@happyvertical/smrt-svelte 0.42.6 → 0.43.0

package/README.md

@@ -38,6 +38,26 @@ Svelte 5 component library for the s-m-r-t framework. Provides UI components, br
 pnpm add @happyvertical/smrt-svelte
 ```
 
+## Data-surface browser bridge security
+
+The browser bridge is a transport adapter, not an authentication system.
+Configure it only with a session/source binding established by the server and
+use a transport that supplies verified peer metadata. It accepts commands only
+from the configured server peer and emits acknowledgements/events only on the
+bound route; wire `sessionId` and `source` fields must never be treated as
+proof of identity.
+
+The adapter canonicalizes requests and applies the shared identifier limit
+from `@happyvertical/smrt-ui/data-surface` along with bounded envelopes before
+calling the registry. The registry remains the authority for command
+authorization and execution. Command IDs are idempotent while their bounded
+replay entries are retained; concurrent same-signature requests coalesce, a
+conflicting signature is rejected, and replay-capacity exhaustion is reported
+explicitly. Malformed requests and unauthenticated peers are ignored before an
+acknowledgement; valid requests that expire or encounter disconnect and
+transport failures produce bounded protocol outcomes without exposing registry
+state.
+
 ## Usage
 
 ### Provider Setup

package/dist/Provider.svelte

@@ -4,6 +4,11 @@ import {
   type I18nSnapshot,
   setI18nContext,
 } from '@happyvertical/smrt-ui/i18n';
+import {
+  type RegisterWebMcpToolsOptions,
+  type SmrtWebClient,
+  type SmrtWebCollectionDefinition,
+} from '@happyvertical/smrt-web';
 import type { Snippet } from 'svelte';
 import { onDestroy, untrack } from 'svelte';
 import { logger } from './internal/logger.js';
@@ -78,12 +83,27 @@ interface Props {
    * English-default-only rendering.
    */
   i18n?: I18nSnapshot;
+  /**
+   * Opt in to the generated collection tools for this browser surface.
+   * WebMCP is feature-detected by smrt-web, so this is safe during SSR and on
+   * browsers that do not expose `document.modelContext`.
+   */
+  webmcp?: boolean | WebMcpProviderConfig;
   /**
    * Children to render
    */
   children: Snippet;
 }
 
+export interface WebMcpProviderConfig {
+  definitions?: SmrtWebCollectionDefinition[];
+  client?: SmrtWebClient;
+  basePath?: string;
+  fetchFn?: typeof fetch;
+  scope?: string;
+  filter?: RegisterWebMcpToolsOptions['filter'];
+}
+
 const {
   mode,
   autoEnableSmrt = true,
@@ -95,6 +115,7 @@ const {
   onModeChange,
   onAILoadingChange,
   i18n,
+  webmcp,
   children,
 }: Props = $props();
 
@@ -128,6 +149,34 @@ $effect(() => {
   });
 });
 
+// Keep generated data-plane tools scoped to this Provider. The registrar
+// feature-detects WebMCP itself; effects do not run during SSR.
+$effect(() => {
+  if (typeof window === 'undefined' || !webmcp) return;
+
+  const config = typeof webmcp === 'object' ? webmcp : {};
+  let cancelled = false;
+  let dispose = () => {};
+
+  // Keep the data-plane engine out of applications that do not opt in. The
+  // dynamic import also means SSR never evaluates browser-only engine code.
