@vibesdotdev/applets 0.0.0-stage → 1.0.0-rc.3

package/dist/schemas/definition.js

@@ -0,0 +1,457 @@
+/**
+ * Immutable Applet definition metadata carried by one exact Component release.
+ *
+ * Platform continues to own source, compilation, bundles, and releases. This
+ * schema describes the Applet-specific contract of that release: one HTML or
+ * Svelte entrypoint, its immutable file inventory, Applet-owned storage,
+ * referenced Assets, composition pins, and capabilities over browsing-user or
+ * external data.
+ */
+import * as z from 'zod/v4';
+import { componentReleaseRefSchema } from "./component-release-ref.js";
+import { boundedJsonValueSchema, boundedWireSchemaSchema } from '@vibesdotdev/shared/schemas';
+import { appletCapabilityKindSchema } from "./capabilities.js";
+import { appletContributesSchema, appletImplRefSchema } from "./contributes.js";
+import { SAFE_CAPABILITY, SAFE_ID, SAFE_RELATIVE_PATH } from "./patterns.js";
+const SHA256_DIGEST = /^(?:sha256:)?[a-f0-9]{64}$/i;
+export const appletRelativePathSchema = z
+    .string()
+    .min(1)
+    .max(512)
+    .regex(SAFE_RELATIVE_PATH, 'Applet paths must be safe, relative POSIX paths');
+export const appletEntrypointKindSchema = z.enum(['html', 'svelte']);
+export const appletEntrypointSchema = z
+    .object({
+    kind: appletEntrypointKindSchema,
+    path: appletRelativePathSchema
+})
+    .superRefine((entrypoint, ctx) => {
+    const extension = entrypoint.kind === 'html' ? '.html' : '.svelte';
+    if (!entrypoint.path.toLowerCase().endsWith(extension)) {
+        ctx.addIssue({
+            code: 'custom',
+            path: ['path'],
+            message: `${entrypoint.kind} entrypoints must end in ${extension}`
+        });
+    }
+});
+export const appletPackageFileSchema = z.object({
+    path: appletRelativePathSchema,
+    mediaType: z.string().min(1).max(160),
+    /** Digest of the immutable published file bytes. */
+    digest: z.string().regex(SHA256_DIGEST, 'Applet file digests must be SHA-256'),
+    size: z
+        .number()
+        .int()
+        .nonnegative()
+        .max(16 * 1024 * 1024)
+});
+/**
+ * Applet-owned data is not a browsing-user capability. The runtime derives the
+ * Applet instance and viewer partition and exposes only these declared stores.
+ */
+export const appletOwnStorageDescriptorSchema = z
+    .object({
+    id: z.string().min(1).max(64).regex(SAFE_ID, 'Storage ids must be kebab-case'),
+    /**
+     * Who owns these rows, and therefore who may write them.
+     *
+     * - `applet-owned`  — per-instance state the Applet manages itself.
+     * - `author-owned`  — one dataset per definition, shared across every
+     *   install. READ-ONLY to subscribers and billed to the author; this is a
+     *   multi-tenant read path, so it is the tier most able to leak.
+     * - `viewer-owned`  — the end user's own data. Portable, and retained
+     *   under the viewer's authority rather than the instance's.
+     *
+     * Orthogonal to `scope`, which partitions rows rather than assigning them.
+     */
+    authority: z
+        .enum(['applet-owned', 'author-owned', 'viewer-owned'])
+        .default('applet-owned'),
+    scope: z.enum(['instance', 'viewer']).default('instance'),
+    schemaVersion: z.number().int().positive(),
+    /**
+     * Wire-safe JSON Schema for one stored record.
+     *
+     * Bounded by the safety profile in `wire-schema.ts`: no `$ref`, no
+     * catastrophic `pattern`, capped depth/nodes/bytes. Wire-safe is not
+     * self-validating, and a manifest is third-party input.
+     */
+    recordSchema: boundedWireSchemaSchema,
+    /*
+     * There is deliberately NO `indexes` field.
