@inf-monkeys-tech/monkeys 1.0.72 → 1.1.1

package/lib/contracts/declarative-control-http.js

@@ -1,34 +1,56 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.DeclarativePublicationResultSchema = exports.DeclarativePublicationItemResultSchema = exports.DeclarativePreviewResultSchema = exports.DeclarativeValidationResultSchema = exports.DeclarativeDraftResultSchema = exports.DeclarativeAuthoringHistorySchema = exports.DeclarativeAuthoringHistoryEntrySchema = exports.DeclarativeAuthoringResourceSummarySchema = exports.DeclarativeDocumentSummarySchema = exports.DeclarativeEnvironmentChoiceSchema = exports.DeclarativePreparedReleaseTargetSchema = exports.DeclarativeRetireIntentSchema = exports.DeclarativeSaveDraftIntentSchema = exports.DeclarativeDocumentSchema = exports.DeclarativeCreateIntentSchema = exports.DeclarativeWorkbenchTargetChoiceSchema = exports.DeclarativeBindingAuthoringChoiceSchema = exports.DeclarativeProductResourceChoiceSchema = exports.DeclarativeRouteSpaceChoiceSchema = exports.DeclarativeCreateTemplateChoiceSchema = exports.ProductDeclarativeAuthoringCatalogSchema = exports.DeclarativeDefaultPolicyRegistrationSchema = exports.DeclarativeProductResourceRegistrationSchema = exports.DeclarativeEnvironmentResourceDocumentSchema = exports.DeclarativeLayoutPolicyResourceDocumentSchema = exports.DeclarativeShellResourceDocumentSchema = exports.DeclarativeRouteSpaceRegistrationSchema = exports.DeclarativeCreateTemplateRegistrationSchema = exports.DeclarativeCapabilityAuthoringChoiceSchema = exports.DeclarativeCapabilityAuthoringRegistrationSchema = exports.DeclarativeCapabilitySchemaDocumentSchema = exports.DeclarativeAuthoringChoiceSchema = exports.DeclarativePublicationPlanIntentSchema = exports.DeclarativeBatchOperationIntentSchema = exports.DeclarativeCommandIntentSchema = exports.DeclarativeReleaseTargetIntentSchema = exports.DeclarativeAudienceSimulationSchema = exports.DeclarativeRuntimeNavigationActionExecuteResultSchema = exports.DeclarativeRuntimeNavigationActionExecuteIntentSchema = exports.DeclarativeRuntimeActionExecuteResultSchema = exports.DeclarativeRuntimeActionExecuteIntentSchema = exports.DeclarativeRuntimeBindingQueryResultSchema = exports.DeclarativeRuntimeBindingQueryIntentSchema = exports.DeclarativeErrorEnvelopeSchema = exports.DeclarativeSuccessEnvelopeSchema = exports.declarativeControlRoutes = exports.DeclarativeAuthoringActionSchema = exports.DeclarativeResourceKindSchema = exports.DECLARATIVE_CONTROL_CONTROLLER_PATH = exports.DECLARATIVE_CONTROL_API_PREFIX = void 0;
-exports.DeclarativeRouteClaimIntentSchema = exports.DeclarativeRuntimeResolveQuerySchema = exports.DeclarativeNavigationImportResultSchema = exports.DeclarativeNavigationImportIntentSchema = exports.DeclarativeWorkbenchRuntimeBootstrapSchema = exports.DeclarativeLegacyWorkbenchSummarySchema = exports.DeclarativeWorkbenchSummarySchema = exports.DeclarativeNavigationRuntimeBootstrapSchema = exports.DeclarativeRuntimeResolvedSchema = exports.DeclarativeAuthoringBootstrapSchema = exports.DeclarativeNavigationPlacementSchema = exports.DeclarativeNavigationSeedMigrationResultSchema = exports.DeclarativeNavigationSeedMigrationIntentSchema = exports.DeclarativeAuthoringCommandResultSchema = exports.DeclarativeRetireResultSchema = void 0;
+exports.DeclarativeEnvironmentChoiceSchema = exports.DeclarativePreparedReleaseTargetSchema = exports.DeclarativeRetireIntentSchema = exports.DeclarativeSaveDraftIntentSchema = exports.DeclarativeDocumentSchema = exports.DeclarativeCreateIntentSchema = exports.DeclarativeWorkbenchTargetChoiceSchema = exports.DeclarativeBindingAuthoringChoiceSchema = exports.DeclarativeProductResourceChoiceSchema = exports.DeclarativeRouteSpaceChoiceSchema = exports.DeclarativeCreateTemplateChoiceSchema = exports.ProductDeclarativeAuthoringCatalogSchema = exports.DeclarativeSchemaDefinitionRegistrationSchema = exports.DeclarativeDomainCommandDefinitionRegistrationSchema = exports.DeclarativeDomainQueryDefinitionRegistrationSchema = exports.DeclarativeDefaultPolicyRegistrationSchema = exports.DeclarativeProductResourceRegistrationSchema = exports.DeclarativeEnvironmentResourceDocumentSchema = exports.DeclarativeLayoutPolicyResourceDocumentSchema = exports.DeclarativeShellResourceDocumentSchema = exports.DeclarativeRouteSpaceRegistrationSchema = exports.DeclarativeCreateTemplateRegistrationSchema = exports.DeclarativeCapabilityAuthoringChoiceSchema = exports.ProductDeclarativeCapabilityRegistrationSchema = exports.DesignCapabilityCatalogArtifactSchema = exports.DesignCapabilityCatalogEntrySchema = exports.DeclarativeCapabilityAuthoringRegistrationSchema = exports.DeclarativeCapabilitySchemaDocumentSchema = exports.DeclarativeAuthoringChoiceSchema = exports.DeclarativePublicationPlanIntentSchema = exports.DeclarativeBatchOperationIntentSchema = exports.DeclarativeCommandIntentSchema = exports.DeclarativeReleaseTargetIntentSchema = exports.DeclarativeAudienceSimulationSchema = exports.DeclarativeRuntimeNavigationActionExecuteResultSchema = exports.DeclarativeRuntimeNavigationActionExecuteIntentSchema = exports.DeclarativeRuntimeActionExecuteResultSchema = exports.DeclarativeNativeDownloadSchema = exports.DeclarativeRuntimeActionExecuteIntentSchema = exports.DeclarativeRuntimeActionRoutePathSchema = exports.DeclarativeRuntimeBindingQueryResultSchema = exports.DeclarativeRuntimeBindingQueryIntentSchema = exports.DeclarativeErrorEnvelopeSchema = exports.DeclarativeSuccessEnvelopeSchema = exports.declarativeControlRoutes = exports.DeclarativeLegacyMigrationKindSchema = exports.DeclarativeAuthoringActionSchema = exports.DeclarativeResourceKindSchema = exports.DECLARATIVE_CONTROL_CONTROLLER_PATH = exports.DECLARATIVE_CONTROL_API_PREFIX = void 0;
+exports.DeclarativeRouteClaimIntentSchema = exports.DeclarativeRuntimeRouteOwnerSchema = exports.DeclarativeRuntimeRouteOwnerQuerySchema = exports.DeclarativeRuntimeResolveQuerySchema = exports.DeclarativeNavigationImportResultSchema = exports.DeclarativeNavigationImportIntentSchema = exports.DeclarativeWorkbenchRuntimeBootstrapSchema = exports.DeclarativeLegacyWorkbenchSummarySchema = exports.DeclarativeWorkbenchSummarySchema = exports.DeclarativeNavigationRuntimeBootstrapSchema = exports.DeclarativeRuntimeResolveResultSchema = exports.DeclarativeRuntimeResolvedSchema = exports.DeclarativeRuntimeRedirectSchema = exports.DeclarativeAuthoringBootstrapSchema = exports.DeclarativeNavigationPlacementSchema = exports.DeclarativeNavigationSeedMigrationResultSchema = exports.DeclarativeNavigationSeedMigrationIntentSchema = exports.DeclarativeAuthoringCommandResultSchema = exports.DeclarativeRetireResultSchema = exports.DECLARATIVE_MIGRATION_ERROR_CODES = exports.DeclarativeLegacyMigrationCreateDraftResultSchema = exports.DeclarativeLegacyMigrationCreateDraftIntentSchema = exports.DeclarativeLegacyMigrationInspectionSchema = exports.DeclarativeMigrationBlockerSchema = exports.DeclarativeMigrationDiffEntrySchema = exports.DeclarativePublicationResultSchema = exports.DeclarativePublicationItemResultSchema = exports.DeclarativePreviewResultSchema = exports.DeclarativeValidationResultSchema = exports.DeclarativeDraftResultSchema = exports.DeclarativeAuthoringHistorySchema = exports.DeclarativeAuthoringHistoryEntrySchema = exports.DeclarativeAuthoringResourcePageSchema = exports.DeclarativeAuthoringResourceSummarySchema = exports.DeclarativeDocumentSummarySchema = exports.DeclarativeAuthoringChoicePageQuerySchema = exports.DeclarativeAuthoringResourcePageQuerySchema = exports.DeclarativeAuthoringChoicePageSchema = exports.DeclarativeAuthoringChoiceKindSchema = exports.DeclarativeAuthoringPageInfoSchema = void 0;
 const zod_1 = require("zod");
+const page_expression_1 = require("./page-expression");
 const declarative_control_1 = require("./declarative-control");
 const common_1 = require("./common");
-exports.DECLARATIVE_CONTROL_API_PREFIX = '/api/declarative-control';
-exports.DECLARATIVE_CONTROL_CONTROLLER_PATH = '/declarative-control';
-exports.DeclarativeResourceKindSchema = zod_1.z.enum(['page', 'navigation', 'workbench']);
-exports.DeclarativeAuthoringActionSchema = zod_1.z.enum(['validate', 'preview', 'publish', 'rollback']);
+const capability_1 = require("./capability");
+const render_1 = require("./render");
+const semantic_1 = require("./semantic");
+exports.DECLARATIVE_CONTROL_API_PREFIX = "/api/declarative-control";
+exports.DECLARATIVE_CONTROL_CONTROLLER_PATH = "/declarative-control";
+exports.DeclarativeResourceKindSchema = zod_1.z.enum([
+    "page",
+    "navigation",
+    "workbench",
+]);
+exports.DeclarativeAuthoringActionSchema = zod_1.z.enum([
+    "validate",
+    "preview",
+    "publish",
+    "rollback",
+]);
+exports.DeclarativeLegacyMigrationKindSchema = zod_1.z.enum([
+    "page",
+    "page-data-assets",
+    "workbench",
+]);
 const encodePath = (value) => encodeURIComponent(value);
 exports.declarativeControlRoutes = {
+    validate: (kind, resourceId) => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/resources/${kind}/${encodePath(resourceId)}/validate`,
+    preview: (kind, resourceId) => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/resources/${kind}/${encodePath(resourceId)}/preview`,
+    publish: (kind, resourceId) => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/resources/${kind}/${encodePath(resourceId)}/publish`,
+    rollback: (kind, resourceId, releaseSlotId) => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/resources/${kind}/${encodePath(resourceId)}/releases/${encodePath(releaseSlotId)}/rollback`,
+    slotAuthority: (kind, slotId) => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/slot-authorities/${kind}/${encodePath(slotId)}`,
     resources: (kind) => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/resources/${kind}`,
     authoringCreate: (kind) => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/authoring/resources/${kind}`,
     draft: (kind, resourceId) => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/resources/${kind}/${encodePath(resourceId)}/draft`,
     revisions: (kind, resourceId) => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/resources/${kind}/${encodePath(resourceId)}/revisions`,
     authoringHistory: (kind, resourceId) => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/authoring/resources/${kind}/${encodePath(resourceId)}/history`,
     releaseRevisions: (kind, resourceId, releaseSlotId) => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/resources/${kind}/${encodePath(resourceId)}/releases/${encodePath(releaseSlotId)}/revisions`,
-    validate: (kind, resourceId) => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/resources/${kind}/${encodePath(resourceId)}/validate`,
-    preview: (kind, resourceId) => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/resources/${kind}/${encodePath(resourceId)}/preview`,
-    publish: (kind, resourceId) => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/resources/${kind}/${encodePath(resourceId)}/publish`,
-    rollback: (kind, resourceId, releaseSlotId) => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/resources/${kind}/${encodePath(resourceId)}/releases/${encodePath(releaseSlotId)}/rollback`,
     references: (kind, resourceId) => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/resources/${kind}/${encodePath(resourceId)}/references`,
     retire: (kind, resourceId) => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/resources/${kind}/${encodePath(resourceId)}/retire`,
-    slotAuthority: (kind, slotId) => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/slot-authorities/${kind}/${encodePath(slotId)}`,
     authoringBootstrap: () => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/authoring/bootstrap`,
     authoringPrepare: (kind, resourceId, action) => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/authoring/resources/${kind}/${encodePath(resourceId)}/${action}`,
     navigationPlacements: () => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/authoring/navigation/placements`,
     navigationImport: (placement) => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/authoring/navigation/placements/${encodePath(placement)}/import`,
     navigationSeedMigration: (placement) => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/authoring/navigation/placements/${encodePath(placement)}/seed-migration`,
+    migrationInspect: (kind, legacyResourceId) => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/authoring/migrations/${kind}/${encodePath(legacyResourceId)}/inspect`,
+    migrationCreateDraft: (kind, legacyResourceId) => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/authoring/migrations/${kind}/${encodePath(legacyResourceId)}/draft`,
+    migrationCutover: (kind, targetResourceId) => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/authoring/resources/${kind === "workbench" ? "workbench" : "page"}/${encodePath(targetResourceId)}/publish`,
+    migrationRollback: (kind, targetResourceId) => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/authoring/resources/${kind === "workbench" ? "workbench" : "page"}/${encodePath(targetResourceId)}/rollback`,
     publicationPlan: () => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/authoring/publication-plans`,
     runtimeResolve: () => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/runtime/resolve`,
     runtimeNavigationBootstrap: () => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/runtime/navigations/bootstrap`,
@@ -37,6 +59,7 @@ exports.declarativeControlRoutes = {
     runtimeNavigation: (releaseSlotId) => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/runtime/navigations/${encodePath(releaseSlotId)}`,
     runtimeWorkbench: (releaseSlotId) => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/runtime/workbenches/${encodePath(releaseSlotId)}`,
     runtimePreview: () => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/runtime/previews`,
+    runtimePreviewBindingQuery: (bindingId) => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/runtime/previews/bindings/${encodePath(bindingId)}/query`,
     runtimeBindingQuery: (releaseSlotId, bindingId) => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/runtime/pages/${encodePath(releaseSlotId)}/bindings/${encodePath(bindingId)}/query`,
     runtimeActionExecute: (releaseSlotId, actionBindingId) => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/runtime/pages/${encodePath(releaseSlotId)}/actions/${encodePath(actionBindingId)}/execute`,
     runtimeNavigationActionExecute: (releaseSlotId, nodeId) => `${exports.DECLARATIVE_CONTROL_API_PREFIX}/runtime/navigations/${encodePath(releaseSlotId)}/actions/${encodePath(nodeId)}/execute`,
@@ -59,15 +82,100 @@ const DeclarativeRuntimePageTargetSchema = zod_1.z
 })
     .strict()
     .superRefine((value, context) => {
-    if (value.activeReleaseRevisionRef.kind !== 'page-release') {
-        context.addIssue({ code: 'custom', path: ['activeReleaseRevisionRef', 'kind'], message: 'Runtime requests require an exact page-release revision.' });
+    if (value.activeReleaseRevisionRef.kind !== "page-release") {
+        context.addIssue({
+            code: "custom",
+            path: ["activeReleaseRevisionRef", "kind"],
+            message: "Runtime requests require an exact page-release revision.",
+        });
     }
-    if (value.pageRevisionRef.kind !== 'page') {
-        context.addIssue({ code: 'custom', path: ['pageRevisionRef', 'kind'], message: 'Runtime requests require an exact page revision.' });
+    if (value.pageRevisionRef.kind !== "page") {
+        context.addIssue({
+            code: "custom",
+            path: ["pageRevisionRef", "kind"],
+            message: "Runtime requests require an exact page revision.",
+        });
     }
 });
