@finalai/agent-definition 0.1.2 → 0.1.4

package/dist/compiler-assets/{chunk-OWC6SFFF.ts → chunk-APU2VKLW.ts}

@@ -1,13 +1,13 @@
-import {
-  jsonObjectSchema,
-  jsonSchemaSchema,
-  jsonValueSchema
-} from "./chunk-7QP2CKPI.ts";
 import {
   DynamicEvent,
   containsDynamicSlot,
   maybeDynamic
-} from "./chunk-SKTNMUO7.ts";
+} from "./chunk-MSE7X5YG.ts";
+import {
+  jsonObjectSchema,
+  jsonSchemaSchema,
+  jsonValueSchema
+} from "./chunk-4X2DS5BR.ts";
 import {
   array,
   boolean,
@@ -17,9 +17,24 @@ import {
   object,
   partialRecord,
   record,
+  strictObject,
   string,
   union
-} from "./chunk-HGW4YHAY.ts";
+} from "./chunk-3K4C4SVG.ts";
+
+// ../agent-protocol/src/avatar.ts
+var avatarMediaSchema = discriminatedUnion("type", [
+  object({ type: literal("image"), url: string().url() }),
+  object({
+    type: literal("video"),
+    url: string().url(),
+    posterUrl: string().url().optional()
+  })
+]);
+var agentAvatarSchema = object({
+  url: string().url(),
+  states: record(string().min(1), avatarMediaSchema).optional()
+});
 
 // ../agent-provider/src/provider-ref.ts
 var packageProviderRefSchema = object({
@@ -45,7 +60,7 @@ var bundleRef = (exportName) => ({
 var formatProviderRef = (ref) => ref.kind === "package" /* Package */ ? `package:${ref.specifier}` : `bundle:${ref.export}`;
 
 // ../agent-provider/src/manifest.ts
-var MANIFEST_VERSION = 2;
+var MANIFEST_VERSION = 3;
 var BaseCapability = /* @__PURE__ */ ((BaseCapability2) => {
   BaseCapability2["Shell"] = "shell";
   BaseCapability2["Files"] = "files";
@@ -84,7 +99,7 @@ var ScheduleTarget = /* @__PURE__ */ ((ScheduleTarget2) => {
 var identitySchema = object({
   name: string().min(1).max(120),
   description: string().max(2e3).nullable(),
-  avatarUrl: string().url().nullable()
+  avatar: agentAvatarSchema.optional()
 });
 var InputApprovalKind = /* @__PURE__ */ ((InputApprovalKind2) => {
   InputApprovalKind2["Tool"] = "tool";
@@ -122,6 +137,17 @@ var mcpAuthSchema = union([
   object({ kind: literal("final-session") })
 ]);
 var toolApprovalsSchema = record(string(), nativeEnum(ToolApproval)).nullable();
+var toolAnnotationSelectorSchema = strictObject({
+  readOnlyHint: boolean().optional(),
+  destructiveHint: boolean().optional(),
+  idempotentHint: boolean().optional(),
+  openWorldHint: boolean().optional()
+}).refine((selector) => Object.keys(selector).length > 0, "Select at least one annotation");
+var toolAnnotationRuleSchema = object({
+  match: toolAnnotationSelectorSchema,
+  approval: nativeEnum(ToolApproval),
+  inputApproval: inputApprovalSchema.optional()
+});
 var workerMcpServerBindingSchema = object({
   key: string().min(1),
   kind: literal("worker" /* Worker */),
@@ -135,9 +161,19 @@ var httpMcpServerBindingSchema = object({
   auth: mcpAuthSchema.nullable(),
   headers: record(string(), string()).default({}),
   // Null allows every tool the server lists, each with the default approval.
+  // Keys are tool names or `*` patterns (./tool-patterns.ts); the most
+  // specific matching key governs a tool.
   approvals: toolApprovalsSchema,
-  // Tools hidden even when `approvals` would expose them.
+  // Tool names or `*` patterns hidden even when `approvals` would expose them.
   deny: array(string().min(1)).optional(),
+  // Exposed tools (names or `*` patterns) the harness lists up front. Absent
+  // lists every exposed tool; otherwise the host keeps the rest reachable
+  // through search (HOSTING.md).
+  load: array(string().min(1)).optional(),
+  // Tools also exposed by their MCP annotations; named tools keep `approvals`.
+  allowAnnotations: array(toolAnnotationRuleSchema).optional(),
+  // Tools hidden by their MCP annotations, whatever else exposes them.
+  denyAnnotations: array(toolAnnotationSelectorSchema).optional(),
   // The authored resolver that produced this connection, for retained boundary values.
   dynamicResolver: string().min(1).optional(),
   inputApprovals: record(string(), inputApprovalSchema).optional()
@@ -197,7 +233,8 @@ var harnessBindingSchema = object({
   config: maybeDynamic(jsonValueSchema)
 });
 var agentManifestSchema = object({
-  version: literal(MANIFEST_VERSION),
+  // Read persisted v2 revisions; v3 writers require hosts enforcing hosted bindings.
+  version: union([literal(2), literal(MANIFEST_VERSION)]),
   identity: identitySchema,
   harness: harnessBindingSchema,
   mcpServers: maybeDynamic(array(mcpServerBindingSchema)),
@@ -245,7 +282,7 @@ var skillBundleSchema = object({
 });
 var emptyManifest = (name) => ({
   version: MANIFEST_VERSION,
-  identity: { name, description: null, avatarUrl: null },
+  identity: { name, description: null },
   harness: {
     harness: packageRef("@finalai/final-agent-provider/harnesses/serverless-final"),
     config: {}
@@ -262,6 +299,8 @@ var emptyManifest = (name) => ({
 });
 
