@openhands/agent-canvas 1.14.0 → 1.15.0

package/dist/manifests/interface-validation.js.map

@@ -1 +1 @@
-{"version":3,"file":"interface-validation.js","names":[],"sources":["../../src/manifests/interface-validation.ts"],"sourcesContent":["/**\n * Admission policy for the extension-published Automation interface manifest.\n *\n * Like a setup entry, the interface manifest is data authored in a different\n * repository that instructs this host to render copy, build links, and address\n * requests, so the host decides what it is *permitted* to state. Admission is\n * all-or-nothing: one bad field rejects the whole manifest, and the host falls\n * back to its own defaults rather than rendering a partially-trusted mix.\n */\n\nimport type {\n  AutomationAttributeName,\n  InterfaceAttributeType,\n  InterfaceRoutes,\n  OverviewMetric,\n} from \"./types\";\nimport {\n  DASHBOARD_FILTER_IDS,\n  DASHBOARD_FILTER_VALUES,\n  DASHBOARD_SORT_VALUES,\n  INTERFACE_ICON_SLUGS,\n  INTERFACE_SUB_PAGE_IDS,\n  INTERFACE_VERSION,\n  OVERVIEW_METRICS,\n  OVERVIEW_TILE_PLACEHOLDERS,\n} from \"./types\";\n\n/** Copy must never be able to inject markup into the host. */\nconst MARKUP_PATTERN = /<[A-Za-z/!]/;\nconst SLUG_PATTERN = /^[a-z0-9]+(-[a-z0-9]+)*$/;\n/** The one URL the manifest may state, pinned to the product documentation. */\nconst DOCS_URL_PREFIX = \"https://docs.openhands.dev/\";\nconst FILE_KIND_PATTERN = /^[a-z][a-z-]*$/;\nconst FILENAME_SUFFIX_PATTERN = /^\\.[a-z][a-z.]*json$/;\nconst EVENT_SOURCE_PATTERN = /^[a-z0-9][a-z0-9.-]*$/;\n/** Service-relative only: rooted, no traversal, no query, no fragment. */\nconst ENDPOINT_PATTERN = /^\\/[A-Za-z0-9/{}_-]*$/;\n/** Exactly one `{id}` substitution and no other braces. */\nconst ID_ENDPOINT_PATTERN = /^[^{}]*\\{id\\}[^{}]*$/;\n\nconst GIT_PROVIDERS = [\"github\", \"gitlab\", \"bitbucket\"] as const;\n/**\n * The attribute semantics this host's edit dialog implements: the control it\n * renders per property and the requiredness it enforces. Admission pins a\n * declared attribute to exactly these, so an admitted manifest can never\n * promise a control, a requiredness, or (below) a minimum the form would\n * silently ignore.\n */\nconst HOST_ATTRIBUTES: Record<\n  AutomationAttributeName,\n  { type: InterfaceAttributeType; required: boolean }\n> = {\n  name: { type: \"text\", required: true },\n  prompt: { type: \"textarea\", required: false },\n  model: { type: \"llm-profile\", required: false },\n  timeout: { type: \"number\", required: false },\n  schedule: { type: \"schedule\", required: false },\n};\nconst ATTRIBUTE_NAMES = Object.keys(HOST_ATTRIBUTES);\nconst PLAIN_ENDPOINT_NAMES = [\n  \"list\",\n  \"health\",\n  \"capabilities\",\n  \"validate\",\n  \"createPrompt\",\n  \"createPlugin\",\n] as const;\nconst ID_ENDPOINT_NAMES = [\"detail\", \"dispatch\", \"runs\", \"tarball\"] as const;\n\nexport interface InterfaceValidationContext {\n  /** Ids of the published automation catalog, for the featured-list check. */\n  catalogIds: ReadonlySet<string>;\n  /** The routes this host has registrations for. A manifest must match them. */\n  mountedRoutes: InterfaceRoutes;\n}\n\nexport interface InterfaceValidationResult {\n  valid: boolean;\n  errors: string[];\n}\n\ntype Rec = Record<string, unknown>;\n\nfunction isRecord(value: unknown): value is Rec {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction isOneOf<T extends readonly string[]>(\n  value: unknown,\n  values: T,\n): value is T[number] {\n  return (\n    typeof value === \"string\" && (values as readonly string[]).includes(value)\n  );\n}\n\nclass InterfaceChecker {\n  readonly errors: string[] = [];\n\n  fail(path: string, reason: string): false {\n    this.errors.push(`${path}: ${reason}`);\n    return false;\n  }\n\n  /** Literal user-visible copy. Carries no markup. */\n  copy(value: unknown, path: string): boolean {\n    if (typeof value !== \"string\" || value.length === 0) {\n      return this.fail(path, \"must be a non-empty string\");\n    }\n    if (MARKUP_PATTERN.test(value)) {\n      return this.fail(path, \"must not contain markup\");\n    }\n    return true;\n  }\n\n  /** A closed object: every present key must be an expected one. */\n  closed(container: Rec, allowed: readonly string[], path: string): void {\n    Object.keys(container)\n      .filter((key) => !allowed.includes(key))\n      .forEach((key) => this.fail(`${path}.${key}`, \"is not allowed\"));\n  }\n\n  record(value: unknown, path: string): value is Rec {\n    if (isRecord(value)) return true;\n    this.fail(path, \"must be an object\");\n    return false;\n  }\n}\n\nfunction checkRoutes(\n  check: InterfaceChecker,\n  routes: unknown,\n  mounted: InterfaceRoutes,\n): void {\n  if (!check.record(routes, \"routes\")) return;\n  check.closed(routes, [\"list\", \"setup\", \"detail\", \"templates\"], \"routes\");\n\n  // The host serves what it has registrations for, so a declared route must be\n  // exactly the mounted shape — the manifest owns link construction, not the\n  // router table.\n  ([\"list\", \"setup\", \"detail\"] as const).forEach((name) => {\n    if (routes[name] !== mounted[name]) {\n      check.fail(`routes.${name}`, `must be \"${mounted[name]}\"`);\n    }\n  });\n  if (\n    routes.templates !== undefined &&\n    routes.templates !== mounted.templates\n  ) {\n    check.fail(\n      \"routes.templates\",\n      mounted.templates === undefined\n        ? \"is not a route this host mounts\"\n        : `must be \"${mounted.templates}\"`,\n    );\n  }\n}\n\nfunction checkSubPages(check: InterfaceChecker, subPages: unknown): void {\n  if (!Array.isArray(subPages) || subPages.length === 0) {\n    check.fail(\"navigation.subPages\", \"must be a non-empty array\");\n    return;\n  }\n  const seen = new Set<string>();\n  subPages.forEach((item: unknown, index) => {\n    const path = `navigation.subPages[${index}]`;\n    if (!check.record(item, path)) return;\n    check.closed(item, [\"page\", \"label\", \"icon\"], path);\n\n    const { page, label, icon } = item;\n    if (!isOneOf(page, INTERFACE_SUB_PAGE_IDS)) {\n      check.fail(`${path}.page`, \"is not a sub-page this host serves\");\n    } else if (seen.has(page)) {\n      check.fail(`${path}.page`, \"repeats a page\");\n    } else {\n      seen.add(page);\n    }\n    check.copy(label, `${path}.label`);\n    checkIconSlug(check, icon, `${path}.icon`);\n  });\n}\n\nfunction checkIconSlug(\n  check: InterfaceChecker,\n  icon: unknown,\n  path: string,\n): void {\n  if (!isOneOf(icon, INTERFACE_ICON_SLUGS)) {\n    check.fail(path, \"is not an icon this host ships\");\n  }\n}\n\nfunction checkNavigation(check: InterfaceChecker, navigation: unknown): void {\n  if (!check.record(navigation, \"navigation\")) return;\n  check.closed(\n    navigation,\n    [\"sidebar\", \"commandMenu\", \"subPages\"],\n    \"navigation\",\n  );\n\n  if (check.record(navigation.sidebar, \"navigation.sidebar\")) {\n    check.closed(navigation.sidebar, [\"label\"], \"navigation.sidebar\");\n    check.copy(navigation.sidebar.label, \"navigation.sidebar.label\");\n  }\n  if (check.record(navigation.commandMenu, \"navigation.commandMenu\")) {\n    const menu = navigation.commandMenu;\n    check.closed(\n      menu,\n      [\"title\", \"description\", \"keywords\"],\n      \"navigation.commandMenu\",\n    );\n    check.copy(menu.title, \"navigation.commandMenu.title\");\n    check.copy(menu.description, \"navigation.commandMenu.description\");\n    check.copy(menu.keywords, \"navigation.commandMenu.keywords\");\n  }\n  if (navigation.subPages !== undefined) {\n    checkSubPages(check, navigation.subPages);\n  }\n}\n\nfunction checkPages(check: InterfaceChecker, pages: unknown): void {\n  if (!check.record(pages, \"pages\")) return;\n  check.closed(pages, [\"list\", \"detail\", \"edit\", \"templates\"], \"pages\");\n\n  if (check.record(pages.list, \"pages.list\")) {\n    check.closed(\n      pages.list,\n      [\"title\", \"subtitle\", \"overview\", \"filters\", \"sort\", \"insights\"],\n      \"pages.list\",\n    );\n    check.copy(pages.list.title, \"pages.list.title\");\n    check.copy(pages.list.subtitle, \"pages.list.subtitle\");\n    if (pages.list.overview !== undefined) {\n      checkOverview(check, pages.list.overview);\n    }\n    if (pages.list.filters !== undefined) {\n      checkFilters(check, pages.list.filters);\n    }\n    if (pages.list.sort !== undefined) {\n      checkSort(check, pages.list.sort);\n    }\n    if (pages.list.insights !== undefined) {\n      checkInsights(check, pages.list.insights);\n    }\n  }\n  if (check.record(pages.detail, \"pages.detail\")) {\n    check.closed(pages.detail, [\"backLabel\"], \"pages.detail\");\n    check.copy(pages.detail.backLabel, \"pages.detail.backLabel\");\n  }\n  if (check.record(pages.edit, \"pages.edit\")) {\n    check.closed(pages.edit, [\"title\"], \"pages.edit\");\n    check.copy(pages.edit.title, \"pages.edit.title\");\n  }\n  if (pages.templates !== undefined) {\n    checkTemplatesPage(check, pages.templates);\n  }\n}\n\nfunction checkOverview(check: InterfaceChecker, overview: unknown): void {\n  const path = \"pages.list.overview\";\n  if (!check.record(overview, path)) return;\n  check.closed(overview, [\"label\", \"tiles\"], path);\n  check.copy(overview.label, `${path}.label`);\n\n  const { tiles } = overview;\n  if (!Array.isArray(tiles) || tiles.length === 0) {\n    check.fail(`${path}.tiles`, \"must be a non-empty array\");\n    return;\n  }\n  const seen = new Set<string>();\n  tiles.forEach((tile: unknown, index) => {\n    checkOverviewTile(check, tile, seen, `${path}.tiles[${index}]`);\n  });\n}\n\nfunction checkOverviewTile(\n  check: InterfaceChecker,\n  tile: unknown,\n  seen: Set<string>,\n  path: string,\n): void {\n  if (!check.record(tile, path)) return;\n  check.closed(tile, [\"metric\", \"label\", \"detail\", \"zeroDetail\", \"icon\"], path);\n\n  const { metric, label, detail, zeroDetail, icon } = tile;\n  check.copy(label, `${path}.label`);\n  checkIconSlug(check, icon, `${path}.icon`);\n  if (!isOneOf(metric, OVERVIEW_METRICS)) {\n    check.fail(`${path}.metric`, \"is not a metric this host computes\");\n    check.copy(detail, `${path}.detail`);\n    if (zeroDetail !== undefined) check.copy(zeroDetail, `${path}.zeroDetail`);\n    return;\n  }\n  if (seen.has(metric)) {\n    check.fail(`${path}.metric`, \"repeats a metric\");\n  } else {\n    seen.add(metric);\n  }\n  checkTileCopy(check, detail, metric, `${path}.detail`);\n  if (zeroDetail !== undefined) {\n    checkTileCopy(check, zeroDetail, metric, `${path}.zeroDetail`);\n  }\n}\n\n/**\n * Tile copy may embed `{{name}}` placeholders, but only the names the metric\n * exposes — plain substitution, never an expression.\n */\nfunction checkTileCopy(\n  check: InterfaceChecker,\n  value: unknown,\n  metric: OverviewMetric,\n  path: string,\n): void {\n  if (!check.copy(value, path)) return;\n  const exposed = OVERVIEW_TILE_PLACEHOLDERS[metric];\n  const unknownPlaceholder =\n    exposed.length === 0\n      ? /\\{\\{/\n      : new RegExp(`\\\\{\\\\{(?!(?:${exposed.join(\"|\")})\\\\}\\\\})`);\n  if (unknownPlaceholder.test(value as string)) {\n    check.fail(path, \"uses a placeholder this metric does not expose\");\n  }\n}\n\nfunction checkFilters(check: InterfaceChecker, filters: unknown): void {\n  const path = \"pages.list.filters\";\n  if (!Array.isArray(filters) || filters.length === 0) {\n    check.fail(path, \"must be a non-empty array\");\n    return;\n  }\n  const seen = new Set<string>();\n  filters.forEach((filter: unknown, index) => {\n    checkFilter(check, filter, seen, `${path}[${index}]`);\n  });\n}\n\nfunction checkFilter(\n  check: InterfaceChecker,\n  filter: unknown,\n  seen: Set<string>,\n  path: string,\n): void {\n  if (!check.record(filter, path)) return;\n  check.closed(filter, [\"id\", \"label\", \"options\"], path);\n\n  const { id, label, options } = filter;\n  check.copy(label, `${path}.label`);\n  if (!isOneOf(id, DASHBOARD_FILTER_IDS)) {\n    check.fail(`${path}.id`, \"is not a filter this host implements\");\n    return;\n  }\n  if (seen.has(id)) {\n    check.fail(`${path}.id`, \"repeats a filter\");\n  } else {\n    seen.add(id);\n  }\n  checkFilterOptions(\n    check,\n    options,\n    DASHBOARD_FILTER_VALUES[id],\n    `${path}.options`,\n  );\n}\n\nfunction checkFilterOptions(\n  check: InterfaceChecker,\n  options: unknown,\n  values: readonly string[],\n  path: string,\n): void {\n  if (!Array.isArray(options) || options.length < 2) {\n    check.fail(path, \"must offer at least two options\");\n    return;\n  }\n  const seen = new Set<string>();\n  options.forEach((option: unknown, index) => {\n    const optionPath = `${path}[${index}]`;\n    if (!check.record(option, optionPath)) return;\n    check.closed(option, [\"value\", \"label\"], optionPath);\n\n    const { value, label } = option;\n    if (!isOneOf(value, values)) {\n      check.fail(`${optionPath}.value`, \"is not a value this host implements\");\n    } else if (seen.has(value)) {\n      check.fail(`${optionPath}.value`, \"repeats a value\");\n    } else {\n      seen.add(value);\n    }\n    check.copy(label, `${optionPath}.label`);\n  });\n  // \"all\" is the host's initial selection and what Clear filters resets to,\n  // so a filter that does not offer it could never be neutral.\n  if (!seen.has(\"all\")) {\n    check.fail(path, 'must offer the \"all\" option');\n  }\n}\n\nfunction checkSort(check: InterfaceChecker, sort: unknown): void {\n  const path = \"pages.list.sort\";\n  if (!check.record(sort, path)) return;\n  check.closed(sort, [\"label\", \"options\", \"default\"], path);\n\n  const { label, options, default: defaultValue } = sort;\n  check.copy(label, `${path}.label`);\n  const declared = new Set<string>();\n  if (!Array.isArray(options) || options.length === 0) {\n    check.fail(`${path}.options`, \"must be a non-empty array\");\n  } else {\n    options.forEach((option: unknown, index) => {\n      const optionPath = `${path}.options[${index}]`;\n      if (!check.record(option, optionPath)) return;\n      check.closed(option, [\"value\", \"label\"], optionPath);\n\n      if (!isOneOf(option.value, DASHBOARD_SORT_VALUES)) {\n        check.fail(`${optionPath}.value`, \"is not a sort this host implements\");\n      } else if (declared.has(option.value)) {\n        check.fail(`${optionPath}.value`, \"repeats a value\");\n      } else {\n        declared.add(option.value);\n      }\n      check.copy(option.label, `${optionPath}.label`);\n    });\n  }\n  if (typeof defaultValue !== \"string\" || !declared.has(defaultValue)) {\n    check.fail(`${path}.default`, \"must be one of the declared option values\");\n  }\n}\n\n/** Every insight state and stat the host renders must have a caption. */\nconst INSIGHTS_SHAPE = {\n  health: [\"healthy\", \"failing\", \"running\", \"disabled\", \"neverRun\", \"checking\"],\n  lastRun: [\"label\", \"never\", \"justNow\"],\n  stats: [\"runs\", \"recentSuccess\", \"averageDuration\"],\n} as const;\n\nfunction checkInsights(check: InterfaceChecker, insights: unknown): void {\n  const path = \"pages.list.insights\";\n  if (!check.record(insights, path)) return;\n  check.closed(insights, Object.keys(INSIGHTS_SHAPE), path);\n\n  (Object.keys(INSIGHTS_SHAPE) as (keyof typeof INSIGHTS_SHAPE)[]).forEach(\n    (section) => {\n      const sectionPath = `${path}.${section}`;\n      const value = insights[section];\n      if (!check.record(value, sectionPath)) return;\n      const keys = INSIGHTS_SHAPE[section];\n      check.closed(value, keys, sectionPath);\n      keys.forEach((key) => {\n        check.copy(value[key], `${sectionPath}.${key}`);\n      });\n    },\n  );\n}\n\nfunction checkTemplatesPage(check: InterfaceChecker, templates: unknown): void {\n  const path = \"pages.templates\";\n  if (!check.record(templates, path)) return;\n  check.closed(templates, [\"title\", \"description\"], path);\n  check.copy(templates.title, `${path}.title`);\n  check.copy(templates.description, `${path}.description`);\n}\n\n/**\n * The sub-page surface is declared whole or not at all. Navigation that points\n * at an unrouted page, or a dashboard with filters but no insight captions,\n * would be a partially-trusted mix, and the host refuses those wholesale.\n */\nfunction checkSubPageGroup(check: InterfaceChecker, candidate: Rec): void {\n  const routes = isRecord(candidate.routes) ? candidate.routes : {};\n  const navigation = isRecord(candidate.navigation) ? candidate.navigation : {};\n  const pages = isRecord(candidate.pages) ? candidate.pages : {};\n  const list = isRecord(pages.list) ? pages.list : {};\n\n  const pieces: [string, unknown][] = [\n    [\"routes.templates\", routes.templates],\n    [\"navigation.subPages\", navigation.subPages],\n    [\"pages.templates\", pages.templates],\n    [\"pages.list.overview\", list.overview],\n    [\"pages.list.filters\", list.filters],\n    [\"pages.list.sort\", list.sort],\n    [\"pages.list.insights\", list.insights],\n  ];\n  const missing = pieces\n    .filter(([, value]) => value === undefined)\n    .map(([name]) => name);\n  if (missing.length === 0 || missing.length === pieces.length) return;\n  check.fail(\n    \"interface\",\n    `the sub-page surface must be declared whole; missing ${missing.join(\", \")}`,\n  );\n}\n\nfunction checkAttribute(\n  check: InterfaceChecker,\n  host: { type: InterfaceAttributeType; required: boolean },\n  attribute: unknown,\n  path: string,\n): void {\n  if (!check.record(attribute, path)) return;\n  check.closed(\n    attribute,\n    [\"type\", \"label\", \"help\", \"required\", \"constraints\"],\n    path,\n  );\n\n  const { type, label, help, required, constraints } = attribute;\n  if (type !== host.type) {\n    check.fail(\n      `${path}.type`,\n      `must be \"${host.type}\", the control this host renders`,\n    );\n  }\n  check.copy(label, `${path}.label`);\n  if (help !== undefined) check.copy(help, `${path}.help`);\n  if (required !== host.required) {\n    check.fail(\n      `${path}.required`,\n      `must be ${host.required}, what this host enforces`,\n    );\n  }\n\n  if (constraints !== undefined) {\n    if (host.type !