@marifold/core 0.60.0

package/dist/app/AppStore.js

@@ -0,0 +1,146 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AppStore = void 0;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const MarifoldError_1 = require("../errors/MarifoldError");
+const SkillValidator_1 = require("../skill/SkillValidator");
+const SkillAppCompiler_1 = require("./SkillAppCompiler");
+const SAFE_APP_NAME = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+const SKILL_APP_DEFINITION_FILE = 'skillapp.ts';
+/** Global App bundles under `<appsDir>/<name>/skillapp.ts`. Invalid bundles
+ * are skipped by list(); get() reports their exact validation failure. */
+class AppStore {
+    directory;
+    constructor(directory) {
+        this.directory = directory;
+    }
+    list() {
+        if (!fs.existsSync(this.directory))
+            return [];
+        const apps = [];
+        for (const entry of fs.readdirSync(this.directory, { withFileTypes: true })) {
+            if (!entry.isDirectory() || !SAFE_APP_NAME.test(entry.name))
+                continue;
+            try {
+                const app = this.get(entry.name);
+                if (app)
+                    apps.push(app);
+            }
+            catch {
+                // A catalog stays usable when one local definition is malformed.
+            }
+        }
+        return apps.sort((a, b) => a.app.title.localeCompare(b.app.title));
+    }
+    get(name) {
+        assertSafeAppName(name);
+        const bundle = path.join(this.directory, name);
+        const skillAppSource = path.join(bundle, SKILL_APP_DEFINITION_FILE);
+        if (!fs.existsSync(skillAppSource))
+            return undefined;
+        const realSource = requireConfinedFile(bundle, skillAppSource, 'SkillApp definition');
+        const definition = (0, SkillAppCompiler_1.compileSkillApp)(fs.readFileSync(realSource, 'utf-8'), realSource);
+        if (definition.app.name !== name) {
+            throw MarifoldError_1.MarifoldError.appInvalid(`App app.name '${definition.app.name}' must match bundle directory '${name}'.`, realSource);
+        }
+        this.validateLocalSkills(name, definition);
+        return definition;
+    }
+    require(name) {
+        const app = this.get(name);
+        if (!app)
+            throw MarifoldError_1.MarifoldError.appNotFound(name);
+        return app;
+    }
+    /** Resolve one v1 app-local Skill without profile/global fallback. */
+    requireLocalSkillSource(appName, skillName) {
+        assertSafeAppName(appName);
+        if (!/^[a-z0-9][a-z0-9_-]*$/.test(skillName)) {
+            throw MarifoldError_1.MarifoldError.appInvalid(`Invalid app-local skill name '${skillName}'.`);
+        }
+        const bundle = path.join(this.directory, appName);
+        const source = path.join(bundle, 'skills', skillName, 'SKILL.md');
+        if (!fs.existsSync(source))
+            throw MarifoldError_1.MarifoldError.skillNotFound(skillName);
+        return requireConfinedFile(bundle, source, `App-local skill '${skillName}'`);
+    }
+    validateLocalSkills(appName, definition) {
+        for (const registered of definition.skills) {
+            const source = this.requireLocalSkillSource(appName, registered.name);
+            const skill = (0, SkillValidator_1.parseSkill)(fs.readFileSync(source, 'utf-8'), source);
+            if (skill.name !== registered.name) {
+                throw MarifoldError_1.MarifoldError.appInvalid(`App-local Skill folder '${registered.name}' contains Skill '${skill.name}'. Names must match.`, source);
+            }
+            if (skill.mode && skill.mode !== 'chat') {
+                throw MarifoldError_1.MarifoldError.appInvalid(`SkillApp v1 only supports chat-mode Skills; '${skill.name}' uses '${skill.mode}'.`, source);
+            }
+            const variables = new Set(skill.variables.map(variable => variable.name));
+            for (const operation of definition.operations.filter(candidate => candidate.skill === registered.name)) {
+                const parameters = new Set(Object.keys(operation.parameters));
