@openhands/agent-canvas 1.7.2 → 1.9.0

package/dist/manifests/interface-validation.js

@@ -0,0 +1,182 @@
+//#region src/manifests/interface-validation.ts
+var e = /<[A-Za-z/!]/, t = /^[a-z0-9]+(-[a-z0-9]+)*$/, n = "https://docs.openhands.dev/", r = /^[a-z][a-z-]*$/, i = /^\.[a-z][a-z.]*json$/, a = /^[a-z0-9][a-z0-9.-]*$/, o = /^\/[A-Za-z0-9/{}_-]*$/, s = /^[^{}]*\{id\}[^{}]*$/, c = [
+	"github",
+	"gitlab",
+	"bitbucket"
+], l = {
+	name: {
+		type: "text",
+		required: !0
+	},
+	prompt: {
+		type: "textarea",
+		required: !1
+	},
+	model: {
+		type: "llm-profile",
+		required: !1
+	},
+	timeout: {
+		type: "number",
+		required: !1
+	},
+	schedule: {
+		type: "schedule",
+		required: !1
+	}
+}, u = Object.keys(l), d = [
+	"list",
+	"health",
+	"capabilities",
+	"validate",
+	"createPrompt",
+	"createPlugin"
+], f = [
+	"detail",
+	"dispatch",
+	"runs",
+	"tarball"
+];
+function p(e) {
+	return typeof e == "object" && !!e && !Array.isArray(e);
+}
+var m = class {
+	errors = [];
+	fail(e, t) {
+		return this.errors.push(`${e}: ${t}`), !1;
+	}
+	copy(t, n) {
+		return typeof t != "string" || t.length === 0 ? this.fail(n, "must be a non-empty string") : e.test(t) ? this.fail(n, "must not contain markup") : !0;
+	}
+	closed(e, t, n) {
+		Object.keys(e).filter((e) => !t.includes(e)).forEach((e) => this.fail(`${n}.${e}`, "is not allowed"));
+	}
+	record(e, t) {
+		return p(e) ? !0 : (this.fail(t, "must be an object"), !1);
+	}
+};
+function h(e, t, n) {
+	e.record(t, "routes") && (e.closed(t, [
+		"list",
+		"setup",
+		"detail"
+	], "routes"), [
+		"list",
+		"setup",
+		"detail"
+	].forEach((r) => {
+		t[r] !== n[r] && e.fail(`routes.${r}`, `must be "${n[r]}"`);
+	}));
+}
+function g(e, t) {
+	if (e.record(t, "navigation") && (e.closed(t, ["sidebar", "commandMenu"], "navigation"), e.record(t.sidebar, "navigation.sidebar") && (e.closed(t.sidebar, ["label"], "navigation.sidebar"), e.copy(t.sidebar.label, "navigation.sidebar.label")), e.record(t.commandMenu, "navigation.commandMenu"))) {
+		let n = t.commandMenu;
+		e.closed(n, [
+			"title",
+			"description",
+			"keywords"
+		], "navigation.commandMenu"), e.copy(n.title, "navigation.commandMenu.title"), e.copy(n.description, "navigation.commandMenu.description"), e.copy(n.keywords, "navigation.commandMenu.keywords");
+	}
+}
+function _(e, t) {
+	e.record(t, "pages") && (e.closed(t, [
+		"list",
+		"detail",
+		"edit"
+	], "pages"), e.record(t.list, "pages.list") && (e.closed(t.list, ["title", "subtitle"], "pages.list"), e.copy(t.list.title, "pages.list.title"), e.copy(t.list.subtitle, "pages.list.subtitle")), e.record(t.detail, "pages.detail") && (e.closed(t.detail, ["backLabel"], "pages.detail"), e.copy(t.detail.backLabel, "pages.detail.backLabel")), e.record(t.edit, "pages.edit") && (e.closed(t.edit, ["title"], "pages.edit"), e.copy(t.edit.title, "pages.edit.title")));
+}
+function v(e, t, n, r) {
+	if (!e.record(n, r)) return;
+	e.closed(n, [
+		"type",
+		"label",
+		"help",
+		"required",
+		"constraints"
+	], r);
+	let { type: i, label: a, help: o, required: s, constraints: c } = n;
+	if (i !== t.type && e.fail(`${r}.type`, `must be "${t.type}", the control this host renders`), e.copy(a, `${r}.label`), o !== void 0 && e.copy(o, `${r}.help`), s !== t.required && e.fail(`${r}.required`, `must be ${t.required}, what this host enforces`), c !== void 0) {
+		if (t.type !== "number") e.fail(`${r}.constraints`, "is only allowed on a number attribute");
+		else if (e.record(c, `${r}.constraints`)) {
+			e.closed(c, ["min", "max"], `${r}.constraints`);
+			let { min: t, max: n } = c;
+			t !== void 0 && t !== 1 && e.fail(`${r}.constraints.min`, "must be the 1 this host enforces"), n !== void 0 && (!Number.isInteger(n) || n < 1) && e.fail(`${r}.constraints.max`, "must be a positive integer");
+		}
+	}
+}
+function y(e, t) {
+	if (!e.record(t, "attributes")) return;
+	let n = Object.keys(t);
+	n.length === 0 && e.fail("attributes", "must declare at least one attribute"), n.forEach((n) => {
+		if (!u.includes(n)) {
+			e.fail(`attributes.${n}`, "is not a settable attribute");
+			return;
+		}
+		v(e, l[n], t[n], `attributes.${n}`);
+	});
+}
+function b(e, t) {
+	if (!e.record(t, "importExport")) return;
+	e.closed(t, [
+		"fileKind",
+		"fileVersion",
+		"filenameSuffix",
+		"importDefaults"
+	], "importExport");
+	let { fileKind: n, fileVersion: o, filenameSuffix: s, importDefaults: l } = t;
+	(typeof n != "string" || !r.test(n)) && e.fail("importExport.fileKind", "must be a lowercase slug"), o !== 1 && e.fail("importExport.fileVersion", "must be 1"), (typeof s != "string" || !i.test(s)) && e.fail("importExport.filenameSuffix", "must be a .json suffix"), e.record(l, "importExport.importDefaults") && (e.closed(l, ["repoProvider", "placeholderEventSource"], "importExport.importDefaults"), (typeof l.repoProvider != "string" || !c.includes(l.repoProvider)) && e.fail("importExport.importDefaults.repoProvider", "is not a supported provider"), (typeof l.placeholderEventSource != "string" || !a.test(l.placeholderEventSource)) && e.fail("importExport.importDefaults.placeholderEventSource", "must be a lowercase event source"));
+}
+function x(e, t) {
+	if (!e.record(t, "endpoints")) return;
+	let n = [...d, ...f];
+	e.closed(t, n, "endpoints");
+	let r = (n) => {
+		let r = t[n];
+		return typeof r != "string" || !o.test(r) || r.includes("//") ? (e.fail(`endpoints.${n}`, "must be a rooted service-relative path"), null) : r;
+	};
+	d.forEach((t) => {
+		let n = r(t);
+		n !== null && /[{}]/.test(n) && e.fail(`endpoints.${t}`, "must not carry a substitution");
+	}), f.forEach((t) => {
+		let n = r(t);
+		n !== null && !s.test(n) && e.fail(`endpoints.${t}`, "must carry exactly one {id}");
+	});
+}
+function S(e, n, r) {
+	if (!Array.isArray(n) || n.length === 0) return e.fail(r, "must be a non-empty array"), [];
+	let i = n.filter((n) => typeof n == "string" && t.test(n) ? !0 : (e.fail(r, "must contain only lowercase slugs"), !1));
+	return new Set(i).size !== i.length && e.fail(r, "must not repeat an id"), i;
+}
+var C = [
+	"version",
+	"routes",
+	"navigation",
+	"pages",
+	"docsUrl",
+	"attributes",
+	"importExport",
+	"endpoints",
+	"featuredAutomationIds",
+	"responderIntegrationIds"
+];
+function w(e, t) {
+	if (!p(e)) return {
+		valid: !1,
+		errors: ["interface: must be an object"]
+	};
+	if (e.version !== "1.0") return {
+		valid: !1,
+		errors: ["interface.version: must be \"1.0\""]
+	};
+	let r = new m();
+	return r.closed(e, C, "interface"), h(r, e.routes, t.mountedRoutes), g(r, e.navigation), _(r, e.pages), (typeof e.docsUrl != "string" || !e.docsUrl.startsWith(n)) && r.fail("docsUrl", `must start with ${n}`), y(r, e.attributes), b(r, e.importExport), x(r, e.endpoints), S(r, e.featuredAutomationIds, "featuredAutomationIds").forEach((e) => {
+		t.catalogIds.has(e) || r.fail("featuredAutomationIds", `${e} is not a catalog entry`);
+	}), S(r, e.responderIntegrationIds, "responderIntegrationIds"), {
+		valid: r.errors.length === 0,
+		errors: r.errors
+	};
+}
+//#endregion
+export { w as validateInterfaceManifest };
+
+//# sourceMappingURL=interface-validation.js.map

