@fabricorg/sdui-release 0.3.0

package/dist/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../index.ts","../types.ts","../structural.ts","../helpers.ts","../validate.ts","../digest.ts","../capabilities.ts","../walker.ts","../channel.ts","../schemas.ts"],"sourcesContent":["// ── Public API ──────────────────────────────────────────────────────────────\n//\n// The SDUI release package is split into cohesive private modules. This file\n// is the single public entry point: it re-exports every type, constant, and\n// function that consumers import. The internal modules (types, helpers,\n// structural, digest, capabilities, walker, channel, schemas, validate) are\n// implementation details and are not separately exported.\n\n// Format version constants\nexport {\n\tSDUI_DOCUMENT_FORMAT_VERSION,\n\tSDUI_TOKEN_SET_FORMAT_VERSION,\n\tSDUI_COMPONENT_PACK_FORMAT_VERSION,\n\tSDUI_RELEASE_FORMAT_VERSION,\n} from \"./types\";\n\n// Types\nexport type {\n\tSduiCapabilityRef,\n\tSduiFragmentValue,\n\tSduiActionRef,\n\tSduiFragment,\n\tSduiTokenType,\n\tSduiToken,\n\tSduiTokenSet,\n\tSduiComponentDefinition,\n\tSduiComponentPack,\n\tSduiComponentPackReference,\n\tSduiTokenSetReference,\n\tSduiDocument,\n\tResolvedSduiComponentPack,\n\tSduiRelease,\n\tSduiFindingCode,\n\tSduiFinding,\n\tSduiValidationResult,\n\tSduiAuthorizationGrants,\n\tSduiValidationInput,\n\tJsonValue,\n} from \"./types\";\n\n// Structural validation\nexport {\n\tassertSduiTokenSet,\n\tassertSduiComponentPack,\n\tassertSduiFragment,\n\tassertSduiDocument,\n\tassertSduiAuthorizationGrants,\n\tassertSduiRelease,\n} from \"./structural\";\n\n// Release validation\nexport {\n\tvalidateSduiRelease,\n\tassertSduiReleaseValid,\n} from \"./validate\";\n\n// Release digest\nexport { assertSduiReleaseIntegrity, computeReleaseDigest } from \"./digest\";\n\n// Channel consumption\nexport {\n\tcreateSduiChannel,\n\ttype SduiChannel,\n\ttype SduiChannelConsumptionResult,\n} from \"./channel\";\n\n// JSON schemas\nexport {\n\tSDUI_DOCUMENT_JSON_SCHEMA,\n\tSDUI_RELEASE_JSON_SCHEMA,\n} from \"./schemas\";\n","import type { JsonValue, PortableJsonSchema } from \"@fabricorg/platform\";\nimport type { UsageContractDocument } from \"@fabricorg/gen-capability\";\nimport type { AssemblyLockfile } from \"@fabricorg/assembly\";\n\n/**\n * Version of the SDUI document contract. A vertical negotiates on this, not on\n * this package's version, and it moves only when the serialized shape changes.\n */\nexport const SDUI_DOCUMENT_FORMAT_VERSION = 1 as const;\n\n/**\n * Version of the SDUI token-set contract.\n */\nexport const SDUI_TOKEN_SET_FORMAT_VERSION = 1 as const;\n\n/**\n * Version of the SDUI component-pack contract.\n */\nexport const SDUI_COMPONENT_PACK_FORMAT_VERSION = 1 as const;\n\n/**\n * Version of the promoted SDUI release contract.\n */\nexport const SDUI_RELEASE_FORMAT_VERSION = 2 as const;\n\n// ── Fragment value: literal or capability read reference ────────────────────\n\n/**\n * A capability read reference embedded in fragment props. The `capability://`\n * scheme ties a data binding to a published view; the host resolves it through\n * `ProjectionHost`, never through a direct query.\n */\nexport interface SduiCapabilityRef {\n\t$ref: `capability://${string}`;\n}\n\n/**\n * A value that may appear in fragment props: a JSON literal, an array, an\n * object, or a `capability://` read reference. Direct mutation endpoints,\n * API URLs, or code strings are not valid fragment values.\n */\nexport type SduiFragmentValue =\n\t| string\n\t| number\n\t| boolean\n\t| null\n\t| SduiFragmentValue[]\n\t| SduiCapabilityRef\n\t| { [key: string]: SduiFragmentValue };\n\n// ── Action reference: must route through a governed action ─────────────────\n\n/**\n * An action declared on a fragment. The `intent` must be a `capability://`\n * reference to a published action intent; the host dispatches it through\n * `PlatformHost`, preserving governance. A bare endpoint URL, function name,\n * or inline script is a mutation bypass and is rejected.\n */\nexport interface SduiActionRef {\n\tintent: `capability://${string}`;\n\tparams?: Record<string, SduiFragmentValue>;\n}\n\n// ── Fragment: a node in the document tree ───────────────────────────────────\n\n/**\n * A node in an SDUI document tree. A fragment either renders a component from\n * a declared pack, binds data from a capability view, or both. Actions on a\n * fragment are always capability action-intent references — never direct\n * mutations.\n */\nexport interface SduiFragment {\n\t/** Unique identifier within the document. */\n\tid: string;\n\t/** Namespaced component (`pack.Component`) or a core component name. */\n\tcomponent?: string;\n\t/** Props for the component; values may be literals or capability refs. */\n\tprops?: Record<string, SduiFragmentValue>;\n\t/** Named slot this fragment fills in its parent component. */\n\tslot?: string;\n\t/** A capability view reference for data-driven fragments. */\n\tdataRef?: `capability://${string}`;\n\t/** Action handlers; every entry must be a capability action-intent reference. */\n\tactions?: Record<string, SduiActionRef>;\n\t/** Child fragments. */\n\tchildren?: SduiFragment[];\n}\n\n// ── Token set: renderer-neutral design tokens ───────────────────────────────\n\nexport type SduiTokenType = \"color\" | \"spacing\" | \"fontSize\" | \"fontWeight\" | \"radius\" | \"border\" | \"shadow\";\n\nexport interface SduiToken {\n\ttype: SduiTokenType;\n\tvalue: string;\n\tdescription?: string;\n}\n\n/**\n * A versioned set of design tokens. Tokens are semantic, not literal CSS — a\n * renderer maps them to its own platform. Two channels consuming the same\n * token set apply the same visual intent through different renderings.\n */\nexport interface SduiTokenSet {\n\tformatVersion: typeof SDUI_TOKEN_SET_FORMAT_VERSION;\n\tname: string;\n\tversion: string;\n\ttokens: Record<string, SduiToken>;\n}\n\n// ── Component pack: available components for rendering ──────────────────────\n\nexport interface SduiComponentDefinition {\n\t/** Roles this component implements (for adoption-binding validation). */\n\timplements?: string[];\n\t/** JSON Schema for component props. */\n\tpropsSchema?: PortableJsonSchema;\n\t/** Named slots this component accepts. */\n\tslots?: string[];\n}\n\n/**\n * A versioned pack of SDUI components. Compatible with the adoption-bindings\n * `ComponentPackManifest` but adds prop schemas and slot declarations so a\n * document can be validated without a renderer.\n */\nexport interface SduiComponentPack {\n\tformatVersion: typeof SDUI_COMPONENT_PACK_FORMAT_VERSION;\n\tpack: string;\n\tnamespace: string;\n\tversion: string;\n\t/** SHA-256 digest of the published component-pack artifact. */\n\tartifactDigest: string;\n\t/**\n\t * Where this pack is loaded from when it is delivered as a federated\n\t * remote. The artifact digest identifies the pack that was reviewed; this\n\t * is what a shell actually executes, so validation requires the two to be\n\t * locked together or the review covers something other than what runs.\n\t */\n\tremote?: SduiComponentPackRemote;\n\tcomponents: Record<string, SduiComponentDefinition>;\n}\n\n/** Delivery binding for a federated component pack. */\nexport interface SduiComponentPackRemote {\n\t/** Remote entry URL the shell loads. */\n\tentry: string;\n\t/** Subresource-integrity value for that entry, e.g. `sha384-…`. */\n\tintegrity: string;\n\t/** Exposed module path keyed by the component name it provides. */\n\texposes: Record<string, string>;\n}\n\n// ── Document: a versioned tree of fragments ──────────────────────────────────\n\nexport interface SduiComponentPackReference {\n\tpack: string;\n\tnamespace: string;\n\t/** Semver range, e.g. `^1.0.0`. */\n\trange: string;\n}\n\nexport interface SduiTokenSetReference {\n\tname: string;\n\tversion: string;\n}\n\n/**\n * A versioned SDUI document: a tree of fragments, a token-set reference, and\n * the component packs it depends on. This is the build-time input; the release\n * is the validated, resolved output.\n */\nexport interface SduiDocument {\n\tformatVersion: typeof SDUI_DOCUMENT_FORMAT_VERSION;\n\tname: string;\n\tversion: string;\n\t/** The tree rendered when no variant is selected. */\n\troot: SduiFragment;\n\t/**\n\t * Alternative trees a compositor may select at request time, for experiment\n\t * arms and personalization. Every variant is enumerated here and validated\n\t * against the same grants as `root`, and all of them are covered by the\n\t * release digest.\n\t *\n\t * Enumeration is what makes selection safe. A selector that can produce a\n\t * tree outside this set cannot be validated at promotion, so \"selection may\n\t * never widen grants\" would be unenforceable rather than merely unenforced.\n\t */\n\tvariants?: SduiVariant[];\n\ttokenSet: SduiTokenSetReference;\n\tcomponentPacks: SduiComponentPackReference[];\n}\n\n/** One selectable alternative to a document's default tree. */\nexport interface SduiVariant {\n\t/** Stable key the compositor matches on. Unique within the document. */\n\tid: string;\n\t/** The audience or experiment arm this arm serves. */\n\tdescription?: string;\n\troot: SduiFragment;\n}\n\n// ── Release: a promoted, validated, immutable bundle ─────────────────────────\n\nexport interface ResolvedSduiComponentPack {\n\tpack: string;\n\tnamespace: string;\n\tversion: string;\n\trange: string;\n\tartifactDigest: string;\n\t/**\n\t * The locked delivery binding, carried onto the release so the digest\n\t * identifies which remote a channel is expected to load. Omitting it would\n\t * let two releases differing only in their remote share a digest.\n\t */\n\tremote?: SduiComponentPackRemote;\n}\n\n/**\n * A promoted, validated, immutable SDUI release. It bundles a document, a\n * resolved token set, and locked component packs. Two channels (web, mobile,\n * CLI) can consume the same release and render it through their own renderers\n * while reads and actions remain capability references.\n */\nexport interface SduiRelease {\n\tformatVersion: typeof SDUI_RELEASE_FORMAT_VERSION;\n\t/** SHA-256 of the canonical document, token set, resolved packs, grants, and assembly identity. */\n\treleaseDigest: string;\n\t/** Approved application assembly this release was validated against. */\n\tassemblyDigest: string;\n\tdocument: SduiDocument;\n\ttokenSet: SduiTokenSet;\n\tcomponentPacks: ResolvedSduiComponentPack[];\n\tgrants: SduiAuthorizationGrants;\n}\n\n// ── Findings ─────────────────────────────────────────────────────────────────\n\nexport type SduiFindingCode =\n\t| \"unknown_component\"\n\t| \"incompatible_pack\"\n\t| \"unauthorized_data_ref\"\n\t| \"denied_view_ref\"\n\t| \"mutation_bypass\"\n\t| \"denied_intent_ref\"\n\t| \"intent_action_not_found\"\n\t| \"invalid_fragment\"\n\t| \"invalid_action_ref\"\n\t| \"unknown_token\"\n\t| \"duplicate_fragment_id\"\n\t| \"invalid_token_set\"\n\t| \"invalid_component_pack\"\n\t| \"invalid_document\"\n\t| \"missing_token_set\"\n\t| \"missing_component_pack\"\n\t| \"component_pack_not_in_assembly\"\n\t| \"capability_contract_not_in_assembly\"\n\t| \"duplicate_variant_id\"\n\t| \"fragment_grant_exceeds_release\"\n\t| \"remote_not_locked\";\n\nexport interface SduiFinding {\n\tcode: SduiFindingCode;\n\tpath: string;\n\tmessage: string;\n}\n\nexport interface SduiValidationResult {\n\tvalid: boolean;\n\tfindings: SduiFinding[];\n\trelease: SduiRelease | undefined;\n}\n\n// ── Validation input ─────────────────────────────────────────────────────────\n\n/**\n * Explicit capability references authorized for an SDUI release.\n *\n * The presence of a view or action in a supplied usage contract proves that\n * the capability publishes it, not that this document may use it. The\n * experience host must therefore provide both grant lists explicitly.