+                const unknown = [...parameters].filter(name => !variables.has(name));
+                if (unknown.length > 0) {
+                    throw MarifoldError_1.MarifoldError.appInvalid(`SkillApp operation '${operation.name}' supplies unknown Skill parameter(s): ${unknown.join(', ')}.`, source);
+                }
+                const missing = skill.variables
+                    .filter(variable => variable.required && variable.default === undefined && !parameters.has(variable.name))
+                    .map(variable => variable.name);
+                if (missing.length > 0) {
+                    throw MarifoldError_1.MarifoldError.appInvalid(`SkillApp operation '${operation.name}' does not bind required Skill parameter(s): ${missing.join(', ')}.`, source);
+                }
+                operation.requiredInputs = [...new Set(skill.variables
+                        .filter(variable => variable.required && variable.default === undefined)
+                        .map(variable => operation.parameters[variable.name]))];
+            }
+        }
+    }
+}
+exports.AppStore = AppStore;
+function requireConfinedFile(bundle, source, label) {
+    const bundleRoot = fs.realpathSync(bundle);
+    const realSource = fs.realpathSync(source);
+    const relative = path.relative(bundleRoot, realSource);
+    if (relative === '..' || relative.startsWith(`..${path.sep}`) || path.isAbsolute(relative)) {
+        throw MarifoldError_1.MarifoldError.appInvalid(`${label} escapes bundle confinement.`, source);
+    }
+    return realSource;
+}
+function assertSafeAppName(name) {
+    if (!SAFE_APP_NAME.test(name)) {
+        throw MarifoldError_1.MarifoldError.appInvalid(`Invalid App name '${name}'.`);
+    }
+}
+//# sourceMappingURL=AppStore.js.map

package/dist/app/AppStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AppStore.js","sourceRoot":"","sources":["../../src/app/AppStore.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,MAAY,EAAE,+BAAW;AACzB,MAAY,IAAI,iCAAa;AAC7B,2DAAwD;AACxD,4DAAqD;AACrD,yDAAqD;AAGrD,MAAM,aAAa,GAAG,4BAA4B,CAAC;AACnD,MAAM,yBAAyB,GAAG,aAAa,CAAC;AAEhD;0EAC0E;AAC1E;IAC+B,SAAS;IAAtC,YAA6B,SAAiB;yBAAjB,SAAS;IAAW,CAAC;IAElD,IAAI;QACF,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC;YAAE,OAAO,EAAE,CAAC;QAC9C,MAAM,IAAI,GAAyB,EAAE,CAAC;QACtC,KAAK,MAAM,KAAK,IAAI,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YAC5E,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;gBAAE,SAAS;YACtE,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBACjC,IAAI,GAAG;oBAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC1B,CAAC;YAAC,MAAM,CAAC;gBACP,iEAAiE;YACnE,CAAC;QACH,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;IACrE,CAAC;IAED,GAAG,CAAC,IAAY;QACd,iBAAiB,CAAC,IAAI,CAAC,CAAC;QACxB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAC/C,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAC;QACpE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,cAAc,CAAC;YAAE,OAAO,SAAS,CAAC;QACrD,MAAM,UAAU,GAAG,mBAAmB,CAAC,MAAM,EAAE,cAAc,EAAE,qBAAqB,CAAC,CAAC;QACtF,MAAM,UAAU,GAAG,IAAA,kCAAe,EAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,UAAU,CAAC,CAAC;QACrF,IAAI,UAAU,CAAC,GAAG,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;YACjC,MAAM,6BAAa,CAAC,UAAU,CAC5B,iBAAiB,UAAU,CAAC,GAAG,CAAC,IAAI,kCAAkC,IAAI,IAAI,EAC9E,UAAU,CACX,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,mBAAmB,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC3C,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,OAAO,CAAC,IAAY;QAClB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,CAAC,GAAG;YAAE,MAAM,6BAAa,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;QAChD,OAAO,GAAG,CAAC;IACb,CAAC;IAED,sEAAsE;IACtE,uBAAuB,CAAC,OAAe,EAAE,SAAiB;QACxD,iBAAiB,CAAC,OAAO,CAAC,CAAC;QAC3B,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7C,MAAM,6BAAa,CAAC,UAAU,CAAC,iCAAiC,SAAS,IAAI,CAAC,CAAC;QACjF,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;QAClE,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,MAAM,6BAAa,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QACzE,OAAO,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