package/dist/manifests/interface-validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"interface-validation.js","names":[],"sources":["../../src/manifests/interface-validation.ts"],"sourcesContent":["/**\n * Admission policy for the extension-published Automation interface manifest.\n *\n * Like a setup entry, the interface manifest is data authored in a different\n * repository that instructs this host to render copy, build links, and address\n * requests, so the host decides what it is *permitted* to state. Admission is\n * all-or-nothing: one bad field rejects the whole manifest, and the host falls\n * back to its own defaults rather than rendering a partially-trusted mix.\n */\n\nimport type {\n  AutomationAttributeName,\n  InterfaceAttributeType,\n  InterfaceRoutes,\n} from \"./types\";\nimport { INTERFACE_VERSION } from \"./types\";\n\n/** Copy must never be able to inject markup into the host. */\nconst MARKUP_PATTERN = /<[A-Za-z/!]/;\nconst SLUG_PATTERN = /^[a-z0-9]+(-[a-z0-9]+)*$/;\n/** The one URL the manifest may state, pinned to the product documentation. */\nconst DOCS_URL_PREFIX = \"https://docs.openhands.dev/\";\nconst FILE_KIND_PATTERN = /^[a-z][a-z-]*$/;\nconst FILENAME_SUFFIX_PATTERN = /^\\.[a-z][a-z.]*json$/;\nconst EVENT_SOURCE_PATTERN = /^[a-z0-9][a-z0-9.-]*$/;\n/** Service-relative only: rooted, no traversal, no query, no fragment. */\nconst ENDPOINT_PATTERN = /^\\/[A-Za-z0-9/{}_-]*$/;\n/** Exactly one `{id}` substitution and no other braces. */\nconst ID_ENDPOINT_PATTERN = /^[^{}]*\\{id\\}[^{}]*$/;\n\nconst GIT_PROVIDERS = [\"github\", \"gitlab\", \"bitbucket\"] as const;\n/**\n * The attribute semantics this host's edit dialog implements: the control it\n * renders per property and the requiredness it enforces. Admission pins a\n * declared attribute to exactly these, so an admitted manifest can never\n * promise a control, a requiredness, or (below) a minimum the form would\n * silently ignore.\n */\nconst HOST_ATTRIBUTES: Record<\n  AutomationAttributeName,\n  { type: InterfaceAttributeType; required: boolean }\n> = {\n  name: { type: \"text\", required: true },\n  prompt: { type: \"textarea\", required: false },\n  model: { type: \"llm-profile\", required: false },\n  timeout: { type: \"number\", required: false },\n  schedule: { type: \"schedule\", required: false },\n};\nconst ATTRIBUTE_NAMES = Object.keys(HOST_ATTRIBUTES);\nconst PLAIN_ENDPOINT_NAMES = [\n  \"list\",\n  \"health\",\n  \"capabilities\",\n  \"validate\",\n  \"createPrompt\",\n  \"createPlugin\",\n] as const;\nconst ID_ENDPOINT_NAMES = [\"detail\", \"dispatch\", \"runs\", \"tarball\"] as const;\n\nexport interface InterfaceValidationContext {\n  /** Ids of the published automation catalog, for the featured-list check. */\n  catalogIds: ReadonlySet<string>;\n  /** The routes this host has registrations for. A manifest must match them. */\n  mountedRoutes: InterfaceRoutes;\n}\n\nexport interface InterfaceValidationResult {\n  valid: boolean;\n  errors: string[];\n}\n\ntype Rec = Record<string, unknown>;\n\nfunction isRecord(value: unknown): value is Rec {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nclass InterfaceChecker {\n  readonly errors: string[] = [];\n\n  fail(path: string, reason: string): false {\n    this.errors.push(`${path}: ${reason}`);\n    return false;\n  }\n\n  /** Literal user-visible copy. Carries no markup. */\n  copy(value: unknown, path: string): boolean {\n    if (typeof value !== \"string\" || value.length === 0) {\n      return this.fail(path, \"must be a non-empty string\");\n    }\n    if (MARKUP_PATTERN.test(value)) {\n      return this.fail(path, \"must not contain markup\");\n    }\n    return true;\n  }\n\n  /** A closed object: every present key must be an expected one. */\n  closed(container: Rec, allowed: readonly string[], path: string): void {\n    Object.keys(container)\n      .filter((key) => !allowed.includes(key))\n      .forEach((key) => this.fail(`${path}.${key}`, \"is not allowed\"));\n  }\n\n  record(value: unknown, path: string): value is Rec {\n    if (isRecord(value)) return true;\n    this.fail(path, \"must be an object\");\n    return false;\n  }\n}\n\nfunction checkRoutes(\n  check: InterfaceChecker,\n  routes: unknown,\n  mounted: InterfaceRoutes,\n): void {\n  if (!check.record(routes, \"routes\")) return;\n  check.closed(routes, [\"list\", \"setup\", \"detail\"], \"routes\");\n\n  // The host serves what it has registrations for, so a declared route must be\n  // exactly the mounted shape — the manifest owns link construction, not the\n  // router table.\n  ([\"list\", \"setup\", \"detail\"] as const).forEach((name) => {\n    if (routes[name] !== mounted[name]) {\n      check.fail(`routes.${name}`, `must be \"${mounted[name]}\"`);\n    }\n  });\n}\n\nfunction checkNavigation(check: InterfaceChecker, navigation: unknown): void {\n  if (!check.record(navigation, \"navigation\")) return;\n  check.closed(navigation, [\"sidebar\", \"commandMenu\"], \"navigation\");\n\n  if (check.record(navigation.sidebar, \"navigation.sidebar\")) {\n    check.closed(navigation.sidebar, [\"label\"], \"navigation.sidebar\");\n    check.copy(navigation.sidebar.label, \"navigation.sidebar.label\");\n  }\n  if (check.record(navigation.commandMenu, \"navigation.commandMenu\")) {\n    const menu = navigation.commandMenu;\n    check.closed(\n      menu,\n      [\"title\", \"description\", \"keywords\"],\n      \"navigation.commandMenu\",\n    );\n    check.copy(menu.title, \"navigation.commandMenu.title\");\n    check.copy(menu.description, \"navigation.commandMenu.description\");\n    check.copy(menu.keywords, \"navigation.commandMenu.keywords\");\n  }\n}\n\nfunction checkPages(check: InterfaceChecker, pages: unknown): void {\n  if (!check.record(pages, \"pages\")) return;\n  check.closed(pages, [\"list\", \"detail\", \"edit\"], \"pages\");\n\n  if (check.record(pages.list, \"pages.list\")) {\n    check.closed(pages.list, [\"title\", \"subtitle\"], \"pages.list\");\n    check.copy(pages.list.title, \"pages.list.title\");\n    check.copy(pages.list.subtitle, \"pages.list.subtitle\");\n  }\n  if (check.record(pages.detail, \"pages.detail\")) {\n    check.closed(pages.detail, [\"backLabel\"], \"pages.detail\");\n    check.copy(pages.detail.backLabel, \"pages.detail.backLabel\");\n  }\n  if (check.record(pages.edit, \"pages.edit\")) {\n    check.closed(pages.edit, [\"title\"], \"pages.edit\");\n    check.copy(pages.edit.title, \"pages.edit.title\");\n  }\n}\n\nfunction checkAttribute(\n  check: InterfaceChecker,\n  host: { type: InterfaceAttributeType; required: boolean },\n  attribute: unknown,\n  path: string,\n): void {\n  if (!check.record(attribute, path)) return;\n  check.closed(\n    attribute,\n    [\"type\", \"label\", \"help\", \"required\", \"constraints\"],\n    path,\n  );\n\n  const { type, label, help, required, constraints } = attribute;\n  if (type !== host.type) {\n    check.fail(\n      `${path}.type`,\n      `must be \"${host.type}\", the control this host renders`,\n    );\n  }\n  check.copy(label, `${path}.label`);\n  if (help !== undefined) check.copy(help, `${path}.help`);\n  if (required !== host.required) {\n    check.fail(\n      `${path}.required`,\n      `must be ${host.required}, what this host enforces`,\n    );\n  }\n\n  if (constraints !== undefined) {\n    if (host.type !== \"number\") {\n      check.fail(\n        `${path}.constraints`,\n        \"is only allowed on a number attribute\",\n      );\n    } else if (check.record(constraints, `${path}.constraints`)) {\n      check.closed(constraints, [\"min\", \"max\"], `${path}.constraints`);\n      const { min, max } = constraints;\n      // The form validates a positive integer, i.e. an effective minimum of 1;\n      // any other declared minimum would be a promise it does not keep.\n      if (min !== undefined && min !== 1) {\n        check.fail(\n          `${path}.constraints.min`,\n          \"must be the 1 this host enforces\",\n        );\n      }\n      if (\n        max !== undefined &&\n        (!Number.isInteger(max) || (max as number) < 1)\n      ) {\n        check.fail(`${path}.constraints.max`, \"must be a positive integer\");\n      }\n    }\n  }\n}\n\nfunction checkAttributes(check: InterfaceChecker, attributes: unknown): void {\n  if (!check.record(attributes, \"attributes\")) return;\n  const names = Object.keys(attributes);\n  if (names.length === 0) {\n    check.fail(\"attributes\", \"must declare at least one attribute\");\n  }\n  names.forEach((name) => {\n    if (!ATTRIBUTE_NAMES.includes(name)) {\n      check.fail(`attributes.${name}`, \"is not a settable attribute\");\n      return;\n    }\n    checkAttribute(\n      check,\n      HOST_ATTRIBUTES[name as AutomationAttributeName],\n      attributes[name],\n      `attributes.${name}`,\n    );\n  });\n}\n\nfunction checkImportExport(\n  check: InterfaceChecker,\n  importExport: unknown,\n): void {\n  if (!check.record(importExport, \"importExport\")) return;\n  check.closed(\n    importExport,\n    [\"fileKind\", \"fileVersion\", \"filenameSuffix\", \"importDefaults\"],\n    \"importExport\",\n  );\n\n  const { fileKind, fileVersion, filenameSuffix, importDefaults } =\n    importExport;\n  if (typeof fileKind !== \"string\" || !FILE_KIND_PATTERN.test(fileKind)) {\n    check.fail(\"importExport.fileKind\", \"must be a lowercase slug\");\n  }\n  if (fileVersion !== 1) {\n    check.fail(\"importExport.fileVersion\", \"must be 1\");\n  }\n  if (\n    typeof filenameSuffix !== \"string\" ||\n    !FILENAME_SUFFIX_PATTERN.test(filenameSuffix)\n  ) {\n    check.fail(\"importExport.filenameSuffix\", \"must be a .json suffix\");\n  }\n  if (check.record(importDefaults, \"importExport.importDefaults\")) {\n    check.closed(\n      importDefaults,\n      [\"repoProvider\", \"placeholderEventSource\"],\n      \"importExport.importDefaults\",\n    );\n    if (\n      typeof importDefaults.repoProvider !== \"string\" ||\n      !(GIT_PROVIDERS as readonly string[]).includes(\n        importDefaults.repoProvider,\n      )\n    ) {\n      check.fail(\n        \"importExport.importDefaults.repoProvider\",\n        \"is not a supported provider\",\n      );\n    }\n    if (\n      typeof importDefaults.placeholderEventSource !== \"string\" ||\n      !EVENT_SOURCE_PATTERN.test(importDefaults.placeholderEventSource)\n    ) {\n      check.fail(\n        \"importExport.importDefaults.placeholderEventSource\",\n        \"must be a lowercase event source\",\n      );\n    }\n  }\n}\n\nfunction checkEndpoints(check: InterfaceChecker, endpoints: unknown): void {\n  if (!check.record(endpoints, \"endpoints\")) return;\n  const allowed = [...PLAIN_ENDPOINT_NAMES, ...ID_ENDPOINT_NAMES];\n  check.closed(endpoints, allowed, \"endpoints\");\n\n  const endpointAt = (name: string): string | null => {\n    const value = endpoints[name];\n    if (\n      typeof value !== \"string\" ||\n      !ENDPOINT_PATTERN.test(value) ||\n      value.includes(\"//\")\n    ) {\n      check.fail(`endpoints.${name}`, \"must be a rooted service-relative path\");\n      return null;\n    }\n    return value;\n  };\n\n  PLAIN_ENDPOINT_NAMES.forEach((name) => {\n    const value = endpointAt(name);\n    if (value !== null && /[{}]/.test(value)) {\n      check.fail(`endpoints.${name}`, \"must not carry a substitution\");\n    }\n  });\n  ID_ENDPOINT_NAMES.forEach((name) => {\n    const value = endpointAt(name);\n    if (value !== null && !ID_ENDPOINT_PATTERN.test(value)) {\n      check.fail(`endpoints.${name}`, \"must carry exactly one {id}\");\n    }\n  });\n}\n\nfunction checkSlugList(\n  check: InterfaceChecker,\n  value: unknown,\n  path: string,\n): string[] {\n  if (!Array.isArray(value) || value.length === 0) {\n    check.fail(path, \"must be a non-empty array\");\n    return [];\n  }\n  const slugs = value.filter((item): item is string => {\n    if (typeof item === \"string\" && SLUG_PATTERN.test(item)) return true;\n    check.fail(path, \"must contain only lowercase slugs\");\n    return false;\n  });\n  if (new Set(slugs).size !== slugs.length) {\n    check.fail(path, \"must not repeat an id\");\n  }\n  return slugs;\n}\n\nconst TOP_LEVEL_KEYS = [\n  \"version\",\n  \"routes\",\n  \"navigation\",\n  \"pages\",\n  \"docsUrl\",\n  \"attributes\",\n  \"importExport\",\n  \"endpoints\",\n  \"featuredAutomationIds\",\n  \"responderIntegrationIds\",\n];\n\n/**\n * Decide whether this host will act on a published interface manifest.\n *\n * The version is checked first and fails closed: a format this host does not\n * recognise is refused rather than interpreted with today's rules.\n */\nexport function validateInterfaceManifest(\n  candidate: unknown,\n  context: InterfaceValidationContext,\n): InterfaceValidationResult {\n  if (!isRecord(candidate)) {\n    return { valid: false, errors: [\"interface: must be an object\"] };\n  }\n  if (candidate.version !== INTERFACE_VERSION) {\n    return {\n      valid: false,\n      errors: [`interface.version: must be \"${INTERFACE_VERSION}\"`],\n    };\n  }\n\n  const check = new InterfaceChecker();\n  check.closed(candidate, TOP_LEVEL_KEYS, \"interface\");\n\n  checkRoutes(check, candidate.routes, context.mountedRoutes);\n  checkNavigation(check, candidate.navigation);\n  checkPages(check, candidate.pages);\n  if (\n    typeof candidate.docsUrl !== \"string\" ||\n    !candidate.docsUrl.startsWith(DOCS_URL_PREFIX)\n  ) {\n    check.fail(\"docsUrl\", `must start with ${DOCS_URL_PREFIX}`);\n  }\n  checkAttributes(check, candidate.attributes);\n  checkImportExport(check, candidate.importExport);\n  checkEndpoints(check, candidate.endpoints);\n\n  checkSlugList(\n    check,\n    candidate.featuredAutomationIds,\n    \"featuredAutomationIds\",\n  ).forEach((id) => {\n    if (!context.catalogIds.has(id)) {\n      check.fail(\"featuredAutomationIds\", `${id} is not a catalog entry`);\n    }\n  });\n  checkSlugList(\n    check,\n    candidate.responderIntegrationIds,\n    \"responderIntegrationIds\",\n  );\n\n  return { valid: check.errors.length === 0, errors: check.errors };\n}\n"],"mappings":";AAkBA,IAAM,IAAiB,eACjB,IAAe,4BAEf,IAAkB,+BAClB,IAAoB,kBACpB,IAA0B,wBAC1B,IAAuB,yBAEvB,IAAmB,yBAEnB,IAAsB,wBAEtB,IAAgB;CAAC;CAAU;CAAU;AAAW,GAQhD,IAGF;CACF,MAAM;EAAE,MAAM;EAAQ,UAAU;CAAK;CACrC,QAAQ;EAAE,MAAM;EAAY,UAAU;CAAM;CAC5C,OAAO;EAAE,MAAM;EAAe,UAAU;CAAM;CAC9C,SAAS;EAAE,MAAM;EAAU,UAAU;CAAM;CAC3C,UAAU;EAAE,MAAM;EAAY,UAAU;CAAM;AAChD,GACM,IAAkB,OAAO,KAAK,CAAe,GAC7C,IAAuB;CAC3B;CACA;CACA;CACA;CACA;CACA;AACF,GACM,IAAoB;CAAC;CAAU;CAAY;CAAQ;AAAS;AAgBlE,SAAS,EAAS,GAA8B;CAC9C,OAAO,OAAO,KAAU,cAAY,KAAkB,CAAC,MAAM,QAAQ,CAAK;AAC5E;AAEA,IAAM,IAAN,MAAuB;CACrB,SAA4B,CAAC;CAE7B,KAAK,GAAc,GAAuB;EAExC,OADA,KAAK,OAAO,KAAK,GAAG,EAAK,IAAI,GAAQ,GAC9B;CACT;CAGA,KAAK,GAAgB,GAAuB;EAO1C,OANI,OAAO,KAAU,YAAY,EAAM,WAAW,IACzC,KAAK,KAAK,GAAM,4BAA4B,IAEjD,EAAe,KAAK,CAAK,IACpB,KAAK,KAAK,GAAM,yBAAyB,IAE3C;CACT;CAGA,OAAO,GAAgB,GAA4B,GAAoB;EACrE,OAAO,KAAK,CAAS,EAClB,QAAQ,MAAQ,CAAC,EAAQ,SAAS,CAAG,CAAC,EACtC,SAAS,MAAQ,KAAK,KAAK,GAAG,EAAK,GAAG,KAAO,gBAAgB,CAAC;CACnE;CAEA,OAAO,GAAgB,GAA4B;EAGjD,OAFI,EAAS,CAAK,IAAU,MAC5B,KAAK,KAAK,GAAM,mBAAmB,GAC5B;CACT;AACF;AAEA,SAAS,EACP,GACA,GACA,GACM;CACD,EAAM,OAAO,GAAQ,QAAQ,MAClC,EAAM,OAAO,GAAQ;EAAC;EAAQ;EAAS;CAAQ,GAAG,QAAQ,GAK1D;EAAE;EAAQ;EAAS;CAAQ,EAAY,SAAS,MAAS;EACvD,AAAI,EAAO,OAAU,EAAQ,MAC3B,EAAM,KAAK,UAAU,KAAQ,YAAY,EAAQ,GAAM,EAAE;CAE7D,CAAC;AACH;AAEA,SAAS,EAAgB,GAAyB,GAA2B;CACtE,MAAM,OAAO,GAAY,YAAY,MAC1C,EAAM,OAAO,GAAY,CAAC,WAAW,aAAa,GAAG,YAAY,GAE7D,EAAM,OAAO,EAAW,SAAS,oBAAoB,MACvD,EAAM,OAAO,EAAW,SAAS,CAAC,OAAO,GAAG,oBAAoB,GAChE,EAAM,KAAK,EAAW,QAAQ,OAAO,0BAA0B,IAE7D,EAAM,OAAO,EAAW,aAAa,wBAAwB,IAAG;EAClE,IAAM,IAAO,EAAW;EAQxB,AAPA,EAAM,OACJ,GACA;GAAC;GAAS;GAAe;EAAU,GACnC,wBACF,GACA,EAAM,KAAK,EAAK,OAAO,8BAA8B,GACrD,EAAM,KAAK,EAAK,aAAa,oCAAoC,GACjE,EAAM,KAAK,EAAK,UAAU,iCAAiC;CAC7D;AACF;AAEA,SAAS,EAAW,GAAyB,GAAsB;CAC5D,EAAM,OAAO,GAAO,OAAO,MAChC,EAAM,OAAO,GAAO;EAAC;EAAQ;EAAU;CAAM,GAAG,OAAO,GAEnD,EAAM,OAAO,EAAM,MAAM,YAAY,MACvC,EAAM,OAAO,EAAM,MAAM,CAAC,SAAS,UAAU,GAAG,YAAY,GAC5D,EAAM,KAAK,EAAM,KAAK,OAAO,kBAAkB,GAC/C,EAAM,KAAK,EAAM,KAAK,UAAU,qBAAqB,IAEnD,EAAM,OAAO,EAAM,QAAQ,cAAc,MAC3C,EAAM,OAAO,EAAM,QAAQ,CAAC,WAAW,GAAG,cAAc,GACxD,EAAM,KAAK,EAAM,OAAO,WAAW,wBAAwB,IAEzD,EAAM,OAAO,EAAM,MAAM,YAAY,MACvC,EAAM,OAAO,EAAM,MAAM,CAAC,OAAO,GAAG,YAAY,GAChD,EAAM,KAAK,EAAM,KAAK,OAAO,kBAAkB;AAEnD;AAEA,SAAS,EACP,GACA,GACA,GACA,GACM;CACN,IAAI,CAAC,EAAM,OAAO,GAAW,CAAI,GAAG;CACpC,EAAM,OACJ,GACA;EAAC;EAAQ;EAAS;EAAQ;EAAY;CAAa,GACnD,CACF;CAEA,IAAM,EAAE,SAAM,UAAO,SAAM,aAAU,mBAAgB;CAgBrD,IAfI,MAAS,EAAK,QAChB,EAAM,KACJ,GAAG,EAAK,QACR,YAAY,EAAK,KAAK,iCACxB,GAEF,EAAM,KAAK,GAAO,GAAG,EAAK,OAAO,GAC7B,MAAS,KAAA,KAAW,EAAM,KAAK,GAAM,GAAG,EAAK,MAAM,GACnD,MAAa,EAAK,YACpB,EAAM,KACJ,GAAG,EAAK,YACR,WAAW,EAAK,SAAS,0BAC3B,GAGE,MAAgB,KAAA;MACd,EAAK,SAAS,UAChB,EAAM,KACJ,GAAG,EAAK,eACR,uCACF;OACK,IAAI,EAAM,OAAO,GAAa,GAAG,EAAK,aAAa,GAAG;GAC3D,EAAM,OAAO,GAAa,CAAC,OAAO,KAAK,GAAG,GAAG,EAAK,aAAa;GAC/D,IAAM,EAAE,QAAK,WAAQ;GASrB,AANI,MAAQ,KAAA,KAAa,MAAQ,KAC/B,EAAM,KACJ,GAAG,EAAK,mBACR,kCACF,GAGA,MAAQ,KAAA,MACP,CAAC,OAAO,UAAU,CAAG,KAAM,IAAiB,MAE7C,EAAM,KAAK,GAAG,EAAK,mBAAmB,4BAA4B;EAEtE;;AAEJ;AAEA,SAAS,EAAgB,GAAyB,GAA2B;CAC3E,IAAI,CAAC,EAAM,OAAO,GAAY,YAAY,GAAG;CAC7C,IAAM,IAAQ,OAAO,KAAK,CAAU;CAIpC,AAHI,EAAM,WAAW,KACnB,EAAM,KAAK,cAAc,qCAAqC,GAEhE,EAAM,SAAS,MAAS;EACtB,IAAI,CAAC,EAAgB,SAAS,CAAI,GAAG;GACnC,EAAM,KAAK,cAAc,KAAQ,6BAA6B;GAC9D;EACF;EACA,EACE,GACA,EAAgB,IAChB,EAAW,IACX,cAAc,GAChB;CACF,CAAC;AACH;AAEA,SAAS,EACP,GACA,GACM;CACN,IAAI,CAAC,EAAM,OAAO,GAAc,cAAc,GAAG;CACjD,EAAM,OACJ,GACA;EAAC;EAAY;EAAe;EAAkB;CAAgB,GAC9D,cACF;CAEA,IAAM,EAAE,aAAU,gBAAa,mBAAgB,sBAC7C;CAaF,CAZI,OAAO,KAAa,YAAY,CAAC,EAAkB,KAAK,CAAQ,MAClE,EAAM,KAAK,yBAAyB,0BAA0B,GAE5D,MAAgB,KAClB,EAAM,KAAK,4BAA4B,WAAW,IAGlD,OAAO,KAAmB,YAC1B,CAAC,EAAwB,KAAK,CAAc,MAE5C,EAAM,KAAK,+BAA+B,wBAAwB,GAEhE,EAAM,OAAO,GAAgB,6BAA6B,MAC5D,EAAM,OACJ,GACA,CAAC,gBAAgB,wBAAwB,GACzC,6BACF,IAEE,OAAO,EAAe,gBAAiB,YACvC,CAAE,EAAoC,SACpC,EAAe,YACjB,MAEA,EAAM,KACJ,4CACA,6BACF,IAGA,OAAO,EAAe,0BAA2B,YACjD,CAAC,EAAqB,KAAK,EAAe,sBAAsB,MAEhE,EAAM,KACJ,sDACA,kCACF;AAGN;AAEA,SAAS,EAAe,GAAyB,GAA0B;CACzE,IAAI,CAAC,EAAM,OAAO,GAAW,WAAW,GAAG;CAC3C,IAAM,IAAU,CAAC,GAAG,GAAsB,GAAG,CAAiB;CAC9D,EAAM,OAAO,GAAW,GAAS,WAAW;CAE5C,IAAM,KAAc,MAAgC;EAClD,IAAM,IAAQ,EAAU;EASxB,OAPE,OAAO,KAAU,YACjB,CAAC,EAAiB,KAAK,CAAK,KAC5B,EAAM,SAAS,IAAI,KAEnB,EAAM,KAAK,aAAa,KAAQ,wCAAwC,GACjE,QAEF;CACT;CAQA,AANA,EAAqB,SAAS,MAAS;EACrC,IAAM,IAAQ,EAAW,CAAI;EAC7B,AAAI,MAAU,QAAQ,OAAO,KAAK,CAAK,KACrC,EAAM,KAAK,aAAa,KAAQ,+BAA+B;CAEnE,CAAC,GACD,EAAkB,SAAS,MAAS;EAClC,IAAM,IAAQ,EAAW,CAAI;EAC7B,AAAI,MAAU,QAAQ,CAAC,EAAoB,KAAK,CAAK,KACnD,EAAM,KAAK,aAAa,KAAQ,6BAA6B;CAEjE,CAAC;AACH;AAEA,SAAS,EACP,GACA,GACA,GACU;CACV,IAAI,CAAC,MAAM,QAAQ,CAAK,KAAK,EAAM,WAAW,GAE5C,OADA,EAAM,KAAK,GAAM,2BAA2B,GACrC,CAAC;CAEV,IAAM,IAAQ,EAAM,QAAQ,MACtB,OAAO,KAAS,YAAY,EAAa,KAAK,CAAI,IAAU,MAChE,EAAM,KAAK,GAAM,mCAAmC,GAC7C,GACR;CAID,OAHI,IAAI,IAAI,CAAK,EAAE,SAAS,EAAM,UAChC,EAAM,KAAK,GAAM,uBAAuB,GAEnC;AACT;AAEA,IAAM,IAAiB;CACrB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AACF;AAQA,SAAgB,EACd,GACA,GAC2B;CAC3B,IAAI,CAAC,EAAS,CAAS,GACrB,OAAO;EAAE,OAAO;EAAO,QAAQ,CAAC,8BAA8B;CAAE;CAElE,IAAI,EAAU,YAAA,OACZ,OAAO;EACL,OAAO;EACP,QAAQ,CAAC,oCAAmD;CAC9D;CAGF,IAAM,IAAQ,IAAI,EAAiB;CA+BnC,OA9BA,EAAM,OAAO,GAAW,GAAgB,WAAW,GAEnD,EAAY,GAAO,EAAU,QAAQ,EAAQ,aAAa,GAC1D,EAAgB,GAAO,EAAU,UAAU,GAC3C,EAAW,GAAO,EAAU,KAAK,IAE/B,OAAO,EAAU,WAAY,YAC7B,CAAC,EAAU,QAAQ,WAAW,CAAe,MAE7C,EAAM,KAAK,WAAW,mBAAmB,GAAiB,GAE5D,EAAgB,GAAO,EAAU,UAAU,GAC3C,EAAkB,GAAO,EAAU,YAAY,GAC/C,EAAe,GAAO,EAAU,SAAS,GAEzC,EACE,GACA,EAAU,uBACV,uBACF,EAAE,SAAS,MAAO;EAChB,AAAK,EAAQ,WAAW,IAAI,CAAE,KAC5B,EAAM,KAAK,yBAAyB,GAAG,EAAG,wBAAwB;CAEtE,CAAC,GACD,EACE,GACA,EAAU,yBACV,yBACF,GAEO;EAAE,OAAO,EAAM,OAAO,WAAW;EAAG,QAAQ,EAAM;CAAO;AAClE"}