+const forbiddenRuntimeParameterKeys = new Set([
+    "__proto__",
+    "prototype",
+    "constructor",
+]);
+const rejectRuntimePrototypeKeys = (value, context, path = []) => {
+    if (Array.isArray(value)) {
+        value.forEach((child, index) => rejectRuntimePrototypeKeys(child, context, [...path, index]));
+        return;
+    }
+    if (!value || typeof value !== "object")
+        return;
+    for (const key of Object.keys(value)) {
+        if (forbiddenRuntimeParameterKeys.has(key)) {
+            context.addIssue({
+                code: "custom",
+                path: [...path, key],
+                message: "Prototype-mutating runtime parameter keys are forbidden.",
+            });
+        }
+        rejectRuntimePrototypeKeys(value[key], context, [...path, key]);
+    }
+};
+const runtimeParameterDepth = (value, depth = 0) => {
+    if (value === null || typeof value !== "object")
+        return depth;
+    const values = Array.isArray(value)
+        ? value
+        : Object.values(value);
+    return values.reduce((maximum, child) => Math.max(maximum, runtimeParameterDepth(child, depth + 1)), depth);
+};
+const DeclarativeRuntimeParametersSchema = zod_1.z
+    .any()
+    .superRefine(rejectRuntimePrototypeKeys)
+    .pipe(common_1.JsonObjectSchema.superRefine((value, context) => {
+    const keys = Object.keys(value);
+    if (keys.length > 32)
+        context.addIssue({
+            code: "custom",
+            path: [],
+            message: "Runtime binding parameters cannot contain more than 32 keys.",
+        });
+    keys.forEach((key) => {
+        if (!common_1.ContractIdentifierSchema.safeParse(key).success)
+            context.addIssue({
+                code: "custom",
+                path: [key],
+                message: "Runtime parameter keys must be contract identifiers.",
+            });
+    });
+    if (runtimeParameterDepth(value) > 8)
+        context.addIssue({
+            code: "custom",
+            path: [],
+            message: "Runtime binding parameters cannot exceed 8 nested levels.",
+        });
+    const serialized = JSON.stringify(value);
+    if (new TextEncoder().encode(serialized).length > 16 * 1024)
+        context.addIssue({
+            code: "custom",
+            path: [],
+            message: "Runtime binding parameters cannot exceed 16 KiB.",
+        });
+    const visit = (entry, path) => {
+        if (typeof entry === "string" && entry.length > 2048)
+            context.addIssue({
+                code: "custom",
+                path,
+                message: "Runtime parameter string values cannot exceed 2048 characters.",
+            });
+        else if (Array.isArray(entry))
+            entry.forEach((child, index) => visit(child, [...path, index]));
+        else if (entry && typeof entry === "object")
+            Object.entries(entry).forEach(([key, child]) => visit(child, [...path, key]));
+    };
+    visit(value, []);
+}));
 exports.DeclarativeRuntimeBindingQueryIntentSchema = DeclarativeRuntimePageTargetSchema.safeExtend({
-    parameters: common_1.JsonObjectSchema.default({}),
+    parameters: DeclarativeRuntimeParametersSchema.default({}),
     pageSize: zod_1.z.number().int().min(1).max(200).default(60),
     cursor: zod_1.z.string().trim().min(1).max(8192).optional(),
 }).strict();
@@ -78,6 +186,7 @@ exports.DeclarativeRuntimeBindingQueryResultSchema = zod_1.z
     pageRevisionRef: declarative_control_1.RevisionRefSchema,
     renderModelSchemaRevisionRef: declarative_control_1.RevisionRefSchema,
     model: common_1.JsonObjectSchema,
+    refresh: zod_1.z.object({ continue: zod_1.z.boolean() }).strict().optional(),
     pageInfo: zod_1.z
         .object({
         pageSize: zod_1.z.number().int().positive(),
@@ -92,10 +201,91 @@ exports.DeclarativeRuntimeBindingQueryResultSchema = zod_1.z
     contentHash: common_1.Sha256Schema,
 })
     .strict();
+exports.DeclarativeRuntimeActionRoutePathSchema = zod_1.z
+    .string()
+    .min(1)
+    .max(8192)
+    .refine((value) => value.startsWith("/") &&
+    !value.startsWith("//") &&
+    value === value.trim() &&
+    !/[?#\\\u0000-\u0020\u007f]/.test(value) &&
+    !value.includes("://"), "An Action route requires an application-relative pathname without query or fragment.");
 exports.DeclarativeRuntimeActionExecuteIntentSchema = DeclarativeRuntimePageTargetSchema.safeExtend({
     intent: common_1.JsonObjectSchema,
+    recoveryOnly: zod_1.z.literal(true).optional(),
+    pageState: DeclarativeRuntimeParametersSchema,
+    files: zod_1.z
+        .record(zod_1.z.string().min(1).max(256), zod_1.z.union([
+        zod_1.z
+            .object({
+            fileName: zod_1.z.string().min(1).max(255),
+            content: zod_1.z.string().max(1048576),
+        })
+            .strict(),
+        zod_1.z
+            .object({
+            fileName: zod_1.z.string().min(1).max(255),
+            canonicalUri: zod_1.z
+                .string()
+                .regex(/^file:\/\/[^\s/?#]+$/)
+                .max(1024),
+        })
+            .strict(),
+    ]))
+        .superRefine((files, context) => {
+        if (Object.keys(files).length > 4 ||
+            Object.values(files).reduce((bytes, file) => bytes +
+                ("content" in file
+                    ? new TextEncoder().encode(file.content).byteLength
+                    : 0), 0) > 1048576)
+            context.addIssue({
+                code: "custom",
+                message: "Action files exceed the transient input budget.",
+            });
+    })
+        .optional(),
+    scope: zod_1.z
+        .unknown()
+        .superRefine((value, context) => {
+        try {
+            (0, page_expression_1.assertPageValueBudget)(value);
+        }
+        catch {
+            context.addIssue({
+                code: "custom",
+                message: "Action instance scope exceeds the safe JSON budget.",
+            });
+        }
+    })
+        .pipe(common_1.JsonObjectSchema)
+        .optional(),
+    routePath: exports.DeclarativeRuntimeActionRoutePathSchema.optional(),
     idempotencyKey: zod_1.z.string().trim().min(1).max(256),
 }).strict();
+exports.DeclarativeNativeDownloadSchema = zod_1.z
+    .object({
+    url: zod_1.z
+        .string()
+        .min(1)
+        .max(32768)
+        .refine((value) => {
+        try {
+            const url = new URL(value);
+            return (["http:", "https:"].includes(url.protocol) &&
+                !url.username &&
+                !url.password);
+        }
+        catch {
+            return false;
+        }
+    }, "A native download requires an HTTP URL without credentials."),
+    fileName: zod_1.z
+        .string()
+        .min(1)
+        .max(2048)
+        .regex(/^[^\u0000-\u001f\u007f/\\]+$/),
+})
+    .strict();
 exports.DeclarativeRuntimeActionExecuteResultSchema = zod_1.z
     .object({
     actionBindingId: common_1.ContractIdentifierSchema,
@@ -104,13 +294,31 @@ exports.DeclarativeRuntimeActionExecuteResultSchema = zod_1.z
     commandRevisionRef: declarative_control_1.RevisionRefSchema,
     resultSchemaRevisionRef: declarative_control_1.RevisionRefSchema,
     result: common_1.JsonObjectSchema,
+    download: exports.DeclarativeNativeDownloadSchema.optional(),
+    downloadError: zod_1.z
+        .object({
+        code: zod_1.z.enum([
+            "DECLARATIVE_DOWNLOAD_FORBIDDEN",
+            "DECLARATIVE_DOWNLOAD_UNAVAILABLE",
+        ]),
+    })
+        .strict()
+        .optional(),
     idempotentReplay: zod_1.z.boolean(),
     lineageRef: declarative_control_1.StableRefSchema,
     refreshBindingIds: zod_1.z.array(common_1.ContractIdentifierSchema),
     navigationTargetRef: declarative_control_1.StableRefSchema.optional(),
     contentHash: common_1.Sha256Schema,
 })
-    .strict();
+    .strict()
+    .superRefine((value, context) => {
+    if (value.download && value.downloadError)
+        context.addIssue({
+            code: "custom",
+            path: ["downloadError"],
+            message: "A download response cannot contain both a target and an error.",
+        });
+});
 const DeclarativeRuntimeNavigationTargetSchema = zod_1.z
     .object({
     activeReleaseRevisionRef: declarative_control_1.RevisionRefSchema,
@@ -118,11 +326,19 @@ const DeclarativeRuntimeNavigationTargetSchema = zod_1.z
 })
     .strict()
     .superRefine((value, context) => {
-    if (value.activeReleaseRevisionRef.kind !== 'navigation-release') {
-        context.addIssue({ code: 'custom', path: ['activeReleaseRevisionRef', 'kind'], message: 'Navigation Action requests require an exact navigation-release revision.' });
+    if (value.activeReleaseRevisionRef.kind !== "navigation-release") {
+        context.addIssue({
+            code: "custom",
+            path: ["activeReleaseRevisionRef", "kind"],
+            message: "Navigation Action requests require an exact navigation-release revision.",
+        });
     }
-    if (value.navigationRevisionRef.kind !== 'navigation') {
-        context.addIssue({ code: 'custom', path: ['navigationRevisionRef', 'kind'], message: 'Navigation Action requests require an exact navigation revision.' });
+    if (value.navigationRevisionRef.kind !== "navigation") {
+        context.addIssue({
+            code: "custom",
+            path: ["navigationRevisionRef", "kind"],
+            message: "Navigation Action requests require an exact navigation revision.",
+        });
     }
 });
 exports.DeclarativeRuntimeNavigationActionExecuteIntentSchema = DeclarativeRuntimeNavigationTargetSchema.safeExtend({
@@ -151,8 +367,12 @@ exports.DeclarativeAudienceSimulationSchema = zod_1.z
         .default([])
         .superRefine((references, context) => {
         references.forEach((reference, index) => {
-            if (reference.kind !== 'group')
-                context.addIssue({ code: 'custom', path: [index, 'kind'], message: 'Audience simulation only accepts stable Group refs.' });
+            if (reference.kind !== "group")
+                context.addIssue({
+                    code: "custom",
+                    path: [index, "kind"],
+                    message: "Audience simulation only accepts stable Group refs.",
+                });
         });
     }),
     permissions: zod_1.z.array(common_1.ContractIdentifierSchema).max(512).default([]),
@@ -164,17 +384,28 @@ exports.DeclarativeReleaseTargetIntentSchema = zod_1.z
     environmentRevisionRef: declarative_control_1.RevisionRefSchema,
     surface: declarative_control_1.ProductSurfaceSchema,
     routeClaimIndex: zod_1.z.number().int().nonnegative().optional(),
+    legacyRouteTakeoverAuthorization: declarative_control_1.LegacyRouteTakeoverAuthorizationSchema.optional(),
     placement: common_1.ContractIdentifierSchema.optional(),
     order: zod_1.z.number().int().optional(),
     isDefaultCandidate: zod_1.z.boolean().optional(),
 })
     .strict()
     .superRefine((value, context) => {
-    if (value.environmentRef.kind !== 'environment' || value.environmentRevisionRef.kind !== 'environment') {
-        context.addIssue({ code: 'custom', path: ['environmentRevisionRef', 'kind'], message: 'Release targets require an exact environment registration.' });
+    if (value.environmentRef.kind !== "environment" ||
+        value.environmentRevisionRef.kind !== "environment") {
+        context.addIssue({
+            code: "custom",
+            path: ["environmentRevisionRef", "kind"],
+            message: "Release targets require an exact environment registration.",
+        });
     }
-    if (value.environmentRef.id !== value.environmentRevisionRef.id || value.environmentRef.ownerRepo !== value.environmentRevisionRef.ownerRepo) {
-        context.addIssue({ code: 'custom', path: ['environmentRevisionRef'], message: 'The exact environment revision must identify the selected environment.' });
+    if (value.environmentRef.id !== value.environmentRevisionRef.id ||
+        value.environmentRef.ownerRepo !== value.environmentRevisionRef.ownerRepo) {
+        context.addIssue({
+            code: "custom",
+            path: ["environmentRevisionRef"],
+            message: "The exact environment revision must identify the selected environment.",
+        });
     }
 });
 exports.DeclarativeCommandIntentSchema = zod_1.z
@@ -193,11 +424,35 @@ exports.DeclarativeCommandIntentSchema = zod_1.z
     .strict();
 exports.DeclarativeBatchOperationIntentSchema = zod_1.z
     .object({
+    action: zod_1.z.enum(["publish", "rollback", "deactivate"]).default("publish"),
     resourceKind: exports.DeclarativeResourceKindSchema,
     resourceId: common_1.ContractIdentifierSchema,
     intent: exports.DeclarativeCommandIntentSchema,
 })
-    .strict();
+    .strict()
+    .superRefine((value, context) => {
+    if (value.action !== "publish" && !value.intent.releaseSlotId) {
+        context.addIssue({
+            code: "custom",
+            path: ["intent", "releaseSlotId"],
+            message: `${value.action} requires an exact active Release slot.`,
+        });
+    }
+    if (value.action === "rollback" && !value.intent.targetReleaseVersion) {
+        context.addIssue({
+            code: "custom",
+            path: ["intent", "targetReleaseVersion"],
+            message: "rollback requires an exact historical Release version.",
+        });
+    }
+    if (value.action !== "rollback" && value.intent.targetReleaseVersion) {
+        context.addIssue({
+            code: "custom",
+            path: ["intent", "targetReleaseVersion"],
+            message: "Only rollback may select a historical Release version.",
+        });
+    }
+});
 exports.DeclarativePublicationPlanIntentSchema = zod_1.z
     .object({
     idempotencyKey: zod_1.z.string().trim().min(1).max(256),
@@ -212,7 +467,7 @@ exports.DeclarativeAuthoringChoiceSchema = zod_1.z
     label: declarative_control_1.I18nTextSchema,
     accessPolicy: declarative_control_1.AccessPolicySchema.optional(),
     surface: declarative_control_1.ProductSurfaceSchema.optional(),
-    status: zod_1.z.enum(['active', 'deprecated', 'retired', 'unavailable']),
+    status: zod_1.z.enum(["active", "deprecated", "retired", "unavailable"]),
     metadata: zod_1.z.record(zod_1.z.string(), zod_1.z.unknown()).default({}),
 })
     .strict();
@@ -231,8 +486,12 @@ exports.DeclarativeCapabilitySchemaDocumentSchema = zod_1.z
 })
     .strict()
     .superRefine((value, context) => {
-    if (value.schemaRevisionRef.kind !== 'schema') {
-        context.addIssue({ code: 'custom', path: ['schemaRevisionRef', 'kind'], message: 'Capability schema documents must use schema RevisionRefs.' });
+    if (value.schemaRevisionRef.kind !== "schema") {
+        context.addIssue({
+            code: "custom",
+            path: ["schemaRevisionRef", "kind"],
+            message: "Capability schema documents must use schema RevisionRefs.",
+        });
     }
 });
 exports.DeclarativeCapabilityAuthoringRegistrationSchema = zod_1.z
@@ -252,10 +511,38 @@ exports.DeclarativeCapabilityAuthoringRegistrationSchema = zod_1.z
     allowedChildCapabilityRefs: zod_1.z.array(declarative_control_1.StableRefSchema),
     inputPorts: zod_1.z.array(DeclarativeCapabilityPortSchema),
     outputPorts: zod_1.z.array(DeclarativeCapabilityPortSchema),
-    allowedSideEffects: zod_1.z.array(zod_1.z.enum(['network', 'storage', 'navigation', 'worker', 'websocket'])),
-    ontologyRequirements: zod_1.z.array(zod_1.z.object({ inputPort: common_1.ContractIdentifierSchema, renderModelSchemaRevisionRef: declarative_control_1.RevisionRefSchema, modes: zod_1.z.array(zod_1.z.enum(['view', 'filter'])).min(1), requiredPermissionCodes: zod_1.z.array(common_1.ContractIdentifierSchema) }).strict()),
