@greensecurity/javascript-sdk 0.46.0-beta.1 → 0.46.0-beta.11

package/dist/commonjs/apps/routes.js

@@ -0,0 +1,202 @@
+"use strict";
+/*
+ * Hand-written (not generated by Speakeasy). Part of the third-party app platform contract;
+ * see docs/third-party-apps/fullpageview-plan.md.
+ *
+ * App page routes (`ui_extensions.routes[]`): the path grammar, the uniqueness rule and the one
+ * matcher every consumer shares (the host, `apps-cli validate`, the contract tests). Deliberately
+ * dependency-free (no zod) so the host renderer can import it without bundling zod; `manifest.ts`
+ * re-exports it because it is part of the manifest contract.
+ *
+ * The server mirrors the grammar and `normalizeRoutePath` in Ruby and reads the same fixtures
+ * (`src/__tests__/apps/fixtures/routes.json`).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.APP_ROUTES_MAX = exports.ROUTE_PATH_MAX_SEGMENTS = exports.ROUTE_PATH_MAX_CHARS = exports.CONCRETE_ROUTE_PATH_PATTERN = exports.ROUTE_PATH_PATTERN = void 0;
+exports.isRoutePath = isRoutePath;
+exports.isConcreteRoutePath = isConcreteRoutePath;
+exports.normalizeRoutePath = normalizeRoutePath;
+exports.routeSetIssues = routeSetIssues;
+exports.matchAppRoute = matchAppRoute;
+/** A static segment: lower-case letters, digits and inner hyphens. */
+const STATIC_SEGMENT = "[a-z0-9](?:[a-z0-9-]*[a-z0-9])?";
+/** A param segment: `:` and a lower-case name. */
+const PARAM_SEGMENT = ":[a-z][a-z0-9_]*";
+/**
+ * A declared route path: `/`, or `/seg(/seg)*` where each segment is static or a `:param`. No dots,
+ * percent-escapes, upper case, empty segments or trailing slash, so no path can climb out of the
+ * app's own space. `pages` is not reserved inside that space: `/pages/foo` is an ordinary path.
+ */
+exports.ROUTE_PATH_PATTERN = "^/(?:(?:[a-z0-9](?:[a-z0-9-]*[a-z0-9])?|:[a-z][a-z0-9_]*)(?:/(?:[a-z0-9](?:[a-z0-9-]*[a-z0-9])?|:[a-z][a-z0-9_]*))*)?$";
+/** A concrete path an app navigates to (`{ type: "appPage" }`): the same grammar without params. */
+exports.CONCRETE_ROUTE_PATH_PATTERN = `^/(?:${STATIC_SEGMENT}(?:/${STATIC_SEGMENT})*)?$`;
+exports.ROUTE_PATH_MAX_CHARS = 200;
+/** Segments in one path; `/` has none. */
+exports.ROUTE_PATH_MAX_SEGMENTS = 8;
+/** Routes in one manifest. */
+exports.APP_ROUTES_MAX = 50;
+/** What every param segment becomes in {@link normalizeRoutePath}. */
+const PARAM_PLACEHOLDER = ":_";
+const ROUTE_PATH_RE = new RegExp(exports.ROUTE_PATH_PATTERN);
+const CONCRETE_ROUTE_PATH_RE = new RegExp(exports.CONCRETE_ROUTE_PATH_PATTERN);
+const PARAM_SEGMENT_RE = new RegExp(`^${PARAM_SEGMENT}$`);
+/** The segments of a path in the grammar; `/` has none. */
+function segmentsOf(path) {
+    return path === "/" ? [] : path.slice(1).split("/");
+}
+function withinLimits(path) {
+    return path.length <= exports.ROUTE_PATH_MAX_CHARS && segmentsOf(path).length <= exports.ROUTE_PATH_MAX_SEGMENTS;
+}
+/** A declared route path: the {@link ROUTE_PATH_PATTERN} grammar, ≤ 200 characters and ≤ 8 segments. */
+function isRoutePath(value) {
+    return typeof value === "string" && ROUTE_PATH_RE.test(value) && withinLimits(value);
+}
+/** A concrete route path (no `:param` segments) within the same limits as a declared one. */
+function isConcreteRoutePath(value) {
+    return typeof value === "string" && CONCRETE_ROUTE_PATH_RE.test(value) && withinLimits(value);
+}
+/**
+ * Renames every param segment to `:_`. Two paths that normalize to the same string claim the same
+ * URLs (`/vendors/:id` and `/vendors/:vendor_id`), so a manifest may declare only one of them.
+ */
+function normalizeRoutePath(path) {
+    return path
+        .split("/")
+        .map((segment) => (segment.startsWith(":") ? PARAM_PLACEHOLDER : segment))
+        .join("/");
+}
+/**
+ * The rules over a set of routes that a pattern alone cannot express: the segment cap, a param
+ * name used twice in one path, two paths claiming the same URLs, and a repeated portal. Grammar,
+ * length and the per-field limits are the schema's job; a path that fails the grammar is skipped
+ * here. The zod schema and `apps-cli validate` both report these, and the server repeats them.
+ */
+function routeSetIssues(routes) {
+    const issues = [];
+    const claimed = new Map();
+    routes.forEach((route, index) => {
+        const portals = route.portals ?? [];
+        if (new Set(portals).size !== portals.length) {
+            issues.push({ index, field: "portals", message: "portals must not repeat" });
+        }
+        if (!ROUTE_PATH_RE.test(route.path))
+            return;
+        const segments = segmentsOf(route.path);
+        if (segments.length > exports.ROUTE_PATH_MAX_SEGMENTS) {
+            issues.push({
+                index,
+                field: "path",
+                message: `${route.path} has ${segments.length} segments; the limit is ${exports.ROUTE_PATH_MAX_SEGMENTS}`,
+            });
+        }
+        const params = segments.filter((s) => s.startsWith(":"));
+        if (new Set(params).size !== params.length) {
+            issues.push({ index, field: "path", message: `${route.path} uses a param name twice` });
+        }
+        // A sidebar entry links to one fixed address, and a path with params has none.
+        if (params.length > 0 && route.navigation !== undefined) {
+            issues.push({
+                index,
+                field: "navigation",
+                message: `${route.path} has params, so it cannot have a navigation entry; add one to a path without params`,
+            });
+        }
+        const normalized = normalizeRoutePath(route.path);
+        const earlier = claimed.get(normalized);
+        if (earlier === undefined) {
+            claimed.set(normalized, route.path);
+        }
+        else {
+            issues.push({
+                index,
+                field: "path",
+                message: `${route.path} is declared twice (as ${earlier}); each path takes one page`,
+            });
+        }
+    });
+    return issues;
+}
+/**
+ * Decodes one pathname segment into a param value, or returns `null` when it cannot be one: a
+ * malformed escape, an empty value, `.` or `..`, or a value containing `/` or `:` (raw or
+ * encoded). A param therefore never carries a path or a host-looking value into the app.
+ */
+function paramValue(segment) {
+    if (segment.includes(":"))
+        return null;
+    let value;
+    try {
+        value = decodeURIComponent(segment);
+    }
+    catch {
+        return null;
+    }
+    if (value === "" || value === "." || value === ".." || value.includes("/") || value.includes(":"))
+        return null;
+    return value;
+}
+/**
+ * Finds the route a pathname in the app's own space renders (`/reports/7` for
+ * `/{portal}/apps/{appId}/pages/reports/7`), or `null` when none does.
+ *
+ * `pathname` is URL-encoded, as it appears in a URL: `/` or `/seg(/seg)*` with no empty segment,
+ * trailing slash, query or fragment (anything else matches nothing). A host that receives decoded
+ * segments encodes each with `encodeURIComponent` before joining them.
+ *
+ * A static route segment matches only the identical pathname segment. A param segment matches any
+ * other segment that decodes to a plain value (see `paramValue`); a segment containing `:` never
+ * matches a param. When several routes match, the one with a static segment at the first position
+ * where they differ wins (static before param, left to right); among equals, the first declared.
+ * Routes whose path is not in the grammar are ignored, so a stale or hand-edited feed entry can
+ * never match.
+ */
+function matchAppRoute(routes, pathname) {
+    if (!pathname.startsWith("/") || /[?#]/.test(pathname))
+        return null;
+    const segments = segmentsOf(pathname);
+    if (segments.some((s) => s === ""))
+        return null;
+    let best = null;
+    for (const [index, route] of routes.entries()) {
+        const candidate = matchOne(route, index, segments);
+        if (candidate !== null && (best === null || outranks(candidate.rank, best.rank)))
+            best = candidate;
+    }
+    return best === null ? null : best.match;
+}
+/** Matches one route against the pathname's segments, with its static/param rank. */
+function matchOne(route, index, segments) {
+    if (!isRoutePath(route.path))
+        return null;
+    const pattern = segmentsOf(route.path);
+    if (pattern.length !== segments.length)
+        return null;
+    const params = {};
+    const rank = [];
+    for (let i = 0; i < pattern.length; i++) {
+        const expected = pattern[i] ?? "";
+        const actual = segments[i] ?? "";
+        if (PARAM_SEGMENT_RE.test(expected)) {
+            const value = paramValue(actual);
+            if (value === null)
+                return null;
+            params[expected.slice(1)] = value;
+            rank.push(false);
+        }
+        else {
+            if (expected !== actual)
+                return null;
+            rank.push(true);
+        }
+    }
+    return { match: { route, params, index }, rank };
+}
+/** Whether `a` has a static segment at the first position where it and `b` differ. */
+function outranks(a, b) {
+    for (let i = 0; i < a.length; i++) {
+        if (a[i] !== b[i])
+            return a[i] === true;
+    }
+    return false;
+}
+//# sourceMappingURL=routes.js.map

