@happyvertical/smrt-users 0.40.51 → 0.40.53

package/README.md

@@ -10,6 +10,16 @@ pnpm add @happyvertical/smrt-users
 
 ## Usage
 
+### Application discovery conformance
+
+The SvelteKit `createResourceListHandler()` export produces the app CLI
+discovery response and now includes a deterministic `artifact`. Consumers can
+import the published `@happyvertical/smrt-users/app-contract` entrypoint to
+validate the schema/version selector and SHA-256 integrity digest before using
+the embedded resource catalog. See
+[`@happyvertical/smrt-app-cli`](../app-cli/README.md#discovery-conformance-artifact)
+for the exact packaged-runtime pinning workflow.
+
 ### Roles and permissions
 
 ```typescript

package/dist/app-contract.d.ts

@@ -0,0 +1,139 @@
+import { ResourceListResponseBody } from './sveltekit.js';
+/** Immutable selector for this discovery artifact family. */
+export declare const SMRT_DISCOVERY_CONFORMANCE_SCHEMA = "https://smrt.dev/schemas/discovery-conformance/v1";
+/** Version of the discovery artifact payload. */
+export declare const SMRT_DISCOVERY_CONFORMANCE_VERSION: 1;
+/** Versioned selector for structured application results and errors. */
+export declare const SMRT_APP_RESULT_SCHEMA = "https://smrt.dev/schemas/app-result/v1";
+/** Version of the structured application result contract. */
+export declare const SMRT_APP_RESULT_VERSION: 1;
+/** MCP result `_meta` member carrying the app-result metadata. */
+export declare const SMRT_MCP_RESULT_METADATA_KEY = "io.happyvertical/smrt";
+/** JSON-safe value used by structured details and parameter schemas. */
+export type JsonValue = null | boolean | number | string | JsonValue[] | {
+    [key: string]: JsonValue;
+};
+/** A declared input field which controls retry or optimistic-concurrency use. */
+export interface DeclaredActionField {
+    /** JSON Schema property name supplied by the action. */
+    field: string;
+    /** Whether the action marks the field required. */
+    required: boolean;
+}
+/** Retry and concurrency declarations projected from a command schema. */
+export interface CommandRequirements {
+    idempotencyKey?: DeclaredActionField;
+    expectedVersion?: DeclaredActionField;
+}
+/** Machine-readable metadata shared by HTTP CLI and MCP bridge results. */
+export interface AppResultMetadata {
+    code: string;
+    message?: string;
+    details?: JsonValue;
+    retryable?: boolean;
+    correlationId?: string;
+    idempotencyKey?: DeclaredActionField;
+    expectedVersion?: DeclaredActionField;
+}
+export interface AppResultContract {
+    schema: typeof SMRT_APP_RESULT_SCHEMA;
+    version: typeof SMRT_APP_RESULT_VERSION;
+    mcpMetadataKey: typeof SMRT_MCP_RESULT_METADATA_KEY;
+    metadataFields: readonly [
+        'code',
+        'message',
+        'details',
+        'retryable',
+        'correlationId',
+        'idempotencyKey',
+        'expectedVersion'
+    ];
+}
+/** Stable description of the result metadata contract contained in an artifact. */
+export declare const SMRT_APP_RESULT_CONTRACT: AppResultContract;
+/** The pre-artifact wire payload, kept for the existing `/_resources` fields. */
+export type DiscoveryPayload = Omit<ResourceListResponseBody, 'artifact'>;
+export interface DiscoveryArtifactIntegrity {
+    algorithm: 'sha256';
+    /** `sha256:<lowercase-hex>` over canonical unsigned artifact JSON. */
+    digest: string;
+}
+/** Versioned payload a consumer can validate and pin. */
+export interface DiscoveryConformanceArtifact {
+    schema: typeof SMRT_DISCOVERY_CONFORMANCE_SCHEMA;
+    version: typeof SMRT_DISCOVERY_CONFORMANCE_VERSION;
+    discovery: DiscoveryPayload;
+    resultContract: AppResultContract;
+    integrity: DiscoveryArtifactIntegrity;
+}
+/** A JSON Schema export for consumers that validate artifacts outside Node. */
+export declare const SMRT_DISCOVERY_CONFORMANCE_ARTIFACT_SCHEMA: {
+    readonly $id: "https://smrt.dev/schemas/discovery-conformance/v1";
+    readonly type: "object";
+    readonly required: readonly ["schema", "version", "discovery", "resultContract", "integrity"];
+    readonly properties: {
+        readonly schema: {
+            readonly const: "https://smrt.dev/schemas/discovery-conformance/v1";
+        };
+        readonly version: {
+            readonly const: 1;
+        };
+        readonly discovery: {
+            readonly type: "object";
+            readonly required: readonly ["user", "warnings", "resources"];
+            readonly properties: {
+                readonly user: {
+                    readonly type: "object";
+                    readonly required: readonly ["authenticated"];
+                };
+                readonly warnings: {
+                    readonly type: "array";
+                    readonly items: {
+                        readonly type: "string";
+                    };
+                };
+                readonly resources: {
+                    readonly type: "array";
+                };
+            };
+        };
+        readonly resultContract: {
+            readonly type: "object";
+            readonly required: readonly ["schema", "version", "mcpMetadataKey", "metadataFields"];
+        };
+        readonly integrity: {
+            readonly type: "object";
+            readonly required: readonly ["algorithm", "digest"];
+            readonly properties: {
+                readonly algorithm: {
+                    readonly const: "sha256";
+                };
+                readonly digest: {
+                    readonly type: "string";
+                    readonly pattern: "^sha256:[a-f0-9]{64}$";
+                };
+            };
+        };
+    };
+};
+/** Thrown when an artifact is malformed, non-canonical, or fails its digest. */
+export declare class DiscoveryArtifactValidationError extends Error {
+    constructor(message: string);
+}
+/**
+ * Project conventionally named request fields from a JSON Schema into the
+ * discovery contract. This is declarative only: the action remains the owner
+ * of enforcement and may use a body field or adapt it to an HTTP header.
+ */
+export declare function deriveCommandRequirements(parameters: Record<string, unknown> | undefined): CommandRequirements | undefined;
+/** Produce a deterministically ordered artifact with a SHA-256 integrity pin. */
+export declare function createDiscoveryConformanceArtifact(discovery: DiscoveryPayload): DiscoveryConformanceArtifact;
+/**
+ * Validate structure, canonical ordering, and the integrity digest. Returns
+ * the typed artifact so consumers can use one operation for validation and
+ * consumption.