+     *
+     * It was declarable and backed by nothing, and it could not be backed: an
+     * index built from a manifest is a DATABASE OBJECT created from third-party
+     * input, which is the same argument that rules out a table per declaration.
+     * The host owns its schema.
+     *
+     * Removing it is safe for published manifests — the schema is non-strict, so
+     * an old manifest carrying `indexes` still parses and the field is dropped.
+     * Listing is ordered and indexed by key, which is the access pattern the
+     * store actually offers.
+     */
+    quotaBytes: z.number().int().positive().optional(),
+    /**
+     * Author-defined write conditions (A2b, pattern P1), declarative and
+     * bounded: an incoming record must ALSO match this wire schema to be
+     * written, evaluated server-side on every write with the acting principal
+     * bound by the host. Absent, `recordSchema` alone governs. Requires
+     * schemaVersion 3, so a host that cannot evaluate one never accepts a
+     * manifest carrying it.
+     */
+    writeConditions: boundedWireSchemaSchema.optional()
+})
+    .superRefine((store, ctx) => {
+    // `author-owned` is ONE dataset per definition. A per-viewer partition of a
+    // single shared dataset is incoherent: the two statements cannot both hold,
+    // and a store declaring both asks a reader to pick one silently.
+    //
+    // Refused at DECLARATION rather than handled at read time, because the read
+    // path for that combination would have to drop either the definition key or
+    // the viewer key, and dropping either one is a leak.
+    if (store.authority === 'author-owned' && store.scope === 'viewer') {
+        ctx.addIssue({
+            code: 'custom',
+            path: ['scope'],
+            message: 'author-owned storage is one dataset per definition and cannot be viewer-scoped'
+        });
+    }
+});
+export const appletAssetRefSchema = z.object({
+    assetId: z.string().min(1).max(160),
+    /** Immutable Asset revision; never a mutable `latest` alias. */
+    revision: z
+        .string()
+        .min(1)
+        .max(80)
+        .refine((value) => value.toLowerCase() !== 'latest', {
+        message: 'Applet Asset references must pin an exact revision'
+    }),
+    digest: z.string().regex(SHA256_DIGEST, 'Applet Asset digests must be SHA-256'),
+    mountPath: appletRelativePathSchema
+});
+export const appletCompositionSchema = z.object({
+    mode: z.enum(['extends', 'renders']),
+    /** Exact child/base release; composition never follows `latest`. */
+    release: componentReleaseRefSchema,
+    slot: z.string().min(1).max(80).regex(SAFE_ID, 'Composition slots must be kebab-case'),
+    /**
+     * Composition props — VALUES passed to the child, not a schema. Bounded
+     * against a 10MB `props` being accepted, stored, and re-parsed on every row
+     * of a list read; not interpreted, because a prop may legitimately be named
+     * `pattern` or `$ref`.
+     */
+    props: boundedJsonValueSchema.default({})
+});
+export const appletCapabilityRequestSchema = z.object({
+    tag: z.string().min(1).max(128).regex(SAFE_CAPABILITY, 'Capability tags must be URL-safe'),
+    reason: z.string().min(1).max(500),
+    required: z.boolean().default(true)
+});
+/**
+ * The principal an applet action runs AS (A2b).
+ *
+ * - `author` — the applet's owner: the local workspace user, or the instance
+ *   owner in the cloud. Owns paired resources and defines policy/conditions.
+ * - `viewer` — the runtime principal at render time: the same user locally,
+ *   the viewer session in the cloud, carrying its own runtime and auth.
+ */
+export const appletPrincipalSchema = z.enum(['author', 'viewer']);
+/**
+ * An approved server action (A2b).
+ *
+ * The handler is a REFERENCE into the release's own `files[]`, never inline
+ * code: dispatching one crosses the sandbox boundary exactly as a contributed
+ * implementation does, and the host never imports a release file. `policy`
+ * carries the author's declarative conditions, bounded like every other
+ * author-supplied value, and is evaluated server-side with the acting
+ * principal.