== \"number\") {\n      check.fail(\n        `${path}.constraints`,\n        \"is only allowed on a number attribute\",\n      );\n    } else if (check.record(constraints, `${path}.constraints`)) {\n      check.closed(constraints, [\"min\", \"max\"], `${path}.constraints`);\n      const { min, max } = constraints;\n      // The form validates a positive integer, i.e. an effective minimum of 1;\n      // any other declared minimum would be a promise it does not keep.\n      if (min !== undefined && min !== 1) {\n        check.fail(\n          `${path}.constraints.min`,\n          \"must be the 1 this host enforces\",\n        );\n      }\n      if (\n        max !== undefined &&\n        (!Number.isInteger(max) || (max as number) < 1)\n      ) {\n        check.fail(`${path}.constraints.max`, \"must be a positive integer\");\n      }\n    }\n  }\n}\n\nfunction checkAttributes(check: InterfaceChecker, attributes: unknown): void {\n  if (!check.record(attributes, \"attributes\")) return;\n  const names = Object.keys(attributes);\n  if (names.length === 0) {\n    check.fail(\"attributes\", \"must declare at least one attribute\");\n  }\n  names.forEach((name) => {\n    if (!ATTRIBUTE_NAMES.includes(name)) {\n      check.fail(`attributes.${name}`, \"is not a settable attribute\");\n      return;\n    }\n    checkAttribute(\n      check,\n      HOST_ATTRIBUTES[name as AutomationAttributeName],\n      attributes[name],\n      `attributes.${name}`,\n    );\n  });\n}\n\nfunction checkImportExport(\n  check: InterfaceChecker,\n  importExport: unknown,\n): void {\n  if (!check.record(importExport, \"importExport\")) return;\n  check.closed(\n    importExport,\n    [\"fileKind\", \"fileVersion\", \"filenameSuffix\", \"importDefaults\"],\n    \"importExport\",\n  );\n\n  const { fileKind, fileVersion, filenameSuffix, importDefaults } =\n    importExport;\n  if (typeof fileKind !== \"string\" || !FILE_KIND_PATTERN.test(fileKind)) {\n    check.fail(\"importExport.fileKind\", \"must be a lowercase slug\");\n  }\n  if (fileVersion !== 1) {\n    check.fail(\"importExport.fileVersion\", \"must be 1\");\n  }\n  if (\n    typeof filenameSuffix !== \"string\" ||\n    !FILENAME_SUFFIX_PATTERN.test(filenameSuffix)\n  ) {\n    check.fail(\"importExport.filenameSuffix\", \"must be a .json suffix\");\n  }\n  if (check.record(importDefaults, \"importExport.importDefaults\")) {\n    check.closed(\n      importDefaults,\n      [\"repoProvider\", \"placeholderEventSource\"],\n      \"importExport.importDefaults\",\n    );\n    if (\n      typeof importDefaults.repoProvider !== \"string\" ||\n      !(GIT_PROVIDERS as readonly string[]).includes(\n        importDefaults.repoProvider,\n      )\n    ) {\n      check.fail(\n        \"importExport.importDefaults.repoProvider\",\n        \"is not a supported provider\",\n      );\n    }\n    if (\n      typeof importDefaults.placeholderEventSource !== \"string\" ||\n      !EVENT_SOURCE_PATTERN.test(importDefaults.placeholderEventSource)\n    ) {\n      check.fail(\n        \"importExport.importDefaults.placeholderEventSource\",\n        \"must be a lowercase event source\",\n      );\n    }\n  }\n}\n\nfunction checkEndpoints(check: InterfaceChecker, endpoints: unknown): void {\n  if (!check.record(endpoints, \"endpoints\")) return;\n  const allowed = [...PLAIN_ENDPOINT_NAMES, ...ID_ENDPOINT_NAMES];\n  check.closed(endpoints, allowed, \"endpoints\");\n\n  const endpointAt = (name: string): string | null => {\n    const value = endpoints[name];\n    if (\n      typeof value !== \"string\" ||\n      !ENDPOINT_PATTERN.test(value) ||\n      value.includes(\"//\")\n    ) {\n      check.fail(`endpoints.${name}`, \"must be a rooted service-relative path\");\n      return null;\n    }\n    return value;\n  };\n\n  PLAIN_ENDPOINT_NAMES.forEach((name) => {\n    const value = endpointAt(name);\n    if (value !== null && /[{}]/.test(value)) {\n      check.fail(`endpoints.${name}`, \"must not carry a substitution\");\n    }\n  });\n  ID_ENDPOINT_NAMES.forEach((name) => {\n    const value = endpointAt(name);\n    if (value !== null && !ID_ENDPOINT_PATTERN.test(value)) {\n      check.fail(`endpoints.${name}`, \"must carry exactly one {id}\");\n    }\n  });\n}\n\nfunction checkSlugList(\n  check: InterfaceChecker,\n  value: unknown,\n  path: string,\n): string[] {\n  if (!Array.isArray(value) || value.length === 0) {\n    check.fail(path, \"must be a non-empty array\");\n    return [];\n  }\n  const slugs = value.filter((item): item is string => {\n    if (typeof item === \"string\" && SLUG_PATTERN.test(item)) return true;\n    check.fail(path, \"must contain only lowercase slugs\");\n    return false;\n  });\n  if (new Set(slugs).size !== slugs.length) {\n    check.fail(path, \"must not repeat an id\");\n  }\n  return slugs;\n}\n\nconst TOP_LEVEL_KEYS = [\n  \"version\",\n  \"routes\",\n  \"navigation\",\n  \"pages\",\n  \"docsUrl\",\n  \"attributes\",\n  \"importExport\",\n  \"endpoints\",\n  \"featuredAutomationIds\",\n  \"responderIntegrationIds\",\n];\n\n/**\n * Decide whether this host will act on a published interface manifest.\n *\n * The version is checked first and fails closed: a format this host does not\n * recognise is refused rather than interpreted with today's rules.\n */\nexport function validateInterfaceManifest(\n  candidate: unknown,\n  context: InterfaceValidationContext,\n): InterfaceValidationResult {\n  if (!isRecord(candidate)) {\n    return { valid: false, errors: [\"interface: must be an object\"] };\n  }\n  if (candidate.version !== INTERFACE_VERSION) {\n    return {\n      valid: false,\n      errors: [`interface.version: must be \"${INTERFACE_VERSION}\"`],\n    };\n  }\n\n  const check = new InterfaceChecker();\n  check.closed(candidate, TOP_LEVEL_KEYS, \"interface\");\n\n  checkRoutes(check, candidate.routes, context.mountedRoutes);\n  checkNavigation(check, candidate.navigation);\n  checkPages(check, candidate.pages);\n  if (\n    typeof candidate.docsUrl !== \"string\" ||\n    !candidate.docsUrl.startsWith(DOCS_URL_PREFIX)\n  ) {\n    check.fail(\"docsUrl\", `must start with ${DOCS_URL_PREFIX}`);\n  }\n  checkAttributes(check, candidate.attributes);\n  checkImportExport(check, candidate.importExport);\n  checkEndpoints(check, candidate.endpoints);\n\n  checkSlugList(\n    check,\n    candidate.featuredAutomationIds,\n    \"featuredAutomationIds\",\n  ).forEach((id) => {\n    if (!context.catalogIds.has(id)) {\n      check.fail(\"featuredAutomationIds\", `${id} is not a catalog entry`);\n    }\n  });\n  checkSlugList(\n    check,\n    candidate.responderIntegrationIds,\n    \"responderIntegrationIds\",\n  );\n\n  checkSubPageGroup(check, candidate);\n\n  return { valid: check.errors.length === 0, errors: check.errors };\n}\n"],"mappings":";;AA4BA,IAAM,IAAiB,eACjB,IAAe,4BAEf,IAAkB,+BAClB,IAAoB,kBACpB,IAA0B,wBAC1B,IAAuB,yBAEvB,IAAmB,yBAEnB,IAAsB,wBAEtB,IAAgB;CAAC;CAAU;CAAU;AAAW,GAQhD,IAGF;CACF,MAAM;EAAE,MAAM;EAAQ,UAAU;CAAK;CACrC,QAAQ;EAAE,MAAM;EAAY,UAAU;CAAM;CAC5C,OAAO;EAAE,MAAM;EAAe,UAAU;CAAM;CAC9C,SAAS;EAAE,MAAM;EAAU,UAAU;CAAM;CAC3C,UAAU;EAAE,MAAM;EAAY,UAAU;CAAM;AAChD,GACM,IAAkB,OAAO,KAAK,CAAe,GAC7C,IAAuB;CAC3B;CACA;CACA;CACA;CACA;CACA;AACF,GACM,IAAoB;CAAC;CAAU;CAAY;CAAQ;AAAS;AAgBlE,SAAS,EAAS,GAA8B;CAC9C,OAAO,OAAO,KAAU,cAAY,KAAkB,CAAC,MAAM,QAAQ,CAAK;AAC5E;AAEA,SAAS,EACP,GACA,GACoB;CACpB,OACE,OAAO,KAAU,YAAa,EAA6B,SAAS,CAAK;AAE7E;AAEA,IAAM,IAAN,MAAuB;CACrB,SAA4B,CAAC;CAE7B,KAAK,GAAc,GAAuB;EAExC,OADA,KAAK,OAAO,KAAK,GAAG,EAAK,IAAI,GAAQ,GAC9B;CACT;CAGA,KAAK,GAAgB,GAAuB;EAO1C,OANI,OAAO,KAAU,YAAY,EAAM,WAAW,IACzC,KAAK,KAAK,GAAM,4BAA4B,IAEjD,EAAe,KAAK,CAAK,IACpB,KAAK,KAAK,GAAM,yBAAyB,IAE3C;CACT;CAGA,OAAO,GAAgB,GAA4B,GAAoB;EACrE,OAAO,KAAK,CAAS,EAClB,QAAQ,MAAQ,CAAC,EAAQ,SAAS,CAAG,CAAC,EACtC,SAAS,MAAQ,KAAK,KAAK,GAAG,EAAK,GAAG,KAAO,gBAAgB,CAAC;CACnE;CAEA,OAAO,GAAgB,GAA4B;EAGjD,OAFI,EAAS,CAAK,IAAU,MAC5B,KAAK,KAAK,GAAM,mBAAmB,GAC5B;CACT;AACF;AAEA,SAAS,EACP,GACA,GACA,GACM;CACD,EAAM,OAAO,GAAQ,QAAQ,MAClC,EAAM,OAAO,GAAQ;EAAC;EAAQ;EAAS;EAAU;CAAW,GAAG,QAAQ,GAKvE;EAAE;EAAQ;EAAS;CAAQ,EAAY,SAAS,MAAS;EACvD,AAAI,EAAO,OAAU,EAAQ,MAC3B,EAAM,KAAK,UAAU,KAAQ,YAAY,EAAQ,GAAM,EAAE;CAE7D,CAAC,GAEC,EAAO,cAAc,KAAA,KACrB,EAAO,cAAc,EAAQ,aAE7B,EAAM,KACJ,oBACA,EAAQ,cAAc,KAAA,IAClB,oCACA,YAAY,EAAQ,UAAU,EACpC;AAEJ;AAEA,SAAS,EAAc,GAAyB,GAAyB;CACvE,IAAI,CAAC,MAAM,QAAQ,CAAQ,KAAK,EAAS,WAAW,GAAG;EACrD,EAAM,KAAK,uBAAuB,2BAA2B;EAC7D;CACF;CACA,IAAM,oBAAO,IAAI,IAAY;CAC7B,EAAS,SAAS,GAAe,MAAU;EACzC,IAAM,IAAO,uBAAuB,EAAM;EAC1C,IAAI,CAAC,EAAM,OAAO,GAAM,CAAI,GAAG;EAC/B,EAAM,OAAO,GAAM;GAAC;GAAQ;GAAS;EAAM,GAAG,CAAI;EAElD,IAAM,EAAE,SAAM,UAAO,YAAS;EAS9B,AARK,EAAQ,GAAM,CAAsB,IAE9B,EAAK,IAAI,CAAI,IACtB,EAAM,KAAK,GAAG,EAAK,QAAQ,gBAAgB,IAE3C,EAAK,IAAI,CAAI,IAJb,EAAM,KAAK,GAAG,EAAK,QAAQ,oCAAoC,GAMjE,EAAM,KAAK,GAAO,GAAG,EAAK,OAAO,GACjC,EAAc,GAAO,GAAM,GAAG,EAAK,MAAM;CAC3C,CAAC;AACH;AAEA,SAAS,EACP,GACA,GACA,GACM;CACN,AAAK,EAAQ,GAAM,CAAoB,KACrC,EAAM,KAAK,GAAM,gCAAgC;AAErD;AAEA,SAAS,EAAgB,GAAyB,GAA2B;CACtE,MAAM,OAAO,GAAY,YAAY,GAW1C;MAVA,EAAM,OACJ,GACA;GAAC;GAAW;GAAe;EAAU,GACrC,YACF,GAEI,EAAM,OAAO,EAAW,SAAS,oBAAoB,MACvD,EAAM,OAAO,EAAW,SAAS,CAAC,OAAO,GAAG,oBAAoB,GAChE,EAAM,KAAK,EAAW,QAAQ,OAAO,0BAA0B,IAE7D,EAAM,OAAO,EAAW,aAAa,wBAAwB,GAAG;GAClE,IAAM,IAAO,EAAW;GAQxB,AAPA,EAAM,OACJ,GACA;IAAC;IAAS;IAAe;GAAU,GACnC,wBACF,GACA,EAAM,KAAK,EAAK,OAAO,8BAA8B,GACrD,EAAM,KAAK,EAAK,aAAa,oCAAoC,GACjE,EAAM,KAAK,EAAK,UAAU,iCAAiC;EAC7D;EACA,AAAI,EAAW,aAAa,KAAA,KAC1B,EAAc,GAAO,EAAW,QAAQ;CAF1C;AAIF;AAEA,SAAS,EAAW,GAAyB,GAAsB;CAC5D,EAAM,OAAO,GAAO,OAAO,MAChC,EAAM,OAAO,GAAO;EAAC;EAAQ;EAAU;EAAQ;CAAW,GAAG,OAAO,GAEhE,EAAM,OAAO,EAAM,MAAM,YAAY,MACvC,EAAM,OACJ,EAAM,MACN;EAAC;EAAS;EAAY;EAAY;EAAW;EAAQ;CAAU,GAC/D,YACF,GACA,EAAM,KAAK,EAAM,KAAK,OAAO,kBAAkB,GAC/C,EAAM,KAAK,EAAM,KAAK,UAAU,qBAAqB,GACjD,EAAM,KAAK,aAAa,KAAA,KAC1B,EAAc,GAAO,EAAM,KAAK,QAAQ,GAEtC,EAAM,KAAK,YAAY,KAAA,KACzB,EAAa,GAAO,EAAM,KAAK,OAAO,GAEpC,EAAM,KAAK,SAAS,KAAA,KACtB,EAAU,GAAO,EAAM,KAAK,IAAI,GAE9B,EAAM,KAAK,aAAa,KAAA,KAC1B,EAAc,GAAO,EAAM,KAAK,QAAQ,IAGxC,EAAM,OAAO,EAAM,QAAQ,cAAc,MAC3C,EAAM,OAAO,EAAM,QAAQ,CAAC,WAAW,GAAG,cAAc,GACxD,EAAM,KAAK,EAAM,OAAO,WAAW,wBAAwB,IAEzD,EAAM,OAAO,EAAM,MAAM,YAAY,MACvC,EAAM,OAAO,EAAM,MAAM,CAAC,OAAO,GAAG,YAAY,GAChD,EAAM,KAAK,EAAM,KAAK,OAAO,kBAAkB,IAE7C,EAAM,cAAc,KAAA,KACtB,EAAmB,GAAO,EAAM,SAAS;AAE7C;AAEA,SAAS,EAAc,GAAyB,GAAyB;CACvE,IAAM,IAAO;CACb,IAAI,CAAC,EAAM,OAAO,GAAU,CAAI,GAAG;CAEnC,AADA,EAAM,OAAO,GAAU,CAAC,SAAS,OAAO,GAAG,CAAI,GAC/C,EAAM,KAAK,EAAS,OAAO,GAAG,EAAK,OAAO;CAE1C,IAAM,EAAE,aAAU;CAClB,IAAI,CAAC,MAAM,QAAQ,CAAK,KAAK,EAAM,WAAW,GAAG;EAC/C,EAAM,KAAK,GAAG,EAAK,SAAS,2BAA2B;EACvD;CACF;CACA,IAAM,oBAAO,IAAI,IAAY;CAC7B,EAAM,SAAS,GAAe,MAAU;EACtC,EAAkB,GAAO,GAAM,GAAM,GAAG,EAAK,SAAS,EAAM,EAAE;CAChE,CAAC;AACH;AAEA,SAAS,EACP,GACA,GACA,GACA,GACM;CACN,IAAI,CAAC,EAAM,OAAO,GAAM,CAAI,GAAG;CAC/B,EAAM,OAAO,GAAM;EAAC;EAAU;EAAS;EAAU;EAAc;CAAM,GAAG,CAAI;CAE5E,IAAM,EAAE,WAAQ,UAAO,WAAQ,eAAY,YAAS;CAGpD,IAFA,EAAM,KAAK,GAAO,GAAG,EAAK,OAAO,GACjC,EAAc,GAAO,GAAM,GAAG,EAAK,MAAM,GACrC,CAAC,EAAQ,GAAQ,CAAgB,GAAG;EAGtC,AAFA,EAAM,KAAK,GAAG,EAAK,UAAU,oCAAoC,GACjE,EAAM,KAAK,GAAQ,GAAG,EAAK,QAAQ,GAC/B,MAAe,KAAA,KAAW,EAAM,KAAK,GAAY,GAAG,EAAK,YAAY;EACzE;CACF;CAOA,AANI,EAAK,IAAI,CAAM,IACjB,EAAM,KAAK,GAAG,EAAK,UAAU,kBAAkB,IAE/C,EAAK,IAAI,CAAM,GAEjB,EAAc,GAAO,GAAQ,GAAQ,GAAG,EAAK,QAAQ,GACjD,MAAe,KAAA,KACjB,EAAc,GAAO,GAAY,GAAQ,GAAG,EAAK,YAAY;AAEjE;AAMA,SAAS,EACP,GACA,GACA,GACA,GACM;CACN,IAAI,CAAC,EAAM,KAAK,GAAO,CAAI,GAAG;CAC9B,IAAM,IAAU,EAA2B;CAK3C,CAHE,EAAQ,WAAW,IACf,SACI,OAAO,eAAe,EAAQ,KAAK,GAAG,EAAE,SAAS,GACpC,KAAK,CAAe,KACzC,EAAM,KAAK,GAAM,gDAAgD;AAErE;AAEA,SAAS,EAAa,GAAyB,GAAwB;CACrE,IAAM,IAAO;CACb,IAAI,CAAC,MAAM,QAAQ,CAAO,KAAK,EAAQ,WAAW,GAAG;EACnD,EAAM,KAAK,GAAM,2BAA2B;EAC5C;CACF;CACA,IAAM,oBAAO,IAAI,IAAY;CAC7B,EAAQ,SAAS,GAAiB,MAAU;EAC1C,EAAY,GAAO,GAAQ,GAAM,GAAG,EAAK,GAAG,EAAM,EAAE;CACtD,CAAC;AACH;AAEA,SAAS,EACP,GACA,GACA,GACA,GACM;CACN,IAAI,CAAC,EAAM,OAAO,GAAQ,CAAI,GAAG;CACjC,EAAM,OAAO,GAAQ;EAAC;EAAM;EAAS;CAAS,GAAG,CAAI;CAErD,IAAM,EAAE,OAAI,UAAO,eAAY;CAE/B,IADA,EAAM,KAAK,GAAO,GAAG,EAAK,OAAO,GAC7B,CAAC,EAAQ,GAAI,CAAoB,GAAG;EACtC,EAAM,KAAK,GAAG,EAAK,MAAM,sCAAsC;EAC/D;CACF;CAMA,AALI,EAAK,IAAI,CAAE,IACb,EAAM,KAAK,GAAG,EAAK,MAAM,kBAAkB,IAE3C,EAAK,IAAI,CAAE,GAEb,EACE,GACA,GACA,EAAwB,IACxB,GAAG,EAAK,SACV;AACF;AAEA,SAAS,EACP,GACA,GACA,GACA,GACM;CACN,IAAI,CAAC,MAAM,QAAQ,CAAO,KAAK,EAAQ,SAAS,GAAG;EACjD,EAAM,KAAK,GAAM,iCAAiC;EAClD;CACF;CACA,IAAM,oBAAO,IAAI,IAAY;CAkB7B,AAjBA,EAAQ,SAAS,GAAiB,MAAU;EAC1C,IAAM,IAAa,GAAG,EAAK,GAAG,EAAM;EACpC,IAAI,CAAC,EAAM,OAAO,GAAQ,CAAU,GAAG;EACvC,EAAM,OAAO,GAAQ,CAAC,SAAS,OAAO,GAAG,CAAU;EAEnD,IAAM,EAAE,UAAO,aAAU;EAQzB,AAPK,EAAQ,GAAO,CAAM,IAEf,EAAK,IAAI,CAAK,IACvB,EAAM,KAAK,GAAG,EAAW,SAAS,iBAAiB,IAEnD,EAAK,IAAI,CAAK,IAJd,EAAM,KAAK,GAAG,EAAW,SAAS,qCAAqC,GAMzE,EAAM,KAAK,GAAO,GAAG,EAAW,OAAO;CACzC,CAAC,GAGI,EAAK,IAAI,KAAK,KACjB,EAAM,KAAK,GAAM,+BAA6B;AAElD;AAEA,SAAS,EAAU,GAAyB,GAAqB;CAC/D,IAAM,IAAO;CACb,IAAI,CAAC,EAAM,OAAO,GAAM,CAAI,GAAG;CAC/B,EAAM,OAAO,GAAM;EAAC;EAAS;EAAW;CAAS,GAAG,CAAI;CAExD,IAAM,EAAE,UAAO,YAAS,SAAS,MAAiB;CAClD,EAAM,KAAK,GAAO,GAAG,EAAK,OAAO;CACjC,IAAM,oBAAW,IAAI,IAAY;CAmBjC,AAlBI,CAAC,MAAM,QAAQ,CAAO,KAAK,EAAQ,WAAW,IAChD,EAAM,KAAK,GAAG,EAAK,WAAW,2BAA2B,IAEzD,EAAQ,SAAS,GAAiB,MAAU;EAC1C,IAAM,IAAa,GAAG,EAAK,WAAW,EAAM;EACvC,EAAM,OAAO,GAAQ,CAAU,MACpC,EAAM,OAAO,GAAQ,CAAC,SAAS,OAAO,GAAG,CAAU,GAE9C,EAAQ,EAAO,OAAO,CAAqB,IAErC,EAAS,IAAI,EAAO,KAAK,IAClC,EAAM,KAAK,GAAG,EAAW,SAAS,iBAAiB,IAEnD,EAAS,IAAI,EAAO,KAAK,IAJzB,EAAM,KAAK,GAAG,EAAW,SAAS,oCAAoC,GAMxE,EAAM,KAAK,EAAO,OAAO,GAAG,EAAW,OAAO;CAChD,CAAC,IAEC,OAAO,KAAiB,YAAY,CAAC,EAAS,IAAI,CAAY,MAChE,EAAM,KAAK,GAAG,EAAK,WAAW,2CAA2C;AAE7E;AAGA,IAAM,IAAiB;CACrB,QAAQ;EAAC;EAAW;EAAW;EAAW;EAAY;EAAY;CAAU;CAC5E,SAAS;EAAC;EAAS;EAAS;CAAS;CACrC,OAAO;EAAC;EAAQ;EAAiB;CAAiB;AACpD;AAEA,SAAS,EAAc,GAAyB,GAAyB;CACvE,IAAM,IAAO;CACR,EAAM,OAAO,GAAU,CAAI,MAChC,EAAM,OAAO,GAAU,OAAO,KAAK,CAAc,GAAG,CAAI,GAExD,OAAQ,KAAK,CAAc,EAAsC,SAC9D,MAAY;EACX,IAAM,IAAc,GAAG,EAAK,GAAG,KACzB,IAAQ,EAAS;EACvB,IAAI,CAAC,EAAM,OAAO,GAAO,CAAW,GAAG;EACvC,IAAM,IAAO,EAAe;EAE5B,AADA,EAAM,OAAO,GAAO,GAAM,CAAW,GACrC,EAAK,SAAS,MAAQ;GACpB,EAAM,KAAK,EAAM,IAAM,GAAG,EAAY,GAAG,GAAK;EAChD,CAAC;CACH,CACF;AACF;AAEA,SAAS,EAAmB,GAAyB,GAA0B;CAC7E,IAAM,IAAO;CACR,EAAM,OAAO,GAAW,CAAI,MACjC,EAAM,OAAO,GAAW,CAAC,SAAS,aAAa,GAAG,CAAI,GACtD,EAAM,KAAK,EAAU,OAAO,GAAG,EAAK,OAAO,GAC3C,EAAM,KAAK,EAAU,aAAa,GAAG,EAAK,aAAa;AACzD;AAOA,SAAS,EAAkB,GAAyB,GAAsB;CACxE,IAAM,IAAS,EAAS,EAAU,MAAM,IAAI,EAAU,SAAS,CAAC,GAC1D,IAAa,EAAS,EAAU,UAAU,IAAI,EAAU,aAAa,CAAC,GACtE,IAAQ,EAAS,EAAU,KAAK,IAAI,EAAU,QAAQ,CAAC,GACvD,IAAO,EAAS,EAAM,IAAI,IAAI,EAAM,OAAO,CAAC,GAE5C,IAA8B;EAClC,CAAC,oBAAoB,EAAO,SAAS;EACrC,CAAC,uBAAuB,EAAW,QAAQ;EAC3C,CAAC,mBAAmB,EAAM,SAAS;EACnC,CAAC,uBAAuB,EAAK,QAAQ;EACrC,CAAC,sBAAsB,EAAK,OAAO;EACnC,CAAC,mBAAmB,EAAK,IAAI;EAC7B,CAAC,uBAAuB,EAAK,QAAQ;CACvC,GACM,IAAU,EACb,QAAQ,GAAG,OAAW,MAAU,KAAA,CAAS,EACzC,KAAK,CAAC,OAAU,CAAI;CACnB,EAAQ,WAAW,KAAK,EAAQ,WAAW,EAAO,UACtD,EAAM,KACJ,aACA,wDAAwD,EAAQ,KAAK,IAAI,GAC3E;AACF;AAEA,SAAS,EACP,GACA,GACA,GACA,GACM;CACN,IAAI,CAAC,EAAM,OAAO,GAAW,CAAI,GAAG;CACpC,EAAM,OACJ,GACA;EAAC;EAAQ;EAAS;EAAQ;EAAY;CAAa,GACnD,CACF;CAEA,IAAM,EAAE,SAAM,UAAO,SAAM,aAAU,mBAAgB;CAgBrD,IAfI,MAAS,EAAK,QAChB,EAAM,KACJ,GAAG,EAAK,QACR,YAAY,EAAK,KAAK,iCACxB,GAEF,EAAM,KAAK,GAAO,GAAG,EAAK,OAAO,GAC7B,MAAS,KAAA,KAAW,EAAM,KAAK,GAAM,GAAG,EAAK,MAAM,GACnD,MAAa,EAAK,YACpB,EAAM,KACJ,GAAG,EAAK,YACR,WAAW,EAAK,SAAS,0BAC3B,GAGE,MAAgB,KAAA;MACd,EAAK,SAAS,UAChB,EAAM,KACJ,GAAG,EAAK,eACR,uCACF;OACK,IAAI,EAAM,OAAO,GAAa,GAAG,EAAK,aAAa,GAAG;GAC3D,EAAM,OAAO,GAAa,CAAC,OAAO,KAAK,GAAG,GAAG,EAAK,aAAa;GAC/D,IAAM,EAAE,QAAK,WAAQ;GASrB,AANI,MAAQ,KAAA,KAAa,MAAQ,KAC/B,EAAM,KACJ,GAAG,EAAK,mBACR,kCACF,GAGA,MAAQ,KAAA,MACP,CAAC,OAAO,UAAU,CAAG,KAAM,IAAiB,MAE7C,EAAM,KAAK,GAAG,EAAK,mBAAmB,4BAA4B;EAEtE;;AAEJ;AAEA,SAAS,EAAgB,GAAyB,GAA2B;CAC3E,IAAI,CAAC,EAAM,OAAO,GAAY,YAAY,GAAG;CAC7C,IAAM,IAAQ,OAAO,KAAK,CAAU;CAIpC,AAHI,EAAM,WAAW,KACnB,EAAM,KAAK,cAAc,qCAAqC,GAEhE,EAAM,SAAS,MAAS;EACtB,IAAI,CAAC,EAAgB,SAAS,CAAI,GAAG;GACnC,EAAM,KAAK,cAAc,KAAQ,6BAA6B;GAC9D;EACF;EACA,EACE,GACA,EAAgB,IAChB,EAAW,IACX,cAAc,GAChB;CACF,CAAC;AACH;AAEA,SAAS,EACP,GACA,GACM;CACN,IAAI,CAAC,EAAM,OAAO,GAAc,cAAc,GAAG;CACjD,EAAM,OACJ,GACA;EAAC;EAAY;EAAe;EAAkB;CAAgB,GAC9D,cACF;CAEA,IAAM,EAAE,aAAU,gBAAa,mBAAgB,sBAC7C;CAaF,CAZI,OAAO,KAAa,YAAY,CAAC,EAAkB,KAAK,CAAQ,MAClE,EAAM,KAAK,yBAAyB,0BAA0B,GAE5D,MAAgB,KAClB,EAAM,KAAK,4BAA4B,WAAW,IAGlD,OAAO,KAAmB,YAC1B,CAAC,EAAwB,KAAK,CAAc,MAE5C,EAAM,KAAK,+BAA+B,wBAAwB,GAEhE,EAAM,OAAO,GAAgB,6BAA6B,MAC5D,EAAM,OACJ,GACA,CAAC,gBAAgB,wBAAwB,GACzC,6BACF,IAEE,OAAO,EAAe,gBAAiB,YACvC,CAAE,EAAoC,SACpC,EAAe,YACjB,MAEA,EAAM,KACJ,4CACA,6BACF,IAGA,OAAO,EAAe,0BAA2B,YACjD,CAAC,EAAqB,KAAK,EAAe,sBAAsB,MAEhE,EAAM,KACJ,sDACA,kCACF;AAGN;AAEA,SAAS,EAAe,GAAyB,GAA0B;CACzE,IAAI,CAAC,EAAM,OAAO,GAAW,WAAW,GAAG;CAC3C,IAAM,IAAU,CAAC,GAAG,GAAsB,GAAG,CAAiB;CAC9D,EAAM,OAAO,GAAW,GAAS,WAAW;CAE5C,IAAM,KAAc,MAAgC;EAClD,IAAM,IAAQ,EAAU;EASxB,OAPE,OAAO,KAAU,YACjB,CAAC,EAAiB,KAAK,CAAK,KAC5B,EAAM,SAAS,IAAI,KAEnB,EAAM,KAAK,aAAa,KAAQ,wCAAwC,GACjE,QAEF;CACT;CAQA,AANA,EAAqB,SAAS,MAAS;EACrC,IAAM,IAAQ,EAAW,CAAI;EAC7B,AAAI,MAAU,QAAQ,OAAO,KAAK,CAAK,KACrC,EAAM,KAAK,aAAa,KAAQ,+BAA+B;CAEnE,CAAC,GACD,EAAkB,SAAS,MAAS;EAClC,IAAM,IAAQ,EAAW,CAAI;EAC7B,AAAI,MAAU,QAAQ,CAAC,EAAoB,KAAK,CAAK,KACnD,EAAM,KAAK,aAAa,KAAQ,6BAA6B;CAEjE,CAAC;AACH;AAEA,SAAS,EACP,GACA,GACA,GACU;CACV,IAAI,CAAC,MAAM,QAAQ,CAAK,KAAK,EAAM,WAAW,GAE5C,OADA,EAAM,KAAK,GAAM,2BAA2B,GACrC,CAAC;CAEV,IAAM,IAAQ,EAAM,QAAQ,MACtB,OAAO,KAAS,YAAY,EAAa,KAAK,CAAI,IAAU,MAChE,EAAM,KAAK,GAAM,mCAAmC,GAC7C,GACR;CAID,OAHI,IAAI,IAAI,CAAK,EAAE,SAAS,EAAM,UAChC,EAAM,KAAK,GAAM,uBAAuB,GAEnC;AACT;AAEA,IAAM,IAAiB;CACrB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAQA,SAAgB,EACd,GACA,GAC2B;CAC3B,IAAI,CAAC,EAAS,CAAS,GACrB,OAAO;EAAE,OAAO;EAAO,QAAQ,CAAC,8BAA8B;CAAE;CAElE,IAAI,EAAU,YAAA,OACZ,OAAO;EACL,OAAO;EACP,QAAQ,CAAC,oCAAmD;CAC9D;CAGF,IAAM,IAAQ,IAAI,EAAiB;CAiCnC,OAhCA,EAAM,OAAO,GAAW,GAAgB,WAAW,GAEnD,EAAY,GAAO,EAAU,QAAQ,EAAQ,aAAa,GAC1D,EAAgB,GAAO,EAAU,UAAU,GAC3C,EAAW,GAAO,EAAU,KAAK,IAE/B,OAAO,EAAU,WAAY,YAC7B,CAAC,EAAU,QAAQ,WAAW,CAAe,MAE7C,EAAM,KAAK,WAAW,mBAAmB,GAAiB,GAE5D,EAAgB,GAAO,EAAU,UAAU,GAC3C,EAAkB,GAAO,EAAU,YAAY,GAC/C,EAAe,GAAO,EAAU,SAAS,GAEzC,EACE,GACA,EAAU,uBACV,uBACF,EAAE,SAAS,MAAO;EAChB,AAAK,EAAQ,WAAW,IAAI,CAAE,KAC5B,EAAM,KAAK,yBAAyB,GAAG,EAAG,wBAAwB;CAEtE,CAAC,GACD,EACE,GACA,EAAU,yBACV,yBACF,GAEA,EAAkB,GAAO,CAAS,GAE3B;EAAE,OAAO,EAAM,OAAO,WAAW;EAAG,QAAQ,EAAM;CAAO;AAClE"}
