npm - @greensecurity/javascript-sdk - Versions diffs - 0.46.0 → 0.47.0-beta.0 - Mend

@greensecurity/javascript-sdk 0.46.0 → 0.47.0-beta.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (1785) hide show

package/README.md CHANGED Viewed

@@ -177,6 +177,23 @@ run();
 * [listAlerts](docs/sdks/alerts/README.md#listalerts) - List alerts
 * [updateUserAlerts](docs/sdks/alerts/README.md#updateuseralerts) - Update user alerts
+### [Apps](docs/sdks/apps/README.md)
+* [listAppActivations](docs/sdks/apps/README.md#listappactivations) - List your app's activations
+* [rotateAppWebhookEndpointSecret](docs/sdks/apps/README.md#rotateappwebhookendpointsecret) - Rotate your app's webhook signing secret
+* [listAppSecrets](docs/sdks/apps/README.md#listappsecrets) - List app secrets
+* [setAppSecret](docs/sdks/apps/README.md#setappsecret) - Set an app secret
+* [findAppSecret](docs/sdks/apps/README.md#findappsecret) - Find an app secret
+* [deleteAppSecret](docs/sdks/apps/README.md#deleteappsecret) - Delete an app secret
+* [publishAppManifest](docs/sdks/apps/README.md#publishappmanifest) - Publish an app manifest
+* [listAppDevelopers](docs/sdks/apps/README.md#listappdevelopers) - List app developers
+* [addAppDeveloper](docs/sdks/apps/README.md#addappdeveloper) - Add an app developer
+* [removeAppDeveloper](docs/sdks/apps/README.md#removeappdeveloper) - Remove an app developer
+* [listAppVersions](docs/sdks/apps/README.md#listappversions) - List app versions with installation counts
+* [createAppDevSession](docs/sdks/apps/README.md#createappdevsession) - Start a dev session
+* [closeAppDevSession](docs/sdks/apps/README.md#closeappdevsession) - Close a dev session
+* [heartbeatAppDevSession](docs/sdks/apps/README.md#heartbeatappdevsession) - Keep a dev session alive
 ### [Companies](docs/sdks/companies/README.md)
 * [listOrSearchCompanies](docs/sdks/companies/README.md#listorsearchcompanies) - List or search companies
@@ -271,6 +288,13 @@ run();
 * [addMobileDevice](docs/sdks/mobiledevices/README.md#addmobiledevice) - Add mobile device
+### [Oauth](docs/sdks/oauth/README.md)
+* [createToken](docs/sdks/oauth/README.md#createtoken) - Issue an access, app or developer token
+* [createDeviceAuthorization](docs/sdks/oauth/README.md#createdeviceauthorization) - Start a device login
+* [introspectToken](docs/sdks/oauth/README.md#introspecttoken) - Check an app token
+* [revokeToken](docs/sdks/oauth/README.md#revoketoken) - Revoke a token
 ### [Organizations](docs/sdks/organizations/README.md)
 * [listOrSearchFacilities](docs/sdks/organizations/README.md#listorsearchfacilities) - List or search facilities
@@ -434,6 +458,20 @@ To read more about standalone functions, check [FUNCTIONS.md](./FUNCTIONS.md).
 - [`alertsListAlerts`](docs/sdks/alerts/README.md#listalerts) - List alerts
 - [`alertsUpdateUserAlerts`](docs/sdks/alerts/README.md#updateuseralerts) - Update user alerts
+- [`appsAddAppDeveloper`](docs/sdks/apps/README.md#addappdeveloper) - Add an app developer
+- [`appsCloseAppDevSession`](docs/sdks/apps/README.md#closeappdevsession) - Close a dev session
+- [`appsCreateAppDevSession`](docs/sdks/apps/README.md#createappdevsession) - Start a dev session
+- [`appsDeleteAppSecret`](docs/sdks/apps/README.md#deleteappsecret) - Delete an app secret
+- [`appsFindAppSecret`](docs/sdks/apps/README.md#findappsecret) - Find an app secret
+- [`appsHeartbeatAppDevSession`](docs/sdks/apps/README.md#heartbeatappdevsession) - Keep a dev session alive
+- [`appsListAppActivations`](docs/sdks/apps/README.md#listappactivations) - List your app's activations
+- [`appsListAppDevelopers`](docs/sdks/apps/README.md#listappdevelopers) - List app developers
+- [`appsListAppSecrets`](docs/sdks/apps/README.md#listappsecrets) - List app secrets
+- [`appsListAppVersions`](docs/sdks/apps/README.md#listappversions) - List app versions with installation counts
+- [`appsPublishAppManifest`](docs/sdks/apps/README.md#publishappmanifest) - Publish an app manifest
+- [`appsRemoveAppDeveloper`](docs/sdks/apps/README.md#removeappdeveloper) - Remove an app developer
+- [`appsRotateAppWebhookEndpointSecret`](docs/sdks/apps/README.md#rotateappwebhookendpointsecret) - Rotate your app's webhook signing secret
+- [`appsSetAppSecret`](docs/sdks/apps/README.md#setappsecret) - Set an app secret
 - [`companiesAddCompanyManager`](docs/sdks/companies/README.md#addcompanymanager) - Add company manager
 - [`companiesGetCompany`](docs/sdks/companies/README.md#getcompany) - Get company
 - [`companiesListCompanyCredentials`](docs/sdks/companies/README.md#listcompanycredentials) - List company credentials
@@ -503,6 +541,10 @@ To read more about standalone functions, check [FUNCTIONS.md](./FUNCTIONS.md).