package/dist/commonjs/apps/routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.js","sourceRoot":"","sources":["../../../src/apps/routes.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;GAWG;;;AAyCH,kCAEC;AAGD,kDAEC;AAMD,gDAKC;AAeD,wCAkDC;AA0CD,sCAgBC;AApLD,sEAAsE;AACtE,MAAM,cAAc,GAAG,iCAAiC,CAAC;AACzD,kDAAkD;AAClD,MAAM,aAAa,GAAG,kBAAkB,CAAC;AAEzC;;;;GAIG;AACU,QAAA,kBAAkB,GAC7B,wHAAwH,CAAC;AAE3H,oGAAoG;AACvF,QAAA,2BAA2B,GAAG,QAAQ,cAAc,OAAO,cAAc,OAAO,CAAC;AAEjF,QAAA,oBAAoB,GAAG,GAAG,CAAC;AACxC,0CAA0C;AAC7B,QAAA,uBAAuB,GAAG,CAAC,CAAC;AACzC,8BAA8B;AACjB,QAAA,cAAc,GAAG,EAAE,CAAC;AAEjC,sEAAsE;AACtE,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAE/B,MAAM,aAAa,GAAG,IAAI,MAAM,CAAC,0BAAkB,CAAC,CAAC;AACrD,MAAM,sBAAsB,GAAG,IAAI,MAAM,CAAC,mCAA2B,CAAC,CAAC;AACvE,MAAM,gBAAgB,GAAG,IAAI,MAAM,CAAC,IAAI,aAAa,GAAG,CAAC,CAAC;AAE1D,2DAA2D;AAC3D,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,YAAY,CAAC,IAAY;IAChC,OAAO,IAAI,CAAC,MAAM,IAAI,4BAAoB,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,+BAAuB,CAAC;AACnG,CAAC;AAED,wGAAwG;AACxG,SAAgB,WAAW,CAAC,KAAc;IACxC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,KAAK,CAAC,CAAC;AACvF,CAAC;AAED,6FAA6F;AAC7F,SAAgB,mBAAmB,CAAC,KAAc;IAChD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,sBAAsB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,KAAK,CAAC,CAAC;AAChG,CAAC;AAED;;;GAGG;AACH,SAAgB,kBAAkB,CAAC,IAAY;IAC7C,OAAO,IAAI;SACR,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;SACzE,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AASD;;;;;GAKG;AACH,SAAgB,cAAc,CAC5B,MAAsG;IAEtG,MAAM,MAAM,GAAoB,EAAE,CAAC;IACnC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE1C,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC9B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,EAAE,CAAC;QACpC,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,MAAM,EAAE,CAAC;YAC7C,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,yBAAyB,EAAE,CAAC,CAAC;QAC/E,CAAC;QAED,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;YAAE,OAAO;QAE5C,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACxC,IAAI,QAAQ,CAAC,MAAM,GAAG,+BAAuB,EAAE,CAAC;YAC9C,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK;gBACL,KAAK,EAAE,MAAM;gBACb,OAAO,EAAE,GAAG,KAAK,CAAC,IAAI,QAAQ,QAAQ,CAAC,MAAM,2BAA2B,+BAAuB,EAAE;aAClG,CAAC,CAAC;QACL,CAAC;QAED,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;QACzD,IAAI,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;YAC3C,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC,IAAI,0BAA0B,EAAE,CAAC,CAAC;QAC1F,CAAC;QACD,+EAA+E;QAC/E,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;YACxD,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK;gBACL,KAAK,EAAE,YAAY;gBACnB,OAAO,EAAE,GAAG,KAAK,CAAC,IAAI,qFAAqF;aAC5G,CAAC,CAAC;QACL,CAAC;QAED,MAAM,UAAU,GAAG,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAClD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACxC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;QACtC,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC;gBACV,KAAK;gBACL,KAAK,EAAE,MAAM;gBACb,OAAO,EAAE,GAAG,KAAK,CAAC,IAAI,0BAA0B,OAAO,6BAA6B;aACrF,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC;AAUD;;;;GAIG;AACH,SAAS,UAAU,CAAC,OAAe;IACjC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,IAAI,KAAa,CAAC;IAClB,IAAI,CAAC;QACH,KAAK,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,KAAK,KAAK,EAAE,IAAI,KAAK,KAAK,GAAG,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/G,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAgB,aAAa,CAC3B,MAAoB,EACpB,QAAgB;IAEhB,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACpE,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IAEhD,IAAI,IAAI,GAAwD,IAAI,CAAC;IAErE,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;QAC9C,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC;QACnD,IAAI,SAAS,KAAK,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,IAAI,QAAQ,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YAAE,IAAI,GAAG,SAAS,CAAC;IACrG,CAAC;IAED,OAAO,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;AAC3C,CAAC;AAED,qFAAqF;AACrF,SAAS,QAAQ,CACf,KAAQ,EACR,KAAa,EACb,QAA2B;IAE3B,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEpD,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,MAAM,IAAI,GAAc,EAAE,CAAC;IAC3B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACxC,MAAM,QAAQ,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACjC,IAAI,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YACpC,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;YACjC,IAAI,KAAK,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC;YAChC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC;YAClC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACnB,CAAC;aAAM,CAAC;YACN,IAAI,QAAQ,KAAK,MAAM;gBAAE,OAAO,IAAI,CAAC;YACrC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,CAAC;AACnD,CAAC;AAED,sFAAsF;AACtF,SAAS,QAAQ,CAAC,CAAqB,EAAE,CAAqB;IAC5D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAClC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC;IAC1C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/commonjs/apps/runtime/console.d.ts

