@fabricorg/sdui-composer 0.2.0

package/CHANGELOG.md

@@ -0,0 +1,74 @@
+# Changelog
+
+## 0.2.0
+
+### Minor Changes
+
+- a598fb9: Close the remaining review findings.
+
+  **One capability-reference grammar.** `sdui-release` accepted any name after the namespace while
+  `sdui-composer` rejected `/`, so a view named `orders/reports/daily` produced a release that validated
+  and then died at promotion with nothing wrong upstream to point at. Both now share
+  `parseCapabilityRef`, tightened to lowercase path segments matching what the platform permits for a
+  view name. Two views in one contract that reduce to the same reference are reported as
+  `ambiguous_capability_reference` at validation rather than surfacing as an ambiguous route later.
+
+  **A bounded replay window.** A client-supplied `capturedAt` had no lower bound. Deferring it to the
+  Host looked safe and was not: the Host checks staleness only when the capture-authority adapter
+  supplies an `expiresAt`, and skips the execution-time expiry check entirely for actions governed at
+  capture. A gateway that accepts replay must now declare `maxOfflineReplayAgeMs`, and the instant must
+  be RFC 3339 with an explicit offset.
+
+  **One token-set grammar.** `document.tokenSet` accepted names and versions that `supportedTokenSets`
+  rejected, while validation treats the two fields as interchangeable.
+
+  **Port requirements narrow as they are checked.** A requirement for a standard _and_ a version could
+  be satisfied by two different adapters covering one constraint each. `requirement.standard.version`
+  was declared and never read.
+
+### Patch Changes
+
+- 274d948: Close the gaps a second independent review found.
+
+  Experience promotion now binds the usage contracts it compiles routes from to the assembly the
+  release was validated against. Promotion previously accepted arbitrary contracts while copying the
+  release's assembly digest through unchanged, so a substituted contract could remap an already-granted
+  `capability://` reference onto a different installed action. PlatformHost still authorized that
+  action, which made this an integrity failure of what a release exposes rather than an authorization
+  bypass, and invisible downstream. `@fabricorg/assembly` exports `computeAssemblyLockfileDigest` so
+  tooling can build a self-consistent lockfile; the validator already recomputed it.
+
+  The MFE loader gains `fabric.mfe-loader.mismatched-digest-denial.v1`, which supplies a well-formed
+  integrity value that cannot match the approved bundle. The previous integrity check supplied only a
+  malformed value, so it proved a regex ran; a transport that ignored integrity entirely certified
+  clean. Since same-realm MFE code carries the application's own authority, a false integrity
+  certification is worth catching in the suite rather than in production.
+
+  The SDUI channel suite no longer certifies a channel it never exercised: the missing-vocabulary check
+  now runs against the subject rather than a fresh built-in one, rejects a vacuous or contradictory
+  subject instead of passing it, requires a refusal to name the digest so an unrelated crash cannot
+  read as correct behaviour, and edits several digest-covered fields so a channel cannot pass by
+  special-casing one fixture. `supportedTokenSets` uses a total comparator over its fields rather than
+  an interpolated key, and duplicate or malformed token-set references are rejected.
+
+- Updated dependencies [8ce5e06]
+- Updated dependencies [a598fb9]
+- Updated dependencies [8f75ac9]
+- Updated dependencies [9a5b18a]
+- Updated dependencies [9b2e55b]
+- Updated dependencies [0d1f6f6]
+- Updated dependencies [274d948]
+  - @fabricorg/sdui-release@0.5.0
+  - @fabricorg/assembly@0.4.0
+
+## 0.1.0
+
+### Minor Changes
+
+- Add exact route compilation, effective-grant materialization, v2-to-v3 migration,
+  signed promotion, channel-pointer signing, and public conformance checks.
+
+### Patch Changes
+
+- Updated dependencies
+  - @fabricorg/sdui-release@0.4.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Fabric
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,15 @@
+# `@fabricorg/sdui-composer`
+
+Headless promotion tooling for SDUI releases. Promotion verifies Release v2, resolves
+every granted view and intent to an exact versioned route, computes tree-scoped
+effective grants, creates Release v3, and signs its canonical bytes with ES256.
+
+Ambiguous or missing routes fail promotion. Runtime modules never interpret raw
+adoption bindings.
+
+`migrateSduiReleaseV2ToV3` is the explicit migration seam and intentionally has the
+same fail-closed inputs as promotion. `signReleaseChannelPointer` signs a monotonic
+release-channel pointer; activate it with a durable `ReleaseGenerationStore` so a
+restart cannot reopen an older generation.
+
+Replacement composers can run `sduiComposerChecks`.

package/dist/index.cjs

@@ -0,0 +1,261 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// index.ts
+var index_exports = {};
+__export(index_exports, {
+  createEs256ReleaseSigner: () => createEs256ReleaseSigner,
+  migrateSduiReleaseV2ToV3: () => migrateSduiReleaseV2ToV3,
+  promoteExperienceRelease: () => promoteExperienceRelease,
+  runSduiComposerChecks: () => runSduiComposerChecks,
+  sduiComposerChecks: () => sduiComposerChecks,
+  signReleaseChannelPointer: () => signReleaseChannelPointer
+});
+module.exports = __toCommonJS(index_exports);
+var import_node_crypto = require("crypto");
+var import_assembly = require("@fabricorg/assembly");
+var import_sdui_release = require("@fabricorg/sdui-release");
+var import_contracts = require("@fabricorg/sdui-release/contracts");
+function createEs256ReleaseSigner(input) {
+  if (!input.keyId.trim()) throw new Error("Experience release signing key id is required.");
+  return {
+    keyId: input.keyId,
+    async sign(signingInput) {
+      return new Uint8Array((0, import_node_crypto.sign)(
+        "sha256",
+        signingInput,
+        { key: input.privateKey, dsaEncoding: "ieee-p1363" }
+      ));
+    }
+  };
+}
+var encoder = new TextEncoder();
+async function promoteExperienceRelease(input) {
+  (0, import_sdui_release.assertSduiReleaseIntegrity)(input.release);
+  (0, import_sdui_release.assertSduiRelease)(input.release);
+  if (!input.issuer.trim()) throw new Error("Experience release issuer is required.");
+  assertContractsApprovedByAssembly(input.release, input.contracts, input.assembly);
+  const contracts = input.contracts.map((document) => document.capability);
+  const routes = compileRoutes(input.release, contracts);
+  const effectiveGrants = compileEffectiveGrants(input.release);
+  const body = {
+    formatVersion: import_contracts.SDUI_RELEASE_V3_FORMAT_VERSION,
+    kind: "experience-release",
+    issuer: input.issuer,
+    application: input.application,
+    assemblyDigest: input.release.assemblyDigest,
+    document: input.release.document,
+    tokenSet: input.release.tokenSet,
+    componentPacks: input.release.componentPacks,
+    routes,
+    effectiveGrants
+  };
+  const release = {
+    ...body,
+    releaseDigest: sha256((0, import_contracts.canonicalizeJcs)(body))
+  };
+  return {
+    release,
+    compactJws: await signCompactJws(release, "fabric-experience-release+jws", input.signer)
+  };
+}
+var migrateSduiReleaseV2ToV3 = promoteExperienceRelease;
+async function signReleaseChannelPointer(pointer, signer) {
+  (0, import_contracts.assertReleaseChannelPointer)(pointer);
+  return signCompactJws(pointer, "fabric-release-channel-pointer+jws", signer);
+}
+function sduiComposerChecks() {
+  return [
+    {
+      id: "fabric.sdui-composer.exact-promotion.v1",
+      async run(subject) {
+        const promoted = await subject.promote(subject.validInput);
+        if (promoted.release.formatVersion !== 3 || promoted.compactJws.split(".").length !== 3) {
+          throw new Error("Composer did not produce a signed Release v3.");
+        }
+        return [promoted.release.releaseDigest];
+      }
+    },
+    {
+      id: "fabric.sdui-composer.unresolved-denial.v1",
+      async run(subject) {
+        let rejected = false;
+        try {
+          await subject.promote(subject.invalidInput);
+        } catch {
+          rejected = true;
+        }
+        if (!rejected) throw new Error("Composer promoted unresolved or ambiguous capability routes.");
+        return ["invalid route rejected"];
+      }
+    }
+  ];
+}
+async function runSduiComposerChecks(subject, checks = sduiComposerChecks()) {
+  const results = [];
+  for (const check of checks) {
+    try {
+      results.push({ id: check.id, status: "passed", evidence: await check.run(subject) });
+    } catch (error) {
+      results.push({ id: check.id, status: "failed", evidence: [], error: error instanceof Error ? error.message : String(error) });
+    }
+  }
+  return { passed: results.every((result) => result.status === "passed"), checks: results };
+}
+function compileRoutes(release, contracts) {
+  const views = [...new Set(release.grants.views)].sort().map((reference) => resolveView(reference, contracts));
+  const intents = [...new Set(release.grants.intents)].sort().map((reference) => resolveIntent(reference, contracts));
+  return { views, intents };
+}
+function resolveView(reference, contracts) {
+  const { namespace, name } = parseReference(reference);
+  const matches = contracts.flatMap((contract) => {
+    if (contract.namespace !== namespace) return [];
+    return contract.views.filter((view) => view.name === name || view.name === `${namespace}/${name}`).map((view) => ({ contract, view }));
+  });