package/dist/manifests/manifest-actions.d.ts

@@ -0,0 +1,15 @@
+/**
+ * The action bridge — the only channel through which a manifest can make this
+ * host *do* something.
+ *
+ * A manifest is data from another repository, so it never describes a request.
+ * It chooses between the two outcomes this host offers, and it chooses by
+ * declaring a `mode`: a direct entry produces a create request the host derives,
+ * an assisted entry hands setup to a conversation.
+ */
+import type { SetupEntry, SetupFormValues, SetupRequestBody } from "./types";
+export interface SetupActionResult {
+    /** The created resource, or the conversation that will finish setup. */
+    response: Record<string, unknown>;
+}
+export declare function useSetupAction(): (entry: SetupEntry, values: SetupFormValues, payload: SetupRequestBody | null) => Promise<SetupActionResult>;

package/dist/manifests/manifest-capabilities.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Stage 2 — decide whether a deployment can run what a manifest requires.
+ *
+ * The manifest states what it needs — the features under `requires.features`,
+ * and, implicitly, the trigger kinds its form declares. The deployment states
+ * what it supports. Neither side is interpreted here beyond set membership, so
+ * this stays neutral about what any particular capability means.
+ */
+import type { DeploymentCapabilities, SetupEntry } from "./types";
+/**
+ * "unknown" is a real outcome, not an error: a deployment that cannot be asked
+ * must not be treated as one that answered no.
+ */
+export type SetupCapabilitySupport = boolean | "unknown";
+export interface SetupCapabilityAssessment {
+    supported: boolean;
+    /**
+     * Requirement names the deployment did not report, so a block can say which
+     * ones rather than only that there were some. Empty when a deployment that
+     * reports it is not accepting work blocks the entry, because then no single
+     * requirement is the reason.
+     */
+    unmet: string[];
+}
+export declare function assessCapabilityRequirements(entry: SetupEntry, reported: DeploymentCapabilities): SetupCapabilityAssessment;

package/dist/manifests/manifest-error-map.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Translate service-reported errors back to the form field that produced them.
+ *
+ * The host validates and submits the *derived payload*, so errors come back
+ * addressed by payload path (`trigger.schedule`) rather than by form field
+ * (`schedule`). The reverse lookup is derived from the same builder that made
+ * the payload; the mapping is lossy by nature, since one payload value can be
+ * built from several fields.
+ */
+import type { SetupRequestBody } from "./types";
+/** An error the service reported, addressed by payload path where it gave one. */
+export interface ManifestServiceError {
+    path: string;
+    message: string;
+}
+export interface MappedManifestErrors {
+    /** Keyed by form field name. */
+    fieldErrors: Record<string, string>;
+    /** Errors with no field to attach to; shown against the form as a whole. */
+    formErrors: string[];
+}
+/**
+ * Turn a service `loc` array into a path into the payload actually sent.
+ *
+ * A validation framework may address a value through segments that are not keys
+ * of the request body — a discriminated union reports
+ * `["body","trigger","cron","schedule"]` for a body whose trigger has no `cron`
+ * key. Walking the payload and skipping segments that do not resolve reduces
+ * that to `trigger.schedule` without knowing anything about the payload's
+ * meaning.
+ */
+export declare function locToPayloadPath(loc: readonly (string | number)[], payload: unknown): string;
+/**
+ * Read errors out of a service response body, whichever of the two shapes it
+ * uses: a preflight result keyed by field, or a validation failure keyed by
+ * `loc`.
+ */
+export declare function normalizeServiceErrors(body: unknown, payload: SetupRequestBody | null): ManifestServiceError[];
+/** Apply the derived payload-path map, falling back to a form-level error. */
+export declare function mapServiceErrors(errors: readonly ManifestServiceError[], errorMap: Record<string, string[]>): MappedManifestErrors;

package/dist/manifests/manifest-local-validation.d.ts

@@ -0,0 +1,56 @@
+/**
+ * The form model, and the host's own check of what the user typed into it.
+ *
+ * Local validation is a convenience, not the authority: it is instant and needs
+ * no round trip, so it catches empty required fields and obvious typos.
+ * Deployment-specific questions ("is a one-minute schedule allowed here?")
+ * belong to preflight, which is authoritative.
+ *
+ * Errors are returned as codes rather than sentences so the host can render
+ * them through its own translations; only manifest-authored copy is literal.
+ */
+import type { DeploymentCapabilities, SetupBlock, SetupFieldOption, SetupFormField, SetupFormFields, SetupFormValues } from "./types";
+export type SetupFieldError = {
+    code: "required";
+} | {
+    code: "minLength";
+    length: number;
+} | {
+    code: "maxLength";
+    length: number;
+} | {
+    code: "invalidOption";
+} | {
+    code: "unsafeExpressionLiteral";
+};
+export type SetupFieldErrors = Record<string, SetupFieldError>;
+/** Field constraints supplied by the deployment rather than by the manifest. */
+export interface SetupFieldOverride {
+    options?: SetupFieldOption[];
+}
+export type SetupFieldOverrides = Record<string, SetupFieldOverride>;
+/**
+ * Every input the form declares, keyed by name, whichever half it is in.
+ *
+ * Trigger inputs come first so the user is asked when it runs before what it
+ * runs on, and so every derived view of the form keeps that order. Admission
+ * rejects a name declared in both halves, so the merge cannot lose a field.
+ */
+export declare function collectFields(setup: SetupBlock): SetupFormFields;
+/**
+ * Feed deployment values into form field constraints, so the form offers only
+ * what the deployment accepts.
+ *
+ * A `timezone` field is the case that needs it: a manifest declares no options
+ * for one, because the accepted zones belong to the deployment. The cron
+ * interval floor is deliberately left to preflight — the deployment owns that
+ * limit and states it in its own words, and a local approximation would
+ * pre-empt the authoritative message with a worse one.
+ */
+export declare function resolveFieldOverrides(setup: SetupBlock, capabilities: DeploymentCapabilities | null): SetupFieldOverrides;
+/** The options a field offers, after deployment constraints are applied. */
+export declare function getFieldOptions(name: string, field: SetupFormField, overrides?: SetupFieldOverrides): SetupFieldOption[];
+/** Initial form state: every declared field, seeded with its declared default. */
+export declare function getInitialFormValues(setup: SetupBlock): SetupFormValues;
+/** Check every declared field. Returns only the fields that failed. */
+export declare function validateFormValues(setup: SetupBlock, values: SetupFormValues, overrides?: SetupFieldOverrides): SetupFieldErrors;

package/dist/manifests/manifest-registry.cjs

@@ -0,0 +1,2 @@
+require("../_virtual/_rolldown/runtime.cjs");const e=require("./manifest-validation.cjs");function t(t){let n=[],r=new Map;return t.forEach(t=>{if(!e.hasSetupBlock(t))return;let{valid:i,errors:a}=e.validateSetupEntry(t);if(!i){console.warn(`Rejected a setup manifest:`,a.join(`; `));return}let o=t;if(r.has(o.id)){console.warn(`Rejected a setup manifest: id "${o.id}" is already registered`);return}n.push(o),r.set(o.id,o)}),{entries:n,findById:e=>r.get(e)??null}}exports.createSetupRegistry=t;
+//# sourceMappingURL=manifest-registry.cjs.map

package/dist/manifests/manifest-registry.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-registry.cjs","names":[],"sources":["../../src/manifests/manifest-registry.ts"],"sourcesContent":["/**\n * Registry of admitted setup manifests.\n *\n * Stage 1 of the setup flow: load the catalog, decide which entries this host\n * will act on, and index the survivors by id. An entry that fails admission is\n * dropped entirely rather than rendered partially, because everything\n * downstream treats its content as instructions.\n */\n\nimport { hasSetupBlock, validateSetupEntry } from \"./manifest-validation\";\nimport type { SetupEntry } from \"./types\";\n\nexport interface SetupRegistry {\n  /** Entries this host has admitted, in source order. */\n  readonly entries: readonly SetupEntry[];\n  findById(id: string): SetupEntry | null;\n}\n\nexport function createSetupRegistry(\n  candidates: readonly unknown[],\n): SetupRegistry {\n  const entries: SetupEntry[] = [];\n  const byId = new Map<string, SetupEntry>();\n\n  candidates.forEach((candidate) => {\n    // A catalog entry without a setup block is a card, not a setup experience.\n    // That is the normal case, so it is skipped rather than reported.\n    if (!hasSetupBlock(candidate)) return;\n\n    const { valid, errors } = validateSetupEntry(candidate);\n    if (!valid) {\n      console.warn(\"Rejected a setup manifest:\", errors.join(\"; \"));\n      return;\n    }\n\n    const entry = candidate as SetupEntry;\n    if (byId.has(entry.id)) {\n      console.warn(\n        `Rejected a setup manifest: id \"${entry.id}\" is already registered`,\n      );\n      return;\n    }\n\n    entries.push(entry);\n    byId.set(entry.id, entry);\n  });\n\n  return {\n    entries,\n    findById: (id) => byId.get(id) ?? null,\n  };\n}\n"],"mappings":"0FAkBA,SAAgB,EACd,EACe,CACf,IAAM,EAAwB,CAAC,EACzB,EAAO,IAAI,IAyBjB,OAvBA,EAAW,QAAS,GAAc,CAGhC,GAAI,CAAC,EAAA,cAAc,CAAS,EAAG,OAE/B,GAAM,CAAE,QAAO,UAAW,EAAA,mBAAmB,CAAS,EACtD,GAAI,CAAC,EAAO,CACV,QAAQ,KAAK,6BAA8B,EAAO,KAAK,IAAI,CAAC,EAC5D,MACF,CAEA,IAAM,EAAQ,EACd,GAAI,EAAK,IAAI,EAAM,EAAE,EAAG,CACtB,QAAQ,KACN,kCAAkC,EAAM,GAAG,wBAC7C,EACA,MACF,CAEA,EAAQ,KAAK,CAAK,EAClB,EAAK,IAAI,EAAM,GAAI,CAAK,CAC1B,CAAC,EAEM,CACL,UACA,SAAW,GAAO,EAAK,IAAI,CAAE,GAAK,IACpC,CACF"}

package/dist/manifests/manifest-registry.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Registry of admitted setup manifests.
+ *
+ * Stage 1 of the setup flow: load the catalog, decide which entries this host
+ * will act on, and index the survivors by id. An entry that fails admission is
+ * dropped entirely rather than rendered partially, because everything
+ * downstream treats its content as instructions.
+ */
+import type { SetupEntry } from "./types";
+export interface SetupRegistry {
+    /** Entries this host has admitted, in source order. */
+    readonly entries: readonly SetupEntry[];
+    findById(id: string): SetupEntry | null;
+}
+export declare function createSetupRegistry(candidates: readonly unknown[]): SetupRegistry;

