@pipelex/mthds-form 0.29.0 → 0.31.0

package/dist/chunk-UZNRJWN5.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/brand/contract.ts","../src/brand/tokens.ts","../src/brand/manifest.ts","../src/brand/seed-roles.ts","../src/brand/styles.ts"],"names":["z"],"mappings":";;;AAkCO,IAAM,iBAAA,GAAoB;AAAA,EAC/B,YAAA;AAAA,EACA,YAAA;AAAA,EACA,MAAA;AAAA,EACA,iBAAA;AAAA,EACA,SAAA;AAAA,EACA,oBAAA;AAAA,EACA,SAAA;AAAA,EACA,oBAAA;AAAA,EACA,WAAA;AAAA,EACA,sBAAA;AAAA,EACA,OAAA;AAAA,EACA,kBAAA;AAAA,EACA,QAAA;AAAA,EACA,mBAAA;AAAA,EACA,aAAA;AAAA,EACA,wBAAA;AAAA,EACA,QAAA;AAAA,EACA,OAAA;AAAA,EACA;AACF;AAIO,SAAS,iBAAiB,IAAA,EAAsC;AACrE,EAAA,OAAQ,iBAAA,CAAwC,SAAS,IAAI,CAAA;AAC/D;AAEA,IAAM,YAAA,GAA+C;AAAA,EACnD,UAAA,EAAY,kBAAA;AAAA,EACZ,UAAA,EAAY,qBAAA;AAAA,EACZ,IAAA,EAAM,sFAAA;AAAA,EACN,iBAAA,EAAmB,iBAAA;AAAA,EACnB,OAAA,EAAS,yDAAA;AAAA,EACT,oBAAA,EAAsB,oBAAA;AAAA,EACtB,OAAA,EAAS,6EAAA;AAAA,EACT,oBAAA,EAAsB,qBAAA;AAAA,EACtB,SAAA,EAAW,oEAAA;AAAA,EACX,sBAAA,EAAwB,8BAAA;AAAA,EACxB,KAAA,EAAO,+DAAA;AAAA,EACP,kBAAA,EACE,4HAAA;AAAA,EACF,MAAA,EAAQ,8CAAA;AAAA,EACR,mBAAA,EAAqB,yBAAA;AAAA,EACrB,WAAA,EAAa,qDAAA;AAAA,EACb,wBAAA,EAA0B,iCAAA;AAAA,EAC1B,MAAA,EAAQ,yCAAA;AAAA,EACR,KAAA,EACE,gGAAA;AAAA,EACF,IAAA,EAAM;AACR,CAAA;AAEO,IAAM,cAAA,GAA2C;AAAA,EACtD,GAAG,iBAAA,CAAkB,GAAA,CAAI,CAAC,IAAA,MAAyB;AAAA,IACjD,EAAA,EAAI,SAAS,IAAI,CAAA,CAAA;AAAA,IACjB,QAAA,EAAU,KAAK,IAAI,CAAA,CAAA;AAAA,IACnB,IAAA,EAAM,OAAA;AAAA,IACN,MAAA,EAAQ,aAAa,IAAI;AAAA,GAC3B,CAAE,CAAA;AAAA,EACF;AAAA,IACE,EAAA,EAAI,aAAA;AAAA,IACJ,QAAA,EAAU,UAAA;AAAA,IACV,IAAA,EAAM,WAAA;AAAA,IACN,MAAA,EAAQ;AAAA,GACV;AAAA,EACA;AAAA,IACE,EAAA,EAAI,WAAA;AAAA,IACJ,QAAA,EAAU,aAAA;AAAA,IACV,IAAA,EAAM,YAAA;AAAA,IACN,MAAA,EAAQ;AAAA,GACV;AAAA,EACA;AAAA,IACE,EAAA,EAAI,WAAA;AAAA,IACJ,QAAA,EAAU,aAAA;AAAA,IACV,IAAA,EAAM,YAAA;AAAA,IACN,MAAA,EAAQ;AAAA;AAEZ;AAGO,IAAM,YAAA,GAAe;AAOrB,IAAM,oBAAA,GAAuB;AA6C7B,IAAM,cAAA,GAA0C;AAAA,EACrD,EAAE,UAAA,EAAY,YAAA,EAAc,UAAA,EAAY,YAAA,EAAc,SAAS,YAAA,EAAa;AAAA,EAC5E,EAAE,UAAA,EAAY,kBAAA,EAAoB,UAAA,EAAY,YAAA,EAAc,SAAS,YAAA,EAAa;AAAA,EAClF;AAAA,IACE,UAAA,EAAY,kBAAA;AAAA,IACZ,UAAA,EAAY,OAAA;AAAA,IACZ,IAAA,EAAM,YAAA;AAAA,IACN,OAAA,EAAS;AAAA,GACX;AAAA,EACA,EAAE,UAAA,EAAY,aAAA,EAAe,UAAA,EAAY,YAAA,EAAc,SAAS,oBAAA,EAAqB;AAAA,EACrF;AAAA,IACE,UAAA,EAAY,aAAA;AAAA,IACZ,UAAA,EAAY,MAAA;AAAA,IACZ,IAAA,EAAM,YAAA;AAAA,IACN,OAAA,EAAS;AAAA;AAEb;AAEA,IAAM,IAAA,GAAO,IAAI,GAAA,CAAI,cAAA,CAAe,GAAA,CAAI,CAAC,KAAA,KAAU,CAAC,KAAA,CAAM,EAAA,EAAI,KAAK,CAAC,CAAC,CAAA;AAG9D,SAAS,iBAAiB,EAAA,EAAoB;AACnD,EAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,GAAA,CAAI,EAAE,CAAA;AACzB,EAAA,IAAI,CAAC,KAAA,EAAO,MAAM,IAAI,KAAA,CAAM,CAAA,gCAAA,EAAmC,EAAE,CAAA,CAAA,CAAG,CAAA;AACpE,EAAA,OAAO,KAAA,CAAM,QAAA;AACf;ACtKA,IAAM,SAAA,GAAY,EAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA,CAAE,IAAI,CAAC,CAAA;AAElC,IAAM,eAAA,GAAkB,EAAE,YAAA,CAAa;AAAA,EAC5C,UAAA,EAAY,CAAA,CAAE,OAAA,CAAQ,MAAM,CAAA;AAAA,EAC5B,YAAY,CAAA,CAAE,KAAA,CAAM,CAAC,SAAA,EAAW,SAAA,EAAW,SAAS,CAAC,CAAA;AAAA,EACrD,KAAA,EAAO,EAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA,CAAE,IAAI,CAAC,CAAA;AAAA,EAC9B,GAAA,EAAK,EACF,MAAA,EAAO,CACP,MAAM,iBAAA,EAAmB,yBAAyB,EAClD,QAAA;AACL,CAAC;AAID,IAAM,mBAAmB,CAAA,CACtB,MAAA,EAAO,CACP,KAAA,CAAM,6BAA6B,8BAA8B,CAAA;AAEpE,IAAM,mBAAmB,CAAA,CAAE,KAAA,CAAM,CAAC,eAAA,EAAiB,gBAAgB,CAAC,CAAA;AAIpE,IAAM,cAAc,CAAA,CAAE,MAAA,EAAO,CAAE,GAAA,CAAI,GAAG,oCAAoC,CAAA;AAOnE,SAAS,mBAAmB,IAAA,EAAuB;AACxD,EAAA,MAAM,IAAA,GAAO,IAAA,CAAK,WAAA,CAAY,CAAC,CAAA;AAC/B,EAAA,OAAO,IAAA,GAAO,MAAQ,IAAA,KAAS,GAAA;AACjC;AAEA,IAAM,gBAAA,GAAmB,EACtB,YAAA,CAAa;AAAA,EACZ,MAAA,EAAQ,gBAAA;AAAA,EACR,YAAA,EAAc,WAAA;AAAA,EACd,WAAA,EAAa,EACV,YAAA,CAAa;AAAA,IACZ,MAAM,CAAA,CAAE,YAAA,CAAa,EAAE,IAAA,EAAM,kBAAkB;AAAA,GAChD,EACA,QAAA;AACL,CAAC,CAAA,CACA,MAAA,CAAO,CAAC,KAAA,KAAU,KAAA,CAAM,gBAAgB,MAAA,IAAa,OAAO,KAAA,CAAM,MAAA,KAAW,QAAA,EAAU;AAAA,EACtF,OAAA,EAAS,gFAAA;AAAA,EACT,IAAA,EAAM,CAAC,aAAa;AACtB,CAAC,CAAA;AAIH,IAAM,oBAAA,GAAuB,EAAE,YAAA,CAAa;AAAA,EAC1C,QAAQ,CAAA,CAAE,YAAA,CAAa,EAAE,KAAA,EAAO,CAAA,CAAE,QAAO,CAAE,GAAA,CAAI,CAAC,CAAA,EAAG,IAAA,EAAM,EAAE,IAAA,CAAK,CAAC,OAAO,IAAI,CAAC,GAAG,CAAA;AAAA,EAChF,YAAA,EAAc;AAChB,CAAC,CAAA;AAID,IAAM,qBAAA,GAAwB,EAAE,YAAA,CAAa;AAAA,EAC3C,QAAQ,CAAA,CACL,KAAA;AAAA,IACC,EACG,MAAA,EAAO,CACP,GAAA,CAAI,CAAC,EAEL,MAAA,CAAO,CAAC,IAAA,KAAS,CAAC,CAAC,GAAG,IAAI,CAAA,CAAE,IAAA,CAAK,kBAAkB,CAAA,EAAG;AAAA,MACrD,OAAA,EAAS;AAAA,KACV;AAAA,GACL,CACC,IAAI,CAAC,CAAA;AAAA,EACR,YAAA,EAAc;AAChB,CAAC,CAAA;AAWD,IAAM,iBAAA,GAAoB,EAAE,YAAA,CAAa;AAAA,EACvC,KAAA,EAAO,EAAE,YAAA,CAAa;AAAA,IACpB,KAAA,EAAO,CAAA,CAAE,OAAA,CAAQ,OAAO,CAAA;AAAA,IACxB,GAAG,MAAA,CAAO,WAAA,CAAY,iBAAA,CAAkB,GAAA,CAAI,CAAC,IAAA,KAAS,CAAC,IAAA,EAAM,gBAAgB,CAAC,CAAC;AAAA,GAChF,CAAA;AAAA,EACD,MAAA,EAAQ,CAAA,CAAE,YAAA,CAAa,EAAE,KAAA,EAAO,CAAA,CAAE,OAAA,CAAQ,WAAW,CAAA,EAAG,IAAA,EAAM,oBAAA,EAAsB,CAAA;AAAA,EACpF,IAAA,EAAM,EAAE,YAAA,CAAa;AAAA,IACnB,KAAA,EAAO,CAAA,CAAE,OAAA,CAAQ,YAAY,CAAA;AAAA,IAC7B,IAAA,EAAM,qBAAA;AAAA,IACN,IAAA,EAAM;AAAA,GACP;AACH,CAAC,CAAA;AAQM,SAAS,YAAY,KAAA,EAAkC;AAC5D,EAAA,OAAO,OAAO,UAAU,QAAA,GAAW,KAAA,CAAM,MAAM,SAAA,CAAU,MAAA,EAAQ,EAAE,CAAA,GAAI,IAAA;AACzE;AAGO,SAAS,UAAU,KAAA,EAA+B;AACvD,EAAA,OAAO,KAAA,CAAM,WAAA,EAAa,IAAA,CAAK,IAAA,IAAQ,KAAA,CAAM,MAAA;AAC/C;AAGO,SAAS,SAAA,CAAU,OAAmB,IAAA,EAA6B;AACxE,EAAA,OAAO,IAAA,KAAS,OAAA,GAAU,KAAA,CAAM,MAAA,GAAS,UAAU,KAAK,CAAA;AAC1D;AAGO,SAAS,SAAS,KAAA,EAA0B;AACjD,EAAA,OAAO,CAAA,CAAA,EAAI,MAAM,UAAA,CACd,GAAA;AAAA,IAAI,CAAC,OAAA,KACJ,IAAA,CAAK,KAAA,CAAM,OAAA,GAAU,GAAG,CAAA,CACrB,QAAA,CAAS,EAAE,CAAA,CACX,QAAA,CAAS,CAAA,EAAG,GAAG;AAAA,GACpB,CACC,IAAA,CAAK,EAAE,CAAC,CAAA,CAAA;AACb;AAMO,SAAS,UAAA,CAAW,OAAkB,GAAA,EAAsB;AACjE,EAAA,OAAO,QAAA,CAAS,KAAK,CAAA,KAAM,GAAA,CAAI,WAAA,EAAY;AAC7C;AASO,SAAS,UAAU,KAAA,EAA6B;AACrD,EAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,IAAA,CAAK,GAAA,CAAI,KAAA,CAAM,OAAO,CAAC,CAAA,CAAE,OAAA,CAAQ,CAAC,CAAC,CAAA;AACxD,EAAA,OAAO;AAAA,IACL,UAAA,EAAY,MAAA;AAAA,IACZ,UAAA,EAAY,KAAA,CAAM,UAAA,CAAW,GAAA,CAAI,CAAC,OAAA,KAAY,IAAA,CAAK,KAAA,CAAM,OAAA,GAAU,GAAG,CAAA,GAAI,GAAG,CAAA;AAAA,IAK7E;AAAA,GACF;AACF;AAEA,SAAS,iBAAA,CAAkB,IAAA,EAAc,IAAA,EAAiB,KAAA,EAAmB,QAAA,EAAoB;AAC/F,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,CAAC,MAAM,GAAA,EAAK;AAC7C,EAAA,IAAI,CAAC,UAAA,CAAW,KAAA,EAAO,KAAA,CAAM,GAAG,CAAA,EAAG;AACjC,IAAA,QAAA,CAAS,IAAA;AAAA,MACP,CAAA,MAAA,EAAS,IAAI,CAAA,EAAA,EAAK,IAAI,CAAA,OAAA,EAAU,KAAA,CAAM,GAAG,CAAA,iCAAA,EAAoC,KAAA,CAAM,UAAA,CAAW,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AAAA,KAC1G;AAAA,EACF;AACF;AAEA,SAAS,YAAA,CAAa,MAAA,EAAqB,IAAA,EAAiB,QAAA,EAAoB;AAC9E,EAAA,KAAA,MAAW,QAAQ,iBAAA,EAAmB;AACpC,IAAA,MAAM,IAAA,mBAAO,IAAI,GAAA,CAAY,CAAC,IAAI,CAAC,CAAA;AACnC,IAAA,IAAI,OAAA,GAA0B,IAAA;AAC9B,IAAA,WAAS;AACP,MAAA,MAAM,MAAA,GAAS,YAAY,SAAA,CAAU,MAAA,CAAO,MAAM,OAAO,CAAA,EAAG,IAAI,CAAC,CAAA;AACjE,MAAA,IAAI,WAAW,IAAA,EAAM;AACrB,MAAA,IAAI,CAAC,gBAAA,CAAiB,MAAM,CAAA,EAAG;AAC7B,QAAA,QAAA,CAAS,IAAA;AAAA,UACP,CAAA,MAAA,EAAS,IAAI,CAAA,EAAA,EAAK,IAAI,qBAAqB,MAAM,CAAA,sCAAA;AAAA,SACnD;AACA,QAAA;AAAA,MACF;AACA,MAAA,IAAI,IAAA,CAAK,GAAA,CAAI,MAAM,CAAA,EAAG;AACpB,QAAA,QAAA,CAAS,KAAK,CAAA,MAAA,EAAS,IAAI,KAAK,IAAI,CAAA,8BAAA,EAAiC,MAAM,CAAA,CAAA,CAAG,CAAA;AAC9E,QAAA;AAAA,MACF;AACA,MAAA,IAAA,CAAK,IAAI,MAAM,CAAA;AACf,MAAA,OAAA,GAAU,MAAA;AAAA,IACZ;AAAA,EACF;AACF;AAGO,SAAS,YAAA,CACd,MAAA,EACA,IAAA,EACA,IAAA,EACkB;AAClB,EAAA,MAAM,IAAA,uBAAW,GAAA,EAAY;AAC7B,EAAA,IAAI,OAAA,GAA0B,IAAA;AAC9B,EAAA,WAAS;AACP,IAAA,IAAI,IAAA,CAAK,GAAA,CAAI,OAAO,CAAA,EAAG,OAAO,IAAA;AAC9B,IAAA,IAAA,CAAK,IAAI,OAAO,CAAA;AAChB,IAAA,MAAM,QAAQ,SAAA,CAAU,MAAA,CAAO,KAAA,CAAM,OAAO,GAAG,IAAI,CAAA;AACnD,IAAA,MAAM,MAAA,GAAS,YAAY,KAAK,CAAA;AAChC,IAAA,IAAI,MAAA,KAAW,MAAM,OAAO,KAAA;AAC5B,IAAA,IAAI,CAAC,gBAAA,CAAiB,MAAM,CAAA,EAAG,OAAO,IAAA;AACtC,IAAA,OAAA,GAAU,MAAA;AAAA,EACZ;AACF;AAMO,SAAS,cAAc,OAAA,EAAyB;AACrD,EAAA,OAAO,WAAW,OAAA,GAAU,OAAA,GAAU,KAAA,GAAA,CAAA,CAAU,OAAA,GAAU,SAAS,KAAA,KAAU,GAAA;AAC/E;AAEA,SAAS,UAAU,KAAA,EAA0B;AAC3C,EAAA,MAAM,CAAC,GAAG,CAAA,EAAG,CAAC,IAAI,KAAA,CAAM,UAAA,CAAW,IAAI,aAAa,CAAA;AACpD,EAAA,OAAO,MAAA,GAAS,CAAA,GAAI,MAAA,GAAS,CAAA,GAAI,MAAA,GAAS,CAAA;AAC5C;AAGO,SAAS,aAAA,CAAc,GAAc,CAAA,EAAsB;AAChE,EAAA,MAAM,EAAA,GAAK,UAAU,CAAC,CAAA;AACtB,EAAA,MAAM,EAAA,GAAK,UAAU,CAAC,CAAA;AACtB,EAAA,MAAM,CAAC,KAAA,EAAO,IAAI,CAAA,GAAI,EAAA,GAAK,EAAA,GAAK,CAAC,EAAA,EAAI,EAAE,CAAA,GAAI,CAAC,EAAA,EAAI,EAAE,CAAA;AAClD,EAAA,OAAA,CAAQ,KAAA,GAAQ,SAAS,IAAA,GAAO,IAAA,CAAA;AAClC;AAGO,SAAS,SAAA,CAAU,OAAkB,IAAA,EAA4B;AACtE,EAAA,MAAM,UAAA,GAAa,MAAM,UAAA,CAAW,GAAA;AAAA,IAClC,CAAC,OAAA,EAAS,KAAA,KAAU,OAAA,GAAU,KAAA,CAAM,KAAA,GAAQ,IAAA,CAAK,UAAA,CAAW,KAAK,CAAA,IAAM,CAAA,GAAI,KAAA,CAAM,KAAA;AAAA,GACnF;AACA,EAAA,OAAO,EAAE,UAAA,EAAY,MAAA,EAAQ,UAAA,EAAY,OAAO,CAAA,EAAE;AACpD;AAWA,SAAS,aAAA,CAAc,MAAA,EAAqB,IAAA,EAAiB,QAAA,EAAoB;AAC/E,EAAA,KAAA,MAAW,QAAQ,cAAA,EAAgB;AACjC,IAAA,MAAM,UAAA,GAAa,IAAA,CAAK,IAAA,IAAQ,IAAA,CAAK,UAAA;AACrC,IAAA,MAAM,UAAA,GAAa,YAAA,CAAa,MAAA,EAAQ,IAAA,CAAK,YAAY,IAAI,CAAA;AAC7D,IAAA,MAAM,UAAA,GAAa,YAAA,CAAa,MAAA,EAAQ,IAAA,CAAK,YAAY,IAAI,CAAA;AAC7D,IAAA,MAAM,WAAA,GAAc,YAAA,CAAa,MAAA,EAAQ,UAAA,EAAY,IAAI,CAAA;AACzD,IAAA,IAAI,CAAC,UAAA,IAAc,CAAC,UAAA,IAAc,CAAC,WAAA,EAAa;AAChD,IAAA,IAAI,WAAA,CAAY,QAAQ,CAAA,EAAG;AAEzB,MAAA,MAAM,UAAU,CAAA,MAAA,EAAS,UAAU,KAAK,IAAI,CAAA,SAAA,EAAY,YAAY,KAAK,CAAA,iEAAA,CAAA;AACzE,MAAA,IAAI,CAAC,QAAA,CAAS,QAAA,CAAS,OAAO,CAAA,EAAG,QAAA,CAAS,KAAK,OAAO,CAAA;AACtD,MAAA;AAAA,IACF;AACA,IAAA,MAAM,MAAA,GAAS,UAAU,WAAW,CAAA;AACpC,IAAA,MAAM,OAAA,GAAU,KAAK,IAAA,GAAO,SAAA,CAAU,UAAU,UAAU,CAAA,EAAG,MAAM,CAAA,GAAI,MAAA;AACvE,IAAA,MAAM,KAAA,GAAQ,cAAc,SAAA,CAAU,SAAA,CAAU,UAAU,CAAA,EAAG,OAAO,GAAG,OAAO,CAAA;AAC9E,IAAA,IAAI,KAAA,GAAQ,KAAK,OAAA,EAAS;AACxB,MAAA,MAAM,EAAA,GAAK,IAAA,CAAK,IAAA,GACZ,CAAA,MAAA,EAAS,IAAA,CAAK,UAAU,CAAA,YAAA,EAAe,IAAA,CAAK,IAAI,CAAA,CAAA,GAChD,CAAA,MAAA,EAAS,IAAA,CAAK,UAAU,CAAA,CAAA;AAC5B,MAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,OAAA,IAAW,YAAA,GAAe,SAAA,GAAY,uBAAA;AACzD,MAAA,QAAA,CAAS,IAAA;AAAA,QACP,SAAS,IAAA,CAAK,UAAU,CAAA,IAAA,EAAO,EAAE,KAAK,IAAI,CAAA,YAAA,EAAe,KAAA,CAAM,OAAA,CAAQ,CAAC,CAAC,CAAA,WAAA,EAAc,IAAA,CAAK,OAAO,KAAK,KAAK,CAAA,CAAA;AAAA,OAC/G;AAAA,IACF;AAAA,EACF;AACF;AAGO,SAAS,oBAAoB,GAAA,EAAgC;AAClE,EAAA,MAAM,MAAA,GAAS,iBAAA,CAAkB,SAAA,CAAU,GAAG,CAAA;AAC9C,EAAA,IAAI,CAAC,OAAO,OAAA,EAAS;AACnB,IAAA,OAAO;AAAA,MACL,EAAA,EAAI,KAAA;AAAA,MACJ,UAAU,MAAA,CAAO,KAAA,CAAM,MAAA,CAAO,GAAA,CAAI,CAAC,KAAA,KAAU;AAC3C,QAAA,MAAM,KAAA,GAAQ,MAAM,IAAA,CAAK,GAAA,CAAI,MAAM,CAAA,CAAE,IAAA,CAAK,GAAG,CAAA,IAAK,QAAA;AAClD,QAAA,OAAO,CAAA,EAAG,KAAK,CAAA,EAAA,EAAK,KAAA,CAAM,OAAO,CAAA,CAAA;AAAA,MACnC,CAAC;AAAA,KACH;AAAA,EACF;AACA,EAAA,MAAM,SAAS,MAAA,CAAO,IAAA;AACtB,EAAA,MAAM,WAAqB,EAAC;AAC5B,EAAA,KAAA,MAAW,QAAQ,iBAAA,EAAmB;AACpC,IAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,KAAA,CAAM,IAAI,CAAA;AAC/B,IAAA,iBAAA,CAAkB,IAAA,EAAM,OAAA,EAAS,KAAA,CAAM,MAAA,EAAQ,QAAQ,CAAA;AACvD,IAAA,iBAAA,CAAkB,IAAA,EAAM,MAAA,EAAQ,SAAA,CAAU,KAAK,GAAG,QAAQ,CAAA;AAAA,EAC5D;AACA,EAAA,YAAA,CAAa,MAAA,EAAQ,SAAS,QAAQ,CAAA;AACtC,EAAA,YAAA,CAAa,MAAA,EAAQ,QAAQ,QAAQ,CAAA;AAGrC,EAAA,IAAI,QAAA,CAAS,WAAW,CAAA,EAAG;AACzB,IAAA,aAAA,CAAc,MAAA,EAAQ,SAAS,QAAQ,CAAA;AACvC,IAAA,aAAA,CAAc,MAAA,EAAQ,QAAQ,QAAQ,CAAA;AAAA,EACxC;AACA,EAAA,OAAO,QAAA,CAAS,MAAA,KAAW,CAAA,GAAI,EAAE,EAAA,EAAI,IAAA,EAAM,MAAA,EAAO,GAAI,EAAE,EAAA,EAAI,KAAA,EAAO,QAAA,EAAS;AAC9E;AChTO,IAAM,UAAUA,CAAAA,CAAE,GAAA,CAAI,EAAE,QAAA,EAAU,YAAY;AAGrD,IAAM,eAAA,GAAkB,4BAAA;AAUjB,IAAM,gBAAA,GAAmBA,CAAAA,CAAE,MAAA,EAAO,CAAE,MAAA;AAAA,EACzC,CAAC,KAAA,KAAU;AACT,IAAA,IAAI,CAAC,MAAM,UAAA,CAAW,GAAG,KAAK,QAAA,CAAS,IAAA,CAAK,KAAK,CAAA,EAAG,OAAO,KAAA;AAC3D,IAAA,IAAI;AACF,MAAA,OAAO,IAAI,GAAA,CAAI,KAAA,EAAO,eAAe,EAAE,MAAA,KAAW,eAAA;AAAA,IACpD,CAAA,CAAA,MAAQ;AACN,MAAA,OAAO,KAAA;AAAA,IACT;AAAA,EACF,CAAA;AAAA,EACA,EAAE,SAAS,8DAAA;AACb,CAAA;AAGO,IAAM,UAAUA,CAAAA,CAAE,KAAA,CAAM,CAAC,OAAA,EAAS,gBAAgB,CAAC,CAAA;AAEnD,IAAM,mBAAA,GAAsBA,EAAE,YAAA,CAAa;AAAA,EAChD,IAAA,EAAMA,CAAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC,CAAA;AAAA,EACtB,OAAA,EAAS,OAAA;AAAA,EACT,IAAA,EAAMA,EAAE,YAAA,CAAa;AAAA;AAAA,IAEnB,OAAA,EAAS,OAAA;AAAA;AAAA,IAET,MAAA,EAAQ;AAAA,GACT,CAAA;AAAA,EACD,OAAA,EAASA,EACN,YAAA,CAAa;AAAA,IACZ,QAAA,EAAUA,CAAAA,CAAE,OAAA,CAAQ,cAAc,CAAA;AAAA,IAClC,MAAA,EAAQA,CAAAA,CAAE,MAAA,EAAO,CAAE,IAAI,CAAC;AAAA,GACzB,EACA,QAAA;AACL,CAAC;;;ACLD,IAAM,oBAAA,GAAuB,IAAA;AAO7B,IAAM,YAAA,GAAe,EAAA;AA2Ed,SAAS,gBAAA,CACd,KAAA,EACA,IAAA,EACA,QAAA,GAA8B,EAAC,EACnB;AACZ,EAAA,MAAM,MAAA,GAAS,QAAA,CAAS,IAAA,EAAM,iBAAiB,CAAA;AAC/C,EAAA,MAAM,OAAA,GAAU,MAAA,CAAO,MAAM,CAAA,KAAM,YAAY,KAAA,GAAQ,KAAA;AACvD,EAAA,MAAM,MAAA,GAAS,QAAA,CAAS,GAAA,CAAI,CAAC,OAAA,EAAS,KAAA,KAAU,QAAA,CAAS,OAAA,EAAS,CAAA,QAAA,EAAW,KAAA,GAAQ,CAAC,CAAA,CAAE,CAAC,CAAA;AACzF,EAAA,MAAM,MAAA,GAAS,OAAO,MAAA,IAAU,IAAA,GAAO,OAAO,QAAA,CAAS,KAAA,CAAM,QAAQ,iBAAiB,CAAA;AAEtF,EAAA,MAAM,MAAA,GAAS,OAAO,MAAA,IAAU,IAAA,GAAO,SAAS,QAAA,CAAS,KAAA,CAAM,QAAQ,iBAAiB,CAAA;AACxF,EAAA,MAAM,MAAA,GAAS,OAAO,MAAA,IAAU,IAAA,GAAO,OAAO,QAAA,CAAS,KAAA,CAAM,QAAQ,iBAAiB,CAAA;AAEtF,EAAA,MAAM,WAAA,GACJ,MAAA,KAAW,IAAA,GAAO,EAAC,GAAI,EAAE,MAAA,EAAQ,QAAA,CAAS,MAAM,CAAA,EAAG,QAAA,EAAU,MAAA,CAAO,MAAM,CAAA,EAAE;AAC9E,EAAA,MAAM,WAAA,GACJ,WAAW,IAAA,GAAO,KAAK,aAAA,CAAc,MAAA,EAAQ,MAAA,EAAQ,OAAA,EAAS,MAAM,CAAA;AACtE,EAAA,MAAM,WAAA,GACJ,MAAA,KAAW,IAAA,GAAO,EAAC,GAAI,EAAE,MAAA,EAAQ,QAAA,CAAS,MAAM,CAAA,EAAG,QAAA,EAAU,MAAA,CAAO,MAAM,CAAA,EAAE;AAC9E,EAAA,OAAO,EAAE,GAAG,WAAA,EAAa,GAAG,WAAA,EAAa,GAAG,WAAA,EAAY;AAC1D;AAWA,SAAS,aAAA,CACP,MAAA,EACA,MAAA,EACA,OAAA,EACA,QAAA,EACa;AACb,EAAA,MAAM,UAAA,GAAa,QAAA,CAAS,MAAA,EAAQ,MAAA,EAAQ,OAAO,CAAA;AACnD,EAAA,MAAM,WAAA,GAAc,CAAC,MAAA,EAAQ,UAAA,EAAY,GAAG,QAAQ,CAAA;AACpD,EAAA,MAAM,SAAA,GAAY,MAAA,CAAO,MAAA,EAAQ,WAAA,EAAa,OAAO,CAAA;AACrD,EAAA,IAAI,cAAc,MAAA,EAAW;AAC3B,IAAA,MAAM,IAAI,KAAA;AAAA,MACR,CAAA,6DAAA,EAAgE,SAAS,MAAM,CAAC,YAAY,YAAY,CAAA,eAAA,EAAkB,SAAS,MAAM,CAAC,mBAAmB,QAAA,CAAS,UAAU,CAAC,CAAA,KAAA,EAAQ,QAAA,CAAS,IAAI,QAAQ,CAAA,CAAE,IAAA,CAAK,IAAI,CAAC,CAAA,CAAA;AAAA,KAC5N;AAAA,EACF;AACA,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,SAAS,MAAM,CAAA;AAAA,IACvB,UAAA,EAAY,SAAS,UAAU,CAAA;AAAA,IAC/B,SAAA,EAAW,SAAS,SAAS;AAAA,GAC/B;AACF;AAOO,SAAS,aAAA,CAAc,OAAsC,IAAA,EAAuB;AACzF,EAAA,MAAM,MAAA,GAAS,QAAA,CAAS,IAAA,EAAM,iBAAiB,CAAA;AAC/C,EAAA,IAAI,KAAA,EAAO,MAAA,IAAU,IAAA,EAAM,OAAO,KAAA;AAClC,EAAA,OAAO,cAAc,QAAA,CAAS,KAAA,CAAM,QAAQ,iBAAiB,CAAA,EAAG,MAAM,CAAA,GAAI,oBAAA;AAC5E;AASO,SAAS,gBAAA,CACd,KAAA,EACA,IAAA,EACA,QAAA,GAA8B,EAAC,EACtB;AACT,EAAA,MAAM,KAAA,GAAQ,gBAAA,CAAiB,KAAA,EAAO,IAAA,EAAM,QAAQ,CAAA;AACpD,EAAA,OAAO,KAAA,CAAM,SAAA,KAAc,MAAA,IAAa,KAAA,CAAM,cAAc,KAAA,CAAM,MAAA;AACpE;AASO,SAAS,gBAAA,CACd,QACA,UAAA,EACY;AACZ,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,UAAA,EAAY,MAAA,IAAU,MAAA,EAAQ,MAAA,IAAU,IAAA;AAAA,IAChD,MAAA,EAAQ,UAAA,EAAY,MAAA,IAAU,MAAA,EAAQ,MAAA,IAAU,IAAA;AAAA,IAChD,MAAA,EAAQ,UAAA,EAAY,MAAA,IAAU,MAAA,EAAQ,MAAA,IAAU;AAAA,GAClD;AACF;AAGO,SAAS,eAAe,IAAA,EAA0B;AACvD,EAAA,OAAO,MAAA,CAAO,QAAA,CAAS,IAAA,EAAM,UAAU,CAAC,CAAA;AAC1C;AAEA,IAAM,KAAA,GAAmB,EAAsB,UAAA,EAAY,CAAC,CAAA,EAAG,CAAA,EAAG,CAAC,CAAY,CAAA;AAC/E,IAAM,KAAA,GAAmB,EAAsB,UAAA,EAAY,CAAC,CAAA,EAAG,CAAA,EAAG,CAAC,CAAY,CAAA;AAG/E,SAAS,OAAO,IAAA,EAA6B;AAC3C,EAAA,OAAO,aAAA,CAAc,OAAO,IAAI,CAAA,IAAK,cAAc,KAAA,EAAO,IAAI,IAAI,SAAA,GAAY,SAAA;AAChF;AAGO,SAAS,QAAA,CAAS,OAAe,IAAA,EAAyB;AAC/D,EAAA,IAAI,OAAO,KAAA,KAAU,QAAA,IAAY,CAAC,iBAAA,CAAkB,IAAA,CAAK,KAAK,CAAA,EAAG;AAC/D,IAAA,MAAM,IAAI,MAAM,CAAA,EAAG,IAAI,kCAAkC,IAAA,CAAK,SAAA,CAAU,KAAK,CAAC,CAAA,CAAA,CAAG,CAAA;AAAA,EACnF;AACA,EAAA,MAAM,OAAA,GAAU,CAAC,EAAA,KAAe,QAAA,CAAS,KAAA,CAAM,KAAA,CAAM,EAAA,EAAI,EAAA,GAAK,CAAC,CAAA,EAAG,EAAE,CAAA,GAAI,GAAA;AACxE,EAAA,OAAO,EAAE,UAAA,EAAY,MAAA,EAAQ,UAAA,EAAY,CAAC,QAAQ,CAAC,CAAA,EAAG,OAAA,CAAQ,CAAC,GAAG,OAAA,CAAQ,CAAC,CAAC,CAAA,EAAG,OAAO,CAAA,EAAE;AAC1F;AAQA,SAAS,QAAQ,UAAA,EAA0C;AACzD,EAAA,MAAM,CAAC,CAAA,EAAG,CAAA,EAAG,CAAC,IAAI,UAAA,CAAW,GAAA;AAAA,IAC3B,CAAC,OAAA,KAAY,IAAA,CAAK,KAAA,CAAM,KAAK,GAAA,CAAI,CAAA,EAAG,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,OAAO,CAAC,CAAA,GAAI,GAAG,CAAA,GAAI;AAAA,GACrE;AACA,EAAA,OAAO,EAAE,UAAA,EAAY,MAAA,EAAQ,UAAA,EAAY,CAAC,GAAG,CAAA,EAAG,CAAC,CAAA,EAAG,KAAA,EAAO,CAAA,EAAE;AAC/D;AASA,SAAS,QAAA,CAAS,MAAA,EAAmB,IAAA,EAAiB,OAAA,EAA+B;AACnF,EAAA,MAAM,EAAA,GAAK,CAAC,QAAA,KACV,OAAA;AAAA,IACE,KAAK,UAAA,CAAW,GAAA;AAAA,MACd,CAAC,SAAS,KAAA,KAAU,OAAA,GAAA,CAAW,OAAO,UAAA,CAAW,KAAK,IAAK,OAAA,IAAW;AAAA;AACxE,GACF;AACF,EAAA,MAAM,OAAA,GAAU,GAAG,oBAAoB,CAAA;AACvC,EAAA,IAAI,aAAA,CAAc,OAAA,EAAS,OAAO,CAAA,IAAK,cAAc,OAAO,OAAA;AAE5D,EAAA,IAAI,MAAA,GAAS,CAAA;AACb,EAAA,IAAI,KAAA,GAAQ,oBAAA;AACZ,EAAA,KAAA,IAAS,IAAA,GAAO,CAAA,EAAG,IAAA,GAAO,YAAA,EAAc,IAAA,EAAA,EAAQ;AAC9C,IAAA,MAAM,MAAA,GAAA,CAAU,SAAS,KAAA,IAAS,CAAA;AAClC,IAAA,IAAI,cAAc,OAAA,EAAS,EAAA,CAAG,MAAM,CAAC,CAAA,IAAK,cAAc,MAAA,GAAS,MAAA;AAAA,SAC5D,KAAA,GAAQ,MAAA;AAAA,EACf;AACA,EAAA,OAAO,GAAG,MAAM,CAAA;AAClB;AAYA,SAAS,gBAAA,CAAiB,KAAa,UAAA,EAA8B;AACnE,EAAA,MAAM,yBAAS,IAAI,GAAA,CAAY,CAAC,CAAA,EAAG,GAAA,EAAK,CAAC,CAAC,CAAA;AAC1C,EAAA,KAAA,MAAW,CAAC,GAAA,EAAK,IAAI,CAAA,IAAK;AAAA,IACxB,CAAC,GAAG,GAAG,CAAA;AAAA,IACP,CAAC,KAAK,CAAC;AAAA,GACT,EAAY;AACV,IAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,GAAA,EAAK,UAAA,EAAY,GAAG,CAAA;AACzC,IAAA,MAAM,EAAA,GAAK,OAAA,CAAQ,GAAA,EAAK,UAAA,EAAY,IAAI,CAAA;AACxC,IAAA,KAAA,IAAS,OAAA,GAAU,CAAA,EAAG,OAAA,GAAU,CAAA,EAAG,OAAA,EAAA,EAAW;AAC5C,MAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,OAAO,CAAA,GAAK,GAAA;AAC/B,MAAA,MAAM,IAAA,GAAO,EAAA,CAAG,OAAO,CAAA,GAAK,GAAA,GAAM,KAAA;AAClC,MAAA,IAAI,SAAS,CAAA,EAAG;AAEhB,MAAA,KAAA,IAAS,IAAA,GAAO,CAAA,EAAG,IAAA,GAAO,GAAA,EAAK,IAAA,EAAA,EAAQ;AACrC,QAAA,MAAM,KAAK,GAAA,GAAA,CAAQ,IAAA,GAAO,GAAA,GAAM,KAAA,IAAS,QAAS,IAAA,GAAO,GAAA,CAAA;AACzD,QAAA,IAAI,KAAK,GAAA,IAAO,EAAA,GAAK,IAAA,EAAM,MAAA,CAAO,IAAI,EAAE,CAAA;AAAA,MAC1C;AAAA,IACF;AAAA,EACF;AACA,EAAA,MAAM,MAAA,GAAS,CAAC,GAAG,MAAM,CAAA,CAAE,KAAK,CAAC,CAAA,EAAG,CAAA,KAAM,CAAA,GAAI,CAAC,CAAA;AAC/C,EAAA,OAAO,MAAA,CAAO,KAAA,CAAM,CAAC,CAAA,CAAE,GAAA,CAAI,CAAC,KAAA,EAAO,KAAA,KAAA,CAAW,MAAA,CAAO,KAAK,CAAA,GAAK,KAAA,IAAS,CAAC,CAAA;AAC3E;AAyBA,SAAS,MAAA,CACP,MAAA,EACA,WAAA,EACA,OAAA,EACuB;AACvB,EAAA,MAAM,KAAA,GAAQ,CAAC,KAAA,KACb,WAAA,CAAY,KAAA,CAAM,CAAC,UAAA,KAAe,aAAA,CAAc,KAAA,EAAO,UAAU,CAAA,IAAK,YAAY,CAAA;AACpF,EAAA,IAAI,KAAA,CAAM,MAAM,CAAA,EAAG,OAAO,MAAA;AAC1B,EAAA,MAAM,CAAC,GAAA,EAAK,UAAA,EAAY,SAAS,CAAA,GAAI,KAAA,CAAM,OAAO,UAAU,CAAA;AAC5D,EAAA,MAAM,EAAA,GAAK,CAAC,KAAA,KAAkB,OAAA,CAAQ,QAAQ,GAAA,EAAK,UAAA,EAAY,KAAK,CAAC,CAAA;AAErE,EAAA,MAAM,QAAA,GAAW,CAAC,KAAA,EAAe,MAAA,KAA8B;AAC7D,IAAA,KAAA,IAAS,IAAA,GAAO,CAAA,EAAG,IAAA,GAAO,YAAA,EAAc,IAAA,EAAA,EAAQ;AAC9C,MAAA,MAAM,MAAA,GAAA,CAAU,QAAQ,MAAA,IAAU,CAAA;AAClC,MAAA,IAAI,KAAA,CAAM,EAAA,CAAG,MAAM,CAAC,GAAG,MAAA,GAAS,MAAA;AAAA,WAC3B,KAAA,GAAQ,MAAA;AAAA,IACf;AACA,IAAA,OAAO,GAAG,MAAM,CAAA;AAAA,EAClB,CAAA;AACA,EAAA,MAAM,MAAA,GAAS,OAAA,KAAY,KAAA,GAAQ,CAAA,GAAI,CAAA;AACvC,EAAA,IAAI,MAAM,OAAO,CAAA,EAAG,OAAO,QAAA,CAAS,WAAW,MAAM,CAAA;AACrD,EAAA,MAAM,MAAA,GAAS,gBAAA,CAAiB,GAAA,EAAK,UAAU,CAAA;AAC/C,EAAA,MAAM,MAAA,GAAS,OAAO,MAAA,CAAO,CAAC,UAAU,KAAA,GAAQ,SAAS,EAAE,OAAA,EAAQ;AACnE,EAAA,MAAM,UAAU,MAAA,CAAO,MAAA,CAAO,CAAC,KAAA,KAAU,QAAQ,SAAS,CAAA;AAC1D,EAAA,KAAA,MAAW,IAAA,IAAQ,MAAA,KAAW,CAAA,GAAI,CAAC,MAAA,EAAQ,OAAO,CAAA,GAAI,CAAC,OAAA,EAAS,MAAM,CAAA,EAAG;AACvE,IAAA,KAAA,MAAW,SAAS,IAAA,EAAM;AACxB,MAAA,MAAM,KAAA,GAAQ,GAAG,KAAK,CAAA;AACtB,MAAA,IAAI,KAAA,CAAM,KAAK,CAAA,EAAG,OAAO,KAAA;AAAA,IAC3B;AAAA,EACF;AACA,EAAA,OAAO,MAAA;AACT;AAGA,SAAS,MAAM,UAAA,EAAyD;AACtE,EAAA,MAAM,CAAC,CAAA,EAAG,CAAA,EAAG,CAAC,CAAA,GAAI,UAAA;AAClB,EAAA,MAAM,GAAA,GAAM,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,GAAG,CAAC,CAAA;AAC5B,EAAA,MAAM,GAAA,GAAM,IAAA,CAAK,GAAA,CAAI,CAAA,EAAG,GAAG,CAAC,CAAA;AAC5B,EAAA,MAAM,SAAA,GAAA,CAAa,MAAM,GAAA,IAAO,CAAA;AAChC,EAAA,MAAM,SAAS,GAAA,GAAM,GAAA;AACrB,EAAA,IAAI,WAAW,CAAA,EAAG,OAAO,CAAC,CAAA,EAAG,GAAG,SAAS,CAAA;AACzC,EAAA,MAAM,aAAa,MAAA,IAAU,CAAA,GAAI,KAAK,GAAA,CAAI,CAAA,GAAI,YAAY,CAAC,CAAA,CAAA;AAC3D,EAAA,MAAM,SACJ,GAAA,KAAQ,CAAA,GAAA,CAAA,CACF,CAAA,GAAI,CAAA,IAAK,SAAS,CAAA,IAAK,CAAA,GACzB,GAAA,KAAQ,CAAA,GAAA,CACL,IAAI,CAAA,IAAK,MAAA,GAAS,CAAA,GAAA,CAClB,CAAA,GAAI,KAAK,MAAA,GAAS,CAAA;AAC3B,EAAA,OAAO,CAAC,SAAS,EAAA,EAAI,IAAA,CAAK,IAAI,CAAA,EAAG,UAAU,GAAG,SAAS,CAAA;AACzD;AAOA,SAAS,OAAA,CAAQ,GAAA,EAAa,UAAA,EAAoB,SAAA,EAA6C;AAC7F,EAAA,MAAM,UAAU,CAAA,GAAI,IAAA,CAAK,IAAI,CAAA,GAAI,SAAA,GAAY,CAAC,CAAA,IAAK,UAAA;AACnD,EAAA,MAAM,SAAS,GAAA,GAAM,EAAA;AACrB,EAAA,MAAM,SAAS,MAAA,IAAU,CAAA,GAAI,KAAK,GAAA,CAAK,MAAA,GAAS,IAAK,CAAC,CAAA,CAAA;AACtD,EAAA,MAAM,CAAC,CAAA,EAAG,CAAA,EAAG,CAAC,CAAA,GACZ,MAAA,GAAS,IACL,CAAC,MAAA,EAAQ,QAAQ,CAAC,CAAA,GAClB,SAAS,CAAA,GACP,CAAC,QAAQ,MAAA,EAAQ,CAAC,IAClB,MAAA,GAAS,CAAA,GACP,CAAC,CAAA,EAAG,MAAA,EAAQ,MAAM,CAAA,GAClB,MAAA,GAAS,IACP,CAAC,CAAA,EAAG,QAAQ,MAAM,CAAA,GAClB,SAAS,CAAA,GACP,CAAC,QAAQ,CAAA,EAAG,MAAM,IAClB,CAAC,MAAA,EAAQ,GAAG,MAAM,CAAA;AAChC,EAAA,MAAM,MAAA,GAAS,YAAY,MAAA,GAAS,CAAA;AACpC,EAAA,OAAO,CAAC,CAAA,GAAI,MAAA,EAAQ,CAAA,GAAI,MAAA,EAAQ,IAAI,MAAM,CAAA;AAC5C;;;AClXA,IAAM,aAAA,GAAgB,iEAAA;AACtB,IAAM,cAAA,GAAiB,sDAAA;AACvB,IAAM,UAA6B,CAAC,GAAA,EAAK,GAAA,EAAK,GAAA,EAAK,KAAK,GAAG,CAAA;AAE3D,SAAS,IAAA,CACP,EAAA,EACA,MAAA,EACA,QAAA,EACA,GAAA,EACU;AACV,EAAA,MAAM,QAAA,GAAW,QAAA,KAAa,OAAA,GAAU,cAAA,GAAiB,aAAA;AACzD,EAAA,OAAO;AAAA,IACL,EAAA;AAAA,IACA,MAAA;AAAA,IACA,QAAA;AAAA,IACA,OAAA,EAAS,OAAA;AAAA,IACT,QAAA;AAAA,IACA,KAAA,EAAO,CAAA,CAAA,EAAI,MAAM,CAAA,GAAA,EAAM,QAAQ,CAAA,CAAA;AAAA,IAC/B;AAAA,GACF;AACF;AASO,IAAM,YAAiC,UAAA,CAAW;AAAA,EACvD,IAAA,CAAK,OAAA,EAAS,OAAA,EAAS,YAAA,EAAc,MAAM,CAAA;AAAA,EAC3C,IAAA,CAAK,SAAA,EAAW,SAAA,EAAW,YAAA,EAAc,MAAM,CAAA;AAAA,EAC/C,IAAA,CAAK,mBAAA,EAAqB,mBAAA,EAAqB,YAAA,EAAc,MAAM,CAAA;AAAA,EACnE,IAAA,CAAK,SAAA,EAAW,SAAA,EAAW,YAAA,EAAc,MAAM,CAAA;AAAA,EAC/C,IAAA,CAAK,eAAA,EAAiB,eAAA,EAAiB,YAAA,EAAc,MAAM,CAAA;AAAA,EAC3D,IAAA,CAAK,eAAA,EAAiB,eAAA,EAAiB,YAAA,EAAc,MAAM,CAAA;AAAA,EAC3D,IAAA,CAAK,WAAA,EAAa,WAAA,EAAa,YAAA,EAAc,MAAM,CAAA;AAAA,EACnD,IAAA,CAAK,eAAA,EAAiB,eAAA,EAAiB,YAAA,EAAc,MAAM,CAAA;AAAA,EAC3D,IAAA,CAAK,YAAA,EAAc,YAAA,EAAc,OAAA,EAAS,SAAS;AACrD,CAAC;AAED,IAAM,KAAA,GAAQ,IAAI,GAAA,CAAI,SAAA,CAAU,GAAA,CAAI,CAAC,SAAA,KAAc,CAAC,SAAA,CAAU,EAAA,EAAc,SAAS,CAAC,CAAC,CAAA;AAGhF,SAAS,WAAW,KAAA,EAAyC;AAClE,EAAA,OAAO,OAAO,KAAA,KAAU,QAAA,IAAY,MAAM,GAAA,CAAI,KAAK,GAAG,GAAA,KAAQ,MAAA;AAChE;AAEA,SAAS,OAAO,EAAA,EAA0B;AACxC,EAAA,OAAO,KAAA,CAAM,IAAI,EAAE,CAAA;AACrB;AA2FA,IAAM,IAAA,GAAO,CAAC,IAAA,EAAsB,IAAA,GAAgC,EAAC,MAAkB;AAAA,EACrF,IAAA,EAAM,IAAA;AAAA,EACN,GAAG;AACL,CAAA,CAAA;AAEA,IAAM,WAAA,GAAwD;AAAA;AAAA;AAAA,EAG5D,KAAA,EAAO;AAAA,IACL,IAAA,EAAM,OAAA;AAAA,IACN,SAAA,EACE,4GAAA;AAAA,IACF,QAAA,EAAU,IAAA;AAAA,IACV,WAAA,EAAa,MAAA;AAAA,IACb,OAAO;AAAC,GACV;AAAA,EACA,IAAA,EAAM;AAAA,IACJ,IAAA,EAAM,MAAA;AAAA,IACN,SAAA,EACE,wHAAA;AAAA,IACF,QAAA,EAAU,SAAA;AAAA,IACV,WAAA,EAAa,MAAA;AAAA,IACb,KAAA,EAAO;AAAA,MACL,aAAA,EAAe,GAAA;AAAA,MACf,eAAA,EAAiB,UAAA;AAAA,MACjB,MAAA,EAAQ,EAAA;AAAA,MACR,KAAA,EAAO;AAAA,QACL,KAAA,EAAO;AAAA,UACL,IAAA,EAAM,KAAK,MAAM,CAAA;AAAA,UACjB,IAAA,EAAM,IAAA;AAAA,UACN,SAAA,EAAW,CAAA;AAAA,UACX,MAAA,EAAQ,wEAAA;AAAA,UACR,KAAA,EAAO,KAAK,MAAM;AAAA,SACpB;AAAA;AAAA;AAAA;AAAA;AAAA,QAKA,IAAA,EAAM;AAAA,UACJ,IAAA,EAAM,IAAA,CAAK,MAAA,EAAQ,EAAE,MAAA,EAAQ,EAAE,IAAA,EAAM,YAAA,EAAc,KAAA,EAAO,IAAA,EAAK,EAAG,CAAA;AAAA,UAClE,IAAA,EAAM,IAAA;AAAA,UACN,SAAA,EAAW,CAAA;AAAA,UACX,MAAA,EACE,yGAAA;AAAA,UACF,KAAA,EAAO,KAAK,YAAY;AAAA;AAC1B,OACF;AAAA;AAAA;AAAA;AAAA,MAIA,YAAA,EAAc;AAAA,QACZ,OAAO,EAAE,CAAA,EAAG,CAAA,EAAG,CAAA,EAAG,GAAG,IAAA,EAAM,EAAA,EAAI,MAAA,EAAQ,EAAA,EAAI,OAAO,IAAA,CAAK,SAAA,EAAW,EAAE,KAAA,EAAO,GAAA,EAAK,CAAA,EAAE;AAAA,QAClF,IAAA,EAAM;AAAA,OACR;AAAA,MACA,OAAA,EAAS;AAAA;AACX,GACF;AAAA,EACA,SAAA,EAAW;AAAA,IACT,IAAA,EAAM,WAAA;AAAA,IACN,SAAA,EACE,mGAAA;AAAA,IACF,QAAA,EAAU,eAAA;AAAA,IACV,WAAA,EAAa,YAAA;AAAA,IACb,KAAA,EAAO;AAAA,MACL,aAAA,EAAe,GAAA;AAAA,MACf,eAAA,EAAiB,SAAA;AAAA,MACjB,MAAA,EAAQ,CAAA;AAAA;AAAA;AAAA,MAGR,KAAA,EAAO;AAAA,QACL,KAAA,EAAO;AAAA,UACL,IAAA,EAAM,KAAK,MAAM,CAAA;AAAA,UACjB,IAAA,EAAM,KAAK,QAAQ,CAAA;AAAA,UACnB,SAAA,EAAW,CAAA;AAAA,UACX,MAAA,EAAQ,IAAA;AAAA,UACR,KAAA,EAAO,KAAK,MAAM;AAAA,SACpB;AAAA,QACA,IAAA,EAAM;AAAA,UACJ,IAAA,EAAM,KAAK,MAAM,CAAA;AAAA,UACjB,IAAA,EAAM,KAAK,QAAQ,CAAA;AAAA,UACnB,SAAA,EAAW,CAAA;AAAA,UACX,MAAA,EAAQ,IAAA;AAAA,UACR,KAAA,EAAO,KAAK,MAAM;AAAA;AACpB,OACF;AAAA,MACA,YAAA,EAAc,EAAE,KAAA,EAAO,MAAA,EAAQ,MAAM,MAAA,EAAO;AAAA,MAC5C,OAAA,EAAS;AAAA;AACX,GACF;AAAA,EACA,IAAA,EAAM;AAAA,IACJ,IAAA,EAAM,MAAA;AAAA,IACN,SAAA,EACE,mGAAA;AAAA,IACF,QAAA,EAAU,eAAA;AAAA,IACV,WAAA,EAAa,MAAA;AAAA,IACb,KAAA,EAAO;AAAA,MACL,aAAA,EAAe,GAAA;AAAA,MACf,eAAA,EAAiB,SAAA;AAAA,MACjB,MAAA,EAAQ,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA,MAKR,KAAA,EAAO;AAAA,QACL,KAAA,EAAO;AAAA,UACL,IAAA,EAAM,KAAK,OAAO,CAAA;AAAA,UAClB,MAAM,IAAA,CAAK,YAAA,EAAc,EAAE,KAAA,EAAO,MAAM,CAAA;AAAA,UACxC,SAAA,EAAW,CAAA;AAAA,UACX,MAAA,EAAQ,IAAA;AAAA,UACR,KAAA,EAAO,KAAK,MAAM;AAAA,SACpB;AAAA,QACA,IAAA,EAAM;AAAA,UACJ,IAAA,EAAM,KAAK,OAAO,CAAA;AAAA,UAClB,MAAM,IAAA,CAAK,YAAA,EAAc,EAAE,KAAA,EAAO,KAAK,CAAA;AAAA,UACvC,SAAA,EAAW,CAAA;AAAA,UACX,MAAA,EAAQ,IAAA;AAAA,UACR,KAAA,EAAO,KAAK,YAAY;AAAA;AAC1B,OACF;AAAA,MACA,YAAA,EAAc,EAAE,KAAA,EAAO,MAAA,EAAQ,MAAM,MAAA,EAAO;AAAA,MAC5C,OAAA,EAAS;AAAA;AACX;AAEJ,CAAA;AAEO,IAAM,aAAA,GAAuC,OAAO,MAAA,CAAO;AAAA,EAChE,OAAA;AAAA,EACA,MAAA;AAAA,EACA,WAAA;AAAA,EACA;AACF,CAAC;AAGM,SAAS,WAAW,KAAA,EAAqC;AAG9D,EAAA,OAAO,OAAO,UAAU,QAAA,IAAY,MAAA,CAAO,UAAU,cAAA,CAAe,IAAA,CAAK,aAAa,KAAK,CAAA;AAC7F;AAUO,SAAS,gBAAA,CACd,OACA,QAAA,EACY;AACZ,EAAA,MAAM,aAAa,WAAA,CAAY,UAAA,CAAW,KAAK,CAAA,GAAI,QAAQ,OAAO,CAAA;AAClE,EAAA,MAAM,QAAoB,EAAC;AAC3B,EAAA,MAAM,IAAA,GAAO,UAAA,CAAW,QAAQ,CAAA,GAC5B,MAAA,CAAO,QAAQ,CAAA,GACf,UAAA,CAAW,QAAA,KAAa,IAAA,GACtB,MAAA,GACA,MAAA,CAAO,WAAW,QAAQ,CAAA;AAChC,EAAA,IAAI,IAAA,QAAY,QAAA,GAAW,IAAA;AAC3B,EAAA,MAAM,UAAU,UAAA,CAAW,WAAA,KAAgB,SAAS,IAAA,GAAO,MAAA,CAAO,WAAW,WAAW,CAAA;AACxF,EAAA,IAAI,OAAA,QAAe,WAAA,GAAc,OAAA;AAGjC,EAAA,OAAO,SAAS,EAAE,GAAG,OAAO,GAAG,UAAA,CAAW,OAAO,CAAA;AACnD;AAGO,IAAM,UAAA,GAAqD,UAAA;AAAA,EAChE,MAAA,CAAO,WAAA;AAAA,IACL,aAAA,CAAc,GAAA,CAAI,CAAC,EAAA,KAAO;AAAA,MACxB,EAAA;AAAA,MACA;AAAA,QACE,EAAA;AAAA,QACA,IAAA,EAAM,WAAA,CAAY,EAAE,CAAA,CAAE,IAAA;AAAA,QACtB,SAAA,EAAW,WAAA,CAAY,EAAE,CAAA,CAAE,SAAA;AAAA,QAC3B,KAAA,EAAO,iBAAiB,EAAE;AAAA;AAC5B,KACD;AAAA;AAEL;AAQA,SAAS,SAAY,KAAA,EAAa;AAChC,EAAA,IAAI,MAAM,OAAA,CAAQ,KAAK,GAAG,OAAO,KAAA,CAAM,IAAI,QAAQ,CAAA;AACnD,EAAA,IAAI,KAAA,KAAU,IAAA,IAAQ,OAAO,KAAA,KAAU,QAAA,EAAU;AAC/C,IAAA,OAAO,MAAA,CAAO,WAAA;AAAA,MACZ,MAAA,CAAO,OAAA,CAAQ,KAAK,CAAA,CAAE,IAAI,CAAC,CAAC,GAAA,EAAK,KAAK,MAAM,CAAC,GAAA,EAAK,QAAA,CAAS,KAAK,CAAC,CAAC;AAAA,KACpE;AAAA,EACF;AACA,EAAA,OAAO,KAAA;AACT;AAGA,SAAS,WAAc,KAAA,EAAa;AAClC,EAAA,IAAI,KAAA,KAAU,QAAQ,OAAO,KAAA,KAAU,YAAY,CAAC,MAAA,CAAO,QAAA,CAAS,KAAK,CAAA,EAAG;AAC1E,IAAA,KAAA,MAAW,SAAS,MAAA,CAAO,MAAA,CAAO,KAAK,CAAA,aAAc,KAAK,CAAA;AAC1D,IAAA,MAAA,CAAO,OAAO,KAAK,CAAA;AAAA,EACrB;AACA,EAAA,OAAO,KAAA;AACT;AAYO,SAAS,gBAAA,CACd,KAAA,EACA,OAAA,EACA,MAAA,EACQ;AACR,EAAA,MAAM,EAAA,GAAK,CAAC,IAAA,KAAoC;AAC9C,IAAA,MAAM,KAAA,GAAQ,QAAQ,IAAI,CAAA;AAC1B,IAAA,IAAI,CAAC,gBAAA,CAAiB,IAAI,CAAA,IAAK,UAAU,MAAA,EAAW;AAClD,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,mBAAA,EAAsB,IAAI,CAAA,qCAAA,CAAuC,CAAA;AAAA,IACnF;AACA,IAAA,OAAO,QAAA,CAAS,KAAA,EAAO,CAAA,cAAA,EAAiB,IAAI,CAAA,CAAE,CAAA;AAAA,EAChD,CAAA;AACA,EAAA,IAAI,GAAA,GAAM,EAAA,CAAG,KAAA,CAAM,IAAI,CAAA,CAAE,UAAA;AACzB,EAAA,IAAI,MAAM,MAAA,EAAQ;AAChB,IAAA,MAAM,KAAA,GAAQ,SAAA,CAAU,KAAA,CAAM,MAAA,CAAO,KAAK,CAAA;AAC1C,IAAA,GAAA,GAAM,QAAA,CAAS,KAAK,EAAA,CAAG,KAAA,CAAM,OAAO,IAAI,CAAA,CAAE,YAAwC,KAAK,CAAA;AAAA,EACzF;AACA,EAAA,IAAI,KAAA,CAAM,KAAA,KAAU,MAAA,IAAa,KAAA,CAAM,QAAQ,CAAA,EAAG;AAChD,IAAA,IAAI,WAAW,MAAA,EAAW;AACxB,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,cAAA,EAAiB,KAAA,CAAM,IAAI,CAAA,0CAAA,CAA4C,CAAA;AAAA,IACzF;AACA,IAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,MAAA,EAAQ,mBAAmB,CAAA,CAAE,UAAA;AACpD,IAAA,MAAM,KAAA,GAAQ,SAAA,CAAU,KAAA,CAAM,KAAK,CAAA;AACnC,IAAA,GAAA,GAAM,GAAA,CAAI,GAAA,CAAI,CAAC,OAAA,EAAS,KAAA,KAAU,KAAA,CAAM,KAAK,CAAA,GAAA,CAAM,OAAA,GAAU,KAAA,CAAM,KAAK,CAAA,IAAM,KAAK,CAAA;AAAA,EAKrF;AACA,EAAA,OAAO,QAAA,CAAS,EAAsB,YAAY,GAAc,CAAC,CAAA;AACnE;AAEA,SAAS,UAAU,KAAA,EAAuB;AACxC,EAAA,OAAO,KAAK,GAAA,CAAI,CAAA,EAAG,KAAK,GAAA,CAAI,CAAA,EAAG,KAAK,CAAC,CAAA;AACvC;AAKA,SAAS,QAAA,CAAS,CAAA,EAAQ,CAAA,EAAQ,KAAA,EAAoB;AACpD,EAAA,MAAM,CAAC,EAAA,EAAI,EAAA,EAAI,EAAE,CAAA,GAAI,QAAQ,CAAC,CAAA;AAC9B,EAAA,MAAM,CAAC,EAAA,EAAI,EAAA,EAAI,EAAE,CAAA,GAAI,QAAQ,CAAC,CAAA;AAC9B,EAAA,MAAM,KAAK,CAAC,IAAA,EAAc,EAAA,KAAe,IAAA,GAAA,CAAQ,KAAK,IAAA,IAAQ,KAAA;AAC9D,EAAA,OAAO,UAAU,CAAC,EAAA,CAAG,EAAA,EAAI,EAAE,GAAG,EAAA,CAAG,EAAA,EAAI,EAAE,CAAA,EAAG,GAAG,EAAA,EAAI,EAAE,CAAC,CAAC,CAAA,CAAE,IAAI,SAAS,CAAA;AACtE;AAEA,IAAM,UAAA,GAAa,CAAC,CAAA,KAAe,CAAA,IAAK,QAAA,GAAY,QAAQ,CAAA,GAAI,KAAA,GAAQ,CAAA,KAAM,CAAA,GAAI,GAAA,CAAA,GAAO,KAAA;AAEzF,SAAS,QAAQ,GAAA,EAAe;AAC9B,EAAA,MAAM,CAAC,CAAA,EAAG,CAAA,EAAG,CAAC,CAAA,GAAI,GAAA,CAAI,IAAI,aAAa,CAAA;AACvC,EAAA,MAAM,CAAA,GAAI,KAAK,IAAA,CAAK,YAAA,GAAe,IAAI,YAAA,GAAe,CAAA,GAAI,eAAe,CAAC,CAAA;AAC1E,EAAA,MAAM,CAAA,GAAI,KAAK,IAAA,CAAK,YAAA,GAAe,IAAI,YAAA,GAAe,CAAA,GAAI,eAAe,CAAC,CAAA;AAC1E,EAAA,MAAM,CAAA,GAAI,KAAK,IAAA,CAAK,YAAA,GAAe,IAAI,YAAA,GAAe,CAAA,GAAI,eAAe,CAAC,CAAA;AAC1E,EAAA,OAAO;AAAA,IACL,YAAA,GAAe,CAAA,GAAI,WAAA,GAAc,CAAA,GAAI,YAAA,GAAe,CAAA;AAAA,IACpD,YAAA,GAAe,CAAA,GAAI,WAAA,GAAc,CAAA,GAAI,YAAA,GAAe,CAAA;AAAA,IACpD,YAAA,GAAe,CAAA,GAAI,YAAA,GAAe,CAAA,GAAI,WAAA,GAAc;AAAA,GACtD;AACF;AAEA,SAAS,SAAA,CAAU,CAAC,SAAA,EAAW,CAAA,EAAG,CAAC,CAAA,EAAa;AAC9C,EAAA,MAAM,CAAA,GAAA,CAAK,SAAA,GAAY,YAAA,GAAe,CAAA,GAAI,eAAe,CAAA,KAAM,CAAA;AAC/D,EAAA,MAAM,CAAA,GAAA,CAAK,SAAA,GAAY,YAAA,GAAe,CAAA,GAAI,eAAe,CAAA,KAAM,CAAA;AAC/D,EAAA,MAAM,CAAA,GAAA,CAAK,SAAA,GAAY,YAAA,GAAe,CAAA,GAAI,cAAc,CAAA,KAAM,CAAA;AAC9D,EAAA,OAAO;AAAA,IACL,YAAA,GAAe,CAAA,GAAI,YAAA,GAAe,CAAA,GAAI,YAAA,GAAe,CAAA;AAAA,IACrD,aAAA,GAAgB,CAAA,GAAI,YAAA,GAAe,CAAA,GAAI,YAAA,GAAe,CAAA;AAAA,IACtD,aAAA,GAAgB,CAAA,GAAI,YAAA,GAAe,CAAA,GAAI,WAAA,GAAc;AAAA,GACvD,CAAE,IAAI,CAAC,OAAA,KAAY,WAAW,SAAA,CAAU,OAAO,CAAC,CAAC,CAAA;AACnD","file":"chunk-UZNRJWN5.js","sourcesContent":["/**\n * The brand contract, as data: which token of a brand's `tokens.json` sets\n * which custom property, and what that property paints.\n *\n * It is the theme contract seen from the other side. `src/styles/theme.css`\n * states it as a working default and `docs/theming.md` in prose; this is the\n * same list as a table a build can read, and a brand is exactly these tokens\n * and no others - the validator refuses a file that adds one, because a token\n * nothing consumes is a value with no way to be looked at.\n *\n * The colour and radius rows are not a second list kept beside `theme.css`:\n * they are held to it, by `__tests__/contract.test.ts` over the source and by\n * `scripts/assert-bundle.mjs` over the build. The two typography rows are the\n * exception, and on purpose. `--font-sans` and `--font-mono` are the names of\n * Tailwind's own theme variables, which the prebuilt sheet already declares,\n * so `theme.css` does not define them: it is unlayered, and a value there\n * would override the typeface of every host that loads it. The stock\n * typeface is therefore the host's own, and only a brand's scope sets these\n * two. See docs/brand.md.\n */\n\nexport type ContractTokenType = 'color' | 'dimension' | 'fontFamily';\n\nexport interface ContractToken {\n  /** The DTCG token id, `color.background`. */\n  id: string;\n  /** The custom property it sets, `--background`. */\n  variable: string;\n  type: ContractTokenType;\n  /** What the property paints, in the words a producer is told. */\n  paints: string;\n}\n\n/** The colour tokens, in the order `theme.css` states them. */\nexport const COLOR_TOKEN_NAMES = [\n  'background',\n  'foreground',\n  'card',\n  'card-foreground',\n  'popover',\n  'popover-foreground',\n  'primary',\n  'primary-foreground',\n  'secondary',\n  'secondary-foreground',\n  'muted',\n  'muted-foreground',\n  'accent',\n  'accent-foreground',\n  'destructive',\n  'destructive-foreground',\n  'border',\n  'input',\n  'ring',\n] as const;\n\nexport type ColorTokenName = (typeof COLOR_TOKEN_NAMES)[number];\n\nexport function isColorTokenName(name: string): name is ColorTokenName {\n  return (COLOR_TOKEN_NAMES as readonly string[]).includes(name);\n}\n\nconst COLOR_PAINTS: Record<ColorTokenName, string> = {\n  background: 'The page canvas.',\n  foreground: 'Text on the canvas.',\n  card: \"A raised surface on the canvas: the rail's panel, a list's rows. May be translucent.\",\n  'card-foreground': 'Text on a card.',\n  popover: \"A floating surface: a select's menu, a tooltip. Opaque.\",\n  'popover-foreground': 'Text on a popover.',\n  primary: 'The accent: the run button, a selected pill, a section number, a highlight.',\n  'primary-foreground': 'Text on the accent.',\n  secondary: 'A quiet filled surface: a secondary button, an unselected segment.',\n  'secondary-foreground': 'Text on a secondary surface.',\n  muted: \"A subdued fill: a table's header band, an inactive tab strip.\",\n  'muted-foreground':\n    \"Secondary text: descriptions, hints, a summary row's label. Most of the text on the page that is not a heading or a value.\",\n  accent: 'A hover fill: a menu item under the pointer.',\n  'accent-foreground': 'Text on an accent fill.',\n  destructive: 'The error colour: an invalid mark, a remove button.',\n  'destructive-foreground': 'Text on the destructive colour.',\n  border: 'The hairline: every border and divider.',\n  input:\n    \"The control surface, a field's own fill - a step off the canvas, so fields read as one family.\",\n  ring: 'The focus ring.',\n};\n\nexport const BRAND_CONTRACT: readonly ContractToken[] = [\n  ...COLOR_TOKEN_NAMES.map((name): ContractToken => ({\n    id: `color.${name}`,\n    variable: `--${name}`,\n    type: 'color',\n    paints: COLOR_PAINTS[name],\n  })),\n  {\n    id: 'radius.base',\n    variable: '--radius',\n    type: 'dimension',\n    paints: 'The corner radius of a control; cards take one and a half of it.',\n  },\n  {\n    id: 'font.sans',\n    variable: '--font-sans',\n    type: 'fontFamily',\n    paints: 'The typeface of everything on the page.',\n  },\n  {\n    id: 'font.mono',\n    variable: '--font-mono',\n    type: 'fontFamily',\n    paints: 'Tags, numbers, the receipt.',\n  },\n];\n\n/** The minimum contrast ratio text must reach: WCAG 2 AA for normal text. */\nexport const MIN_CONTRAST = 4.5;\n\n/**\n * The contrast a control's outline or mark needs against what surrounds it:\n * WCAG 2's level for a user interface component (1.4.11). A button colour\n * below it against the page is a button whose shape is hard to see.\n */\nexport const MIN_CONTROL_CONTRAST = 3;\n\n/**\n * Two colours the contract holds to a contrast ratio in both modes, as they\n * render: the canvas opaque, a translucent surface laid over it, and the ink\n * blended over whatever is beneath it by its alpha.\n */\nexport interface ContrastPair {\n  foreground: ColorTokenName;\n  background: ColorTokenName;\n  /**\n   * The canvas beneath the pair's surface. When it is set, `background` names\n   * a surface the contract lets be translucent, and that surface is laid over\n   * this canvas before anything is measured on it. Absent, `background` is\n   * the canvas itself and must be opaque, since what shows through a\n   * translucent canvas is whatever the host paints beneath it.\n   */\n  over?: ColorTokenName;\n  /** The ratio the pair must reach: `MIN_CONTRAST` for text, `MIN_CONTROL_CONTRAST` for a mark. */\n  minimum: number;\n}\n\n/**\n * The pairs a brand must hold in both modes. The ink and the secondary text\n * on the canvas are text, at WCAG AA.