+  if (matches.length !== 1) throw new Error(`Capability view route "${reference}" is ${matches.length === 0 ? "missing" : "ambiguous"}.`);
+  const match = matches[0];
+  const parameterSchemaDigest = match.view.parameterSchema === void 0 ? void 0 : sha256((0, import_contracts.canonicalizeJcs)(match.view.parameterSchema));
+  return {
+    reference,
+    name: `${namespace}/${name}`,
+    version: match.view.version,
+    ...match.view.parameterSchema === void 0 ? {} : { parameterSchema: match.view.parameterSchema },
+    ...parameterSchemaDigest === void 0 ? {} : { parameterSchemaDigest }
+  };
+}
+function resolveIntent(reference, contracts) {
+  const { namespace, name } = parseReference(reference);
+  const matches = contracts.flatMap((contract) => {
+    if (contract.namespace !== namespace) return [];
+    const metadata = contract.extensions?.["fabric.experience/v1"];
+    return (metadata?.actionIntents ?? []).flatMap((intent) => {
+      const shortName = intent.name.startsWith(`${namespace}.`) ? intent.name.slice(namespace.length + 1) : intent.name;
+      if (shortName !== name) return [];
+      const action = contract.actions.find((candidate) => candidate.actionId === intent.actionId);
+      return action ? [{ intent, action }] : [];
+    });
+  });
+  if (matches.length !== 1) throw new Error(`Capability intent route "${reference}" is ${matches.length === 0 ? "missing" : "ambiguous"}.`);
+  const match = matches[0];
+  const parameterSchemaDigest = match.action.parameterSchema === void 0 ? void 0 : sha256((0, import_contracts.canonicalizeJcs)(match.action.parameterSchema));
+  return {
+    reference,
+    actionId: match.action.actionId,
+    version: match.action.version,
+    ...match.action.parameterSchema === void 0 ? {} : { parameterSchema: match.action.parameterSchema },
+    ...parameterSchemaDigest === void 0 ? {} : { parameterSchemaDigest },
+    ...match.action.execution === void 0 ? {} : { execution: match.action.execution }
+  };
+}
+function compileEffectiveGrants(release) {
+  const result = [];
+  const releaseViews = new Set(release.grants.views);
+  const releaseIntents = new Set(release.grants.intents);
+  const seen = /* @__PURE__ */ new Set();
+  walkTree("root", release.document.root, releaseViews, releaseIntents, release, result, seen);
+  for (const variant of release.document.variants ?? []) {
+    walkTree(variant.id, variant.root, releaseViews, releaseIntents, release, result, seen);
+  }
+  return result;
+}
+function walkTree(treeId, fragment, inheritedViews, inheritedIntents, release, result, seen) {
+  const identity = `${treeId}\0${fragment.id}`;
+  if (seen.has(identity)) throw new Error(`SDUI release repeats fragment "${fragment.id}" in tree "${treeId}".`);
+  seen.add(identity);
+  const narrowing = release.grants.fragments?.[fragment.id];
+  const views = narrowing?.views === void 0 ? new Set(inheritedViews) : intersect(inheritedViews, narrowing.views);
+  const intents = narrowing?.intents === void 0 ? new Set(inheritedIntents) : intersect(inheritedIntents, narrowing.intents);
+  if (fragment.dataRef && !views.has(fragment.dataRef)) {
+    throw new Error(`Fragment "${fragment.id}" references ungranted view "${fragment.dataRef}".`);
+  }
+  for (const action of Object.values(fragment.actions ?? {})) {
+    if (!intents.has(action.intent)) throw new Error(`Fragment "${fragment.id}" references ungranted intent "${action.intent}".`);
+  }
+  result.push({
+    treeId,
+    fragmentId: fragment.id,
+    views: [...views].sort(),
+    intents: [...intents].sort()
+  });
+  for (const child of fragment.children ?? []) walkTree(treeId, child, views, intents, release, result, seen);
+}
+function intersect(values, narrowing) {
+  return new Set(narrowing.filter((value) => values.has(value)));
+}
+function parseReference(reference) {
+  const parsed = (0, import_sdui_release.parseCapabilityRef)(reference);
+  if (!parsed) throw new Error(`Capability route "${reference}" is invalid.`);
+  return parsed;
+}
+function sha256(value) {
+  return (0, import_node_crypto.createHash)("sha256").update(value).digest("hex");
+}
+async function signCompactJws(payloadValue, type, signer) {
+  const protectedHeader = encodeBase64Url((0, import_contracts.canonicalizeJcs)({
+    alg: "ES256",
+    kid: signer.keyId,
+    typ: type
+  }));
+  const payload = encodeBase64Url((0, import_contracts.canonicalizeJcs)(payloadValue));
+  const signingInput = `${protectedHeader}.${payload}`;
+  const signature = await signer.sign(encoder.encode(signingInput));
+  if (signature.byteLength !== 64) throw new Error("Experience release signer must return a 64-byte ES256 JOSE signature.");
+  return `${signingInput}.${encodeBytesBase64Url(signature)}`;
+}
+function encodeBase64Url(value) {
+  return Buffer.from(value, "utf8").toString("base64url");
+}
+function encodeBytesBase64Url(value) {
+  return Buffer.from(value).toString("base64url");
+}
+function assertContractsApprovedByAssembly(release, contracts, assembly) {
+  (0, import_assembly.assertAssemblyLockfile)(assembly);
+  if (assembly.assemblyDigest !== release.assemblyDigest) {
+    throw new Error(
+      `Experience promotion was given assembly "${assembly.assemblyDigest}" but the release was validated against "${release.assemblyDigest}".`
+    );
+  }
+  const approved = new Map(
+    assembly.capabilities.filter((capability) => capability.usageContractDigest !== void 0).map((capability) => [capability.namespace, capability.usageContractDigest])
+  );
+  for (const document of contracts) {
+    const namespace = document.capability.namespace;
+    const expected = approved.get(namespace);
+    if (expected === void 0) {
+      throw new Error(`Assembly "${assembly.assemblyDigest}" approves no usage contract for capability "${namespace}".`);
+    }
+    const actual = (0, import_assembly.computeUsageContractDocumentDigest)(document);
+    if (actual !== expected) {
+      throw new Error(
+        `Usage contract for "${namespace}" has digest "${actual}", which is not the "${expected}" that assembly "${assembly.assemblyDigest}" approved.`
+      );
+    }
+  }
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  createEs256ReleaseSigner,
+  migrateSduiReleaseV2ToV3,
+  promoteExperienceRelease,
+  runSduiComposerChecks,
+  sduiComposerChecks,
+  signReleaseChannelPointer
+});
+//# sourceMappingURL=index.cjs.map

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../index.ts"],"sourcesContent":["import { createHash, sign, type KeyObject } from \"node:crypto\";\nimport type { UsageContract, UsageContractDocument } from \"@fabricorg/gen-capability\";\nimport {\n\tassertAssemblyLockfile,\n\tcomputeUsageContractDocumentDigest,\n\ttype AssemblyLockfile,\n} from \"@fabricorg/assembly\";\nimport {\n\tparseCapabilityRef,\n\tassertSduiReleaseIntegrity,\n\tassertSduiRelease,\n\ttype SduiFragment,\n\ttype SduiRelease,\n} from \"@fabricorg/sdui-release\";\nimport {\n\tSDUI_RELEASE_V3_FORMAT_VERSION,\n\tassertReleaseChannelPointer,\n\tcanonicalizeJcs,\n\ttype EffectiveFragmentGrant,\n\ttype ExperienceIntentRoute,\n\ttype ExperienceViewRoute,\n\ttype ReleaseChannelPointer,\n\ttype SduiReleaseV3,\n} from \"@fabricorg/sdui-release/contracts\";\n\nexport interface ExperienceReleaseSigner {\n\tkeyId: string;\n\tsign(signingInput: Uint8Array): Promise<Uint8Array>;\n}\n\nexport function createEs256ReleaseSigner(input: {\n\tkeyId: string;\n\tprivateKey: KeyObject;\n}): ExperienceReleaseSigner {\n\tif (!input.keyId.trim()) throw new Error(\"Experience release signing key id is required.\");\n\treturn {\n\t\tkeyId: input.keyId,\n\t\tasync sign(signingInput) {\n\t\t\treturn new Uint8Array(sign(\n\t\t\t\t\"sha256\",\n\t\t\t\tsigningInput,\n\t\t\t\t{ key: input.privateKey, dsaEncoding: \"ieee-p1363\" },\n\t\t\t));\n\t\t},\n\t};\n}\n\nexport interface PromoteExperienceReleaseInput {\n\tapplication: string;\n\trelease: SduiRelease;\n\t/**\n\t * The generated usage-contract documents routes are compiled from.\n\t *\n\t * These decide which action a granted `capability://` reference resolves to,\n\t * so they cannot be taken on trust: every one is checked against the\n\t * approved digests in `assembly` before a route is signed. Without that, a\n\t * substituted contract could remap an already-granted reference onto a\n\t * different installed action while the release kept its original assembly\n\t * digest.\n\t */\n\tcontracts: readonly UsageContractDocument[];\n\t/** The lockfile the release was validated against. */\n\tassembly: AssemblyLockfile;\n\tissuer: string;\n\tsigner: ExperienceReleaseSigner;\n}\n\nexport interface PromotedExperienceRelease {\n\trelease: SduiReleaseV3;\n\tcompactJws: string;\n}\n\nexport interface SduiComposerConformanceSubject {\n\tpromote(input: PromoteExperienceReleaseInput): Promise<PromotedExperienceRelease>;\n\tvalidInput: PromoteExperienceReleaseInput;\n\tinvalidInput: PromoteExperienceReleaseInput;\n}\n\nexport interface SduiComposerCheck {\n\tid: \"fabric.sdui-composer.exact-promotion.v1\" | \"fabric.sdui-composer.unresolved-denial.v1\";\n\trun(subject: SduiComposerConformanceSubject): Promise<string[]>;\n}\n\nconst encoder = new TextEncoder();\n\nexport async function promoteExperienceRelease(\n\tinput: PromoteExperienceReleaseInput,\n): Promise<PromotedExperienceRelease> {\n\tassertSduiReleaseIntegrity(input.release);\n\tassertSduiRelease(input.release);\n\tif (!input.issuer.trim()) throw new Error(\"Experience release issuer is required.