@@ -0,0 +1,23 @@
+import type { BootstrapToHost } from "../protocol.js";
+export type LogEnvelope = Extract<BootstrapToHost, {
+    kind: "log";
+}>;
+export type LogLevel = LogEnvelope["level"];
+/** Longest message forwarded; well under C0's `MAX_ENVELOPE_CHARS`. */
+export declare const MAX_LOG_MESSAGE_CHARS = 8000;
+/** What a credential is replaced with in a forwarded line. */
+export declare const REDACTED = "[redacted]";
+export interface ForwardConsoleOptions {
+    /** Current secrets (the mounted views' access tokens), read on every forwarded line. */
+    secrets?: () => Iterable<string>;
+}
+/** Removes credentials from a line about to leave the sandbox. */
+export declare function redactLogMessage(message: string, secrets?: Iterable<string>): string;
+/**
+ * Patches `console` once; later calls replace the sink. Returns a function that restores the
+ * original methods.
+ */
+export declare function forwardConsole(post: (envelope: LogEnvelope) => void, target?: Console, options?: ForwardConsoleOptions): () => void;
+/** Formats `console` arguments into one redacted line, truncated to {@link MAX_LOG_MESSAGE_CHARS}. */
+export declare function formatLogArgs(args: readonly unknown[], secrets?: Iterable<string>): string;
+//# sourceMappingURL=console.d.ts.map

package/dist/commonjs/apps/runtime/console.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"console.d.ts","sourceRoot":"","sources":["../../../../src/apps/runtime/console.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEtD,MAAM,MAAM,WAAW,GAAG,OAAO,CAAC,eAAe,EAAE;IAAE,IAAI,EAAE,KAAK,CAAA;CAAE,CAAC,CAAC;AACpE,MAAM,MAAM,QAAQ,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;AAE5C,uEAAuE;AACvE,eAAO,MAAM,qBAAqB,OAAQ,CAAC;AAE3C,8DAA8D;AAC9D,eAAO,MAAM,QAAQ,eAAe,CAAC;AASrC,MAAM,WAAW,qBAAqB;IACpC,wFAAwF;IACxF,OAAO,CAAC,EAAE,MAAM,QAAQ,CAAC,MAAM,CAAC,CAAC;CAClC;AAED,kEAAkE;AAClE,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE,QAAQ,CAAC,MAAM,CAAM,GAAG,MAAM,CAMxF;AAYD;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,IAAI,EAAE,CAAC,QAAQ,EAAE,WAAW,KAAK,IAAI,EACrC,MAAM,GAAE,OAAiB,EACzB,OAAO,GAAE,qBAA0B,GAClC,MAAM,IAAI,CAgCZ;AAED,sGAAsG;AACtG,wBAAgB,aAAa,CAAC,IAAI,EAAE,SAAS,OAAO,EAAE,EAAE,OAAO,GAAE,QAAQ,CAAC,MAAM,CAAM,GAAG,MAAM,CAI9F"}

