@kumwe/studio-core 0.1.0-alpha.7 → 0.1.0-beta.2

package/README.md

@@ -1,6 +1,8 @@
 # `@kumwe/studio-core`
 
-Status: pre-Gate-A foundation alpha. The implemented kernel does not claim production completeness.
+Status: governed beta development, still pre-Gate-A and not production-supported. The exact coordinated
+version is in the workspace `studio-release.json`; the implemented kernel does not claim product or
+host-integration completeness.
 
 The framework-neutral state engine for Studio. It registers versioned blocks, validates blueprint
 documents, applies typed commands without mutating caller-owned data, and maintains bounded
@@ -15,13 +17,94 @@ The implemented surface covers:
 - `applyEntryCommand` — the locale-guarded `set-field-value` reducer for entries;
 - `StudioSession` — bounded history behind fail-closed session guards (read-only state, session
   generation, expected revision), dirty tracking, and a validated selection model;
-- `ContributionRuntime` — owner-aware, transactional contribution activation into immutable
-  registry generations with disable, reactivate, trust-revocation, stale-generation refusal, and
-  inspectable unresolved nodes;
+- `openStudioSession` — capability-negotiated Blueprint loading and a headless host-session handle for
+  serialized optimistic saves, raw optional recovery-port access, read-only model `list`/`get`, bounded
+  resource search, stale-generation invalidation, and local idempotent disposal;
+- `openContextualStudioSession` — the additive resource-bound coordinator for exact target resolution and
+  blank/from-type/existing starts, separate Model/Blueprint/Entry draft state, presentation state, save
+  planning, all three explicit save outcomes, revision reconciliation, and authoritative failure handling;
+- `preflightContextualStudioSession` — the same coordinator split at its in-context create boundary: resolve
+  target authority, optionally page through authorized exact reusable types, then transfer into one exact
+  session without another route vocabulary or local fallback;
+- `projectBlueprintFieldBindings` — an immutable exact-model projection of compatible block-port field
+  candidates, declared authoring controls and stable invalid-binding diagnostics;
+- `ContributionRuntime` — owner-aware, transactional, schema-validated activation of block,
+  pattern, design-vocabulary, migration, inspector, and field-adapter payloads into kind-scoped
+  immutable generations, with disable, reactivate, trust-revocation, stale-generation refusal, and
+  inspectable unresolved contributions;
 - `validateBlueprint` and `BlockRegistry` — schema, limit, lock, and registry validation with
   stable diagnostics;
 - `canonicalStringify` / `canonicalUtf8Bytes` — the canonical cross-language serialization form
   used for checksums.
+- `createCoreLayoutBlockDefinitions` / `resolveCoreLayoutIntent` — first-party section, stack, grid,
+  and columns definitions plus theme-validated responsive intent resolution, with no DOM or stored
+  CSS;
+- `createCoreProductionBlockDefinitions` / `createCoreProductionPatterns` — the standalone 45-block
+  production catalog and ten portable starter compositions, including media, rich content,
+  progressive composites including dialogs, popovers, and notices, data display, and
+  host-authoritative resource/query projections;
+- `coreProductionInitialProperties` — schema-valid defaults used by the Studio insertion path for
+  every first-party type;
+- `parseStudioPresentationIntent` — the closed, CSS-free visual capability contract shared by all
+  first-party inspector surfaces and renderers;
+- `compileStudioPropertySchema` / `assertStudioPropertySchema` — eval-free admission and validation
+  for the closed, local-only `studio.profile/schema-property` surface, with stable
+  `StudioSchemaProfileError` codes and schema pointers.
+- `validateStudioDeploymentConfiguration` / `assertStudioDeploymentConfiguration` — canonical deployment
+  validation plus hosted launch/session resource-context and route/capability agreement before transport use.
 