+ */
+export declare function validateDiscoveryConformanceArtifact(value: unknown): DiscoveryConformanceArtifact;
+/** Canonical JSON bytes whose digest is carried by the artifact. */
+export declare function canonicalizeDiscoveryArtifact(artifact: Omit<DiscoveryConformanceArtifact, 'integrity'>): string;
+//# sourceMappingURL=app-contract.d.ts.map

package/dist/app-contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-contract.d.ts","sourceRoot":"","sources":["../src/app-contract.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAGH,OAAO,KAAK,EAGV,wBAAwB,EACzB,MAAM,gBAAgB,CAAC;AAExB,6DAA6D;AAC7D,eAAO,MAAM,iCAAiC,sDACO,CAAC;AACtD,iDAAiD;AACjD,eAAO,MAAM,kCAAkC,EAAG,CAAU,CAAC;AAC7D,wEAAwE;AACxE,eAAO,MAAM,sBAAsB,2CAA2C,CAAC;AAC/E,6DAA6D;AAC7D,eAAO,MAAM,uBAAuB,EAAG,CAAU,CAAC;AAClD,kEAAkE;AAClE,eAAO,MAAM,4BAA4B,0BAA0B,CAAC;AAEpE,wEAAwE;AACxE,MAAM,MAAM,SAAS,GACjB,IAAI,GACJ,OAAO,GACP,MAAM,GACN,MAAM,GACN,SAAS,EAAE,GACX;IAAE,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,CAAA;CAAE,CAAC;AAEjC,iFAAiF;AACjF,MAAM,WAAW,mBAAmB;IAClC,wDAAwD;IACxD,KAAK,EAAE,MAAM,CAAC;IACd,mDAAmD;IACnD,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,0EAA0E;AAC1E,MAAM,WAAW,mBAAmB;IAClC,cAAc,CAAC,EAAE,mBAAmB,CAAC;IACrC,eAAe,CAAC,EAAE,mBAAmB,CAAC;CACvC;AAED,2EAA2E;AAC3E,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,SAAS,CAAC;IACpB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,cAAc,CAAC,EAAE,mBAAmB,CAAC;IACrC,eAAe,CAAC,EAAE,mBAAmB,CAAC;CACvC;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,OAAO,sBAAsB,CAAC;IACtC,OAAO,EAAE,OAAO,uBAAuB,CAAC;IACxC,cAAc,EAAE,OAAO,4BAA4B,CAAC;IACpD,cAAc,EAAE,SAAS;QACvB,MAAM;QACN,SAAS;QACT,SAAS;QACT,WAAW;QACX,eAAe;QACf,gBAAgB;QAChB,iBAAiB;KAClB,CAAC;CACH;AAED,mFAAmF;AACnF,eAAO,MAAM,wBAAwB,EAAE,iBAatC,CAAC;AAEF,iFAAiF;AACjF,MAAM,MAAM,gBAAgB,GAAG,IAAI,CAAC,wBAAwB,EAAE,UAAU,CAAC,CAAC;AAE1E,MAAM,WAAW,0BAA0B;IACzC,SAAS,EAAE,QAAQ,CAAC;IACpB,sEAAsE;IACtE,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,yDAAyD;AACzD,MAAM,WAAW,4BAA4B;IAC3C,MAAM,EAAE,OAAO,iCAAiC,CAAC;IACjD,OAAO,EAAE,OAAO,kCAAkC,CAAC;IACnD,SAAS,EAAE,gBAAgB,CAAC;IAC5B,cAAc,EAAE,iBAAiB,CAAC;IAClC,SAAS,EAAE,0BAA0B,CAAC;CACvC;AAED,+EAA+E;AAC/E,eAAO,MAAM,0CAA0C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA6B7C,CAAC;AAEX,gFAAgF;AAChF,qBAAa,gCAAiC,SAAQ,KAAK;gBAC7C,OAAO,EAAE,MAAM;CAI5B;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CACvC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,GAC9C,mBAAmB,GAAG,SAAS,CA2BjC;AAED,iFAAiF;AACjF,wBAAgB,kCAAkC,CAChD,SAAS,EAAE,gBAAgB,GAC1B,4BAA4B,CAgB9B;AAED;;;;GAIG;AACH,wBAAgB,oCAAoC,CAClD,KAAK,EAAE,OAAO,GACb,4BAA4B,CAuC9B;AAED,oEAAoE;AACpE,wBAAgB,6BAA6B,CAC3C,QAAQ,EAAE,IAAI,CAAC,4BAA4B,EAAE,WAAW,CAAC,GACxD,MAAM,CAER"}

package/dist/app-contract.js

@@ -0,0 +1,319 @@
+import { createHash, timingSafeEqual } from "node:crypto";
+//#region src/app-contract.ts
+var SMRT_DISCOVERY_CONFORMANCE_SCHEMA = "https://smrt.dev/schemas/discovery-conformance/v1";
+var SMRT_DISCOVERY_CONFORMANCE_VERSION = 1;
+var SMRT_APP_RESULT_SCHEMA = "https://smrt.dev/schemas/app-result/v1";
+var SMRT_APP_RESULT_VERSION = 1;
+var SMRT_MCP_RESULT_METADATA_KEY = "io.happyvertical/smrt";
+var SMRT_APP_RESULT_CONTRACT = {
+	schema: SMRT_APP_RESULT_SCHEMA,
+	version: 1,
+	mcpMetadataKey: SMRT_MCP_RESULT_METADATA_KEY,
+	metadataFields: [
+		"code",
+		"message",
+		"details",
+		"retryable",
+		"correlationId",
+		"idempotencyKey",
+		"expectedVersion"
+	]
+};
+var SMRT_DISCOVERY_CONFORMANCE_ARTIFACT_SCHEMA = {
+	$id: SMRT_DISCOVERY_CONFORMANCE_SCHEMA,
+	type: "object",
+	required: [
+		"schema",
+		"version",
+		"discovery",
+		"resultContract",
+		"integrity"
+	],
+	properties: {
+		schema: { const: SMRT_DISCOVERY_CONFORMANCE_SCHEMA },
+		version: { const: 1 },
+		discovery: {
+			type: "object",
+			required: [
+				"user",
+				"warnings",
+				"resources"
+			],
+			properties: {
+				user: {
+					type: "object",
+					required: ["authenticated"]
+				},
+				warnings: {
+					type: "array",
+					items: { type: "string" }
+				},
+				resources: { type: "array" }
+			}
+		},
+		resultContract: {
+			type: "object",
+			required: [
+				"schema",
+				"version",
+				"mcpMetadataKey",
+				"metadataFields"
+			]
+		},
+		integrity: {
+			type: "object",
+			required: ["algorithm", "digest"],
+			properties: {
+				algorithm: { const: "sha256" },
+				digest: {
+					type: "string",
+					pattern: "^sha256:[a-f0-9]{64}$"
+				}
+			}
+		}
+	}
+};
+var DiscoveryArtifactValidationError = class extends Error {
+	constructor(message) {
+		super(message);
+		this.name = "DiscoveryArtifactValidationError";
+	}
+};
+function deriveCommandRequirements(parameters) {
+	const properties = isRecord(parameters?.properties) ? parameters.properties : void 0;
+	if (!properties) return void 0;
+	const required = new Set(Array.isArray(parameters?.required) ? parameters.required.filter((value) => typeof value === "string") : []);
+	const findField = (names) => {
+		const field = names.find((name) => Object.hasOwn(properties, name));
+		return field ? {
+			field,
+			required: required.has(field)
+		} : void 0;
+	};
+	const idempotencyKey = findField(["idempotencyKey", "idempotency_key"]);
+	const expectedVersion = findField(["expectedVersion", "expected_version"]);
+	if (!idempotencyKey && !expectedVersion) return void 0;
+	return {
+		...idempotencyKey ? { idempotencyKey } : {},
+		...expectedVersion ? { expectedVersion } : {}
+	};
+}
+function createDiscoveryConformanceArtifact(discovery) {
+	const unsigned = {
+		schema: SMRT_DISCOVERY_CONFORMANCE_SCHEMA,
+		version: 1,
+		discovery: normalizeDiscovery(discovery),
+		resultContract: SMRT_APP_RESULT_CONTRACT
+	};
+	return {
+		...unsigned,
+		integrity: {
+			algorithm: "sha256",
+			digest: digestUnsignedArtifact(unsigned)
+		}
+	};
+}
+function validateDiscoveryConformanceArtifact(value) {
+	if (!isRecord(value)) fail("artifact must be an object");