,oBAAoB,SAAS,GAAG,CAAC,CAAC;IAC/E,CAAC;IAEO,mBAAmB,CAAC,OAAe,EAAE,UAA8B;QACzE,KAAK,MAAM,UAAU,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC;YAC3C,MAAM,MAAM,GAAG,IAAI,CAAC,uBAAuB,CAAC,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC;YACtE,MAAM,KAAK,GAAG,IAAA,2BAAU,EAAC,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC;YACnE,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,CAAC,IAAI,EAAE,CAAC;gBACnC,MAAM,6BAAa,CAAC,UAAU,CAC5B,2BAA2B,UAAU,CAAC,IAAI,qBAAqB,KAAK,CAAC,IAAI,sBAAsB,EAC/F,MAAM,CACP,CAAC;YACJ,CAAC;YACD,IAAI,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBACxC,MAAM,6BAAa,CAAC,UAAU,CAC5B,gDAAgD,KAAK,CAAC,IAAI,WAAW,KAAK,CAAC,IAAI,IAAI,EACnF,MAAM,CACP,CAAC;YACJ,CAAC;YACD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;YAC1E,KAAK,MAAM,SAAS,IAAI,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,SAAS,CAAC,KAAK,KAAK,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvG,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC;gBAC9D,MAAM,OAAO,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;gBACrE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACvB,MAAM,6BAAa,CAAC,UAAU,CAC5B,uBAAuB,SAAS,CAAC,IAAI,0CAA0C,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EACpG,MAAM,CACP,CAAC;gBACJ,CAAC;gBACD,MAAM,OAAO,GAAG,KAAK,CAAC,SAAS;qBAC5B,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;qBACzG,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;gBAClC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACvB,MAAM,6BAAa,CAAC,UAAU,CAC5B,uBAAuB,SAAS,CAAC,IAAI,gDAAgD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAC1G,MAAM,CACP,CAAC;gBACJ,CAAC;gBACD,SAAS,CAAC,cAAc,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,SAAS;yBACnD,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS,CAAC;yBACvE,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,SAAS,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAC5D,CAAC;QACH,CAAC;IACH,CAAC;CACF;;AAED,SAAS,mBAAmB,CAAC,MAAc,EAAE,MAAc,EAAE,KAAa;IACxE,MAAM,UAAU,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,UAAU,GAAG,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IACvD,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3F,MAAM,6BAAa,CAAC,UAAU,CAAC,GAAG,KAAK,8BAA8B,EAAE,MAAM,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY;IACrC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,MAAM,6BAAa,CAAC,UAAU,CAAC,qBAAqB,IAAI,IAAI,CAAC,CAAC;IAChE,CAAC;AACH,CAAC"}

package/dist/app/AppValidator.d.ts

@@ -0,0 +1,10 @@
+import { AppDefinition } from './AppSchema';
+export interface AppValidationResult {
+    ok: boolean;
+    definition?: AppDefinition;
+    errors: string[];
+}
+/** Parse and validate an App TOML document (docs/app.md, v0 rules). */
+export declare function validateAppToml(source: string): AppValidationResult;
+export declare function validateApp(raw: Record<string, unknown>): AppValidationResult;
+//# sourceMappingURL=AppValidator.d.ts.map

package/dist/app/AppValidator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"AppValidator.d.ts","sourceRoot":"","sources":["../../src/app/AppValidator.ts"],"names":[],"mappings":"AACA,OAAO,EAQL,aAAa,EAWd,MAAM,aAAa,CAAC;AAqBrB,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,OAAO,CAAC;IACZ,UAAU,CAAC,EAAE,aAAa,CAAC;IAC3B,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,uEAAuE;AACvE,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,mBAAmB,CAQnE;AAED,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,mBAAmB,CA0B7E"}

package/dist/app/AppValidator.js

@@ -0,0 +1,503 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validateAppToml = validateAppToml;
+exports.validateApp = validateApp;
+const smol_toml_1 = require("smol-toml");
+const AppSchema_1 = require("./AppSchema");
+const KEBAB_CASE = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+const SNAKE_CASE = /^[a-z0-9]+(?:_[a-z0-9]+)*$/;
+const SKILL_NAME = /^[a-z0-9][a-z0-9_-]*$/;
+const PROFILE_NAME = /^[A-Za-z0-9_-]+$/;
+const SEMVER = /^(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)(?:-[0-9A-Za-z.-]+)?$/;
+const TEMPLATE_PLACEHOLDER = /\{\{\s*([a-z0-9_]+)\s*\}\}/g;