package/dist/manifests/manifest-registry.js

@@ -0,0 +1,26 @@
+import { hasSetupBlock as e, validateSetupEntry as t } from "./manifest-validation.js";
+//#region src/manifests/manifest-registry.ts
+function n(n) {
+	let r = [], i = /* @__PURE__ */ new Map();
+	return n.forEach((n) => {
+		if (!e(n)) return;
+		let { valid: a, errors: o } = t(n);
+		if (!a) {
+			console.warn("Rejected a setup manifest:", o.join("; "));
+			return;
+		}
+		let s = n;
+		if (i.has(s.id)) {
+			console.warn(`Rejected a setup manifest: id "${s.id}" is already registered`);
+			return;
+		}
+		r.push(s), i.set(s.id, s);
+	}), {
+		entries: r,
+		findById: (e) => i.get(e) ?? null
+	};
+}
+//#endregion
+export { n as createSetupRegistry };
+
+//# sourceMappingURL=manifest-registry.js.map

package/dist/manifests/manifest-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-registry.js","names":[],"sources":["../../src/manifests/manifest-registry.ts"],"sourcesContent":["/**\n * Registry of admitted setup manifests.\n *\n * Stage 1 of the setup flow: load the catalog, decide which entries this host\n * will act on, and index the survivors by id. An entry that fails admission is\n * dropped entirely rather than rendered partially, because everything\n * downstream treats its content as instructions.\n */\n\nimport { hasSetupBlock, validateSetupEntry } from \"./manifest-validation\";\nimport type { SetupEntry } from \"./types\";\n\nexport interface SetupRegistry {\n  /** Entries this host has admitted, in source order. */\n  readonly entries: readonly SetupEntry[];\n  findById(id: string): SetupEntry | null;\n}\n\nexport function createSetupRegistry(\n  candidates: readonly unknown[],\n): SetupRegistry {\n  const entries: SetupEntry[] = [];\n  const byId = new Map<string, SetupEntry>();\n\n  candidates.forEach((candidate) => {\n    // A catalog entry without a setup block is a card, not a setup experience.\n    // That is the normal case, so it is skipped rather than reported.\n    if (!hasSetupBlock(candidate)) return;\n\n    const { valid, errors } = validateSetupEntry(candidate);\n    if (!valid) {\n      console.warn(\"Rejected a setup manifest:\", errors.join(\"; \"));\n      return;\n    }\n\n    const entry = candidate as SetupEntry;\n    if (byId.has(entry.id)) {\n      console.warn(\n        `Rejected a setup manifest: id \"${entry.id}\" is already registered`,\n      );\n      return;\n    }\n\n    entries.push(entry);\n    byId.set(entry.id, entry);\n  });\n\n  return {\n    entries,\n    findById: (id) => byId.get(id) ?? null,\n  };\n}\n"],"mappings":";;AAkBA,SAAgB,EACd,GACe;CACf,IAAM,IAAwB,CAAC,GACzB,oBAAO,IAAI,IAAwB;CAyBzC,OAvBA,EAAW,SAAS,MAAc;EAGhC,IAAI,CAAC,EAAc,CAAS,GAAG;EAE/B,IAAM,EAAE,UAAO,cAAW,EAAmB,CAAS;EACtD,IAAI,CAAC,GAAO;GACV,QAAQ,KAAK,8BAA8B,EAAO,KAAK,IAAI,CAAC;GAC5D;EACF;EAEA,IAAM,IAAQ;EACd,IAAI,EAAK,IAAI,EAAM,EAAE,GAAG;GACtB,QAAQ,KACN,kCAAkC,EAAM,GAAG,wBAC7C;GACA;EACF;EAGA,AADA,EAAQ,KAAK,CAAK,GAClB,EAAK,IAAI,EAAM,IAAI,CAAK;CAC1B,CAAC,GAEM;EACL;EACA,WAAW,MAAO,EAAK,IAAI,CAAE,KAAK;CACpC;AACF"}

package/dist/manifests/manifest-sources.cjs

@@ -0,0 +1,2 @@
+require("../_virtual/_rolldown/runtime.cjs");const e=require("../node_modules/@openhands/extensions/automations/index.cjs");require("./manifest-registry.cjs").createSetupRegistry(e.default);var t=e.automations_exports,n=`AUTOMATION_INTERFACE`in t?t.AUTOMATION_INTERFACE:void 0;exports.AUTOMATION_INTERFACE_CANDIDATE=n;
+//# sourceMappingURL=manifest-sources.cjs.map

package/dist/manifests/manifest-sources.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-sources.cjs","names":[],"sources":["../../src/manifests/manifest-sources.ts"],"sourcesContent":["/**\n * The one place that decides which manifests this host is offered.\n *\n * Setup manifests are published by `@openhands/extensions` as an optional\n * `setup` block on a catalog entry, so the catalog is the whole source. Entries\n * without one are skipped, which means the pinned package deciding to ship them\n * is the only step left — there is no wiring to add here.\n *\n * The catalog is passed as `unknown[]` on purpose: admission is a trust\n * boundary, so the host validates the published data rather than trusting the\n * types that shipped beside it.\n */\n\nimport * as automationsModule from \"@openhands/extensions/automations\";\nimport { AUTOMATION_CATALOG } from \"@openhands/extensions/automations\";\nimport { createSetupRegistry, type SetupRegistry } from \"./manifest-registry\";\n\nexport const SETUP_REGISTRY: SetupRegistry = createSetupRegistry(\n  AUTOMATION_CATALOG as readonly unknown[],\n);\n\n/**\n * The interface manifest the pinned package publishes, if any. It is read off\n * the module namespace so a package that predates the export yields\n * `undefined` rather than a build error; admission in\n * `automation-interface.ts` decides what to do with it.\n */\nconst automationsExports: object = automationsModule;\nexport const AUTOMATION_INTERFACE_CANDIDATE: unknown =\n  \"AUTOMATION_INTERFACE\" in automationsExports\n    ? automationsExports.AUTOMATION_INTERFACE\n    : undefined;\n"],"mappings":"6JAiB6C,EAAA,oBAC3C,EAAA,OACF,EAQA,IAAM,EAA6B,EAAA,oBACtB,EACX,yBAA0B,EACtB,EAAmB,qBACnB,IAAA"}

package/dist/manifests/manifest-sources.d.ts

@@ -0,0 +1,15 @@
+/**
+ * The one place that decides which manifests this host is offered.
+ *
+ * Setup manifests are published by `@openhands/extensions` as an optional
+ * `setup` block on a catalog entry, so the catalog is the whole source. Entries
+ * without one are skipped, which means the pinned package deciding to ship them
+ * is the only step left — there is no wiring to add here.
+ *
+ * The catalog is passed as `unknown[]` on purpose: admission is a trust
+ * boundary, so the host validates the published data rather than trusting the
+ * types that shipped beside it.
+ */
+import { type SetupRegistry } from "./manifest-registry";
+export declare const SETUP_REGISTRY: SetupRegistry;
+export declare const AUTOMATION_INTERFACE_CANDIDATE: unknown;

package/dist/manifests/manifest-sources.js

@@ -0,0 +1,8 @@
+import e, { automations_exports as t } from "../node_modules/@openhands/extensions/automations/index.js";
+import { createSetupRegistry as n } from "./manifest-registry.js";
+n(e);
+var r = t, i = "AUTOMATION_INTERFACE" in r ? r.AUTOMATION_INTERFACE : void 0;
+//#endregion
+export { i as AUTOMATION_INTERFACE_CANDIDATE };
+
+//# sourceMappingURL=manifest-sources.js.map

package/dist/manifests/manifest-sources.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-sources.js","names":[],"sources":["../../src/manifests/manifest-sources.ts"],"sourcesContent":["/**\n * The one place that decides which manifests this host is offered.\n *\n * Setup manifests are published by `@openhands/extensions` as an optional\n * `setup` block on a catalog entry, so the catalog is the whole source. Entries\n * without one are skipped, which means the pinned package deciding to ship them\n * is the only step left — there is no wiring to add here.\n *\n * The catalog is passed as `unknown[]` on purpose: admission is a trust\n * boundary, so the host validates the published data rather than trusting the\n * types that shipped beside it.\n */\n\nimport * as automationsModule from \"@openhands/extensions/automations\";\nimport { AUTOMATION_CATALOG } from \"@openhands/extensions/automations\";\nimport { createSetupRegistry, type SetupRegistry } from \"./manifest-registry\";\n\nexport const SETUP_REGISTRY: SetupRegistry = createSetupRegistry(\n  AUTOMATION_CATALOG as readonly unknown[],\n);\n\n/**\n * The interface manifest the pinned package publishes, if any. It is read off\n * the module namespace so a package that predates the export yields\n * `undefined` rather than a build error; admission in\n * `automation-interface.ts` decides what to do with it.\n */\nconst automationsExports: object = automationsModule;\nexport const AUTOMATION_INTERFACE_CANDIDATE: unknown =\n  \"AUTOMATION_INTERFACE\" in automationsExports\n    ? automationsExports.AUTOMATION_INTERFACE\n    : undefined;\n"],"mappings":";;AAiB6C,EAC3C,CACF;AAQA,IAAM,IAA6B,GACtB,IACX,0BAA0B,IACtB,EAAmB,uBACnB,KAAA"}

package/dist/manifests/manifest-template.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Placeholder interpolation for setup copy and request-body strings.
+ *
+ * A setup block declares what the user sees and the two request strings the
+ * host cannot derive as templates over a small set of namespaces. Interpolation
+ * is plain substitution — there is no expression language, so a setup block
+ * cannot express behavior here.
+ */
+import type { SetupEntry, SetupFormValues } from "./types";
+export interface SetupScope {
+    form?: SetupFormValues;
+    /** The catalog entry the setup block belongs to. */
+    automation?: SetupEntry;
+}
+/** Walk a dotted path through plain objects. */
+export declare function getByPath(source: unknown, path: string): unknown;
+/** Substitute placeholders inside a template string. */
+export declare function interpolateText(template: string, scope: SetupScope): string;