+	if (value.schema !== "https://smrt.dev/schemas/discovery-conformance/v1") fail(`unsupported artifact schema: ${String(value.schema)}`);
+	if (value.version !== 1) fail(`unsupported artifact version: ${String(value.version)}`);
+	if (!isRecord(value.integrity) || value.integrity.algorithm !== "sha256") fail("artifact integrity.algorithm must be sha256");
+	if (typeof value.integrity.digest !== "string" || !/^sha256:[a-f0-9]{64}$/u.test(value.integrity.digest)) fail("artifact integrity.digest must be lowercase sha256 hex");
+	validateResultContract(value.resultContract);
+	const artifact = {
+		schema: SMRT_DISCOVERY_CONFORMANCE_SCHEMA,
+		version: 1,
+		discovery: validateDiscovery(value.discovery),
+		resultContract: SMRT_APP_RESULT_CONTRACT,
+		integrity: {
+			algorithm: "sha256",
+			digest: value.integrity.digest
+		}
+	};
+	if (!safeDigestEqual(digestUnsignedArtifact({
+		schema: artifact.schema,
+		version: artifact.version,
+		discovery: artifact.discovery,
+		resultContract: artifact.resultContract
+	}), artifact.integrity.digest)) fail("artifact integrity digest does not match canonical payload");
+	return artifact;
+}
+function canonicalizeDiscoveryArtifact(artifact) {
+	return canonicalJson(artifact);
+}
+function normalizeDiscovery(discovery) {
+	const resources = [...discovery.resources].map(normalizeResource).sort((left, right) => compareText(left.slug, right.slug));
+	return {
+		user: discovery.user.id ? {
+			authenticated: discovery.user.authenticated,
+			id: discovery.user.id
+		} : { authenticated: discovery.user.authenticated },
+		warnings: [...discovery.warnings].sort(compareText),
+		resources
+	};
+}
+function normalizeResource(resource) {
+	const commands = [...resource.commands].map(normalizeCommand).sort((left, right) => compareText(left.commandName, right.commandName));
+	return {
+		slug: resource.slug,
+		className: resource.className,
+		...resource.qualifiedName ? { qualifiedName: resource.qualifiedName } : {},
+		...resource.packageName ? { packageName: resource.packageName } : {},
+		label: resource.label,
+		apiPath: resource.apiPath,
+		commands
+	};
+}
+function normalizeCommand(command) {
+	const requirements = command.requirements ? normalizeRequirements(command.requirements) : void 0;
+	return {
+		methodName: command.methodName,
+		commandName: command.commandName,
+		kind: command.kind,
+		scope: command.scope,
+		httpMethod: command.httpMethod,
+		pathSegments: [...command.pathSegments],
+		...command.description ? { description: command.description } : {},
+		...command.parameters ? { parameters: canonicalJsonValue(command.parameters) } : {},
+		...requirements ? { requirements } : {}
+	};
+}
+function validateDiscovery(value) {
+	if (!isRecord(value)) fail("artifact discovery must be an object");
+	if (!isRecord(value.user) || typeof value.user.authenticated !== "boolean") fail("artifact discovery.user.authenticated must be boolean");
+	if (value.user.id !== void 0 && typeof value.user.id !== "string") fail("artifact discovery.user.id must be a string");
+	if (!Array.isArray(value.warnings) || !value.warnings.every(isString)) fail("artifact discovery.warnings must be a string array");
+	assertSorted(value.warnings, "artifact discovery.warnings");
+	if (!Array.isArray(value.resources)) fail("artifact discovery.resources must be an array");
+	const resources = value.resources.map(validateResource);
+	assertSorted(resources.map((resource) => resource.slug), "artifact discovery.resources");
+	return {
+		user: value.user.id ? {
+			authenticated: value.user.authenticated,
+			id: value.user.id
+		} : { authenticated: value.user.authenticated },
+		warnings: [...value.warnings],
+		resources
+	};
+}
+function validateResource(value) {
+	if (!isRecord(value)) fail("artifact resource must be an object");
+	const slug = requireArtifactString(value.slug, "resource.slug");
+	const className = requireArtifactString(value.className, "resource.className");
+	const label = requireArtifactString(value.label, "resource.label");
+	const apiPath = requireArtifactString(value.apiPath, "resource.apiPath");
+	if (!Array.isArray(value.commands)) fail("artifact resource.commands must be an array");
+	const commands = value.commands.map(validateCommand);
+	assertSorted(commands.map((command) => command.commandName), "artifact resource.commands");
+	return {
+		slug,
+		className,
+		...typeof value.qualifiedName === "string" ? { qualifiedName: value.qualifiedName } : {},
+		...typeof value.packageName === "string" ? { packageName: value.packageName } : {},
+		label,
+		apiPath,
+		commands
+	};
+}
+function validateCommand(value) {
+	if (!isRecord(value)) fail("artifact command must be an object");
+	const methodName = requireArtifactString(value.methodName, "command.methodName");
+	const commandName = requireArtifactString(value.commandName, "command.commandName");
+	const httpMethod = requireArtifactString(value.httpMethod, "command.httpMethod");
+	if (value.kind !== "crud" && value.kind !== "custom") fail("artifact command.kind must be crud or custom");
+	if (value.scope !== "item" && value.scope !== "collection") fail("artifact command.scope must be item or collection");
+	if (!Array.isArray(value.pathSegments) || !value.pathSegments.every(isString)) fail("artifact command.pathSegments must be a string array");
+	if (value.parameters !== void 0 && !isRecord(value.parameters)) fail("artifact command.parameters must be an object");
+	const requirements = validateRequirements(value.requirements);
+	return {
+		methodName,
+		commandName,
+		kind: value.kind,
+		scope: value.scope,
+		httpMethod,
+		pathSegments: [...value.pathSegments],
+		...typeof value.description === "string" ? { description: value.description } : {},
+		...value.parameters ? { parameters: canonicalJsonValue(value.parameters) } : {},
+		...requirements ? { requirements } : {}
+	};
+}
+function validateRequirements(value) {
+	if (value === void 0) return void 0;
+	if (!isRecord(value)) fail("artifact command.requirements must be an object");
