@inf-monkeys-tech/monkeys 1.0.71 → 1.1.0

package/lib/contracts/declarative-control-http.js

@@ -1,34 +1,43 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.DeclarativePublicationResultSchema = exports.DeclarativePublicationItemResultSchema = exports.DeclarativePreviewResultSchema = exports.DeclarativeValidationResultSchema = exports.DeclarativeDraftResultSchema = exports.DeclarativeAuthoringHistorySchema = exports.DeclarativeAuthoringHistoryEntrySchema = exports.DeclarativeAuthoringResourceSummarySchema = exports.DeclarativeDocumentSummarySchema = exports.DeclarativeEnvironmentChoiceSchema = exports.DeclarativePreparedReleaseTargetSchema = exports.DeclarativeRetireIntentSchema = exports.DeclarativeSaveDraftIntentSchema = exports.DeclarativeDocumentSchema = exports.DeclarativeCreateIntentSchema = exports.DeclarativeWorkbenchTargetChoiceSchema = exports.DeclarativeBindingAuthoringChoiceSchema = exports.DeclarativeProductResourceChoiceSchema = exports.DeclarativeRouteSpaceChoiceSchema = exports.DeclarativeCreateTemplateChoiceSchema = exports.ProductDeclarativeAuthoringCatalogSchema = exports.DeclarativeDefaultPolicyRegistrationSchema = exports.DeclarativeProductResourceRegistrationSchema = exports.DeclarativeEnvironmentResourceDocumentSchema = exports.DeclarativeLayoutPolicyResourceDocumentSchema = exports.DeclarativeShellResourceDocumentSchema = exports.DeclarativeRouteSpaceRegistrationSchema = exports.DeclarativeCreateTemplateRegistrationSchema = exports.DeclarativeCapabilityAuthoringChoiceSchema = exports.DeclarativeCapabilityAuthoringRegistrationSchema = exports.DeclarativeCapabilitySchemaDocumentSchema = exports.DeclarativeAuthoringChoiceSchema = exports.DeclarativePublicationPlanIntentSchema = exports.DeclarativeBatchOperationIntentSchema = exports.DeclarativeCommandIntentSchema = exports.DeclarativeReleaseTargetIntentSchema = exports.DeclarativeAudienceSimulationSchema = exports.DeclarativeRuntimeNavigationActionExecuteResultSchema = exports.DeclarativeRuntimeNavigationActionExecuteIntentSchema = exports.DeclarativeRuntimeActionExecuteResultSchema = exports.DeclarativeRuntimeActionExecuteIntentSchema = exports.DeclarativeRuntimeBindingQueryResultSchema = exports.DeclarativeRuntimeBindingQueryIntentSchema = exports.DeclarativeErrorEnvelopeSchema = exports.DeclarativeSuccessEnvelopeSchema = exports.declarativeControlRoutes = exports.DeclarativeAuthoringActionSchema = exports.DeclarativeResourceKindSchema = exports.DECLARATIVE_CONTROL_CONTROLLER_PATH = exports.DECLARATIVE_CONTROL_API_PREFIX = void 0;
-exports.DeclarativeRouteClaimIntentSchema = exports.DeclarativeRuntimeResolveQuerySchema = exports.DeclarativeNavigationImportResultSchema = exports.DeclarativeNavigationImportIntentSchema = exports.DeclarativeWorkbenchRuntimeBootstrapSchema = exports.DeclarativeLegacyWorkbenchSummarySchema = exports.DeclarativeWorkbenchSummarySchema = exports.DeclarativeNavigationRuntimeBootstrapSchema = exports.DeclarativeRuntimeResolvedSchema = exports.DeclarativeAuthoringBootstrapSchema = exports.DeclarativeNavigationPlacementSchema = exports.DeclarativeNavigationSeedMigrationResultSchema = exports.DeclarativeNavigationSeedMigrationIntentSchema = exports.DeclarativeAuthoringCommandResultSchema = exports.DeclarativeRetireResultSchema = void 0;
+exports.DeclarativeEnvironmentChoiceSchema = exports.DeclarativePreparedReleaseTargetSchema = exports.DeclarativeRetireIntentSchema = exports.DeclarativeSaveDraftIntentSchema = exports.DeclarativeDocumentSchema = exports.DeclarativeCreateIntentSchema = exports.DeclarativeWorkbenchTargetChoiceSchema = exports.DeclarativeBindingAuthoringChoiceSchema = exports.DeclarativeProductResourceChoiceSchema = exports.DeclarativeRouteSpaceChoiceSchema = exports.DeclarativeCreateTemplateChoiceSchema = exports.ProductDeclarativeAuthoringCatalogSchema = exports.DeclarativeSchemaDefinitionRegistrationSchema = exports.DeclarativeDomainCommandDefinitionRegistrationSchema = exports.DeclarativeDomainQueryDefinitionRegistrationSchema = exports.DeclarativeDefaultPolicyRegistrationSchema = exports.DeclarativeProductResourceRegistrationSchema = exports.DeclarativeEnvironmentResourceDocumentSchema = exports.DeclarativeLayoutPolicyResourceDocumentSchema = exports.DeclarativeShellResourceDocumentSchema = exports.DeclarativeRouteSpaceRegistrationSchema = exports.DeclarativeCreateTemplateRegistrationSchema = exports.DeclarativeCapabilityAuthoringChoiceSchema = exports.ProductDeclarativeCapabilityRegistrationSchema = exports.DesignCapabilityCatalogArtifactSchema = exports.DesignCapabilityCatalogEntrySchema = exports.DeclarativeCapabilityAuthoringRegistrationSchema = exports.DeclarativeCapabilitySchemaDocumentSchema = exports.DeclarativeAuthoringChoiceSchema = exports.DeclarativePublicationPlanIntentSchema = exports.DeclarativeBatchOperationIntentSchema = exports.DeclarativeCommandIntentSchema = exports.DeclarativeReleaseTargetIntentSchema = exports.DeclarativeAudienceSimulationSchema = exports.DeclarativeRuntimeNavigationActionExecuteResultSchema = exports.DeclarativeRuntimeNavigationActionExecuteIntentSchema = exports.DeclarativeRuntimeActionExecuteResultSchema = exports.DeclarativeNativeDownloadSchema = exports.DeclarativeRuntimeActionExecuteIntentSchema = exports.DeclarativeRuntimeActionRoutePathSchema = exports.DeclarativeRuntimeBindingQueryResultSchema = exports.DeclarativeRuntimeBindingQueryIntentSchema = exports.DeclarativeErrorEnvelopeSchema = exports.DeclarativeSuccessEnvelopeSchema = exports.declarativeControlRoutes = exports.DeclarativeLegacyMigrationKindSchema = exports.DeclarativeAuthoringActionSchema = exports.DeclarativeResourceKindSchema = exports.DECLARATIVE_CONTROL_CONTROLLER_PATH = exports.DECLARATIVE_CONTROL_API_PREFIX = void 0;
+exports.DeclarativeRouteClaimIntentSchema = exports.DeclarativeRuntimeRouteOwnerSchema = exports.DeclarativeRuntimeRouteOwnerQuerySchema = exports.DeclarativeRuntimeResolveQuerySchema = exports.DeclarativeNavigationImportResultSchema = exports.DeclarativeNavigationImportIntentSchema = exports.DeclarativeWorkbenchRuntimeBootstrapSchema = exports.DeclarativeLegacyWorkbenchSummarySchema = exports.DeclarativeWorkbenchSummarySchema = exports.DeclarativeNavigationRuntimeBootstrapSchema = exports.DeclarativeRuntimeResolveResultSchema = exports.DeclarativeRuntimeResolvedSchema = exports.DeclarativeRuntimeRedirectSchema = exports.DeclarativeAuthoringBootstrapSchema = exports.DeclarativeNavigationPlacementSchema = exports.DeclarativeNavigationSeedMigrationResultSchema = exports.DeclarativeNavigationSeedMigrationIntentSchema = exports.DeclarativeAuthoringCommandResultSchema = exports.DeclarativeRetireResultSchema = exports.DECLARATIVE_MIGRATION_ERROR_CODES = exports.DeclarativeLegacyMigrationCreateDraftResultSchema = exports.DeclarativeLegacyMigrationCreateDraftIntentSchema = exports.DeclarativeLegacyMigrationInspectionSchema = exports.DeclarativeMigrationBlockerSchema = exports.DeclarativeMigrationDiffEntrySchema = exports.DeclarativePublicationResultSchema = exports.DeclarativePublicationItemResultSchema = exports.DeclarativePreviewResultSchema = exports.DeclarativeValidationResultSchema = exports.DeclarativeDraftResultSchema = exports.DeclarativeAuthoringHistorySchema = exports.DeclarativeAuthoringHistoryEntrySchema = exports.DeclarativeAuthoringResourcePageSchema = exports.DeclarativeAuthoringResourceSummarySchema = exports.DeclarativeDocumentSummarySchema = exports.DeclarativeAuthoringChoicePageQuerySchema = exports.DeclarativeAuthoringResourcePageQuerySchema = exports.DeclarativeAuthoringChoicePageSchema = exports.DeclarativeAuthoringChoiceKindSchema = exports.DeclarativeAuthoringPageInfoSchema = void 0;
 const zod_1 = require("zod");
+const page_expression_1 = require("./page-expression");
 const declarative_control_1 = require("./declarative-control");
 const common_1 = require("./common");
+const capability_1 = require("./capability");
+const render_1 = require("./render");
+const semantic_1 = require("./semantic");
 exports.DECLARATIVE_CONTROL_API_PREFIX = '/api/declarative-control';
 exports.DECLARATIVE_CONTROL_CONTROLLER_PATH = '/declarative-control';
 exports.DeclarativeResourceKindSchema = zod_1.z.enum(['page', 'navigation', 'workbench']);
 exports.DeclarativeAuthoringActionSchema = zod_1.z.enum(['validate', 'preview', 'publish', 'rollback']);
+exports.DeclarativeLegacyMigrationKindSchema = zod_1.z.enum(['page', 'page-data-assets', 'workbench']);
 const encodePath = (value) => encodeURIComponent(value);
 exports.declarativeControlRoutes = {
+    validate: (kind, resourceId) => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/resources/${kind}/${encodePath(resourceId)}/validate`,
+    preview: (kind, resourceId) => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/resources/${kind}/${encodePath(resourceId)}/preview`,
+    publish: (kind, resourceId) => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/resources/${kind}/${encodePath(resourceId)}/publish`,
+    rollback: (kind, resourceId, releaseSlotId) => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/resources/${kind}/${encodePath(resourceId)}/releases/${encodePath(releaseSlotId)}/rollback`,
+    slotAuthority: (kind, slotId) => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/slot-authorities/${kind}/${encodePath(slotId)}`,
     resources: (kind) => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/resources/${kind}`,
     authoringCreate: (kind) => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/authoring/resources/${kind}`,
     draft: (kind, resourceId) => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/resources/${kind}/${encodePath(resourceId)}/draft`,
     revisions: (kind, resourceId) => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/resources/${kind}/${encodePath(resourceId)}/revisions`,
     authoringHistory: (kind, resourceId) => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/authoring/resources/${kind}/${encodePath(resourceId)}/history`,
     releaseRevisions: (kind, resourceId, releaseSlotId) => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/resources/${kind}/${encodePath(resourceId)}/releases/${encodePath(releaseSlotId)}/revisions`,
-    validate: (kind, resourceId) => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/resources/${kind}/${encodePath(resourceId)}/validate`,
-    preview: (kind, resourceId) => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/resources/${kind}/${encodePath(resourceId)}/preview`,
-    publish: (kind, resourceId) => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/resources/${kind}/${encodePath(resourceId)}/publish`,
-    rollback: (kind, resourceId, releaseSlotId) => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/resources/${kind}/${encodePath(resourceId)}/releases/${encodePath(releaseSlotId)}/rollback`,
     references: (kind, resourceId) => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/resources/${kind}/${encodePath(resourceId)}/references`,
     retire: (kind, resourceId) => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/resources/${kind}/${encodePath(resourceId)}/retire`,
-    slotAuthority: (kind, slotId) => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/slot-authorities/${kind}/${encodePath(slotId)}`,
     authoringBootstrap: () => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/authoring/bootstrap`,
     authoringPrepare: (kind, resourceId, action) => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/authoring/resources/${kind}/${encodePath(resourceId)}/${action}`,
     navigationPlacements: () => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/authoring/navigation/placements`,
     navigationImport: (placement) => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/authoring/navigation/placements/${encodePath(placement)}/import`,
     navigationSeedMigration: (placement) => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/authoring/navigation/placements/${encodePath(placement)}/seed-migration`,
+    migrationInspect: (kind, legacyResourceId) => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/authoring/migrations/${kind}/${encodePath(legacyResourceId)}/inspect`,
+    migrationCreateDraft: (kind, legacyResourceId) => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/authoring/migrations/${kind}/${encodePath(legacyResourceId)}/draft`,
+    migrationCutover: (kind, targetResourceId) => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/authoring/resources/${kind === 'workbench' ? 'workbench' : 'page'}/${encodePath(targetResourceId)}/publish`,
+    migrationRollback: (kind, targetResourceId) => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/authoring/resources/${kind === 'workbench' ? 'workbench' : 'page'}/${encodePath(targetResourceId)}/rollback`,
     publicationPlan: () => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/authoring/publication-plans`,
     runtimeResolve: () => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/runtime/resolve`,
     runtimeNavigationBootstrap: () => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/runtime/navigations/bootstrap`,
@@ -37,6 +46,7 @@ exports.declarativeControlRoutes = {