+const VARIABLE_TYPES = new Set(['string', 'number', 'boolean', 'enum']);
+const VARIABLE_ROLES = new Set(['input', 'output', 'state']);
+const COMPONENTS = new Set([
+    'row', 'column', 'spacer', 'text', 'text_input', 'textarea', 'select', 'preview', 'tabs', 'file_picker', 'button',
+    'download_button',
+]);
+const ACTION_KINDS = new Set(['skill']);
+const FILES_PERMISSIONS = new Set(['none', 'read', 'write']);
+const LAYOUT_GAPS = new Set(['none', 'small', 'medium', 'large']);
+const RESPONSIVE_BEHAVIORS = new Set(['stack']);
+const MAX_LAYOUT_DEPTH = 4;
+const MAX_LAYOUT_ITEMS = 100;
+/** Parse and validate an App TOML document (docs/app.md, v0 rules). */
+function validateAppToml(source) {
+    let raw;
+    try {
+        raw = (0, smol_toml_1.parse)(source);
+    }
+    catch (error) {
+        return { ok: false, errors: [`Invalid TOML: ${error instanceof Error ? error.message : String(error)}`] };
+    }
+    return validateApp(raw);
+}
+function validateApp(raw) {
+    const errors = [];
+    if (raw.schema !== AppSchema_1.APP_SCHEMA) {
+        errors.push(`schema must be "${AppSchema_1.APP_SCHEMA}".`);
+    }
+    const app = readApp(raw.app, errors);
+    const actors = readActors(raw.actors, errors);
+    const variables = readVariables(raw.variables, errors);
+    const execution = readExecution(raw.execution, errors);
+    const permissions = readPermissions(raw.permissions, errors);
+    const actions = readActions(raw.actions, actors, variables, permissions, errors);
+    const layout = readLayout(raw.layout, variables, actions, permissions, errors, {
+        depth: 0,
+        insideTabs: false,
+        count: { value: 0 },
+        path: 'layout',
+    });
+    if (errors.length > 0)
+        return { ok: false, errors };
+    return {
+        ok: true,
+        errors: [],
+        definition: { schema: AppSchema_1.APP_SCHEMA, app: app, actors, variables, layout, actions, execution, permissions },
+    };
+}
+function readApp(value, errors) {
+    const app = asTable(value);
+    if (!app) {
+        errors.push('[app] table is required.');
+        return undefined;
+    }
+    const name = asString(app.name);
+    const title = asString(app.title);
+    if (!name || !KEBAB_CASE.test(name))
+        errors.push('app.name is required and must be kebab-case.');
+    if (!title)
+        errors.push('app.title is required.');
+    const version = asString(app.version);
+    if (version && !SEMVER.test(version))
+        errors.push('app.version must use Semantic Versioning without a "v" prefix.');
+    const description = asString(app.description);
+    if (!name || !title)
+        return undefined;
+    return {
+        name,
+        title,
+        ...(version ? { version } : {}),
+        ...(description ? { description } : {}),
+    };
+}
+function readActors(value, errors) {
+    const items = asArrayOfTables(value);
+    if (!items)
+        return [];
+    const seen = new Set();
+    const actors = [];
+    items.forEach((item, index) => {
+        const label = `actors[${index}]`;
+        const name = asString(item.name);
+        if (!name || !SNAKE_CASE.test(name)) {
+            errors.push(`${label}.name is required and must be snake_case.`);
+            return;
+        }
+        if (seen.has(name)) {
+            errors.push(`Duplicate actor name '${name}'.`);
+            return;
+        }
+        seen.add(name);
+        const profile = asString(item.profile);
+        if (!profile || !PROFILE_NAME.test(profile)) {
+            errors.push(`${label}.profile is required and must be a valid profile name.`);
+            return;
+        }
+        actors.push({
+            name,
+            profile,
+            ...(asString(item.label) ? { label: asString(item.label) } : {}),
+        });
+    });
+    return actors;
+}
+function readVariables(value, errors) {
+    const items = asArrayOfTables(value);
+    if (!items || items.length === 0) {
+        errors.push('At least one [[variables]] entry is required.');
+        return [];
+    }
+    const seen = new Set();
+    const variables = [];
