@happyvertical/smrt-svelte 0.42.6 → 0.42.7

package/dist/components/forms/__tests__/form-with-structured-fields.fixture.svelte

@@ -0,0 +1,40 @@
+<script lang="ts">
+import AddressInput from '../AddressInput.svelte';
+import DateRangeInput from '../DateRangeInput.svelte';
+import Form from '../Form.svelte';
+import MeasurementInput from '../MeasurementInput.svelte';
+
+let {
+  onsubmit = undefined,
+  webmcp = false,
+  addressFields = ['street', 'city', 'province', 'postalCode', 'country'],
+  structuredRequired = true,
+}: {
+  onsubmit?: (data: Record<string, unknown>) => void;
+  webmcp?: boolean;
+  addressFields?: Array<
+    'street' | 'city' | 'province' | 'postalCode' | 'country'
+  >;
+  structuredRequired?: boolean;
+} = $props();
+</script>
+
+<Form {onsubmit} {webmcp}>
+	<MeasurementInput
+		name="measurement"
+		label="Measurement"
+		required={structuredRequired}
+	/>
+	<DateRangeInput
+		name="dates"
+		label="Dates"
+		required={structuredRequired}
+	/>
+	<AddressInput
+		name="address"
+		label="Address"
+		fields={addressFields}
+		required={structuredRequired}
+	/>
+	<button type="submit">Submit</button>
+</Form>

package/dist/components/forms/__tests__/form-with-structured-fields.fixture.svelte.d.ts

@@ -0,0 +1,10 @@
+type $$ComponentProps = {
+    onsubmit?: (data: Record<string, unknown>) => void;
+    webmcp?: boolean;
+    addressFields?: Array<'street' | 'city' | 'province' | 'postalCode' | 'country'>;
+    structuredRequired?: boolean;
+};
+declare const FormWithStructuredFields: import("svelte").Component<$$ComponentProps, {}, "">;
+type FormWithStructuredFields = ReturnType<typeof FormWithStructuredFields>;
+export default FormWithStructuredFields;
+//# sourceMappingURL=form-with-structured-fields.fixture.svelte.d.ts.map

package/dist/components/forms/__tests__/form-with-structured-fields.fixture.svelte.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"form-with-structured-fields.fixture.svelte.d.ts","sourceRoot":"","sources":["../../../../src/components/forms/__tests__/form-with-structured-fields.fixture.svelte.ts"],"names":[],"mappings":"AAQC,KAAK,gBAAgB,GAAI;IACxB,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IACnD,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,aAAa,CAAC,EAAE,KAAK,CACnB,QAAQ,GAAG,MAAM,GAAG,UAAU,GAAG,YAAY,GAAG,SAAS,CAC1D,CAAC;IACF,kBAAkB,CAAC,EAAE,OAAO,CAAC;CAC9B,CAAC;AAwBF,QAAA,MAAM,wBAAwB,sDAAwC,CAAC;AACvE,KAAK,wBAAwB,GAAG,UAAU,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAC5E,eAAe,wBAAwB,CAAC"}

