@vibesdotdev/applets 0.0.0-stage → 1.0.0-rc.2

package/dist/schemas/contributes.d.ts

@@ -0,0 +1,306 @@
+/**
+ * Contributed descriptors — what a subscribed Applet adds to a subscriber's
+ * runtime.
+ *
+ * The one rule that makes contribution safe: DESCRIPTORS ARE DATA,
+ * IMPLEMENTATIONS ARE CODE. Everything in this file is inert JSON. It is
+ * validated at publish time, registered into a subscriber's runtime as a shim
+ * loader, and executes nothing. Every implementation is named BY REFERENCE into
+ * the release's own digest-pinned file inventory, and is dispatched across the
+ * sandbox boundary — never imported by the host.
+ *
+ * Why these shapes differ from the first-party descriptors they feed:
+ *
+ * - `tools/tool` descriptors carry LIVE ZOD objects for input/output. A manifest
+ *   is wire data and cannot carry Zod, so contributed tools carry bounded JSON
+ *   Schema and the host converts at registration.
+ * - `cli/command` arguments/options are already declarative primitives, so the
+ *   contributed shape mirrors them closely.
+ * - The `configNamespace` CLI pattern points at a Zod schema BY STRING NAME,
+ *   which an Applet cannot use — it names nothing the host can resolve. So
+ *   contributed config carries its value schema inline as JSON Schema.
+ */
+import * as z from 'zod/v4';
+/** Per-kind cap. The per-SUBSCRIBER cap is enforced at subscribe time. */
+export declare const APPLET_CONTRIBUTION_LIMIT = 32;
+/**
+ * Where a contributed implementation runs.
+ *
+ * `client` dispatches to the runner frame over MessagePort and needs a viewer.
+ * `server` needs the headless half; until server-side capability brokers exist,
+ * declaring it is a publish-time rejection rather than a tool that registers and
+ * always throws.
+ */
+export declare const appletImplSurfaceSchema: z.ZodEnum<{
+    server: "server";
+    client: "client";
+}>;
+/**
+ * An implementation named by reference, never by value.
+ *
+ * `entry` must appear in the manifest's immutable `files[]`, so an
+ * implementation is digest-pinned exactly like every other byte of the release.
+ * That check lives in the manifest superRefine, where `files[]` is in scope.
+ */
+export declare const appletImplRefSchema: z.ZodObject<{
+    surface: z.ZodEnum<{
+        server: "server";
+        client: "client";
+    }>;
+    entry: z.ZodString;
+    export: z.ZodString;
+}, z.core.$strict>;
+/**
+ * A configuration key the Applet needs from its subscriber.
+ *
+ * The key is namespaced by the HOST as `applet.<slug>.<key>` — never
+ * author-chosen — which is what stops collision and squatting.
+ */
+export declare const appletConfigDescriptorSchema: z.ZodObject<{
+    key: z.ZodString;
+    description: z.ZodString;
+    valueSchema: z.ZodPipe<z.ZodCustom<import("@vibesdotdev/shared/types").RecordObject, import("@vibesdotdev/shared/types").RecordObject>, z.ZodTransform<import("@vibesdotdev/shared/types").JsonObject, import("@vibesdotdev/shared/types").RecordObject>>;
+    default: z.ZodOptional<z.ZodPipe<z.ZodCustom<import("@vibesdotdev/kernel/bootstrap").JsonValue, import("@vibesdotdev/kernel/bootstrap").JsonValue>, z.ZodTransform<string | number | boolean | import("@vibesdotdev/kernel/schemas/json").JsonObject | import("@vibesdotdev/kernel/schemas/json").JsonArray | null, import("@vibesdotdev/kernel/bootstrap").JsonValue>>>;
+    secret: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strict>;
+/** A tool the Applet contributes to its subscriber's agent. */
+export declare const appletToolDescriptorSchema: z.ZodObject<{
+    name: z.ZodString;
+    description: z.ZodString;
+    inputSchema: z.ZodPipe<z.ZodCustom<import("@vibesdotdev/shared/types").RecordObject, import("@vibesdotdev/shared/types").RecordObject>, z.ZodTransform<import("@vibesdotdev/shared/types").JsonObject, import("@vibesdotdev/shared/types").RecordObject>>;
+    outputSchema: z.ZodOptional<z.ZodPipe<z.ZodCustom<import("@vibesdotdev/shared/types").RecordObject, import("@vibesdotdev/shared/types").RecordObject>, z.ZodTransform<import("@vibesdotdev/shared/types").JsonObject, import("@vibesdotdev/shared/types").RecordObject>>>;