\n */\nexport interface SduiAuthorizationGrants {\n\t/** Full `capability://namespace/view` references allowed in data bindings. */\n\tviews: readonly string[];\n\t/** Full `capability://namespace/intent` references allowed in actions. */\n\tintents: readonly string[];\n\t/**\n\t * Per-fragment narrowing, keyed by fragment id.\n\t *\n\t * The release-wide lists above are the ceiling. A listed fragment may use\n\t * only the references named for it, and the narrowing is inherited by that\n\t * fragment's children, so a page assembled from several teams' fragments\n\t * gets least privilege rather than the union of everything any of them\n\t * needs. A fragment entry can only ever narrow: naming a reference outside\n\t * the release-wide list is an authoring error and is reported rather than\n\t * silently granted.\n\t *\n\t * Keys are fragment ids, which are unique within a tree but may repeat\n\t * across variants, so two variants using the same fragment id share one\n\t * entry. Give them distinct ids when they need distinct narrowing. This\n\t * cannot widen either fragment, since narrowing stays an intersection.\n\t */\n\tfragments?: Record<string, SduiFragmentGrants>;\n}\n\n/** References one fragment subtree may use, drawn from the release-wide lists. */\nexport interface SduiFragmentGrants {\n\tviews?: readonly string[];\n\tintents?: readonly string[];\n}\n\nexport interface SduiValidationInput {\n\tdocument: SduiDocument;\n\ttokenSet: SduiTokenSet;\n\t/** Available component packs for version resolution. */\n\tcomponentPacks: SduiComponentPack[];\n\t/** Capability contracts available for data-ref and action validation. */\n\tcontracts: UsageContractDocument[];\n\t/**\n\t * Explicit authorization grants for every capability view and action\n\t * reference used by the document. Contract membership alone never grants\n\t * access.\n\t */\n\tgrants: SduiAuthorizationGrants;\n\t/** Approved resolved application composition. */\n\tassembly: AssemblyLockfile;\n\t/** Core component vocabulary every renderer implements. */\n\tcoreComponents?: readonly string[];\n}\n\n// Re-export JsonValue for consumers that build contracts programmatically.\nexport type { JsonValue };\n","import { assertPortableJsonSchema, type PortableJsonSchema } from \"@fabricorg/platform\";\nimport { parseSemverRange } from \"@fabricorg/assembly\";\nimport type {\n\tSduiAuthorizationGrants,\n\tSduiComponentPack,\n\tSduiDocument,\n\tSduiFragment,\n\tSduiRelease,\n\tSduiTokenSet,\n\tSduiTokenType,\n} from \"./types\";\nimport { fail, parseCapabilityRef, requireArray, requireRecord, requireString } from \"./helpers\";\n\n// ── Token set structural validation ──────────────────────────────────────────\n\nconst TOKEN_TYPES = new Set<SduiTokenType>([\"color\", \"spacing\", \"fontSize\", \"fontWeight\", \"radius\", \"border\", \"shadow\"]);\n\nexport function assertSduiTokenSet(value: unknown, path = \"tokenSet\"): asserts value is SduiTokenSet {\n\tconst tokenSet = requireRecord(value, path);\n\tif (tokenSet.formatVersion !== 1) {\n\t\tfail(`${path}.formatVersion`, `must be 1, received ${JSON.stringify(tokenSet.formatVersion)}`);\n\t}\n\tif (!/^[a-z][a-z0-9-]*$/.test(requireString(tokenSet.name, `${path}.name`))) {\n\t\tfail(`${path}.name`, \"must be lowercase letters, numbers and hyphens\");\n\t}\n\tif (!/^\\d+\\.\\d+\\.\\d+(?:-[0-9A-Za-z.-]+)?$/.test(requireString(tokenSet.version, `${path}.version`))) {\n\t\tfail(`${path}.version`, \"must be a semver version\");\n\t}\n\tconst tokens = requireRecord(tokenSet.tokens, `${path}.tokens`);\n\tfor (const [name, token] of Object.entries(tokens)) {\n\t\tconst tokenPath = `${path}.tokens.${name}`;\n\t\tif (!/^[a-z][a-z0-9-]*$/.test(name)) fail(tokenPath, \"token name must be lowercase letters, numbers and hyphens\");\n\t\tconst entry = requireRecord(token, tokenPath);\n\t\tconst type = requireString(entry.type, `${tokenPath}.type`);\n\t\tif (!TOKEN_TYPES.has(type as SduiTokenType)) fail(`${tokenPath}.type`, `must be one of ${[...TOKEN_TYPES].join(\", \")}`);\n\t\trequireString(entry.value, `${tokenPath}.value`);\n\t}\n}\n\n// ── Component pack structural validation ────────────────────────────────────\n\nexport function assertSduiComponentPack(value: unknown, path = \"componentPack\"): asserts value is SduiComponentPack {\n\tconst pack = requireRecord(value, path);\n\tif (pack.formatVersion !== 1) {\n\t\tfail(`${path}.formatVersion`, `must be 1, received ${JSON.stringify(pack.formatVersion)}`);\n\t}\n\tif (!/^[a-z][a-z0-9-]*$/.test(requireString(pack.pack, `${path}.pack`))) {\n\t\tfail(`${path}.pack`, \"must be lowercase letters, numbers and hyphens\");\n\t}\n\tif (!/^[a-z][a-z0-9-]*$/.test(requireString(pack.namespace, `${path}.namespace`))) {\n\t\tfail(`${path}.namespace`, \"must be lowercase letters, numbers and hyphens\");\n\t}\n\tif (!/^\\d+\\.\\d+\\.\\d+(?:-[0-9A-Za-z.-]+)?$/.test(requireString(pack.version, `${path}.version`))) {\n\t\tfail(`${path}.version`, \"must be a semver version\");\n\t}\n\tif (!/^[0-9a-f]{64}$/.test(requireString(pack.artifactDigest, `${path}.artifactDigest`))) {\n\t\tfail(`${path}.artifactDigest`, \"must be a lowercase SHA-256 digest\");\n\t}\n\tif (pack.remote !== undefined) {\n\t\tconst remote = requireRecord(pack.remote, `${path}.remote`);\n\t\trequireString(remote.entry, `${path}.remote.entry`);\n\t\tif (!/^sha(256|384|512)-[A-Za-z0-9+/]+={0,2}$/.test(requireString(remote.integrity, `${path}.remote.integrity`))) {\n\t\t\tfail(`${path}.remote.integrity`, \"must be a subresource-integrity value, e.g. \\\"sha384-…\\\"\");\n\t\t}\n\t\tconst exposes = requireRecord(remote.exposes, `${path}.remote.exposes`);\n\t\tfor (const [component, modulePath] of Object.entries(exposes)) {\n\t\t\trequireString(modulePath, `${path}.remote.exposes.${component}`);\n\t\t}\n\t}\n\tconst components = requireRecord(pack.components, `${path}.components`);\n\tfor (const [name, definition] of Object.entries(components)) {\n\t\tconst componentPath = `${path}.components.${name}`;\n\t\tif (!/^[a-z][a-z0-9-]*$/.test(name)) fail(componentPath, \"component name must be lowercase letters, numbers and hyphens\");\n\t\tconst def = requireRecord(definition, componentPath);\n\t\tif (def.implements !== undefined) {\n\t\t\tif (!Array.isArray(def.implements)) fail(`${componentPath}.implements`, \"must be an array\");\n\t\t\tfor (const impl of def.implements as unknown[]) {\n\t\t\t\tif (typeof impl !== \"string\" || !impl.trim()) fail(`${componentPath}.implements`, \"entries must be non-empty strings\");\n\t\t\t}\n\t\t}\n\t\tif (def.propsSchema !== undefined) {\n\t\t\ttry { assertPortableJsonSchema(def.propsSchema as PortableJsonSchema, `${componentPath}.propsSchema`); }\n\t\t\tcatch (error) { fail(componentPath, error instanceof Error ? error.message : String(error)); }\n\t\t}\n\t\tif (def.slots !== undefined) {\n\t\t\tif (!Array.isArray(def.slots)) fail(`${componentPath}.slots`, \"must be an array\");\n\t\t\tfor (const slot of def.slots as unknown[]) {\n\t\t\t\tif (typeof slot !== \"string\" || !/^[a-z][a-z0-9-]*$/.test(slot)) fail(`${componentPath}.slots`, \"slot names must be lowercase letters, numbers and hyphens\");\n\t\t\t}\n\t\t}\n\t}\n}\n\n// ── Fragment structural validation ──────────────────────────────────────────\n\nexport function assertSduiFragment(value: unknown, path = \"fragment\"): asserts value is SduiFragment {\n\tconst fragment = requireRecord(value, path);\n\trequireString(fragment.id, `${path}.id`);\n\tif (fragment.component !== undefined) requireString(fragment.component, `${path}.component`);\n\tif (fragment.slot !== undefined) {\n\t\tif (!/^[a-z][a-z0-9-]*$/.test(requireString(fragment.slot, `${path}.slot`))) {\n\t\t\tfail(`${path}.slot`, \"must be lowercase letters, numbers and hyphens\");\n\t\t}\n\t}\n\tif (fragment.dataRef !== undefined) {\n\t\tconst dataRef = requireString(fragment.dataRef, `${path}.dataRef`);\n\t\tif (!dataRef.startsWith(\"capability://\")) fail(`${path}.dataRef`, \"must be a capability:// reference\");\n\t}\n\tif (fragment.props !== undefined) {\n\t\trequireRecord(fragment.props, `${path}.props`);\n\t}\n\tif (fragment.actions !== undefined) {\n\t\tconst actions = requireRecord(fragment.actions, `${path}.actions`);\n\t\tfor (const [name, ref] of Object.entries(actions)) {\n\t\t\tconst actionPath = `${path}.actions.${name}`;\n\t\t\tconst actionRef = requireRecord(ref, actionPath);\n\t\t\trequireString(actionRef.intent, `${actionPath}.intent`);\n\t\t}\n\t}\n\tif (fragment.children !== undefined) {\n\t\tconst children = requireArray(fragment.children, `${path}.children`);\n\t\tchildren.forEach((child, index) => assertSduiFragment(child, `${path}.children[${index}]`));\n\t}\n}\n\n// ── Document structural validation ───────────────────────────────────────────\n\nexport function assertSduiDocument(value: unknown, path = \"document\"): asserts value is SduiDocument {\n\tconst document = requireRecord(value, path);\n\tif (document.formatVersion !== 1) {\n\t\tfail(`${path}.formatVersion`, `must be 1, received ${JSON.stringify(document.formatVersion)}`);\n\t}\n\tif (!/^[a-z][a-z0-9-]*$/.test(requireString(document.name, `${path}.name`))) {\n\t\tfail(`${path}.name`, \"must be lowercase letters, numbers and hyphens\");\n\t}\n\tif (!/^\\d+\\.\\d+\\.\\d+(?:-[0-9A-Za-z.-]+)?$/.test(requireString(document.version, `${path}.version`))) {\n\t\tfail(`${path}.version`, \"must be a semver version\");\n\t}\n\tassertSduiFragment(document.root, `${path}.root`);\n\tif (document.variants !== undefined) {\n\t\trequireArray(document.variants, `${path}.variants`).forEach((entry, index) => {\n\t\t\tconst variantPath = `${path}.variants[${index}]`;\n\t\t\tconst variant = requireRecord(entry, variantPath);\n\t\t\tif (!/^[a-z][a-z0-9-]*$/.test(requireString(variant.id, `${variantPath}.id`))) {\n\t\t\t\tfail(`${variantPath}.id`, \"must be lowercase letters, numbers and hyphens\");\n\t\t\t}\n\t\t\tif (variant.description !== undefined) requireString(variant.description, `${variantPath}.description`);\n\t\t\tassertSduiFragment(variant.root, `${variantPath}.root`);\n\t\t});\n\t}\n\tconst tokenSet = requireRecord(document.tokenSet, `${path}.tokenSet`);\n\trequireString(tokenSet.name, `${path}.tokenSet.name`);\n\trequireString(tokenSet.version, `${path}.tokenSet.version`);\n\trequireArray(document.componentPacks, `${path}.componentPacks`).forEach((entry, index) => {\n\t\tconst pack = requireRecord(entry, `${path}.componentPacks[${index}]`);\n\t\trequireString(pack.pack, `${path}.componentPacks[${index}].pack`);\n\t\trequireString(pack.namespace, `${path}.componentPacks[${index}].namespace`);\n\t\trequireString(pack.range, `${path}.componentPacks[${index}].range`);\n\t});\n}\n\n// ── Authorization grants structural validation ──────────────────────────────\n\n/**\n * Validate the grant envelope before semantic release checks. Grants are\n * intentionally references rather than capability names: a capability may\n * publish several views and intents with different authorization decisions.\n */\nexport function assertSduiAuthorizationGrants(\n\tvalue: unknown,\n\tpath = \"grants\",\n): asserts value is SduiAuthorizationGrants {\n\tconst grants = requireRecord(value, path);\n\tconst views = requireArray(grants.views, `${path}.views`);\n\tconst intents = requireArray(grants.intents, `${path}.intents`);\n\tfor (const [index, reference] of views.entries()) {\n\t\tconst referencePath = `${path}.views[${index}]`;\n\t\tif (!parseCapabilityRef(requireString(reference, referencePath))) {\n\t\t\tfail(referencePath, \"must be a valid capability:// reference\");\n\t\t}\n\t}\n\tfor (const [index, reference] of intents.entries()) {\n\t\tconst referencePath = `${path}.intents[${index}]`;\n\t\tif (!parseCapabilityRef(requireString(reference, referencePath))) {\n\t\t\tfail(referencePath, \"must be a valid capability:// reference\");\n\t\t}\n\t}\n\tif (grants.fragments !== undefined) {\n\t\tconst fragments = requireRecord(grants.fragments, `${path}.fragments`);\n\t\t// An object literal written `{ __proto__: { … } }` sets the prototype\n\t\t// instead of creating the entry, so the narrowing would disappear and the\n\t\t// fragment would keep release-wide grants. Fail rather than silently widen.