 export {
+  avatarMediaSchema,
+  agentAvatarSchema,
   providerRefSchema,
   bundleRef,
   formatProviderRef,
@@ -275,6 +314,7 @@ export {
   identitySchema,
   toolDescriptorSchema,
   mcpAuthSchema,
+  toolAnnotationSelectorSchema,
   workerMcpServerBindingSchema,
   httpMcpServerBindingSchema,
   mcpServerBindingSchema,

package/dist/compiler-assets/{chunk-HFS4KLEL.ts → chunk-D3SB4CCB.ts}

@@ -1,6 +1,6 @@
 import {
   stamp
-} from "./chunk-XHKPWT3G.ts";
+} from "./chunk-QJ26GEUM.ts";
 
 // src/authoring/skills.ts
 var defineSkill = (definition) => stamp({ ...definition }, "skill" /* Skill */);

package/dist/compiler-assets/{chunk-HNPUTP35.ts → chunk-GCFSHHH2.ts}

@@ -1,6 +1,6 @@
 import {
   DynamicEvent
-} from "./chunk-SKTNMUO7.ts";
+} from "./chunk-MSE7X5YG.ts";
 import {
   array,
   literal,
@@ -8,7 +8,7 @@ import {
   object,
   string,
   union
-} from "./chunk-HGW4YHAY.ts";
+} from "./chunk-3K4C4SVG.ts";
 
 // ../agent-provider/src/credentials.ts
 var CredentialPayer = /* @__PURE__ */ ((CredentialPayer2) => {

package/dist/compiler-assets/{chunk-5BK6FVRE.ts → chunk-IF6MR7JF.ts}

@@ -1,7 +1,7 @@
 import {
   jsonObjectSchema,
   jsonValueSchema
-} from "./chunk-7QP2CKPI.ts";
+} from "./chunk-4X2DS5BR.ts";
 import {
   _null,
   array,
@@ -11,7 +11,7 @@ import {
   object,
   string,
   union
-} from "./chunk-HGW4YHAY.ts";
+} from "./chunk-3K4C4SVG.ts";
 
 // ../agent-provider/src/channel.ts
 var ConversationKind = /* @__PURE__ */ ((ConversationKind2) => {

package/dist/compiler-assets/{chunk-LUSAAV4L.ts → chunk-IZGOMT7K.ts}

@@ -1,9 +1,9 @@
 import {
   awaitableOpenRequest
-} from "./chunk-CWWRTRWW.ts";
+} from "./chunk-4E5HECVD.ts";
 import {
   stamp
-} from "./chunk-XHKPWT3G.ts";
+} from "./chunk-QJ26GEUM.ts";
 
 // ../agent-provider/src/sandbox/types.ts
 var defineSandboxProvider = (definition) => ({

package/dist/compiler-assets/{chunk-GTUZOATD.ts → chunk-JGQ2KAN7.ts}

@@ -1,6 +1,6 @@
 import {
   stamp
-} from "./chunk-XHKPWT3G.ts";
+} from "./chunk-QJ26GEUM.ts";
 