     runtimeNavigation: (releaseSlotId) => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/runtime/navigations/${encodePath(releaseSlotId)}`,
     runtimeWorkbench: (releaseSlotId) => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/runtime/workbenches/${encodePath(releaseSlotId)}`,
     runtimePreview: () => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/runtime/previews`,
+    runtimePreviewBindingQuery: (bindingId) => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/runtime/previews/bindings/${encodePath(bindingId)}/query`,
     runtimeBindingQuery: (releaseSlotId, bindingId) => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/runtime/pages/${encodePath(releaseSlotId)}/bindings/${encodePath(bindingId)}/query`,
     runtimeActionExecute: (releaseSlotId, actionBindingId) => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/runtime/pages/${encodePath(releaseSlotId)}/actions/${encodePath(actionBindingId)}/execute`,
     runtimeNavigationActionExecute: (releaseSlotId, nodeId) => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/runtime/navigations/${encodePath(releaseSlotId)}/actions/${encodePath(nodeId)}/execute`,
@@ -60,14 +70,93 @@ const DeclarativeRuntimePageTargetSchema = zod_1.z
     .strict()
     .superRefine((value, context) => {
     if (value.activeReleaseRevisionRef.kind !== 'page-release') {
-        context.addIssue({ code: 'custom', path: ['activeReleaseRevisionRef', 'kind'], message: 'Runtime requests require an exact page-release revision.' });
+        context.addIssue({
+            code: 'custom',
+            path: ['activeReleaseRevisionRef', 'kind'],
+            message: 'Runtime requests require an exact page-release revision.',
+        });
     }
     if (value.pageRevisionRef.kind !== 'page') {
-        context.addIssue({ code: 'custom', path: ['pageRevisionRef', 'kind'], message: 'Runtime requests require an exact page revision.' });
+        context.addIssue({
+            code: 'custom',
+            path: ['pageRevisionRef', 'kind'],
+            message: 'Runtime requests require an exact page revision.',
+        });
     }
 });
+const forbiddenRuntimeParameterKeys = new Set(['__proto__', 'prototype', 'constructor']);
+const rejectRuntimePrototypeKeys = (value, context, path = []) => {
+    if (Array.isArray(value)) {
+        value.forEach((child, index) => rejectRuntimePrototypeKeys(child, context, [...path, index]));
+        return;
+    }
+    if (!value || typeof value !== 'object')
+        return;
+    for (const key of Object.keys(value)) {
+        if (forbiddenRuntimeParameterKeys.has(key)) {
+            context.addIssue({
+                code: 'custom',
+                path: [...path, key],
+                message: 'Prototype-mutating runtime parameter keys are forbidden.',
+            });
+        }
+        rejectRuntimePrototypeKeys(value[key], context, [...path, key]);
+    }
+};
+const runtimeParameterDepth = (value, depth = 0) => {
+    if (value === null || typeof value !== 'object')
+        return depth;
+    const values = Array.isArray(value) ? value : Object.values(value);
+    return values.reduce((maximum, child) => Math.max(maximum, runtimeParameterDepth(child, depth + 1)), depth);
+};
+const DeclarativeRuntimeParametersSchema = zod_1.z
+    .any()
+    .superRefine(rejectRuntimePrototypeKeys)
+    .pipe(common_1.JsonObjectSchema.superRefine((value, context) => {
+    const keys = Object.keys(value);
+    if (keys.length > 32)
+        context.addIssue({
+            code: 'custom',
+            path: [],
+            message: 'Runtime binding parameters cannot contain more than 32 keys.',
+        });
+    keys.forEach((key) => {
+        if (!common_1.ContractIdentifierSchema.safeParse(key).success)
+            context.addIssue({
+                code: 'custom',
+                path: [key],
+                message: 'Runtime parameter keys must be contract identifiers.',
+            });
+    });
+    if (runtimeParameterDepth(value) > 8)
+        context.addIssue({
+            code: 'custom',
+            path: [],
+            message: 'Runtime binding parameters cannot exceed 8 nested levels.',
+        });
+    const serialized = JSON.stringify(value);
+    if (new TextEncoder().encode(serialized).length > 16 * 1024)
+        context.addIssue({
+            code: 'custom',
+            path: [],
+            message: 'Runtime binding parameters cannot exceed 16 KiB.',
+        });
+    const visit = (entry, path) => {
+        if (typeof entry === 'string' && entry.length > 2048)
+            context.addIssue({
+                code: 'custom',
+                path,
+                message: 'Runtime parameter string values cannot exceed 2048 characters.',
+            });
+        else if (Array.isArray(entry))
+            entry.forEach((child, index) => visit(child, [...path, index]));
+        else if (entry && typeof entry === 'object')
+            Object.entries(entry).forEach(([key, child]) => visit(child, [...path, key]));
+    };
+    visit(value, []);
+}));
 exports.DeclarativeRuntimeBindingQueryIntentSchema = DeclarativeRuntimePageTargetSchema.safeExtend({
-    parameters: common_1.JsonObjectSchema.default({}),
+    parameters: DeclarativeRuntimeParametersSchema.default({}),
     pageSize: zod_1.z.number().int().min(1).max(200).default(60),
     cursor: zod_1.z.string().trim().min(1).max(8192).optional(),
 }).strict();
@@ -78,6 +167,7 @@ exports.DeclarativeRuntimeBindingQueryResultSchema = zod_1.z
     pageRevisionRef: declarative_control_1.RevisionRefSchema,
     renderModelSchemaRevisionRef: declarative_control_1.RevisionRefSchema,
     model: common_1.JsonObjectSchema,
+    refresh: zod_1.z.object({ continue: zod_1.z.boolean() }).strict().optional(),
     pageInfo: zod_1.z
         .object({
         pageSize: zod_1.z.number().int().positive(),
@@ -92,10 +182,59 @@ exports.DeclarativeRuntimeBindingQueryResultSchema = zod_1.z
     contentHash: common_1.Sha256Schema,
 })
     .strict();
+exports.DeclarativeRuntimeActionRoutePathSchema = zod_1.z
+    .string()
+    .min(1)
+    .max(8192)
+    .refine((value) => value.startsWith('/') &&
+    !value.startsWith('//') &&
+    value === value.trim() &&
+    !/[?#\\\u0000-\u0020\u007f]/.test(value) &&
+    !value.includes('://'), 'An Action route requires an application-relative pathname without query or fragment.');
 exports.DeclarativeRuntimeActionExecuteIntentSchema = DeclarativeRuntimePageTargetSchema.safeExtend({
     intent: common_1.JsonObjectSchema,
+    recoveryOnly: zod_1.z.literal(true).optional(),
+    pageState: DeclarativeRuntimeParametersSchema,
+    files: zod_1.z.record(zod_1.z.string().min(1).max(256), zod_1.z.union([
+        zod_1.z.object({ fileName: zod_1.z.string().min(1).max(255), content: zod_1.z.string().max(1048576) }).strict(),
+        zod_1.z.object({ fileName: zod_1.z.string().min(1).max(255), canonicalUri: zod_1.z.string().regex(/^file:\/\/[^\s/?#]+$/).max(1024) }).strict(),
+    ])).superRefine((files, context) => {
+        if (Object.keys(files).length > 4 || Object.values(files).reduce((bytes, file) => bytes + ('content' in file ? new TextEncoder().encode(file.content).byteLength : 0), 0) > 1048576)
+            context.addIssue({ code: 'custom', message: 'Action files exceed the transient input budget.' });
+    }).optional(),
+    scope: zod_1.z.unknown().superRefine((value, context) => {
+        try {
+            (0, page_expression_1.assertPageValueBudget)(value);
+        }
+        catch {
+            context.addIssue({ code: 'custom', message: 'Action instance scope exceeds the safe JSON budget.' });
+        }
+    }).pipe(common_1.JsonObjectSchema).optional(),
+    routePath: exports.DeclarativeRuntimeActionRoutePathSchema.optional(),
     idempotencyKey: zod_1.z.string().trim().min(1).max(256),
 }).strict();
+exports.DeclarativeNativeDownloadSchema = zod_1.z
+    .object({
+    url: zod_1.z
+        .string()
+        .min(1)
+        .max(32768)
+        .refine((value) => {
+        try {
+            const url = new URL(value);
+            return ['http:', 'https:'].includes(url.protocol) && !url.username && !url.password;
+        }
+        catch {
+            return false;
+        }
+    }, 'A native download requires an HTTP URL without credentials.'),
+    fileName: zod_1.z
+        .string()
+        .min(1)
+        .max(2048)
+        .regex(/^[^\u0000-\u001f\u007f/\\]+$/),
+})
+    .strict();
 exports.DeclarativeRuntimeActionExecuteResultSchema = zod_1.z
     .object({
     actionBindingId: common_1.ContractIdentifierSchema,
@@ -104,13 +243,26 @@ exports.DeclarativeRuntimeActionExecuteResultSchema = zod_1.z
     commandRevisionRef: declarative_control_1.RevisionRefSchema,
     resultSchemaRevisionRef: declarative_control_1.RevisionRefSchema,
     result: common_1.JsonObjectSchema,
+    download: exports.DeclarativeNativeDownloadSchema.optional(),
+    downloadError: zod_1.z
+        .object({ code: zod_1.z.enum(['DECLARATIVE_DOWNLOAD_FORBIDDEN', 'DECLARATIVE_DOWNLOAD_UNAVAILABLE']) })
+        .strict()
+        .optional(),
     idempotentReplay: zod_1.z.boolean(),
     lineageRef: declarative_control_1.StableRefSchema,
     refreshBindingIds: zod_1.z.array(common_1.ContractIdentifierSchema),
     navigationTargetRef: declarative_control_1.StableRefSchema.optional(),
     contentHash: common_1.Sha256Schema,
 })
-    .strict();
+    .strict()
+    .superRefine((value, context) => {
+    if (value.download && value.downloadError)
+        context.addIssue({
+            code: 'custom',
+            path: ['downloadError'],
+            message: 'A download response cannot contain both a target and an error.',
+        });
+});
 const DeclarativeRuntimeNavigationTargetSchema = zod_1.z
     .object({
     activeReleaseRevisionRef: declarative_control_1.RevisionRefSchema,
@@ -119,10 +271,18 @@ const DeclarativeRuntimeNavigationTargetSchema = zod_1.z
     .strict()
     .superRefine((value, context) => {
     if (value.activeReleaseRevisionRef.kind !== 'navigation-release') {
-        context.addIssue({ code: 'custom', path: ['activeReleaseRevisionRef', 'kind'], message: 'Navigation Action requests require an exact navigation-release revision.' });
+        context.addIssue({
+            code: 'custom',
+            path: ['activeReleaseRevisionRef', 'kind'],
+            message: 'Navigation Action requests require an exact navigation-release revision.',
+        });
     }
     if (value.navigationRevisionRef.kind !== 'navigation') {
-        context.addIssue({ code: 'custom', path: ['navigationRevisionRef', 'kind'], message: 'Navigation Action requests require an exact navigation revision.' });
+        context.addIssue({
+            code: 'custom',
+            path: ['navigationRevisionRef', 'kind'],
+            message: 'Navigation Action requests require an exact navigation revision.',
+        });
     }
 });
 exports.DeclarativeRuntimeNavigationActionExecuteIntentSchema = DeclarativeRuntimeNavigationTargetSchema.safeExtend({
@@ -152,7 +312,11 @@ exports.DeclarativeAudienceSimulationSchema = zod_1.z
         .superRefine((references, context) => {
         references.forEach((reference, index) => {
             if (reference.kind !== 'group')
-                context.addIssue({ code: 'custom', path: [index, 'kind'], message: 'Audience simulation only accepts stable Group refs.' });
+                context.addIssue({
+                    code: 'custom',
+                    path: [index, 'kind'],
+                    message: 'Audience simulation only accepts stable Group refs.',
+                });
         });
     }),
     permissions: zod_1.z.array(common_1.ContractIdentifierSchema).max(512).default([]),
@@ -164,6 +328,7 @@ exports.DeclarativeReleaseTargetIntentSchema = zod_1.z
     environmentRevisionRef: declarative_control_1.RevisionRefSchema,
     surface: declarative_control_1.ProductSurfaceSchema,
     routeClaimIndex: zod_1.z.number().int().nonnegative().optional(),
+    legacyRouteTakeoverAuthorization: declarative_control_1.LegacyRouteTakeoverAuthorizationSchema.optional(),
     placement: common_1.ContractIdentifierSchema.optional(),
     order: zod_1.z.number().int().optional(),
     isDefaultCandidate: zod_1.z.boolean().optional(),
@@ -171,10 +336,19 @@ exports.DeclarativeReleaseTargetIntentSchema = zod_1.z
     .strict()
     .superRefine((value, context) => {
     if (value.environmentRef.kind !== 'environment' || value.environmentRevisionRef.kind !== 'environment') {
-        context.addIssue({ code: 'custom', path: ['environmentRevisionRef', 'kind'], message: 'Release targets require an exact environment registration.' });
+        context.addIssue({
+            code: 'custom',
+            path: ['environmentRevisionRef', 'kind'],
+            message: 'Release targets require an exact environment registration.',
+        });
     }
-    if (value.environmentRef.id !== value.environmentRevisionRef.id || value.environmentRef.ownerRepo !== value.environmentRevisionRef.ownerRepo) {
-        context.addIssue({ code: 'custom', path: ['environmentRevisionRef'], message: 'The exact environment revision must identify the selected environment.' });