+  void import('@happyvertical/smrt-web').then(({ registerWebMcpTools }) => {
+    if (cancelled) return;
+    dispose = registerWebMcpTools(config.definitions ?? [], {
+      ...(config.client ? { client: config.client } : {}),
+      ...(config.basePath ? { basePath: config.basePath } : {}),
+      ...(config.fetchFn ? { fetchFn: config.fetchFn } : {}),
+      ...(config.scope ? { scope: config.scope } : {}),
+      ...(config.filter ? { filter: config.filter } : {}),
+    });
+  });
+
+  return () => {
+    cancelled = true;
+    dispose();
+  };
+});
+
 $effect(() => {
   if (mode) {
     appState.setMode(mode, 'explicit');

package/dist/Provider.svelte.d.ts

@@ -1,6 +1,15 @@
 import { type I18nSnapshot } from '@happyvertical/smrt-ui/i18n';
+import { type RegisterWebMcpToolsOptions, type SmrtWebClient, type SmrtWebCollectionDefinition } from '@happyvertical/smrt-web';
 import type { Snippet } from 'svelte';
 import type { AIConfig, AILoadingState, AppMode, SocketConfig, User } from './state/app-state.js';
+export interface WebMcpProviderConfig {
+    definitions?: SmrtWebCollectionDefinition[];
+    client?: SmrtWebClient;
+    basePath?: string;
+    fetchFn?: typeof fetch;
+    scope?: string;
+    filter?: RegisterWebMcpToolsOptions['filter'];
+}
 interface Props {
     /**
      * Initial mode: 'default' | 'smrt'
@@ -62,6 +71,12 @@ interface Props {
      * English-default-only rendering.
      */
     i18n?: I18nSnapshot;
+    /**
+     * Opt in to the generated collection tools for this browser surface.
+     * WebMCP is feature-detected by smrt-web, so this is safe during SSR and on
+     * browsers that do not expose `document.modelContext`.
+     */
+    webmcp?: boolean | WebMcpProviderConfig;
     /**
      * Children to render
      */

package/dist/Provider.svelte.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Provider.svelte.d.ts","sourceRoot":"","sources":["../src/Provider.svelte.ts"],"names":[],"mappings":"AAGA,OAAO,EAEL,KAAK,YAAY,EAElB,MAAM,6BAA6B,CAAC;AACrC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAGtC,OAAO,KAAK,EACV,QAAQ,EACR,cAAc,EACd,OAAO,EACP,YAAY,EACZ,IAAI,EACL,MAAM,sBAAsB,CAAC;AAK9B,UAAU,KAAK;IACb;;;OAGG;IACH,IAAI,CAAC,EAAE,OAAO,CAAC;IACf;;;OAGG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;;OAGG;IACH,IAAI,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IACnB;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB;;;OAGG;IACH,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB;;;;;;;;;;;;;;;OAeG;IACH,EAAE,CAAC,EAAE,QAAQ,CAAC;IACd;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;IACrB;;OAEG;IACH,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,IAAI,CAAC;IACvC;;OAEG;IACH,iBAAiB,CAAC,EAAE,CAAC,KAAK,EAAE,cAAc,KAAK,IAAI,CAAC;IACpD;;;;;OAKG;IACH,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB;;OAEG;IACH,QAAQ,EAAE,OAAO,CAAC;CACnB;AA6ID,QAAA,MAAM,QAAQ,2CAAwC,CAAC;AACvD,KAAK,QAAQ,GAAG,UAAU,CAAC,OAAO,QAAQ,CAAC,CAAC;AAC5C,eAAe,QAAQ,CAAC"}
+{"version":3,"file":"Provider.svelte.d.ts","sourceRoot":"","sources":["../src/Provider.svelte.ts"],"names":[],"mappings":"AAGA,OAAO,EAEL,KAAK,YAAY,EAElB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EACL,KAAK,0BAA0B,EAC/B,KAAK,aAAa,EAClB,KAAK,2BAA2B,EACjC,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,QAAQ,CAAC;AAGtC,OAAO,KAAK,EACV,QAAQ,EACR,cAAc,EACd,OAAO,EACP,YAAY,EACZ,IAAI,EACL,MAAM,sBAAsB,CAAC;AAK9B,MAAM,WAAW,oBAAoB;IACnC,WAAW,CAAC,EAAE,2BAA2B,EAAE,CAAC;IAC5C,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,0BAA0B,CAAC,QAAQ,CAAC,CAAC;CAC/C;AAED,UAAU,KAAK;IACb;;;OAGG;IACH,IAAI,CAAC,EAAE,OAAO,CAAC;IACf;;;OAGG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;;OAGG;IACH,IAAI,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC;IACnB;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB;;;OAGG;IACH,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB;;;;;;;;;;;;;;;OAeG;IACH,EAAE,CAAC,EAAE,QAAQ,CAAC;IACd;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,IAAI,CAAC;IACrB;;OAEG;IACH,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,IAAI,CAAC;IACvC;;OAEG;IACH,iBAAiB,CAAC,EAAE,CAAC,KAAK,EAAE,cAAc,KAAK,IAAI,CAAC;IACpD;;;;;OAKG;IACH,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB;;;;OAIG;IACH,MAAM,CAAC,EAAE,OAAO,GAAG,oBAAoB,CAAC;IACxC;;OAEG;IACH,QAAQ,EAAE,OAAO,CAAC;CACnB;AA4KD,QAAA,MAAM,QAAQ,2CAAwC,CAAC;AACvD,KAAK,QAAQ,GAAG,UAAU,CAAC,OAAO,QAAQ,CAAC,CAAC;AAC5C,eAAe,QAAQ,CAAC"}