 // src/authoring/schedules.ts
 var defineSchedule = (definition) => stamp({ ...definition }, "schedule" /* Schedule */);

package/dist/compiler-assets/{chunk-NYTOYKKF.ts → chunk-K6D7ZK74.ts}

@@ -1,13 +1,13 @@
 import {
   credentials
-} from "./chunk-HNPUTP35.ts";
+} from "./chunk-GCFSHHH2.ts";
 import {
   DynamicEvent
-} from "./chunk-SKTNMUO7.ts";
+} from "./chunk-MSE7X5YG.ts";
 import {
   isAuthored,
   registerPending
-} from "./chunk-XHKPWT3G.ts";
+} from "./chunk-QJ26GEUM.ts";
 
 // src/authoring/credentials.ts
 var DYNAMIC_EVENTS = Object.values(DynamicEvent);

package/dist/compiler-assets/{chunk-WMXMVFHM.ts → chunk-K7V4IMOB.ts}

@@ -1,15 +1,15 @@
 import {
   jsonObjectSchema
-} from "./chunk-7QP2CKPI.ts";
+} from "./chunk-4X2DS5BR.ts";
 import {
   stamp
-} from "./chunk-XHKPWT3G.ts";
+} from "./chunk-QJ26GEUM.ts";
 import {
   array,
   nativeEnum,
   object,
   string
-} from "./chunk-HGW4YHAY.ts";
+} from "./chunk-3K4C4SVG.ts";
 
 // ../agent-provider/src/channel-context.ts
 var ChannelPrincipalType = /* @__PURE__ */ ((ChannelPrincipalType2) => {

package/dist/compiler-assets/{chunk-VHXHUU7L.ts → chunk-LHMUAIYJ.ts}

@@ -1,6 +1,6 @@
 import {
   stamp
-} from "./chunk-XHKPWT3G.ts";
+} from "./chunk-QJ26GEUM.ts";
 
 // src/authoring/instructions.ts
 var defineInstructions = (definition) => stamp(

package/dist/compiler-assets/{chunk-SKTNMUO7.ts → chunk-MSE7X5YG.ts}

@@ -1,3 +1,7 @@
+import {
+  jsonSchemaSchema,
+  jsonValueSchema
+} from "./chunk-4X2DS5BR.ts";
 import {
   array,
   json,
@@ -7,7 +11,23 @@ import {
   string,
   union,
   unknown
-} from "./chunk-HGW4YHAY.ts";
+} from "./chunk-3K4C4SVG.ts";
+
+// ../agent-provider/src/hosted-bindings.ts
+var requireHostedBinding = async (options) => {
+  if (options.name.trim().length === 0) throw new Error("Hosted binding name must not be empty");
+  if (options.bindings == null)
+    throw new Error(`Hosting does not supply bindings required by ${options.name}`);
+  const value = await options.bindings.get(options.name);
+  if (value == null) throw new Error(`Hosted binding ${options.name} is not configured`);
+  const parsed = jsonValueSchema.safeParse(value);
+  if (!parsed.success) throw new Error(`Hosted binding ${options.name} is not JSON configuration`);
+  return parsed.data;
+};
+var hostedBindingRequirementSchema = object({
+  name: string().trim().min(1),
+  schema: jsonSchemaSchema
+});
 
 // ../agent-provider/src/dynamic.ts
 var DynamicEvent = /* @__PURE__ */ ((DynamicEvent2) => {
@@ -22,7 +42,8 @@ var dynamicSlotSchema = object({
     events: array(nativeEnum(DynamicEvent)).min(1),
     // Final additions so Build can render a slot without resolving it.
     description: string().optional(),
-    preview: string().optional()
+    preview: string().optional(),
+    requiredBindings: array(hostedBindingRequirementSchema).optional()
   })
 });
 var isDynamicSlot = (value) => dynamicSlotSchema.safeParse(value).success;
@@ -55,6 +76,8 @@ var findDynamicSlots = (value, path = "") => {
 var containsDynamicSlot = (value) => findDynamicSlots(value).length > 0;
 
 export {
+  requireHostedBinding,
+  hostedBindingRequirementSchema,
   DynamicEvent,
   dynamicSlotSchema,
   isDynamicSlot,