+    if (value.environmentRef.id !== value.environmentRevisionRef.id ||
+        value.environmentRef.ownerRepo !== value.environmentRevisionRef.ownerRepo) {
+        context.addIssue({
+            code: 'custom',
+            path: ['environmentRevisionRef'],
+            message: 'The exact environment revision must identify the selected environment.',
+        });
     }
 });
 exports.DeclarativeCommandIntentSchema = zod_1.z
@@ -193,11 +367,35 @@ exports.DeclarativeCommandIntentSchema = zod_1.z
     .strict();
 exports.DeclarativeBatchOperationIntentSchema = zod_1.z
     .object({
+    action: zod_1.z.enum(['publish', 'rollback', 'deactivate']).default('publish'),
     resourceKind: exports.DeclarativeResourceKindSchema,
     resourceId: common_1.ContractIdentifierSchema,
     intent: exports.DeclarativeCommandIntentSchema,
 })
-    .strict();
+    .strict()
+    .superRefine((value, context) => {
+    if (value.action !== 'publish' && !value.intent.releaseSlotId) {
+        context.addIssue({
+            code: 'custom',
+            path: ['intent', 'releaseSlotId'],
+            message: `${value.action} requires an exact active Release slot.`,
+        });
+    }
+    if (value.action === 'rollback' && !value.intent.targetReleaseVersion) {
+        context.addIssue({
+            code: 'custom',
+            path: ['intent', 'targetReleaseVersion'],
+            message: 'rollback requires an exact historical Release version.',
+        });
+    }
+    if (value.action !== 'rollback' && value.intent.targetReleaseVersion) {
+        context.addIssue({
+            code: 'custom',
+            path: ['intent', 'targetReleaseVersion'],
+            message: 'Only rollback may select a historical Release version.',
+        });
+    }
+});
 exports.DeclarativePublicationPlanIntentSchema = zod_1.z
     .object({
     idempotencyKey: zod_1.z.string().trim().min(1).max(256),
@@ -232,7 +430,11 @@ exports.DeclarativeCapabilitySchemaDocumentSchema = zod_1.z
     .strict()
     .superRefine((value, context) => {
     if (value.schemaRevisionRef.kind !== 'schema') {
-        context.addIssue({ code: 'custom', path: ['schemaRevisionRef', 'kind'], message: 'Capability schema documents must use schema RevisionRefs.' });
+        context.addIssue({
+            code: 'custom',
+            path: ['schemaRevisionRef', 'kind'],
+            message: 'Capability schema documents must use schema RevisionRefs.',
+        });
     }
 });
 exports.DeclarativeCapabilityAuthoringRegistrationSchema = zod_1.z
@@ -252,10 +454,31 @@ exports.DeclarativeCapabilityAuthoringRegistrationSchema = zod_1.z
     allowedChildCapabilityRefs: zod_1.z.array(declarative_control_1.StableRefSchema),
     inputPorts: zod_1.z.array(DeclarativeCapabilityPortSchema),
     outputPorts: zod_1.z.array(DeclarativeCapabilityPortSchema),
-    allowedSideEffects: zod_1.z.array(zod_1.z.enum(['network', 'storage', 'navigation', 'worker', 'websocket'])),
-    ontologyRequirements: zod_1.z.array(zod_1.z.object({ inputPort: common_1.ContractIdentifierSchema, renderModelSchemaRevisionRef: declarative_control_1.RevisionRefSchema, modes: zod_1.z.array(zod_1.z.enum(['view', 'filter'])).min(1), requiredPermissionCodes: zod_1.z.array(common_1.ContractIdentifierSchema) }).strict()),
-    actionRequirements: zod_1.z.array(zod_1.z.object({ outputPort: common_1.ContractIdentifierSchema, allowedCommandKinds: zod_1.z.array(common_1.ContractIdentifierSchema), requiredPermissionCodes: zod_1.z.array(common_1.ContractIdentifierSchema) }).strict()),
-    propertyFields: zod_1.z.array(zod_1.z.object({ path: zod_1.z.string().trim().min(1), label: declarative_control_1.I18nTextSchema, control: common_1.ContractIdentifierSchema, required: zod_1.z.boolean(), advanced: zod_1.z.boolean() }).strict()),
+    allowedSideEffects: zod_1.z.array(zod_1.z.enum(['network', 'storage', 'navigation', 'clipboard', 'worker', 'websocket'])),
+    ontologyRequirements: zod_1.z.array(zod_1.z
+        .object({
+        inputPort: common_1.ContractIdentifierSchema,
+        renderModelSchemaRevisionRef: declarative_control_1.RevisionRefSchema,
+        modes: zod_1.z.array(zod_1.z.enum(['view', 'filter'])).min(1),
+        requiredPermissionCodes: zod_1.z.array(common_1.ContractIdentifierSchema),
+    })
+        .strict()),
+    actionRequirements: zod_1.z.array(zod_1.z
+        .object({
+        outputPort: common_1.ContractIdentifierSchema,
+        allowedCommandKinds: zod_1.z.array(common_1.ContractIdentifierSchema),
+        requiredPermissionCodes: zod_1.z.array(common_1.ContractIdentifierSchema),
+    })
+        .strict()),
+    propertyFields: zod_1.z.array(zod_1.z
+        .object({
+        path: zod_1.z.string().trim().min(1),
+        label: declarative_control_1.I18nTextSchema,
+        control: common_1.ContractIdentifierSchema,
+        required: zod_1.z.boolean(),
+        advanced: zod_1.z.boolean(),
+    })
+        .strict()),
     schemaDocuments: zod_1.z.array(exports.DeclarativeCapabilitySchemaDocumentSchema).min(1),
     sourceContentHash: common_1.Sha256Schema,
 })
@@ -265,7 +488,11 @@ exports.DeclarativeCapabilityAuthoringRegistrationSchema = zod_1.z
     value.schemaDocuments.forEach((entry, index) => {
         const key = `${entry.schemaRevisionRef.ownerRepo}:${entry.schemaRevisionRef.id}@${entry.schemaRevisionRef.revision}:${entry.schemaRevisionRef.contentHash}`;
         if (documents.has(key)) {
-            context.addIssue({ code: 'custom', path: ['schemaDocuments', index], message: 'Capability schema documents must be unique by exact RevisionRef.' });
+            context.addIssue({
+                code: 'custom',
+                path: ['schemaDocuments', index],
+                message: 'Capability schema documents must be unique by exact RevisionRef.',
+            });
         }
         documents.set(key, index);
     });
@@ -279,10 +506,154 @@ exports.DeclarativeCapabilityAuthoringRegistrationSchema = zod_1.z
     required.forEach((reference) => {
         const key = `${reference.ownerRepo}:${reference.id}@${reference.revision}:${reference.contentHash}`;
         if (!documents.has(key)) {
-            context.addIssue({ code: 'custom', path: ['schemaDocuments'], message: `Missing exact schema document for ${reference.id}.` });
+            context.addIssue({
+                code: 'custom',
+                path: ['schemaDocuments'],
+                message: `Missing exact schema document for ${reference.id}.`,
+            });
         }
     });
 });
+exports.DesignCapabilityCatalogEntrySchema = zod_1.z
+    .object({
+    manifest: capability_1.CapabilityManifestSchema,
+    provider: render_1.ViewProviderDescriptorSchema,
+    declarativeRegistration: exports.DeclarativeCapabilityAuthoringRegistrationSchema,
+})
+    .strict();
+exports.DesignCapabilityCatalogArtifactSchema = zod_1.z
+    .object({
+    contract: zod_1.z.literal('DesignCapabilityCatalogArtifact'),
+    schemaVersion: zod_1.z.literal(1),
+    sourceRef: common_1.ContractIdentifierSchema,
+    sourceRevisionRef: declarative_control_1.RevisionRefSchema,
+    entries: zod_1.z.array(exports.DesignCapabilityCatalogEntrySchema).min(1).max(512),
+    sourceContentHash: common_1.Sha256Schema,
+})
+    .strict()
+    .superRefine((value, context) => {
+    if (value.sourceRevisionRef.kind !== 'design-capability-catalog' ||
+        value.sourceRevisionRef.id !== value.sourceRef ||
+        value.sourceRevisionRef.ownerRepo !== 'monkeys-design' ||
+        value.sourceRevisionRef.visibility !== 'global') {
+        context.addIssue({
+            code: 'custom',
+            path: ['sourceRevisionRef'],
+            message: 'A Design catalog artifact must be a global monkeys-design release revision.',
+        });
+    }
+    const ids = value.entries.map((entry) => entry.manifest.id);
+    if (new Set(ids).size !== ids.length) {
+        context.addIssue({
+            code: 'custom',
+            path: ['entries'],
+            message: 'Design catalog capability identities must be unique.',
+        });
+    }
+    if (ids.some((id, index) => index > 0 && ids[index - 1].localeCompare(id) > 0)) {
+        context.addIssue({
+            code: 'custom',
+            path: ['entries'],
+            message: 'Design catalog entries must use deterministic capability identity order.',
+        });
+    }
+});
+/**
+ * A product release may contribute a product-owned visual capability without
+ * pretending to be the global Monkeys Design catalog. The application catalog
+ * is the release authority; runtime code remains outside this data contract.
+ */
+exports.ProductDeclarativeCapabilityRegistrationSchema = zod_1.z
+    .object({
+    manifest: capability_1.CapabilityManifestSchema,
+    provider: render_1.ViewProviderDescriptorSchema,
+    declarativeRegistration: exports.DeclarativeCapabilityAuthoringRegistrationSchema,
+    requiredPermissionCodes: zod_1.z.array(common_1.ContractIdentifierSchema).default([]),
+})
+    .strict()
+    .superRefine((value, context) => {
+    const ownerRepo = value.manifest.ownerRepo;
+    const registration = value.declarativeRegistration;
+    if (ownerRepo === 'monkeys-design') {
+        context.addIssue({
+            code: 'custom',
+            path: ['manifest', 'ownerRepo'],
+            message: 'Monkeys Design capabilities must come from the Design capability catalog.',
+        });
+    }
+    if (registration.capabilityRevisionRef.kind !== 'capability' ||
+        registration.capabilityRevisionRef.id !== value.manifest.id ||
+        registration.capabilityRevisionRef.ownerRepo !== ownerRepo ||
+        String(registration.capabilityRevisionRef.revision) !== String(value.manifest.capabilityVersion) ||
+        registration.capabilityRevisionRef.visibility !== 'global') {
+        context.addIssue({
+            code: 'custom',
+            path: ['declarativeRegistration', 'capabilityRevisionRef'],
+            message: 'A product capability must pin its exact global product-owned manifest revision.',
+        });
+    }
+    if (registration.providerRevisionRef.kind !== 'view-provider' ||
+        registration.providerRevisionRef.id !== value.provider.providerId ||
+        registration.providerRevisionRef.ownerRepo !== ownerRepo ||
+        value.provider.ownerRepo !== ownerRepo ||
+        String(registration.providerRevisionRef.revision) !== String(value.provider.providerVersion) ||
+        registration.providerRevisionRef.visibility !== 'global') {
+        context.addIssue({
+            code: 'custom',
+            path: ['declarativeRegistration', 'providerRevisionRef'],
+            message: 'A product capability must pin its exact global product-owned provider revision.',
+        });
+    }
+    if (value.provider.capabilityRef.kind !== 'capability' ||
+        value.provider.capabilityRef.id !== value.manifest.id ||
+        value.provider.capabilityRef.ownerRepo !== ownerRepo ||
+        String(value.provider.capabilityRef.version) !== String(value.manifest.capabilityVersion)) {
+        context.addIssue({
+            code: 'custom',
+            path: ['provider', 'capabilityRef'],
+            message: 'A product provider must declare its exact capability owner.',
+        });
+    }
+    const providerBoundByManifest = value.manifest.runtime.providerBindings.some((binding) => binding.providerRef.kind === 'view-provider' &&
+        binding.providerRef.id === value.provider.providerId &&
+        binding.providerRef.ownerRepo === ownerRepo &&
+        String(binding.providerRef.version) === String(value.provider.providerVersion));
+    if (!providerBoundByManifest) {
+        context.addIssue({
+            code: 'custom',
+            path: ['manifest', 'runtime', 'providerBindings'],
+            message: 'The product capability manifest must bind the declared product provider.',
+        });
+    }
+    if (registration.registrationRevisionRef.kind !== 'product-capability-registration' ||
+        registration.registrationRevisionRef.ownerRepo !== ownerRepo ||
+        registration.registrationRevisionRef.visibility !== 'global' ||
+        registration.registrationRevisionRef.contentHash !== registration.sourceContentHash) {
+        context.addIssue({
+            code: 'custom',
+            path: ['declarativeRegistration', 'registrationRevisionRef'],
+            message: 'A product capability registration must have exact product-owned release provenance.',
+        });
+    }
+    registration.schemaDocuments.forEach((schema, index) => {
+        if (schema.schemaRevisionRef.ownerRepo !== ownerRepo || schema.schemaRevisionRef.visibility !== 'global') {
+            context.addIssue({
+                code: 'custom',
+                path: ['declarativeRegistration', 'schemaDocuments', index],
+                message: 'Embedded product capability Schemas require exact global product authority.',
+            });
+        }
+    });
+    const permissions = value.requiredPermissionCodes;
+    if (new Set(permissions).size !== permissions.length ||
+        permissions.some((permission, index) => index > 0 && permissions[index - 1].localeCompare(permission) > 0)) {
+        context.addIssue({