\n *\n * The secondary text on the field fill is held to a control's 3:1. The kernel\n * draws marks in that colour on the fill, an off switch's track and a number\n * field's stepper icons, and those need 3:1 to be seen. It also sets text in\n * that colour on the fill, a boolean row's description, an unselected pill's\n * label and a placeholder, which AA would hold to 4.5:1, but the stock\n * palette's light mode measures 4.39:1 on its own field fill, the same grey\n * it measures on `--muted`, so the text bar there waits on the stock palette\n * reaching it. The field fill may be translucent, as a style's often is, so\n * it is laid over the canvas first.\n *\n * The error colour is held to the same 3:1, as a solid colour, on the canvas\n * and on a card laid over it, which is what a host's panel usually is,\n * because a framed section's error bar is drawn in that colour, solid, on\n * either. The outlines of a card and of a field in error are drawn at half\n * and seven tenths of it, so they read fainter than this pair measures, and\n * the pair does not hold them. The error captions are text, which AA would\n * hold to 4.5:1, but the stock palette's red measures 3.76:1 on white, so\n * that bar waits on the stock palette too.\n */\nexport const CONTRAST_PAIRS: readonly ContrastPair[] = [\n  { foreground: 'foreground', background: 'background', minimum: MIN_CONTRAST },\n  { foreground: 'muted-foreground', background: 'background', minimum: MIN_CONTRAST },\n  {\n    foreground: 'muted-foreground',\n    background: 'input',\n    over: 'background',\n    minimum: MIN_CONTROL_CONTRAST,\n  },\n  { foreground: 'destructive', background: 'background', minimum: MIN_CONTROL_CONTRAST },\n  {\n    foreground: 'destructive',\n    background: 'card',\n    over: 'background',\n    minimum: MIN_CONTROL_CONTRAST,\n  },\n];\n\nconst byId = new Map(BRAND_CONTRACT.map((token) => [token.id, token]));\n\n/** The custom property a token sets, or a loud failure for a token the contract does not name. */\nexport function contractVariable(id: string): string {\n  const token = byId.get(id);\n  if (!token) throw new Error(`The brand contract has no token ${id}.`);\n  return token.variable;\n}\n","import { z } from 'zod';\nimport {\n  COLOR_TOKEN_NAMES,\n  type ColorTokenName,\n  CONTRAST_PAIRS,\n  isColorTokenName,\n  MIN_CONTRAST,\n} from './contract';\n\n/**\n * A brand's `tokens.json`, validated against the contract.\n *\n * The file is standard DTCG (the Design Tokens Community Group format, 2025.10),\n * and DTCG is looser than the contract in every direction that matters here: it\n * accepts any token, any colour space, a string colour, and a mode of any name.\n * Each of those is a way for a producer's file to be wrong and a page to be\n * painted anyway. So this holds the contract's own rules - exactly its tokens,\n * object colours in sRGB whose hex agrees with their components, aliases only\n * to contract tokens and never in a cycle, a description on every token, `dark`\n * the only mode and stated on every colour object (an alias may stand for both\n * modes), the contrast pairs in both modes - and a file it accepts is one the\n * compiler can only render. Every problem is named by its path, all at once,\n * so a producer's repair round is handed the whole list.\n */\n\nconst component = z.number().min(0).max(1);\n\nexport const srgbColorSchema = z.strictObject({\n  colorSpace: z.literal('srgb'),\n  components: z.tuple([component, component, component]),\n  alpha: z.number().min(0).max(1),\n  hex: z\n    .string()\n    .regex(/^#[0-9a-f]{6}$/i, 'a hex colour is #rrggbb')\n    .optional(),\n});\n\nexport type SrgbColor = z.infer<typeof srgbColorSchema>;\n\nconst colorAliasSchema = z\n  .string()\n  .regex(/^\\{color\\.[a-z][a-z-]*\\}$/, 'an alias is \"{color.<name>}\"');\n\nconst colorValueSchema = z.union([srgbColorSchema, colorAliasSchema]);\n\nexport type ColorValue = z.infer<typeof colorValueSchema>;\n\nconst description = z.string().min(1, 'every token carries a $description');\n\n/**\n * A C0 control or DEL. Written as a test on the code point rather than a\n * character class, since that range is what a regex may not spell\n * (`no-control-regex`).\n */\nexport function isControlCharacter(char: string): boolean {\n  const code = char.codePointAt(0)!;\n  return code < 0x20 || code === 0x7f;\n}\n\nconst colorTokenSchema = z\n  .strictObject({\n    $value: colorValueSchema,\n    $description: description,\n    $extensions: z\n      .strictObject({\n        mode: z.strictObject({ dark: colorValueSchema }),\n      })\n      .optional(),\n  })\n  .refine((token) => token.$extensions !== undefined || typeof token.$value === 'string', {\n    message: 'a colour carries $extensions.mode.dark; only an alias may stand for both modes',\n    path: ['$extensions'],\n  });\n\nexport type ColorToken = z.infer<typeof colorTokenSchema>;\n\nconst dimensionTokenSchema = z.strictObject({\n  $value: z.strictObject({ value: z.number().min(0), unit: z.enum(['rem', 'px']) }),\n  $description: description,\n});\n\nexport type DimensionToken = z.infer<typeof dimensionTokenSchema>;\n\nconst fontFamilyTokenSchema = z.strictObject({\n  $value: z\n    .array(\n      z\n        .string()\n        .min(1)\n        // A face's name never holds one, and a form feed ends a CSS string.\n        .refine((name) => ![...name].some(isControlCharacter), {\n          message: 'a family name holds no control characters',\n        }),\n    )\n    .min(1),\n  $description: description,\n});\n\nexport type FontFamilyToken = z.infer<typeof fontFamilyTokenSchema>;\n\n/** The token file, typed: the contract's groups and tokens, nothing else. */\nexport interface BrandTokens {\n  color: { $type: 'color' } & Record<ColorTokenName, ColorToken>;\n  radius: { $type: 'dimension'; base: DimensionToken };\n  font: { $type: 'fontFamily'; sans: FontFamilyToken; mono: FontFamilyToken };\n}\n\nconst brandTokensSchema = z.strictObject({\n  color: z.strictObject({\n    $type: z.literal('color'),\n    ...Object.fromEntries(COLOR_TOKEN_NAMES.map((name) => [name, colorTokenSchema])),\n  }),\n  radius: z.strictObject({ $type: z.literal('dimension'), base: dimensionTokenSchema }),\n  font: z.strictObject({\n    $type: z.literal('fontFamily'),\n    sans: fontFamilyTokenSchema,\n    mono: fontFamilyTokenSchema,\n  }),\n});\n\nexport type TokensValidation =\n  { ok: true; tokens: BrandTokens } | { ok: false; problems: string[] };\n\nexport type ColorMode = 'light' | 'dark';\n\n/** The name an alias points at, or null for a colour object. */\nexport function aliasTarget(value: ColorValue): string | null {\n  return typeof value === 'string' ? value.slice('{color.'.length, -1) : null;\n}\n\n/** A token's dark value: what it states, or - for an alias that states none - the same alias. */\nexport function darkValue(token: ColorToken): ColorValue {\n  return token.$extensions?.mode.dark ?? token.$value;\n}\n\n/** A token's value in a mode. */\nexport function modeValue(token: ColorToken, mode: ColorMode): ColorValue {\n  return mode === 'light' ? token.$value : darkValue(token);\n}\n\n/** `#rrggbb` for a colour, its alpha dropped: each channel the byte the compiler writes. */\nexport function colorHex(color: SrgbColor): string {\n  return `#${color.components\n    .map((channel) =>\n      Math.round(channel * 255)\n        .toString(16)\n        .padStart(2, '0'),\n    )\n    .join('')}`;\n}\n\n/**\n * Whether a colour compiles to the hex. The hex is what a brand ships for the\n * colour, so any slack here would let a stated accent ship as its neighbour.\n */\nexport function colorIsHex(color: SrgbColor, hex: string): boolean {\n  return colorHex(color) === hex.toLowerCase();\n}\n\n/**\n * A colour as the compiler writes it: each channel the byte a hex or `rgb()`\n * carries, the alpha to the three decimals `rgb()` is given, and opaque once it\n * rounds to 1. A page renders this colour, not the components it was produced\n * as, so contrast is measured on it: a grey that passes at full precision can\n * round below the bar.\n */\nexport function asWritten(color: SrgbColor): SrgbColor {\n  const alpha = Number(Math.min(color.alpha, 1).toFixed(3));\n  return {\n    colorSpace: 'srgb',\n    components: color.components.map((channel) => Math.round(channel * 255) / 255) as [\n      number,\n      number,\n      number,\n    ],\n    alpha,\n  };\n}\n\nfunction checkHexAgreement(name: string, mode: ColorMode, value: ColorValue, problems: string[]) {\n  if (typeof value === 'string' || !value.hex) return;\n  if (!colorIsHex(value, value.hex)) {\n    problems.push(\n      `color.${name} (${mode}): hex ${value.hex} does not agree with components [${value.components.join(', ')}]`,\n    );\n  }\n}\n\nfunction checkAliases(tokens: BrandTokens, mode: ColorMode, problems: string[]) {\n  for (const name of COLOR_TOKEN_NAMES) {\n    const seen = new Set<string>([name]);\n    let current: ColorTokenName = name;\n    for (;;) {\n      const target = aliasTarget(modeValue(tokens.color[current], mode));\n      if (target === null) break;\n      if (!isColorTokenName(target)) {\n        problems.push(\n          `color.${name} (${mode}): aliases {color.${target}}, which the contract has no token for`,\n        );\n        break;\n      }\n      if (seen.has(target)) {\n        problems.push(`color.${name} (${mode}): alias cycle through {color.${target}}`);\n        break;\n      }\n      seen.add(target);\n      current = target;\n    }\n  }\n}\n\n/** The colour a token resolves to in a mode, through its aliases; null when a chain is broken. */\nexport function resolveColor(\n  tokens: BrandTokens,\n  name: ColorTokenName,\n  mode: ColorMode,\n): SrgbColor | null {\n  const seen = new Set<string>();\n  let current: ColorTokenName = name;\n  for (;;) {\n    if (seen.has(current)) return null;\n    seen.add(current);\n    const value = modeValue(tokens.color[current], mode);\n    const target = aliasTarget(value);\n    if (target === null) return value as SrgbColor;\n    if (!isColorTokenName(target)) return null;\n    current = target;\n  }\n}\n\n/**\n * An sRGB channel, from 0 to 1, as linear light: the transfer function both\n * WCAG's luminance and the Oklab mix in `./styles` start from.\n */\nexport function linearChannel(channel: number): number {\n  return channel <= 0.04045 ? channel / 12.92 : ((channel + 0.055) / 1.055) ** 2.4;\n}\n\nfunction luminance(color: SrgbColor): number {\n  const [r, g, b] = color.components.map(linearChannel) as [number, number, number];\n  return 0.2126 * r + 0.7152 * g + 0.0722 * b;\n}\n\n/** WCAG 2 contrast ratio between two colours, taken as opaque. */\nexport function contrastRatio(a: SrgbColor, b: SrgbColor): number {\n  const la = luminance(a);\n  const lb = luminance(b);\n  const [light, dark] = la > lb ? [la, lb] : [lb, la];\n  return (light + 0.05) / (dark + 0.05);\n}\n\n/** A colour as it renders over an opaque one: the two blended by its alpha, as a browser does. */\nexport function composite(color: SrgbColor, over: SrgbColor): SrgbColor {\n  const components = color.components.map(\n    (channel, index) => channel * color.alpha + over.components[index]! * (1 - color.alpha),\n  ) as [number, number, number];\n  return { colorSpace: 'srgb', components, alpha: 1 };\n}\n\n/**\n * Each contrast pair as it renders. The canvas must be opaque, since a\n * translucent one shows whatever the host paints beneath it and its contrast is\n * nobody's to promise; a surface a pair lays `over` the canvas is blended onto\n * it first, so a translucent field fill is measured as the fill a reader sees;\n * and the ink is blended over that, so a translucent ink is measured at the\n * strength it actually has, and a transparent one fails. All are measured as\n * the compiler writes them, which is what renders.\n */\nfunction checkContrast(tokens: BrandTokens, mode: ColorMode, problems: string[]) {\n  for (const pair of CONTRAST_PAIRS) {\n    const canvasName = pair.over ?? pair.background;\n    const foreground = resolveColor(tokens, pair.foreground, mode);\n    const background = resolveColor(tokens, pair.background, mode);\n    const canvasColor = resolveColor(tokens, canvasName, mode);\n    if (!foreground || !background || !canvasColor) continue;\n    if (canvasColor.alpha < 1) {\n      // Several pairs stand on one canvas, and it is named once.\n      const problem = `color.${canvasName} (${mode}): alpha ${canvasColor.alpha}, but text is measured against it, so it must be opaque (alpha 1)`;\n      if (!problems.includes(problem)) problems.push(problem);\n      continue;\n    }\n    const canvas = asWritten(canvasColor);\n    const surface = pair.over ? composite(asWritten(background), canvas) : canvas;\n    const ratio = contrastRatio(composite(asWritten(foreground), surface), surface);\n    if (ratio < pair.minimum) {\n      const on = pair.over\n        ? `color.${pair.background} over color.${pair.over}`\n        : `color.${pair.background}`;\n      const level = pair.minimum >= MIN_CONTRAST ? 'WCAG AA' : 'WCAG AA for a control';\n      problems.push(\n        `color.${pair.foreground} on ${on} (${mode}): contrast ${ratio.toFixed(2)}, expected ${pair.minimum} (${level})`,\n      );\n    }\n  }\n}\n\n/** Every problem with the file at once, so a producer's repair round sees the whole list. */\nexport function validateBrandTokens(doc: unknown): TokensValidation {\n  const parsed = brandTokensSchema.safeParse(doc);\n  if (!parsed.success) {\n    return {\n      ok: false,\n      problems: parsed.error.issues.map((issue) => {\n        const where = issue.path.map(String).join('.') || '(root)';\n        return `${where}: ${issue.message}`;\n      }),\n    };\n  }\n  const tokens = parsed.data as unknown as BrandTokens;\n  const problems: string[] = [];\n  for (const name of COLOR_TOKEN_NAMES) {\n    const token = tokens.color[name];\n    checkHexAgreement(name, 'light', token.$value, problems);\n    checkHexAgreement(name, 'dark', darkValue(token), problems);\n  }\n  checkAliases(tokens, 'light', problems);\n  checkAliases(tokens, 'dark', problems);\n  // Contrast is read through the aliases, so it is only meaningful once every\n  // chain resolves.\n  if (problems.length === 0) {\n    checkContrast(tokens, 'light', problems);\n    checkContrast(tokens, 'dark', problems);\n  }\n  return problems.length === 0 ? { ok: true, tokens } : { ok: false, problems };\n}\n","import { z } from 'zod';\n\n/**\n * The brand manifest, `brand.json`: what a page needs from a brand that is not\n * a token - its name, its site, the logo pair, the web font to load. The tokens\n * are the palette; the manifest is what the page says it is. The generative\n * layer's app bar reads it through `BrandProvider`, which also loads the web\n * font, and `assembleBrand` validates it beside the tokens.\n */\n\n/**\n * Every URL in a manifest is http(s) and nothing else, but for a logo, which\n * may also be a root-relative path on the host (`rootRelativePath`).\n *\n * A bare `z.url()` accepts any scheme - `javascript:`, `data:`, `file:` - and\n * the two logo URLs are handed straight to an `<img src>` in the app bar. A\n * manifest is produced content with the same provenance as a layout, so the\n * scheme is checked where the manifest is parsed rather than trusted at the\n * point it reaches the DOM.\n */\nexport const httpUrl = z.url({ protocol: /^https?$/ });\n\n/** The origin a root-relative path is resolved against to see where it lands. */\nconst SENTINEL_ORIGIN = 'https://brand-path.invalid';\n\n/**\n * A root-relative path on the host's own origin: `/brand/logo.svg`, which a\n * host served from `localhost` points at a file in its own public folder\n * with. It is accepted only when resolving it against a sentinel origin stays\n * on that origin, the same test the result view's URL gate applies, so a\n * protocol-relative `//elsewhere.example/x.svg`, or a backslash a browser\n * reads as one, is refused rather than taken for a path.\n */\nexport const rootRelativePath = z.string().refine(\n  (value) => {\n    if (!value.startsWith('/') || /[\\\\\\s]/.test(value)) return false;\n    try {\n      return new URL(value, SENTINEL_ORIGIN).origin === SENTINEL_ORIGIN;\n    } catch {\n      return false;\n    }\n  },\n  { message: 'a logo is an http(s) URL or a root-relative path on the host' },\n);\n\n/** A logo: an http(s) URL, or a root-relative path on the host's own origin. */\nexport const logoUrl = z.union([httpUrl, rootRelativePath]);\n\nexport const brandManifestSchema = z.strictObject({\n  name: z.string().min(1),\n  website: httpUrl,\n  logo: z.strictObject({\n    /** The mark drawn on the light canvas: usually the dark version of the logo. */\n    onLight: logoUrl,\n    /** The mark drawn on the dark canvas: usually the light version of the logo. */\n    onDark: logoUrl,\n  }),\n  webfont: z\n    .strictObject({\n      provider: z.literal('google-fonts'),\n      family: z.string().min(1),\n    })\n    .nullable(),\n});\n\nexport type BrandManifest = z.infer<typeof brandManifestSchema>;\n","import { MIN_CONTRAST, MIN_CONTROL_CONTRAST } from './contract';\nimport { colorHex, contrastRatio, type SrgbColor } from './tokens';\n\n/**\n * Up to three seed colours in, the colour roles a page paints with out.