+	const parseField = (candidate, name) => {
+		if (candidate === void 0) return void 0;
+		if (!isRecord(candidate) || typeof candidate.field !== "string" || candidate.field === "" || typeof candidate.required !== "boolean") fail(`artifact command.requirements.${name} is invalid`);
+		return {
+			field: candidate.field,
+			required: candidate.required
+		};
+	};
+	return normalizeRequirements({
+		idempotencyKey: parseField(value.idempotencyKey, "idempotencyKey"),
+		expectedVersion: parseField(value.expectedVersion, "expectedVersion")
+	});
+}
+function normalizeRequirements(requirements) {
+	const { idempotencyKey, expectedVersion } = requirements;
+	if (!idempotencyKey && !expectedVersion) return void 0;
+	return {
+		...idempotencyKey ? { idempotencyKey } : {},
+		...expectedVersion ? { expectedVersion } : {}
+	};
+}
+function validateResultContract(value) {
+	if (!isRecord(value)) fail("artifact resultContract must be an object");
+	if (value.schema !== "https://smrt.dev/schemas/app-result/v1" || value.version !== 1 || value.mcpMetadataKey !== "io.happyvertical/smrt" || !Array.isArray(value.metadataFields) || canonicalJson(value.metadataFields) !== canonicalJson(SMRT_APP_RESULT_CONTRACT.metadataFields)) fail("artifact resultContract does not match SMRT app-result v1");
+}
+function digestUnsignedArtifact(artifact) {
+	return `sha256:${createHash("sha256").update(canonicalizeDiscoveryArtifact(artifact), "utf8").digest("hex")}`;
+}
+function canonicalJson(value) {
+	return JSON.stringify(canonicalJsonValue(value));
+}
+function canonicalJsonValue(value) {
+	if (value === null || typeof value === "boolean" || typeof value === "string") return value;
+	if (typeof value === "number") {
+		if (!Number.isFinite(value)) fail("artifact cannot contain non-finite numbers");
+		return value;
+	}
+	if (Array.isArray(value)) return value.map(canonicalJsonValue);
+	if (isRecord(value)) {
+		const normalized = {};
+		for (const key of Object.keys(value).sort(compareText)) normalized[key] = canonicalJsonValue(value[key]);
+		return normalized;
+	}
+	fail(`artifact contains unsupported value type: ${typeof value}`);
+}
+function safeDigestEqual(left, right) {
+	const leftBytes = Buffer.from(left, "utf8");
+	const rightBytes = Buffer.from(right, "utf8");
+	return leftBytes.length === rightBytes.length && timingSafeEqual(leftBytes, rightBytes);
+}
+function assertSorted(values, name) {
+	for (let index = 1; index < values.length; index += 1) {
+		const previous = values[index - 1];
+		const current = values[index];
+		if (previous !== void 0 && current !== void 0 && compareText(previous, current) > 0) fail(`${name} must be deterministically sorted`);
+	}
+}
+function compareText(left, right) {
+	return left < right ? -1 : left > right ? 1 : 0;
+}
+function isRecord(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isString(value) {
+	return typeof value === "string";
+}
+function requireArtifactString(value, name) {
+	if (typeof value !== "string" || value === "") fail(`artifact ${name} must be a non-empty string`);
+	return value;
+}
+function fail(message) {
+	throw new DiscoveryArtifactValidationError(message);
+}
+//#endregion
+export { DiscoveryArtifactValidationError, SMRT_APP_RESULT_CONTRACT, SMRT_APP_RESULT_SCHEMA, SMRT_APP_RESULT_VERSION, SMRT_DISCOVERY_CONFORMANCE_ARTIFACT_SCHEMA, SMRT_DISCOVERY_CONFORMANCE_SCHEMA, SMRT_DISCOVERY_CONFORMANCE_VERSION, SMRT_MCP_RESULT_METADATA_KEY, canonicalizeDiscoveryArtifact, createDiscoveryConformanceArtifact, deriveCommandRequirements, validateDiscoveryConformanceArtifact };
+
+//# sourceMappingURL=app-contract.js.map

package/dist/app-contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-contract.js","names":[],"sources":["../src/app-contract.ts"],"sourcesContent":["/**\n * Versioned discovery and cross-transport contracts for SMRT application\n * surfaces.\n *\n * The artifact is intentionally data-only: downstream apps may persist its\n * canonical JSON and pin the SHA-256 digest without parsing CLI help text or\n * depending on a particular transport implementation.\n *\n * @packageDocumentation\n */\n\nimport { createHash, timingSafeEqual } from 'node:crypto';\nimport type {\n  CliResource,\n  CommandDefinition,\n  ResourceListResponseBody,\n} from './sveltekit.js';\n\n/** Immutable selector for this discovery artifact family. */\nexport const SMRT_DISCOVERY_CONFORMANCE_SCHEMA =\n  'https://smrt.dev/schemas/discovery-conformance/v1';\n/** Version of the discovery artifact payload. */\nexport const SMRT_DISCOVERY_CONFORMANCE_VERSION = 1 as const;\n/** Versioned selector for structured application results and errors. */\nexport const SMRT_APP_RESULT_SCHEMA = 'https://smrt.dev/schemas/app-result/v1';\n/** Version of the structured application result contract. */\nexport const SMRT_APP_RESULT_VERSION = 1 as const;\n/** MCP result `_meta` member carrying the app-result metadata. */\nexport const SMRT_MCP_RESULT_METADATA_KEY = 'io.happyvertical/smrt';\n\n/** JSON-safe value used by structured details and parameter schemas. */\nexport type JsonValue =\n  | null\n  | boolean\n  | number\n  | string\n  | JsonValue[]\n  | { [key: string]: JsonValue };\n\n/** A declared input field which controls retry or optimistic-concurrency use. */\nexport interface DeclaredActionField {\n  /** JSON Schema property name supplied by the action. */\n  field: string;\n  /** Whether the action marks the field required. */\n  required: boolean;\n}\n\n/** Retry and concurrency declarations projected from a command schema. */\nexport interface CommandRequirements {\n  idempotencyKey?: DeclaredActionField;\n  expectedVersion?: DeclaredActionField;\n}\n\n/** Machine-readable metadata shared by HTTP CLI and MCP bridge results. */\nexport interface AppResultMetadata {\n  code: string;\n  message?: string;\n  details?: JsonValue;\n  retryable?: boolean;\n  correlationId?: string;\n  idempotencyKey?: DeclaredActionField;\n  expectedVersion?: DeclaredActionField;\n}\n\nexport interface AppResultContract {\n  schema: typeof SMRT_APP_RESULT_SCHEMA;\n  version: typeof SMRT_APP_RESULT_VERSION;\n  mcpMetadataKey: typeof SMRT_MCP_RESULT_METADATA_KEY;\n  metadataFields: readonly [\n    'code',\n    'message',\n    'details',\n    'retryable',\n    'correlationId',\n    'idempotencyKey',\n    'expectedVersion',\n  ];\n}\n\n/** Stable description of the result metadata contract contained in an artifact. */\nexport const SMRT_APP_RESULT_CONTRACT: AppResultContract = {\n  schema: SMRT_APP_RESULT_SCHEMA,\n  version: SMRT_APP_RESULT_VERSION,\n  mcpMetadataKey: SMRT_MCP_RESULT_METADATA_KEY,\n  metadataFields: [\n    'code',\n    'message',\n    'details',\n    'retryable',\n    'correlationId',\n    'idempotencyKey',\n    'expectedVersion',\n  ],\n};\n\n/** The pre-artifact wire payload, kept for the existing `/_resources` fields. */\nexport type DiscoveryPayload = Omit<ResourceListResponseBody, 'artifact'>;\n\nexport interface DiscoveryArtifactIntegrity {\n  algorithm: 'sha256';\n  /** `sha256:<lowercase-hex>` over canonical unsigned artifact JSON. */\n  digest: string;\n}\n\n/** Versioned payload a consumer can validate and pin. */\nexport interface DiscoveryConformanceArtifact {\n  schema: typeof SMRT_DISCOVERY_CONFORMANCE_SCHEMA;\n  version: typeof SMRT_DISCOVERY_CONFORMANCE_VERSION;\n  discovery: DiscoveryPayload;\n  resultContract: AppResultContract;\n  integrity: DiscoveryArtifactIntegrity;\n}\n\n/** A JSON Schema export for consumers that validate artifacts outside Node. */\nexport const SMRT_DISCOVERY_CONFORMANCE_ARTIFACT_SCHEMA = {\n  $id: SMRT_DISCOVERY_CONFORMANCE_SCHEMA,\n  type: 'object',\n  required: ['schema', 'version', 'discovery', 'resultContract', 'integrity'],\n  properties: {\n    schema: { const: SMRT_DISCOVERY_CONFORMANCE_SCHEMA },\n    version: { const: SMRT_DISCOVERY_CONFORMANCE_VERSION },\n    discovery: {\n      type: 'object',\n      required: ['user', 'warnings', 'resources'],\n      properties: {\n        user: { type: 'object', required: ['authenticated'] },\n        warnings: { type: 'array', items: { type: 'string' } },\n        resources: { type: 'array' },\n      },\n    },\n    resultContract: {\n      type: 'object',\n      required: ['schema', 'version', 'mcpMetadataKey', 'metadataFields'],\n    },\n    integrity: {\n      type: 'object',\n      required: ['algorithm', 'digest'],\n      properties: {\n        algorithm: { const: 'sha256' },\n        digest: { type: 'string', pattern: '^sha256:[a-f0-9]{64}$' },\n      },\n    },\n  },\n} as const;\n\n/** Thrown when an artifact is malformed, non-canonical, or fails its digest. */\nexport class DiscoveryArtifactValidationError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = 'DiscoveryArtifactValidationError';\n  }\n}\n\n/**\n * Project conventionally named request fields from a JSON Schema into the\n * discovery contract. This is declarative only: the action remains the owner\n * of enforcement and may use a body field or adapt it to an HTTP header.\n */\nexport function deriveCommandRequirements(\n  parameters: Record<string, unknown> | undefined,\n): CommandRequirements | undefined {\n  const properties = isRecord(parameters?.properties)\n    ? parameters.properties\n    : undefined;\n  if (!properties) return undefined;\n\n  const required = new Set(\n    Array.isArray(parameters?.required)\n      ? parameters.required.filter(\n          (value): value is string => typeof value === 'string',\n        )\n      : [],\n  );\n  const findField = (\n    names: readonly string[],\n  ): DeclaredActionField | undefined => {\n    const field = names.find((name) => Object.hasOwn(properties, name));\n    return field ? { field, required: required.has(field) } : undefined;\n  };\n\n  const idempotencyKey = findField(['idempotencyKey', 'idempotency_key']);\n  const expectedVersion = findField(['expectedVersion', 'expected_version']);\n  if (!idempotencyKey && !expectedVersion) return undefined;\n  return {\n    ...(idempotencyKey ? { idempotencyKey } : {}),\n    ...(expectedVersion ? { expectedVersion } : {}),\n  };\n}\n\n/** Produce a deterministically ordered artifact with a SHA-256 integrity pin. */\nexport function createDiscoveryConformanceArtifact(\n  discovery: DiscoveryPayload,\n): DiscoveryConformanceArtifact {\n  const normalizedDiscovery = normalizeDiscovery(discovery);\n  const unsigned = {\n    schema: SMRT_DISCOVERY_CONFORMANCE_SCHEMA,\n    version: SMRT_DISCOVERY_CONFORMANCE_VERSION,\n    discovery: normalizedDiscovery,\n    resultContract: SMRT_APP_RESULT_CONTRACT,\n  } as const;\n\n  return {\n    ...unsigned,\n    integrity: {\n      algorithm: 'sha256',\n      digest: digestUnsignedArtifact(unsigned),\n    },\n  };\n}\n\n/**\n * Validate structure, canonical ordering, and the integrity digest. Returns\n * the typed artifact so consumers can use one operation for validation and\n * consumption.\n */\nexport function validateDiscoveryConformanceArtifact(\n  value: unknown,\n): DiscoveryConformanceArtifact {\n  if (!isRecord(value)) fail('artifact must be an object');\n  if (value.schema !== SMRT_DISCOVERY_CONFORMANCE_SCHEMA) {\n    fail(`unsupported artifact schema: ${String(value.schema)}`);\n  }\n  if (value.version !== SMRT_DISCOVERY_CONFORMANCE_VERSION) {\n    fail(`unsupported artifact version: ${String(value.version)}`);\n  }\n  if (!isRecord(value.integrity) || value.integrity.algorithm !== 'sha256') {\n    fail('artifact integrity.algorithm must be sha256');\n  }\n  if (\n    typeof value.integrity.digest !== 'string' ||\n    !