+    items.forEach((item, index) => {
+        const label = `variables[${index}]`;
+        const name = asString(item.name);
+        if (!name || !SNAKE_CASE.test(name)) {
+            errors.push(`${label}.name is required and must be snake_case.`);
+            return;
+        }
+        if (seen.has(name)) {
+            errors.push(`Duplicate variable name '${name}'.`);
+            return;
+        }
+        seen.add(name);
+        const type = asString(item.type);
+        if (!type || !VARIABLE_TYPES.has(type)) {
+            errors.push(`${label}.type must be string, number, boolean, or enum.`);
+            return;
+        }
+        const role = asString(item.role);
+        if (!role || !VARIABLE_ROLES.has(role)) {
+            errors.push(`${label}.role must be input, output, or state.`);
+            return;
+        }
+        const options = item.options;
+        if (type === 'enum') {
+            if (!Array.isArray(options) || options.length === 0 || !options.every(o => typeof o === 'string')) {
+                errors.push(`${label}.options must be a non-empty string array for enum variables.`);
+                return;
+            }
+        }
+        else if (options !== undefined) {
+            errors.push(`${label}.options is only allowed for enum variables.`);
+            return;
+        }
+        const variable = {
+            name,
+            type,
+            role,
+            ...(asString(item.label) ? { label: asString(item.label) } : {}),
+            ...(typeof item.required === 'boolean' ? { required: item.required } : {}),
+            ...(item.default !== undefined ? { default: item.default } : {}),
+            ...(type === 'enum' ? { options: options } : {}),
+        };
+        if (item.required !== undefined && typeof item.required !== 'boolean') {
+            errors.push(`${label}.required must be a boolean.`);
+            return;
+        }
+        if (variable.default !== undefined && !defaultMatchesType(variable)) {
+            errors.push(`${label}.default does not match type '${type}'.`);
+            return;
+        }
+        variables.push(variable);
+    });
+    return variables;
+}
+function defaultMatchesType(variable) {
+    const value = variable.default;
+    switch (variable.type) {
+        case 'string': return typeof value === 'string';
+        case 'number': return typeof value === 'number';
+        case 'boolean': return typeof value === 'boolean';
+        case 'enum': return typeof value === 'string' && (variable.options ?? []).includes(value);
+    }
+}
+function readExecution(value, errors) {
+    const table = asTable(value);
+    if (!table)
+        return { ...AppSchema_1.DEFAULT_APP_EXECUTION };
+    const readBool = (key, fallback) => {
+        const raw = table[key];
+        if (raw === undefined)
+            return fallback;
+        if (typeof raw !== 'boolean') {
+            errors.push(`execution.${key} must be a boolean.`);
+            return fallback;
+        }
+        return raw;
+    };
+    if (table.history !== undefined) {
+        errors.push('execution.history is not supported; App actions never use Agent transcripts.');
+    }
+    return {
+        think: readBool('think', AppSchema_1.DEFAULT_APP_EXECUTION.think),
+        memory: readBool('memory', AppSchema_1.DEFAULT_APP_EXECUTION.memory),
+        profileContext: readBool('profile_context', AppSchema_1.DEFAULT_APP_EXECUTION.profileContext),
+    };
+}
+function readPermissions(value, errors) {
+    const table = asTable(value);
+    if (!table)
+        return { ...AppSchema_1.DEFAULT_APP_PERMISSIONS };
+    const files = table.files === undefined ? AppSchema_1.DEFAULT_APP_PERMISSIONS.files : asString(table.files);
+    if (!FILES_PERMISSIONS.has(files)) {
+        errors.push('permissions.files must be "none", "read", or "write".');
+    }
+    const readBool = (key, fallback) => {
+        const raw = table[key];
+        if (raw === undefined)
+            return fallback;
+        if (typeof raw !== 'boolean') {
+            errors.push(`permissions.${key} must be a boolean.`);
