@mdbase-dev/sdk 0.0.0-stage → 0.1.0-beta.149

package/dist/application/registration.js

@@ -0,0 +1,372 @@
+import { isNativeLoopbackOrigin } from "@mdbase-dev/connect-protocol/manifest";
+import { APPLICATION_MANIFEST_MAX_BYTES, parseVersionedAppManifest, } from "@mdbase-dev/connect-protocol/manifest";
+import { selectAppEnvironment } from "../app-host/app-environment.js";
+import { MdbaseError, mdbaseError } from "../errors.js";
+import { applicationDeclaration, plainApplicationManifest, } from "./declaration.js";
+import { appReleaseTrust } from "./packaged-trust.js";
+import { applicationLoopbackAllowed } from "./local-build.js";
+import { REGISTRATION_REFUSAL_MAX_BYTES, registrationRefusal, } from "./registration-refusal.js";
+const nativeId = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/;
+const nil = "00000000-0000-0000-0000-000000000000";
+const transient = new Set([408, 429, 500, 502, 503, 504]);
+const binding = () => mdbaseError("invalid_request", "Application registration binding mismatch", "application_registration_binding");
+const badReply = () => mdbaseError("unavailable", "Application registration evidence invalid", "application_registration_response");
+const unknown = () => mdbaseError("outcome_unknown", "Original application registration outcome unknown", "application_registration_unknown");
+function record(value) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        throw badReply();
+    return value;
+}
+/** Structural equality of canonical parser outputs, NOT a parser, compiler or
+ * digest implementation. The original authenticated CP supplies the digest. */
+/** RFC 8785-style canonical JSON, as the CP hashes a registered manifest. */
+function canonicalJson(value) {
+    if (value === null || typeof value === "string" || typeof value === "boolean" || typeof value === "number")
+        return JSON.stringify(value);
+    if (Array.isArray(value))
+        return `[${value.map(canonicalJson).join(",")}]`;
+    const entries = Object.entries(value)
+        .filter(([, entry]) => entry !== undefined)
+        .sort(([left], [right]) => (left < right ? -1 : left > right ? 1 : 0));
+    return `{${entries.map(([key, entry]) => `${JSON.stringify(key)}:${canonicalJson(entry)}`).join(",")}}`;
+}
+export async function manifestDigest(manifest) {
+    const hash = new Uint8Array(await crypto.subtle.digest("SHA-256", new TextEncoder().encode(canonicalJson(manifest))));
+    return Array.from(hash, (byte) => byte.toString(16).padStart(2, "0")).join("");
+}
+function sameJson(left, right) {
+    const stack = [[left, right]];
+    let nodes = 0;
+    while (stack.length) {
+        if (++nodes > 524288)
+            return false;
+        const [a, b] = stack.pop();
+        if (a === b)
+            continue;
+        if (!a ||
+            !b ||
+            typeof a !== "object" ||
+            typeof b !== "object" ||
+            Array.isArray(a) !== Array.isArray(b))
+            return false;
+        const keys = Object.keys(a);
+        if (keys.length !== Object.keys(b).length)
+            return false;
+        for (const key of keys) {
+            if (!Object.hasOwn(b, key))
+                return false;
+            stack.push([
+                a[key],
+                b[key],
+            ]);
+        }
+    }
+    return true;
+}
+/** SDK-internal public metadata resolution, BEFORE Worker/DB/key allocation.
+ * The sole retry exception is the exact immutable register upsert: CP uniqueness
+ * preserves the same application row and reconciliation job for identical body
+ * bytes. This does not authorize retrying enrollment/create/other unknown writes.
+ * No app-supplied endpoint, trust or storage rebinding. P5: a verified receipt
+ * is remembered per CP origin and canonical manifest digest, so a warm open
+ * registers only when the manifest changed (the CP binds the id to the digest). */
+export async function resolveApplicationRegistration(input) {
+    const original = input.declaration, signal = input.signal, guard = input.isCurrent, fetcher = input.fetch ?? globalThis.fetch;
+    const sourceManifest = original.manifest;
+    const declaration = applicationDeclaration(original);
+    function check() {
+        try {
+            if (!signal.aborted &&
+                input.signal === signal &&
+                input.declaration === original &&
+                input.isCurrent === guard &&
+                original.id === declaration.id &&
+                original.name === declaration.name &&
+                original.origin === declaration.origin &&
+                original.environment === declaration.environment &&
+                original.manifest === sourceManifest &&
+                guard.call(input) === true &&
+                !signal.aborted)
+                return;
+        }
+        catch {
+            /* no caller diagnostic content */
+        }
+        throw mdbaseError("cancelled", "Application registration fenced", "application_registration_fenced");
+    }
+    check();
+    let environment, manifest;
+    try {
+        environment = selectAppEnvironment({
+            environment: declaration.environment,
+            appOrigin: declaration.origin,
+            platform: declaration.manifest.platform === "native" ? "native" : undefined,
+            release: appReleaseTrust(),
+        });
+    }
+    catch {
+        check();
+        throw mdbaseError("unavailable", "SDK registration environment unavailable", "application_registration_unavailable");
+    }
+    try {
+        manifest = parseVersionedAppManifest(plainApplicationManifest(declaration), {
+            allowLocal: applicationLoopbackAllowed(declaration.environment),
+        }).manifest;
+    }
+    catch {
+        throw binding();
+    }
+    // The app origin is the manifest homepage's, or one declared exactly under
+    // installation_origins for this environment and installation kind
+    // (Capacitor `capacitor://` and Android https, extension pages).