package/dist/commonjs/apps/runtime/console.js

@@ -0,0 +1,108 @@
+"use strict";
+/*
+ * Hand-written (not generated by Speakeasy). Third-party app developer kit (C10); see
+ * docs/third-party-apps/plan.md.
+ *
+ * Dev sessions only (`context.environment.devSessionId`): mirrors the worker's `console.*`
+ * calls to the host so `apps-cli dev` can print them. `HostApi` has no log method, so the
+ * runtime posts C0's `BootstrapToHost` `log` envelope on the worker channel, next to (not
+ * inside) the thread traffic. The bootstrap is expected to forward it to the host as-is; see
+ * `transport.ts` for the channel assumptions.
+ *
+ * Forwarded lines leave the sandbox, so credentials are redacted from them first: the current
+ * access tokens of every mounted view (passed in by the runtime), anything token-shaped
+ * (`gsu_…`, `gsi_…`, `gsd_…`, `gsdr_…`), and the value of any `Bearer` credential. The worker's
+ * own console still gets the original arguments.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.REDACTED = exports.MAX_LOG_MESSAGE_CHARS = void 0;
+exports.redactLogMessage = redactLogMessage;
+exports.forwardConsole = forwardConsole;
+exports.formatLogArgs = formatLogArgs;
+/** Longest message forwarded; well under C0's `MAX_ENVELOPE_CHARS`. */
+exports.MAX_LOG_MESSAGE_CHARS = 8000;
+/** What a credential is replaced with in a forwarded line. */
+exports.REDACTED = "[redacted]";
+/** Green Security token prefixes (`gsu_`, `gsi_`, `gsd_`, `gsdr_`, …) and what follows them. */
+const TOKEN_SHAPED = /\bgs[a-z]{1,4}_[A-Za-z0-9._~+/=-]+/g;
+/** The credential after `Bearer`, as it appears in an Authorization header. */
+const BEARER = /\b(Bearer\s+)[^\s"',;]+/gi;
+/** Shorter strings are not treated as secrets, so a blank or tiny token cannot blank the log. */
+const MIN_SECRET_LENGTH = 8;
+/** Removes credentials from a line about to leave the sandbox. */
+function redactLogMessage(message, secrets = []) {
+    let text = message;
+    for (const secret of secrets) {
+        if (typeof secret === "string" && secret.length >= MIN_SECRET_LENGTH)
+            text = text.split(secret).join(exports.REDACTED);
+    }
+    return text.replace(BEARER, `$1${exports.REDACTED}`).replace(TOKEN_SHAPED, exports.REDACTED);
+}
+const METHODS = [
+    ["debug", "debug"],
+    ["info", "info"],
+    ["log", "info"],
+    ["warn", "warn"],
+    ["error", "error"],
+];
+let restore;
+/**
+ * Patches `console` once; later calls replace the sink. Returns a function that restores the
+ * original methods.
+ */
+function forwardConsole(post, target = console, options = {}) {
+    restore?.();
+    const originals = new Map();
+    let forwarding = false;
+    for (const [method, level] of METHODS) {
+        const original = target[method].bind(target);
+        originals.set(method, target[method]);
+        target[method] = (...args) => {
+            original(...args);
+            if (forwarding)
+                return; // a failing `post` that logs must not recurse
+            forwarding = true;
+            try {
+                post({ kind: "log", level, message: formatLogArgs(args, options.secrets?.() ?? []) });
+            }
+            catch {
+                // Logging must never break the app.
+            }
+            finally {
+                forwarding = false;
+            }
+        };
+    }
+    const undo = () => {
+        for (const [method, original] of originals) {
+            target[method] = original;
+        }
+        if (restore === undo)
+            restore = undefined;
+    };
+    restore = undo;
+    return undo;
+}
+/** Formats `console` arguments into one redacted line, truncated to {@link MAX_LOG_MESSAGE_CHARS}. */
+function formatLogArgs(args, secrets = []) {
+    // Redacted before truncating, so a cut can never leave the start of a credential behind.
+    const text = redactLogMessage(args.map(formatValue).join(" "), secrets);
+    return text.length > exports.MAX_LOG_MESSAGE_CHARS ? `${text.slice(0, exports.MAX_LOG_MESSAGE_CHARS - 1)}…` : text;
+}
+function formatValue(value) {
+    if (typeof value === "string")
+        return value;
+    if (value instanceof Error)
+        return value.stack ?? `${value.name}: ${value.message}`;
+    if (typeof value === "function")
+        return `[function ${value.name || "anonymous"}]`;
+    if (typeof value === "bigint" || typeof value === "symbol")
+        return value.toString();
+    try {
+        return JSON.stringify(value) ?? String(value);
+    }
+    catch {
+        return String(value);
+    }
+}
+//# sourceMappingURL=console.js.map

package/dist/commonjs/apps/runtime/console.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"console.js","sourceRoot":"","sources":["../../../../src/apps/runtime/console.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;GAcG;;;AA0BH,4CAMC;AAgBD,wCAoCC;AAGD,sCAIC;AApFD,uEAAuE;AAC1D,QAAA,qBAAqB,GAAG,IAAK,CAAC;AAE3C,8DAA8D;AACjD,QAAA,QAAQ,GAAG,YAAY,CAAC;AAErC,gGAAgG;AAChG,MAAM,YAAY,GAAG,qCAAqC,CAAC;AAC3D,+EAA+E;AAC/E,MAAM,MAAM,GAAG,2BAA2B,CAAC;AAC3C,iGAAiG;AACjG,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAO5B,kEAAkE;AAClE,SAAgB,gBAAgB,CAAC,OAAe,EAAE,UAA4B,EAAE;IAC9E,IAAI,IAAI,GAAG,OAAO,CAAC;IACnB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,IAAI,iBAAiB;YAAE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,gBAAQ,CAAC,CAAC;IACjH,CAAC;IACD,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,gBAAQ,EAAE,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,gBAAQ,CAAC,CAAC;AAC/E,CAAC;AAED,MAAM,OAAO,GAA0F;IACrG,CAAC,OAAO,EAAE,OAAO,CAAC;IAClB,CAAC,MAAM,EAAE,MAAM,CAAC;IAChB,CAAC,KAAK,EAAE,MAAM,CAAC;IACf,CAAC,MAAM,EAAE,MAAM,CAAC;IAChB,CAAC,OAAO,EAAE,OAAO,CAAC;CACnB,CAAC;AAEF,IAAI,OAAiC,CAAC;AAEtC;;;GAGG;AACH,SAAgB,cAAc,CAC5B,IAAqC,EACrC,SAAkB,OAAO,EACzB,UAAiC,EAAE;IAEnC,OAAO,EAAE,EAAE,CAAC;IAEZ,MAAM,SAAS,GAAG,IAAI,GAAG,EAAwC,CAAC;IAClE,IAAI,UAAU,GAAG,KAAK,CAAC;IAEvB,KAAK,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;QACtC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAiC,CAAC;QAC7E,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAiC,CAAC,CAAC;QAEtE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,IAAe,EAAE,EAAE;YACtC,QAAQ,CAAC,GAAG,IAAI,CAAC,CAAC;YAClB,IAAI,UAAU;gBAAE,OAAO,CAAC,8CAA8C;YACtE,UAAU,GAAG,IAAI,CAAC;YAClB,IAAI,CAAC;gBACH,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,aAAa,CAAC,IAAI,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;YACxF,CAAC;YAAC,MAAM,CAAC;gBACP,oCAAoC;YACtC,CAAC;oBAAS,CAAC;gBACT,UAAU,GAAG,KAAK,CAAC;YACrB,CAAC;QACH,CAAC,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,GAAG,EAAE;QAChB,KAAK,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,SAAS,EAAE,CAAC;YAC1C,MAA6C,CAAC,MAAM,CAAC,GAAG,QAAQ,CAAC;QACpE,CAAC;QACD,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,GAAG,SAAS,CAAC;IAC5C,CAAC,CAAC;IACF,OAAO,GAAG,IAAI,CAAC;IACf,OAAO,IAAI,CAAC;AACd,CAAC;AAED,sGAAsG;AACtG,SAAgB,aAAa,CAAC,IAAwB,EAAE,UAA4B,EAAE;IACpF,yFAAyF;IACzF,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC;IACxE,OAAO,IAAI,CAAC,MAAM,GAAG,6BAAqB,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,6BAAqB,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AACrG,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,KAAK,YAAY,KAAK;QAAE,OAAO,KAAK,CAAC,KAAK,IAAI,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;IACpF,IAAI,OAAO,KAAK,KAAK,UAAU;QAAE,OAAO,aAAa,KAAK,CAAC,IAAI,IAAI,WAAW,GAAG,CAAC;IAClF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC;IACpF,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;AACH,CAAC"}