+            code: 'custom',
+            path: ['requiredPermissionCodes'],
+            message: 'Product capability permission codes must be unique and deterministically sorted.',
+        });
+    }
+});
 exports.DeclarativeCapabilityAuthoringChoiceSchema = exports.DeclarativeAuthoringChoiceSchema.extend({
     registration: exports.DeclarativeCapabilityAuthoringRegistrationSchema,
 }).strict();
@@ -293,16 +664,44 @@ exports.DeclarativeCreateTemplateRegistrationSchema = zod_1.z
     label: declarative_control_1.I18nTextSchema,
     description: declarative_control_1.I18nTextSchema,
     supportedSurfaces: zod_1.z.array(declarative_control_1.ProductSurfaceSchema).min(1),
+    legacyMigrationSourcePageIds: zod_1.z.array(common_1.ContractIdentifierSchema).min(1).max(256).optional(),
     document: zod_1.z.union([declarative_control_1.PageSchema, declarative_control_1.NavigationSchema, declarative_control_1.WorkbenchSchema]),
     sourceContentHash: common_1.Sha256Schema,
 })
     .strict()
     .superRefine((value, context) => {
-    const expected = value.document.contract === 'Page' ? 'page' : value.document.contract === 'Navigation' ? 'navigation' : 'workbench';
+    const expected = value.document.contract === 'Page'
+        ? 'page'
+        : value.document.contract === 'Navigation'
+            ? 'navigation'
+            : 'workbench';
     if (value.resourceKind !== expected)
-        context.addIssue({ code: 'custom', path: ['resourceKind'], message: 'Create template kind must match its document contract.' });
+        context.addIssue({
+            code: 'custom',
+            path: ['resourceKind'],
+            message: 'Create template kind must match its document contract.',
+        });
     if (value.templateRevisionRef.kind !== 'declarative-create-template')
-        context.addIssue({ code: 'custom', path: ['templateRevisionRef', 'kind'], message: 'Create templates require declarative-create-template RevisionRefs.' });
+        context.addIssue({
+            code: 'custom',
+            path: ['templateRevisionRef', 'kind'],
+            message: 'Create templates require declarative-create-template RevisionRefs.',
+        });
+    if (value.legacyMigrationSourcePageIds && value.resourceKind !== 'page') {
+        context.addIssue({
+            code: 'custom',
+            path: ['legacyMigrationSourcePageIds'],
+            message: 'Only Page templates can declare legacy Page migration sources.',
+        });
+    }
+    if (value.legacyMigrationSourcePageIds &&
+        new Set(value.legacyMigrationSourcePageIds).size !== value.legacyMigrationSourcePageIds.length) {
+        context.addIssue({
+            code: 'custom',
+            path: ['legacyMigrationSourcePageIds'],
+            message: 'Legacy Page migration source identities must be unique.',
+        });
+    }
 });
 exports.DeclarativeRouteSpaceRegistrationSchema = zod_1.z
     .object({
@@ -313,10 +712,18 @@ exports.DeclarativeRouteSpaceRegistrationSchema = zod_1.z
     .strict()
     .superRefine((value, context) => {
     if (value.routeSpaceRevisionRef.kind !== 'route-space') {
-        context.addIssue({ code: 'custom', path: ['routeSpaceRevisionRef', 'kind'], message: 'Route-space registrations require route-space RevisionRefs.' });
+        context.addIssue({
+            code: 'custom',
+            path: ['routeSpaceRevisionRef', 'kind'],
+            message: 'Route-space registrations require route-space RevisionRefs.',
+        });
     }
     if (value.routeSpaceRevisionRef.id !== value.routeSpace.routeSpaceId) {
-        context.addIssue({ code: 'custom', path: ['routeSpaceRevisionRef', 'id'], message: 'Route-space registration identity must match its document.' });
+        context.addIssue({
+            code: 'custom',
+            path: ['routeSpaceRevisionRef', 'id'],
+            message: 'Route-space registration identity must match its document.',
+        });
     }
 });
 exports.DeclarativeShellResourceDocumentSchema = zod_1.z
@@ -327,16 +734,39 @@ exports.DeclarativeShellResourceDocumentSchema = zod_1.z
     hostProviderRevisionRef: declarative_control_1.RevisionRefSchema,
     allowedSlots: zod_1.z.array(common_1.ContractIdentifierSchema).min(1),
     tokenRevisionRefs: zod_1.z.array(declarative_control_1.RevisionRefSchema).min(1),
+    surfaceChrome: zod_1.z.array(declarative_control_1.DeclarativeShellSurfaceChromeSchema).min(1),
 })
     .strict()
     .superRefine((value, context) => {
     if (value.hostCapabilityRevisionRef.kind !== 'capability')
-        context.addIssue({ code: 'custom', path: ['hostCapabilityRevisionRef', 'kind'], message: 'Shell host capability must reference a capability.' });
+        context.addIssue({
+            code: 'custom',
+            path: ['hostCapabilityRevisionRef', 'kind'],
+            message: 'Shell host capability must reference a capability.',
+        });
     if (value.hostProviderRevisionRef.kind !== 'view-provider')
-        context.addIssue({ code: 'custom', path: ['hostProviderRevisionRef', 'kind'], message: 'Shell host provider must reference a view-provider.' });
+        context.addIssue({
+            code: 'custom',
+            path: ['hostProviderRevisionRef', 'kind'],
+            message: 'Shell host provider must reference a view-provider.',
+        });
     value.tokenRevisionRefs.forEach((reference, index) => {
         if (reference.kind !== 'design-token')
-            context.addIssue({ code: 'custom', path: ['tokenRevisionRefs', index, 'kind'], message: 'Shell tokens must use design-token RevisionRefs.' });
+            context.addIssue({
+                code: 'custom',
+                path: ['tokenRevisionRefs', index, 'kind'],
+                message: 'Shell tokens must use design-token RevisionRefs.',
+            });
+    });
+    const seenSurfaces = new Set();
+    value.surfaceChrome.forEach((entry, index) => {
+        if (seenSurfaces.has(entry.surface))
+            context.addIssue({
+                code: 'custom',
+                path: ['surfaceChrome', index],
+                message: `Duplicate shell chrome declaration for ${entry.surface}.`,
+            });
+        seenSurfaces.add(entry.surface);
     });
 });
 exports.DeclarativeLayoutPolicyResourceDocumentSchema = zod_1.z
@@ -349,7 +779,11 @@ exports.DeclarativeLayoutPolicyResourceDocumentSchema = zod_1.z
     .strict()
     .superRefine((value, context) => {
     if (value.propertySchemaRevisionRef.kind !== 'schema')
-        context.addIssue({ code: 'custom', path: ['propertySchemaRevisionRef', 'kind'], message: 'Layout policy properties must reference a schema.' });
+        context.addIssue({
+            code: 'custom',
+            path: ['propertySchemaRevisionRef', 'kind'],
+            message: 'Layout policy properties must reference a schema.',
+        });
 });
 exports.DeclarativeEnvironmentResourceDocumentSchema = zod_1.z
     .object({
@@ -363,7 +797,15 @@ exports.DeclarativeEnvironmentResourceDocumentSchema = zod_1.z
 exports.DeclarativeProductResourceRegistrationSchema = zod_1.z
     .object({
     resourceRevisionRef: declarative_control_1.RevisionRefSchema,
-    resourceKind: zod_1.z.enum(['shell', 'layout-policy', 'performance-budget', 'observation-policy', 'design-token', 'access-policy', 'environment']),
+    resourceKind: zod_1.z.enum([
+        'shell',
+        'layout-policy',
+        'performance-budget',
+        'observation-policy',
+        'design-token',
+        'access-policy',
+        'environment',
+    ]),
     supportedSurfaces: zod_1.z.array(declarative_control_1.ProductSurfaceSchema).min(1),
     accessPolicy: declarative_control_1.AccessPolicySchema.optional(),
     schemaRevisionRef: declarative_control_1.RevisionRefSchema.optional(),
@@ -373,24 +815,64 @@ exports.DeclarativeProductResourceRegistrationSchema = zod_1.z
     .strict()
     .superRefine((value, context) => {
     if (value.resourceRevisionRef.kind !== value.resourceKind) {
-        context.addIssue({ code: 'custom', path: ['resourceRevisionRef', 'kind'], message: 'Product resource kind must match its RevisionRef.' });
+        context.addIssue({
+            code: 'custom',
+            path: ['resourceRevisionRef', 'kind'],
+            message: 'Product resource kind must match its RevisionRef.',
+        });
     }
     if (value.resourceKind === 'shell') {
         const parsed = exports.DeclarativeShellResourceDocumentSchema.safeParse(value.document);
         if (!parsed.success)
-            context.addIssue({ code: 'custom', path: ['document'], message: `Invalid shell declaration: ${parsed.error.message}` });
+            context.addIssue({
+                code: 'custom',
+                path: ['document'],
+                message: `Invalid shell declaration: ${parsed.error.message}`,
+            });
+        if (parsed.success) {
+            const declaredSurfaces = new Set(parsed.data.surfaceChrome.map((entry) => entry.surface));
+            const supportedSurfaces = new Set(value.supportedSurfaces);
+            value.supportedSurfaces.forEach((surface) => {
+                if (!declaredSurfaces.has(surface))
+                    context.addIssue({
+                        code: 'custom',
+                        path: ['document', 'surfaceChrome'],
+                        message: `Shell chrome is missing for supported surface ${surface}.`,
+                    });
+            });
+            parsed.data.surfaceChrome.forEach((entry) => {
+                if (!supportedSurfaces.has(entry.surface))
+                    context.addIssue({
+                        code: 'custom',
+                        path: ['document', 'surfaceChrome'],
+                        message: `Shell chrome declares unsupported surface ${entry.surface}.`,
+                    });
+            });
+        }
     }
     if (value.resourceKind === 'layout-policy') {
         const parsed = exports.DeclarativeLayoutPolicyResourceDocumentSchema.safeParse(value.document);
         if (!parsed.success)
-            context.addIssue({ code: 'custom', path: ['document'], message: `Invalid layout-policy declaration: ${parsed.error.message}` });
+            context.addIssue({
+                code: 'custom',
+                path: ['document'],
+                message: `Invalid layout-policy declaration: ${parsed.error.message}`,
+            });
     }
     if (value.resourceKind === 'environment') {
         const parsed = exports.DeclarativeEnvironmentResourceDocumentSchema.safeParse(value.document);
         if (!parsed.success)
-            context.addIssue({ code: 'custom', path: ['document'], message: `Invalid environment declaration: ${parsed.error.message}` });
+            context.addIssue({
+                code: 'custom',
+                path: ['document'],
+                message: `Invalid environment declaration: ${parsed.error.message}`,
+            });
         if (parsed.success && parsed.data.environmentId !== value.resourceRevisionRef.id) {
-            context.addIssue({ code: 'custom', path: ['document', 'environmentId'], message: 'Environment registration identity must match its document.' });
+            context.addIssue({
+                code: 'custom',
+                path: ['document', 'environmentId'],
+                message: 'Environment registration identity must match its document.',
+            });
         }
     }
 });
@@ -401,6 +883,79 @@ exports.DeclarativeDefaultPolicyRegistrationSchema = zod_1.z
     supportedSurfaces: zod_1.z.array(declarative_control_1.ProductSurfaceSchema).min(1),
 })
     .strict();
+exports.DeclarativeDomainQueryDefinitionRegistrationSchema = zod_1.z
+    .object({
+    definitionRevisionRef: declarative_control_1.RevisionRefSchema,
+    definition: declarative_control_1.DomainQueryDefinitionSchema,
+})
+    .strict()
+    .superRefine((value, context) => {
+    if (value.definitionRevisionRef.kind !== 'domain-query-definition') {
+        context.addIssue({
+            code: 'custom',
+            path: ['definitionRevisionRef', 'kind'],
+            message: 'A Domain Query registration must pin a domain-query-definition revision.',
+        });
+    }
+    if (value.definitionRevisionRef.id !== value.definition.queryId) {
+        context.addIssue({
+            code: 'custom',
+            path: ['definitionRevisionRef', 'id'],
+            message: 'A Domain Query registration identity must match its definition.',
+        });
+    }
+});
+exports.DeclarativeDomainCommandDefinitionRegistrationSchema = zod_1.z
+    .object({
+    definitionRevisionRef: declarative_control_1.RevisionRefSchema,
+    definition: semantic_1.DomainCommandDefinitionSchema,
+})
+    .strict()
+    .superRefine((value, context) => {
+    if (value.definitionRevisionRef.kind !== 'domain-command') {
+        context.addIssue({
+            code: 'custom',
+            path: ['definitionRevisionRef', 'kind'],
+            message: 'A Domain Command registration must pin a domain-command revision.',
+        });
+    }
+    if (value.definitionRevisionRef.id !== value.definition.commandName) {
+        context.addIssue({
+            code: 'custom',