+    const declaredOrigins = declaration.environment === "local" ? [] :
+        manifest.installation_origins?.[declaration.environment]?.[declaration.installationKind] ?? [];
+    if (manifest.name !== declaration.name ||
+        manifest.distribution === "portable" ||
+        (new URL(manifest.homepage).origin !== declaration.origin &&
+            !declaredOrigins.includes(declaration.origin) &&
+            !("platform" in manifest && manifest.platform === "native" && declaration.installationKind === "app-runtime" && isNativeLoopbackOrigin(declaration.origin))))
+        throw binding();
+    const body = JSON.stringify({ manifest }), url = `${environment.cpOrigin}/v1/apps/register`;
+    const cacheKey = `mdbase.app.registration.v1.${encodeURIComponent(environment.cpOrigin)}.${encodeURIComponent(manifest.id)}`;
+    const storage = () => { try {
+        return globalThis.localStorage ?? null;
+    }
+    catch {
+        return null;
+    } };
+    const localDigest = storage() ? await manifestDigest(manifest).catch(() => null) : null;
+    check();
+    const remember = (registered) => {
+        if (!localDigest)
+            return;
+        try {
+            storage()?.setItem(cacheKey, JSON.stringify({ v: 1, digest: localDigest, declaredId: declaration.id, ...registered }));
+        }
+        catch { /* optional */ }
+    };
+    {
+        let cached = null;
+        try {
+            const raw = storage()?.getItem(cacheKey);
+            cached = raw ? record(JSON.parse(raw)) : null;
+        }
+        catch {
+            cached = null;
+        }
+        if (cached && localDigest && cached.v === 1 && cached.digest === localDigest && cached.declaredId === declaration.id
+            && typeof cached.id === "string" && nativeId.test(cached.id) && cached.id !== nil && cached.name === manifest.name
+            && typeof cached.manifestDigest === "string" && /^[0-9a-f]{64}$/.test(cached.manifestDigest)
+            && (cached.supersededDeclaredId === undefined || cached.supersededDeclaredId === declaration.id)) {
+            return Object.freeze({ id: cached.id, name: manifest.name, manifestDigest: cached.manifestDigest,
+                ...(cached.supersededDeclaredId !== undefined ? { supersededDeclaredId: declaration.id } : {}) });
+        }
+    }
+    if (new TextEncoder().encode(body).length >
+        APPLICATION_MANIFEST_MAX_BYTES + 32 ||
+        typeof fetcher !== "function")
+        throw binding();
+    const control = new AbortController(), abort = () => control.abort(), timer = setTimeout(abort, 15000);
+    timer.unref?.();
+    signal.addEventListener("abort", abort, { once: true });
+    function current() {
+        check();
+        if (control.signal.aborted)
+            throw unknown();
+    }
+    /** A bounded, typed refusal body, or null (oversized, untyped, not JSON). */
+    async function refusalOf(response) {
+        const length = response.headers.get("content-length");
+        if (!response.body ||
+            (length !== null &&
+                (!/^(0|[1-9][0-9]*)$/.test(length) ||
+                    Number(length) > REGISTRATION_REFUSAL_MAX_BYTES))) {
+            void response.body?.cancel().catch(() => { });
+            return null;
+        }
+        const reader = response.body.getReader(), buffer = new Uint8Array(REGISTRATION_REFUSAL_MAX_BYTES);
+        let count = 0;
+        try {
+            for (;;) {
+                const part = await reader.read();
+                current();
+                if (part.done)
+                    break;
+                if (count + part.value.length > buffer.length)
+                    return null;
+                buffer.set(part.value, count);
+                count += part.value.length;
+            }
+            return registrationRefusal(JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(buffer.subarray(0, count))));
+        }
+        catch (error) {
+            if (error instanceof MdbaseError)
+                throw error;
+            return null;
+        }
+        finally {
+            void reader.cancel().catch(() => { });
+        }
+    }
+    async function decode(response) {
+        const buffer = new Uint8Array(2 * APPLICATION_MANIFEST_MAX_BYTES + 8192);
+        let count = 0;
+        const length = response.headers.get("content-length");
+        if (length !== null &&
+            /^(0|[1-9][0-9]*)$/.test(length) &&
+            Number(length) > buffer.length) {
+            void response.body?.cancel().catch(() => { });
+            throw badReply();
+        }
+        if (!response.body)
+            throw badReply();
+        const reader = response.body.getReader();
+        try {
+            for (;;) {
+                const part = await reader.read();
+                try {
+                    current();
+                    if (part.done)
+                        break;
+                    if (count + part.value.length > buffer.length)
+                        throw badReply();
+                    buffer.set(part.value, count);
+                    count += part.value.length;
+                }
+                finally {
+                    part.value?.fill(0);
+                }
+            }
+            try {
+                return record(JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(buffer.subarray(0, count))));
+            }
+            catch {
+                throw badReply();
+            }
+        }
+        finally {
+            buffer.fill(0);
+            void reader.cancel().catch(() => { });
+            reader.releaseLock();
+        }
+    }
+    async function receipt(value) {
+        const app = record(value.application), id = app.id, digest = app.manifest_digest;
+        if (typeof id !== "string" || !nativeId.test(id) || id === nil)
+            throw badReply();
+        // A changed manifest gets a new CP UUID. Accept it in place of a declared
+        // UUID only when every canonical check binds it to the manifest we sent;
+        // any mismatch then is a binding failure, never a silent rebind.