 The package has no DOM dependency. Web Components, Flutter clients, command-line tools, and server
 adapters can therefore share the same command and validation semantics through the protocol.
+
+## Advanced HTTP HostAdapter
+
+Normal browser integrations pass a canonical `StudioDeploymentConfiguration` to `mountStudio()`; the mounted
+runtime constructs this adapter automatically. `createHttpHostAdapter(httpTransportConfiguration, options)` is
+the lower-level DOM- and Node-free client for applications that intentionally own composition. The caller
+supplies exact per-operation URLs or one exact dispatcher URL, a closed authentication profile, a fetch-like
+transport, and optional deadline/credential-refresh factories. The adapter never derives or probes a URL.
+
+It supplies canonical envelopes, bounded response reading, schema-validation hooks, safe status
+classification, and canonical `HostPortFailure` rejections. Contextual authoring uses the operation-specific
+`authoring-http.schema.json` definitions. Conventional base-path expansion is available only from testkit
+fixtures and must not define a host integration. This is client code after compilation, not a server runtime;
+PHP hosts implement the documented JSON endpoints and own every authoritative effect.
+
+## Blueprint host-session composition
+
+`openStudioSession(hostAdapter, options)` consumes a complete, host-resolved `StudioConfiguration` from
+`OpenStudioSessionOptions`. Its injected `StudioHostSessionIdentifierFactories` provide deterministic
+`requestId(operationId)` and `idempotencyKey(operationId)` values. Opening requires
+`mode: blueprint`, `composite: single`, either session state, and the configured Blueprint reference;
+it passes the resolved Blueprint/read-only mode, session generation, resource context, locale,
+protocol, and history limit through the headless lifecycle. It does not perform the host handshake,
+automatically load model/theme dependencies or fabricate an artifact for model/content/hybrid configuration.
+Callers may inject any conforming `HostAdapter`, including the separately exported HTTP adapter.
+
+The returned handle serializes saves against the latest accepted host revision and coalesces matching
+concurrent intents. An exact retry after failure retains its idempotency key. If the document changes
+while a snapshot is saving, the success advances the accepted revision but the newer state remains
+dirty. Every current, undo, and redo snapshot carries that accepted revision without a local state-version
+change, so later history and exact preview staging use one coherent base. Conflicts and other refusals
+preserve the document, history, selection, and saved baseline.
+
+`StudioHostSessionHandle.recovery` is a `StudioHostSessionRecovery` with direct `store`, `load`, and
+`discard` calls when the optional port is present, and is `undefined` otherwise. The core does not
+synthesize or reconcile recovery envelopes. A
+`studio.host/stale-session-generation` diagnostic invalidates the complete handle. `dispose()` is
+local and idempotent and does not imply host teardown or preview cleanup. See
+[ADR 0020](../../docs/decisions/0020-blueprint-host-session-composition.md) for the deliberate scope.
+
+`StudioHostSessionHandle.models` is present only when the negotiated model port and adapter both implement
+`list` and `get`. Results are canonical-schema validated, exact-coordinate checked and detached before they
+leave the boundary; stale generation invalidates the whole handle. The surface is deliberately read-only.
+Pass an authorized active model to `projectBlueprintFieldBindings(blueprint, model, definitions)` to derive
+portable candidates and diagnostics without changing any input. See
+[ADR 0024](../../docs/decisions/0024-read-only-model-binding-projection.md).
+
+`StudioHostSessionHandle.resources` is present only when the negotiated resource port advertises
+`studio.operation/resource.search` and the adapter implements it. `search` validates and clones bounded
+queries before allocating a request, then accepts only detached pages whose stable, unique hit IDs and
+qualified message references match the requested resource type. Malformed adapter output becomes a safe
+`studio.host/unexpected-resource-result` failure. This is a read-only discovery surface: hosts still own
+authorization and resolution, and first-party dynamic resource/query bindings remain read-only in Studio.

package/THIRD_PARTY_NOTICES.md

@@ -0,0 +1,9 @@
+# Third-party notices
+
+<!-- Generated by scripts/generate-third-party-notices.mjs. Do not edit by hand. -->
+
+Package: `@kumwe/studio-core`
+
+Production closure SHA-256: `4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945`
+
+This package has no third-party runtime dependencies.

package/dist/authentication-lifetime.d.ts

@@ -0,0 +1,16 @@
+/** Maximum serialized bearer/custom-header credential lifetime: fifteen minutes. */
+export declare const STUDIO_TOKEN_MAXIMUM_LIFETIME_MILLISECONDS: number;
+export interface StudioTokenLifetime {
+    readonly expiresAt: unknown;
+    readonly issuedAt: unknown;
+}
+/**
+ * Validate one browser-visible token's closed lifetime interval. The exact
+ * clock rule is `issuedAt <= now < expiresAt`; no implicit grace period turns
+ * a future or expired serialized credential into a usable one.
+ */
+export declare function isStudioTokenLifetimeValid(lifetime: StudioTokenLifetime, currentTimeMilliseconds: number): boolean;
+/** Assert metadata and duration, optionally including current usability. */
+export declare function assertStudioTokenLifetime(lifetime: StudioTokenLifetime, currentTimeMilliseconds?: number): void;
+export declare function isAuthenticationLifetimeFailure(reason: unknown): boolean;
+//# sourceMappingURL=authentication-lifetime.d.ts.map