package/dist/__tests__/data-surface-bridge.test.js

@@ -0,0 +1,351 @@
+import { createDataSurfaceRegistry, } from '@happyvertical/smrt-ui/data';
+import { describe, expect, it, vi } from 'vitest';
+import { createDataSurfaceBrowserBridge, DATA_SURFACE_IDENTIFIER_MAX_LENGTH, } from '../data-surface.js';
+const identity = { surfaceId: 'orders', kind: 'table' };
+const descriptor = {
+    version: 1,
+    identity,
+    schemaVersion: 1,
+    label: 'Orders',
+    rowKey: 'id',
+    columns: [{ id: 'id', label: 'ID', capabilities: ['read'] }],
+    query: { modes: ['rows'], projectableColumnIds: ['id'] },
+    controls: [{ id: 'refresh', label: 'Refresh' }],
+    actions: [],
+    limits: { maxQueryRows: 10, maxQueryBytes: 1000, maxSelectionSize: 10 },
+};
+function request(overrides = {}) {
+    return {
+        type: 'data-surface.command',
+        version: 1,
+        commandId: 'command-1',
+        sessionId: 'session-1',
+        source: 'server-1',
+        expiresAt: 10_000,
+        identity,
+        expectedRevision: 1,
+        controlId: 'refresh',
+        ...overrides,
+    };
+}
+function transport() {
+    const messages = [];
+    const listeners = new Set();
+    return {
+        messages,
+        send: vi.fn((message) => {
+            messages.push(message);
+        }),
+        subscribe(listener) {
+            listeners.add(listener);
+            return () => listeners.delete(listener);
+        },
+        receive(message, peer = {
+            sessionId: 'session-1',
+            source: 'server-1',
+        }) {
+            for (const listener of listeners)
+                listener(message, peer);
+        },
+    };
+}
+function fixture() {
+    let revision = 1;
+    const execute = vi.fn(() => {
+        revision += 1;
+    });
+    const registry = createDataSurfaceRegistry();
+    registry.register({
+        descriptor,
+        getSnapshot: () => ({ revision, state: { refreshed: revision > 1 } }),
+        execute,
+    });
+    return { registry, execute };
+}
+const drain = () => new Promise((resolve) => setTimeout(resolve, 0));
+describe('data-surface browser bridge', () => {
+    it('requires the bound session/source and acknowledges a successful command', async () => {
+        const { registry, execute } = fixture();
+        const link = transport();
+        createDataSurfaceBrowserBridge({
+            registry,
+            transport: link,
+            sessionId: 'session-1',
+            source: 'browser-1',
+            peerSource: 'server-1',
+            now: () => 1_000,
+        });
+        await link.receive(request({ expiresAt: 2_000 }));
+        await drain();
+        expect(execute).toHaveBeenCalledTimes(1);
+        expect(link.messages.at(-1)).toMatchObject({
+            type: 'data-surface.ack',
+            commandId: 'command-1',
+            sessionId: 'session-1',
+            source: 'browser-1',
+            ok: true,
+        });
+        await link.receive(request({ expiresAt: 5_000 }));
+        await drain();
+        expect(execute).toHaveBeenCalledTimes(1);
+        expect(link.messages.at(-1)).toMatchObject({ expiresAt: 5_000 });
+    });
+    it('does not execute stale, expired, or cross-session/source commands', async () => {
+        const { registry, execute } = fixture();
+        const link = transport();
+        createDataSurfaceBrowserBridge({
+            registry,
+            transport: link,
+            sessionId: 'session-1',
+            source: 'browser-1',
+            peerSource: 'server-1',
+            now: () => 1_000,
+        });