\n\t\tconst prototype = Object.getPrototypeOf(fragments);\n\t\tif (prototype !== Object.prototype && prototype !== null) {\n\t\t\tfail(`${path}.fragments`, \"must be a plain object; a fragment grant assigned through __proto__ would be silently discarded\");\n\t\t}\n\t\tfor (const [fragmentId, declared] of Object.entries(fragments)) {\n\t\t\tconst fragmentPath = `${path}.fragments.${fragmentId}`;\n\t\t\tconst scoped = requireRecord(declared, fragmentPath);\n\t\t\tfor (const field of [\"views\", \"intents\"] as const) {\n\t\t\t\tif (scoped[field] === undefined) continue;\n\t\t\t\trequireArray(scoped[field], `${fragmentPath}.${field}`).forEach((reference, index) => {\n\t\t\t\t\tconst referencePath = `${fragmentPath}.${field}[${index}]`;\n\t\t\t\t\tif (!parseCapabilityRef(requireString(reference, referencePath))) {\n\t\t\t\t\t\tfail(referencePath, \"must be a valid capability:// reference\");\n\t\t\t\t\t}\n\t\t\t\t});\n\t\t\t}\n\t\t}\n\t}\n}\n\n/** Validate a promoted release loaded from an untyped persistence or network seam. */\nexport function assertSduiRelease(value: unknown, path = \"release\"): asserts value is SduiRelease {\n\tconst release = requireRecord(value, path);\n\tif (release.formatVersion !== 2) {\n\t\tfail(`${path}.formatVersion`, `must be 2, received ${JSON.stringify(release.formatVersion)}`);\n\t}\n\tfor (const field of [\"releaseDigest\", \"assemblyDigest\"] as const) {\n\t\tif (!/^[0-9a-f]{64}$/.test(requireString(release[field], `${path}.${field}`))) {\n\t\t\tfail(`${path}.${field}`, \"must be a lowercase SHA-256 digest\");\n\t\t}\n\t}\n\tassertSduiDocument(release.document, `${path}.document`);\n\tassertSduiTokenSet(release.tokenSet, `${path}.tokenSet`);\n\tassertSduiAuthorizationGrants(release.grants, `${path}.grants`);\n\trequireArray(release.componentPacks, `${path}.componentPacks`).forEach((value, index) => {\n\t\tconst packPath = `${path}.componentPacks[${index}]`;\n\t\tconst pack = requireRecord(value, packPath);\n\t\tfor (const field of [\"pack\", \"namespace\"] as const) {\n\t\t\tif (!/^[a-z][a-z0-9-]*$/.test(requireString(pack[field], `${packPath}.${field}`))) {\n\t\t\t\tfail(`${packPath}.${field}`, \"must be lowercase letters, numbers and hyphens\");\n\t\t\t}\n\t\t}\n\t\tif (!/^\\d+\\.\\d+\\.\\d+(?:-[0-9A-Za-z.-]+)?$/.test(\n\t\t\trequireString(pack.version, `${packPath}.version`),\n\t\t)) {\n\t\t\tfail(`${packPath}.version`, \"must be a semver version\");\n\t\t}\n\t\tconst range = requireString(pack.range, `${packPath}.range`);\n\t\tif (!parseSemverRange(range)) {\n\t\t\tfail(`${packPath}.range`, \"must be a supported semver range\");\n\t\t}\n\t\tif (!/^[0-9a-f]{64}$/.test(requireString(pack.artifactDigest, `${packPath}.artifactDigest`))) {\n\t\t\tfail(`${packPath}.artifactDigest`, \"must be a lowercase SHA-256 digest\");\n\t\t}\n\t});\n}\n","// ── Shared validation helpers ───────────────────────────────────────────────\n\nexport function fail(path: string, message: string): never {\n\tthrow new Error(`SDUI ${path} ${message}.`);\n}\n\nexport function requireString(value: unknown, path: string): string {\n\tif (typeof value !== \"string\" || !value.trim()) fail(path, \"must be a non-empty string\");\n\treturn value;\n}\n\nexport function requireRecord(value: unknown, path: string): Record<string, unknown> {\n\tif (!value || typeof value !== \"object\" || Array.isArray(value)) fail(path, \"must be an object\");\n\treturn value as Record<string, unknown>;\n}\n\nexport function requireArray(value: unknown, path: string): unknown[] {\n\tif (!Array.isArray(value)) fail(path, \"must be an array\");\n\treturn value;\n}\n\n// ── Capability reference parsing ────────────────────────────────────────────\n\nexport function parseCapabilityRef(ref: string): { namespace: string; name: string } | undefined {\n\tconst match = /^capability:\\/\\/([a-z][a-z0-9-]*)\\/(.+)$/.exec(ref);\n\tif (!match) return undefined;\n\treturn { namespace: match[1]!, name: match[2]! };\n}\n","import {\n\tassertAssemblyLockfile,\n\tcomputeUsageContractDocumentDigest,\n\tparseSemverRange,\n\tresolveVersionRange,\n} from \"@fabricorg/assembly\";\nimport { assertUsageContractDocument } from \"@fabricorg/gen-capability\";\nimport type {\n\tResolvedSduiComponentPack,\n\tSduiComponentPack,\n\tSduiDocument,\n\tSduiFinding,\n\tSduiFindingCode,\n\tSduiRelease,\n\tSduiTokenSet,\n\tSduiValidationInput,\n\tSduiValidationResult,\n} from \"./types\";\nimport { canonicalFragmentGrants, releaseDigest } from \"./digest\";\nimport { assertSduiAuthorizationGrants, assertSduiComponentPack, assertSduiDocument, assertSduiTokenSet } from \"./structural\";\nimport {\n\tbuildGrantedReferences,\n\tbuildKnownActionIntents,\n\tbuildKnownViews,\n\tvalidateIntentActionDeclarations,\n} from \"./capabilities\";\nimport { walkFragment } from \"./walker\";\n\n/**\n * Validate an SDUI document and its dependencies, producing a promoted release\n * when every check passes. This is the single build gate: it rejects unknown\n * components, incompatible packs, unauthorized data references, and mutation\n * bypasses. Returns every finding rather than throwing, so one CI run tells a\n * vertical everything it has to change. Use {@link assertSduiReleaseValid} to\n * throw on the first invalid result.\n */\nexport function validateSduiRelease(input: SduiValidationInput): SduiValidationResult {\n\t// ── Structural validation ────────────────────────────────────────────\n\tif (!input.assembly) throw new Error(\"An approved assembly lockfile is required for every SDUI release.\");\n\tassertSduiDocument(input.document);\n\tassertSduiTokenSet(input.tokenSet);\n\tfor (const pack of input.componentPacks) assertSduiComponentPack(pack);\n\tfor (const contract of input.contracts) assertUsageContractDocument(contract);\n\tassertSduiAuthorizationGrants(input.grants);\n\tassertAssemblyLockfile(input.assembly);\n\tconst contracts = input.contracts.map((document) => document.capability);\n\n\tconst findings: SduiFinding[] = [];\n\tconst add = (code: SduiFindingCode, path: string, message: string): void => {\n\t\tfindings.push({ code, path, message });\n\t};\n\n\t// ── Token set reference matches ─────────────────────────────────────\n\tif (input.document.tokenSet.name !== input.tokenSet.name) {\n\t\tadd(\"missing_token_set\", \"document.tokenSet.name\",\n\t\t\t`document references token set \"${input.document.tokenSet.name}\" but the provided set is \"${input.tokenSet.name}\"`);\n\t}\n\tif (input.document.tokenSet.version !== input.tokenSet.version) {\n\t\tadd(\"missing_token_set\", \"document.tokenSet.version\",\n\t\t\t`document references token set version \"${input.document.tokenSet.version}\" but the provided set is version \"${input.tokenSet.version}\"`);\n\t}\n\n\t// ── Component pack resolution ──────────────────────────────────────\n\tconst packsByKey = new Map<string, SduiComponentPack[]>();\n\tfor (const pack of input.componentPacks) {\n\t\tconst key = `${pack.namespace}/${pack.pack}`;\n\t\tconst list = packsByKey.get(key) ?? [];\n\t\tlist.push(pack);\n\t\tpacksByKey.set(key, list);\n\t}\n\n\tconst resolvedPacks: ResolvedSduiComponentPack[] = [];\n\tconst resolvedPackDefinitions: SduiComponentPack[] = [];\n\tfor (const ref of input.document.componentPacks) {\n\t\tconst key = `${ref.namespace}/${ref.pack}`;\n\t\tconst available = packsByKey.get(key) ?? [];\n\t\tconst range = parseSemverRange(ref.range);\n\t\tif (!range) {\n\t\t\tadd(\"incompatible_pack\", `document.componentPacks.${key}`,\n\t\t\t\t`no available version of pack \"${key}\" satisfies range \"${ref.range}\"`);\n\t\t\tcontinue;\n\t\t}\n\t\tconst resolvedVersion = resolveVersionRange(range, available.map((pack) => pack.version));\n\t\tif (!resolvedVersion) {\n\t\t\tadd(\"incompatible_pack\", `document.componentPacks.${key}`,\n\t\t\t\t`no available version of pack \"${key}\" satisfies range \"${ref.range}\"`);\n\t\t\tcontinue;\n\t\t}\n\t\tconst resolved = available.find((pack) => pack.version === resolvedVersion)!;\n\t\tresolvedPackDefinitions.push(resolved);\n\t\tresolvedPacks.push({\n\t\t\tpack: resolved.pack,\n\t\t\tnamespace: resolved.namespace,\n\t\t\tversion: resolved.version,\n\t\t\trange: ref.range,\n\t\t\tartifactDigest: resolved.artifactDigest,\n\t\t\t...(resolved.remote ? { remote: resolved.remote } : {}),\n\t\t});\n\t}\n\n\t// ── Approved assembly identity ─────────────────────────────────────\n\t{\n\t\tfor (const pack of resolvedPacks) {\n\t\t\tconst approved = input.assembly.componentPacks.find((candidate) =>\n\t\t\t\tcandidate.namespace === pack.namespace &&\n\t\t\t\tcandidate.pack === pack.pack &&\n\t\t\t\tcandidate.version === pack.version &&\n\t\t\t\tcandidate.artifactDigest === pack.artifactDigest\n\t\t\t);\n\t\t\tif (!approved) {\n\t\t\t\tadd(\"component_pack_not_in_assembly\", `componentPacks.${pack.namespace}/${pack.pack}`,\n\t\t\t\t\t`pack \"${pack.namespace}/${pack.pack}@${pack.version}\" with artifact digest \"${pack.artifactDigest}\" is not in assembly \"${input.assembly.assemblyDigest}\"`);\n\t\t\t\tcontinue;\n\t\t\t}\n\n\t\t\t// A federated pack executes whatever its remote entry serves. Unless\n\t\t\t// the entry and its integrity are the ones assembly locked, the\n\t\t\t// approved artifact digest says nothing about what actually runs.\n\t\t\tconst declaredRemote = resolvedPackDefinitions.find((definition) =>\n\t\t\t\tdefinition.namespace === pack.namespace &&\n\t\t\t\tdefinition.pack === pack.pack &&\n\t\t\t\tdefinition.version === pack.version &&\n\t\t\t\tdefinition.artifactDigest === pack.artifactDigest)?.remote;\n\t\t\tconst remotePath = `componentPacks.${pack.namespace}/${pack.pack}.remote`;\n\t\t\tif (declaredRemote && !approved.remote) {\n\t\t\t\tadd(\"remote_not_locked\", remotePath,\n\t\t\t\t\t`pack \"${pack.namespace}/${pack.pack}\" is delivered as a federated remote, which assembly \"${input.assembly.assemblyDigest}\" has not locked`);\n\t\t\t} else if (declaredRemote && approved.remote) {\n\t\t\t\tif (declaredRemote.entry !== approved.remote.entry) {\n\t\t\t\t\tadd(\"remote_not_locked\", `${remotePath}.entry`,\n\t\t\t\t\t\t`remote entry \"${declaredRemote.entry}\" does not match the locked entry \"${approved.remote.entry}\"`);\n\t\t\t\t}\n\t\t\t\tif (declaredRemote.integrity !== approved.remote.integrity) {\n\t\t\t\t\tadd(\"remote_not_locked\", `${remotePath}.integrity`,\n\t\t\t\t\t\t`remote integrity \"${declaredRemote.integrity}\" does not match the locked integrity \"${approved.remote.integrity}\"`);\n\t\t\t\t}\n\t\t\t\tif (canonicalExposes(declaredRemote.exposes) !== canonicalExposes(approved.remote.exposes)) {\n\t\t\t\t\tadd(\"remote_not_locked\", `${remotePath}.exposes`,\n\t\t\t\t\t\t\"remote exposed modules do not match the locked mapping\");\n\t\t\t\t}\n\t\t\t} else if (!declaredRemote && approved.remote) {\n\t\t\t\tadd(\"remote_not_locked\", remotePath,\n\t\t\t\t\t`assembly \"${input.assembly.assemblyDigest}\" locks a federated remote for \"${pack.namespace}/${pack.pack}\", but the supplied pack declares none`);\n\t\t\t}\n\t\t}\n\t\tfor (const document of input.contracts) {\n\t\t\tconst approved = input.assembly.capabilities.find((capability) =>\n\t\t\t\tcapability.namespace === document.capability.namespace &&\n\t\t\t\tcapability.usageContractDigest === computeUsageContractDocumentDigest(document)\n\t\t\t);\n\t\t\tif (!approved) {\n\t\t\t\tadd(\"capability_contract_not_in_assembly\", `contracts.${document.capability.namespace}`,\n\t\t\t\t\t`contract \"${document.capability.namespace}\" is not the generated usage-contract document approved by assembly \"${input.assembly.assemblyDigest}\"`);\n\t\t\t}\n\t\t}\n\t}\n\n\t// ── Build known component set from resolved packs ───────────────────\n\tconst knownComponents = new Set<string>();\n\tfor (const pack of resolvedPackDefinitions) {\n\t\tfor (const name of Object.keys(pack.components)) {\n\t\t\tknownComponents.add(`${pack.namespace}.