+        const superseded = nativeId.test(declaration.id) && id !== declaration.id;
+        const refuse = superseded ? binding : badReply;
+        if (superseded && digest !== (await manifestDigest(manifest).catch(() => null)))
+            throw binding();
+        current();
+        if (typeof digest !== "string" ||
+            !/^[0-9a-f]{64}$/.test(digest) ||
+            app.name !== manifest.name ||
+            app.canonical_identity !==
+                `bundle:${manifest.id}:sha256:${digest}` ||
+            app.family_identity !== `bundle:${manifest.id}` ||
+            app.distribution !== "web")
+            throw refuse();
+        if (!app.application_declaration)
+            throw mdbaseError("upgrade_required", "Canonical registration evidence unavailable", "application_registration_unsupported");
+        let returned;
+        try {
+            returned = parseVersionedAppManifest(app.application_declaration, {
+                allowLocal: applicationLoopbackAllowed(declaration.environment),
+            }).manifest;
+        }
+        catch {
+            throw badReply();
+        }
+        if (!sameJson(manifest, returned))
+            throw refuse();
+        current();
+        return Object.freeze({
+            id,
+            name: manifest.name,
+            manifestDigest: digest,
+            ...(superseded ? { supersededDeclaredId: declaration.id } : {}),
+        });
+    }
+    try {
+        for (let attempt = 0; attempt < 3; attempt++) {
+            current();
+            let response;
+            try {
+                response = await fetcher(url, {
+                    method: "POST",
+                    headers: { "content-type": "application/json" },
+                    body,
+                    signal: control.signal,
+                    credentials: "omit",
+                    redirect: "error",
+                    cache: "default",
+                    referrerPolicy: "no-referrer",
+                });
+                current();
+                if (response.redirected ||
+                    (response.url && response.url !== url))
+                    throw badReply();
+                if (!response.ok) {
+                    if (transient.has(response.status)) {
+                        await response.body?.cancel().catch(() => { });
+                        throw unknown();
+                    }
+                    // Permanent: never retried. Keep only the typed code and paths.
+                    const refusal = await refusalOf(response);
+                    throw mdbaseError("forbidden", "Application registration refused", refusal
+                        ? {
+                            reason: "application_registration_refused",
+                            details: new Map([
+                                ["code", refusal.code],
+                                ["paths", [...refusal.paths]],
+                            ]),
+                        }
+                        : "application_registration_refused");
+                }
+                const registered = await receipt(await decode(response));
+                remember(registered);
+                return registered;
+            }
+            catch (error) {
+                void response?.body?.cancel().catch(() => { });
+                current();
+                if (error instanceof MdbaseError &&
+                    error.reason !== "application_registration_unknown")
+                    throw error;
+                if (attempt === 2)
+                    throw unknown();
+                await new Promise((resolve, reject) => {
+                    const finish = () => {
+                        clearTimeout(delay);
+                        control.signal.removeEventListener("abort", finish);
+                        try {
+                            current();
+                            resolve();
+                        }
+                        catch (error) {
+                            reject(error);
+                        }
+                    };
+                    const delay = setTimeout(finish, attempt === 0 ? 250 : 1000);
+                    delay.unref?.();
+                    control.signal.addEventListener("abort", finish, {
+                        once: true,
+                    });
+                    if (control.signal.aborted)
+                        finish();
+                });
+            }
+        }
+        throw unknown();
+    }
+    finally {
+        clearTimeout(timer);
+        signal.removeEventListener("abort", abort);
+        control.abort();
+    }
+}
+//# sourceMappingURL=registration.js.map