+        await link.receive(request({ commandId: 'stale', expectedRevision: 99 }));
+        await link.receive(request({ commandId: 'expired', expiresAt: 500 }));
+        await link.receive(request({ commandId: 'session', sessionId: 'other' }));
+        await link.receive(request({ commandId: 'source', source: 'other' }));
+        await drain();
+        expect(execute).not.toHaveBeenCalled();
+        expect(link.messages
+            .filter((message) => message.type === 'data-surface.ack')
+            .map((message) => message.reason)).toEqual(expect.arrayContaining([
+            'stale_revision',
+            'expired',
+            'session_mismatch',
+            'source_mismatch',
+        ]));
+    });
+    it('rejects a command whose wire identity is accompanied by an unauthenticated peer', async () => {
+        const { registry, execute } = fixture();
+        const link = transport();
+        createDataSurfaceBrowserBridge({
+            registry,
+            transport: link,
+            sessionId: 'session-1',
+            source: 'browser-1',
+            peerSource: 'server-1',
+            now: () => 1_000,
+        });
+        await link.receive(request(), {
+            sessionId: 'session-1',
+            source: 'attacker',
+        });
+        await link.receive(request({ commandId: 'session-spoof' }), {
+            sessionId: 'attacker',
+            source: 'server-1',
+        });
+        expect(execute).not.toHaveBeenCalled();
+        expect(link.messages).toHaveLength(0);
+    });
+    it('rejects identifiers longer than the shared bridge contract', async () => {
+        const { registry, execute } = fixture();
+        const link = transport();
+        createDataSurfaceBrowserBridge({
+            registry,
+            transport: link,
+            sessionId: 'session-1',
+            source: 'browser-1',
+            peerSource: 'server-1',
+            now: () => 1_000,
+        });
+        const tooLong = 'x'.repeat(DATA_SURFACE_IDENTIFIER_MAX_LENGTH + 1);
+        await link.receive(request({ commandId: tooLong }));
+        await link.receive(request({ controlId: tooLong }));
+        await link.receive(request({ identity: { surfaceId: tooLong, kind: 'table' } }));
+        await link.receive(request({
+            identity: {
+                surfaceId: 'orders',
+                kind: 'table',
+                subject: { type: tooLong, id: 'docs' },
+            },
+        }));
+        await link.receive(request({
+            identity: {
+                surfaceId: 'orders',
+                kind: 'table',
+                subject: { type: 'site', id: tooLong },
+            },
+        }));
+        expect(execute).not.toHaveBeenCalled();
+        expect(link.messages).toHaveLength(0);
+    });
+    it('retains every unexpired replay outcome and refuses new commands at capacity', async () => {
+        const { registry, execute } = fixture();
+        const link = transport();
+        createDataSurfaceBrowserBridge({
+            registry,
+            transport: link,
+            sessionId: 'session-1',
+            source: 'browser-1',
+            peerSource: 'server-1',
+            now: () => 1_000,
+            maxReplayEntries: 2,
+        });
+        await link.receive(request({ commandId: 'one', expiresAt: 5_000 }));
+        await drain();
+        await link.receive(request({ commandId: 'two', expectedRevision: 2, expiresAt: 5_000 }));
+        await drain();
+        await link.receive(request({ commandId: 'three', expectedRevision: 3, expiresAt: 5_000 }));
+        await drain();
+        expect(execute).toHaveBeenCalledTimes(2);
+        expect(link.messages.at(-1)).toMatchObject({
+            commandId: 'three',
+            reason: 'replay_capacity_exceeded',
+        });
+        await link.receive(request({ commandId: 'one', expiresAt: 5_000 }));
+        await drain();
+        expect(execute).toHaveBeenCalledTimes(2);
+    });
+    it('atomically reserves replay capacity while concurrent executions are held', async () => {
