@pwa-platform/core 0.1.0-beta.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 PWA Platform contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,9 @@
+# @pwa-platform/core
+
+Compile PWA Platform policies into deployment plans.
+
+Policy compiler used by the build integration. Applications should configure the host adapter instead of calling this package directly.
+
+This is a `0.1.0` prerelease. It provides online use, installation integration, static precaching, a safe offline fallback, and controlled updates. It does not enable runtime business API caching, private data caching, automatic write replay, or Push for applications. Production deployment requires the application and infrastructure checks described in the PWA Platform release runbook.
+
+License: MIT.

package/dist/compile.d.ts

@@ -0,0 +1,8 @@
+import type { PwaPlan, PwaValidationResult } from "@pwa-platform/contracts";
+import type { PwaCompileInput } from "./input.js";
+/**
+ * Compiles platform identity, install metadata, policy, topology and host build output into a
+ * `PwaPlan`. Never throws; a successful plan always passes contracts `validatePlan`.
+ */
+export declare function compilePlan(input: PwaCompileInput): PwaValidationResult<PwaPlan>;
+//# sourceMappingURL=compile.d.ts.map

package/dist/compile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compile.d.ts","sourceRoot":"","sources":["../src/compile.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAIV,OAAO,EAEP,mBAAmB,EAEpB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAalD;;;GAGG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,eAAe,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAOhF"}

package/dist/compile.js

@@ -0,0 +1,170 @@
+import { REQUEST_BASELINE_DENIALS, cacheNamespacePrefix, validateIdentity, validateInstallMetadata, validatePlan, validatePolicy, } from "@pwa-platform/contracts";
+import { checkHostOutput } from "./host-output.js";
+import { diagnostic, withinField } from "./internal/diagnostics.js";
+import { isPlainRecord } from "./internal/shape.js";
+import { compilePrecache } from "./precache.js";
+import { compilePathRules } from "./rules.js";
+import { decodedPathKey, isWithinKey } from "./internal/path-key.js";
+import { resolvePrefix } from "./rules.js";
+import { installStartUrlInChildScope, policyRulesInChildScope, resolveTopology } from "./topology.js";
+const INPUT_FIELDS = ["identity", "install", "policy", "topology", "hostBuildOutput"];
+/**
+ * Compiles platform identity, install metadata, policy, topology and host build output into a
+ * `PwaPlan`. Never throws; a successful plan always passes contracts `validatePlan`.
+ */
+export function compilePlan(input) {
+    try {
+        return compile(input);
+    }
+    catch {
+        // Hostile inputs (revoked proxies, throwing traps, extreme nesting) must still produce a result.
+        return failure([diagnostic("value.not-serializable", [])]);
+    }
+}
+/** Reads each input field exactly once through its property descriptor, so accessors never run. */
+function readInput(input) {
+    if (!isPlainRecord(input))
+        return [diagnostic("schema.invalid-type", [])];
+    const findings = [];
+    if (Reflect.ownKeys(input).some((key) => !INPUT_FIELDS.includes(key))) {
+        findings.push(diagnostic("schema.unknown-field", []));
+    }
+    const fields = {};
+    for (const field of INPUT_FIELDS) {
+        const descriptor = Object.getOwnPropertyDescriptor(input, field);
+        if (descriptor === undefined) {
+            findings.push(diagnostic("schema.missing-field", [field]));
+        }
+        else if (!descriptor.enumerable || !("value" in descriptor)) {
+            findings.push(diagnostic("value.not-serializable", [field]));
+        }
+        else {
+            fields[field] = descriptor.value;
+        }
+    }
+    return findings.length > 0 ? findings : fields;
+}
+function compile(input) {
+    const fields = readInput(input);
+    if (Array.isArray(fields))
+        return failure(fields);
+    const errors = [];
+    const warnings = [];
+    const identityResult = validateIdentity(fields.identity);
+    if (!identityResult.ok)
+        errors.push(...identityResult.diagnostics.map((finding) => withinField("identity", finding)));
+    const identity = identityResult.ok ? identityResult.value : undefined;
+    const policyResult = validatePolicy(fields.policy);
+    if (!policyResult.ok)
+        errors.push(...policyResult.diagnostics.map((finding) => withinField("policy", finding)));
+    const policy = policyResult.ok ? policyResult.value : undefined;
+    // v2 policy validation lands before its plan and worker contract. Never discard an accepted offline-write
+    // declaration and emit a v1 plan: until the coordinated v2 compiler slice exists, reject it explicitly.
+    const installEnabled = policy?.install.enabled === true;
+    let install = null;
+    if (fields.install === null) {
+        if (installEnabled)
+            errors.push(diagnostic("compile.install-metadata-missing", ["install"]));
+    }
+    else if (identity !== undefined) {
+        const installResult = validateInstallMetadata(fields.install, identity);
+        if (installResult.ok) {
+            install = installResult.value;
+            // Metadata for a disabled install is still validated, but its warnings do not reach the plan.
+            if (installEnabled)
+                warnings.push(...installResult.diagnostics.map((finding) => withinField("install", finding)));
+        }
+        else {
+            errors.push(...installResult.diagnostics.map((finding) => withinField("install", finding)));
+        }
+    }
+    const topologyResolution = resolveTopology(fields.topology, identity);
+    errors.push(...topologyResolution.findings);
+    const resolvedTopology = topologyResolution.resolved;
+    if (identity !== undefined && policy !== undefined && resolvedTopology !== undefined && resolvedTopology.childPrefixKeys.length > 0) {
+        errors.push(...policyRulesInChildScope(policy, identity.mountPath, resolvedTopology.childPrefixKeys));
+        // Install metadata for a disabled install still reaches the plan as `null`, so only the value that will
+        // actually be published needs checking (mirrors contracts' plan-level `plan.start-url-in-child-scope`).
+        if (installEnabled && install !== null) {
+            errors.push(...installStartUrlInChildScope(install, resolvedTopology.childPrefixKeys));
+        }
+    }
+    const host = checkHostOutput(fields.hostBuildOutput, identity);
+    errors.push(...host.findings);
+    const rules = identity !== undefined && policy !== undefined ? compilePathRules(policy, identity.mountPath) : undefined;
+    if (rules !== undefined)
+        errors.push(...rules.findings);
+    if (identity !== undefined && policy?.schemaVersion === 2 && rules !== undefined) {
+        for (const [index, target] of policy.offlineWrites.targets.entries()) {
+            const key = decodedPathKey(resolvePrefix(identity.mountPath, target.pathPrefix));
+            const matched = rules.pathRules.find((rule) => isWithinKey(key, decodedPathKey(rule.pathPrefix)));
+            if (matched?.resourceClass !== "mutation") {
+                errors.push(diagnostic("compile.offline-write-target-invalid", ["policy", "offlineWrites", "targets", index, "pathPrefix"]));
+            }
+        }
+    }
+    // Precache selection needs conflict-free rules and a valid build output manifest.
+    const precache = identity !== undefined && policy !== undefined && rules !== undefined && rules.findings.length === 0 && host.output !== undefined
+        ? compilePrecache(policy, identity.mountPath, host.output, rules, resolvedTopology?.childPrefixKeys ?? [])
+        : undefined;
+    if (precache !== undefined) {
+        errors.push(...precache.errors);
+        warnings.push(...precache.warnings);
+    }
+    if (errors.length > 0 ||
+        identity === undefined ||
+        policy === undefined ||
+        rules === undefined ||
+        host.output === undefined ||
+        precache === undefined ||
+        resolvedTopology === undefined) {
+        return failure(errors);
+    }
+    const planFields = {
+        identity,
+        install: installEnabled ? install : null,
+        hostBuildOutput: { publicPath: host.output.publicPath },
+        topology: resolvedTopology.value,
+        artifacts: { serviceWorkerFile: host.output.serviceWorkerFile, manifestFile: host.output.manifestFile },
+        precache: precache.precache,
+        cacheNamespace: { prefix: cacheNamespacePrefix(identity) },
+        requestBaselineDenials: [...REQUEST_BASELINE_DENIALS],
+        pathRules: [...resolvedTopology.excludeRules, ...rules.pathRules],
+        offlineFallback: precache.offlineFallback,
+        updateMode: policy.updateMode,
+        diagnostics: warnings,
+    };
+    const plan = policy.schemaVersion === 2
+        ? {
+            ...planFields,
+            schemaVersion: 2,
+            planVersion: 2,
+            policyVersion: 2,
+            offlineWrites: compileOfflineWrites(policy.offlineWrites, identity),
+        }
+        : { ...planFields, schemaVersion: 1, planVersion: 1, policyVersion: 1 };
+    // Guarantees the documented contract: a successful compilation always passes validatePlan.
+    const checked = validatePlan(plan);
+    if (!checked.ok)
+        return checked;
+    return { ok: true, value: checked.value, diagnostics: warnings };
+}
+function compileOfflineWrites(policy, identity) {
+    if (!policy.enabled)
+        return { enabled: false };
+    const resolve = (prefix) => (identity.mountPath === "/" ? prefix : prefix === "/" ? identity.mountPath : `${identity.mountPath}${prefix}`);
+    return {
+        enabled: true,
+        databaseName: `pwa-offline-write:${encodeURIComponent(identity.appId)}:${encodeURIComponent(identity.environment)}:${encodeURIComponent(identity.cacheNamespaceSeed)}`,
+        maxEntries: policy.maxEntries,
+        maxTotalBodyBytes: policy.maxTotalBodyBytes,
+        targets: policy.targets.map((target) => ({ id: target.id, pathPrefix: resolve(target.pathPrefix), maxBodyBytes: target.maxBodyBytes })),
+    };
+}
+function failure(diagnostics) {
+    const [first, ...rest] = diagnostics;
+    if (!first)
+        throw new Error("A failed compilation must carry at least one diagnostic.");
+    return { ok: false, diagnostics: [first, ...rest] };
+}
+//# sourceMappingURL=compile.js.map