\n *\n * A team brands its pages with at most three colours, each optional, each a\n * `#rrggbb` a person picked: the button colour (`action`), the accent\n * (`accent`) and the header band (`header`). A person picks a colour for how\n * it looks, never for how text reads on it, so nothing here assumes a seed is\n * readable. What this derives is everything a page needs around the seeds,\n * with every text role readable by construction:\n *\n * - **Fills are the seeds, exactly.** `action`, `accent` and `header` come\n *   back as they were given, in lower case, so the button and the band are the\n *   colours the person chose.\n * - **Text on a fill is pure black or pure white**, whichever contrasts more\n *   (`onAction`, `onHeader`). One of the two reaches at least 4.58:1 on any\n *   colour, so every label clears WCAG AA. Only the two extremes carry that\n *   guarantee: a warm near-black or an off-white falls below 4.5:1 on some\n *   mid-tone, so no other colour is ever returned for text.\n * - **The accent as text is ink** (`accentInk`): the accent with its hue\n *   and saturation kept and its lightness moved just until it reads at 4.5:1\n *   on the page, on the pale accent fill and on every other surface the host\n *   names (a style's panel and its fields), the backgrounds a host draws\n *   accent text on. The lightness moves toward the page's extreme, darker on\n *   a light page and lighter on a dark one, and away from it only when a\n *   surface on the far side of the page's lightness leaves no shade that way\n *   reading on every background at once. A random search over accents and\n *   surfaces on a white and on a black page found no case of it; on a\n *   mid-tone page it happens: `#1e40af` on the grey `#767676`, which counts\n *   as light, inks as `#000001` alone and as `#fefeff` beside a black panel.\n *   An accent that already reads is its own ink.\n * - **The pale accent fill** (`accentFill`) is the accent laid over the page\n *   at a low strength: a pale tint on a light page, a deep one on a dark page.\n *\n * **An unset seed produces no role.** The roles a seed paints are present\n * when it is set and absent when it is not, so a host keeps its own token for\n * whatever the team left unset: the team's colours where it chose some, and\n * the host's palette everywhere else. The one seed that reaches further is the\n * button colour, which the accent follows when the accent is unset, so a red\n * button never sits beside links in another hue. With no seed at all, there\n * is no colour role to return.\n *\n * The page colour is an argument because every text role is measured against\n * it: a host renders a light and a dark theme, and it calls this once per\n * theme with that theme's page colour and that theme's seeds. Which seeds a\n * theme uses is the host's to decide; `resolveDarkSeeds` is the rule for a\n * dark set that falls back, colour by colour, to the light one.\n *\n * It returns roles, never custom property names: each host maps the roles onto\n * its own tokens. See docs/brand.md § \"Three seed colours\".\n */\n\n/**\n * How strongly the accent is laid over the page to make the pale accent fill:\n * the same order as a control's `bg-primary/10` and `bg-primary/15` tints.\n */\nconst ACCENT_FILL_STRENGTH = 0.12;\n\n/**\n * How many halvings the searches below run. Thirty-two pins a lightness far\n * below the step a byte can express, so the result is the first colour that\n * reads, to the byte.\n */\nconst SEARCH_STEPS = 32;\n\n/**\n * Up to three seed colours, each `#rrggbb` in any case, or unset. `null` and\n * `undefined` both mean unset, so a host can pass a team's stored colours as\n * they arrive.\n */\nexport interface BrandSeeds {\n  /** The button colour: the run button, every main button, the selected state of a pill. */\n  action?: string | null;\n  /** The accent: links, the active tab, the upload area on hover, progress. */\n  accent?: string | null;\n  /** The band across the top of the page, behind the logo. */\n  header?: string | null;\n}\n\n/** Text on a fill: only the two colours that read on every fill. */\nexport type TextOnFill = '#000000' | '#ffffff';\n\n/** The button colour's roles, present when the button colour is set. */\ninterface ActionRoles {\n  /** The button colour, as a fill. Never text. */\n  action: string;\n  /** Text and icons on the button colour. */\n  onAction: TextOnFill;\n}\n\n/** The accent's roles, present when the accent or the button colour it follows is set. */\ninterface AccentRoles {\n  /** The accent, as a fill: an active tab's underline, a progress bar. Never text. */\n  accent: string;\n  /** A pale accent fill (deep on a dark page), behind accent ink: a pill, a badge. */\n  accentFill: string;\n  /**\n   * The accent as text, reading at 4.5:1 or more on the page, on `accentFill`\n   * and on every other surface the host named (`deriveBrandRoles`' `surfaces`).\n   */\n  accentInk: string;\n}\n\n/** The header band's roles, present when the header is set. */\ninterface HeaderRoles {\n  /** The header band, as a fill. */\n  header: string;\n  /** Text on the header band: the back link, a wordmark. */\n  onHeader: TextOnFill;\n}\n\n/** A group of roles that is either all there or not there at all. */\ntype Absent<Roles> = { [Role in keyof Roles]?: never };\n\n/**\n * The colours a page paints with, each `#rrggbb` in lower case. The roles come\n * in groups, each present whole or absent whole: checking one role of a group\n * (`roles.action !== undefined`) narrows the rest of it.\n */\nexport type BrandRoles = (ActionRoles | Absent<ActionRoles>) &\n  (AccentRoles | Absent<AccentRoles>) &\n  (HeaderRoles | Absent<HeaderRoles>);\n\n/**\n * The roles a page paints with, from up to three seeds and the colour of the\n * page they render on. Throws when a seed or the page is not a `#rrggbb`\n * colour: a host validates what a person typed before it reaches here.\n *\n * `surfaces` are the other colours accent text sits on besides the page and\n * the pale fill, each `#rrggbb`: a style's panel and the fields inside it\n * (`resolveRoleColor` turns a style's role colour into one), or a canvas\n * behind the page. The ink is moved until it reads on all of them, and an\n * accent that already reads on every one is its own ink. When there is an\n * accent to derive and no shade of it reads on the page, the pale fill and\n * every surface at once, which a surface on the far side of the page's\n * lightness can cause, it throws, naming them. With no accent, no ink is\n * derived, and the surfaces are only parsed.\n */\nexport function deriveBrandRoles(\n  seeds: BrandSeeds | null | undefined,\n  page: string,\n  surfaces: readonly string[] = [],\n): BrandRoles {\n  const canvas = parseHex(page, 'The page colour');\n  const extreme = textOn(canvas) === '#000000' ? BLACK : WHITE;\n  const others = surfaces.map((surface, index) => parseHex(surface, `Surface ${index + 1}`));\n  const action = seeds?.action == null ? null : parseHex(seeds.action, 'The action seed');\n  // An unset accent follows the button colour, and is unset too when that is.\n  const accent = seeds?.accent == null ? action : parseHex(seeds.accent, 'The accent seed');\n  const header = seeds?.header == null ? null : parseHex(seeds.header, 'The header seed');\n\n  const actionRoles: ActionRoles | Absent<ActionRoles> =\n    action === null ? {} : { action: colorHex(action), onAction: textOn(action) };\n  const accentRoles: AccentRoles | Absent<AccentRoles> =\n    accent === null ? {} : accentRolesOf(accent, canvas, extreme, others);\n  const headerRoles: HeaderRoles | Absent<HeaderRoles> =\n    header === null ? {} : { header: colorHex(header), onHeader: textOn(header) };\n  return { ...actionRoles, ...accentRoles, ...headerRoles };\n}\n\n/**\n * The accent as a fill, its pale fill on the page, and its ink on both and on\n * every other surface. The way accent text moves first is the way text on the\n * page moves, toward `extreme`: whichever of black and white reads better\n * there, which always reaches 4.58:1 on the page itself. The accent is\n * measured before any surface is judged, so an accent that already reads\n * everywhere is kept, and a surface is refused only when no shade of the\n * accent reads on it and on the others at once.\n */\nfunction accentRolesOf(\n  accent: SrgbColor,\n  canvas: SrgbColor,\n  extreme: SrgbColor,\n  surfaces: readonly SrgbColor[],\n): AccentRoles {\n  const accentFill = paleFill(accent, canvas, extreme);\n  const backgrounds = [canvas, accentFill, ...surfaces];\n  const accentInk = inkFor(accent, backgrounds, extreme);\n  if (accentInk === undefined) {\n    throw new Error(\n      `No accent ink can read on every surface at once: no shade of ${colorHex(accent)} reaches ${MIN_CONTRAST}:1 on the page ${colorHex(canvas)}, the pale fill ${colorHex(accentFill)} and ${surfaces.map(colorHex).join(', ')}.`,\n    );\n  }\n  return {\n    accent: colorHex(accent),\n    accentFill: colorHex(accentFill),\n    accentInk: colorHex(accentInk),\n  };\n}\n\n/**\n * Whether the button colour sits below 3:1 against the page, so a button may\n * be hard to see in that theme. Only a colour the person set is judged: with\n * no button colour the button is the host's own, and the answer is `false`.\n */\nexport function isActionFaint(seeds: BrandSeeds | null | undefined, page: string): boolean {\n  const canvas = parseHex(page, 'The page colour');\n  if (seeds?.action == null) return false;\n  return contrastRatio(parseHex(seeds.action, 'The action seed'), canvas) < MIN_CONTROL_CONTRAST;\n}\n\n/**\n * Whether the accent had to be darkened or lightened to become ink on the\n * page (and on the `surfaces`, as `deriveBrandRoles` takes them), so links read\n * in a shade of it rather than in the colour itself. Only\n * a colour the person set is judged, and the accent counts as set when it\n * follows a button colour the person set: with neither, the answer is `false`.\n */\nexport function isAccentAdjusted(\n  seeds: BrandSeeds | null | undefined,\n  page: string,\n  surfaces: readonly string[] = [],\n): boolean {\n  const roles = deriveBrandRoles(seeds, page, surfaces);\n  return roles.accentInk !== undefined && roles.accentInk !== roles.accent;\n}\n\n/**\n * The seeds a dark theme uses: each dark colour where one is set, and the\n * light one where it is not. Colour by colour, before the accent follows the\n * button colour in `deriveBrandRoles`, so a light accent the person set\n * outranks a dark button colour the accent would otherwise follow. A colour\n * set in neither stays unset. Either set may be absent.\n */\nexport function resolveDarkSeeds(\n  colors: BrandSeeds | null | undefined,\n  darkColors: BrandSeeds | null | undefined,\n): BrandSeeds {\n  return {\n    action: darkColors?.action ?? colors?.action ?? null,\n    accent: darkColors?.accent ?? colors?.accent ?? null,\n    header: darkColors?.header ?? colors?.header ?? null,\n  };\n}\n\n/** Pure black or pure white, whichever reads better on a `#rrggbb` fill. */\nexport function readableTextOn(fill: string): TextOnFill {\n  return textOn(parseHex(fill, 'The fill'));\n}\n\nconst BLACK: SrgbColor = { colorSpace: 'srgb', components: [0, 0, 0], alpha: 1 };\nconst WHITE: SrgbColor = { colorSpace: 'srgb', components: [1, 1, 1], alpha: 1 };\n\n/** Ties go to black: on a colour where both measure the same, either clears 4.58:1. */\nfunction textOn(fill: SrgbColor): TextOnFill {\n  return contrastRatio(BLACK, fill) >= contrastRatio(WHITE, fill) ? '#000000' : '#ffffff';\n}\n\n/** A `#rrggbb` colour, or a throw naming `what` it was meant to be. Module-internal: not on the entry. */\nexport function parseHex(value: string, what: string): SrgbColor {\n  if (typeof value !== 'string' || !/^#[0-9a-f]{6}$/i.test(value)) {\n    throw new Error(`${what} must be a #rrggbb colour, not ${JSON.stringify(value)}.`);\n  }\n  const channel = (at: number) => parseInt(value.slice(at, at + 2), 16) / 255;\n  return { colorSpace: 'srgb', components: [channel(1), channel(3), channel(5)], alpha: 1 };\n}\n\n/**\n * A colour as a hex can carry it, each channel rounded to its byte. Every\n * contrast below is measured on this, the colour a page renders, never on the\n * unrounded value a search produced, so a colour that clears the bar by a\n * rounding error is never returned.\n */\nfunction snapped(components: readonly number[]): SrgbColor {\n  const [r, g, b] = components.map(\n    (channel) => Math.round(Math.min(1, Math.max(0, channel)) * 255) / 255,\n  ) as [number, number, number];\n  return { colorSpace: 'srgb', components: [r, g, b], alpha: 1 };\n}\n\n/**\n * The accent laid over the page at `ACCENT_FILL_STRENGTH`. On a page near the\n * middle of the lightness scale, a fill that strong can leave even black or\n * white below 4.5:1, and then no ink would read on it; the fill moves back\n * toward the page until the extreme reads again. On a page a person would\n * actually use, light or dark, that never happens.\n */\nfunction paleFill(accent: SrgbColor, page: SrgbColor, extreme: SrgbColor): SrgbColor {\n  const at = (strength: number) =>\n    snapped(\n      page.components.map(\n        (channel, index) => channel + (accent.components[index]! - channel) * strength,\n      ),\n    );\n  const nominal = at(ACCENT_FILL_STRENGTH);\n  if (contrastRatio(extreme, nominal) >= MIN_CONTRAST) return nominal;\n  // At strength 0 the fill is the page, on which the extreme reads.\n  let enough = 0;\n  let short = ACCENT_FILL_STRENGTH;\n  for (let step = 0; step < SEARCH_STEPS; step++) {\n    const middle = (enough + short) / 2;\n    if (contrastRatio(extreme, at(middle)) >= MIN_CONTRAST) enough = middle;\n    else short = middle;\n  }\n  return at(enough);\n}\n\n/**\n * Every shade of one hue and saturation, as the lightness of a point inside\n * it, from black to white. Each channel is linear in the lightness on either\n * side of the middle (`fromHsl`), so the lightness at which it turns over to\n * its next byte is solved for rather than searched; between two neighbouring\n * turnovers every channel keeps its byte, and the hex is one shade. A walk in\n * fixed steps could not promise this: where two channels turn over close\n * together, a shade spans less lightness than any step, and the one shade\n * that reads may be it.\n */\nfunction shadeLightnesses(hue: number, saturation: number): number[] {\n  const bounds = new Set<number>([0, 0.5, 1]);\n  for (const [low, high] of [\n    [0, 0.5],\n    [0.5, 1],\n  ] as const) {\n    const from = fromHsl(hue, saturation, low);\n    const to = fromHsl(hue, saturation, high);\n    for (let channel = 0; channel < 3; channel++) {\n      const start = from[channel]! * 255;\n      const rise = to[channel]! * 255 - start;\n      if (rise === 0) continue;\n      // `snapped` rounds a channel, so its byte turns over at each half.\n      for (let byte = 0; byte < 255; byte++) {\n        const at = low + ((byte + 0.5 - start) / rise) * (high - low);\n        if (at > low && at < high) bounds.add(at);\n      }\n    }\n  }\n  const sorted = [...bounds].sort((a, b) => a - b);\n  return sorted.slice(1).map((bound, index) => (sorted[index]! + bound) / 2);\n}\n\n/**\n * The accent as text on every background given: the accent itself if it\n * reads, otherwise the accent with its lightness moved just until it does, or\n * `undefined` when no lightness reads on all of them. Hue and saturation are\n * kept, so a pale yellow becomes a gold rather than a grey.\n *\n * The lightness moves toward the extreme (black or white) first. When the\n * extreme reads on every background, which it does on the page by the choice\n * of direction and on the fill by `paleFill`'s construction, each step that\n * way only brings the ink closer to reading, and a search halves the\n * lightness between a value known to fall short and one known to read. It\n * only ever returns the one known to read, measured as a hex, so the result\n * reads whatever the rounding does.\n *\n * A surface on the far side of the page's lightness, a dark panel on a light\n * page, is one the extreme does not read on. The shades that read on every\n * background then lie between the two extremes, if there are any: a shade\n * dark enough for the light backgrounds and light enough for the dark ones,\n * and sometimes a single one. Every shade of the accent's hue and saturation\n * is tried (`shadeLightnesses`), nearest first, toward the extreme and then\n * away from it, and the first that reads is the ink; `undefined` means no\n * shade does.\n */\nfunction inkFor(\n  accent: SrgbColor,\n  backgrounds: readonly SrgbColor[],\n  extreme: SrgbColor,\n): SrgbColor | undefined {\n  const reads = (color: SrgbColor) =>\n    backgrounds.every((background) => contrastRatio(color, background) >= MIN_CONTRAST);\n  if (reads(accent)) return accent;\n  const [hue, saturation, lightness] = toHsl(accent.components);\n  const at = (value: number) => snapped(fromHsl(hue, saturation, value));\n  /** The first lightness that reads between one known to fall short and one known to read. */\n  const narrowed = (short: number, enough: number): SrgbColor => {\n    for (let step = 0; step < SEARCH_STEPS; step++) {\n      const middle = (short + enough) / 2;\n      if (reads(at(middle))) enough = middle;\n      else short = middle;\n    }\n    return at(enough);\n  };\n  const toward = extreme === BLACK ? 