+    impl: z.ZodObject<{
+        surface: z.ZodEnum<{
+            server: "server";
+            client: "client";
+        }>;
+        entry: z.ZodString;
+        export: z.ZodString;
+    }, z.core.$strict>;
+    requires: z.ZodDefault<z.ZodArray<z.ZodEnum<{
+        "storage.read": "storage.read";
+        "storage.write": "storage.write";
+        "network.fetch": "network.fetch";
+        "clipboard.read": "clipboard.read";
+        "clipboard.write": "clipboard.write";
+        "geolocation.read": "geolocation.read";
+        "notification.send": "notification.send";
+        "workboard.create": "workboard.create";
+        "workboard.update": "workboard.update";
+        "applet.snapshot.create": "applet.snapshot.create";
+        "applet.snapshot.update": "applet.snapshot.update";
+        "output.create": "output.create";
+        "output.update": "output.update";
+    }>>>;
+}, z.core.$strict>;
+/**
+ * A command the Applet contributes.
+ *
+ * Always mounted at `vibes applet <slug> <command>`. Never top-level, so a
+ * subscribed Applet cannot shadow `vibes deploy`.
+ */
+export declare const appletCliDescriptorSchema: z.ZodObject<{
+    command: z.ZodString;
+    description: z.ZodString;
+    arguments: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        description: z.ZodString;
+        required: z.ZodDefault<z.ZodBoolean>;
+        variadic: z.ZodDefault<z.ZodBoolean>;
+    }, z.core.$strict>>>;
+    options: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        flags: z.ZodString;
+        description: z.ZodString;
+        type: z.ZodDefault<z.ZodEnum<{
+            string: "string";
+            number: "number";
+            boolean: "boolean";
+        }>>;
+        choices: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    }, z.core.$strict>>>;
+    impl: z.ZodObject<{
+        surface: z.ZodEnum<{
+            server: "server";
+            client: "client";
+        }>;
+        entry: z.ZodString;
+        export: z.ZodString;
+    }, z.core.$strict>;
+    requires: z.ZodDefault<z.ZodArray<z.ZodEnum<{
+        "storage.read": "storage.read";
+        "storage.write": "storage.write";
+        "network.fetch": "network.fetch";
+        "clipboard.read": "clipboard.read";
+        "clipboard.write": "clipboard.write";
+        "geolocation.read": "geolocation.read";
+        "notification.send": "notification.send";
+        "workboard.create": "workboard.create";
+        "workboard.update": "workboard.update";
+        "applet.snapshot.create": "applet.snapshot.create";
+        "applet.snapshot.update": "applet.snapshot.update";
+        "output.create": "output.create";
+        "output.update": "output.update";
+    }>>>;
+}, z.core.$strict>;
+/**
+ * A runtime event the Applet reacts to.
+ *
+ * There is no viewer and no tab when an event fires, so this is server-side by
+ * definition. Delivery is at-least-once, so an implementation must be
+ * idempotent on the delivery id the host supplies.
+ */
+export declare const appletEventHandlerDescriptorSchema: z.ZodObject<{
+    name: z.ZodString;
+    event: z.ZodString;
+    description: z.ZodString;
+    impl: z.ZodObject<{
+        surface: z.ZodEnum<{
+            server: "server";
+            client: "client";
+        }>;
+        entry: z.ZodString;
+        export: z.ZodString;
+    }, z.core.$strict>;
+    requires: z.ZodDefault<z.ZodArray<z.ZodEnum<{
+        "storage.read": "storage.read";
+        "storage.write": "storage.write";
+        "network.fetch": "network.fetch";
+        "clipboard.read": "clipboard.read";
+        "clipboard.write": "clipboard.write";
+        "geolocation.read": "geolocation.read";
+        "notification.send": "notification.send";
+        "workboard.create": "workboard.create";
+        "workboard.update": "workboard.update";
+        "applet.snapshot.create": "applet.snapshot.create";
+        "applet.snapshot.update": "applet.snapshot.update";
+        "output.create": "output.create";
+        "output.update": "output.update";
+    }>>>;
+}, z.core.$strict>;
+/**
+ * The closed contribution vocabulary.