+{"version":3,"file":"interface-validation.js","names":[],"sources":["../../src/manifests/interface-validation.ts"],"sourcesContent":["/**\n * Admission policy for the extension-published Automation interface manifest.\n *\n * Like a setup entry, the interface manifest is data authored in a different\n * repository that instructs this host to render copy, build links, and address\n * requests, so the host decides what it is *permitted* to state. Admission is\n * all-or-nothing: one bad field rejects the whole manifest, and the host falls\n * back to its own defaults rather than rendering a partially-trusted mix.\n */\n\nimport type {\n  AutomationAttributeName,\n  InterfaceAttributeType,\n  InterfaceRoutes,\n  OverviewMetric,\n} from \"./types\";\nimport {\n  DASHBOARD_FILTER_IDS,\n  DASHBOARD_FILTER_VALUES,\n  DASHBOARD_SORT_VALUES,\n  INTERFACE_ICON_SLUGS,\n  INTERFACE_SUB_PAGE_IDS,\n  INTERFACE_VERSION,\n  OVERVIEW_METRICS,\n  OVERVIEW_TILE_PLACEHOLDERS,\n} from \"./types\";\n\n/** Copy must never be able to inject markup into the host. */\nconst MARKUP_PATTERN = /<[A-Za-z/!]/;\nconst SLUG_PATTERN = /^[a-z0-9]+(-[a-z0-9]+)*$/;\n/** The one URL the manifest may state, pinned to the product documentation. */\nconst DOCS_URL_PREFIX = \"https://docs.openhands.dev/\";\nconst FILE_KIND_PATTERN = /^[a-z][a-z-]*$/;\nconst FILENAME_SUFFIX_PATTERN = /^\\.[a-z][a-z.]*json$/;\nconst EVENT_SOURCE_PATTERN = /^[a-z0-9][a-z0-9.-]*$/;\n/** Service-relative only: rooted, no traversal, no query, no fragment. */\nconst ENDPOINT_PATTERN = /^\\/[A-Za-z0-9/{}_-]*$/;\n/** Exactly one `{id}` substitution and no other braces. */\nconst ID_ENDPOINT_PATTERN = /^[^{}]*\\{id\\}[^{}]*$/;\n\nconst GIT_PROVIDERS = [\"github\", \"gitlab\", \"bitbucket\"] as const;\n/**\n * The attribute semantics this host's edit dialog implements: the control it\n * renders per property and the requiredness it enforces. Admission pins a\n * declared attribute to exactly these, so an admitted manifest can never\n * promise a control, a requiredness, or (below) a minimum the form would\n * silently ignore.\n */\nconst HOST_ATTRIBUTES: Record<\n  AutomationAttributeName,\n  { type: InterfaceAttributeType; required: boolean }\n> = {\n  name: { type: \"text\", required: true },\n  prompt: { type: \"textarea\", required: false },\n  model: { type: \"llm-profile\", required: false },\n  timeout: { type: \"number\", required: false },\n  schedule: { type: \"schedule\", required: false },\n};\nconst ATTRIBUTE_NAMES = Object.keys(HOST_ATTRIBUTES);\nconst PLAIN_ENDPOINT_NAMES = [\n  \"list\",\n  \"health\",\n  \"capabilities\",\n  \"validate\",\n  \"createPrompt\",\n  \"createPlugin\",\n] as const;\n// Endpoints added after the block shipped. A manifest published before them is\n// still admitted - requiring them would 404 the whole surface for anyone\n// pinning an older package - so they are checked only when present, and a\n// bundle entry, which is the only thing that needs them, fails on its own if\n// its manifest predates them.\nconst OPTIONAL_PLAIN_ENDPOINT_NAMES = [\"createBundle\", \"uploads\"] as const;\nconst ID_ENDPOINT_NAMES = [\"detail\", \"dispatch\", \"runs\", \"tarball\"] as const;\n\nexport interface InterfaceValidationContext {\n  /** Ids of the published automation catalog, for the featured-list check. */\n  catalogIds: ReadonlySet<string>;\n  /** The routes this host has registrations for. A manifest must match them. */\n  mountedRoutes: InterfaceRoutes;\n}\n\nexport interface InterfaceValidationResult {\n  valid: boolean;\n  errors: string[];\n}\n\ntype Rec = Record<string, unknown>;\n\nfunction isRecord(value: unknown): value is Rec {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction isOneOf<T extends readonly string[]>(\n  value: unknown,\n  values: T,\n): value is T[number] {\n  return (\n    typeof value === \"string\" && (values as readonly string[]).includes(value)\n  );\n}\n\nclass InterfaceChecker {\n  readonly errors: string[] = [];\n\n  fail(path: string, reason: string): false {\n    this.errors.push(`${path}: ${reason}`);\n    return false;\n  }\n\n  /** Literal user-visible copy. Carries no markup. */\n  copy(value: unknown, path: string): boolean {\n    if (typeof value !== \"string\" || value.length === 0) {\n      return this.fail(path, \"must be a non-empty string\");\n    }\n    if (MARKUP_PATTERN.test(value)) {\n      return this.fail(path, \"must not contain markup\");\n    }\n    return true;\n  }\n\n  /** A closed object: every present key must be an expected one. */\n  closed(container: Rec, allowed: readonly string[], path: string): void {\n    Object.keys(container)\n      .filter((key) => !allowed.includes(key))\n      .forEach((key) => this.fail(`${path}.${key}`, \"is not allowed\"));\n  }\n\n  record(value: unknown, path: string): value is Rec {\n    if (isRecord(value)) return true;\n    this.fail(path, \"must be an object\");\n    return false;\n  }\n}\n\nfunction checkRoutes(\n  check: InterfaceChecker,\n  routes: unknown,\n  mounted: InterfaceRoutes,\n): void {\n  if (!check.record(routes, \"routes\")) return;\n  check.closed(routes, [\"list\", \"setup\", \"detail\", \"templates\"], \"routes\");\n\n  // The host serves what it has registrations for, so a declared route must be\n  // exactly the mounted shape — the manifest owns link construction, not the\n  // router table.\n  ([\"list\", \"setup\", \"detail\"] as const).forEach((name) => {\n    if (routes[name] !== mounted[name]) {\n      check.fail(`routes.${name}`, `must be \"${mounted[name]}\"`);\n    }\n  });\n  if (\n    routes.templates !== undefined &&\n    routes.templates !== mounted.templates\n  ) {\n    check.fail(\n      \"routes.templates\",\n      mounted.templates === undefined\n        ? \"is not a route this host mounts\"\n        : `must be \"${mounted.templates}\"`,\n    );\n  }\n}\n\nfunction checkSubPages(check: InterfaceChecker, subPages: unknown): void {\n  if (!Array.isArray(subPages) || subPages.length === 0) {\n    check.fail(\"navigation.subPages\", \"must be a non-empty array\");\n    return;\n  }\n  const seen = new Set<string>();\n  subPages.forEach((item: unknown, index) => {\n    const path = `navigation.subPages[${index}]`;\n    if (!check.record(item, path)) return;\n    check.closed(item, [\"page\", \"label\", \"icon\"], path);\n\n    const { page, label, icon } = item;\n    if (!isOneOf(page, INTERFACE_SUB_PAGE_IDS)) {\n      check.fail(`${path}.page`, \"is not a sub-page this host serves\");\n    } else if (seen.has(page)) {\n      check.fail(`${path}.page`, \"repeats a page\");\n    } else {\n      seen.add(page);\n    }\n    check.copy(label, `${path}.label`);\n    checkIconSlug(check, icon, `${path}.icon`);\n  });\n}\n\nfunction checkIconSlug(\n  check: InterfaceChecker,\n  icon: unknown,\n  path: string,\n): void {\n  if (!isOneOf(icon, INTERFACE_ICON_SLUGS)) {\n    check.fail(path, \"is not an icon this host ships\");\n  }\n}\n\nfunction checkNavigation(check: InterfaceChecker, navigation: unknown): void {\n  if (!check.record(navigation, \"navigation\")) return;\n  check.closed(\n    navigation,\n    [\"sidebar\", \"commandMenu\", \"subPages\"],\n    \"navigation\",\n  );\n\n  if (check.record(navigation.sidebar, \"navigation.sidebar\")) {\n    check.closed(navigation.sidebar, [\"label\"], \"navigation.sidebar\");\n    check.copy(navigation.sidebar.label, \"navigation.sidebar.label\");\n  }\n  if (check.record(navigation.commandMenu, \"navigation.commandMenu\")) {\n    const menu = navigation.commandMenu;\n    check.closed(\n      menu,\n      [\"title\", \"description\", \"keywords\"],\n      \"navigation.commandMenu\",\n    );\n    check.copy(menu.title, \"navigation.commandMenu.title\");\n    check.copy(menu.description, \"navigation.commandMenu.description\");\n    check.copy(menu.keywords, \"navigation.commandMenu.keywords\");\n  }\n  if (navigation.subPages !== undefined) {\n    checkSubPages(check, navigation.subPages);\n  }\n}\n\nfunction checkPages(check: InterfaceChecker, pages: unknown): void {\n  if (!check.record(pages, \"pages\")) return;\n  check.closed(pages, [\"list\", \"detail\", \"edit\", \"templates\"], \"pages\");\n\n  if (check.record(pages.list, \"pages.list\")) {\n    check.closed(\n      pages.list,\n      [\"title\", \"subtitle\", \"overview\", \"filters\", \"sort\", \"insights\"],\n      \"pages.list\",\n    );\n    check.copy(pages.list.title, \"pages.list.title\");\n    check.copy(pages.list.subtitle, \"pages.list.subtitle\");\n    if (pages.list.overview !== undefined) {\n      checkOverview(check, pages.list.overview);\n    }\n    if (pages.list.filters !== undefined) {\n      checkFilters(check, pages.list.filters);\n    }\n    if (pages.list.sort !== undefined) {\n      checkSort(check, pages.list.sort);\n    }\n    if (pages.list.insights !== undefined) {\n      checkInsights(check, pages.list.insights);\n    }\n  }\n  if (check.record(pages.detail, \"pages.detail\")) {\n    check.closed(pages.detail, [\"backLabel\"], \"pages.detail\");\n    check.copy(pages.detail.backLabel, \"pages.detail.backLabel\");\n  }\n  if (check.record(pages.edit, \"pages.edit\")) {\n    check.closed(pages.edit, [\"title\"], \"pages.edit\");\n    check.copy(pages.edit.title, \"pages.edit.title\");\n  }\n  if (pages.templates !== undefined) {\n    checkTemplatesPage(check, pages.templates);\n  }\n}\n\nfunction checkOverview(check: InterfaceChecker, overview: unknown): void {\n  const path = \"pages.list.overview\";\n  if (!check.record(overview, path)) return;\n  check.closed(overview, [\"label\", \"tiles\"], path);\n  check.copy(overview.label, `${path}.label`);\n\n  const { tiles } = overview;\n  if (!Array.isArray(tiles) || tiles.length === 0) {\n    check.fail(`${path}.tiles`, \"must be a non-empty array\");\n    return;\n  }\n  const seen = new Set<string>();\n  tiles.forEach((tile: unknown, index) => {\n    checkOverviewTile(check, tile, seen, `${path}.tiles[${index}]`);\n  });\n}\n\nfunction checkOverviewTile(\n  check: InterfaceChecker,\n  tile: unknown,\n  seen: Set<string>,\n  path: string,\n): void {\n  if (!check.record(tile, path)) return;\n  check.closed(tile, [\"metric\", \"label\", \"detail\", \"zeroDetail\", \"icon\"], path);\n\n  const { metric, label, detail, zeroDetail, icon } = tile;\n  check.copy(label, `${path}.label`);\n  checkIconSlug(check, icon, `${path}.icon`);\n  if (!isOneOf(metric, OVERVIEW_METRICS)) {\n    check.fail(`${path}.metric`, \"is not a metric this host computes\");\n    check.copy(detail, `${path}.detail`);\n    if (zeroDetail !== undefined) check.copy(zeroDetail, `${path}.zeroDetail`);\n    return;\n  }\n  if (seen.has(metric)) {\n    check.fail(`${path}.metric`, \"repeats a metric\");\n  } else {\n    seen.add(metric);\n  }\n  checkTileCopy(check, detail, metric, `${path}.detail`);\n  if (zeroDetail !== undefined) {\n    checkTileCopy(check, zeroDetail, metric, `${path}.zeroDetail`);\n  }\n}\n\n/**\n * Tile copy may embed `{{name}}` placeholders, but only the names the metric\n * exposes — plain substitution, never an expression.\n */\nfunction checkTileCopy(\n  check: InterfaceChecker,\n  value: unknown,\n  metric: OverviewMetric,\n  path: string,\n): void {\n  if (!check.copy(value, path)) return;\n  const exposed = OVERVIEW_TILE_PLACEHOLDERS[metric];\n  const unknownPlaceholder =\n    exposed.length === 0\n      ? /\\{\\{/\n      : new RegExp(`\\\\{\\\\{(?!(?:${exposed.join(\"|\")})\\\\}\\\\})`);\n  if (unknownPlaceholder.test(value as string)) {\n    check.fail(path, \"uses a placeholder this metric does not expose\");\n  }\n}\n\nfunction checkFilters(check: InterfaceChecker, filters: unknown): void {\n  const path = \"pages.list.filters\";\n  if (!Array.isArray(filters) || filters.length === 0) {\n    check.fail(path, \"must be a non-empty array\");\n    return;\n  }\n  const seen = new Set<string>();\n  filters.forEach((filter: unknown, index) => {\n    checkFilter(check, filter, seen, `${path}[${index}]`);\n  });\n}\n\nfunction checkFilter(\n  check: InterfaceChecker,\n  filter: unknown,\n  seen: Set<string>,\n  path: string,\n): void {\n  if (!check.record(filter, path)) return;\n  check.closed(filter, [\"id\", \"label\", \"options\"], path);\n\n  const { id, label, options } = filter;\n  check.copy(label, `${path}.label`);\n  if (!isOneOf(id, DASHBOARD_FILTER_IDS)) {\n    check.fail(`${path}.id`, \"is not a filter this host implements\");\n    return;\n  }\n  if (seen.has(id)) {\n    check.fail(`${path}.id`, \"repeats a filter\");\n  } else {\n    seen.add(id);\n  }\n  checkFilterOptions(\n    check,\n    options,\n    DASHBOARD_FILTER_VALUES[id],\n    `${path}.options`,\n  );\n}\n\nfunction checkFilterOptions(\n  check: InterfaceChecker,\n  options: unknown,\n  values: readonly string[],\n  path: string,\n): void {\n  if (!Array.isArray(options) || options.length < 2) {\n    check.fail(path, \"must offer at least two options\");\n    return;\n  }\n  const seen = new Set<string>();\n  options.forEach((option: unknown, index) => {\n    const optionPath = `${path}[${index}]`;\n    if (!check.record(option, optionPath)) return;\n    check.closed(option, [\"value\", \"label\"], optionPath);\n\n    const { value, label } = option;\n    if (!isOneOf(value, values)) {\n      check.fail(`${optionPath}.value`, \"is not a value this host implements\");\n    } else if (seen.has(value)) {\n      check.fail(`${optionPath}.value`, \"repeats a value\");\n    } else {\n      seen.add(value);\n    }\n    check.copy(label, `${optionPath}.label`);\n  });\n  // \"all\" is the host's initial selection and what Clear filters resets to,\n  // so a filter that does not offer it could never be neutral.\n  if (!seen.has(\"all\")) {\n    check.fail(path, 'must offer the \"all\" option');\n  }\n}\n\nfunction checkSort(check: InterfaceChecker, sort: unknown): void {\n  const path = \"pages.list.sort\";\n  if (!check.record(sort, path)) return;\n  check.closed(sort, [\"label\", \"options\", \"default\"], path);\n\n  const { label, options, default: defaultValue } = sort;\n  check.copy(label, `${path}.label`);\n  const declared = new Set<string>();\n  if (!Array.isArray(options) || options.length === 0) {\n    check.fail(`${path}.options`, \"must be a non-empty array\");\n  } else {\n    options.forEach((option: unknown, index) => {\n      const optionPath = `${path}.options[${index}]`;\n      if (!check.record(option, optionPath)) return;\n      check.closed(option, [\"value\", \"label\"], optionPath);\n\n      if (!isOneOf(option.value, DASHBOARD_SORT_VALUES)) {\n        check.fail(`${optionPath}.value`, \"is not a sort this host implements\");\n      } else if (declared.has(option.value)) {\n        check.fail(`${optionPath}.value`, \"repeats a value\");\n      } else {\n        declared.add(option.value);\n      }\n      check.copy(option.label, `${optionPath}.label`);\n    });\n  }\n  if (typeof defaultValue !== \"string\" || !declared.has(defaultValue)) {\n    check.fail(`${path}.default`, \"must be one of the declared option values\");\n  }\n}\n\n/** Every insight state and stat the host renders must have a caption. */\nconst INSIGHTS_SHAPE = {\n  health: [\"healthy\", \"failing\", \"running\", \"disabled\", \"neverRun\", \"checking\"],\n  lastRun: [\"label\", \"never\", \"justNow\"],\n  stats: [\"runs\", \"recentSuccess\", \"averageDuration\"],\n} as const;\n\nfunction checkInsights(check: InterfaceChecker, insights: unknown): void {\n  const path = \"pages.list.insights\";\n  if (!check.record(insights, path)) return;\n  check.closed(insights, Object.keys(INSIGHTS_SHAPE), path);\n\n  (Object.keys(INSIGHTS_SHAPE) as (keyof typeof INSIGHTS_SHAPE)[]).forEach(\n    (section) => {\n      const sectionPath = `${path}.${section}`;\n      const value = insights[section];\n      if (!check.record(value, sectionPath)) return;\n      const keys = INSIGHTS_SHAPE[section];\n      check.closed(value, keys, sectionPath);\n      keys.forEach((key) => {\n        check.copy(value[key], `${sectionPath}.${key}`);\n      });\n    },\n  );\n}\n\nfunction checkTemplatesPage(check: InterfaceChecker, templates: unknown): void {\n  const path = \"pages.templates\";\n  if (!check.record(templates, path)) return;\n  check.closed(templates, [\"title\", \"description\"], path);\n  check.copy(templates.title, `${path}.title`);\n  check.copy(templates.description, `${path}.description`);\n}\n\n/**\n * The sub-page surface is declared whole or not at all. Navigation that points\n * at an unrouted page, or a dashboard with filters but no insight captions,\n * would be a partially-trusted mix, and the host refuses those wholesale.\n */\nfunction checkSubPageGroup(check: InterfaceChecker, candidate: Rec): void {\n  const routes = isRecord(candidate.routes) ? candidate.routes : {};\n  const navigation = isRecord(candidate.navigation) ? candidate.navigation : {};\n  const pages = isRecord(candidate.pages) ? candidate.pages : {};\n  const list = isRecord(pages.list) ? pages.list : {};\n\n  const pieces: [string, unknown][] = [\n    [\"routes.templates\", routes.templates],\n    [\"navigation.subPages\", navigation.subPages],\n    [\"pages.templates\", pages.templates],\n    [\"pages.list.overview\", list.overview],\n    [\"pages.list.filters\", list.filters],\n    [\"pages.list.sort\", list.sort],\n    [\"pages.list.insights\", list.insights],\n  ];\n  const missing = pieces\n    .filter(([, value]) => value === undefined)\n    .map(([name]) => name);\n  if (missing.length === 0 || missing.length === pieces.length) return;\n  check.fail(\n    \"interface\",\n    `the sub-page surface must be declared whole; missing ${missing.join(\", \")}`,\n  );\n}\n\nfunction checkAttribute(\n  check: InterfaceChecker,\n  host: { type: InterfaceAttributeType; required: boolean },\n  attribute: unknown,\n  path: string,\n): void {\n  if (!check.record(attribute, path)) return;\n  check.closed(\n    attribute,\n    [\"type\", \"label\", \"help\", \"required\", \"constraints\"],\n    path,\n  );\n\n  const { type, label, help, required, constraints } = attribute;\n  if (type !== host.type) {\n    check.fail(\n      `${path}.type`,\n      `must be \"${host.type}\", the control this host renders`,\n    );\n  }\n  check.copy(label, `${path}.label`);\n  if (help !== undefined) check.copy(help, `${path}.help`);\n  if (required !== host.required) {\n    check.fail(\n      `${path}.required`,\n      `must be ${host.required}, what this host enforces`,\n    );\n  }\n\n  if (constraints !== undefined) {\n    if (host.type !