package/dist/data-surface.d.ts

@@ -0,0 +1,104 @@
+/**
+ * Authenticated browser bridge for mounted data surfaces.
+ *
+ * `smrt-ui` owns the local registry and deliberately knows nothing about
+ * transports or authentication. This adapter is the browser-side trust
+ * boundary: only a request carrying the configured session and peer source is
+ * delivered to the registry. A command is successful only after its ack has
+ * travelled back through the transport.
+ */
+import { type DataSurfaceCommandResult, type DataSurfaceIdentity, type DataSurfaceRegistry, type DataSurfaceRegistryEvent, type DataSurfaceSnapshot, type DataSurfaceVisibleCommand } from '@happyvertical/smrt-ui/data';
+export declare const DATA_SURFACE_BRIDGE_VERSION: 1;
+export declare const DEFAULT_DATA_SURFACE_BRIDGE_TTL_MS = 30000;
+export declare const DEFAULT_DATA_SURFACE_BRIDGE_REPLAY_ENTRIES = 100;
+export { DATA_SURFACE_IDENTIFIER_MAX_LENGTH } from '@happyvertical/smrt-ui/data-surface';
+export type DataSurfaceBridgeFailureReason = 'not_found' | 'unsupported' | 'stale_revision' | 'idempotency_conflict' | 'denied' | 'execution_failed' | 'non_monotonic_revision' | 'expired' | 'timeout' | 'disconnected' | 'invalid_request' | 'source_mismatch' | 'session_mismatch' | 'replay_capacity_exceeded';
+export interface DataSurfaceCommandRequest {
+    type: 'data-surface.command';
+    version: typeof DATA_SURFACE_BRIDGE_VERSION;
+    commandId: string;
+    sessionId: string;
+    /** Authenticated peer/source id, never a profile or tenant authority. */
+    source: string;
+    expiresAt: number;
+    identity: DataSurfaceIdentity;
+    expectedRevision: number;
+    controlId: string;
+    payload?: DataSurfaceVisibleCommand['payload'];
+}
+export interface DataSurfaceCommandAck {
+    type: 'data-surface.ack';
+    version: typeof DATA_SURFACE_BRIDGE_VERSION;
+    commandId: string;
+    sessionId: string;
+    source: string;
+    expiresAt: number;
+    identity: DataSurfaceIdentity;
+    expectedRevision: number;
+    ok: boolean;
+    revision?: number;
+    snapshot?: DataSurfaceSnapshot;
+    reason?: DataSurfaceBridgeFailureReason;
+}
+export interface DataSurfaceBridgeEvent {
+    type: 'data-surface.event';
+    version: typeof DATA_SURFACE_BRIDGE_VERSION;
+    sessionId: string;
+    source: string;
+    sequence: number;
+    identity: DataSurfaceIdentity;
+    revision: number;
+    event: DataSurfaceRegistryEvent['type'];
+    command?: DataSurfaceVisibleCommand;
+    result?: DataSurfaceCommandResult;
+}
+export type DataSurfaceBridgeMessage = DataSurfaceCommandRequest | DataSurfaceCommandAck | DataSurfaceBridgeEvent;
+/**
+ * Identity verified by the transport adapter, outside the wire message.
+ * Adapters must derive this from authenticated connection state (for example,
+ * a bound WebSocket session or an origin-checked postMessage peer), never
+ * from fields in `message`. `send` must route only to that bound peer.
+ */
+export interface DataSurfaceBridgePeer {
+    sessionId: string;
+    source: string;
+}
+export type DataSurfaceBridgeConnectionState = 'connected' | 'disconnected' | 'reconnecting';
+/** A deliberately tiny adapter for WebSocket, SSE, postMessage, or a test. */
+export interface DataSurfaceBridgeTransport {
+    send(message: DataSurfaceBridgeMessage): void | Promise<void>;
+    subscribe(listener: (message: unknown, peer: DataSurfaceBridgePeer) => void): () => void;
+    subscribeStatus?: (listener: (state: DataSurfaceBridgeConnectionState) => void) => () => void;
+}
+export interface DataSurfaceBrowserBridgeOptions {
+    registry: DataSurfaceRegistry;
+    transport: DataSurfaceBridgeTransport;
+    sessionId: string;
+    /** This browser's source id, placed on acknowledgements/events. */
+    source: string;
+    /** The only server source accepted for commands. */
+    peerSource: string;
+    now?: () => number;
+    maxTtlMs?: number;
+    maxReplayEntries?: number;
+}
+export interface DataSurfaceBrowserBridge {
+    readonly sessionId: string;
+    readonly source: string;
+    /** Stop receiving transport messages and registry events. */
+    dispose(): void;
+    /** Handle a message directly; useful for transports that batch delivery. */
+    receive(message: unknown, peer: DataSurfaceBridgePeer): Promise<void>;
+}
+/**
+ * Attach a mounted registry to an authenticated browser transport.
+ * Malformed requests and messages from unauthenticated peers are ignored before
+ * acknowledgement. Valid requests from the bound peer that are expired,
+ * cross-session, or cross-source are acknowledged without exposing a registry
+ * snapshot. Replays return the original ack and do not invoke the mounted
+ * surface a second time.
+ */
+export declare function createDataSurfaceBrowserBridge(options: DataSurfaceBrowserBridgeOptions): DataSurfaceBrowserBridge;
+/** Compatibility alias that makes the browser role explicit at call sites. */
+export declare const createDataSurfaceBridge: typeof createDataSurfaceBrowserBridge;
+//# sourceMappingURL=data-surface.d.ts.map