+ */
+export const appletServerActionSchema = z
+    .object({
+    id: z.string().min(1).max(64).regex(SAFE_ID, 'Server action ids must be kebab-case'),
+    /** Which principal the action runs AS; the host binds it, never the caller. */
+    principal: appletPrincipalSchema,
+    /**
+     * A reference into `files[]`. Server actions run SERVER-side by
+     * definition, so a `client` handler is refused rather than dispatched to
+     * a frame that cannot serve it.
+     */
+    handler: appletImplRefSchema.extend({ surface: z.literal('server') }),
+    /** Author-defined, declarative conditions; never executable code. */
+    policy: boundedJsonValueSchema.default({})
+})
+    .strict();
+function duplicateValues(values) {
+    const seen = new Set();
+    const duplicates = new Set();
+    for (const value of values) {
+        if (seen.has(value))
+            duplicates.add(value);
+        seen.add(value);
+    }
+    return duplicates;
+}
+export const appletDefinitionManifestSchema = z
+    .object({
+    /**
+     * 1 — legacy. Capability tags are free-form; `contributes` is forbidden.
+     * 2 — every capability tag must be in the closed capability vocabulary, and
+     *     `contributes` is permitted.
+     * 3 — bounded capability tags are admitted against trusted runtime registrations at consent/invoke.
+     *
+     * Published manifests are immutable and digest-pinned, so v1 releases can
+     * never be corrected in place. Tightening the contract under a new version
+     * is what lets the rule be strict without invalidating shipped releases.
+     */
+    schemaVersion: z.union([z.literal(1), z.literal(2), z.literal(3)]),
+    entrypoint: appletEntrypointSchema,
+    files: z.array(appletPackageFileSchema).min(1).max(256),
+    storage: z.array(appletOwnStorageDescriptorSchema).max(64).default([]),
+    assets: z.array(appletAssetRefSchema).max(256).default([]),
+    composition: z.array(appletCompositionSchema).max(64).default([]),
+    /**
+     * Authority over browsing-user or external data. Applet-owned storage is
+     * declared above and deliberately absent from this list.
+     */
+    capabilities: z.array(appletCapabilityRequestSchema).max(64).default([]),
+    /**
+     * What this release adds to a subscriber's runtime. Inert data only —
+     * see `contributes.ts`. Permitted from schemaVersion 2 onward.
+     */
+    contributes: appletContributesSchema.optional(),
+    /**
+     * Approved server actions (A2b): references into `files[]` plus the
+     * principal they run AS and the author's policy. Inert data; dispatch
+     * crosses the sandbox boundary. Permitted from schemaVersion 3 onward.
+     */
+    // Optional, never defaulted: an absent field keeps every existing manifest's hash unchanged.
+    serverActions: z.array(appletServerActionSchema).max(32).optional()
+})
+    .superRefine((manifest, ctx) => {
+    const filePaths = manifest.files.map((file) => file.path);
+    if (!filePaths.includes(manifest.entrypoint.path)) {
+        ctx.addIssue({
+            code: 'custom',
+            path: ['entrypoint', 'path'],
+            message: 'Applet entrypoint must exist in the immutable file inventory'
+        });
+    }
+    // `./tool.js` and `tool.js` name one file but are distinct strings, so the
+    // duplicate check below never sees them and `files[]` can carry both with
+    // DIFFERENT digests. Normalize before comparing, and reject the alias.
+    const normalizePath = (value) => value.replace(/^\.\//, '').replace(/\/{2,}/g, '/').replace(/\/$/, '');
+    // Case is preserved in the path itself — `src/App.svelte` is a legitimate
+    // filename — but collisions are detected case-INSENSITIVELY, because
+    // `Index.HTML` and `index.html` are one file on a case-insensitive
+    // filesystem and accepting both with different digests means whichever the
+    // platform picks is what gets served.