package/dist/manifests/manifest-validation.cjs

@@ -0,0 +1,2 @@
+require("../_virtual/_rolldown/runtime.cjs");const e=require("./types.cjs");var t=/^[a-z0-9]+(-[a-z0-9]+)*$/,n=/^[a-z][A-Za-z0-9]*$/,r=/<[A-Za-z/!]/,i=RegExp(`\\{\\{(?!(?:${e.SETUP_PLACEHOLDER_NAMESPACES.join(`|`)})\\.[A-Za-z0-9_.]+\\}\\})`),a=[`direct`,`assisted`],o=[`text`,`textarea`,`select`,`cron`,`timezone`,`repo-picker`],s=[`github`,`gitlab`,`bitbucket`],c=[`cron`,`event`],l=[`safeExpressionLiteral`],u=2e3;function d(e){return typeof e==`object`&&!!e&&!Array.isArray(e)}function f(e,t){return typeof e==`string`&&t.includes(e)}function p(e,t){return typeof e==`number`&&Number.isInteger(e)&&e>=t}var m=class{errors=[];fail(e,t){return this.errors.push(`${e}: ${t}`),!1}copy(e,t){return typeof e!=`string`||e.length===0?this.fail(t,`must be a non-empty string`):r.test(e)?this.fail(t,`must not contain markup`):!0}placeholders(e,t){return i.test(e)?this.fail(t,`uses an unknown placeholder namespace`):!0}templateCopy(e,t){return this.copy(e,t)&&this.placeholders(e,t)}templateValue(e,t){return typeof e!=`string`||e.length===0?this.fail(t,`must be a non-empty string`):this.placeholders(e,t)}absent(e,t,n,r){return t in e?this.fail(`${n}.${t}`,r):!0}};function h(e,t){if(!d(t)){e.fail(`requires`,`must be an object`);return}let{integrations:n,features:r}=t;!d(n)||Object.keys(n).length===0?e.fail(`requires.integrations`,`must be a non-empty object`):Object.entries(n).forEach(([t,n])=>{let r=`requires.integrations.${t}`;if(!d(n)){e.fail(r,`must be an object`);return}e.copy(n.message,`${r}.message`),`required`in n&&n.required!==!1&&e.fail(`${r}.required`,`may only be false`);let i=[`message`,`required`];Object.keys(n).filter(e=>!i.includes(e)).forEach(t=>e.fail(`${r}.${t}`,`is not allowed`))}),r!==void 0&&(!Array.isArray(r)||r.length===0?e.fail(`requires.features`,`must be a non-empty array`):r.forEach((t,n)=>{(typeof t!=`string`||t.length===0)&&e.fail(`requires.features[${n}]`,`must be a non-empty string`)}))}function g(e,t,n){if(!d(t)||Object.keys(t).length===0){e.fail(n,`must be a non-empty object`);return}let{minLength:r,maxLength:i,format:a}=t;r!==void 0&&!p(r,0)&&e.fail(`${n}.minLength`,`must be a non-negative integer`),i!==void 0&&!p(i,1)&&e.fail(`${n}.maxLength`,`must be a positive integer`),a!==void 0&&!f(a,l)&&e.fail(`${n}.format`,`is not a supported format`)}function _(e,t,n){if(!d(t)){e.fail(n,`must be an object`);return}let{type:r,label:i,help:a,placeholder:c,required:l,provider:u,options:p}=t;f(r,o)||e.fail(`${n}.type`,`is not a supported field type`),e.copy(i,`${n}.label`),e.copy(a,`${n}.help`),c!==void 0&&e.copy(c,`${n}.placeholder`),t.default!==void 0&&typeof t.default!=`string`&&e.fail(`${n}.default`,`must be a string`),typeof l!=`boolean`&&e.fail(`${n}.required`,`must be a boolean`),u!==void 0&&!f(u,s)&&e.fail(`${n}.provider`,`is not a supported provider`),r===`repo-picker`&&u===void 0&&e.fail(`${n}.provider`,`is required for a repository field`),p!==void 0&&(r===`select`?!Array.isArray(p)||p.length===0?e.fail(`${n}.options`,`must be a non-empty array`):p.forEach((t,r)=>{let i=`${n}.options[${r}]`;if(!d(t)){e.fail(i,`must be an object`);return}(typeof t.value!=`string`||t.value.length===0)&&e.fail(`${i}.value`,`must be a non-empty string`),e.copy(t.label,`${i}.label`)}):e.fail(`${n}.options`,`is only allowed on a select field`)),t.constraints!==void 0&&g(e,t.constraints,`${n}.constraints`)}function v(e,t,r){return!d(t)||Object.keys(t).length===0?(e.fail(r,`must be a non-empty object`),[]):Object.entries(t).map(([t,i])=>(n.test(t)||e.fail(`${r}.${t}`,`is not a valid field name`),_(e,i,`${r}.${t}`),t))}function y(e,t){if(!d(t))return e.fail(`setup.form`,`must be an object`),[];t.note!==void 0&&e.copy(t.note,`setup.form.note`);let n=v(e,t.args,`setup.form.args`),r=[];t.triggers!==void 0&&(!d(t.triggers)||Object.keys(t.triggers).length===0?e.fail(`setup.form.triggers`,`must be a non-empty object`):Object.entries(t.triggers).forEach(([t,i])=>{if(!f(t,c)){e.fail(`setup.form.triggers.${t}`,`is not a trigger kind`);return}r.push(t),n.push(...v(e,i,`setup.form.triggers.${t}`))}));let i=n.filter((e,t)=>n.indexOf(e)!==t);return Array.from(new Set(i)).forEach(t=>e.fail(`setup.form.${t}`,`is declared more than once`)),r}function b(e){return d(e)?[e.args,...Object.values(d(e.triggers)?e.triggers:{})].some(e=>d(e)&&Object.values(e).some(e=>d(e)&&e.type===`repo-picker`)):!1}function x(e,t){e.templateCopy(t,`setup.message`)&&t.length>u&&e.fail(`setup.message`,`must be at most ${u} characters`)}function S(e,t,n){if(!f(t.mode,a)){e.fail(`setup.mode`,`is not a supported mode`);return}if(t.mode===`direct`){e.templateValue(t.prompt,`setup.prompt`),t.message!==void 0&&x(e,t.message),n.length!==1&&e.fail(`setup.form.triggers`,`must declare exactly one trigger kind`),n.includes(`event`)&&!b(t.form)&&e.fail(`setup.form`,`must declare a repository field for an event trigger`),t.filter!==void 0&&(n.includes(`event`)?e.templateValue(t.filter,`setup.filter`):e.fail(`setup.filter`,`is only allowed for an event trigger`));return}x(e,t.message),e.absent(t,`prompt`,`setup`,`is only allowed for direct setup`),e.absent(t,`filter`,`setup`,`is only allowed for direct setup`)}function C(e){return d(e)&&e.setup!==void 0}function w(e){let n=new m;if(!d(e))return{valid:!1,errors:[`manifest: must be an object`]};let{setup:r}=e;return d(r)?r.version===`1.0`?((typeof e.id!=`string`||!t.test(e.id))&&n.fail(`id`,`must be a lowercase slug`),n.copy(e.name,`name`),n.copy(e.description,`description`),e.skill!==void 0&&(typeof e.skill!=`string`||!t.test(e.skill))&&n.fail(`skill`,`must be a lowercase slug`),h(n,e.requires),S(n,r,y(n,r.form)),{valid:n.errors.length===0,errors:n.errors}):{valid:!1,errors:[`setup.version: must be "1.0"`]}:{valid:!1,errors:[`setup: must be an object`]}}exports.hasSetupBlock=C,exports.validateSetupEntry=w;
+//# sourceMappingURL=manifest-validation.cjs.map