+ *
+ * `.strict()` is load-bearing: an unknown key is a publish-time REJECTION, not
+ * a stripped field. Silent tolerance is how a closed vocabulary quietly opens,
+ * and the whole point of closing it is that a subscribed Applet must not be able
+ * to register an `ai/provider` or `auth/*` descriptor.
+ *
+ * `storage` is deliberately absent — it predates this block and stays at the
+ * manifest top level.
+ */
+export declare const appletContributesSchema: z.ZodObject<{
+    config: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        key: z.ZodString;
+        description: z.ZodString;
+        valueSchema: z.ZodPipe<z.ZodCustom<import("@vibesdotdev/shared/types").RecordObject, import("@vibesdotdev/shared/types").RecordObject>, z.ZodTransform<import("@vibesdotdev/shared/types").JsonObject, import("@vibesdotdev/shared/types").RecordObject>>;
+        default: z.ZodOptional<z.ZodPipe<z.ZodCustom<import("@vibesdotdev/kernel/bootstrap").JsonValue, import("@vibesdotdev/kernel/bootstrap").JsonValue>, z.ZodTransform<string | number | boolean | import("@vibesdotdev/kernel/schemas/json").JsonObject | import("@vibesdotdev/kernel/schemas/json").JsonArray | null, import("@vibesdotdev/kernel/bootstrap").JsonValue>>>;
+        secret: z.ZodDefault<z.ZodBoolean>;
+    }, z.core.$strict>>>;
+    tools: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        description: z.ZodString;
+        inputSchema: z.ZodPipe<z.ZodCustom<import("@vibesdotdev/shared/types").RecordObject, import("@vibesdotdev/shared/types").RecordObject>, z.ZodTransform<import("@vibesdotdev/shared/types").JsonObject, import("@vibesdotdev/shared/types").RecordObject>>;
+        outputSchema: z.ZodOptional<z.ZodPipe<z.ZodCustom<import("@vibesdotdev/shared/types").RecordObject, import("@vibesdotdev/shared/types").RecordObject>, z.ZodTransform<import("@vibesdotdev/shared/types").JsonObject, import("@vibesdotdev/shared/types").RecordObject>>>;
+        impl: z.ZodObject<{
+            surface: z.ZodEnum<{
+                server: "server";
+                client: "client";
+            }>;
+            entry: z.ZodString;
+            export: z.ZodString;
+        }, z.core.$strict>;
+        requires: z.ZodDefault<z.ZodArray<z.ZodEnum<{
+            "storage.read": "storage.read";
+            "storage.write": "storage.write";
+            "network.fetch": "network.fetch";
+            "clipboard.read": "clipboard.read";
+            "clipboard.write": "clipboard.write";
+            "geolocation.read": "geolocation.read";
+            "notification.send": "notification.send";
+            "workboard.create": "workboard.create";
+            "workboard.update": "workboard.update";
+            "applet.snapshot.create": "applet.snapshot.create";
+            "applet.snapshot.update": "applet.snapshot.update";
+            "output.create": "output.create";
+            "output.update": "output.update";
+        }>>>;
+    }, z.core.$strict>>>;
+    cli: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        command: z.ZodString;
+        description: z.ZodString;
+        arguments: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            name: z.ZodString;
+            description: z.ZodString;
+            required: z.ZodDefault<z.ZodBoolean>;
+            variadic: z.ZodDefault<z.ZodBoolean>;
+        }, z.core.$strict>>>;
+        options: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            flags: z.ZodString;
+            description: z.ZodString;
+            type: z.ZodDefault<z.ZodEnum<{
+                string: "string";
+                number: "number";
+                boolean: "boolean";
+            }>>;
+            choices: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        }, z.core.$strict>>>;
+        impl: z.ZodObject<{
+            surface: z.ZodEnum<{
+                server: "server";
+                client: "client";