package/dist/authentication-lifetime.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authentication-lifetime.d.ts","sourceRoot":"","sources":["../src/authentication-lifetime.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,eAAO,MAAM,0CAA0C,EAAE,MAAuB,CAAC;AAYjF,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;CAC5B;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CACxC,QAAQ,EAAE,mBAAmB,EAC7B,uBAAuB,EAAE,MAAM,GAC9B,OAAO,CAaT;AAED,4EAA4E;AAC5E,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,mBAAmB,EAC7B,uBAAuB,CAAC,EAAE,MAAM,GAC/B,IAAI,CAqBN;AAED,wBAAgB,+BAA+B,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAOxE"}

package/dist/authentication-lifetime.js

@@ -0,0 +1 @@
+export const STUDIO_TOKEN_MAXIMUM_LIFETIME_MILLISECONDS=9e5;const t=/^(\d{4})-(0[1-9]|1[0-2])-(0[1-9]|[12]\d|3[01])T(?:[01]\d|2[0-3]):[0-5]\d:(?:[0-5]\d|60)(?:\.(\d{1,9}))?(?:Z|[+-](?:[01]\d|2[0-3]):[0-5]\d)$/u;export function isStudioTokenLifetimeValid(e,t){if(!Number.isFinite(t))return!1;let n=a(e.issuedAt),r=a(e.expiresAt);return n!==void 0&&r!==void 0&&o(n,t)<=0&&o(r,t)>0&&s(n,r)}export function assertStudioTokenLifetime(e,t){let n=a(e.issuedAt),r=a(e.expiresAt);if(n===void 0||r===void 0)throw TypeError(`issuedAt and expiresAt must be RFC 3339 date-times.`);if(!s(n,r))throw l();if(t!==void 0){if(!Number.isFinite(t))throw TypeError(`The configured transport clock returned an invalid time.`);if(o(n,t)>0||o(r,t)<=0)throw l()}}export function isAuthenticationLifetimeFailure(e){return typeof e==`object`&&!!e&&`name`in e&&e.name===`AuthenticationLifetimeError`}function a(e){if(typeof e!=`string`||e.length>40)return;let n=t.exec(e);if(n===null)return;let r=Number(n[1]),i=Number(n[2]);if(Number(n[3])>c(r,i))return;let a=Date.parse(e);return Number.isFinite(a)?{milliseconds:a,nanosecondRemainder:Number((n[4]??``).padEnd(9,`0`))%1e6}:void 0}function o(e,t){return e.milliseconds===t?Math.sign(e.nanosecondRemainder):Math.sign(e.milliseconds-t)}function s(t,n){let r=n.milliseconds-t.milliseconds,i=n.nanosecondRemainder-t.nanosecondRemainder;return(r>0||r===0&&i>0)&&(r<STUDIO_TOKEN_MAXIMUM_LIFETIME_MILLISECONDS||r===STUDIO_TOKEN_MAXIMUM_LIFETIME_MILLISECONDS&&i<=0)}function c(e,t){return t===2?e%4==0&&(e%100!=0||e%400==0)?29:28:t===4||t===6||t===9||t===11?30:31}function l(){let e=Error(`The configured HTTP authentication lifetime is not currently valid.`);return e.name=`AuthenticationLifetimeError`,e}