+        const registry = createDataSurfaceRegistry();
+        const releases = [];
+        const execute = vi.fn(() => new Promise((resolve) => releases.push(resolve)));
+        registry.register({
+            descriptor,
+            getSnapshot: () => ({ revision: 1, state: {} }),
+            execute,
+        });
+        const link = transport();
+        createDataSurfaceBrowserBridge({
+            registry,
+            transport: link,
+            sessionId: 'session-1',
+            source: 'browser-1',
+            peerSource: 'server-1',
+            now: () => 1_000,
+            maxReplayEntries: 2,
+        });
+        void link.receive(request({ commandId: 'held-one', expiresAt: 5_000 }));
+        void link.receive(request({ commandId: 'held-two', expiresAt: 5_000 }));
+        void link.receive(request({ commandId: 'held-three', expiresAt: 5_000 }));
+        for (let attempt = 0; attempt < 5 && execute.mock.calls.length < 1; attempt++) {
+            await drain();
+        }
+        expect(execute).toHaveBeenCalledTimes(1);
+        expect(link.messages).toContainEqual(expect.objectContaining({
+            type: 'data-surface.ack',
+            commandId: 'held-three',
+            reason: 'replay_capacity_exceeded',
+        }));
+        releases[0]?.();
+        for (let attempt = 0; attempt < 5 && execute.mock.calls.length < 2; attempt++) {
+            await drain();
+        }
+        releases[1]?.();
+        await drain();
+        await drain();
+        expect(link.messages.filter((message) => message.type === 'data-surface.ack' && message.ok === true)).toHaveLength(2);
+    });
+    it('releases replay reservations when execution errors after expiry', async () => {
+        let current = 1_000;
+        const registry = createDataSurfaceRegistry();
+        const execute = vi
+            .fn()
+            .mockImplementationOnce(() => {
+            throw new Error('boom');
+        })
+            .mockImplementationOnce(() => undefined);
+        registry.register({
+            descriptor,
+            getSnapshot: () => ({ revision: 1, state: {} }),
+            execute,
+        });
+        const link = transport();
+        createDataSurfaceBrowserBridge({
+            registry,
+            transport: link,
+            sessionId: 'session-1',
+            source: 'browser-1',
+            peerSource: 'server-1',
+            now: () => current,
+            maxReplayEntries: 1,
+        });
+        await link.receive(request({ commandId: 'expired-error', expiresAt: 1_100 }));
+        await drain();
+        current = 1_200;
+        await link.receive(request({ commandId: 'after-error', expiresAt: 5_000 }));
+        await drain();
+        expect(execute).toHaveBeenCalledTimes(2);
+        expect(link.messages.at(-1)).toMatchObject({
+            commandId: 'after-error',
+            ok: true,
+        });
+    });
+    it('releases replay capacity when execution never settles before expiry', async () => {
+        vi.useFakeTimers();
+        try {
+            vi.setSystemTime(1_000);
+            const registry = createDataSurfaceRegistry();
+            let finishHung;
+            const execute = vi
+                .fn()
+                .mockImplementationOnce(() => new Promise((resolve) => {
+                finishHung = resolve;
+            }))
+                .mockImplementationOnce(() => undefined);
+            registry.register({
+                descriptor,
+                getSnapshot: () => ({ revision: 1, state: {} }),
+                execute,
+            });
+            registry.register({
+                descriptor: {
+                    ...descriptor,
+                    identity: { surfaceId: 'invoices', kind: 'table' },
+                },
+                getSnapshot: () => ({ revision: 1, state: {} }),
+                execute,
+            });
+            const link = transport();