+    const collisionKey = (value) => normalizePath(value).toLowerCase();
+    const normalizedSeen = new Map();
+    for (const [index, file] of manifest.files.entries()) {
+        const normalized = normalizePath(file.path);
+        if (normalized !== file.path) {
+            ctx.addIssue({
+                code: 'custom',
+                path: ['files', index, 'path'],
+                message: `Applet file paths must be normalized: use ${normalized}`
+            });
+        }
+        const previous = normalizedSeen.get(collisionKey(file.path));
+        if (previous !== undefined) {
+            ctx.addIssue({
+                code: 'custom',
+                path: ['files', index, 'path'],
+                message: `Applet file ${file.path} resolves to the same path as ${previous}`
+            });
+        }
+        normalizedSeen.set(collisionKey(file.path), file.path);
+    }
+    // An Asset mounted over a digest-pinned file would shadow it at runtime.
+    for (const [index, asset] of manifest.assets.entries()) {
+        if (normalizedSeen.has(collisionKey(asset.mountPath))) {
+            ctx.addIssue({
+                code: 'custom',
+                path: ['assets', index, 'mountPath'],
+                message: `Asset mount path ${asset.mountPath} would shadow a digest-pinned file`
+            });
+        }
+    }
+    const identities = [
+        ['file path', filePaths, ['files']],
+        ['storage id', manifest.storage.map((store) => store.id), ['storage']],
+        ['Asset mount path', manifest.assets.map((asset) => asset.mountPath), ['assets']],
+        ['composition slot', manifest.composition.map((edge) => edge.slot), ['composition']],
+        [
+            'capability tag',
+            manifest.capabilities.map((capability) => capability.tag),
+            ['capabilities']
+        ],
+        ['server action id', (manifest.serverActions ?? []).map((action) => action.id), ['serverActions']]
+    ];
+    for (const [label, values, path] of identities) {
+        for (const duplicate of duplicateValues(values)) {
+            ctx.addIssue({
+                code: 'custom',
+                path,
+                message: `Duplicate Applet ${label}: ${duplicate}`
+            });
+        }
+    }
+    // Version-gated tightening. v1 is legacy and immutable; v2 is the contract
+    // we actually want. Applying a stricter rule to v1 would invalidate
+    // already-published, digest-pinned releases that can never be corrected.
+    if (manifest.schemaVersion === 2) {
+        for (const [index, capability] of manifest.capabilities.entries()) {
+            // A tag outside the closed vocabulary is author-asserted authority:
+            // the consent prompt would name authority no host contract recognizes.
+            if (!appletCapabilityKindSchema.safeParse(capability.tag).success) {
+                ctx.addIssue({
+                    code: 'custom',
+                    path: ['capabilities', index, 'tag'],
+                    message: `Unknown Applet capability tag: ${capability.tag}. Capability vocabulary is server-attested, never author-defined.`
+                });
+            }
+        }
+    }
+    // A2b, version-gated exactly as `contributes` is: a host that predates
+    // these fields would publish them while enforcing neither, and a weaker
+    // contract silently accepted is the failure mode the gate exists for.
+    if ((manifest.serverActions?.length ?? 0) > 0 && manifest.schemaVersion < 3) {
+        ctx.addIssue({
+            code: 'custom',
+            path: ['serverActions'],
+            message: 'serverActions requires schemaVersion 3'
+        });
+    }
+    if (manifest.schemaVersion < 3) {
+        for (const [index, store] of manifest.storage.entries()) {
+            if (store.writeConditions !== undefined) {
+                ctx.addIssue({
+                    code: 'custom',
+                    path: ['storage', index, 'writeConditions'],
+                    message: 'writeConditions requires schemaVersion 3'
+                });
+            }
+        }
+    }
+    if ((manifest.serverActions?.length ?? 0) > 0) {
+        const inventory = new Set(manifest.files.map((file) => file.path));
+        for (const action of manifest.serverActions ?? []) {
+            // An implementation outside the inventory is not digest-pinned, so it
+            // is not covered by the release's immutability at all.