+            return fallback;
+        }
+        return raw;
+    };
+    return {
+        providerCalls: readBool('provider_calls', AppSchema_1.DEFAULT_APP_PERMISSIONS.providerCalls),
+        files: FILES_PERMISSIONS.has(files) ? files : AppSchema_1.DEFAULT_APP_PERMISSIONS.files,
+        shell: readBool('shell', AppSchema_1.DEFAULT_APP_PERMISSIONS.shell),
+        network: readBool('network', AppSchema_1.DEFAULT_APP_PERMISSIONS.network),
+        export: readBool('export', AppSchema_1.DEFAULT_APP_PERMISSIONS.export),
+    };
+}
+function readActions(value, actors, variables, permissions, errors) {
+    const items = asArrayOfTables(value);
+    if (!items)
+        return [];
+    const actorNames = new Set(actors.map(actor => actor.name));
+    const variableNames = new Set(variables.map(v => v.name));
+    const writableNames = new Set(variables.filter(v => v.role !== 'input').map(v => v.name));
+    const seen = new Set();
+    const actions = [];
+    items.forEach((item, index) => {
+        const label = `actions[${index}]`;
+        const name = asString(item.name);
+        if (!name || !SNAKE_CASE.test(name)) {
+            errors.push(`${label}.name is required and must be snake_case.`);
+            return;
+        }
+        if (seen.has(name)) {
+            errors.push(`Duplicate action name '${name}'.`);
+            return;
+        }
+        seen.add(name);
+        const kind = asString(item.kind);
+        if (!kind || !ACTION_KINDS.has(kind)) {
+            errors.push(`${label}.kind must be skill.`);
+            return;
+        }
+        const output = asString(item.output);
+        if (!output || !variableNames.has(output)) {
+            errors.push(`${label}.output must reference a declared variable.`);
+            return;
+        }
+        if (!writableNames.has(output)) {
+            errors.push(`${label}.output must reference an output or state variable, not an input.`);
+            return;
+        }
+        if (!permissions.providerCalls) {
+            errors.push(`${label} requires permissions.provider_calls = true.`);
+            return;
+        }
+        const actor = asString(item.actor);
+        if (!actor || !actorNames.has(actor)) {
+            errors.push(`${label}.actor must reference a declared actor.`);
+            return;
+        }
+        const skill = asString(item.skill);
+        if (!skill || !SKILL_NAME.test(skill)) {
+            errors.push(`${label}.skill is required and must be a valid skill name.`);
+            return;
+        }
+        const argumentsTable = asTable(item.arguments);
+        if (!argumentsTable) {
+            errors.push(`${label}.arguments is required for skill actions.`);
+            return;
+        }
+        const actionArguments = {};
+        for (const [key, argumentValue] of Object.entries(argumentsTable)) {
+            if (!SNAKE_CASE.test(key)) {
+                errors.push(`${label}.arguments key '${key}' must be snake_case.`);
+                continue;
+            }
+            if (!isVariableValue(argumentValue)) {
+                errors.push(`${label}.arguments.${key} must be a string, number, or boolean.`);
+                continue;
+            }
+            if (typeof argumentValue === 'string') {
+                checkTemplate(argumentValue, variableNames, `${label}.arguments.${key}`, errors);
+            }
+            actionArguments[key] = argumentValue;
+        }
+        actions.push({ name, kind, actor, skill, arguments: actionArguments, output });
+    });
+    return actions;
+}
+function readLayout(value, variables, actions, permissions, errors, context) {
+    if (context.depth > MAX_LAYOUT_DEPTH) {
+        errors.push(`${context.path} exceeds the maximum layout depth of ${MAX_LAYOUT_DEPTH}.`);
+        return [];
+    }
+    const items = asArrayOfTables(value);
+    if (!items || items.length === 0) {
+        errors.push(`${context.path} must contain at least one layout item.`);
+        return [];
+    }
+    const variableByName = new Map(variables.map(v => [v.name, v]));