package/dist/data-surface.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"data-surface.d.ts","sourceRoot":"","sources":["../src/data-surface.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EACL,KAAK,wBAAwB,EAC7B,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,wBAAwB,EAC7B,KAAK,mBAAmB,EACxB,KAAK,yBAAyB,EAE/B,MAAM,6BAA6B,CAAC;AAGrC,eAAO,MAAM,2BAA2B,EAAG,CAAU,CAAC;AACtD,eAAO,MAAM,kCAAkC,QAAS,CAAC;AACzD,eAAO,MAAM,0CAA0C,MAAM,CAAC;AAC9D,OAAO,EAAE,kCAAkC,EAAE,MAAM,qCAAqC,CAAC;AAEzF,MAAM,MAAM,8BAA8B,GACtC,WAAW,GACX,aAAa,GACb,gBAAgB,GAChB,sBAAsB,GACtB,QAAQ,GACR,kBAAkB,GAClB,wBAAwB,GACxB,SAAS,GACT,SAAS,GACT,cAAc,GACd,iBAAiB,GACjB,iBAAiB,GACjB,kBAAkB,GAClB,0BAA0B,CAAC;AAE/B,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,sBAAsB,CAAC;IAC7B,OAAO,EAAE,OAAO,2BAA2B,CAAC;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,yEAAyE;IACzE,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,gBAAgB,EAAE,MAAM,CAAC;IACzB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,yBAAyB,CAAC,SAAS,CAAC,CAAC;CAChD;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,kBAAkB,CAAC;IACzB,OAAO,EAAE,OAAO,2BAA2B,CAAC;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,gBAAgB,EAAE,MAAM,CAAC;IACzB,EAAE,EAAE,OAAO,CAAC;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,mBAAmB,CAAC;IAC/B,MAAM,CAAC,EAAE,8BAA8B,CAAC;CACzC;AAED,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,oBAAoB,CAAC;IAC3B,OAAO,EAAE,OAAO,2BAA2B,CAAC;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,wBAAwB,CAAC,MAAM,CAAC,CAAC;IACxC,OAAO,CAAC,EAAE,yBAAyB,CAAC;IACpC,MAAM,CAAC,EAAE,wBAAwB,CAAC;CACnC;AAED,MAAM,MAAM,wBAAwB,GAChC,yBAAyB,GACzB,qBAAqB,GACrB,sBAAsB,CAAC;AAE3B;;;;;GAKG;AACH,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,gCAAgC,GACxC,WAAW,GACX,cAAc,GACd,cAAc,CAAC;AAEnB,8EAA8E;AAC9E,MAAM,WAAW,0BAA0B;IACzC,IAAI,CAAC,OAAO,EAAE,wBAAwB,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9D,SAAS,CACP,QAAQ,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,qBAAqB,KAAK,IAAI,GAChE,MAAM,IAAI,CAAC;IACd,eAAe,CAAC,EAAE,CAChB,QAAQ,EAAE,CAAC,KAAK,EAAE,gCAAgC,KAAK,IAAI,KACxD,MAAM,IAAI,CAAC;CACjB;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,SAAS,EAAE,0BAA0B,CAAC;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,mEAAmE;IACnE,MAAM,EAAE,MAAM,CAAC;IACf,oDAAoD;IACpD,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,6DAA6D;IAC7D,OAAO,IAAI,IAAI,CAAC;IAChB,4EAA4E;IAC5E,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACvE;AAwFD;;;;;;;GAOG;AACH,wBAAgB,8BAA8B,CAC5C,OAAO,EAAE,+BAA+B,GACvC,wBAAwB,CAuS1B;AAED,8EAA8E;AAC9E,eAAO,MAAM,uBAAuB,uCAAiC,CAAC"}