${name}`);\n\t\t}\n\t}\n\tconst coreComponents = new Set(input.coreComponents ?? []);\n\n\t// ── Build known views and action intents from contracts ─────────────\n\tconst knownViews = buildKnownViews(contracts);\n\tconst knownIntents = buildKnownActionIntents(contracts);\n\tconst grantedViews = buildGrantedReferences(input.grants.views, \"grants.views\");\n\tconst grantedIntents = buildGrantedReferences(input.grants.intents, \"grants.intents\");\n\n\t// ── Verify experience intents resolve to governed actions ───────────\n\tvalidateIntentActionDeclarations(contracts, add);\n\n\t// ── Per-fragment narrowing may only narrow ──────────────────────────\n\t// Intersection in the walker already makes an out-of-release reference\n\t// unusable; reporting it here turns a silently ineffective grant into an\n\t// authoring error, which is what the author actually needs to know.\n\tconst fragmentGrants = new Map<string, { views?: readonly string[]; intents?: readonly string[] }>();\n\tfor (const [fragmentId, declared] of Object.entries(input.grants.fragments ?? {})) {\n\t\tfor (const view of declared.views ?? []) {\n\t\t\tif (!grantedViews.has(view)) {\n\t\t\t\tadd(\"fragment_grant_exceeds_release\", `grants.fragments.${fragmentId}.views`,\n\t\t\t\t\t`fragment \"${fragmentId}\" is granted view \"${view}\", which the release itself does not grant`);\n\t\t\t}\n\t\t}\n\t\tfor (const intent of declared.intents ?? []) {\n\t\t\tif (!grantedIntents.has(intent)) {\n\t\t\t\tadd(\"fragment_grant_exceeds_release\", `grants.fragments.${fragmentId}.intents`,\n\t\t\t\t\t`fragment \"${fragmentId}\" is granted intent \"${intent}\", which the release itself does not grant`);\n\t\t\t}\n\t\t}\n\t\tfragmentGrants.set(fragmentId, declared);\n\t}\n\n\t// ── Walk the default tree and every selectable variant ──────────────\n\t// Each tree gets its own id set: ids must be unique within a tree, but two\n\t// variants of the same page naturally reuse them, and only one ever renders.\n\tconst walkTree = (root: typeof input.document.root, path: string): void => {\n\t\twalkFragment(root, path, {\n\t\t\tids: new Set(),\n\t\t\tknownComponents,\n\t\t\tknownViews,\n\t\t\tgrantedViews,\n\t\t\tknownIntents,\n\t\t\tgrantedIntents,\n\t\t\tfragmentGrants,\n\t\t\tcoreComponents,\n\t\t\tfindings,\n\t\t\tadd,\n\t\t});\n\t};\n\n\twalkTree(input.document.root, \"document.root\");\n\n\tconst seenVariantIds = new Set<string>();\n\t(input.document.variants ?? []).forEach((variant, index) => {\n\t\tif (seenVariantIds.has(variant.id)) {\n\t\t\tadd(\"duplicate_variant_id\", `document.variants[${index}].id`,\n\t\t\t\t`variant id \"${variant.id}\" is declared more than once`);\n\t\t} else {\n\t\t\tseenVariantIds.add(variant.id);\n\t\t}\n\t\twalkTree(variant.root, `document.variants[${index}].root`);\n\t});\n\n\t// ── Produce release ─────────────────────────────────────────────────\n\tif (findings.length > 0) {\n\t\treturn { valid: false, findings, release: undefined };\n\t}\n\n\tconst release: SduiRelease = {\n\t\tformatVersion: 2,\n\t\treleaseDigest: releaseDigest(\n\t\t\tinput.document,\n\t\t\tinput.tokenSet,\n\t\t\tresolvedPacks,\n\t\t\tinput.grants,\n\t\t\tinput.assembly.assemblyDigest,\n\t\t),\n\t\tassemblyDigest: input.assembly.assemblyDigest,\n\t\tdocument: input.document,\n\t\ttokenSet: input.tokenSet,\n\t\tcomponentPacks: [...resolvedPacks].sort((a, b) => {\n\t\t\tconst key = (e: ResolvedSduiComponentPack) => `${e.namespace}/${e.pack}`;\n\t\t\treturn key(a) < key(b) ? -1 : key(a) > key(b) ? 1 : 0;\n\t\t}),\n\t\tgrants: {\n\t\t\tviews: [...input.grants.views].sort(),\n\t\t\tintents: [...input.grants.intents].sort(),\n\t\t\t...(input.grants.fragments ? { fragments: canonicalFragmentGrants(input.grants.fragments) } : {}),\n\t\t},\n\t};\n\n\treturn { valid: true, findings: [], release };\n}\n\n/**\n * Throw with every finding listed, for use as a build step. Returns the\n * promoted release when valid.\n */\nexport function assertSduiReleaseValid(input: SduiValidationInput): SduiRelease {\n\tconst result = validateSduiRelease(input);\n\tif (result.valid) return result.release!;\n\tthrow new Error([\n\t\t`SDUI release \"${input.document.name}@${input.document.version}\" is not valid:`,\n\t\t...result.findings.map((finding) => `  - [${finding.code}] ${finding.path}: ${finding.message}`),\n\t].join(\"\\n\"));\n}\n\n\n/** Stable comparison key for an exposed-module mapping. */\nfunction canonicalExposes(exposes: Record<string, string>): string {\n\treturn JSON.stringify(\n\t\tObject.keys(exposes).sort().map((component) => [component, exposes[component]]),\n\t);\n}\n","import { createHash } from \"node:crypto\";\nimport type {\n\tResolvedSduiComponentPack,\n\tSduiAuthorizationGrants,\n\tSduiComponentPackReference,\n\tSduiDocument,\n\tSduiRelease,\n\tSduiTokenSet,\n} from \"./types\";\nimport { assertSduiRelease } from \"./structural\";\n\n// ── Stable serialization ───────────────────────────────────────────────────\n\nfunction sortJson(value: unknown): unknown {\n\tif (Array.isArray(value)) return value.map(sortJson);\n\tif (value && typeof value === \"object\") {\n\t\treturn Object.fromEntries(\n\t\t\tObject.entries(value as Record<string, unknown>)\n\t\t\t\t.sort(([left], [right]) => (left < right ? -1 : left > right ? 1 : 0))\n\t\t\t\t.map(([key, child]) => [key, sortJson(child)]),\n\t\t);\n\t}\n\treturn value;\n}\n\nfunction stableStringify(value: unknown): string {\n\treturn JSON.stringify(sortJson(value));\n}\n\n/**\n * Canonical form for per-fragment grants: fragment ids and their reference\n * lists in sorted order.\n *\n * The digest and the promoted release must both use this. Hashing the caller's\n * raw grants while storing a canonicalised copy produces a release that fails\n * its own integrity check the moment a hand-authored grant file is not already\n * sorted. `Object.fromEntries` is deliberate: plain assignment to a key named\n * `__proto__` sets the prototype instead of recording the entry, which would\n * drop that fragment's narrowing from the release.\n */\nexport function canonicalFragmentGrants(\n\tfragments: Record<string, { views?: readonly string[]; intents?: readonly string[] }> | undefined,\n): Record<string, { views?: string[]; intents?: string[] }> {\n\tif (!fragments) return {};\n\treturn Object.fromEntries(\n\t\tObject.keys(fragments)\n\t\t\t.sort()\n\t\t\t.map((fragmentId) => {\n\t\t\t\tconst declared = fragments[fragmentId] as { views?: readonly string[]; intents?: readonly string[] };\n\t\t\t\treturn [fragmentId, {\n\t\t\t\t\t...(declared.views ? { views: [...declared.views].sort() } : {}),\n\t\t\t\t\t...(declared.intents ? { intents: [...declared.intents].sort() } : {}),\n\t\t\t\t}];\n\t\t\t}),\n\t);\n}\n\nexport function releaseDigest(\n\tdocument: SduiDocument,\n\ttokenSet: SduiTokenSet,\n\tcomponentPacks: ResolvedSduiComponentPack[],\n\tgrants: SduiAuthorizationGrants,\n\tassemblyDigest: string,\n): string {\n\tconst canonical = stableStringify({\n\t\tdocument: {\n\t\t\tformatVersion: document.formatVersion,\n\t\t\tname: document.name,\n\t\t\tversion: document.version,\n\t\t\troot: document.root,\n\t\t\t// Selectable trees, so two documents differing only in their variants\n\t\t\t// must not share a digest. Sorted by id, because reordering the same\n\t\t\t// set does not change which trees can render. Omitted entirely when\n\t\t\t// absent, so a document that declares none digests exactly as it did\n\t\t\t// before variants existed.\n\t\t\t...(document.variants?.length\n\t\t\t\t? {\n\t\t\t\t\tvariants: [...document.variants].sort((left, right) =>\n\t\t\t\t\t\tleft.id < right.id ? -1 : left.id > right.id ? 1 : 0),\n\t\t\t\t}\n\t\t\t\t: {}),\n\t\t\ttokenSet: document.tokenSet,\n\t\t\tcomponentPacks: [...document.componentPacks].sort((a: SduiComponentPackReference, b: SduiComponentPackReference) => {\n\t\t\t\tconst key = (e: SduiComponentPackReference) => `${e.namespace}/${e.pack}`;\n\t\t\t\treturn key(a) < key(b) ? -1 : key(a) > key(b) ? 1 : 0;\n\t\t\t}),\n\t\t},\n\t\ttokenSet: {\n\t\t\tformatVersion: tokenSet.formatVersion,\n\t\t\tname: tokenSet.name,\n\t\t\tversion: tokenSet.version,\n\t\t\ttokens: tokenSet.tokens,\n\t\t},\n\t\tcomponentPacks: [...componentPacks].sort((a, b) => {\n\t\t\tconst key = (e: ResolvedSduiComponentPack) => `${e.namespace}/${e.pack}`;\n\t\t\treturn key(a) < key(b) ? -1 : key(a) > key(b) ? 1 : 0;\n\t\t}),\n\t\tgrants: {\n\t\t\tviews: [...grants.views].sort(),\n\t\t\tintents: [...grants.intents].sort(),\n\t\t\t// Omitted when absent for the same reason as variants: a release with\n\t\t\t// no per-fragment narrowing must digest as it did before the field\n\t\t\t// existed, or every previously promoted release stops verifying.\n\t\t\t...(grants.fragments && Object.keys(grants.fragments).length\n\t\t\t\t? { fragments: canonicalFragmentGrants(grants.fragments) }\n\t\t\t\t: {}),\n\t\t},\n\t\tassemblyDigest,\n\t});\n\treturn createHash(\"sha256\").update(canonical).digest(\"hex\");\n}\n\n/**\n * Compute the canonical release digest for a valid release. Two releases with\n * the same document, token set, and resolved packs produce the same digest,\n * so a channel can verify it is consuming the exact release it was built for.\n */\nexport function computeReleaseDigest(\n\tdocument: SduiDocument,\n\ttokenSet: SduiTokenSet,\n\tcomponentPacks: ResolvedSduiComponentPack[],\n\tgrants: SduiAuthorizationGrants,\n\tassemblyDigest: string,\n): string {\n\treturn releaseDigest(document, tokenSet, componentPacks, grants, assemblyDigest);\n}\n\n/** Reject promoted release content that no longer matches its immutable digest. */\nexport function assertSduiReleaseIntegrity(release: SduiRelease): void {\n\tassertSduiRelease(release);\n\tconst expected = releaseDigest(\n\t\trelease.document,\n\t\trelease.tokenSet,\n\t\trelease.componentPacks,\n\t\trelease.grants,\n\t\trelease.assemblyDigest,\n\t);\n\tif (release.releaseDigest !== expected) {\n\t\tthrow new Error(`SDUI release releaseDigest does not match promoted content; expected \"${expected}\".`);\n\t}\n}\n","import type { UsageContract } from \"@fabricorg/gen-capability\";\nimport type { SduiFindingCode } from \"./types\";\nimport { fail, parseCapabilityRef } from \"./helpers\";\n\nexport function buildKnownViews(contracts: readonly UsageContract[]): Set<string> {\n\tconst views = new Set<string>();\n\tfor (const contract of contracts) {\n\t\tfor (const view of contract.views) {\n\t\t\tconst name = view.name.startsWith(`${contract.namespace}/`)\n\t\t\t\t? view.name.slice(contract.namespace.length + 1)\n\t\t\t\t: view.name;\n\t\t\tviews.add(`${contract.namespace}/${name}`);\n\t\t}\n\t}\n\treturn views;\n}\n\nexport function buildKnownActionIntents(contracts: readonly UsageContract[]): Set<string> {\n\tconst intents = new Set<string>();\n\tfor (const contract of contracts) {\n\t\tconst experience = contract.extensions?.[\"fabric.experience/v1\"] as\n\t\t\t| { actionIntents?: Array<{ name: string; actionId: string }> }\n\t\t\t| undefined;\n\t\tfor (const intent of experience?.actionIntents ?? []) {\n\t\t\t// The intent name is dotted (e.g., \"orders.submit\"); the capability\n\t\t\t// ref uses the part after the namespace prefix.\n\t\t\tconst shortName = intent.name.startsWith(`${contract.namespace}.`)\n\t\t\t\t? intent.name.slice(contract.namespace.length + 1)\n\t\t\t\t: intent.name;\n\t\t\tintents.add(`${contract.namespace}/${shortName}`);\n\t\t}\n\t}\n\treturn intents;\n}\n\nexport function buildGrantedReferences(\n\treferences: readonly string[],\n\tpath: string,\n): Set<string> {\n\tconst granted = new Set<string>();\n\tfor (const [index, reference] of references.entries()) {\n\t\tconst referencePath = `${path}[${index}]`;\n\t\tif (!parseCapabilityRef(reference)) {\n\t\t\tfail(referencePath, \"must be a valid capability:// reference\");\n\t\t}\n\t\tgranted.add(reference);\n\t}\n\treturn granted;\n}\n\nexport function validateIntentActionDeclarations(\n\tcontracts: readonly UsageContract[],\n\tadd: (code: SduiFindingCode, path: string, message: string) => void,\n): void {\n\tfor (const contract of contracts) {\n\t\tconst experience = contract.extensions?.