 - [`medicalProductsUpdateMedicalProductCategory`](docs/sdks/medicalproducts/README.md#updatemedicalproductcategory) - Update the product category with the given ID
 - [`medicalProductsUpdateMedicalProductFamily`](docs/sdks/medicalproducts/README.md#updatemedicalproductfamily) - Update the product family with the given ID
 - [`mobileDevicesAddMobileDevice`](docs/sdks/mobiledevices/README.md#addmobiledevice) - Add mobile device
+- [`oauthCreateDeviceAuthorization`](docs/sdks/oauth/README.md#createdeviceauthorization) - Start a device login
+- [`oauthCreateToken`](docs/sdks/oauth/README.md#createtoken) - Issue an access, app or developer token
+- [`oauthIntrospectToken`](docs/sdks/oauth/README.md#introspecttoken) - Check an app token
+- [`oauthRevokeToken`](docs/sdks/oauth/README.md#revoketoken) - Revoke a token
 - [`organizationsCreateCompanyTargetFacility`](docs/sdks/organizations/README.md#createcompanytargetfacility) - Add a company target facility
 - [`organizationsDeleteCompanyTargetFacility`](docs/sdks/organizations/README.md#deletecompanytargetfacility) - Remove a company target facility
 - [`organizationsDownloadCompanyTargetFacilitiesExport`](docs/sdks/organizations/README.md#downloadcompanytargetfacilitiesexport) - Download company target facilities CSV
@@ -642,6 +684,20 @@ To learn about this feature and how to get started, check
 - [`useAlertsListAlerts`](docs/sdks/alerts/README.md#listalerts) - List alerts
 - [`useAlertsUpdateUserAlertsMutation`](docs/sdks/alerts/README.md#updateuseralerts) - Update user alerts
+- [`useAppsAddAppDeveloperMutation`](docs/sdks/apps/README.md#addappdeveloper) - Add an app developer
+- [`useAppsCloseAppDevSessionMutation`](docs/sdks/apps/README.md#closeappdevsession) - Close a dev session
+- [`useAppsCreateAppDevSessionMutation`](docs/sdks/apps/README.md#createappdevsession) - Start a dev session
+- [`useAppsDeleteAppSecretMutation`](docs/sdks/apps/README.md#deleteappsecret) - Delete an app secret
+- [`useAppsFindAppSecret`](docs/sdks/apps/README.md#findappsecret) - Find an app secret
+- [`useAppsHeartbeatAppDevSessionMutation`](docs/sdks/apps/README.md#heartbeatappdevsession) - Keep a dev session alive
+- [`useAppsListAppActivations`](docs/sdks/apps/README.md#listappactivations) - List your app's activations
+- [`useAppsListAppDevelopers`](docs/sdks/apps/README.md#listappdevelopers) - List app developers
+- [`useAppsListAppSecrets`](docs/sdks/apps/README.md#listappsecrets) - List app secrets
+- [`useAppsListAppVersions`](docs/sdks/apps/README.md#listappversions) - List app versions with installation counts
+- [`useAppsPublishAppManifestMutation`](docs/sdks/apps/README.md#publishappmanifest) - Publish an app manifest
+- [`useAppsRemoveAppDeveloperMutation`](docs/sdks/apps/README.md#removeappdeveloper) - Remove an app developer
+- [`useAppsRotateAppWebhookEndpointSecretMutation`](docs/sdks/apps/README.md#rotateappwebhookendpointsecret) - Rotate your app's webhook signing secret
+- [`useAppsSetAppSecretMutation`](docs/sdks/apps/README.md#setappsecret) - Set an app secret
 - [`useCompaniesAddCompanyManagerMutation`](docs/sdks/companies/README.md#addcompanymanager) - Add company manager
 - [`useCompaniesGetCompany`](docs/sdks/companies/README.md#getcompany) - Get company
 - [`useCompaniesListCompanyCredentials`](docs/sdks/companies/README.md#listcompanycredentials) - List company credentials
@@ -711,6 +767,10 @@ To learn about this feature and how to get started, check
 - [`useMedicalProductsUpdateMedicalProductFamilyMutation`](docs/sdks/medicalproducts/README.md#updatemedicalproductfamily) - Update the product family with the given ID
 - [`useMedicalProductsUpdateMedicalProductMutation`](docs/sdks/medicalproducts/README.md#updatemedicalproduct) - Update the medical product with the given ID
 - [`useMobileDevicesAddMobileDeviceMutation`](docs/sdks/mobiledevices/README.md#addmobiledevice) - Add mobile device
+- [`useOauthCreateDeviceAuthorizationMutation`](docs/sdks/oauth/README.md#createdeviceauthorization) - Start a device login
+- [`useOauthCreateTokenMutation`](docs/sdks/oauth/README.md#createtoken) - Issue an access, app or developer token
+- [`useOauthIntrospectTokenMutation`](docs/sdks/oauth/README.md#introspecttoken) - Check an app token
+- [`useOauthRevokeTokenMutation`](docs/sdks/oauth/README.md#revoketoken) - Revoke a token
 - [`useOrganizationsCreateCompanyTargetFacilityMutation`](docs/sdks/organizations/README.md#createcompanytargetfacility) - Add a company target facility
 - [`useOrganizationsDeleteCompanyTargetFacilityMutation`](docs/sdks/organizations/README.md#deletecompanytargetfacility) - Remove a company target facility
 - [`useOrganizationsDownloadCompanyTargetFacilitiesExport`](docs/sdks/organizations/README.md#downloadcompanytargetfacilitiesexport) - Download company target facilities CSV
@@ -1000,9 +1060,9 @@ run();
 ### Error Classes
 **Primary errors:**
 * [`GreenSecurityError`](./src/models/errors/greensecurityerror.ts): The base class for HTTP error responses.