0 : 1;\n  if (reads(extreme)) return narrowed(lightness, toward);\n  const shades = shadeLightnesses(hue, saturation);\n  const darker = shades.filter((value) => value < lightness).reverse();\n  const lighter = shades.filter((value) => value > lightness);\n  for (const side of toward === 0 ? [darker, lighter] : [lighter, darker]) {\n    for (const value of side) {\n      const shade = at(value);\n      if (reads(shade)) return shade;\n    }\n  }\n  return undefined;\n}\n\n/** sRGB components to hue (degrees), saturation and lightness, each of the last two in 0..1. */\nfunction toHsl(components: readonly number[]): [number, number, number] {\n  const [r, g, b] = components as [number, number, number];\n  const max = Math.max(r, g, b);\n  const min = Math.min(r, g, b);\n  const lightness = (max + min) / 2;\n  const chroma = max - min;\n  if (chroma === 0) return [0, 0, lightness];\n  const saturation = chroma / (1 - Math.abs(2 * lightness - 1));\n  const sector =\n    max === r\n      ? ((g - b) / chroma + 6) % 6\n      : max === g\n        ? (b - r) / chroma + 2\n        : (r - g) / chroma + 4;\n  return [sector * 60, Math.min(1, saturation), lightness];\n}\n\n/**\n * Hue, saturation and lightness back to sRGB components. Lightness 0 is black\n * and lightness 1 is white whatever the hue, which is what lets the ink's\n * search end on an extreme.\n */\nfunction fromHsl(hue: number, saturation: number, lightness: number): [number, number, number] {\n  const chroma = (1 - Math.abs(2 * lightness - 1)) * saturation;\n  const sector = hue / 60;\n  const second = chroma * (1 - Math.abs((sector % 2) - 1));\n  const [r, g, b]: [number, number, number] =\n    sector < 1\n      ? [chroma, second, 0]\n      : sector < 2\n        ? [second, chroma, 0]\n        : sector < 3\n          ? [0, chroma, second]\n          : sector < 4\n            ? [0, second, chroma]\n            : sector < 5\n              ? [second, 0, chroma]\n              : [chroma, 0, second];\n  const offset = lightness - chroma / 2;\n  return [r + offset, g + offset, b + offset];\n}\n","import { isColorTokenName, type ColorTokenName } from './contract';\nimport { parseHex } from './seed-roles';\nimport { colorHex, linearChannel, type SrgbColor } from './tokens';\n\n/**\n * The app styles and the typefaces, as data, and the roles a team's choice of\n * the two sets.\n *\n * A style is a small set of design values a team picks from a closed list, on\n * top of its own colours and logo: how its headings, its panels, its corners,\n * its call to action and its rhythm look. A typeface is picked from a short\n * list beside it, and replaces the style's body face, and its heading face\n * wherever the style's headings follow the body. Neither adds a colour: every\n * fill, edge and ink a style uses is a role the theme contract already has,\n * named here by that role (`RoleColor`), or a shadow.\n *\n * `deriveStyleRoles` returns roles, never custom property names, the way\n * `deriveBrandRoles` does for the seed colours: each host maps them onto its\n * own tokens, and the kernel's controls and the generative layer read the few\n * optional tokens docs/theming.md lists, each with today's look as its\n * fallback. A role a choice does not set is not a key, so a host keeps its own\n * value there; `quiet` with no typeface sets nothing at all, which is what\n * makes \"no style\" and \"the default style\" one state.\n *\n * See docs/brand.md § \"App styles and typefaces\".\n */\n\n// ─── Typefaces ───────────────────────────────────────────────────────────────\n\n/** The faces of the closed list, all on Google Fonts under the SIL Open Font License. */\nexport type TypefaceId =\n  | 'inter'\n  | 'dm-sans'\n  | 'plus-jakarta-sans'\n  | 'manrope'\n  | 'ibm-plex-sans'\n  | 'source-sans-3'\n  | 'work-sans'\n  | 'space-grotesk'\n  | 'newsreader';\n\n/** The faces a team may pick as its typeface: every face but a style's own heading face. */\nexport type BodyTypefaceId = Exclude<TypefaceId, 'newsreader'>;\n\nexport interface Typeface {\n  id: TypefaceId;\n  /** The family name, as a stylesheet and a font service name it. */\n  family: string;\n  category: 'sans-serif' | 'serif';\n  /** The weights a host loads it in: from the host's own light titles (300) to the boldest a style sets (700). */\n  weights: readonly number[];\n  /** The generic stack that renders while the face loads, or when it never does. */\n  fallback: string;\n  /** The face first, then its fallback: a whole `font-family` value. */\n  stack: string;\n  /** Whether a team may pick it (`body`), or a style uses it for its headings only (`heading`). */\n  use: 'body' | 'heading';\n}\n\nconst SANS_FALLBACK = 'ui-sans-serif, system-ui, -apple-system, \"Segoe UI\", sans-serif';\nconst SERIF_FALLBACK = 'ui-serif, Georgia, Cambria, \"Times New Roman\", serif';\nconst WEIGHTS: readonly number[] = [300, 400, 500, 600, 700];\n\nfunction face(\n  id: TypefaceId,\n  family: string,\n  category: Typeface['category'],\n  use: Typeface['use'],\n): Typeface {\n  const fallback = category === 'serif' ? SERIF_FALLBACK : SANS_FALLBACK;\n  return {\n    id,\n    family,\n    category,\n    weights: WEIGHTS,\n    fallback,\n    stack: `\"${family}\", ${fallback}`,\n    use,\n  };\n}\n\n/**\n * Every face a style or a team can set. The body faces are the list a team\n * picks from; Newsreader is the `editorial` style's heading face, listed so a\n * host loads it, and is not a team's choice. Frozen, like `APP_STYLES`: a\n * process serves many teams, so the catalogue one of them reads cannot be\n * one another has edited.\n */\nexport const TYPEFACES: readonly Typeface[] = deepFreeze([\n  face('inter', 'Inter', 'sans-serif', 'body'),\n  face('dm-sans', 'DM Sans', 'sans-serif', 'body'),\n  face('plus-jakarta-sans', 'Plus Jakarta Sans', 'sans-serif', 'body'),\n  face('manrope', 'Manrope', 'sans-serif', 'body'),\n  face('ibm-plex-sans', 'IBM Plex Sans', 'sans-serif', 'body'),\n  face('source-sans-3', 'Source Sans 3', 'sans-serif', 'body'),\n  face('work-sans', 'Work Sans', 'sans-serif', 'body'),\n  face('space-grotesk', 'Space Grotesk', 'sans-serif', 'body'),\n  face('newsreader', 'Newsreader', 'serif', 'heading'),\n]);\n\nconst FACES = new Map(TYPEFACES.map((candidate) => [candidate.id as string, candidate]));\n\n/** Whether `value` names a face a team may pick: a body face of `TYPEFACES`. */\nexport function isTypeface(value: unknown): value is BodyTypefaceId {\n  return typeof value === 'string' && FACES.get(value)?.use === 'body';\n}\n\nfunction faceOf(id: TypefaceId): Typeface {\n  return FACES.get(id)!;\n}\n\n// ─── The roles a style paints with ──────────────────────────────────────────\n\n/**\n * A colour a style paints with, named by the role of the theme contract it\n * is: never a colour of its own, so a team's palette and the host's theme\n * stay the only sources of colour, and their readability guarantees hold.\n */\nexport interface RoleColor {\n  role: ColorTokenName;\n  /** Mixed toward another role, in Oklab, by `share` (0 to 1): the card a little toward the foreground. */\n  toward?: { role: ColorTokenName; share: number };\n  /** Its opacity over what lies behind it, 0 to 1; absent, opaque. */\n  alpha?: number;\n}\n\n/** How a style draws a panel - a host's composer, a designed page's rail or card - in one theme. */\nexport interface PanelRoles {\n  fill: RoleColor;\n  /** The edge's colour, or `null` for no visible edge (the width is kept, so a panel's box does not move). */\n  edge: RoleColor | null;\n  /** The edge's width, in CSS pixels. */\n  edgeWidth: number;\n  /** A CSS `box-shadow` in a neutral ink, or `null` for none. */\n  shadow: string | null;\n  /**\n   * The fill of the fields set into the panel, where the host's field fill\n   * would sink into it; absent, the host's own.\n   */\n  field?: RoleColor;\n}\n\n/** The call to action's shadow: a CSS shadow's geometry, in pixels, tinted with a role. */\nexport interface ActionShadow {\n  x: number;\n  y: number;\n  blur: number;\n  spread: number;\n  color: RoleColor;\n}\n\n/**\n * The roles a style and a typeface set. An absent role is not a key: a host\n * keeps its own value there.\n */\nexport interface StyleRoles {\n  /** The face of everything on the page. */\n  bodyFace?: Typeface;\n  /** The face of the page's titles and its sections' and panels' headings. */\n  headingFace?: Typeface;\n  headingWeight?: number;\n  /** The headings' letter spacing, in `em`. */\n  headingTracking?: string;\n  /** A control's corner radius, in CSS pixels; a panel takes one and a half of it. */\n  radius?: number;\n  /** The panel treatment in each theme: a shadow that reads on a light page is lost on a dark one. */\n  panel?: { light: PanelRoles; dark: PanelRoles };\n  /**\n   * The call to action's shadow in each theme, or `none` for a plain fill: a\n   * shadow in the button colour that lifts a button on a light page smears\n   * under it on a dark one.\n   */\n  actionShadow?: { light: ActionShadow | 'none'; dark: ActionShadow | 'none' };\n  /** The rhythm: a multiple of the host's own margins, paddings and gaps around the form. Never a control's size. */\n  density?: number;\n}\n\n// ─── The styles ──────────────────────────────────────────────────────────────\n\nexport type AppStyleId = 'quiet' | 'soft' | 'editorial' | 'bold';\n\nexport interface AppStyle {\n  id: AppStyleId;\n  name: string;\n  /** The direction, in one sentence, as a designer reads it. */\n  direction: string;\n  /** The roles the style sets when the team picks no typeface. */\n  roles: StyleRoles;\n}\n\ninterface Definition {\n  name: string;\n  direction: string;\n  /** The style's own body face, or none (the host's). */\n  bodyFace: BodyTypefaceId | null;\n  /** The heading face: the body's, or a face of the style's own that a team's typeface does not replace. */\n  headingFace: 'body' | TypefaceId;\n  roles: Omit<StyleRoles, 'bodyFace' | 'headingFace'>;\n}\n\nconst role = (name: ColorTokenName, more: Omit<RoleColor, 'role'> = {}): RoleColor => ({\n  role: name,\n  ...more,\n});\n\nconst DEFINITIONS: Readonly<Record<AppStyleId, Definition>> = {\n  // The host's own look, named: it sets nothing, and a team's typeface is its\n  // body and its headings.\n  quiet: {\n    name: 'Quiet',\n    direction:\n      'The host’s own look, unstyled: its light titles and hairline panels, generous air, nothing decorated.',\n    bodyFace: null,\n    headingFace: 'body',\n    roles: {},\n  },\n  soft: {\n    name: 'Soft',\n    direction:\n      'Friendly and rounded: generous corners, panels that float on a soft shadow with no outline, warm medium-weight titles.',\n    bodyFace: 'dm-sans',\n    headingFace: 'body',\n    roles: {\n      headingWeight: 500,\n      headingTracking: '-0.015em',\n      radius: 12,\n      panel: {\n        light: {\n          fill: role('card'),\n          edge: null,\n          edgeWidth: 1,\n          shadow: '0 1px 2px rgb(16 24 40 / 0.05), 0 12px 32px -10px rgb(16 24 40 / 0.16)',\n          field: role('card'),\n        },\n        // On a dark page a shadow barely shows, so the panel is lifted by its\n        // fill instead, the card a little toward the foreground, with a faint\n        // highlight along its top edge where light would catch it, and its\n        // fields sink back to the page's own background.\n        dark: {\n          fill: role('card', { toward: { role: 'foreground', share: 0.07 } }),\n          edge: null,\n          edgeWidth: 1,\n          shadow:\n            'inset 0 1px 0 rgb(255 255 255 / 0.07), 0 2px 4px rgb(0 0 0 / 0.55), 0 24px 56px -12px rgb(0 0 0 / 0.95)',\n          field: role('background'),\n        },\n      },\n      // A short shadow in the button colour on a light page, kept within the\n      // gap a host leaves under its button. On a dark page the panel is lifted\n      // by its fill, and a glow in a light button colour reads as a smear.\n      actionShadow: {\n        light: { x: 0, y: 6, blur: 14, spread: -6, color: role('primary', { alpha: 0.5 }) },\n        dark: 'none',\n      },\n      density: 1.08,\n    },\n  },\n  editorial: {\n    name: 'Editorial',\n    direction:\n      'Considered and literary: serif display titles, fine hairlines, wide margins and a reading rhythm.',\n    bodyFace: 'source-sans-3',\n    headingFace: 'newsreader',\n    roles: {\n      headingWeight: 500,\n      headingTracking: '-0.01em',\n      radius: 2,\n      // Hairlines all the way in: the fields inside the panel take its own\n      // fill, so each reads as its fine edge rather than as a grey block.\n      panel: {\n        light: {\n          fill: role('card'),\n          edge: role('border'),\n          edgeWidth: 1,\n          shadow: null,\n          field: role('card'),\n        },\n        dark: {\n          fill: role('card'),\n          edge: role('border'),\n          edgeWidth: 1,\n          shadow: null,\n          field: role('card'),\n        },\n      },\n      actionShadow: { light: 'none', dark: 'none' },\n      density: 1.25,\n    },\n  },\n  bold: {\n    name: 'Bold',\n    direction:\n      'Confident and graphic: heavy, tightly set titles, solid panels with firm edges, a compact rhythm.',\n    bodyFace: 'space-grotesk',\n    headingFace: 'body',\n    roles: {\n      headingWeight: 700,\n      headingTracking: '-0.03em',\n      radius: 6,\n      // One firm edge around a solid panel, softer on a dark page. The panel\n      // is the muted fill, which the host's fields all but match, so fields\n      // set into it take the card on a light page and the page's background\n      // on a dark one.\n      panel: {\n        light: {\n          fill: role('muted'),\n          edge: role('foreground', { alpha: 0.62 }),\n          edgeWidth: 2,\n          shadow: null,\n          field: role('card'),\n        },\n        dark: {\n          fill: role('muted'),\n          edge: role('foreground', { alpha: 0.3 }),\n          edgeWidth: 2,\n          shadow: null,\n          field: role('background'),\n        },\n      },\n      actionShadow: { light: 'none', dark: 'none' },\n      density: 0.85,\n    },\n  },\n};\n\nexport const APP_STYLE_IDS: readonly AppStyleId[] = Object.freeze([\n  'quiet',\n  'soft',\n  'editorial',\n  'bold',\n]);\n\n/** Whether `value` names one of the app styles. */\nexport function isAppStyle(value: unknown): value is AppStyleId {\n  // Against the definitions themselves, which no caller can reach, rather\n  // than the exported list.\n  return typeof value === 'string' && Object.prototype.hasOwnProperty.call(DEFINITIONS, value);\n}\n\n/**\n * The roles a team's choice sets: its style and its typeface, each a stored\n * id or nothing. An unknown or absent style is `quiet`, which sets nothing;\n * an unknown typeface, or one a team may not pick, is no typeface, so the\n * style's own face (or the host's) stays. The team's typeface replaces the\n * style's body face, and its heading face wherever the style's headings\n * follow the body.\n */\nexport function deriveStyleRoles(\n  style: string | null | undefined,\n  typeface?: string | null,\n): StyleRoles {\n  const definition = DEFINITIONS[isAppStyle(style) ? style : 'quiet'];\n  const roles: StyleRoles = {};\n  const body = isTypeface(typeface)\n    ? faceOf(typeface)\n    : definition.bodyFace === null\n      ? undefined\n      : faceOf(definition.bodyFace);\n  if (body) roles.bodyFace = body;\n  const heading = definition.headingFace === 'body' ? body : faceOf(definition.headingFace);\n  if (heading) roles.headingFace = heading;\n  // A copy, faces included, so a host that edits what it got changes nothing\n  // for the next caller and nothing in the catalogue.\n  return copyData({ ...roles, ...definition.roles });\n}\n\n/** The styles, each with its own roles: what it sets for a team that picked no typeface. */\nexport const APP_STYLES: Readonly<Record<AppStyleId, AppStyle>> = deepFreeze(\n  Object.fromEntries(\n    APP_STYLE_IDS.map((id) => [\n      id,\n      {\n        id,\n        name: DEFINITIONS[id].name,\n        direction: DEFINITIONS[id].direction,\n        roles: deriveStyleRoles(id),\n      },\n    ]),\n  ) as Record<AppStyleId, AppStyle>,\n);\n\n/**\n * A deep copy of plain data - objects, arrays and primitives, which is all a\n * style's roles are. Spelled out rather than `structuredClone`, which is a\n * host API rather than the language's, and which this isomorphic entry would\n * otherwise call at import time through `APP_STYLES`.\n */\nfunction copyData<T>(value: T): T {\n  if (Array.isArray(value)) return value.map(copyData) as T;\n  if (value !== null && typeof value === 'object') {\n    return Object.fromEntries(\n      Object.entries(value).map(([key, inner]) => [key, copyData(inner)]),\n    ) as T;\n  }\n  return value;\n}\n\n/** Freezes plain data all the way down, and hands it back. */\nfunction deepFreeze<T>(value: T): T {\n  if (value !== null && typeof value === 'object' && !Object.isFrozen(value)) {\n    for (const inner of Object.values(value)) deepFreeze(inner);\n    Object.freeze(value);\n  }\n  return value;\n}\n\n// ─── Measuring a role ────────────────────────────────────────────────────────\n\n/**\n * A role colour as a `#rrggbb` hex over the palette it names, to measure a\n * surface a style draws: the ink a team's accent needs on a style's panel\n * (`deriveBrandRoles`' `surfaces`). The mix is Oklab's, as CSS `color-mix()`\n * computes it. A translucent colour is laid over `behind`; without it, it\n * throws, since a translucent colour has no one value. Throws, too, for a\n * role the palette does not hold or a palette colour that is not a hex.