/^sha256:[a-f0-9]{64}$/u.test(value.integrity.digest)\n  ) {\n    fail('artifact integrity.digest must be lowercase sha256 hex');\n  }\n  validateResultContract(value.resultContract);\n  const discovery = validateDiscovery(value.discovery);\n  const artifact: DiscoveryConformanceArtifact = {\n    schema: SMRT_DISCOVERY_CONFORMANCE_SCHEMA,\n    version: SMRT_DISCOVERY_CONFORMANCE_VERSION,\n    discovery,\n    resultContract: SMRT_APP_RESULT_CONTRACT,\n    integrity: {\n      algorithm: 'sha256',\n      digest: value.integrity.digest,\n    },\n  };\n  const expected = digestUnsignedArtifact({\n    schema: artifact.schema,\n    version: artifact.version,\n    discovery: artifact.discovery,\n    resultContract: artifact.resultContract,\n  });\n  if (!safeDigestEqual(expected, artifact.integrity.digest)) {\n    fail('artifact integrity digest does not match canonical payload');\n  }\n  return artifact;\n}\n\n/** Canonical JSON bytes whose digest is carried by the artifact. */\nexport function canonicalizeDiscoveryArtifact(\n  artifact: Omit<DiscoveryConformanceArtifact, 'integrity'>,\n): string {\n  return canonicalJson(artifact);\n}\n\nfunction normalizeDiscovery(discovery: DiscoveryPayload): DiscoveryPayload {\n  const resources = [...discovery.resources]\n    .map(normalizeResource)\n    .sort((left, right) => compareText(left.slug, right.slug));\n  return {\n    user: discovery.user.id\n      ? { authenticated: discovery.user.authenticated, id: discovery.user.id }\n      : { authenticated: discovery.user.authenticated },\n    warnings: [...discovery.warnings].sort(compareText),\n    resources,\n  };\n}\n\nfunction normalizeResource(resource: CliResource): CliResource {\n  const commands = [...resource.commands]\n    .map(normalizeCommand)\n    .sort((left, right) => compareText(left.commandName, right.commandName));\n  return {\n    slug: resource.slug,\n    className: resource.className,\n    ...(resource.qualifiedName\n      ? { qualifiedName: resource.qualifiedName }\n      : {}),\n    ...(resource.packageName ? { packageName: resource.packageName } : {}),\n    label: resource.label,\n    apiPath: resource.apiPath,\n    commands,\n  };\n}\n\nfunction normalizeCommand(command: CommandDefinition): CommandDefinition {\n  const requirements = command.requirements\n    ? normalizeRequirements(command.requirements)\n    : undefined;\n  return {\n    methodName: command.methodName,\n    commandName: command.commandName,\n    kind: command.kind,\n    scope: command.scope,\n    httpMethod: command.httpMethod,\n    pathSegments: [...command.pathSegments],\n    ...(command.description ? { description: command.description } : {}),\n    ...(command.parameters\n      ? {\n          parameters: canonicalJsonValue(command.parameters) as Record<\n            string,\n            unknown\n          >,\n        }\n      : {}),\n    ...(requirements ? { requirements } : {}),\n  };\n}\n\nfunction validateDiscovery(value: unknown): DiscoveryPayload {\n  if (!isRecord(value)) fail('artifact discovery must be an object');\n  if (!isRecord(value.user) || typeof value.user.authenticated !== 'boolean') {\n    fail('artifact discovery.user.authenticated must be boolean');\n  }\n  if (value.user.id !== undefined && typeof value.user.id !== 'string') {\n    fail('artifact discovery.user.id must be a string');\n  }\n  if (!Array.isArray(value.warnings) || !value.warnings.every(isString)) {\n    fail('artifact discovery.warnings must be a string array');\n  }\n  assertSorted(value.warnings, 'artifact discovery.warnings');\n  if (!Array.isArray(value.resources)) {\n    fail('artifact discovery.resources must be an array');\n  }\n  const resources = value.resources.map(validateResource);\n  assertSorted(\n    resources.map((resource) => resource.slug),\n    'artifact discovery.resources',\n  );\n  return {\n    user: value.user.id\n      ? { authenticated: value.user.authenticated, id: value.user.id }\n      : { authenticated: value.user.authenticated },\n    warnings: [...value.warnings],\n    resources,\n  };\n}\n\nfunction validateResource(value: unknown): CliResource {\n  if (!isRecord(value)) fail('artifact resource must be an object');\n  const slug = requireArtifactString(value.slug, 'resource.slug');\n  const className = requireArtifactString(\n    value.className,\n    'resource.className',\n  );\n  const label = requireArtifactString(value.label, 'resource.label');\n  const apiPath = requireArtifactString(value.apiPath, 'resource.apiPath');\n  if (!Array.isArray(value.commands))\n    fail('artifact resource.commands must be an array');\n  const commands = value.commands.map(validateCommand);\n  assertSorted(\n    commands.map((command) => command.commandName),\n    'artifact resource.commands',\n  );\n  return {\n    slug,\n    className,\n    ...(typeof value.qualifiedName === 'string'\n      ? { qualifiedName: value.qualifiedName }\n      : {}),\n    ...(typeof value.packageName === 'string'\n      ? { packageName: value.packageName }\n      : {}),\n    label,\n    apiPath,\n    commands,\n  };\n}\n\nfunction validateCommand(value: unknown): CommandDefinition {\n  if (!isRecord(value)) fail('artifact command must be an object');\n  const methodName = requireArtifactString(\n    value.methodName,\n    'command.methodName',\n  );\n  const commandName = requireArtifactString(\n    value.commandName,\n    'command.commandName',\n  );\n  const httpMethod = requireArtifactString(\n    value.httpMethod,\n    'command.httpMethod',\n  );\n  if (value.kind !== 'crud' && value.kind !== 'custom') {\n    fail('artifact command.kind must be crud or custom');\n  }\n  if (value.scope !== 'item' && value.scope !== 'collection') {\n    fail('artifact command.scope must be item or collection');\n  }\n  if (\n    !Array.isArray(value.pathSegments) ||\n    !value.pathSegments.every(isString)\n  ) {\n    fail('artifact command.pathSegments must be a string array');\n  }\n  if (value.parameters !== undefined && !isRecord(value.parameters)) {\n    fail('artifact command.parameters must be an object');\n  }\n  const requirements = validateRequirements(value.requirements);\n  return {\n    methodName,\n    commandName,\n    kind: value.kind,\n    scope: value.scope,\n    httpMethod: httpMethod as CommandDefinition['httpMethod'],\n    pathSegments: [...value.pathSegments],\n    ...