package/dist/commonjs/apps/runtime/elements.d.ts

@@ -0,0 +1,15 @@
+import { type RemoteElementConstructor } from "@remote-dom/core/elements";
+import { type ComponentName } from "../components.js";
+export declare const REMOTE_ROOT_TAG = "remote-root";
+export declare const REMOTE_FRAGMENT_TAG = "remote-fragment";
+/** Loose constructor type shared by every catalog element. */
+export type CatalogElementConstructor = RemoteElementConstructor<Record<string, unknown>, Record<string, never>, Record<string, unknown>, Record<string, unknown>>;
+/** The element class for each catalog component, keyed by component name. */
+export declare const ELEMENTS: Readonly<Record<ComponentName, CatalogElementConstructor>>;
+/**
+ * Registers `remote-root`, `remote-fragment` and every catalog tag with the polyfilled
+ * `customElements` registry. Idempotent, and tolerant of a tag another copy of the SDK already
+ * registered (a second registration would throw).
+ */
+export declare function defineRemoteElements(): void;
+//# sourceMappingURL=elements.d.ts.map

package/dist/commonjs/apps/runtime/elements.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"elements.d.ts","sourceRoot":"","sources":["../../../../src/apps/runtime/elements.ts"],"names":[],"mappings":"AAeA,OAAO,EAIL,KAAK,wBAAwB,EAE9B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAc,KAAK,aAAa,EAAqC,MAAM,kBAAkB,CAAC;AAErG,eAAO,MAAM,eAAe,gBAAgB,CAAC;AAC7C,eAAO,MAAM,mBAAmB,oBAAoB,CAAC;AAErD,8DAA8D;AAC9D,MAAM,MAAM,yBAAyB,GAAG,wBAAwB,CAC9D,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACvB,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,EACrB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACvB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CACxB,CAAC;AAuCF,6EAA6E;AAC7E,eAAO,MAAM,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,aAAa,EAAE,yBAAyB,CAAC,CAE3B,CAAC;AAItD;;;;GAIG;AACH,wBAAgB,oBAAoB,IAAI,IAAI,CAW3C"}

package/dist/commonjs/apps/runtime/elements.js

@@ -0,0 +1,76 @@
+"use strict";
+/*
+ * Hand-written (not generated by Speakeasy). Third-party app developer kit (C10); see
+ * docs/third-party-apps/plan.md.
+ *
+ * One remote custom element per entry of the C0 component catalog, built from the catalog
+ * itself so the SDK and the host renderer cannot drift apart:
+ *  - every declared prop becomes a remote property (sent to the host as a property update);
+ *  - every declared event becomes a remote event listener named by `EventSpec.event`
+ *    (`press`, `change`, `shownchange`, `save`, ...). The host calls the listener with the
+ *    event's `detail` as its only argument;
+ *  - every declared slot becomes a remote slot. Slotted content arrives at the host as a
+ *    `remote-fragment` child whose `slot` attribute names the slot.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ELEMENTS = exports.REMOTE_FRAGMENT_TAG = exports.REMOTE_ROOT_TAG = void 0;
+exports.defineRemoteElements = defineRemoteElements;
+const polyfill_js_1 = require("./polyfill.js");
+const elements_1 = require("@remote-dom/core/elements");
+const components_js_1 = require("../components.js");
+exports.REMOTE_ROOT_TAG = "remote-root";
+exports.REMOTE_FRAGMENT_TAG = "remote-fragment";
+function propertyType(spec) {
+    switch (spec.type) {
+        case "string":
+        case "enum":
+        case "imageSrc":
+            return String;
+        case "number":
+            return Number;
+        case "boolean":
+            return Boolean;
+        // `href` is a RouteDescriptor or a string; `json` is a plain object. Both travel as-is.
+        case "href":
+        case "json":
+            return Object;
+    }
+}
+function buildElement(spec) {
+    const properties = {};
+    for (const [name, propSpec] of Object.entries(spec.props)) {
+        properties[name] = { type: propertyType(propSpec) };
+    }
+    return (0, elements_1.createRemoteElement)({
+        properties,
+        events: Object.values(spec.events).map((e) => e.event),
+        slots: [...spec.slots],
+    });
+}
+const CATALOG = components_js_1.COMPONENTS;
+/** The element class for each catalog component, keyed by component name. */
+exports.ELEMENTS = Object.fromEntries(Object.keys(CATALOG).map((name) => [name, buildElement(CATALOG[name])]));
+let defined = false;
+/**
+ * Registers `remote-root`, `remote-fragment` and every catalog tag with the polyfilled
+ * `customElements` registry. Idempotent, and tolerant of a tag another copy of the SDK already
+ * registered (a second registration would throw).
+ */
+function defineRemoteElements() {
+    if (defined)
+        return;
+    if (!(0, polyfill_js_1.polyfillInstalled)())
+        throw new Error("The remote-dom polyfill is not installed");
+    defineOnce(exports.REMOTE_ROOT_TAG, elements_1.RemoteRootElement);
+    // Its published typings lose the HTMLElement base (an extensionless import); it is one.
+    defineOnce(exports.REMOTE_FRAGMENT_TAG, elements_1.RemoteFragmentElement);
+    for (const name of Object.keys(exports.ELEMENTS)) {
+        defineOnce(CATALOG[name].tagName, exports.ELEMENTS[name]);
+    }
+    defined = true;
+}
+function defineOnce(tagName, ctor) {
+    if (!customElements.get(tagName))
+        customElements.define(tagName, ctor);
+}
+//# sourceMappingURL=elements.js.map