package/dist/binding-projection.d.ts

@@ -0,0 +1,47 @@
+import type { BlockDefinition, BlueprintDocument, ContentFieldKind, ContentModelDocument, FieldBinding, FieldDefinition, LocalName, LockedArtifactReference, MessageReference, QualifiedName, StudioDiagnostic } from '@kumwe/studio-protocol';
+/** The stable outcomes a binding port can expose to any authoring shell. */
+export type FieldBindingProjectionStatus = 'invalid' | 'non-field-source' | 'resolved' | 'unbound';
+/** One model field that can be bound to one exact block port. */
+export interface FieldBindingCandidate {
+    readonly cardinality: FieldDefinition['cardinality'];
+    readonly control?: QualifiedName;
+    readonly fieldPath: readonly LocalName[];
+    readonly itemKind?: Exclude<ContentFieldKind, 'collection'>;
+    readonly kind: ContentFieldKind;
+    readonly label: MessageReference;
+}
+/** Deterministic projection of one declared or preserved node binding port. */
+export interface FieldBindingPortProjection {
+    readonly binding?: FieldBinding;
+    readonly boundFieldPath?: readonly LocalName[];
+    readonly candidates: readonly FieldBindingCandidate[];
+    readonly multiple?: boolean;
+    readonly port: LocalName;
+    readonly required?: boolean;
+    readonly status: FieldBindingProjectionStatus;
+    readonly valueType?: string;
+}
+/** Deterministic projection of all binding affordances on one Blueprint node. */
+export interface NodeFieldBindingProjection {
+    readonly nodeId: string;
+    readonly ports: readonly FieldBindingPortProjection[];
+}
+/**
+ * Read-only, language-neutral view of a Blueprint's bindings against one exact
+ * host-projected model revision.
+ */
+export interface BlueprintFieldBindingProjection {
+    readonly diagnostics: readonly StudioDiagnostic[];
+    readonly model: LockedArtifactReference;
+    readonly nodes: readonly NodeFieldBindingProjection[];
+}
+/**
+ * Projects the active model into field-binding affordances and diagnostics.
+ *
+ * The function never changes a model, Blueprint, block definition, workflow,
+ * translation, or permission value. It accepts only already-authorized model
+ * projections and returns detached JSON-compatible snapshots. Field IDs, not
+ * labels or storage names, are the only binding coordinates.
+ */
+export declare function projectBlueprintFieldBindings(blueprint: BlueprintDocument, model: ContentModelDocument, definitions: readonly BlockDefinition[]): BlueprintFieldBindingProjection;
+//# sourceMappingURL=binding-projection.d.ts.map

package/dist/binding-projection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"binding-projection.d.ts","sourceRoot":"","sources":["../src/binding-projection.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,eAAe,EAEf,iBAAiB,EAEjB,gBAAgB,EAChB,oBAAoB,EACpB,YAAY,EACZ,eAAe,EAEf,SAAS,EACT,uBAAuB,EACvB,gBAAgB,EAChB,aAAa,EACb,gBAAgB,EACjB,MAAM,wBAAwB,CAAC;AAGhC,4EAA4E;AAC5E,MAAM,MAAM,4BAA4B,GAAG,SAAS,GAAG,kBAAkB,GAAG,UAAU,GAAG,SAAS,CAAC;AAEnG,iEAAiE;AACjE,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,WAAW,EAAE,eAAe,CAAC,aAAa,CAAC,CAAC;IACrD,QAAQ,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,SAAS,SAAS,EAAE,CAAC;IACzC,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC,gBAAgB,EAAE,YAAY,CAAC,CAAC;IAC5D,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC;CAClC;AAED,+EAA+E;AAC/E,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,OAAO,CAAC,EAAE,YAAY,CAAC;IAChC,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,SAAS,EAAE,CAAC;IAC/C,QAAQ,CAAC,UAAU,EAAE,SAAS,qBAAqB,EAAE,CAAC;IACtD,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,4BAA4B,CAAC;IAC9C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,iFAAiF;AACjF,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,SAAS,0BAA0B,EAAE,CAAC;CACvD;AAED;;;GAGG;AACH,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,WAAW,EAAE,SAAS,gBAAgB,EAAE,CAAC;IAClD,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAC;IACxC,QAAQ,CAAC,KAAK,EAAE,SAAS,0BAA0B,EAAE,CAAC;CACvD;AAgBD;;;;;;;GAOG;AACH,wBAAgB,6BAA6B,CAC3C,SAAS,EAAE,iBAAiB,EAC5B,KAAK,EAAE,oBAAoB,EAC3B,WAAW,EAAE,SAAS,eAAe,EAAE,GACtC,+BAA+B,CA6BjC"}