-    actionRequirements: zod_1.z.array(zod_1.z.object({ outputPort: common_1.ContractIdentifierSchema, allowedCommandKinds: zod_1.z.array(common_1.ContractIdentifierSchema), requiredPermissionCodes: zod_1.z.array(common_1.ContractIdentifierSchema) }).strict()),
-    propertyFields: zod_1.z.array(zod_1.z.object({ path: zod_1.z.string().trim().min(1), label: declarative_control_1.I18nTextSchema, control: common_1.ContractIdentifierSchema, required: zod_1.z.boolean(), advanced: zod_1.z.boolean() }).strict()),
+    allowedSideEffects: zod_1.z.array(zod_1.z.enum([
+        "network",
+        "storage",
+        "navigation",
+        "clipboard",
+        "worker",
+        "websocket",
+    ])),
+    ontologyRequirements: zod_1.z.array(zod_1.z
+        .object({
+        inputPort: common_1.ContractIdentifierSchema,
+        renderModelSchemaRevisionRef: declarative_control_1.RevisionRefSchema,
+        modes: zod_1.z.array(zod_1.z.enum(["view", "filter"])).min(1),
+        requiredPermissionCodes: zod_1.z.array(common_1.ContractIdentifierSchema),
+    })
+        .strict()),
+    actionRequirements: zod_1.z.array(zod_1.z
+        .object({
+        outputPort: common_1.ContractIdentifierSchema,
+        allowedCommandKinds: zod_1.z.array(common_1.ContractIdentifierSchema),
+        requiredPermissionCodes: zod_1.z.array(common_1.ContractIdentifierSchema),
+    })
+        .strict()),
+    propertyFields: zod_1.z.array(zod_1.z
+        .object({
+        path: zod_1.z.string().trim().min(1),
+        label: declarative_control_1.I18nTextSchema,
+        control: common_1.ContractIdentifierSchema,
+        required: zod_1.z.boolean(),
+        advanced: zod_1.z.boolean(),
+    })
+        .strict()),
     schemaDocuments: zod_1.z.array(exports.DeclarativeCapabilitySchemaDocumentSchema).min(1),
     sourceContentHash: common_1.Sha256Schema,
 })
@@ -265,7 +552,11 @@ exports.DeclarativeCapabilityAuthoringRegistrationSchema = zod_1.z
     value.schemaDocuments.forEach((entry, index) => {
         const key = `${entry.schemaRevisionRef.ownerRepo}:${entry.schemaRevisionRef.id}@${entry.schemaRevisionRef.revision}:${entry.schemaRevisionRef.contentHash}`;
         if (documents.has(key)) {
-            context.addIssue({ code: 'custom', path: ['schemaDocuments', index], message: 'Capability schema documents must be unique by exact RevisionRef.' });
+            context.addIssue({
+                code: "custom",
+                path: ["schemaDocuments", index],
+                message: "Capability schema documents must be unique by exact RevisionRef.",
+            });
         }
         documents.set(key, index);
     });
@@ -279,9 +570,160 @@ exports.DeclarativeCapabilityAuthoringRegistrationSchema = zod_1.z
     required.forEach((reference) => {
         const key = `${reference.ownerRepo}:${reference.id}@${reference.revision}:${reference.contentHash}`;
         if (!documents.has(key)) {
-            context.addIssue({ code: 'custom', path: ['schemaDocuments'], message: `Missing exact schema document for ${reference.id}.` });
+            context.addIssue({
+                code: "custom",
+                path: ["schemaDocuments"],
+                message: `Missing exact schema document for ${reference.id}.`,
+            });
+        }
+    });
+});
+exports.DesignCapabilityCatalogEntrySchema = zod_1.z
+    .object({
+    manifest: capability_1.CapabilityManifestSchema,
+    provider: render_1.ViewProviderDescriptorSchema,
+    declarativeRegistration: exports.DeclarativeCapabilityAuthoringRegistrationSchema,
+})
+    .strict();
+exports.DesignCapabilityCatalogArtifactSchema = zod_1.z
+    .object({
+    contract: zod_1.z.literal("DesignCapabilityCatalogArtifact"),
+    schemaVersion: zod_1.z.literal(1),
+    sourceRef: common_1.ContractIdentifierSchema,
+    sourceRevisionRef: declarative_control_1.RevisionRefSchema,
+    entries: zod_1.z.array(exports.DesignCapabilityCatalogEntrySchema).min(1).max(512),
+    sourceContentHash: common_1.Sha256Schema,
+})
+    .strict()
+    .superRefine((value, context) => {
+    if (value.sourceRevisionRef.kind !== "design-capability-catalog" ||
+        value.sourceRevisionRef.id !== value.sourceRef ||
+        value.sourceRevisionRef.ownerRepo !== "monkeys-design" ||
+        value.sourceRevisionRef.visibility !== "global") {
+        context.addIssue({
+            code: "custom",
+            path: ["sourceRevisionRef"],
+            message: "A Design catalog artifact must be a global monkeys-design release revision.",
+        });
+    }
+    const ids = value.entries.map((entry) => entry.manifest.id);
+    if (new Set(ids).size !== ids.length) {
+        context.addIssue({
+            code: "custom",
+            path: ["entries"],
+            message: "Design catalog capability identities must be unique.",
+        });
+    }
+    if (ids.some((id, index) => index > 0 && ids[index - 1].localeCompare(id) > 0)) {
+        context.addIssue({
+            code: "custom",
+            path: ["entries"],
+            message: "Design catalog entries must use deterministic capability identity order.",
+        });
+    }
+});
+/**
+ * A product release may contribute a product-owned visual capability without
+ * pretending to be the global Monkeys Design catalog. The application catalog
+ * is the release authority; runtime code remains outside this data contract.
+ */
+exports.ProductDeclarativeCapabilityRegistrationSchema = zod_1.z
+    .object({
+    manifest: capability_1.CapabilityManifestSchema,
+    provider: render_1.ViewProviderDescriptorSchema,
+    declarativeRegistration: exports.DeclarativeCapabilityAuthoringRegistrationSchema,
+    requiredPermissionCodes: zod_1.z.array(common_1.ContractIdentifierSchema).default([]),
+})
+    .strict()
+    .superRefine((value, context) => {
+    const ownerRepo = value.manifest.ownerRepo;
+    const registration = value.declarativeRegistration;
+    if (ownerRepo === "monkeys-design") {
+        context.addIssue({
+            code: "custom",
+            path: ["manifest", "ownerRepo"],
+            message: "Monkeys Design capabilities must come from the Design capability catalog.",
+        });
+    }
+    if (registration.capabilityRevisionRef.kind !== "capability" ||
+        registration.capabilityRevisionRef.id !== value.manifest.id ||
+        registration.capabilityRevisionRef.ownerRepo !== ownerRepo ||
+        String(registration.capabilityRevisionRef.revision) !==
+            String(value.manifest.capabilityVersion) ||
+        registration.capabilityRevisionRef.visibility !== "global") {
+        context.addIssue({
+            code: "custom",
+            path: ["declarativeRegistration", "capabilityRevisionRef"],
+            message: "A product capability must pin its exact global product-owned manifest revision.",
+        });
+    }
+    if (registration.providerRevisionRef.kind !== "view-provider" ||
+        registration.providerRevisionRef.id !== value.provider.providerId ||
+        registration.providerRevisionRef.ownerRepo !== ownerRepo ||
+        value.provider.ownerRepo !== ownerRepo ||
+        String(registration.providerRevisionRef.revision) !==
+            String(value.provider.providerVersion) ||
+        registration.providerRevisionRef.visibility !== "global") {
+        context.addIssue({
+            code: "custom",
+            path: ["declarativeRegistration", "providerRevisionRef"],
+            message: "A product capability must pin its exact global product-owned provider revision.",
+        });
+    }
+    if (value.provider.capabilityRef.kind !== "capability" ||
+        value.provider.capabilityRef.id !== value.manifest.id ||
+        value.provider.capabilityRef.ownerRepo !== ownerRepo ||
+        String(value.provider.capabilityRef.version) !==
+            String(value.manifest.capabilityVersion)) {
+        context.addIssue({
+            code: "custom",
+            path: ["provider", "capabilityRef"],
+            message: "A product provider must declare its exact capability owner.",
+        });
+    }
+    const providerBoundByManifest = value.manifest.runtime.providerBindings.some((binding) => binding.providerRef.kind === "view-provider" &&
+        binding.providerRef.id === value.provider.providerId &&
+        binding.providerRef.ownerRepo === ownerRepo &&
+        String(binding.providerRef.version) ===
+            String(value.provider.providerVersion));
+    if (!providerBoundByManifest) {
+        context.addIssue({
+            code: "custom",
+            path: ["manifest", "runtime", "providerBindings"],
+            message: "The product capability manifest must bind the declared product provider.",
+        });
+    }
+    if (registration.registrationRevisionRef.kind !==
+        "product-capability-registration" ||
+        registration.registrationRevisionRef.ownerRepo !== ownerRepo ||
+        registration.registrationRevisionRef.visibility !== "global" ||
+        registration.registrationRevisionRef.contentHash !==
+            registration.sourceContentHash) {
+        context.addIssue({
+            code: "custom",
+            path: ["declarativeRegistration", "registrationRevisionRef"],
+            message: "A product capability registration must have exact product-owned release provenance.",
+        });
+    }
+    registration.schemaDocuments.forEach((schema, index) => {
+        if (schema.schemaRevisionRef.ownerRepo !== ownerRepo ||
+            schema.schemaRevisionRef.visibility !== "global") {
+            context.addIssue({
+                code: "custom",
+                path: ["declarativeRegistration", "schemaDocuments", index],
+                message: "Embedded product capability Schemas require exact global product authority.",
+            });
         }
     });
+    const permissions = value.requiredPermissionCodes;
+    if (new Set(permissions).size !== permissions.length ||
+        permissions.some((permission, index) => index > 0 && permissions[index - 1].localeCompare(permission) > 0)) {
+        context.addIssue({
+            code: "custom",
+            path: ["requiredPermissionCodes"],
+            message: "Product capability permission codes must be unique and deterministically sorted.",
+        });
+    }
 });
 exports.DeclarativeCapabilityAuthoringChoiceSchema = exports.DeclarativeAuthoringChoiceSchema.extend({
     registration: exports.DeclarativeCapabilityAuthoringRegistrationSchema,
@@ -293,16 +735,49 @@ exports.DeclarativeCreateTemplateRegistrationSchema = zod_1.z
     label: declarative_control_1.I18nTextSchema,
     description: declarative_control_1.I18nTextSchema,
     supportedSurfaces: zod_1.z.array(declarative_control_1.ProductSurfaceSchema).min(1),
+    legacyMigrationSourcePageIds: zod_1.z
+        .array(common_1.ContractIdentifierSchema)
+        .min(1)
+        .max(256)
+        .optional(),
     document: zod_1.z.union([declarative_control_1.PageSchema, declarative_control_1.NavigationSchema, declarative_control_1.WorkbenchSchema]),
     sourceContentHash: common_1.Sha256Schema,
 })
     .strict()
     .superRefine((value, context) => {
-    const expected = value.document.contract === 'Page' ? 'page' : value.document.contract === 'Navigation' ? 'navigation' : 'workbench';
+    const expected = value.document.contract === "Page"
+        ? "page"
+        : value.document.contract === "Navigation"
+            ? "navigation"
+            : "workbench";
     if (value.resourceKind !== expected)
-        context.addIssue({ code: 'custom', path: ['resourceKind'], message: 'Create template kind must match its document contract.' });
-    if (value.templateRevisionRef.kind !== 'declarative-create-template')
-        context.addIssue({ code: 'custom', path: ['templateRevisionRef', 'kind'], message: 'Create templates require declarative-create-template RevisionRefs.' });
+        context.addIssue({
+            code: "custom",
+            path: ["resourceKind"],
+            message: "Create template kind must match its document contract.",
+        });
+    if (value.templateRevisionRef.kind !== "declarative-create-template")
+        context.addIssue({
+            code: "custom",
+            path: ["templateRevisionRef", "kind"],
+            message: "Create templates require declarative-create-template RevisionRefs.",
+        });
+    if (value.legacyMigrationSourcePageIds && value.resourceKind !== "page") {
+        context.addIssue({
+            code: "custom",
+            path: ["legacyMigrationSourcePageIds"],
+            message: "Only Page templates can declare legacy Page migration sources.",
+        });
+    }
+    if (value.legacyMigrationSourcePageIds &&
+        new Set(value.legacyMigrationSourcePageIds).size !==
+            value.legacyMigrationSourcePageIds.length) {
+        context.addIssue({
+            code: "custom",
+            path: ["legacyMigrationSourcePageIds"],
+            message: "Legacy Page migration source identities must be unique.",
+        });
+    }
 });
 exports.DeclarativeRouteSpaceRegistrationSchema = zod_1.z
     .object({
@@ -312,48 +787,85 @@ exports.DeclarativeRouteSpaceRegistrationSchema = zod_1.z
 })
     .strict()
     .superRefine((value, context) => {
-    if (value.routeSpaceRevisionRef.kind !== 'route-space') {
-        context.addIssue({ code: 'custom', path: ['routeSpaceRevisionRef', 'kind'], message: 'Route-space registrations require route-space RevisionRefs.' });
+    if (value.routeSpaceRevisionRef.kind !== "route-space") {
+        context.addIssue({
+            code: "custom",
+            path: ["routeSpaceRevisionRef", "kind"],
+            message: "Route-space registrations require route-space RevisionRefs.",
+        });
     }
     if (value.routeSpaceRevisionRef.id !== value.routeSpace.routeSpaceId) {
-        context.addIssue({ code: 'custom', path: ['routeSpaceRevisionRef', 'id'], message: 'Route-space registration identity must match its document.' });
+        context.addIssue({
+            code: "custom",
+            path: ["routeSpaceRevisionRef", "id"],
+            message: "Route-space registration identity must match its document.",
+        });
     }
 });
 exports.DeclarativeShellResourceDocumentSchema = zod_1.z
     .object({
-    contract: zod_1.z.literal('DeclarativeShell'),
+    contract: zod_1.z.literal("DeclarativeShell"),
     schemaVersion: zod_1.z.literal(1),
     hostCapabilityRevisionRef: declarative_control_1.RevisionRefSchema,
     hostProviderRevisionRef: declarative_control_1.RevisionRefSchema,
     allowedSlots: zod_1.z.array(common_1.ContractIdentifierSchema).min(1),
     tokenRevisionRefs: zod_1.z.array(declarative_control_1.RevisionRefSchema).min(1),
+    surfaceChrome: zod_1.z.array(declarative_control_1.DeclarativeShellSurfaceChromeSchema).min(1),
 })
     .strict()
     .superRefine((value, context) => {
-    if (value.hostCapabilityRevisionRef.kind !== 'capability')
-        context.addIssue({ code: 'custom', path: ['hostCapabilityRevisionRef', 'kind'], message: 'Shell host capability must reference a capability.' });
-    if (value.hostProviderRevisionRef.kind !== 'view-provider')
-        context.addIssue({ code: 'custom', path: ['hostProviderRevisionRef', 'kind'], message: 'Shell host provider must reference a view-provider.' });
+    if (value.hostCapabilityRevisionRef.kind !== "capability")
+        context.addIssue({
+            code: "custom",
+            path: ["hostCapabilityRevisionRef", "kind"],
+            message: "Shell host capability must reference a capability.",
+        });
+    if (value.hostProviderRevisionRef.kind !== "view-provider")
+        context.addIssue({
+            code: "custom",
+            path: ["hostProviderRevisionRef", "kind"],