package/dist/data-surface.js

@@ -0,0 +1,348 @@
+/**
+ * Authenticated browser bridge for mounted data surfaces.
+ *
+ * `smrt-ui` owns the local registry and deliberately knows nothing about
+ * transports or authentication. This adapter is the browser-side trust
+ * boundary: only a request carrying the configured session and peer source is
+ * delivered to the registry. A command is successful only after its ack has
+ * travelled back through the transport.
+ */
+import { normalizeDataSurfaceVisibleCommand, } from '@happyvertical/smrt-ui/data';
+import { DATA_SURFACE_IDENTIFIER_MAX_LENGTH } from '@happyvertical/smrt-ui/data-surface';
+export const DATA_SURFACE_BRIDGE_VERSION = 1;
+export const DEFAULT_DATA_SURFACE_BRIDGE_TTL_MS = 30_000;
+export const DEFAULT_DATA_SURFACE_BRIDGE_REPLAY_ENTRIES = 100;
+export { DATA_SURFACE_IDENTIFIER_MAX_LENGTH } from '@happyvertical/smrt-ui/data-surface';
+function isRecord(value) {
+    return Boolean(value) && typeof value === 'object' && !Array.isArray(value);
+}
+function isString(value) {
+    return (typeof value === 'string' &&
+        value.length > 0 &&
+        value.length <= DATA_SURFACE_IDENTIFIER_MAX_LENGTH);
+}
+function isDisplayString(value) {
+    return typeof value === 'string' && value.length > 0;
+}
+function isPeer(value) {
+    return isRecord(value) && isString(value.sessionId) && isString(value.source);
+}
+function isFiniteInteger(value) {
+    return typeof value === 'number' && Number.isSafeInteger(value);
+}
+function identityOf(value) {
+    if (!isRecord(value) || !isString(value.surfaceId) || !isString(value.kind)) {
+        return undefined;
+    }
+    if (value.kind !== 'table' &&
+        value.kind !== 'list' &&
+        value.kind !== 'report' &&
+        value.kind !== 'custom') {
+        return undefined;
+    }
+    if (value.subject !== undefined) {
+        if (!isRecord(value.subject) ||
+            !isString(value.subject.type) ||
+            !isString(value.subject.id) ||
+            (value.subject.label !== undefined &&
+                !isDisplayString(value.subject.label))) {
+            return undefined;
+        }
+    }
+    return value;
+}
+function isRequest(value) {
+    if (!isRecord(value) ||
+        value.type !== 'data-surface.command' ||
+        value.version !== 1) {
+        return false;
+    }
+    return (isString(value.commandId) &&
+        isString(value.sessionId) &&
+        isString(value.source) &&
+        typeof value.expiresAt === 'number' &&
+        Number.isFinite(value.expiresAt) &&
+        identityOf(value.identity) !== undefined &&
+        isFiniteInteger(value.expectedRevision) &&
+        value.expectedRevision >= 0 &&
+        isString(value.controlId));
+}
+function commandSignature(request) {
+    return JSON.stringify({
+        sessionId: request.sessionId,
+        source: request.source,
+        identity: request.identity,
+        expectedRevision: request.expectedRevision,
+        controlId: request.controlId,
+        payload: request.payload,
+    });
+}
+function cloneMessage(message) {
+    return JSON.parse(JSON.stringify(message));
+}
+/**
+ * Attach a mounted registry to an authenticated browser transport.
+ * Malformed requests and messages from unauthenticated peers are ignored before
+ * acknowledgement. Valid requests from the bound peer that are expired,
+ * cross-session, or cross-source are acknowledged without exposing a registry
+ * snapshot. Replays return the original ack and do not invoke the mounted
+ * surface a second time.
+ */
+export function createDataSurfaceBrowserBridge(options) {
+    if (!isString(options.sessionId) ||
+        !isString(options.source) ||
+        !isString(options.peerSource)) {
+        throw new TypeError('DataSurface bridge session/source ids are required');
+    }
+    const now = options.now ?? (() => Date.now());
+    const maxTtlMs = options.maxTtlMs ?? DEFAULT_DATA_SURFACE_BRIDGE_TTL_MS;
+    const maxReplayEntries = options.maxReplayEntries ?? DEFAULT_DATA_SURFACE_BRIDGE_REPLAY_ENTRIES;
+    if (!Number.isFinite(maxTtlMs) ||
+        maxTtlMs <= 0 ||
+        !Number.isSafeInteger(maxReplayEntries) ||
+        maxReplayEntries <= 0) {
+        throw new RangeError('Invalid DataSurface bridge bounds');
+    }
+    const replay = new Map();
+    const reservations = new Set();
+    const inflight = new Map();
+    let disposed = false;
+    let lastSequence = 0;
+    const pruneReplay = () => {
+        const current = now();
+        for (const [commandId, entry] of replay) {
+            if (entry.expiresAt <= current)
+                replay.delete(commandId);
+        }
+    };
+    const remember = (request, ack) => {
+        replay.set(request.commandId, {
+            signature: commandSignature(request),
+            ack: cloneMessage(ack),
+            expiresAt: request.expiresAt,
+        });
+    };
+    const replayAck = (request, ack) => ({
+        ...cloneMessage(ack),
+        expiresAt: request.expiresAt,
+    });
+    const sendAck = async (ack) => {
+        if (disposed)
+            return;
+        try {
+            await options.transport.send(cloneMessage(ack));
+        }
+        catch {
+            // A disconnected browser cannot repair delivery. The server-side
+            // bridge reports the bounded disconnect/timeout outcome to its caller.
+        }
+    };
+    const rejected = (request, reason) => ({
+        type: 'data-surface.ack',
+        version: 1,
+        commandId: typeof request.commandId === 'string' ? request.commandId : 'invalid',
+        sessionId: options.sessionId,
+        source: options.source,
+        expiresAt: typeof request.expiresAt === 'number' ? request.expiresAt : now(),
+        identity: identityOf(request.identity) ?? {
+            surfaceId: 'unknown',
+            kind: 'custom',
+        },
+        expectedRevision: isFiniteInteger(request.expectedRevision) && request.expectedRevision >= 0
+            ? request.expectedRevision
+            : 0,
+        ok: false,
+        reason,
+    });
+    const receive = async (value, peer) => {
+        if (disposed ||
+            !isRequest(value) ||
+            !isPeer(peer) ||
+            peer.sessionId !== options.sessionId ||
+            peer.source !== options.peerSource)
+            return;
+        const request = value;
+        pruneReplay();
+        const current = now();
+        if (request.expiresAt <= current ||
+            request.expiresAt - current > maxTtlMs) {
+            await sendAck(rejected(request, 'expired'));
+            return;
+        }
+        const existing = replay.get(request.commandId);
+        const signature = commandSignature(request);
+        if (existing) {
+            await sendAck(existing.signature === signature
+                ? replayAck(request, existing.ack)
+                : rejected(request, 'idempotency_conflict'));
+            return;
+        }
+        const active = inflight.get(request.commandId);
+        if (active) {
+            if (active.signature !== signature) {