package/dist/manifests/manifest-validation.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-validation.cjs","names":[],"sources":["../../src/manifests/manifest-validation.ts"],"sourcesContent":["/**\n * Admission policy for extension-authored catalog manifests.\n *\n * A manifest is data authored in a different repository that instructs this host\n * to render copy and compose a request. The host therefore decides what a\n * manifest is *permitted* to do rather than trusting the file — validation here\n * is a trust boundary, not a convenience check, and it deliberately does not\n * defer to a schema shipped alongside the manifests it would be validating.\n *\n * Beyond mirroring the published schema, this adds the invariants the host's own\n * derivation depends on: a single trigger kind to read, a repository field for\n * an event trigger's source, and field names unique across the form. Without\n * them the derived request body would be silently wrong rather than rejected.\n *\n * A manifest that fails any check is rejected outright. It never renders a\n * partial UI, because everything downstream treats its content as instructions.\n */\n\nimport { SETUP_PLACEHOLDER_NAMESPACES, SETUP_VERSION } from \"./types\";\n\nconst ENTRY_ID_PATTERN = /^[a-z0-9]+(-[a-z0-9]+)*$/;\nconst FIELD_NAME_PATTERN = /^[a-z][A-Za-z0-9]*$/;\n/** Copy must never be able to inject markup into the host. */\nconst MARKUP_PATTERN = /<[A-Za-z/!]/;\n/** Every `{{` must open a known namespace and close immediately. */\nconst UNKNOWN_PLACEHOLDER_PATTERN = new RegExp(\n  `\\\\{\\\\{(?!(?:${SETUP_PLACEHOLDER_NAMESPACES.join(\"|\")})\\\\.[A-Za-z0-9_.]+\\\\}\\\\})`,\n);\n\nconst SETUP_MODES = [\"direct\", \"assisted\"] as const;\nconst FIELD_TYPES = [\n  \"text\",\n  \"textarea\",\n  \"select\",\n  \"cron\",\n  \"timezone\",\n  \"repo-picker\",\n] as const;\nconst GIT_PROVIDERS = [\"github\", \"gitlab\", \"bitbucket\"] as const;\nconst TRIGGER_KINDS = [\"cron\", \"event\"] as const;\nconst CONSTRAINT_FORMATS = [\"safeExpressionLiteral\"] as const;\n\n/** Setup context only, so this can never become a channel for runtime instructions. */\nconst MAX_MESSAGE_LENGTH = 2000;\n\nexport interface SetupValidationResult {\n  valid: boolean;\n  errors: string[];\n}\n\ntype Rec = Record<string, unknown>;\n\nfunction isRecord(value: unknown): value is Rec {\n  return typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction isOneOf<T extends readonly string[]>(\n  value: unknown,\n  allowed: T,\n): value is T[number] {\n  return (\n    typeof value === \"string\" && (allowed as readonly string[]).includes(value)\n  );\n}\n\nfunction isInteger(value: unknown, minimum: number): boolean {\n  return (\n    typeof value === \"number\" && Number.isInteger(value) && value >= minimum\n  );\n}\n\nclass SetupChecker {\n  readonly errors: string[] = [];\n\n  fail(path: string, reason: string): false {\n    this.errors.push(`${path}: ${reason}`);\n    return false;\n  }\n\n  /** Literal user-visible copy. Carries no markup. */\n  copy(value: unknown, path: string): boolean {\n    if (typeof value !== \"string\" || value.length === 0) {\n      return this.fail(path, \"must be a non-empty string\");\n    }\n    if (MARKUP_PATTERN.test(value)) {\n      return this.fail(path, \"must not contain markup\");\n    }\n    return true;\n  }\n\n  placeholders(value: string, path: string): boolean {\n    if (UNKNOWN_PLACEHOLDER_PATTERN.test(value)) {\n      return this.fail(path, \"uses an unknown placeholder namespace\");\n    }\n    return true;\n  }\n\n  /** Copy that may embed `{{namespace.key}}` placeholders. */\n  templateCopy(value: unknown, path: string): boolean {\n    return this.copy(value, path) && this.placeholders(value as string, path);\n  }\n\n  /**\n   * A request-body string that may embed placeholders. Never rendered, so\n   * expression syntax such as a JMESPath filter is allowed through.\n   */\n  templateValue(value: unknown, path: string): boolean {\n    if (typeof value !== \"string\" || value.length === 0) {\n      return this.fail(path, \"must be a non-empty string\");\n    }\n    return this.placeholders(value, path);\n  }\n\n  absent(container: Rec, key: string, path: string, reason: string): boolean {\n    if (key in container) return this.fail(`${path}.${key}`, reason);\n    return true;\n  }\n}\n\nfunction checkRequires(check: SetupChecker, requires: unknown): void {\n  if (!isRecord(requires)) {\n    check.fail(\"requires\", \"must be an object\");\n    return;\n  }\n\n  const { integrations, features } = requires;\n  if (!isRecord(integrations) || Object.keys(integrations).length === 0) {\n    check.fail(\"requires.integrations\", \"must be a non-empty object\");\n  } else {\n    Object.entries(integrations).forEach(([id, requirement]) => {\n      const path = `requires.integrations.${id}`;\n      if (!isRecord(requirement)) {\n        check.fail(path, \"must be an object\");\n        return;\n      }\n      check.copy(requirement.message, `${path}.message`);\n      if (\"required\" in requirement && requirement.required !== false) {\n        check.fail(`${path}.required`, \"may only be false\");\n      }\n      const allowed = [\"message\", \"required\"];\n      Object.keys(requirement)\n        .filter((key) => !allowed.includes(key))\n        .forEach((key) => check.fail(`${path}.${key}`, \"is not allowed\"));\n    });\n  }\n\n  if (features !== undefined) {\n    if (!Array.isArray(features) || features.length === 0) {\n      check.fail(\"requires.features\", \"must be a non-empty array\");\n    } else {\n      features.forEach((feature, index) => {\n        if (typeof feature !== \"string\" || feature.length === 0) {\n          check.fail(\n            `requires.features[${index}]`,\n            \"must be a non-empty string\",\n          );\n        }\n      });\n    }\n  }\n}\n\nfunction checkConstraints(\n  check: SetupChecker,\n  constraints: unknown,\n  path: string,\n): void {\n  if (!isRecord(constraints) || Object.keys(constraints).length === 0) {\n    check.fail(path, \"must be a non-empty object\");\n    return;\n  }\n\n  const { minLength, maxLength, format } = constraints;\n  if (minLength !== undefined && !isInteger(minLength, 0)) {\n    check.fail(`${path}.minLength`, \"must be a non-negative integer\");\n  }\n  if (maxLength !== undefined && !isInteger(maxLength, 1)) {\n    check.fail(`${path}.maxLength`, \"must be a positive integer\");\n  }\n  if (format !== undefined && !isOneOf(format, CONSTRAINT_FORMATS)) {\n    check.fail(`${path}.format`, \"is not a supported format\");\n  }\n}\n\nfunction checkField(check: SetupChecker, field: unknown, path: string): void {\n  if (!isRecord(field)) {\n    check.fail(path, \"must be an object\");\n    return;\n  }\n\n  const { type, label, help, placeholder, required, provider, options } = field;\n\n  if (!isOneOf(type, FIELD_TYPES)) {\n    check.fail(`${path}.type`, \"is not a supported field type\");\n  }\n  check.copy(label, `${path}.label`);\n  check.copy(help, `${path}.help`);\n  if (placeholder !== undefined) check.copy(placeholder, `${path}.placeholder`);\n  if (field.default !== undefined && typeof field.default !== \"string\") {\n    check.fail(`${path}.default`, \"must be a string\");\n  }\n  if (typeof required !== \"boolean\") {\n    check.fail(`${path}.required`, \"must be a boolean\");\n  }\n  if (provider !== undefined && !isOneOf(provider, GIT_PROVIDERS)) {\n    check.fail(`${path}.provider`, \"is not a supported provider\");\n  }\n  if (type === \"repo-picker\" && provider === undefined) {\n    check.fail(`${path}.provider`, \"is required for a repository field\");\n  }\n\n  if (options !== undefined) {\n    if (type !== \"select\") {\n      check.fail(`${path}.options`, \"is only allowed on a select field\");\n    } else if (!Array.isArray(options) || options.length === 0) {\n      check.fail(`${path}.options`, \"must be a non-empty array\");\n    } else {\n      options.forEach((option, index) => {\n        const optionPath = `${path}.options[${index}]`;\n        if (!isRecord(option)) {\n          check.fail(optionPath, \"must be an object\");\n          return;\n        }\n        if (typeof option.value !== \"string\" || option.value.length === 0) {\n          check.fail(`${optionPath}.value`, \"must be a non-empty string\");\n        }\n        check.copy(option.label, `${optionPath}.label`);\n      });\n    }\n  }\n\n  if (field.constraints !== undefined) {\n    checkConstraints(check, field.constraints, `${path}.constraints`);\n  }\n}\n\n/** Returns the declared field names, so the caller can check them for collisions. */\nfunction checkFields(\n  check: SetupChecker,\n  fields: unknown,\n  path: string,\n): string[] {\n  if (!isRecord(fields) || Object.keys(fields).length === 0) {\n    check.fail(path, \"must be a non-empty object\");\n    return [];\n  }\n\n  return Object.entries(fields).map(([name, field]) => {\n    if (!FIELD_NAME_PATTERN.test(name)) {\n      check.fail(`${path}.${name}`, \"is not a valid field name\");\n    }\n    checkField(check, field, `${path}.${name}`);\n    return name;\n  });\n}\n\n/** Returns the trigger kinds declared, in order. */\nfunction checkForm(check: SetupChecker, form: unknown): string[] {\n  if (!isRecord(form)) {\n    check.fail(\"setup.form\", \"must be an object\");\n    return [];\n  }\n\n  if (form.note !== undefined) check.copy(form.note, \"setup.form.note\");\n\n  const names = checkFields(check, form.args, \"setup.form.args\");\n  const kinds: string[] = [];\n\n  if (form.triggers !== undefined) {\n    if (!isRecord(form.triggers) || Object.keys(form.triggers).length === 0) {\n      check.fail(\"setup.form.triggers\", \"must be a non-empty object\");\n    } else {\n      Object.entries(form.triggers).forEach(([kind, fields]) => {\n        if (!isOneOf(kind, TRIGGER_KINDS)) {\n          check.fail(`setup.form.triggers.${kind}`, \"is not a trigger kind\");\n          return;\n        }\n        kinds.push(kind);\n        names.push(\n          ...checkFields(check, fields, `setup.form.triggers.${kind}`),\n        );\n      });\n    }\n  }\n\n  // The host merges both halves into one value map, so a repeated name would\n  // silently shadow a field and misaddress every error reported against it.