(typeof value.description === 'string'\n      ? { description: value.description }\n      : {}),\n    ...(value.parameters\n      ? {\n          parameters: canonicalJsonValue(value.parameters) as Record<\n            string,\n            unknown\n          >,\n        }\n      : {}),\n    ...(requirements ? { requirements } : {}),\n  };\n}\n\nfunction validateRequirements(value: unknown): CommandRequirements | undefined {\n  if (value === undefined) return undefined;\n  if (!isRecord(value)) fail('artifact command.requirements must be an object');\n  const parseField = (\n    candidate: unknown,\n    name: string,\n  ): DeclaredActionField | undefined => {\n    if (candidate === undefined) return undefined;\n    if (\n      !isRecord(candidate) ||\n      typeof candidate.field !== 'string' ||\n      candidate.field === '' ||\n      typeof candidate.required !== 'boolean'\n    ) {\n      fail(`artifact command.requirements.${name} is invalid`);\n    }\n    return { field: candidate.field, required: candidate.required };\n  };\n  return normalizeRequirements({\n    idempotencyKey: parseField(value.idempotencyKey, 'idempotencyKey'),\n    expectedVersion: parseField(value.expectedVersion, 'expectedVersion'),\n  });\n}\n\nfunction normalizeRequirements(\n  requirements: CommandRequirements,\n): CommandRequirements | undefined {\n  const { idempotencyKey, expectedVersion } = requirements;\n  if (!idempotencyKey && !expectedVersion) return undefined;\n  return {\n    ...(idempotencyKey ? { idempotencyKey } : {}),\n    ...(expectedVersion ? { expectedVersion } : {}),\n  };\n}\n\nfunction validateResultContract(value: unknown): void {\n  if (!isRecord(value)) fail('artifact resultContract must be an object');\n  if (\n    value.schema !== SMRT_APP_RESULT_SCHEMA ||\n    value.version !== SMRT_APP_RESULT_VERSION ||\n    value.mcpMetadataKey !== SMRT_MCP_RESULT_METADATA_KEY ||\n    !Array.isArray(value.metadataFields) ||\n    canonicalJson(value.metadataFields) !==\n      canonicalJson(SMRT_APP_RESULT_CONTRACT.metadataFields)\n  ) {\n    fail('artifact resultContract does not match SMRT app-result v1');\n  }\n}\n\nfunction digestUnsignedArtifact(\n  artifact: Omit<DiscoveryConformanceArtifact, 'integrity'>,\n): string {\n  return `sha256:${createHash('sha256')\n    .update(canonicalizeDiscoveryArtifact(artifact), 'utf8')\n    .digest('hex')}`;\n}\n\nfunction canonicalJson(value: unknown): string {\n  return JSON.stringify(canonicalJsonValue(value));\n}\n\nfunction canonicalJsonValue(value: unknown): JsonValue {\n  if (\n    value === null ||\n    typeof value === 'boolean' ||\n    typeof value === 'string'\n  ) {\n    return value;\n  }\n  if (typeof value === 'number') {\n    if (!Number.isFinite(value))\n      fail('artifact cannot contain non-finite numbers');\n    return value;\n  }\n  if (Array.isArray(value)) return value.map(canonicalJsonValue);\n  if (isRecord(value)) {\n    const normalized: Record<string, JsonValue> = {};\n    for (const key of Object.keys(value).sort(compareText)) {\n      normalized[key] = canonicalJsonValue(value[key]);\n    }\n    return normalized;\n  }\n  fail(`artifact contains unsupported value type: ${typeof value}`);\n}\n\nfunction safeDigestEqual(left: string, right: string): boolean {\n  const leftBytes = Buffer.from(left, 'utf8');\n  const rightBytes = Buffer.from(right, 'utf8');\n  return (\n    leftBytes.length === rightBytes.length &&\n    timingSafeEqual(leftBytes, rightBytes)\n  );\n}\n\nfunction assertSorted(values: readonly string[], name: string): void {\n  for (let index = 1; index < values.length; index += 1) {\n    const previous = values[index - 1];\n    const current = values[index];\n    if (\n      previous !== undefined &&\n      current !== undefined &&\n      compareText(previous, current) > 0\n    ) {\n      fail(`${name} must be deterministically sorted`);\n    }\n  }\n}\n\nfunction compareText(left: string, right: string): number {\n  return left < right ? -1 : left > right ? 1 : 0;\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\nfunction isString(value: unknown): value is string {\n  return typeof value === 'string';\n}\n\nfunction requireArtifactString(value: unknown, name: string): string {\n  if (typeof value !== 'string' || value === '') {\n    fail(`artifact ${name} must be a non-empty string`);\n  }\n  return value;\n}\n\nfunction fail(message: string): never {\n  throw new DiscoveryArtifactValidationError(message);\n}\n"],"mappings":";;AAmBO,IAAM,oCACX;AAEK,IAAM,qCAAqC;AAE3C,IAAM,yBAAyB;AAE/B,IAAM,0BAA0B;AAEhC,IAAM,+BAA+B;AAoDrC,IAAM,2BAA8C;CACzD,QAAQ;CACR,SAAA;CACA,gBAAgB;CAChB,gBAAgB;EACd;EACA;EACA;EACA;EACA;EACA;EACA;CACF;AACF;AAqBO,IAAM,6CAA6C;CACxD,KAAK;CACL,MAAM;CACN,UAAU;EAAC;EAAU;EAAW;EAAa;EAAkB;CAAW;CAC1E,YAAY;EACV,QAAQ,EAAE,OAAO,kCAAkC;EACnD,SAAS,EAAE,OAAA,EAA0C;EACrD,WAAW;GACT,MAAM;GACN,UAAU;IAAC;IAAQ;IAAY;GAAW;GAC1C,YAAY;IACV,MAAM;KAAE,MAAM;KAAU,UAAU,CAAC,eAAe;IAAE;IACpD,UAAU;KAAE,MAAM;KAAS,OAAO,EAAE,MAAM,SAAS;IAAE;IACrD,WAAW,EAAE,MAAM,QAAQ;GAC7B;EACF;EACA,gBAAgB;GACd,MAAM;GACN,UAAU;IAAC;IAAU;IAAW;IAAkB;GAAgB;EACpE;EACA,WAAW;GACT,MAAM;GACN,UAAU,CAAC,aAAa,QAAQ;GAChC,YAAY;IACV,WAAW,EAAE,OAAO,SAAS;IAC7B,QAAQ;KAAE,MAAM;KAAU,SAAS;IAAwB;GAC7D;EACF;CACF;AACF;AAGO,IAAM,mCAAN,cAA+C,MAAM;CAC1D,YAAY,SAAiB;EAC3B,MAAM,OAAO;EACb,KAAK,OAAO;CACd;AACF;AAOO,SAAS,0BACd,YACiC;CACjC,MAAM,aAAa,SAAS,YAAY,UAAU,IAC9C,WAAW,aACX,KAAA;CACJ,IAAI,CAAC,YAAY,OAAO,KAAA;CAExB,MAAM,WAAW,IAAI,IACnB,MAAM,QAAQ,YAAY,QAAQ,IAC9B,WAAW,SAAS,QACjB,UAA2B,OAAO,UAAU,QAC/C,IACA,CAAC,CACP;CACA,MAAM,aACJ,UACoC;EACpC,MAAM,QAAQ,MAAM,MAAM,SAAS,OAAO,OAAO,YAAY,IAAI,CAAC;EAClE,OAAO,QAAQ;GAAE;GAAO,UAAU,SAAS,IAAI,KAAK;EAAE,IAAI,KAAA;CAC5D;CAEA,MAAM,iBAAiB,UAAU,CAAC,kBAAkB,iBAAiB,CAAC;CACtE,MAAM,kBAAkB,UAAU,CAAC,mBAAmB,kBAAkB,CAAC;CACzE,IAAI,CAAC,kBAAkB,CAAC,iBAAiB,OAAO,KAAA;CAChD,OAAO;EACL,GAAI,iBAAiB,EAAE,eAAe,IAAI,CAAC;EAC3C,GAAI,kBAAkB,EAAE,gBAAgB,IAAI,CAAC;CAC/C;AACF;AAGO,