== \"number\") {\n      check.fail(\n        `${path}.constraints`,\n        \"is only allowed on a number attribute\",\n      );\n    } else if (check.record(constraints, `${path}.constraints`)) {\n      check.closed(constraints, [\"min\", \"max\"], `${path}.constraints`);\n      const { min, max } = constraints;\n      // The form validates a positive integer, i.e. an effective minimum of 1;\n      // any other declared minimum would be a promise it does not keep.\n      if (min !== undefined && min !== 1) {\n        check.fail(\n          `${path}.constraints.min`,\n          \"must be the 1 this host enforces\",\n        );\n      }\n      if (\n        max !== undefined &&\n        (!Number.isInteger(max) || (max as number) < 1)\n      ) {\n        check.fail(`${path}.constraints.max`, \"must be a positive integer\");\n      }\n    }\n  }\n}\n\nfunction checkAttributes(check: InterfaceChecker, attributes: unknown): void {\n  if (!check.record(attributes, \"attributes\")) return;\n  const names = Object.keys(attributes);\n  if (names.length === 0) {\n    check.fail(\"attributes\", \"must declare at least one attribute\");\n  }\n  names.forEach((name) => {\n    if (!ATTRIBUTE_NAMES.includes(name)) {\n      check.fail(`attributes.${name}`, \"is not a settable attribute\");\n      return;\n    }\n    checkAttribute(\n      check,\n      HOST_ATTRIBUTES[name as AutomationAttributeName],\n      attributes[name],\n      `attributes.${name}`,\n    );\n  });\n}\n\nfunction checkImportExport(\n  check: InterfaceChecker,\n  importExport: unknown,\n): void {\n  if (!check.record(importExport, \"importExport\")) return;\n  check.closed(\n    importExport,\n    [\"fileKind\", \"fileVersion\", \"filenameSuffix\", \"importDefaults\"],\n    \"importExport\",\n  );\n\n  const { fileKind, fileVersion, filenameSuffix, importDefaults } =\n    importExport;\n  if (typeof fileKind !== \"string\" || !FILE_KIND_PATTERN.test(fileKind)) {\n    check.fail(\"importExport.fileKind\", \"must be a lowercase slug\");\n  }\n  if (fileVersion !== 1) {\n    check.fail(\"importExport.fileVersion\", \"must be 1\");\n  }\n  if (\n    typeof filenameSuffix !== \"string\" ||\n    !FILENAME_SUFFIX_PATTERN.test(filenameSuffix)\n  ) {\n    check.fail(\"importExport.filenameSuffix\", \"must be a .json suffix\");\n  }\n  if (check.record(importDefaults, \"importExport.importDefaults\")) {\n    check.closed(\n      importDefaults,\n      [\"repoProvider\", \"placeholderEventSource\"],\n      \"importExport.importDefaults\",\n    );\n    if (\n      typeof importDefaults.repoProvider !== \"string\" ||\n      !(GIT_PROVIDERS as readonly string[]).includes(\n        importDefaults.repoProvider,\n      )\n    ) {\n      check.fail(\n        \"importExport.importDefaults.repoProvider\",\n        \"is not a supported provider\",\n      );\n    }\n    if (\n      typeof importDefaults.placeholderEventSource !== \"string\" ||\n      !EVENT_SOURCE_PATTERN.test(importDefaults.placeholderEventSource)\n    ) {\n      check.fail(\n        \"importExport.importDefaults.placeholderEventSource\",\n        \"must be a lowercase event source\",\n      );\n    }\n  }\n}\n\nfunction checkEndpoints(check: InterfaceChecker, endpoints: unknown): void {\n  if (!check.record(endpoints, \"endpoints\")) return;\n  const allowed = [\n    ...PLAIN_ENDPOINT_NAMES,\n    ...OPTIONAL_PLAIN_ENDPOINT_NAMES,\n    ...ID_ENDPOINT_NAMES,\n  ];\n  check.closed(endpoints, allowed, \"endpoints\");\n\n  const endpointAt = (name: string): string | null => {\n    const value = endpoints[name];\n    if (\n      typeof value !== \"string\" ||\n      !ENDPOINT_PATTERN.test(value) ||\n      value.includes(\"//\")\n    ) {\n      check.fail(`endpoints.${name}`, \"must be a rooted service-relative path\");\n      return null;\n    }\n    return value;\n  };\n\n  const plainNames = [\n    ...PLAIN_ENDPOINT_NAMES,\n    ...OPTIONAL_PLAIN_ENDPOINT_NAMES.filter((name) => name in endpoints),\n  ];\n  plainNames.forEach((name) => {\n    const value = endpointAt(name);\n    if (value !== null && /[{}]/.test(value)) {\n      check.fail(`endpoints.${name}`, \"must not carry a substitution\");\n    }\n  });\n  ID_ENDPOINT_NAMES.forEach((name) => {\n    const value = endpointAt(name);\n    if (value !== null && !ID_ENDPOINT_PATTERN.test(value)) {\n      check.fail(`endpoints.${name}`, \"must carry exactly one {id}\");\n    }\n  });\n}\n\nfunction checkSlugList(\n  check: InterfaceChecker,\n  value: unknown,\n  path: string,\n): string[] {\n  if (!Array.isArray(value) || value.length === 0) {\n    check.fail(path, \"must be a non-empty array\");\n    return [];\n  }\n  const slugs = value.filter((item): item is string => {\n    if (typeof item === \"string\" && SLUG_PATTERN.test(item)) return true;\n    check.fail(path, \"must contain only lowercase slugs\");\n    return false;\n  });\n  if (new Set(slugs).size !== slugs.length) {\n    check.fail(path, \"must not repeat an id\");\n  }\n  return slugs;\n}\n\nconst TOP_LEVEL_KEYS = [\n  \"version\",\n  \"routes\",\n  \"navigation\",\n  \"pages\",\n  \"docsUrl\",\n  \"attributes\",\n  \"importExport\",\n  \"endpoints\",\n  \"featuredAutomationIds\",\n  \"responderIntegrationIds\",\n];\n\n/**\n * Decide whether this host will act on a published interface manifest.\n *\n * The version is checked first and fails closed: a format this host does not\n * recognise is refused rather than interpreted with today's rules.\n */\nexport function validateInterfaceManifest(\n  candidate: unknown,\n  context: InterfaceValidationContext,\n): InterfaceValidationResult {\n  if (!isRecord(candidate)) {\n    return { valid: false, errors: [\"interface: must be an object\"] };\n  }\n  if (candidate.version !== INTERFACE_VERSION) {\n    return {\n      valid: false,\n      errors: [`interface.version: must be \"${INTERFACE_VERSION}\"`],\n    };\n  }\n\n  const check = new InterfaceChecker();\n  check.closed(candidate, TOP_LEVEL_KEYS, \"interface\");\n\n  checkRoutes(check, candidate.routes, context.mountedRoutes);\n  checkNavigation(check, candidate.navigation);\n  checkPages(check, candidate.pages);\n  if (\n    typeof candidate.docsUrl !== \"string\" ||\n    !candidate.docsUrl.startsWith(DOCS_URL_PREFIX)\n  ) {\n    check.fail(\"docsUrl\", `must start with ${DOCS_URL_PREFIX}`);\n  }\n  checkAttributes(check, candidate.attributes);\n  checkImportExport(check, candidate.importExport);\n  checkEndpoints(check, candidate.endpoints);\n\n  checkSlugList(\n    check,\n    candidate.featuredAutomationIds,\n    \"featuredAutomationIds\",\n  ).forEach((id) => {\n    if (!context.catalogIds.has(id)) {\n      check.fail(\"featuredAutomationIds\", `${id} is not a catalog entry`);\n    }\n  });\n  checkSlugList(\n    check,\n    candidate.responderIntegrationIds,\n    \"responderIntegrationIds\",\n  );\n\n  checkSubPageGroup(check, candidate);\n\n  return { valid: check.errors.length === 0, errors: check.errors };\n}\n"],"mappings":";;AA4BA,IAAM,IAAiB,eACjB,IAAe,4BAEf,IAAkB,+BAClB,IAAoB,kBACpB,IAA0B,wBAC1B,IAAuB,yBAEvB,IAAmB,yBAEnB,IAAsB,wBAEtB,IAAgB;CAAC;CAAU;CAAU;AAAW,GAQhD,IAGF;CACF,MAAM;EAAE,MAAM;EAAQ,UAAU;CAAK;CACrC,QAAQ;EAAE,MAAM;EAAY,UAAU;CAAM;CAC5C,OAAO;EAAE,MAAM;EAAe,UAAU;CAAM;CAC9C,SAAS;EAAE,MAAM;EAAU,UAAU;CAAM;CAC3C,UAAU;EAAE,MAAM;EAAY,UAAU;CAAM;AAChD,GACM,IAAkB,OAAO,KAAK,CAAe,GAC7C,IAAuB;CAC3B;CACA;CACA;CACA;CACA;CACA;AACF,GAMM,IAAgC,CAAC,gBAAgB,SAAS,GAC1D,IAAoB;CAAC;CAAU;CAAY;CAAQ;AAAS;AAgBlE,SAAS,EAAS,GAA8B;CAC9C,OAAO,OAAO,KAAU,cAAY,KAAkB,CAAC,MAAM,QAAQ,CAAK;AAC5E;AAEA,SAAS,EACP,GACA,GACoB;CACpB,OACE,OAAO,KAAU,YAAa,EAA6B,SAAS,CAAK;AAE7E;AAEA,IAAM,IAAN,MAAuB;CACrB,SAA4B,CAAC;CAE7B,KAAK,GAAc,GAAuB;EAExC,OADA,KAAK,OAAO,KAAK,GAAG,EAAK,IAAI,GAAQ,GAC9B;CACT;CAGA,KAAK,GAAgB,GAAuB;EAO1C,OANI,OAAO,KAAU,YAAY,EAAM,WAAW,IACzC,KAAK,KAAK,GAAM,4BAA4B,IAEjD,EAAe,KAAK,CAAK,IACpB,KAAK,KAAK,GAAM,yBAAyB,IAE3C;CACT;CAGA,OAAO,GAAgB,GAA4B,GAAoB;EACrE,OAAO,KAAK,CAAS,EAClB,QAAQ,MAAQ,CAAC,EAAQ,SAAS,CAAG,CAAC,EACtC,SAAS,MAAQ,KAAK,KAAK,GAAG,EAAK,GAAG,KAAO,gBAAgB,CAAC;CACnE;CAEA,OAAO,GAAgB,GAA4B;EAGjD,OAFI,EAAS,CAAK,IAAU,MAC5B,KAAK,KAAK,GAAM,mBAAmB,GAC5B;CACT;AACF;AAEA,SAAS,EACP,GACA,GACA,GACM;CACD,EAAM,OAAO,GAAQ,QAAQ,MAClC,EAAM,OAAO,GAAQ;EAAC;EAAQ;EAAS;EAAU;CAAW,GAAG,QAAQ,GAKvE;EAAE;EAAQ;EAAS;CAAQ,EAAY,SAAS,MAAS;EACvD,AAAI,EAAO,OAAU,EAAQ,MAC3B,EAAM,KAAK,UAAU,KAAQ,YAAY,EAAQ,GAAM,EAAE;CAE7D,CAAC,GAEC,EAAO,cAAc,KAAA,KACrB,EAAO,cAAc,EAAQ,aAE7B,EAAM,KACJ,oBACA,EAAQ,cAAc,KAAA,IAClB,oCACA,YAAY,EAAQ,UAAU,EACpC;AAEJ;AAEA,SAAS,EAAc,GAAyB,GAAyB;CACvE,IAAI,CAAC,MAAM,QAAQ,CAAQ,KAAK,EAAS,WAAW,GAAG;EACrD,EAAM,KAAK,uBAAuB,2BAA2B;EAC7D;CACF;CACA,IAAM,oBAAO,IAAI,IAAY;CAC7B,EAAS,SAAS,GAAe,MAAU;EACzC,IAAM,IAAO,uBAAuB,EAAM;EAC1C,IAAI,CAAC,EAAM,OAAO,GAAM,CAAI,GAAG;EAC/B,EAAM,OAAO,GAAM;GAAC;GAAQ;GAAS;EAAM,GAAG,CAAI;EAElD,IAAM,EAAE,SAAM,UAAO,YAAS;EAS9B,AARK,EAAQ,GAAM,CAAsB,IAE9B,EAAK,IAAI,CAAI,IACtB,EAAM,KAAK,GAAG,EAAK,QAAQ,gBAAgB,IAE3C,EAAK,IAAI,CAAI,IAJb,EAAM,KAAK,GAAG,EAAK,QAAQ,oCAAoC,GAMjE,EAAM,KAAK,GAAO,GAAG,EAAK,OAAO,GACjC,EAAc,GAAO,GAAM,GAAG,EAAK,MAAM;CAC3C,CAAC;AACH;AAEA,SAAS,EACP,GACA,GACA,GACM;CACN,AAAK,EAAQ,GAAM,CAAoB,KACrC,EAAM,KAAK,GAAM,gCAAgC;AAErD;AAEA,SAAS,EAAgB,GAAyB,GAA2B;CACtE,MAAM,OAAO,GAAY,YAAY,GAW1C;MAVA,EAAM,OACJ,GACA;GAAC;GAAW;GAAe;EAAU,GACrC,YACF,GAEI,EAAM,OAAO,EAAW,SAAS,oBAAoB,MACvD,EAAM,OAAO,EAAW,SAAS,CAAC,OAAO,GAAG,oBAAoB,GAChE,EAAM,KAAK,EAAW,QAAQ,OAAO,0BAA0B,IAE7D,EAAM,OAAO,EAAW,aAAa,wBAAwB,GAAG;GAClE,IAAM,IAAO,EAAW;GAQxB,AAPA,EAAM,OACJ,GACA;IAAC;IAAS;IAAe;GAAU,GACnC,wBACF,GACA,EAAM,KAAK,EAAK,OAAO,8BAA8B,GACrD,EAAM,KAAK,EAAK,aAAa,oCAAoC,GACjE,EAAM,KAAK,EAAK,UAAU,iCAAiC;EAC7D;EACA,AAAI,EAAW,aAAa,KAAA,KAC1B,EAAc,GAAO,EAAW,QAAQ;CAF1C;AAIF;AAEA,SAAS,EAAW,GAAyB,GAAsB;CAC5D,EAAM,OAAO,GAAO,OAAO,MAChC,EAAM,OAAO,GAAO;EAAC;EAAQ;EAAU;EAAQ;CAAW,GAAG,OAAO,GAEhE,EAAM,OAAO,EAAM,MAAM,YAAY,MACvC,EAAM,OACJ,EAAM,MACN;EAAC;EAAS;EAAY;EAAY;EAAW;EAAQ;CAAU,GAC/D,YACF,GACA,EAAM,KAAK,EAAM,KAAK,OAAO,kBAAkB,GAC/C,EAAM,KAAK,EAAM,KAAK,UAAU,qBAAqB,GACjD,EAAM,KAAK,aAAa,KAAA,KAC1B,EAAc,GAAO,EAAM,KAAK,QAAQ,GAEtC,EAAM,KAAK,YAAY,KAAA,KACzB,EAAa,GAAO,EAAM,KAAK,OAAO,GAEpC,EAAM,KAAK,SAAS,KAAA,KACtB,EAAU,GAAO,EAAM,KAAK,IAAI,GAE9B,EAAM,KAAK,aAAa,KAAA,KAC1B,EAAc,GAAO,EAAM,KAAK,QAAQ,IAGxC,EAAM,OAAO,EAAM,QAAQ,cAAc,MAC3C,EAAM,OAAO,EAAM,QAAQ,CAAC,WAAW,GAAG,cAAc,GACxD,EAAM,KAAK,EAAM,OAAO,WAAW,wBAAwB,IAEzD,EAAM,OAAO,EAAM,MAAM,YAAY,MACvC,EAAM,OAAO,EAAM,MAAM,CAAC,OAAO,GAAG,YAAY,GAChD,EAAM,KAAK,EAAM,KAAK,OAAO,kBAAkB,IAE7C,EAAM,cAAc,KAAA,KACtB,EAAmB,GAAO,EAAM,SAAS;AAE7C;AAEA,SAAS,EAAc,GAAyB,GAAyB;CACvE,IAAM,IAAO;CACb,IAAI,CAAC,EAAM,OAAO,GAAU,CAAI,GAAG;CAEnC,AADA,EAAM,OAAO,GAAU,CAAC,SAAS,OAAO,GAAG,CAAI,GAC/C,EAAM,KAAK,EAAS,OAAO,GAAG,EAAK,OAAO;CAE1C,IAAM,EAAE,aAAU;CAClB,IAAI,CAAC,MAAM,QAAQ,CAAK,KAAK,EAAM,WAAW,GAAG;EAC/C,EAAM,KAAK,GAAG,EAAK,SAAS,2BAA2B;EACvD;CACF;CACA,IAAM,oBAAO,IAAI,IAAY;CAC7B,EAAM,SAAS,GAAe,MAAU;EACtC,EAAkB,GAAO,GAAM,GAAM,GAAG,EAAK,SAAS,EAAM,EAAE;CAChE,CAAC;AACH;AAEA,SAAS,EACP,GACA,GACA,GACA,GACM;CACN,IAAI,CAAC,EAAM,OAAO,GAAM,CAAI,GAAG;CAC/B,EAAM,OAAO,GAAM;EAAC;EAAU;EAAS;EAAU;EAAc;CAAM,GAAG,CAAI;CAE5E,IAAM,EAAE,WAAQ,UAAO,WAAQ,eAAY,YAAS;CAGpD,IAFA,EAAM,KAAK,GAAO,GAAG,EAAK,OAAO,GACjC,EAAc,GAAO,GAAM,GAAG,EAAK,MAAM,GACrC,CAAC,EAAQ,GAAQ,CAAgB,GAAG;EAGtC,AAFA,EAAM,KAAK,GAAG,EAAK,UAAU,oCAAoC,GACjE,EAAM,KAAK,GAAQ,GAAG,EAAK,QAAQ,GAC/B,MAAe,KAAA,KAAW,EAAM,KAAK,GAAY,GAAG,EAAK,YAAY;EACzE;CACF;CAOA,AANI,EAAK,IAAI,CAAM,IACjB,EAAM,KAAK,GAAG,EAAK,UAAU,kBAAkB,IAE/C,EAAK,IAAI,CAAM,GAEjB,EAAc,GAAO,GAAQ,GAAQ,GAAG,EAAK,QAAQ,GACjD,MAAe,KAAA,KACjB,EAAc,GAAO,GAAY,GAAQ,GAAG,EAAK,YAAY;AAEjE;AAMA,SAAS,EACP,GACA,GACA,GACA,GACM;CACN,IAAI,CAAC,EAAM,KAAK,GAAO,CAAI,GAAG;CAC9B,IAAM,IAAU,EAA2B;CAK3C,CAHE,EAAQ,WAAW,IACf,SACI,OAAO,eAAe,EAAQ,KAAK,GAAG,EAAE,SAAS,GACpC,KAAK,CAAe,KACzC,EAAM,KAAK,GAAM,gDAAgD;AAErE;AAEA,SAAS,EAAa,GAAyB,GAAwB;CACrE,IAAM,IAAO;CACb,IAAI,CAAC,MAAM,QAAQ,CAAO,KAAK,EAAQ,WAAW,GAAG;EACnD,EAAM,KAAK,GAAM,2BAA2B;EAC5C;CACF;CACA,IAAM,oBAAO,IAAI,IAAY;CAC7B,EAAQ,SAAS,GAAiB,MAAU;EAC1C,EAAY,GAAO,GAAQ,GAAM,GAAG,EAAK,GAAG,EAAM,EAAE;CACtD,CAAC;AACH;AAEA,SAAS,EACP,GACA,GACA,GACA,GACM;CACN,IAAI,CAAC,EAAM,OAAO,GAAQ,CAAI,GAAG;CACjC,EAAM,OAAO,GAAQ;EAAC;EAAM;EAAS;CAAS,GAAG,CAAI;CAErD,IAAM,EAAE,OAAI,UAAO,eAAY;CAE/B,IADA,EAAM,KAAK,GAAO,GAAG,EAAK,OAAO,GAC7B,CAAC,EAAQ,GAAI,CAAoB,GAAG;EACtC,EAAM,KAAK,GAAG,EAAK,MAAM,sCAAsC;EAC/D;CACF;CAMA,AALI,EAAK,IAAI,CAAE,IACb,EAAM,KAAK,GAAG,EAAK,MAAM,kBAAkB,IAE3C,EAAK,IAAI,CAAE,GAEb,EACE,GACA,GACA,EAAwB,IACxB,GAAG,EAAK,SACV;AACF;AAEA,SAAS,EACP,GACA,GACA,GACA,GACM;CACN,IAAI,CAAC,MAAM,QAAQ,CAAO,KAAK,EAAQ,SAAS,GAAG;EACjD,EAAM,KAAK,GAAM,iCAAiC;EAClD;CACF;CACA,IAAM,oBAAO,IAAI,IAAY;CAkB7B,AAjBA,EAAQ,SAAS,GAAiB,MAAU;EAC1C,IAAM,IAAa,GAAG,EAAK,GAAG,EAAM;EACpC,IAAI,CAAC,EAAM,OAAO,GAAQ,CAAU,GAAG;EACvC,EAAM,OAAO,GAAQ,CAAC,SAAS,OAAO,GAAG,CAAU;EAEnD,IAAM,EAAE,UAAO,aAAU;EAQzB,AAPK,EAAQ,GAAO,CAAM,IAEf,EAAK,IAAI,CAAK,IACvB,EAAM,KAAK,GAAG,EAAW,SAAS,iBAAiB,IAEnD,EAAK,IAAI,CAAK,IAJd,EAAM,KAAK,GAAG,EAAW,SAAS,qCAAqC,GAMzE,EAAM,KAAK,GAAO,GAAG,EAAW,OAAO;CACzC,CAAC,GAGI,EAAK,IAAI,KAAK,KACjB,EAAM,KAAK,GAAM,+BAA6B;AAElD;AAEA,SAAS,EAAU,GAAyB,GAAqB;CAC/D,IAAM,IAAO;CACb,IAAI,CAAC,EAAM,OAAO,GAAM,CAAI,GAAG;CAC/B,EAAM,OAAO,GAAM;EAAC;EAAS;EAAW;CAAS,GAAG,CAAI;CAExD,IAAM,EAAE,UAAO,YAAS,SAAS,MAAiB;CAClD,EAAM,KAAK,GAAO,GAAG,EAAK,OAAO;CACjC,IAAM,oBAAW,IAAI,IAAY;CAmBjC,AAlBI,CAAC,MAAM,QAAQ,CAAO,KAAK,EAAQ,WAAW,IAChD,EAAM,KAAK,GAAG,EAAK,WAAW,2BAA2B,IAEzD,EAAQ,SAAS,GAAiB,MAAU;EAC1C,IAAM,IAAa,GAAG,EAAK,WAAW,EAAM;EACvC,EAAM,OAAO,GAAQ,CAAU,MACpC,EAAM,OAAO,GAAQ,CAAC,SAAS,OAAO,GAAG,CAAU,GAE9C,EAAQ,EAAO,OAAO,CAAqB,IAErC,EAAS,IAAI,EAAO,KAAK,IAClC,EAAM,KAAK,GAAG,EAAW,SAAS,iBAAiB,IAEnD,EAAS,IAAI,EAAO,KAAK,IAJzB,EAAM,KAAK,GAAG,EAAW,SAAS,oCAAoC,GAMxE,EAAM,KAAK,EAAO,OAAO,GAAG,EAAW,OAAO;CAChD,CAAC,IAEC,OAAO,KAAiB,YAAY,CAAC,EAAS,IAAI,CAAY,MAChE,EAAM,KAAK,GAAG,EAAK,WAAW,2CAA2C;AAE7E;AAGA,IAAM,IAAiB;CACrB,QAAQ;EAAC;EAAW;EAAW;EAAW;EAAY;EAAY;CAAU;CAC5E,SAAS;EAAC;EAAS;EAAS;CAAS;CACrC,OAAO;EAAC;EAAQ;EAAiB;CAAiB;AACpD;AAEA,SAAS,EAAc,GAAyB,GAAyB;CACvE,IAAM,IAAO;CACR,EAAM,OAAO,GAAU,CAAI,MAChC,EAAM,OAAO,GAAU,OAAO,KAAK,CAAc,GAAG,CAAI,GAExD,OAAQ,KAAK,CAAc,EAAsC,SAC9D,MAAY;EACX,IAAM,IAAc,GAAG,EAAK,GAAG,KACzB,IAAQ,EAAS;EACvB,IAAI,CAAC,EAAM,OAAO,GAAO,CAAW,GAAG;EACvC,IAAM,IAAO,EAAe;EAE5B,AADA,EAAM,OAAO,GAAO,GAAM,CAAW,GACrC,EAAK,SAAS,MAAQ;GACpB,EAAM,KAAK,EAAM,IAAM,GAAG,EAAY,GAAG,GAAK;EAChD,CAAC;CACH,CACF;AACF;AAEA,SAAS,EAAmB,GAAyB,GAA0B;CAC7E,IAAM,IAAO;CACR,EAAM,OAAO,GAAW,CAAI,MACjC,EAAM,OAAO,GAAW,CAAC,SAAS,aAAa,GAAG,CAAI,GACtD,EAAM,KAAK,EAAU,OAAO,GAAG,EAAK,OAAO,GAC3C,EAAM,KAAK,EAAU,aAAa,GAAG,EAAK,aAAa;AACzD;AAOA,SAAS,EAAkB,GAAyB,GAAsB;CACxE,IAAM,IAAS,EAAS,EAAU,MAAM,IAAI,EAAU,SAAS,CAAC,GAC1D,IAAa,EAAS,EAAU,UAAU,IAAI,EAAU,aAAa,CAAC,GACtE,IAAQ,EAAS,EAAU,KAAK,IAAI,EAAU,QAAQ,CAAC,GACvD,IAAO,EAAS,EAAM,IAAI,IAAI,EAAM,OAAO,CAAC,GAE5C,IAA8B;EAClC,CAAC,oBAAoB,EAAO,SAAS;EACrC,CAAC,uBAAuB,EAAW,QAAQ;EAC3C,CAAC,mBAAmB,EAAM,SAAS;EACnC,CAAC,uBAAuB,EAAK,QAAQ;EACrC,CAAC,sBAAsB,EAAK,OAAO;EACnC,CAAC,mBAAmB,EAAK,IAAI;EAC7B,CAAC,uBAAuB,EAAK,QAAQ;CACvC,GACM,IAAU,EACb,QAAQ,GAAG,OAAW,MAAU,KAAA,CAAS,EACzC,KAAK,CAAC,OAAU,CAAI;CACnB,EAAQ,WAAW,KAAK,EAAQ,WAAW,EAAO,UACtD,EAAM,KACJ,aACA,wDAAwD,EAAQ,KAAK,IAAI,GAC3E;AACF;AAEA,SAAS,EACP,GACA,GACA,GACA,GACM;CACN,IAAI,CAAC,EAAM,OAAO,GAAW,CAAI,GAAG;CACpC,EAAM,OACJ,GACA;EAAC;EAAQ;EAAS;EAAQ;EAAY;CAAa,GACnD,CACF;CAEA,IAAM,EAAE,SAAM,UAAO,SAAM,aAAU,mBAAgB;CAgBrD,IAfI,MAAS,EAAK,QAChB,EAAM,KACJ,GAAG,EAAK,QACR,YAAY,EAAK,KAAK,iCACxB,GAEF,EAAM,KAAK,GAAO,GAAG,EAAK,OAAO,GAC7B,MAAS,KAAA,KAAW,EAAM,KAAK,GAAM,GAAG,EAAK,MAAM,GACnD,MAAa,EAAK,YACpB,EAAM,KACJ,GAAG,EAAK,YACR,WAAW,EAAK,SAAS,0BAC3B,GAGE,MAAgB,KAAA;MACd,EAAK,SAAS,UAChB,EAAM,KACJ,GAAG,EAAK,eACR,uCACF;OACK,IAAI,EAAM,OAAO,GAAa,GAAG,EAAK,aAAa,GAAG;GAC3D,EAAM,OAAO,GAAa,CAAC,OAAO,KAAK,GAAG,GAAG,EAAK,aAAa;GAC/D,IAAM,EAAE,QAAK,WAAQ;GASrB,AANI,MAAQ,KAAA,KAAa,MAAQ,KAC/B,EAAM,KACJ,GAAG,EAAK,mBACR,kCACF,GAGA,MAAQ,KAAA,MACP,CAAC,OAAO,UAAU,CAAG,KAAM,IAAiB,MAE7C,EAAM,KAAK,GAAG,EAAK,mBAAmB,4BAA4B;EAEtE;;AAEJ;AAEA,SAAS,EAAgB,GAAyB,GAA2B;CAC3E,IAAI,CAAC,EAAM,OAAO,GAAY,YAAY,GAAG;CAC7C,IAAM,IAAQ,OAAO,KAAK,CAAU;CAIpC,AAHI,EAAM,WAAW,KACnB,EAAM,KAAK,cAAc,qCAAqC,GAEhE,EAAM,SAAS,MAAS;EACtB,IAAI,CAAC,EAAgB,SAAS,CAAI,GAAG;GACnC,EAAM,KAAK,cAAc,KAAQ,6BAA6B;GAC9D;EACF;EACA,EACE,GACA,EAAgB,IAChB,EAAW,IACX,cAAc,GAChB;CACF,CAAC;AACH;AAEA,SAAS,EACP,GACA,GACM;CACN,IAAI,CAAC,EAAM,OAAO,GAAc,cAAc,GAAG;CACjD,EAAM,OACJ,GACA;EAAC;EAAY;EAAe;EAAkB;CAAgB,GAC9D,cACF;CAEA,IAAM,EAAE,aAAU,gBAAa,mBAAgB,sBAC7C;CAaF,CAZI,OAAO,KAAa,YAAY,CAAC,EAAkB,KAAK,CAAQ,MAClE,EAAM,KAAK,yBAAyB,0BAA0B,GAE5D,MAAgB,KAClB,EAAM,KAAK,4BAA4B,WAAW,IAGlD,OAAO,KAAmB,YAC1B,CAAC,EAAwB,KAAK,CAAc,MAE5C,EAAM,KAAK,+BAA+B,wBAAwB,GAEhE,EAAM,OAAO,GAAgB,6BAA6B,MAC5D,EAAM,OACJ,GACA,CAAC,gBAAgB,wBAAwB,GACzC,6BACF,IAEE,OAAO,EAAe,gBAAiB,YACvC,CAAE,EAAoC,SACpC,EAAe,YACjB,MAEA,EAAM,KACJ,4CACA,6BACF,IAGA,OAAO,EAAe,0BAA2B,YACjD,CAAC,EAAqB,KAAK,EAAe,sBAAsB,MAEhE,EAAM,KACJ,sDACA,kCACF;AAGN;AAEA,SAAS,EAAe,GAAyB,GAA0B;CACzE,IAAI,CAAC,EAAM,OAAO,GAAW,WAAW,GAAG;CAC3C,IAAM,IAAU;EACd,GAAG;EACH,GAAG;EACH,GAAG;CACL;CACA,EAAM,OAAO,GAAW,GAAS,WAAW;CAE5C,IAAM,KAAc,MAAgC;EAClD,IAAM,IAAQ,EAAU;EASxB,OAPE,OAAO,KAAU,YACjB,CAAC,EAAiB,KAAK,CAAK,KAC5B,EAAM,SAAS,IAAI,KAEnB,EAAM,KAAK,aAAa,KAAQ,wCAAwC,GACjE,QAEF;CACT;CAYA,AANA,CAHE,GAAG,GACH,GAAG,EAA8B,QAAQ,MAAS,KAAQ,CAAS,CAErE,EAAW,SAAS,MAAS;EAC3B,IAAM,IAAQ,EAAW,CAAI;EAC7B,AAAI,MAAU,QAAQ,OAAO,KAAK,CAAK,KACrC,EAAM,KAAK,aAAa,KAAQ,+BAA+B;CAEnE,CAAC,GACD,EAAkB,SAAS,MAAS;EAClC,IAAM,IAAQ,EAAW,CAAI;EAC7B,AAAI,MAAU,QAAQ,CAAC,EAAoB,KAAK,CAAK,KACnD,EAAM,KAAK,aAAa,KAAQ,6BAA6B;CAEjE,CAAC;AACH;AAEA,SAAS,EACP,GACA,GACA,GACU;CACV,IAAI,CAAC,MAAM,QAAQ,CAAK,KAAK,EAAM,WAAW,GAE5C,OADA,EAAM,KAAK,GAAM,2BAA2B,GACrC,CAAC;CAEV,IAAM,IAAQ,EAAM,QAAQ,MACtB,OAAO,KAAS,YAAY,EAAa,KAAK,CAAI,IAAU,MAChE,EAAM,KAAK,GAAM,mCAAmC,GAC7C,GACR;CAID,OAHI,IAAI,IAAI,CAAK,EAAE,SAAS,EAAM,UAChC,EAAM,KAAK,GAAM,uBAAuB,GAEnC;AACT;AAEA,IAAM,IAAiB;CACrB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAQA,SAAgB,EACd,GACA,GAC2B;CAC3B,IAAI,CAAC,EAAS,CAAS,GACrB,OAAO;EAAE,OAAO;EAAO,QAAQ,CAAC,8BAA8B;CAAE;CAElE,IAAI,EAAU,YAAA,OACZ,OAAO;EACL,OAAO;EACP,QAAQ,CAAC,oCAAmD;CAC9D;CAGF,IAAM,IAAQ,IAAI,EAAiB;CAiCnC,OAhCA,EAAM,OAAO,GAAW,GAAgB,WAAW,GAEnD,EAAY,GAAO,EAAU,QAAQ,EAAQ,aAAa,GAC1D,EAAgB,GAAO,EAAU,UAAU,GAC3C,EAAW,GAAO,EAAU,KAAK,IAE/B,OAAO,EAAU,WAAY,YAC7B,CAAC,EAAU,QAAQ,WAAW,CAAe,MAE7C,EAAM,KAAK,WAAW,mBAAmB,GAAiB,GAE5D,EAAgB,GAAO,EAAU,UAAU,GAC3C,EAAkB,GAAO,EAAU,YAAY,GAC/C,EAAe,GAAO,EAAU,SAAS,GAEzC,EACE,GACA,EAAU,uBACV,uBACF,EAAE,SAAS,MAAO;EAChB,AAAK,EAAQ,WAAW,IAAI,CAAE,KAC5B,EAAM,KAAK,yBAAyB,GAAG,EAAG,wBAAwB;CAEtE,CAAC,GACD,EACE,GACA,EAAU,yBACV,yBACF,GAEA,EAAkB,GAAO,CAAS,GAE3B;EAAE,OAAO,EAAM,OAAO,WAAW;EAAG,QAAQ,EAAM;CAAO;AAClE"}