+            path: ['definitionRevisionRef', 'id'],
+            message: 'A Domain Command registration identity must match its definition.',
+        });
+    }
+});
+exports.DeclarativeSchemaDefinitionRegistrationSchema = zod_1.z
+    .object({
+    definitionRevisionRef: declarative_control_1.RevisionRefSchema,
+    definition: semantic_1.SchemaDefinitionSchema,
+})
+    .strict()
+    .superRefine((value, context) => {
+    if (value.definitionRevisionRef.kind !== 'schema') {
+        context.addIssue({
+            code: 'custom',
+            path: ['definitionRevisionRef', 'kind'],
+            message: 'A Schema registration must pin a schema revision.',
+        });
+    }
+    if (value.definitionRevisionRef.id !== value.definition.schemaId) {
+        context.addIssue({
+            code: 'custom',
+            path: ['definitionRevisionRef', 'id'],
+            message: 'A Schema registration identity must match its definition.',
+        });
+    }
+    if (value.definitionRevisionRef.ownerRepo !== value.definition.ownerRepo) {
+        context.addIssue({
+            code: 'custom',
+            path: ['definitionRevisionRef', 'ownerRepo'],
+            message: 'A Schema registration authority must match its definition.',
+        });
+    }
+});
 /** Release-owned product authoring inputs. Instances and releases remain Ontology records. */
 exports.ProductDeclarativeAuthoringCatalogSchema = zod_1.z
     .object({
@@ -411,26 +966,96 @@ exports.ProductDeclarativeAuthoringCatalogSchema = zod_1.z
     routeSpaces: zod_1.z.array(exports.DeclarativeRouteSpaceRegistrationSchema),
     resourceRegistrations: zod_1.z.array(exports.DeclarativeProductResourceRegistrationSchema),
     defaultPolicies: zod_1.z.array(exports.DeclarativeDefaultPolicyRegistrationSchema),
+    domainQueryDefinitions: zod_1.z.array(exports.DeclarativeDomainQueryDefinitionRegistrationSchema).default([]),
+    domainCommandDefinitions: zod_1.z.array(exports.DeclarativeDomainCommandDefinitionRegistrationSchema).default([]),
+    schemaDefinitions: zod_1.z.array(exports.DeclarativeSchemaDefinitionRegistrationSchema).default([]),
+    capabilityRegistrations: zod_1.z.array(exports.ProductDeclarativeCapabilityRegistrationSchema).default([]),
 })
     .strict()
     .superRefine((value, context) => {
     const duplicates = (items) => items.find((item, index) => items.indexOf(item) !== index);
     const duplicateTemplate = duplicates(value.createTemplates.map((item) => `${item.templateRevisionRef.id}@${item.templateRevisionRef.revision}`));
     if (duplicateTemplate)
-        context.addIssue({ code: 'custom', path: ['createTemplates'], message: `Duplicate create template ${duplicateTemplate}.` });
+        context.addIssue({
+            code: 'custom',
+            path: ['createTemplates'],
+            message: `Duplicate create template ${duplicateTemplate}.`,
+        });
+    const duplicateMigrationSource = duplicates(value.createTemplates.flatMap((item) => (item.legacyMigrationSourcePageIds ?? []).flatMap((pageId) => item.supportedSurfaces.map((surface) => `${surface}:${pageId}`))));
+    if (duplicateMigrationSource)
+        context.addIssue({
+            code: 'custom',
+            path: ['createTemplates'],
+            message: `Duplicate legacy Page migration source ${duplicateMigrationSource}.`,
+        });
     const duplicateRouteSpace = duplicates(value.routeSpaces.map((item) => `${item.routeSpaceRevisionRef.id}@${item.routeSpaceRevisionRef.revision}`));
     if (duplicateRouteSpace)
-        context.addIssue({ code: 'custom', path: ['routeSpaces'], message: `Duplicate route space ${duplicateRouteSpace}.` });
+        context.addIssue({
+            code: 'custom',
+            path: ['routeSpaces'],
+            message: `Duplicate route space ${duplicateRouteSpace}.`,
+        });
     const duplicateResource = duplicates(value.resourceRegistrations.map((item) => `${item.resourceRevisionRef.kind}:${item.resourceRevisionRef.id}@${item.resourceRevisionRef.revision}`));
     if (duplicateResource)
-        context.addIssue({ code: 'custom', path: ['resourceRegistrations'], message: `Duplicate product resource ${duplicateResource}.` });
+        context.addIssue({
+            code: 'custom',
+            path: ['resourceRegistrations'],
+            message: `Duplicate product resource ${duplicateResource}.`,
+        });
+    const duplicateQueryDefinition = duplicates(value.domainQueryDefinitions.map((item) => `${item.definitionRevisionRef.id}@${item.definitionRevisionRef.revision}`));
+    if (duplicateQueryDefinition)
+        context.addIssue({
+            code: 'custom',
+            path: ['domainQueryDefinitions'],
+            message: `Duplicate Domain Query definition ${duplicateQueryDefinition}.`,
+        });
+    const duplicateCommandDefinition = duplicates(value.domainCommandDefinitions.map((item) => `${item.definitionRevisionRef.id}@${item.definitionRevisionRef.revision}`));
+    if (duplicateCommandDefinition)
+        context.addIssue({
+            code: 'custom',
+            path: ['domainCommandDefinitions'],
+            message: `Duplicate Domain Command definition ${duplicateCommandDefinition}.`,
+        });
+    const duplicateSchemaDefinition = duplicates(value.schemaDefinitions.map((item) => `${item.definitionRevisionRef.id}@${item.definitionRevisionRef.revision}`));
+    if (duplicateSchemaDefinition)
+        context.addIssue({
+            code: 'custom',
+            path: ['schemaDefinitions'],
+            message: `Duplicate Schema definition ${duplicateSchemaDefinition}.`,
+        });
+    const duplicateCapabilityRegistration = duplicates(value.capabilityRegistrations.map((item) => `${item.declarativeRegistration.capabilityRevisionRef.id}@${item.declarativeRegistration.capabilityRevisionRef.revision}`));
+    if (duplicateCapabilityRegistration)
+        context.addIssue({
+            code: 'custom',
+            path: ['capabilityRegistrations'],
+            message: `Duplicate product capability registration ${duplicateCapabilityRegistration}.`,
+        });
     value.defaultPolicies.forEach((selection, index) => {
-        const expectedKind = { management: 'access-policy', access: 'access-policy', layout: 'layout-policy', performance: 'performance-budget', observability: 'observation-policy', tokens: 'design-token', environment: 'environment' }[selection.role];
+        const expectedKind = {
+            management: 'access-policy',
+            access: 'access-policy',
+            layout: 'layout-policy',
+            performance: 'performance-budget',
+            observability: 'observation-policy',
+            tokens: 'design-token',
+            environment: 'environment',
+        }[selection.role];
         if (selection.resourceRevisionRef.kind !== expectedKind) {
-            context.addIssue({ code: 'custom', path: ['defaultPolicies', index, 'resourceRevisionRef', 'kind'], message: `Default ${selection.role} selection must reference ${expectedKind}.` });
+            context.addIssue({
+                code: 'custom',
+                path: ['defaultPolicies', index, 'resourceRevisionRef', 'kind'],
+                message: `Default ${selection.role} selection must reference ${expectedKind}.`,
+            });
         }
-        if (!value.resourceRegistrations.some((registration) => registration.resourceRevisionRef.kind === selection.resourceRevisionRef.kind && registration.resourceRevisionRef.id === selection.resourceRevisionRef.id && registration.resourceRevisionRef.revision === selection.resourceRevisionRef.revision && registration.resourceRevisionRef.contentHash === selection.resourceRevisionRef.contentHash)) {
-            context.addIssue({ code: 'custom', path: ['defaultPolicies', index, 'resourceRevisionRef'], message: 'Default policy must select an exact registered product resource.' });
+        if (!value.resourceRegistrations.some((registration) => registration.resourceRevisionRef.kind === selection.resourceRevisionRef.kind &&
+            registration.resourceRevisionRef.id === selection.resourceRevisionRef.id &&
+            registration.resourceRevisionRef.revision === selection.resourceRevisionRef.revision &&
+            registration.resourceRevisionRef.contentHash === selection.resourceRevisionRef.contentHash)) {
+            context.addIssue({
+                code: 'custom',
+                path: ['defaultPolicies', index, 'resourceRevisionRef'],
+                message: 'Default policy must select an exact registered product resource.',
+            });
         }
     });
 });
@@ -453,7 +1078,11 @@ exports.DeclarativeBindingAuthoringChoiceSchema = exports.DeclarativeAuthoringCh
     })
         .strict(),
     accessDiagnostics: zod_1.z
-        .object({ allowed: zod_1.z.boolean(), missingPermissionCodes: zod_1.z.array(common_1.ContractIdentifierSchema), issueCodes: zod_1.z.array(common_1.ContractIdentifierSchema) })
+        .object({
+        allowed: zod_1.z.boolean(),
+        missingPermissionCodes: zod_1.z.array(common_1.ContractIdentifierSchema),
+        issueCodes: zod_1.z.array(common_1.ContractIdentifierSchema),
+    })
         .strict(),
 }).strict();
 exports.DeclarativeWorkbenchTargetChoiceSchema = zod_1.z
@@ -471,14 +1100,27 @@ exports.DeclarativeWorkbenchTargetChoiceSchema = zod_1.z
 })
     .strict()
     .superRefine((value, context) => {
-    if (value.targetRevisionRef.id !== value.stableTargetRef.id || value.targetRevisionRef.kind !== value.stableTargetRef.kind) {
-        context.addIssue({ code: 'custom', path: ['targetRevisionRef'], message: 'Workbench target identity and exact revision must match.' });
+    if (value.targetRevisionRef.id !== value.stableTargetRef.id ||
+        value.targetRevisionRef.kind !== value.stableTargetRef.kind) {
+        context.addIssue({
+            code: 'custom',
+            path: ['targetRevisionRef'],
+            message: 'Workbench target identity and exact revision must match.',
+        });
     }
     if (value.providerRevisionRef.kind !== 'view-provider') {
-        context.addIssue({ code: 'custom', path: ['providerRevisionRef', 'kind'], message: 'Workbench targets require an exact view-provider revision.' });
+        context.addIssue({
+            code: 'custom',
+            path: ['providerRevisionRef', 'kind'],
+            message: 'Workbench targets require an exact view-provider revision.',
+        });
     }
     if (value.inputSchemaRevisionRef.kind !== 'schema') {
-        context.addIssue({ code: 'custom', path: ['inputSchemaRevisionRef', 'kind'], message: 'Workbench targets require an exact input schema revision.' });
+        context.addIssue({
+            code: 'custom',
+            path: ['inputSchemaRevisionRef', 'kind'],
+            message: 'Workbench targets require an exact input schema revision.',
+        });
     }
 });
 exports.DeclarativeCreateIntentSchema = zod_1.z
@@ -486,7 +1128,13 @@ exports.DeclarativeCreateIntentSchema = zod_1.z
     resourceId: common_1.ContractIdentifierSchema,
     templateRevisionRef: declarative_control_1.RevisionRefSchema.optional(),
     sourceRevisionRef: declarative_control_1.RevisionRefSchema.optional(),
-    identity: zod_1.z.object({ name: declarative_control_1.I18nTextSchema, description: declarative_control_1.I18nTextSchema.optional(), tags: zod_1.z.array(common_1.ContractIdentifierSchema).default([]) }).strict(),
+    identity: zod_1.z
+        .object({
+        name: declarative_control_1.I18nTextSchema,
+        description: declarative_control_1.I18nTextSchema.optional(),
+        tags: zod_1.z.array(common_1.ContractIdentifierSchema).default([]),
+    })
+        .strict(),
     surface: declarative_control_1.ProductSurfaceSchema,
     pathTemplate: zod_1.z.string().trim().min(1).optional(),
     placement: common_1.ContractIdentifierSchema.optional(),
@@ -495,7 +1143,11 @@ exports.DeclarativeCreateIntentSchema = zod_1.z
     .strict()
     .superRefine((value, context) => {
     if (Number(Boolean(value.templateRevisionRef)) + Number(Boolean(value.sourceRevisionRef)) !== 1) {
-        context.addIssue({ code: 'custom', path: ['templateRevisionRef'], message: 'Create intent requires exactly one governed template or source revision.' });
+        context.addIssue({
+            code: 'custom',
+            path: ['templateRevisionRef'],
+            message: 'Create intent requires exactly one governed template or source revision.',
+        });
     }
 });
 exports.DeclarativeDocumentSchema = zod_1.z.union([declarative_control_1.PageSchema, declarative_control_1.NavigationSchema, declarative_control_1.WorkbenchSchema]);
@@ -519,6 +1171,7 @@ exports.DeclarativePreparedReleaseTargetSchema = zod_1.z
     environmentRevisionRef: declarative_control_1.RevisionRefSchema,
     surface: declarative_control_1.ProductSurfaceSchema,
     routeClaimIndex: zod_1.z.number().int().nonnegative().optional(),
+    legacyRouteTakeoverAuthorization: declarative_control_1.LegacyRouteTakeoverAuthorizationSchema.optional(),
     placement: common_1.ContractIdentifierSchema.optional(),
     order: zod_1.z.number().int().optional(),