package/dist/commonjs/apps/runtime/elements.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"elements.js","sourceRoot":"","sources":["../../../../src/apps/runtime/elements.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;GAYG;;;AAwEH,oDAWC;AAjFD,+CAAkD;AAClD,wDAMmC;AACnC,oDAAqG;AAExF,QAAA,eAAe,GAAG,aAAa,CAAC;AAChC,QAAA,mBAAmB,GAAG,iBAAiB,CAAC;AAUrD,SAAS,YAAY,CAAC,IAAc;IAClC,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,QAAQ,CAAC;QACd,KAAK,MAAM,CAAC;QACZ,KAAK,UAAU;YACb,OAAO,MAAM,CAAC;QAChB,KAAK,QAAQ;YACX,OAAO,MAAM,CAAC;QAChB,KAAK,SAAS;YACZ,OAAO,OAAO,CAAC;QACjB,wFAAwF;QACxF,KAAK,MAAM,CAAC;QACZ,KAAK,MAAM;YACT,OAAO,MAAM,CAAC;IAClB,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,IAAmB;IACvC,MAAM,UAAU,GAAoD,EAAE,CAAC;IACvE,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1D,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,YAAY,CAAC,QAAQ,CAAC,EAAE,CAAC;IACtD,CAAC;IAED,OAAO,IAAA,8BAAmB,EAKxB;QACA,UAAU;QACV,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;QACtD,KAAK,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC;KACvB,CAAC,CAAC;AACL,CAAC;AAED,MAAM,OAAO,GAAG,0BAA4D,CAAC;AAE7E,6EAA6E;AAChE,QAAA,QAAQ,GAA+D,MAAM,CAAC,WAAW,CACnG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAqB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CACzC,CAAC;AAEtD,IAAI,OAAO,GAAG,KAAK,CAAC;AAEpB;;;;GAIG;AACH,SAAgB,oBAAoB;IAClC,IAAI,OAAO;QAAE,OAAO;IACpB,IAAI,CAAC,IAAA,+BAAiB,GAAE;QAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;IAEtF,UAAU,CAAC,uBAAe,EAAE,4BAAiB,CAAC,CAAC;IAC/C,wFAAwF;IACxF,UAAU,CAAC,2BAAmB,EAAE,gCAA4D,CAAC,CAAC;IAC9F,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,gBAAQ,CAAoB,EAAE,CAAC;QAC5D,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,gBAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;IACpD,CAAC;IACD,OAAO,GAAG,IAAI,CAAC;AACjB,CAAC;AAED,SAAS,UAAU,CAAC,OAAe,EAAE,IAA8B;IACjE,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,cAAc,CAAC,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;AACzE,CAAC"}

package/dist/commonjs/apps/runtime/index.d.ts

@@ -0,0 +1,31 @@
+import { type AppDefinition, type SandboxRuntime, type SandboxRuntimeOptions } from "./sandbox.js";
+import { type ExposedSandbox, type MessageEndpoint, RuntimeChannel } from "./transport.js";
+export { createSandboxExports, MUTATION_BATCH_MS, type AppDefinition, type SandboxRuntime, type SandboxRuntimeOptions } from "./sandbox.js";
+export { ExtensionContextProvider, type ExtensionContextProviderProps } from "./provider.js";
+export { exposeSandbox, isWorkerGlobalScope, PORT_HANDOFF_KIND, RuntimeChannel, type ExposedSandbox, type MessageEndpoint, type PortHandoffMessage, } from "./transport.js";
+export { forwardConsole, formatLogArgs, MAX_LOG_MESSAGE_CHARS, REDACTED, redactLogMessage, type ForwardConsoleOptions, type LogEnvelope, type LogLevel, } from "./console.js";
+export { defineRemoteElements, ELEMENTS, REMOTE_FRAGMENT_TAG, REMOTE_ROOT_TAG } from "./elements.js";
+export { TokenStore, type TokenKind, type TokenSource } from "./session.js";
+export interface DefineAppOptions extends Omit<SandboxRuntimeOptions, "postLog"> {
+    /**
+     * Where to serve `SandboxExports`. Defaults to the worker's global scope when running in a
+     * Web Worker; outside one (tests, SSR) nothing is exposed unless you pass an endpoint.
+     */
+    endpoint?: MessageEndpoint | RuntimeChannel;
+}
+export interface DefinedApp {
+    /** The `SandboxExports` implementation, also callable directly (tests use this). */
+    exports: SandboxRuntime;
+    /**
+     * Present when the exports are served over a thread; resolves once the thread is answering.
+     * Messages that arrive before then are held, not dropped.
+     */
+    exposed?: Promise<ExposedSandbox>;
+}
+/**
+ * Registers your views and starts serving them to the host. Call it once, at the top level of
+ * your bundle's entry file. The bundle should not `export` anything: the host loads it as a
+ * worker script.
+ */
+export declare function defineApp(definition: AppDefinition, options?: DefineAppOptions): DefinedApp;
+//# sourceMappingURL=index.d.ts.map