package/dist/manifests/manifest-actions.d.ts

@@ -6,6 +6,11 @@
  * It chooses between the two outcomes this host offers, and it chooses by
  * declaring a `mode`: a direct entry produces a create request the host derives,
  * an assisted entry hands setup to a conversation.
+ *
+ * A direct entry that ships a bundle takes one more step before that create
+ * request - packing and uploading the archive - but it still names no host, no
+ * path and no method: the endpoints come from the interface manifest and the
+ * files from the published package.
  */
 import type { SetupEntry, SetupFormValues, SetupRequestBody } from "./types";
 export interface SetupActionResult {

package/dist/manifests/manifest-bundle.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Packing what a bundle entry ships.
+ *
+ * A bundle's manifest names its files by the repository path they live at; the
+ * contents travel in the published `@openhands/extensions` package, because
+ * this host has the package and not the repository. That indirection is the
+ * whole reason this module exists: everything else about a bundle is derived
+ * the same way a prompt entry's request is.
+ */
+import { BUNDLE_CONFIG_FILENAME } from "./types";
+import type { SetupEntry, SetupFormValues } from "./types";
+/** The rendered configuration, packed beside the entrypoint. */
+export { BUNDLE_CONFIG_FILENAME };
+/**
+ * The files the pinned package ships for this entry.
+ *
+ * Read defensively: a package predating bundles exports no such function, and
+ * an entry that declares a bundle there would otherwise pack an empty archive
+ * that fails only once a run tries to execute it.
+ */
+export declare function getBundleFiles(id: string): Record<string, string>;
+/**
+ * The archive for this entry, with the form's answers rendered into
+ * `config.json`.
+ *
+ * The config is taken from the create payload rather than rendered again here,
+ * so what the tarball carries and what the create request records as template
+ * provenance cannot disagree.
+ */
+export declare function packBundle(entry: SetupEntry, values: SetupFormValues): Promise<Uint8Array>;

package/dist/manifests/manifest-local-validation.d.ts

@@ -9,7 +9,7 @@
  * Errors are returned as codes rather than sentences so the host can render
  * them through its own translations; only manifest-authored copy is literal.
  */
-import type { DeploymentCapabilities, SetupBlock, SetupFieldOption, SetupFormField, SetupFormFields, SetupFormValues } from "./types";
+import type { DeploymentCapabilities, SetupBlock, SetupFieldOption, SetupFormField, SetupFormFields, SetupFormValue, SetupFormValues } from "./types";
 export type SetupFieldError = {
     code: "required";
 } | {
@@ -50,6 +50,15 @@ export declare function collectFields(setup: SetupBlock): SetupFormFields;
 export declare function resolveFieldOverrides(setup: SetupBlock, capabilities: DeploymentCapabilities | null): SetupFieldOverrides;
 /** The options a field offers, after deployment constraints are applied. */
 export declare function getFieldOptions(name: string, field: SetupFormField, overrides?: SetupFieldOverrides): SetupFieldOption[];
+/**
+ * Every value a field holds, whether it collects one or many.
+ *
+ * Reading both shapes as a list is what keeps validation, interpolation and
+ * the payload mapping from branching on `multiple` at every use.
+ */
+export declare function fieldValues(value: SetupFormValue | undefined): string[];
+/** The single value a field holds, or "" for a field collecting several. */
+export declare function fieldText(value: SetupFormValue | undefined): string;
 /** Initial form state: every declared field, seeded with its declared default. */
 export declare function getInitialFormValues(setup: SetupBlock): SetupFormValues;
 /** Check every declared field. Returns only the fields that failed. */

package/dist/manifests/manifest-sources.cjs

@@ -1,2 +1,2 @@
-require("../_virtual/_rolldown/runtime.cjs");const e=require("../node_modules/@openhands/extensions/automations/index.cjs");require("./manifest-registry.cjs").createSetupRegistry(e.default);var t=e.automations_exports,n=`AUTOMATION_INTERFACE`in t?t.AUTOMATION_INTERFACE:void 0;exports.AUTOMATION_INTERFACE_CANDIDATE=n;
+require("../_virtual/_rolldown/runtime.cjs");const e=require("../node_modules/@openhands/extensions/automations/index.cjs");var t=require("./manifest-registry.cjs").createSetupRegistry(e.default),n=e.automations_exports,r=`AUTOMATION_INTERFACE`in n?n.AUTOMATION_INTERFACE:void 0;exports.AUTOMATION_INTERFACE_CANDIDATE=r,exports.SETUP_REGISTRY=t;
 //# sourceMappingURL=manifest-sources.cjs.map

package/dist/manifests/manifest-sources.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"manifest-sources.cjs","names":[],"sources":["../../src/manifests/manifest-sources.ts"],"sourcesContent":["/**\n * The one place that decides which manifests this host is offered.\n *\n * Setup manifests are published by `@openhands/extensions` as an optional\n * `setup` block on a catalog entry, so the catalog is the whole source. Entries\n * without one are skipped, which means the pinned package deciding to ship them\n * is the only step left — there is no wiring to add here.\n *\n * The catalog is passed as `unknown[]` on purpose: admission is a trust\n * boundary, so the host validates the published data rather than trusting the\n * types that shipped beside it.\n */\n\nimport * as automationsModule from \"@openhands/extensions/automations\";\nimport { AUTOMATION_CATALOG } from \"@openhands/extensions/automations\";\nimport { createSetupRegistry, type SetupRegistry } from \"./manifest-registry\";\n\nexport const SETUP_REGISTRY: SetupRegistry = createSetupRegistry(\n  AUTOMATION_CATALOG as readonly unknown[],\n);\n\n/**\n * The interface manifest the pinned package publishes, if any. It is read off\n * the module namespace so a package that predates the export yields\n * `undefined` rather than a build error; admission in\n * `automation-interface.ts` decides what to do with it.\n */\nconst automationsExports: object = automationsModule;\nexport const AUTOMATION_INTERFACE_CANDIDATE: unknown =\n  \"AUTOMATION_INTERFACE\" in automationsExports\n    ? automationsExports.AUTOMATION_INTERFACE\n    : undefined;\n"],"mappings":"6JAiB6C,EAAA,oBAC3C,EAAA,OACF,EAQA,IAAM,EAA6B,EAAA,oBACtB,EACX,yBAA0B,EACtB,EAAmB,qBACnB,IAAA"}
+{"version":3,"file":"manifest-sources.cjs","names":[],"sources":["../../src/manifests/manifest-sources.ts"],"sourcesContent":["/**\n * The one place that decides which manifests this host is offered.\n *\n * Setup manifests are published by `@openhands/extensions` as an optional\n * `setup` block on a catalog entry, so the catalog is the whole source. Entries\n * without one are skipped, which means the pinned package deciding to ship them\n * is the only step left — there is no wiring to add here.\n *\n * The catalog is passed as `unknown[]` on purpose: admission is a trust\n * boundary, so the host validates the published data rather than trusting the\n * types that shipped beside it.\n */\n\nimport * as automationsModule from \"@openhands/extensions/automations\";\nimport { AUTOMATION_CATALOG } from \"@openhands/extensions/automations\";\nimport { createSetupRegistry, type SetupRegistry } from \"./manifest-registry\";\n\nexport const SETUP_REGISTRY: SetupRegistry = createSetupRegistry(\n  AUTOMATION_CATALOG as readonly unknown[],\n);\n\n/**\n * The interface manifest the pinned package publishes, if any. It is read off\n * the module namespace so a package that predates the export yields\n * `undefined` rather than a build error; admission in\n * `automation-interface.ts` decides what to do with it.\n */\nconst automationsExports: object = automationsModule;\nexport const AUTOMATION_INTERFACE_CANDIDATE: unknown =\n  \"AUTOMATION_INTERFACE\" in automationsExports\n    ? automationsExports.AUTOMATION_INTERFACE\n    : undefined;\n"],"mappings":"4HAiBA,IAAa,mCAAgC,EAAA,oBAC3C,EAAA,OACF,EAQM,EAA6B,EAAA,oBACtB,EACX,yBAA0B,EACtB,EAAmB,qBACnB,IAAA"}

package/dist/manifests/manifest-sources.js

@@ -1,8 +1,8 @@
 import e, { automations_exports as t } from "../node_modules/@openhands/extensions/automations/index.js";
 import { createSetupRegistry as n } from "./manifest-registry.js";
-n(e);
-var r = t, i = "AUTOMATION_INTERFACE" in r ? r.AUTOMATION_INTERFACE : void 0;
+//#region src/manifests/manifest-sources.ts
+var r = n(e), i = t, a = "AUTOMATION_INTERFACE" in i ? i.AUTOMATION_INTERFACE : void 0;
 //#endregion
-export { i as AUTOMATION_INTERFACE_CANDIDATE };
+export { a as AUTOMATION_INTERFACE_CANDIDATE, r as SETUP_REGISTRY };
 
 //# sourceMappingURL=manifest-sources.js.map

package/dist/manifests/manifest-sources.js.map

@@ -1 +1 @@
-{"version":3,"file":"manifest-sources.js","names":[],"sources":["../../src/manifests/manifest-sources.ts"],"sourcesContent":["/**\n * The one place that decides which manifests this host is offered.\n *\n * Setup manifests are published by `@openhands/extensions` as an optional\n * `setup` block on a catalog entry, so the catalog is the whole source. Entries\n * without one are skipped, which means the pinned package deciding to ship them\n * is the only step left — there is no wiring to add here.\n *\n * The catalog is passed as `unknown[]` on purpose: admission is a trust\n * boundary, so the host validates the published data rather than trusting the\n * types that shipped beside it.\n */\n\nimport * as automationsModule from \"@openhands/extensions/automations\";\nimport { AUTOMATION_CATALOG } from \"@openhands/extensions/automations\";\nimport { createSetupRegistry, type SetupRegistry } from \"./manifest-registry\";\n\nexport const SETUP_REGISTRY: SetupRegistry = createSetupRegistry(\n  AUTOMATION_CATALOG as readonly unknown[],\n);\n\n/**\n * The interface manifest the pinned package publishes, if any. It is read off\n * the module namespace so a package that predates the export yields\n * `undefined` rather than a build error; admission in\n * `automation-interface.ts` decides what to do with it.\n */\nconst automationsExports: object = automationsModule;\nexport const AUTOMATION_INTERFACE_CANDIDATE: unknown =\n  \"AUTOMATION_INTERFACE\" in automationsExports\n    ? automationsExports.AUTOMATION_INTERFACE\n    : undefined;\n"],"mappings":";;AAiB6C,EAC3C,CACF;AAQA,IAAM,IAA6B,GACtB,IACX,0BAA0B,IACtB,EAAmB,uBACnB,KAAA"}
+{"version":3,"file":"manifest-sources.js","names":[],"sources":["../../src/manifests/manifest-sources.ts"],"sourcesContent":["/**\n * The one place that decides which manifests this host is offered.\n *\n * Setup manifests are published by `@openhands/extensions` as an optional\n * `setup` block on a catalog entry, so the catalog is the whole source. Entries\n * without one are skipped, which means the pinned package deciding to ship them\n * is the only step left — there is no wiring to add here.\n *\n * The catalog is passed as `unknown[]` on purpose: admission is a trust\n * boundary, so the host validates the published data rather than trusting the\n * types that shipped beside it.\n */\n\nimport * as automationsModule from \"@openhands/extensions/automations\";\nimport { AUTOMATION_CATALOG } from \"@openhands/extensions/automations\";\nimport { createSetupRegistry, type SetupRegistry } from \"./manifest-registry\";\n\nexport const SETUP_REGISTRY: SetupRegistry = createSetupRegistry(\n  AUTOMATION_CATALOG as readonly unknown[],\n);\n\n/**\n * The interface manifest the pinned package publishes, if any. It is read off\n * the module namespace so a package that predates the export yields\n * `undefined` rather than a build error; admission in\n * `automation-interface.ts` decides what to do with it.\n */\nconst automationsExports: object = automationsModule;\nexport const AUTOMATION_INTERFACE_CANDIDATE: unknown =\n  \"AUTOMATION_INTERFACE\" in automationsExports\n    ? automationsExports.AUTOMATION_INTERFACE\n    : undefined;\n"],"mappings":";;;AAiBA,IAAa,IAAgC,EAC3C,CACF,GAQM,IAA6B,GACtB,IACX,0BAA0B,IACtB,EAAmB,uBACnB,KAAA"}

package/dist/manifests/manifest-template.d.ts

@@ -14,6 +14,20 @@ export interface SetupScope {
 }
 /** Walk a dotted path through plain objects. */
 export declare function getByPath(source: unknown, path: string): unknown;
+/**
+ * Substitute placeholders, keeping the resolved value's own type when the
+ * template is nothing but that placeholder.
+ *
+ * This is what lets a request body state `"repos": "{{form.repositories}}"` and
+ * get an array. Inside a sentence the same placeholder still reads as text,
+ * because there is nowhere for a list to go in a string.
+ *
+ * Only the shapes a form value has are kept whole. A placeholder naming
+ * anything else - `{{automation.setup}}` resolves to the setup block itself -
+ * reads as text like it does inside a sentence, so a manifest cannot state one
+ * value and put its own object graph into the request body.
+ */
+export declare function interpolateValue(template: string, scope: SetupScope): string | string[];
 /** Substitute placeholders inside a template string. */
 export declare function interpolateText(template: string, scope: SetupScope): string;
 /** Substitute placeholders from a flat name → value record. */

package/dist/manifests/manifest-validation.cjs

@@ -1,2 +1,2 @@
-require("../_virtual/_rolldown/runtime.cjs");const e=require("./types.cjs");var t=/^[a-z0-9]+(-[a-z0-9]+)*$/,n=/^[a-z][A-Za-z0-9]*$/,r=/<[A-Za-z/!]/,i=RegExp(`\\{\\{(?!(?:${e.SETUP_PLACEHOLDER_NAMESPACES.join(`|`)})\\.[A-Za-z0-9_.]+\\}\\})`),a=[`direct`,`assisted`],o=[`text`,`textarea`,`select`,`cron`,`timezone`,`repo-picker`],s=[`github`,`gitlab`,`bitbucket`],c=[`cron`,`event`],l=[`safeExpressionLiteral`],u=2e3;function d(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}function f(e,t){return typeof e==`string`&&t.includes(e)}function p(e,t){return typeof e==`number`&&Number.isInteger(e)&&e>=t}var m=class{errors=[];fail(e,t){return this.errors.push(`${e}: ${t}`),!1}copy(e,t){return typeof e!=`string`||e.length===0?this.fail(t,`must be a non-empty string`):r.test(e)?this.fail(t,`must not contain markup`):!0}placeholders(e,t){return i.test(e)?this.fail(t,`uses an unknown placeholder namespace`):!0}templateCopy(e,t){return this.copy(e,t)&&this.placeholders(e,t)}templateValue(e,t){return typeof e!=`string`||e.length===0?this.fail(t,`must be a non-empty string`):this.placeholders(e,t)}absent(e,t,n,r){return t in e?this.fail(`${n}.${t}`,r):!0}};function h(e,t){if(!d(t)){e.fail(`requires`,`must be an object`);return}let{integrations:n,features:r}=t;!d(n)||Object.keys(n).length===0?e.fail(`requires.integrations`,`must be a non-empty object`):Object.entries(n).forEach(([t,n])=>{let r=`requires.integrations.${t}`;if(!d(n)){e.fail(r,`must be an object`);return}e.copy(n.message,`${r}.message`),`required`in n&&n.required!==!1&&e.fail(`${r}.required`,`may only be false`);let i=[`message`,`required`];Object.keys(n).filter(e=>!i.includes(e)).forEach(t=>e.fail(`${r}.${t}`,`is not allowed`))}),r!==void 0&&(!Array.isArray(r)||r.length===0?e.fail(`requires.features`,`must be a non-empty array`):r.forEach((t,n)=>{(typeof t!=`string`||t.length===0)&&e.fail(`requires.features[${n}]`,`must be a non-empty string`)}))}function g(e,t,n){if(!d(t)||Object.keys(t).length===0){e.fail(n,`must be a non-empty object`);return}let{minLength:r,maxLength:i,format:a}=t;r!==void 0&&!p(r,0)&&e.fail(`${n}.minLength`,`must be a non-negative integer`),i!==void 0&&!p(i,1)&&e.fail(`${n}.maxLength`,`must be a positive integer`),a!==void 0&&!f(a,l)&&e.fail(`${n}.format`,`is not a supported format`)}function _(e,t,n){if(!d(t)){e.fail(n,`must be an object`);return}let{type:r,label:i,help:a,placeholder:c,required:l,provider:u,options:p}=t;f(r,o)||e.fail(`${n}.type`,`is not a supported field type`),e.copy(i,`${n}.label`),e.copy(a,`${n}.help`),c!==void 0&&e.copy(c,`${n}.placeholder`),t.default!==void 0&&typeof t.default!=`string`&&e.fail(`${n}.default`,`must be a string`),typeof l!=`boolean`&&e.fail(`${n}.required`,`must be a boolean`),u!==void 0&&!f(u,s)&&e.fail(`${n}.provider`,`is not a supported provider`),r===`repo-picker`&&u===void 0&&e.fail(`${n}.provider`,`is required for a repository field`),p!==void 0&&(r===`select`?!Array.isArray(p)||p.length===0?e.fail(`${n}.options`,`must be a non-empty array`):p.forEach((t,r)=>{let i=`${n}.options[${r}]`;if(!d(t)){e.fail(i,`must be an object`);return}(typeof t.value!=`string`||t.value.length===0)&&e.fail(`${i}.value`,`must be a non-empty string`),e.copy(t.label,`${i}.label`)}):e.fail(`${n}.options`,`is only allowed on a select field`)),t.constraints!==void 0&&g(e,t.constraints,`${n}.constraints`)}function v(e,t,r){return!d(t)||Object.keys(t).length===0?(e.fail(r,`must be a non-empty object`),[]):Object.entries(t).map(([t,i])=>(n.test(t)||e.fail(`${r}.${t}`,`is not a valid field name`),_(e,i,`${r}.${t}`),t))}function y(e,t){if(!d(t))return e.fail(`setup.form`,`must be an object`),[];t.note!==void 0&&e.copy(t.note,`setup.form.note`);let n=v(e,t.args,`setup.form.args`),r=[];t.triggers!==void 0&&(!d(t.triggers)||Object.keys(t.triggers).length===0?e.fail(`setup.form.triggers`,`must be a non-empty object`):Object.entries(t.triggers).forEach(([t,i])=>{if(!f(t,c)){e.fail(`setup.form.triggers.${t}`,`is not a trigger kind`);return}r.push(t),n.push(...v(e,i,`setup.form.triggers.${t}`))}));let i=n.filter((e,t)=>n.indexOf(e)!==t);return Array.from(new Set(i)).forEach(t=>e.fail(`setup.form.${t}`,`is declared more than once`)),r}function b(e){return d(e)?[e.args,...Object.values(d(e.triggers)?e.triggers:{})].some(e=>d(e)&&Object.values(e).some(e=>d(e)&&e.type===`repo-picker`)):!1}function x(e,t){e.templateCopy(t,`setup.message`)&&t.length>u&&e.fail(`setup.message`,`must be at most ${u} characters`)}function S(e,t,n){if(!f(t.mode,a)){e.fail(`setup.mode`,`is not a supported mode`);return}if(t.mode===`direct`){e.templateValue(t.prompt,`setup.prompt`),t.message!==void 0&&x(e,t.message),n.length!==1&&e.fail(`setup.form.triggers`,`must declare exactly one trigger kind`),n.includes(`event`)&&!b(t.form)&&e.fail(`setup.form`,`must declare a repository field for an event trigger`),t.filter!==void 0&&(n.includes(`event`)?e.templateValue(t.filter,`setup.filter`):e.fail(`setup.filter`,`is only allowed for an event trigger`));return}x(e,t.message),e.absent(t,`prompt`,`setup`,`is only allowed for direct setup`),e.absent(t,`filter`,`setup`,`is only allowed for direct setup`)}function C(e){return d(e)&&e.setup!==void 0}function w(e){let n=new m;if(!d(e))return{valid:!1,errors:[`manifest: must be an object`]};let{setup:r}=e;return d(r)?r.version===`1.0`?((typeof e.id!=`string`||!t.test(e.id))&&n.fail(`id`,`must be a lowercase slug`),n.copy(e.name,`name`),n.copy(e.description,`description`),e.skill!==void 0&&(typeof e.skill!=`string`||!t.test(e.skill))&&n.fail(`skill`,`must be a lowercase slug`),h(n,e.requires),S(n,r,y(n,r.form)),{valid:n.errors.length===0,errors:n.errors}):{valid:!1,errors:[`setup.version: must be "1.0"`]}:{valid:!1,errors:[`setup: must be an object`]}}exports.hasSetupBlock=C,exports.validateSetupEntry=w;
+require("../_virtual/_rolldown/runtime.cjs");const e=require("./types.cjs");var t=/^[a-z0-9]+(-[a-z0-9]+)*$/,n=/^[a-z][A-Za-z0-9]*$/,r=/<[A-Za-z/!]/,i=/^(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)\.(?:0|[1-9]\d*)(?:-(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*)?(?:\+[0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*)?$/,a=/^[A-Za-z0-9 ._/-]+$/,o=/^[A-Za-z0-9._-]+(\/[A-Za-z0-9._-]+)*$/,s=/^(skills|automations)\/[A-Za-z0-9._-]+(\/[A-Za-z0-9._-]+)*$/,c=RegExp(`\\{\\{(?!(?:${e.SETUP_PLACEHOLDER_NAMESPACES.join(`|`)})\\.[A-Za-z0-9_.]+\\}\\})`),l=[`direct`,`assisted`],u=[`text`,`textarea`,`select`,`cron`,`timezone`,`repo-picker`],d=[`github`,`gitlab`,`bitbucket`],f=[`cron`,`event`],p=[`safeExpressionLiteral`],m=2e3;function h(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}function g(e,t){return typeof e==`string`&&t.includes(e)}function _(e,t){return typeof e==`number`&&Number.isInteger(e)&&e>=t}var v=class{errors=[];fail(e,t){return this.errors.push(`${e}: ${t}`),!1}copy(e,t){return typeof e!=`string`||e.length===0?this.fail(t,`must be a non-empty string`):r.test(e)?this.fail(t,`must not contain markup`):!0}placeholders(e,t){return c.test(e)?this.fail(t,`uses an unknown placeholder namespace`):!0}templateCopy(e,t){return this.copy(e,t)&&this.placeholders(e,t)}templateValue(e,t){return typeof e!=`string`||e.length===0?this.fail(t,`must be a non-empty string`):this.placeholders(e,t)}absent(e,t,n,r){return t in e?this.fail(`${n}.${t}`,r):!0}};function y(e,t){return typeof e==`string`&&t.test(e)&&!e.split(`/`).some(e=>e===`.`||e===`..`)}function b(e){if(typeof e!=`string`||!a.test(e))return!1;let t=e.split(` `).filter(e=>e.length>0);return t.length>0&&t.every(e=>!e.startsWith(`/`)&&!e.split(`/`).some(e=>e===`..`))}function x(e,t){if(!h(t)){e.fail(`requires`,`must be an object`);return}let{integrations:n,features:r}=t;h(n)?Object.entries(n).forEach(([t,n])=>{let r=`requires.integrations.${t}`;if(!h(n)){e.fail(r,`must be an object`);return}e.copy(n.message,`${r}.message`),`required`in n&&n.required!==!1&&e.fail(`${r}.required`,`may only be false`);let i=[`message`,`required`];Object.keys(n).filter(e=>!i.includes(e)).forEach(t=>e.fail(`${r}.${t}`,`is not allowed`))}):e.fail(`requires.integrations`,`must be an object`),r!==void 0&&(!Array.isArray(r)||r.length===0?e.fail(`requires.features`,`must be a non-empty array`):r.forEach((t,n)=>{(typeof t!=`string`||t.length===0)&&e.fail(`requires.features[${n}]`,`must be a non-empty string`)}))}function S(e,t,n){if(!h(t)||Object.keys(t).length===0){e.fail(n,`must be a non-empty object`);return}let{minLength:r,maxLength:i,format:a}=t;r!==void 0&&!_(r,0)&&e.fail(`${n}.minLength`,`must be a non-negative integer`),i!==void 0&&!_(i,1)&&e.fail(`${n}.maxLength`,`must be a positive integer`),a!==void 0&&!g(a,p)&&e.fail(`${n}.format`,`is not a supported format`)}function C(e,t,n){if(!h(t)){e.fail(n,`must be an object`);return}let{type:r,label:i,help:a,placeholder:o,required:s,provider:c,options:l}=t;g(r,u)||e.fail(`${n}.type`,`is not a supported field type`),e.copy(i,`${n}.label`),e.copy(a,`${n}.help`),o!==void 0&&e.copy(o,`${n}.placeholder`),t.default!==void 0&&typeof t.default!=`string`&&e.fail(`${n}.default`,`must be a string`),typeof s!=`boolean`&&e.fail(`${n}.required`,`must be a boolean`),c!==void 0&&!g(c,d)&&e.fail(`${n}.provider`,`is not a supported provider`),r===`repo-picker`&&c===void 0&&e.fail(`${n}.provider`,`is required for a repository field`),t.multiple!==void 0&&(t.multiple!==!0||r!==`repo-picker`)&&e.fail(`${n}.multiple`,`may only be true, and only on a repository field`),l!==void 0&&(r===`select`?!Array.isArray(l)||l.length===0?e.fail(`${n}.options`,`must be a non-empty array`):l.forEach((t,r)=>{let i=`${n}.options[${r}]`;if(!h(t)){e.fail(i,`must be an object`);return}(typeof t.value!=`string`||t.value.length===0)&&e.fail(`${i}.value`,`must be a non-empty string`),e.copy(t.label,`${i}.label`)}):e.fail(`${n}.options`,`is only allowed on a select field`)),t.constraints!==void 0&&S(e,t.constraints,`${n}.constraints`)}function w(e,t,r){return!h(t)||Object.keys(t).length===0?(e.fail(r,`must be a non-empty object`),[]):Object.entries(t).map(([t,i])=>(n.test(t)||e.fail(`${r}.${t}`,`is not a valid field name`),C(e,i,`${r}.${t}`),t))}function T(e,t){if(!h(t))return e.fail(`setup.form`,`must be an object`),[];t.note!==void 0&&e.copy(t.note,`setup.form.note`);let n=w(e,t.args,`setup.form.args`),r=[];t.triggers!==void 0&&(!h(t.triggers)||Object.keys(t.triggers).length===0?e.fail(`setup.form.triggers`,`must be a non-empty object`):Object.entries(t.triggers).forEach(([t,i])=>{if(!g(t,f)){e.fail(`setup.form.triggers.${t}`,`is not a trigger kind`);return}r.push(t),n.push(...w(e,i,`setup.form.triggers.${t}`))}));let i=n.filter((e,t)=>n.indexOf(e)!==t);return Array.from(new Set(i)).forEach(t=>e.fail(`setup.form.${t}`,`is declared more than once`)),r}function E(e){return h(e)?[e.args,...Object.values(h(e.triggers)?e.triggers:{})].some(e=>h(e)&&Object.values(e).some(e=>h(e)&&e.type===`repo-picker`)):!1}function D(e,t){e.templateCopy(t,`setup.message`)&&t.length>m&&e.fail(`setup.message`,`must be at most ${m} characters`)}function O(e,t){if(!h(t)){e.fail(`setup.bundle`,`must be an object`);return}(typeof t.version!=`string`||!i.test(t.version))&&e.fail(`setup.bundle.version`,`must be a semantic version`),b(t.entrypoint)||e.fail(`setup.bundle.entrypoint`,`must be a plain command that stays inside the archive`),t.setupScript!==void 0&&!y(t.setupScript,o)&&e.fail(`setup.bundle.setupScript`,`must be a relative path`),t.timeout!==void 0&&!_(t.timeout,1)&&e.fail(`setup.bundle.timeout`,`must be a positive integer`),!h(t.files)||Object.keys(t.files).length===0?e.fail(`setup.bundle.files`,`must be a non-empty object`):(Object.entries(t.files).forEach(([t,n])=>{y(t,o)||e.fail(`setup.bundle.files.${t}`,`is not a packed path`),t===`config.json`&&e.fail(`setup.bundle.files.${t}`,`is the name the rendered config is packed under`),y(n,s)||e.fail(`setup.bundle.files.${t}`,`must name a file under skills/ or automations/`)}),typeof t.setupScript==`string`&&!(t.setupScript in t.files)&&e.fail(`setup.bundle.setupScript`,`must name a packed file`)),!h(t.config)||Object.keys(t.config).length===0?e.fail(`setup.bundle.config`,`must be a non-empty object`):k(e,t.config,`setup.bundle.config`)}function k(e,t,n){if(typeof t==`string`){e.templateValue(t,n);return}if(Array.isArray(t)){t.forEach((t,r)=>k(e,t,`${n}[${r}]`));return}if(h(t)){Object.entries(t).forEach(([t,r])=>k(e,r,`${n}.${t}`));return}t!==null&&typeof t!=`number`&&typeof t!=`boolean`&&e.fail(n,`must be a string, number, boolean, null, array or object`)}function A(e,t,n){if(!g(t.mode,l)){e.fail(`setup.mode`,`is not a supported mode`);return}if(t.mode===`direct`){let r=t.prompt!==void 0,i=t.bundle!==void 0;r===i?e.fail(`setup`,`must declare exactly one of prompt or bundle for direct setup`):i?O(e,t.bundle):e.templateValue(t.prompt,`setup.prompt`),t.message!==void 0&&D(e,t.message),n.length!==1&&e.fail(`setup.form.triggers`,`must declare exactly one trigger kind`),n.includes(`event`)&&!E(t.form)&&e.fail(`setup.form`,`must declare a repository field for an event trigger`),t.filter!==void 0&&(n.includes(`event`)?e.templateValue(t.filter,`setup.filter`):e.fail(`setup.filter`,`is only allowed for an event trigger`));return}D(e,t.message),e.absent(t,`prompt`,`setup`,`is only allowed for direct setup`),e.absent(t,`bundle`,`setup`,`is only allowed for direct setup`),e.absent(t,`filter`,`setup`,`is only allowed for direct setup`)}function j(e){return h(e)&&e.setup!==void 0}function M(e){let n=new v;if(!h(e))return{valid:!1,errors:[`manifest: must be an object`]};let{setup:r}=e;return h(r)?r.version===`1.0`?((typeof e.id!=`string`||!t.test(e.id))&&n.fail(`id`,`must be a lowercase slug`),n.copy(e.name,`name`),n.copy(e.description,`description`),e.version!==void 0&&(typeof e.version!=`string`||!i.test(e.version))&&n.fail(`version`,`must be a semantic version`),e.skill!==void 0&&(typeof e.skill!=`string`||!t.test(e.skill))&&n.fail(`skill`,`must be a lowercase slug`),x(n,e.requires),A(n,r,T(n,r.form)),{valid:n.errors.length===0,errors:n.errors}):{valid:!1,errors:[`setup.version: must be "1.0"`]}:{valid:!1,errors:[`setup: must be an object`]}}exports.hasSetupBlock=j,exports.validateSetupEntry=M;
 //# sourceMappingURL=manifest-validation.cjs.map