-  * [`ApiErrorResponse`](./src/models/errors/apierrorresponse.ts): Green Security uses conventional HTTP response codes to indicate the success or failure of an API request. In general: Codes in the 2xx range indicate success. Codes in the 4xx range indicate an error that failed given the information provided (for example, a required parameter is missing or a charge fails). Codes in the 5xx range indicate an error with Green Security's servers (these are rare).  Some 4xx errors that your code can handle programmatically (for example, invalid input) include an error description that briefly explains the error reported.
+  * [`ApiErrorResponse`](./src/models/errors/apierrorresponse.ts): Green Security uses conventional HTTP response codes to indicate the success or failure of an API request. In general: Codes in the 2xx range indicate success. Codes in the 4xx range indicate an error that failed given the information provided (for example, a required parameter is missing or a charge fails). Codes in the 5xx range indicate an error with Green Security's servers (these are rare).  Some 4xx errors that your code can handle programmatically (for example, invalid input) include an error description that briefly explains the error reported. *
-<details><summary>Less common errors (7)</summary>
+<details><summary>Less common errors (9)</summary>
 <br />
@@ -1015,7 +1075,9 @@ run();
 **Inherit from [`GreenSecurityError`](./src/models/errors/greensecurityerror.ts)**:
-* [`ApiValidationErrorResponse`](./src/models/errors/apivalidationerrorresponse.ts): Returned when path, query or body parameters fail validation, which happens before the endpoint's own logic runs. The `error` property is an array of field-to-messages objects here, not the plain string carried by `ApiErrorResponse`—a client that models the 422 body must handle both shapes. Status code `422`. Applicable to 3 of 182 methods.*
+* [`ApiValidationErrorResponse`](./src/models/errors/apivalidationerrorresponse.ts): Returned when path, query or body parameters fail validation, which happens before the endpoint's own logic runs. The `error` property is an array of field-to-messages objects here, not the plain string carried by `ApiErrorResponse`—a client that models the 422 body must handle both shapes. Status code `422`. Applicable to 17 of 200 methods.*
+* [`OAuthError`](./src/models/errors/oautherror.ts): The error body of the `/oauth/*` endpoints (RFC 6749 section 5.2, RFC 8628 section 3.5). These endpoints use this shape rather than `ApiErrorResponse`, including for a body that fails validation or cannot be parsed: that is a `400` `invalid_request`, never a `422`. Applicable to 4 of 200 methods.*
+* [`DevSessionErrorResponse`](./src/models/errors/devsessionerrorresponse.ts): The standard error envelope. When `manifest` is refused, it also carries `errors`. Status code `422`. Applicable to 1 of 200 methods.*
 * [`ResponseValidationError`](./src/models/errors/responsevalidationerror.ts): Type mismatch between the data returned from the server and the structure expected by the SDK. See `error.rawValue` for the raw value and `error.pretty()` for a nicely formatted multi-line string.
 </details>

package/dist/commonjs/__tests__/alerts.test.js CHANGED Viewed

@@ -31,6 +31,7 @@ const testclient_js_1 = require("./testclient.js");
             itemsPerPage: 562526,
             page: 1,
             useUrlParams: true,
+            scope: null,
         },
         items: [],
     });

package/dist/commonjs/__tests__/alerts.test.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"alerts.test.js","sourceRoot":"","sources":["../../../src/__tests__/alerts.test.ts"],"names":[],"mappings":";AAAA;;GAEG;;AAEH,mCAAsC;AACtC,0CAA4C;AAC5C,mDAAuD;AAEvD,IAAA,aAAI,EAAC,oBAAoB,EAAE,KAAK,IAAI,EAAE;IACpC,MAAM,cAAc,GAAG,IAAA,oCAAoB,EAAC,YAAY,CAAC,CAAC;IAE1D,MAAM,aAAa,GAAG,IAAI,wBAAa,CAAC;QACtC,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,4BAA4B;QACzE,UAAU,EAAE,cAAc;QAC1B,QAAQ,EAAE;YACR,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,IAAI,OAAO;SACtD;KACF,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,UAAU,CAAC;QACnD,IAAI,EAAE,KAAK;QACX,IAAI,EAAE,IAAI;QACV,YAAY,EAAE,EAAE;KACjB,CAAC,CAAC;IACH,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;IAC7B,IAAA,eAAM,EAAC,MAAO,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;IACrC,IAAA,eAAM,EAAC,MAAO,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;QAC7B,KAAK,EAAE;YACL,OAAO,EAAE,wBAAwB;YACjC,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,CAAC;YACP,SAAS,EAAE,GAAG;YACd,YAAY,EAAE,MAAM;YACpB,IAAI,EAAE,CAAC;YACP,YAAY,EAAE,IAAI;~~SACnB~~;QACD,KAAK,EAAE,EAAE;KACV,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAA,aAAI,EAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE;IAC3C,MAAM,cAAc,GAAG,IAAA,oCAAoB,EAAC,kBAAkB,CAAC,CAAC;IAEhE,MAAM,aAAa,GAAG,IAAI,wBAAa,CAAC;QACtC,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,4BAA4B;QACzE,UAAU,EAAE,cAAc;QAC1B,QAAQ,EAAE;YACR,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,IAAI,OAAO;SACtD;KACF,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;IAC/D,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;IAC7B,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AAC7B,CAAC,CAAC,CAAC"}