package/dist/compile.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compile.js","sourceRoot":"","sources":["../src/compile.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,wBAAwB,EACxB,oBAAoB,EACpB,gBAAgB,EAChB,uBAAuB,EACvB,YAAY,EACZ,cAAc,GACf,MAAM,yBAAyB,CAAC;AAUjC,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEnD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,EAAE,2BAA2B,EAAE,uBAAuB,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEtG,MAAM,YAAY,GAAG,CAAC,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,UAAU,EAAE,iBAAiB,CAAU,CAAC;AAI/F;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,KAAsB;IAChD,IAAI,CAAC;QACH,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,iGAAiG;QACjG,OAAO,OAAO,CAAC,CAAC,UAAU,CAAC,wBAAwB,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7D,CAAC;AACH,CAAC;AAED,mGAAmG;AACnG,SAAS,SAAS,CAAC,KAAc;IAC/B,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,CAAC,UAAU,CAAC,qBAAqB,EAAE,EAAE,CAAC,CAAC,CAAC;IAC1E,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAE,YAAuC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QAClG,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,sBAAsB,EAAE,EAAE,CAAC,CAAC,CAAC;IACxD,CAAC;IACD,MAAM,MAAM,GAA2D,EAAE,CAAC;IAC1E,KAAK,MAAM,KAAK,IAAI,YAAY,EAAE,CAAC;QACjC,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACjE,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;YAC7B,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,sBAAsB,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC7D,CAAC;aAAM,IAAI,CAAC,UAAU,CAAC,UAAU,IAAI,CAAC,CAAC,OAAO,IAAI,UAAU,CAAC,EAAE,CAAC;YAC9D,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,wBAAwB,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC/D,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,KAAK,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC;QACnC,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAE,MAAsB,CAAC;AAClE,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC;IAElD,MAAM,MAAM,GAAoB,EAAE,CAAC;IACnC,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAE5C,MAAM,cAAc,GAAG,gBAAgB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACzD,IAAI,CAAC,cAAc,CAAC,EAAE;QAAE,MAAM,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,WAAW,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IACtH,MAAM,QAAQ,GAAG,cAAc,CAAC,EAAE,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAEtE,MAAM,YAAY,GAAG,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACnD,IAAI,CAAC,YAAY,CAAC,EAAE;QAAE,MAAM,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,WAAW,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IAChH,MAAM,MAAM,GAAG,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAChE,0GAA0G;IAC1G,wGAAwG;IACxG,MAAM,cAAc,GAAG,MAAM,EAAE,OAAO,CAAC,OAAO,KAAK,IAAI,CAAC;IAExD,IAAI,OAAO,GAA8B,IAAI,CAAC;IAC9C,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;QAC5B,IAAI,cAAc;YAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,kCAAkC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IAC/F,CAAC;SAAM,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,aAAa,GAAG,uBAAuB,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACxE,IAAI,aAAa,CAAC,EAAE,EAAE,CAAC;YACrB,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC;YAC9B,8FAA8F;YAC9F,IAAI,cAAc;gBAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;QACpH,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;QAC9F,CAAC;IACH,CAAC;IAED,MAAM,kBAAkB,GAAG,eAAe,CAAC,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IACtE,MAAM,CAAC,IAAI,CAAC,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAC5C,MAAM,gBAAgB,GAAG,kBAAkB,CAAC,QAAQ,CAAC;IAErD,IAAI,QAAQ,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,IAAI,gBAAgB,KAAK,SAAS,IAAI,gBAAgB,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpI,MAAM,CAAC,IAAI,CAAC,GAAG,uBAAuB,CAAC,MAAM,EAAE,QAAQ,CAAC,SAAS,EAAE,gBAAgB,CAAC,eAAe,CAAC,CAAC,CAAC;QACtG,wGAAwG;QACxG,wGAAwG;QACxG,IAAI,cAAc,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACvC,MAAM,CAAC,IAAI,CAAC,GAAG,2BAA2B,CAAC,OAAO,EAAE,gBAAgB,CAAC,eAAe,CAAC,CAAC,CAAC;QACzF,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAG,eAAe,CAAC,MAAM,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC;IAC/D,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;IAE9B,MAAM,KAAK,GAAG,QAAQ,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,gBAAgB,CAAC,MAAM,EAAE,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACxH,IAAI,KAAK,KAAK,SAAS;QAAE,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;IACxD,IAAI,QAAQ,KAAK,SAAS,IAAI,MAAM,EAAE,aAAa,KAAK,CAAC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACjF,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YACrE,MAAM,GAAG,GAAG,cAAc,CAAC,aAAa,CAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;YACjF,MAAM,OAAO,GAAG,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YAClG,IAAI,OAAO,EAAE,aAAa,KAAK,UAAU,EAAE,CAAC;gBAC1C,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,sCAAsC,EAAE,CAAC,QAAQ,EAAE,eAAe,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC;YAC/H,CAAC;QACH,CAAC;IACH,CAAC;IAED,kFAAkF;IAClF,MAAM,QAAQ,GACZ,QAAQ,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS;QAC/H,CAAC,CAAC,eAAe,CAAC,MAAM,EAAE,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,gBAAgB,EAAE,eAAe,IAAI,EAAE,CAAC;QAC1G,CAAC,CAAC,SAAS,CAAC;IAChB,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,MAAM,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;QAChC,QAAQ,CAAC,IAAI,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACtC,CAAC;IAED,IACE,MAAM,CAAC,MAAM,GAAG,CAAC;QACjB,QAAQ,KAAK,SAAS;QACtB,MAAM,KAAK,SAAS;QACpB,KAAK,KAAK,SAAS;QACnB,IAAI,CAAC,MAAM,KAAK,SAAS;QACzB,QAAQ,KAAK,SAAS;QACtB,gBAAgB,KAAK,SAAS,EAC9B,CAAC;QACD,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC;IACzB,CAAC;IAED,MAAM,UAAU,GAAG;QACjB,QAAQ;QACR,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;QACxC,eAAe,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE;QACvD,QAAQ,EAAE,gBAAgB,CAAC,KAAK;QAChC,SAAS,EAAE,EAAE,iBAAiB,EAAE,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,YAAY,EAAE,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE;QACvG,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,cAAc,EAAE,EAAE,MAAM,EAAE,oBAAoB,CAAC,QAAQ,CAAC,EAAE;QAC1D,sBAAsB,EAAE,CAAC,GAAG,wBAAwB,CAAC;QACrD,SAAS,EAAE,CAAC,GAAG,gBAAgB,CAAC,YAAY,EAAE,GAAG,KAAK,CAAC,SAAS,CAAC;QACjE,eAAe,EAAE,QAAQ,CAAC,eAAe;QACzC,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,WAAW,EAAE,QAAQ;KACtB,CAAC;IACF,MAAM,IAAI,GACR,MAAM,CAAC,aAAa,KAAK,CAAC;QACxB,CAAC,CAAC;YACE,GAAG,UAAU;YACb,aAAa,EAAE,CAAC;YAChB,WAAW,EAAE,CAAC;YACd,aAAa,EAAE,CAAC;YAChB,aAAa,EAAE,oBAAoB,CAAC,MAAM,CAAC,aAAa,EAAE,QAAQ,CAAC;SACpE;QACH,CAAC,CAAC,EAAE,GAAG,UAAU,EAAE,aAAa,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,CAAC;IAE5E,2FAA2F;IAC3F,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,OAAO,CAAC;IAChC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;AACnE,CAAC;AAED,SAAS,oBAAoB,CAAC,MAA6B,EAAE,QAA6B;IACxF,IAAI,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC/C,MAAM,OAAO,GAAG,CAAC,MAAc,EAAgB,EAAE,CAC/C,CAAC,QAAQ,CAAC,SAAS,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,SAAS,GAAG,MAAM,EAAE,CAAiB,CAAC;IACjI,OAAO;QACL,OAAO,EAAE,IAAI;QACb,YAAY,EAAE,qBAAqB,kBAAkB,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,kBAAkB,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,kBAAkB,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE;QACtK,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;QAC3C,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,EAAE,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC;KACxI,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,WAAqC;IACpD,MAAM,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,GAAG,WAAW,CAAC;IACrC,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IACxF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,KAAK,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;AACtD,CAAC"}

package/dist/host-output.d.ts

@@ -0,0 +1,13 @@
+import type { PwaDiagnostic, PwaIdentity } from "@pwa-platform/contracts";
+import type { PwaCompileHostOutput } from "./input.js";
+export type CheckedHostOutput = {
+    readonly findings: PwaDiagnostic[];
+    /** A fresh copy of the manifest, present only when `findings` is empty. */
+    readonly output: PwaCompileHostOutput | undefined;
+};
+/**
+ * Validates the host build output manifest against the identity (when it is valid) and returns a
+ * snapshot, so later compilation steps never read the caller's objects again.
+ */
+export declare function checkHostOutput(value: unknown, identity: Pick<PwaIdentity, "scope" | "serviceWorkerUrl" | "manifestUrl"> | undefined): CheckedHostOutput;
+//# sourceMappingURL=host-output.d.ts.map

package/dist/host-output.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-output.d.ts","sourceRoot":"","sources":["../src/host-output.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAgB,aAAa,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACxF,OAAO,KAAK,EAAE,oBAAoB,EAAoB,MAAM,YAAY,CAAC;AAYzE,MAAM,MAAM,iBAAiB,GAAG;IAC9B,QAAQ,CAAC,QAAQ,EAAE,aAAa,EAAE,CAAC;IACnC,2EAA2E;IAC3E,QAAQ,CAAC,MAAM,EAAE,oBAAoB,GAAG,SAAS,CAAC;CACnD,CAAC;AAEF;;;GAGG;AACH,wBAAgB,eAAe,CAC7B,KAAK,EAAE,OAAO,EACd,QAAQ,EAAE,IAAI,CAAC,WAAW,EAAE,OAAO,GAAG,kBAAkB,GAAG,aAAa,CAAC,GAAG,SAAS,GACpF,iBAAiB,CAyEnB"}