package/dist/application/registration.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registration.js","sourceRoot":"","sources":["../../src/application/registration.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,sBAAsB,EAAC,MAAM,uCAAuC,CAAC;AAC7E,OAAO,EACH,8BAA8B,EAC9B,yBAAyB,GAC5B,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EAAE,oBAAoB,EAAE,MAAM,gCAAgC,CAAC;AAEtE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AACxD,OAAO,EACH,sBAAsB,EACtB,wBAAwB,GAE3B,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAC;AAC9D,OAAO,EACH,8BAA8B,EAC9B,mBAAmB,GAEtB,MAAM,2BAA2B,CAAC;AAkBnC,MAAM,QAAQ,GACV,gEAAgE,CAAC;AACrE,MAAM,GAAG,GAAG,sCAAsC,CAAC;AACnD,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAC1D,MAAM,OAAO,GAAG,GAAG,EAAE,CACjB,WAAW,CACP,iBAAiB,EACjB,2CAA2C,EAC3C,kCAAkC,CACrC,CAAC;AACN,MAAM,QAAQ,GAAG,GAAG,EAAE,CAClB,WAAW,CACP,aAAa,EACb,2CAA2C,EAC3C,mCAAmC,CACtC,CAAC;AACN,MAAM,OAAO,GAAG,GAAG,EAAE,CACjB,WAAW,CACP,iBAAiB,EACjB,mDAAmD,EACnD,kCAAkC,CACrC,CAAC;AACN,SAAS,MAAM,CAAC,KAAc;IAC1B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAC3D,MAAM,QAAQ,EAAE,CAAC;IACrB,OAAO,KAAgC,CAAC;AAC5C,CAAC;AACD;+EAC+E;AAC/E,6EAA6E;AAC7E,SAAS,aAAa,CAAC,KAAc;IACjC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,QAAQ;QACtG,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;IAC3E,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC;SAC3D,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC;SAC1C,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3E,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AAC5G,CAAC;AACD,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,QAAiB;IAClD,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACtH,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACnF,CAAC;AACD,SAAS,QAAQ,CAAC,IAAa,EAAE,KAAc;IAC3C,MAAM,KAAK,GAAyB,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC;IACpD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,KAAK,CAAC,MAAM,EAAE,CAAC;QAClB,IAAI,EAAE,KAAK,GAAG,MAAM;YAAE,OAAO,KAAK,CAAC;QACnC,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK,CAAC,GAAG,EAAG,CAAC;QAC5B,IAAI,CAAC,KAAK,CAAC;YAAE,SAAS;QACtB,IACI,CAAC,CAAC;YACF,CAAC,CAAC;YACF,OAAO,CAAC,KAAK,QAAQ;YACrB,OAAO,CAAC,KAAK,QAAQ;YACrB,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;YAErC,OAAO,KAAK,CAAC;QACjB,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC5B,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC;QACxD,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACrB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAC;YACzC,KAAK,CAAC,IAAI,CAAC;gBACN,CAA6B,CAAC,GAAG,CAAC;gBAClC,CAA6B,CAAC,GAAG,CAAC;aACtC,CAAC,CAAC;QACP,CAAC;IACL,CAAC;IACD,OAAO,IAAI,CAAC;AAChB,CAAC;AAED;;;;;;mFAMmF;AACnF,MAAM,CAAC,KAAK,UAAU,8BAA8B,CAChD,KAAqC;IAErC,MAAM,QAAQ,GAAG,KAAK,CAAC,WAAW,EAC9B,MAAM,GAAG,KAAK,CAAC,MAAM,EACrB,KAAK,GAAG,KAAK,CAAC,SAAS,EACvB,OAAO,GAAG,KAAK,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;IAC9C,MAAM,cAAc,GAAG,QAAQ,CAAC,QAAQ,CAAC;IACzC,MAAM,WAAW,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IACrD,SAAS,KAAK;QACV,IAAI,CAAC;YACD,IACI,CAAC,MAAM,CAAC,OAAO;gBACf,KAAK,CAAC,MAAM,KAAK,MAAM;gBACvB,KAAK,CAAC,WAAW,KAAK,QAAQ;gBAC9B,KAAK,CAAC,SAAS,KAAK,KAAK;gBACzB,QAAQ,CAAC,EAAE,KAAK,WAAW,CAAC,EAAE;gBAC9B,QAAQ,CAAC,IAAI,KAAK,WAAW,CAAC,IAAI;gBAClC,QAAQ,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM;gBACtC,QAAQ,CAAC,WAAW,KAAK,WAAW,CAAC,WAAW;gBAChD,QAAQ,CAAC,QAAQ,KAAK,cAAc;gBACpC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI;gBAC1B,CAAC,MAAM,CAAC,OAAO;gBAEf,OAAO;QACf,CAAC;QAAC,MAAM,CAAC;YACL,kCAAkC;QACtC,CAAC;QACD,MAAM,WAAW,CACb,WAAW,EACX,iCAAiC,EACjC,iCAAiC,CACpC,CAAC;IACN,CAAC;IACD,KAAK,EAAE,CAAC;IACR,IAAI,WAAoD,EACpD,QAAkE,CAAC;IACvE,IAAI,CAAC;QACD,WAAW,GAAG,oBAAoB,CAAC;YAC/B,WAAW,EAAE,WAAW,CAAC,WAAW;YACpC,SAAS,EAAE,WAAW,CAAC,MAAM;YAC7B,QAAQ,EAAE,WAAW,CAAC,QAAQ,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;YAC3E,OAAO,EAAE,eAAe,EAAE;SAC7B,CAAC,CAAC;IACP,CAAC;IAAC,MAAM,CAAC;QACL,KAAK,EAAE,CAAC;QACR,MAAM,WAAW,CACb,aAAa,EACb,0CAA0C,EAC1C,sCAAsC,CACzC,CAAC;IACN,CAAC;IACD,IAAI,CAAC;QACD,QAAQ,GAAG,yBAAyB,CAAC,wBAAwB,CAAC,WAAW,CAAC,EAAE;YACxE,UAAU,EAAE,0BAA0B,CAAC,WAAW,CAAC,WAAW,CAAC;SAClE,CAAC,CAAC,QAAQ,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACL,MAAM,OAAO,EAAE,CAAC;IACpB,CAAC;IACD,2EAA2E;IAC3E,kEAAkE;IAClE,iEAAiE;IACjE,MAAM,eAAe,GAAG,WAAW,CAAC,WAAW,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC9D,QAAQ,CAAC,oBAAoB,EAAE,CAAC,WAAW,CAAC,WAAW,CAAC,EAAE,CACtD,WAAW,CAAC,gBAAgB,CAC/B,IAAI,EAAE,CAAC;IACZ,IACI,QAAQ,CAAC,IAAI,KAAK,WAAW,CAAC,IAAI;QAClC,QAAQ,CAAC,YAAY,KAAK,UAAU;QACpC,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM;YACrD,CAAC,eAAe,CAAC,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC;YAC7C,CAAC,CAAC,UAAU,IAAI,QAAQ,IAAI,QAAQ,CAAC,QAAQ,KAAK,QAAQ,IAAI,WAAW,CAAC,gBAAgB,KAAK,aAAa,IAAI,sBAAsB,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;QAEhK,MAAM,OAAO,EAAE,CAAC;IACpB,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,QAAQ,EAAE,CAAC,EACrC,GAAG,GAAG,GAAG,WAAW,CAAC,QAAQ,mBAAmB,CAAC;IACrD,MAAM,QAAQ,GAAG,8BAA8B,kBAAkB,CAAC,WAAW,CAAC,QAAQ,CAAC,IAAI,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;IAC7H,MAAM,OAAO,GAAG,GAAmB,EAAE,GAAG,IAAI,CAAC;QAAC,OAAO,UAAU,CAAC,YAAY,IAAI,IAAI,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC,CAAC,CAAC,CAAC;IACjH,MAAM,WAAW,GAAG,OAAO,EAAE,CAAC,CAAC,CAAC,MAAM,cAAc,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACxF,KAAK,EAAE,CAAC;IACR,MAAM,QAAQ,GAAG,CAAC,UAA6C,EAAQ,EAAE;QACrE,IAAI,CAAC,WAAW;YAAE,OAAO;QACzB,IAAI,CAAC;YAAC,OAAO,EAAE,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,CAAC,EAAE,EAAE,GAAG,UAAU,EAAE,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,cAAc,CAAC,CAAC;IAC5J,CAAC,CAAC;IACF,CAAC;QACG,IAAI,MAAM,GAAmC,IAAI,CAAC;QAClD,IAAI,CAAC;YAAC,MAAM,GAAG,GAAG,OAAO,EAAE,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC;YAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,GAAG,IAAI,CAAC;QAAC,CAAC;QACzH,IAAI,MAAM,IAAI,WAAW,IAAI,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,WAAW,IAAI,MAAM,CAAC,UAAU,KAAK,WAAW,CAAC,EAAE;eAC7G,OAAO,MAAM,CAAC,EAAE,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,EAAE,KAAK,GAAG,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI;eAC/G,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ,IAAI,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC;eACzF,CAAC,MAAM,CAAC,oBAAoB,KAAK,SAAS,IAAI,MAAM,CAAC,oBAAoB,KAAK,WAAW,CAAC,EAAE,CAAC,EAAE,CAAC;YACnG,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,EAAE,MAAM,CAAC,cAAc;gBAC5F,GAAG,CAAC,MAAM,CAAC,oBAAoB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC1G,CAAC;IACL,CAAC;IACD,IACI,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM;QACjC,8BAA8B,GAAG,EAAE;QACvC,OAAO,OAAO,KAAK,UAAU;QAE7B,MAAM,OAAO,EAAE,CAAC;IACpB,MAAM,OAAO,GAAG,IAAI,eAAe,EAAE,EACjC,KAAK,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAC7B,KAAK,GAAG,UAAU,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACpC,KAAgC,CAAC,KAAK,EAAE,EAAE,CAAC;IAC5C,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,SAAS,OAAO;QACZ,KAAK,EAAE,CAAC;QACR,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,OAAO,EAAE,CAAC;IAChD,CAAC;IACD,6EAA6E;IAC7E,KAAK,UAAU,SAAS,CACpB,QAAkB;QAElB,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QACtD,IACI,CAAC,QAAQ,CAAC,IAAI;YACd,CAAC,MAAM,KAAK,IAAI;gBACZ,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC;oBAC9B,MAAM,CAAC,MAAM,CAAC,GAAG,8BAA8B,CAAC,CAAC,EAC3D,CAAC;YACC,KAAK,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAC7C,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,EACpC,MAAM,GAAG,IAAI,UAAU,CAAC,8BAA8B,CAAC,CAAC;QAC5D,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,CAAC;YACD,SAAS,CAAC;gBACN,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;gBACjC,OAAO,EAAE,CAAC;gBACV,IAAI,IAAI,CAAC,IAAI;oBAAE,MAAM;gBACrB,IAAI,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM;oBAAE,OAAO,IAAI,CAAC;gBAC3D,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;gBAC9B,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;YAC/B,CAAC;YACD,OAAO,mBAAmB,CACtB,IAAI,CAAC,KAAK,CACN,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAC5C,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,CAC5B,CACJ,CACJ,CAAC;QACN,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,KAAK,YAAY,WAAW;gBAAE,MAAM,KAAK,CAAC;YAC9C,OAAO,IAAI,CAAC;QAChB,CAAC;gBAAS,CAAC;YACP,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACzC,CAAC;IACL,CAAC;IACD,KAAK,UAAU,MAAM,CACjB,QAAkB;QAElB,MAAM,MAAM,GAAG,IAAI,UAAU,CACzB,CAAC,GAAG,8BAA8B,GAAG,IAAI,CAC5C,CAAC;QACF,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QACtD,IACI,MAAM,KAAK,IAAI;YACf,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC;YAChC,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,EAChC,CAAC;YACC,KAAK,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YAC7C,MAAM,QAAQ,EAAE,CAAC;QACrB,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,IAAI;YAAE,MAAM,QAAQ,EAAE,CAAC;QACrC,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACzC,IAAI,CAAC;YACD,SAAS,CAAC;gBACN,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;gBACjC,IAAI,CAAC;oBACD,OAAO,EAAE,CAAC;oBACV,IAAI,IAAI,CAAC,IAAI;wBAAE,MAAM;oBACrB,IAAI,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM;wBACzC,MAAM,QAAQ,EAAE,CAAC;oBACrB,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;oBAC9B,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;gBAC/B,CAAC;wBAAS,CAAC;oBACP,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;gBACxB,CAAC;YACL,CAAC;YACD,IAAI,CAAC;gBACD,OAAO,MAAM,CACT,IAAI,CAAC,KAAK,CACN,