\n */\nexport function resolveRoleColor(\n  color: RoleColor,\n  palette: Partial<Record<ColorTokenName, string>>,\n  behind?: string,\n): string {\n  const of = (name: ColorTokenName): SrgbColor => {\n    const value = palette[name];\n    if (!isColorTokenName(name) || value === undefined) {\n      throw new Error(`The palette has no ${name} to resolve a style's colour against.`);\n    }\n    return parseHex(value, `The palette's ${name}`);\n  };\n  let rgb = of(color.role).components as [number, number, number];\n  if (color.toward) {\n    const share = clampUnit(color.toward.share);\n    rgb = mixOklab(rgb, of(color.toward.role).components as [number, number, number], share);\n  }\n  if (color.alpha !== undefined && color.alpha < 1) {\n    if (behind === undefined) {\n      throw new Error(`A translucent ${color.role} has no one colour: say what it lies over.`);\n    }\n    const under = parseHex(behind, 'The colour behind').components;\n    const alpha = clampUnit(color.alpha);\n    rgb = rgb.map((channel, index) => under[index]! + (channel - under[index]!) * alpha) as [\n      number,\n      number,\n      number,\n    ];\n  }\n  return colorHex({ colorSpace: 'srgb', components: rgb, alpha: 1 });\n}\n\nfunction clampUnit(value: number): number {\n  return Math.min(1, Math.max(0, value));\n}\n\ntype Rgb = [number, number, number];\n\n/** `a` moved toward `b` by `share` in Oklab, as `color-mix(in oklab, a, b share)` paints it. */\nfunction mixOklab(a: Rgb, b: Rgb, share: number): Rgb {\n  const [l1, a1, b1] = toOklab(a);\n  const [l2, a2, b2] = toOklab(b);\n  const at = (from: number, to: number) => from + (to - from) * share;\n  return fromOklab([at(l1, l2), at(a1, a2), at(b1, b2)]).map(clampUnit) as Rgb;\n}\n\nconst fromLinear = (c: number) => (c <= 0.0031308 ? 12.92 * c : 1.055 * c ** (1 / 2.4) - 0.055);\n\nfunction toOklab(rgb: Rgb): Rgb {\n  const [r, g, b] = rgb.map(linearChannel) as Rgb;\n  const l = Math.cbrt(0.4122214708 * r + 0.5363325363 * g + 0.0514459929 * b);\n  const m = Math.cbrt(0.2119034982 * r + 0.6806995451 * g + 0.1073969566 * b);\n  const s = Math.cbrt(0.0883024619 * r + 0.2817188376 * g + 0.6299787005 * b);\n  return [\n    0.2104542553 * l + 0.793617785 * m - 0.0040720468 * s,\n    1.9779984951 * l - 2.428592205 * m + 0.4505937099 * s,\n    0.0259040371 * l + 0.7827717662 * m - 0.808675766 * s,\n  ];\n}\n\nfunction fromOklab([lightness, a, b]: Rgb): Rgb {\n  const l = (lightness + 0.3963377774 * a + 0.2158037573 * b) ** 3;\n  const m = (lightness - 0.1055613458 * a - 0.0638541728 * b) ** 3;\n  const s = (lightness - 0.0894841775 * a - 1.291485548 * b) ** 3;\n  return [\n    4.0767416621 * l - 3.3077115913 * m + 0.2309699292 * s,\n    -1.2684380046 * l + 2.6097574011 * m - 0.3413193965 * s,\n    -0.0041960863 * l - 0.7034186147 * m + 1.707614701 * s,\n  ].map((channel) => fromLinear(clampUnit(channel))) as Rgb;\n}\n"]}

package/dist/{chunk-IBBAJXIO.js → chunk-XVGAQ4RK.js}

@@ -1,7 +1,7 @@
-import { pruneEmptyOptionals, healStringWrappers } from './chunk-E6BIXJ6C.js';
-import { isFilled, mustBeFilled, fieldFilled } from './chunk-XO5OENNF.js';
 import { gatingFieldsFromInputs } from './chunk-Y2ND6W4W.js';
 import { prepareSchemaForRjsf } from './chunk-LBFZXYCY.js';
+import { pruneEmptyOptionals, healStringWrappers } from './chunk-E6BIXJ6C.js';
+import { isFilled, mustBeFilled, fieldFilled } from './chunk-XO5OENNF.js';
 import { inputMustBeFilled, isOptionalInput, isPluralInput } from './chunk-WYH56SOZ.js';
 import { ownProp } from './chunk-V3OV2XQT.js';
 import { validateRunInputsSchema } from './chunk-VTPUDBSJ.js';
@@ -95,5 +95,5 @@ function gateRunInputs(contract, data) {
 }
 
 export { apiInputsFromSchemaData, buildRunInputsSchema, gateRunInputs, prepareRunInputs, validateRunInputs };
-//# sourceMappingURL=chunk-IBBAJXIO.js.map
-//# sourceMappingURL=chunk-IBBAJXIO.js.map
+//# sourceMappingURL=chunk-XVGAQ4RK.js.map
+//# sourceMappingURL=chunk-XVGAQ4RK.js.map

package/dist/{chunk-IBBAJXIO.js.map → chunk-XVGAQ4RK.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/core/gate.ts"],"names":[],"mappings":";;;;;;;;;AAqDO,SAAS,qBAAqB,MAAA,EAAiD;AACpF,EAAA,MAAM,aAAmB,EAAC;AAC1B,EAAA,MAAM,WAAqB,EAAC;AAE5B,EAAA,KAAA,MAAW,CAAC,OAAA,EAAS,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,MAAM,CAAA,EAAG;AACrD,IAAA,MAAM,WAAA,GAAc,EAAE,GAAG,KAAA,CAAM,WAAA,EAAY;AAC3C,IAAA,WAAA,CAAY,KAAA,GAAQ,OAAA;AACpB,IAAA,IAAI,KAAA,CAAM,WAAA,IAAe,KAAA,CAAM,WAAA,KAAgB,OAAA,EAAS;AACtD,MAAA,WAAA,CAAY,cAAc,KAAA,CAAM,WAAA;AAAA,IAClC;AACA,IAAA,UAAA,CAAW,OAAO,CAAA,GAAI,WAAA;AACtB,IAAA,IAAI,iBAAA,CAAkB,KAAK,CAAA,EAAG,QAAA,CAAS,KAAK,OAAO,CAAA;AAAA,EACrD;AAEA,EAAA,OAAO,qBAAqB,EAAE,IAAA,EAAM,QAAA,EAAU,UAAA,EAAY,UAAU,CAAA;AACtE;AAaO,SAAS,gBAAA,CAAiB,MAAY,MAAA,EAAoB;AAC/D,EAAA,OAAO,mBAAA,CAAoB,kBAAA,CAAmB,IAAA,EAAM,MAAM,GAAG,MAAM,CAAA;AACrE;AA8BO,SAAS,iBAAA,CACd,YAAA,EACA,MAAA,EACA,MAAA,EACkB;AAClB,EAAA,MAAM,MAAA,GAAS,uBAAA,CAAwB,YAAA,EAAc,MAAM,CAAA;AAC3D,EAAA,IAAI,MAAA,CAAO,MAAA,KAAW,CAAA,EAAG,OAAO,EAAE,OAAA,EAAS,IAAA,EAAM,aAAA,EAAe,EAAC,EAAG,MAAA,EAAQ,EAAC,EAAE;AAE/E,EAAA,MAAM,OAAA,GACJ,OAAO,YAAA,KAAiB,QAAA,IAAY,YAAA,KAAiB,IAAA,IAAQ,CAAC,KAAA,CAAM,OAAA,CAAQ,YAAY,CAAA,GACnF,YAAA,GACD,MAAA;AACN,EAAA,MAAM,gBAA0B,EAAC;AACjC,EAAA,KAAA,MAAW,CAAC,OAAA,EAAS,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,MAAM,CAAA,EAAG;AACrD,IAAA,IAAI,CAAC,iBAAA,CAAkB,KAAK,CAAA,EAAG;AAC/B,IAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,OAAA,EAAS,OAAO,CAAA;AAMxC,IAAA,IAAI,WAAW,IAAA,EAAM;AACnB,MAAA,aAAA,CAAc,KAAK,OAAO,CAAA;AAC1B,MAAA;AAAA,IACF;AACA,IAAA,MAAM,cAAc,KAAA,CAAM,WAAA;AAC1B,IAAA,MAAM,cAAA,GAAkB,WAAA,CAAY,QAAA,IAAyB,EAAC;AAC9D,IAAA,IAAI,cAAA,CAAe,WAAW,CAAA,EAAG;AACjC,IAAA,IAAI,OAAO,YAAY,QAAA,EAAU;AAC/B,MAAA,aAAA,CAAc,KAAK,OAAO,CAAA;AAC1B,MAAA;AAAA,IACF;AACA,IAAA,MAAM,MAAA,GAAS,OAAA;AACf,IAAA,IACE,cAAA,CAAe,IAAA,CAAK,CAAC,CAAA,KAAM;AACzB,MAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,MAAA,EAAQ,CAAC,CAAA;AAC/B,MAAA,OAAO,KAAA,KAAU,UAAa,KAAA,KAAU,EAAA;AAAA,IAC1C,CAAC,CAAA,EACD;AACA,MAAA,aAAA,CAAc,KAAK,OAAO,CAAA;AAAA,IAC5B;AAAA,EACF;AAEA,EAAA,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,aAAA,EAAe,MAAA,EAAO;AACjD;AAyBO,SAAS,uBAAA,CACd,cACA,MAAA,EACM;AACN,EAAA,MAAM,MAAY,EAAC;AACnB,EAAA,KAAA,MAAW,CAAC,OAAA,EAAS,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,MAAM,CAAA,EAAG;AACrD,IAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,YAAA,EAAc,OAAO,CAAA;AACzC,IAAA,IAAI,gBAAgB,KAAK,CAAA,IAAK,CAAC,QAAA,CAAS,GAAG,CAAA,EAAG;AAC9C,IAAA,IAAI,cAAc,KAAK,CAAA,IAAK,CAAC,QAAA,CAAS,GAAG,CAAA,EAAG;AAC1C,MAAA,GAAA,CAAI,OAAO,IAAI,EAAC;AAChB,MAAA;AAAA,IACF;AACA,IAAA,MAAM,OAAA,GAAU,aAAA,CAAc,KAAK,CAAA,IAAK,CAAC,MAAM,OAAA,CAAQ,GAAG,CAAA,GAAI,EAAC,GAAI,GAAA;AACnE,IAAA,GAAA,CAAI,OAAO,CAAA,GAAI,EAAE,OAAA,EAAS,KAAA,CAAM,aAAa,OAAA,EAAQ;AAAA,EACvD;AACA,EAAA,OAAO,GAAA;AACT;AAkCA,IAAM,YAAA,uBAAmB,OAAA,EAA8B;AAEvD,SAAS,kBAAkB,QAAA,EAAgC;AACzD,EAAA,MAAM,MAAA,GAAS,YAAA,CAAa,GAAA,CAAI,QAAQ,CAAA;AACxC,EAAA,IAAI,QAAQ,OAAO,MAAA;AACnB,EAAA,MAAM,MAAA,GAAS,oBAAA,CAAqB,QAAA,CAAS,MAAM,CAAA;AACnD,EAAA,YAAA,CAAa,GAAA,CAAI,UAAU,MAAM,CAAA;AACjC,EAAA,OAAO,MAAA;AACT;AA+CO,SAAS,aAAA,CAAc,UAA0B,IAAA,EAAoC;AAC1F,EAAA,MAAM,QAAA,GAAW,OAAO,IAAA,KAAS,QAAA,IAAY,SAAS,IAAA,IAAQ,CAAC,KAAA,CAAM,OAAA,CAAQ,IAAI,CAAA;AACjF,EAAA,MAAM,OAAA,GAAU,QAAA,GAAY,IAAA,GAAgB,EAAC;AAC7C,EAAA,MAAM,MAAA,GAAS,kBAAkB,QAAQ,CAAA;AACzC,EAAA,MAAM,YAAA,GAAe,gBAAA,CAAiB,OAAA,EAAS,MAAM,CAAA;AAGrD,EAAA,MAAM,UAAU,iBAAA,CAAkB,QAAA,GAAW,eAAe,IAAA,EAAM,QAAA,CAAS,QAAQ,MAAM,CAAA;AACzF,EAAA,IAAI,CAAC,QAAQ,OAAA,EAAS;AACpB,IAAA,OAAO;AAAA,MACL,EAAA,EAAI,KAAA;AAAA,MACJ,eAAe,OAAA,CAAQ,aAAA;AAAA,MACvB,QAAQ,OAAA,CAAQ,MAAA;AAAA,MAChB;AAAA,KACF;AAAA,EACF;AAmBA,EAAA,MAAM,gBAAgB,sBAAA,CAAuB,QAAA,CAAS,MAAM,CAAA,CACzD,OAAO,CAAC,KAAA,KAAU,YAAA,CAAa,KAAK,KAAK,QAAA,CAAS,OAAA,CAAQ,YAAA,EAAc,KAAA,CAAM,IAAI,CAAC,CAAC,CAAA,CACpF,MAAA,CAAO,CAAC,KAAA,KAAU,CAAC,WAAA,CAAY,KAAA,EAAO,QAAQ,YAAA,EAAc,KAAA,CAAM,IAAI,CAAC,CAAC,CAAA,CACxE,GAAA,CAAI,CAAC,KAAA,KAAU,MAAM,IAAI,CAAA;AAC5B,EAAA,IAAI,aAAA,CAAc,MAAA,EAAQ,OAAO,EAAE,EAAA,EAAI,OAAO,aAAA,EAAe,MAAA,EAAQ,EAAC,EAAG,YAAA,EAAa;AAEtF,EAAA,OAAO,EAAE,IAAI,IAAA,EAAM,MAAA,EAAQ,wBAAwB,YAAA,EAAc,QAAA,CAAS,MAAM,CAAA,EAAE;AACpF","file":"chunk-IBBAJXIO.js","sourcesContent":["/**\n * The gate every run passes through, whichever surface starts it.\n *\n * A host may offer more than one place to run a method - a schema-driven\n * inputs panel (an RJSF form) and a standalone run page (a bespoke field\n * renderer), say. **Only the rendering of inputs differs.** Everything between\n * \"the user pressed Run\" and \"the payload goes on the wire\" lives here, so\n * those surfaces cannot drift:\n *\n *   1. `buildRunInputsSchema` - the combined JSON Schema, whose `required` list\n *      is `inputMustBeFilled` (optional `?` and variable-plural `[]` never\n *      block; a fixed-count `[N]` list does).\n *   2. `prepareRunInputs` - heal legacy wrappers, then prune empty optionals.\n *   3. `validateRunInputs` - ajv, plus the missing-input scan that names the\n *      VARIABLE at fault.\n *   4. `apiInputsFromSchemaData` - the `{concept, content}` payload, built from\n *      the PREPARED data so the pruning reaches the wire too.\n *\n * **`gateRunInputs` is that whole chain as one call**, and it is what a server\n * should use. The four steps stay exported because a host that renders its own\n * panel needs the schema and the verdict separately, but assembling them is not\n * a host's job: the step between validation and the payload is an emptiness\n * check with four look-alike predicates to choose from, only two of which are\n * the ones the Run button reads, and choosing the near-miss pair produces a\n * server that is more permissive than the button in front of it.\n *\n * This module is pure: no React, no toasts, no i18n. Each caller renders the\n * verdict in its own idiom.\n */\nimport { inputMustBeFilled, isOptionalInput, isPluralInput } from './contracts';\nimport { gatingFieldsFromInputs } from './gating-fields';\nimport { fieldFilled, isFilled, mustBeFilled } from './readiness';\nimport { validateRunInputsSchema, type RunInputError } from './gate-validator';\nimport { healStringWrappers, pruneEmptyOptionals } from './wire-format';\nimport { prepareSchemaForRjsf } from './normalize-schema';\nimport { ownProp } from './own-property';\nimport type { PipeIOContract, PipeInputContract } from './contracts';\n\ntype Dict = Record<string, unknown>;\n\n/**\n * Combine the per-input schemas into one object schema.\n *\n * Each input variable becomes a property, titled with the variable name and\n * described with the concept code. Only the inputs the method actually demands\n * land in `required` - an optional (`?`) or variable-plural (`[]`) input must\n * not block the form (see `inputMustBeFilled`).\n *\n * The per-input schema travels verbatim, which is how a fixed-count (`[N]`)\n * list's declared count reaches ajv: pipelex states it as `minItems`/`maxItems`\n * on the array wrapper, so the count is enforced here without the kernel\n * restating it.\n */\nexport function buildRunInputsSchema(inputs: Record<string, PipeInputContract>): Dict {\n  const properties: Dict = {};\n  const required: string[] = [];\n\n  for (const [varName, input] of Object.entries(inputs)) {\n    const inputSchema = { ...input.json_schema } as Dict;\n    inputSchema.title = varName;\n    if (input.concept_ref && input.concept_ref !== varName) {\n      inputSchema.description = input.concept_ref;\n    }\n    properties[varName] = inputSchema;\n    if (inputMustBeFilled(input)) required.push(varName);\n  }\n\n  return prepareSchemaForRjsf({ type: 'object', properties, required });\n}\n\n/**\n * Last-gate repair, in two passes against the exact schema ajv validates.\n *\n * 1. **HEAL** - persisted `inputData` may still carry the legacy double-wrapped\n *    `{ text: { text } }` shape (or a form's state may lag a store fix).\n * 2. **PRUNE** - RJSF fills every unset string with `\"\"` on mount, which an\n *    optional CONSTRAINED field rejects (`DateContent.time` is `format: \"time\"`)\n *    - blocking a run on a field the user never opened. An absent optional field\n *    is what pipelex means by `None` anyway, so dropping it is the semantically\n *    correct repair, not a validation dodge.\n */\nexport function prepareRunInputs(data: Dict, schema: Dict): Dict {\n  return pruneEmptyOptionals(healStringWrappers(data, schema), schema) as Dict;\n}\n\nexport interface RunInputsVerdict {\n  isValid: boolean;\n  /** Variable names the scan could pin a missing required field on. */\n  missingInputs: string[];\n  /** Raw ajv errors, for when the scan cannot name anything. */\n  errors: RunInputError[];\n}\n\n/**\n * Validate PREPARED data against the combined schema.\n *\n * `missingInputs` is reported by VARIABLE NAME - the name on the node the user\n * clicks - never by `concept_ref`, which used to produce \"Missing required\n * fields in: native.Text\" and named neither the input at fault nor, when several\n * inputs share a concept, which of them. Inputs the method declared omittable\n * are skipped: an empty `?` input is not a missing one.\n *\n * The scan can come up empty even on an invalid form (a wrong value shape, a\n * nested mismatch); `errors` is what the caller falls back to then, so a failure\n * is never undiagnosable.\n *\n * `preparedData` is `unknown` for the same reason `gateRunInputs`' `data` is: on\n * a public endpoint the body is whatever was sent, and ajv must be shown that\n * rather than a repair of it, or `must be object` is a verdict no caller can\n * ever receive. The name-the-variable scan below needs something indexable, so\n * a body that is not a record scans against nothing and names every input the\n * method demands - which is the honest answer for a body that carried none.\n */\nexport function validateRunInputs(\n  preparedData: unknown,\n  inputs: Record<string, PipeInputContract>,\n  schema: Dict,\n): RunInputsVerdict {\n  const errors = validateRunInputsSchema(preparedData, schema);\n  if (errors.length === 0) return { isValid: true, missingInputs: [], errors: [] };\n\n  const record0 =\n    typeof preparedData === 'object' && preparedData !== null && !Array.isArray(preparedData)\n      ? (preparedData as Dict)\n      : undefined;\n  const missingInputs: string[] = [];\n  for (const [varName, input] of Object.entries(inputs)) {\n    if (!inputMustBeFilled(input)) continue;\n    const varData = ownProp(record0, varName);\n    // A demanded input that is not there at all is missing whatever its concept\n    // declares inside. The check has to come BEFORE the required-children one:\n    // a struct whose concept demands no child used to fall out of the scan\n    // here, so the run was refused by the combined schema's `required` list\n    // while the scan named nothing and the caller could only quote ajv.\n    if (varData == null) {\n      missingInputs.push(varName);\n      continue;\n    }\n    const inputSchema = input.json_schema as Dict;\n    const requiredFields = (inputSchema.required as string[]) || [];\n    if (requiredFields.length === 0) continue;\n    if (typeof varData !== 'object') {\n      missingInputs.push(varName);\n      continue;\n    }\n    const record = varData as Dict;\n    if (\n      requiredFields.some((f) => {\n        const child = ownProp(record, f);\n        return child === undefined || child === '';\n      })\n    ) {\n      missingInputs.push(varName);\n    }\n  }\n\n  return { isValid: false, missingInputs, errors };\n}\n\n/**\n * Build the `{ concept, content }` map a run expects, from PREPARED data.\n *\n * The two ways a method says \"this may be nothing\" land differently on the wire:\n * - an **optional (`?`)** input left blank is OMITTED, so the runtime records a\n *   real absence the method can branch on - sending `{ text: \"\" }` would look\n *   like the caller supplied an empty string;\n * - a **plural (`[]`)** input keeps its key, because a plural slot is never\n *   absent - its empty form IS the empty list, and the runtime requires the key.\n *   When that list is EMPTY it is sent BARE, without the envelope: the envelope\n *   is the runtime's \"explicit form\", which bypasses the top-down shaper and\n *   hands the value to the bottom-up factory, and that factory types a list from\n *   its first item - so an empty list there raises \"Cannot create Stuff from\n *   empty list in content\". The bare form keeps the shaper, which reads the\n *   DECLARED concept and builds the empty list correctly. (pipelex/#1096 makes\n *   the envelope agree; the bare form runs today and stays correct after.)\n *\n * A fixed-count (`[N]`) list takes that same empty-list path, and an empty one\n * is not a payload the method can accept. It is unreachable through the gate,\n * which demands the input and rejects a short list on `minItems`; building the\n * payload straight from unvalidated data is what would reach it, and inventing\n * a different absence here would only hide that.