package/dist/host-output.js

@@ -0,0 +1,96 @@
+import { diagnostic } from "./internal/diagnostics.js";
+import { decodedPathKey } from "./internal/path-key.js";
+import { isCanonicalPath, isRelativeFilePath } from "./internal/paths.js";
+import { hasExactKeys } from "./internal/shape.js";
+const HOST_FIELDS = ["publicPath", "serviceWorkerFile", "manifestFile", "files"];
+const FILE_FIELDS = ["path", "fingerprinted", "contentHash"];
+const CONTENT_HASH = /^[A-Za-z0-9_-]{8,128}$/;
+const ACCESSOR = Symbol("accessor");
+/**
+ * Validates the host build output manifest against the identity (when it is valid) and returns a
+ * snapshot, so later compilation steps never read the caller's objects again.
+ */
+export function checkHostOutput(value, identity) {
+    const invalid = (...segments) => diagnostic("compile.invalid-host-output", ["hostBuildOutput", ...segments]);
+    if (!hasExactKeys(value, HOST_FIELDS))
+        return { findings: [invalid()], output: undefined };
+    const findings = [];
+    const { publicPath, serviceWorkerFile, manifestFile, files } = value;
+    const publicPathValid = typeof publicPath === "string" && isCanonicalPath(publicPath) && publicPath.endsWith("/");
+    const publicPathInScope = publicPathValid && (identity === undefined || publicPath.startsWith(identity.scope));
+    if (!publicPathValid) {
+        findings.push(invalid("publicPath"));
+    }
+    else if (!publicPathInScope) {
+        findings.push(diagnostic("compile.public-path-outside-scope", ["hostBuildOutput", "publicPath"]));
+    }
+    // The worker and the manifest must be the very files the identity registers and links. A public
+    // path outside the scope is already reported, so their URLs are only compared when it is in scope.
+    const artifacts = [
+        ["serviceWorkerFile", serviceWorkerFile, identity?.serviceWorkerUrl],
+        ["manifestFile", manifestFile, identity?.manifestUrl],
+    ];
+    for (const [field, fileName, identityUrl] of artifacts) {
+        if (typeof fileName !== "string" || !isRelativeFilePath(fileName) || !isCanonicalPath(`/${fileName}`)) {
+            findings.push(invalid(field));
+        }
+        else if (publicPathInScope &&
+            identityUrl !== undefined &&
+            decodedPathKey(`${publicPath}${fileName}`) !== decodedPathKey(identityUrl)) {
+            findings.push(invalid(field));
+        }
+    }
+    const elements = denseArrayElements(files);
+    if (elements === undefined) {
+        findings.push(invalid("files"));
+        return { findings, output: undefined };
+    }
+    const seenKeys = new Set();
+    const checkedFiles = [];
+    elements.forEach((element, index) => {
+        if (element === ACCESSOR || !hasExactKeys(element, FILE_FIELDS)) {
+            findings.push(invalid("files", index));
+            return;
+        }
+        const { path, fingerprinted, contentHash } = element;
+        // A file path must stay URL-canonical once served, and unique however it is spelled.
+        const key = typeof path === "string" ? decodedPathKey(`/${path}`) : undefined;
+        const pathValid = typeof path === "string" && isRelativeFilePath(path) && isCanonicalPath(`/${path}`) && !seenKeys.has(key ?? "");
+        if (key !== undefined)
+            seenKeys.add(key);
+        if (!pathValid)
+            findings.push(invalid("files", index, "path"));
+        if (typeof fingerprinted !== "boolean")
+            findings.push(invalid("files", index, "fingerprinted"));
+        const contentHashValid = typeof contentHash === "string" && CONTENT_HASH.test(contentHash);
+        if (!contentHashValid)
+            findings.push(invalid("files", index, "contentHash"));
+        if (pathValid && typeof fingerprinted === "boolean" && contentHashValid) {
+            checkedFiles.push({ path, fingerprinted, contentHash });
+        }
+    });
+    if (findings.length > 0)
+        return { findings, output: undefined };
+    return {
+        findings,
+        output: {
+            publicPath: publicPath,
+            serviceWorkerFile: serviceWorkerFile,
+            manifestFile: manifestFile,
+            files: checkedFiles,
+        },
+    };
+}
+/** Elements of a dense plain array read through property descriptors; `undefined` for anything else. */
+function denseArrayElements(value) {
+    if (!Array.isArray(value) || Object.getPrototypeOf(value) !== Array.prototype)
+        return undefined;
+    // Own keys are the indices plus `length`: holes or extra properties change the count.
+    if (Reflect.ownKeys(value).length !== value.length + 1)
+        return undefined;
+    return Array.from({ length: value.length }, (_, index) => {
+        const descriptor = Object.getOwnPropertyDescriptor(value, index);
+        return descriptor !== undefined && "value" in descriptor ? descriptor.value : ACCESSOR;
+    });
+}
+//# sourceMappingURL=host-output.js.map

package/dist/host-output.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host-output.js","sourceRoot":"","sources":["../src/host-output.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAEvD,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxD,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AAC1E,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEnD,MAAM,WAAW,GAAG,CAAC,YAAY,EAAE,mBAAmB,EAAE,cAAc,EAAE,OAAO,CAAU,CAAC;AAC1F,MAAM,WAAW,GAAG,CAAC,MAAM,EAAE,eAAe,EAAE,aAAa,CAAU,CAAC;AACtE,MAAM,YAAY,GAAG,wBAAwB,CAAC;AAC9C,MAAM,QAAQ,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;AAQpC;;;GAGG;AACH,MAAM,UAAU,eAAe,CAC7B,KAAc,EACd,QAAqF;IAErF,MAAM,OAAO,GAAG,CAAC,GAAG,QAAiC,EAAiB,EAAE,CACtE,UAAU,CAAC,6BAA6B,EAAE,CAAC,iBAAiB,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC;IAE9E,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,WAAW,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAE3F,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,MAAM,EAAE,UAAU,EAAE,iBAAiB,EAAE,YAAY,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAErE,MAAM,eAAe,GAAG,OAAO,UAAU,KAAK,QAAQ,IAAI,eAAe,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAClH,MAAM,iBAAiB,GAAG,eAAe,IAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,UAAU,CAAC,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/G,IAAI,CAAC,eAAe,EAAE,CAAC;QACrB,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;IACvC,CAAC;SAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC9B,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,mCAAmC,EAAE,CAAC,iBAAiB,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC;IACpG,CAAC;IAED,gGAAgG;IAChG,mGAAmG;IACnG,MAAM,SAAS,GAAG;QAChB,CAAC,mBAAmB,EAAE,iBAAiB,EAAE,QAAQ,EAAE,gBAAgB,CAAC;QACpE,CAAC,cAAc,EAAE,YAAY,EAAE,QAAQ,EAAE,WAAW,CAAC;KAC7C,CAAC;IACX,KAAK,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,WAAW,CAAC,IAAI,SAAS,EAAE,CAAC;QACvD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,QAAQ,EAAE,CAAC,EAAE,CAAC;YACtG,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QAChC,CAAC;aAAM,IACL,iBAAiB;YACjB,WAAW,KAAK,SAAS;YACzB,cAAc,CAAC,GAAG,UAAU,GAAG,QAAQ,EAAE,CAAC,KAAK,cAAc,CAAC,WAAW,CAAC,EAC1E,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC;QAChC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACzC,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,MAAM,YAAY,GAAuB,EAAE,CAAC;IAC5C,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE;QAClC,IAAI,OAAO,KAAK,QAAQ,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,WAAW,CAAC,EAAE,CAAC;YAChE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;YACvC,OAAO;QACT,CAAC;QACD,MAAM,EAAE,IAAI,EAAE,aAAa,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC;QACrD,qFAAqF;QACrF,MAAM,GAAG,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9E,MAAM,SAAS,GACb,OAAO,IAAI,KAAK,QAAQ,IAAI,kBAAkB,CAAC,IAAI,CAAC,IAAI,eAAe,CAAC,IAAI,IAAI,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;QAClH,IAAI,GAAG,KAAK,SAAS;YAAE,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACzC,IAAI,CAAC,SAAS;YAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;QAC/D,IAAI,OAAO,aAAa,KAAK,SAAS;YAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,eAAe,CAAC,CAAC,CAAC;QAChG,MAAM,gBAAgB,GAAG,OAAO,WAAW,KAAK,QAAQ,IAAI,YAAY,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC3F,IAAI,CAAC,gBAAgB;YAAE,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC;QAC7E,IAAI,SAAS,IAAI,OAAO,aAAa,KAAK,SAAS,IAAI,gBAAgB,EAAE,CAAC;YACxE,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,WAAW,EAAE,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAChE,OAAO;QACL,QAAQ;QACR,MAAM,EAAE;YACN,UAAU,EAAE,UAA0B;YACtC,iBAAiB,EAAE,iBAA2B;YAC9C,YAAY,EAAE,YAAsB;YACpC,KAAK,EAAE,YAAY;SACpB;KACF,CAAC;AACJ,CAAC;AAED,wGAAwG;AACxG,SAAS,kBAAkB,CAAC,KAAc;IACxC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,SAAS;QAAE,OAAO,SAAS,CAAC;IAChG,sFAAsF;IACtF,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IACzE,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE;QACvD,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QACjE,OAAO,UAAU,KAAK,SAAS,IAAI,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;IACzF,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,3 @@
+export { compilePlan } from "./compile.js";
+export type { PwaCompileHostOutput, PwaCompileInput, PwaHostBuildFile } from "./input.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC3C,YAAY,EAAE,oBAAoB,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC"}

package/dist/index.js

@@ -0,0 +1,2 @@
+export { compilePlan } from "./compile.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC"}