+                await sendAck(rejected(request, 'idempotency_conflict'));
+                return;
+            }
+            await Promise.race([active.promise, active.expiry]);
+            const completed = replay.get(request.commandId);
+            if (completed?.signature === signature) {
+                await sendAck(replayAck(request, completed.ack));
+            }
+            else if (active.expired || request.expiresAt <= now()) {
+                await sendAck(rejected(request, 'expired'));
+            }
+            return;
+        }
+        let ack;
+        if (request.sessionId !== options.sessionId) {
+            ack = rejected(request, 'session_mismatch');
+        }
+        else if (request.source !== options.peerSource) {
+            ack = rejected(request, 'source_mismatch');
+        }
+        else if (replay.size + reservations.size >= maxReplayEntries) {
+            ack = rejected(request, 'replay_capacity_exceeded');
+        }
+        else {
+            reservations.add(request.commandId);
+            let resolveExpiry;
+            const expiry = new Promise((resolve) => {
+                resolveExpiry = resolve;
+            });
+            const active = {
+                signature,
+                promise: Promise.resolve(),
+                expiry,
+                expired: false,
+                expiryAckSent: false,
+                expiryTimer: undefined,
+            };
+            let promise;
+            promise = (async () => {
+                try {
+                    let resultAck;
+                    try {
+                        const command = normalizeDataSurfaceVisibleCommand({
+                            version: 1,
+                            commandId: request.commandId,
+                            identity: request.identity,
+                            expectedRevision: request.expectedRevision,
+                            controlId: request.controlId,
+                            ...(request.payload === undefined
+                                ? {}
+                                : { payload: request.payload }),
+                        });
+                        const result = await options.registry.execute(command);
+                        resultAck = {
+                            type: 'data-surface.ack',
+                            version: 1,
+                            commandId: request.commandId,
+                            sessionId: options.sessionId,
+                            source: options.source,
+                            expiresAt: request.expiresAt,
+                            identity: result.identity,
+                            expectedRevision: request.expectedRevision,
+                            ok: result.ok,
+                            revision: result.revision,
+                            snapshot: result.snapshot,
+                            reason: result.reason,
+                        };
+                    }
+                    catch {
+                        resultAck = rejected(request, 'invalid_request');
+                    }
+                    if (active.expired || request.expiresAt <= now()) {
+                        active.expired = true;
+                        reservations.delete(request.commandId);
+                        if (inflight.get(request.commandId)?.promise === promise) {
+                            inflight.delete(request.commandId);
+                        }
+                        clearTimeout(active.expiryTimer);
+                        resolveExpiry();
+                        if (!active.expiryAckSent) {
+                            active.expiryAckSent = true;
+                            await sendAck(rejected(request, 'expired'));
+                        }
+                        return;
+                    }
+                    remember(request, resultAck);
+                    reservations.delete(request.commandId);
+                    if (inflight.get(request.commandId)?.promise === promise) {
+                        inflight.delete(request.commandId);
+                    }
+                    clearTimeout(active.expiryTimer);
+                    resolveExpiry();
+                    await sendAck(resultAck);
+                }
+                finally {
+                    reservations.delete(request.commandId);
+                    if (inflight.get(request.commandId)?.promise === promise) {
+                        inflight.delete(request.commandId);
+                    }
+                    clearTimeout(active.expiryTimer);
+                    resolveExpiry();
+                }
+            })();
+            active.promise = promise;
+            active.expiryTimer = setTimeout(() => {
+                if (inflight.get(request.commandId)?.promise !== promise)
+                    return;
+                active.expired = true;
+                reservations.delete(request.commandId);
+                inflight.delete(request.commandId);
+                resolveExpiry();
+                active.expiryAckSent = true;
+                void sendAck(rejected(request, 'expired'));
+            }, Math.max(0, request.expiresAt - current));
+            inflight.set(request.commandId, active);
+            try {
+                await Promise.race([promise, expiry]);
+            }
+            finally {
+                if (inflight.get(request.commandId)?.promise === promise) {
+                    inflight.delete(request.commandId);
+                }
+            }
+            return;
+        }
+        if (ack !== undefined)
+            await sendAck(ack);
+    };
+    const emit = (event) => {
+        if (disposed || event.sequence <= lastSequence)
+            return;
+        lastSequence = event.sequence;
+        const message = {
+            type: 'data-surface.event',
+            version: 1,
+            sessionId: options.sessionId,
+            source: options.source,
+            sequence: event.sequence,
+            identity: event.identity,
+            revision: event.revision,
+            event: event.type,
+            ...(event.command ? { command: event.command } : {}),
+            ...(event.result ? { result: event.result } : {}),
+        };
+        void Promise.resolve(options.transport.send(cloneMessage(message))).catch(() => undefined);
+    };
+    const unsubscribeTransport = options.transport.subscribe((message, peer) => {
+        void receive(message, peer);
+    });
+    const unsubscribeRegistry = options.registry.subscribe(emit);
+    return {
+        sessionId: options.sessionId,
+        source: options.source,
+        dispose() {
+            if (disposed)
+                return;
+            disposed = true;
+            unsubscribeTransport();
+            unsubscribeRegistry();
+            replay.clear();
+        },
+        receive,
+    };
+}
+/** Compatibility alias that makes the browser role explicit at call sites. */
+export const createDataSurfaceBridge = createDataSurfaceBrowserBridge;