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAC5C,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,CAC5B,CACJ,CACJ,CAAC;YACN,CAAC;YAAC,MAAM,CAAC;gBACL,MAAM,QAAQ,EAAE,CAAC;YACrB,CAAC;QACL,CAAC;gBAAS,CAAC;YACP,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;YACf,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;YACrC,MAAM,CAAC,WAAW,EAAE,CAAC;QACzB,CAAC;IACL,CAAC;IACD,KAAK,UAAU,OAAO,CAClB,KAA8B;QAE9B,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,EACjC,EAAE,GAAG,GAAG,CAAC,EAAE,EACX,MAAM,GAAG,GAAG,CAAC,eAAe,CAAC;QACjC,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,GAAG;YAC1D,MAAM,QAAQ,EAAE,CAAC;QACrB,0EAA0E;QAC1E,yEAAyE;QACzE,iEAAiE;QACjE,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,WAAW,CAAC,EAAE,CAAC;QAC1E,MAAM,MAAM,GAAG,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC;QAC/C,IAAI,UAAU,IAAI,MAAM,KAAK,CAAC,MAAM,cAAc,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YAC3E,MAAM,OAAO,EAAE,CAAC;QACpB,OAAO,EAAE,CAAC;QACV,IACI,OAAO,MAAM,KAAK,QAAQ;YAC1B,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC;YAC9B,GAAG,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI;YAC1B,GAAG,CAAC,kBAAkB;gBAClB,UAAU,QAAQ,CAAC,EAAE,WAAW,MAAM,EAAE;YAC5C,GAAG,CAAC,eAAe,KAAK,UAAU,QAAQ,CAAC,EAAE,EAAE;YAC/C,GAAG,CAAC,YAAY,KAAK,KAAK;YAE1B,MAAM,MAAM,EAAE,CAAC;QACnB,IAAI,CAAC,GAAG,CAAC,uBAAuB;YAC5B,MAAM,WAAW,CACb,kBAAkB,EAClB,6CAA6C,EAC7C,sCAAsC,CACzC,CAAC;QACN,IAAI,QAAyB,CAAC;QAC9B,IAAI,CAAC;YACD,QAAQ,GAAG,yBAAyB,CAAC,GAAG,CAAC,uBAAuB,EAAE;gBAC9D,UAAU,EAAE,0BAA0B,CAAC,WAAW,CAAC,WAAW,CAAC;aAClE,CAAC,CAAC,QAAQ,CAAC;QAChB,CAAC;QAAC,MAAM,CAAC;YACL,MAAM,QAAQ,EAAE,CAAC;QACrB,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;YAAE,MAAM,MAAM,EAAE,CAAC;QAClD,OAAO,EAAE,CAAC;QACV,OAAO,MAAM,CAAC,MAAM,CAAC;YACjB,EAAE;YACF,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,cAAc,EAAE,MAAM;YACtB,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,oBAAoB,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClE,CAAC,CAAC;IACP,CAAC;IACD,IAAI,CAAC;QACD,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;YAC3C,OAAO,EAAE,CAAC;YACV,IAAI,QAA8B,CAAC;YACnC,IAAI,CAAC;gBACD,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE;oBAC1B,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;oBAC/C,IAAI;oBACJ,MAAM,EAAE,OAAO,CAAC,MAAM;oBACtB,WAAW,EAAE,MAAM;oBACnB,QAAQ,EAAE,OAAO;oBACjB,KAAK,EAAE,SAAS;oBAChB,cAAc,EAAE,aAAa;iBAChC,CAAC,CAAC;gBACH,OAAO,EAAE,CAAC;gBACV,IACI,QAAQ,CAAC,UAAU;oBACnB,CAAC,QAAQ,CAAC,GAAG,IAAI,QAAQ,CAAC,GAAG,KAAK,GAAG,CAAC;oBAEtC,MAAM,QAAQ,EAAE,CAAC;gBACrB,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACf,IAAI,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;wBACjC,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;wBAC9C,MAAM,OAAO,EAAE,CAAC;oBACpB,CAAC;oBACD,gEAAgE;oBAChE,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,CAAC;oBAC1C,MAAM,WAAW,CACb,WAAW,EACX,kCAAkC,EAClC,OAAO;wBACH,CAAC,CAAC;4BACI,MAAM,EAAE,kCAAkC;4BAC1C,OAAO,EAAE,IAAI,GAAG,CAAoB;gCAChC,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC;gCACtB,CAAC,OAAO,EAAE,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;6BAChC,CAAC;yBACL;wBACH,CAAC,CAAC,kCAAkC,CAC3C,CAAC;gBACN,CAAC;gBACD,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;gBACzD,QAAQ,CAAC,UAAU,CAAC,CAAC;gBACrB,OAAO,UAAU,CAAC;YACtB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACb,KAAK,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBAC9C,OAAO,EAAE,CAAC;gBACV,IACI,KAAK,YAAY,WAAW;oBAC5B,KAAK,CAAC,MAAM,KAAK,kCAAkC;oBAEnD,MAAM,KAAK,CAAC;gBAChB,IAAI,OAAO,KAAK,CAAC;oBAAE,MAAM,OAAO,EAAE,CAAC;gBACnC,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;oBACxC,MAAM,MAAM,GAAG,GAAG,EAAE;wBAChB,YAAY,CAAC,KAAK,CAAC,CAAC;wBACpB,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;wBACpD,IAAI,CAAC;4BACD,OAAO,EAAE,CAAC;4BACV,OAAO,EAAE,CAAC;wBACd,CAAC;wBAAC,OAAO,KAAK,EAAE,CAAC;4BACb,MAAM,CAAC,KAAK,CAAC,CAAC;wBAClB,CAAC;oBACL,CAAC,CAAC;oBACF,MAAM,KAAK,GAAG,UAAU,CACpB,MAAM,EACN,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAC7B,CAAC;oBACD,KAAgC,CAAC,KAAK,EAAE,EAAE,CAAC;oBAC5C,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE;wBAC7C,IAAI,EAAE,IAAI;qBACb,CAAC,CAAC;oBACH,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO;wBAAE,MAAM,EAAE,CAAC;gBACzC,CAAC,CAAC,CAAC;YACP,CAAC;QACL,CAAC;QACD,MAAM,OAAO,EAAE,CAAC;IACpB,CAAC;YAAS,CAAC;QACP,YAAY,CAAC,KAAK,CAAC,CAAC;QACpB,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC3C,OAAO,CAAC,KAAK,EAAE,CAAC;IACpB,CAAC;AACL,CAAC"}

package/dist/application/return-url.d.ts

@@ -0,0 +1 @@
+export declare function declaredReturnUrl(value: unknown, manifest: unknown, loopbackHttp: boolean): boolean;

package/dist/application/return-url.js

@@ -0,0 +1,41 @@
+import { isNativeLoopbackOrigin } from "@mdbase-dev/connect-protocol/manifest";