package/dist/compiler-assets/chunk-PFLSBTJA.ts

@@ -0,0 +1,39 @@
+import {
+  validateHostedBindingRequirements
+} from "./chunk-ULI5WWRR.ts";
+import {
+  stamp
+} from "./chunk-QJ26GEUM.ts";
+
+// src/authoring/dynamic.ts
+var defineDynamic = (definition) => {
+  const checked = (handler) => {
+    if (handler == null || (definition.requiredBindings?.length ?? 0) === 0) return handler;
+    return async (event, ctx) => {
+      await validateHostedBindingRequirements({
+        requirements: definition.requiredBindings ?? [],
+        bindings: ctx.bindings
+      });
+      const result = await handler(event, ctx);
+      if (result == null) throw new Error("Required hosted binding resolver returned no value");
+      return result;
+    };
+  };
+  const sentinel = {
+    kind: "final:dynamic",
+    events: {
+      ...definition.events,
+      "session.started": checked(definition.events["session.started"]),
+      "turn.started": checked(definition.events["turn.started"])
+    }
+  };
+  if (definition.description != null) sentinel.description = definition.description;
+  if (definition.preview != null) sentinel.preview = definition.preview;
+  if (definition.provider != null) sentinel.provider = definition.provider;
+  if (definition.requiredBindings != null) sentinel.requiredBindings = definition.requiredBindings;
+  return stamp(sentinel, "dynamic" /* Dynamic */);
+};
+
+export {
+  defineDynamic
+};

package/dist/compiler-assets/{chunk-XHKPWT3G.ts → chunk-QJ26GEUM.ts}

@@ -1,6 +1,6 @@
 import {
   isObjectLike
-} from "./chunk-JIPNTA56.ts";
+} from "./chunk-TM36NO3C.ts";
 
 // src/authoring/brand.ts
 var AuthoredKind = /* @__PURE__ */ ((AuthoredKind2) => {

package/dist/compiler-assets/{chunk-JPY4L2UJ.ts → chunk-RIEMTCTV.ts}

@@ -1,15 +1,15 @@
 import {
   BaseCapability,
   providerRefSchema
-} from "./chunk-OWC6SFFF.ts";
-import {
-  jsonObjectSchema,
-  jsonSchemaSchema
-} from "./chunk-7QP2CKPI.ts";
+} from "./chunk-APU2VKLW.ts";
 import {
   CredentialDelivery,
   InferenceCredentialKind
-} from "./chunk-HNPUTP35.ts";
+} from "./chunk-GCFSHHH2.ts";
+import {
+  jsonObjectSchema,
+  jsonSchemaSchema
+} from "./chunk-4X2DS5BR.ts";
 import {
   array,
   boolean,
@@ -22,7 +22,7 @@ import {
   record,
   string,
   union
-} from "./chunk-HGW4YHAY.ts";
+} from "./chunk-3K4C4SVG.ts";
 
 // ../agent-provider/src/schemas.ts
 var SCHEMA_IDS = {
@@ -260,7 +260,11 @@ var harnessDescriptionSchema = object({
     // the author's name to the text.
     authorMeta: boolean(),
     // Explicit false: native toolPolicy cannot be enforced by this adapter's public surface.
-    nativeToolPolicy: boolean().optional()
+    nativeToolPolicy: boolean().optional(),
+    // Defers and searches MCP tools itself (a harness-native tool search): the
+    // host lists every exposed tool, ignoring connections' `tools.load`, and
+    // adds no search of its own. Absent: the host applies `load` and serves search.
+    deferredToolSearch: boolean().optional()
   }),
   promptWhileRunning: nativeEnum(PromptWhileRunning).default(DEFAULT_PROMPT_WHILE_RUNNING),
   // Keeps the session, its running work and its open requests across a dropped