\");\n\tassertContractsApprovedByAssembly(input.release, input.contracts, input.assembly);\n\tconst contracts = input.contracts.map((document) => document.capability);\n\tconst routes = compileRoutes(input.release, contracts);\n\tconst effectiveGrants = compileEffectiveGrants(input.release);\n\tconst body = {\n\t\tformatVersion: SDUI_RELEASE_V3_FORMAT_VERSION,\n\t\tkind: \"experience-release\" as const,\n\t\tissuer: input.issuer,\n\t\tapplication: input.application,\n\t\tassemblyDigest: input.release.assemblyDigest,\n\t\tdocument: input.release.document,\n\t\ttokenSet: input.release.tokenSet,\n\t\tcomponentPacks: input.release.componentPacks,\n\t\troutes,\n\t\teffectiveGrants,\n\t};\n\tconst release: SduiReleaseV3 = {\n\t\t...body,\n\t\treleaseDigest: sha256(canonicalizeJcs(body)),\n\t};\n\treturn {\n\t\trelease,\n\t\tcompactJws: await signCompactJws(release, \"fabric-experience-release+jws\", input.signer),\n\t};\n}\n\n/** Explicit v2-to-v3 migration seam. Migration fails unless every capability route resolves exactly. */\nexport const migrateSduiReleaseV2ToV3 = promoteExperienceRelease;\n\nexport async function signReleaseChannelPointer(\n\tpointer: ReleaseChannelPointer,\n\tsigner: ExperienceReleaseSigner,\n): Promise<string> {\n\tassertReleaseChannelPointer(pointer);\n\treturn signCompactJws(pointer, \"fabric-release-channel-pointer+jws\", signer);\n}\n\nexport function sduiComposerChecks(): readonly SduiComposerCheck[] {\n\treturn [\n\t\t{\n\t\t\tid: \"fabric.sdui-composer.exact-promotion.v1\",\n\t\t\tasync run(subject) {\n\t\t\t\tconst promoted = await subject.promote(subject.validInput);\n\t\t\t\tif (promoted.release.formatVersion !== 3 || promoted.compactJws.split(\".\").length !== 3) {\n\t\t\t\t\tthrow new Error(\"Composer did not produce a signed Release v3.\");\n\t\t\t\t}\n\t\t\t\treturn [promoted.release.releaseDigest];\n\t\t\t},\n\t\t},\n\t\t{\n\t\t\tid: \"fabric.sdui-composer.unresolved-denial.v1\",\n\t\t\tasync run(subject) {\n\t\t\t\tlet rejected = false;\n\t\t\t\ttry { await subject.promote(subject.invalidInput); } catch { rejected = true; }\n\t\t\t\tif (!rejected) throw new Error(\"Composer promoted unresolved or ambiguous capability routes.\");\n\t\t\t\treturn [\"invalid route rejected\"];\n\t\t\t},\n\t\t},\n\t];\n}\n\nexport async function runSduiComposerChecks(\n\tsubject: SduiComposerConformanceSubject,\n\tchecks: readonly SduiComposerCheck[] = sduiComposerChecks(),\n): Promise<{ passed: boolean; checks: Array<{ id: SduiComposerCheck[\"id\"]; status: \"passed\" | \"failed\"; evidence: string[]; error?: string }> }> {\n\tconst results: Array<{ id: SduiComposerCheck[\"id\"]; status: \"passed\" | \"failed\"; evidence: string[]; error?: string }> = [];\n\tfor (const check of checks) {\n\t\ttry { results.push({ id: check.id, status: \"passed\", evidence: await check.run(subject) }); }\n\t\tcatch (error) { results.push({ id: check.id, status: \"failed\", evidence: [], error: error instanceof Error ? error.message : String(error) }); }\n\t}\n\treturn { passed: results.every((result) => result.status === \"passed\"), checks: results };\n}\n\nfunction compileRoutes(\n\trelease: SduiRelease,\n\tcontracts: readonly UsageContract[],\n): { views: ExperienceViewRoute[]; intents: ExperienceIntentRoute[] } {\n\tconst views = [...new Set(release.grants.views)].sort().map((reference) => resolveView(reference, contracts));\n\tconst intents = [...new Set(release.grants.intents)].sort().map((reference) => resolveIntent(reference, contracts));\n\treturn { views, intents };\n}\n\nfunction resolveView(reference: string, contracts: readonly UsageContract[]): ExperienceViewRoute {\n\tconst { namespace, name } = parseReference(reference);\n\tconst matches = contracts.flatMap((contract) => {\n\t\tif (contract.namespace !== namespace) return [];\n\t\treturn contract.views\n\t\t\t.filter((view) => view.name === name || view.name === `${namespace}/${name}`)\n\t\t\t.map((view) => ({ contract, view }));\n\t});\n\tif (matches.length !== 1) throw new Error(`Capability view route \"${reference}\" is ${matches.length === 0 ? \"missing\" : \"ambiguous\"}.`);\n\tconst match = matches[0]!;\n\tconst parameterSchemaDigest = match.view.parameterSchema === undefined\n\t\t? undefined\n\t\t: sha256(canonicalizeJcs(match.view.parameterSchema));\n\treturn {\n\t\treference: reference as `capability://${string}`,\n\t\tname: `${namespace}/${name}`,\n\t\tversion: match.view.version,\n\t\t...(match.view.parameterSchema === undefined ? {} : { parameterSchema: match.view.parameterSchema }),\n\t\t...(parameterSchemaDigest === undefined ? {} : { parameterSchemaDigest }),\n\t};\n}\n\nfunction resolveIntent(reference: string, contracts: readonly UsageContract[]): ExperienceIntentRoute {\n\tconst { namespace, name } = parseReference(reference);\n\tconst matches = contracts.flatMap((contract) => {\n\t\tif (contract.namespace !== namespace) return [];\n\t\tconst metadata = contract.extensions?.[\"fabric.experience/v1\"] as\n\t\t\t| { actionIntents?: Array<{ name: string; actionId: string }> }\n\t\t\t| undefined;\n\t\treturn (metadata?.actionIntents ?? []).flatMap((intent) => {\n\t\t\tconst shortName = intent.name.startsWith(`${namespace}.`) ? intent.name.slice(namespace.length + 1) : intent.name;\n\t\t\tif (shortName !== name) return [];\n\t\t\tconst action = contract.actions.find((candidate) => candidate.actionId === intent.actionId);\n\t\t\treturn action ? [{ intent, action }] : [];\n\t\t});\n\t});\n\tif (matches.length !== 1) throw new Error(`Capability intent route \"${reference}\" is ${matches.length === 0 ? \"missing\" : \"ambiguous\"}.`);\n\tconst match = matches[0]!;\n\tconst parameterSchemaDigest = match.action.parameterSchema === undefined\n\t\t? undefined\n\t\t: sha256(canonicalizeJcs(match.action.parameterSchema));\n\treturn {\n\t\treference: reference as `capability://${string}`,\n\t\tactionId: match.action.actionId as `${string}.${string}`,\n\t\tversion: match.action.version,\n\t\t...(match.action.parameterSchema === undefined ? {} : { parameterSchema: match.action.parameterSchema as ExperienceIntentRoute[\"parameterSchema\"] }),\n\t\t...(parameterSchemaDigest === undefined ? {} : { parameterSchemaDigest }),\n\t\t...(match.action.execution === undefined ? {} : { execution: match.action.execution }),\n\t};\n}\n\nfunction compileEffectiveGrants(release: SduiRelease): EffectiveFragmentGrant[] {\n\tconst result: EffectiveFragmentGrant[] = [];\n\tconst releaseViews = new Set(release.grants.views);\n\tconst releaseIntents = new Set(release.grants.intents);\n\tconst seen = new Set<string>();\n\twalkTree(\"root\", release.document.root, releaseViews, releaseIntents, release, result, seen);\n\tfor (const variant of release.document.variants ?? []) {\n\t\twalkTree(variant.id, variant.root, releaseViews, releaseIntents, release, result, seen);\n\t}\n\treturn result;\n}\n\nfunction walkTree(\n\ttreeId: string,\n\tfragment: SduiFragment,\n\tinheritedViews: ReadonlySet<string>,\n\tinheritedIntents: ReadonlySet<string>,\n\trelease: SduiRelease,\n\tresult: EffectiveFragmentGrant[],\n\tseen: Set<string>,\n): void {\n\tconst identity = `${treeId}\\0${fragment.id}`;\n\tif (seen.has(identity)) throw new Error(`SDUI release repeats fragment \"${fragment.id}\" in tree \"${treeId}\".`);\n\tseen.add(identity);\n\tconst narrowing = release.grants.fragments?.[fragment.id];\n\tconst views = narrowing?.views === undefined ? new Set(inheritedViews) : intersect(inheritedViews, narrowing.views);\n\tconst intents = narrowing?.intents === undefined ? new Set(inheritedIntents) : intersect(inheritedIntents, narrowing.intents);\n\tif (fragment.dataRef && !views.has(fragment.dataRef)) {\n\t\tthrow new Error(`Fragment \"${fragment.id}\" references ungranted view \"${fragment.dataRef}\".`);\n\t}\n\tfor (const action of Object.values(fragment.actions ?? {})) {\n\t\tif (!intents.has(action.intent)) throw new Error(`Fragment \"${fragment.id}\" references ungranted intent \"${action.intent}\".`);\n\t}\n\tresult.push({\n\t\ttreeId,\n\t\tfragmentId: fragment.id,\n\t\tviews: [...views].sort(),\n\t\tintents: [...intents].sort(),\n\t});\n\tfor (const child of fragment.children ?? []) walkTree(treeId, child, views, intents, release, result, seen);\n}\n\nfunction intersect(values: ReadonlySet<string>, narrowing: readonly string[]): Set<string> {\n\treturn new Set(narrowing.filter((value) => values.has(value)));\n}\n\nfunction parseReference(reference: string): { namespace: string; name: string } {\n\t// The same grammar the release was validated against. A stricter one here\n\t// would reject references a valid release legitimately carries, and the\n\t// failure would land at promotion with nothing wrong upstream to point at.\n\tconst parsed = parseCapabilityRef(reference);\n\tif (!parsed) throw new Error(`Capability route \"${reference}\" is invalid.`);\n\treturn parsed;\n}\n\nfunction sha256(value: string): string {\n\treturn createHash(\"sha256\").update(value).digest(\"hex\");\n}\n\nasync function signCompactJws(\n\tpayloadValue: unknown,\n\ttype: string,\n\tsigner: ExperienceReleaseSigner,\n): Promise<string> {\n\tconst protectedHeader = encodeBase64Url(canonicalizeJcs({\n\t\talg: \"ES256\",\n\t\tkid: signer.keyId,\n\t\ttyp: type,\n\t}));\n\tconst payload = encodeBase64Url(canonicalizeJcs(payloadValue));\n\tconst signingInput = `${protectedHeader}.${payload}`;\n\tconst signature = await signer.sign(encoder.encode(signingInput));\n\tif (signature.byteLength !== 64) throw new Error(\"Experience release signer must return a 64-byte ES256 JOSE signature.\");\n\treturn `${signingInput}.${encodeBytesBase64Url(signature)}`;\n}\n\nfunction encodeBase64Url(value: string): string {\n\treturn Buffer.from(value, \"utf8\").toString(\"base64url\");\n}\n\nfunction encodeBytesBase64Url(value: Uint8Array): string {\n\treturn Buffer.from(value).toString(\"base64url\");\n}\n\n/**\n * Bind the contracts routes are compiled from to the assembly the release was\n * validated against.