SAAS,mCACd,WAC8B;CAE9B,MAAM,WAAW;EACf,QAAQ;EACR,SAAA;EACA,WAJ0B,mBAAmB,SAIlC;EACX,gBAAgB;CAClB;CAEA,OAAO;EACL,GAAG;EACH,WAAW;GACT,WAAW;GACX,QAAQ,uBAAuB,QAAQ;EACzC;CACF;AACF;AAOO,SAAS,qCACd,OAC8B;CAC9B,IAAI,CAAC,SAAS,KAAK,GAAG,KAAK,4BAA4B;CACvD,IAAI,MAAM,WAAA,qDACR,KAAK,gCAAgC,OAAO,MAAM,MAAM,GAAG;CAE7D,IAAI,MAAM,YAAA,GACR,KAAK,iCAAiC,OAAO,MAAM,OAAO,GAAG;CAE/D,IAAI,CAAC,SAAS,MAAM,SAAS,KAAK,MAAM,UAAU,cAAc,UAC9D,KAAK,6CAA6C;CAEpD,IACE,OAAO,MAAM,UAAU,WAAW,YAClC,CAAC,yBAAyB,KAAK,MAAM,UAAU,MAAM,GAErD,KAAK,wDAAwD;CAE/D,uBAAuB,MAAM,cAAc;CAE3C,MAAM,WAAyC;EAC7C,QAAQ;EACR,SAAA;EACA,WAJgB,kBAAkB,MAAM,SAIxC;EACA,gBAAgB;EAChB,WAAW;GACT,WAAW;GACX,QAAQ,MAAM,UAAU;EAC1B;CACF;CAOA,IAAI,CAAC,gBANY,uBAAuB;EACtC,QAAQ,SAAS;EACjB,SAAS,SAAS;EAClB,WAAW,SAAS;EACpB,gBAAgB,SAAS;CAC3B,CACqB,GAAU,SAAS,UAAU,MAAM,GACtD,KAAK,4DAA4D;CAEnE,OAAO;AACT;AAGO,SAAS,8BACd,UACQ;CACR,OAAO,cAAc,QAAQ;AAC/B;AAEA,SAAS,mBAAmB,WAA+C;CACzE,MAAM,YAAY,CAAC,GAAG,UAAU,SAAS,CAAA,CACtC,IAAI,iBAAiB,CAAA,CACrB,MAAM,MAAM,UAAU,YAAY,KAAK,MAAM,MAAM,IAAI,CAAC;CAC3D,OAAO;EACL,MAAM,UAAU,KAAK,KACjB;GAAE,eAAe,UAAU,KAAK;GAAe,IAAI,UAAU,KAAK;EAAG,IACrE,EAAE,eAAe,UAAU,KAAK,cAAc;EAClD,UAAU,CAAC,GAAG,UAAU,QAAQ,CAAA,CAAE,KAAK,WAAW;EAClD;CACF;AACF;AAEA,SAAS,kBAAkB,UAAoC;CAC7D,MAAM,WAAW,CAAC,GAAG,SAAS,QAAQ,CAAA,CACnC,IAAI,gBAAgB,CAAA,CACpB,MAAM,MAAM,UAAU,YAAY,KAAK,aAAa,MAAM,WAAW,CAAC;CACzE,OAAO;EACL,MAAM,SAAS;EACf,WAAW,SAAS;EACpB,GAAI,SAAS,gBACT,EAAE,eAAe,SAAS,cAAc,IACxC,CAAC;EACL,GAAI,SAAS,cAAc,EAAE,aAAa,SAAS,YAAY,IAAI,CAAC;EACpE,OAAO,SAAS;EAChB,SAAS,SAAS;EAClB;CACF;AACF;AAEA,SAAS,iBAAiB,SAA+C;CACvE,MAAM,eAAe,QAAQ,eACzB,sBAAsB,QAAQ,YAAY,IAC1C,KAAA;CACJ,OAAO;EACL,YAAY,QAAQ;EACpB,aAAa,QAAQ;EACrB,MAAM,QAAQ;EACd,OAAO,QAAQ;EACf,YAAY,QAAQ;EACpB,cAAc,CAAC,GAAG,QAAQ,YAAY;EACtC,GAAI,QAAQ,cAAc,EAAE,aAAa,QAAQ,YAAY,IAAI,CAAC;EAClE,GAAI,QAAQ,aACR,EACE,YAAY,mBAAmB,QAAQ,UAAU,EAInD,IACA,CAAC;EACL,GAAI,eAAe,EAAE,aAAa,IAAI,CAAC;CACzC;AACF;AAEA,SAAS,kBAAkB,OAAkC;CAC3D,IAAI,CAAC,SAAS,KAAK,GAAG,KAAK,sCAAsC;CACjE,IAAI,CAAC,SAAS,MAAM,IAAI,KAAK,OAAO,MAAM,KAAK,kBAAkB,WAC/D,KAAK,uDAAuD;CAE9D,IAAI,MAAM,KAAK,OAAO,KAAA,KAAa,OAAO,MAAM,KAAK,OAAO,UAC1D,KAAK,6CAA6C;CAEpD,IAAI,CAAC,MAAM,QAAQ,MAAM,QAAQ,KAAK,CAAC,MAAM,SAAS,MAAM,QAAQ,GAClE,KAAK,oDAAoD;CAE3D,aAAa,MAAM,UAAU,6BAA6B;CAC1D,IAAI,CAAC,MAAM,QAAQ,MAAM,SAAS,GAChC,KAAK,+CAA+C;CAEtD,MAAM,YAAY,MAAM,UAAU,IAAI,gBAAgB;CACtD,aACE,UAAU,KAAK,aAAa,SAAS,IAAI,GACzC,8BACF;CACA,OAAO;EACL,MAAM,MAAM,KAAK,KACb;GAAE,eAAe,MAAM,KAAK;GAAe,IAAI,MAAM,KAAK;EAAG,IAC7D,EAAE,eAAe,MAAM,KAAK,cAAc;EAC9C,UAAU,CAAC,GAAG,MAAM,QAAQ;EAC5B;CACF;AACF;AAEA,SAAS,iBAAiB,OAA6B;CACrD,IAAI,CAAC,SAAS,KAAK,GAAG,KAAK,qCAAqC;CAChE,MAAM,OAAO,sBAAsB,MAAM,MAAM,eAAe;CAC9D,MAAM,YAAY,sBAChB,MAAM,WACN,oBACF;CACA,MAAM,QAAQ,sBAAsB,MAAM,OAAO,gBAAgB;CACjE,MAAM,UAAU,sBAAsB,MAAM,SAAS,kBAAkB;CACvE,IAAI,CAAC,MAAM,QAAQ,MAAM,QAAQ,GAC/B,KAAK,6CAA6C;CACpD,MAAM,WAAW,MAAM,SAAS,IAAI,eAAe;CACnD,aACE,SAAS,KAAK,YAAY,QAAQ,WAAW,GAC7C,4BACF;CACA,OAAO;EACL;EACA;EACA,GAAI,OAAO,MAAM,kBAAkB,WAC/B,EAAE,eAAe,MAAM,cAAc,IACrC,CAAC;EACL,GAAI,OAAO,MAAM,gBAAgB,WAC7B,EAAE,aAAa,MAAM,YAAY,IACjC,CAAC;EACL;EACA;EACA;CACF;AACF;AAEA,SAAS,gBAAgB,OAAmC;CAC1D,IAAI,CAAC,SAAS,KAAK,GAAG,KAAK,oCAAoC;CAC/D,MAAM,aAAa,sBACjB,MAAM,YACN,oBACF;CACA,MAAM,cAAc,sBAClB,MAAM,aACN,qBACF;CACA,MAAM,aAAa,sBACjB,MAAM,YACN,oBACF;CACA,IAAI,MAAM,SAAS,UAAU,MAAM,SAAS,UAC1C,KAAK,8CAA8C;CAErD,IAAI,MAAM,UAAU,UAAU,MAAM,UAAU,cAC5C,KAAK,mDAAmD;CAE1D,IACE,CAAC,MAAM,QAAQ,MAAM,YAAY,KACjC,CAAC,MAAM,aAAa,MAAM,QAAQ,GAElC,KAAK,sDAAsD;CAE7D,IAAI,MAAM,eAAe,KAAA,KAAa,CAAC,SAAS,MAAM,UAAU,GAC9D,KAAK,+CAA+C;CAEtD,MAAM,eAAe,qBAAqB,MAAM,YAAY;CAC5D,OAAO;EACL;EACA;EACA,MAAM,MAAM;EACZ,OAAO,MAAM;EACb;EACA,cAAc,CAAC,GAAG,MAAM,YAAY;EACpC,GAAI,OAAO,MAAM,gBAAgB,WAC7B,EAAE,aAAa,MAAM,YAAY,IACjC,CAAC;EACL,GAAI,MAAM,aACN,EACE,YAAY,mBAAmB,MAAM,UAAU,EAIjD,IACA,CAAC;EACL,GAAI,eAAe,EAAE,aAAa,IAAI,CAAC;CACzC;AACF;AAEA,SAAS,qBAAqB,OAAiD;CAC7E,IAAI,UAAU,KAAA,GAAW,OAAO,KAAA;CAChC,IAAI,CAAC,SAAS,KAAK,GAAG,KAAK,iDAAiD;CAC5E,MAAM,cACJ,WACA,SACoC;EACpC,IAAI,cAAc,KAAA,GAAW,OAAO,KAAA;EACpC,IACE,CAAC,SAAS,SAAS,KACnB,OAAO,UAAU,UAAU,YAC3B,UAAU,UAAU,MACpB,OAAO,UAAU,aAAa,WAE9B,KAAK,iCAAiC,KAAI,YAAa;EAEzD,OAAO;GAAE,OAAO,UAAU;GAAO,UAAU,UAAU;EAAS;CAChE;CACA,OAAO,sBAAsB;EAC3B,gBAAgB,WAAW,MAAM,gBAAgB,gBAAgB;EACjE,iBAAiB,WAAW,MAAM,iBAAiB,iBAAiB;CACtE,CAAC;AACH;AAEA,SAAS,sBACP,cACiC;CACjC,MAAM,EAAE,gBAAgB,oBAAoB;CAC5C,IAAI,CAAC,kBAAkB,CAAC,iBAAiB,OAAO,KAAA;CAChD,OAAO;EACL,GAAI,iBAAiB,EAAE,eAAe,IAAI,CAAC;EAC3C,GAAI,kBAAkB,EAAE,gBAAgB,IAAI,CAAC;CAC/C;AACF;AAEA,SAAS,uBAAuB,OAAsB;CACpD,IAAI,CAAC,SAAS,KAAK,GAAG,KAAK,2CAA2C;CACtE,IACE,MAAM,WAAA,4CACN,MAAM,YAAA,KACN,MAAM,mBAAA,2BACN,CAAC,MAAM,QAAQ,MAAM,cAAc,KACnC,cAAc,MAAM,cAAc,MAChC,cAAc,yBAAyB,cAAc,GAEvD,KAAK,2DAA2D;AAEpE;AAEA,SAAS,uBACP,UACQ;CACR,OAAO,UAAU,WAAW,QAAQ,CAAA,CACjC,OAAO,8BAA8B,QAAQ,GAAG,MAAM,CAAA,CACtD,OAAO,KAAK;AACjB;AAEA,SAAS,cAAc,OAAwB;CAC7C,OAAO,KAAK,UAAU,mBAAmB,KAAK,CAAC;AACjD;AAEA,SAAS,mBAAmB,OAA2B;CACrD,IACE,UAAU,QACV,OAAO,UAAU,aACjB,OAAO,UAAU,UAEjB,OAAO;CAET,IAAI,OAAO,UAAU,UAAU;EAC7B,IAAI,CAAC,OAAO,SAAS,KAAK,GACxB,KAAK,4CAA4C;EACnD,OAAO;CACT;CACA,IAAI,MAAM,QAAQ,KAAK,GAAG,OAAO,MAAM,IAAI,kBAAkB;CAC7D,IAAI,SAAS,KAAK,GAAG;EACnB,MAAM,aAAwC,CAAC;EAC/C,KAAA,MAAW,OAAO,OAAO,KAAK,KAAK,CAAA,CAAE,KAAK,WAAW,GACnD,WAAW,OAAO,mBAAmB,MAAM,IAAI;EAEjD,OAAO;CACT;CACA,KAAK,6CAA6C,OAAO,OAAO;AAClE;AAEA,SAAS,gBAAgB,MAAc,OAAwB;CAC7D,MAAM,YAAY,OAAO,KAAK,MAAM,MAAM;CAC1C,MAAM,aAAa,OAAO,KAAK,OAAO,MAAM;CAC5C,OACE,UAAU,WAAW,WAAW,UAChC,gBAAgB,WAAW,UAAU;AAEzC;AAEA,SAAS,aAAa,QAA2B,MAAoB;CACnE,KAAA,IAAS,QAAQ,GAAG,QAAQ,OAAO,QAAQ,SAAS,GAAG;EACrD,MAAM,WAAW,OAAO,QAAQ;EAChC,MAAM,UAAU,OAAO;EACvB,IACE,aAAa,KAAA,KACb,YAAY,KAAA,KACZ,YAAY,UAAU,OAAO,IAAI,GAEjC,KAAK,GAAG,KAAI,kCAAmC;CAEnD;AACF;AAEA,SAAS,YAAY,MAAc,OAAuB;CACxD,OAAO,OAAO,QAAQ,KAAK,OAAO,QAAQ,IAAI;AAChD;AAEA,SAAS,SAAS,OAAkD;CAClE,OAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,KAAK;AAC5E;AAEA,SAAS,SAAS,OAAiC;CACjD,OAAO,OAAO,UAAU;AAC1B;AAEA,SAAS,sBAAsB,OAAgB,MAAsB;CACnE,IAAI,OAAO,UAAU,YAAY,UAAU,IACzC,KAAK,YAAY,KAAI,4BAA6B;CAEpD,OAAO;AACT;AAEA,SAAS,KAAK,SAAwB;CACpC,MAAM,IAAI,iCAAiC,OAAO;AACpD"}