package/dist/input.d.ts

@@ -0,0 +1,25 @@
+import type { AbsolutePath, PwaIdentity, PwaInstallMetadata, PwaPolicy, PwaTopology } from "@pwa-platform/contracts";
+export type PwaHostBuildFile = {
+    /** POSIX path relative to the build output directory. */
+    readonly path: string;
+    /** Whether the file name already carries a content fingerprint. */
+    readonly fingerprinted: boolean;
+    /** Host-computed content hash: 8–128 URL-safe characters. */
+    readonly contentHash: string;
+};
+export type PwaCompileHostOutput = {
+    /** Absolute URL path ending with `/`, under which build files are served. */
+    readonly publicPath: AbsolutePath;
+    readonly serviceWorkerFile: string;
+    readonly manifestFile: string;
+    readonly files: readonly PwaHostBuildFile[];
+};
+/** Typed for callers; `compilePlan` still validates every field at runtime. */
+export type PwaCompileInput = {
+    readonly identity: PwaIdentity;
+    readonly install: PwaInstallMetadata | null;
+    readonly policy: PwaPolicy;
+    readonly topology: PwaTopology;
+    readonly hostBuildOutput: PwaCompileHostOutput;
+};
+//# sourceMappingURL=input.d.ts.map

package/dist/input.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"input.d.ts","sourceRoot":"","sources":["../src/input.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,YAAY,EACZ,WAAW,EACX,kBAAkB,EAClB,SAAS,EACT,WAAW,EACZ,MAAM,yBAAyB,CAAC;AAEjC,MAAM,MAAM,gBAAgB,GAAG;IAC7B,yDAAyD;IACzD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,mEAAmE;IACnE,QAAQ,CAAC,aAAa,EAAE,OAAO,CAAC;IAChC,6DAA6D;IAC7D,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B,CAAC;AAEF,MAAM,MAAM,oBAAoB,GAAG;IACjC,6EAA6E;IAC7E,QAAQ,CAAC,UAAU,EAAE,YAAY,CAAC;IAClC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,SAAS,gBAAgB,EAAE,CAAC;CAC7C,CAAC;AAEF,+EAA+E;AAC/E,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE,kBAAkB,GAAG,IAAI,CAAC;IAC5C,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAC/B,QAAQ,CAAC,eAAe,EAAE,oBAAoB,CAAC;CAChD,CAAC"}

package/dist/input.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=input.js.map

package/dist/input.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"input.js","sourceRoot":"","sources":["../src/input.ts"],"names":[],"mappings":""}

package/dist/internal/diagnostics.d.ts

@@ -0,0 +1,10 @@
+import type { PwaDiagnostic, PwaDiagnosticCode, PwaDiagnosticSeverity, PwaWarningDiagnostic } from "@pwa-platform/contracts";
+/** Field names of `PwaCompileInput`; diagnostic paths are built only from these and array indices. */
+export type InputField = "identity" | "install" | "policy" | "topology" | "hostBuildOutput" | "publicPath" | "serviceWorkerFile" | "manifestFile" | "files" | "path" | "fingerprinted" | "contentHash" | "resources" | "pathPrefix" | "offlineFallback" | "offlineWrites" | "targets" | "schemaVersion" | "registry" | "startUrl";
+export declare function diagnostic(code: PwaDiagnosticCode, segments: readonly (InputField | number)[], severity?: PwaDiagnosticSeverity): PwaDiagnostic;
+export declare function warningDiagnostic(code: PwaDiagnosticCode, segments: readonly (InputField | number)[]): PwaWarningDiagnostic;
+/** Re-roots a contracts diagnostic, whose path is already sanitized, under an input field. */
+export declare function withinField<T extends PwaDiagnostic>(field: "identity" | "install" | "policy", finding: T): T;
+/** Re-roots a contracts diagnostic, whose path is already sanitized, under a sequence of fields. */
+export declare function withinPath<T extends PwaDiagnostic>(prefix: readonly InputField[], finding: T): T;
+//# sourceMappingURL=diagnostics.d.ts.map

package/dist/internal/diagnostics.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagnostics.d.ts","sourceRoot":"","sources":["../../src/internal/diagnostics.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAEV,aAAa,EACb,iBAAiB,EACjB,qBAAqB,EACrB,oBAAoB,EACrB,MAAM,yBAAyB,CAAC;AAEjC,sGAAsG;AACtG,MAAM,MAAM,UAAU,GAClB,UAAU,GACV,SAAS,GACT,QAAQ,GACR,UAAU,GACV,iBAAiB,GACjB,YAAY,GACZ,mBAAmB,GACnB,cAAc,GACd,OAAO,GACP,MAAM,GACN,eAAe,GACf,aAAa,GACb,WAAW,GACX,YAAY,GACZ,iBAAiB,GACjB,eAAe,GACf,SAAS,GACT,eAAe,GACf,UAAU,GACV,UAAU,CAAC;AAEf,wBAAgB,UAAU,CACxB,IAAI,EAAE,iBAAiB,EACvB,QAAQ,EAAE,SAAS,CAAC,UAAU,GAAG,MAAM,CAAC,EAAE,EAC1C,QAAQ,GAAE,qBAA+B,GACxC,aAAa,CAGf;AAED,wBAAgB,iBAAiB,CAC/B,IAAI,EAAE,iBAAiB,EACvB,QAAQ,EAAE,SAAS,CAAC,UAAU,GAAG,MAAM,CAAC,EAAE,GACzC,oBAAoB,CAEtB;AAED,8FAA8F;AAC9F,wBAAgB,WAAW,CAAC,CAAC,SAAS,aAAa,EAAE,KAAK,EAAE,UAAU,GAAG,SAAS,GAAG,QAAQ,EAAE,OAAO,EAAE,CAAC,GAAG,CAAC,CAE5G;AAED,oGAAoG;AACpG,wBAAgB,UAAU,CAAC,CAAC,SAAS,aAAa,EAAE,MAAM,EAAE,SAAS,UAAU,EAAE,EAAE,OAAO,EAAE,CAAC,GAAG,CAAC,CAGhG"}

package/dist/internal/diagnostics.js

@@ -0,0 +1,18 @@
+import { DIAGNOSTIC_MESSAGES } from "@pwa-platform/contracts";
+export function diagnostic(code, segments, severity = "error") {
+    const path = segments.length === 0 ? "" : `/${segments.join("/")}`;
+    return { code, severity, path, message: DIAGNOSTIC_MESSAGES[code] };
+}
+export function warningDiagnostic(code, segments) {
+    return { ...diagnostic(code, segments), severity: "warning" };
+}
+/** Re-roots a contracts diagnostic, whose path is already sanitized, under an input field. */
+export function withinField(field, finding) {
+    return { ...finding, path: `/${field}${finding.path}` };
+}
+/** Re-roots a contracts diagnostic, whose path is already sanitized, under a sequence of fields. */
+export function withinPath(prefix, finding) {
+    const prefixPath = prefix.length === 0 ? "" : `/${prefix.join("/")}`;
+    return { ...finding, path: `${prefixPath}${finding.path}` };
+}
+//# sourceMappingURL=diagnostics.js.map

package/dist/internal/diagnostics.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"diagnostics.js","sourceRoot":"","sources":["../../src/internal/diagnostics.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAgC9D,MAAM,UAAU,UAAU,CACxB,IAAuB,EACvB,QAA0C,EAC1C,WAAkC,OAAO;IAEzC,MAAM,IAAI,GAAoB,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACpF,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC;AACtE,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,IAAuB,EACvB,QAA0C;IAE1C,OAAO,EAAE,GAAG,UAAU,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;AAChE,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,WAAW,CAA0B,KAAwC,EAAE,OAAU;IACvG,OAAO,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,IAAI,KAAK,GAAG,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;AAC1D,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,UAAU,CAA0B,MAA6B,EAAE,OAAU;IAC3F,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACrE,OAAO,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,GAAG,UAAU,GAAG,OAAO,CAAC,IAAI,EAAqB,EAAE,CAAC;AACjF,CAAC"}

package/dist/internal/order.d.ts

@@ -0,0 +1,3 @@
+/** Compares strings by Unicode code point, not UTF-16 code unit, so ordering is stable for any text. */
+export declare function compareCodePoints(left: string, right: string): number;
+//# sourceMappingURL=order.d.ts.map

package/dist/internal/order.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"order.d.ts","sourceRoot":"","sources":["../../src/internal/order.ts"],"names":[],"mappings":"AAAA,wGAAwG;AACxG,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CASrE"}

package/dist/internal/order.js

@@ -0,0 +1,13 @@
+/** Compares strings by Unicode code point, not UTF-16 code unit, so ordering is stable for any text. */
+export function compareCodePoints(left, right) {
+    const leftPoints = [...left];
+    const rightPoints = [...right];
+    const length = Math.min(leftPoints.length, rightPoints.length);
+    for (let index = 0; index < length; index += 1) {
+        const difference = (leftPoints[index]?.codePointAt(0) ?? 0) - (rightPoints[index]?.codePointAt(0) ?? 0);
+        if (difference !== 0)
+            return difference;
+    }
+    return leftPoints.length - rightPoints.length;
+}
+//# sourceMappingURL=order.js.map

package/dist/internal/order.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"order.js","sourceRoot":"","sources":["../../src/internal/order.ts"],"names":[],"mappings":"AAAA,wGAAwG;AACxG,MAAM,UAAU,iBAAiB,CAAC,IAAY,EAAE,KAAa;IAC3D,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IAC7B,MAAM,WAAW,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC;IAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC/D,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QAC/C,MAAM,UAAU,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACxG,IAAI,UAAU,KAAK,CAAC;YAAE,OAAO,UAAU,CAAC;IAC1C,CAAC;IACD,OAAO,UAAU,CAAC,MAAM,GAAG,WAAW,CAAC,MAAM,CAAC;AAChD,CAAC"}

package/dist/internal/path-key.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Comparison key for a canonical path, decoded per segment like the URL standard: valid `%XX` escapes
+ * become bytes, invalid escapes stay literal, and bytes that are not UTF-8 become U+FFFD. Distinct
+ * spellings can therefore only collapse into one key, never split, so conflicts fail closed.
+ * Never emitted in plans.
+ */
+export declare function decodedPathKey(path: string): string;
+/** Whole-segment containment of decoded keys: `/app/api/x` is within `/app/api`, `/app/apis` is not. */
+export declare function isWithinKey(key: string, prefixKey: string): boolean;
+//# sourceMappingURL=path-key.d.ts.map