\n *\n * Promotion signs a mapping from a granted reference to a concrete action id\n * and version. The reference was authorized at release validation; the mapping\n * is decided here. If the contracts deciding it are not the approved ones, a\n * signed release can point a granted reference at an action nobody reviewed for\n * it. PlatformHost still authorizes that action, so this is an integrity\n * failure of what the release exposes rather than an authorization bypass, and\n * it is exactly the kind that is invisible downstream.\n */\nfunction assertContractsApprovedByAssembly(\n\trelease: SduiRelease,\n\tcontracts: readonly UsageContractDocument[],\n\tassembly: AssemblyLockfile,\n): void {\n\tassertAssemblyLockfile(assembly);\n\tif (assembly.assemblyDigest !== release.assemblyDigest) {\n\t\tthrow new Error(\n\t\t\t`Experience promotion was given assembly \"${assembly.assemblyDigest}\" but the release was validated against \"${release.assemblyDigest}\".`,\n\t\t);\n\t}\n\tconst approved = new Map(\n\t\tassembly.capabilities\n\t\t\t.filter((capability) => capability.usageContractDigest !== undefined)\n\t\t\t.map((capability) => [capability.namespace, capability.usageContractDigest as string]),\n\t);\n\tfor (const document of contracts) {\n\t\tconst namespace = document.capability.namespace;\n\t\tconst expected = approved.get(namespace);\n\t\tif (expected === undefined) {\n\t\t\tthrow new Error(`Assembly \"${assembly.assemblyDigest}\" approves no usage contract for capability \"${namespace}\".`);\n\t\t}\n\t\tconst actual = computeUsageContractDocumentDigest(document);\n\t\tif (actual !== expected) {\n\t\t\tthrow new Error(\n\t\t\t\t`Usage contract for \"${namespace}\" has digest \"${actual}\", which is not the \"${expected}\" that assembly \"${assembly.assemblyDigest}\" approved.`,\n\t\t\t);\n\t\t}\n\t}\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,yBAAiD;AAEjD,sBAIO;AACP,0BAMO;AACP,uBASO;AAOA,SAAS,yBAAyB,OAGb;AAC3B,MAAI,CAAC,MAAM,MAAM,KAAK,EAAG,OAAM,IAAI,MAAM,gDAAgD;AACzF,SAAO;AAAA,IACN,OAAO,MAAM;AAAA,IACb,MAAM,KAAK,cAAc;AACxB,aAAO,IAAI,eAAW;AAAA,QACrB;AAAA,QACA;AAAA,QACA,EAAE,KAAK,MAAM,YAAY,aAAa,aAAa;AAAA,MACpD,CAAC;AAAA,IACF;AAAA,EACD;AACD;AAsCA,IAAM,UAAU,IAAI,YAAY;AAEhC,eAAsB,yBACrB,OACqC;AACrC,sDAA2B,MAAM,OAAO;AACxC,6CAAkB,MAAM,OAAO;AAC/B,MAAI,CAAC,MAAM,OAAO,KAAK,EAAG,OAAM,IAAI,MAAM,wCAAwC;AAClF,oCAAkC,MAAM,SAAS,MAAM,WAAW,MAAM,QAAQ;AAChF,QAAM,YAAY,MAAM,UAAU,IAAI,CAAC,aAAa,SAAS,UAAU;AACvE,QAAM,SAAS,cAAc,MAAM,SAAS,SAAS;AACrD,QAAM,kBAAkB,uBAAuB,MAAM,OAAO;AAC5D,QAAM,OAAO;AAAA,IACZ,eAAe;AAAA,IACf,MAAM;AAAA,IACN,QAAQ,MAAM;AAAA,IACd,aAAa,MAAM;AAAA,IACnB,gBAAgB,MAAM,QAAQ;AAAA,IAC9B,UAAU,MAAM,QAAQ;AAAA,IACxB,UAAU,MAAM,QAAQ;AAAA,IACxB,gBAAgB,MAAM,QAAQ;AAAA,IAC9B;AAAA,IACA;AAAA,EACD;AACA,QAAM,UAAyB;AAAA,IAC9B,GAAG;AAAA,IACH,eAAe,WAAO,kCAAgB,IAAI,CAAC;AAAA,EAC5C;AACA,SAAO;AAAA,IACN;AAAA,IACA,YAAY,MAAM,eAAe,SAAS,iCAAiC,MAAM,MAAM;AAAA,EACxF;AACD;AAGO,IAAM,2BAA2B;AAExC,eAAsB,0BACrB,SACA,QACkB;AAClB,oDAA4B,OAAO;AACnC,SAAO,eAAe,SAAS,sCAAsC,MAAM;AAC5E;AAEO,SAAS,qBAAmD;AAClE,SAAO;AAAA,IACN;AAAA,MACC,IAAI;AAAA,MACJ,MAAM,IAAI,SAAS;AAClB,cAAM,WAAW,MAAM,QAAQ,QAAQ,QAAQ,UAAU;AACzD,YAAI,SAAS,QAAQ,kBAAkB,KAAK,SAAS,WAAW,MAAM,GAAG,EAAE,WAAW,GAAG;AACxF,gBAAM,IAAI,MAAM,+CAA+C;AAAA,QAChE;AACA,eAAO,CAAC,SAAS,QAAQ,aAAa;AAAA,MACvC;AAAA,IACD;AAAA,IACA;AAAA,MACC,IAAI;AAAA,MACJ,MAAM,IAAI,SAAS;AAClB,YAAI,WAAW;AACf,YAAI;AAAE,gBAAM,QAAQ,QAAQ,QAAQ,YAAY;AAAA,QAAG,QAAQ;AAAE,qBAAW;AAAA,QAAM;AAC9E,YAAI,CAAC,SAAU,OAAM,IAAI,MAAM,8DAA8D;AAC7F,eAAO,CAAC,wBAAwB;AAAA,MACjC;AAAA,IACD;AAAA,EACD;AACD;AAEA,eAAsB,sBACrB,SACA,SAAuC,mBAAmB,GACsF;AAChJ,QAAM,UAAmH,CAAC;AAC1H,aAAW,SAAS,QAAQ;AAC3B,QAAI;AAAE,cAAQ,KAAK,EAAE,IAAI,MAAM,IAAI,QAAQ,UAAU,UAAU,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;AAAA,IAAG,SACrF,OAAO;AAAE,cAAQ,KAAK,EAAE,IAAI,MAAM,IAAI,QAAQ,UAAU,UAAU,CAAC,GAAG,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,CAAC;AAAA,IAAG;AAAA,EAChJ;AACA,SAAO,EAAE,QAAQ,QAAQ,MAAM,CAAC,WAAW,OAAO,WAAW,QAAQ,GAAG,QAAQ,QAAQ;AACzF;AAEA,SAAS,cACR,SACA,WACqE;AACrE,QAAM,QAAQ,CAAC,GAAG,IAAI,IAAI,QAAQ,OAAO,KAAK,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,cAAc,YAAY,WAAW,SAAS,CAAC;AAC5G,QAAM,UAAU,CAAC,GAAG,IAAI,IAAI,QAAQ,OAAO,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,cAAc,cAAc,WAAW,SAAS,CAAC;AAClH,SAAO,EAAE,OAAO,QAAQ;AACzB;AAEA,SAAS,YAAY,WAAmB,WAA0D;AACjG,QAAM,EAAE,WAAW,KAAK,IAAI,eAAe,SAAS;AACpD,QAAM,UAAU,UAAU,QAAQ,CAAC,aAAa;AAC/C,QAAI,SAAS,cAAc,UAAW,QAAO,CAAC;AAC9C,WAAO,SAAS,MACd,OAAO,CAAC,SAAS,KAAK,SAAS,QAAQ,KAAK,SAAS,GAAG,SAAS,IAAI,IAAI,EAAE,EAC3E,IAAI,CAAC,UAAU,EAAE,UAAU,KAAK,EAAE;AAAA,EACrC,CAAC;AACD,MAAI,QAAQ,WAAW,EAAG,OAAM,IAAI,MAAM,0BAA0B,SAAS,QAAQ,QAAQ,WAAW,IAAI,YAAY,WAAW,GAAG;AACtI,QAAM,QAAQ,QAAQ,CAAC;AACvB,QAAM,wBAAwB,MAAM,KAAK,oBAAoB,SAC1D,SACA,WAAO,kCAAgB,MAAM,KAAK,eAAe,CAAC;AACrD,SAAO;AAAA,IACN;AAAA,IACA,MAAM,GAAG,SAAS,IAAI,IAAI;AAAA,IAC1B,SAAS,MAAM,KAAK;AAAA,IACpB,GAAI,MAAM,KAAK,oBAAoB,SAAY,CAAC,IAAI,EAAE,iBAAiB,MAAM,KAAK,gBAAgB;AAAA,IAClG,GAAI,0BAA0B,SAAY,CAAC,IAAI,EAAE,sBAAsB;AAAA,EACxE;AACD;AAEA,SAAS,cAAc,WAAmB,WAA4D;AACrG,QAAM,EAAE,WAAW,KAAK,IAAI,eAAe,SAAS;AACpD,QAAM,UAAU,UAAU,QAAQ,CAAC,aAAa;AAC/C,QAAI,SAAS,cAAc,UAAW,QAAO,CAAC;AAC9C,UAAM,WAAW,SAAS,aAAa,sBAAsB;AAG7D,YAAQ,UAAU,iBAAiB,CAAC,GAAG,QAAQ,CAAC,WAAW;AAC1D,YAAM,YAAY,OAAO,KAAK,WAAW,GAAG,SAAS,GAAG,IAAI,OAAO,KAAK,MAAM,UAAU,SAAS,CAAC,IAAI,OAAO;AAC7G,UAAI,cAAc,KAAM,QAAO,CAAC;AAChC,YAAM,SAAS,SAAS,QAAQ,KAAK,CAAC,cAAc,UAAU,aAAa,OAAO,QAAQ;AAC1F,aAAO,SAAS,CAAC,EAAE,QAAQ,OAAO,CAAC,IAAI,CAAC;AAAA,IACzC,CAAC;AAAA,EACF,CAAC;AACD,MAAI,QAAQ,WAAW,EAAG,OAAM,IAAI,MAAM,4BAA4B,SAAS,QAAQ,QAAQ,WAAW,IAAI,YAAY,WAAW,GAAG;AACxI,QAAM,QAAQ,QAAQ,CAAC;AACvB,QAAM,wBAAwB,MAAM,OAAO,oBAAoB,SAC5D,SACA,WAAO,kCAAgB,MAAM,OAAO,eAAe,CAAC;AACvD,SAAO;AAAA,IACN;AAAA,IACA,UAAU,MAAM,OAAO;AAAA,IACvB,SAAS,MAAM,OAAO;AAAA,IACtB,GAAI,MAAM,OAAO,oBAAoB,SAAY,CAAC,IAAI,EAAE,iBAAiB,MAAM,OAAO,gBAA4D;AAAA,IAClJ,GAAI,0BAA0B,SAAY,CAAC,IAAI,EAAE,sBAAsB;AAAA,IACvE,GAAI,MAAM,OAAO,cAAc,SAAY,CAAC,IAAI,EAAE,WAAW,MAAM,OAAO,UAAU;AAAA,EACrF;AACD;AAEA,SAAS,uBAAuB,SAAgD;AAC/E,QAAM,SAAmC,CAAC;AAC1C,QAAM,eAAe,IAAI,IAAI,QAAQ,OAAO,KAAK;AACjD,QAAM,iBAAiB,IAAI,IAAI,QAAQ,OAAO,OAAO;AACrD,QAAM,OAAO,oBAAI,IAAY;AAC7B,WAAS,QAAQ,QAAQ,SAAS,MAAM,cAAc,gBAAgB,SAAS,QAAQ,IAAI;AAC3F,aAAW,WAAW,QAAQ,SAAS,YAAY,CAAC,GAAG;AACtD,aAAS,QAAQ,IAAI,QAAQ,MAAM,cAAc,gBAAgB,SAAS,QAAQ,IAAI;AAAA,EACvF;AACA,SAAO;AACR;AAEA,SAAS,SACR,QACA,UACA,gBACA,kBACA,SACA,QACA,MACO;AACP,QAAM,WAAW,GAAG,MAAM,KAAK,SAAS,EAAE;AAC1C,MAAI,KAAK,IAAI,QAAQ,EAAG,OAAM,IAAI,MAAM,kCAAkC,SAAS,EAAE,cAAc,MAAM,IAAI;AAC7G,OAAK,IAAI,QAAQ;AACjB,QAAM,YAAY,QAAQ,OAAO,YAAY,SAAS,EAAE;AACxD,QAAM,QAAQ,WAAW,UAAU,SAAY,IAAI,IAAI,cAAc,IAAI,UAAU,gBAAgB,UAAU,KAAK;AAClH,QAAM,UAAU,WAAW,YAAY,SAAY,IAAI,IAAI,gBAAgB,IAAI,UAAU,kBAAkB,UAAU,OAAO;AAC5H,MAAI,SAAS,WAAW,CAAC,MAAM,IAAI,SAAS,OAAO,GAAG;AACrD,UAAM,IAAI,MAAM,aAAa,SAAS,EAAE,gCAAgC,SAAS,OAAO,IAAI;AAAA,EAC7F;AACA,aAAW,UAAU,OAAO,OAAO,SAAS,WAAW,CAAC,CAAC,GAAG;AAC3D,QAAI,CAAC,QAAQ,IAAI,OAAO,MAAM,EAAG,OAAM,IAAI,MAAM,aAAa,SAAS,EAAE,kCAAkC,OAAO,MAAM,IAAI;AAAA,EAC7H;AACA,SAAO,KAAK;AAAA,IACX;AAAA,IACA,YAAY,SAAS;AAAA,IACrB,OAAO,CAAC,GAAG,KAAK,EAAE,KAAK;AAAA,IACvB,SAAS,CAAC,GAAG,OAAO,EAAE,KAAK;AAAA,EAC5B,CAAC;AACD,aAAW,SAAS,SAAS,YAAY,CAAC,EAAG,UAAS,QAAQ,OAAO,OAAO,SAAS,SAAS,QAAQ,IAAI;AAC3G;AAEA,SAAS,UAAU,QAA6B,WAA2C;AAC1F,SAAO,IAAI,IAAI,UAAU,OAAO,CAAC,UAAU,OAAO,IAAI,KAAK,CAAC,CAAC;AAC9D;AAEA,SAAS,eAAe,WAAwD;AAI/E,QAAM,aAAS,wCAAmB,SAAS;AAC3C,MAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,qBAAqB,SAAS,eAAe;AAC1E,SAAO;AACR;AAEA,SAAS,OAAO,OAAuB;AACtC,aAAO,+BAAW,QAAQ,EAAE,OAAO,KAAK,EAAE,OAAO,KAAK;AACvD;AAEA,eAAe,eACd,cACA,MACA,QACkB;AAClB,QAAM,kBAAkB,oBAAgB,kCAAgB;AAAA,IACvD,KAAK;AAAA,IACL,KAAK,OAAO;AAAA,IACZ,KAAK;AAAA,EACN,CAAC,CAAC;AACF,QAAM,UAAU,oBAAgB,kCAAgB,YAAY,CAAC;AAC7D,QAAM,eAAe,GAAG,eAAe,IAAI,OAAO;AAClD,QAAM,YAAY,MAAM,OAAO,KAAK,QAAQ,OAAO,YAAY,CAAC;AAChE,MAAI,UAAU,eAAe,GAAI,OAAM,IAAI,MAAM,uEAAuE;AACxH,SAAO,GAAG,YAAY,IAAI,qBAAqB,SAAS,CAAC;AAC1D;AAEA,SAAS,gBAAgB,OAAuB;AAC/C,SAAO,OAAO,KAAK,OAAO,MAAM,EAAE,SAAS,WAAW;AACvD;AAEA,SAAS,qBAAqB,OAA2B;AACxD,SAAO,OAAO,KAAK,KAAK,EAAE,SAAS,WAAW;AAC/C;AAcA,SAAS,kCACR,SACA,WACA,UACO;AACP,8CAAuB,QAAQ;AAC/B,MAAI,SAAS,mBAAmB,QAAQ,gBAAgB;AACvD,UAAM,IAAI;AAAA,MACT,4CAA4C,SAAS,cAAc,4CAA4C,QAAQ,cAAc;AAAA,IACtI;AAAA,EACD;AACA,QAAM,WAAW,IAAI;AAAA,IACpB,SAAS,aACP,OAAO,CAAC,eAAe,WAAW,wBAAwB,MAAS,EACnE,IAAI,CAAC,eAAe,CAAC,WAAW,WAAW,WAAW,mBAA6B,CAAC;AAAA,EACvF;AACA,aAAW,YAAY,WAAW;AACjC,UAAM,YAAY,SAAS,WAAW;AACtC,UAAM,WAAW,SAAS,IAAI,SAAS;AACvC,QAAI,aAAa,QAAW;AAC3B,YAAM,IAAI,MAAM,aAAa,SAAS,cAAc,gDAAgD,SAAS,IAAI;AAAA,IAClH;AACA,UAAM,aAAS,oDAAmC,QAAQ;AAC1D,QAAI,WAAW,UAAU;AACxB,YAAM,IAAI;AAAA,QACT,uBAAuB,SAAS,iBAAiB,MAAM,wBAAwB,QAAQ,oBAAoB,SAAS,cAAc;AAAA,MACnI;AAAA,IACD;AAAA,EACD;AACD;","names":[]}

package/dist/index.d.cts

@@ -0,0 +1,62 @@
+import { KeyObject } from 'node:crypto';
+import { UsageContractDocument } from '@fabricorg/gen-capability';
+import { AssemblyLockfile } from '@fabricorg/assembly';
+import { SduiRelease } from '@fabricorg/sdui-release';
+import { SduiReleaseV3, ReleaseChannelPointer } from '@fabricorg/sdui-release/contracts';
+
+interface ExperienceReleaseSigner {
+    keyId: string;
+    sign(signingInput: Uint8Array): Promise<Uint8Array>;
+}
+declare function createEs256ReleaseSigner(input: {
+    keyId: string;
+    privateKey: KeyObject;
+}): ExperienceReleaseSigner;
+interface PromoteExperienceReleaseInput {
+    application: string;
+    release: SduiRelease;
+    /**
+     * The generated usage-contract documents routes are compiled from.
+     *
+     * These decide which action a granted `capability://` reference resolves to,
+     * so they cannot be taken on trust: every one is checked against the
+     * approved digests in `assembly` before a route is signed. Without that, a
+     * substituted contract could remap an already-granted reference onto a
+     * different installed action while the release kept its original assembly
+     * digest.