package/dist/commonjs/apps/runtime/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/apps/runtime/index.ts"],"names":[],"mappings":"AAcA,OAAO,EAAwB,KAAK,aAAa,EAAE,KAAK,cAAc,EAAE,KAAK,qBAAqB,EAAE,MAAM,cAAc,CAAC;AACzH,OAAO,EAAsC,KAAK,cAAc,EAAE,KAAK,eAAe,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAE/H,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,KAAK,aAAa,EAAE,KAAK,cAAc,EAAE,KAAK,qBAAqB,EAAE,MAAM,cAAc,CAAC;AAC5I,OAAO,EAAE,wBAAwB,EAAE,KAAK,6BAA6B,EAAE,MAAM,eAAe,CAAC;AAC7F,OAAO,EACL,aAAa,EACb,mBAAmB,EACnB,iBAAiB,EACjB,cAAc,EACd,KAAK,cAAc,EACnB,KAAK,eAAe,EACpB,KAAK,kBAAkB,GACxB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,cAAc,EACd,aAAa,EACb,qBAAqB,EACrB,QAAQ,EACR,gBAAgB,EAChB,KAAK,qBAAqB,EAC1B,KAAK,WAAW,EAChB,KAAK,QAAQ,GACd,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,oBAAoB,EAAE,QAAQ,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AACrG,OAAO,EAAE,UAAU,EAAE,KAAK,SAAS,EAAE,KAAK,WAAW,EAAE,MAAM,cAAc,CAAC;AAE5E,MAAM,WAAW,gBAAiB,SAAQ,IAAI,CAAC,qBAAqB,EAAE,SAAS,CAAC;IAC9E;;;OAGG;IACH,QAAQ,CAAC,EAAE,eAAe,GAAG,cAAc,CAAC;CAC7C;AAED,MAAM,WAAW,UAAU;IACzB,oFAAoF;IACpF,OAAO,EAAE,cAAc,CAAC;IACxB;;;OAGG;IACH,OAAO,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;CACnC;AAED;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,UAAU,EAAE,aAAa,EAAE,OAAO,GAAE,gBAAqB,GAAG,UAAU,CAmB/F"}

package/dist/commonjs/apps/runtime/index.js

@@ -0,0 +1,69 @@
+"use strict";
+/*
+ * Hand-written (not generated by Speakeasy). Third-party app developer kit (C10); see
+ * docs/third-party-apps/plan.md.
+ *
+ * Import as `@greensecurity/javascript-sdk/apps/runtime`.
+ *
+ * ```ts
+ * import { defineApp } from "@greensecurity/javascript-sdk/apps/runtime";
+ * defineApp({ views: { VendorPanel, AppSettings } });
+ * ```
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TokenStore = exports.REMOTE_ROOT_TAG = exports.REMOTE_FRAGMENT_TAG = exports.ELEMENTS = exports.defineRemoteElements = exports.redactLogMessage = exports.REDACTED = exports.MAX_LOG_MESSAGE_CHARS = exports.formatLogArgs = exports.forwardConsole = exports.RuntimeChannel = exports.PORT_HANDOFF_KIND = exports.isWorkerGlobalScope = exports.exposeSandbox = exports.ExtensionContextProvider = exports.MUTATION_BATCH_MS = exports.createSandboxExports = void 0;
+exports.defineApp = defineApp;
+const polyfill_js_1 = require("./polyfill.js");
+const sandbox_js_1 = require("./sandbox.js");
+const transport_js_1 = require("./transport.js");
+var sandbox_js_2 = require("./sandbox.js");
+Object.defineProperty(exports, "createSandboxExports", { enumerable: true, get: function () { return sandbox_js_2.createSandboxExports; } });
+Object.defineProperty(exports, "MUTATION_BATCH_MS", { enumerable: true, get: function () { return sandbox_js_2.MUTATION_BATCH_MS; } });
+var provider_js_1 = require("./provider.js");
+Object.defineProperty(exports, "ExtensionContextProvider", { enumerable: true, get: function () { return provider_js_1.ExtensionContextProvider; } });
+var transport_js_2 = require("./transport.js");
+Object.defineProperty(exports, "exposeSandbox", { enumerable: true, get: function () { return transport_js_2.exposeSandbox; } });
+Object.defineProperty(exports, "isWorkerGlobalScope", { enumerable: true, get: function () { return transport_js_2.isWorkerGlobalScope; } });
+Object.defineProperty(exports, "PORT_HANDOFF_KIND", { enumerable: true, get: function () { return transport_js_2.PORT_HANDOFF_KIND; } });
+Object.defineProperty(exports, "RuntimeChannel", { enumerable: true, get: function () { return transport_js_2.RuntimeChannel; } });
+var console_js_1 = require("./console.js");
+Object.defineProperty(exports, "forwardConsole", { enumerable: true, get: function () { return console_js_1.forwardConsole; } });
+Object.defineProperty(exports, "formatLogArgs", { enumerable: true, get: function () { return console_js_1.formatLogArgs; } });
+Object.defineProperty(exports, "MAX_LOG_MESSAGE_CHARS", { enumerable: true, get: function () { return console_js_1.MAX_LOG_MESSAGE_CHARS; } });
+Object.defineProperty(exports, "REDACTED", { enumerable: true, get: function () { return console_js_1.REDACTED; } });
+Object.defineProperty(exports, "redactLogMessage", { enumerable: true, get: function () { return console_js_1.redactLogMessage; } });
+var elements_js_1 = require("./elements.js");
+Object.defineProperty(exports, "defineRemoteElements", { enumerable: true, get: function () { return elements_js_1.defineRemoteElements; } });
+Object.defineProperty(exports, "ELEMENTS", { enumerable: true, get: function () { return elements_js_1.ELEMENTS; } });
+Object.defineProperty(exports, "REMOTE_FRAGMENT_TAG", { enumerable: true, get: function () { return elements_js_1.REMOTE_FRAGMENT_TAG; } });
+Object.defineProperty(exports, "REMOTE_ROOT_TAG", { enumerable: true, get: function () { return elements_js_1.REMOTE_ROOT_TAG; } });
+var session_js_1 = require("./session.js");
+Object.defineProperty(exports, "TokenStore", { enumerable: true, get: function () { return session_js_1.TokenStore; } });
+/**
+ * Registers your views and starts serving them to the host. Call it once, at the top level of
+ * your bundle's entry file. The bundle should not `export` anything: the host loads it as a
+ * worker script.
+ */
+function defineApp(definition, options = {}) {
+    if (!(0, polyfill_js_1.polyfillInstalled)())
+        throw new Error("The remote-dom polyfill failed to install");
+    const { endpoint, ...runtimeOptions } = options;
+    let channel;
+    if (endpoint instanceof transport_js_1.RuntimeChannel)
+        channel = endpoint;
+    else if (endpoint)
+        channel = new transport_js_1.RuntimeChannel(endpoint);
+    else if ((0, transport_js_1.isWorkerGlobalScope)())
+        channel = new transport_js_1.RuntimeChannel(globalThis);
+    const exports = (0, sandbox_js_1.createSandboxExports)(definition, {
+        ...runtimeOptions,
+        ...(channel ? { postLog: (envelope) => channel.postLog(envelope) } : {}),
+    });
+    if (!channel)
+        return { exports };
+    const exposed = (0, transport_js_1.exposeSandbox)(exports, { endpoint: channel });
+    // Nothing in a worker entry awaits this, so report a failed load instead of an unhandled rejection.
+    exposed.catch((error) => console.error("[green-app] could not start the host connection:", error));
+    return { exports, exposed };
+}
+//# sourceMappingURL=index.js.map