package/dist/manifests/manifest-validation.cjs.map

@@ -1 +1 @@
-{"version":3,"file":"manifest-validation.cjs","names":[],"sources":["../../src/manifests/manifest-validation.ts"],"sourcesContent":["/**\n * Admission policy for extension-authored catalog manifests.\n *\n * A manifest is data authored in a different repository that instructs this host\n * to render copy and compose a request. The host therefore decides what a\n * manifest is *permitted* to do rather than trusting the file — validation here\n * is a trust boundary, not a convenience check, and it deliberately does not\n * defer to a schema shipped alongside the manifests it would be validating.\n *\n * Beyond mirroring the published schema, this adds the invariants the host's own\n * derivation depends on: a single trigger kind to read, a repository field for\n * an event trigger's source, and field names unique across the form. Without\n * them the derived request body would be silently wrong rather than rejected.\n *\n * A manifest that fails any check is rejected outright. It never renders a\n * partial UI, because everything downstream treats its content as instructions.\n */\n\nimport { SETUP_PLACEHOLDER_NAMESPACES, SETUP_VERSION } from \"./types\";\n\nconst ENTRY_ID_PATTERN = /^[a-z0-9]+(-[a-z0-9]+)*$/;\nconst FIELD_NAME_PATTERN = /^[a-z][A-Za-z0-9]*$/;\n/** Copy must never be able to inject markup into the host. */\nconst MARKUP_PATTERN = /<[A-Za-z/!]/;\n/** Every `{{` must open a known namespace and close immediately. */\nconst UNKNOWN_PLACEHOLDER_PATTERN = new RegExp(\n  `\\\\{\\\\{(?!(?:${SETUP_PLACEHOLDER_NAMESPACES.join(\"|\")})\\\\.[A-Za-z0-9_.]+\\\\}\\\\})`,\n);\n\nconst SETUP_MODES = [\"direct\", \"assisted\"] as const;\nconst FIELD_TYPES = [\n  \"text\",\n  \"textarea\",\n  \"select\",\n  \"cron\",\n  \"timezone\",\n  \"repo-picker\",\n] as const;\nconst GIT_PROVIDERS = [\"github\", \"gitlab\", \"bitbucket\"] as const;\nconst TRIGGER_KINDS = [\"cron\", \"event\"] as const;\nconst CONSTRAINT_FORMATS = [\"safeExpressionLiteral\"] as const;\n\n/** Setup context only, so this can never become a channel for runtime instructions. */\nconst MAX_MESSAGE_LENGTH = 2000;\n\nexport interface SetupValidationResult {\n  valid: boolean;\n  errors: string[];\n}\n\ntype Rec = Record<string, unknown>;\n\nfunction isRecord(value: unknown): value is Rec {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction isOneOf<T extends readonly string[]>(\n  value: unknown,\n  allowed: T,\n): value is T[number] {\n  return (\n    typeof value === \"string\" && (allowed as readonly string[]).includes(value)\n  );\n}\n\nfunction isInteger(value: unknown, minimum: number): boolean {\n  return (\n    typeof value === \"number\" && Number.isInteger(value) && value >= minimum\n  );\n}\n\nclass SetupChecker {\n  readonly errors: string[] = [];\n\n  fail(path: string, reason: string): false {\n    this.errors.push(`${path}: ${reason}`);\n    return false;\n  }\n\n  /** Literal user-visible copy. Carries no markup. */\n  copy(value: unknown, path: string): boolean {\n    if (typeof value !== \"string\" || value.length === 0) {\n      return this.fail(path, \"must be a non-empty string\");\n    }\n    if (MARKUP_PATTERN.test(value)) {\n      return this.fail(path, \"must not contain markup\");\n    }\n    return true;\n  }\n\n  placeholders(value: string, path: string): boolean {\n    if (UNKNOWN_PLACEHOLDER_PATTERN.test(value)) {\n      return this.fail(path, \"uses an unknown placeholder namespace\");\n    }\n    return true;\n  }\n\n  /** Copy that may embed `{{namespace.key}}` placeholders. */\n  templateCopy(value: unknown, path: string): boolean {\n    return this.copy(value, path) && this.placeholders(value as string, path);\n  }\n\n  /**\n   * A request-body string that may embed placeholders. Never rendered, so\n   * expression syntax such as a JMESPath filter is allowed through.\n   */\n  templateValue(value: unknown, path: string): boolean {\n    if (typeof value !== \"string\" || value.length === 0) {\n      return this.fail(path, \"must be a non-empty string\");\n    }\n    return this.placeholders(value, path);\n  }\n\n  absent(container: Rec, key: string, path: string, reason: string): boolean {\n    if (key in container) return this.fail(`${path}.${key}`, reason);\n    return true;\n  }\n}\n\nfunction checkRequires(check: SetupChecker, requires: unknown): void {\n  if (!isRecord(requires)) {\n    check.fail(\"requires\", \"must be an object\");\n    return;\n  }\n\n  const { integrations, features } = requires;\n  if (!isRecord(integrations) || Object.keys(integrations).length === 0) {\n    check.fail(\"requires.integrations\", \"must be a non-empty object\");\n  } else {\n    Object.entries(integrations).forEach(([id, requirement]) => {\n      const path = `requires.integrations.${id}`;\n      if (!isRecord(requirement)) {\n        check.fail(path, \"must be an object\");\n        return;\n      }\n      check.copy(requirement.message, `${path}.message`);\n      if (\"required\" in requirement && requirement.required !== false) {\n        check.fail(`${path}.required`, \"may only be false\");\n      }\n      const allowed = [\"message\", \"required\"];\n      Object.keys(requirement)\n        .filter((key) => !allowed.includes(key))\n        .forEach((key) => check.fail(`${path}.${key}`, \"is not allowed\"));\n    });\n  }\n\n  if (features !== undefined) {\n    if (!Array.isArray(features) || features.length === 0) {\n      check.fail(\"requires.features\", \"must be a non-empty array\");\n    } else {\n      features.forEach((feature, index) => {\n        if (typeof feature !== \"string\" || feature.length === 0) {\n          check.fail(\n            `requires.features[${index}]`,\n            \"must be a non-empty string\",\n          );\n        }\n      });\n    }\n  }\n}\n\nfunction checkConstraints(\n  check: SetupChecker,\n  constraints: unknown,\n  path: string,\n): void {\n  if (!isRecord(constraints) || Object.keys(constraints).length === 0) {\n    check.fail(path, \"must be a non-empty object\");\n    return;\n  }\n\n  const { minLength, maxLength, format } = constraints;\n  if (minLength !== undefined && !isInteger(minLength, 0)) {\n    check.fail(`${path}.minLength`, \"must be a non-negative integer\");\n  }\n  if (maxLength !== undefined && !isInteger(maxLength, 1)) {\n    check.fail(`${path}.maxLength`, \"must be a positive integer\");\n  }\n  if (format !== undefined && !isOneOf(format, CONSTRAINT_FORMATS)) {\n    check.fail(`${path}.format`, \"is not a supported format\");\n  }\n}\n\nfunction checkField(check: SetupChecker, field: unknown, path: string): void {\n  if (!isRecord(field)) {\n    check.fail(path, \"must be an object\");\n    return;\n  }\n\n  const { type, label, help, placeholder, required, provider, options } = field;\n\n  if (!isOneOf(type, FIELD_TYPES)) {\n    check.fail(`${path}.type`, \"is not a supported field type\");\n  }\n  check.copy(label, `${path}.label`);\n  check.copy(help, `${path}.help`);\n  if (placeholder !== undefined) check.copy(placeholder, `${path}.placeholder`);\n  if (field.default !== undefined && typeof field.default !== \"string\") {\n    check.fail(`${path}.default`, \"must be a string\");\n  }\n  if (typeof required !== \"boolean\") {\n    check.fail(`${path}.required`, \"must be a boolean\");\n  }\n  if (provider !== undefined && !isOneOf(provider, GIT_PROVIDERS)) {\n    check.fail(`${path}.provider`, \"is not a supported provider\");\n  }\n  if (type === \"repo-picker\" && provider === undefined) {\n    check.fail(`${path}.provider`, \"is required for a repository field\");\n  }\n\n  if (options !== undefined) {\n    if (type !== \"select\") {\n      check.fail(`${path}.options`, \"is only allowed on a select field\");\n    } else if (!Array.isArray(options) || options.length === 0) {\n      check.fail(`${path}.options`, \"must be a non-empty array\");\n    } else {\n      options.forEach((option, index) => {\n        const optionPath = `${path}.options[${index}]`;\n        if (!isRecord(option)) {\n          check.fail(optionPath, \"must be an object\");\n          return;\n        }\n        if (typeof option.value !== \"string\" || option.value.length === 0) {\n          check.fail(`${optionPath}.value`, \"must be a non-empty string\");\n        }\n        check.copy(option.label, `${optionPath}.label`);\n      });\n    }\n  }\n\n  if (field.constraints !== undefined) {\n    checkConstraints(check, field.constraints, `${path}.constraints`);\n  }\n}\n\n/** Returns the declared field names, so the caller can check them for collisions. */\nfunction checkFields(\n  check: SetupChecker,\n  fields: unknown,\n  path: string,\n): string[] {\n  if (!isRecord(fields) || Object.keys(fields).length === 0) {\n    check.fail(path, \"must be a non-empty object\");\n    return [];\n  }\n\n  return Object.entries(fields).map(([name, field]) => {\n    if (!FIELD_NAME_PATTERN.test(name)) {\n      check.fail(`${path}.${name}`, \"is not a valid field name\");\n    }\n    checkField(check, field, `${path}.${name}`);\n    return name;\n  });\n}\n\n/** Returns the trigger kinds declared, in order. */\nfunction checkForm(check: SetupChecker, form: unknown): string[] {\n  if (!isRecord(form)) {\n    check.fail(\"setup.form\", \"must be an object\");\n    return [];\n  }\n\n  if (form.note !== undefined) check.copy(form.note, \"setup.form.note\");\n\n  const names = checkFields(check, form.args, \"setup.form.args\");\n  const kinds: string[] = [];\n\n  if (form.triggers !== undefined) {\n    if (!isRecord(form.triggers) || Object.keys(form.triggers).length === 0) {\n      check.fail(\"setup.form.triggers\", \"must be a non-empty object\");\n    } else {\n      Object.entries(form.triggers).forEach(([kind, fields]) => {\n        if (!isOneOf(kind, TRIGGER_KINDS)) {\n          check.fail(`setup.form.triggers.${kind}`, \"is not a trigger kind\");\n          return;\n        }\n        kinds.push(kind);\n        names.push(\n          ...checkFields(check, fields, `setup.form.triggers.${kind}`),\n        );\n      });\n    }\n  }\n\n  // The host merges both halves into one value map, so a repeated name would\n  // silently shadow a field and misaddress every error reported against it.\n  const duplicates = names.filter(\n    (name, index) => names.indexOf(name) !== index,\n  );\n  Array.from(new Set(duplicates)).forEach((name) =>\n    check.fail(`setup.form.${name}`, \"is declared more than once\"),\n  );\n\n  return kinds;\n}\n\nfunction hasRepoPicker(form: unknown): boolean {\n  if (!isRecord(form)) return false;\n  const groups = [\n    form.args,\n    ...Object.values(isRecord(form.triggers) ? form.triggers : {}),\n  ];\n  return groups.some(\n    (group) =>\n      isRecord(group) &&\n      Object.values(group).some(\n        (field) => isRecord(field) && field.type === \"repo-picker\",\n      ),\n  );\n}\n\nfunction checkMessage(check: SetupChecker, message: unknown): void {\n  if (check.templateCopy(message, \"setup.message\")) {\n    if ((message as string).length > MAX_MESSAGE_LENGTH) {\n      check.fail(\n        \"setup.message\",\n        `must be at most ${MAX_MESSAGE_LENGTH} characters`,\n      );\n    }\n  }\n}\n\nfunction checkMode(check: SetupChecker, setup: Rec, kinds: string[]): void {\n  if (!isOneOf(setup.mode, SETUP_MODES)) {\n    check.fail(\"setup.mode\", \"is not a supported mode\");\n    return;\n  }\n\n  if (setup.mode === \"direct\") {\n    check.templateValue(setup.prompt, \"setup.prompt\");\n    // A direct entry may carry a fallback-conversation seed for deployments\n    // that cannot run the direct path, held to the same rules as an assisted\n    // message.\n    if (setup.message !== undefined) checkMessage(check, setup.message);\n\n    // The derivation reads a single trigger kind, and an event trigger takes\n    // its source from the repository field's provider.\n    if (kinds.length !== 1) {\n      check.fail(\n        \"setup.form.triggers\",\n        \"must declare exactly one trigger kind\",\n      );\n    }\n    if (kinds.includes(\"event\") && !hasRepoPicker(setup.form)) {\n      check.fail(\n        \"setup.form\",\n        \"must declare a repository field for an event trigger\",\n      );\n    }\n    if (setup.filter !== undefined) {\n      if (!kinds.includes(\"event\")) {\n        check.fail(\"setup.filter\", \"is only allowed for an event trigger\");\n      } else {\n        check.templateValue(setup.filter, \"setup.filter\");\n      }\n    }\n    return;\n  }\n\n  checkMessage(check, setup.message);\n  check.absent(setup, \"prompt\", \"setup\", \"is only allowed for direct setup\");\n  check.absent(setup, \"filter\", \"setup\", \"is only allowed for direct setup\");\n}\n\n/** Whether a catalog entry ships a setup experience at all. It is optional. */\nexport function hasSetupBlock(candidate: unknown): boolean {\n  return isRecord(candidate) && candidate.setup !== undefined;\n}\n\n/**\n * Decide whether this host will act on a catalog manifest.\n *\n * The version is checked first and fails closed: a format this host does not\n * recognise is refused rather than interpreted with today's rules.\n */\nexport function validateSetupEntry(candidate: unknown): SetupValidationResult {\n  const check = new SetupChecker();\n\n  if (!isRecord(candidate)) {\n    return { valid: false, errors: [\"manifest: must be an object\"] };\n  }\n\n  const { setup } = candidate;\n  if (!isRecord(setup)) {\n    return { valid: false, errors: [\"setup: must be an object\"] };\n  }\n  if (setup.version !== SETUP_VERSION) {\n    return {\n      valid: false,\n      errors: [`setup.version: must be \"${SETUP_VERSION}\"`],\n    };\n  }\n\n  if (\n    typeof candidate.id !== \"string\" ||\n    !ENTRY_ID_PATTERN.test(candidate.id)\n  ) {\n    check.fail(\"id\", \"must be a lowercase slug\");\n  }\n  check.copy(candidate.name, \"name\");\n  check.copy(candidate.description, \"description\");\n  if (\n    candidate.skill !== undefined &&\n    (typeof candidate.skill !== \"string\" ||\n      !ENTRY_ID_PATTERN.test(candidate.skill))\n  ) {\n    check.fail(\"skill\", \"must be a lowercase slug\");\n  }\n\n  checkRequires(check, candidate.requires);\n  const kinds = checkForm(check, setup.form);\n  checkMode(check, setup, kinds);\n\n  return { valid: check.errors.length === 0, errors: check.errors };\n}\n"],"mappings":"4EAoBA,IAAM,EAAmB,2BACnB,EAAqB,sBAErB,EAAiB,cAEjB,EAAkC,OACtC,eAAe,EAAA,6BAA6B,KAAK,GAAG,EAAE,0BACxD,EAEM,EAAc,CAAC,SAAU,UAAU,EACnC,EAAc,CAClB,OACA,WACA,SACA,OACA,WACA,aACF,EACM,EAAgB,CAAC,SAAU,SAAU,WAAW,EAChD,EAAgB,CAAC,OAAQ,OAAO,EAChC,EAAqB,CAAC,uBAAuB,EAG7C,EAAqB,IAS3B,SAAS,EAAS,EAA8B,CAC9C,OAAO,OAAO,GAAU,YAAY,GAAkB,CAAC,MAAM,QAAQ,CAAK,CAC5E,CAEA,SAAS,EACP,EACA,EACoB,CACpB,OACE,OAAO,GAAU,UAAa,EAA8B,SAAS,CAAK,CAE9E,CAEA,SAAS,EAAU,EAAgB,EAA0B,CAC3D,OACE,OAAO,GAAU,UAAY,OAAO,UAAU,CAAK,GAAK,GAAS,CAErE,CAEA,IAAM,EAAN,KAAmB,CACjB,OAA4B,CAAC,EAE7B,KAAK,EAAc,EAAuB,CAExC,OADA,KAAK,OAAO,KAAK,GAAG,EAAK,IAAI,GAAQ,EAC9B,EACT,CAGA,KAAK,EAAgB,EAAuB,CAO1C,OANI,OAAO,GAAU,UAAY,EAAM,SAAW,EACzC,KAAK,KAAK,EAAM,4BAA4B,EAEjD,EAAe,KAAK,CAAK,EACpB,KAAK,KAAK,EAAM,yBAAyB,EAE3C,EACT,CAEA,aAAa,EAAe,EAAuB,CAIjD,OAHI,EAA4B,KAAK,CAAK,EACjC,KAAK,KAAK,EAAM,uCAAuC,EAEzD,EACT,CAGA,aAAa,EAAgB,EAAuB,CAClD,OAAO,KAAK,KAAK,EAAO,CAAI,GAAK,KAAK,aAAa,EAAiB,CAAI,CAC1E,CAMA,cAAc,EAAgB,EAAuB,CAInD,OAHI,OAAO,GAAU,UAAY,EAAM,SAAW,EACzC,KAAK,KAAK,EAAM,4BAA4B,EAE9C,KAAK,aAAa,EAAO,CAAI,CACtC,CAEA,OAAO,EAAgB,EAAa,EAAc,EAAyB,CAEzE,OADI,KAAO,EAAkB,KAAK,KAAK,GAAG,EAAK,GAAG,IAAO,CAAM,EACxD,EACT,CACF,EAEA,SAAS,EAAc,EAAqB,EAAyB,CACnE,GAAI,CAAC,EAAS,CAAQ,EAAG,CACvB,EAAM,KAAK,WAAY,mBAAmB,EAC1C,MACF,CAEA,GAAM,CAAE,eAAc,YAAa,EAC/B,CAAC,EAAS,CAAY,GAAK,OAAO,KAAK,CAAY,EAAE,SAAW,EAClE,EAAM,KAAK,wBAAyB,4BAA4B,EAEhE,OAAO,QAAQ,CAAY,EAAE,SAAS,CAAC,EAAI,KAAiB,CAC1D,IAAM,EAAO,yBAAyB,IACtC,GAAI,CAAC,EAAS,CAAW,EAAG,CAC1B,EAAM,KAAK,EAAM,mBAAmB,EACpC,MACF,CACA,EAAM,KAAK,EAAY,QAAS,GAAG,EAAK,SAAS,EAC7C,aAAc,GAAe,EAAY,WAAa,IACxD,EAAM,KAAK,GAAG,EAAK,WAAY,mBAAmB,EAEpD,IAAM,EAAU,CAAC,UAAW,UAAU,EACtC,OAAO,KAAK,CAAW,EACpB,OAAQ,GAAQ,CAAC,EAAQ,SAAS,CAAG,CAAC,EACtC,QAAS,GAAQ,EAAM,KAAK,GAAG,EAAK,GAAG,IAAO,gBAAgB,CAAC,CACpE,CAAC,EAGC,IAAa,IAAA,KACX,CAAC,MAAM,QAAQ,CAAQ,GAAK,EAAS,SAAW,EAClD,EAAM,KAAK,oBAAqB,2BAA2B,EAE3D,EAAS,SAAS,EAAS,IAAU,EAC/B,OAAO,GAAY,UAAY,EAAQ,SAAW,IACpD,EAAM,KACJ,qBAAqB,EAAM,GAC3B,4BACF,CAEJ,CAAC,EAGP,CAEA,SAAS,EACP,EACA,EACA,EACM,CACN,GAAI,CAAC,EAAS,CAAW,GAAK,OAAO,KAAK,CAAW,EAAE,SAAW,EAAG,CACnE,EAAM,KAAK,EAAM,4BAA4B,EAC7C,MACF,CAEA,GAAM,CAAE,YAAW,YAAW,UAAW,EACrC,IAAc,IAAA,IAAa,CAAC,EAAU,EAAW,CAAC,GACpD,EAAM,KAAK,GAAG,EAAK,YAAa,gCAAgC,EAE9D,IAAc,IAAA,IAAa,CAAC,EAAU,EAAW,CAAC,GACpD,EAAM,KAAK,GAAG,EAAK,YAAa,4BAA4B,EAE1D,IAAW,IAAA,IAAa,CAAC,EAAQ,EAAQ,CAAkB,GAC7D,EAAM,KAAK,GAAG,EAAK,SAAU,2BAA2B,CAE5D,CAEA,SAAS,EAAW,EAAqB,EAAgB,EAAoB,CAC3E,GAAI,CAAC,EAAS,CAAK,EAAG,CACpB,EAAM,KAAK,EAAM,mBAAmB,EACpC,MACF,CAEA,GAAM,CAAE,OAAM,QAAO,OAAM,cAAa,WAAU,WAAU,WAAY,EAEnE,EAAQ,EAAM,CAAW,GAC5B,EAAM,KAAK,GAAG,EAAK,OAAQ,+BAA+B,EAE5D,EAAM,KAAK,EAAO,GAAG,EAAK,OAAO,EACjC,EAAM,KAAK,EAAM,GAAG,EAAK,MAAM,EAC3B,IAAgB,IAAA,IAAW,EAAM,KAAK,EAAa,GAAG,EAAK,aAAa,EACxE,EAAM,UAAY,IAAA,IAAa,OAAO,EAAM,SAAY,UAC1D,EAAM,KAAK,GAAG,EAAK,UAAW,kBAAkB,EAE9C,OAAO,GAAa,WACtB,EAAM,KAAK,GAAG,EAAK,WAAY,mBAAmB,EAEhD,IAAa,IAAA,IAAa,CAAC,EAAQ,EAAU,CAAa,GAC5D,EAAM,KAAK,GAAG,EAAK,WAAY,6BAA6B,EAE1D,IAAS,eAAiB,IAAa,IAAA,IACzC,EAAM,KAAK,GAAG,EAAK,WAAY,oCAAoC,EAGjE,IAAY,IAAA,KACV,IAAS,SAEF,CAAC,MAAM,QAAQ,CAAO,GAAK,EAAQ,SAAW,EACvD,EAAM,KAAK,GAAG,EAAK,UAAW,2BAA2B,EAEzD,EAAQ,SAAS,EAAQ,IAAU,CACjC,IAAM,EAAa,GAAG,EAAK,WAAW,EAAM,GAC5C,GAAI,CAAC,EAAS,CAAM,EAAG,CACrB,EAAM,KAAK,EAAY,mBAAmB,EAC1C,MACF,EACI,OAAO,EAAO,OAAU,UAAY,EAAO,MAAM,SAAW,IAC9D,EAAM,KAAK,GAAG,EAAW,QAAS,4BAA4B,EAEhE,EAAM,KAAK,EAAO,MAAO,GAAG,EAAW,OAAO,CAChD,CAAC,EAdD,EAAM,KAAK,GAAG,EAAK,UAAW,mCAAmC,GAkBjE,EAAM,cAAgB,IAAA,IACxB,EAAiB,EAAO,EAAM,YAAa,GAAG,EAAK,aAAa,CAEpE,CAGA,SAAS,EACP,EACA,EACA,EACU,CAMV,MALI,CAAC,EAAS,CAAM,GAAK,OAAO,KAAK,CAAM,EAAE,SAAW,GACtD,EAAM,KAAK,EAAM,4BAA4B,EACtC,CAAC,GAGH,OAAO,QAAQ,CAAM,EAAE,KAAK,CAAC,EAAM,MACnC,EAAmB,KAAK,CAAI,GAC/B,EAAM,KAAK,GAAG,EAAK,GAAG,IAAQ,2BAA2B,EAE3D,EAAW,EAAO,EAAO,GAAG,EAAK,GAAG,GAAM,EACnC,EACR,CACH,CAGA,SAAS,EAAU,EAAqB,EAAyB,CAC/D,GAAI,CAAC,EAAS,CAAI,EAEhB,OADA,EAAM,KAAK,aAAc,mBAAmB,EACrC,CAAC,EAGN,EAAK,OAAS,IAAA,IAAW,EAAM,KAAK,EAAK,KAAM,iBAAiB,EAEpE,IAAM,EAAQ,EAAY,EAAO,EAAK,KAAM,iBAAiB,EACvD,EAAkB,CAAC,EAErB,EAAK,WAAa,IAAA,KAChB,CAAC,EAAS,EAAK,QAAQ,GAAK,OAAO,KAAK,EAAK,QAAQ,EAAE,SAAW,EACpE,EAAM,KAAK,sBAAuB,4BAA4B,EAE9D,OAAO,QAAQ,EAAK,QAAQ,EAAE,SAAS,CAAC,EAAM,KAAY,CACxD,GAAI,CAAC,EAAQ,EAAM,CAAa,EAAG,CACjC,EAAM,KAAK,uBAAuB,IAAQ,uBAAuB,EACjE,MACF,CACA,EAAM,KAAK,CAAI,EACf,EAAM,KACJ,GAAG,EAAY,EAAO,EAAQ,uBAAuB,GAAM,CAC7D,CACF,CAAC,GAML,IAAM,EAAa,EAAM,QACtB,EAAM,IAAU,EAAM,QAAQ,CAAI,IAAM,CAC3C,EAKA,OAJA,MAAM,KAAK,IAAI,IAAI,CAAU,CAAC,EAAE,QAAS,GACvC,EAAM,KAAK,cAAc,IAAQ,4BAA4B,CAC/D,EAEO,CACT,CAEA,SAAS,EAAc,EAAwB,CAM7C,OALK,EAAS,CAAI,EAKX,CAHL,EAAK,KACL,GAAG,OAAO,OAAO,EAAS,EAAK,QAAQ,EAAI,EAAK,SAAW,CAAC,CAAC,CAExD,EAAO,KACX,GACC,EAAS,CAAK,GACd,OAAO,OAAO,CAAK,EAAE,KAClB,GAAU,EAAS,CAAK,GAAK,EAAM,OAAS,aAC/C,CACJ,EAX4B,EAY9B,CAEA,SAAS,EAAa,EAAqB,EAAwB,CAC7D,EAAM,aAAa,EAAS,eAAe,GACxC,EAAmB,OAAS,GAC/B,EAAM,KACJ,gBACA,mBAAmB,EAAmB,YACxC,CAGN,CAEA,SAAS,EAAU,EAAqB,EAAY,EAAuB,CACzE,GAAI,CAAC,EAAQ,EAAM,KAAM,CAAW,EAAG,CACrC,EAAM,KAAK,aAAc,yBAAyB,EAClD,MACF,CAEA,GAAI,EAAM,OAAS,SAAU,CAC3B,EAAM,cAAc,EAAM,OAAQ,cAAc,EAI5C,EAAM,UAAY,IAAA,IAAW,EAAa,EAAO,EAAM,OAAO,EAI9D,EAAM,SAAW,GACnB,EAAM,KACJ,sBACA,uCACF,EAEE,EAAM,SAAS,OAAO,GAAK,CAAC,EAAc,EAAM,IAAI,GACtD,EAAM,KACJ,aACA,sDACF,EAEE,EAAM,SAAW,IAAA,KACd,EAAM,SAAS,OAAO,EAGzB,EAAM,cAAc,EAAM,OAAQ,cAAc,EAFhD,EAAM,KAAK,eAAgB,sCAAsC,GAKrE,MACF,CAEA,EAAa,EAAO,EAAM,OAAO,EACjC,EAAM,OAAO,EAAO,SAAU,QAAS,kCAAkC,EACzE,EAAM,OAAO,EAAO,SAAU,QAAS,kCAAkC,CAC3E,CAGA,SAAgB,EAAc,EAA6B,CACzD,OAAO,EAAS,CAAS,GAAK,EAAU,QAAU,IAAA,EACpD,CAQA,SAAgB,EAAmB,EAA2C,CAC5E,IAAM,EAAQ,IAAI,EAElB,GAAI,CAAC,EAAS,CAAS,EACrB,MAAO,CAAE,MAAO,GAAO,OAAQ,CAAC,6BAA6B,CAAE,EAGjE,GAAM,CAAE,SAAU,EA+BlB,OA9BK,EAAS,CAAK,EAGf,EAAM,UAAA,QAQR,OAAO,EAAU,IAAO,UACxB,CAAC,EAAiB,KAAK,EAAU,EAAE,IAEnC,EAAM,KAAK,KAAM,0BAA0B,EAE7C,EAAM,KAAK,EAAU,KAAM,MAAM,EACjC,EAAM,KAAK,EAAU,YAAa,aAAa,EAE7C,EAAU,QAAU,IAAA,KACnB,OAAO,EAAU,OAAU,UAC1B,CAAC,EAAiB,KAAK,EAAU,KAAK,IAExC,EAAM,KAAK,QAAS,0BAA0B,EAGhD,EAAc,EAAO,EAAU,QAAQ,EAEvC,EAAU,EAAO,EADH,EAAU,EAAO,EAAM,IACb,CAAK,EAEtB,CAAE,MAAO,EAAM,OAAO,SAAW,EAAG,OAAQ,EAAM,MAAO,GA1BvD,CACL,MAAO,GACP,OAAQ,CAAC,8BAA2C,CACtD,EANO,CAAE,MAAO,GAAO,OAAQ,CAAC,0BAA0B,CAAE,CA8BhE"}
+{"version":3,"file":"manifest-validation.cjs","names":[],"sources":["../../src/manifests/manifest-validation.ts"],"sourcesContent":["/**\n * Admission policy for extension-authored catalog manifests.\n *\n * A manifest is data authored in a different repository that instructs this host\n * to render copy and compose a request. The host therefore decides what a\n * manifest is *permitted* to do rather than trusting the file — validation here\n * is a trust boundary, not a convenience check, and it deliberately does not\n * defer to a schema shipped alongside the manifests it would be validating.\n *\n * Beyond mirroring the published schema, this adds the invariants the host's own\n * derivation depends on: a single trigger kind to read, a repository field for\n * an event trigger's source, and field names unique across the form. Without\n * them the derived request body would be silently wrong rather than rejected.\n *\n * A manifest that fails any check is rejected outright. It never renders a\n * partial UI, because everything downstream treats its content as instructions.\n */\n\nimport {\n  BUNDLE_CONFIG_FILENAME,\n  SETUP_PLACEHOLDER_NAMESPACES,\n  SETUP_VERSION,\n} from \"./types\";\n\nconst ENTRY_ID_PATTERN = /^[a-z0-9]+(-[a-z0-9]+)*$/;\nconst FIELD_NAME_PATTERN = /^[a-z][A-Za-z0-9]*$/;\n/** Copy must never be able to inject markup into the host. */\nconst MARKUP_PATTERN = /<[A-Za-z/!]/;\n/**\n * A template version, declared as `version` by a prompt entry and as\n * `setup.bundle.version` by a bundle one. Sent to the service as template\n * provenance, so it is checked at admission. Full semver, as the spec at\n * semver.org states it: a catalog entry published with a pre-release or build\n * suffix is still a version this host may forward, and refusing one would drop\n * the entry from the registry outright.\n */\nconst TEMPLATE_VERSION_PATTERN =\n  /^(?:0|[1-9]\\d*)\\.(?:0|[1-9]\\d*)\\.(?:0|[1-9]\\d*)(?:-(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*)?(?:\\+[0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*)?$/;\n// The characters a command of plain words and paths is made of. No shell\n// metacharacters, which the service rejects anyway and a bundle has no reason\n// to need; where those words may point is `isPlainCommand`'s to say.\nconst BUNDLE_COMMAND_PATTERN = /^[A-Za-z0-9 ._/-]+$/;\nconst BUNDLE_PATH_PATTERN = /^[A-Za-z0-9._-]+(\\/[A-Za-z0-9._-]+)*$/;\nconst BUNDLE_SOURCE_PATTERN =\n  /^(skills|automations)\\/[A-Za-z0-9._-]+(\\/[A-Za-z0-9._-]+)*$/;\n/** Every `{{` must open a known namespace and close immediately. */\nconst UNKNOWN_PLACEHOLDER_PATTERN = new RegExp(\n  `\\\\{\\\\{(?!(?:${SETUP_PLACEHOLDER_NAMESPACES.join(\"|\")})\\\\.[A-Za-z0-9_.]+\\\\}\\\\})`,\n);\n\nconst SETUP_MODES = [\"direct\", \"assisted\"] as const;\nconst FIELD_TYPES = [\n  \"text\",\n  \"textarea\",\n  \"select\",\n  \"cron\",\n  \"timezone\",\n  \"repo-picker\",\n] as const;\nconst GIT_PROVIDERS = [\"github\", \"gitlab\", \"bitbucket\"] as const;\nconst TRIGGER_KINDS = [\"cron\", \"event\"] as const;\nconst CONSTRAINT_FORMATS = [\"safeExpressionLiteral\"] as const;\n\n/** Setup context only, so this can never become a channel for runtime instructions. */\nconst MAX_MESSAGE_LENGTH = 2000;\n\nexport interface SetupValidationResult {\n  valid: boolean;\n  errors: string[];\n}\n\ntype Rec = Record<string, unknown>;\n\nfunction isRecord(value: unknown): value is Rec {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction isOneOf<T extends readonly string[]>(\n  value: unknown,\n  allowed: T,\n): value is T[number] {\n  return (\n    typeof value === \"string\" && (allowed as readonly string[]).includes(value)\n  );\n}\n\nfunction isInteger(value: unknown, minimum: number): boolean {\n  return (\n    typeof value === \"number\" && Number.isInteger(value) && value >= minimum\n  );\n}\n\nclass SetupChecker {\n  readonly errors: string[] = [];\n\n  fail(path: string, reason: string): false {\n    this.errors.push(`${path}: ${reason}`);\n    return false;\n  }\n\n  /** Literal user-visible copy. Carries no markup. */\n  copy(value: unknown, path: string): boolean {\n    if (typeof value !== \"string\" || value.length === 0) {\n      return this.fail(path, \"must be a non-empty string\");\n    }\n    if (MARKUP_PATTERN.test(value)) {\n      return this.fail(path, \"must not contain markup\");\n    }\n    return true;\n  }\n\n  placeholders(value: string, path: string): boolean {\n    if (UNKNOWN_PLACEHOLDER_PATTERN.test(value)) {\n      return this.fail(path, \"uses an unknown placeholder namespace\");\n    }\n    return true;\n  }\n\n  /** Copy that may embed `{{namespace.key}}` placeholders. */\n  templateCopy(value: unknown, path: string): boolean {\n    return this.copy(value, path) && this.placeholders(value as string, path);\n  }\n\n  /**\n   * A request-body string that may embed placeholders. Never rendered, so\n   * expression syntax such as a JMESPath filter is allowed through.\n   */\n  templateValue(value: unknown, path: string): boolean {\n    if (typeof value !== \"string\" || value.length === 0) {\n      return this.fail(path, \"must be a non-empty string\");\n    }\n    return this.placeholders(value, path);\n  }\n\n  absent(container: Rec, key: string, path: string, reason: string): boolean {\n    if (key in container) return this.fail(`${path}.${key}`, reason);\n    return true;\n  }\n}\n\n/**\n * A relative path that stays inside the archive it names.\n *\n * The character class alone is not enough: `.` and `..` are made of allowed\n * characters, so a segment check is what actually keeps a packed file from\n * climbing out of the directory it is extracted into.\n */\nfunction isRelativePath(value: unknown, pattern: RegExp): value is string {\n  return (\n    typeof value === \"string\" &&\n    pattern.test(value) &&\n    !value.split(\"/\").some((segment) => segment === \".\" || segment === \"..\")\n  );\n}\n\n/**\n * A command whose every word stays inside the archive it is run in.\n *\n * The character class is not what keeps it there: `/` and `.` are allowed\n * characters, so `/bin/sh setup.sh` and `python3 ../../etc/x.py` are made of\n * them and each names something outside the extracted directory. The segment\n * rule packed paths are held to is what refuses those, and requiring a word at\n * all is what refuses an entrypoint of nothing but spaces.\n */\nfunction isPlainCommand(value: unknown): value is string {\n  if (typeof value !== \"string\" || !BUNDLE_COMMAND_PATTERN.test(value)) {\n    return false;\n  }\n  const words = value.split(\" \").filter((word) => word.length > 0);\n  return (\n    words.length > 0 &&\n    words.every(\n      (word) =>\n        !word.startsWith(\"/\") &&\n        !word.split(\"/\").some((segment) => segment === \"..\"),\n    )\n  );\n}\n\nfunction checkRequires(check: SetupChecker, requires: unknown): void {\n  if (!isRecord(requires)) {\n    check.fail(\"requires\", \"must be an object\");\n    return;\n  }\n\n  const { integrations, features } = requires;\n  // Empty is meaningful rather than malformed: an automation that needs no\n  // credential connects to nothing, and the key stays required so that saying\n  // so is a deliberate statement instead of an omission.\n  if (!isRecord(integrations)) {\n    check.fail(\"requires.integrations\", \"must be an object\");\n  } else {\n    Object.entries(integrations).forEach(([id, requirement]) => {\n      const path = `requires.integrations.${id}`;\n      if (!isRecord(requirement)) {\n        check.fail(path, \"must be an object\");\n        return;\n      }\n      check.copy(requirement.message, `${path}.message`);\n      if (\"required\" in requirement && requirement.required !== false) {\n        check.fail(`${path}.required`, \"may only be false\");\n      }\n      const allowed = [\"message\", \"required\"];\n      Object.keys(requirement)\n        .filter((key) => !allowed.includes(key))\n        .forEach((key) => check.fail(`${path}.${key}`, \"is not allowed\"));\n    });\n  }\n\n  if (features !== undefined) {\n    if (!Array.isArray(features) || features.length === 0) {\n      check.fail(\"requires.features\", \"must be a non-empty array\");\n    } else {\n      features.forEach((feature, index) => {\n        if (typeof feature !== \"string\" || feature.length === 0) {\n          check.fail(\n            `requires.features[${index}]`,\n            \"must be a non-empty string\",\n          );\n        }\n      });\n    }\n  }\n}\n\nfunction checkConstraints(\n  check: SetupChecker,\n  constraints: unknown,\n  path: string,\n): void {\n  if (!isRecord(constraints) || Object.keys(constraints).length === 0) {\n    check.fail(path, \"must be a non-empty object\");\n    return;\n  }\n\n  const { minLength, maxLength, format } = constraints;\n  if (minLength !== undefined && !isInteger(minLength, 0)) {\n    check.fail(`${path}.minLength`, \"must be a non-negative integer\");\n  }\n  if (maxLength !== undefined && !isInteger(maxLength, 1)) {\n    check.fail(`${path}.maxLength`, \"must be a positive integer\");\n  }\n  if (format !== undefined && !isOneOf(format, CONSTRAINT_FORMATS)) {\n    check.fail(`${path}.format`, \"is not a supported format\");\n  }\n}\n\nfunction checkField(check: SetupChecker, field: unknown, path: string): void {\n  if (!isRecord(field)) {\n    check.fail(path, \"must be an object\");\n    return;\n  }\n\n  const { type, label, help, placeholder, required, provider, options } = field;\n\n  if (!isOneOf(type, FIELD_TYPES)) {\n    check.fail(`${path}.type`, \"is not a supported field type\");\n  }\n  check.copy(label, `${path}.label`);\n  check.copy(help, `${path}.help`);\n  if (placeholder !== undefined) check.copy(placeholder, `${path}.placeholder`);\n  if (field.default !== undefined && typeof field.default !== \"string\") {\n    check.fail(`${path}.default`, \"must be a string\");\n  }\n  if (typeof required !== \"boolean\") {\n    check.fail(`${path}.required`, \"must be a boolean\");\n  }\n  if (provider !== undefined && !isOneOf(provider, GIT_PROVIDERS)) {\n    check.fail(`${path}.provider`, \"is not a supported provider\");\n  }\n  if (type === \"repo-picker\" && provider === undefined) {\n    check.fail(`${path}.provider`, \"is required for a repository field\");\n  }\n  // The host branches on this key to decide whether a field's value is a list,\n  // so a field declaring it anywhere else would be seeded with a list and\n  // rendered as a string.\n  if (\n    field.multiple !== undefined &&\n    (field.multiple !== true || type !== \"repo-picker\")\n  ) {\n    check.fail(\n      `${path}.multiple`,\n      \"may only be true, and only on a repository field\",\n    );\n  }\n\n  if (options !== undefined) {\n    if (type !== \"select\") {\n      check.fail(`${path}.options`, \"is only allowed on a select field\");\n    } else if (!Array.isArray(options) || options.length === 0) {\n      check.fail(`${path}.options`, \"must be a non-empty array\");\n    } else {\n      options.forEach((option, index) => {\n        const optionPath = `${path}.options[${index}]`;\n        if (!isRecord(option)) {\n          check.fail(optionPath, \"must be an object\");\n          return;\n        }\n        if (typeof option.value !== \"string\" || option.value.length === 0) {\n          check.fail(`${optionPath}.value`, \"must be a non-empty string\");\n        }\n        check.copy(option.label, `${optionPath}.label`);\n      });\n    }\n  }\n\n  if (field.constraints !== undefined) {\n    checkConstraints(check, field.constraints, `${path}.constraints`);\n  }\n}\n\n/** Returns the declared field names, so the caller can check them for collisions. */\nfunction checkFields(\n  check: SetupChecker,\n  fields: unknown,\n  path: string,\n): string[] {\n  if (!isRecord(fields) || Object.keys(fields).length === 0) {\n    check.fail(path, \"must be a non-empty object\");\n    return [];\n  }\n\n  return Object.entries(fields).map(([name, field]) => {\n    if (!FIELD_NAME_PATTERN.test(name)) {\n      check.fail(`${path}.${name}`, \"is not a valid field name\");\n    }\n    checkField(check, field, `${path}.${name}`);\n    return name;\n  });\n}\n\n/** Returns the trigger kinds declared, in order. */\nfunction checkForm(check: SetupChecker, form: unknown): string[] {\n  if (!isRecord(form)) {\n    check.fail(\"setup.form\", \"must be an object\");\n    return [];\n  }\n\n  if (form.note !== undefined) check.copy(form.note, \"setup.form.note\");\n\n  const names = checkFields(check, form.args, \"setup.form.args\");\n  const kinds: string[] = [];\n\n  if (form.triggers !== undefined) {\n    if (!isRecord(form.triggers) || Object.keys(form.triggers).length === 0) {\n      check.fail(\"setup.form.triggers\", \"must be a non-empty object\");\n    } else {\n      Object.entries(form.triggers).forEach(([kind, fields]) => {\n        if (!isOneOf(kind, TRIGGER_KINDS)) {\n          check.fail(`setup.form.triggers.${kind}`, \"is not a trigger kind\");\n          return;\n        }\n        kinds.push(kind);\n        names.push(\n          ...checkFields(check, fields, `setup.form.triggers.${kind}`),\n        );\n      });\n    }\n  }\n\n  // The host merges both halves into one value map, so a repeated name would\n  // silently shadow a field and misaddress every error reported against it.