+            message: "Shell host provider must reference a view-provider.",
+        });
     value.tokenRevisionRefs.forEach((reference, index) => {
-        if (reference.kind !== 'design-token')
-            context.addIssue({ code: 'custom', path: ['tokenRevisionRefs', index, 'kind'], message: 'Shell tokens must use design-token RevisionRefs.' });
+        if (reference.kind !== "design-token")
+            context.addIssue({
+                code: "custom",
+                path: ["tokenRevisionRefs", index, "kind"],
+                message: "Shell tokens must use design-token RevisionRefs.",
+            });
+    });
+    const seenSurfaces = new Set();
+    value.surfaceChrome.forEach((entry, index) => {
+        if (seenSurfaces.has(entry.surface))
+            context.addIssue({
+                code: "custom",
+                path: ["surfaceChrome", index],
+                message: `Duplicate shell chrome declaration for ${entry.surface}.`,
+            });
+        seenSurfaces.add(entry.surface);
     });
 });
 exports.DeclarativeLayoutPolicyResourceDocumentSchema = zod_1.z
     .object({
-    contract: zod_1.z.literal('DeclarativeLayoutPolicy'),
+    contract: zod_1.z.literal("DeclarativeLayoutPolicy"),
     schemaVersion: zod_1.z.literal(1),
-    allowedModes: zod_1.z.array(zod_1.z.enum(['single', 'tabs', 'columns', 'grid', 'sidebar'])).min(1),
+    allowedModes: zod_1.z
+        .array(zod_1.z.enum(["single", "tabs", "columns", "grid", "sidebar"]))
+        .min(1),
     propertySchemaRevisionRef: declarative_control_1.RevisionRefSchema,
 })
     .strict()
     .superRefine((value, context) => {
-    if (value.propertySchemaRevisionRef.kind !== 'schema')
-        context.addIssue({ code: 'custom', path: ['propertySchemaRevisionRef', 'kind'], message: 'Layout policy properties must reference a schema.' });
+    if (value.propertySchemaRevisionRef.kind !== "schema")
+        context.addIssue({
+            code: "custom",
+            path: ["propertySchemaRevisionRef", "kind"],
+            message: "Layout policy properties must reference a schema.",
+        });
 });
 exports.DeclarativeEnvironmentResourceDocumentSchema = zod_1.z
     .object({
-    contract: zod_1.z.literal('DeclarativeEnvironment'),
+    contract: zod_1.z.literal("DeclarativeEnvironment"),
     schemaVersion: zod_1.z.literal(1),
     environmentId: common_1.ContractIdentifierSchema,
     label: declarative_control_1.I18nTextSchema,
@@ -363,7 +875,15 @@ exports.DeclarativeEnvironmentResourceDocumentSchema = zod_1.z
 exports.DeclarativeProductResourceRegistrationSchema = zod_1.z
     .object({
     resourceRevisionRef: declarative_control_1.RevisionRefSchema,
-    resourceKind: zod_1.z.enum(['shell', 'layout-policy', 'performance-budget', 'observation-policy', 'design-token', 'access-policy', 'environment']),
+    resourceKind: zod_1.z.enum([
+        "shell",
+        "layout-policy",
+        "performance-budget",
+        "observation-policy",
+        "design-token",
+        "access-policy",
+        "environment",
+    ]),
     supportedSurfaces: zod_1.z.array(declarative_control_1.ProductSurfaceSchema).min(1),
     accessPolicy: declarative_control_1.AccessPolicySchema.optional(),
     schemaRevisionRef: declarative_control_1.RevisionRefSchema.optional(),
@@ -373,64 +893,268 @@ exports.DeclarativeProductResourceRegistrationSchema = zod_1.z
     .strict()
     .superRefine((value, context) => {
     if (value.resourceRevisionRef.kind !== value.resourceKind) {
-        context.addIssue({ code: 'custom', path: ['resourceRevisionRef', 'kind'], message: 'Product resource kind must match its RevisionRef.' });
+        context.addIssue({
+            code: "custom",
+            path: ["resourceRevisionRef", "kind"],
+            message: "Product resource kind must match its RevisionRef.",
+        });
     }
-    if (value.resourceKind === 'shell') {
+    if (value.resourceKind === "shell") {
         const parsed = exports.DeclarativeShellResourceDocumentSchema.safeParse(value.document);
         if (!parsed.success)
-            context.addIssue({ code: 'custom', path: ['document'], message: `Invalid shell declaration: ${parsed.error.message}` });
+            context.addIssue({
+                code: "custom",
+                path: ["document"],
+                message: `Invalid shell declaration: ${parsed.error.message}`,
+            });
+        if (parsed.success) {
+            const declaredSurfaces = new Set(parsed.data.surfaceChrome.map((entry) => entry.surface));
+            const supportedSurfaces = new Set(value.supportedSurfaces);
+            value.supportedSurfaces.forEach((surface) => {
+                if (!declaredSurfaces.has(surface))
+                    context.addIssue({
+                        code: "custom",
+                        path: ["document", "surfaceChrome"],
+                        message: `Shell chrome is missing for supported surface ${surface}.`,
+                    });
+            });
+            parsed.data.surfaceChrome.forEach((entry) => {
+                if (!supportedSurfaces.has(entry.surface))
+                    context.addIssue({
+                        code: "custom",
+                        path: ["document", "surfaceChrome"],
+                        message: `Shell chrome declares unsupported surface ${entry.surface}.`,
+                    });
+            });
+        }
     }
-    if (value.resourceKind === 'layout-policy') {
+    if (value.resourceKind === "layout-policy") {
         const parsed = exports.DeclarativeLayoutPolicyResourceDocumentSchema.safeParse(value.document);
         if (!parsed.success)
-            context.addIssue({ code: 'custom', path: ['document'], message: `Invalid layout-policy declaration: ${parsed.error.message}` });
+            context.addIssue({
+                code: "custom",
+                path: ["document"],
+                message: `Invalid layout-policy declaration: ${parsed.error.message}`,
+            });
     }
-    if (value.resourceKind === 'environment') {
+    if (value.resourceKind === "environment") {
         const parsed = exports.DeclarativeEnvironmentResourceDocumentSchema.safeParse(value.document);
         if (!parsed.success)
-            context.addIssue({ code: 'custom', path: ['document'], message: `Invalid environment declaration: ${parsed.error.message}` });
-        if (parsed.success && parsed.data.environmentId !== value.resourceRevisionRef.id) {
-            context.addIssue({ code: 'custom', path: ['document', 'environmentId'], message: 'Environment registration identity must match its document.' });
+            context.addIssue({
+                code: "custom",
+                path: ["document"],
+                message: `Invalid environment declaration: ${parsed.error.message}`,
+            });
+        if (parsed.success &&
+            parsed.data.environmentId !== value.resourceRevisionRef.id) {
+            context.addIssue({
+                code: "custom",
+                path: ["document", "environmentId"],
+                message: "Environment registration identity must match its document.",
+            });
         }
     }
 });
 exports.DeclarativeDefaultPolicyRegistrationSchema = zod_1.z
     .object({
-    role: zod_1.z.enum(['management', 'access', 'layout', 'performance', 'observability', 'tokens', 'environment']),
+    role: zod_1.z.enum([
+        "management",
+        "access",
+        "layout",
+        "performance",
+        "observability",
+        "tokens",
+        "environment",
+    ]),
     resourceRevisionRef: declarative_control_1.RevisionRefSchema,
     supportedSurfaces: zod_1.z.array(declarative_control_1.ProductSurfaceSchema).min(1),
 })
     .strict();
+exports.DeclarativeDomainQueryDefinitionRegistrationSchema = zod_1.z
+    .object({
+    definitionRevisionRef: declarative_control_1.RevisionRefSchema,
+    definition: declarative_control_1.DomainQueryDefinitionSchema,
+})
+    .strict()
+    .superRefine((value, context) => {
+    if (value.definitionRevisionRef.kind !== "domain-query-definition") {
+        context.addIssue({
+            code: "custom",
+            path: ["definitionRevisionRef", "kind"],
+            message: "A Domain Query registration must pin a domain-query-definition revision.",
+        });
+    }
+    if (value.definitionRevisionRef.id !== value.definition.queryId) {
+        context.addIssue({
+            code: "custom",
+            path: ["definitionRevisionRef", "id"],
+            message: "A Domain Query registration identity must match its definition.",
+        });
+    }
+});
+exports.DeclarativeDomainCommandDefinitionRegistrationSchema = zod_1.z
+    .object({
+    definitionRevisionRef: declarative_control_1.RevisionRefSchema,
+    definition: semantic_1.DomainCommandDefinitionSchema,
+})
+    .strict()
+    .superRefine((value, context) => {
+    if (value.definitionRevisionRef.kind !== "domain-command") {
+        context.addIssue({
+            code: "custom",
+            path: ["definitionRevisionRef", "kind"],
+            message: "A Domain Command registration must pin a domain-command revision.",
+        });
+    }
+    if (value.definitionRevisionRef.id !== value.definition.commandName) {
+        context.addIssue({
+            code: "custom",
+            path: ["definitionRevisionRef", "id"],
+            message: "A Domain Command registration identity must match its definition.",
+        });
+    }
+});
+exports.DeclarativeSchemaDefinitionRegistrationSchema = zod_1.z
+    .object({
+    definitionRevisionRef: declarative_control_1.RevisionRefSchema,
+    definition: semantic_1.SchemaDefinitionSchema,
+})
+    .strict()
+    .superRefine((value, context) => {
+    if (value.definitionRevisionRef.kind !== "schema") {
+        context.addIssue({
+            code: "custom",
+            path: ["definitionRevisionRef", "kind"],
+            message: "A Schema registration must pin a schema revision.",
+        });
+    }
+    if (value.definitionRevisionRef.id !== value.definition.schemaId) {
+        context.addIssue({
+            code: "custom",
+            path: ["definitionRevisionRef", "id"],
+            message: "A Schema registration identity must match its definition.",
+        });
+    }
+    if (value.definitionRevisionRef.ownerRepo !== value.definition.ownerRepo) {
+        context.addIssue({
+            code: "custom",
+            path: ["definitionRevisionRef", "ownerRepo"],
+            message: "A Schema registration authority must match its definition.",
+        });
+    }
+});
 /** Release-owned product authoring inputs. Instances and releases remain Ontology records. */
 exports.ProductDeclarativeAuthoringCatalogSchema = zod_1.z
     .object({
-    contract: zod_1.z.literal('ProductDeclarativeAuthoringCatalog'),
+    contract: zod_1.z.literal("ProductDeclarativeAuthoringCatalog"),
     schemaVersion: zod_1.z.literal(1),
     applicationId: common_1.ContractIdentifierSchema,
     createTemplates: zod_1.z.array(exports.DeclarativeCreateTemplateRegistrationSchema),
     routeSpaces: zod_1.z.array(exports.DeclarativeRouteSpaceRegistrationSchema),
     resourceRegistrations: zod_1.z.array(exports.DeclarativeProductResourceRegistrationSchema),
     defaultPolicies: zod_1.z.array(exports.DeclarativeDefaultPolicyRegistrationSchema),
+    domainQueryDefinitions: zod_1.z
+        .array(exports.DeclarativeDomainQueryDefinitionRegistrationSchema)
+        .default([]),
+    domainCommandDefinitions: zod_1.z
+        .array(exports.DeclarativeDomainCommandDefinitionRegistrationSchema)
+        .default([]),
+    schemaDefinitions: zod_1.z
+        .array(exports.DeclarativeSchemaDefinitionRegistrationSchema)
+        .default([]),
+    capabilityRegistrations: zod_1.z
+        .array(exports.ProductDeclarativeCapabilityRegistrationSchema)
+        .default([]),
 })
     .strict()
     .superRefine((value, context) => {
     const duplicates = (items) => items.find((item, index) => items.indexOf(item) !== index);
     const duplicateTemplate = duplicates(value.createTemplates.map((item) => `${item.templateRevisionRef.id}@${item.templateRevisionRef.revision}`));
     if (duplicateTemplate)
-        context.addIssue({ code: 'custom', path: ['createTemplates'], message: `Duplicate create template ${duplicateTemplate}.` });
+        context.addIssue({
+            code: "custom",
+            path: ["createTemplates"],
+            message: `Duplicate create template ${duplicateTemplate}.`,
+        });
+    const duplicateMigrationSource = duplicates(value.createTemplates.flatMap((item) => (item.legacyMigrationSourcePageIds ?? []).flatMap((pageId) => item.supportedSurfaces.map((surface) => `${surface}:${pageId}`))));
+    if (duplicateMigrationSource)
+        context.addIssue({
+            code: "custom",
+            path: ["createTemplates"],
+            message: `Duplicate legacy Page migration source ${duplicateMigrationSource}.`,
+        });
     const duplicateRouteSpace = duplicates(value.routeSpaces.map((item) => `${item.routeSpaceRevisionRef.id}@${item.routeSpaceRevisionRef.revision}`));
     if (duplicateRouteSpace)
-        context.addIssue({ code: 'custom', path: ['routeSpaces'], message: `Duplicate route space ${duplicateRouteSpace}.` });
+        context.addIssue({
+            code: "custom",
+            path: ["routeSpaces"],
+            message: `Duplicate route space ${duplicateRouteSpace}.`,
+        });
     const duplicateResource = duplicates(value.resourceRegistrations.map((item) => `${item.resourceRevisionRef.kind}:${item.resourceRevisionRef.id}@${item.resourceRevisionRef.revision}`));
     if (duplicateResource)
-        context.addIssue({ code: 'custom', path: ['resourceRegistrations'], message: `Duplicate product resource ${duplicateResource}.` });
+        context.addIssue({
+            code: "custom",
+            path: ["resourceRegistrations"],
+            message: `Duplicate product resource ${duplicateResource}.`,
+        });
+    const duplicateQueryDefinition = duplicates(value.domainQueryDefinitions.map((item) => `${item.definitionRevisionRef.id}@${item.definitionRevisionRef.revision}`));
+    if (duplicateQueryDefinition)
+        context.addIssue({
+            code: "custom",
+            path: ["domainQueryDefinitions"],
+            message: `Duplicate Domain Query definition ${duplicateQueryDefinition}.`,
+        });
+    const duplicateCommandDefinition = duplicates(value.domainCommandDefinitions.map((item) => `${item.definitionRevisionRef.id}@${item.definitionRevisionRef.revision}`));
+    if (duplicateCommandDefinition)
+        context.addIssue({
+            code: "custom",
+            path: ["domainCommandDefinitions"],
+            message: `Duplicate Domain Command definition ${duplicateCommandDefinition}.`,
+        });
+    const duplicateSchemaDefinition = duplicates(value.schemaDefinitions.map((item) => `${item.definitionRevisionRef.id}@${item.definitionRevisionRef.revision}`));
+    if (duplicateSchemaDefinition)
+        context.addIssue({
+            code: "custom",
+            path: ["schemaDefinitions"],
+            message: `Duplicate Schema definition ${duplicateSchemaDefinition}.`,
+        });
+    const duplicateCapabilityRegistration = duplicates(value.capabilityRegistrations.map((item) => `${item.declarativeRegistration.capabilityRevisionRef.id}@${item.declarativeRegistration.capabilityRevisionRef.revision}`));
+    if (duplicateCapabilityRegistration)
+        context.addIssue({
+            code: "custom",
+            path: ["capabilityRegistrations"],
+            message: `Duplicate product capability registration ${duplicateCapabilityRegistration}.`,
+        });