+/** The sign-in opener's `return_url` (RFC 8252 §7.1 / §8.1). It must exactly
+ * equal one of the canonical manifest's `redirect_uris` (no prefix, pattern or
+ * normalisation match) and be either an https URL on the homepage origin, LAB
+ * loopback http, or a private-use reverse-DNS scheme derived from the manifest
+ * ID (the same rule the CP applies at registration). It carries no credential:
+ * sign-in still completes by the SDK's own pairing poll. */
+import { LOCAL_APPLICATION_BUILD, localApplicationHttpOrigin } from "../application/local-build.js";
+const LOOPBACK = ["localhost", "127.0.0.1", "[::1]"];
+const RESERVED = ["http", "https", "file", "javascript", "data", "blob", "about", "capacitor", "chrome-extension", "moz-extension"];
+export function declaredReturnUrl(value, manifest, loopbackHttp) {
+    if (typeof value !== "string" || !value || value.length > 2048 || value.includes("*"))
+        return false;
+    const declared = manifest && typeof manifest === "object" ? manifest.redirect_uris : undefined;
+    if (!Array.isArray(declared) || !declared.includes(value))
+        return false;
+    const { id, homepage, platform } = manifest;
+    let url;
+    try {
+        url = new URL(value);
+    }
+    catch {
+        return false;
+    }
+    if (url.username || url.password || url.hash)
+        return false;
+    if (url.protocol === "https:" || url.protocol === "http:") {
+        let home;
+        try {
+            home = new URL(String(homepage));
+        }
+        catch {
+            return false;
+        }
+        return url.origin === home.origin && (url.protocol === "https:" || (platform === "native" && isNativeLoopbackOrigin(url.origin)) || (loopbackHttp && (LOCAL_APPLICATION_BUILD ? localApplicationHttpOrigin(url.origin) : LOOPBACK.includes(url.hostname))));
+    }
+    const scheme = url.protocol.slice(0, -1);
+    return typeof id === "string" && scheme.includes(".") && /^[a-z][a-z0-9+.-]*$/.test(scheme) && !RESERVED.includes(scheme)
+        && (scheme === id || scheme.startsWith(`${id}.`)) && url.hostname.length > 0;
+}
+//# sourceMappingURL=return-url.js.map

package/dist/application/return-url.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"return-url.js","sourceRoot":"","sources":["../../src/application/return-url.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,sBAAsB,EAAC,MAAM,uCAAuC,CAAC;AAC7E;;;;;4DAK4D;AAC5D,OAAO,EAAE,uBAAuB,EAAE,0BAA0B,EAAE,MAAM,+BAA+B,CAAC;AACpG,MAAM,QAAQ,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;AACrD,MAAM,QAAQ,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,kBAAkB,EAAE,eAAe,CAAC,CAAC;AAEpI,MAAM,UAAU,iBAAiB,CAAC,KAAc,EAAE,QAAiB,EAAE,YAAqB;IACxF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACpG,MAAM,QAAQ,GAAG,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAE,QAAsC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9H,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACxE,MAAM,EAAC,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAC,GAAG,QAAkE,CAAC;IACpG,IAAI,GAAQ,CAAC;IAAC,IAAI,CAAC;QAAC,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,KAAK,CAAC;IAAC,CAAC;IACnE,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,IAAI;QAAE,OAAO,KAAK,CAAC;IAC3D,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QAC1D,IAAI,IAAS,CAAC;QAAC,IAAI,CAAC;YAAC,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;QAChF,OAAO,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,QAAQ,KAAK,QAAQ,IAAI,sBAAsB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,uBAAuB,CAAC,CAAC,CAAC,0BAA0B,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9P,CAAC;IACD,MAAM,MAAM,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACzC,OAAO,OAAO,EAAE,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,qBAAqB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;WACpH,CAAC,MAAM,KAAK,EAAE,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;AACjF,CAAC"}

package/dist/application/runtime.d.ts

@@ -0,0 +1,107 @@
+import type { AppWebSignInPortal, AppWebSignInSnapshot } from "../app-host/web-sign-in-session.js";
+import type { ApplicationDeclarationSnapshot } from "./declaration.js";
+import type { compileApplicationManifest } from "./manifest.js";
+import type { MdbaseApplicationConnection, MdbaseApplicationReadinessSnapshot, MdbaseApplicationRequestOptions, MdbaseApplicationSnapshot as PublicSnapshot, MdbaseSignOutOptions } from "./entry.js";
+import type { MdbaseSetupPlan, MdbaseSetupPlanOptions } from "./setup.js";
+/** Runtime view; the public entry adds its collection selection. */
+export type MdbaseApplicationSnapshot = Omit<PublicSnapshot, "selection">;
+/** Private activation input, built ONLY by SDK registration/asset/Worker startup.