+     */
+    contracts: readonly UsageContractDocument[];
+    /** The lockfile the release was validated against. */
+    assembly: AssemblyLockfile;
+    issuer: string;
+    signer: ExperienceReleaseSigner;
+}
+interface PromotedExperienceRelease {
+    release: SduiReleaseV3;
+    compactJws: string;
+}
+interface SduiComposerConformanceSubject {
+    promote(input: PromoteExperienceReleaseInput): Promise<PromotedExperienceRelease>;
+    validInput: PromoteExperienceReleaseInput;
+    invalidInput: PromoteExperienceReleaseInput;
+}
+interface SduiComposerCheck {
+    id: "fabric.sdui-composer.exact-promotion.v1" | "fabric.sdui-composer.unresolved-denial.v1";
+    run(subject: SduiComposerConformanceSubject): Promise<string[]>;
+}
+declare function promoteExperienceRelease(input: PromoteExperienceReleaseInput): Promise<PromotedExperienceRelease>;
+/** Explicit v2-to-v3 migration seam. Migration fails unless every capability route resolves exactly. */
+declare const migrateSduiReleaseV2ToV3: typeof promoteExperienceRelease;
+declare function signReleaseChannelPointer(pointer: ReleaseChannelPointer, signer: ExperienceReleaseSigner): Promise<string>;
+declare function sduiComposerChecks(): readonly SduiComposerCheck[];
+declare function runSduiComposerChecks(subject: SduiComposerConformanceSubject, checks?: readonly SduiComposerCheck[]): Promise<{
+    passed: boolean;
+    checks: Array<{
+        id: SduiComposerCheck["id"];
+        status: "passed" | "failed";
+        evidence: string[];
+        error?: string;
+    }>;
+}>;
+
+export { type ExperienceReleaseSigner, type PromoteExperienceReleaseInput, type PromotedExperienceRelease, type SduiComposerCheck, type SduiComposerConformanceSubject, createEs256ReleaseSigner, migrateSduiReleaseV2ToV3, promoteExperienceRelease, runSduiComposerChecks, sduiComposerChecks, signReleaseChannelPointer };

package/dist/index.d.ts

@@ -0,0 +1,62 @@
+import { KeyObject } from 'node:crypto';
+import { UsageContractDocument } from '@fabricorg/gen-capability';
+import { AssemblyLockfile } from '@fabricorg/assembly';
+import { SduiRelease } from '@fabricorg/sdui-release';
+import { SduiReleaseV3, ReleaseChannelPointer } from '@fabricorg/sdui-release/contracts';
+
+interface ExperienceReleaseSigner {
+    keyId: string;
+    sign(signingInput: Uint8Array): Promise<Uint8Array>;
+}
+declare function createEs256ReleaseSigner(input: {
+    keyId: string;
+    privateKey: KeyObject;
+}): ExperienceReleaseSigner;
+interface PromoteExperienceReleaseInput {
+    application: string;
+    release: SduiRelease;
+    /**
+     * The generated usage-contract documents routes are compiled from.
+     *
+     * These decide which action a granted `capability://` reference resolves to,
+     * so they cannot be taken on trust: every one is checked against the
+     * approved digests in `assembly` before a route is signed. Without that, a
+     * substituted contract could remap an already-granted reference onto a
+     * different installed action while the release kept its original assembly
+     * digest.
+     */
+    contracts: readonly UsageContractDocument[];
+    /** The lockfile the release was validated against. */
+    assembly: AssemblyLockfile;
+    issuer: string;
+    signer: ExperienceReleaseSigner;
+}
+interface PromotedExperienceRelease {
+    release: SduiReleaseV3;
+    compactJws: string;
+}
+interface SduiComposerConformanceSubject {
+    promote(input: PromoteExperienceReleaseInput): Promise<PromotedExperienceRelease>;
+    validInput: PromoteExperienceReleaseInput;
+    invalidInput: PromoteExperienceReleaseInput;
+}
+interface SduiComposerCheck {
+    id: "fabric.sdui-composer.exact-promotion.v1" | "fabric.sdui-composer.unresolved-denial.v1";
+    run(subject: SduiComposerConformanceSubject): Promise<string[]>;
+}
+declare function promoteExperienceRelease(input: PromoteExperienceReleaseInput): Promise<PromotedExperienceRelease>;
+/** Explicit v2-to-v3 migration seam. Migration fails unless every capability route resolves exactly. */
+declare const migrateSduiReleaseV2ToV3: typeof promoteExperienceRelease;
+declare function signReleaseChannelPointer(pointer: ReleaseChannelPointer, signer: ExperienceReleaseSigner): Promise<string>;
+declare function sduiComposerChecks(): readonly SduiComposerCheck[];
+declare function runSduiComposerChecks(subject: SduiComposerConformanceSubject, checks?: readonly SduiComposerCheck[]): Promise<{
+    passed: boolean;
+    checks: Array<{
+        id: SduiComposerCheck["id"];
+        status: "passed" | "failed";
+        evidence: string[];
+        error?: string;
+    }>;
+}>;
+
+export { type ExperienceReleaseSigner, type PromoteExperienceReleaseInput, type PromotedExperienceRelease, type SduiComposerCheck, type SduiComposerConformanceSubject, createEs256ReleaseSigner, migrateSduiReleaseV2ToV3, promoteExperienceRelease, runSduiComposerChecks, sduiComposerChecks, signReleaseChannelPointer };

package/dist/index.js

@@ -0,0 +1,242 @@
+// index.ts
+import { createHash, sign } from "crypto";
+import {
+  assertAssemblyLockfile,
+  computeUsageContractDocumentDigest
+} from "@fabricorg/assembly";
+import {
+  parseCapabilityRef,
+  assertSduiReleaseIntegrity,
+  assertSduiRelease
+} from "@fabricorg/sdui-release";
+import {
+  SDUI_RELEASE_V3_FORMAT_VERSION,
+  assertReleaseChannelPointer,
+  canonicalizeJcs
+} from "@fabricorg/sdui-release/contracts";
+function createEs256ReleaseSigner(input) {
+  if (!input.keyId.trim()) throw new Error("Experience release signing key id is required.");
+  return {
+    keyId: input.keyId,
+    async sign(signingInput) {
+      return new Uint8Array(sign(
+        "sha256",
+        signingInput,
+        { key: input.privateKey, dsaEncoding: "ieee-p1363" }
+      ));
+    }
+  };
+}
+var encoder = new TextEncoder();
+async function promoteExperienceRelease(input) {
+  assertSduiReleaseIntegrity(input.release);
+  assertSduiRelease(input.release);
+  if (!input.issuer.trim()) throw new Error("Experience release issuer is required.");
+  assertContractsApprovedByAssembly(input.release, input.contracts, input.assembly);
+  const contracts = input.contracts.map((document) => document.capability);
+  const routes = compileRoutes(input.release, contracts);
+  const effectiveGrants = compileEffectiveGrants(input.release);
+  const body = {
+    formatVersion: SDUI_RELEASE_V3_FORMAT_VERSION,
+    kind: "experience-release",
+    issuer: input.issuer,
+    application: input.application,
+    assemblyDigest: input.release.assemblyDigest,
+    document: input.release.document,
+    tokenSet: input.release.tokenSet,
+    componentPacks: input.release.componentPacks,
+    routes,
+    effectiveGrants
+  };
+  const release = {
+    ...body,
+    releaseDigest: sha256(canonicalizeJcs(body))
+  };
+  return {
+    release,
+    compactJws: await signCompactJws(release, "fabric-experience-release+jws", input.signer)
+  };
+}
+var migrateSduiReleaseV2ToV3 = promoteExperienceRelease;
+async function signReleaseChannelPointer(pointer, signer) {
+  assertReleaseChannelPointer(pointer);
+  return signCompactJws(pointer, "fabric-release-channel-pointer+jws", signer);
+}
+function sduiComposerChecks() {
+  return [
+    {
+      id: "fabric.sdui-composer.exact-promotion.v1",
+      async run(subject) {
+        const promoted = await subject.promote(subject.validInput);
+        if (promoted.release.formatVersion !== 3 || promoted.compactJws.split(".").length !== 3) {
+          throw new Error("Composer did not produce a signed Release v3.");
+        }
+        return [promoted.release.releaseDigest];
+      }
+    },
+    {
+      id: "fabric.sdui-composer.unresolved-denial.v1",
+      async run(subject) {
+        let rejected = false;
+        try {
+          await subject.promote(subject.invalidInput);
+        } catch {
+          rejected = true;
+        }
+        if (!rejected) throw new Error("Composer promoted unresolved or ambiguous capability routes.");
+        return ["invalid route rejected"];
+      }
+    }
+  ];
+}
+async function runSduiComposerChecks(subject, checks = sduiComposerChecks()) {
+  const results = [];
+  for (const check of checks) {
+    try {
+      results.push({ id: check.id, status: "passed", evidence: await check.run(subject) });
+    } catch (error) {
+      results.push({ id: check.id, status: "failed", evidence: [], error: error instanceof Error ? error.message : String(error) });
+    }
+  }
+  return { passed: results.every((result) => result.status === "passed"), checks: results };
+}
+function compileRoutes(release, contracts) {
+  const views = [...new Set(release.grants.views)].sort().map((reference) => resolveView(reference, contracts));
+  const intents = [...new Set(release.grants.intents)].sort().map((reference) => resolveIntent(reference, contracts));
+  return { views, intents };
+}
+function resolveView(reference, contracts) {
+  const { namespace, name } = parseReference(reference);
+  const matches = contracts.flatMap((contract) => {
+    if (contract.namespace !== namespace) return [];
+    return contract.views.filter((view) => view.name === name || view.name === `${namespace}/${name}`).map((view) => ({ contract, view }));
+  });
+  if (matches.length !== 1) throw new Error(`Capability view route "${reference}" is ${matches.length === 0 ? "missing" : "ambiguous"}.`);
+  const match = matches[0];
+  const parameterSchemaDigest = match.view.parameterSchema === void 0 ? void 0 : sha256(canonicalizeJcs(match.view.parameterSchema));
+  return {
+    reference,