     value.defaultPolicies.forEach((selection, index) => {
-        const expectedKind = { management: 'access-policy', access: 'access-policy', layout: 'layout-policy', performance: 'performance-budget', observability: 'observation-policy', tokens: 'design-token', environment: 'environment' }[selection.role];
+        const expectedKind = {
+            management: "access-policy",
+            access: "access-policy",
+            layout: "layout-policy",
+            performance: "performance-budget",
+            observability: "observation-policy",
+            tokens: "design-token",
+            environment: "environment",
+        }[selection.role];
         if (selection.resourceRevisionRef.kind !== expectedKind) {
-            context.addIssue({ code: 'custom', path: ['defaultPolicies', index, 'resourceRevisionRef', 'kind'], message: `Default ${selection.role} selection must reference ${expectedKind}.` });
+            context.addIssue({
+                code: "custom",
+                path: ["defaultPolicies", index, "resourceRevisionRef", "kind"],
+                message: `Default ${selection.role} selection must reference ${expectedKind}.`,
+            });
         }
-        if (!value.resourceRegistrations.some((registration) => registration.resourceRevisionRef.kind === selection.resourceRevisionRef.kind && registration.resourceRevisionRef.id === selection.resourceRevisionRef.id && registration.resourceRevisionRef.revision === selection.resourceRevisionRef.revision && registration.resourceRevisionRef.contentHash === selection.resourceRevisionRef.contentHash)) {
-            context.addIssue({ code: 'custom', path: ['defaultPolicies', index, 'resourceRevisionRef'], message: 'Default policy must select an exact registered product resource.' });
+        if (!value.resourceRegistrations.some((registration) => registration.resourceRevisionRef.kind ===
+            selection.resourceRevisionRef.kind &&
+            registration.resourceRevisionRef.id ===
+                selection.resourceRevisionRef.id &&
+            registration.resourceRevisionRef.revision ===
+                selection.resourceRevisionRef.revision &&
+            registration.resourceRevisionRef.contentHash ===
+                selection.resourceRevisionRef.contentHash)) {
+            context.addIssue({
+                code: "custom",
+                path: ["defaultPolicies", index, "resourceRevisionRef"],
+                message: "Default policy must select an exact registered product resource.",
+            });
         }
     });
 });
@@ -446,14 +1170,18 @@ exports.DeclarativeProductResourceChoiceSchema = exports.DeclarativeAuthoringCho
 exports.DeclarativeBindingAuthoringChoiceSchema = exports.DeclarativeAuthoringChoiceSchema.extend({
     bindingTemplate: zod_1.z
         .object({
-        kind: zod_1.z.enum(['ontology', 'view', 'action']),
+        kind: zod_1.z.enum(["ontology", "view", "query", "action"]),
         requiredRevisionRefs: zod_1.z.array(declarative_control_1.RevisionRefSchema),
         requiredPermissionCodes: zod_1.z.array(common_1.ContractIdentifierSchema),
         inputTemplate: zod_1.z.record(zod_1.z.string(), zod_1.z.unknown()),
     })
         .strict(),
     accessDiagnostics: zod_1.z
-        .object({ allowed: zod_1.z.boolean(), missingPermissionCodes: zod_1.z.array(common_1.ContractIdentifierSchema), issueCodes: zod_1.z.array(common_1.ContractIdentifierSchema) })
+        .object({
+        allowed: zod_1.z.boolean(),
+        missingPermissionCodes: zod_1.z.array(common_1.ContractIdentifierSchema),
+        issueCodes: zod_1.z.array(common_1.ContractIdentifierSchema),
+    })
         .strict(),
 }).strict();
 exports.DeclarativeWorkbenchTargetChoiceSchema = zod_1.z
@@ -462,23 +1190,43 @@ exports.DeclarativeWorkbenchTargetChoiceSchema = zod_1.z
     targetRevisionRef: declarative_control_1.RevisionRefSchema,
     providerRevisionRef: declarative_control_1.RevisionRefSchema,
     inputSchemaRevisionRef: declarative_control_1.RevisionRefSchema,
-    kind: zod_1.z.enum(['built-in-application', 'workflow-form', 'workflow', 'agent', 'design', 'capability']),
+    kind: zod_1.z.enum([
+        "built-in-application",
+        "workflow-form",
+        "workflow",
+        "agent",
+        "design",
+        "capability",
+    ]),
     name: declarative_control_1.I18nTextSchema,
     targetAccessPolicy: declarative_control_1.AccessPolicySchema,
     supportedSurfaces: zod_1.z.array(declarative_control_1.ProductSurfaceSchema).min(1),
-    status: zod_1.z.enum(['active', 'deprecated', 'retired', 'unavailable']),
+    status: zod_1.z.enum(["active", "deprecated", "retired", "unavailable"]),
     provenanceContentHash: common_1.Sha256Schema,
 })
     .strict()
     .superRefine((value, context) => {
-    if (value.targetRevisionRef.id !== value.stableTargetRef.id || value.targetRevisionRef.kind !== value.stableTargetRef.kind) {
-        context.addIssue({ code: 'custom', path: ['targetRevisionRef'], message: 'Workbench target identity and exact revision must match.' });
+    if (value.targetRevisionRef.id !== value.stableTargetRef.id ||
+        value.targetRevisionRef.kind !== value.stableTargetRef.kind) {
+        context.addIssue({
+            code: "custom",
+            path: ["targetRevisionRef"],
+            message: "Workbench target identity and exact revision must match.",
+        });
     }
-    if (value.providerRevisionRef.kind !== 'view-provider') {
-        context.addIssue({ code: 'custom', path: ['providerRevisionRef', 'kind'], message: 'Workbench targets require an exact view-provider revision.' });
+    if (value.providerRevisionRef.kind !== "view-provider") {
+        context.addIssue({
+            code: "custom",
+            path: ["providerRevisionRef", "kind"],
+            message: "Workbench targets require an exact view-provider revision.",
+        });
     }
-    if (value.inputSchemaRevisionRef.kind !== 'schema') {
-        context.addIssue({ code: 'custom', path: ['inputSchemaRevisionRef', 'kind'], message: 'Workbench targets require an exact input schema revision.' });
+    if (value.inputSchemaRevisionRef.kind !== "schema") {
+        context.addIssue({
+            code: "custom",
+            path: ["inputSchemaRevisionRef", "kind"],
+            message: "Workbench targets require an exact input schema revision.",
+        });
     }
 });
 exports.DeclarativeCreateIntentSchema = zod_1.z
@@ -486,7 +1234,13 @@ exports.DeclarativeCreateIntentSchema = zod_1.z
     resourceId: common_1.ContractIdentifierSchema,
     templateRevisionRef: declarative_control_1.RevisionRefSchema.optional(),
     sourceRevisionRef: declarative_control_1.RevisionRefSchema.optional(),
-    identity: zod_1.z.object({ name: declarative_control_1.I18nTextSchema, description: declarative_control_1.I18nTextSchema.optional(), tags: zod_1.z.array(common_1.ContractIdentifierSchema).default([]) }).strict(),
+    identity: zod_1.z
+        .object({
+        name: declarative_control_1.I18nTextSchema,
+        description: declarative_control_1.I18nTextSchema.optional(),
+        tags: zod_1.z.array(common_1.ContractIdentifierSchema).default([]),
+    })
+        .strict(),
     surface: declarative_control_1.ProductSurfaceSchema,
     pathTemplate: zod_1.z.string().trim().min(1).optional(),
     placement: common_1.ContractIdentifierSchema.optional(),
@@ -494,11 +1248,21 @@ exports.DeclarativeCreateIntentSchema = zod_1.z
 })
     .strict()
     .superRefine((value, context) => {
-    if (Number(Boolean(value.templateRevisionRef)) + Number(Boolean(value.sourceRevisionRef)) !== 1) {
-        context.addIssue({ code: 'custom', path: ['templateRevisionRef'], message: 'Create intent requires exactly one governed template or source revision.' });
+    if (Number(Boolean(value.templateRevisionRef)) +
+        Number(Boolean(value.sourceRevisionRef)) !==
+        1) {
+        context.addIssue({
+            code: "custom",
+            path: ["templateRevisionRef"],
+            message: "Create intent requires exactly one governed template or source revision.",
+        });
     }
 });
-exports.DeclarativeDocumentSchema = zod_1.z.union([declarative_control_1.PageSchema, declarative_control_1.NavigationSchema, declarative_control_1.WorkbenchSchema]);
+exports.DeclarativeDocumentSchema = zod_1.z.union([
+    declarative_control_1.PageSchema,
+    declarative_control_1.NavigationSchema,
+    declarative_control_1.WorkbenchSchema,
+]);
 exports.DeclarativeSaveDraftIntentSchema = zod_1.z
     .object({
     document: exports.DeclarativeDocumentSchema,
@@ -519,6 +1283,7 @@ exports.DeclarativePreparedReleaseTargetSchema = zod_1.z
     environmentRevisionRef: declarative_control_1.RevisionRefSchema,
     surface: declarative_control_1.ProductSurfaceSchema,
     routeClaimIndex: zod_1.z.number().int().nonnegative().optional(),
+    legacyRouteTakeoverAuthorization: declarative_control_1.LegacyRouteTakeoverAuthorizationSchema.optional(),
     placement: common_1.ContractIdentifierSchema.optional(),
     order: zod_1.z.number().int().optional(),
     isDefaultCandidate: zod_1.z.boolean().optional(),
@@ -530,110 +1295,291 @@ exports.DeclarativeEnvironmentChoiceSchema = exports.DeclarativeAuthoringChoiceS
     revisionRef: declarative_control_1.RevisionRefSchema,
     registration: exports.DeclarativeProductResourceRegistrationSchema,
 }).strict();
+exports.DeclarativeAuthoringPageInfoSchema = zod_1.z
+    .object({
+    hasMore: zod_1.z.boolean(),
+    nextPageToken: zod_1.z.string().trim().min(1).max(2048).optional(),
+    pageSize: zod_1.z.number().int().min(1).max(200),
+    returned: zod_1.z.number().int().nonnegative(),
+    total: zod_1.z.number().int().nonnegative().optional(),
+})
+    .strict()
+    .superRefine((value, context) => {
+    if (value.returned > value.pageSize)
+        context.addIssue({
+            code: "custom",
+            path: ["returned"],
+            message: "Returned items cannot exceed pageSize.",
+        });
+    if (value.hasMore !== Boolean(value.nextPageToken))
+        context.addIssue({
+            code: "custom",
+            path: ["nextPageToken"],
+            message: "hasMore and nextPageToken must agree.",
+        });
+});
+exports.DeclarativeAuthoringChoiceKindSchema = zod_1.z.enum([
+    "capability",
+    "ontology",
+    "view",
+    "query",
+    "action",
+    "access",
+    "published-target",
+    "workbench-target",
+]);
+const authoringChoicePage = (choiceKind, itemSchema) => zod_1.z
+    .object({
+    choiceKind: zod_1.z.literal(choiceKind),
+    items: zod_1.z.array(itemSchema),
+    pageInfo: exports.DeclarativeAuthoringPageInfoSchema,
+})
+    .strict()
+    .superRefine((value, context) => {
+    if (value.pageInfo.returned !== value.items.length)
+        context.addIssue({
+            code: "custom",
+            path: ["pageInfo", "returned"],
+            message: "PageInfo returned must match choice item count.",
+        });
+});
+exports.DeclarativeAuthoringChoicePageSchema = zod_1.z.discriminatedUnion("choiceKind", [
+    authoringChoicePage("capability", exports.DeclarativeCapabilityAuthoringChoiceSchema),
+    authoringChoicePage("ontology", exports.DeclarativeBindingAuthoringChoiceSchema),
+    authoringChoicePage("view", exports.DeclarativeBindingAuthoringChoiceSchema),
+    authoringChoicePage("action", exports.DeclarativeBindingAuthoringChoiceSchema),
+    authoringChoicePage("access", exports.DeclarativeAuthoringChoiceSchema),
+    authoringChoicePage("published-target", exports.DeclarativeAuthoringChoiceSchema),
+    authoringChoicePage("workbench-target", exports.DeclarativeWorkbenchTargetChoiceSchema),
+]);
+exports.DeclarativeAuthoringResourcePageQuerySchema = zod_1.z
+    .object({
+    resourceKind: exports.DeclarativeResourceKindSchema.optional(),
+    resourceId: common_1.ContractIdentifierSchema.optional(),
+    surface: declarative_control_1.ProductSurfaceSchema.optional(),
+    placement: common_1.ContractIdentifierSchema.optional(),
+    search: zod_1.z.string().trim().min(1).max(256).optional(),
+    pageSize: zod_1.z.number().int().min(1).max(200).default(60),
+    pageToken: zod_1.z.string().trim().min(1).max(2048).optional(),
+})
+    .strict();
+exports.DeclarativeAuthoringChoicePageQuerySchema = zod_1.z
+    .object({
+    choiceKind: exports.DeclarativeAuthoringChoiceKindSchema,
+    surface: declarative_control_1.ProductSurfaceSchema.optional(),
+    search: zod_1.z.string().trim().min(1).max(256).optional(),
+    pageSize: zod_1.z.number().int().min(1).max(200).default(60),
+    pageToken: zod_1.z.string().trim().min(1).max(2048).optional(),
+})
+    .strict();
 const DeclarativePageDocumentSummarySchema = zod_1.z
     .object({
-    resourceKind: zod_1.z.literal('page'),
+    resourceKind: zod_1.z.literal("page"),
     title: declarative_control_1.I18nTextSchema,
     supportedSurfaces: zod_1.z.array(declarative_control_1.ProductSurfaceSchema).min(1),
     routeClaims: zod_1.z.array(declarative_control_1.RouteClaimSchema).min(1),
-    lifecycle: zod_1.z.enum(['active', 'deprecated', 'retired']),
+    lifecycle: zod_1.z.enum(["active", "deprecated", "retired"]),
     accessPolicy: declarative_control_1.AccessPolicySchema,
     managementAccess: declarative_control_1.ManagementAccessSchema,
 })
     .strict();
 const DeclarativeNavigationDocumentSummarySchema = zod_1.z
     .object({
-    resourceKind: zod_1.z.literal('navigation'),
+    resourceKind: zod_1.z.literal("navigation"),
     title: declarative_control_1.I18nTextSchema,
     supportedSurfaces: zod_1.z.array(declarative_control_1.ProductSurfaceSchema).min(1),
     placements: zod_1.z.array(common_1.ContractIdentifierSchema).min(1),
     nodeCount: zod_1.z.number().int().nonnegative(),
-    lifecycle: zod_1.z.enum(['active', 'deprecated', 'retired']),
+    lifecycle: zod_1.z.enum(["active", "deprecated", "retired"]),
     managementAccess: declarative_control_1.ManagementAccessSchema,
 })
     .strict();
 const DeclarativeWorkbenchDocumentSummarySchema = zod_1.z
     .object({
-    resourceKind: zod_1.z.literal('workbench'),
+    resourceKind: zod_1.z.literal("workbench"),
     title: declarative_control_1.I18nTextSchema,
-    purpose: zod_1.z.enum(['instance', 'template']),
+    purpose: zod_1.z.enum(["instance", "template"]),
     supportedSurfaces: zod_1.z.array(declarative_control_1.ProductSurfaceSchema).min(1),
     routeClaims: zod_1.z.array(declarative_control_1.RouteClaimSchema).min(1),
-    layout: zod_1.z.object({ hostCapabilityRevisionRef: declarative_control_1.RevisionRefSchema, hostProviderRevisionRef: declarative_control_1.RevisionRefSchema, layoutPolicyRevisionRef: declarative_control_1.RevisionRefSchema }).strict(),
+    layout: zod_1.z
+        .object({
+        hostCapabilityRevisionRef: declarative_control_1.RevisionRefSchema,
+        hostProviderRevisionRef: declarative_control_1.RevisionRefSchema,
+        layoutPolicyRevisionRef: declarative_control_1.RevisionRefSchema,
+    })
+        .strict(),
     instanceCount: zod_1.z.number().int().nonnegative(),
-    lifecycle: zod_1.z.enum(['active', 'deprecated', 'retired']),
+    lifecycle: zod_1.z.enum(["active", "deprecated", "retired"]),
     accessPolicy: declarative_control_1.AccessPolicySchema,
     managementAccess: declarative_control_1.ManagementAccessSchema,
 })
     .strict();
-exports.DeclarativeDocumentSummarySchema = zod_1.z.discriminatedUnion('resourceKind', [
+exports.DeclarativeDocumentSummarySchema = zod_1.z.discriminatedUnion("resourceKind", [
     DeclarativePageDocumentSummarySchema,
     DeclarativeNavigationDocumentSummarySchema,
     DeclarativeWorkbenchDocumentSummarySchema,
 ]);
+const declarativeReferenceTenantScopeKey = (scope) => JSON.stringify(scope);