package/dist/compiler-assets/chunk-TJ536HI4.ts

@@ -0,0 +1,61 @@
+import {
+  mcpAuthSchema
+} from "./chunk-APU2VKLW.ts";
+import {
+  defineDynamic
+} from "./chunk-PFLSBTJA.ts";
+import {
+  requireHostedBinding
+} from "./chunk-MSE7X5YG.ts";
+import {
+  jsonObjectSchema
+} from "./chunk-4X2DS5BR.ts";
+import {
+  stamp
+} from "./chunk-QJ26GEUM.ts";
+import {
+  record,
+  strictObject,
+  string,
+  toJSONSchema
+} from "./chunk-3K4C4SVG.ts";
+
+// src/authoring/connections.ts
+var defineMcpClientConnection = (definition) => stamp({ ...definition }, "connection" /* Connection */);
+var hostedConnectionSchema = strictObject({
+  url: string().url(),
+  auth: mcpAuthSchema.nullable().optional(),
+  headers: record(string(), string()).optional()
+});
+var defineHostedConnection = (definition) => {
+  const { binding, description, tools, approval } = definition;
+  if (binding.trim().length === 0) throw new Error("Hosted connection binding must not be empty");
+  return defineDynamic({
+    description: definition.description ?? `Hosted connection ${binding}`,
+    preview: `Resolved by hosting from ${binding}`,
+    requiredBindings: [
+      { name: binding, schema: jsonObjectSchema.parse(toJSONSchema(hostedConnectionSchema)) }
+    ],
+    events: {
+      "session.started": async (_event, ctx) => {
+        const value = await requireHostedBinding({ bindings: ctx.bindings, name: binding });
+        const parsed = hostedConnectionSchema.safeParse(value);
+        if (!parsed.success)
+          throw new Error(`Hosted connection ${binding} has invalid configuration`);
+        const { auth, ...transport } = parsed.data;
+        return defineMcpClientConnection({
+          ...transport,
+          description,
+          tools,
+          approval,
+          ...auth == null ? {} : { auth }
+        });
+      }
+    }
+  });
+};
+
+export {
+  defineMcpClientConnection,
+  defineHostedConnection
+};

package/dist/compiler-assets/{chunk-QMWTDPNT.ts → chunk-TJZS457N.ts}

@@ -1,13 +1,13 @@
 import {
   stamp
-} from "./chunk-XHKPWT3G.ts";
+} from "./chunk-QJ26GEUM.ts";
 import {
   authoredRecordSchema,
   isCallable
-} from "./chunk-JIPNTA56.ts";
+} from "./chunk-TM36NO3C.ts";
 import {
   looseObject
-} from "./chunk-HGW4YHAY.ts";
+} from "./chunk-3K4C4SVG.ts";
 
 // src/authoring/hooks.ts
 var HookEvent = /* @__PURE__ */ ((HookEvent2) => {

package/dist/compiler-assets/{chunk-JIPNTA56.ts → chunk-TM36NO3C.ts}

@@ -7,7 +7,7 @@ import {
   record,
   string,
   unknown
-} from "./chunk-HGW4YHAY.ts";
+} from "./chunk-3K4C4SVG.ts";
 
 // src/runtime/values.ts
 var authoredValueSchema = unknown();

package/dist/compiler-assets/{chunk-MZMSKIKU.ts → chunk-UBR53WBH.ts}

@@ -13,16 +13,25 @@ import {
   note,
   sandboxProviderNameOf,
   toJson
-} from "./chunk-ZDLVA6XF.ts";
+} from "./chunk-5NTKRRMC.ts";
 import {
   AGENT_DYNAMIC_PREFIX,
   namedExportName
 } from "./chunk-NMYHO2QN.ts";
+import {
+  agentAvatarSchema
+} from "./chunk-APU2VKLW.ts";
+import {
+  hostedBindingRequirementSchema
+} from "./chunk-MSE7X5YG.ts";
+import {
+  jsonValueSchema
+} from "./chunk-4X2DS5BR.ts";
 import {
   authoredKindOf,
   pendingEntries,
   pendingExportName
-} from "./chunk-XHKPWT3G.ts";
+} from "./chunk-QJ26GEUM.ts";
 import {
   entriesOf,
   fieldOf,
@@ -33,11 +42,11 @@ import {
   isString,
   messageOf,
   stringOrNull
-} from "./chunk-JIPNTA56.ts";
+} from "./chunk-TM36NO3C.ts";
 import {
   array,
   string
-} from "./chunk-HGW4YHAY.ts";
+} from "./chunk-3K4C4SVG.ts";
 