+    name: `${namespace}/${name}`,
+    version: match.view.version,
+    ...match.view.parameterSchema === void 0 ? {} : { parameterSchema: match.view.parameterSchema },
+    ...parameterSchemaDigest === void 0 ? {} : { parameterSchemaDigest }
+  };
+}
+function resolveIntent(reference, contracts) {
+  const { namespace, name } = parseReference(reference);
+  const matches = contracts.flatMap((contract) => {
+    if (contract.namespace !== namespace) return [];
+    const metadata = contract.extensions?.["fabric.experience/v1"];
+    return (metadata?.actionIntents ?? []).flatMap((intent) => {
+      const shortName = intent.name.startsWith(`${namespace}.`) ? intent.name.slice(namespace.length + 1) : intent.name;
+      if (shortName !== name) return [];
+      const action = contract.actions.find((candidate) => candidate.actionId === intent.actionId);
+      return action ? [{ intent, action }] : [];
+    });
+  });
+  if (matches.length !== 1) throw new Error(`Capability intent route "${reference}" is ${matches.length === 0 ? "missing" : "ambiguous"}.`);
+  const match = matches[0];
+  const parameterSchemaDigest = match.action.parameterSchema === void 0 ? void 0 : sha256(canonicalizeJcs(match.action.parameterSchema));
+  return {
+    reference,
+    actionId: match.action.actionId,
+    version: match.action.version,
+    ...match.action.parameterSchema === void 0 ? {} : { parameterSchema: match.action.parameterSchema },
+    ...parameterSchemaDigest === void 0 ? {} : { parameterSchemaDigest },
+    ...match.action.execution === void 0 ? {} : { execution: match.action.execution }
+  };
+}
+function compileEffectiveGrants(release) {
+  const result = [];
+  const releaseViews = new Set(release.grants.views);
+  const releaseIntents = new Set(release.grants.intents);
+  const seen = /* @__PURE__ */ new Set();
+  walkTree("root", release.document.root, releaseViews, releaseIntents, release, result, seen);
+  for (const variant of release.document.variants ?? []) {
+    walkTree(variant.id, variant.root, releaseViews, releaseIntents, release, result, seen);
+  }
+  return result;
+}
+function walkTree(treeId, fragment, inheritedViews, inheritedIntents, release, result, seen) {
+  const identity = `${treeId}\0${fragment.id}`;
+  if (seen.has(identity)) throw new Error(`SDUI release repeats fragment "${fragment.id}" in tree "${treeId}".`);
+  seen.add(identity);
+  const narrowing = release.grants.fragments?.[fragment.id];
+  const views = narrowing?.views === void 0 ? new Set(inheritedViews) : intersect(inheritedViews, narrowing.views);
+  const intents = narrowing?.intents === void 0 ? new Set(inheritedIntents) : intersect(inheritedIntents, narrowing.intents);
+  if (fragment.dataRef && !views.has(fragment.dataRef)) {
+    throw new Error(`Fragment "${fragment.id}" references ungranted view "${fragment.dataRef}".`);
+  }
+  for (const action of Object.values(fragment.actions ?? {})) {
+    if (!intents.has(action.intent)) throw new Error(`Fragment "${fragment.id}" references ungranted intent "${action.intent}".`);
+  }
+  result.push({
+    treeId,
+    fragmentId: fragment.id,
+    views: [...views].sort(),
+    intents: [...intents].sort()
+  });
+  for (const child of fragment.children ?? []) walkTree(treeId, child, views, intents, release, result, seen);
+}
+function intersect(values, narrowing) {
+  return new Set(narrowing.filter((value) => values.has(value)));
+}
+function parseReference(reference) {
+  const parsed = parseCapabilityRef(reference);
+  if (!parsed) throw new Error(`Capability route "${reference}" is invalid.`);
+  return parsed;
+}
+function sha256(value) {
+  return createHash("sha256").update(value).digest("hex");
+}
+async function signCompactJws(payloadValue, type, signer) {
+  const protectedHeader = encodeBase64Url(canonicalizeJcs({
+    alg: "ES256",
+    kid: signer.keyId,
+    typ: type
+  }));
+  const payload = encodeBase64Url(canonicalizeJcs(payloadValue));
+  const signingInput = `${protectedHeader}.${payload}`;
+  const signature = await signer.sign(encoder.encode(signingInput));
+  if (signature.byteLength !== 64) throw new Error("Experience release signer must return a 64-byte ES256 JOSE signature.");
+  return `${signingInput}.${encodeBytesBase64Url(signature)}`;
+}
+function encodeBase64Url(value) {
+  return Buffer.from(value, "utf8").toString("base64url");
+}
+function encodeBytesBase64Url(value) {
+  return Buffer.from(value).toString("base64url");
+}
+function assertContractsApprovedByAssembly(release, contracts, assembly) {
+  assertAssemblyLockfile(assembly);
+  if (assembly.assemblyDigest !== release.assemblyDigest) {
+    throw new Error(
+      `Experience promotion was given assembly "${assembly.assemblyDigest}" but the release was validated against "${release.assemblyDigest}".`
+    );
+  }
+  const approved = new Map(
+    assembly.capabilities.filter((capability) => capability.usageContractDigest !== void 0).map((capability) => [capability.namespace, capability.usageContractDigest])
+  );
+  for (const document of contracts) {
+    const namespace = document.capability.namespace;
+    const expected = approved.get(namespace);
+    if (expected === void 0) {
+      throw new Error(`Assembly "${assembly.assemblyDigest}" approves no usage contract for capability "${namespace}".`);
+    }
+    const actual = computeUsageContractDocumentDigest(document);
+    if (actual !== expected) {
+      throw new Error(
+        `Usage contract for "${namespace}" has digest "${actual}", which is not the "${expected}" that assembly "${assembly.assemblyDigest}" approved.`
+      );
+    }
+  }
+}
+export {
+  createEs256ReleaseSigner,
+  migrateSduiReleaseV2ToV3,
+  promoteExperienceRelease,
+  runSduiComposerChecks,
+  sduiComposerChecks,
+  signReleaseChannelPointer
+};
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../index.ts"],"sourcesContent":["import { createHash, sign, type KeyObject } from \"node:crypto\";\nimport type { UsageContract, UsageContractDocument } from \"@fabricorg/gen-capability\";\nimport {\n\tassertAssemblyLockfile,\n\tcomputeUsageContractDocumentDigest,\n\ttype AssemblyLockfile,\n} from \"@fabricorg/assembly\";\nimport {\n\tparseCapabilityRef,\n\tassertSduiReleaseIntegrity,\n\tassertSduiRelease,\n\ttype SduiFragment,\n\ttype SduiRelease,\n} from \"@fabricorg/sdui-release\";\nimport {\n\tSDUI_RELEASE_V3_FORMAT_VERSION,\n\tassertReleaseChannelPointer,\n\tcanonicalizeJcs,\n\ttype EffectiveFragmentGrant,\n\ttype ExperienceIntentRoute,\n\ttype ExperienceViewRoute,\n\ttype ReleaseChannelPointer,\n\ttype SduiReleaseV3,\n} from \"@fabricorg/sdui-release/contracts\";\n\nexport interface ExperienceReleaseSigner {\n\tkeyId: string;\n\tsign(signingInput: Uint8Array): Promise<Uint8Array>;\n}\n\nexport function createEs256ReleaseSigner(input: {\n\tkeyId: string;\n\tprivateKey: KeyObject;\n}): ExperienceReleaseSigner {\n\tif (!input.keyId.trim()) throw new Error(\"Experience release signing key id is required.\");\n\treturn {\n\t\tkeyId: input.keyId,\n\t\tasync sign(signingInput) {\n\t\t\treturn new Uint8Array(sign(\n\t\t\t\t\"sha256\",\n\t\t\t\tsigningInput,\n\t\t\t\t{ key: input.privateKey, dsaEncoding: \"ieee-p1363\" },\n\t\t\t));\n\t\t},\n\t};\n}\n\nexport interface PromoteExperienceReleaseInput {\n\tapplication: string;\n\trelease: SduiRelease;\n\t/**\n\t * The generated usage-contract documents routes are compiled from.\n\t *\n\t * These decide which action a granted `capability://` reference resolves to,\n\t * so they cannot be taken on trust: every one is checked against the\n\t * approved digests in `assembly` before a route is signed. Without that, a\n\t * substituted contract could remap an already-granted reference onto a\n\t * different installed action while the release kept its original assembly\n\t * digest.\n\t */\n\tcontracts: readonly UsageContractDocument[];\n\t/** The lockfile the release was validated against. */\n\tassembly: AssemblyLockfile;\n\tissuer: string;\n\tsigner: ExperienceReleaseSigner;\n}\n\nexport interface PromotedExperienceRelease {\n\trelease: SduiReleaseV3;\n\tcompactJws: string;\n}\n\nexport interface SduiComposerConformanceSubject {\n\tpromote(input: PromoteExperienceReleaseInput): Promise<PromotedExperienceRelease>;\n\tvalidInput: PromoteExperienceReleaseInput;\n\tinvalidInput: PromoteExperienceReleaseInput;\n}\n\nexport interface SduiComposerCheck {\n\tid: \"fabric.sdui-composer.exact-promotion.v1\" | \"fabric.sdui-composer.unresolved-denial.v1\";\n\trun(subject: SduiComposerConformanceSubject): Promise<string[]>;\n}\n\nconst encoder = new TextEncoder();\n\nexport async function promoteExperienceRelease(\n\tinput: PromoteExperienceReleaseInput,\n): Promise<PromotedExperienceRelease> {\n\tassertSduiReleaseIntegrity(input.release);\n\tassertSduiRelease(input.release);\n\tif (!input.issuer.trim()) throw new Error(\"Experience release issuer is required.