package/dist/binding-projection.js

@@ -0,0 +1 @@
+import{cloneContractValue as e}from"./clone.js";export function projectBlueprintFieldBindings(t,i,a){let o=e(t),s=e(i),l=e(a),u=[],d=e(o.model),f=n(o,s,u),p=new Map;for(let e of l)p.set(g(e.type,e.version),e);let h={blueprintId:o.id,definitions:p,diagnostics:u,fields:f?c(s.fields):[],modelCompatible:f,modelReference:d},_=[];return m(o.roots,e=>{_.push(r(e,h))}),e({diagnostics:u,model:d,nodes:_})}function n(e,t,n){let r=!0;for(let i of[{actual:t.id,code:`studio.binding/model-id-mismatch`,expected:e.model.id,member:`id`},{actual:t.version,code:`studio.binding/model-version-mismatch`,expected:e.model.version,member:`version`},{actual:t.revision,code:`studio.binding/model-revision-mismatch`,expected:e.model.revision,member:`revision`}])i.actual!==i.expected&&(r=!1,n.push(h(i.code,`The projected model ${i.member} {actual} does not match the Blueprint lock {expected}.`,`error`,{actual:i.actual,expected:i.expected,member:i.member},{artifactId:e.id})));return r}function r(e,t){let n=t.definitions.get(g(e.type,e.version))?.ports??[],r=new Set(n.map(e=>e.id)),o=Object.keys(e.bindings).filter(e=>!r.has(e)).sort(v),s=[...n.map(n=>i(e,n,t)),...o.map(n=>a(e,n,t))];return{nodeId:e.id,ports:s}}function i(t,n,r){let i=r.modelCompatible?r.fields.filter(e=>e.field.authoring?.hidden!==!0&&u(e.field,n)).map(({field:e,fieldPath:t})=>s(e,t)):[],a=t.bindings[n.id];if(a===void 0)return n.required&&r.diagnostics.push(h(`studio.binding/required-port-unbound`,`Required block port {port} is not bound to a source.`,`warning`,{port:n.id},{artifactId:r.blueprintId,nodeId:t.id})),{candidates:i,multiple:n.multiple,port:n.id,required:n.required,status:`unbound`,valueType:n.valueType};if(a.source.kind!==`entry-field`)return{binding:e(a),candidates:i,multiple:n.multiple,port:n.id,required:n.required,status:`non-field-source`,valueType:n.valueType};let c=[...a.source.fieldPath];if(!r.modelCompatible)return o(n,a,c,i);let m=l(r.fields,c);return m===void 0?(r.diagnostics.push(h(`studio.binding/field-missing`,`Binding port {port} addresses field path {fieldPath}, which the locked model no longer declares.`,`error`,{fieldPath:c.join(`.`),port:n.id},{artifactId:r.blueprintId,fieldPath:c,nodeId:t.id})),o(n,a,c,i)):d(m.field)===n.multiple?f(m.field,n.valueType)?{binding:e(a),boundFieldPath:c,candidates:i,multiple:n.multiple,port:n.id,required:n.required,status:`resolved`,valueType:n.valueType}:(r.diagnostics.push(h(`studio.binding/field-kind-incompatible`,`Binding port {port} expects {valueType}, but field {fieldPath} now projects as {fieldKind}.`,`error`,{fieldKind:p(m.field),fieldPath:c.join(`.`),port:n.id,valueType:n.valueType},{artifactId:r.blueprintId,fieldPath:c,nodeId:t.id})),o(n,a,c,i)):(r.diagnostics.push(h(`studio.binding/field-cardinality-incompatible`,`Binding port {port} and field {fieldPath} no longer have compatible cardinality.`,`error`,{fieldPath:c.join(`.`),port:n.id},{artifactId:r.blueprintId,fieldPath:c,nodeId:t.id})),o(n,a,c,i))}function a(t,n,r){let i=t.bindings[n];return i===void 0?{candidates:[],port:n,status:`invalid`}:(r.diagnostics.push(h(`studio.binding/port-missing`,`Binding port {port} is not declared by the locked block definition.`,`error`,{port:n},{artifactId:r.blueprintId,nodeId:t.id})),{binding:e(i),...i.source.kind===`entry-field`?{boundFieldPath:[...i.source.fieldPath]}:{},candidates:[],port:n,status:`invalid`})}function o(t,n,r,i){return{binding:e(n),boundFieldPath:[...r],candidates:i,multiple:t.multiple,port:t.id,required:t.required,status:`invalid`,valueType:t.valueType}}function s(t,n){return{cardinality:t.cardinality,...t.authoring?.control===void 0?{}:{control:t.authoring.control},fieldPath:[...n],...t.itemKind===void 0?{}:{itemKind:t.itemKind},kind:t.kind,label:e(t.label)}}function c(e){let t=[],n=(e,r)=>{let i=e.map((e,t)=>({field:e,index:t})).sort((e,t)=>(e.field.authoring?.order??2**53-1)-(t.field.authoring?.order??2**53-1)||e.index-t.index);for(let{field:e}of i){let i=[...r,e.id];t.push({field:e,fieldPath:i}),e.kind===`object`&&e.cardinality===`one`&&e.fields!==void 0&&n(e.fields,i)}};return n(e,[]),t}function l(e,t){return e.find(e=>_(e.fieldPath,t))}function u(e,t){return d(e)===t.multiple&&f(e,t.valueType)}function d(e){return e.cardinality===`many`}function f(e,t){let n=p(e);return n===t?!0:t===`text`?n===`string`||n===`enum`:t===`number`?n===`decimal`||n===`integer`:!1}function p(e){return e.kind===`collection`?e.itemKind??`object`:e.kind}function m(e,t){for(let n of e){t(n);for(let e of Object.keys(n.slots).sort(v))m(n.slots[e]??[],t)}}function h(e,t,n,r,i){return{code:e,...i===void 0?{}:{location:i},message:{defaultMessage:t,key:e},...r===void 0?{}:{parameters:r},severity:n}}function g(e,t){return`${e}@${t}`}function _(e,t){return e.length===t.length&&e.every((e,n)=>e===t[n])}function v(e,t){return e<t?-1:+(e>t)}