package/dist/internal/path-key.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-key.d.ts","sourceRoot":"","sources":["../../src/internal/path-key.ts"],"names":[],"mappings":"AAMA;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAKnD;AAED,wGAAwG;AACxG,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAEnE"}

package/dist/internal/path-key.js

@@ -0,0 +1,37 @@
+// `%2F` must not become a segment boundary the URL does not have, so it is replaced by a lone
+// surrogate: UTF-8 decoding never produces one, so it cannot collide with decoded text.
+const ENCODED_SLASH = "\uD800";
+const UTF8_DECODER = new TextDecoder("utf-8", { ignoreBOM: true });
+const UTF8_ENCODER = new TextEncoder();
+/**
+ * Comparison key for a canonical path, decoded per segment like the URL standard: valid `%XX` escapes
+ * become bytes, invalid escapes stay literal, and bytes that are not UTF-8 become U+FFFD. Distinct
+ * spellings can therefore only collapse into one key, never split, so conflicts fail closed.
+ * Never emitted in plans.
+ */
+export function decodedPathKey(path) {
+    return path
+        .split("/")
+        .map((segment) => segment.split(/%2f/i).map(percentDecode).join(ENCODED_SLASH))
+        .join("/");
+}
+/** Whole-segment containment of decoded keys: `/app/api/x` is within `/app/api`, `/app/apis` is not. */
+export function isWithinKey(key, prefixKey) {
+    return prefixKey === "/" || key === prefixKey || key.startsWith(`${prefixKey}/`);
+}
+function percentDecode(text) {
+    const bytes = [];
+    for (let index = 0; index < text.length; index += 1) {
+        const escape = text.slice(index + 1, index + 3);
+        if (text[index] === "%" && /^[0-9A-Fa-f]{2}$/.test(escape)) {
+            bytes.push(Number.parseInt(escape, 16));
+            index += 2;
+            continue;
+        }
+        const character = String.fromCodePoint(text.codePointAt(index) ?? 0);
+        bytes.push(...UTF8_ENCODER.encode(character));
+        index += character.length - 1;
+    }
+    return UTF8_DECODER.decode(Uint8Array.from(bytes));
+}
+//# sourceMappingURL=path-key.js.map

package/dist/internal/path-key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-key.js","sourceRoot":"","sources":["../../src/internal/path-key.ts"],"names":[],"mappings":"AAAA,8FAA8F;AAC9F,wFAAwF;AACxF,MAAM,aAAa,GAAG,QAAQ,CAAC;AAC/B,MAAM,YAAY,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AACnE,MAAM,YAAY,GAAG,IAAI,WAAW,EAAE,CAAC;AAEvC;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,IAAI;SACR,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;SAC9E,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED,wGAAwG;AACxG,MAAM,UAAU,WAAW,CAAC,GAAW,EAAE,SAAiB;IACxD,OAAO,SAAS,KAAK,GAAG,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,SAAS,GAAG,CAAC,CAAC;AACnF,CAAC;AAED,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;QAChD,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YAC3D,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC;YACxC,KAAK,IAAI,CAAC,CAAC;YACX,SAAS;QACX,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;QACrE,KAAK,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC;QAC9C,KAAK,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC;IAChC,CAAC;IACD,OAAO,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;AACrD,CAAC"}

package/dist/internal/paths.d.ts

@@ -0,0 +1,5 @@
+/** Same-origin absolute path already in WHATWG URL serialized form (mirrors contracts). */
+export declare function isCanonicalPath(value: string): boolean;
+/** POSIX path relative to a build output directory, without dot or empty segments (mirrors contracts). */
+export declare function isRelativeFilePath(value: string): boolean;
+//# sourceMappingURL=paths.d.ts.map

package/dist/internal/paths.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.d.ts","sourceRoot":"","sources":["../../src/internal/paths.ts"],"names":[],"mappings":"AAEA,2FAA2F;AAC3F,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAQtD;AAED,0GAA0G;AAC1G,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAOzD"}

package/dist/internal/paths.js

@@ -0,0 +1,17 @@
+const URL_BASE = "https://core.invalid";
+/** Same-origin absolute path already in WHATWG URL serialized form (mirrors contracts). */
+export function isCanonicalPath(value) {
+    return (value.startsWith("/") &&
+        !value.includes("//") &&
+        !value.includes("\\") &&
+        URL.canParse(value, URL_BASE) &&
+        new URL(value, URL_BASE).pathname === value);
+}
+/** POSIX path relative to a build output directory, without dot or empty segments (mirrors contracts). */
+export function isRelativeFilePath(value) {
+    return (value !== "" &&
+        !value.startsWith("/") &&
+        !value.includes("\\") &&
+        value.split("/").every((segment) => segment !== "" && segment !== "." && segment !== ".."));
+}
+//# sourceMappingURL=paths.js.map

package/dist/internal/paths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"paths.js","sourceRoot":"","sources":["../../src/internal/paths.ts"],"names":[],"mappings":"AAAA,MAAM,QAAQ,GAAG,sBAAsB,CAAC;AAExC,2FAA2F;AAC3F,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,OAAO,CACL,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QACrB,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QACrB,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QACrB,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC;QAC7B,IAAI,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,QAAQ,KAAK,KAAK,CAC5C,CAAC;AACJ,CAAC;AAED,0GAA0G;AAC1G,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC9C,OAAO,CACL,KAAK,KAAK,EAAE;QACZ,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QACtB,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;QACrB,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,KAAK,EAAE,IAAI,OAAO,KAAK,GAAG,IAAI,OAAO,KAAK,IAAI,CAAC,CAC3F,CAAC;AACJ,CAAC"}

package/dist/internal/shape.d.ts

@@ -0,0 +1,5 @@
+/** Plain (or null-prototype) object; arrays and class instances are excluded. */
+export declare function isPlainRecord(value: unknown): value is Record<string, unknown>;
+/** Plain object whose own keys are exactly `keys`, all enumerable data properties (getters are never invoked). */
+export declare function hasExactKeys<K extends string>(value: unknown, keys: readonly K[]): value is Record<K, unknown>;
+//# sourceMappingURL=shape.d.ts.map

package/dist/internal/shape.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shape.d.ts","sourceRoot":"","sources":["../../src/internal/shape.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAI9E;AAED,kHAAkH;AAClH,wBAAgB,YAAY,CAAC,CAAC,SAAS,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,EAAE,GAAG,KAAK,IAAI,MAAM,CAAC,CAAC,EAAE,OAAO,CAAC,CAM9G"}

package/dist/internal/shape.js

@@ -0,0 +1,17 @@
+/** Plain (or null-prototype) object; arrays and class instances are excluded. */
+export function isPlainRecord(value) {
+    if (typeof value !== "object" || value === null || Array.isArray(value))
+        return false;
+    const prototype = Object.getPrototypeOf(value);
+    return prototype === Object.prototype || prototype === null;
+}
+/** Plain object whose own keys are exactly `keys`, all enumerable data properties (getters are never invoked). */
+export function hasExactKeys(value, keys) {
+    if (!isPlainRecord(value) || Reflect.ownKeys(value).length !== keys.length)
+        return false;
+    return keys.every((key) => {
+        const descriptor = Object.getOwnPropertyDescriptor(value, key);
+        return descriptor !== undefined && descriptor.enumerable === true && "value" in descriptor;
+    });
+}
+//# sourceMappingURL=shape.js.map

package/dist/internal/shape.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shape.js","sourceRoot":"","sources":["../../src/internal/shape.ts"],"names":[],"mappings":"AAAA,iFAAiF;AACjF,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtF,MAAM,SAAS,GAAY,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC;IACxD,OAAO,SAAS,KAAK,MAAM,CAAC,SAAS,IAAI,SAAS,KAAK,IAAI,CAAC;AAC9D,CAAC;AAED,kHAAkH;AAClH,MAAM,UAAU,YAAY,CAAmB,KAAc,EAAE,IAAkB;IAC/E,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACzF,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;QACxB,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;QAC/D,OAAO,UAAU,KAAK,SAAS,IAAI,UAAU,CAAC,UAAU,KAAK,IAAI,IAAI,OAAO,IAAI,UAAU,CAAC;IAC7F,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/precache.d.ts

@@ -0,0 +1,20 @@
+import type { AbsolutePath, PwaDiagnostic, PwaPathRule, PwaPlanOfflineFallback, PwaPolicy, PwaPrecacheEntry, PwaWarningDiagnostic } from "@pwa-platform/contracts";
+import type { PwaCompileHostOutput } from "./input.js";
+import type { CompiledPathRules } from "./rules.js";
+export type CompiledPrecache = {
+    /** Sorted by URL code point, one entry per URL. */
+    readonly precache: PwaPrecacheEntry[];
+    readonly offlineFallback: PwaPlanOfflineFallback;
+    readonly errors: PwaDiagnostic[];
+    readonly warnings: PwaWarningDiagnostic[];
+};
+/** Selects precache entries from the host build output and validates the offline fallback. */
+export declare function compilePrecache(policy: PwaPolicy, mountPath: AbsolutePath, host: PwaCompileHostOutput, rules: CompiledPathRules, 
+/** Decoded path keys of child scopes owned by other applications (root app of a `shared-origin` registry only). */
+childPrefixKeys?: readonly string[]): CompiledPrecache;
+/**
+ * Only asset rules whose action is an actual caching strategy contribute build files. Exported only for a
+ * white-box unit test (not part of the public API — `index.ts` never re-exports this module).
+ */
+export declare function isPrecacheSource(rule: PwaPathRule): boolean;
+//# sourceMappingURL=precache.d.ts.map