+            createDataSurfaceBrowserBridge({
+                registry,
+                transport: link,
+                sessionId: 'session-1',
+                source: 'browser-1',
+                peerSource: 'server-1',
+                maxReplayEntries: 1,
+            });
+            const first = link.receive(request({ commandId: 'hung', expiresAt: 1_100 }));
+            await vi.advanceTimersByTimeAsync(100);
+            await first;
+            expect(link.messages.at(-1)).toMatchObject({
+                commandId: 'hung',
+                reason: 'expired',
+            });
+            finishHung();
+            await vi.runOnlyPendingTimersAsync();
+            expect(link.messages.filter((message) => message.type === 'data-surface.ack' && message.commandId === 'hung')).toHaveLength(1);
+            await link.receive(request({
+                commandId: 'after-hung',
+                expiresAt: 5_000,
+                identity: { surfaceId: 'invoices', kind: 'table' },
+            }));
+            await vi.runOnlyPendingTimersAsync();
+            expect(execute).toHaveBeenCalledTimes(2);
+            expect(link.messages.at(-1)).toMatchObject({
+                commandId: 'after-hung',
+                ok: true,
+            });
+        }
+        finally {
+            vi.useRealTimers();
+        }
+    });
+    it('forwards only monotonic registry events', async () => {
+        const { registry } = fixture();
+        const link = transport();
+        createDataSurfaceBrowserBridge({
+            registry,
+            transport: link,
+            sessionId: 'session-1',
+            source: 'browser-1',
+            peerSource: 'server-1',
+        });
+        await link.receive(request({ commandId: 'event-command', expiresAt: Date.now() + 1000 }));
+        await drain();
+        const events = link.messages.filter((message) => message.type === 'data-surface.event');
+        expect(events.length).toBeGreaterThan(0);
+        expect(events.map((event) => event.sequence)).toEqual([...events].map((event) => event.sequence).sort((a, b) => a - b));
+    });
+});

package/dist/components/forms/AddressInput.svelte

@@ -233,6 +233,17 @@ onMount(() => {
         }
       },
       getValue: () => value,
+      constraints: { required },
+      webMcpSchema: {
+        type: 'object',
+        properties: Object.fromEntries(
+          fields.map((field) => [field, { type: 'string' }]),
+        ),
+        ...(required ? { required: [...fields] } : {}),
+      },
+      validate: () =>
+        !required ||
+        fields.every((field) => String(value[field] ?? '').trim().length > 0),
     };
     formContext.registerField(fieldDef);
   }

package/dist/components/forms/AddressInput.svelte.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AddressInput.svelte.d.ts","sourceRoot":"","sources":["../../../src/components/forms/AddressInput.svelte.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAG/C,KAAK,YAAY,GAAG,MAAM,YAAY,CAAC;AAEvC,MAAM,WAAW,KAAK;IACpB,wBAAwB;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,kBAAkB;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uCAAuC;IACvC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,+BAA+B;IAC/B,KAAK,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;IAC9B,2BAA2B;IAC3B,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC;IACxB,qBAAqB;IACrB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,qBAAqB;IACrB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,+BAA+B;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mCAAmC;IACnC,SAAS,CAAC,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACpD,0CAA0C;IAC1C,SAAS,CAAC,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACpD,gCAAgC;IAChC,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,YAAY,CAAC,KAAK,IAAI,CAAC;CACnD;AAwTD,QAAA,MAAM,YAAY,gDAAwC,CAAC;AAC3D,KAAK,YAAY,GAAG,UAAU,CAAC,OAAO,YAAY,CAAC,CAAC;AACpD,eAAe,YAAY,CAAC"}