1	+ {"version":3,"file":"alerts.test.js","sourceRoot":"","sources":["../../../src/__tests__/alerts.test.ts"],"names":[],"mappings":";AAAA;;GAEG;;AAEH,mCAAsC;AACtC,0CAA4C;AAC5C,mDAAuD;AAEvD,IAAA,aAAI,EAAC,oBAAoB,EAAE,KAAK,IAAI,EAAE;IACpC,MAAM,cAAc,GAAG,IAAA,oCAAoB,EAAC,YAAY,CAAC,CAAC;IAE1D,MAAM,aAAa,GAAG,IAAI,wBAAa,CAAC;QACtC,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,4BAA4B;QACzE,UAAU,EAAE,cAAc;QAC1B,QAAQ,EAAE;YACR,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,IAAI,OAAO;SACtD;KACF,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,UAAU,CAAC;QACnD,IAAI,EAAE,KAAK;QACX,IAAI,EAAE,IAAI;QACV,YAAY,EAAE,EAAE;KACjB,CAAC,CAAC;IACH,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;IAC7B,IAAA,eAAM,EAAC,MAAO,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;IACrC,IAAA,eAAM,EAAC,MAAO,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC;QAC7B,KAAK,EAAE;YACL,OAAO,EAAE,wBAAwB;YACjC,IAAI,EAAE,WAAW;YACjB,IAAI,EAAE,CAAC;YACP,SAAS,EAAE,GAAG;YACd,YAAY,EAAE,MAAM;YACpB,IAAI,EAAE,CAAC;YACP,YAAY,EAAE,IAAI;YAClB,KAAK,EAAE,IAAI;SACZ;QACD,KAAK,EAAE,EAAE;KACV,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,IAAA,aAAI,EAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE;IAC3C,MAAM,cAAc,GAAG,IAAA,oCAAoB,EAAC,kBAAkB,CAAC,CAAC;IAEhE,MAAM,aAAa,GAAG,IAAI,wBAAa,CAAC;QACtC,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,IAAI,4BAA4B;QACzE,UAAU,EAAE,cAAc;QAC1B,QAAQ,EAAE;YACR,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,IAAI,OAAO;SACtD;KACF,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC;IAC/D,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;IAC7B,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AAC7B,CAAC,CAAC,CAAC"}

package/dist/commonjs/__tests__/apps/contract.test.js CHANGED Viewed

@@ -48,7 +48,7 @@ function withCsp(connectSrc) {
         const ids = index_js_1.SURFACES.map((s) => s.id);
         (0, vitest_1.expect)(new Set(ids).size).toBe(ids.length);
         for (const s of index_js_1.SURFACES) {
-            if (s.id === "settings")
+            if (s.portal === null)
                 continue;
             (0, vitest_1.expect)(s.id).toMatch(/^gs\.(vendor|company|facility|system)\.[a-z_]+(\.[a-z_]+)*$/);
             (0, vitest_1.expect)(s.id.startsWith(`gs.${s.portal}.`)).toBe(true);
@@ -60,6 +60,10 @@ function withCsp(connectSrc) {
             (0, vitest_1.expect)(s.route.startsWith(s.portal === null ? "/[portal]/" : `/${s.portal}`)).toBe(true);
         }
         (0, vitest_1.expect)((0, index_js_1.getSurface)("settings")?.route).toBe("/[portal]/apps/[appId]/settings");
+        (0, vitest_1.expect)((0, index_js_1.getSurface)("page")?.route).toBe("/[portal]/apps/[appId]/pages/[...path]");
+    });
+    (0, vitest_1.test)("the only portal-less surfaces are the app's own settings page and pages", () => {
+        (0, vitest_1.expect)(index_js_1.SURFACES.filter((s) => s.portal === null).map((s) => s.id).sort()).toEqual(["page", "settings"]);
     });
     (0, vitest_1.test)("wave 1 is the vendor and company portals only", () => {
         const wave1Portals = new Set(index_js_1.SURFACES.filter((s) => s.wave === 1).map((s) => s.portal));
@@ -395,9 +399,17 @@ function withCsp(connectSrc) {
         (0, vitest_1.expect)(index_js_1.COMPONENTS.Inline.children).toEqual(["ui-inline", "ui-link"]);
         (0, vitest_1.expect)(index_js_1.COMPONENTS.Text.children).toEqual(["ui-inline", "ui-link"]);
     });
-    (0, vitest_1.test)("only ContextView and SettingsView are roots", () => {
+    (0, vitest_1.test)("only ContextView, SettingsView and PageView are roots", () => {
         const roots = Object.entries(index_js_1.COMPONENTS).filter(([, c]) => "root" in c).map(([name]) => name);
-        (0, vitest_1.expect)(roots.sort()).toEqual(["ContextView", "SettingsView"]);
+        (0, vitest_1.expect)(roots.sort()).toEqual(["ContextView", "PageView", "SettingsView"]);
+    });
+    (0, vitest_1.test)("PageView takes a required title, a description and the actions and banner slots", () => {
+        (0, vitest_1.expect)(index_js_1.COMPONENTS.PageView.tagName).toBe("ui-page-view");
+        (0, vitest_1.expect)(index_js_1.COMPONENTS.PageView.slots).toEqual(["actions", "banner"]);
+        (0, vitest_1.expect)((0, index_js_1.sanitizeProps)("ui-page-view", { title: "Reports", description: "All of them" }).props).toEqual({ title: "Reports", description: "All of them" });
+        (0, vitest_1.expect)((0, index_js_1.sanitizeProps)("ui-page-view", { title: "t".repeat(101) }).dropped).toEqual(["title"]);
+        (0, vitest_1.expect)((0, index_js_1.sanitizeProps)("ui-page-view", { title: "Reports", description: "d".repeat(301) }).dropped).toEqual(["description"]);
+        (0, vitest_1.expect)((0, index_js_1.componentsCatalogJson)().find((c) => c.name === "PageView")).toMatchObject({ tagName: "ui-page-view", root: true });
     });