+            }>;
+            entry: z.ZodString;
+            export: z.ZodString;
+        }, z.core.$strict>;
+        requires: z.ZodDefault<z.ZodArray<z.ZodEnum<{
+            "storage.read": "storage.read";
+            "storage.write": "storage.write";
+            "network.fetch": "network.fetch";
+            "clipboard.read": "clipboard.read";
+            "clipboard.write": "clipboard.write";
+            "geolocation.read": "geolocation.read";
+            "notification.send": "notification.send";
+            "workboard.create": "workboard.create";
+            "workboard.update": "workboard.update";
+            "applet.snapshot.create": "applet.snapshot.create";
+            "applet.snapshot.update": "applet.snapshot.update";
+            "output.create": "output.create";
+            "output.update": "output.update";
+        }>>>;
+    }, z.core.$strict>>>;
+    events: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        name: z.ZodString;
+        event: z.ZodString;
+        description: z.ZodString;
+        impl: z.ZodObject<{
+            surface: z.ZodEnum<{
+                server: "server";
+                client: "client";
+            }>;
+            entry: z.ZodString;
+            export: z.ZodString;
+        }, z.core.$strict>;
+        requires: z.ZodDefault<z.ZodArray<z.ZodEnum<{
+            "storage.read": "storage.read";
+            "storage.write": "storage.write";
+            "network.fetch": "network.fetch";
+            "clipboard.read": "clipboard.read";
+            "clipboard.write": "clipboard.write";
+            "geolocation.read": "geolocation.read";
+            "notification.send": "notification.send";
+            "workboard.create": "workboard.create";
+            "workboard.update": "workboard.update";
+            "applet.snapshot.create": "applet.snapshot.create";
+            "applet.snapshot.update": "applet.snapshot.update";
+            "output.create": "output.create";
+            "output.update": "output.update";
+        }>>>;
+    }, z.core.$strict>>>;
+}, z.core.$strict>;
+export type AppletImplRef = z.infer<typeof appletImplRefSchema>;
+export type AppletConfigDescriptor = z.infer<typeof appletConfigDescriptorSchema>;
+export type AppletToolDescriptor = z.infer<typeof appletToolDescriptorSchema>;
+export type AppletCliDescriptor = z.infer<typeof appletCliDescriptorSchema>;
+export type AppletEventHandlerDescriptor = z.infer<typeof appletEventHandlerDescriptorSchema>;
+export type AppletContributes = z.infer<typeof appletContributesSchema>;
+//# sourceMappingURL=contributes.d.ts.map

package/dist/schemas/contributes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contributes.d.ts","sourceRoot":"","sources":["../../src/schemas/contributes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAM5B,0EAA0E;AAC1E,eAAO,MAAM,yBAAyB,KAAK,CAAC;AAE5C;;;;;;;GAOG;AACH,eAAO,MAAM,uBAAuB;;;EAA+B,CAAC;AAEpE;;;;;;GAMG;AACH,eAAO,MAAM,mBAAmB;;;;;;;kBAuBrB,CAAC;AAKZ;;;;;GAKG;AACH,eAAO,MAAM,4BAA4B;;;;;;kBAgB9B,CAAC;AAEZ,+DAA+D;AAC/D,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAO5B,CAAC;AA6BZ;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAO3B,CAAC;AAEZ;;;;;;GAMG;AACH,eAAO,MAAM,kCAAkC;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAepC,CAAC;AAEZ;;;;;;;;;;GAUG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kBAU1B,CAAC;AAEX,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAChE,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC;AAClF,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAC9E,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAC5E,MAAM,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kCAAkC,CAAC,CAAC;AAC9F,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC"}

package/dist/schemas/contributes.js

@@ -0,0 +1,184 @@
+/**
+ * Contributed descriptors — what a subscribed Applet adds to a subscriber's
+ * runtime.