package/dist/commonjs/apps/runtime/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/apps/runtime/index.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;GAUG;;;AAsDH,8BAmBC;AAvED,+CAAkD;AAElD,6CAAyH;AACzH,iDAA+H;AAE/H,2CAA4I;AAAnI,kHAAA,oBAAoB,OAAA;AAAE,+GAAA,iBAAiB,OAAA;AAChD,6CAA6F;AAApF,uHAAA,wBAAwB,OAAA;AACjC,+CAQwB;AAPtB,6GAAA,aAAa,OAAA;AACb,mHAAA,mBAAmB,OAAA;AACnB,iHAAA,iBAAiB,OAAA;AACjB,8GAAA,cAAc,OAAA;AAKhB,2CASsB;AARpB,4GAAA,cAAc,OAAA;AACd,2GAAA,aAAa,OAAA;AACb,mHAAA,qBAAqB,OAAA;AACrB,sGAAA,QAAQ,OAAA;AACR,8GAAA,gBAAgB,OAAA;AAKlB,6CAAqG;AAA5F,mHAAA,oBAAoB,OAAA;AAAE,uGAAA,QAAQ,OAAA;AAAE,kHAAA,mBAAmB,OAAA;AAAE,8GAAA,eAAe,OAAA;AAC7E,2CAA4E;AAAnE,wGAAA,UAAU,OAAA;AAoBnB;;;;GAIG;AACH,SAAgB,SAAS,CAAC,UAAyB,EAAE,UAA4B,EAAE;IACjF,IAAI,CAAC,IAAA,+BAAiB,GAAE;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAEvF,MAAM,EAAE,QAAQ,EAAE,GAAG,cAAc,EAAE,GAAG,OAAO,CAAC;IAChD,IAAI,OAAmC,CAAC;IACxC,IAAI,QAAQ,YAAY,6BAAc;QAAE,OAAO,GAAG,QAAQ,CAAC;SACtD,IAAI,QAAQ;QAAE,OAAO,GAAG,IAAI,6BAAc,CAAC,QAAQ,CAAC,CAAC;SACrD,IAAI,IAAA,kCAAmB,GAAE;QAAE,OAAO,GAAG,IAAI,6BAAc,CAAC,UAAwC,CAAC,CAAC;IAEvG,MAAM,OAAO,GAAG,IAAA,iCAAoB,EAAC,UAAU,EAAE;QAC/C,GAAG,cAAc;QACjB,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzE,CAAC,CAAC;IAEH,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IACjC,MAAM,OAAO,GAAG,IAAA,4BAAa,EAAC,OAAgC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IACvF,oGAAoG;IACpG,OAAO,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,kDAAkD,EAAE,KAAK,CAAC,CAAC,CAAC;IAC5G,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC9B,CAAC"}

package/dist/commonjs/apps/runtime/polyfill.d.ts

@@ -0,0 +1,5 @@
+import { window as remoteWindow } from "@remote-dom/core/polyfill";
+export { remoteWindow };
+/** True once the polyfilled `window` is in place. Referencing it keeps this module in bundles. */
+export declare function polyfillInstalled(): boolean;
+//# sourceMappingURL=polyfill.d.ts.map

package/dist/commonjs/apps/runtime/polyfill.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"polyfill.d.ts","sourceRoot":"","sources":["../../../../src/apps/runtime/polyfill.ts"],"names":[],"mappings":"AAcA,OAAO,EAAE,MAAM,IAAI,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAKnE,OAAO,EAAE,YAAY,EAAE,CAAC;AAExB,kGAAkG;AAClG,wBAAgB,iBAAiB,IAAI,OAAO,CAE3C"}

package/dist/commonjs/apps/runtime/polyfill.js

@@ -0,0 +1,26 @@
+"use strict";
+/*
+ * Hand-written (not generated by Speakeasy). Third-party app developer kit (C10); see
+ * docs/third-party-apps/plan.md.
+ *
+ * Installs the DOM polyfill an app's worker needs before anything touches `HTMLElement`.
+ * Order matters: `@remote-dom/core/polyfill` creates `window`, `document`, `HTMLElement` and
+ * `customElements`, then `installReactDomShims` adds what react-dom probes for
+ * (`HTMLIFrameElement`, `location`, `navigator`, `Element#style`).
+ *
+ * Every module in this kit that imports `@remote-dom/core/elements` imports this module first,
+ * and uses `remoteWindow` so bundlers cannot drop the import: the SDK package is
+ * `sideEffects: false`, so a bare `import "./polyfill.js"` would be tree-shaken away.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.remoteWindow = void 0;
+exports.polyfillInstalled = polyfillInstalled;
+const polyfill_1 = require("@remote-dom/core/polyfill");
+Object.defineProperty(exports, "remoteWindow", { enumerable: true, get: function () { return polyfill_1.window; } });
+const react_dom_shims_js_1 = require("./react-dom-shims.js");
+(0, react_dom_shims_js_1.installReactDomShims)(polyfill_1.window);
+/** True once the polyfilled `window` is in place. Referencing it keeps this module in bundles. */
+function polyfillInstalled() {
+    return typeof polyfill_1.window === "object" && polyfill_1.window !== null;
+}
+//# sourceMappingURL=polyfill.js.map

package/dist/commonjs/apps/runtime/polyfill.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"polyfill.js","sourceRoot":"","sources":["../../../../src/apps/runtime/polyfill.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;GAYG;;;AAUH,8CAEC;AAVD,wDAAmE;AAK1D,6FALU,iBAAY,OAKV;AAJrB,6DAA4D;AAE5D,IAAA,yCAAoB,EAAC,iBAAY,CAAC,CAAC;AAInC,kGAAkG;AAClG,SAAgB,iBAAiB;IAC/B,OAAO,OAAO,iBAAY,KAAK,QAAQ,IAAI,iBAAY,KAAK,IAAI,CAAC;AACnE,CAAC"}