package/dist/canonical.js

@@ -1,100 +1 @@
-const DEFAULT_MAXIMUM_DEPTH = 64;
-/**
- * Serialize a bounded JSON value into the canonical cross-language form the
- * portability contract defines for checksums: UTF-8 JSON, object members
- * sorted by Unicode code unit, arrays in semantic order, minimal ECMA-404
- * string escaping, and finite numbers only. Every conforming runtime MUST
- * produce byte-identical output for the same value.
- */
-export function canonicalStringify(value, options = {}) {
-    const maximumDepth = options.maximumDepth ?? DEFAULT_MAXIMUM_DEPTH;
-    if (!Number.isInteger(maximumDepth) || maximumDepth < 1) {
-        throw new RangeError('Canonical serialization depth must be a positive integer.');
-    }
-    return serialize(value, maximumDepth, 0);
-}
-/**
- * The canonical UTF-8 bytes of a value; checksums in Studio contracts are
- * computed over exactly these bytes with the algorithm the referencing
- * contract names (SRI-style sha256 unless stated otherwise). Encoding is
- * implemented locally so the core stays free of DOM and platform globals.
- */
-export function canonicalUtf8Bytes(value, options = {}) {
-    const text = canonicalStringify(value, options);
-    const bytes = [];
-    for (const character of text) {
-        const codePoint = character.codePointAt(0);
-        if (codePoint === undefined) {
-            break;
-        }
-        if (codePoint <= 0x7f) {
-            bytes.push(codePoint);
-        }
-        else if (codePoint <= 0x7ff) {
-            bytes.push(0xc0 | (codePoint >> 6), 0x80 | (codePoint & 0x3f));
-        }
-        else if (codePoint <= 0xffff) {
-            bytes.push(0xe0 | (codePoint >> 12), 0x80 | ((codePoint >> 6) & 0x3f), 0x80 | (codePoint & 0x3f));
-        }
-        else {
-            bytes.push(0xf0 | (codePoint >> 18), 0x80 | ((codePoint >> 12) & 0x3f), 0x80 | ((codePoint >> 6) & 0x3f), 0x80 | (codePoint & 0x3f));
-        }
-    }
-    return Uint8Array.from(bytes);
-}
-function serialize(value, maximumDepth, depth) {
-    if (value === null) {
-        return 'null';
-    }
-    switch (typeof value) {
-        case 'boolean':
-            return value ? 'true' : 'false';
-        case 'number': {
-            if (!Number.isFinite(value)) {
-                throw new TypeError('Canonical JSON cannot represent a non-finite number.');
-            }
-            // JSON.stringify implements the deterministic ECMAScript number
-            // grammar; Object.is separates -0, which canonicalizes to 0.
-            return JSON.stringify(Object.is(value, -0) ? 0 : value);
-        }
-        case 'string':
-            return JSON.stringify(value);
-        case 'object':
-            break;
-        default:
-            throw new TypeError(`Canonical JSON cannot represent a ${typeof value} value.`);
-    }
-    if (depth >= maximumDepth) {
-        throw new RangeError(`Canonical serialization exceeds the depth limit of ${maximumDepth}.`);
-    }
-    if (Array.isArray(value)) {
-        const items = value.map((item) => {