+const DeclarativeDefinitionKindByResourceKind = {
+    page: "page",
+    navigation: "navigation",
+    workbench: "workbench",
+};
+const DeclarativeReleaseKindByResourceKind = {
+    page: "page-release",
+    navigation: "navigation-release",
+    workbench: "workbench-release",
+};
 exports.DeclarativeAuthoringResourceSummarySchema = zod_1.z
     .object({
     resourceKind: exports.DeclarativeResourceKindSchema,
     resourceId: common_1.ContractIdentifierSchema,
     tenantScope: declarative_control_1.TenantScopeSchema,
     documentSummary: exports.DeclarativeDocumentSummarySchema,
-    lifecycle: zod_1.z.enum(['active', 'deprecated', 'retired']),
+    lifecycle: zod_1.z.enum(["active", "deprecated", "retired"]),
     draftRevisionRef: declarative_control_1.RevisionRefSchema,
     activeReleaseRevisionRefs: zod_1.z.array(declarative_control_1.RevisionRefSchema),
     placements: zod_1.z.array(common_1.ContractIdentifierSchema),
     updatedAt: zod_1.z.string().datetime(),
     actorRef: declarative_control_1.StableRefSchema,
     preparedTargets: zod_1.z.array(exports.DeclarativePreparedReleaseTargetSchema),
-    releasePlacements: zod_1.z.array(zod_1.z.object({
+    releasePlacements: zod_1.z.array(zod_1.z
+        .object({
         releaseRevisionRef: declarative_control_1.RevisionRefSchema,
+        definitionRevisionRef: declarative_control_1.RevisionRefSchema,
         environmentRef: declarative_control_1.StableRefSchema,
         surface: declarative_control_1.ProductSurfaceSchema,
         routePath: zod_1.z.string().optional(),
         placement: common_1.ContractIdentifierSchema.optional(),
         order: zod_1.z.number().int().optional(),
         isDefaultCandidate: zod_1.z.boolean().optional(),
-    }).strict()),
+    })
+        .strict()),
 })
-    .strict();
+    .strict()
+    .superRefine((value, context) => {
+    const expectedDefinitionKind = DeclarativeDefinitionKindByResourceKind[value.resourceKind];
+    const expectedReleaseKind = DeclarativeReleaseKindByResourceKind[value.resourceKind];
+    const expectedTenantScope = declarativeReferenceTenantScopeKey(value.tenantScope);
+    const seenReleaseRefs = new Set();
+    value.releasePlacements.forEach((placement, index) => {
+        const releasePath = [
+            "releasePlacements",
+            index,
+            "releaseRevisionRef",
+        ];
+        const definitionPath = [
+            "releasePlacements",
+            index,
+            "definitionRevisionRef",
+        ];
+        if (placement.releaseRevisionRef.kind !== expectedReleaseKind) {
+            context.addIssue({
+                code: "custom",
+                path: [...releasePath, "kind"],
+                message: `Release placement must reference ${expectedReleaseKind}.`,
+            });
+        }
+        if (placement.releaseRevisionRef.visibility !== "tenant" ||
+            declarativeReferenceTenantScopeKey(placement.releaseRevisionRef.tenantScope) !== expectedTenantScope) {
+            context.addIssue({
+                code: "custom",
+                path: [...releasePath, "tenantScope"],
+                message: "Release placement must use the resource tenant scope.",
+            });
+        }
+        const releaseIdentity = `${placement.releaseRevisionRef.kind}:${placement.releaseRevisionRef.id}:${placement.releaseRevisionRef.revision}`;
+        if (seenReleaseRefs.has(releaseIdentity)) {
+            context.addIssue({
+                code: "custom",
+                path: [...releasePath],
+                message: "Release placements must not repeat an exact release revision.",
+            });
+        }
+        seenReleaseRefs.add(releaseIdentity);
+        if (placement.definitionRevisionRef.kind !== expectedDefinitionKind) {
+            context.addIssue({
+                code: "custom",
+                path: [...definitionPath, "kind"],
+                message: `Release placement definition must reference ${expectedDefinitionKind}.`,
+            });
+        }
+        if (placement.definitionRevisionRef.id !== value.resourceId) {
+            context.addIssue({
+                code: "custom",
+                path: [...definitionPath, "id"],
+                message: "Release placement definition must reference the summary resource.",
+            });
+        }
+        if (placement.definitionRevisionRef.visibility !== "tenant" ||
+            declarativeReferenceTenantScopeKey(placement.definitionRevisionRef.tenantScope) !== expectedTenantScope) {
+            context.addIssue({
+                code: "custom",
+                path: [...definitionPath, "tenantScope"],
+                message: "Release placement definition must use the resource tenant scope.",
+            });
+        }
+    });
+});
+exports.DeclarativeAuthoringResourcePageSchema = zod_1.z
+    .object({
+    items: zod_1.z.array(exports.DeclarativeAuthoringResourceSummarySchema),
+    pageInfo: exports.DeclarativeAuthoringPageInfoSchema,
+})
+    .strict()
+    .superRefine((value, context) => {
+    if (value.pageInfo.returned !== value.items.length)
+        context.addIssue({
+            code: "custom",
+            path: ["pageInfo", "returned"],
+            message: "PageInfo returned must match resource item count.",
+        });
+});
 exports.DeclarativeAuthoringHistoryEntrySchema = zod_1.z
     .object({
     revisionRef: declarative_control_1.RevisionRefSchema,
     version: zod_1.z.number().int().positive(),
-    lifecycle: zod_1.z.enum(['active', 'deprecated', 'retired']),
+    lifecycle: zod_1.z.enum(["active", "deprecated", "retired"]),
     name: declarative_control_1.I18nTextSchema,
     actorRef: declarative_control_1.StableRefSchema,
-    source: zod_1.z.enum(['user', 'migration', 'rollback']),
+    source: zod_1.z.enum(["user", "migration", "rollback"]),
     reason: zod_1.z.string().trim().min(1).optional(),
     occurredAt: zod_1.z.string().datetime(),
     activeRelease: zod_1.z.boolean(),
 })
     .strict();
 exports.DeclarativeAuthoringHistorySchema = zod_1.z
-    .object({ items: zod_1.z.array(exports.DeclarativeAuthoringHistoryEntrySchema), nextBeforeVersion: zod_1.z.number().int().positive().optional() })
+    .object({
+    items: zod_1.z.array(exports.DeclarativeAuthoringHistoryEntrySchema),
+    nextBeforeVersion: zod_1.z.number().int().positive().optional(),
+})
     .strict();
 const DeclarativeRuntimeDiagnosticSchema = zod_1.z
     .object({
     code: common_1.ContractIdentifierSchema,
-    severity: zod_1.z.enum(['info', 'warning', 'error']),
+    severity: zod_1.z.enum(["info", "warning", "error"]),
     path: zod_1.z.string().trim().min(1),
     message: zod_1.z.string().trim().min(1),
 })
     .strict();
 exports.DeclarativeDraftResultSchema = zod_1.z
     .object({
-    action: zod_1.z.enum(['create', 'save']),
+    action: zod_1.z.enum(["create", "save"]),
     resourceKind: exports.DeclarativeResourceKindSchema,
     resourceId: common_1.ContractIdentifierSchema,
     document: exports.DeclarativeDocumentSchema,
     revisionRef: declarative_control_1.RevisionRefSchema,
     actorRef: declarative_control_1.StableRefSchema,
     occurredAt: zod_1.z.string().datetime(),
-    provenance: zod_1.z.object({ sourceRevisionRef: declarative_control_1.RevisionRefSchema }).strict().optional(),
+    provenance: zod_1.z
+        .object({ sourceRevisionRef: declarative_control_1.RevisionRefSchema })
+        .strict()
+        .optional(),
 })
     .strict();
 exports.DeclarativeValidationResultSchema = zod_1.z
     .object({
-    action: zod_1.z.literal('validate'),
+    action: zod_1.z.literal("validate"),
     valid: zod_1.z.literal(true),
     releaseRevisionRef: declarative_control_1.RevisionRefSchema,
     bundleContentHash: common_1.Sha256Schema,
@@ -642,12 +1588,16 @@ exports.DeclarativeValidationResultSchema = zod_1.z
     .strict();
 exports.DeclarativePreviewResultSchema = zod_1.z
     .object({
-    action: zod_1.z.literal('preview'),
+    action: zod_1.z.literal("preview"),
     token: zod_1.z.string().trim().min(1),
     expiresAt: zod_1.z.string().datetime(),
     revision: zod_1.z.number().int().positive(),
     contentHash: common_1.Sha256Schema,
-    bundle: zod_1.z.union([declarative_control_1.PageRuntimeBundleSchema, declarative_control_1.NavigationRuntimeBundleSchema, declarative_control_1.WorkbenchRuntimeBundleSchema]),
+    bundle: zod_1.z.union([
+        declarative_control_1.PageRuntimeBundleSchema,
+        declarative_control_1.NavigationRuntimeBundleSchema,
+        declarative_control_1.WorkbenchRuntimeBundleSchema,
+    ]),
     etag: zod_1.z.string().trim().min(1),
     sourceContentHash: common_1.Sha256Schema,
 })
@@ -657,32 +1607,244 @@ exports.DeclarativePublicationItemResultSchema = zod_1.z
     resourceKind: exports.DeclarativeResourceKindSchema,
     resourceId: common_1.ContractIdentifierSchema,
     releaseRevisionRef: declarative_control_1.RevisionRefSchema,
-    release: zod_1.z.union([declarative_control_1.PageReleaseSchema, declarative_control_1.NavigationReleaseSchema, declarative_control_1.WorkbenchReleaseSchema]),
-    bundle: zod_1.z.union([declarative_control_1.PageRuntimeBundleSchema, declarative_control_1.NavigationRuntimeBundleSchema, declarative_control_1.WorkbenchRuntimeBundleSchema]),
+    release: zod_1.z.union([
+        declarative_control_1.PageReleaseSchema,
+        declarative_control_1.NavigationReleaseSchema,
+        declarative_control_1.WorkbenchReleaseSchema,
+    ]),
+    bundle: zod_1.z
+        .union([
+        declarative_control_1.PageRuntimeBundleSchema,
+        declarative_control_1.NavigationRuntimeBundleSchema,
+        declarative_control_1.WorkbenchRuntimeBundleSchema,
+    ])
+        .optional(),
 })
-    .strict();
-exports.DeclarativePublicationResultSchema = zod_1.z
+    .strict()
+    .superRefine((value, context) => {
+    const expectedReleaseKind = {
+        page: "page-release",
+        navigation: "navigation-release",
+        workbench: "workbench-release",
+    }[value.resourceKind];
+    const expectedReleaseContract = {
+        page: "PageRelease",
+        navigation: "NavigationRelease",
+        workbench: "WorkbenchRelease",
+    }[value.resourceKind];
+    const expectedBundleContract = {
+        page: "PageRuntimeBundle",
+        navigation: "NavigationRuntimeBundle",
+        workbench: "WorkbenchRuntimeBundle",
+    }[value.resourceKind];
+    if (value.releaseRevisionRef.kind !== expectedReleaseKind ||
+        value.releaseRevisionRef.id !== value.release.releaseSlotId ||
+        value.release.contract !== expectedReleaseContract) {
+        context.addIssue({
+            code: "custom",
+            path: ["releaseRevisionRef"],
+            message: "A publication item must return the exact release identity for its resource kind.",
+        });
+    }
+    const definitionRef = value.release.contract === "PageRelease"
+        ? value.release.pageRevisionRef
+        : value.release.contract === "NavigationRelease"
+            ? value.release.navigationRevisionRef
+            : value.release.workbenchRevisionRef;
+    if (definitionRef.id !== value.resourceId) {
+        context.addIssue({
+            code: "custom",
+            path: ["resourceId"],
+            message: "A publication item release must identify the requested resource.",
+        });
+    }
+    const unavailable = value.release.operation === "deactivate" ||
+        Boolean(value.release.legacyRestoration);
+    if (unavailable === Boolean(value.bundle)) {
+        context.addIssue({
+            code: "custom",
+            path: ["bundle"],
+            message: unavailable
+                ? "A deactivated or legacy-restored Release cannot publish an active Runtime Bundle."
+                : "An active declarative Release must publish its Runtime Bundle.",
+        });
+    }
+    if (value.bundle) {
+        const bundleDefinitionRef = value.bundle.contract === "PageRuntimeBundle"
+            ? value.bundle.pageRevisionRef
+            : value.bundle.contract === "NavigationRuntimeBundle"
+                ? value.bundle.navigationRevisionRef
+                : value.bundle.workbenchRevisionRef;
+        const sameRevision = (left, right) => left.kind === right.kind &&
+            left.id === right.id &&
+            left.ownerRepo === right.ownerRepo &&
+            left.revision === right.revision &&
+            left.schemaVersion === right.schemaVersion &&
+            left.contentHash === right.contentHash;
+        if (value.bundle.contract !== expectedBundleContract ||
+            !sameRevision(value.bundle.releaseRevisionRef, value.releaseRevisionRef) ||
+            !sameRevision(bundleDefinitionRef, definitionRef)) {
+            context.addIssue({
+                code: "custom",
+                path: ["bundle"],
+                message: "A publication item Runtime Bundle must pin the exact returned Release and definition revisions.",
+            });
+        }
+    }
+});
+const DeclarativeDirectPublicationResultSchema = zod_1.z
     .object({
-    action: zod_1.z.enum(['publish', 'rollback', 'publication-plan']),
+    action: zod_1.z.enum(["publish", "rollback"]),
     generation: zod_1.z.number().int().nonnegative(),
-    publicationPlanRevisionRef: declarative_control_1.RevisionRefSchema.optional(),
     items: zod_1.z.array(exports.DeclarativePublicationItemResultSchema).min(1),
     etag: zod_1.z.string().trim().min(1),
+})
+    .strict()
+    .superRefine((value, context) => {
+    const expectedOperation = value.action === "publish" ? "activate" : "rollback";
+    value.items.forEach((item, index) => {
+        if (item.release.operation !== expectedOperation) {
+            context.addIssue({
+                code: "custom",
+                path: ["items", index, "release", "operation"],
+                message: "A direct publication result must match its requested action.",
+            });
+        }
+    });
+});
+const DeclarativeAtomicPublicationPlanResultSchema = zod_1.z
+    .object({
+    action: zod_1.z.literal("publication-plan"),
+    generation: zod_1.z.number().int().nonnegative(),
+    publicationPlanRevisionRef: declarative_control_1.RevisionRefSchema,
+    items: zod_1.z.array(exports.DeclarativePublicationItemResultSchema).min(1),
+    etag: zod_1.z.string().trim().min(1),
+})
+    .strict()
+    .superRefine((value, context) => {
+    if (value.publicationPlanRevisionRef.kind !== "publication-plan") {
+        context.addIssue({
+            code: "custom",
+            path: ["publicationPlanRevisionRef", "kind"],
+            message: "An atomic publication result must pin its Publication Plan revision.",
+        });
+    }
+});
+exports.DeclarativePublicationResultSchema = zod_1.z.union([
+    DeclarativeDirectPublicationResultSchema,
+    DeclarativeAtomicPublicationPlanResultSchema,
+]);
+exports.DeclarativeMigrationDiffEntrySchema = zod_1.z
+    .object({
+    path: zod_1.z.string().trim().startsWith("/").max(1024),
+    status: zod_1.z.enum(["added", "changed", "removed", "unchanged"]),
+    legacyValueHash: common_1.Sha256Schema.optional(),
+    declarativeValueHash: common_1.Sha256Schema.optional(),
+})
+    .strict();
+exports.DeclarativeMigrationBlockerSchema = zod_1.z
+    .object({
+    code: common_1.ContractIdentifierSchema,
+    path: zod_1.z.string().trim().max(1024).optional(),
+    message: zod_1.z.string().trim().min(1).max(4096),
+})
+    .strict();
+/**
+ * Immutable result of inspecting one predeclared legacy source. The fingerprint
+ * binds the source, target, diff, blockers and exact route-takeover authority;
+ * draft creation must re-read the source and reject any mismatch.