\n  const duplicates = names.filter(\n    (name, index) => names.indexOf(name) !== index,\n  );\n  Array.from(new Set(duplicates)).forEach((name) =>\n    check.fail(`setup.form.${name}`, \"is declared more than once\"),\n  );\n\n  return kinds;\n}\n\nfunction hasRepoPicker(form: unknown): boolean {\n  if (!isRecord(form)) return false;\n  const groups = [\n    form.args,\n    ...Object.values(isRecord(form.triggers) ? form.triggers : {}),\n  ];\n  return groups.some(\n    (group) =>\n      isRecord(group) &&\n      Object.values(group).some(\n        (field) => isRecord(field) && field.type === \"repo-picker\",\n      ),\n  );\n}\n\nfunction checkMessage(check: SetupChecker, message: unknown): void {\n  if (check.templateCopy(message, \"setup.message\")) {\n    if ((message as string).length > MAX_MESSAGE_LENGTH) {\n      check.fail(\n        \"setup.message\",\n        `must be at most ${MAX_MESSAGE_LENGTH} characters`,\n      );\n    }\n  }\n}\n\n/**\n * The script tarball a direct entry may ship.\n *\n * The strings here are commands and paths this host acts on, so they are held\n * to a closed character set rather than the placeholder rules copy uses: an\n * entrypoint with a shell metacharacter, or a packed path that escapes the\n * archive, is refused here rather than by the service.\n */\nfunction checkBundle(check: SetupChecker, bundle: unknown): void {\n  if (!isRecord(bundle)) {\n    check.fail(\"setup.bundle\", \"must be an object\");\n    return;\n  }\n\n  if (\n    typeof bundle.version !== \"string\" ||\n    !TEMPLATE_VERSION_PATTERN.test(bundle.version)\n  ) {\n    check.fail(\"setup.bundle.version\", \"must be a semantic version\");\n  }\n  if (!isPlainCommand(bundle.entrypoint)) {\n    check.fail(\n      \"setup.bundle.entrypoint\",\n      \"must be a plain command that stays inside the archive\",\n    );\n  }\n  if (\n    bundle.setupScript !== undefined &&\n    !isRelativePath(bundle.setupScript, BUNDLE_PATH_PATTERN)\n  ) {\n    check.fail(\"setup.bundle.setupScript\", \"must be a relative path\");\n  }\n  if (bundle.timeout !== undefined && !isInteger(bundle.timeout, 1)) {\n    check.fail(\"setup.bundle.timeout\", \"must be a positive integer\");\n  }\n\n  if (!isRecord(bundle.files) || Object.keys(bundle.files).length === 0) {\n    check.fail(\"setup.bundle.files\", \"must be a non-empty object\");\n  } else {\n    Object.entries(bundle.files).forEach(([packedPath, source]) => {\n      if (!isRelativePath(packedPath, BUNDLE_PATH_PATTERN)) {\n        check.fail(`setup.bundle.files.${packedPath}`, \"is not a packed path\");\n      }\n      // The rendered config is packed under this name too, and a tar carrying\n      // the name twice leaves which one the script reads to whichever\n      // extractor unpacks it.\n      if (packedPath === BUNDLE_CONFIG_FILENAME) {\n        check.fail(\n          `setup.bundle.files.${packedPath}`,\n          \"is the name the rendered config is packed under\",\n        );\n      }\n      if (!isRelativePath(source, BUNDLE_SOURCE_PATTERN)) {\n        check.fail(\n          `setup.bundle.files.${packedPath}`,\n          \"must name a file under skills/ or automations/\",\n        );\n      }\n    });\n\n    // A setup script the archive does not carry is a create request the\n    // service accepts and the first run fails on, and it is also the only\n    // thing packed executable - naming an unpacked file makes that rule\n    // unreachable.\n    if (\n      typeof bundle.setupScript === \"string\" &&\n      !(bundle.setupScript in bundle.files)\n    ) {\n      check.fail(\"setup.bundle.setupScript\", \"must name a packed file\");\n    }\n  }\n\n  if (!isRecord(bundle.config) || Object.keys(bundle.config).length === 0) {\n    check.fail(\"setup.bundle.config\", \"must be a non-empty object\");\n  } else {\n    checkBundleConfig(check, bundle.config, \"setup.bundle.config\");\n  }\n}\n\n/** Every string leaf of the config is a payload value: placeholders, no markup rule. */\nfunction checkBundleConfig(\n  check: SetupChecker,\n  node: unknown,\n  path: string,\n): void {\n  if (typeof node === \"string\") {\n    check.templateValue(node, path);\n    return;\n  }\n  if (Array.isArray(node)) {\n    node.forEach((item, index) =>\n      checkBundleConfig(check, item, `${path}[${index}]`),\n    );\n    return;\n  }\n  if (isRecord(node)) {\n    Object.entries(node).forEach(([key, value]) =>\n      checkBundleConfig(check, value, `${path}.${key}`),\n    );\n    return;\n  }\n  if (node !== null && typeof node !== \"number\" && typeof node !== \"boolean\") {\n    check.fail(\n      path,\n      \"must be a string, number, boolean, null, array or object\",\n    );\n  }\n}\n\nfunction checkMode(check: SetupChecker, setup: Rec, kinds: string[]): void {\n  if (!isOneOf(setup.mode, SETUP_MODES)) {\n    check.fail(\"setup.mode\", \"is not a supported mode\");\n    return;\n  }\n\n  if (setup.mode === \"direct\") {\n    // A direct entry produces one of two things: a prompt, or a script bundle\n    // the host packs and uploads. Both would be ambiguous, neither is nothing\n    // to create.\n    const hasPrompt = setup.prompt !== undefined;\n    const hasBundle = setup.bundle !== undefined;\n    if (hasPrompt === hasBundle) {\n      check.fail(\n        \"setup\",\n        \"must declare exactly one of prompt or bundle for direct setup\",\n      );\n    } else if (hasBundle) {\n      checkBundle(check, setup.bundle);\n    } else {\n      check.templateValue(setup.prompt, \"setup.prompt\");\n    }\n    // A direct entry may carry a fallback-conversation seed for deployments\n    // that cannot run the direct path, held to the same rules as an assisted\n    // message.\n    if (setup.message !== undefined) checkMessage(check, setup.message);\n\n    // The derivation reads a single trigger kind, and an event trigger takes\n    // its source from the repository field's provider.\n    if (kinds.length !== 1) {\n      check.fail(\n        \"setup.form.triggers\",\n        \"must declare exactly one trigger kind\",\n      );\n    }\n    if (kinds.includes(\"event\") && !hasRepoPicker(setup.form)) {\n      check.fail(\n        \"setup.form\",\n        \"must declare a repository field for an event trigger\",\n      );\n    }\n    if (setup.filter !== undefined) {\n      if (!kinds.includes(\"event\")) {\n        check.fail(\"setup.filter\", \"is only allowed for an event trigger\");\n      } else {\n        check.templateValue(setup.filter, \"setup.filter\");\n      }\n    }\n    return;\n  }\n\n  checkMessage(check, setup.message);\n  check.absent(setup, \"prompt\", \"setup\", \"is only allowed for direct setup\");\n  check.absent(setup, \"bundle\", \"setup\", \"is only allowed for direct setup\");\n  check.absent(setup, \"filter\", \"setup\", \"is only allowed for direct setup\");\n}\n\n/** Whether a catalog entry ships a setup experience at all. It is optional. */\nexport function hasSetupBlock(candidate: unknown): boolean {\n  return isRecord(candidate) && candidate.setup !== undefined;\n}\n\n/**\n * Decide whether this host will act on a catalog manifest.\n *\n * The version is checked first and fails closed: a format this host does not\n * recognise is refused rather than interpreted with today's rules.\n */\nexport function validateSetupEntry(candidate: unknown): SetupValidationResult {\n  const check = new SetupChecker();\n\n  if (!isRecord(candidate)) {\n    return { valid: false, errors: [\"manifest: must be an object\"] };\n  }\n\n  const { setup } = candidate;\n  if (!isRecord(setup)) {\n    return { valid: false, errors: [\"setup: must be an object\"] };\n  }\n  if (setup.version !== SETUP_VERSION) {\n    return {\n      valid: false,\n      errors: [`setup.version: must be \"${SETUP_VERSION}\"`],\n    };\n  }\n\n  if (\n    typeof candidate.id !== \"string\" ||\n    !ENTRY_ID_PATTERN.test(candidate.id)\n  ) {\n    check.fail(\"id\", \"must be a lowercase slug\");\n  }\n  check.copy(candidate.name, \"name\");\n  check.copy(candidate.description, \"description\");\n  if (\n    candidate.version !== undefined &&\n    (typeof candidate.version !== \"string\" ||\n      !TEMPLATE_VERSION_PATTERN.test(candidate.version))\n  ) {\n    check.fail(\"version\", \"must be a semantic version\");\n  }\n  if (\n    candidate.skill !== undefined &&\n    (typeof candidate.skill !== \"string\" ||\n      !ENTRY_ID_PATTERN.test(candidate.skill))\n  ) {\n    check.fail(\"skill\", \"must be a lowercase slug\");\n  }\n\n  checkRequires(check, candidate.requires);\n  const kinds = checkForm(check, setup.form);\n  checkMode(check, setup, kinds);\n\n  return { valid: check.errors.length === 0, errors: check.errors };\n}\n"],"mappings":"4EAwBA,IAAM,EAAmB,2BACnB,EAAqB,sBAErB,EAAiB,cASjB,EACJ,wLAII,EAAyB,sBACzB,EAAsB,wCACtB,EACJ,8DAEI,EAAkC,OACtC,eAAe,EAAA,6BAA6B,KAAK,GAAG,EAAE,0BACxD,EAEM,EAAc,CAAC,SAAU,UAAU,EACnC,EAAc,CAClB,OACA,WACA,SACA,OACA,WACA,aACF,EACM,EAAgB,CAAC,SAAU,SAAU,WAAW,EAChD,EAAgB,CAAC,OAAQ,OAAO,EAChC,EAAqB,CAAC,uBAAuB,EAG7C,EAAqB,IAS3B,SAAS,EAAS,EAA8B,CAC9C,OAAO,OAAO,GAAU,YAAY,GAAkB,CAAC,MAAM,QAAQ,CAAK,CAC5E,CAEA,SAAS,EACP,EACA,EACoB,CACpB,OACE,OAAO,GAAU,UAAa,EAA8B,SAAS,CAAK,CAE9E,CAEA,SAAS,EAAU,EAAgB,EAA0B,CAC3D,OACE,OAAO,GAAU,UAAY,OAAO,UAAU,CAAK,GAAK,GAAS,CAErE,CAEA,IAAM,EAAN,KAAmB,CACjB,OAA4B,CAAC,EAE7B,KAAK,EAAc,EAAuB,CAExC,OADA,KAAK,OAAO,KAAK,GAAG,EAAK,IAAI,GAAQ,EAC9B,EACT,CAGA,KAAK,EAAgB,EAAuB,CAO1C,OANI,OAAO,GAAU,UAAY,EAAM,SAAW,EACzC,KAAK,KAAK,EAAM,4BAA4B,EAEjD,EAAe,KAAK,CAAK,EACpB,KAAK,KAAK,EAAM,yBAAyB,EAE3C,EACT,CAEA,aAAa,EAAe,EAAuB,CAIjD,OAHI,EAA4B,KAAK,CAAK,EACjC,KAAK,KAAK,EAAM,uCAAuC,EAEzD,EACT,CAGA,aAAa,EAAgB,EAAuB,CAClD,OAAO,KAAK,KAAK,EAAO,CAAI,GAAK,KAAK,aAAa,EAAiB,CAAI,CAC1E,CAMA,cAAc,EAAgB,EAAuB,CAInD,OAHI,OAAO,GAAU,UAAY,EAAM,SAAW,EACzC,KAAK,KAAK,EAAM,4BAA4B,EAE9C,KAAK,aAAa,EAAO,CAAI,CACtC,CAEA,OAAO,EAAgB,EAAa,EAAc,EAAyB,CAEzE,OADI,KAAO,EAAkB,KAAK,KAAK,GAAG,EAAK,GAAG,IAAO,CAAM,EACxD,EACT,CACF,EASA,SAAS,EAAe,EAAgB,EAAkC,CACxE,OACE,OAAO,GAAU,UACjB,EAAQ,KAAK,CAAK,GAClB,CAAC,EAAM,MAAM,GAAG,EAAE,KAAM,GAAY,IAAY,KAAO,IAAY,IAAI,CAE3E,CAWA,SAAS,EAAe,EAAiC,CACvD,GAAI,OAAO,GAAU,UAAY,CAAC,EAAuB,KAAK,CAAK,EACjE,MAAO,GAET,IAAM,EAAQ,EAAM,MAAM,GAAG,EAAE,OAAQ,GAAS,EAAK,OAAS,CAAC,EAC/D,OACE,EAAM,OAAS,GACf,EAAM,MACH,GACC,CAAC,EAAK,WAAW,GAAG,GACpB,CAAC,EAAK,MAAM,GAAG,EAAE,KAAM,GAAY,IAAY,IAAI,CACvD,CAEJ,CAEA,SAAS,EAAc,EAAqB,EAAyB,CACnE,GAAI,CAAC,EAAS,CAAQ,EAAG,CACvB,EAAM,KAAK,WAAY,mBAAmB,EAC1C,MACF,CAEA,GAAM,CAAE,eAAc,YAAa,EAI9B,EAAS,CAAY,EAGxB,OAAO,QAAQ,CAAY,EAAE,SAAS,CAAC,EAAI,KAAiB,CAC1D,IAAM,EAAO,yBAAyB,IACtC,GAAI,CAAC,EAAS,CAAW,EAAG,CAC1B,EAAM,KAAK,EAAM,mBAAmB,EACpC,MACF,CACA,EAAM,KAAK,EAAY,QAAS,GAAG,EAAK,SAAS,EAC7C,aAAc,GAAe,EAAY,WAAa,IACxD,EAAM,KAAK,GAAG,EAAK,WAAY,mBAAmB,EAEpD,IAAM,EAAU,CAAC,UAAW,UAAU,EACtC,OAAO,KAAK,CAAW,EACpB,OAAQ,GAAQ,CAAC,EAAQ,SAAS,CAAG,CAAC,EACtC,QAAS,GAAQ,EAAM,KAAK,GAAG,EAAK,GAAG,IAAO,gBAAgB,CAAC,CACpE,CAAC,EAhBD,EAAM,KAAK,wBAAyB,mBAAmB,EAmBrD,IAAa,IAAA,KACX,CAAC,MAAM,QAAQ,CAAQ,GAAK,EAAS,SAAW,EAClD,EAAM,KAAK,oBAAqB,2BAA2B,EAE3D,EAAS,SAAS,EAAS,IAAU,EAC/B,OAAO,GAAY,UAAY,EAAQ,SAAW,IACpD,EAAM,KACJ,qBAAqB,EAAM,GAC3B,4BACF,CAEJ,CAAC,EAGP,CAEA,SAAS,EACP,EACA,EACA,EACM,CACN,GAAI,CAAC,EAAS,CAAW,GAAK,OAAO,KAAK,CAAW,EAAE,SAAW,EAAG,CACnE,EAAM,KAAK,EAAM,4BAA4B,EAC7C,MACF,CAEA,GAAM,CAAE,YAAW,YAAW,UAAW,EACrC,IAAc,IAAA,IAAa,CAAC,EAAU,EAAW,CAAC,GACpD,EAAM,KAAK,GAAG,EAAK,YAAa,gCAAgC,EAE9D,IAAc,IAAA,IAAa,CAAC,EAAU,EAAW,CAAC,GACpD,EAAM,KAAK,GAAG,EAAK,YAAa,4BAA4B,EAE1D,IAAW,IAAA,IAAa,CAAC,EAAQ,EAAQ,CAAkB,GAC7D,EAAM,KAAK,GAAG,EAAK,SAAU,2BAA2B,CAE5D,CAEA,SAAS,EAAW,EAAqB,EAAgB,EAAoB,CAC3E,GAAI,CAAC,EAAS,CAAK,EAAG,CACpB,EAAM,KAAK,EAAM,mBAAmB,EACpC,MACF,CAEA,GAAM,CAAE,OAAM,QAAO,OAAM,cAAa,WAAU,WAAU,WAAY,EAEnE,EAAQ,EAAM,CAAW,GAC5B,EAAM,KAAK,GAAG,EAAK,OAAQ,+BAA+B,EAE5D,EAAM,KAAK,EAAO,GAAG,EAAK,OAAO,EACjC,EAAM,KAAK,EAAM,GAAG,EAAK,MAAM,EAC3B,IAAgB,IAAA,IAAW,EAAM,KAAK,EAAa,GAAG,EAAK,aAAa,EACxE,EAAM,UAAY,IAAA,IAAa,OAAO,EAAM,SAAY,UAC1D,EAAM,KAAK,GAAG,EAAK,UAAW,kBAAkB,EAE9C,OAAO,GAAa,WACtB,EAAM,KAAK,GAAG,EAAK,WAAY,mBAAmB,EAEhD,IAAa,IAAA,IAAa,CAAC,EAAQ,EAAU,CAAa,GAC5D,EAAM,KAAK,GAAG,EAAK,WAAY,6BAA6B,EAE1D,IAAS,eAAiB,IAAa,IAAA,IACzC,EAAM,KAAK,GAAG,EAAK,WAAY,oCAAoC,EAMnE,EAAM,WAAa,IAAA,KAClB,EAAM,WAAa,IAAQ,IAAS,gBAErC,EAAM,KACJ,GAAG,EAAK,WACR,kDACF,EAGE,IAAY,IAAA,KACV,IAAS,SAEF,CAAC,MAAM,QAAQ,CAAO,GAAK,EAAQ,SAAW,EACvD,EAAM,KAAK,GAAG,EAAK,UAAW,2BAA2B,EAEzD,EAAQ,SAAS,EAAQ,IAAU,CACjC,IAAM,EAAa,GAAG,EAAK,WAAW,EAAM,GAC5C,GAAI,CAAC,EAAS,CAAM,EAAG,CACrB,EAAM,KAAK,EAAY,mBAAmB,EAC1C,MACF,EACI,OAAO,EAAO,OAAU,UAAY,EAAO,MAAM,SAAW,IAC9D,EAAM,KAAK,GAAG,EAAW,QAAS,4BAA4B,EAEhE,EAAM,KAAK,EAAO,MAAO,GAAG,EAAW,OAAO,CAChD,CAAC,EAdD,EAAM,KAAK,GAAG,EAAK,UAAW,mCAAmC,GAkBjE,EAAM,cAAgB,IAAA,IACxB,EAAiB,EAAO,EAAM,YAAa,GAAG,EAAK,aAAa,CAEpE,CAGA,SAAS,EACP,EACA,EACA,EACU,CAMV,MALI,CAAC,EAAS,CAAM,GAAK,OAAO,KAAK,CAAM,EAAE,SAAW,GACtD,EAAM,KAAK,EAAM,4BAA4B,EACtC,CAAC,GAGH,OAAO,QAAQ,CAAM,EAAE,KAAK,CAAC,EAAM,MACnC,EAAmB,KAAK,CAAI,GAC/B,EAAM,KAAK,GAAG,EAAK,GAAG,IAAQ,2BAA2B,EAE3D,EAAW,EAAO,EAAO,GAAG,EAAK,GAAG,GAAM,EACnC,EACR,CACH,CAGA,SAAS,EAAU,EAAqB,EAAyB,CAC/D,GAAI,CAAC,EAAS,CAAI,EAEhB,OADA,EAAM,KAAK,aAAc,mBAAmB,EACrC,CAAC,EAGN,EAAK,OAAS,IAAA,IAAW,EAAM,KAAK,EAAK,KAAM,iBAAiB,EAEpE,IAAM,EAAQ,EAAY,EAAO,EAAK,KAAM,iBAAiB,EACvD,EAAkB,CAAC,EAErB,EAAK,WAAa,IAAA,KAChB,CAAC,EAAS,EAAK,QAAQ,GAAK,OAAO,KAAK,EAAK,QAAQ,EAAE,SAAW,EACpE,EAAM,KAAK,sBAAuB,4BAA4B,EAE9D,OAAO,QAAQ,EAAK,QAAQ,EAAE,SAAS,CAAC,EAAM,KAAY,CACxD,GAAI,CAAC,EAAQ,EAAM,CAAa,EAAG,CACjC,EAAM,KAAK,uBAAuB,IAAQ,uBAAuB,EACjE,MACF,CACA,EAAM,KAAK,CAAI,EACf,EAAM,KACJ,GAAG,EAAY,EAAO,EAAQ,uBAAuB,GAAM,CAC7D,CACF,CAAC,GAML,IAAM,EAAa,EAAM,QACtB,EAAM,IAAU,EAAM,QAAQ,CAAI,IAAM,CAC3C,EAKA,OAJA,MAAM,KAAK,IAAI,IAAI,CAAU,CAAC,EAAE,QAAS,GACvC,EAAM,KAAK,cAAc,IAAQ,4BAA4B,CAC/D,EAEO,CACT,CAEA,SAAS,EAAc,EAAwB,CAM7C,OALK,EAAS,CAAI,EAKX,CAHL,EAAK,KACL,GAAG,OAAO,OAAO,EAAS,EAAK,QAAQ,EAAI,EAAK,SAAW,CAAC,CAAC,CAExD,EAAO,KACX,GACC,EAAS,CAAK,GACd,OAAO,OAAO,CAAK,EAAE,KAClB,GAAU,EAAS,CAAK,GAAK,EAAM,OAAS,aAC/C,CACJ,EAX4B,EAY9B,CAEA,SAAS,EAAa,EAAqB,EAAwB,CAC7D,EAAM,aAAa,EAAS,eAAe,GACxC,EAAmB,OAAS,GAC/B,EAAM,KACJ,gBACA,mBAAmB,EAAmB,YACxC,CAGN,CAUA,SAAS,EAAY,EAAqB,EAAuB,CAC/D,GAAI,CAAC,EAAS,CAAM,EAAG,CACrB,EAAM,KAAK,eAAgB,mBAAmB,EAC9C,MACF,EAGE,OAAO,EAAO,SAAY,UAC1B,CAAC,EAAyB,KAAK,EAAO,OAAO,IAE7C,EAAM,KAAK,uBAAwB,4BAA4B,EAE5D,EAAe,EAAO,UAAU,GACnC,EAAM,KACJ,0BACA,uDACF,EAGA,EAAO,cAAgB,IAAA,IACvB,CAAC,EAAe,EAAO,YAAa,CAAmB,GAEvD,EAAM,KAAK,2BAA4B,yBAAyB,EAE9D,EAAO,UAAY,IAAA,IAAa,CAAC,EAAU,EAAO,QAAS,CAAC,GAC9D,EAAM,KAAK,uBAAwB,4BAA4B,EAG7D,CAAC,EAAS,EAAO,KAAK,GAAK,OAAO,KAAK,EAAO,KAAK,EAAE,SAAW,EAClE,EAAM,KAAK,qBAAsB,4BAA4B,GAE7D,OAAO,QAAQ,EAAO,KAAK,EAAE,SAAS,CAAC,EAAY,KAAY,CACxD,EAAe,EAAY,CAAmB,GACjD,EAAM,KAAK,sBAAsB,IAAc,sBAAsB,EAKnE,IAAA,eACF,EAAM,KACJ,sBAAsB,IACtB,iDACF,EAEG,EAAe,EAAQ,CAAqB,GAC/C,EAAM,KACJ,sBAAsB,IACtB,gDACF,CAEJ,CAAC,EAOC,OAAO,EAAO,aAAgB,UAC9B,EAAE,EAAO,eAAe,EAAO,QAE/B,EAAM,KAAK,2BAA4B,yBAAyB,GAIhE,CAAC,EAAS,EAAO,MAAM,GAAK,OAAO,KAAK,EAAO,MAAM,EAAE,SAAW,EACpE,EAAM,KAAK,sBAAuB,4BAA4B,EAE9D,EAAkB,EAAO,EAAO,OAAQ,qBAAqB,CAEjE,CAGA,SAAS,EACP,EACA,EACA,EACM,CACN,GAAI,OAAO,GAAS,SAAU,CAC5B,EAAM,cAAc,EAAM,CAAI,EAC9B,MACF,CACA,GAAI,MAAM,QAAQ,CAAI,EAAG,CACvB,EAAK,SAAS,EAAM,IAClB,EAAkB,EAAO,EAAM,GAAG,EAAK,GAAG,EAAM,EAAE,CACpD,EACA,MACF,CACA,GAAI,EAAS,CAAI,EAAG,CAClB,OAAO,QAAQ,CAAI,EAAE,SAAS,CAAC,EAAK,KAClC,EAAkB,EAAO,EAAO,GAAG,EAAK,GAAG,GAAK,CAClD,EACA,MACF,CACI,IAAS,MAAQ,OAAO,GAAS,UAAY,OAAO,GAAS,WAC/D,EAAM,KACJ,EACA,0DACF,CAEJ,CAEA,SAAS,EAAU,EAAqB,EAAY,EAAuB,CACzE,GAAI,CAAC,EAAQ,EAAM,KAAM,CAAW,EAAG,CACrC,EAAM,KAAK,aAAc,yBAAyB,EAClD,MACF,CAEA,GAAI,EAAM,OAAS,SAAU,CAI3B,IAAM,EAAY,EAAM,SAAW,IAAA,GAC7B,EAAY,EAAM,SAAW,IAAA,GAC/B,IAAc,EAChB,EAAM,KACJ,QACA,+DACF,EACS,EACT,EAAY,EAAO,EAAM,MAAM,EAE/B,EAAM,cAAc,EAAM,OAAQ,cAAc,EAK9C,EAAM,UAAY,IAAA,IAAW,EAAa,EAAO,EAAM,OAAO,EAI9D,EAAM,SAAW,GACnB,EAAM,KACJ,sBACA,uCACF,EAEE,EAAM,SAAS,OAAO,GAAK,CAAC,EAAc,EAAM,IAAI,GACtD,EAAM,KACJ,aACA,sDACF,EAEE,EAAM,SAAW,IAAA,KACd,EAAM,SAAS,OAAO,EAGzB,EAAM,cAAc,EAAM,OAAQ,cAAc,EAFhD,EAAM,KAAK,eAAgB,sCAAsC,GAKrE,MACF,CAEA,EAAa,EAAO,EAAM,OAAO,EACjC,EAAM,OAAO,EAAO,SAAU,QAAS,kCAAkC,EACzE,EAAM,OAAO,EAAO,SAAU,QAAS,kCAAkC,EACzE,EAAM,OAAO,EAAO,SAAU,QAAS,kCAAkC,CAC3E,CAGA,SAAgB,EAAc,EAA6B,CACzD,OAAO,EAAS,CAAS,GAAK,EAAU,QAAU,IAAA,EACpD,CAQA,SAAgB,EAAmB,EAA2C,CAC5E,IAAM,EAAQ,IAAI,EAElB,GAAI,CAAC,EAAS,CAAS,EACrB,MAAO,CAAE,MAAO,GAAO,OAAQ,CAAC,6BAA6B,CAAE,EAGjE,GAAM,CAAE,SAAU,EAsClB,OArCK,EAAS,CAAK,EAGf,EAAM,UAAA,QAQR,OAAO,EAAU,IAAO,UACxB,CAAC,EAAiB,KAAK,EAAU,EAAE,IAEnC,EAAM,KAAK,KAAM,0BAA0B,EAE7C,EAAM,KAAK,EAAU,KAAM,MAAM,EACjC,EAAM,KAAK,EAAU,YAAa,aAAa,EAE7C,EAAU,UAAY,IAAA,KACrB,OAAO,EAAU,SAAY,UAC5B,CAAC,EAAyB,KAAK,EAAU,OAAO,IAElD,EAAM,KAAK,UAAW,4BAA4B,EAGlD,EAAU,QAAU,IAAA,KACnB,OAAO,EAAU,OAAU,UAC1B,CAAC,EAAiB,KAAK,EAAU,KAAK,IAExC,EAAM,KAAK,QAAS,0BAA0B,EAGhD,EAAc,EAAO,EAAU,QAAQ,EAEvC,EAAU,EAAO,EADH,EAAU,EAAO,EAAM,IACb,CAAK,EAEtB,CAAE,MAAO,EAAM,OAAO,SAAW,EAAG,OAAQ,EAAM,MAAO,GAjCvD,CACL,MAAO,GACP,OAAQ,CAAC,8BAA2C,CACtD,EANO,CAAE,MAAO,GAAO,OAAQ,CAAC,0BAA0B,CAAE,CAqChE"}