\n */\nexport function apiInputsFromSchemaData(\n  preparedData: Dict,\n  inputs: Record<string, PipeInputContract>,\n): Dict {\n  const out: Dict = {};\n  for (const [varName, input] of Object.entries(inputs)) {\n    const raw = ownProp(preparedData, varName);\n    if (isOptionalInput(input) && !isFilled(raw)) continue;\n    if (isPluralInput(input) && !isFilled(raw)) {\n      out[varName] = [];\n      continue;\n    }\n    const content = isPluralInput(input) && !Array.isArray(raw) ? [] : raw;\n    out[varName] = { concept: input.concept_ref, content };\n  }\n  return out;\n}\n\n// ─── The whole chain, as one call ────────────────────────────────────────────\n\n/** The gate's verdict: the payload to send, or why the run may not start. */\nexport type RunInputsGateResult =\n  | { ok: true; inputs: Dict }\n  | {\n      ok: false;\n      /** Variable names the caller left empty or short. */\n      missingInputs: string[];\n      /** Raw ajv errors, for when the scan cannot name anything. */\n      errors: RunInputError[];\n      /** The repaired data the verdict was reached on - what\n       *  `describeValidationError` needs to quote the value it received. */\n      preparedData: Dict;\n    };\n\n/**\n * One schema object per contract, for the lifetime of the process.\n *\n * `buildRunInputsSchema` is a pure function of the contract, so rebuilding it is\n * *semantically* free - but validation runs through a module-level ajv whose\n * compiled-schema cache is keyed on **schema object identity** and is never\n * evicted. A fresh object per call therefore misses every time and retains\n * another compiled validator. On a publicly callable server endpoint that is\n * unbounded growth driven by the cheapest request there is: an empty body,\n * rejected in a fraction of a millisecond, costing nothing to send.\n *\n * Weakly keyed so the map never pins a contract that goes out of scope. The\n * schema a run has been gated against is pinned for the process lifetime anyway\n * by ajv's own cache; the point is that the NUMBER of them is bounded by the\n * number of distinct contracts rather than by traffic.\n */\nconst SCHEMA_CACHE = new WeakMap<PipeIOContract, Dict>();\n\nfunction schemaForContract(contract: PipeIOContract): Dict {\n  const cached = SCHEMA_CACHE.get(contract);\n  if (cached) return cached;\n  const schema = buildRunInputsSchema(contract.inputs);\n  SCHEMA_CACHE.set(contract, schema);\n  return schema;\n}\n\n/**\n * Gate a run: repair the caller's data, validate it against the contract,\n * refuse anything the Run button would have refused, and build the payload.\n *\n * Returns a verdict rather than throwing. A server endpoint must not throw\n * across the boundary to its client - frameworks routinely strip the message to\n * an opaque digest in a production build - and a rejection here is an ordinary\n * outcome, not an exceptional one.\n *\n * **`data` is `unknown` because that is what it is.** A run endpoint is public\n * and no framework enforces a declared parameter type, so the argument is\n * whatever the caller put in the body. The chain indexes the payload by\n * variable name without first checking it is indexable, so a `null` body would\n * throw *after* ajv had already reported `must be object` and before any\n * verdict came back.\n *\n * So the two uses are separated rather than collapsed into one repair. **ajv\n * judges the value the caller actually sent**, which is what makes `must be\n * object` the verdict for a body that is not one; the indexing that follows\n * uses a safe `{}` stand-in, which is what keeps the gate from throwing. Repair\n * FIRST - coercing a non-object to `{}` before validating - is the shape that\n * looks equivalent and is not: a contract whose inputs are all optional has an\n * empty `required` list, so `{}` validates, and `gateRunInputs(\"garbage\", …)`\n * came back `ok: true` on a body the caller never meant as a run. Fail-closed\n * costs a malformed caller an error it earned; the other direction bills a run.\n *\n * **The schema alone is not the rule.** ajv's `required` asserts only that a\n * key is PRESENT, and a content model carries no `minLength` - so a required\n * input that arrived empty (`{document: {url: \"\"}}`, `{text: {text: \"\"}}`)\n * satisfies the schema. That is the natural payload, not a contrived one:\n * `rjsfDataFromRunValues({}, fields)` emits exactly that when nothing is\n * selected. So the gate re-applies the emptiness rule using\n * `computeReadiness`'s OWN two functions over the same derived fields, which is\n * the only way to be sure the two sides cannot disagree.\n *\n * Picking a pair that merely looks equivalent is not enough, and this is the\n * whole reason the assembly lives here rather than in each host: the obvious\n * choice, `inputMustBeFilled` + `isFilled`, agrees on every leaf kind and\n * diverges on a structured concept in BOTH directions - `isFilled` on an object\n * is `some(child filled)` where `fieldFilled` is `every(required child\n * filled)`. That accepts a half-filled struct the browser refuses (a paid run\n * past a disabled button) and rejects a filled all-optional struct the browser\n * accepts. A host whose methods happen to use only native concepts has no test\n * that can catch either.\n */\nexport function gateRunInputs(contract: PipeIOContract, data: unknown): RunInputsGateResult {\n  const isRecord = typeof data === 'object' && data !== null && !Array.isArray(data);\n  const payload = isRecord ? (data as Dict) : {};\n  const schema = schemaForContract(contract);\n  const preparedData = prepareRunInputs(payload, schema);\n\n  // The value ajv is shown is the caller's, not the stand-in - see above.\n  const verdict = validateRunInputs(isRecord ? preparedData : data, contract.inputs, schema);\n  if (!verdict.isValid) {\n    return {\n      ok: false,\n      missingInputs: verdict.missingInputs,\n      errors: verdict.errors,\n      preparedData,\n    };\n  }\n\n  // The SELECTION is half the rule, and leaving it out is what made the two\n  // halves disagree. `computeReadiness` reckons with an input the method\n  // demands AND one it left optional that the user has touched - because a\n  // structure with something in it owes its concept every field the concept\n  // declares. Filtering on `mustBeFilled` alone dropped the second kind, so a\n  // half-filled optional struct was refused by the button and accepted here.\n  //\n  // ajv cannot cover for it: a required child that is a plain string arrives as\n  // `''`, which satisfies `required`. And the payload builder below then SENDS\n  // that input, because `isFilled` is exactly what it tests. Which is the rule\n  // stated properly: the gate holds to its concept precisely the inputs it is\n  // about to put on the wire, and nothing it will omit.\n  //\n  // The tree the predicates run over is the gate's own, walked structurally\n  // from the same `json_schema` ajv just validated - NOT the render tree, which\n  // is built from the input-form descriptor. A server validating a payload must\n  // never need that presentation artifact; see `gating-fields.ts`.\n  const missingInputs = gatingFieldsFromInputs(contract.inputs)\n    .filter((field) => mustBeFilled(field) || isFilled(ownProp(preparedData, field.name)))\n    .filter((field) => !fieldFilled(field, ownProp(preparedData, field.name)))\n    .map((field) => field.name);\n  if (missingInputs.length) return { ok: false, missingInputs, errors: [], preparedData };\n\n  return { ok: true, inputs: apiInputsFromSchemaData(preparedData, contract.inputs) };\n}\n"]}
+{"version":3,"sources":["../src/core/gate.ts"],"names":[],"mappings":";;;;;;;;;AAqDO,SAAS,qBAAqB,MAAA,EAAiD;AACpF,EAAA,MAAM,aAAmB,EAAC;AAC1B,EAAA,MAAM,WAAqB,EAAC;AAE5B,EAAA,KAAA,MAAW,CAAC,OAAA,EAAS,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,MAAM,CAAA,EAAG;AACrD,IAAA,MAAM,WAAA,GAAc,EAAE,GAAG,KAAA,CAAM,WAAA,EAAY;AAC3C,IAAA,WAAA,CAAY,KAAA,GAAQ,OAAA;AACpB,IAAA,IAAI,KAAA,CAAM,WAAA,IAAe,KAAA,CAAM,WAAA,KAAgB,OAAA,EAAS;AACtD,MAAA,WAAA,CAAY,cAAc,KAAA,CAAM,WAAA;AAAA,IAClC;AACA,IAAA,UAAA,CAAW,OAAO,CAAA,GAAI,WAAA;AACtB,IAAA,IAAI,iBAAA,CAAkB,KAAK,CAAA,EAAG,QAAA,CAAS,KAAK,OAAO,CAAA;AAAA,EACrD;AAEA,EAAA,OAAO,qBAAqB,EAAE,IAAA,EAAM,QAAA,EAAU,UAAA,EAAY,UAAU,CAAA;AACtE;AAaO,SAAS,gBAAA,CAAiB,MAAY,MAAA,EAAoB;AAC/D,EAAA,OAAO,mBAAA,CAAoB,kBAAA,CAAmB,IAAA,EAAM,MAAM,GAAG,MAAM,CAAA;AACrE;AA8BO,SAAS,iBAAA,CACd,YAAA,EACA,MAAA,EACA,MAAA,EACkB;AAClB,EAAA,MAAM,MAAA,GAAS,uBAAA,CAAwB,YAAA,EAAc,MAAM,CAAA;AAC3D,EAAA,IAAI,MAAA,CAAO,MAAA,KAAW,CAAA,EAAG,OAAO,EAAE,OAAA,EAAS,IAAA,EAAM,aAAA,EAAe,EAAC,EAAG,MAAA,EAAQ,EAAC,EAAE;AAE/E,EAAA,MAAM,OAAA,GACJ,OAAO,YAAA,KAAiB,QAAA,IAAY,YAAA,KAAiB,IAAA,IAAQ,CAAC,KAAA,CAAM,OAAA,CAAQ,YAAY,CAAA,GACnF,YAAA,GACD,MAAA;AACN,EAAA,MAAM,gBAA0B,EAAC;AACjC,EAAA,KAAA,MAAW,CAAC,OAAA,EAAS,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,MAAM,CAAA,EAAG;AACrD,IAAA,IAAI,CAAC,iBAAA,CAAkB,KAAK,CAAA,EAAG;AAC/B,IAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,OAAA,EAAS,OAAO,CAAA;AAMxC,IAAA,IAAI,WAAW,IAAA,EAAM;AACnB,MAAA,aAAA,CAAc,KAAK,OAAO,CAAA;AAC1B,MAAA;AAAA,IACF;AACA,IAAA,MAAM,cAAc,KAAA,CAAM,WAAA;AAC1B,IAAA,MAAM,cAAA,GAAkB,WAAA,CAAY,QAAA,IAAyB,EAAC;AAC9D,IAAA,IAAI,cAAA,CAAe,WAAW,CAAA,EAAG;AACjC,IAAA,IAAI,OAAO,YAAY,QAAA,EAAU;AAC/B,MAAA,aAAA,CAAc,KAAK,OAAO,CAAA;AAC1B,MAAA;AAAA,IACF;AACA,IAAA,MAAM,MAAA,GAAS,OAAA;AACf,IAAA,IACE,cAAA,CAAe,IAAA,CAAK,CAAC,CAAA,KAAM;AACzB,MAAA,MAAM,KAAA,GAAQ,OAAA,CAAQ,MAAA,EAAQ,CAAC,CAAA;AAC/B,MAAA,OAAO,KAAA,KAAU,UAAa,KAAA,KAAU,EAAA;AAAA,IAC1C,CAAC,CAAA,EACD;AACA,MAAA,aAAA,CAAc,KAAK,OAAO,CAAA;AAAA,IAC5B;AAAA,EACF;AAEA,EAAA,OAAO,EAAE,OAAA,EAAS,KAAA,EAAO,aAAA,EAAe,MAAA,EAAO;AACjD;AAyBO,SAAS,uBAAA,CACd,cACA,MAAA,EACM;AACN,EAAA,MAAM,MAAY,EAAC;AACnB,EAAA,KAAA,MAAW,CAAC,OAAA,EAAS,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,MAAM,CAAA,EAAG;AACrD,IAAA,MAAM,GAAA,GAAM,OAAA,CAAQ,YAAA,EAAc,OAAO,CAAA;AACzC,IAAA,IAAI,gBAAgB,KAAK,CAAA,IAAK,CAAC,QAAA,CAAS,GAAG,CAAA,EAAG;AAC9C,IAAA,IAAI,cAAc,KAAK,CAAA,IAAK,CAAC,QAAA,CAAS,GAAG,CAAA,EAAG;AAC1C,MAAA,GAAA,CAAI,OAAO,IAAI,EAAC;AAChB,MAAA;AAAA,IACF;AACA,IAAA,MAAM,OAAA,GAAU,aAAA,CAAc,KAAK,CAAA,IAAK,CAAC,MAAM,OAAA,CAAQ,GAAG,CAAA,GAAI,EAAC,GAAI,GAAA;AACnE,IAAA,GAAA,CAAI,OAAO,CAAA,GAAI,EAAE,OAAA,EAAS,KAAA,CAAM,aAAa,OAAA,EAAQ;AAAA,EACvD;AACA,EAAA,OAAO,GAAA;AACT;AAkCA,IAAM,YAAA,uBAAmB,OAAA,EAA8B;AAEvD,SAAS,kBAAkB,QAAA,EAAgC;AACzD,EAAA,MAAM,MAAA,GAAS,YAAA,CAAa,GAAA,CAAI,QAAQ,CAAA;AACxC,EAAA,IAAI,QAAQ,OAAO,MAAA;AACnB,EAAA,MAAM,MAAA,GAAS,oBAAA,CAAqB,QAAA,CAAS,MAAM,CAAA;AACnD,EAAA,YAAA,CAAa,GAAA,CAAI,UAAU,MAAM,CAAA;AACjC,EAAA,OAAO,MAAA;AACT;AA+CO,SAAS,aAAA,CAAc,UAA0B,IAAA,EAAoC;AAC1F,EAAA,MAAM,QAAA,GAAW,OAAO,IAAA,KAAS,QAAA,IAAY,SAAS,IAAA,IAAQ,CAAC,KAAA,CAAM,OAAA,CAAQ,IAAI,CAAA;AACjF,EAAA,MAAM,OAAA,GAAU,QAAA,GAAY,IAAA,GAAgB,EAAC;AAC7C,EAAA,MAAM,MAAA,GAAS,kBAAkB,QAAQ,CAAA;AACzC,EAAA,MAAM,YAAA,GAAe,gBAAA,CAAiB,OAAA,EAAS,MAAM,CAAA;AAGrD,EAAA,MAAM,UAAU,iBAAA,CAAkB,QAAA,GAAW,eAAe,IAAA,EAAM,QAAA,CAAS,QAAQ,MAAM,CAAA;AACzF,EAAA,IAAI,CAAC,QAAQ,OAAA,EAAS;AACpB,IAAA,OAAO;AAAA,MACL,EAAA,EAAI,KAAA;AAAA,MACJ,eAAe,OAAA,CAAQ,aAAA;AAAA,MACvB,QAAQ,OAAA,CAAQ,MAAA;AAAA,MAChB;AAAA,KACF;AAAA,EACF;AAmBA,EAAA,MAAM,gBAAgB,sBAAA,CAAuB,QAAA,CAAS,MAAM,CAAA,CACzD,OAAO,CAAC,KAAA,KAAU,YAAA,CAAa,KAAK,KAAK,QAAA,CAAS,OAAA,CAAQ,YAAA,EAAc,KAAA,CAAM,IAAI,CAAC,CAAC,CAAA,CACpF,MAAA,CAAO,CAAC,KAAA,KAAU,CAAC,WAAA,CAAY,KAAA,EAAO,QAAQ,YAAA,EAAc,KAAA,CAAM,IAAI,CAAC,CAAC,CAAA,CACxE,GAAA,CAAI,CAAC,KAAA,KAAU,MAAM,IAAI,CAAA;AAC5B,EAAA,IAAI,aAAA,CAAc,MAAA,EAAQ,OAAO,EAAE,EAAA,EAAI,OAAO,aAAA,EAAe,MAAA,EAAQ,EAAC,EAAG,YAAA,EAAa;AAEtF,EAAA,OAAO,EAAE,IAAI,IAAA,EAAM,MAAA,EAAQ,wBAAwB,YAAA,EAAc,QAAA,CAAS,MAAM,CAAA,EAAE;AACpF","file":"chunk-XVGAQ4RK.js","sourcesContent":["/**\n * The gate every run passes through, whichever surface starts it.\n *\n * A host may offer more than one place to run a method - a schema-driven\n * inputs panel (an RJSF form) and a standalone run page (a bespoke field\n * renderer), say. **Only the rendering of inputs differs.** Everything between\n * \"the user pressed Run\" and \"the payload goes on the wire\" lives here, so\n * those surfaces cannot drift:\n *\n *   1. `buildRunInputsSchema` - the combined JSON Schema, whose `required` list\n *      is `inputMustBeFilled` (optional `?` and variable-plural `[]` never\n *      block; a fixed-count `[N]` list does).\n *   2. `prepareRunInputs` - heal legacy wrappers, then prune empty optionals.\n *   3. `validateRunInputs` - ajv, plus the missing-input scan that names the\n *      VARIABLE at fault.\n *   4. `apiInputsFromSchemaData` - the `{concept, content}` payload, built from\n *      the PREPARED data so the pruning reaches the wire too.\n *\n * **`gateRunInputs` is that whole chain as one call**, and it is what a server\n * should use. The four steps stay exported because a host that renders its own\n * panel needs the schema and the verdict separately, but assembling them is not\n * a host's job: the step between validation and the payload is an emptiness\n * check with four look-alike predicates to choose from, only two of which are\n * the ones the Run button reads, and choosing the near-miss pair produces a\n * server that is more permissive than the button in front of it.\n *\n * This module is pure: no React, no toasts, no i18n. Each caller renders the\n * verdict in its own idiom.\n */\nimport { inputMustBeFilled, isOptionalInput, isPluralInput } from './contracts';\nimport { gatingFieldsFromInputs } from './gating-fields';\nimport { fieldFilled, isFilled, mustBeFilled } from './readiness';\nimport { validateRunInputsSchema, type RunInputError } from './gate-validator';\nimport { healStringWrappers, pruneEmptyOptionals } from './wire-format';\nimport { prepareSchemaForRjsf } from './normalize-schema';\nimport { ownProp } from './own-property';\nimport type { PipeIOContract, PipeInputContract } from './contracts';\n\ntype Dict = Record<string, unknown>;\n\n/**\n * Combine the per-input schemas into one object schema.\n *\n * Each input variable becomes a property, titled with the variable name and\n * described with the concept code. Only the inputs the method actually demands\n * land in `required` - an optional (`?`) or variable-plural (`[]`) input must\n * not block the form (see `inputMustBeFilled`).\n *\n * The per-input schema travels verbatim, which is how a fixed-count (`[N]`)\n * list's declared count reaches ajv: pipelex states it as `minItems`/`maxItems`\n * on the array wrapper, so the count is enforced here without the kernel\n * restating it.\n */\nexport function buildRunInputsSchema(inputs: Record<string, PipeInputContract>): Dict {\n  const properties: Dict = {};\n  const required: string[] = [];\n\n  for (const [varName, input] of Object.entries(inputs)) {\n    const inputSchema = { ...input.json_schema } as Dict;\n    inputSchema.title = varName;\n    if (input.concept_ref && input.concept_ref !== varName) {\n      inputSchema.description = input.concept_ref;\n    }\n    properties[varName] = inputSchema;\n    if (inputMustBeFilled(input)) required.push(varName);\n  }\n\n  return prepareSchemaForRjsf({ type: 'object', properties, required });\n}\n\n/**\n * Last-gate repair, in two passes against the exact schema ajv validates.\n *\n * 1. **HEAL** - persisted `inputData` may still carry the legacy double-wrapped\n *    `{ text: { text } }` shape (or a form's state may lag a store fix).\n * 2. **PRUNE** - RJSF fills every unset string with `\"\"` on mount, which an\n *    optional CONSTRAINED field rejects (`DateContent.time` is `format: \"time\"`)\n *    - blocking a run on a field the user never opened. An absent optional field\n *    is what pipelex means by `None` anyway, so dropping it is the semantically\n *    correct repair, not a validation dodge.\n */\nexport function prepareRunInputs(data: Dict, schema: Dict): Dict {\n  return pruneEmptyOptionals(healStringWrappers(data, schema), schema) as Dict;\n}\n\nexport interface RunInputsVerdict {\n  isValid: boolean;\n  /** Variable names the scan could pin a missing required field on. */\n  missingInputs: string[];\n  /** Raw ajv errors, for when the scan cannot name anything. */\n  errors: RunInputError[];\n}\n\n/**\n * Validate PREPARED data against the combined schema.\n *\n * `missingInputs` is reported by VARIABLE NAME - the name on the node the user\n * clicks - never by `concept_ref`, which used to produce \"Missing required\n * fields in: native.Text\" and named neither the input at fault nor, when several\n * inputs share a concept, which of them. Inputs the method declared omittable\n * are skipped: an empty `?` input is not a missing one.\n *\n * The scan can come up empty even on an invalid form (a wrong value shape, a\n * nested mismatch); `errors` is what the caller falls back to then, so a failure\n * is never undiagnosable.\n *\n * `preparedData` is `unknown` for the same reason `gateRunInputs`' `data` is: on\n * a public endpoint the body is whatever was sent, and ajv must be shown that\n * rather than a repair of it, or `must be object` is a verdict no caller can\n * ever receive. The name-the-variable scan below needs something indexable, so\n * a body that is not a record scans against nothing and names every input the\n * method demands - which is the honest answer for a body that carried none.\n */\nexport function validateRunInputs(\n  preparedData: unknown,\n  inputs: Record<string, PipeInputContract>,\n  schema: Dict,\n): RunInputsVerdict {\n  const errors = validateRunInputsSchema(preparedData, schema);\n  if (errors.length === 0) return { isValid: true, missingInputs: [], errors: [] };\n\n  const record0 =\n    typeof preparedData === 'object' && preparedData !