\");\n\tassertContractsApprovedByAssembly(input.release, input.contracts, input.assembly);\n\tconst contracts = input.contracts.map((document) => document.capability);\n\tconst routes = compileRoutes(input.release, contracts);\n\tconst effectiveGrants = compileEffectiveGrants(input.release);\n\tconst body = {\n\t\tformatVersion: SDUI_RELEASE_V3_FORMAT_VERSION,\n\t\tkind: \"experience-release\" as const,\n\t\tissuer: input.issuer,\n\t\tapplication: input.application,\n\t\tassemblyDigest: input.release.assemblyDigest,\n\t\tdocument: input.release.document,\n\t\ttokenSet: input.release.tokenSet,\n\t\tcomponentPacks: input.release.componentPacks,\n\t\troutes,\n\t\teffectiveGrants,\n\t};\n\tconst release: SduiReleaseV3 = {\n\t\t...body,\n\t\treleaseDigest: sha256(canonicalizeJcs(body)),\n\t};\n\treturn {\n\t\trelease,\n\t\tcompactJws: await signCompactJws(release, \"fabric-experience-release+jws\", input.signer),\n\t};\n}\n\n/** Explicit v2-to-v3 migration seam. Migration fails unless every capability route resolves exactly. */\nexport const migrateSduiReleaseV2ToV3 = promoteExperienceRelease;\n\nexport async function signReleaseChannelPointer(\n\tpointer: ReleaseChannelPointer,\n\tsigner: ExperienceReleaseSigner,\n): Promise<string> {\n\tassertReleaseChannelPointer(pointer);\n\treturn signCompactJws(pointer, \"fabric-release-channel-pointer+jws\", signer);\n}\n\nexport function sduiComposerChecks(): readonly SduiComposerCheck[] {\n\treturn [\n\t\t{\n\t\t\tid: \"fabric.sdui-composer.exact-promotion.v1\",\n\t\t\tasync run(subject) {\n\t\t\t\tconst promoted = await subject.promote(subject.validInput);\n\t\t\t\tif (promoted.release.formatVersion !== 3 || promoted.compactJws.split(\".\").length !== 3) {\n\t\t\t\t\tthrow new Error(\"Composer did not produce a signed Release v3.\");\n\t\t\t\t}\n\t\t\t\treturn [promoted.release.releaseDigest];\n\t\t\t},\n\t\t},\n\t\t{\n\t\t\tid: \"fabric.sdui-composer.unresolved-denial.v1\",\n\t\t\tasync run(subject) {\n\t\t\t\tlet rejected = false;\n\t\t\t\ttry { await subject.promote(subject.invalidInput); } catch { rejected = true; }\n\t\t\t\tif (!rejected) throw new Error(\"Composer promoted unresolved or ambiguous capability routes.\");\n\t\t\t\treturn [\"invalid route rejected\"];\n\t\t\t},\n\t\t},\n\t];\n}\n\nexport async function runSduiComposerChecks(\n\tsubject: SduiComposerConformanceSubject,\n\tchecks: readonly SduiComposerCheck[] = sduiComposerChecks(),\n): Promise<{ passed: boolean; checks: Array<{ id: SduiComposerCheck[\"id\"]; status: \"passed\" | \"failed\"; evidence: string[]; error?: string }> }> {\n\tconst results: Array<{ id: SduiComposerCheck[\"id\"]; status: \"passed\" | \"failed\"; evidence: string[]; error?: string }> = [];\n\tfor (const check of checks) {\n\t\ttry { results.push({ id: check.id, status: \"passed\", evidence: await check.run(subject) }); }\n\t\tcatch (error) { results.push({ id: check.id, status: \"failed\", evidence: [], error: error instanceof Error ? error.message : String(error) }); }\n\t}\n\treturn { passed: results.every((result) => result.status === \"passed\"), checks: results };\n}\n\nfunction compileRoutes(\n\trelease: SduiRelease,\n\tcontracts: readonly UsageContract[],\n): { views: ExperienceViewRoute[]; intents: ExperienceIntentRoute[] } {\n\tconst views = [...new Set(release.grants.views)].sort().map((reference) => resolveView(reference, contracts));\n\tconst intents = [...new Set(release.grants.intents)].sort().map((reference) => resolveIntent(reference, contracts));\n\treturn { views, intents };\n}\n\nfunction resolveView(reference: string, contracts: readonly UsageContract[]): ExperienceViewRoute {\n\tconst { namespace, name } = parseReference(reference);\n\tconst matches = contracts.flatMap((contract) => {\n\t\tif (contract.namespace !== namespace) return [];\n\t\treturn contract.views\n\t\t\t.filter((view) => view.name === name || view.name === `${namespace}/${name}`)\n\t\t\t.map((view) => ({ contract, view }));\n\t});\n\tif (matches.length !== 1) throw new Error(`Capability view route \"${reference}\" is ${matches.length === 0 ? \"missing\" : \"ambiguous\"}.`);\n\tconst match = matches[0]!;\n\tconst parameterSchemaDigest = match.view.parameterSchema === undefined\n\t\t? undefined\n\t\t: sha256(canonicalizeJcs(match.view.parameterSchema));\n\treturn {\n\t\treference: reference as `capability://${string}`,\n\t\tname: `${namespace}/${name}`,\n\t\tversion: match.view.version,\n\t\t...(match.view.parameterSchema === undefined ? {} : { parameterSchema: match.view.parameterSchema }),\n\t\t...(parameterSchemaDigest === undefined ? {} : { parameterSchemaDigest }),\n\t};\n}\n\nfunction resolveIntent(reference: string, contracts: readonly UsageContract[]): ExperienceIntentRoute {\n\tconst { namespace, name } = parseReference(reference);\n\tconst matches = contracts.flatMap((contract) => {\n\t\tif (contract.namespace !== namespace) return [];\n\t\tconst metadata = contract.extensions?.[\"fabric.experience/v1\"] as\n\t\t\t| { actionIntents?: Array<{ name: string; actionId: string }> }\n\t\t\t| undefined;\n\t\treturn (metadata?.actionIntents ?? []).flatMap((intent) => {\n\t\t\tconst shortName = intent.name.startsWith(`${namespace}.`) ? intent.name.slice(namespace.length + 1) : intent.name;\n\t\t\tif (shortName !== name) return [];\n\t\t\tconst action = contract.actions.find((candidate) => candidate.actionId === intent.actionId);\n\t\t\treturn action ? [{ intent, action }] : [];\n\t\t});\n\t});\n\tif (matches.length !== 1) throw new Error(`Capability intent route \"${reference}\" is ${matches.length === 0 ? \"missing\" : \"ambiguous\"}.`);\n\tconst match = matches[0]!;\n\tconst parameterSchemaDigest = match.action.parameterSchema === undefined\n\t\t? undefined\n\t\t: sha256(canonicalizeJcs(match.action.parameterSchema));\n\treturn {\n\t\treference: reference as `capability://${string}`,\n\t\tactionId: match.action.actionId as `${string}.${string}`,\n\t\tversion: match.action.version,\n\t\t...(match.action.parameterSchema === undefined ? {} : { parameterSchema: match.action.parameterSchema as ExperienceIntentRoute[\"parameterSchema\"] }),\n\t\t...(parameterSchemaDigest === undefined ? {} : { parameterSchemaDigest }),\n\t\t...(match.action.execution === undefined ? {} : { execution: match.action.execution }),\n\t};\n}\n\nfunction compileEffectiveGrants(release: SduiRelease): EffectiveFragmentGrant[] {\n\tconst result: EffectiveFragmentGrant[] = [];\n\tconst releaseViews = new Set(release.grants.views);\n\tconst releaseIntents = new Set(release.grants.intents);\n\tconst seen = new Set<string>();\n\twalkTree(\"root\", release.document.root, releaseViews, releaseIntents, release, result, seen);\n\tfor (const variant of release.document.variants ?? []) {\n\t\twalkTree(variant.id, variant.root, releaseViews, releaseIntents, release, result, seen);\n\t}\n\treturn result;\n}\n\nfunction walkTree(\n\ttreeId: string,\n\tfragment: SduiFragment,\n\tinheritedViews: ReadonlySet<string>,\n\tinheritedIntents: ReadonlySet<string>,\n\trelease: SduiRelease,\n\tresult: EffectiveFragmentGrant[],\n\tseen: Set<string>,\n): void {\n\tconst identity = `${treeId}\\0${fragment.id}`;\n\tif (seen.has(identity)) throw new Error(`SDUI release repeats fragment \"${fragment.id}\" in tree \"${treeId}\".`);\n\tseen.add(identity);\n\tconst narrowing = release.grants.fragments?.[fragment.id];\n\tconst views = narrowing?.views === undefined ? new Set(inheritedViews) : intersect(inheritedViews, narrowing.views);\n\tconst intents = narrowing?.intents === undefined ? new Set(inheritedIntents) : intersect(inheritedIntents, narrowing.intents);\n\tif (fragment.dataRef && !views.has(fragment.dataRef)) {\n\t\tthrow new Error(`Fragment \"${fragment.id}\" references ungranted view \"${fragment.dataRef}\".`);\n\t}\n\tfor (const action of Object.values(fragment.actions ?? {})) {\n\t\tif (!intents.has(action.intent)) throw new Error(`Fragment \"${fragment.id}\" references ungranted intent \"${action.intent}\".`);\n\t}\n\tresult.push({\n\t\ttreeId,\n\t\tfragmentId: fragment.id,\n\t\tviews: [...views].sort(),\n\t\tintents: [...intents].sort(),\n\t});\n\tfor (const child of fragment.children ?? []) walkTree(treeId, child, views, intents, release, result, seen);\n}\n\nfunction intersect(values: ReadonlySet<string>, narrowing: readonly string[]): Set<string> {\n\treturn new Set(narrowing.filter((value) => values.has(value)));\n}\n\nfunction parseReference(reference: string): { namespace: string; name: string } {\n\t// The same grammar the release was validated against. A stricter one here\n\t// would reject references a valid release legitimately carries, and the\n\t// failure would land at promotion with nothing wrong upstream to point at.\n\tconst parsed = parseCapabilityRef(reference);\n\tif (!parsed) throw new Error(`Capability route \"${reference}\" is invalid.`);\n\treturn parsed;\n}\n\nfunction sha256(value: string): string {\n\treturn createHash(\"sha256\").update(value).digest(\"hex\");\n}\n\nasync function signCompactJws(\n\tpayloadValue: unknown,\n\ttype: string,\n\tsigner: ExperienceReleaseSigner,\n): Promise<string> {\n\tconst protectedHeader = encodeBase64Url(canonicalizeJcs({\n\t\talg: \"ES256\",\n\t\tkid: signer.keyId,\n\t\ttyp: type,\n\t}));\n\tconst payload = encodeBase64Url(canonicalizeJcs(payloadValue));\n\tconst signingInput = `${protectedHeader}.${payload}`;\n\tconst signature = await signer.sign(encoder.encode(signingInput));\n\tif (signature.byteLength !== 64) throw new Error(\"Experience release signer must return a 64-byte ES256 JOSE signature.\");\n\treturn `${signingInput}.${encodeBytesBase64Url(signature)}`;\n}\n\nfunction encodeBase64Url(value: string): string {\n\treturn Buffer.from(value, \"utf8\").toString(\"base64url\");\n}\n\nfunction encodeBytesBase64Url(value: Uint8Array): string {\n\treturn Buffer.from(value).toString(\"base64url\");\n}\n\n/**\n * Bind the contracts routes are compiled from to the assembly the release was\n * validated against.\n *\n * Promotion signs a mapping from a granted reference to a concrete action id\n * and version. The reference was authorized at release validation; the mapping\n * is decided here. If the contracts deciding it are not the approved ones, a\n * signed release can point a granted reference at an action nobody reviewed for\n * it. PlatformHost still authorizes that action, so this is an integrity\n * failure of what the release exposes rather than an authorization bypass, and\n * it is exactly the kind that is invisible downstream.