package/dist/precache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"precache.d.ts","sourceRoot":"","sources":["../src/precache.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,YAAY,EACZ,aAAa,EACb,WAAW,EACX,sBAAsB,EACtB,SAAS,EACT,gBAAgB,EAChB,oBAAoB,EACrB,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,oBAAoB,EAAoB,MAAM,YAAY,CAAC;AAKzE,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAEpD,MAAM,MAAM,gBAAgB,GAAG;IAC7B,mDAAmD;IACnD,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,EAAE,CAAC;IACtC,QAAQ,CAAC,eAAe,EAAE,sBAAsB,CAAC;IACjD,QAAQ,CAAC,MAAM,EAAE,aAAa,EAAE,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,oBAAoB,EAAE,CAAC;CAC3C,CAAC;AAEF,8FAA8F;AAC9F,wBAAgB,eAAe,CAC7B,MAAM,EAAE,SAAS,EACjB,SAAS,EAAE,YAAY,EACvB,IAAI,EAAE,oBAAoB,EAC1B,KAAK,EAAE,iBAAiB;AACxB,mHAAmH;AACnH,eAAe,GAAE,SAAS,MAAM,EAAO,GACtC,gBAAgB,CAuFlB;AAQD;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAE3D"}

package/dist/precache.js

@@ -0,0 +1,96 @@
+import { CACHE_STRATEGIES } from "@pwa-platform/contracts";
+import { diagnostic, warningDiagnostic } from "./internal/diagnostics.js";
+import { compareCodePoints } from "./internal/order.js";
+import { decodedPathKey, isWithinKey } from "./internal/path-key.js";
+import { resolvePrefix } from "./rules.js";
+/** Selects precache entries from the host build output and validates the offline fallback. */
+export function compilePrecache(policy, mountPath, host, rules, 
+/** Decoded path keys of child scopes owned by other applications (root app of a `shared-origin` registry only). */
+childPrefixKeys = []) {
+    const ruleKeys = rules.pathRules.map((rule) => decodedPathKey(rule.pathPrefix));
+    const firstMatch = (url) => {
+        const key = decodedPathKey(url);
+        const index = ruleKeys.findIndex((ruleKey) => isWithinKey(key, ruleKey));
+        return rules.pathRules[index];
+    };
+    // The worker, the manifest (however they are spelled) and source maps are never precached.
+    const excludedKeys = new Set([`${host.publicPath}${host.serviceWorkerFile}`, `${host.publicPath}${host.manifestFile}`].map(decodedPathKey));
+    const isSpecialFile = (file, url) => excludedKeys.has(decodedPathKey(url)) || /\.map$/i.test(file.path);
+    const isInChildScope = (url) => {
+        const key = decodedPathKey(url);
+        return childPrefixKeys.some((childKey) => isWithinKey(key, childKey));
+    };
+    // Files inside a child scope are still "built" for the offline fallback's own existence check;
+    // they are only ever excluded from precache selection, below, with a warning.
+    const nonSpecialFiles = host.files
+        .map((file) => ({ file, url: `${host.publicPath}${file.path}` }))
+        .filter(({ file, url }) => !isSpecialFile(file, url));
+    const hostFileWarnings = [];
+    host.files.forEach((file, index) => {
+        const url = `${host.publicPath}${file.path}`;
+        if (!isSpecialFile(file, url) && isInChildScope(url)) {
+            hostFileWarnings.push(warningDiagnostic("compile.host-file-in-child-scope", ["hostBuildOutput", "files", index, "path"]));
+        }
+    });
+    const buildFiles = nonSpecialFiles.filter(({ url }) => !isInChildScope(url));
+    const entries = new Map();
+    const add = (file, url) => {
+        entries.set(url, { url, revision: file.fingerprinted ? null : file.contentHash });
+    };
+    const coveringRules = new Set();
+    for (const { file, url } of buildFiles) {
+        const rule = firstMatch(url);
+        if (rule !== undefined && isPrecacheSource(rule)) {
+            coveringRules.add(rule);
+            add(file, url);
+        }
+    }
+    const warnings = [
+        ...hostFileWarnings,
+        ...rules.pathRules
+            .map((rule, position) => ({ rule, resourceIndex: rules.resourceIndexes[position] ?? position }))
+            .filter(({ rule }) => isPrecacheSource(rule) && !coveringRules.has(rule))
+            .sort((left, right) => left.resourceIndex - right.resourceIndex)
+            .map(({ resourceIndex }) => warningDiagnostic("compile.asset-rule-unmatched", ["policy", "resources", resourceIndex, "pathPrefix"])),
+    ];
+    const errors = [];
+    let offlineFallback = { enabled: false };
+    if (policy.offlineFallback.enabled) {
+        const path = resolvePrefix(mountPath, policy.offlineFallback.path);
+        const pathKey = decodedPathKey(path);
+        const built = nonSpecialFiles.find((candidate) => decodedPathKey(candidate.url) === pathKey);
+        if (built === undefined) {
+            errors.push(diagnostic("compile.offline-fallback-not-built", ["policy", "offlineFallback", "path"]));
+        }
+        if (isInChildScope(path)) {
+            errors.push(diagnostic("compile.offline-fallback-in-child-scope", ["policy", "offlineFallback", "path"]));
+        }
+        if (firstMatch(path)?.action === "deny") {
+            errors.push(diagnostic("compile.offline-fallback-denied", ["policy", "offlineFallback", "path"]));
+        }
+        if (built !== undefined && errors.length === 0) {
+            add(built.file, built.url);
+            // Record the build file's own spelling so a literal cache lookup at runtime finds the entry.
+            offlineFallback = { enabled: true, path: built.url };
+        }
+    }
+    return {
+        precache: [...entries.values()].sort((left, right) => compareCodePoints(left.url, right.url)),
+        offlineFallback,
+        errors,
+        warnings,
+    };
+}
+// An explicit allow-list, not "not deny and not none": `PwaPathRuleAction` also has `exclude`, and a rule whose
+// action is ever anything other than one of these three strategies must never be mistaken for a caching rule here,
+// independent of what `resourceClass` happens to be (review #5 — `resourceClass` is a second, redundant guard, not
+// the only one).
+const CACHING_STRATEGIES = new Set(CACHE_STRATEGIES.filter((strategy) => strategy !== "none"));
+/**
+ * Only asset rules whose action is an actual caching strategy contribute build files. Exported only for a
+ * white-box unit test (not part of the public API — `index.ts` never re-exports this module).
+ */
+export function isPrecacheSource(rule) {
+    return rule.resourceClass === "asset" && CACHING_STRATEGIES.has(rule.action);
+}
+//# sourceMappingURL=precache.js.map

package/dist/precache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"precache.js","sourceRoot":"","sources":["../src/precache.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAW3D,OAAO,EAAE,UAAU,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAC1E,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAW3C,8FAA8F;AAC9F,MAAM,UAAU,eAAe,CAC7B,MAAiB,EACjB,SAAuB,EACvB,IAA0B,EAC1B,KAAwB;AACxB,mHAAmH;AACnH,kBAAqC,EAAE;IAEvC,MAAM,QAAQ,GAAG,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC;IAChF,MAAM,UAAU,GAAG,CAAC,GAAiB,EAA2B,EAAE;QAChE,MAAM,GAAG,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,CAAC;QACzE,OAAO,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC,CAAC;IAEF,2FAA2F;IAC3F,MAAM,YAAY,GAAG,IAAI,GAAG,CAC1B,CAAC,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,iBAAiB,EAAE,EAAE,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAC9G,CAAC;IACF,MAAM,aAAa,GAAG,CAAC,IAAsB,EAAE,GAAW,EAAW,EAAE,CACrE,YAAY,CAAC,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrE,MAAM,cAAc,GAAG,CAAC,GAAW,EAAW,EAAE;QAC9C,MAAM,GAAG,GAAG,cAAc,CAAC,GAAG,CAAC,CAAC;QAChC,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC;IACxE,CAAC,CAAC;IAEF,+FAA+F;IAC/F,8EAA8E;IAC9E,MAAM,eAAe,GAAG,IAAI,CAAC,KAAK;SAC/B,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,IAAI,EAAW,EAAE,CAAC,CAAC;SACzE,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC;IAExD,MAAM,gBAAgB,GAA2B,EAAE,CAAC;IACpD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;QACjC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC7C,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;YACrD,gBAAgB,CAAC,IAAI,CAAC,iBAAiB,CAAC,kCAAkC,EAAE,CAAC,iBAAiB,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QAC5H,CAAC;IACH,CAAC,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC;IAE7E,MAAM,OAAO,GAAG,IAAI,GAAG,EAA4B,CAAC;IACpD,MAAM,GAAG,GAAG,CAAC,IAAsB,EAAE,GAAiB,EAAQ,EAAE;QAC9D,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IACpF,CAAC,CAAC;IAEF,MAAM,aAAa,GAAG,IAAI,GAAG,EAAe,CAAC;IAC7C,KAAK,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,UAAU,EAAE,CAAC;QACvC,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,IAAI,KAAK,SAAS,IAAI,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;YACjD,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACxB,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACjB,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG;QACf,GAAG,gBAAgB;QACnB,GAAG,KAAK,CAAC,SAAS;aACf,GAAG,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,KAAK,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAI,QAAQ,EAAE,CAAC,CAAC;aAC/F,MAAM,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;aACxE,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,GAAG,KAAK,CAAC,aAAa,CAAC;aAC/D,GAAG,CAAC,CAAC,EAAE,aAAa,EAAE,EAAE,EAAE,CACzB,iBAAiB,CAAC,8BAA8B,EAAE,CAAC,QAAQ,EAAE,WAAW,EAAE,aAAa,EAAE,YAAY,CAAC,CAAC,CACxG;KACJ,CAAC;IAEF,MAAM,MAAM,GAAoB,EAAE,CAAC;IACnC,IAAI,eAAe,GAA2B,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACjE,IAAI,MAAM,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC;QACnC,MAAM,IAAI,GAAG,aAAa,CAAC,SAAS,EAAE,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;QACnE,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,cAAc,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,OAAO,CAAC,CAAC;QAC7F,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,oCAAoC,EAAE,CAAC,QAAQ,EAAE,iBAAiB,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QACvG,CAAC;QACD,IAAI,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,yCAAyC,EAAE,CAAC,QAAQ,EAAE,iBAAiB,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QAC5G,CAAC;QACD,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,KAAK,MAAM,EAAE,CAAC;YACxC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,iCAAiC,EAAE,CAAC,QAAQ,EAAE,iBAAiB,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QACpG,CAAC;QACD,IAAI,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC/C,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;YAC3B,6FAA6F;YAC7F,eAAe,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC;QACvD,CAAC;IACH,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7F,eAAe;QACf,MAAM;QACN,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,gHAAgH;AAChH,mHAAmH;AACnH,mHAAmH;AACnH,iBAAiB;AACjB,MAAM,kBAAkB,GAAwB,IAAI,GAAG,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC;AAEpH;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAiB;IAChD,OAAO,IAAI,CAAC,aAAa,KAAK,OAAO,IAAI,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC/E,CAAC"}