+            if (!inventory.has(action.handler.entry)) {
+                ctx.addIssue({
+                    code: 'custom',
+                    path: ['serverActions'],
+                    message: `Server action \`${action.id}\` names ${action.handler.entry}, which is not in the immutable file inventory`
+                });
+            }
+        }
+    }
+    const contributes = manifest.contributes;
+    if (contributes) {
+        // A v1 host does not know this field exists. Accepting it at v1 would
+        // let a release register contributions on a host that cannot show them
+        // in a consent prompt — authority the subscriber never saw.
+        if (manifest.schemaVersion < 2) {
+            ctx.addIssue({
+                code: 'custom',
+                path: ['contributes'],
+                message: 'contributes requires schemaVersion 2'
+            });
+        }
+        const filePaths = new Set(manifest.files.map((file) => file.path));
+        const declaredTags = new Set(manifest.capabilities.map((capability) => capability.tag));
+        const contributions = [
+            ...contributes.tools.map((tool) => ['tools', tool.name, tool.impl, tool.requires]),
+            ...contributes.cli.map((command) => ['cli', command.command, command.impl, command.requires]),
+            ...contributes.events.map((handler) => ['events', handler.name, handler.impl, handler.requires])
+        ];
+        for (const [group, identity, impl, requires] of contributions) {
+            // An implementation outside the inventory is not digest-pinned, so it
+            // is not covered by the release's immutability at all.
+            if (!filePaths.has(impl.entry)) {
+                ctx.addIssue({
+                    code: 'custom',
+                    path: ['contributes', group],
+                    message: `Contributed implementation for \`${identity}\` names ${impl.entry}, which is not in the immutable file inventory`
+                });
+            }
+            // Server implementations need capability brokers that assume a browser
+            // host today. Registering one would produce a tool that always throws.
+            if (impl.surface === 'server') {
+                ctx.addIssue({
+                    code: 'custom',
+                    path: ['contributes', group],
+                    message: `Contributed implementation for \`${identity}\` targets the server half, which is not available yet`
+                });
+            }
+            // Internal coherence only — the real escalation check runs at invoke
+            // time against the live grant. A contribution may not, however, ask
+            // for authority the consent prompt never named.
+            for (const tag of requires) {
+                if (!declaredTags.has(tag)) {
+                    ctx.addIssue({
+                        code: 'custom',
+                        path: ['contributes', group],
+                        message: `Contributed \`${identity}\` requires capability ${tag}, which the manifest never requests`
+                    });
+                }
+            }
+        }
+        for (const entry of contributes.config) {
+            if (entry.secret) {
+                ctx.addIssue({
+                    code: 'custom',
+                    path: ['contributes', 'config'],
+                    message: `Config key \`${entry.key}\` is marked secret, but no secret-routing path exists yet`
+                });
+            }
+        }
+        const contributionIdentities = [
+            ['config key', contributes.config.map((entry) => entry.key)],
+            ['tool name', contributes.tools.map((tool) => tool.name)],
+            ['CLI command', contributes.cli.map((command) => command.command)],
+            ['event handler', contributes.events.map((handler) => handler.name)]
+        ];
+        for (const [label, values] of contributionIdentities) {
+            for (const duplicate of duplicateValues(values)) {
+                ctx.addIssue({
+                    code: 'custom',
+                    path: ['contributes'],
+                    message: `Duplicate contributed ${label}: ${duplicate}`
+                });
+            }
+        }
+    }
+    // `html` is a LEGACY entrypoint, readable at v1 and undeclarable at v2.
+    //
+    // Nothing compiles or serves one: the compiler runs `svelteCompile` with no
+    // html branch, and the runner mounts through a compiled module's `__mount`
+    // export. Published v1 releases are immutable and digest-pinned, so they
+    // must keep parsing — but a NEW manifest must not be able to declare a
+    // thing that cannot ship. The starter contract refuses it outright; this is
+    // the same rule on the manifest, gated by version exactly as `contributes`
+    // is.