[\"fabric.experience/v1\"] as\n\t\t\t| { actionIntents?: Array<{ name: string; actionId: string }> }\n\t\t\t| undefined;\n\t\tconst actions = new Set(contract.actions.map((action) => action.actionId));\n\t\tfor (const [index, intent] of (experience?.actionIntents ?? []).entries()) {\n\t\t\tif (!actions.has(intent.actionId)) {\n\t\t\t\tadd(\n\t\t\t\t\t\"intent_action_not_found\",\n\t\t\t\t\t`contracts.${contract.namespace}.actionIntents[${index}].actionId`,\n\t\t\t\t\t`intent \"${intent.name}\" references action \"${intent.actionId}\", which the capability does not declare`,\n\t\t\t\t);\n\t\t\t}\n\t\t}\n\t}\n}\n","import type { SduiCapabilityRef, SduiFinding, SduiFindingCode, SduiFragment, SduiFragmentValue } from \"./types\";\nimport { parseCapabilityRef } from \"./helpers\";\n\n/** Deep enough for any authored document; shallow enough to bound a cycle. */\nconst MAX_PROP_DEPTH = 64;\n\n// ── Fragment tree walker ────────────────────────────────────────────────────\n\nexport interface FragmentWalkContext {\n\tids: Set<string>;\n\tknownComponents: Set<string>;\n\tknownViews: Set<string>;\n\t/** Grants in force for the fragment being walked, already narrowed. */\n\tgrantedViews: ReadonlySet<string>;\n\tknownIntents: Set<string>;\n\tgrantedIntents: ReadonlySet<string>;\n\t/** Per-fragment narrowing declared by the release, keyed by fragment id. */\n\tfragmentGrants?: ReadonlyMap<string, { views?: readonly string[]; intents?: readonly string[] }>;\n\tcoreComponents: Set<string>;\n\tfindings: SduiFinding[];\n\tadd: (code: SduiFindingCode, path: string, message: string) => void;\n}\n\nexport function isCapabilityRefValue(value: unknown): value is SduiCapabilityRef {\n\treturn (\n\t\tvalue !== null &&\n\t\ttypeof value === \"object\" &&\n\t\t!Array.isArray(value) &&\n\t\ttypeof (value as SduiCapabilityRef).$ref === \"string\" &&\n\t\t(value as SduiCapabilityRef).$ref.startsWith(\"capability://\")\n\t);\n}\n\n/**\n * Intersect the grants in force with what a fragment declares. Intersection\n * rather than replacement is what makes a fragment entry unable to widen: a\n * reference the release never granted cannot re-enter through a subtree.\n */\nfunction narrowGrants(current: ReadonlySet<string>, declared: readonly string[] | undefined): ReadonlySet<string> {\n\tif (declared === undefined) return current;\n\treturn new Set(declared.filter((reference) => current.has(reference)));\n}\n\nexport function walkFragment(fragment: SduiFragment, path: string, context: FragmentWalkContext): void {\n\t// ── Narrow grants for this fragment and everything beneath it ───────\n\tconst declared = context.fragmentGrants?.get(fragment.id);\n\tconst scoped: FragmentWalkContext = declared\n\t\t? {\n\t\t\t...context,\n\t\t\tgrantedViews: narrowGrants(context.grantedViews, declared.views),\n\t\t\tgrantedIntents: narrowGrants(context.grantedIntents, declared.intents),\n\t\t}\n\t\t: context;\n\n\t// ── Duplicate fragment IDs ──────────────────────────────────────────\n\tif (scoped.ids.has(fragment.id)) {\n\t\tscoped.add(\"duplicate_fragment_id\", `${path}.id`, `fragment id \"${fragment.id}\" is declared more than once`);\n\t} else {\n\t\tscoped.ids.add(fragment.id);\n\t}\n\n\t// ── Unknown components ──────────────────────────────────────────────\n\tif (fragment.component !== undefined) {\n\t\tconst separator = fragment.component.indexOf(\".\");\n\t\tif (separator === -1) {\n\t\t\tif (!scoped.coreComponents.has(fragment.component)) {\n\t\t\t\tscoped.add(\"unknown_component\", `${path}.component`,\n\t\t\t\t\t`component \"${fragment.component}\" is not a core component or in any declared pack`);\n\t\t\t}\n\t\t} else if (!scoped.knownComponents.has(fragment.component)) {\n\t\t\tscoped.add(\"unknown_component\", `${path}.component`,\n\t\t\t\t`component \"${fragment.component}\" is not in any declared component pack`);\n\t\t}\n\t}\n\n\t// ── Unauthorized data references ────────────────────────────────────\n\tif (fragment.dataRef !== undefined) {\n\t\tconst ref = parseCapabilityRef(fragment.dataRef);\n\t\tif (!ref) {\n\t\t\tscoped.add(\"unauthorized_data_ref\", `${path}.dataRef`,\n\t\t\t\t`\"${fragment.dataRef}\" is not a valid capability:// view reference`);\n\t\t} else if (!scoped.knownViews.has(`${ref.namespace}/${ref.name}`)) {\n\t\t\tscoped.add(\"unauthorized_data_ref\", `${path}.dataRef`,\n\t\t\t\t`fragment references view \"${fragment.dataRef}\" which no known capability publishes`);\n\t\t} else if (!scoped.grantedViews.has(fragment.dataRef)) {\n\t\t\tscoped.add(\"denied_view_ref\", `${path}.dataRef`,\n\t\t\t\t`fragment references view \"${fragment.dataRef}\" which is published but not granted to this release`);\n\t\t}\n\t}\n\n\t// ── Mutation bypass: actions must be capability action-intent refs ──\n\tfor (const [name, actionRef] of Object.entries(fragment.actions ?? {})) {\n\t\tconst actionPath = `${path}.actions.${name}`;\n\t\tconst ref = parseCapabilityRef(actionRef.intent);\n\t\tif (!ref) {\n\t\t\tscoped.add(\"mutation_bypass\", `${actionPath}.intent`,\n\t\t\t\t`action \"${name}\" intent \"${actionRef.intent}\" is not a capability:// reference; direct mutations bypass governance`);\n\t\t\tcontinue;\n\t\t}\n\t\tif (!scoped.knownIntents.has(`${ref.namespace}/${ref.name}`)) {\n\t\t\tscoped.add(\"mutation_bypass\", `${actionPath}.intent`,\n\t\t\t\t`action \"${name}\" references intent \"${actionRef.intent}\" which no known capability declares`);\n\t\t} else if (!scoped.grantedIntents.has(actionRef.intent)) {\n\t\t\tscoped.add(\"denied_intent_ref\", `${actionPath}.intent`,\n\t\t\t\t`action \"${name}\" references intent \"${actionRef.intent}\" which is published but not granted to this release`);\n\t\t}\n\t\tif (actionRef.params !== undefined) {\n\t\t\tcheckPropValues(actionRef.params, `${actionPath}.params`, scoped);\n\t\t}\n\t}\n\n\t// ── Check prop values for unauthorized data refs ───────────────────\n\tif (fragment.props !== undefined) {\n\t\tcheckPropValues(fragment.props, `${path}.props`, scoped);\n\t}\n\n\t// ── Recurse into children ───────────────────────────────────────────\n\tif (fragment.children !== undefined) {\n\t\tfragment.children.forEach((child, index) => {\n\t\t\twalkFragment(child, `${path}.children[${index}]`, scoped);\n\t\t});\n\t}\n}\n\n/**\n * Check one prop value wherever it sits: at a key, inside an array, or nested\n * in either. Every container routes back through this function, so a\n * capability reference resolves against the grant list at any depth. Checking\n * only at key positions leaves array elements unvalidated, and an array is the\n * ordinary shape for list props, so that gap is a grant bypass rather than an\n * edge case.\n */\nexport function checkValue(value: SduiFragmentValue, path: string, context: FragmentWalkContext, depth = 0): void {\n\tif (depth > MAX_PROP_DEPTH) {\n\t\tcontext.add(\"invalid_fragment\", path,\n\t\t\t`prop nesting exceeds ${MAX_PROP_DEPTH} levels; a cyclic or pathologically deep value cannot be checked`);\n\t\treturn;\n\t}\n\tif (isCapabilityRefValue(value)) {\n\t\tconst ref = parseCapabilityRef(value.$ref);\n\t\tif (!ref) {\n\t\t\tcontext.add(\"unauthorized_data_ref\", `${path}.$ref`,\n\t\t\t\t`\"${value.$ref}\" is not a valid capability:// view reference`);\n\t\t} else if (!context.knownViews.has(`${ref.namespace}/${ref.name}`)) {\n\t\t\tcontext.add(\"unauthorized_data_ref\", `${path}.$ref`,\n\t\t\t\t`prop references view \"${value.$ref}\" which no known capability publishes`);\n\t\t} else if (!context.grantedViews.has(value.$ref)) {\n\t\t\tcontext.add(\"denied_view_ref\", `${path}.$ref`,\n\t\t\t\t`prop references view \"${value.$ref}\" which is published but not granted to this release`);\n\t\t}\n\t\t// A reference object is not a leaf. Returning here would let a granted\n\t\t// reference shield ungranted ones parked beside it on the same object.\n\t\tfor (const [key, sibling] of Object.entries(value)) {\n\t\t\tif (key === \"$ref\") continue;\n\t\t\tcheckValue(sibling as SduiFragmentValue, `${path}.${key}`, context, depth + 1);\n\t\t}\n\t\treturn;\n\t}\n\tif (Array.isArray(value)) {\n\t\tvalue.forEach((item, index) => checkValue(item, `${path}[${index}]`, context, depth + 1));\n\t\treturn;\n\t}\n\tif (value !== null && typeof value === \"object\") {\n\t\tcheckPropValues(value as Record<string, SduiFragmentValue>, path, context, depth + 1);\n\t}\n}\n\nexport function checkPropValues(props: Record<string, SduiFragmentValue>, path: string, context: FragmentWalkContext, depth = 0): void {\n\tfor (const [key, value] of Object.entries(props)) {\n\t\tcheckValue(value, `${path}.${key}`, context, depth);\n\t}\n}\n","import type { SduiFragment, SduiRelease } from \"./types\";\nimport { assertSduiReleaseIntegrity } from \"./digest\";\n\n// ── Channel consumption contract ────────────────────────────────────────────\n\n/**\n * A channel is a rendering target (web, mobile, CLI). A channel consumes a\n * validated release and resolves capability references through its own host\n * adapters. Reads go through `ProjectionHost`; actions go through\n * `PlatformHost`. The channel never interprets or bypasses capability\n * references — it renders fragments and forwards action intents.\n */\nexport interface SduiChannel {\n\tid: string;\n\t/** Core components this channel renderer implements. */\n\tcoreComponents: readonly string[];\n\t/** Consume a validated release; returns the release if the channel's core\n\t *  vocabulary covers every core component the document uses. */\n\tconsume(release: SduiRelease): SduiChannelConsumptionResult;\n}\n\nexport interface SduiChannelConsumptionResult {\n\t/** The release the channel consumed. */\n\trelease: SduiRelease;\n\t/** Whether the channel's core vocabulary covers the document. */\n\tcompatible: boolean;\n\t/** Core components the document uses that the channel does not implement. */\n\tmissingCoreComponents: string[];\n}\n\n/**\n * Create a channel that consumes a release. The channel verifies that every\n * core component the document references is in its vocabulary; pack-namespaced\n * components are resolved from the release's locked packs, not the channel.\n */\nexport function createSduiChannel(id: string, coreComponents: readonly string[]): SduiChannel {\n\treturn {\n\t\tid,\n\t\tcoreComponents,\n\t\tconsume(release) {\n\t\t\tassertSduiReleaseIntegrity(release);\n\t\t\tconst used = collectCoreComponents(release.document.root);\n\t\t\tfor (const variant of release.document.variants ?? []) {\n\t\t\t\tfor (const component of collectCoreComponents(variant.root)) used.add(component);\n\t\t\t}\n\t\t\tconst missing = [...used].filter((component) => !coreComponents.includes(component));\n\t\t\treturn {\n\t\t\t\trelease,\n\t\t\t\tcompatible: missing.length === 0,\n\t\t\t\tmissingCoreComponents: missing,\n\t\t\t};\n\t\t},\n\t};\n}\n\nfunction collectCoreComponents(fragment: SduiFragment): Set<string> {\n\tconst used = new Set<string>();\n\tif (fragment.component !== undefined && !fragment.component.includes(\".\")) {\n\t\tused.add(fragment.component);\n\t}\n\tif (fragment.children !== undefined) {\n\t\tfor (const child of fragment.children) {\n\t\t\tfor (const component of collectCoreComponents(child)) used.add(component);\n\t\t}\n\t}\n\treturn used;\n}\n","import type { PortableJsonSchema } from \"@fabricorg/platform\";\n\n// ── JSON Schema for the release document (machine-readable) ─────────────────\n\nexport const SDUI_DOCUMENT_JSON_SCHEMA: PortableJsonSchema = {\n\t$schema: \"https://json-schema.org/draft/2020-12/schema\",\n\ttitle: \"Fabric SDUI document\",\n\ttype: \"object\",\n\trequired: [\"formatVersion\", \"name\", \"version\", \"root\", \"tokenSet\", \"componentPacks\"],\n\tproperties: {\n\t\tformatVersion: { type: \"integer\", enum: [1] },\n\t\tname: { type: \"string\", pattern: \"^[a-z][a-z0-9-]*$\" },\n\t\tversion: { type: \"string\", pattern: \"^\\\\d+\\\\.\\\\d+\\\\.