     (0, vitest_1.test)("sanitizeProps keeps declared props of the right type and drops everything else", () => {
         const result = (0, index_js_1.sanitizeProps)("ui-button", {
@@ -568,6 +580,278 @@ function withCsp(connectSrc) {
         (0, vitest_1.expect)(() => JSON.stringify(json)).not.toThrow();
     });
 });
+(0, vitest_1.describe)("charts", () => {
+    const CHART_TAGS = {
+        BarChart: "ui-bar-chart",
+        HorizontalBarChart: "ui-horizontal-bar-chart",
+        StackedBarChart: "ui-stacked-bar-chart",
+        LineChart: "ui-line-chart",
+        AreaChart: "ui-area-chart",
+        ComboChart: "ui-combo-chart",
+        PieChart: "ui-pie-chart",
+    };
+    const labels = (n) => Array.from({ length: n }, (_, i) => `L${i}`);
+    const datums = (n) => labels(n).map((label, i) => ({ label, value: i }));
+    const seriesData = (nLabels, nSeries = 2) => ({
+        labels: labels(nLabels),
+        series: Array.from({ length: nSeries }, (_, s) => ({ name: `S${s}`, values: labels(nLabels).map((_, i) => i + s) })),
+    });
+    const combo = (n) => ({
+        labels: labels(n),
+        bars: { name: "Visits", values: labels(n).map((_, i) => i) },
+        line: { name: "Average", values: labels(n).map((_, i) => i / 2) },
+    });
+    const BAD_VALUES = [-1, Number.NaN, Number.POSITIVE_INFINITY, Number.NEGATIVE_INFINITY, "3", null];
+    const BAD_LABELS = ["", "   ", "x".repeat(61), 5, null];
+    class Datum {
+        constructor(label, value) {
+            this.label = label;
+            this.value = value;
+        }
+    }
+    class DatumArray extends Array {
+    }
+    (0, vitest_1.test)("seven chart entries with the same data-only props, a click event and no children", () => {
+        for (const [name, tag] of Object.entries(CHART_TAGS)) {
+            const c = index_js_1.COMPONENTS[name];
+            (0, vitest_1.expect)(c.tagName, name).toBe(tag);
+            (0, vitest_1.expect)(Object.keys(c.props).sort(), name).toEqual(["data", "interactive", "theme"]);
+            (0, vitest_1.expect)(c.events, name).toEqual({ onClick: { event: "click" } });
+            (0, vitest_1.expect)(c.children, name).toEqual([]);
+            (0, vitest_1.expect)(c.text, name).toBe(false);
+            (0, vitest_1.expect)(c.slots, name).toEqual([]);
+            const json = (0, index_js_1.componentsCatalogJson)().find((j) => j.name === name);
+            (0, vitest_1.expect)(json.props["data"]).toEqual({ type: "json", required: true });
+            (0, vitest_1.expect)(json.props["theme"]).toEqual({ type: "enum", required: false, values: ["green", "grayscale", "vibrant"] });
+            (0, vitest_1.expect)(json.events).toEqual({ onClick: "click" });
+        }
+        (0, vitest_1.expect)(index_js_1.CHART_THEMES).toEqual(["green", "grayscale", "vibrant"]);
+        (0, vitest_1.expect)(index_js_1.MAX_CHART_SERIES).toBe(6);
+    });
+    (0, vitest_1.test)("sanitizeProps requires data, checks theme and drops styling props", () => {
+        (0, vitest_1.expect)((0, index_js_1.sanitizeProps)("ui-bar-chart", { theme: "green" }).missing).toEqual(["data"]);
+        const result = (0, index_js_1.sanitizeProps)("ui-bar-chart", { data: datums(3), theme: "neon", interactive: true, color: "#f00", style: {} });
+        (0, vitest_1.expect)(result.props).toEqual({ data: datums(3), interactive: true });
+        (0, vitest_1.expect)(result.dropped.sort()).toEqual(["color", "style", "theme"]);
+        (0, vitest_1.expect)(result.missing).toEqual([]);
+        const bad = (0, index_js_1.sanitizeProps)("ui-line-chart", { data: seriesData(1) });
+        (0, vitest_1.expect)(bad.dropped).toEqual(["data"]);
+        (0, vitest_1.expect)(bad.missing).toEqual(["data"]);
+    });
+    (0, vitest_1.describe)("chart value bounds", () => {
+        (0, vitest_1.test)("accepts values up to MAX_CHART_VALUE and rejects larger ones", () => {
+            const bar = index_js_1.CHART_DATA_LIMITS.BarChart;
+            (0, vitest_1.expect)((0, index_js_1.isChartData)([{ label: "a", value: index_js_1.MAX_CHART_VALUE }], bar)).toBe(true);
+            for (const value of [index_js_1.MAX_CHART_VALUE + 2, 1e308, Number.MAX_VALUE]) {
+                (0, vitest_1.expect)((0, index_js_1.isChartData)([{ label: "a", value }], bar)).toBe(false);
+            }
+        });
+        (0, vitest_1.test)("keeps every accepted total finite", () => {
+            const pie = Array.from({ length: 50 }, (_, i) => ({ label: `s${i}`, value: index_js_1.MAX_CHART_VALUE }));
+            (0, vitest_1.expect)((0, index_js_1.isPieChartData)(pie)).toBe(true);
+            (0, vitest_1.expect)(Number.isFinite(pie.reduce((sum, d) => sum + d.value, 0))).toBe(true);
+            const limits = index_js_1.CHART_DATA_LIMITS.StackedBarChart;
+            const series = Array.from({ length: 6 }, (_, i) => ({ name: `s${i}`, values: [index_js_1.MAX_CHART_VALUE] }));
+            (0, vitest_1.expect)((0, index_js_1.isSeriesChartData)({ labels: ["a"], series }, limits)).toBe(true);
+            const huge = [{ name: "x", values: [1e308] }, { name: "y", values: [1e308] }];