\n  const duplicates = names.filter(\n    (name, index) => names.indexOf(name) !== index,\n  );\n  Array.from(new Set(duplicates)).forEach((name) =>\n    check.fail(`setup.form.${name}`, \"is declared more than once\"),\n  );\n\n  return kinds;\n}\n\nfunction hasRepoPicker(form: unknown): boolean {\n  if (!isRecord(form)) return false;\n  const groups = [\n    form.args,\n    ...Object.values(isRecord(form.triggers) ? form.triggers : {}),\n  ];\n  return groups.some(\n    (group) =>\n      isRecord(group) &&\n      Object.values(group).some(\n        (field) => isRecord(field) && field.type === \"repo-picker\",\n      ),\n  );\n}\n\nfunction checkMessage(check: SetupChecker, message: unknown): void {\n  if (check.templateCopy(message, \"setup.message\")) {\n    if ((message as string).length > MAX_MESSAGE_LENGTH) {\n      check.fail(\n        \"setup.message\",\n        `must be at most ${MAX_MESSAGE_LENGTH} characters`,\n      );\n    }\n  }\n}\n\nfunction checkMode(check: SetupChecker, setup: Rec, kinds: string[]): void {\n  if (!isOneOf(setup.mode, SETUP_MODES)) {\n    check.fail(\"setup.mode\", \"is not a supported mode\");\n    return;\n  }\n\n  if (setup.mode === \"direct\") {\n    check.templateValue(setup.prompt, \"setup.prompt\");\n    // Optional here: it seeds the fallback conversation offered when the\n    // deployment cannot run the direct path.\n    if (setup.message !== undefined) checkMessage(check, setup.message);\n\n    // The derivation reads a single trigger kind, and an event trigger takes\n    // its source from the repository field's provider.\n    if (kinds.length !== 1) {\n      check.fail(\n        \"setup.form.triggers\",\n        \"must declare exactly one trigger kind\",\n      );\n    }\n    if (kinds.includes(\"event\") && !hasRepoPicker(setup.form)) {\n      check.fail(\n        \"setup.form\",\n        \"must declare a repository field for an event trigger\",\n      );\n    }\n    if (setup.filter !== undefined) {\n      if (!kinds.includes(\"event\")) {\n        check.fail(\"setup.filter\", \"is only allowed for an event trigger\");\n      } else {\n        check.templateValue(setup.filter, \"setup.filter\");\n      }\n    }\n    return;\n  }\n\n  checkMessage(check, setup.message);\n  check.absent(setup, \"prompt\", \"setup\", \"is only allowed for direct setup\");\n  check.absent(setup, \"filter\", \"setup\", \"is only allowed for direct setup\");\n}\n\n/** Whether a catalog entry ships a setup experience at all. It is optional. */\nexport function hasSetupBlock(candidate: unknown): boolean {\n  return isRecord(candidate) && candidate.setup !== undefined;\n}\n\n/**\n * Decide whether this host will act on a catalog manifest.\n *\n * The version is checked first and fails closed: a format this host does not\n * recognise is refused rather than interpreted with today's rules.\n */\nexport function validateSetupEntry(candidate: unknown): SetupValidationResult {\n  const check = new SetupChecker();\n\n  if (!isRecord(candidate)) {\n    return { valid: false, errors: [\"manifest: must be an object\"] };\n  }\n\n  const { setup } = candidate;\n  if (!isRecord(setup)) {\n    return { valid: false, errors: [\"setup: must be an object\"] };\n  }\n  if (setup.version !== SETUP_VERSION) {\n    return {\n      valid: false,\n      errors: [`setup.version: must be \"${SETUP_VERSION}\"`],\n    };\n  }\n\n  if (\n    typeof candidate.id !== \"string\" ||\n    !ENTRY_ID_PATTERN.test(candidate.id)\n  ) {\n    check.fail(\"id\", \"must be a lowercase slug\");\n  }\n  check.copy(candidate.name, \"name\");\n  check.copy(candidate.description, \"description\");\n  if (\n    candidate.skill !== undefined &&\n    (typeof candidate.skill !== \"string\" ||\n      !ENTRY_ID_PATTERN.test(candidate.skill))\n  ) {\n    check.fail(\"skill\", \"must be a lowercase slug\");\n  }\n\n  checkRequires(check, candidate.requires);\n  const kinds = checkForm(check, setup.form);\n  checkMode(check, setup, kinds);\n\n  return { valid: check.errors.length === 0, errors: check.errors };\n}\n"],"mappings":"4EAoBA,IAAM,EAAmB,2BACnB,EAAqB,sBAErB,EAAiB,cAEjB,EAAkC,OACtC,eAAe,EAAA,6BAA6B,KAAK,GAAG,EAAE,0BACxD,EAEM,EAAc,CAAC,SAAU,UAAU,EACnC,EAAc,CAClB,OACA,WACA,SACA,OACA,WACA,aACF,EACM,EAAgB,CAAC,SAAU,SAAU,WAAW,EAChD,EAAgB,CAAC,OAAQ,OAAO,EAChC,EAAqB,CAAC,uBAAuB,EAG7C,EAAqB,IAS3B,SAAS,EAAS,EAA8B,CAC9C,OAAO,OAAO,GAAU,YAAY,GAAkB,CAAC,MAAM,QAAQ,CAAK,CAC5E,CAEA,SAAS,EACP,EACA,EACoB,CACpB,OACE,OAAO,GAAU,UAAa,EAA8B,SAAS,CAAK,CAE9E,CAEA,SAAS,EAAU,EAAgB,EAA0B,CAC3D,OACE,OAAO,GAAU,UAAY,OAAO,UAAU,CAAK,GAAK,GAAS,CAErE,CAEA,IAAM,EAAN,KAAmB,CACjB,OAA4B,CAAC,EAE7B,KAAK,EAAc,EAAuB,CAExC,OADA,KAAK,OAAO,KAAK,GAAG,EAAK,IAAI,GAAQ,EAC9B,EACT,CAGA,KAAK,EAAgB,EAAuB,CAO1C,OANI,OAAO,GAAU,UAAY,EAAM,SAAW,EACzC,KAAK,KAAK,EAAM,4BAA4B,EAEjD,EAAe,KAAK,CAAK,EACpB,KAAK,KAAK,EAAM,yBAAyB,EAE3C,EACT,CAEA,aAAa,EAAe,EAAuB,CAIjD,OAHI,EAA4B,KAAK,CAAK,EACjC,KAAK,KAAK,EAAM,uCAAuC,EAEzD,EACT,CAGA,aAAa,EAAgB,EAAuB,CAClD,OAAO,KAAK,KAAK,EAAO,CAAI,GAAK,KAAK,aAAa,EAAiB,CAAI,CAC1E,CAMA,cAAc,EAAgB,EAAuB,CAInD,OAHI,OAAO,GAAU,UAAY,EAAM,SAAW,EACzC,KAAK,KAAK,EAAM,4BAA4B,EAE9C,KAAK,aAAa,EAAO,CAAI,CACtC,CAEA,OAAO,EAAgB,EAAa,EAAc,EAAyB,CAEzE,OADI,KAAO,EAAkB,KAAK,KAAK,GAAG,EAAK,GAAG,IAAO,CAAM,EACxD,EACT,CACF,EAEA,SAAS,EAAc,EAAqB,EAAyB,CACnE,GAAI,CAAC,EAAS,CAAQ,EAAG,CACvB,EAAM,KAAK,WAAY,mBAAmB,EAC1C,MACF,CAEA,GAAM,CAAE,eAAc,YAAa,EAC/B,CAAC,EAAS,CAAY,GAAK,OAAO,KAAK,CAAY,EAAE,SAAW,EAClE,EAAM,KAAK,wBAAyB,4BAA4B,EAEhE,OAAO,QAAQ,CAAY,EAAE,SAAS,CAAC,EAAI,KAAiB,CAC1D,IAAM,EAAO,yBAAyB,IACtC,GAAI,CAAC,EAAS,CAAW,EAAG,CAC1B,EAAM,KAAK,EAAM,mBAAmB,EACpC,MACF,CACA,EAAM,KAAK,EAAY,QAAS,GAAG,EAAK,SAAS,EAC7C,aAAc,GAAe,EAAY,WAAa,IACxD,EAAM,KAAK,GAAG,EAAK,WAAY,mBAAmB,EAEpD,IAAM,EAAU,CAAC,UAAW,UAAU,EACtC,OAAO,KAAK,CAAW,EACpB,OAAQ,GAAQ,CAAC,EAAQ,SAAS,CAAG,CAAC,EACtC,QAAS,GAAQ,EAAM,KAAK,GAAG,EAAK,GAAG,IAAO,gBAAgB,CAAC,CACpE,CAAC,EAGC,IAAa,IAAA,KACX,CAAC,MAAM,QAAQ,CAAQ,GAAK,EAAS,SAAW,EAClD,EAAM,KAAK,oBAAqB,2BAA2B,EAE3D,EAAS,SAAS,EAAS,IAAU,EAC/B,OAAO,GAAY,UAAY,EAAQ,SAAW,IACpD,EAAM,KACJ,qBAAqB,EAAM,GAC3B,4BACF,CAEJ,CAAC,EAGP,CAEA,SAAS,EACP,EACA,EACA,EACM,CACN,GAAI,CAAC,EAAS,CAAW,GAAK,OAAO,KAAK,CAAW,EAAE,SAAW,EAAG,CACnE,EAAM,KAAK,EAAM,4BAA4B,EAC7C,MACF,CAEA,GAAM,CAAE,YAAW,YAAW,UAAW,EACrC,IAAc,IAAA,IAAa,CAAC,EAAU,EAAW,CAAC,GACpD,EAAM,KAAK,GAAG,EAAK,YAAa,gCAAgC,EAE9D,IAAc,IAAA,IAAa,CAAC,EAAU,EAAW,CAAC,GACpD,EAAM,KAAK,GAAG,EAAK,YAAa,4BAA4B,EAE1D,IAAW,IAAA,IAAa,CAAC,EAAQ,EAAQ,CAAkB,GAC7D,EAAM,KAAK,GAAG,EAAK,SAAU,2BAA2B,CAE5D,CAEA,SAAS,EAAW,EAAqB,EAAgB,EAAoB,CAC3E,GAAI,CAAC,EAAS,CAAK,EAAG,CACpB,EAAM,KAAK,EAAM,mBAAmB,EACpC,MACF,CAEA,GAAM,CAAE,OAAM,QAAO,OAAM,cAAa,WAAU,WAAU,WAAY,EAEnE,EAAQ,EAAM,CAAW,GAC5B,EAAM,KAAK,GAAG,EAAK,OAAQ,+BAA+B,EAE5D,EAAM,KAAK,EAAO,GAAG,EAAK,OAAO,EACjC,EAAM,KAAK,EAAM,GAAG,EAAK,MAAM,EAC3B,IAAgB,IAAA,IAAW,EAAM,KAAK,EAAa,GAAG,EAAK,aAAa,EACxE,EAAM,UAAY,IAAA,IAAa,OAAO,EAAM,SAAY,UAC1D,EAAM,KAAK,GAAG,EAAK,UAAW,kBAAkB,EAE9C,OAAO,GAAa,WACtB,EAAM,KAAK,GAAG,EAAK,WAAY,mBAAmB,EAEhD,IAAa,IAAA,IAAa,CAAC,EAAQ,EAAU,CAAa,GAC5D,EAAM,KAAK,GAAG,EAAK,WAAY,6BAA6B,EAE1D,IAAS,eAAiB,IAAa,IAAA,IACzC,EAAM,KAAK,GAAG,EAAK,WAAY,oCAAoC,EAGjE,IAAY,IAAA,KACV,IAAS,SAEF,CAAC,MAAM,QAAQ,CAAO,GAAK,EAAQ,SAAW,EACvD,EAAM,KAAK,GAAG,EAAK,UAAW,2BAA2B,EAEzD,EAAQ,SAAS,EAAQ,IAAU,CACjC,IAAM,EAAa,GAAG,EAAK,WAAW,EAAM,GAC5C,GAAI,CAAC,EAAS,CAAM,EAAG,CACrB,EAAM,KAAK,EAAY,mBAAmB,EAC1C,MACF,EACI,OAAO,EAAO,OAAU,UAAY,EAAO,MAAM,SAAW,IAC9D,EAAM,KAAK,GAAG,EAAW,QAAS,4BAA4B,EAEhE,EAAM,KAAK,EAAO,MAAO,GAAG,EAAW,OAAO,CAChD,CAAC,EAdD,EAAM,KAAK,GAAG,EAAK,UAAW,mCAAmC,GAkBjE,EAAM,cAAgB,IAAA,IACxB,EAAiB,EAAO,EAAM,YAAa,GAAG,EAAK,aAAa,CAEpE,CAGA,SAAS,EACP,EACA,EACA,EACU,CAMV,MALI,CAAC,EAAS,CAAM,GAAK,OAAO,KAAK,CAAM,EAAE,SAAW,GACtD,EAAM,KAAK,EAAM,4BAA4B,EACtC,CAAC,GAGH,OAAO,QAAQ,CAAM,EAAE,KAAK,CAAC,EAAM,MACnC,EAAmB,KAAK,CAAI,GAC/B,EAAM,KAAK,GAAG,EAAK,GAAG,IAAQ,2BAA2B,EAE3D,EAAW,EAAO,EAAO,GAAG,EAAK,GAAG,GAAM,EACnC,EACR,CACH,CAGA,SAAS,EAAU,EAAqB,EAAyB,CAC/D,GAAI,CAAC,EAAS,CAAI,EAEhB,OADA,EAAM,KAAK,aAAc,mBAAmB,EACrC,CAAC,EAGN,EAAK,OAAS,IAAA,IAAW,EAAM,KAAK,EAAK,KAAM,iBAAiB,EAEpE,IAAM,EAAQ,EAAY,EAAO,EAAK,KAAM,iBAAiB,EACvD,EAAkB,CAAC,EAErB,EAAK,WAAa,IAAA,KAChB,CAAC,EAAS,EAAK,QAAQ,GAAK,OAAO,KAAK,EAAK,QAAQ,EAAE,SAAW,EACpE,EAAM,KAAK,sBAAuB,4BAA4B,EAE9D,OAAO,QAAQ,EAAK,QAAQ,EAAE,SAAS,CAAC,EAAM,KAAY,CACxD,GAAI,CAAC,EAAQ,EAAM,CAAa,EAAG,CACjC,EAAM,KAAK,uBAAuB,IAAQ,uBAAuB,EACjE,MACF,CACA,EAAM,KAAK,CAAI,EACf,EAAM,KACJ,GAAG,EAAY,EAAO,EAAQ,uBAAuB,GAAM,CAC7D,CACF,CAAC,GAML,IAAM,EAAa,EAAM,QACtB,EAAM,IAAU,EAAM,QAAQ,CAAI,IAAM,CAC3C,EAKA,OAJA,MAAM,KAAK,IAAI,IAAI,CAAU,CAAC,EAAE,QAAS,GACvC,EAAM,KAAK,cAAc,IAAQ,4BAA4B,CAC/D,EAEO,CACT,CAEA,SAAS,EAAc,EAAwB,CAM7C,OALK,EAAS,CAAI,EAKX,CAHL,EAAK,KACL,GAAG,OAAO,OAAO,EAAS,EAAK,QAAQ,EAAI,EAAK,SAAW,CAAC,CAAC,CAExD,EAAO,KACX,GACC,EAAS,CAAK,GACd,OAAO,OAAO,CAAK,EAAE,KAClB,GAAU,EAAS,CAAK,GAAK,EAAM,OAAS,aAC/C,CACJ,EAX4B,EAY9B,CAEA,SAAS,EAAa,EAAqB,EAAwB,CAC7D,EAAM,aAAa,EAAS,eAAe,GACxC,EAAmB,OAAS,GAC/B,EAAM,KACJ,gBACA,mBAAmB,EAAmB,YACxC,CAGN,CAEA,SAAS,EAAU,EAAqB,EAAY,EAAuB,CACzE,GAAI,CAAC,EAAQ,EAAM,KAAM,CAAW,EAAG,CACrC,EAAM,KAAK,aAAc,yBAAyB,EAClD,MACF,CAEA,GAAI,EAAM,OAAS,SAAU,CAC3B,EAAM,cAAc,EAAM,OAAQ,cAAc,EAG5C,EAAM,UAAY,IAAA,IAAW,EAAa,EAAO,EAAM,OAAO,EAI9D,EAAM,SAAW,GACnB,EAAM,KACJ,sBACA,uCACF,EAEE,EAAM,SAAS,OAAO,GAAK,CAAC,EAAc,EAAM,IAAI,GACtD,EAAM,KACJ,aACA,sDACF,EAEE,EAAM,SAAW,IAAA,KACd,EAAM,SAAS,OAAO,EAGzB,EAAM,cAAc,EAAM,OAAQ,cAAc,EAFhD,EAAM,KAAK,eAAgB,sCAAsC,GAKrE,MACF,CAEA,EAAa,EAAO,EAAM,OAAO,EACjC,EAAM,OAAO,EAAO,SAAU,QAAS,kCAAkC,EACzE,EAAM,OAAO,EAAO,SAAU,QAAS,kCAAkC,CAC3E,CAGA,SAAgB,EAAc,EAA6B,CACzD,OAAO,EAAS,CAAS,GAAK,EAAU,QAAU,IAAA,EACpD,CAQA,SAAgB,EAAmB,EAA2C,CAC5E,IAAM,EAAQ,IAAI,EAElB,GAAI,CAAC,EAAS,CAAS,EACrB,MAAO,CAAE,MAAO,GAAO,OAAQ,CAAC,6BAA6B,CAAE,EAGjE,GAAM,CAAE,SAAU,EA+BlB,OA9BK,EAAS,CAAK,EAGf,EAAM,UAAA,QAQR,OAAO,EAAU,IAAO,UACxB,CAAC,EAAiB,KAAK,EAAU,EAAE,IAEnC,EAAM,KAAK,KAAM,0BAA0B,EAE7C,EAAM,KAAK,EAAU,KAAM,MAAM,EACjC,EAAM,KAAK,EAAU,YAAa,aAAa,EAE7C,EAAU,QAAU,IAAA,KACnB,OAAO,EAAU,OAAU,UAC1B,CAAC,EAAiB,KAAK,EAAU,KAAK,IAExC,EAAM,KAAK,QAAS,0BAA0B,EAGhD,EAAc,EAAO,EAAU,QAAQ,EAEvC,EAAU,EAAO,EADH,EAAU,EAAO,EAAM,IACb,CAAK,EAEtB,CAAE,MAAO,EAAM,OAAO,SAAW,EAAG,OAAQ,EAAM,MAAO,GA1BvD,CACL,MAAO,GACP,OAAQ,CAAC,8BAA2C,CACtD,EANO,CAAE,MAAO,GAAO,OAAQ,CAAC,0BAA0B,CAAE,CA8BhE"}