package/dist/index.d.ts

@@ -13,7 +13,9 @@
  */
 export * from './components/forms/index.js';
 export * from './components/module/index.js';
+export * from './data-surface.js';
 export * from './hooks/index.js';
 export { default as Provider } from './Provider.svelte';
 export * from './state/index.js';
+export { useWebMcpTool, type WebMcpToolSpec } from './web/webmcp.svelte.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAGH,cAAc,6BAA6B,CAAC;AAE5C,cAAc,8BAA8B,CAAC;AAE7C,cAAc,kBAAkB,CAAC;AAEjC,OAAO,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAExD,cAAc,kBAAkB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;GAYG;AAGH,cAAc,6BAA6B,CAAC;AAE5C,cAAc,8BAA8B,CAAC;AAE7C,cAAc,mBAAmB,CAAC;AAElC,cAAc,kBAAkB,CAAC;AAEjC,OAAO,EAAE,OAAO,IAAI,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAExD,cAAc,kBAAkB,CAAC;AAEjC,OAAO,EAAE,aAAa,EAAE,KAAK,cAAc,EAAE,MAAM,wBAAwB,CAAC"}

package/dist/index.js

@@ -1,3 +1,4 @@
+/// <reference path="./web/webmcp.d.ts" />
 /**
  * @happyvertical/smrt-svelte
  *
@@ -15,9 +16,13 @@
 export * from './components/forms/index.js';
 // Module components (for dynamic module UI rendering)
 export * from './components/module/index.js';
+// Authenticated browser-side data-surface command/ack/event bridge
+export * from './data-surface.js';
 // Hooks
 export * from './hooks/index.js';
 // Core - App wrapper/provider
 export { default as Provider } from './Provider.svelte';
 // State management
 export * from './state/index.js';
+// Opt-in browser WebMCP lifecycle primitive.
+export { useWebMcpTool } from './web/webmcp.svelte.js';

package/dist/state/form-context.d.ts

@@ -27,6 +27,8 @@ export interface FieldDefinition {
     readable?: boolean;
     writable?: boolean;
     constraints?: ControlConstraints;
+    /** Optional WebMCP schema override for structured field values. */
+    webMcpSchema?: Record<string, unknown>;
     options?: ControlOption[];
     unit?: string;
     clear?: () => void;