+ *
+ * The one rule that makes contribution safe: DESCRIPTORS ARE DATA,
+ * IMPLEMENTATIONS ARE CODE. Everything in this file is inert JSON. It is
+ * validated at publish time, registered into a subscriber's runtime as a shim
+ * loader, and executes nothing. Every implementation is named BY REFERENCE into
+ * the release's own digest-pinned file inventory, and is dispatched across the
+ * sandbox boundary — never imported by the host.
+ *
+ * Why these shapes differ from the first-party descriptors they feed:
+ *
+ * - `tools/tool` descriptors carry LIVE ZOD objects for input/output. A manifest
+ *   is wire data and cannot carry Zod, so contributed tools carry bounded JSON
+ *   Schema and the host converts at registration.
+ * - `cli/command` arguments/options are already declarative primitives, so the
+ *   contributed shape mirrors them closely.
+ * - The `configNamespace` CLI pattern points at a Zod schema BY STRING NAME,
+ *   which an Applet cannot use — it names nothing the host can resolve. So
+ *   contributed config carries its value schema inline as JSON Schema.
+ */
+import * as z from 'zod/v4';
+import { boundedJsonValueSchema, boundedWireSchemaSchema } from '@vibesdotdev/shared/schemas';
+import { appletCapabilityKindSchema } from "./capabilities.js";
+import { SAFE_ID, SAFE_RELATIVE_PATH } from "./patterns.js";
+/** Per-kind cap. The per-SUBSCRIBER cap is enforced at subscribe time. */
+export const APPLET_CONTRIBUTION_LIMIT = 32;
+/**
+ * Where a contributed implementation runs.
+ *
+ * `client` dispatches to the runner frame over MessagePort and needs a viewer.
+ * `server` needs the headless half; until server-side capability brokers exist,
+ * declaring it is a publish-time rejection rather than a tool that registers and
+ * always throws.
+ */
+export const appletImplSurfaceSchema = z.enum(['client', 'server']);
+/**
+ * An implementation named by reference, never by value.
+ *
+ * `entry` must appear in the manifest's immutable `files[]`, so an
+ * implementation is digest-pinned exactly like every other byte of the release.
+ * That check lives in the manifest superRefine, where `files[]` is in scope.
+ */
+export const appletImplRefSchema = z.object({
+    surface: appletImplSurfaceSchema,
+    entry: z
+        .string()
+        .min(1)
+        .max(512)
+        .regex(SAFE_RELATIVE_PATH, 'Applet paths must be safe, relative POSIX paths'),
+    /**
+     * A NAMED export. Required, and `default` is refused.
+     *
+     * The compiled bundle's `default` export IS the Svelte component itself
+     * (`compile.ts` wrapper: `export default Component`). A contribution pointing
+     * at `default` would hand the component object to a tool caller instead of an
+     * implementation, so there is no sensible default value for this field.
+     */
+    export: z
+        .string()
+        .min(1)
+        .max(80)
+        .regex(/^[A-Za-z_$][A-Za-z0-9_$]*$/, 'Export must be a JavaScript identifier')
+        .refine((name) => name !== 'default', {
+        message: 'Contributed implementations must name a named export; `default` is the component'
+    })
+}).strict();
+/** Capability tags a contribution needs. Always a subset of the manifest's. */
+const requiresSchema = z.array(appletCapabilityKindSchema).max(16).default([]);
+/**
+ * A configuration key the Applet needs from its subscriber.
+ *
+ * The key is namespaced by the HOST as `applet.<slug>.<key>` — never
+ * author-chosen — which is what stops collision and squatting.
+ */
+export const appletConfigDescriptorSchema = z.object({
+    key: z.string().min(1).max(64).regex(SAFE_ID, 'Config keys must be kebab-case'),
+    description: z.string().min(1).max(500),
+    valueSchema: boundedWireSchemaSchema,
+    /**
+     * The default VALUE for this key — not a schema. Bounded against a 5MB blob
+     * riding into the stored manifest, but any JSON value is legitimate here.