-            if (item === undefined) {
-                throw new TypeError('Canonical JSON arrays cannot contain undefined entries.');
-            }
-            return serialize(item, maximumDepth, depth + 1);
-        });
-        return `[${items.join(',')}]`;
-    }
-    const prototype = Object.getPrototypeOf(value);
-    if (prototype !== Object.prototype && prototype !== null) {
-        throw new TypeError('Canonical JSON only serializes plain objects and arrays.');
-    }
-    const members = Object.keys(value).sort(compareCodeUnits);
-    const parts = [];
-    for (const member of members) {
-        if (member === '__proto__' || member === 'prototype' || member === 'constructor') {
-            throw new TypeError(`Canonical JSON forbids the object member name ${member}.`);
-        }
-        const memberValue = value[member];
-        if (memberValue === undefined) {
-            continue;
-        }
-        parts.push(`${JSON.stringify(member)}:${serialize(memberValue, maximumDepth, depth + 1)}`);
-    }
-    return `{${parts.join(',')}}`;
-}
-function compareCodeUnits(left, right) {
-    return left < right ? -1 : left > right ? 1 : 0;
-}
-//# sourceMappingURL=canonical.js.map
+export function canonicalStringify(e,t={}){let r=t.maximumDepth??64;if(!Number.isInteger(r)||r<1)throw RangeError(`Canonical serialization depth must be a positive integer.`);return n(e,r,0)}export function canonicalUtf8Bytes(t,n={}){let r=canonicalStringify(t,n),i=[];for(let e of r){let t=e.codePointAt(0);if(t===void 0)break;t<=127?i.push(t):t<=2047?i.push(192|t>>6,128|t&63):t<=65535?i.push(224|t>>12,128|t>>6&63,128|t&63):i.push(240|t>>18,128|t>>12&63,128|t>>6&63,128|t&63)}return Uint8Array.from(i)}function n(e,t,i){if(e===null)return`null`;switch(typeof e){case`boolean`:return e?`true`:`false`;case`number`:if(!Number.isFinite(e))throw TypeError(`Canonical JSON cannot represent a non-finite number.`);return JSON.stringify(Object.is(e,-0)?0:e);case`string`:return JSON.stringify(e);case`object`:break;default:throw TypeError(`Canonical JSON cannot represent a ${typeof e} value.`)}if(i>=t)throw RangeError(`Canonical serialization exceeds the depth limit of ${t}.`);if(Array.isArray(e))return`[${e.map(e=>{if(e===void 0)throw TypeError(`Canonical JSON arrays cannot contain undefined entries.`);return n(e,t,i+1)}).join(`,`)}]`;let a=Object.getPrototypeOf(e);if(a!==Object.prototype&&a!==null)throw TypeError(`Canonical JSON only serializes plain objects and arrays.`);let o=Object.keys(e).sort(r),s=[];for(let r of o){if(r===`__proto__`||r===`prototype`||r===`constructor`)throw TypeError(`Canonical JSON forbids the object member name ${r}.`);let a=e[r];a!==void 0&&s.push(`${JSON.stringify(r)}:${n(a,t,i+1)}`)}return`{${s.join(`,`)}}`}function r(e,t){return e<t?-1:+(e>t)}

package/dist/clone.js

@@ -1,4 +1 @@
-export function cloneContractValue(value) {
-    return JSON.parse(JSON.stringify(value));
-}
-//# sourceMappingURL=clone.js.map
+export function cloneContractValue(e){return JSON.parse(JSON.stringify(e))}