+    const actionNames = new Set(actions.map(a => a.name));
+    const layout = [];
+    items.forEach((item, index) => {
+        const label = `${context.path}[${index}]`;
+        context.count.value += 1;
+        if (context.count.value > MAX_LAYOUT_ITEMS) {
+            if (context.count.value === MAX_LAYOUT_ITEMS + 1) {
+                errors.push(`Layout exceeds the maximum of ${MAX_LAYOUT_ITEMS} items.`);
+            }
+            return;
+        }
+        const component = asString(item.component);
+        if (!component || !COMPONENTS.has(component)) {
+            errors.push(`${label}.component must be one of: ${[...COMPONENTS].join(', ')}.`);
+            return;
+        }
+        const gap = asString(item.gap);
+        if (gap && !LAYOUT_GAPS.has(gap))
+            errors.push(`${label}.gap must be none, small, medium, or large.`);
+        const responsive = asString(item.responsive);
+        if (responsive && !RESPONSIVE_BEHAVIORS.has(responsive)) {
+            errors.push(`${label}.responsive must be stack.`);
+        }
+        if (item.grow !== undefined && typeof item.grow !== 'boolean') {
+            errors.push(`${label}.grow must be a boolean.`);
+        }
+        if (item.show_label !== undefined && typeof item.show_label !== 'boolean') {
+            errors.push(`${label}.show_label must be a boolean.`);
+        }
+        const labelControl = component === 'text_input' || component === 'textarea' || component === 'select';
+        if (item.show_label !== undefined && !labelControl) {
+            errors.push(`${label}.show_label is only allowed on text_input, textarea, or select.`);
+        }
+        const entry = {
+            component,
+            ...(asString(item.bind) ? { bind: asString(item.bind) } : {}),
+            ...(asString(item.label) ? { label: asString(item.label) } : {}),
+            ...(asString(item.action) ? { action: asString(item.action) } : {}),
+            ...(asString(item.content) ? { content: asString(item.content) } : {}),
+            ...(asString(item.format) ? { format: asString(item.format) } : {}),
+            ...(typeof item.show_label === 'boolean' ? { showLabel: item.show_label } : {}),
+            ...(gap && LAYOUT_GAPS.has(gap) ? { gap } : {}),
+            ...(responsive && RESPONSIVE_BEHAVIORS.has(responsive) ? { responsive } : {}),
+            ...(typeof item.grow === 'boolean' ? { grow: item.grow } : {}),
+        };
+        switch (component) {
+            case 'row':
+            case 'column': {
+                const children = asArrayOfTables(item.children);
+                if (!children || children.length === 0) {
+                    errors.push(`${label} (${component}) requires a non-empty children array.`);
+                    break;
+                }
+                entry.children = readLayout(children, variables, actions, permissions, errors, {
+                    ...context,
+                    depth: context.depth + 1,
+                    path: `${label}.children`,
+                });
+                break;
+            }
+            case 'spacer':
+                break;
+            case 'text':
+                if (!entry.content)
+                    errors.push(`${label} (text) requires content.`);
+                break;
+            case 'button':
+                if (!entry.action || !actionNames.has(entry.action)) {
+                    errors.push(`${label} (button) requires action referencing a declared action.`);
+                }
+                break;
+            case 'tabs': {
+                if (context.insideTabs) {
+                    errors.push(`${label}: tabs cannot be nested.`);
+                    break;
+                }
+                if (!Array.isArray(item.tabs) || item.tabs.length === 0) {
+                    errors.push(`${label} (tabs) requires a non-empty tabs array.`);
+                    break;
+                }
+                entry.tabs = item.tabs.map((tab, tabIndex) => readLayout(tab, variables, actions, permissions, errors, {
+                    ...context,