package/dist/state/form-context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"form-context.d.ts","sourceRoot":"","sources":["../../src/state/form-context.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EACV,kBAAkB,EAClB,0BAA0B,EAC1B,WAAW,EACX,aAAa,EACb,mBAAmB,EACnB,kBAAkB,EACnB,MAAM,8BAA8B,CAAC;AAGtC;;GAEG;AACH,qCAAqC;AACrC,MAAM,MAAM,aAAa,GACrB,MAAM,GACN,OAAO,GACP,UAAU,GACV,QAAQ,GACR,SAAS,GACT,UAAU,GACV,WAAW,GACX,aAAa,GACb,OAAO,GACP,OAAO,GACP,QAAQ,GACR,UAAU,CAAC;AAEf,MAAM,WAAW,eAAe;IAC9B,kDAAkD;IAClD,IAAI,EAAE,MAAM,CAAC;IACb,iBAAiB;IACjB,IAAI,EAAE,aAAa,CAAC;IACpB,2BAA2B;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uDAAuD;IACvD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,0BAA0B;IAC1B,QAAQ,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;IACnC,8BAA8B;IAC9B,QAAQ,EAAE,MAAM,OAAO,CAAC;IACxB,6DAA6D;IAC7D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,WAAW,CAAC;IAC9B,WAAW,CAAC,EAAE,kBAAkB,CAAC;IACjC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,WAAW,CAAC,EAAE,kBAAkB,CAAC;IACjC,OAAO,CAAC,EAAE,aAAa,EAAE,CAAC;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,IAAI,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,IAAI,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,IAAI,CAAC;IACpB,SAAS,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC1C,QAAQ,CAAC,EAAE,MAAM,OAAO,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,mBAAmB,CAAC;CACtC;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,mBAAmB;IACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,qCAAqC;IACrC,aAAa,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,IAAI,CAAC;IAChD,yBAAyB;IACzB,eAAe,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACxC,wDAAwD;IACxD,cAAc,EAAE,MAAM,eAAe,EAAE,CAAC;IACxC,6CAA6C;IAC7C,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAClC,+CAA+C;IAC/C,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,yCAAyC;IACzC,eAAe,EAAE,MAAM,IAAI,CAAC;IAC5B,8EAA8E;IAC9E,QAAQ,CAAC,mBAAmB,EAAE,0BAA0B,CAAC;IACzD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;;GAEG;AACH,eAAO,MAAM,aAAa,eAAsB,CAAC;AAEjD;;GAEG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,eAAe,GAAG,IAAI,CAEzD;AAED;;;GAGG;AACH,wBAAgB,cAAc,IAAI,eAAe,CAUhD;AAED;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,eAAe,GAAG,IAAI,CAE1D"}
+{"version":3,"file":"form-context.d.ts","sourceRoot":"","sources":["../../src/state/form-context.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAAK,EACV,kBAAkB,EAClB,0BAA0B,EAC1B,WAAW,EACX,aAAa,EACb,mBAAmB,EACnB,kBAAkB,EACnB,MAAM,8BAA8B,CAAC;AAGtC;;GAEG;AACH,qCAAqC;AACrC,MAAM,MAAM,aAAa,GACrB,MAAM,GACN,OAAO,GACP,UAAU,GACV,QAAQ,GACR,SAAS,GACT,UAAU,GACV,WAAW,GACX,aAAa,GACb,OAAO,GACP,OAAO,GACP,QAAQ,GACR,UAAU,CAAC;AAEf,MAAM,WAAW,eAAe;IAC9B,kDAAkD;IAClD,IAAI,EAAE,MAAM,CAAC;IACb,iBAAiB;IACjB,IAAI,EAAE,aAAa,CAAC;IACpB,2BAA2B;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uDAAuD;IACvD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,0BAA0B;IAC1B,QAAQ,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;IACnC,8BAA8B;IAC9B,QAAQ,EAAE,MAAM,OAAO,CAAC;IACxB,6DAA6D;IAC7D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,WAAW,CAAC;IAC9B,WAAW,CAAC,EAAE,kBAAkB,CAAC;IACjC,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,WAAW,CAAC,EAAE,kBAAkB,CAAC;IACjC,mEAAmE;IACnE,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvC,OAAO,CAAC,EAAE,aAAa,EAAE,CAAC;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,IAAI,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,IAAI,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,IAAI,CAAC;IACpB,SAAS,CAAC,EAAE,CAAC,UAAU,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IAC1C,QAAQ,CAAC,EAAE,MAAM,OAAO,CAAC;IACzB,QAAQ,CAAC,EAAE,MAAM,mBAAmB,CAAC;CACtC;AAED;;GAEG;AACH,MAAM,WAAW,eAAe;IAC9B,mBAAmB;IACnB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,qCAAqC;IACrC,aAAa,EAAE,CAAC,KAAK,EAAE,eAAe,KAAK,IAAI,CAAC;IAChD,yBAAyB;IACzB,eAAe,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACxC,wDAAwD;IACxD,cAAc,EAAE,MAAM,eAAe,EAAE,CAAC;IACxC,6CAA6C;IAC7C,QAAQ,CAAC,eAAe,EAAE,OAAO,CAAC;IAClC,+CAA+C;IAC/C,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;IAC/B,yCAAyC;IACzC,eAAe,EAAE,MAAM,IAAI,CAAC;IAC5B,8EAA8E;IAC9E,QAAQ,CAAC,mBAAmB,EAAE,0BAA0B,CAAC;IACzD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;;GAEG;AACH,eAAO,MAAM,aAAa,eAAsB,CAAC;AAEjD;;GAEG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,eAAe,GAAG,IAAI,CAEzD;AAED;;;GAGG;AACH,wBAAgB,cAAc,IAAI,eAAe,CAUhD;AAED;;GAEG;AACH,wBAAgB,iBAAiB,IAAI,eAAe,GAAG,IAAI,CAE1D"}