package/dist/rules.d.ts

@@ -0,0 +1,13 @@
+import type { AbsolutePath, MountRelativePath, PwaDiagnostic, PwaPathRule, PwaPolicy } from "@pwa-platform/contracts";
+export type CompiledPathRules = {
+    /** First-match evaluation order: deny rules first, then longer prefixes, then code point order. */
+    readonly pathRules: PwaPathRule[];
+    /** Index of the policy resource each entry of `pathRules` was compiled from. */
+    readonly resourceIndexes: number[];
+    readonly findings: PwaDiagnostic[];
+};
+/** Resolves policy rules against the mount path, rejects conflicts and orders the rules for evaluation. */
+export declare function compilePathRules(policy: PwaPolicy, mountPath: AbsolutePath): CompiledPathRules;
+/** `/api` under mount `/app` resolves to `/app/api`; the root prefix resolves to the mount path itself. */
+export declare function resolvePrefix(mountPath: AbsolutePath, prefix: MountRelativePath): AbsolutePath;
+//# sourceMappingURL=rules.d.ts.map

package/dist/rules.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules.d.ts","sourceRoot":"","sources":["../src/rules.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,YAAY,EACZ,iBAAiB,EACjB,aAAa,EAEb,WAAW,EACX,SAAS,EAEV,MAAM,yBAAyB,CAAC;AAcjC,MAAM,MAAM,iBAAiB,GAAG;IAC9B,mGAAmG;IACnG,QAAQ,CAAC,SAAS,EAAE,WAAW,EAAE,CAAC;IAClC,gFAAgF;IAChF,QAAQ,CAAC,eAAe,EAAE,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,QAAQ,EAAE,aAAa,EAAE,CAAC;CACpC,CAAC;AAEF,2GAA2G;AAC3G,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,GAAG,iBAAiB,CA6B9F;AAED,2GAA2G;AAC3G,wBAAgB,aAAa,CAAC,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,iBAAiB,GAAG,YAAY,CAI9F"}

package/dist/rules.js

@@ -0,0 +1,51 @@
+import { diagnostic } from "./internal/diagnostics.js";
+import { compareCodePoints } from "./internal/order.js";
+import { decodedPathKey, isWithinKey } from "./internal/path-key.js";
+const DENY_CLASSES = new Set(["session-data", "mutation", "stream", "unclassified"]);
+/** Resolves policy rules against the mount path, rejects conflicts and orders the rules for evaluation. */
+export function compilePathRules(policy, mountPath) {
+    const duplicates = [];
+    const seenKeys = new Set();
+    const candidates = [];
+    policy.resources.forEach((resource, index) => {
+        const pathPrefix = resolvePrefix(mountPath, resource.pathPrefix);
+        const key = decodedPathKey(pathPrefix);
+        if (seenKeys.has(key)) {
+            duplicates.push(conflict("compile.duplicate-path-prefix", index));
+            return;
+        }
+        seenKeys.add(key);
+        const action = DENY_CLASSES.has(resource.resourceClass) ? "deny" : resource.cache;
+        candidates.push({ index, key, rule: { pathPrefix, resourceClass: resource.resourceClass, action, source: "policy" } });
+    });
+    // Business allow rules can never override a deny rule, so an allow rule inside a deny prefix is an error.
+    const denyKeys = candidates.filter((candidate) => candidate.rule.action === "deny").map((candidate) => candidate.key);
+    const allowsUnderDeny = candidates
+        .filter((candidate) => candidate.rule.action !== "deny" && denyKeys.some((key) => isWithinKey(candidate.key, key)))
+        .map((candidate) => conflict("compile.allow-under-deny", candidate.index));
+    const ordered = [...candidates].sort(byEvaluationOrder);
+    return {
+        pathRules: ordered.map((candidate) => candidate.rule),
+        resourceIndexes: ordered.map((candidate) => candidate.index),
+        findings: [...duplicates, ...allowsUnderDeny],
+    };
+}
+/** `/api` under mount `/app` resolves to `/app/api`; the root prefix resolves to the mount path itself. */
+export function resolvePrefix(mountPath, prefix) {
+    if (mountPath === "/")
+        return prefix;
+    const mount = mountPath.endsWith("/") ? mountPath.slice(1, -1) : mountPath.slice(1);
+    return prefix === "/" ? `/${mount}` : `/${mount}${prefix}`;
+}
+function conflict(code, index) {
+    return diagnostic(code, ["policy", "resources", index, "pathPrefix"]);
+}
+function byEvaluationOrder(left, right) {
+    const leftDeny = left.rule.action === "deny";
+    const rightDeny = right.rule.action === "deny";
+    if (leftDeny !== rightDeny)
+        return leftDeny ? -1 : 1;
+    const lengthDifference = [...right.key].length - [...left.key].length;
+    return lengthDifference !== 0 ? lengthDifference : compareCodePoints(left.key, right.key);
+}
+//# sourceMappingURL=rules.js.map

package/dist/rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rules.js","sourceRoot":"","sources":["../src/rules.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AAErE,MAAM,YAAY,GAAkC,IAAI,GAAG,CAAC,CAAC,cAAc,EAAE,UAAU,EAAE,QAAQ,EAAE,cAAc,CAAC,CAAC,CAAC;AAiBpH,2GAA2G;AAC3G,MAAM,UAAU,gBAAgB,CAAC,MAAiB,EAAE,SAAuB;IACzE,MAAM,UAAU,GAAoB,EAAE,CAAC;IACvC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;IACnC,MAAM,UAAU,GAAgB,EAAE,CAAC;IAEnC,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE;QAC3C,MAAM,UAAU,GAAG,aAAa,CAAC,SAAS,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;QACjE,MAAM,GAAG,GAAG,cAAc,CAAC,UAAU,CAAC,CAAC;QACvC,IAAI,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,+BAA+B,EAAE,KAAK,CAAC,CAAC,CAAC;YAClE,OAAO;QACT,CAAC;QACD,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAClB,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC;QAClF,UAAU,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,aAAa,EAAE,QAAQ,CAAC,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;IACzH,CAAC,CAAC,CAAC;IAEH,0GAA0G;IAC1G,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACtH,MAAM,eAAe,GAAG,UAAU;SAC/B,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;SAClH,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,QAAQ,CAAC,0BAA0B,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IAE7E,MAAM,OAAO,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;IACxD,OAAO;QACL,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC;QACrD,eAAe,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC;QAC5D,QAAQ,EAAE,CAAC,GAAG,UAAU,EAAE,GAAG,eAAe,CAAC;KAC9C,CAAC;AACJ,CAAC;AAED,2GAA2G;AAC3G,MAAM,UAAU,aAAa,CAAC,SAAuB,EAAE,MAAyB;IAC9E,IAAI,SAAS,KAAK,GAAG;QAAE,OAAO,MAAM,CAAC;IACrC,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACpF,OAAO,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,MAAM,EAAE,CAAC;AAC7D,CAAC;AAED,SAAS,QAAQ,CAAC,IAAuB,EAAE,KAAa;IACtD,OAAO,UAAU,CAAC,IAAI,EAAE,CAAC,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAe,EAAE,KAAgB;IAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC;IAC7C,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC;IAC/C,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrD,MAAM,gBAAgB,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;IACtE,OAAO,gBAAgB,KAAK,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;AAC5F,CAAC"}

package/dist/topology.d.ts

@@ -0,0 +1,25 @@
+import type { AbsolutePath, PwaDiagnostic, PwaIdentity, PwaInstallMetadata, PwaPathRule, PwaPolicy, PwaTopology } from "@pwa-platform/contracts";
+export type ResolvedTopology = {
+    /** Recorded as-is in the plan's `topology` field. */
+    readonly value: PwaTopology;
+    /** Decoded path keys of every child scope; empty unless this app is the root of a `shared-origin` registry. */
+    readonly childPrefixKeys: readonly string[];
+    /** Exclude rules to place ahead of every other path rule; empty unless this app is the root. */
+    readonly excludeRules: readonly PwaPathRule[];
+};
+export type TopologyResolution = {
+    readonly findings: PwaDiagnostic[];
+    /** `undefined` when the topology could not be resolved (findings then explains why, or the identity was invalid). */
+    readonly resolved: ResolvedTopology | undefined;
+};
+/**
+ * Resolves the compiler's `topology` input: validates a `shared-origin` registry, matches the
+ * building app's identity to exactly one registry entry, and (for the root app) computes the
+ * exclude rules and child scope keys the rest of compilation needs.
+ */
+export declare function resolveTopology(topology: unknown, identity: PwaIdentity | undefined): TopologyResolution;
+/** Root-app check: a policy resource (any action, including deny) must not reach into a child scope. */
+export declare function policyRulesInChildScope(policy: PwaPolicy, mountPath: AbsolutePath, childPrefixKeys: readonly string[]): PwaDiagnostic[];
+/** Root-app check: the install start URL must not reach into a child scope (contracts' `plan.start-url-in-child-scope`). */
+export declare function installStartUrlInChildScope(install: PwaInstallMetadata, childPrefixKeys: readonly string[]): PwaDiagnostic[];
+//# sourceMappingURL=topology.d.ts.map