+    if (manifest.schemaVersion >= 2 && manifest.entrypoint.kind === 'html') {
+        ctx.addIssue({
+            code: 'custom',
+            path: ['entrypoint', 'kind'],
+            message: 'html entrypoints cannot be declared at schemaVersion 2: nothing compiles or serves one'
+        });
+    }
+    if (manifest.composition.filter((edge) => edge.mode === 'extends').length > 1) {
+        ctx.addIssue({
+            code: 'custom',
+            path: ['composition'],
+            message: 'An Applet release may extend at most one exact base release'
+        });
+    }
+});
+/** HTML receives `window.vibes`; Svelte receives a `vibes` component prop. */
+export function appletRuntimeInjectionForEntrypoint(entrypoint) {
+    return entrypoint.kind === 'html' ? 'window' : 'prop';
+}
+//# sourceMappingURL=definition.js.map

package/dist/schemas/definition.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"definition.js","sourceRoot":"","sources":["../../src/schemas/definition.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AAC9F,OAAO,EAAE,0BAA0B,EAAE,MAAM,mBAAmB,CAAC;AAC/D,OAAO,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAEhF,OAAO,EAAE,eAAe,EAAE,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAC7E,MAAM,aAAa,GAAG,6BAA6B,CAAC;AAEpD,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACvC,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,GAAG,CAAC;KACR,KAAK,CAAC,kBAAkB,EAAE,iDAAiD,CAAC,CAAC;AAE/E,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;AAErE,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACrC,MAAM,CAAC;IACP,IAAI,EAAE,0BAA0B;IAChC,IAAI,EAAE,wBAAwB;CAC9B,CAAC;KACD,WAAW,CAAC,CAAC,UAAU,EAAE,GAAG,EAAE,EAAE;IAChC,MAAM,SAAS,GAAG,UAAU,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IACnE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACxD,GAAG,CAAC,QAAQ,CAAC;YACZ,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,MAAM,CAAC;YACd,OAAO,EAAE,GAAG,UAAU,CAAC,IAAI,4BAA4B,SAAS,EAAE;SAClE,CAAC,CAAC;IACJ,CAAC;AACF,CAAC,CAAC,CAAC;AAEJ,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,IAAI,EAAE,wBAAwB;IAC9B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACrC,oDAAoD;IACpD,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,aAAa,EAAE,qCAAqC,CAAC;IAC9E,IAAI,EAAE,CAAC;SACL,MAAM,EAAE;SACR,GAAG,EAAE;SACL,WAAW,EAAE;SACb,GAAG,CAAC,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;CACvB,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC;KAC/C,MAAM,CAAC;IACR,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,gCAAgC,CAAC;IAC9E;;;;;;;;;;;OAWG;IACH,SAAS,EAAE,CAAC;SACV,IAAI,CAAC,CAAC,cAAc,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC;SACtD,OAAO,CAAC,cAAc,CAAC;IACzB,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;IACzD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IAC1C;;;;;;OAMG;IACH,YAAY,EAAE,uBAAuB;IACrC;;;;;;;;;;;;OAYG;IACH,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAClD;;;;;;;OAOG;IACH,eAAe,EAAE,uBAAuB,CAAC,QAAQ,EAAE;CAClD,CAAC;KACD,WAAW,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;IAC3B,4EAA4E;IAC5E,4EAA4E;IAC5E,iEAAiE;IACjE,EAAE;IACF,4EAA4E;IAC5E,4EAA4E;IAC5E,qDAAqD;IACrD,IAAI,KAAK,CAAC,SAAS,KAAK,cAAc,IAAI,KAAK,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QACpE,GAAG,CAAC,QAAQ,CAAC;YACZ,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,OAAO,CAAC;YACf,OAAO,EAAE,gFAAgF;SACzF,CAAC,CAAC;IACJ,CAAC;AACF,CAAC,CAAC,CAAC;AAEJ,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACnC,gEAAgE;IAChE,QAAQ,EAAE,CAAC;SACT,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,EAAE,CAAC;SACP,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,QAAQ,EAAE;QACpD,OAAO,EAAE,oDAAoD;KAC7D,CAAC;IACH,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