package/dist/web/__tests__/webmcp-harness.svelte

@@ -0,0 +1,14 @@
+<script lang="ts">
+import { useWebMcpTool } from '../webmcp.svelte.js';
+
+let { version = 1 }: { version?: number } = $props();
+
+useWebMcpTool(() => ({
+  name: `harness_tool_${version}`,
+  description: 'A lifecycle test tool',
+  inputSchema: { type: 'object' },
+  execute: () => String(version),
+}));
+</script>
+
+<span>{version}</span>

package/dist/web/__tests__/webmcp-harness.svelte.d.ts

@@ -0,0 +1,7 @@
+type $$ComponentProps = {
+    version?: number;
+};
+declare const WebmcpHarness: import("svelte").Component<$$ComponentProps, {}, "">;
+type WebmcpHarness = ReturnType<typeof WebmcpHarness>;
+export default WebmcpHarness;
+//# sourceMappingURL=webmcp-harness.svelte.d.ts.map

package/dist/web/__tests__/webmcp-harness.svelte.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webmcp-harness.svelte.d.ts","sourceRoot":"","sources":["../../../src/web/__tests__/webmcp-harness.svelte.ts"],"names":[],"mappings":"AAKC,KAAK,gBAAgB,GAAI;IAAE,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAkB/C,QAAA,MAAM,aAAa,sDAAwC,CAAC;AAC5D,KAAK,aAAa,GAAG,UAAU,CAAC,OAAO,aAAa,CAAC,CAAC;AACtD,eAAe,aAAa,CAAC"}

package/dist/web/__tests__/webmcp.test.js

@@ -0,0 +1,39 @@
+import { render } from '@testing-library/svelte';
+import { tick } from 'svelte';
+import { afterEach, describe, expect, it } from 'vitest';
+import Harness from './webmcp-harness.svelte';
+function installModelContext() {
+    const registered = [];
+    document.modelContext = {
+        registerTool(tool, options) {
+            registered.push({ name: tool.name, signal: options?.signal });
+        },
+    };
+    return registered;
+}
+afterEach(() => {
+    delete document.modelContext;
+});
+describe('useWebMcpTool', () => {
+    it('registers on mount, aborts on spec changes, and aborts on unmount', async () => {
+        const registered = installModelContext();
+        const view = render(Harness, { props: { version: 1 } });
+        await tick();
+        expect(registered).toHaveLength(1);
+        expect(registered[0].name).toBe('harness_tool_1');
+        expect(registered[0].signal?.aborted).toBe(false);
+        await view.rerender({ version: 2 });
+        await tick();
+        expect(registered).toHaveLength(2);
+        expect(registered[0].signal?.aborted).toBe(true);
+        expect(registered[1].name).toBe('harness_tool_2');
+        view.unmount();
+        expect(registered[1].signal?.aborted).toBe(true);
+    });
+    it('is a no-op when WebMCP is unavailable', async () => {
+        const view = render(Harness);
+        await tick();
+        expect(view.container).toHaveTextContent('1');
+        view.unmount();
+    });
+});

package/dist/web/webmcp.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Ambient WebMCP types. Chrome currently exposes this origin-trial API without
+ * shipping it in TypeScript's DOM library.
+ */
+
+import type { WebMcpToolSpec } from './webmcp.svelte.js';
+
+declare global {
+  interface Document {
+    modelContext?: WebMcpModelContext;
+  }
+
+  interface WebMcpModelContext {
+    registerTool(
+      tool: WebMcpToolSpec,
+      options?: { signal?: AbortSignal },
+    ): void;
+  }
+}
+
+export {};