+{"version":3,"file":"AddressInput.svelte.d.ts","sourceRoot":"","sources":["../../../src/components/forms/AddressInput.svelte.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAG/C,KAAK,YAAY,GAAG,MAAM,YAAY,CAAC;AAEvC,MAAM,WAAW,KAAK;IACpB,wBAAwB;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,kBAAkB;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uCAAuC;IACvC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,+BAA+B;IAC/B,KAAK,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;IAC9B,2BAA2B;IAC3B,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC;IACxB,qBAAqB;IACrB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,qBAAqB;IACrB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,+BAA+B;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mCAAmC;IACnC,SAAS,CAAC,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACpD,0CAA0C;IAC1C,SAAS,CAAC,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACpD,gCAAgC;IAChC,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,YAAY,CAAC,KAAK,IAAI,CAAC;CACnD;AAmUD,QAAA,MAAM,YAAY,gDAAwC,CAAC;AAC3D,KAAK,YAAY,GAAG,UAAU,CAAC,OAAO,YAAY,CAAC,CAAC;AACpD,eAAe,YAAY,CAAC"}

package/dist/components/forms/CheckboxInput.svelte

@@ -64,6 +64,8 @@ onMount(() => {
         }
       },
       getValue: () => checked,
+      constraints: { required },
+      validate: () => !required || checked,
     };
     formContext.registerField(fieldDef);
   }
@@ -206,4 +208,4 @@ function handleChange(e: Event) {
     background-color: var(--smrt-color-on-surface);
     opacity: 0.08;
   }
-</style>
+</style>

package/dist/components/forms/CheckboxInput.svelte.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"CheckboxInput.svelte.d.ts","sourceRoot":"","sources":["../../../src/components/forms/CheckboxInput.svelte.ts"],"names":[],"mappings":"AAaA,MAAM,WAAW,KAAK;IACpB,iBAAiB;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,kBAAkB;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uCAAuC;IACvC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,+BAA+B;IAC/B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,qBAAqB;IACrB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,qBAAqB;IACrB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,gCAAgC;IAChC,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC;CACvC;AAwFD,QAAA,MAAM,aAAa,kDAAwC,CAAC;AAC5D,KAAK,aAAa,GAAG,UAAU,CAAC,OAAO,aAAa,CAAC,CAAC;AACtD,eAAe,aAAa,CAAC"}
+{"version":3,"file":"CheckboxInput.svelte.d.ts","sourceRoot":"","sources":["../../../src/components/forms/CheckboxInput.svelte.ts"],"names":[],"mappings":"AAaA,MAAM,WAAW,KAAK;IACpB,iBAAiB;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,kBAAkB;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uCAAuC;IACvC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,+BAA+B;IAC/B,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,qBAAqB;IACrB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,qBAAqB;IACrB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,gCAAgC;IAChC,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,CAAC;CACvC;AA2FD,QAAA,MAAM,aAAa,kDAAwC,CAAC;AAC5D,KAAK,aAAa,GAAG,UAAU,CAAC,OAAO,aAAa,CAAC,CAAC;AACtD,eAAe,aAAa,CAAC"}

package/dist/components/forms/DateRangeInput.svelte

@@ -206,6 +206,9 @@ onMount(() => {
           .catch(() => {});
       },
       getValue: () => ({ startDate, endDate }),
+      constraints: { required },
+      validate: () =>
+        !required || (startDate.trim().length > 0 && endDate.trim().length > 0),
     };
     formContext.registerField(fieldDef);
   }