\\\\d+\" },\n\t\troot: { type: \"object\" },\n\t\ttokenSet: { type: \"object\", required: [\"name\", \"version\"] },\n\t\tcomponentPacks: { type: \"array\" },\n\t},\n} as unknown as PortableJsonSchema;\n\nexport const SDUI_RELEASE_JSON_SCHEMA: PortableJsonSchema = {\n\t$schema: \"https://json-schema.org/draft/2020-12/schema\",\n\ttitle: \"Fabric SDUI promoted release\",\n\ttype: \"object\",\n\trequired: [\"formatVersion\", \"releaseDigest\", \"assemblyDigest\", \"document\", \"tokenSet\", \"componentPacks\", \"grants\"],\n\tproperties: {\n\t\tformatVersion: { type: \"integer\", enum: [2] },\n\t\treleaseDigest: { type: \"string\", pattern: \"^[0-9a-f]{64}$\" },\n\t\tassemblyDigest: { type: \"string\", pattern: \"^[0-9a-f]{64}$\" },\n\t\tdocument: { type: \"object\" },\n\t\ttokenSet: { type: \"object\" },\n\t\tcomponentPacks: { type: \"array\" },\n\t\tgrants: { type: \"object\", required: [\"views\", \"intents\"] },\n\t},\n} as unknown as PortableJsonSchema;\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACQO,IAAM,+BAA+B;AAKrC,IAAM,gCAAgC;AAKtC,IAAM,qCAAqC;AAK3C,IAAM,8BAA8B;;;ACvB3C,sBAAkE;AAClE,sBAAiC;;;ACC1B,SAAS,KAAK,MAAc,SAAwB;AAC1D,QAAM,IAAI,MAAM,QAAQ,IAAI,IAAI,OAAO,GAAG;AAC3C;AAEO,SAAS,cAAc,OAAgB,MAAsB;AACnE,MAAI,OAAO,UAAU,YAAY,CAAC,MAAM,KAAK,EAAG,MAAK,MAAM,4BAA4B;AACvF,SAAO;AACR;AAEO,SAAS,cAAc,OAAgB,MAAuC;AACpF,MAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,KAAK,EAAG,MAAK,MAAM,mBAAmB;AAC/F,SAAO;AACR;AAEO,SAAS,aAAa,OAAgB,MAAyB;AACrE,MAAI,CAAC,MAAM,QAAQ,KAAK,EAAG,MAAK,MAAM,kBAAkB;AACxD,SAAO;AACR;AAIO,SAAS,mBAAmB,KAA8D;AAChG,QAAM,QAAQ,2CAA2C,KAAK,GAAG;AACjE,MAAI,CAAC,MAAO,QAAO;AACnB,SAAO,EAAE,WAAW,MAAM,CAAC,GAAI,MAAM,MAAM,CAAC,EAAG;AAChD;;;ADZA,IAAM,cAAc,oBAAI,IAAmB,CAAC,SAAS,WAAW,YAAY,cAAc,UAAU,UAAU,QAAQ,CAAC;AAEhH,SAAS,mBAAmB,OAAgB,OAAO,YAA2C;AACpG,QAAM,WAAW,cAAc,OAAO,IAAI;AAC1C,MAAI,SAAS,kBAAkB,GAAG;AACjC,SAAK,GAAG,IAAI,kBAAkB,uBAAuB,KAAK,UAAU,SAAS,aAAa,CAAC,EAAE;AAAA,EAC9F;AACA,MAAI,CAAC,oBAAoB,KAAK,cAAc,SAAS,MAAM,GAAG,IAAI,OAAO,CAAC,GAAG;AAC5E,SAAK,GAAG,IAAI,SAAS,gDAAgD;AAAA,EACtE;AACA,MAAI,CAAC,sCAAsC,KAAK,cAAc,SAAS,SAAS,GAAG,IAAI,UAAU,CAAC,GAAG;AACpG,SAAK,GAAG,IAAI,YAAY,0BAA0B;AAAA,EACnD;AACA,QAAM,SAAS,cAAc,SAAS,QAAQ,GAAG,IAAI,SAAS;AAC9D,aAAW,CAAC,MAAM,KAAK,KAAK,OAAO,QAAQ,MAAM,GAAG;AACnD,UAAM,YAAY,GAAG,IAAI,WAAW,IAAI;AACxC,QAAI,CAAC,oBAAoB,KAAK,IAAI,EAAG,MAAK,WAAW,2DAA2D;AAChH,UAAM,QAAQ,cAAc,OAAO,SAAS;AAC5C,UAAM,OAAO,cAAc,MAAM,MAAM,GAAG,SAAS,OAAO;AAC1D,QAAI,CAAC,YAAY,IAAI,IAAqB,EAAG,MAAK,GAAG,SAAS,SAAS,kBAAkB,CAAC,GAAG,WAAW,EAAE,KAAK,IAAI,CAAC,EAAE;AACtH,kBAAc,MAAM,OAAO,GAAG,SAAS,QAAQ;AAAA,EAChD;AACD;AAIO,SAAS,wBAAwB,OAAgB,OAAO,iBAAqD;AACnH,QAAM,OAAO,cAAc,OAAO,IAAI;AACtC,MAAI,KAAK,kBAAkB,GAAG;AAC7B,SAAK,GAAG,IAAI,kBAAkB,uBAAuB,KAAK,UAAU,KAAK,aAAa,CAAC,EAAE;AAAA,EAC1F;AACA,MAAI,CAAC,oBAAoB,KAAK,cAAc,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,GAAG;AACxE,SAAK,GAAG,IAAI,SAAS,gDAAgD;AAAA,EACtE;AACA,MAAI,CAAC,oBAAoB,KAAK,cAAc,KAAK,WAAW,GAAG,IAAI,YAAY,CAAC,GAAG;AAClF,SAAK,GAAG,IAAI,cAAc,gDAAgD;AAAA,EAC3E;AACA,MAAI,CAAC,sCAAsC,KAAK,cAAc,KAAK,SAAS,GAAG,IAAI,UAAU,CAAC,GAAG;AAChG,SAAK,GAAG,IAAI,YAAY,0BAA0B;AAAA,EACnD;AACA,MAAI,CAAC,iBAAiB,KAAK,cAAc,KAAK,gBAAgB,GAAG,IAAI,iBAAiB,CAAC,GAAG;AACzF,SAAK,GAAG,IAAI,mBAAmB,oCAAoC;AAAA,EACpE;AACA,MAAI,KAAK,WAAW,QAAW;AAC9B,UAAM,SAAS,cAAc,KAAK,QAAQ,GAAG,IAAI,SAAS;AAC1D,kBAAc,OAAO,OAAO,GAAG,IAAI,eAAe;AAClD,QAAI,CAAC,0CAA0C,KAAK,cAAc,OAAO,WAAW,GAAG,IAAI,mBAAmB,CAAC,GAAG;AACjH,WAAK,GAAG,IAAI,qBAAqB,6DAA0D;AAAA,IAC5F;AACA,UAAM,UAAU,cAAc,OAAO,SAAS,GAAG,IAAI,iBAAiB;AACtE,eAAW,CAAC,WAAW,UAAU,KAAK,OAAO,QAAQ,OAAO,GAAG;AAC9D,oBAAc,YAAY,GAAG,IAAI,mBAAmB,SAAS,EAAE;AAAA,IAChE;AAAA,EACD;AACA,QAAM,aAAa,cAAc,KAAK,YAAY,GAAG,IAAI,aAAa;AACtE,aAAW,CAAC,MAAM,UAAU,KAAK,OAAO,QAAQ,UAAU,GAAG;AAC5D,UAAM,gBAAgB,GAAG,IAAI,eAAe,IAAI;AAChD,QAAI,CAAC,oBAAoB,KAAK,IAAI,EAAG,MAAK,eAAe,+DAA+D;AACxH,UAAM,MAAM,cAAc,YAAY,aAAa;AACnD,QAAI,IAAI,eAAe,QAAW;AACjC,UAAI,CAAC,MAAM,QAAQ,IAAI,UAAU,EAAG,MAAK,GAAG,aAAa,eAAe,kBAAkB;AAC1F,iBAAW,QAAQ,IAAI,YAAyB;AAC/C,YAAI,OAAO,SAAS,YAAY,CAAC,KAAK,KAAK,EAAG,MAAK,GAAG,aAAa,eAAe,mCAAmC;AAAA,MACtH;AAAA,IACD;AACA,QAAI,IAAI,gBAAgB,QAAW;AAClC,UAAI;AAAE,sDAAyB,IAAI,aAAmC,GAAG,aAAa,cAAc;AAAA,MAAG,SAChG,OAAO;AAAE,aAAK,eAAe,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;AAAA,MAAG;AAAA,IAC9F;AACA,QAAI,IAAI,UAAU,QAAW;AAC5B,UAAI,CAAC,MAAM,QAAQ,IAAI,KAAK,EAAG,MAAK,GAAG,aAAa,UAAU,kBAAkB;AAChF,iBAAW,QAAQ,IAAI,OAAoB;AAC1C,YAAI,OAAO,SAAS,YAAY,CAAC,oBAAoB,KAAK,IAAI,EAAG,MAAK,GAAG,aAAa,UAAU,2DAA2D;AAAA,MAC5J;AAAA,IACD;AAAA,EACD;AACD;AAIO,SAAS,mBAAmB,OAAgB,OAAO,YAA2C;AACpG,QAAM,WAAW,cAAc,OAAO,IAAI;AAC1C,gBAAc,SAAS,IAAI,GAAG,IAAI,KAAK;AACvC,MAAI,SAAS,cAAc,OAAW,eAAc,SAAS,WAAW,GAAG,IAAI,YAAY;AAC3F,MAAI,SAAS,SAAS,QAAW;AAChC,QAAI,CAAC,oBAAoB,KAAK,cAAc,SAAS,MAAM,GAAG,IAAI,OAAO,CAAC,GAAG;AAC5E,WAAK,GAAG,IAAI,SAAS,gDAAgD;AAAA,IACtE;AAAA,EACD;AACA,MAAI,SAAS,YAAY,QAAW;AACnC,UAAM,UAAU,cAAc,SAAS,SAAS,GAAG,IAAI,UAAU;AACjE,QAAI,CAAC,QAAQ,WAAW,eAAe,EAAG,MAAK,GAAG,IAAI,YAAY,mCAAmC;AAAA,EACtG;AACA,MAAI,SAAS,UAAU,QAAW;AACjC,kBAAc,SAAS,OAAO,GAAG,IAAI,QAAQ;AAAA,EAC9C;AACA,MAAI,SAAS,YAAY,QAAW;AACnC,UAAM,UAAU,cAAc,SAAS,SAAS,GAAG,IAAI,UAAU;AACjE,eAAW,CAAC,MAAM,GAAG,KAAK,OAAO,QAAQ,OAAO,GAAG;AAClD,YAAM,aAAa,GAAG,IAAI,YAAY,IAAI;AAC1C,YAAM,YAAY,cAAc,KAAK,UAAU;AAC/C,oBAAc,UAAU,QAAQ,GAAG,UAAU,SAAS;AAAA,IACvD;AAAA,EACD;AACA,MAAI,SAAS,aAAa,QAAW;AACpC,UAAM,WAAW,aAAa,SAAS,UAAU,GAAG,IAAI,WAAW;AACnE,aAAS,QAAQ,CAAC,OAAO,UAAU,mBAAmB,OAAO,GAAG,IAAI,aAAa,KAAK,GAAG,CAAC;AAAA,EAC3F;AACD;AAIO,SAAS,mBAAmB,OAAgB,OAAO,YAA2C;AACpG,QAAM,WAAW,cAAc,OAAO,IAAI;AAC1C,MAAI,SAAS,kBAAkB,GAAG;AACjC,SAAK,GAAG,IAAI,kBAAkB,uBAAuB,KAAK,UAAU,SAAS,aAAa,CAAC,EAAE;AAAA,EAC9F;AACA,MAAI,CAAC,oBAAoB,KAAK,cAAc,SAAS,MAAM,GAAG,IAAI,OAAO,CAAC,GAAG;AAC5E,SAAK,GAAG,IAAI,SAAS,gDAAgD;AAAA,EACtE;AACA,MAAI,CAAC,sCAAsC,KAAK,cAAc,SAAS,SAAS,GAAG,IAAI,UAAU,CAAC,GAAG;AACpG,SAAK,GAAG,IAAI,YAAY,0BAA0B;AAAA,EACnD;AACA,qBAAmB,SAAS,MAAM,GAAG,IAAI,OAAO;AAChD,MAAI,SAAS,aAAa,QAAW;AACpC,iBAAa,SAAS,UAAU,GAAG,IAAI,WAAW,EAAE,QAAQ,CAAC,OAAO,UAAU;AAC7E,YAAM,cAAc,GAAG,IAAI,aAAa,KAAK;AAC7C,YAAM,UAAU,cAAc,OAAO,WAAW;AAChD,UAAI,CAAC,oBAAoB,KAAK,cAAc,QAAQ,IAAI,GAAG,WAAW,KAAK,CAAC,GAAG;AAC9E,aAAK,GAAG,WAAW,OAAO,gDAAgD;AAAA,MAC3E;AACA,UAAI,QAAQ,gBAAgB,OAAW,eAAc,QAAQ,aAAa,GAAG,WAAW,cAAc;AACtG,yBAAmB,QAAQ,MAAM,GAAG,WAAW,OAAO;AAAA,IACvD,CAAC;AAAA,EACF;AACA,QAAM,WAAW,cAAc,SAAS,UAAU,GAAG,IAAI,WAAW;AACpE,gBAAc,SAAS,MAAM,GAAG,IAAI,gBAAgB;AACpD,gBAAc,SAAS,SAAS,GAAG,IAAI,mBAAmB;AAC1D,eAAa,SAAS,gBAAgB,GAAG,IAAI,iBAAiB,EAAE,QAAQ,CAAC,OAAO,UAAU;AACzF,UAAM,OAAO,cAAc,OAAO,GAAG,IAAI,mBAAmB,KAAK,GAAG;AACpE,kBAAc,KAAK,MAAM,GAAG,IAAI,mBAAmB,KAAK,QAAQ;AAChE,kBAAc,KAAK,WAAW,GAAG,IAAI,mBAAmB,KAAK,aAAa;AAC1E,kBAAc,KAAK,OAAO,GAAG,IAAI,mBAAmB,KAAK,SAAS;AAAA,EACnE,CAAC;AACF;AASO,SAAS,8BACf,OACA,OAAO,UACoC;AAC3C,QAAM,SAAS,cAAc,OAAO,IAAI;AACxC,QAAM,QAAQ,aAAa,OAAO,OAAO,GAAG,IAAI,QAAQ;AACxD,QAAM,UAAU,aAAa,OAAO,SAAS,GAAG,IAAI,UAAU;AAC9D,aAAW,CAAC,OAAO,SAAS,KAAK,MAAM,QAAQ,GAAG;AACjD,UAAM,gBAAgB,GAAG,IAAI,UAAU,KAAK;AAC5C,QAAI,CAAC,mBAAmB,cAAc,WAAW,aAAa,CAAC,GAAG;AACjE,WAAK,eAAe,yCAAyC;AAAA,IAC9D;AAAA,EACD;AACA,aAAW,CAAC,OAAO,SAAS,KAAK,QAAQ,QAAQ,GAAG;AACnD,UAAM,gBAAgB,GAAG,IAAI,YAAY,KAAK;AAC9C,QAAI,CAAC,mBAAmB,cAAc,WAAW,aAAa,CAAC,GAAG;AACjE,WAAK,eAAe,yCAAyC;AAAA,IAC9D;AAAA,EACD;AACA,MAAI,OAAO,cAAc,QAAW;AACnC,UAAM,YAAY,cAAc,OAAO,WAAW,GAAG,IAAI,YAAY;AAIrE,UAAM,YAAY,OAAO,eAAe,SAAS;AACjD,QAAI,cAAc,OAAO,aAAa,cAAc,MAAM;AACzD,WAAK,GAAG,IAAI,cAAc,iGAAiG;AAAA,IAC5H;AACA,eAAW,CAAC,YAAY,QAAQ,KAAK,OAAO,QAAQ,SAAS,GAAG;AAC/D,YAAM,eAAe,GAAG,IAAI,cAAc,UAAU;AACpD,YAAM,SAAS,cAAc,UAAU,YAAY;AACnD,iBAAW,SAAS,CAAC,SAAS,SAAS,GAAY;AAClD,YAAI,OAAO,KAAK,MAAM,OAAW;AACjC,qBAAa,OAAO,KAAK,GAAG,GAAG,YAAY,IAAI,KAAK,EAAE,EAAE,QAAQ,CAAC,WAAW,UAAU;AACrF,gBAAM,gBAAgB,GAAG,YAAY,IAAI,KAAK,IAAI,KAAK;AACvD,cAAI,CAAC,mBAAmB,cAAc,WAAW,aAAa,CAAC,GAAG;AACjE,iBAAK,eAAe,yCAAyC;AAAA,UAC9D;AAAA,QACD,CAAC;AAAA,MACF;AAAA,IACD;AAAA,EACD;AACD;AAGO,SAAS,kBAAkB,OAAgB,OAAO,WAAyC;AACjG,QAAM,UAAU,cAAc,OAAO,IAAI;AACzC,MAAI,QAAQ,kBAAkB,GAAG;AAChC,SAAK,GAAG,IAAI,kBAAkB,uBAAuB,KAAK,UAAU,QAAQ,aAAa,CAAC,EAAE;AAAA,EAC7F;AACA,aAAW,SAAS,CAAC,iBAAiB,gBAAgB,GAAY;AACjE,QAAI,CAAC,iBAAiB,KAAK,cAAc,QAAQ,KAAK,GAAG,GAAG,IAAI,IAAI,KAAK,EAAE,CAAC,GAAG;AAC9E,WAAK,GAAG,IAAI,IAAI,KAAK,IAAI,oCAAoC;AAAA,IAC9D;AAAA,EACD;AACA,qBAAmB,QAAQ,UAAU,GAAG,IAAI,WAAW;AACvD,qBAAmB,QAAQ,UAAU,GAAG,IAAI,WAAW;AACvD,gCAA8B,QAAQ,QAAQ,GAAG,IAAI,SAAS;AAC9D,eAAa,QAAQ,gBAAgB,GAAG,IAAI,iBAAiB,EAAE,QAAQ,CAACA,QAAO,UAAU;AACxF,UAAM,WAAW,GAAG,IAAI,mBAAmB,KAAK;AAChD,UAAM,OAAO,cAAcA,QAAO,QAAQ;AAC1C,eAAW,SAAS,CAAC,QAAQ,WAAW,GAAY;AACnD,UAAI,CAAC,oBAAoB,KAAK,cAAc,KAAK,KAAK,GAAG,GAAG,QAAQ,IAAI,KAAK,EAAE,CAAC,GAAG;AAClF,aAAK,GAAG,QAAQ,IAAI,KAAK,IAAI,gDAAgD;AAAA,MAC9E;AAAA,IACD;AACA,QAAI,CAAC,sCAAsC;AAAA,MAC1C,cAAc,KAAK,SAAS,GAAG,QAAQ,UAAU;AAAA,IAClD,GAAG;AACF,WAAK,GAAG,QAAQ,YAAY,0BAA0B;AAAA,IACvD;AACA,UAAM,QAAQ,cAAc,KAAK,OAAO,GAAG,QAAQ,QAAQ;AAC3D,QAAI,KAAC,kCAAiB,KAAK,GAAG;AAC7B,WAAK,GAAG,QAAQ,UAAU,kCAAkC;AAAA,IAC7D;AACA,QAAI,CAAC,iBAAiB,KAAK,cAAc,KAAK,gBAAgB,GAAG,QAAQ,iBAAiB,CAAC,GAAG;AAC7F,WAAK,GAAG,QAAQ,mBAAmB,oCAAoC;AAAA,IACxE;AAAA,EACD,CAAC;AACF;;;AEvPA,IAAAC,mBAKO;AACP,4BAA4C;;;ACN5C,yBAA2B;AAa3B,SAAS,SAAS,OAAyB;AAC1C,MAAI,MAAM,QAAQ,KAAK,EAAG,QAAO,MAAM,IAAI,QAAQ;AACnD,MAAI,SAAS,OAAO,UAAU,UAAU;AACvC,WAAO,OAAO;AAAA,MACb,OAAO,QAAQ,KAAgC,EAC7C,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,KAAK,MAAO,OAAO,QAAQ,KAAK,OAAO,QAAQ,IAAI,CAAE,EACpE,IAAI,CAAC,CAAC,KAAK,KAAK,MAAM,CAAC,KAAK,SAAS,KAAK,CAAC,CAAC;AAAA,IAC/C;AAAA,EACD;AACA,SAAO;AACR;AAEA,SAAS,gBAAgB,OAAwB;AAChD,SAAO,KAAK,UAAU,SAAS,KAAK,CAAC;AACtC;AAaO,SAAS,wBACf,WAC2D;AAC3D,MAAI,CAAC,UAAW,QAAO,CAAC;AACxB,SAAO,OAAO;AAAA,IACb,OAAO,KAAK,SAAS,EACnB,KAAK,EACL,IAAI,CAAC,eAAe;AACpB,YAAM,WAAW,UAAU,UAAU;AACrC,aAAO,CAAC,YAAY;AAAA,QACnB,GAAI,SAAS,QAAQ,EAAE,OAAO,CAAC,GAAG,SAAS,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC;AAAA,QAC9D,GAAI,SAAS,UAAU,EAAE,SAAS,CAAC,GAAG,SAAS,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC;AAAA,MACrE,CAAC;AAAA,IACF,CAAC;AAAA,EACH;AACD;AAEO,SAAS,cACf,UACA,UACA,gBACA,QACA,gBACS;AACT,QAAM,YAAY,gBAAgB;AAAA,IACjC,UAAU;AAAA,MACT,eAAe,SAAS;AAAA,MACxB,MAAM,SAAS;AAAA,MACf,SAAS,SAAS;AAAA,MAClB,MAAM,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAMf,GAAI,SAAS,UAAU,SACpB;AAAA,QACD,UAAU,CAAC,GAAG,SAAS,QAAQ,EAAE,KAAK,CAAC,MAAM,UAC5C,KAAK,KAAK,MAAM,KAAK,KAAK,KAAK,KAAK,MAAM,KAAK,IAAI,CAAC;AAAA,MACtD,IACE,CAAC;AAAA,MACJ,UAAU,SAAS;AAAA,MACnB,gBAAgB,CAAC,GAAG,SAAS,cAAc,EAAE,KAAK,CAAC,GAA+B,MAAkC;AACnH,cAAM,MAAM,CAAC,MAAkC,GAAG,EAAE,SAAS,IAAI,EAAE,IAAI;AACvE,eAAO,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI;AAAA,MACrD,CAAC;AAAA,IACF;AAAA,IACA,UAAU;AAAA,MACT,eAAe,SAAS;AAAA,MACxB,MAAM,SAAS;AAAA,MACf,SAAS,SAAS;AAAA,MAClB,QAAQ,SAAS;AAAA,IAClB;AAAA,IACA,gBAAgB,CAAC,GAAG,cAAc,EAAE,KAAK,CAAC,GAAG,MAAM;AAClD,YAAM,MAAM,CAAC,MAAiC,GAAG,EAAE,SAAS,IAAI,EAAE,IAAI;AACtE,aAAO,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI;AAAA,IACrD,CAAC;AAAA,IACD,QAAQ;AAAA,MACP,OAAO,CAAC,GAAG,OAAO,KAAK,EAAE,KAAK;AAAA,MAC9B,SAAS,CAAC,GAAG,OAAO,OAAO,EAAE,KAAK;AAAA;AAAA;AAAA;AAAA,MAIlC,GAAI,OAAO,aAAa,OAAO,KAAK,OAAO,SAAS,EAAE,SACnD,EAAE,WAAW,wBAAwB,OAAO,SAAS,EAAE,IACvD,CAAC;AAAA,IACL;AAAA,IACA;AAAA,EACD,CAAC;AACD,aAAO,+BAAW,QAAQ,EAAE,OAAO,SAAS,EAAE,OAAO,KAAK;AAC3D;AAOO,SAAS,qBACf,UACA,UACA,gBACA,QACA,gBACS;AACT,SAAO,cAAc,UAAU,UAAU,gBAAgB,QAAQ,cAAc;AAChF;AAGO,SAAS,2BAA2B,SAA4B;AACtE,oBAAkB,OAAO;AACzB,QAAM,WAAW;AAAA,IAChB,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR,QAAQ;AAAA,EACT;AACA,MAAI,QAAQ,kBAAkB,UAAU;AACvC,UAAM,IAAI,MAAM,yEAAyE,QAAQ,IAAI;AAAA,EACtG;AACD;;;ACxIO,SAAS,gBAAgB,WAAkD;AACjF,QAAM,QAAQ,oBAAI,IAAY;AAC9B,aAAW,YAAY,WAAW;AACjC,eAAW,QAAQ,SAAS,OAAO;AAClC,YAAM,OAAO,KAAK,KAAK,WAAW,GAAG,SAAS,SAAS,GAAG,IACvD,KAAK,KAAK,MAAM,SAAS,UAAU,SAAS,CAAC,IAC7C,KAAK;AACR,YAAM,IAAI,GAAG,SAAS,SAAS,IAAI,IAAI,EAAE;AAAA,IAC1C;AAAA,EACD;AACA,SAAO;AACR;AAEO,SAAS,wBAAwB,WAAkD;AACzF,QAAM,UAAU,oBAAI,IAAY;AAChC,aAAW,YAAY,WAAW;AACjC,UAAM,aAAa,SAAS,aAAa,sBAAsB;AAG/D,eAAW,UAAU,YAAY,iBAAiB,CAAC,GAAG;AAGrD,YAAM,YAAY,OAAO,KAAK,WAAW,GAAG,SAAS,SAAS,GAAG,IAC9D,OAAO,KAAK,MAAM,SAAS,UAAU,SAAS,CAAC,IAC/C,OAAO;AACV,cAAQ,IAAI,GAAG,SAAS,SAAS,IAAI,SAAS,EAAE;AAAA,IACjD;AAAA,EACD;AACA,SAAO;AACR;AAEO,SAAS,uBACf,YACA,MACc;AACd,QAAM,UAAU,oBAAI,IAAY;AAChC,aAAW,CAAC,OAAO,SAAS,KAAK,WAAW,QAAQ,GAAG;AACtD,UAAM,gBAAgB,GAAG,IAAI,IAAI,KAAK;AACtC,QAAI,CAAC,mBAAmB,SAAS,GAAG;AACnC,WAAK,eAAe,yCAAyC;AAAA,IAC9D;AACA,YAAQ,IAAI,SAAS;AAAA,EACtB;AACA,SAAO;AACR;AAEO,SAAS,iCACf,WACA,KACO;AACP,aAAW,YAAY,WAAW;AACjC,UAAM,aAAa,SAAS,aAAa,sBAAsB;AAG/D,UAAM,UAAU,IAAI,IAAI,SAAS,QAAQ,IAAI,CAAC,WAAW,OAAO,QAAQ,CAAC;AACzE,eAAW,CAAC,OAAO,MAAM,MAAM,YAAY,iBAAiB,CAAC,GAAG,QAAQ,GAAG;AAC1E,UAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,GAAG;AAClC;AAAA,UACC;AAAA,UACA,aAAa,SAAS,SAAS,kBAAkB,KAAK;AAAA,UACtD,WAAW,OAAO,IAAI,wBAAwB,OAAO,QAAQ;AAAA,QAC9D;AAAA,MACD;AAAA,IACD;AAAA,EACD;AACD;;;ACjEA,IAAM,iBAAiB;AAmBhB,SAAS,qBAAqB,OAA4C;AAChF,SACC,UAAU,QACV,OAAO,UAAU,YACjB,CAAC,MAAM,QAAQ,KAAK,KACpB,OAAQ,MAA4B,SAAS,YAC5C,MAA4B,KAAK,WAAW,eAAe;AAE9D;AAOA,SAAS,aAAa,SAA8B,UAA8D;AACjH,MAAI,aAAa,OAAW,QAAO;AACnC,SAAO,IAAI,IAAI,SAAS,OAAO,CAAC,cAAc,QAAQ,IAAI,SAAS,CAAC,CAAC;AACtE;AAEO,SAAS,aAAa,UAAwB,MAAc,SAAoC;AAEtG,QAAM,WAAW,QAAQ,gBAAgB,IAAI,SAAS,EAAE;AACxD,QAAM,SAA8B,WACjC;AAAA,IACD,GAAG;AAAA,IACH,cAAc,aAAa,QAAQ,cAAc,SAAS,KAAK;AAAA,IAC/D,gBAAgB,aAAa,QAAQ,gBAAgB,SAAS,OAAO;AAAA,EACtE,IACE;AAGH,MAAI,OAAO,IAAI,IAAI,SAAS,EAAE,GAAG;AAChC,WAAO,IAAI,yBAAyB,GAAG,IAAI,OAAO,gBAAgB,SAAS,EAAE,8BAA8B;AAAA,EAC5G,OAAO;AACN,WAAO,IAAI,IAAI,SAAS,EAAE;AAAA,EAC3B;AAGA,MAAI,SAAS,cAAc,QAAW;AACrC,UAAM,YAAY,SAAS,UAAU,QAAQ,GAAG;AAChD,QAAI,cAAc,IAAI;AACrB,UAAI,CAAC,OAAO,eAAe,IAAI,SAAS,SAAS,GAAG;AACnD,eAAO;AAAA,UAAI;AAAA,UAAqB,GAAG,IAAI;AAAA,UACtC,cAAc,SAAS,SAAS;AAAA,QAAmD;AAAA,MACrF;AAAA,IACD,WAAW,CAAC,OAAO,gBAAgB,IAAI,SAAS,SAAS,GAAG;AAC3D,aAAO;AAAA,QAAI;AAAA,QAAqB,GAAG,IAAI;AAAA,QACtC,cAAc,SAAS,SAAS;AAAA,MAAyC;AAAA,IAC3E;AAAA,EACD;AAGA,MAAI,SAAS,YAAY,QAAW;AACnC,UAAM,MAAM,mBAAmB,SAAS,OAAO;AAC/C,QAAI,CAAC,KAAK;AACT,aAAO;AAAA,QAAI;AAAA,QAAyB,GAAG,IAAI;AAAA,QAC1C,IAAI,SAAS,OAAO;AAAA,MAA+C;AAAA,IACrE,WAAW,CAAC,OAAO,WAAW,IAAI,GAAG,IAAI,SAAS,IAAI,IAAI,IAAI,EAAE,GAAG;AAClE,aAAO;AAAA,QAAI;AAAA,QAAyB,GAAG,IAAI;AAAA,QAC1C,6BAA6B,SAAS,OAAO;AAAA,MAAuC;AAAA,IACtF,WAAW,CAAC,OAAO,aAAa,IAAI,SAAS,OAAO,GAAG;AACtD,aAAO;AAAA,QAAI;AAAA,QAAmB,GAAG,IAAI;AAAA,QACpC,6BAA6B,SAAS,OAAO;AAAA,MAAsD;AAAA,IACrG;AAAA,EACD;AAGA,aAAW,CAAC,MAAM,SAAS,KAAK,OAAO,QAAQ,SAAS,WAAW,CAAC,CAAC,GAAG;AACvE,UAAM,aAAa,GAAG,IAAI,YAAY,IAAI;AAC1C,UAAM,MAAM,mBAAmB,UAAU,MAAM;AAC/C,QAAI,CAAC,KAAK;AACT,aAAO;AAAA,QAAI;AAAA,QAAmB,GAAG,UAAU;AAAA,QAC1C,WAAW,IAAI,aAAa,UAAU,MAAM;AAAA,MAAwE;AACrH;AAAA,IACD;AACA,QAAI,CAAC,OAAO,aAAa,IAAI,GAAG,IAAI,SAAS,IAAI,IAAI,IAAI,EAAE,GAAG;AAC7D,aAAO;AAAA,QAAI;AAAA,QAAmB,GAAG,UAAU;AAAA,QAC1C,WAAW,IAAI,wBAAwB,UAAU,MAAM;AAAA,MAAsC;AAAA,IAC/F,WAAW,CAAC,OAAO,eAAe,IAAI,UAAU,MAAM,GAAG;AACxD,aAAO;AAAA,QAAI;AAAA,QAAqB,GAAG,UAAU;AAAA,QAC5C,WAAW,IAAI,wBAAwB,UAAU,MAAM;AAAA,MAAsD;AAAA,IAC/G;AACA,QAAI,UAAU,WAAW,QAAW;AACnC,sBAAgB,UAAU,QAAQ,GAAG,UAAU,WAAW,MAAM;AAAA,IACjE;AAAA,EACD;AAGA,MAAI,SAAS,UAAU,QAAW;AACjC,oBAAgB,SAAS,OAAO,GAAG,IAAI,UAAU,MAAM;AAAA,EACxD;AAGA,MAAI,SAAS,aAAa,QAAW;AACpC,aAAS,SAAS,QAAQ,CAAC,OAAO,UAAU;AAC3C,mBAAa,OAAO,GAAG,IAAI,aAAa,KAAK,KAAK,MAAM;AAAA,IACzD,CAAC;AAAA,EACF;AACD;AAUO,SAAS,WAAW,OAA0B,MAAc,SAA8B,QAAQ,GAAS;AACjH,MAAI,QAAQ,gBAAgB;AAC3B,YAAQ;AAAA,MAAI;AAAA,MAAoB;AAAA,MAC/B,wBAAwB,cAAc;AAAA,IAAkE;AACzG;AAAA,EACD;AACA,MAAI,qBAAqB,KAAK,GAAG;AAChC,UAAM,MAAM,mBAAmB,MAAM,IAAI;AACzC,QAAI,CAAC,KAAK;AACT,cAAQ;AAAA,QAAI;AAAA,QAAyB,GAAG,IAAI;AAAA,QAC3C,IAAI,MAAM,IAAI;AAAA,MAA+C;AAAA,IAC/D,WAAW,CAAC,QAAQ,WAAW,IAAI,GAAG,IAAI,SAAS,IAAI,IAAI,IAAI,EAAE,GAAG;AACnE,cAAQ;AAAA,QAAI;AAAA,QAAyB,GAAG,IAAI;AAAA,QAC3C,yBAAyB,MAAM,IAAI;AAAA,MAAuC;AAAA,IAC5E,WAAW,CAAC,QAAQ,aAAa,IAAI,MAAM,IAAI,GAAG;AACjD,cAAQ;AAAA,QAAI;AAAA,QAAmB,GAAG,IAAI;AAAA,QACrC,yBAAyB,MAAM,IAAI;AAAA,MAAsD;AAAA,IAC3F;AAGA,eAAW,CAAC,KAAK,OAAO,KAAK,OAAO,QAAQ,KAAK,GAAG;AACnD,UAAI,QAAQ,OAAQ;AACpB,iBAAW,SAA8B,GAAG,IAAI,IAAI,GAAG,IAAI,SAAS,QAAQ,CAAC;AAAA,IAC9E;AACA;AAAA,EACD;AACA,MAAI,MAAM,QAAQ,KAAK,GAAG;AACzB,UAAM,QAAQ,CAAC,MAAM,UAAU,WAAW,MAAM,GAAG,IAAI,IAAI,KAAK,KAAK,SAAS,QAAQ,CAAC,CAAC;AACxF;AAAA,EACD;AACA,MAAI,UAAU,QAAQ,OAAO,UAAU,UAAU;AAChD,oBAAgB,OAA4C,MAAM,SAAS,QAAQ,CAAC;AAAA,EACrF;AACD;AAEO,SAAS,gBAAgB,OAA0C,MAAc,SAA8B,QAAQ,GAAS;AACtI,aAAW,CAAC,KAAK,KAAK,KAAK,OAAO,QAAQ,KAAK,GAAG;AACjD,eAAW,OAAO,GAAG,IAAI,IAAI,GAAG,IAAI,SAAS,KAAK;AAAA,EACnD;AACD;;;AHvIO,SAAS,oBAAoB,OAAkD;AAErF,MAAI,CAAC,MAAM,SAAU,OAAM,IAAI,MAAM,mEAAmE;AACxG,qBAAmB,MAAM,QAAQ;AACjC,qBAAmB,MAAM,QAAQ;AACjC,aAAW,QAAQ,MAAM,eAAgB,yBAAwB,IAAI;AACrE,aAAW,YAAY,MAAM,UAAW,wDAA4B,QAAQ;AAC5E,gCAA8B,MAAM,MAAM;AAC1C,+CAAuB,MAAM,QAAQ;AACrC,QAAM,YAAY,MAAM,UAAU,IAAI,CAAC,aAAa,SAAS,UAAU;AAEvE,QAAM,WAA0B,CAAC;AACjC,QAAM,MAAM,CAAC,MAAuB,MAAc,YAA0B;AAC3E,aAAS,KAAK,EAAE,MAAM,MAAM,QAAQ,CAAC;AAAA,EACtC;AAGA,MAAI,MAAM,SAAS,SAAS,SAAS,MAAM,SAAS,MAAM;AACzD;AAAA,MAAI;AAAA,MAAqB;AAAA,MACxB,kCAAkC,MAAM,SAAS,SAAS,IAAI,8BAA8B,MAAM,SAAS,IAAI;AAAA,IAAG;AAAA,EACpH;AACA,MAAI,MAAM,SAAS,SAAS,YAAY,MAAM,SAAS,SAAS;AAC/D;AAAA,MAAI;AAAA,MAAqB;AAAA,MACxB,0CAA0C,MAAM,SAAS,SAAS,OAAO,sCAAsC,MAAM,SAAS,OAAO;AAAA,IAAG;AAAA,EAC1I;AAGA,QAAM,aAAa,oBAAI,IAAiC;AACxD,aAAW,QAAQ,MAAM,gBAAgB;AACxC,UAAM,MAAM,GAAG,KAAK,SAAS,IAAI,KAAK,IAAI;AAC1C,UAAM,OAAO,WAAW,IAAI,GAAG,KAAK,CAAC;AACrC,SAAK,KAAK,IAAI;AACd,eAAW,IAAI,KAAK,IAAI;AAAA,EACzB;AAEA,QAAM,gBAA6C,CAAC;AACpD,QAAM,0BAA+C,CAAC;AACtD,aAAW,OAAO,MAAM,SAAS,gBAAgB;AAChD,UAAM,MAAM,GAAG,IAAI,SAAS,IAAI,IAAI,IAAI;AACxC,UAAM,YAAY,WAAW,IAAI,GAAG,KAAK,CAAC;AAC1C,UAAM,YAAQ,mCAAiB,IAAI,KAAK;AACxC,QAAI,CAAC,OAAO;AACX;AAAA,QAAI;AAAA,QAAqB,2BAA2B,GAAG;AAAA,QACtD,iCAAiC,GAAG,sBAAsB,IAAI,KAAK;AAAA,MAAG;AACvE;AAAA,IACD;AACA,UAAM,sBAAkB,sCAAoB,OAAO,UAAU,IAAI,CAAC,SAAS,KAAK,OAAO,CAAC;AACxF,QAAI,CAAC,iBAAiB;AACrB;AAAA,QAAI;AAAA,QAAqB,2BAA2B,GAAG;AAAA,QACtD,iCAAiC,GAAG,sBAAsB,IAAI,KAAK;AAAA,MAAG;AACvE;AAAA,IACD;AACA,UAAM,WAAW,UAAU,KAAK,CAAC,SAAS,KAAK,YAAY,eAAe;AAC1E,4BAAwB,KAAK,QAAQ;AACrC,kBAAc,KAAK;AAAA,MAClB,MAAM,SAAS;AAAA,MACf,WAAW,SAAS;AAAA,MACpB,SAAS,SAAS;AAAA,MAClB,OAAO,IAAI;AAAA,MACX,gBAAgB,SAAS;AAAA,MACzB,GAAI,SAAS,SAAS,EAAE,QAAQ,SAAS,OAAO,IAAI,CAAC;AAAA,IACtD,CAAC;AAAA,EACF;AAGA;AACC,eAAW,QAAQ,eAAe;AACjC,YAAM,WAAW,MAAM,SAAS,eAAe;AAAA,QAAK,CAAC,cACpD,UAAU,cAAc,KAAK,aAC7B,UAAU,SAAS,KAAK,QACxB,UAAU,YAAY,KAAK,WAC3B,UAAU,mBAAmB,KAAK;AAAA,MACnC;AACA,UAAI,CAAC,UAAU;AACd;AAAA,UAAI;AAAA,UAAkC,kBAAkB,KAAK,SAAS,IAAI,KAAK,IAAI;AAAA,UAClF,SAAS,KAAK,SAAS,IAAI,KAAK,IAAI,IAAI,KAAK,OAAO,2BAA2B,KAAK,cAAc,yBAAyB,MAAM,SAAS,cAAc;AAAA,QAAG;AAC5J;AAAA,MACD;AAKA,YAAM,iBAAiB,wBAAwB,KAAK,CAAC,eACpD,WAAW,cAAc,KAAK,aAC9B,WAAW,SAAS,KAAK,QACzB,WAAW,YAAY,KAAK,WAC5B,WAAW,mBAAmB,KAAK,cAAc,GAAG;AACrD,YAAM,aAAa,kBAAkB,KAAK,SAAS,IAAI,KAAK,IAAI;AAChE,UAAI,kBAAkB,CAAC,SAAS,QAAQ;AACvC;AAAA,UAAI;AAAA,UAAqB;AAAA,UACxB,SAAS,KAAK,SAAS,IAAI,KAAK,IAAI,yDAAyD,MAAM,SAAS,cAAc;AAAA,QAAkB;AAAA,MAC9I,WAAW,kBAAkB,SAAS,QAAQ;AAC7C,YAAI,eAAe,UAAU,SAAS,OAAO,OAAO;AACnD;AAAA,YAAI;AAAA,YAAqB,GAAG,UAAU;AAAA,YACrC,iBAAiB,eAAe,KAAK,sCAAsC,SAAS,OAAO,KAAK;AAAA,UAAG;AAAA,QACrG;AACA,YAAI,eAAe,cAAc,SAAS,OAAO,WAAW;AAC3D;AAAA,YAAI;AAAA,YAAqB,GAAG,UAAU;AAAA,YACrC,qBAAqB,eAAe,SAAS,0CAA0C,SAAS,OAAO,SAAS;AAAA,UAAG;AAAA,QACrH;AACA,YAAI,iBAAiB,eAAe,OAAO,MAAM,iBAAiB,SAAS,OAAO,OAAO,GAAG;AAC3F;AAAA,YAAI;AAAA,YAAqB,GAAG,UAAU;AAAA,YACrC;AAAA,UAAwD;AAAA,QAC1D;AAAA,MACD,WAAW,CAAC,kBAAkB,SAAS,QAAQ;AAC9C;AAAA,UAAI;AAAA,UAAqB;AAAA,UACxB,aAAa,MAAM,SAAS,cAAc,mCAAmC,KAAK,SAAS,IAAI,KAAK,IAAI;AAAA,QAAwC;AAAA,MAClJ;AAAA,IACD;AACA,eAAW,YAAY,MAAM,WAAW;AACvC,YAAM,WAAW,MAAM,SAAS,aAAa;AAAA,QAAK,CAAC,eAClD,WAAW,cAAc,SAAS,WAAW,aAC7C,WAAW,4BAAwB,qDAAmC,QAAQ;AAAA,MAC/E;AACA,UAAI,CAAC,UAAU;AACd;AAAA,UAAI;AAAA,UAAuC,aAAa,SAAS,WAAW,SAAS;AAAA,UACpF,aAAa,SAAS,WAAW,SAAS,wEAAwE,MAAM,SAAS,cAAc;AAAA,QAAG;AAAA,MACpJ;AAAA,IACD;AAAA,EACD;AAGA,QAAM,kBAAkB,oBAAI,IAAY;AACxC,aAAW,QAAQ,yBAAyB;AAC3C,eAAW,QAAQ,OAAO,KAAK,KAAK,UAAU,GAAG;AAChD,sBAAgB,IAAI,GAAG,KAAK,SAAS,IAAI,IAAI,EAAE;AAAA,IAChD;AAAA,EACD;AACA,QAAM,iBAAiB,IAAI,IAAI,MAAM,kBAAkB,CAAC,CAAC;AAGzD,QAAM,aAAa,gBAAgB,SAAS;AAC5C,QAAM,eAAe,wBAAwB,SAAS;AACtD,QAAM,eAAe,uBAAuB,MAAM,OAAO,OAAO,cAAc;AAC9E,QAAM,iBAAiB,uBAAuB,MAAM,OAAO,SAAS,gBAAgB;AAGpF,mCAAiC,WAAW,GAAG;AAM/C,QAAM,iBAAiB,oBAAI,IAAwE;AACnG,aAAW,CAAC,YAAY,QAAQ,KAAK,OAAO,QAAQ,MAAM,OAAO,aAAa,CAAC,CAAC,GAAG;AAClF,eAAW,QAAQ,SAAS,SAAS,CAAC,GAAG;AACxC,UAAI,CAAC,aAAa,IAAI,IAAI,GAAG;AAC5B;AAAA,UAAI;AAAA,UAAkC,oBAAoB,UAAU;AAAA,UACnE,aAAa,UAAU,sBAAsB,IAAI;AAAA,QAA4C;AAAA,MAC/F;AAAA,IACD;AACA,eAAW,UAAU,SAAS,WAAW,CAAC,GAAG;AAC5C,UAAI,CAAC,eAAe,IAAI,MAAM,GAAG;AAChC;AAAA,UAAI;AAAA,UAAkC,oBAAoB,UAAU;AAAA,UACnE,aAAa,UAAU,wBAAwB,MAAM;AAAA,QAA4C;AAAA,MACnG;AAAA,IACD;AACA,mBAAe,IAAI,YAAY,QAAQ;AAAA,EACxC;AAKA,QAAM,WAAW,CAAC,MAAkC,SAAuB;AAC1E,iBAAa,MAAM,MAAM;AAAA,MACxB,KAAK,oBAAI,IAAI;AAAA,MACb;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACD,CAAC;AAAA,EACF;AAEA,WAAS,MAAM,SAAS,MAAM,eAAe;AAE7C,QAAM,iBAAiB,oBAAI,IAAY;AACvC,GAAC,MAAM,SAAS,YAAY,CAAC,GAAG,QAAQ,CAAC,SAAS,UAAU;AAC3D,QAAI,eAAe,IAAI,QAAQ,EAAE,GAAG;AACnC;AAAA,QAAI;AAAA,QAAwB,qBAAqB,KAAK;AAAA,QACrD,eAAe,QAAQ,EAAE;AAAA,MAA8B;AAAA,IACzD,OAAO;AACN,qBAAe,IAAI,QAAQ,EAAE;AAAA,IAC9B;AACA,aAAS,QAAQ,MAAM,qBAAqB,KAAK,QAAQ;AAAA,EAC1D,CAAC;AAGD,MAAI,SAAS,SAAS,GAAG;AACxB,WAAO,EAAE,OAAO,OAAO,UAAU,SAAS,OAAU;AAAA,EACrD;AAEA,QAAM,UAAuB;AAAA,IAC5B,eAAe;AAAA,IACf,eAAe;AAAA,MACd,MAAM;AAAA,MACN,MAAM;AAAA,MACN;AAAA,MACA,MAAM;AAAA,MACN,MAAM,SAAS;AAAA,IAChB;AAAA,IACA,gBAAgB,MAAM,SAAS;AAAA,IAC/B,UAAU,MAAM;AAAA,IAChB,UAAU,MAAM;AAAA,IAChB,gBAAgB,CAAC,GAAG,aAAa,EAAE,KAAK,CAAC,GAAG,MAAM;AACjD,YAAM,MAAM,CAAC,MAAiC,GAAG,EAAE,SAAS,IAAI,EAAE,IAAI;AACtE,aAAO,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI;AAAA,IACrD,CAAC;AAAA,IACD,QAAQ;AAAA,MACP,OAAO,CAAC,GAAG,MAAM,OAAO,KAAK,EAAE,KAAK;AAAA,MACpC,SAAS,CAAC,GAAG,MAAM,OAAO,OAAO,EAAE,KAAK;AAAA,MACxC,GAAI,MAAM,OAAO,YAAY,EAAE,WAAW,wBAAwB,MAAM,OAAO,SAAS,EAAE,IAAI,CAAC;AAAA,IAChG;AAAA,EACD;AAEA,SAAO,EAAE,OAAO,MAAM,UAAU,CAAC,GAAG,QAAQ;AAC7C;AAMO,SAAS,uBAAuB,OAAyC;AAC/E,QAAM,SAAS,oBAAoB,KAAK;AACxC,MAAI,OAAO,MAAO,QAAO,OAAO;AAChC,QAAM,IAAI,MAAM;AAAA,IACf,iBAAiB,MAAM,SAAS,IAAI,IAAI,MAAM,SAAS,OAAO;AAAA,IAC9D,GAAG,OAAO,SAAS,IAAI,CAAC,YAAY,QAAQ,QAAQ,IAAI,KAAK,QAAQ,IAAI,KAAK,QAAQ,OAAO,EAAE;AAAA,EAChG,EAAE,KAAK,IAAI,CAAC;AACb;AAIA,SAAS,iBAAiB,SAAyC;AAClE,SAAO,KAAK;AAAA,IACX,OAAO,KAAK,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,cAAc,CAAC,WAAW,QAAQ,SAAS,CAAC,CAAC;AAAA,EAC/E;AACD;;;AIlPO,SAAS,kBAAkB,IAAY,gBAAgD;AAC7F,SAAO;AAAA,IACN;AAAA,IACA;AAAA,IACA,QAAQ,SAAS;AAChB,iCAA2B,OAAO;AAClC,YAAM,OAAO,sBAAsB,QAAQ,SAAS,IAAI;AACxD,iBAAW,WAAW,QAAQ,SAAS,YAAY,CAAC,GAAG;AACtD,mBAAW,aAAa,sBAAsB,QAAQ,IAAI,EAAG,MAAK,IAAI,SAAS;AAAA,MAChF;AACA,YAAM,UAAU,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC,cAAc,CAAC,eAAe,SAAS,SAAS,CAAC;AACnF,aAAO;AAAA,QACN;AAAA,QACA,YAAY,QAAQ,WAAW;AAAA,QAC/B,uBAAuB;AAAA,MACxB;AAAA,IACD;AAAA,EACD;AACD;AAEA,SAAS,sBAAsB,UAAqC;AACnE,QAAM,OAAO,oBAAI,IAAY;AAC7B,MAAI,SAAS,cAAc,UAAa,CAAC,SAAS,UAAU,SAAS,GAAG,GAAG;AAC1E,SAAK,IAAI,SAAS,SAAS;AAAA,EAC5B;AACA,MAAI,SAAS,aAAa,QAAW;AACpC,eAAW,SAAS,SAAS,UAAU;AACtC,iBAAW,aAAa,sBAAsB,KAAK,EAAG,MAAK,IAAI,SAAS;AAAA,IACzE;AAAA,EACD;AACA,SAAO;AACR;;;AC9DO,IAAM,4BAAgD;AAAA,EAC5D,SAAS;AAAA,EACT,OAAO;AAAA,EACP,MAAM;AAAA,EACN,UAAU,CAAC,iBAAiB,QAAQ,WAAW,QAAQ,YAAY,gBAAgB;AAAA,EACnF,YAAY;AAAA,IACX,eAAe,EAAE,MAAM,WAAW,MAAM,CAAC,CAAC,EAAE;AAAA,IAC5C,MAAM,EAAE,MAAM,UAAU,SAAS,oBAAoB;AAAA,IACrD,SAAS,EAAE,MAAM,UAAU,SAAS,sBAAsB;AAAA,IAC1D,MAAM,EAAE,MAAM,SAAS;AAAA,IACvB,UAAU,EAAE,MAAM,UAAU,UAAU,CAAC,QAAQ,SAAS,EAAE;AAAA,IAC1D,gBAAgB,EAAE,MAAM,QAAQ;AAAA,EACjC;AACD;AAEO,IAAM,2BAA+C;AAAA,EAC3D,SAAS;AAAA,EACT,OAAO;AAAA,EACP,MAAM;AAAA,EACN,UAAU,CAAC,iBAAiB,iBAAiB,kBAAkB,YAAY,YAAY,kBAAkB,QAAQ;AAAA,EACjH,YAAY;AAAA,IACX,eAAe,EAAE,MAAM,WAAW,MAAM,CAAC,CAAC,EAAE;AAAA,IAC5C,eAAe,EAAE,MAAM,UAAU,SAAS,iBAAiB;AAAA,IAC3D,gBAAgB,EAAE,MAAM,UAAU,SAAS,iBAAiB;AAAA,IAC5D,UAAU,EAAE,MAAM,SAAS;AAAA,IAC3B,UAAU,EAAE,MAAM,SAAS;AAAA,IAC3B,gBAAgB,EAAE,MAAM,QAAQ;AAAA,IAChC,QAAQ,EAAE,MAAM,UAAU,UAAU,CAAC,SAAS,SAAS,EAAE;AAAA,EAC1D;AACD;","names":["value","import_assembly"]}

package/dist/index.d.cts

@@ -0,0 +1,334 @@
+import { PortableJsonSchema } from '@fabricorg/platform';
+export { JsonValue } from '@fabricorg/platform';
+import { UsageContractDocument } from '@fabricorg/gen-capability';
+import { AssemblyLockfile } from '@fabricorg/assembly';
+
+/**
+ * Version of the SDUI document contract. A vertical negotiates on this, not on
+ * this package's version, and it moves only when the serialized shape changes.