+            (0, vitest_1.expect)((0, index_js_1.isSeriesChartData)({ labels: ["a"], series: huge }, limits)).toBe(false);
+        });
+    });
+    (0, vitest_1.describe)("isPieChartData", () => {
+        const datums = (n, first) => Array.from({ length: n }, (_, i) => ({ label: i === 0 && first !== undefined ? first : `s${i}`, value: i + 1 }));
+        (0, vitest_1.test)("allows an Other label when the pie will not combine slices", () => {
+            (0, vitest_1.expect)((0, index_js_1.isPieChartData)(datums(6, index_js_1.CHART_OTHER_LABEL))).toBe(true);
+        });
+        (0, vitest_1.test)("rejects a caller Other label when extra items will be combined into Other", () => {
+            for (const label of [index_js_1.CHART_OTHER_LABEL, "other", " OTHER "])
+                (0, vitest_1.expect)((0, index_js_1.isPieChartData)(datums(7, label))).toBe(false);
+            (0, vitest_1.expect)((0, index_js_1.isPieChartData)(datums(7, "Other documents"))).toBe(true);
+        });
+        (0, vitest_1.test)("keeps the generic pie limits", () => {
+            (0, vitest_1.expect)((0, index_js_1.isPieChartData)(datums(50))).toBe(true);
+            (0, vitest_1.expect)((0, index_js_1.isPieChartData)(datums(51))).toBe(false);
+            (0, vitest_1.expect)((0, index_js_1.isPieChartData)([])).toBe(false);
+        });
+        (0, vitest_1.test)("is the guard the PieChart catalog entry uses", () => {
+            (0, vitest_1.expect)((0, index_js_1.sanitizeProps)("ui-pie-chart", { data: datums(7, "Other") }).missing).toContain("data");
+            (0, vitest_1.expect)((0, index_js_1.sanitizeProps)("ui-pie-chart", { data: datums(7) }).missing).not.toContain("data");
+        });
+    });
+    (0, vitest_1.describe)("isChartData", () => {
+        const bar = index_js_1.CHART_DATA_LIMITS.BarChart;
+        (0, vitest_1.test)("accepts a valid sample, including zero values and 60-character labels", () => {
+            (0, vitest_1.expect)((0, index_js_1.isChartData)([{ label: "Mon", value: 0 }, { label: "x".repeat(60), value: 12.5 }], bar)).toBe(true);
+        });
+        vitest_1.test.each(BAD_VALUES)("rejects value %s", (value) => {
+            (0, vitest_1.expect)((0, index_js_1.isChartData)([{ label: "a", value }], bar)).toBe(false);
+        });
+        vitest_1.test.each(BAD_LABELS)("rejects label %j", (label) => {
+            (0, vitest_1.expect)((0, index_js_1.isChartData)([{ label, value: 1 }], bar)).toBe(false);
+        });
+        (0, vitest_1.test)("rejects duplicate labels", () => {
+            (0, vitest_1.expect)((0, index_js_1.isChartData)([{ label: "a", value: 1 }, { label: "a", value: 2 }], bar)).toBe(false);
+        });
+        (0, vitest_1.test)("enforces each component's item counts", () => {
+            (0, vitest_1.expect)((0, index_js_1.isChartData)([], bar)).toBe(false);
+            (0, vitest_1.expect)((0, index_js_1.isChartData)(datums(31), bar)).toBe(true);
+            (0, vitest_1.expect)((0, index_js_1.isChartData)(datums(32), bar)).toBe(false);
+            (0, vitest_1.expect)((0, index_js_1.isChartData)(datums(25), index_js_1.CHART_DATA_LIMITS.HorizontalBarChart)).toBe(true);
+            (0, vitest_1.expect)((0, index_js_1.isChartData)(datums(26), index_js_1.CHART_DATA_LIMITS.HorizontalBarChart)).toBe(false);
+            (0, vitest_1.expect)((0, index_js_1.isChartData)(datums(50), index_js_1.CHART_DATA_LIMITS.PieChart)).toBe(true);
+            (0, vitest_1.expect)((0, index_js_1.isChartData)(datums(51), index_js_1.CHART_DATA_LIMITS.PieChart)).toBe(false);
+            (0, vitest_1.expect)((0, index_js_1.sanitizeProps)("ui-bar-chart", { data: datums(32) }).dropped).toEqual(["data"]);
+            (0, vitest_1.expect)((0, index_js_1.sanitizeProps)("ui-pie-chart", { data: datums(32) }).dropped).toEqual([]);
+        });
+        (0, vitest_1.test)("rejects non-arrays, class instances, sparse arrays and extra keys", () => {
+            for (const v of [undefined, null, "a", 1, { label: "a", value: 1 }, new Map()])
+                (0, vitest_1.expect)((0, index_js_1.isChartData)(v, bar)).toBe(false);
+            (0, vitest_1.expect)((0, index_js_1.isChartData)([new Datum("a", 1)], bar)).toBe(false);
+            (0, vitest_1.expect)((0, index_js_1.isChartData)(DatumArray.from([{ label: "a", value: 1 }]), bar)).toBe(false);
+            // eslint-disable-next-line no-sparse-arrays
+            (0, vitest_1.expect)((0, index_js_1.isChartData)([{ label: "a", value: 1 }, , { label: "b", value: 2 }], bar)).toBe(false);
+            (0, vitest_1.expect)((0, index_js_1.isChartData)([{ label: "a", value: 1, color: "red" }], bar)).toBe(false);
+            (0, vitest_1.expect)((0, index_js_1.isChartData)([Object.assign(Object.create(null), { label: "a", value: 1 })], bar)).toBe(true);
+        });
+    });
+    (0, vitest_1.describe)("isSeriesChartData", () => {
+        const stacked = index_js_1.CHART_DATA_LIMITS.StackedBarChart;
+        const line = index_js_1.CHART_DATA_LIMITS.LineChart;