package/dist/components/forms/DateRangeInput.svelte.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"DateRangeInput.svelte.d.ts","sourceRoot":"","sources":["../../../src/components/forms/DateRangeInput.svelte.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAGjD,MAAM,WAAW,KAAK;IACpB,iBAAiB;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,kBAAkB;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uCAAuC;IACvC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,6BAA6B;IAC7B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,2BAA2B;IAC3B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,2DAA2D;IAC3D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yDAAyD;IACzD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8BAA8B;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8BAA8B;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qBAAqB;IACrB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,qBAAqB;IACrB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,+BAA+B;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gCAAgC;IAChC,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,cAAc,KAAK,IAAI,CAAC;CAC5C;AAkYD,QAAA,MAAM,cAAc,gEAAwC,CAAC;AAC7D,KAAK,cAAc,GAAG,UAAU,CAAC,OAAO,cAAc,CAAC,CAAC;AACxD,eAAe,cAAc,CAAC"}
+{"version":3,"file":"DateRangeInput.svelte.d.ts","sourceRoot":"","sources":["../../../src/components/forms/DateRangeInput.svelte.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAGjD,MAAM,WAAW,KAAK;IACpB,iBAAiB;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,kBAAkB;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,uCAAuC;IACvC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,6BAA6B;IAC7B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,2BAA2B;IAC3B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,2DAA2D;IAC3D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yDAAyD;IACzD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8BAA8B;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,8BAA8B;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,qBAAqB;IACrB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,qBAAqB;IACrB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,+BAA+B;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gCAAgC;IAChC,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,cAAc,KAAK,IAAI,CAAC;CAC5C;AAqYD,QAAA,MAAM,cAAc,gEAAwC,CAAC;AAC7D,KAAK,cAAc,GAAG,UAAU,CAAC,OAAO,cAAc,CAAC,CAAC;AACxD,eAAe,cAAc,CAAC"}

package/dist/components/forms/DateTimeInput.svelte

@@ -122,6 +122,8 @@ onMount(() => {
         updateValue(String(v ?? ''));
       },
       getValue: () => value,
+      constraints: { required },
+      validate: () => !required || value.trim().length > 0,
     };
     formContext.registerField(fieldDef);
   }

package/dist/components/forms/DateTimeInput.svelte.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"DateTimeInput.svelte.d.ts","sourceRoot":"","sources":["../../../src/components/forms/DateTimeInput.svelte.ts"],"names":[],"mappings":"AAgBA,MAAM,WAAW,KAAK;IACpB,iBAAiB;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,kBAAkB;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,2CAA2C;IAC3C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iCAAiC;IACjC,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,uBAAuB;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,2CAA2C;IAC3C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,qBAAqB;IACrB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,qBAAqB;IACrB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,gCAAgC;IAChC,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;CACpC;AA6UD,QAAA,MAAM,aAAa,gDAAwC,CAAC;AAC5D,KAAK,aAAa,GAAG,UAAU,CAAC,OAAO,aAAa,CAAC,CAAC;AACtD,eAAe,aAAa,CAAC"}
+{"version":3,"file":"DateTimeInput.svelte.d.ts","sourceRoot":"","sources":["../../../src/components/forms/DateTimeInput.svelte.ts"],"names":[],"mappings":"AAgBA,MAAM,WAAW,KAAK;IACpB,iBAAiB;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,kBAAkB;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,2CAA2C;IAC3C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iCAAiC;IACjC,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,uBAAuB;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,2CAA2C;IAC3C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,qBAAqB;IACrB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,qBAAqB;IACrB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,gCAAgC;IAChC,QAAQ,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;CACpC;AA+UD,QAAA,MAAM,aAAa,gDAAwC,CAAC;AAC5D,KAAK,aAAa,GAAG,UAAU,CAAC,OAAO,aAAa,CAAC,CAAC;AACtD,eAAe,aAAa,CAAC"}