+     */
+    default: boundedJsonValueSchema.optional(),
+    /**
+     * Routes through the secrets store instead of config: injected into the
+     * implementation, never readable back. The CLI config-namespace pattern has
+     * no secret path today, so this is rejected until that lands rather than
+     * silently storing a credential in plaintext config.
+     */
+    secret: z.boolean().default(false)
+}).strict();
+/** A tool the Applet contributes to its subscriber's agent. */
+export const appletToolDescriptorSchema = z.object({
+    name: z.string().min(1).max(64).regex(SAFE_ID, 'Tool names must be kebab-case'),
+    description: z.string().min(1).max(1000),
+    inputSchema: boundedWireSchemaSchema,
+    outputSchema: boundedWireSchemaSchema.optional(),
+    impl: appletImplRefSchema,
+    requires: requiresSchema
+}).strict();
+/** A CLI argument, mirroring the first-party `cli/command` argument shape. */
+const appletCliArgumentSchema = z.object({
+    name: z.string().min(1).max(64).regex(SAFE_ID, 'CLI argument names must be kebab-case'),
+    description: z.string().min(1).max(500),
+    required: z.boolean().default(false),
+    variadic: z.boolean().default(false)
+}).strict();
+/** A CLI option, mirroring the first-party `cli/command` option shape. */
+const appletCliOptionSchema = z.object({
+    /**
+     * Commander-style flag spec, constrained. Free-form flags let a contribution
+     * declare `-h` or otherwise collide with the host's own option parsing.
+     */
+    flags: z
+        .string()
+        .min(1)
+        .max(120)
+        .regex(/^--[a-z0-9]+(?:-[a-z0-9]+)*(?: <[a-z0-9-]+>| \[[a-z0-9-]+\])?$/, 'CLI option flags must be a single long form, e.g. `--dry-run` or `--path <value>`'),
+    description: z.string().min(1).max(500),
+    type: z.enum(['string', 'number', 'boolean']).default('string'),
+    choices: z.array(z.string().min(1).max(80)).max(32).optional()
+}).strict();
+/**
+ * A command the Applet contributes.
+ *
+ * Always mounted at `vibes applet <slug> <command>`. Never top-level, so a
+ * subscribed Applet cannot shadow `vibes deploy`.
+ */
+export const appletCliDescriptorSchema = z.object({
+    command: z.string().min(1).max(64).regex(SAFE_ID, 'CLI commands must be kebab-case'),
+    description: z.string().min(1).max(500),
+    arguments: z.array(appletCliArgumentSchema).max(16).default([]),
+    options: z.array(appletCliOptionSchema).max(16).default([]),
+    impl: appletImplRefSchema,
+    requires: requiresSchema
+}).strict();
+/**
+ * A runtime event the Applet reacts to.
+ *
+ * There is no viewer and no tab when an event fires, so this is server-side by
+ * definition. Delivery is at-least-once, so an implementation must be
+ * idempotent on the delivery id the host supplies.
+ */
+export const appletEventHandlerDescriptorSchema = z.object({
+    name: z.string().min(1).max(64).regex(SAFE_ID, 'Event handler names must be kebab-case'),
+    /**
+     * Applet-namespaced only. A free-form event name lets a contribution bind to
+     * any host event — `auth.session.created` is the obvious escalation — before
+     * any host event vocabulary or per-event authority check exists.
+     */
+    event: z
+        .string()
+        .min(1)
+        .max(128)
+        .regex(/^applet\.[a-z0-9]+(?:[._-][a-z0-9]+)*$/, 'Event types must be applet-namespaced'),
+    description: z.string().min(1).max(500),
+    impl: appletImplRefSchema,
+    requires: requiresSchema
+}).strict();
+/**
+ * The closed contribution vocabulary.
+ *
+ * `.strict()` is load-bearing: an unknown key is a publish-time REJECTION, not
+ * a stripped field. Silent tolerance is how a closed vocabulary quietly opens,
+ * and the whole point of closing it is that a subscribed Applet must not be able
+ * to register an `ai/provider` or `auth/*` descriptor.