package/dist/topology.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"topology.d.ts","sourceRoot":"","sources":["../src/topology.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,YAAY,EACZ,aAAa,EACb,WAAW,EACX,kBAAkB,EAClB,WAAW,EACX,SAAS,EAET,WAAW,EACZ,MAAM,yBAAyB,CAAC;AAOjC,MAAM,MAAM,gBAAgB,GAAG;IAC7B,qDAAqD;IACrD,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC;IAC5B,+GAA+G;IAC/G,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,gGAAgG;IAChG,QAAQ,CAAC,YAAY,EAAE,SAAS,WAAW,EAAE,CAAC;CAC/C,CAAC;AAEF,MAAM,MAAM,kBAAkB,GAAG;IAC/B,QAAQ,CAAC,QAAQ,EAAE,aAAa,EAAE,CAAC;IACnC,qHAAqH;IACrH,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,GAAG,SAAS,CAAC;CACjD,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,GAAG,SAAS,GAAG,kBAAkB,CAsCxG;AAED,wGAAwG;AACxG,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,SAAS,EACjB,SAAS,EAAE,YAAY,EACvB,eAAe,EAAE,SAAS,MAAM,EAAE,GACjC,aAAa,EAAE,CAOjB;AAED,4HAA4H;AAC5H,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,kBAAkB,EAC3B,eAAe,EAAE,SAAS,MAAM,EAAE,GACjC,aAAa,EAAE,CAKjB"}

package/dist/topology.js

@@ -0,0 +1,74 @@
+import { validateOriginRegistry } from "@pwa-platform/contracts";
+import { diagnostic, withinPath } from "./internal/diagnostics.js";
+import { compareCodePoints } from "./internal/order.js";
+import { decodedPathKey, isWithinKey } from "./internal/path-key.js";
+import { hasExactKeys } from "./internal/shape.js";
+import { resolvePrefix } from "./rules.js";
+/**
+ * Resolves the compiler's `topology` input: validates a `shared-origin` registry, matches the
+ * building app's identity to exactly one registry entry, and (for the root app) computes the
+ * exclude rules and child scope keys the rest of compilation needs.
+ */
+export function resolveTopology(topology, identity) {
+    if (hasExactKeys(topology, ["kind"]) && topology.kind === "standalone-origin") {
+        return { findings: [], resolved: { value: { kind: "standalone-origin" }, childPrefixKeys: [], excludeRules: [] } };
+    }
+    if (hasExactKeys(topology, ["kind", "registry"]) && topology.kind === "shared-origin") {
+        const registryResult = validateOriginRegistry(topology.registry);
+        if (!registryResult.ok) {
+            return {
+                findings: registryResult.diagnostics.map((finding) => withinPath(["topology", "registry"], finding)),
+                resolved: undefined,
+            };
+        }
+        const registry = registryResult.value;
+        // Identity failed validation: compilation already fails, and there is nothing meaningful to match.
+        if (identity === undefined)
+            return { findings: [], resolved: undefined };
+        const matches = [registry.root, ...registry.children].filter((entry) => matchesIdentity(entry, identity));
+        if (registry.origin !== identity.origin || registry.environment !== identity.environment || matches.length !== 1) {
+            return { findings: [diagnostic("plan.registry-identity-mismatch", ["topology", "registry"])], resolved: undefined };
+        }
+        const value = { kind: "shared-origin", registry };
+        if (!matchesIdentity(registry.root, identity)) {
+            return { findings: [], resolved: { value, childPrefixKeys: [], excludeRules: [] } };
+        }
+        const childPrefixes = [...registry.children.map((child) => scopeToPathPrefix(child.scope))].sort(compareCodePoints);
+        const excludeRules = childPrefixes.map((pathPrefix) => ({
+            pathPrefix,
+            resourceClass: "unclassified",
+            action: "exclude",
+            source: "platform",
+        }));
+        return { findings: [], resolved: { value, childPrefixKeys: childPrefixes.map(decodedPathKey), excludeRules } };
+    }
+    return { findings: [diagnostic("compile.unsupported-topology", ["topology"])], resolved: undefined };
+}
+/** Root-app check: a policy resource (any action, including deny) must not reach into a child scope. */
+export function policyRulesInChildScope(policy, mountPath, childPrefixKeys) {
+    return policy.resources.flatMap((resource, index) => {
+        const key = decodedPathKey(resolvePrefix(mountPath, resource.pathPrefix));
+        return childPrefixKeys.some((childKey) => isWithinKey(key, childKey))
+            ? [diagnostic("compile.policy-rule-in-child-scope", ["policy", "resources", index, "pathPrefix"])]
+            : [];
+    });
+}
+/** Root-app check: the install start URL must not reach into a child scope (contracts' `plan.start-url-in-child-scope`). */
+export function installStartUrlInChildScope(install, childPrefixKeys) {
+    const key = decodedPathKey(install.startUrl);
+    return childPrefixKeys.some((childKey) => isWithinKey(key, childKey))
+        ? [diagnostic("compile.start-url-in-child-scope", ["install", "startUrl"])]
+        : [];
+}
+function matchesIdentity(entry, identity) {
+    return (entry.appId === identity.appId &&
+        entry.scope === identity.scope &&
+        entry.serviceWorkerUrl === identity.serviceWorkerUrl &&
+        entry.manifestId === identity.manifestId &&
+        entry.manifestUrl === identity.manifestUrl);
+}
+/** Canonical path-prefix form of a scope: the scope without its trailing slash (matches `resolvePrefix`). */
+function scopeToPathPrefix(scope) {
+    return scope === "/" ? "/" : scope.slice(0, -1);
+}
+//# sourceMappingURL=topology.js.map

package/dist/topology.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"topology.js","sourceRoot":"","sources":["../src/topology.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AAWjE,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AACnE,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACxD,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrE,OAAO,EAAE,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAiB3C;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,QAAiB,EAAE,QAAiC;IAClF,IAAI,YAAY,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,CAAC,IAAI,QAAQ,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;QAC9E,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE,EAAE,eAAe,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,CAAC;IACrH,CAAC;IAED,IAAI,YAAY,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,IAAI,QAAQ,CAAC,IAAI,KAAK,eAAe,EAAE,CAAC;QACtF,MAAM,cAAc,GAAG,sBAAsB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACjE,IAAI,CAAC,cAAc,CAAC,EAAE,EAAE,CAAC;YACvB,OAAO;gBACL,QAAQ,EAAE,cAAc,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,UAAU,EAAE,UAAU,CAAC,EAAE,OAAO,CAAC,CAAC;gBACpG,QAAQ,EAAE,SAAS;aACpB,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC;QACtC,mGAAmG;QACnG,IAAI,QAAQ,KAAK,SAAS;YAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;QAEzE,MAAM,OAAO,GAAG,CAAC,QAAQ,CAAC,IAAI,EAAE,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,eAAe,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC1G,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACjH,OAAO,EAAE,QAAQ,EAAE,CAAC,UAAU,CAAC,iCAAiC,EAAE,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;QACtH,CAAC;QAED,MAAM,KAAK,GAAgB,EAAE,IAAI,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC;QAC/D,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,CAAC;YAC9C,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,EAAE,CAAC;QACtF,CAAC;QAED,MAAM,aAAa,GAAG,CAAC,GAAG,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,iBAAiB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QACpH,MAAM,YAAY,GAAkB,aAAa,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;YACrE,UAAU;YACV,aAAa,EAAE,cAAc;YAC7B,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,UAAU;SACnB,CAAC,CAAC,CAAC;QACJ,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,eAAe,EAAE,aAAa,CAAC,GAAG,CAAC,cAAc,CAAC,EAAE,YAAY,EAAE,EAAE,CAAC;IACjH,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,CAAC,UAAU,CAAC,8BAA8B,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;AACvG,CAAC;AAED,wGAAwG;AACxG,MAAM,UAAU,uBAAuB,CACrC,MAAiB,EACjB,SAAuB,EACvB,eAAkC;IAElC,OAAO,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE;QAClD,MAAM,GAAG,GAAG,cAAc,CAAC,aAAa,CAAC,SAAS,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC;QAC1E,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YACnE,CAAC,CAAC,CAAC,UAAU,CAAC,oCAAoC,EAAE,CAAC,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC,CAAC;YAClG,CAAC,CAAC,EAAE,CAAC;IACT,CAAC,CAAC,CAAC;AACL,CAAC;AAED,4HAA4H;AAC5H,MAAM,UAAU,2BAA2B,CACzC,OAA2B,EAC3B,eAAkC;IAElC,MAAM,GAAG,GAAG,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAC7C,OAAO,eAAe,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACnE,CAAC,CAAC,CAAC,UAAU,CAAC,kCAAkC,EAAE,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,CAAC;QAC3E,CAAC,CAAC,EAAE,CAAC;AACT,CAAC;AAED,SAAS,eAAe,CAAC,KAAuB,EAAE,QAAqB;IACrE,OAAO,CACL,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK;QAC9B,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,KAAK;QAC9B,KAAK,CAAC,gBAAgB,KAAK,QAAQ,CAAC,gBAAgB;QACpD,KAAK,CAAC,UAAU,KAAK,QAAQ,CAAC,UAAU;QACxC,KAAK,CAAC,WAAW,KAAK,QAAQ,CAAC,WAAW,CAC3C,CAAC;AACJ,CAAC;AAED,6GAA6G;AAC7G,SAAS,iBAAiB,CAAC,KAAmB;IAC5C,OAAO,KAAK,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAkB,CAAC;AACpE,CAAC"}

package/package.json

@@ -0,0 +1,34 @@
+{
+  "name": "@pwa-platform/core",
+  "version": "0.1.0-beta.0",
+  "description": "Compile PWA Platform policies into deployment plans.",
+  "license": "MIT",
+  "type": "module",
+  "sideEffects": false,
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "types": "./dist/index.d.ts",
+  "files": [
+    "dist"
+  ],
+  "dependencies": {
+    "@pwa-platform/contracts": "0.1.0-beta.0"
+  },
+  "engines": {
+    "node": ">=22.0.0"
+  },
+  "publishConfig": {
+    "registry": "https://registry.npmjs.org/",
+    "access": "public",
+    "tag": "next"
+  },
+  "scripts": {
+    "build": "tsc --project tsconfig.build.json",
+    "test": "vitest run",
+    "typecheck": "tsc --noEmit --project tsconfig.json"
+  }
+}