+ */
+exports.DeclarativeLegacyMigrationInspectionSchema = zod_1.z
+    .object({
+    contract: zod_1.z.literal("DeclarativeLegacyMigrationInspection"),
+    schemaVersion: zod_1.z.literal(1),
+    migrationKind: exports.DeclarativeLegacyMigrationKindSchema,
+    legacyResourceId: common_1.ContractIdentifierSchema,
+    sourceRevisionRef: declarative_control_1.RevisionRefSchema,
+    sourceContentHash: common_1.Sha256Schema,
+    legacyAdapterRevisionRef: declarative_control_1.RevisionRefSchema,
+    targetResourceRef: declarative_control_1.StableRefSchema,
+    environmentRevisionRef: declarative_control_1.RevisionRefSchema,
+    routeSpaceRevisionRef: declarative_control_1.RevisionRefSchema,
+    normalizedPath: zod_1.z.string().trim().startsWith("/").max(2048),
+    takeoverAuthorization: declarative_control_1.LegacyRouteTakeoverAuthorizationSchema,
+    diff: zod_1.z.array(exports.DeclarativeMigrationDiffEntrySchema).max(256),
+    blockers: zod_1.z.array(exports.DeclarativeMigrationBlockerSchema).max(128),
+    canCreateDraft: zod_1.z.boolean(),
+    inspectionFingerprint: common_1.Sha256Schema,
+})
+    .strict()
+    .superRefine((value, context) => {
+    const expectedKind = value.migrationKind === "workbench" ? "workbench" : "page";
+    if (value.targetResourceRef.kind !== expectedKind) {
+        context.addIssue({
+            code: "custom",
+            path: ["targetResourceRef", "kind"],
+            message: `A ${value.migrationKind} migration must target ${expectedKind}.`,
+        });
+    }
+    if (value.takeoverAuthorization.inspectedSourceContentHash !==
+        value.sourceContentHash ||
+        value.takeoverAuthorization.normalizedPath !== value.normalizedPath ||
+        value.takeoverAuthorization.targetResourceRef.kind !==
+            value.targetResourceRef.kind ||
+        value.takeoverAuthorization.targetResourceRef.id !==
+            value.targetResourceRef.id ||
+        value.takeoverAuthorization.targetResourceRef.ownerRepo !==
+            value.targetResourceRef.ownerRepo) {
+        context.addIssue({
+            code: "custom",
+            path: ["takeoverAuthorization"],
+            message: "The takeover authority must bind the exact inspected source, path and target.",
+        });
+    }
+    if (value.canCreateDraft !== (value.blockers.length === 0)) {
+        context.addIssue({
+            code: "custom",
+            path: ["canCreateDraft"],
+            message: "Draft creation is allowed exactly when inspection has no blockers.",
+        });
+    }
+});
+exports.DeclarativeLegacyMigrationCreateDraftIntentSchema = zod_1.z
+    .object({
+    inspectionFingerprint: common_1.Sha256Schema,
+    expectedSourceRevisionRef: declarative_control_1.RevisionRefSchema,
+    expectedSourceContentHash: common_1.Sha256Schema,
+    idempotencyKey: zod_1.z.string().trim().min(1).max(256),
+})
+    .strict();
+exports.DeclarativeLegacyMigrationCreateDraftResultSchema = zod_1.z
+    .object({
+    migrationKind: exports.DeclarativeLegacyMigrationKindSchema,
+    legacyResourceId: common_1.ContractIdentifierSchema,
+    inspectionFingerprint: common_1.Sha256Schema,
+    sourceRevisionRef: declarative_control_1.RevisionRefSchema,
+    sourceContentHash: common_1.Sha256Schema,
+    takeoverAuthorization: declarative_control_1.LegacyRouteTakeoverAuthorizationSchema,
+    draft: exports.DeclarativeDraftResultSchema,
 })
     .strict();
+exports.DECLARATIVE_MIGRATION_ERROR_CODES = {
+    sourceChanged: "DECLARATIVE_LEGACY_SOURCE_CHANGED",
+    reservedTakeoverForbidden: "DECLARATIVE_RESERVED_ROUTE_TAKEOVER_FORBIDDEN",
+    takeoverScopeInvalid: "DECLARATIVE_ROUTE_TAKEOVER_SCOPE_INVALID",
+    workbenchDefaultConflict: "DECLARATIVE_WORKBENCH_DEFAULT_CONFLICT",
+    legacyWriteBlocked: "DECLARATIVE_LEGACY_WRITE_BLOCKED",
+};
 exports.DeclarativeRetireResultSchema = zod_1.z
     .object({
-    action: zod_1.z.literal('retire'),
+    action: zod_1.z.literal("retire"),
     resourceKind: exports.DeclarativeResourceKindSchema,
     resourceId: common_1.ContractIdentifierSchema,
     revisionRef: declarative_control_1.RevisionRefSchema,
-    lifecycle: zod_1.z.literal('retired'),
+    lifecycle: zod_1.z.literal("retired"),
     actorRef: declarative_control_1.StableRefSchema,
     occurredAt: zod_1.z.string().datetime(),
     reason: zod_1.z.string().trim().min(1).max(4096),
 })
     .strict();
-exports.DeclarativeAuthoringCommandResultSchema = zod_1.z.discriminatedUnion('action', [
+exports.DeclarativeAuthoringCommandResultSchema = zod_1.z.union([
     exports.DeclarativeDraftResultSchema,
     exports.DeclarativeValidationResultSchema,
     exports.DeclarativePreviewResultSchema,
@@ -703,7 +1865,7 @@ const DeclarativeNavigationSeedMigrationDiffSchema = zod_1.z
     .strict();
 exports.DeclarativeNavigationSeedMigrationResultSchema = zod_1.z
     .object({
-    outcome: zod_1.z.enum(['already-active', 'review-required', 'published']),
+    outcome: zod_1.z.enum(["already-active", "review-required", "published"]),
     placement: common_1.ContractIdentifierSchema,
     legacyContentHash: common_1.Sha256Schema,
     templateRevisionRef: declarative_control_1.RevisionRefSchema,
@@ -714,18 +1876,28 @@ exports.DeclarativeNavigationSeedMigrationResultSchema = zod_1.z
 })
     .strict()
     .superRefine((value, context) => {
-    if (value.outcome === 'review-required' && (!value.requiresReview || !value.draftRevisionRef)) {
-        context.addIssue({ code: 'custom', path: ['outcome'], message: 'Review-required migrations must expose their draft.' });
+    if (value.outcome === "review-required" &&
+        (!value.requiresReview || !value.draftRevisionRef)) {
+        context.addIssue({
+            code: "custom",
+            path: ["outcome"],
+            message: "Review-required migrations must expose their draft.",
+        });
     }
-    if ((value.outcome === 'already-active' || value.outcome === 'published') && !value.activeReleaseRevisionRef) {
-        context.addIssue({ code: 'custom', path: ['activeReleaseRevisionRef'], message: 'Active migrations require an exact release revision.' });
+    if ((value.outcome === "already-active" || value.outcome === "published") &&
+        !value.activeReleaseRevisionRef) {
+        context.addIssue({
+            code: "custom",
+            path: ["activeReleaseRevisionRef"],
+            message: "Active migrations require an exact release revision.",
+        });
     }
 });
 exports.DeclarativeNavigationPlacementSchema = zod_1.z
     .object({
     placement: common_1.ContractIdentifierSchema,
     surface: declarative_control_1.ProductSurfaceSchema,
-    authority: zod_1.z.enum(['legacy', 'declarative']),
+    authority: zod_1.z.enum(["legacy", "declarative"]),
     authorityRevisionRef: declarative_control_1.RevisionRefSchema.optional(),
     navigationRef: declarative_control_1.StableRefSchema.optional(),
     draftRevisionRef: declarative_control_1.RevisionRefSchema.optional(),
@@ -752,60 +1924,226 @@ exports.DeclarativeAuthoringBootstrapSchema = zod_1.z
     accessChoices: zod_1.z.array(exports.DeclarativeAuthoringChoiceSchema),
     publishedTargets: zod_1.z.array(exports.DeclarativeAuthoringChoiceSchema),
     workbenchTargets: zod_1.z.array(exports.DeclarativeWorkbenchTargetChoiceSchema),
+    resourcesPageInfo: exports.DeclarativeAuthoringPageInfoSchema.optional(),
+    deferredChoiceKinds: zod_1.z
+        .array(exports.DeclarativeAuthoringChoiceKindSchema)
+        .optional(),
     compilerRevisionRef: declarative_control_1.RevisionRefSchema,
     generation: zod_1.z.number().int().nonnegative(),
     contentHash: common_1.Sha256Schema,
 })
     .strict();
+exports.DeclarativeRuntimeRedirectSchema = zod_1.z
+    .object({
+    statusCode: zod_1.z.literal(302),
+    source: zod_1.z
+        .object({
+        resourceKind: zod_1.z.enum(["page", "workbench"]),
+        releaseSlotId: common_1.ContractIdentifierSchema,
+        activeReleaseRevisionRef: declarative_control_1.RevisionRefSchema,
+        routeClaim: declarative_control_1.CompiledRouteClaimSchema,
+    })
+        .strict(),
+    target: zod_1.z
+        .object({
+        resourceKind: zod_1.z.enum(["page", "workbench"]),
+        stableTargetRef: declarative_control_1.StableRefSchema,
+        releaseSlotId: common_1.ContractIdentifierSchema,
+        activeReleaseRevisionRef: declarative_control_1.RevisionRefSchema,
+        normalizedPath: zod_1.z.string().trim().startsWith("/"),
+    })
+        .strict(),
+})
+    .strict();
 exports.DeclarativeRuntimeResolvedSchema = zod_1.z
     .object({
     surface: declarative_control_1.ProductSurfaceSchema,
     normalizedPath: zod_1.z.string().trim().min(1),
+    routeParameters: zod_1.z.record(common_1.ContractIdentifierSchema, zod_1.z.string()),
     page: declarative_control_1.PageRuntimeBundleSchema.optional(),
     workbench: declarative_control_1.WorkbenchRuntimeBundleSchema.optional(),
+    redirect: exports.DeclarativeRuntimeRedirectSchema.optional(),
     navigation: declarative_control_1.NavigationRuntimeBundleSchema.optional(),
-    releaseSlotRefs: zod_1.z.array(zod_1.z.object({ resourceKind: exports.DeclarativeResourceKindSchema, releaseSlotId: common_1.ContractIdentifierSchema }).strict()),
+    releaseSlotRefs: zod_1.z.array(zod_1.z
+        .object({
+        resourceKind: exports.DeclarativeResourceKindSchema,
+        releaseSlotId: common_1.ContractIdentifierSchema,
+    })
+        .strict()),
     generation: zod_1.z.number().int().nonnegative(),
     contentHash: common_1.Sha256Schema,
 })
     .strict()
     .superRefine((value, context) => {
-    if (!value.page && !value.workbench)
-        context.addIssue({ code: 'custom', path: ['page'], message: 'A resolved runtime must contain a Page or Workbench bundle.' });
+    const outcomes = [value.page, value.workbench, value.redirect].filter(Boolean).length;
+    if (outcomes !== 1)
+        context.addIssue({
+            code: "custom",
+            path: ["page"],
+            message: "A resolved runtime must contain exactly one Page, Workbench, or governed redirect outcome.",
+        });
+});
+const DeclarativeRuntimeSafeBaseShape = {
+    surface: declarative_control_1.ProductSurfaceSchema,
+    normalizedPath: zod_1.z.string().trim().startsWith("/").max(2048),
+    routeParameters: zod_1.z
+        .any()
+        .superRefine(rejectRuntimePrototypeKeys)
+        .pipe(zod_1.z.record(common_1.ContractIdentifierSchema, zod_1.z.string().max(2048)))
+        .superRefine((parameters, context) => {
+        if (Object.keys(parameters).length > 32) {
+            context.addIssue({
+                code: "custom",
+                path: [],
+                message: "A resolved route cannot expose more than 32 parameters.",
+            });
+        }
+    }),
+    generation: zod_1.z.number().int().nonnegative(),
+    etag: zod_1.z.string().trim().min(1),
+    contentHash: common_1.Sha256Schema,
+};
+const DeclarativeRuntimeLegacyOutcomeSchema = zod_1.z
+    .object({
+    outcome: zod_1.z.literal("legacy"),
+    ...DeclarativeRuntimeSafeBaseShape,
+    legacyAdapterRevisionRef: declarative_control_1.RevisionRefSchema,
+})
+    .strict()
+    .superRefine((value, context) => {
+    if (value.legacyAdapterRevisionRef.kind !== "legacy-route-adapter") {
+        context.addIssue({
+            code: "custom",
+            path: ["legacyAdapterRevisionRef", "kind"],
+            message: "A legacy runtime outcome must pin a legacy-route-adapter revision.",
+        });
+    }
+});
+const DeclarativeRuntimeAuthorizedOutcomeSchema = zod_1.z
+    .object({
+    outcome: zod_1.z.literal("declarative"),
+    ...DeclarativeRuntimeSafeBaseShape,
+    resolved: exports.DeclarativeRuntimeResolvedSchema,
+})
+    .strict()
+    .superRefine((value, context) => {
+    if (value.resolved.surface !== value.surface ||
+        value.resolved.normalizedPath !== value.normalizedPath) {
+        context.addIssue({
+            code: "custom",
+            path: ["resolved"],
+            message: "An authorized declarative outcome must match its safe route envelope.",
+        });
+    }
 });
+const DeclarativeRuntimeDeniedOutcomeSchema = (outcome, code) => zod_1.z
+    .object({
+    outcome: zod_1.z.literal(outcome),
+    ...DeclarativeRuntimeSafeBaseShape,
+    code: zod_1.z.literal(code),
+})
+    .strict();
+const DeclarativeRuntimeForbiddenOutcomeSchema = zod_1.z.discriminatedUnion("resourceKind", [
+    zod_1.z
+        .object({
+        outcome: zod_1.z.literal("forbidden"),
+        ...DeclarativeRuntimeSafeBaseShape,
+        resourceKind: zod_1.z.literal("page"),
+        code: zod_1.z.literal("DECLARATIVE_PAGE_FORBIDDEN"),
+        presentation: declarative_control_1.PageRouteStatePresentationSchema.optional(),
+    })
+        .strict()
+        .superRefine((value, context) => {
+        if (value.presentation &&
+            value.presentation.surface !== value.surface) {
+            context.addIssue({
+                code: "custom",
+                path: ["presentation", "surface"],
+                message: "A forbidden Page presentation must match the resolved route surface.",
+            });
+        }
+    }),
+    zod_1.z
+        .object({
+        outcome: zod_1.z.literal("forbidden"),
+        ...DeclarativeRuntimeSafeBaseShape,
+        resourceKind: zod_1.z.literal("workbench"),
+        code: zod_1.z.literal("DECLARATIVE_WORKBENCH_FORBIDDEN"),
+    })
+        .strict(),
+]);
+/**
+ * Browser-facing route resolution. Denied/unavailable/not-found branches are
+ * structurally unable to expose resource, Release-slot or revision metadata.