+        (0, vitest_1.test)("accepts a valid sample", () => {
+            (0, vitest_1.expect)((0, index_js_1.isSeriesChartData)(seriesData(5, 3), stacked)).toBe(true);
+            (0, vitest_1.expect)((0, index_js_1.isSeriesChartData)(seriesData(5, index_js_1.MAX_CHART_SERIES), line)).toBe(true);
+        });
+        (0, vitest_1.test)("rejects more than six series, and no series", () => {
+            (0, vitest_1.expect)((0, index_js_1.isSeriesChartData)(seriesData(5, index_js_1.MAX_CHART_SERIES + 1), stacked)).toBe(false);
+            (0, vitest_1.expect)((0, index_js_1.isSeriesChartData)(seriesData(5, index_js_1.MAX_CHART_SERIES + 1), line)).toBe(false);
+            (0, vitest_1.expect)((0, index_js_1.isSeriesChartData)(seriesData(5, 0), stacked)).toBe(false);
+        });
+        (0, vitest_1.test)("rejects a series whose values length differs from the labels", () => {
+            const d = seriesData(4);
+            d.series[1].values.pop();
+            (0, vitest_1.expect)((0, index_js_1.isSeriesChartData)(d, stacked)).toBe(false);
+            d.series[1].values.push(1, 2);
+            (0, vitest_1.expect)((0, index_js_1.isSeriesChartData)(d, stacked)).toBe(false);
+        });
+        vitest_1.test.each(BAD_VALUES)("rejects value %s", (value) => {
+            const d = seriesData(3);
+            d.series[0].values[1] = value;
+            (0, vitest_1.expect)((0, index_js_1.isSeriesChartData)(d, stacked)).toBe(false);
+        });
+        vitest_1.test.each(BAD_LABELS)("rejects label or series name %j", (bad) => {
+            const withLabel = seriesData(3);
+            withLabel.labels[0] = bad;
+            (0, vitest_1.expect)((0, index_js_1.isSeriesChartData)(withLabel, stacked)).toBe(false);
+            const withName = seriesData(3);
+            withName.series[0].name = bad;
+            (0, vitest_1.expect)((0, index_js_1.isSeriesChartData)(withName, stacked)).toBe(false);
+        });
+        (0, vitest_1.test)("rejects duplicate labels and duplicate series names", () => {
+            const dupLabel = seriesData(3);
+            dupLabel.labels[2] = dupLabel.labels[0];
+            (0, vitest_1.expect)((0, index_js_1.isSeriesChartData)(dupLabel, stacked)).toBe(false);
+            const dupName = seriesData(3);
+            dupName.series[1].name = dupName.series[0].name;
+            (0, vitest_1.expect)((0, index_js_1.isSeriesChartData)(dupName, stacked)).toBe(false);
+        });
+        (0, vitest_1.test)("enforces each component's label counts", () => {
+            (0, vitest_1.expect)((0, index_js_1.isSeriesChartData)(seriesData(1), stacked)).toBe(true);
+            (0, vitest_1.expect)((0, index_js_1.isSeriesChartData)(seriesData(31), stacked)).toBe(true);
+            (0, vitest_1.expect)((0, index_js_1.isSeriesChartData)(seriesData(32), stacked)).toBe(false);
+            (0, vitest_1.expect)((0, index_js_1.isSeriesChartData)(seriesData(1), line)).toBe(false);
+            (0, vitest_1.expect)((0, index_js_1.isSeriesChartData)(seriesData(60), line)).toBe(true);
+            (0, vitest_1.expect)((0, index_js_1.isSeriesChartData)(seriesData(61), line)).toBe(false);
+            (0, vitest_1.expect)((0, index_js_1.isSeriesChartData)(seriesData(61), index_js_1.CHART_DATA_LIMITS.AreaChart)).toBe(false);
+            (0, vitest_1.expect)((0, index_js_1.isSeriesChartData)(seriesData(1), index_js_1.CHART_DATA_LIMITS.AreaChart)).toBe(false);
+        });
+        (0, vitest_1.test)("rejects non-objects, class instances and extra keys", () => {
+            for (const v of [undefined, null, [], "x", datums(3)])
+                (0, vitest_1.expect)((0, index_js_1.isSeriesChartData)(v, stacked)).toBe(false);
+            const d = seriesData(2);
+            (0, vitest_1.expect)((0, index_js_1.isSeriesChartData)({ labels: d.labels, series: DatumArray.from(d.series) }, stacked)).toBe(false);
+            (0, vitest_1.expect)((0, index_js_1.isSeriesChartData)({ ...d, labels: DatumArray.from(d.labels) }, stacked)).toBe(false);
+            (0, vitest_1.expect)((0, index_js_1.isSeriesChartData)(Object.assign(new (class Data {
+            })(), d), stacked)).toBe(false);
+            (0, vitest_1.expect)((0, index_js_1.isSeriesChartData)({ ...d, title: "x" }, stacked)).toBe(false);
+            (0, vitest_1.expect)((0, index_js_1.isSeriesChartData)({ ...d, series: [{ ...d.series[0], color: "red" }] }, stacked)).toBe(false);
+        });
+    });
+    (0, vitest_1.describe)("isComboChartData", () => {
+        const limits = index_js_1.CHART_DATA_LIMITS.ComboChart;
+        (0, vitest_1.test)("accepts a valid sample", () => {
+            (0, vitest_1.expect)((0, index_js_1.isComboChartData)(combo(1), limits)).toBe(true);
+            (0, vitest_1.expect)((0, index_js_1.isComboChartData)(combo(31), limits)).toBe(true);
+        });
+        (0, vitest_1.test)("rejects over-cap and empty labels", () => {
+            (0, vitest_1.expect)((0, index_js_1.isComboChartData)(combo(32), limits)).toBe(false);
+            (0, vitest_1.expect)((0, index_js_1.isComboChartData)(combo(0), limits)).toBe(false);