     isDefaultCandidate: zod_1.z.boolean().optional(),
@@ -530,6 +1183,82 @@ exports.DeclarativeEnvironmentChoiceSchema = exports.DeclarativeAuthoringChoiceS
     revisionRef: declarative_control_1.RevisionRefSchema,
     registration: exports.DeclarativeProductResourceRegistrationSchema,
 }).strict();
+exports.DeclarativeAuthoringPageInfoSchema = zod_1.z
+    .object({
+    hasMore: zod_1.z.boolean(),
+    nextPageToken: zod_1.z.string().trim().min(1).max(2048).optional(),
+    pageSize: zod_1.z.number().int().min(1).max(200),
+    returned: zod_1.z.number().int().nonnegative(),
+    total: zod_1.z.number().int().nonnegative().optional(),
+})
+    .strict()
+    .superRefine((value, context) => {
+    if (value.returned > value.pageSize)
+        context.addIssue({
+            code: 'custom',
+            path: ['returned'],
+            message: 'Returned items cannot exceed pageSize.',
+        });
+    if (value.hasMore !== Boolean(value.nextPageToken))
+        context.addIssue({
+            code: 'custom',
+            path: ['nextPageToken'],
+            message: 'hasMore and nextPageToken must agree.',
+        });
+});
+exports.DeclarativeAuthoringChoiceKindSchema = zod_1.z.enum([
+    'capability',
+    'ontology',
+    'view',
+    'action',
+    'access',
+    'published-target',
+    'workbench-target',
+]);
+const authoringChoicePage = (choiceKind, itemSchema) => zod_1.z
+    .object({
+    choiceKind: zod_1.z.literal(choiceKind),
+    items: zod_1.z.array(itemSchema),
+    pageInfo: exports.DeclarativeAuthoringPageInfoSchema,
+})
+    .strict()
+    .superRefine((value, context) => {
+    if (value.pageInfo.returned !== value.items.length)
+        context.addIssue({
+            code: 'custom',
+            path: ['pageInfo', 'returned'],
+            message: 'PageInfo returned must match choice item count.',
+        });
+});
+exports.DeclarativeAuthoringChoicePageSchema = zod_1.z.discriminatedUnion('choiceKind', [
+    authoringChoicePage('capability', exports.DeclarativeCapabilityAuthoringChoiceSchema),
+    authoringChoicePage('ontology', exports.DeclarativeBindingAuthoringChoiceSchema),
+    authoringChoicePage('view', exports.DeclarativeBindingAuthoringChoiceSchema),
+    authoringChoicePage('action', exports.DeclarativeBindingAuthoringChoiceSchema),
+    authoringChoicePage('access', exports.DeclarativeAuthoringChoiceSchema),
+    authoringChoicePage('published-target', exports.DeclarativeAuthoringChoiceSchema),
+    authoringChoicePage('workbench-target', exports.DeclarativeWorkbenchTargetChoiceSchema),
+]);
+exports.DeclarativeAuthoringResourcePageQuerySchema = zod_1.z
+    .object({
+    resourceKind: exports.DeclarativeResourceKindSchema.optional(),
+    resourceId: common_1.ContractIdentifierSchema.optional(),
+    surface: declarative_control_1.ProductSurfaceSchema.optional(),
+    placement: common_1.ContractIdentifierSchema.optional(),
+    search: zod_1.z.string().trim().min(1).max(256).optional(),
+    pageSize: zod_1.z.number().int().min(1).max(200).default(60),
+    pageToken: zod_1.z.string().trim().min(1).max(2048).optional(),
+})
+    .strict();
+exports.DeclarativeAuthoringChoicePageQuerySchema = zod_1.z
+    .object({
+    choiceKind: exports.DeclarativeAuthoringChoiceKindSchema,
+    surface: declarative_control_1.ProductSurfaceSchema.optional(),
+    search: zod_1.z.string().trim().min(1).max(256).optional(),
+    pageSize: zod_1.z.number().int().min(1).max(200).default(60),
+    pageToken: zod_1.z.string().trim().min(1).max(2048).optional(),
+})
+    .strict();
 const DeclarativePageDocumentSummarySchema = zod_1.z
     .object({
     resourceKind: zod_1.z.literal('page'),
@@ -559,7 +1288,13 @@ const DeclarativeWorkbenchDocumentSummarySchema = zod_1.z
     purpose: zod_1.z.enum(['instance', 'template']),
     supportedSurfaces: zod_1.z.array(declarative_control_1.ProductSurfaceSchema).min(1),
     routeClaims: zod_1.z.array(declarative_control_1.RouteClaimSchema).min(1),
-    layout: zod_1.z.object({ hostCapabilityRevisionRef: declarative_control_1.RevisionRefSchema, hostProviderRevisionRef: declarative_control_1.RevisionRefSchema, layoutPolicyRevisionRef: declarative_control_1.RevisionRefSchema }).strict(),
+    layout: zod_1.z
+        .object({
+        hostCapabilityRevisionRef: declarative_control_1.RevisionRefSchema,
+        hostProviderRevisionRef: declarative_control_1.RevisionRefSchema,
+        layoutPolicyRevisionRef: declarative_control_1.RevisionRefSchema,
+    })
+        .strict(),
     instanceCount: zod_1.z.number().int().nonnegative(),
     lifecycle: zod_1.z.enum(['active', 'deprecated', 'retired']),
     accessPolicy: declarative_control_1.AccessPolicySchema,
@@ -571,6 +1306,17 @@ exports.DeclarativeDocumentSummarySchema = zod_1.z.discriminatedUnion('resourceK
     DeclarativeNavigationDocumentSummarySchema,
     DeclarativeWorkbenchDocumentSummarySchema,
 ]);
+const declarativeReferenceTenantScopeKey = (scope) => JSON.stringify(scope);
+const DeclarativeDefinitionKindByResourceKind = {
+    page: 'page',
+    navigation: 'navigation',
+    workbench: 'workbench',
+};
+const DeclarativeReleaseKindByResourceKind = {
+    page: 'page-release',
+    navigation: 'navigation-release',
+    workbench: 'workbench-release',
+};
 exports.DeclarativeAuthoringResourceSummarySchema = zod_1.z
     .object({
     resourceKind: exports.DeclarativeResourceKindSchema,
@@ -584,17 +1330,90 @@ exports.DeclarativeAuthoringResourceSummarySchema = zod_1.z
     updatedAt: zod_1.z.string().datetime(),
     actorRef: declarative_control_1.StableRefSchema,
     preparedTargets: zod_1.z.array(exports.DeclarativePreparedReleaseTargetSchema),
-    releasePlacements: zod_1.z.array(zod_1.z.object({
+    releasePlacements: zod_1.z.array(zod_1.z
+        .object({
         releaseRevisionRef: declarative_control_1.RevisionRefSchema,
+        definitionRevisionRef: declarative_control_1.RevisionRefSchema,
         environmentRef: declarative_control_1.StableRefSchema,
         surface: declarative_control_1.ProductSurfaceSchema,
         routePath: zod_1.z.string().optional(),
         placement: common_1.ContractIdentifierSchema.optional(),
         order: zod_1.z.number().int().optional(),
         isDefaultCandidate: zod_1.z.boolean().optional(),
-    }).strict()),
+    })
+        .strict()),
 })
-    .strict();
+    .strict()
+    .superRefine((value, context) => {
+    const expectedDefinitionKind = DeclarativeDefinitionKindByResourceKind[value.resourceKind];
+    const expectedReleaseKind = DeclarativeReleaseKindByResourceKind[value.resourceKind];
+    const expectedTenantScope = declarativeReferenceTenantScopeKey(value.tenantScope);
+    const seenReleaseRefs = new Set();
+    value.releasePlacements.forEach((placement, index) => {
+        const releasePath = ['releasePlacements', index, 'releaseRevisionRef'];
+        const definitionPath = ['releasePlacements', index, 'definitionRevisionRef'];
+        if (placement.releaseRevisionRef.kind !== expectedReleaseKind) {
+            context.addIssue({
+                code: 'custom',
+                path: [...releasePath, 'kind'],
+                message: `Release placement must reference ${expectedReleaseKind}.`,
+            });
+        }
+        if (placement.releaseRevisionRef.visibility !== 'tenant' ||
+            declarativeReferenceTenantScopeKey(placement.releaseRevisionRef.tenantScope) !== expectedTenantScope) {
+            context.addIssue({
+                code: 'custom',
+                path: [...releasePath, 'tenantScope'],
+                message: 'Release placement must use the resource tenant scope.',
+            });
+        }
+        const releaseIdentity = `${placement.releaseRevisionRef.kind}:${placement.releaseRevisionRef.id}:${placement.releaseRevisionRef.revision}`;
+        if (seenReleaseRefs.has(releaseIdentity)) {
+            context.addIssue({
+                code: 'custom',
+                path: [...releasePath],
+                message: 'Release placements must not repeat an exact release revision.',
+            });
+        }
+        seenReleaseRefs.add(releaseIdentity);
+        if (placement.definitionRevisionRef.kind !== expectedDefinitionKind) {
+            context.addIssue({
+                code: 'custom',
+                path: [...definitionPath, 'kind'],
+                message: `Release placement definition must reference ${expectedDefinitionKind}.`,
+            });
+        }
+        if (placement.definitionRevisionRef.id !== value.resourceId) {
+            context.addIssue({
+                code: 'custom',
+                path: [...definitionPath, 'id'],
+                message: 'Release placement definition must reference the summary resource.',
+            });
+        }
+        if (placement.definitionRevisionRef.visibility !== 'tenant' ||
+            declarativeReferenceTenantScopeKey(placement.definitionRevisionRef.tenantScope) !== expectedTenantScope) {
+            context.addIssue({
+                code: 'custom',
+                path: [...definitionPath, 'tenantScope'],
+                message: 'Release placement definition must use the resource tenant scope.',
+            });
+        }
+    });
+});
+exports.DeclarativeAuthoringResourcePageSchema = zod_1.z
+    .object({
+    items: zod_1.z.array(exports.DeclarativeAuthoringResourceSummarySchema),
+    pageInfo: exports.DeclarativeAuthoringPageInfoSchema,
+})
+    .strict()
+    .superRefine((value, context) => {
+    if (value.pageInfo.returned !== value.items.length)
+        context.addIssue({
+            code: 'custom',
+            path: ['pageInfo', 'returned'],
+            message: 'PageInfo returned must match resource item count.',
+        });
+});
 exports.DeclarativeAuthoringHistoryEntrySchema = zod_1.z
     .object({
     revisionRef: declarative_control_1.RevisionRefSchema,
@@ -609,7 +1428,10 @@ exports.DeclarativeAuthoringHistoryEntrySchema = zod_1.z
 })
     .strict();
 exports.DeclarativeAuthoringHistorySchema = zod_1.z
-    .object({ items: zod_1.z.array(exports.DeclarativeAuthoringHistoryEntrySchema), nextBeforeVersion: zod_1.z.number().int().positive().optional() })
+    .object({
+    items: zod_1.z.array(exports.DeclarativeAuthoringHistoryEntrySchema),
+    nextBeforeVersion: zod_1.z.number().int().positive().optional(),
+})
     .strict();
 const DeclarativeRuntimeDiagnosticSchema = zod_1.z
     .object({
@@ -658,18 +1480,215 @@ exports.DeclarativePublicationItemResultSchema = zod_1.z
     resourceId: common_1.ContractIdentifierSchema,
     releaseRevisionRef: declarative_control_1.RevisionRefSchema,
     release: zod_1.z.union([declarative_control_1.PageReleaseSchema, declarative_control_1.NavigationReleaseSchema, declarative_control_1.WorkbenchReleaseSchema]),
-    bundle: zod_1.z.union([declarative_control_1.PageRuntimeBundleSchema, declarative_control_1.NavigationRuntimeBundleSchema, declarative_control_1.WorkbenchRuntimeBundleSchema]),
+    bundle: zod_1.z.union([declarative_control_1.PageRuntimeBundleSchema, declarative_control_1.NavigationRuntimeBundleSchema, declarative_control_1.WorkbenchRuntimeBundleSchema]).optional(),
 })
-    .strict();
-exports.DeclarativePublicationResultSchema = zod_1.z
+    .strict()
+    .superRefine((value, context) => {
+    const expectedReleaseKind = {
+        page: 'page-release',
+        navigation: 'navigation-release',
+        workbench: 'workbench-release',
+    }[value.resourceKind];
+    const expectedReleaseContract = {
+        page: 'PageRelease',
+        navigation: 'NavigationRelease',
+        workbench: 'WorkbenchRelease',
+    }[value.resourceKind];
+    const expectedBundleContract = {
+        page: 'PageRuntimeBundle',
+        navigation: 'NavigationRuntimeBundle',
+        workbench: 'WorkbenchRuntimeBundle',
+    }[value.resourceKind];
+    if (value.releaseRevisionRef.kind !== expectedReleaseKind ||
+        value.releaseRevisionRef.id !== value.release.releaseSlotId ||
+        value.release.contract !== expectedReleaseContract) {
+        context.addIssue({
+            code: 'custom',
+            path: ['releaseRevisionRef'],
+            message: 'A publication item must return the exact release identity for its resource kind.',
+        });
+    }
+    const definitionRef = value.release.contract === 'PageRelease'
+        ? value.release.pageRevisionRef
+        : value.release.contract === 'NavigationRelease'
+            ? value.release.navigationRevisionRef
+            : value.release.workbenchRevisionRef;
+    if (definitionRef.id !== value.resourceId) {
+        context.addIssue({
+            code: 'custom',
+            path: ['resourceId'],
+            message: 'A publication item release must identify the requested resource.',
+        });
+    }
+    const unavailable = value.release.operation === 'deactivate' || Boolean(value.release.legacyRestoration);
+    if (unavailable === Boolean(value.bundle)) {
+        context.addIssue({
+            code: 'custom',
+            path: ['bundle'],
+            message: unavailable
+                ? 'A deactivated or legacy-restored Release cannot publish an active Runtime Bundle.'