+                    depth: context.depth + 1,
+                    insideTabs: true,
+                    path: `${label}.tabs[${tabIndex}]`,
+                }));
+                break;
+            }
+            case 'file_picker': {
+                if (permissions.files === 'none')
+                    errors.push(`${label} (file_picker) requires permissions.files of read or write.`);
+                const variable = requireBind(entry, variableByName, label, errors);
+                requireWritableVariable(variable, label, errors);
+                break;
+            }
+            case 'download_button':
+                if (!permissions.export)
+                    errors.push(`${label} (download_button) requires permissions.export = true.`);
+                requireBind(entry, variableByName, label, errors);
+                break;
+            case 'select': {
+                const variable = requireBind(entry, variableByName, label, errors);
+                if (variable && variable.type !== 'enum')
+                    errors.push(`${label} (select) must bind an enum variable.`);
+                requireWritableVariable(variable, label, errors);
+                break;
+            }
+            case 'textarea': {
+                const variable = requireBind(entry, variableByName, label, errors);
+                if (variable && variable.type !== 'string')
+                    errors.push(`${label} (textarea) must bind a string variable.`);
+                requireWritableVariable(variable, label, errors);
+                break;
+            }
+            case 'text_input': {
+                const variable = requireBind(entry, variableByName, label, errors);
+                if (variable && variable.type !== 'string' && variable.type !== 'number') {
+                    errors.push(`${label} (text_input) must bind a string or number variable.`);
+                }
+                requireWritableVariable(variable, label, errors);
+                break;
+            }
+            case 'preview':
+                if (entry.format && entry.format !== 'text' && entry.format !== 'markdown') {
+                    errors.push(`${label} (preview) format must be text or markdown.`);
+                }
+                requireBind(entry, variableByName, label, errors);
+                break;
+        }
+        layout.push(entry);
+    });
+    return layout;
+}
+function requireWritableVariable(variable, label, errors) {
+    if (variable?.role === 'output') {
+        errors.push(`${label} cannot edit output variable '${variable.name}'. Use preview instead.`);
+    }
+}
+function requireBind(entry, variables, label, errors) {
+    if (!entry.bind) {
+        errors.push(`${label} (${entry.component}) requires bind.`);
+        return undefined;
+    }
+    const variable = variables.get(entry.bind);
+    if (!variable) {
+        errors.push(`${label}.bind references unknown variable '${entry.bind}'.`);
+        return undefined;
+    }
+    return variable;
+}
+function checkTemplate(template, variableNames, label, errors) {
+    for (const match of template.matchAll(TEMPLATE_PLACEHOLDER)) {
+        if (!variableNames.has(match[1])) {
+            errors.push(`${label} references unknown variable '{{${match[1]}}}'.`);
+        }
+    }
+}
+function isVariableValue(value) {
+    return typeof value === 'string'
+        || typeof value === 'boolean'
+        || (typeof value === 'number' && Number.isFinite(value));
+}
+function asTable(value) {
+    if (typeof value === 'object' && value !== null && !Array.isArray(value))
+        return value;
+    return undefined;
+}
+function asArrayOfTables(value) {
+    if (!Array.isArray(value))
+        return undefined;
+    const tables = [];
+    for (const item of value) {
+        const table = asTable(item);
+        if (!table)
+            return undefined;
+        tables.push(table);
+    }
+    return tables;
+}
+function asString(value) {
+    return typeof value === 'string' && value.trim() ? value : undefined;
+}
+//# sourceMappingURL=AppValidator.js.map