== null && !Array.isArray(preparedData)\n      ? (preparedData as Dict)\n      : undefined;\n  const missingInputs: string[] = [];\n  for (const [varName, input] of Object.entries(inputs)) {\n    if (!inputMustBeFilled(input)) continue;\n    const varData = ownProp(record0, varName);\n    // A demanded input that is not there at all is missing whatever its concept\n    // declares inside. The check has to come BEFORE the required-children one:\n    // a struct whose concept demands no child used to fall out of the scan\n    // here, so the run was refused by the combined schema's `required` list\n    // while the scan named nothing and the caller could only quote ajv.\n    if (varData == null) {\n      missingInputs.push(varName);\n      continue;\n    }\n    const inputSchema = input.json_schema as Dict;\n    const requiredFields = (inputSchema.required as string[]) || [];\n    if (requiredFields.length === 0) continue;\n    if (typeof varData !== 'object') {\n      missingInputs.push(varName);\n      continue;\n    }\n    const record = varData as Dict;\n    if (\n      requiredFields.some((f) => {\n        const child = ownProp(record, f);\n        return child === undefined || child === '';\n      })\n    ) {\n      missingInputs.push(varName);\n    }\n  }\n\n  return { isValid: false, missingInputs, errors };\n}\n\n/**\n * Build the `{ concept, content }` map a run expects, from PREPARED data.\n *\n * The two ways a method says \"this may be nothing\" land differently on the wire:\n * - an **optional (`?`)** input left blank is OMITTED, so the runtime records a\n *   real absence the method can branch on - sending `{ text: \"\" }` would look\n *   like the caller supplied an empty string;\n * - a **plural (`[]`)** input keeps its key, because a plural slot is never\n *   absent - its empty form IS the empty list, and the runtime requires the key.\n *   When that list is EMPTY it is sent BARE, without the envelope: the envelope\n *   is the runtime's \"explicit form\", which bypasses the top-down shaper and\n *   hands the value to the bottom-up factory, and that factory types a list from\n *   its first item - so an empty list there raises \"Cannot create Stuff from\n *   empty list in content\". The bare form keeps the shaper, which reads the\n *   DECLARED concept and builds the empty list correctly. (pipelex/#1096 makes\n *   the envelope agree; the bare form runs today and stays correct after.)\n *\n * A fixed-count (`[N]`) list takes that same empty-list path, and an empty one\n * is not a payload the method can accept. It is unreachable through the gate,\n * which demands the input and rejects a short list on `minItems`; building the\n * payload straight from unvalidated data is what would reach it, and inventing\n * a different absence here would only hide that.\n */\nexport function apiInputsFromSchemaData(\n  preparedData: Dict,\n  inputs: Record<string, PipeInputContract>,\n): Dict {\n  const out: Dict = {};\n  for (const [varName, input] of Object.entries(inputs)) {\n    const raw = ownProp(preparedData, varName);\n    if (isOptionalInput(input) && !isFilled(raw)) continue;\n    if (isPluralInput(input) && !isFilled(raw)) {\n      out[varName] = [];\n      continue;\n    }\n    const content = isPluralInput(input) && !Array.isArray(raw) ? [] : raw;\n    out[varName] = { concept: input.concept_ref, content };\n  }\n  return out;\n}\n\n// ─── The whole chain, as one call ────────────────────────────────────────────\n\n/** The gate's verdict: the payload to send, or why the run may not start. */\nexport type RunInputsGateResult =\n  | { ok: true; inputs: Dict }\n  | {\n      ok: false;\n      /** Variable names the caller left empty or short. */\n      missingInputs: string[];\n      /** Raw ajv errors, for when the scan cannot name anything. */\n      errors: RunInputError[];\n      /** The repaired data the verdict was reached on - what\n       *  `describeValidationError` needs to quote the value it received. */\n      preparedData: Dict;\n    };\n\n/**\n * One schema object per contract, for the lifetime of the process.\n *\n * `buildRunInputsSchema` is a pure function of the contract, so rebuilding it is\n * *semantically* free - but validation runs through a module-level ajv whose\n * compiled-schema cache is keyed on **schema object identity** and is never\n * evicted. A fresh object per call therefore misses every time and retains\n * another compiled validator. On a publicly callable server endpoint that is\n * unbounded growth driven by the cheapest request there is: an empty body,\n * rejected in a fraction of a millisecond, costing nothing to send.\n *\n * Weakly keyed so the map never pins a contract that goes out of scope. The\n * schema a run has been gated against is pinned for the process lifetime anyway\n * by ajv's own cache; the point is that the NUMBER of them is bounded by the\n * number of distinct contracts rather than by traffic.\n */\nconst SCHEMA_CACHE = new WeakMap<PipeIOContract, Dict>();\n\nfunction schemaForContract(contract: PipeIOContract): Dict {\n  const cached = SCHEMA_CACHE.get(contract);\n  if (cached) return cached;\n  const schema = buildRunInputsSchema(contract.inputs);\n  SCHEMA_CACHE.set(contract, schema);\n  return schema;\n}\n\n/**\n * Gate a run: repair the caller's data, validate it against the contract,\n * refuse anything the Run button would have refused, and build the payload.\n *\n * Returns a verdict rather than throwing. A server endpoint must not throw\n * across the boundary to its client - frameworks routinely strip the message to\n * an opaque digest in a production build - and a rejection here is an ordinary\n * outcome, not an exceptional one.\n *\n * **`data` is `unknown` because that is what it is.** A run endpoint is public\n * and no framework enforces a declared parameter type, so the argument is\n * whatever the caller put in the body. The chain indexes the payload by\n * variable name without first checking it is indexable, so a `null` body would\n * throw *after* ajv had already reported `must be object` and before any\n * verdict came back.\n *\n * So the two uses are separated rather than collapsed into one repair. **ajv\n * judges the value the caller actually sent**, which is what makes `must be\n * object` the verdict for a body that is not one; the indexing that follows\n * uses a safe `{}` stand-in, which is what keeps the gate from throwing. Repair\n * FIRST - coercing a non-object to `{}` before validating - is the shape that\n * looks equivalent and is not: a contract whose inputs are all optional has an\n * empty `required` list, so `{}` validates, and `gateRunInputs(\"garbage\", …)`\n * came back `ok: true` on a body the caller never meant as a run. Fail-closed\n * costs a malformed caller an error it earned; the other direction bills a run.\n *\n * **The schema alone is not the rule.** ajv's `required` asserts only that a\n * key is PRESENT, and a content model carries no `minLength` - so a required\n * input that arrived empty (`{document: {url: \"\"}}`, `{text: {text: \"\"}}`)\n * satisfies the schema. That is the natural payload, not a contrived one:\n * `rjsfDataFromRunValues({}, fields)` emits exactly that when nothing is\n * selected. So the gate re-applies the emptiness rule using\n * `computeReadiness`'s OWN two functions over the same derived fields, which is\n * the only way to be sure the two sides cannot disagree.\n *\n * Picking a pair that merely looks equivalent is not enough, and this is the\n * whole reason the assembly lives here rather than in each host: the obvious\n * choice, `inputMustBeFilled` + `isFilled`, agrees on every leaf kind and\n * diverges on a structured concept in BOTH directions - `isFilled` on an object\n * is `some(child filled)` where `fieldFilled` is `every(required child\n * filled)`. That accepts a half-filled struct the browser refuses (a paid run\n * past a disabled button) and rejects a filled all-optional struct the browser\n * accepts. A host whose methods happen to use only native concepts has no test\n * that can catch either.\n */\nexport function gateRunInputs(contract: PipeIOContract, data: unknown): RunInputsGateResult {\n  const isRecord = typeof data === 'object' && data !== null && !Array.isArray(data);\n  const payload = isRecord ? (data as Dict) : {};\n  const schema = schemaForContract(contract);\n  const preparedData = prepareRunInputs(payload, schema);\n\n  // The value ajv is shown is the caller's, not the stand-in - see above.\n  const verdict = validateRunInputs(isRecord ? preparedData : data, contract.inputs, schema);\n  if (!verdict.isValid) {\n    return {\n      ok: false,\n      missingInputs: verdict.missingInputs,\n      errors: verdict.errors,\n      preparedData,\n    };\n  }\n\n  // The SELECTION is half the rule, and leaving it out is what made the two\n  // halves disagree. `computeReadiness` reckons with an input the method\n  // demands AND one it left optional that the user has touched - because a\n  // structure with something in it owes its concept every field the concept\n  // declares. Filtering on `mustBeFilled` alone dropped the second kind, so a\n  // half-filled optional struct was refused by the button and accepted here.\n  //\n  // ajv cannot cover for it: a required child that is a plain string arrives as\n  // `''`, which satisfies `required`. And the payload builder below then SENDS\n  // that input, because `isFilled` is exactly what it tests. Which is the rule\n  // stated properly: the gate holds to its concept precisely the inputs it is\n  // about to put on the wire, and nothing it will omit.\n  //\n  // The tree the predicates run over is the gate's own, walked structurally\n  // from the same `json_schema` ajv just validated - NOT the render tree, which\n  // is built from the input-form descriptor. A server validating a payload must\n  // never need that presentation artifact; see `gating-fields.ts`.\n  const missingInputs = gatingFieldsFromInputs(contract.inputs)\n    .filter((field) => mustBeFilled(field) || isFilled(ownProp(preparedData, field.name)))\n    .filter((field) => !fieldFilled(field, ownProp(preparedData, field.name)))\n    .map((field) => field.name);\n  if (missingInputs.length) return { ok: false, missingInputs, errors: [], preparedData };\n\n  return { ok: true, inputs: apiInputsFromSchemaData(preparedData, contract.inputs) };\n}\n"]}

package/dist/core/derive.js

@@ -1,7 +1,7 @@
-export { buildResultField, buildRunFields, getPipeInputForm } from '../chunk-ZB4RYUKV.js';
-import '../chunk-XCO6GTEC.js';
+export { buildResultField, buildRunFields, getPipeInputForm } from '../chunk-HVWE3TTC.js';
 import '../chunk-OD3VYXUY.js';
 import '../chunk-WYH56SOZ.js';
 import '../chunk-V3OV2XQT.js';
+import '../chunk-XCO6GTEC.js';
 //# sourceMappingURL=derive.js.map
 //# sourceMappingURL=derive.js.map

package/dist/core/gate.js

@@ -1,8 +1,8 @@
-export { apiInputsFromSchemaData, buildRunInputsSchema, gateRunInputs, prepareRunInputs, validateRunInputs } from '../chunk-IBBAJXIO.js';
-import '../chunk-E6BIXJ6C.js';
-import '../chunk-XO5OENNF.js';
+export { apiInputsFromSchemaData, buildRunInputsSchema, gateRunInputs, prepareRunInputs, validateRunInputs } from '../chunk-XVGAQ4RK.js';
 import '../chunk-Y2ND6W4W.js';
 import '../chunk-LBFZXYCY.js';
+import '../chunk-E6BIXJ6C.js';
+import '../chunk-XO5OENNF.js';
 import '../chunk-OD3VYXUY.js';
 import '../chunk-WYH56SOZ.js';
 import '../chunk-V3OV2XQT.js';

package/dist/core/index.js

@@ -1,24 +1,24 @@
+export { describeValidationError, displayValue, valueAtProperty } from '../chunk-RPA7DNSK.js';
+export { apiInputsFromSchemaData, buildRunInputsSchema, gateRunInputs, prepareRunInputs, validateRunInputs } from '../chunk-XVGAQ4RK.js';
+import '../chunk-Y2ND6W4W.js';
+export { narrowFileFormats } from '../chunk-CAKQ5VFT.js';
+export { normalizeSchemaForRjsf, prepareSchemaForRjsf } from '../chunk-LBFZXYCY.js';
+export { getPipeOutputForm } from '../chunk-JIGRWJTV.js';
+export { apiInputsFromRunValues, fieldsForContract, inputDataFromWorkingMemory, outputsFromPipeOutput, rjsfDataFromRunValues, runValuesFromInputs, runValuesFromStore, sameRunValues, setValueAtPath, storeInputDataFromRunValues } from '../chunk-2UCH4AAO.js';
 export { planFileSave, planStuffSave } from '../chunk-4VAO6BDE.js';
 export { closeOptionalStructures, openOptionalStructures, seedInputs, seedObjectValue } from '../chunk-VH5CDQDR.js';
 export { addChosenFiles, chosenFilesAdded, roomForChosenFiles, sourceFileValue } from '../chunk-L23R3JNQ.js';
 export { collectStuffFiles } from '../chunk-56WECFBD.js';
-export { describeValidationError, displayValue, valueAtProperty } from '../chunk-RPA7DNSK.js';
-export { apiInputsFromRunValues, fieldsForContract, inputDataFromWorkingMemory, outputsFromPipeOutput, rjsfDataFromRunValues, runValuesFromInputs, runValuesFromStore, sameRunValues, setValueAtPath, storeInputDataFromRunValues } from '../chunk-ZX52CQJ4.js';
-export { enumValueLabeler, humanizeEnumValue, humanizeFieldName } from '../chunk-GHVVULHY.js';
-export { narrowFileFormats } from '../chunk-CAKQ5VFT.js';
-export { NATIVE_CHOICE_CONCEPT_REF, NATIVE_COMPOSITE_CONCEPT_REF, NATIVE_DATE_CONCEPT_REF, NATIVE_HTML_CONCEPT_REF, NATIVE_PAGE_CONCEPT_REF, NATIVE_RATING_CONCEPT_REF, NATIVE_SEARCH_RESULT_CONCEPT_REF, NATIVE_YES_NO_CONCEPT_REF, TYPED_SCALAR_MARKERS, citedSource, formatDateContent, hasTypedScalarMarkers, isNativeCompositeNode, isNativeDateNode, isNativeHtmlNode, isNativePageNode, isNativeSearchResultNode, isViewableUrl, nativeVerdictOf, readChoiceContent, readCompositeContent, readDataUrl, readDateContent, readDocumentContent, readHtmlContent, readImageContent, readPageContent, readRatingContent, readSearchResultContent, readYesNoContent, splitCitations, viewableUrl } from '../chunk-QQK6Y55E.js';
-export { getPipeOutputForm } from '../chunk-JIGRWJTV.js';
-export { buildResultField, buildRunFields, getPipeInputForm } from '../chunk-ZB4RYUKV.js';
-export { conceptCategory } from '../chunk-FABY3DEY.js';
-export { DOCUMENT_FORMATS, IMAGE_FORMATS, acceptLabel, acceptMap, formatsForKind, isAcceptedFile } from '../chunk-XCO6GTEC.js';
-export { apiInputsFromSchemaData, buildRunInputsSchema, gateRunInputs, prepareRunInputs, validateRunInputs } from '../chunk-IBBAJXIO.js';
 export { deflateAllInputs, deflateInput, healStringWrappers, inflateAllInputs, inflateInput, pruneEmptyOptionals, resolveConceptCode } from '../chunk-E6BIXJ6C.js';
 export { anyOptionalStructureOpen, computeReadiness, fieldFilled, foldsBehindOptionalDisclosure, isFilled, isFoldedOptional, isOptionalStructure, mustBeFilled, optionalStructureOpen, shownAsOptional } from '../chunk-XO5OENNF.js';
-import '../chunk-Y2ND6W4W.js';
-export { normalizeSchemaForRjsf, prepareSchemaForRjsf } from '../chunk-LBFZXYCY.js';
+export { enumValueLabeler, humanizeEnumValue, humanizeFieldName } from '../chunk-GHVVULHY.js';
+export { NATIVE_CHOICE_CONCEPT_REF, NATIVE_COMPOSITE_CONCEPT_REF, NATIVE_DATE_CONCEPT_REF, NATIVE_HTML_CONCEPT_REF, NATIVE_PAGE_CONCEPT_REF, NATIVE_RATING_CONCEPT_REF, NATIVE_SEARCH_RESULT_CONCEPT_REF, NATIVE_YES_NO_CONCEPT_REF, TYPED_SCALAR_MARKERS, citedSource, formatDateContent, hasTypedScalarMarkers, isNativeCompositeNode, isNativeDateNode, isNativeHtmlNode, isNativePageNode, isNativeSearchResultNode, isViewableUrl, nativeVerdictOf, readChoiceContent, readCompositeContent, readDataUrl, readDateContent, readDocumentContent, readHtmlContent, readImageContent, readPageContent, readRatingContent, readSearchResultContent, readYesNoContent, splitCitations, viewableUrl } from '../chunk-QQK6Y55E.js';
+export { buildResultField, buildRunFields, getPipeInputForm } from '../chunk-HVWE3TTC.js';
 export { collapseNullable, collectSchemaDefs, derefSchema, flattenAnyOf, hoistDefsToRoot, resolveSchemaIndirection, schemaTypeOf } from '../chunk-OD3VYXUY.js';
 export { buildPipeRef, getPipeIOContract, inputMustBeFilled, isFixedCountInput, isOptionalInput, isPluralInput } from '../chunk-WYH56SOZ.js';
 import '../chunk-V3OV2XQT.js';
+export { conceptCategory } from '../chunk-FABY3DEY.js';
+export { DOCUMENT_FORMATS, IMAGE_FORMATS, acceptLabel, acceptMap, formatsForKind, isAcceptedFile } from '../chunk-XCO6GTEC.js';
 export { validateRunInputsSchema } from '../chunk-VTPUDBSJ.js';
 export { asCalendarDate, dayWithinDateTime, isAcceptableDate, isAcceptableDateTime, toDateInputValue, toStoredDateValue } from '../chunk-GKV77RAS.js';
 //# sourceMappingURL=index.js.map

package/dist/core/values.js

@@ -1,11 +1,11 @@
-export { apiInputsFromRunValues, fieldsForContract, inputDataFromWorkingMemory, outputsFromPipeOutput, rjsfDataFromRunValues, runValuesFromInputs, runValuesFromStore, sameRunValues, setValueAtPath, storeInputDataFromRunValues } from '../chunk-ZX52CQJ4.js';
-import '../chunk-ZB4RYUKV.js';
-import '../chunk-XCO6GTEC.js';
+export { apiInputsFromRunValues, fieldsForContract, inputDataFromWorkingMemory, outputsFromPipeOutput, rjsfDataFromRunValues, runValuesFromInputs, runValuesFromStore, sameRunValues, setValueAtPath, storeInputDataFromRunValues } from '../chunk-2UCH4AAO.js';
 import '../chunk-E6BIXJ6C.js';
 import '../chunk-XO5OENNF.js';
+import '../chunk-HVWE3TTC.js';
 import '../chunk-OD3VYXUY.js';
 import '../chunk-WYH56SOZ.js';
 import '../chunk-V3OV2XQT.js';
+import '../chunk-XCO6GTEC.js';
 import '../chunk-GKV77RAS.js';
 //# sourceMappingURL=values.js.map
 //# sourceMappingURL=values.js.map