 +68,29 @@ declare function checkApplication(options: CheckApplicationOptions): Promise<Che
  * Create the smallest useful capability source tree. The manifest is accepted
  * by the compiler immediately, while leaving domain vocabulary to the adopter.
  */
+interface ExportModuleManifestFileOptions {
+    moduleFile: string;
+    out: string;
+    exportName?: string;
+}
+interface ExportModuleManifestFileResult {
+    namespace: string;
+    exportName: string;
+    objectTypes: number;
+    actions: number;
+    eventTypes: number;
+}
+/**
+ * Turn an authored FabricModule into the normalized manifest every generator reads.
+ *
+ * This is the seam between the two halves of the authoring loop. The module is
+ * TypeScript, so the compiler checks it as you write; the manifest is the
+ * normalized JSON the code generators and the assembly compiler consume. Until
+ * this command existed, nothing shipped connected them: `init capability`
+ * scaffolded an empty manifest, and an author who filled it in by hand was
+ * guessing at the shape of `exportModuleManifest`'s output.
+ */
+declare function exportModuleManifestFile(options: ExportModuleManifestFileOptions): Promise<ExportModuleManifestFileResult>;
 declare function initializeCapability(options: InitializeCapabilityOptions): Promise<InitializeCapabilityResult>;
 declare function generateFromManifest(options: GenerateOptions): Promise<GenerateResult>;
 /**
@@ -86,4 +104,4 @@ declare function generateFromManifest(options: GenerateOptions): Promise<Generat
  */
 declare function promoteExperience(options: PromoteExperienceOptions): Promise<PromoteExperienceResult>;
 
-export { type CheckApplicationOptions, type CheckApplicationResult, FabricGenUsageError, GENERATOR_TARGETS, type GenerateOptions, type GenerateResult, type InitializeCapabilityOptions, type InitializeCapabilityResult, type InitializeExperienceOptions, type InitializeExperienceResult, type PromoteExperienceOptions, type PromoteExperienceResult, checkApplication, fabricGenCliExitCode, generateFromManifest, initializeCapability, initializeExperience, promoteExperience, runFabricGenCommand };
+export { type CheckApplicationOptions, type CheckApplicationResult, type ExportModuleManifestFileOptions, type ExportModuleManifestFileResult, FabricGenUsageError, GENERATOR_TARGETS, type GenerateOptions, type GenerateResult, type InitializeCapabilityOptions, type InitializeCapabilityResult, type InitializeExperienceOptions, type InitializeExperienceResult, type PromoteExperienceOptions, type PromoteExperienceResult, checkApplication, exportModuleManifestFile, fabricGenCliExitCode, generateFromManifest, initializeCapability, initializeExperience, promoteExperience, runFabricGenCommand };

package/dist/index.d.ts

@@ -57,11 +57,6 @@ declare class FabricGenUsageError extends Error {
 declare function fabricGenCliExitCode(error: unknown): number;
 /** Execute one CLI command and return its single human-readable result line. */
 declare function runFabricGenCommand(args: readonly string[]): Promise<string>;
-/**
- * Add experience integration files to an existing application. It deliberately
- * does not create package.json, routes, authentication, billing, or navigation:
- * those remain owned by the Supastarter-derived application shell.
- */
 declare function initializeExperience(options: InitializeExperienceOptions): Promise<InitializeExperienceResult>;
 /**
  * Verify an application's immutable composition inputs before deployment.
@@ -73,6 +68,29 @@ declare function checkApplication(options: CheckApplicationOptions): Promise<Che
  * Create the smallest useful capability source tree. The manifest is accepted
  * by the compiler immediately, while leaving domain vocabulary to the adopter.
  */
+interface ExportModuleManifestFileOptions {
+    moduleFile: string;
+    out: string;
+    exportName?: string;
+}
+interface ExportModuleManifestFileResult {
+    namespace: string;
+    exportName: string;
+    objectTypes: number;
+    actions: number;
+    eventTypes: number;
+}
+/**
+ * Turn an authored FabricModule into the normalized manifest every generator reads.
+ *
+ * This is the seam between the two halves of the authoring loop. The module is
+ * TypeScript, so the compiler checks it as you write; the manifest is the
+ * normalized JSON the code generators and the assembly compiler consume. Until
+ * this command existed, nothing shipped connected them: `init capability`
+ * scaffolded an empty manifest, and an author who filled it in by hand was
+ * guessing at the shape of `exportModuleManifest`'s output.
+ */
+declare function exportModuleManifestFile(options: ExportModuleManifestFileOptions): Promise<ExportModuleManifestFileResult>;
 declare function initializeCapability(options: InitializeCapabilityOptions): Promise<InitializeCapabilityResult>;
 declare function generateFromManifest(options: GenerateOptions): Promise<GenerateResult>;
 /**
@@ -86,4 +104,4 @@ declare function generateFromManifest(options: GenerateOptions): Promise<Generat
  */
 declare function promoteExperience(options: PromoteExperienceOptions): Promise<PromoteExperienceResult>;
 
-export { type CheckApplicationOptions, type CheckApplicationResult, FabricGenUsageError, GENERATOR_TARGETS, type GenerateOptions, type GenerateResult, type InitializeCapabilityOptions, type InitializeCapabilityResult, type InitializeExperienceOptions, type InitializeExperienceResult, type PromoteExperienceOptions, type PromoteExperienceResult, checkApplication, fabricGenCliExitCode, generateFromManifest, initializeCapability, initializeExperience, promoteExperience, runFabricGenCommand };
+export { type CheckApplicationOptions, type CheckApplicationResult, type ExportModuleManifestFileOptions, type ExportModuleManifestFileResult, FabricGenUsageError, GENERATOR_TARGETS, type GenerateOptions, type GenerateResult, type InitializeCapabilityOptions, type InitializeCapabilityResult, type InitializeExperienceOptions, type InitializeExperienceResult, type PromoteExperienceOptions, type PromoteExperienceResult, checkApplication, exportModuleManifestFile, fabricGenCliExitCode, generateFromManifest, initializeCapability, initializeExperience, promoteExperience, runFabricGenCommand };