+ */
+declare const SDUI_DOCUMENT_FORMAT_VERSION: 1;
+/**
+ * Version of the SDUI token-set contract.
+ */
+declare const SDUI_TOKEN_SET_FORMAT_VERSION: 1;
+/**
+ * Version of the SDUI component-pack contract.
+ */
+declare const SDUI_COMPONENT_PACK_FORMAT_VERSION: 1;
+/**
+ * Version of the promoted SDUI release contract.
+ */
+declare const SDUI_RELEASE_FORMAT_VERSION: 2;
+/**
+ * A capability read reference embedded in fragment props. The `capability://`
+ * scheme ties a data binding to a published view; the host resolves it through
+ * `ProjectionHost`, never through a direct query.
+ */
+interface SduiCapabilityRef {
+    $ref: `capability://${string}`;
+}
+/**
+ * A value that may appear in fragment props: a JSON literal, an array, an
+ * object, or a `capability://` read reference. Direct mutation endpoints,
+ * API URLs, or code strings are not valid fragment values.
+ */
+type SduiFragmentValue = string | number | boolean | null | SduiFragmentValue[] | SduiCapabilityRef | {
+    [key: string]: SduiFragmentValue;
+};
+/**
+ * An action declared on a fragment. The `intent` must be a `capability://`
+ * reference to a published action intent; the host dispatches it through
+ * `PlatformHost`, preserving governance. A bare endpoint URL, function name,
+ * or inline script is a mutation bypass and is rejected.
+ */
+interface SduiActionRef {
+    intent: `capability://${string}`;
+    params?: Record<string, SduiFragmentValue>;
+}
+/**
+ * A node in an SDUI document tree. A fragment either renders a component from
+ * a declared pack, binds data from a capability view, or both. Actions on a
+ * fragment are always capability action-intent references — never direct
+ * mutations.
+ */
+interface SduiFragment {
+    /** Unique identifier within the document. */
+    id: string;
+    /** Namespaced component (`pack.Component`) or a core component name. */
+    component?: string;
+    /** Props for the component; values may be literals or capability refs. */
+    props?: Record<string, SduiFragmentValue>;
+    /** Named slot this fragment fills in its parent component. */
+    slot?: string;
+    /** A capability view reference for data-driven fragments. */
+    dataRef?: `capability://${string}`;
+    /** Action handlers; every entry must be a capability action-intent reference. */
+    actions?: Record<string, SduiActionRef>;
+    /** Child fragments. */
+    children?: SduiFragment[];
+}
+type SduiTokenType = "color" | "spacing" | "fontSize" | "fontWeight" | "radius" | "border" | "shadow";
+interface SduiToken {
+    type: SduiTokenType;
+    value: string;
+    description?: string;
+}
+/**
+ * A versioned set of design tokens. Tokens are semantic, not literal CSS — a
+ * renderer maps them to its own platform. Two channels consuming the same
+ * token set apply the same visual intent through different renderings.
+ */
+interface SduiTokenSet {
+    formatVersion: typeof SDUI_TOKEN_SET_FORMAT_VERSION;
+    name: string;
+    version: string;
+    tokens: Record<string, SduiToken>;
+}
+interface SduiComponentDefinition {
+    /** Roles this component implements (for adoption-binding validation). */
+    implements?: string[];
+    /** JSON Schema for component props. */
+    propsSchema?: PortableJsonSchema;
+    /** Named slots this component accepts. */
+    slots?: string[];
+}
+/**
+ * A versioned pack of SDUI components. Compatible with the adoption-bindings
+ * `ComponentPackManifest` but adds prop schemas and slot declarations so a
+ * document can be validated without a renderer.
+ */
+interface SduiComponentPack {
+    formatVersion: typeof SDUI_COMPONENT_PACK_FORMAT_VERSION;
+    pack: string;
+    namespace: string;
+    version: string;
+    /** SHA-256 digest of the published component-pack artifact. */
+    artifactDigest: string;
+    /**
+     * Where this pack is loaded from when it is delivered as a federated
+     * remote. The artifact digest identifies the pack that was reviewed; this
+     * is what a shell actually executes, so validation requires the two to be
+     * locked together or the review covers something other than what runs.
+     */
+    remote?: SduiComponentPackRemote;
+    components: Record<string, SduiComponentDefinition>;
+}
+/** Delivery binding for a federated component pack. */
+interface SduiComponentPackRemote {
+    /** Remote entry URL the shell loads. */
+    entry: string;
+    /** Subresource-integrity value for that entry, e.g. `sha384-…`. */
+    integrity: string;
+    /** Exposed module path keyed by the component name it provides. */
+    exposes: Record<string, string>;
+}
+interface SduiComponentPackReference {
+    pack: string;
+    namespace: string;
+    /** Semver range, e.g. `^1.0.0`. */
+    range: string;
+}
+interface SduiTokenSetReference {
+    name: string;
+    version: string;
+}
+/**
+ * A versioned SDUI document: a tree of fragments, a token-set reference, and
+ * the component packs it depends on. This is the build-time input; the release
+ * is the validated, resolved output.
+ */
+interface SduiDocument {
+    formatVersion: typeof SDUI_DOCUMENT_FORMAT_VERSION;
+    name: string;
+    version: string;
+    /** The tree rendered when no variant is selected. */
+    root: SduiFragment;
+    /**
+     * Alternative trees a compositor may select at request time, for experiment
+     * arms and personalization. Every variant is enumerated here and validated
+     * against the same grants as `root`, and all of them are covered by the
+     * release digest.
+     *
+     * Enumeration is what makes selection safe. A selector that can produce a
+     * tree outside this set cannot be validated at promotion, so "selection may
+     * never widen grants" would be unenforceable rather than merely unenforced.
+     */
+    variants?: SduiVariant[];
+    tokenSet: SduiTokenSetReference;
+    componentPacks: SduiComponentPackReference[];
+}
+/** One selectable alternative to a document's default tree. */
+interface SduiVariant {
+    /** Stable key the compositor matches on. Unique within the document. */
+    id: string;
+    /** The audience or experiment arm this arm serves. */
+    description?: string;
+    root: SduiFragment;
+}
+interface ResolvedSduiComponentPack {
+    pack: string;
+    namespace: string;
+    version: string;
+    range: string;
+    artifactDigest: string;
+    /**
+     * The locked delivery binding, carried onto the release so the digest
+     * identifies which remote a channel is expected to load. Omitting it would
+     * let two releases differing only in their remote share a digest.
+     */
+    remote?: SduiComponentPackRemote;
+}
+/**
+ * A promoted, validated, immutable SDUI release. It bundles a document, a
+ * resolved token set, and locked component packs. Two channels (web, mobile,
+ * CLI) can consume the same release and render it through their own renderers
+ * while reads and actions remain capability references.
+ */
+interface SduiRelease {
+    formatVersion: typeof SDUI_RELEASE_FORMAT_VERSION;
+    /** SHA-256 of the canonical document, token set, resolved packs, grants, and assembly identity. */
+    releaseDigest: string;
+    /** Approved application assembly this release was validated against. */
+    assemblyDigest: string;
+    document: SduiDocument;
+    tokenSet: SduiTokenSet;
+    componentPacks: ResolvedSduiComponentPack[];
+    grants: SduiAuthorizationGrants;
+}
+type SduiFindingCode = "unknown_component" | "incompatible_pack" | "unauthorized_data_ref" | "denied_view_ref" | "mutation_bypass" | "denied_intent_ref" | "intent_action_not_found" | "invalid_fragment" | "invalid_action_ref" | "unknown_token" | "duplicate_fragment_id" | "invalid_token_set" | "invalid_component_pack" | "invalid_document" | "missing_token_set" | "missing_component_pack" | "component_pack_not_in_assembly" | "capability_contract_not_in_assembly" | "duplicate_variant_id" | "fragment_grant_exceeds_release" | "remote_not_locked";
+interface SduiFinding {
+    code: SduiFindingCode;
+    path: string;
+    message: string;
+}
+interface SduiValidationResult {
+    valid: boolean;
+    findings: SduiFinding[];
+    release: SduiRelease | undefined;
+}
+/**
+ * Explicit capability references authorized for an SDUI release.
+ *
+ * The presence of a view or action in a supplied usage contract proves that
+ * the capability publishes it, not that this document may use it. The
+ * experience host must therefore provide both grant lists explicitly.
+ */
+interface SduiAuthorizationGrants {
+    /** Full `capability://namespace/view` references allowed in data bindings. */
+    views: readonly string[];
+    /** Full `capability://namespace/intent` references allowed in actions. */
+    intents: readonly string[];
+    /**
+     * Per-fragment narrowing, keyed by fragment id.
+     *
+     * The release-wide lists above are the ceiling. A listed fragment may use
+     * only the references named for it, and the narrowing is inherited by that
+     * fragment's children, so a page assembled from several teams' fragments
+     * gets least privilege rather than the union of everything any of them
+     * needs. A fragment entry can only ever narrow: naming a reference outside
+     * the release-wide list is an authoring error and is reported rather than
+     * silently granted.
+     *
+     * Keys are fragment ids, which are unique within a tree but may repeat
+     * across variants, so two variants using the same fragment id share one
+     * entry. Give them distinct ids when they need distinct narrowing. This
+     * cannot widen either fragment, since narrowing stays an intersection.
+     */
+    fragments?: Record<string, SduiFragmentGrants>;
+}
+/** References one fragment subtree may use, drawn from the release-wide lists. */
+interface SduiFragmentGrants {
+    views?: readonly string[];
+    intents?: readonly string[];
+}
+interface SduiValidationInput {
+    document: SduiDocument;
+    tokenSet: SduiTokenSet;
+    /** Available component packs for version resolution. */
+    componentPacks: SduiComponentPack[];
+    /** Capability contracts available for data-ref and action validation. */
+    contracts: UsageContractDocument[];
+    /**
+     * Explicit authorization grants for every capability view and action
+     * reference used by the document. Contract membership alone never grants
+     * access.
+     */
+    grants: SduiAuthorizationGrants;
+    /** Approved resolved application composition. */
+    assembly: AssemblyLockfile;
+    /** Core component vocabulary every renderer implements. */
+    coreComponents?: readonly string[];
+}
+
+declare function assertSduiTokenSet(value: unknown, path?: string): asserts value is SduiTokenSet;
+declare function assertSduiComponentPack(value: unknown, path?: string): asserts value is SduiComponentPack;
+declare function assertSduiFragment(value: unknown, path?: string): asserts value is SduiFragment;
+declare function assertSduiDocument(value: unknown, path?: string): asserts value is SduiDocument;
+/**
+ * Validate the grant envelope before semantic release checks. Grants are
+ * intentionally references rather than capability names: a capability may
+ * publish several views and intents with different authorization decisions.
+ */
+declare function assertSduiAuthorizationGrants(value: unknown, path?: string): asserts value is SduiAuthorizationGrants;
+/** Validate a promoted release loaded from an untyped persistence or network seam. */
+declare function assertSduiRelease(value: unknown, path?: string): asserts value is SduiRelease;
+
+/**
+ * Validate an SDUI document and its dependencies, producing a promoted release
+ * when every check passes. This is the single build gate: it rejects unknown
+ * components, incompatible packs, unauthorized data references, and mutation
+ * bypasses. Returns every finding rather than throwing, so one CI run tells a
+ * vertical everything it has to change. Use {@link assertSduiReleaseValid} to
+ * throw on the first invalid result.
+ */
+declare function validateSduiRelease(input: SduiValidationInput): SduiValidationResult;
+/**
+ * Throw with every finding listed, for use as a build step. Returns the
+ * promoted release when valid.
+ */
+declare function assertSduiReleaseValid(input: SduiValidationInput): SduiRelease;
+
+/**
+ * Compute the canonical release digest for a valid release. Two releases with
+ * the same document, token set, and resolved packs produce the same digest,
+ * so a channel can verify it is consuming the exact release it was built for.
+ */
+declare function computeReleaseDigest(document: SduiDocument, tokenSet: SduiTokenSet, componentPacks: ResolvedSduiComponentPack[], grants: SduiAuthorizationGrants, assemblyDigest: string): string;
+/** Reject promoted release content that no longer matches its immutable digest. */
+declare function assertSduiReleaseIntegrity(release: SduiRelease): void;
+
+/**
+ * A channel is a rendering target (web, mobile, CLI). A channel consumes a
+ * validated release and resolves capability references through its own host
+ * adapters. Reads go through `ProjectionHost`; actions go through
+ * `PlatformHost`. The channel never interprets or bypasses capability
+ * references — it renders fragments and forwards action intents.
+ */
+interface SduiChannel {
+    id: string;
+    /** Core components this channel renderer implements. */
+    coreComponents: readonly string[];
+    /** Consume a validated release; returns the release if the channel's core
+     *  vocabulary covers every core component the document uses. */
+    consume(release: SduiRelease): SduiChannelConsumptionResult;
+}
+interface SduiChannelConsumptionResult {
+    /** The release the channel consumed. */
+    release: SduiRelease;
+    /** Whether the channel's core vocabulary covers the document. */
+    compatible: boolean;
+    /** Core components the document uses that the channel does not implement. */
+    missingCoreComponents: string[];
+}
+/**
+ * Create a channel that consumes a release. The channel verifies that every
+ * core component the document references is in its vocabulary; pack-namespaced
+ * components are resolved from the release's locked packs, not the channel.
+ */
+declare function createSduiChannel(id: string, coreComponents: readonly string[]): SduiChannel;
+
+declare const SDUI_DOCUMENT_JSON_SCHEMA: PortableJsonSchema;
+declare const SDUI_RELEASE_JSON_SCHEMA: PortableJsonSchema;
+
+export { type ResolvedSduiComponentPack, SDUI_COMPONENT_PACK_FORMAT_VERSION, SDUI_DOCUMENT_FORMAT_VERSION, SDUI_DOCUMENT_JSON_SCHEMA, SDUI_RELEASE_FORMAT_VERSION, SDUI_RELEASE_JSON_SCHEMA, SDUI_TOKEN_SET_FORMAT_VERSION, type SduiActionRef, type SduiAuthorizationGrants, type SduiCapabilityRef, type SduiChannel, type SduiChannelConsumptionResult, type SduiComponentDefinition, type SduiComponentPack, type SduiComponentPackReference, type SduiDocument, type SduiFinding, type SduiFindingCode, type SduiFragment, type SduiFragmentValue, type SduiRelease, type SduiToken, type SduiTokenSet, type SduiTokenSetReference, type SduiTokenType, type SduiValidationInput, type SduiValidationResult, assertSduiAuthorizationGrants, assertSduiComponentPack, assertSduiDocument, assertSduiFragment, assertSduiRelease, assertSduiReleaseIntegrity, assertSduiReleaseValid, assertSduiTokenSet, computeReleaseDigest, createSduiChannel, validateSduiRelease };