\n */\nfunction assertContractsApprovedByAssembly(\n\trelease: SduiRelease,\n\tcontracts: readonly UsageContractDocument[],\n\tassembly: AssemblyLockfile,\n): void {\n\tassertAssemblyLockfile(assembly);\n\tif (assembly.assemblyDigest !== release.assemblyDigest) {\n\t\tthrow new Error(\n\t\t\t`Experience promotion was given assembly \"${assembly.assemblyDigest}\" but the release was validated against \"${release.assemblyDigest}\".`,\n\t\t);\n\t}\n\tconst approved = new Map(\n\t\tassembly.capabilities\n\t\t\t.filter((capability) => capability.usageContractDigest !== undefined)\n\t\t\t.map((capability) => [capability.namespace, capability.usageContractDigest as string]),\n\t);\n\tfor (const document of contracts) {\n\t\tconst namespace = document.capability.namespace;\n\t\tconst expected = approved.get(namespace);\n\t\tif (expected === undefined) {\n\t\t\tthrow new Error(`Assembly \"${assembly.assemblyDigest}\" approves no usage contract for capability \"${namespace}\".`);\n\t\t}\n\t\tconst actual = computeUsageContractDocumentDigest(document);\n\t\tif (actual !== expected) {\n\t\t\tthrow new Error(\n\t\t\t\t`Usage contract for \"${namespace}\" has digest \"${actual}\", which is not the \"${expected}\" that assembly \"${assembly.assemblyDigest}\" approved.`,\n\t\t\t);\n\t\t}\n\t}\n}\n"],"mappings":";AAAA,SAAS,YAAY,YAA4B;AAEjD;AAAA,EACC;AAAA,EACA;AAAA,OAEM;AACP;AAAA,EACC;AAAA,EACA;AAAA,EACA;AAAA,OAGM;AACP;AAAA,EACC;AAAA,EACA;AAAA,EACA;AAAA,OAMM;AAOA,SAAS,yBAAyB,OAGb;AAC3B,MAAI,CAAC,MAAM,MAAM,KAAK,EAAG,OAAM,IAAI,MAAM,gDAAgD;AACzF,SAAO;AAAA,IACN,OAAO,MAAM;AAAA,IACb,MAAM,KAAK,cAAc;AACxB,aAAO,IAAI,WAAW;AAAA,QACrB;AAAA,QACA;AAAA,QACA,EAAE,KAAK,MAAM,YAAY,aAAa,aAAa;AAAA,MACpD,CAAC;AAAA,IACF;AAAA,EACD;AACD;AAsCA,IAAM,UAAU,IAAI,YAAY;AAEhC,eAAsB,yBACrB,OACqC;AACrC,6BAA2B,MAAM,OAAO;AACxC,oBAAkB,MAAM,OAAO;AAC/B,MAAI,CAAC,MAAM,OAAO,KAAK,EAAG,OAAM,IAAI,MAAM,wCAAwC;AAClF,oCAAkC,MAAM,SAAS,MAAM,WAAW,MAAM,QAAQ;AAChF,QAAM,YAAY,MAAM,UAAU,IAAI,CAAC,aAAa,SAAS,UAAU;AACvE,QAAM,SAAS,cAAc,MAAM,SAAS,SAAS;AACrD,QAAM,kBAAkB,uBAAuB,MAAM,OAAO;AAC5D,QAAM,OAAO;AAAA,IACZ,eAAe;AAAA,IACf,MAAM;AAAA,IACN,QAAQ,MAAM;AAAA,IACd,aAAa,MAAM;AAAA,IACnB,gBAAgB,MAAM,QAAQ;AAAA,IAC9B,UAAU,MAAM,QAAQ;AAAA,IACxB,UAAU,MAAM,QAAQ;AAAA,IACxB,gBAAgB,MAAM,QAAQ;AAAA,IAC9B;AAAA,IACA;AAAA,EACD;AACA,QAAM,UAAyB;AAAA,IAC9B,GAAG;AAAA,IACH,eAAe,OAAO,gBAAgB,IAAI,CAAC;AAAA,EAC5C;AACA,SAAO;AAAA,IACN;AAAA,IACA,YAAY,MAAM,eAAe,SAAS,iCAAiC,MAAM,MAAM;AAAA,EACxF;AACD;AAGO,IAAM,2BAA2B;AAExC,eAAsB,0BACrB,SACA,QACkB;AAClB,8BAA4B,OAAO;AACnC,SAAO,eAAe,SAAS,sCAAsC,MAAM;AAC5E;AAEO,SAAS,qBAAmD;AAClE,SAAO;AAAA,IACN;AAAA,MACC,IAAI;AAAA,MACJ,MAAM,IAAI,SAAS;AAClB,cAAM,WAAW,MAAM,QAAQ,QAAQ,QAAQ,UAAU;AACzD,YAAI,SAAS,QAAQ,kBAAkB,KAAK,SAAS,WAAW,MAAM,GAAG,EAAE,WAAW,GAAG;AACxF,gBAAM,IAAI,MAAM,+CAA+C;AAAA,QAChE;AACA,eAAO,CAAC,SAAS,QAAQ,aAAa;AAAA,MACvC;AAAA,IACD;AAAA,IACA;AAAA,MACC,IAAI;AAAA,MACJ,MAAM,IAAI,SAAS;AAClB,YAAI,WAAW;AACf,YAAI;AAAE,gBAAM,QAAQ,QAAQ,QAAQ,YAAY;AAAA,QAAG,QAAQ;AAAE,qBAAW;AAAA,QAAM;AAC9E,YAAI,CAAC,SAAU,OAAM,IAAI,MAAM,8DAA8D;AAC7F,eAAO,CAAC,wBAAwB;AAAA,MACjC;AAAA,IACD;AAAA,EACD;AACD;AAEA,eAAsB,sBACrB,SACA,SAAuC,mBAAmB,GACsF;AAChJ,QAAM,UAAmH,CAAC;AAC1H,aAAW,SAAS,QAAQ;AAC3B,QAAI;AAAE,cAAQ,KAAK,EAAE,IAAI,MAAM,IAAI,QAAQ,UAAU,UAAU,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;AAAA,IAAG,SACrF,OAAO;AAAE,cAAQ,KAAK,EAAE,IAAI,MAAM,IAAI,QAAQ,UAAU,UAAU,CAAC,GAAG,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,EAAE,CAAC;AAAA,IAAG;AAAA,EAChJ;AACA,SAAO,EAAE,QAAQ,QAAQ,MAAM,CAAC,WAAW,OAAO,WAAW,QAAQ,GAAG,QAAQ,QAAQ;AACzF;AAEA,SAAS,cACR,SACA,WACqE;AACrE,QAAM,QAAQ,CAAC,GAAG,IAAI,IAAI,QAAQ,OAAO,KAAK,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,cAAc,YAAY,WAAW,SAAS,CAAC;AAC5G,QAAM,UAAU,CAAC,GAAG,IAAI,IAAI,QAAQ,OAAO,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,cAAc,cAAc,WAAW,SAAS,CAAC;AAClH,SAAO,EAAE,OAAO,QAAQ;AACzB;AAEA,SAAS,YAAY,WAAmB,WAA0D;AACjG,QAAM,EAAE,WAAW,KAAK,IAAI,eAAe,SAAS;AACpD,QAAM,UAAU,UAAU,QAAQ,CAAC,aAAa;AAC/C,QAAI,SAAS,cAAc,UAAW,QAAO,CAAC;AAC9C,WAAO,SAAS,MACd,OAAO,CAAC,SAAS,KAAK,SAAS,QAAQ,KAAK,SAAS,GAAG,SAAS,IAAI,IAAI,EAAE,EAC3E,IAAI,CAAC,UAAU,EAAE,UAAU,KAAK,EAAE;AAAA,EACrC,CAAC;AACD,MAAI,QAAQ,WAAW,EAAG,OAAM,IAAI,MAAM,0BAA0B,SAAS,QAAQ,QAAQ,WAAW,IAAI,YAAY,WAAW,GAAG;AACtI,QAAM,QAAQ,QAAQ,CAAC;AACvB,QAAM,wBAAwB,MAAM,KAAK,oBAAoB,SAC1D,SACA,OAAO,gBAAgB,MAAM,KAAK,eAAe,CAAC;AACrD,SAAO;AAAA,IACN;AAAA,IACA,MAAM,GAAG,SAAS,IAAI,IAAI;AAAA,IAC1B,SAAS,MAAM,KAAK;AAAA,IACpB,GAAI,MAAM,KAAK,oBAAoB,SAAY,CAAC,IAAI,EAAE,iBAAiB,MAAM,KAAK,gBAAgB;AAAA,IAClG,GAAI,0BAA0B,SAAY,CAAC,IAAI,EAAE,sBAAsB;AAAA,EACxE;AACD;AAEA,SAAS,cAAc,WAAmB,WAA4D;AACrG,QAAM,EAAE,WAAW,KAAK,IAAI,eAAe,SAAS;AACpD,QAAM,UAAU,UAAU,QAAQ,CAAC,aAAa;AAC/C,QAAI,SAAS,cAAc,UAAW,QAAO,CAAC;AAC9C,UAAM,WAAW,SAAS,aAAa,sBAAsB;AAG7D,YAAQ,UAAU,iBAAiB,CAAC,GAAG,QAAQ,CAAC,WAAW;AAC1D,YAAM,YAAY,OAAO,KAAK,WAAW,GAAG,SAAS,GAAG,IAAI,OAAO,KAAK,MAAM,UAAU,SAAS,CAAC,IAAI,OAAO;AAC7G,UAAI,cAAc,KAAM,QAAO,CAAC;AAChC,YAAM,SAAS,SAAS,QAAQ,KAAK,CAAC,cAAc,UAAU,aAAa,OAAO,QAAQ;AAC1F,aAAO,SAAS,CAAC,EAAE,QAAQ,OAAO,CAAC,IAAI,CAAC;AAAA,IACzC,CAAC;AAAA,EACF,CAAC;AACD,MAAI,QAAQ,WAAW,EAAG,OAAM,IAAI,MAAM,4BAA4B,SAAS,QAAQ,QAAQ,WAAW,IAAI,YAAY,WAAW,GAAG;AACxI,QAAM,QAAQ,QAAQ,CAAC;AACvB,QAAM,wBAAwB,MAAM,OAAO,oBAAoB,SAC5D,SACA,OAAO,gBAAgB,MAAM,OAAO,eAAe,CAAC;AACvD,SAAO;AAAA,IACN;AAAA,IACA,UAAU,MAAM,OAAO;AAAA,IACvB,SAAS,MAAM,OAAO;AAAA,IACtB,GAAI,MAAM,OAAO,oBAAoB,SAAY,CAAC,IAAI,EAAE,iBAAiB,MAAM,OAAO,gBAA4D;AAAA,IAClJ,GAAI,0BAA0B,SAAY,CAAC,IAAI,EAAE,sBAAsB;AAAA,IACvE,GAAI,MAAM,OAAO,cAAc,SAAY,CAAC,IAAI,EAAE,WAAW,MAAM,OAAO,UAAU;AAAA,EACrF;AACD;AAEA,SAAS,uBAAuB,SAAgD;AAC/E,QAAM,SAAmC,CAAC;AAC1C,QAAM,eAAe,IAAI,IAAI,QAAQ,OAAO,KAAK;AACjD,QAAM,iBAAiB,IAAI,IAAI,QAAQ,OAAO,OAAO;AACrD,QAAM,OAAO,oBAAI,IAAY;AAC7B,WAAS,QAAQ,QAAQ,SAAS,MAAM,cAAc,gBAAgB,SAAS,QAAQ,IAAI;AAC3F,aAAW,WAAW,QAAQ,SAAS,YAAY,CAAC,GAAG;AACtD,aAAS,QAAQ,IAAI,QAAQ,MAAM,cAAc,gBAAgB,SAAS,QAAQ,IAAI;AAAA,EACvF;AACA,SAAO;AACR;AAEA,SAAS,SACR,QACA,UACA,gBACA,kBACA,SACA,QACA,MACO;AACP,QAAM,WAAW,GAAG,MAAM,KAAK,SAAS,EAAE;AAC1C,MAAI,KAAK,IAAI,QAAQ,EAAG,OAAM,IAAI,MAAM,kCAAkC,SAAS,EAAE,cAAc,MAAM,IAAI;AAC7G,OAAK,IAAI,QAAQ;AACjB,QAAM,YAAY,QAAQ,OAAO,YAAY,SAAS,EAAE;AACxD,QAAM,QAAQ,WAAW,UAAU,SAAY,IAAI,IAAI,cAAc,IAAI,UAAU,gBAAgB,UAAU,KAAK;AAClH,QAAM,UAAU,WAAW,YAAY,SAAY,IAAI,IAAI,gBAAgB,IAAI,UAAU,kBAAkB,UAAU,OAAO;AAC5H,MAAI,SAAS,WAAW,CAAC,MAAM,IAAI,SAAS,OAAO,GAAG;AACrD,UAAM,IAAI,MAAM,aAAa,SAAS,EAAE,gCAAgC,SAAS,OAAO,IAAI;AAAA,EAC7F;AACA,aAAW,UAAU,OAAO,OAAO,SAAS,WAAW,CAAC,CAAC,GAAG;AAC3D,QAAI,CAAC,QAAQ,IAAI,OAAO,MAAM,EAAG,OAAM,IAAI,MAAM,aAAa,SAAS,EAAE,kCAAkC,OAAO,MAAM,IAAI;AAAA,EAC7H;AACA,SAAO,KAAK;AAAA,IACX;AAAA,IACA,YAAY,SAAS;AAAA,IACrB,OAAO,CAAC,GAAG,KAAK,EAAE,KAAK;AAAA,IACvB,SAAS,CAAC,GAAG,OAAO,EAAE,KAAK;AAAA,EAC5B,CAAC;AACD,aAAW,SAAS,SAAS,YAAY,CAAC,EAAG,UAAS,QAAQ,OAAO,OAAO,SAAS,SAAS,QAAQ,IAAI;AAC3G;AAEA,SAAS,UAAU,QAA6B,WAA2C;AAC1F,SAAO,IAAI,IAAI,UAAU,OAAO,CAAC,UAAU,OAAO,IAAI,KAAK,CAAC,CAAC;AAC9D;AAEA,SAAS,eAAe,WAAwD;AAI/E,QAAM,SAAS,mBAAmB,SAAS;AAC3C,MAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,qBAAqB,SAAS,eAAe;AAC1E,SAAO;AACR;AAEA,SAAS,OAAO,OAAuB;AACtC,SAAO,WAAW,QAAQ,EAAE,OAAO,KAAK,EAAE,OAAO,KAAK;AACvD;AAEA,eAAe,eACd,cACA,MACA,QACkB;AAClB,QAAM,kBAAkB,gBAAgB,gBAAgB;AAAA,IACvD,KAAK;AAAA,IACL,KAAK,OAAO;AAAA,IACZ,KAAK;AAAA,EACN,CAAC,CAAC;AACF,QAAM,UAAU,gBAAgB,gBAAgB,YAAY,CAAC;AAC7D,QAAM,eAAe,GAAG,eAAe,IAAI,OAAO;AAClD,QAAM,YAAY,MAAM,OAAO,KAAK,QAAQ,OAAO,YAAY,CAAC;AAChE,MAAI,UAAU,eAAe,GAAI,OAAM,IAAI,MAAM,uEAAuE;AACxH,SAAO,GAAG,YAAY,IAAI,qBAAqB,SAAS,CAAC;AAC1D;AAEA,SAAS,gBAAgB,OAAuB;AAC/C,SAAO,OAAO,KAAK,OAAO,MAAM,EAAE,SAAS,WAAW;AACvD;AAEA,SAAS,qBAAqB,OAA2B;AACxD,SAAO,OAAO,KAAK,KAAK,EAAE,SAAS,WAAW;AAC/C;AAcA,SAAS,kCACR,SACA,WACA,UACO;AACP,yBAAuB,QAAQ;AAC/B,MAAI,SAAS,mBAAmB,QAAQ,gBAAgB;AACvD,UAAM,IAAI;AAAA,MACT,4CAA4C,SAAS,cAAc,4CAA4C,QAAQ,cAAc;AAAA,IACtI;AAAA,EACD;AACA,QAAM,WAAW,IAAI;AAAA,IACpB,SAAS,aACP,OAAO,CAAC,eAAe,WAAW,wBAAwB,MAAS,EACnE,IAAI,CAAC,eAAe,CAAC,WAAW,WAAW,WAAW,mBAA6B,CAAC;AAAA,EACvF;AACA,aAAW,YAAY,WAAW;AACjC,UAAM,YAAY,SAAS,WAAW;AACtC,UAAM,WAAW,SAAS,IAAI,SAAS;AACvC,QAAI,aAAa,QAAW;AAC3B,YAAM,IAAI,MAAM,aAAa,SAAS,cAAc,gDAAgD,SAAS,IAAI;AAAA,IAClH;AACA,UAAM,SAAS,mCAAmC,QAAQ;AAC1D,QAAI,WAAW,UAAU;AACxB,YAAM,IAAI;AAAA,QACT,uBAAuB,SAAS,iBAAiB,MAAM,wBAAwB,QAAQ,oBAAoB,SAAS,cAAc;AAAA,MACnI;AAAA,IACD;AAAA,EACD;AACD;","names":[]}

package/package.json

@@ -0,0 +1,56 @@
+{
+  "name": "@fabricorg/sdui-composer",
+  "version": "0.2.0",
+  "description": "Headless SDUI route compilation, promotion, and signing tooling.",
+  "license": "MIT",
+  "type": "module",
+  "sideEffects": false,
+  "main": "./dist/index.cjs",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.js"
+      },
+      "require": {
+        "types": "./dist/index.d.cts",
+        "default": "./dist/index.cjs"
+      }
+    }
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "CHANGELOG.md",
+    "LICENSE"
+  ],
+  "dependencies": {
+    "@fabricorg/sdui-release": "^0.5.0",
+    "@fabricorg/assembly": "0.4.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.10.0",
+    "tsup": "^8.5.0",
+    "typescript": "^5.7.3",
+    "vitest": "^4.1.5",
+    "@fabricorg/gen-capability": "^0.5.1",
+    "@fabricorg/platform": "^1.3.0"
+  },
+  "engines": {
+    "node": ">=20"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "peerDependencies": {
+    "@fabricorg/gen-capability": "^0.5.1",
+    "@fabricorg/platform": "^1.3.0"
+  },
+  "scripts": {
+    "clean": "rm -rf dist tsconfig.tsbuildinfo",
+    "build": "tsup",
+    "type-check": "tsc --noEmit",
+    "test": "vitest run"
+  }
+}