+ * This is not a public app constructor option, runtime hook or authority loan. */
+export interface ApplicationRuntimeActivation {
+    readonly declaration: Readonly<ApplicationDeclarationSnapshot>;
+    /** SAME entry-owned canonical result; metadata rebinding does not change the manifest. */
+    readonly compiledManifest: ReturnType<typeof compileApplicationManifest>;
+    readonly typeIssues?: "block" | "degrade";
+    readonly cpOrigin: string;
+    readonly port: MessagePort;
+    readonly binding: string;
+    nativeAuthorization?: import("./worker-client.js").ApplicationWorkerClientOwner["nativeAuthorization"];
+    releaseWorker(): void;
+}
+export declare class ApplicationRuntimeError extends Error {
+    readonly code: "application_busy" | "application_fenced" | "application_stop_failed" | "application_connection_unavailable";
+    constructor(code: "application_busy" | "application_fenced" | "application_stop_failed" | "application_connection_unavailable");
+}
+/** ONE singleton lifecycle over the original Worker and UI scope. Activation
+ * happens after canonical registration and packaged asset checks, before this
+ * class is installed on the public entry. Source tests alone are not acceptance. */
+export declare class ApplicationRuntime {
+    private readonly lifetime;
+    private readonly scope;
+    private readonly worker;
+    private readonly cpOrigin;
+    private readonly lab;
+    private readonly listeners;
+    private readonly unsubscribe;
+    private raw;
+    private snapshot;
+    private pending;
+    private closing;
+    private epoch;
+    private loggedProblem;
+    private assessing;
+    private retiring;
+    private closed;
+    private stopped;
+    private stopFailed;
+    constructor(input: ApplicationRuntimeActivation);
+    /** The open collection whose ports this tab failed to adopt: it reads as
+     * blocked, not as still opening. */
+    private portsFailed;
+    /** Ports for a collection this tab did not open itself: adopt them after any
+     * action of this tab, as that action's successor. */
+    private attached;
+    /** The session's open collection changed under this tab (another tab, or
+     * access ended): let go of the old ports; wait for new ones if it is open.
+     * An approval in progress (adding a collection) keeps the open collection
+     * open: its ports stay, so a cancelled approval returns to it as it was. */
+    private followSession;
+    connection(id: string): MdbaseApplicationConnection | null;
+    getSnapshot(): MdbaseApplicationSnapshot;
+    /** Native session view (what is actually open), before readiness demotion. */
+    getNativeSnapshot(): AppWebSignInSnapshot;
+    /** Start work after the current action drains. Ordering only: no retry,
+     * no second slot and no overlap with the original Worker request. */
+    queue<T>(work: () => Promise<T>): Promise<T>;
+    subscribe(listener: () => void): () => void;
+    private publish;
+    /** Inside an action: let go of the open scope as this tab's own step. */
+    private retireOwn;
+    /** The action's final evidence: no longer "opening" by virtue of being in flight. */
+    private settled;
+    private signal;
+    private action;
+    private complete;
+    start(options?: MdbaseApplicationRequestOptions): Promise<MdbaseApplicationSnapshot>;
+    /** Entry reserves this SAME SDK portal before lazy registration/startup. */
+    authorizeReserved(portal: AppWebSignInPortal, options?: MdbaseApplicationRequestOptions, collectionHint?: string | null): Promise<MdbaseApplicationSnapshot>;
+    authorize(options?: MdbaseApplicationRequestOptions): Promise<MdbaseApplicationSnapshot>;
+    select(id: string, options?: MdbaseApplicationRequestOptions): Promise<MdbaseApplicationSnapshot>;
+    assess(options?: MdbaseApplicationRequestOptions): Promise<MdbaseApplicationReadinessSnapshot>;
+    configure(options?: MdbaseApplicationRequestOptions): Promise<MdbaseApplicationSnapshot>;
+    /** Read-only review plan of the open collection; no snapshot publication. */
+    planSetup(options?: MdbaseSetupPlanOptions): Promise<MdbaseSetupPlan>;
+    applySetup(plan: MdbaseSetupPlan, options?: MdbaseApplicationRequestOptions): Promise<MdbaseApplicationSnapshot>;
+    clearSelection(options?: MdbaseApplicationRequestOptions): Promise<MdbaseApplicationSnapshot>;
+    forget(id: string, options?: MdbaseApplicationRequestOptions): Promise<MdbaseApplicationSnapshot>;
+    /** SDK-2: re-read the approved collection list. The open collection stays
+     * open: no retire, no readiness pass. */
+    refreshCollections(options?: MdbaseApplicationRequestOptions): Promise<MdbaseApplicationSnapshot>;
+    /** UX-011: refuse while the open collection has unconfirmed writes (unless
+     * `discard`), retire the UI scope, then the Worker session signs out and
+     * erases this installation. The entry then discards this runtime. */
+    signOut(options?: MdbaseSignOutOptions): Promise<MdbaseApplicationSnapshot>;
+    /** Owner delete through the CP, then forget it locally like `forget`. A
+     * refusal leaves the collection (and any open connection) as it was. */
+    deleteCollection(id: string, confirmName: string, options?: MdbaseApplicationRequestOptions): Promise<MdbaseApplicationSnapshot>;
+    /** Entry reserves the portal in the user gesture. The open collection stays
+     * open: no retire, no readiness pass. */
+    requestFileAccess(portal: AppWebSignInPortal, collectionId: string, actions: readonly string[], reason: string, options?: MdbaseApplicationRequestOptions): Promise<MdbaseApplicationSnapshot>;
+    pollFileAccess(requestId: string): Promise<MdbaseApplicationSnapshot>;
+    setForeground(active: boolean): void;
+    /** Page lifecycle (pagehide): stop synchronously, without the terminal ACK
+     * a frozen or unloading page could never receive. Terminates the Worker and
+     * fences this runtime for good; the entry builds a fresh one to resume. */
+    abandon(): void;
+    close(): Promise<void>;
+}