+                : 'An active declarative Release must publish its Runtime Bundle.',
+        });
+    }
+    if (value.bundle) {
+        const bundleDefinitionRef = value.bundle.contract === 'PageRuntimeBundle'
+            ? value.bundle.pageRevisionRef
+            : value.bundle.contract === 'NavigationRuntimeBundle'
+                ? value.bundle.navigationRevisionRef
+                : value.bundle.workbenchRevisionRef;
+        const sameRevision = (left, right) => left.kind === right.kind &&
+            left.id === right.id &&
+            left.ownerRepo === right.ownerRepo &&
+            left.revision === right.revision &&
+            left.schemaVersion === right.schemaVersion &&
+            left.contentHash === right.contentHash;
+        if (value.bundle.contract !== expectedBundleContract ||
+            !sameRevision(value.bundle.releaseRevisionRef, value.releaseRevisionRef) ||
+            !sameRevision(bundleDefinitionRef, definitionRef)) {
+            context.addIssue({
+                code: 'custom',
+                path: ['bundle'],
+                message: 'A publication item Runtime Bundle must pin the exact returned Release and definition revisions.',
+            });
+        }
+    }
+});
+const DeclarativeDirectPublicationResultSchema = zod_1.z
+    .object({
+    action: zod_1.z.enum(['publish', 'rollback']),
+    generation: zod_1.z.number().int().nonnegative(),
+    items: zod_1.z.array(exports.DeclarativePublicationItemResultSchema).min(1),
+    etag: zod_1.z.string().trim().min(1),
+})
+    .strict()
+    .superRefine((value, context) => {
+    const expectedOperation = value.action === 'publish' ? 'activate' : 'rollback';
+    value.items.forEach((item, index) => {
+        if (item.release.operation !== expectedOperation) {
+            context.addIssue({
+                code: 'custom',
+                path: ['items', index, 'release', 'operation'],
+                message: 'A direct publication result must match its requested action.',
+            });
+        }
+    });
+});
+const DeclarativeAtomicPublicationPlanResultSchema = zod_1.z
     .object({
-    action: zod_1.z.enum(['publish', 'rollback', 'publication-plan']),
+    action: zod_1.z.literal('publication-plan'),
     generation: zod_1.z.number().int().nonnegative(),
-    publicationPlanRevisionRef: declarative_control_1.RevisionRefSchema.optional(),
+    publicationPlanRevisionRef: declarative_control_1.RevisionRefSchema,
     items: zod_1.z.array(exports.DeclarativePublicationItemResultSchema).min(1),
     etag: zod_1.z.string().trim().min(1),
+})
+    .strict()
+    .superRefine((value, context) => {
+    if (value.publicationPlanRevisionRef.kind !== 'publication-plan') {
+        context.addIssue({
+            code: 'custom',
+            path: ['publicationPlanRevisionRef', 'kind'],
+            message: 'An atomic publication result must pin its Publication Plan revision.',
+        });
+    }
+});
+exports.DeclarativePublicationResultSchema = zod_1.z.union([
+    DeclarativeDirectPublicationResultSchema,
+    DeclarativeAtomicPublicationPlanResultSchema,
+]);
+exports.DeclarativeMigrationDiffEntrySchema = zod_1.z
+    .object({
+    path: zod_1.z.string().trim().startsWith('/').max(1024),
+    status: zod_1.z.enum(['added', 'changed', 'removed', 'unchanged']),
+    legacyValueHash: common_1.Sha256Schema.optional(),
+    declarativeValueHash: common_1.Sha256Schema.optional(),
+})
+    .strict();
+exports.DeclarativeMigrationBlockerSchema = zod_1.z
+    .object({
+    code: common_1.ContractIdentifierSchema,
+    path: zod_1.z.string().trim().max(1024).optional(),
+    message: zod_1.z.string().trim().min(1).max(4096),
+})
+    .strict();
+/**
+ * Immutable result of inspecting one predeclared legacy source. The fingerprint
+ * binds the source, target, diff, blockers and exact route-takeover authority;
+ * draft creation must re-read the source and reject any mismatch.
+ */
+exports.DeclarativeLegacyMigrationInspectionSchema = zod_1.z
+    .object({
+    contract: zod_1.z.literal('DeclarativeLegacyMigrationInspection'),
+    schemaVersion: zod_1.z.literal(1),
+    migrationKind: exports.DeclarativeLegacyMigrationKindSchema,
+    legacyResourceId: common_1.ContractIdentifierSchema,
+    sourceRevisionRef: declarative_control_1.RevisionRefSchema,
+    sourceContentHash: common_1.Sha256Schema,
+    legacyAdapterRevisionRef: declarative_control_1.RevisionRefSchema,
+    targetResourceRef: declarative_control_1.StableRefSchema,
+    environmentRevisionRef: declarative_control_1.RevisionRefSchema,
+    routeSpaceRevisionRef: declarative_control_1.RevisionRefSchema,
+    normalizedPath: zod_1.z.string().trim().startsWith('/').max(2048),
+    takeoverAuthorization: declarative_control_1.LegacyRouteTakeoverAuthorizationSchema,
+    diff: zod_1.z.array(exports.DeclarativeMigrationDiffEntrySchema).max(256),
+    blockers: zod_1.z.array(exports.DeclarativeMigrationBlockerSchema).max(128),
+    canCreateDraft: zod_1.z.boolean(),
+    inspectionFingerprint: common_1.Sha256Schema,
+})
+    .strict()
+    .superRefine((value, context) => {
+    const expectedKind = value.migrationKind === 'workbench' ? 'workbench' : 'page';
+    if (value.targetResourceRef.kind !== expectedKind) {
+        context.addIssue({
+            code: 'custom',
+            path: ['targetResourceRef', 'kind'],
+            message: `A ${value.migrationKind} migration must target ${expectedKind}.`,
+        });
+    }
+    if (value.takeoverAuthorization.inspectedSourceContentHash !== value.sourceContentHash ||
+        value.takeoverAuthorization.normalizedPath !== value.normalizedPath ||
+        value.takeoverAuthorization.targetResourceRef.kind !== value.targetResourceRef.kind ||
+        value.takeoverAuthorization.targetResourceRef.id !== value.targetResourceRef.id ||
+        value.takeoverAuthorization.targetResourceRef.ownerRepo !== value.targetResourceRef.ownerRepo) {
+        context.addIssue({
+            code: 'custom',
+            path: ['takeoverAuthorization'],
+            message: 'The takeover authority must bind the exact inspected source, path and target.',
+        });
+    }
+    if (value.canCreateDraft !== (value.blockers.length === 0)) {
+        context.addIssue({
+            code: 'custom',
+            path: ['canCreateDraft'],
+            message: 'Draft creation is allowed exactly when inspection has no blockers.',
+        });
+    }
+});
+exports.DeclarativeLegacyMigrationCreateDraftIntentSchema = zod_1.z
+    .object({
+    inspectionFingerprint: common_1.Sha256Schema,
+    expectedSourceRevisionRef: declarative_control_1.RevisionRefSchema,
+    expectedSourceContentHash: common_1.Sha256Schema,
+    idempotencyKey: zod_1.z.string().trim().min(1).max(256),
+})
+    .strict();
+exports.DeclarativeLegacyMigrationCreateDraftResultSchema = zod_1.z
+    .object({
+    migrationKind: exports.DeclarativeLegacyMigrationKindSchema,
+    legacyResourceId: common_1.ContractIdentifierSchema,
+    inspectionFingerprint: common_1.Sha256Schema,
+    sourceRevisionRef: declarative_control_1.RevisionRefSchema,
+    sourceContentHash: common_1.Sha256Schema,
+    takeoverAuthorization: declarative_control_1.LegacyRouteTakeoverAuthorizationSchema,
+    draft: exports.DeclarativeDraftResultSchema,
 })
     .strict();
+exports.DECLARATIVE_MIGRATION_ERROR_CODES = {
+    sourceChanged: 'DECLARATIVE_LEGACY_SOURCE_CHANGED',
+    reservedTakeoverForbidden: 'DECLARATIVE_RESERVED_ROUTE_TAKEOVER_FORBIDDEN',
+    takeoverScopeInvalid: 'DECLARATIVE_ROUTE_TAKEOVER_SCOPE_INVALID',
+    workbenchDefaultConflict: 'DECLARATIVE_WORKBENCH_DEFAULT_CONFLICT',
+    legacyWriteBlocked: 'DECLARATIVE_LEGACY_WRITE_BLOCKED',
+};
 exports.DeclarativeRetireResultSchema = zod_1.z
     .object({
     action: zod_1.z.literal('retire'),
@@ -682,7 +1701,7 @@ exports.DeclarativeRetireResultSchema = zod_1.z
     reason: zod_1.z.string().trim().min(1).max(4096),
 })
     .strict();
-exports.DeclarativeAuthoringCommandResultSchema = zod_1.z.discriminatedUnion('action', [
+exports.DeclarativeAuthoringCommandResultSchema = zod_1.z.union([
     exports.DeclarativeDraftResultSchema,
     exports.DeclarativeValidationResultSchema,
     exports.DeclarativePreviewResultSchema,
@@ -715,10 +1734,18 @@ exports.DeclarativeNavigationSeedMigrationResultSchema = zod_1.z
     .strict()
     .superRefine((value, context) => {
     if (value.outcome === 'review-required' && (!value.requiresReview || !value.draftRevisionRef)) {
-        context.addIssue({ code: 'custom', path: ['outcome'], message: 'Review-required migrations must expose their draft.' });
+        context.addIssue({
+            code: 'custom',
+            path: ['outcome'],
+            message: 'Review-required migrations must expose their draft.',
+        });
     }
     if ((value.outcome === 'already-active' || value.outcome === 'published') && !value.activeReleaseRevisionRef) {
-        context.addIssue({ code: 'custom', path: ['activeReleaseRevisionRef'], message: 'Active migrations require an exact release revision.' });
+        context.addIssue({
+            code: 'custom',
+            path: ['activeReleaseRevisionRef'],
+            message: 'Active migrations require an exact release revision.',
+        });
     }
 });
 exports.DeclarativeNavigationPlacementSchema = zod_1.z
@@ -752,27 +1779,161 @@ exports.DeclarativeAuthoringBootstrapSchema = zod_1.z
     accessChoices: zod_1.z.array(exports.DeclarativeAuthoringChoiceSchema),
     publishedTargets: zod_1.z.array(exports.DeclarativeAuthoringChoiceSchema),
     workbenchTargets: zod_1.z.array(exports.DeclarativeWorkbenchTargetChoiceSchema),
+    resourcesPageInfo: exports.DeclarativeAuthoringPageInfoSchema.optional(),
+    deferredChoiceKinds: zod_1.z.array(exports.DeclarativeAuthoringChoiceKindSchema).optional(),
     compilerRevisionRef: declarative_control_1.RevisionRefSchema,
     generation: zod_1.z.number().int().nonnegative(),
     contentHash: common_1.Sha256Schema,
 })
     .strict();
+exports.DeclarativeRuntimeRedirectSchema = zod_1.z
+    .object({
+    statusCode: zod_1.z.literal(302),
+    source: zod_1.z
+        .object({
+        resourceKind: zod_1.z.enum(['page', 'workbench']),
+        releaseSlotId: common_1.ContractIdentifierSchema,
+        activeReleaseRevisionRef: declarative_control_1.RevisionRefSchema,
+        routeClaim: declarative_control_1.CompiledRouteClaimSchema,
+    })
+        .strict(),
+    target: zod_1.z
+        .object({
+        resourceKind: zod_1.z.enum(['page', 'workbench']),
+        stableTargetRef: declarative_control_1.StableRefSchema,
+        releaseSlotId: common_1.ContractIdentifierSchema,
+        activeReleaseRevisionRef: declarative_control_1.RevisionRefSchema,
+        normalizedPath: zod_1.z.string().trim().startsWith('/'),
+    })
+        .strict(),
+})
+    .strict();
 exports.DeclarativeRuntimeResolvedSchema = zod_1.z
     .object({
     surface: declarative_control_1.ProductSurfaceSchema,
     normalizedPath: zod_1.z.string().trim().min(1),
+    routeParameters: zod_1.z.record(common_1.ContractIdentifierSchema, zod_1.z.string()),
     page: declarative_control_1.PageRuntimeBundleSchema.optional(),
     workbench: declarative_control_1.WorkbenchRuntimeBundleSchema.optional(),
+    redirect: exports.DeclarativeRuntimeRedirectSchema.optional(),
     navigation: declarative_control_1.NavigationRuntimeBundleSchema.optional(),
-    releaseSlotRefs: zod_1.z.array(zod_1.z.object({ resourceKind: exports.DeclarativeResourceKindSchema, releaseSlotId: common_1.ContractIdentifierSchema }).strict()),
+    releaseSlotRefs: zod_1.z.array(zod_1.z
+        .object({
+        resourceKind: exports.DeclarativeResourceKindSchema,
+        releaseSlotId: common_1.ContractIdentifierSchema,
+    })
+        .strict()),
+    generation: zod_1.z.number().int().nonnegative(),
+    contentHash: common_1.Sha256Schema,
+})
+    .strict()
+    .superRefine((value, context) => {
+    const outcomes = [value.page, value.workbench, value.redirect].filter(Boolean).length;
+    if (outcomes !== 1)
+        context.addIssue({
+            code: 'custom',
+            path: ['page'],
+            message: 'A resolved runtime must contain exactly one Page, Workbench, or governed redirect outcome.',
+        });
+});
+const DeclarativeRuntimeSafeBaseShape = {
+    surface: declarative_control_1.ProductSurfaceSchema,
+    normalizedPath: zod_1.z.string().trim().startsWith('/').max(2048),
+    routeParameters: zod_1.z
+        .any()
+        .superRefine(rejectRuntimePrototypeKeys)
+        .pipe(zod_1.z.record(common_1.ContractIdentifierSchema, zod_1.z.string().max(2048)))
+        .superRefine((parameters, context) => {
+        if (Object.keys(parameters).length > 32) {
+            context.addIssue({
+                code: 'custom',
+                path: [],
+                message: 'A resolved route cannot expose more than 32 parameters.',
+            });
+        }
+    }),
     generation: zod_1.z.number().int().nonnegative(),
+    etag: zod_1.z.string().trim().min(1),
     contentHash: common_1.Sha256Schema,
+};
+const DeclarativeRuntimeLegacyOutcomeSchema = zod_1.z
+    .object({
+    outcome: zod_1.z.literal('legacy'),
+    ...DeclarativeRuntimeSafeBaseShape,
+    legacyAdapterRevisionRef: declarative_control_1.RevisionRefSchema,
 })
     .strict()
     .superRefine((value, context) => {
-    if (!value.page && !value.workbench)
-        context.addIssue({ code: 'custom', path: ['page'], message: 'A resolved runtime must contain a Page or Workbench bundle.' });
+    if (value.legacyAdapterRevisionRef.kind !== 'legacy-route-adapter') {
+        context.addIssue({
+            code: 'custom',
+            path: ['legacyAdapterRevisionRef', 'kind'],
+            message: 'A legacy runtime outcome must pin a legacy-route-adapter revision.',
+        });
+    }
 });
+const DeclarativeRuntimeAuthorizedOutcomeSchema = zod_1.z
+    .object({
+    outcome: zod_1.z.literal('declarative'),
+    ...DeclarativeRuntimeSafeBaseShape,
+    resolved: exports.DeclarativeRuntimeResolvedSchema,
+})
+    .strict()
+    .superRefine((value, context) => {
+    if (value.resolved.surface !== value.surface || value.resolved.normalizedPath !== value.normalizedPath) {
+        context.addIssue({
+            code: 'custom',
+            path: ['resolved'],
+            message: 'An authorized declarative outcome must match its safe route envelope.',
+        });
+    }
+});
+const DeclarativeRuntimeDeniedOutcomeSchema = (outcome, code) => zod_1.z
+    .object({
+    outcome: zod_1.z.literal(outcome),
+    ...DeclarativeRuntimeSafeBaseShape,
+    code: zod_1.z.literal(code),
+})
+    .strict();
+const DeclarativeRuntimeForbiddenOutcomeSchema = zod_1.z.discriminatedUnion('resourceKind', [
+    zod_1.z
+        .object({
+        outcome: zod_1.z.literal('forbidden'),
+        ...DeclarativeRuntimeSafeBaseShape,
+        resourceKind: zod_1.z.literal('page'),
+        code: zod_1.z.literal('DECLARATIVE_PAGE_FORBIDDEN'),
+        presentation: declarative_control_1.PageRouteStatePresentationSchema.optional(),
+    })
+        .strict()
+        .superRefine((value, context) => {
+        if (value.presentation && value.presentation.surface !== value.surface) {
+            context.addIssue({
+                code: 'custom',
+                path: ['presentation', 'surface'],
+                message: 'A forbidden Page presentation must match the resolved route surface.',
+            });
+        }
+    }),
+    zod_1.z
+        .object({
+        outcome: zod_1.z.literal('forbidden'),
+        ...DeclarativeRuntimeSafeBaseShape,
+        resourceKind: zod_1.z.literal('workbench'),
+        code: zod_1.z.literal('DECLARATIVE_WORKBENCH_FORBIDDEN'),
+    })
+        .strict(),
+]);
+/**
+ * Browser-facing route resolution. Denied/unavailable/not-found branches are
+ * structurally unable to expose resource, Release-slot or revision metadata.