+ *
+ * `storage` is deliberately absent — it predates this block and stays at the
+ * manifest top level.
+ */
+export const appletContributesSchema = z
+    .object({
+    config: z.array(appletConfigDescriptorSchema).max(APPLET_CONTRIBUTION_LIMIT).default([]),
+    tools: z.array(appletToolDescriptorSchema).max(APPLET_CONTRIBUTION_LIMIT).default([]),
+    cli: z.array(appletCliDescriptorSchema).max(APPLET_CONTRIBUTION_LIMIT).default([]),
+    events: z
+        .array(appletEventHandlerDescriptorSchema)
+        .max(APPLET_CONTRIBUTION_LIMIT)
+        .default([])
+})
+    .strict();
+//# sourceMappingURL=contributes.js.map

package/dist/schemas/contributes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contributes.js","sourceRoot":"","sources":["../../src/schemas/contributes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AAC9F,OAAO,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AAE/D,OAAO,EAAE,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAE5D,0EAA0E;AAC1E,MAAM,CAAC,MAAM,yBAAyB,GAAG,EAAE,CAAC;AAE5C;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;AAEpE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,OAAO,EAAE,uBAAuB;IAChC,KAAK,EAAE,CAAC;SACN,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,GAAG,CAAC;SACR,KAAK,CAAC,kBAAkB,EAAE,iDAAiD,CAAC;IAC9E;;;;;;;OAOG;IACH,MAAM,EAAE,CAAC;SACP,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,EAAE,CAAC;SACP,KAAK,CAAC,4BAA4B,EAAE,wCAAwC,CAAC;SAC7E,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,SAAS,EAAE;QACrC,OAAO,EAAE,kFAAkF;KAC3F,CAAC;CACH,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,+EAA+E;AAC/E,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;AAE/E;;;;;GAKG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,gCAAgC,CAAC;IAC/E,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACvC,WAAW,EAAE,uBAAuB;IACpC;;;OAGG;IACH,OAAO,EAAE,sBAAsB,CAAC,QAAQ,EAAE;IAC1C;;;;;OAKG;IACH,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CAClC,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,+DAA+D;AAC/D,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IAClD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,+BAA+B,CAAC;IAC/E,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;IACxC,WAAW,EAAE,uBAAuB;IACpC,YAAY,EAAE,uBAAuB,CAAC,QAAQ,EAAE;IAChD,IAAI,EAAE,mBAAmB;IACzB,QAAQ,EAAE,cAAc;CACxB,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,8EAA8E;AAC9E,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,uCAAuC,CAAC;IACvF,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACvC,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACpC,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CACpC,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ,0EAA0E;AAC1E,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC;;;OAGG;IACH,KAAK,EAAE,CAAC;SACN,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,GAAG,CAAC;SACR,KAAK,CACL,gEAAgE,EAChE,mFAAmF,CACnF;IACF,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACvC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IAC/D,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC9D,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ;;;;;GAKG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,iCAAiC,CAAC;IACpF,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACvC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC/D,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC3D,IAAI,EAAE,mBAAmB;IACzB,QAAQ,EAAE,cAAc;CACxB,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kCAAkC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1D,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,wCAAwC,CAAC;IACxF;;;;OAIG;IACH,KAAK,EAAE,CAAC;SACN,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,GAAG,CAAC;SACR,KAAK,CAAC,wCAAwC,EAAE,uCAAuC,CAAC;IAC1F,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACvC,IAAI,EAAE,mBAAmB;IACzB,QAAQ,EAAE,cAAc;CACxB,CAAC,CAAC,MAAM,EAAE,CAAC;AAEZ;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC;KACtC,MAAM,CAAC;IACP,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,4BAA4B,CAAC,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACxF,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACrF,GAAG,EAAE,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAClF,MAAM,EAAE,CAAC;SACP,KAAK,CAAC,kCAAkC,CAAC;SACzC,GAAG,CAAC,yBAAyB,CAAC;SAC9B,OAAO,CAAC,EAAE,CAAC;CACb,CAAC;KACD,MAAM,EAAE,CAAC"}