package/dist/commands.d.ts

@@ -1,5 +1,5 @@
 import type { BlueprintBatchOperation, BlueprintCommand, BlueprintDocument, StableId } from '@kumwe/studio-protocol';
-export type StudioCommandErrorCode = 'artifact-not-draft' | 'binding-not-found' | 'duplicate-field' | 'duplicate-node' | 'illegal-move' | 'invalid-batch' | 'invalid-id-map' | 'invalid-index' | 'invalid-order' | 'locale-mismatch' | 'mode-forbidden' | 'node-not-found' | 'parent-not-found' | 'property-not-found' | 'read-only-session' | 'stale-generation' | 'stale-state' | 'unsupported-command';
+export type StudioCommandErrorCode = 'artifact-not-draft' | 'binding-not-found' | 'duplicate-field' | 'duplicate-node' | 'illegal-move' | 'invalid-batch' | 'invalid-id-map' | 'invalid-index' | 'invalid-order' | 'locale-mismatch' | 'mode-forbidden' | 'node-not-found' | 'parent-not-found' | 'permission-forbidden' | 'property-not-found' | 'read-only-session' | 'resource-limit' | 'stale-generation' | 'stale-state' | 'unsupported-command';
 export declare class StudioCommandError extends Error {
     readonly code: StudioCommandErrorCode;
     constructor(code: StudioCommandErrorCode, message: string);

package/dist/commands.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"commands.d.ts","sourceRoot":"","sources":["../src/commands.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,uBAAuB,EACvB,gBAAgB,EAChB,iBAAiB,EASjB,QAAQ,EAET,MAAM,wBAAwB,CAAC;AAGhC,MAAM,MAAM,sBAAsB,GAC9B,oBAAoB,GACpB,mBAAmB,GACnB,iBAAiB,GACjB,gBAAgB,GAChB,cAAc,GACd,eAAe,GACf,gBAAgB,GAChB,eAAe,GACf,eAAe,GACf,iBAAiB,GACjB,gBAAgB,GAChB,gBAAgB,GAChB,kBAAkB,GAClB,oBAAoB,GACpB,mBAAmB,GACnB,kBAAkB,GAClB,aAAa,GACb,qBAAqB,CAAC;AAE1B,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,SAAgB,IAAI,EAAE,sBAAsB,CAAC;gBAE1B,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,MAAM;CAKjE;AAED,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,QAAQ,CAAC;CACd;AAUD,wBAAgB,YAAY,CAC1B,QAAQ,EAAE,iBAAiB,EAC3B,OAAO,EAAE,gBAAgB,GACxB,iBAAiB,CAqBnB;AAED,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,iBAAiB,EAC3B,OAAO,EAAE,gBAAgB,EACzB,OAAO,EAAE,QAAQ,CAAC,qBAAqB,CAAC,GACvC,gBAAgB,CA4DlB;AA2BD;;;;GAIG;AACH,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,iBAAiB,EAC3B,SAAS,EAAE,uBAAuB,GACjC,IAAI,CAgPN"}
+{"version":3,"file":"commands.d.ts","sourceRoot":"","sources":["../src/commands.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,uBAAuB,EACvB,gBAAgB,EAChB,iBAAiB,EASjB,QAAQ,EAET,MAAM,wBAAwB,CAAC;AAGhC,MAAM,MAAM,sBAAsB,GAC9B,oBAAoB,GACpB,mBAAmB,GACnB,iBAAiB,GACjB,gBAAgB,GAChB,cAAc,GACd,eAAe,GACf,gBAAgB,GAChB,eAAe,GACf,eAAe,GACf,iBAAiB,GACjB,gBAAgB,GAChB,gBAAgB,GAChB,kBAAkB,GAClB,sBAAsB,GACtB,oBAAoB,GACpB,mBAAmB,GACnB,gBAAgB,GAChB,kBAAkB,GAClB,aAAa,GACb,qBAAqB,CAAC;AAE1B,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,SAAgB,IAAI,EAAE,sBAAsB,CAAC;gBAE1B,IAAI,EAAE,sBAAsB,EAAE,OAAO,EAAE,MAAM;CAKjE;AAED,MAAM,WAAW,qBAAqB;IACpC,EAAE,EAAE,QAAQ,CAAC;CACd;AAUD,wBAAgB,YAAY,CAC1B,QAAQ,EAAE,iBAAiB,EAC3B,OAAO,EAAE,gBAAgB,GACxB,iBAAiB,CAqBnB;AAED,wBAAgB,aAAa,CAC3B,QAAQ,EAAE,iBAAiB,EAC3B,OAAO,EAAE,gBAAgB,EACzB,OAAO,EAAE,QAAQ,CAAC,qBAAqB,CAAC,GACvC,gBAAgB,CA4DlB;AA2BD;;;;GAIG;AACH,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,iBAAiB,EAC3B,SAAS,EAAE,uBAAuB,GACjC,IAAI,CAgPN"}