 // src/runtime/describe.ts
 var describeDynamic = (value) => {
@@ -63,7 +72,8 @@ var describeDynamic = (value) => {
     events: dynamicEventsOf(value),
     description: stringOrNull(fieldOf(value, "description")),
     preview: stringOrNull(fieldOf(value, "preview")),
-    provider: hint
+    provider: hint,
+    requiredBindings: array(hostedBindingRequirementSchema).parse(fieldOf(value, "requiredBindings") ?? [])
   };
 };
 var collectAgentDynamics = (agent) => {
@@ -90,13 +100,15 @@ var dynamicSlot = (value, path) => {
   const slot = { resolver: `${AGENT_DYNAMIC_PREFIX}${path}`, events: described.events };
   if (described.description != null) slot["description"] = described.description;
   if (described.preview != null) slot["preview"] = described.preview;
+  if ((described.requiredBindings?.length ?? 0) > 0)
+    slot["requiredBindings"] = jsonValueSchema.parse(described.requiredBindings);
   return { $dynamic: slot };
 };
 var isDefinedHarnessLike = (value) => isCallable(value) && isCallable(fieldOf(value, "describe")) && isCallable(fieldOf(value, "open"));
 var KNOWN_AGENT_FIELDS = /* @__PURE__ */ new Set([
   "name",
   "description",
-  "avatarUrl",
+  "avatar",
   "harness",
   "tools",
   "toolPolicy",
@@ -123,7 +135,7 @@ var unknownAgentField = (key) => {
   if (key === "defaultTools")
     return "agent.ts field defaultTools is not supported: base tools are declared with tools: baseTools({ ... }) and are off by default";
   if (key === "subagents" || key === "memory") return `agent.ts field ${key} is not supported yet`;
-  return `agent.ts field ${key} is not an agent field (name, description, avatarUrl, harness, tools, toolPolicy, secrets, channels)`;
+  return `agent.ts field ${key} is not an agent field (name, description, avatar, harness, tools, toolPolicy, secrets, channels)`;
 };
 var describeHarness = (harness, ctx, issues) => {
   if (harness == null) return null;
@@ -193,6 +205,19 @@ var describeSecrets = (value, issues) => {
   issues.push(error("agent.ts secrets must be a list of secret names"));
   return null;
 };
+var describeAvatar = (value, issues) => {
+  if (value === void 0) return null;
+  const parsed = agentAvatarSchema.safeParse(toJson(value, { path: "avatar", issues }));
+  if (parsed.success) return parsed.data;
+  for (const issue of parsed.error.issues) {
+    issues.push(
+      error(
+        `agent.ts avatar${issue.path.length > 0 ? `.${issue.path.join(".")}` : ""}: ${issue.message}`
+      )
+    );
+  }
+  return null;
+};
 var describeAgent = (value, ctx, issues) => {
   if (value == null) return null;
   if (!isPlainObject(value)) {
@@ -231,7 +256,7 @@ var describeAgent = (value, ctx, issues) => {
     type: "agent",
     name: stringOrNull(value["name"]),
     description: stringOrNull(value["description"]),
-    avatarUrl: stringOrNull(value["avatarUrl"]),
+    avatar: describeAvatar(value["avatar"], issues),
     harness: describeHarness(value["harness"], ctx, issues),
     tools: baseToolsDescription?.targets ?? null,
     hostTools: baseToolsDescription?.host ?? null,

package/dist/compiler-assets/chunk-ULI5WWRR.ts

@@ -0,0 +1,40 @@
+import {
+  jsonSchemaError
+} from "./chunk-W6DOJA4W.ts";
+import {
+  findDynamicSlots,
+  requireHostedBinding
+} from "./chunk-MSE7X5YG.ts";
+
+// src/hosted-bindings.ts
+var validateHostedBindings = async (options) => {
+  await validateHostedBindingRequirements({
+    requirements: findDynamicSlots(options.manifest).flatMap(
+      ({ slot }) => slot.$dynamic.requiredBindings ?? []
+    ),
+    bindings: options.bindings
+  });
+};
+var validateHostedBindingRequirements = async (options) => {
+  const values = /* @__PURE__ */ new Map();
+  for (const requirement of options.requirements) {
+    let value = values.get(requirement.name);
+    if (value == null) {
+      value = await requireHostedBinding({ bindings: options.bindings, name: requirement.name });
+      values.set(requirement.name, value);
+    }
+    let validationError;
+    try {
+      validationError = jsonSchemaError(requirement.schema, value);
+    } catch {
+      throw new Error(`Hosted binding ${requirement.name} has an invalid schema`);
+    }
+    if (validationError != null)
+      throw new Error(`Hosted binding ${requirement.name} has invalid configuration`);
+  }
+};
+
+export {
+  validateHostedBindings,
+  validateHostedBindingRequirements
+};