package/dist/manifests/manifest-validation.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Admission policy for extension-authored catalog manifests.
+ *
+ * A manifest is data authored in a different repository that instructs this host
+ * to render copy and compose a request. The host therefore decides what a
+ * manifest is *permitted* to do rather than trusting the file — validation here
+ * is a trust boundary, not a convenience check, and it deliberately does not
+ * defer to a schema shipped alongside the manifests it would be validating.
+ *
+ * Beyond mirroring the published schema, this adds the invariants the host's own
+ * derivation depends on: a single trigger kind to read, a repository field for
+ * an event trigger's source, and field names unique across the form. Without
+ * them the derived request body would be silently wrong rather than rejected.
+ *
+ * A manifest that fails any check is rejected outright. It never renders a
+ * partial UI, because everything downstream treats its content as instructions.
+ */
+export interface SetupValidationResult {
+    valid: boolean;
+    errors: string[];
+}
+/** Whether a catalog entry ships a setup experience at all. It is optional. */
+export declare function hasSetupBlock(candidate: unknown): boolean;
+/**
+ * Decide whether this host will act on a catalog manifest.
+ *
+ * The version is checked first and fails closed: a format this host does not
+ * recognise is refused rather than interpreted with today's rules.
+ */
+export declare function validateSetupEntry(candidate: unknown): SetupValidationResult;