+ */
+exports.DeclarativeRuntimeResolveResultSchema = zod_1.z.union([
+    DeclarativeRuntimeLegacyOutcomeSchema,
+    DeclarativeRuntimeAuthorizedOutcomeSchema,
+    DeclarativeRuntimeForbiddenOutcomeSchema,
+    DeclarativeRuntimeDeniedOutcomeSchema("unavailable", "DECLARATIVE_ROUTE_UNAVAILABLE"),
+    DeclarativeRuntimeDeniedOutcomeSchema("not-found", "DECLARATIVE_ROUTE_NOT_FOUND"),
+]);
 exports.DeclarativeNavigationRuntimeBootstrapSchema = zod_1.z
     .object({
     placements: zod_1.z.array(zod_1.z
         .object({
         placement: common_1.ContractIdentifierSchema,
         surface: declarative_control_1.ProductSurfaceSchema,
-        authority: zod_1.z.enum(['legacy', 'declarative']),
-        state: zod_1.z.enum(['active', 'deactivated']),
+        authority: zod_1.z.enum(["legacy", "declarative"]),
+        state: zod_1.z.enum(["active", "deactivated"]),
         releaseSlotId: common_1.ContractIdentifierSchema.optional(),
         activeReleaseRevisionRef: declarative_control_1.RevisionRefSchema.optional(),
         bundle: declarative_control_1.NavigationRuntimeBundleSchema.optional(),
     })
         .strict()
         .superRefine((value, context) => {
-        if (value.authority === 'legacy') {
-            if (value.releaseSlotId || value.activeReleaseRevisionRef || value.bundle) {
-                context.addIssue({ code: 'custom', path: ['authority'], message: 'Legacy navigation placements cannot expose declarative Release or Bundle state.' });
+        if (value.authority === "legacy") {
+            if (value.releaseSlotId ||
+                value.activeReleaseRevisionRef ||
+                value.bundle) {
+                context.addIssue({
+                    code: "custom",
+                    path: ["authority"],
+                    message: "Legacy navigation placements cannot expose declarative Release or Bundle state.",
+                });
             }
-            if (value.state !== 'active')
-                context.addIssue({ code: 'custom', path: ['state'], message: 'Legacy navigation placements are active until an explicit declarative cutover.' });
+            if (value.state !== "active")
+                context.addIssue({
+                    code: "custom",
+                    path: ["state"],
+                    message: "Legacy navigation placements are active until an explicit declarative cutover.",
+                });
             return;
         }
         if (!value.releaseSlotId || !value.activeReleaseRevisionRef) {
-            context.addIssue({ code: 'custom', path: ['releaseSlotId'], message: 'Declarative navigation placements require an exact active Release reference.' });
+            context.addIssue({
+                code: "custom",
+                path: ["releaseSlotId"],
+                message: "Declarative navigation placements require an exact active Release reference.",
+            });
         }
-        if (value.state === 'active' && !value.bundle) {
-            context.addIssue({ code: 'custom', path: ['bundle'], message: 'An active declarative navigation placement requires its identity-filtered Runtime Bundle.' });
+        if (value.state === "active" && !value.bundle) {
+            context.addIssue({
+                code: "custom",
+                path: ["bundle"],
+                message: "An active declarative navigation placement requires its identity-filtered Runtime Bundle.",
+            });
         }
-        if (value.state === 'deactivated' && value.bundle) {
-            context.addIssue({ code: 'custom', path: ['bundle'], message: 'A deactivated declarative navigation placement cannot expose a Runtime Bundle.' });
+        if (value.state === "deactivated" && value.bundle) {
+            context.addIssue({
+                code: "custom",
+                path: ["bundle"],
+                message: "A deactivated declarative navigation placement cannot expose a Runtime Bundle.",
+            });
         }
-        if (value.bundle && (value.bundle.placement !== value.placement || value.bundle.surface !== value.surface)) {
-            context.addIssue({ code: 'custom', path: ['bundle'], message: 'The Navigation Runtime Bundle must match its placement and surface.' });
+        if (value.bundle &&
+            (value.bundle.placement !== value.placement ||
+                value.bundle.surface !== value.surface)) {
+            context.addIssue({
+                code: "custom",
+                path: ["bundle"],
+                message: "The Navigation Runtime Bundle must match its placement and surface.",
+            });
         }
     })),
     bundles: zod_1.z.array(declarative_control_1.NavigationRuntimeBundleSchema),
@@ -817,14 +2155,24 @@ exports.DeclarativeNavigationRuntimeBootstrapSchema = zod_1.z
 })
     .strict()
     .superRefine((value, context) => {
-    const active = value.placements.filter((entry) => entry.authority === 'declarative' && entry.state === 'active');
-    if (active.length !== value.bundles.length || active.length !== value.releaseSlotIds.length) {
-        context.addIssue({ code: 'custom', path: ['placements'], message: 'Compatibility bundle arrays must exactly project active declarative placements.' });
+    const active = value.placements.filter((entry) => entry.authority === "declarative" && entry.state === "active");
+    if (active.length !== value.bundles.length ||
+        active.length !== value.releaseSlotIds.length) {
+        context.addIssue({
+            code: "custom",
+            path: ["placements"],
+            message: "Compatibility bundle arrays must exactly project active declarative placements.",
+        });
         return;
     }
     active.forEach((entry, index) => {
-        if (entry.bundle?.contentHash !== value.bundles[index]?.contentHash || entry.releaseSlotId !== value.releaseSlotIds[index]) {
-            context.addIssue({ code: 'custom', path: ['placements', index], message: 'Navigation placement and compatibility bundle order must match.' });
+        if (entry.bundle?.contentHash !== value.bundles[index]?.contentHash ||
+            entry.releaseSlotId !== value.releaseSlotIds[index]) {
+            context.addIssue({
+                code: "custom",
+                path: ["placements", index],
+                message: "Navigation placement and compatibility bundle order must match.",
+            });
         }
     });
 });
@@ -844,7 +2192,7 @@ exports.DeclarativeWorkbenchSummarySchema = zod_1.z
 exports.DeclarativeLegacyWorkbenchSummarySchema = zod_1.z
     .object({
     workbenchId: common_1.ContractIdentifierSchema,
-    authority: zod_1.z.literal('legacy'),
+    authority: zod_1.z.literal("legacy"),
     identity: declarative_control_1.WorkbenchIdentitySchema,
     order: zod_1.z.number().int(),
     isDefaultCandidate: zod_1.z.boolean(),
@@ -852,40 +2200,58 @@ exports.DeclarativeLegacyWorkbenchSummarySchema = zod_1.z
     .strict();
 exports.DeclarativeWorkbenchRuntimeBootstrapSchema = zod_1.z
     .object({
-    defaultAuthority: zod_1.z.literal('legacy'),
+    defaultAuthority: zod_1.z.literal("legacy"),
     authorities: zod_1.z.array(zod_1.z
         .object({
         workbenchId: common_1.ContractIdentifierSchema,
         releaseSlotId: common_1.ContractIdentifierSchema,
-        authority: zod_1.z.enum(['legacy', 'declarative']),
-        state: zod_1.z.enum(['active', 'deactivated']),
+        authority: zod_1.z.enum(["legacy", "declarative"]),
+        state: zod_1.z.enum(["active", "deactivated"]),
         activeReleaseRevisionRef: declarative_control_1.RevisionRefSchema,
         visible: zod_1.z.boolean(),
     })
         .strict()
         .superRefine((value, context) => {
-        if (value.authority === 'legacy' && value.visible)
-            context.addIssue({ code: 'custom', path: ['visible'], message: 'Legacy workbenches are delivered by the compatibility API, not by declarative summaries.' });
-        if (value.state === 'deactivated' && value.visible)
-            context.addIssue({ code: 'custom', path: ['visible'], message: 'Deactivated workbenches cannot be visible.' });
+        if (value.authority === "legacy" && value.visible)
+            context.addIssue({
+                code: "custom",
+                path: ["visible"],
+                message: "Legacy workbenches are delivered by the compatibility API, not by declarative summaries.",
+            });
+        if (value.state === "deactivated" && value.visible)
+            context.addIssue({
+                code: "custom",
+                path: ["visible"],
+                message: "Deactivated workbenches cannot be visible.",
+            });
     })),
     legacySummaries: zod_1.z.array(exports.DeclarativeLegacyWorkbenchSummarySchema),
     summaries: zod_1.z.array(exports.DeclarativeWorkbenchSummarySchema),
     selected: zod_1.z
         .object({
         workbenchId: common_1.ContractIdentifierSchema,
-        authority: zod_1.z.enum(['legacy', 'declarative']),
+        authority: zod_1.z.enum(["legacy", "declarative"]),
         releaseSlotId: common_1.ContractIdentifierSchema.optional(),
         activeReleaseRevisionRef: declarative_control_1.RevisionRefSchema.optional(),
-        source: zod_1.z.enum(['explicit', 'default', 'first-accessible']),
+        source: zod_1.z.enum(["explicit", "default", "first-accessible"]),
     })
         .strict()
         .superRefine((value, context) => {
-        if (value.authority === 'declarative' && (!value.releaseSlotId || !value.activeReleaseRevisionRef)) {
-            context.addIssue({ code: 'custom', path: ['releaseSlotId'], message: 'Declarative Workbench selection requires its exact Release slot and revision.' });
+        if (value.authority === "declarative" &&
+            (!value.releaseSlotId || !value.activeReleaseRevisionRef)) {
+            context.addIssue({
+                code: "custom",
+                path: ["releaseSlotId"],
+                message: "Declarative Workbench selection requires its exact Release slot and revision.",
+            });
         }
-        if (value.authority === 'legacy' && (value.releaseSlotId || value.activeReleaseRevisionRef)) {
-            context.addIssue({ code: 'custom', path: ['releaseSlotId'], message: 'Legacy Workbench selection cannot expose declarative Release state.' });
+        if (value.authority === "legacy" &&
+            (value.releaseSlotId || value.activeReleaseRevisionRef)) {
+            context.addIssue({
+                code: "custom",
+                path: ["releaseSlotId"],
+                message: "Legacy Workbench selection cannot expose declarative Release state.",
+            });
         }
     })
         .nullable(),
@@ -906,8 +2272,20 @@ exports.DeclarativeNavigationImportResultSchema = zod_1.z
     .object({
     document: zod_1.z.unknown(),
     revisionRef: declarative_control_1.RevisionRefSchema,
-    provenance: zod_1.z.object({ sourceKey: zod_1.z.literal('server.ui.menus'), sourceRevisionRef: declarative_control_1.RevisionRefSchema, sourceContentHash: common_1.Sha256Schema }).strict(),
-    diff: zod_1.z.object({ added: zod_1.z.array(common_1.ContractIdentifierSchema), removed: zod_1.z.array(common_1.ContractIdentifierSchema), changed: zod_1.z.array(common_1.ContractIdentifierSchema) }).strict(),
+    provenance: zod_1.z
+        .object({
+        sourceKey: zod_1.z.literal("server.ui.menus"),
+        sourceRevisionRef: declarative_control_1.RevisionRefSchema,
+        sourceContentHash: common_1.Sha256Schema,
+    })
+        .strict(),
+    diff: zod_1.z
+        .object({
+        added: zod_1.z.array(common_1.ContractIdentifierSchema),
+        removed: zod_1.z.array(common_1.ContractIdentifierSchema),
+        changed: zod_1.z.array(common_1.ContractIdentifierSchema),
+    })
+        .strict(),
 })
     .strict();
 exports.DeclarativeRuntimeResolveQuerySchema = zod_1.z
@@ -916,10 +2294,63 @@ exports.DeclarativeRuntimeResolveQuerySchema = zod_1.z
     // Server resolves the single release-owned default for this surface.
     environmentId: common_1.ContractIdentifierSchema.optional(),
     surface: declarative_control_1.ProductSurfaceSchema,
-    path: zod_1.z.string().trim().min(1),
+    path: zod_1.z.string().trim().min(1).max(2048),
     navigationPlacement: common_1.ContractIdentifierSchema.optional(),
 })
     .strict();
+exports.DeclarativeRuntimeRouteOwnerQuerySchema = zod_1.z
+    .object({
+    // This tenant-scoped lookup is only called after authentication and team
+    // selection. Login, setup and other public boot routes stay owned by the
+    // predeclared legacy router and must not call this API.
+    environmentId: common_1.ContractIdentifierSchema.optional(),
+    surface: declarative_control_1.ProductSurfaceSchema,
+    path: zod_1.z.string().trim().min(1).max(2048),
+})
+    .strict();
+const DeclarativeRuntimeRouteParametersSchema = zod_1.z
+    .any()
+    .superRefine(rejectRuntimePrototypeKeys)
+    .pipe(zod_1.z.record(common_1.ContractIdentifierSchema, zod_1.z.string().max(2048)))
+    .superRefine((parameters, context) => {
+    const keys = Object.keys(parameters);
+    if (keys.length > 32)
+        context.addIssue({
+            code: "custom",
+            path: [],
+            message: "A resolved route cannot expose more than 32 parameters.",
+        });
+});
+const DeclarativeLegacyRouteOwnerSchema = zod_1.z
+    .object({
+    authority: zod_1.z.literal("legacy"),
+    legacyAdapterRevisionRef: declarative_control_1.RevisionRefSchema,
+    generation: zod_1.z.number().int().positive(),
+    etag: zod_1.z.string().trim().min(1),
+})
+    .strict();
+const DeclarativeReleaseRouteOwnerSchema = zod_1.z
+    .object({
+    authority: zod_1.z.literal("declarative"),
+    resourceKind: zod_1.z.enum(["page", "workbench"]),
+    releaseSlotId: common_1.ContractIdentifierSchema,
+    activeReleaseRevisionRef: declarative_control_1.RevisionRefSchema,
+    generation: zod_1.z.number().int().positive(),
+    etag: zod_1.z.string().trim().min(1),
+})
+    .strict();
+exports.DeclarativeRuntimeRouteOwnerSchema = zod_1.z
+    .object({
+    surface: declarative_control_1.ProductSurfaceSchema,
+    normalizedPath: zod_1.z.string().trim().startsWith("/").max(2048),
+    routeParameters: DeclarativeRuntimeRouteParametersSchema,
+    owner: zod_1.z.discriminatedUnion("authority", [
+        DeclarativeLegacyRouteOwnerSchema,
+        DeclarativeReleaseRouteOwnerSchema,
+    ]),
+    contentHash: common_1.Sha256Schema,
+})
+    .strict();
 // Route claims are re-exported here because authoring clients select an existing
 // declaration claim; they never submit a URL or mutable endpoint as authority.
 exports.DeclarativeRouteClaimIntentSchema = declarative_control_1.RouteClaimSchema;