+ */
+exports.DeclarativeRuntimeResolveResultSchema = zod_1.z.union([
+    DeclarativeRuntimeLegacyOutcomeSchema,
+    DeclarativeRuntimeAuthorizedOutcomeSchema,
+    DeclarativeRuntimeForbiddenOutcomeSchema,
+    DeclarativeRuntimeDeniedOutcomeSchema('unavailable', 'DECLARATIVE_ROUTE_UNAVAILABLE'),
+    DeclarativeRuntimeDeniedOutcomeSchema('not-found', 'DECLARATIVE_ROUTE_NOT_FOUND'),
+]);
 exports.DeclarativeNavigationRuntimeBootstrapSchema = zod_1.z
     .object({
     placements: zod_1.z.array(zod_1.z
@@ -789,23 +1950,47 @@ exports.DeclarativeNavigationRuntimeBootstrapSchema = zod_1.z
         .superRefine((value, context) => {
         if (value.authority === 'legacy') {
             if (value.releaseSlotId || value.activeReleaseRevisionRef || value.bundle) {
-                context.addIssue({ code: 'custom', path: ['authority'], message: 'Legacy navigation placements cannot expose declarative Release or Bundle state.' });
+                context.addIssue({
+                    code: 'custom',
+                    path: ['authority'],
+                    message: 'Legacy navigation placements cannot expose declarative Release or Bundle state.',
+                });
             }
             if (value.state !== 'active')
-                context.addIssue({ code: 'custom', path: ['state'], message: 'Legacy navigation placements are active until an explicit declarative cutover.' });
+                context.addIssue({
+                    code: 'custom',
+                    path: ['state'],
+                    message: 'Legacy navigation placements are active until an explicit declarative cutover.',
+                });
             return;
         }
         if (!value.releaseSlotId || !value.activeReleaseRevisionRef) {
-            context.addIssue({ code: 'custom', path: ['releaseSlotId'], message: 'Declarative navigation placements require an exact active Release reference.' });
+            context.addIssue({
+                code: 'custom',
+                path: ['releaseSlotId'],
+                message: 'Declarative navigation placements require an exact active Release reference.',
+            });
         }
         if (value.state === 'active' && !value.bundle) {
-            context.addIssue({ code: 'custom', path: ['bundle'], message: 'An active declarative navigation placement requires its identity-filtered Runtime Bundle.' });
+            context.addIssue({
+                code: 'custom',
+                path: ['bundle'],
+                message: 'An active declarative navigation placement requires its identity-filtered Runtime Bundle.',
+            });
         }
         if (value.state === 'deactivated' && value.bundle) {
-            context.addIssue({ code: 'custom', path: ['bundle'], message: 'A deactivated declarative navigation placement cannot expose a Runtime Bundle.' });
+            context.addIssue({
+                code: 'custom',
+                path: ['bundle'],
+                message: 'A deactivated declarative navigation placement cannot expose a Runtime Bundle.',
+            });
         }
         if (value.bundle && (value.bundle.placement !== value.placement || value.bundle.surface !== value.surface)) {
-            context.addIssue({ code: 'custom', path: ['bundle'], message: 'The Navigation Runtime Bundle must match its placement and surface.' });
+            context.addIssue({
+                code: 'custom',
+                path: ['bundle'],
+                message: 'The Navigation Runtime Bundle must match its placement and surface.',
+            });
         }
     })),
     bundles: zod_1.z.array(declarative_control_1.NavigationRuntimeBundleSchema),
@@ -819,12 +2004,21 @@ exports.DeclarativeNavigationRuntimeBootstrapSchema = zod_1.z
     .superRefine((value, context) => {
     const active = value.placements.filter((entry) => entry.authority === 'declarative' && entry.state === 'active');
     if (active.length !== value.bundles.length || active.length !== value.releaseSlotIds.length) {
-        context.addIssue({ code: 'custom', path: ['placements'], message: 'Compatibility bundle arrays must exactly project active declarative placements.' });
+        context.addIssue({
+            code: 'custom',
+            path: ['placements'],
+            message: 'Compatibility bundle arrays must exactly project active declarative placements.',
+        });
         return;
     }
     active.forEach((entry, index) => {
-        if (entry.bundle?.contentHash !== value.bundles[index]?.contentHash || entry.releaseSlotId !== value.releaseSlotIds[index]) {
-            context.addIssue({ code: 'custom', path: ['placements', index], message: 'Navigation placement and compatibility bundle order must match.' });
+        if (entry.bundle?.contentHash !== value.bundles[index]?.contentHash ||
+            entry.releaseSlotId !== value.releaseSlotIds[index]) {
+            context.addIssue({
+                code: 'custom',
+                path: ['placements', index],
+                message: 'Navigation placement and compatibility bundle order must match.',
+            });
         }
     });
 });
@@ -865,9 +2059,17 @@ exports.DeclarativeWorkbenchRuntimeBootstrapSchema = zod_1.z
         .strict()
         .superRefine((value, context) => {
         if (value.authority === 'legacy' && value.visible)
-            context.addIssue({ code: 'custom', path: ['visible'], message: 'Legacy workbenches are delivered by the compatibility API, not by declarative summaries.' });
+            context.addIssue({
+                code: 'custom',
+                path: ['visible'],
+                message: 'Legacy workbenches are delivered by the compatibility API, not by declarative summaries.',
+            });
         if (value.state === 'deactivated' && value.visible)
-            context.addIssue({ code: 'custom', path: ['visible'], message: 'Deactivated workbenches cannot be visible.' });
+            context.addIssue({
+                code: 'custom',
+                path: ['visible'],
+                message: 'Deactivated workbenches cannot be visible.',
+            });
     })),
     legacySummaries: zod_1.z.array(exports.DeclarativeLegacyWorkbenchSummarySchema),
     summaries: zod_1.z.array(exports.DeclarativeWorkbenchSummarySchema),
@@ -882,10 +2084,18 @@ exports.DeclarativeWorkbenchRuntimeBootstrapSchema = zod_1.z
         .strict()
         .superRefine((value, context) => {
         if (value.authority === 'declarative' && (!value.releaseSlotId || !value.activeReleaseRevisionRef)) {
-            context.addIssue({ code: 'custom', path: ['releaseSlotId'], message: 'Declarative Workbench selection requires its exact Release slot and revision.' });
+            context.addIssue({
+                code: 'custom',
+                path: ['releaseSlotId'],
+                message: 'Declarative Workbench selection requires its exact Release slot and revision.',
+            });
         }
         if (value.authority === 'legacy' && (value.releaseSlotId || value.activeReleaseRevisionRef)) {
-            context.addIssue({ code: 'custom', path: ['releaseSlotId'], message: 'Legacy Workbench selection cannot expose declarative Release state.' });
+            context.addIssue({
+                code: 'custom',
+                path: ['releaseSlotId'],
+                message: 'Legacy Workbench selection cannot expose declarative Release state.',
+            });
         }
     })
         .nullable(),
@@ -906,8 +2116,20 @@ exports.DeclarativeNavigationImportResultSchema = zod_1.z
     .object({
     document: zod_1.z.unknown(),
     revisionRef: declarative_control_1.RevisionRefSchema,
-    provenance: zod_1.z.object({ sourceKey: zod_1.z.literal('server.ui.menus'), sourceRevisionRef: declarative_control_1.RevisionRefSchema, sourceContentHash: common_1.Sha256Schema }).strict(),
-    diff: zod_1.z.object({ added: zod_1.z.array(common_1.ContractIdentifierSchema), removed: zod_1.z.array(common_1.ContractIdentifierSchema), changed: zod_1.z.array(common_1.ContractIdentifierSchema) }).strict(),
+    provenance: zod_1.z
+        .object({
+        sourceKey: zod_1.z.literal('server.ui.menus'),
+        sourceRevisionRef: declarative_control_1.RevisionRefSchema,
+        sourceContentHash: common_1.Sha256Schema,
+    })
+        .strict(),
+    diff: zod_1.z
+        .object({
+        added: zod_1.z.array(common_1.ContractIdentifierSchema),
+        removed: zod_1.z.array(common_1.ContractIdentifierSchema),
+        changed: zod_1.z.array(common_1.ContractIdentifierSchema),
+    })
+        .strict(),
 })
     .strict();
 exports.DeclarativeRuntimeResolveQuerySchema = zod_1.z
@@ -916,10 +2138,60 @@ exports.DeclarativeRuntimeResolveQuerySchema = zod_1.z
     // Server resolves the single release-owned default for this surface.
     environmentId: common_1.ContractIdentifierSchema.optional(),
     surface: declarative_control_1.ProductSurfaceSchema,
-    path: zod_1.z.string().trim().min(1),
+    path: zod_1.z.string().trim().min(1).max(2048),
     navigationPlacement: common_1.ContractIdentifierSchema.optional(),
 })
     .strict();
+exports.DeclarativeRuntimeRouteOwnerQuerySchema = zod_1.z
+    .object({
+    // This tenant-scoped lookup is only called after authentication and team
+    // selection. Login, setup and other public boot routes stay owned by the
+    // predeclared legacy router and must not call this API.
+    environmentId: common_1.ContractIdentifierSchema.optional(),
+    surface: declarative_control_1.ProductSurfaceSchema,
+    path: zod_1.z.string().trim().min(1).max(2048),
+})
+    .strict();
+const DeclarativeRuntimeRouteParametersSchema = zod_1.z
+    .any()
+    .superRefine(rejectRuntimePrototypeKeys)
+    .pipe(zod_1.z.record(common_1.ContractIdentifierSchema, zod_1.z.string().max(2048)))
+    .superRefine((parameters, context) => {
+    const keys = Object.keys(parameters);
+    if (keys.length > 32)
+        context.addIssue({
+            code: 'custom',
+            path: [],
+            message: 'A resolved route cannot expose more than 32 parameters.',
+        });
+});
+const DeclarativeLegacyRouteOwnerSchema = zod_1.z
+    .object({
+    authority: zod_1.z.literal('legacy'),
+    legacyAdapterRevisionRef: declarative_control_1.RevisionRefSchema,
+    generation: zod_1.z.number().int().positive(),
+    etag: zod_1.z.string().trim().min(1),
+})
+    .strict();
+const DeclarativeReleaseRouteOwnerSchema = zod_1.z
+    .object({
+    authority: zod_1.z.literal('declarative'),
+    resourceKind: zod_1.z.enum(['page', 'workbench']),
+    releaseSlotId: common_1.ContractIdentifierSchema,
+    activeReleaseRevisionRef: declarative_control_1.RevisionRefSchema,
+    generation: zod_1.z.number().int().positive(),
+    etag: zod_1.z.string().trim().min(1),
+})
+    .strict();
+exports.DeclarativeRuntimeRouteOwnerSchema = zod_1.z
+    .object({
+    surface: declarative_control_1.ProductSurfaceSchema,
+    normalizedPath: zod_1.z.string().trim().startsWith('/').max(2048),
+    routeParameters: DeclarativeRuntimeRouteParametersSchema,
+    owner: zod_1.z.discriminatedUnion('authority', [DeclarativeLegacyRouteOwnerSchema, DeclarativeReleaseRouteOwnerSchema]),
+    contentHash: common_1.Sha256Schema,
+})
+    .strict();
 // Route claims are re-exported here because authoring clients select an existing
 // declaration claim; they never submit a URL or mutable endpoint as authority.
 exports.DeclarativeRouteClaimIntentSchema = declarative_control_1.RouteClaimSchema;