+        });
+        (0, vitest_1.test)("rejects bars or line values whose length differs from the labels", () => {
+            const bars = combo(3);
+            bars.bars.values.pop();
+            (0, vitest_1.expect)((0, index_js_1.isComboChartData)(bars, limits)).toBe(false);
+            const line = combo(3);
+            line.line.values.push(1);
+            (0, vitest_1.expect)((0, index_js_1.isComboChartData)(line, limits)).toBe(false);
+        });
+        vitest_1.test.each(BAD_VALUES)("rejects value %s", (value) => {
+            for (const key of ["bars", "line"]) {
+                const d = combo(3);
+                d[key].values[0] = value;
+                (0, vitest_1.expect)((0, index_js_1.isComboChartData)(d, limits)).toBe(false);
+            }
+        });
+        vitest_1.test.each(BAD_LABELS)("rejects label or series name %j", (bad) => {
+            const withLabel = combo(3);
+            withLabel.labels[1] = bad;
+            (0, vitest_1.expect)((0, index_js_1.isComboChartData)(withLabel, limits)).toBe(false);
+            const withName = combo(3);
+            withName.line.name = bad;
+            (0, vitest_1.expect)((0, index_js_1.isComboChartData)(withName, limits)).toBe(false);
+        });
+        (0, vitest_1.test)("rejects duplicate labels and a line named like the bars", () => {
+            const dupLabel = combo(3);
+            dupLabel.labels[1] = dupLabel.labels[0];
+            (0, vitest_1.expect)((0, index_js_1.isComboChartData)(dupLabel, limits)).toBe(false);
+            const dupName = combo(3);
+            dupName.line.name = dupName.bars.name;
+            (0, vitest_1.expect)((0, index_js_1.isComboChartData)(dupName, limits)).toBe(false);
+        });
+        (0, vitest_1.test)("rejects non-objects, class instances, series arrays and extra keys", () => {
+            for (const v of [undefined, null, [], "x", seriesData(3)])
+                (0, vitest_1.expect)((0, index_js_1.isComboChartData)(v, limits)).toBe(false);
+            const d = combo(2);
+            (0, vitest_1.expect)((0, index_js_1.isComboChartData)({ ...d, bars: [d.bars] }, limits)).toBe(false);
+            (0, vitest_1.expect)((0, index_js_1.isComboChartData)({ ...d, labels: DatumArray.from(d.labels) }, limits)).toBe(false);
+            (0, vitest_1.expect)((0, index_js_1.isComboChartData)(Object.assign(new (class Data {
+            })(), d), limits)).toBe(false);
+            (0, vitest_1.expect)((0, index_js_1.isComboChartData)({ ...d, extra: 1 }, limits)).toBe(false);
+        });
+    });
+    (0, vitest_1.test)("ComponentProps types chart data and the click detail (compile-time)", () => {
+        const bar = {
+            data: [{ label: "Mon", value: 3 }],
+            theme: "vibrant",
+            interactive: true,
+            onClick: (e) => e.index + e.value + e.label.length,
+        };
+        const comboProps = {
+            data: combo(2),
+            onClick: (e) => e.series ?? e.label,
+        };
+        const stacked = { data: seriesData(2) };
+        // @ts-expect-error data is required
+        const noData = { theme: "green" };
+        // @ts-expect-error a bar chart takes ChartDatum[], not series data
+        const wrongShape = { data: seriesData(2) };
+        // @ts-expect-error themes are a closed set
+        const neon = { data: datums(2), theme: "neon" };
+        // @ts-expect-error there are no colour props
+        const colored = { data: seriesData(2), colors: ["#f00"] };
+        // @ts-expect-error onClick receives a ChartClickEvent, not a string
+        const wrongDetail = { data: combo(2), onClick: (s) => s.length };
+        (0, vitest_1.expect)([bar, comboProps, stacked, noData, wrongShape, neon, colored, wrongDetail]).toHaveLength(8);
+    });
+});
 (0, vitest_1.describe)("protocol and helpers", () => {
     (0, vitest_1.test)("isBootstrapToHost accepts known envelopes only", () => {
         (0, vitest_1.expect)((0, index_js_1.isBootstrapToHost)({ kind: "ready" })).toBe(true);
@@ -622,7 +906,7 @@ function withCsp(connectSrc) {
 (0, vitest_1.describe)("bundle hygiene", () => {
     // The host renderer imports these; a value import of zod (directly or via manifest.ts or
     // devpreview.ts) would pull zod into the host app bundle. Type-only imports are erased.
-    vitest_1.test.each(["surfaces.ts", "route.ts", "context.ts", "protocol.ts", "components.ts", "url.ts", "devsession.ts", "review.ts"])("%s has no value import of zod, manifest.ts or devpreview.ts", (file) => {
+    vitest_1.test.each(["surfaces.ts", "route.ts", "routes.ts", "context.ts", "protocol.ts", "components.ts", "url.ts", "devsession.ts", "review.ts"])("%s has no value import of zod, manifest.ts or devpreview.ts", (file) => {
         const source = (0, node_fs_1.readFileSync)((0, node_path_1.resolve)(process.cwd(), "src", "apps", file), "utf8");
         const valueImports = source.match(/^import (?!type )[^;]*from "[^"]+";/gm) ?? [];
         for (const line of valueImports)