,aAAa,EAAE,sCAAsC,CAAC;IAC/E,SAAS,EAAE,wBAAwB;CACnC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IACpC,oEAAoE;IACpE,OAAO,EAAE,yBAAyB;IAClC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,sCAAsC,CAAC;IACtF;;;;;OAKG;IACH,KAAK,EAAE,sBAAsB,CAAC,OAAO,CAAC,EAAE,CAAC;CACzC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC,MAAM,CAAC;IACrD,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,eAAe,EAAE,kCAAkC,CAAC;IAC1F,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAClC,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;CACnC,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;AAElE;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACvC,MAAM,CAAC;IACP,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,sCAAsC,CAAC;IACpF,+EAA+E;IAC/E,SAAS,EAAE,qBAAqB;IAChC;;;;OAIG;IACH,OAAO,EAAE,mBAAmB,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;IACrE,qEAAqE;IACrE,MAAM,EAAE,sBAAsB,CAAC,OAAO,CAAC,EAAE,CAAC;CAC1C,CAAC;KACD,MAAM,EAAE,CAAC;AAEX,SAAS,eAAe,CAAC,MAAgB;IACxC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IACrC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC5B,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3C,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACjB,CAAC;IACD,OAAO,UAAU,CAAC;AACnB,CAAC;AAED,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC;KAC7C,MAAM,CAAC;IACP;;;;;;;;;OASG;IACH,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAClE,UAAU,EAAE,sBAAsB;IAClC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACvD,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACtE,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1D,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACjE;;;OAGG;IACH,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,6BAA6B,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACxE;;;OAGG;IACH,WAAW,EAAE,uBAAuB,CAAC,QAAQ,EAAE;IAC/C;;;;OAIG;IACH,6FAA6F;IAC7F,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;CACnE,CAAC;KACD,WAAW,CAAC,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE;IAC9B,MAAM,SAAS,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1D,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACnD,GAAG,CAAC,QAAQ,CAAC;YACZ,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,YAAY,EAAE,MAAM,CAAC;YAC5B,OAAO,EAAE,8DAA8D;SACvE,CAAC,CAAC;IACJ,CAAC;IAED,2EAA2E;IAC3E,0EAA0E;IAC1E,uEAAuE;IACvE,MAAM,aAAa,GAAG,CAAC,KAAa,EAAU,EAAE,CAC/C,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACvE,0EAA0E;IAC1E,qEAAqE;IACrE,mEAAmE;IACnE,2EAA2E;IAC3E,sCAAsC;IACtC,MAAM,YAAY,GAAG,CAAC,KAAa,EAAU,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IACnF,MAAM,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAC;IACjD,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QACtD,MAAM,UAAU,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,UAAU,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;YAC9B,GAAG,CAAC,QAAQ,CAAC;gBACZ,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC;gBAC9B,OAAO,EAAE,6CAA6C,UAAU,EAAE;aAClE,CAAC,CAAC;QACJ,CAAC;QACD,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7D,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC5B,GAAG,CAAC,QAAQ,CAAC;gBACZ,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC;gBAC9B,OAAO,EAAE,eAAe,IAAI,CAAC,IAAI,iCAAiC,QAAQ,EAAE;aAC5E,CAAC,CAAC;QACJ,CAAC;QACD,cAAc,CAAC,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IACxD,CAAC;IAED,yEAAyE;IACzE,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,CAAC;QACxD,IAAI,cAAc,CAAC,GAAG,CAAC,YAAY,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;YACvD,GAAG,CAAC,QAAQ,CAAC;gBACZ,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,QAAQ,EAAE,KAAK,EAAE,WAAW,CAAC;gBACpC,OAAO,EAAE,oBAAoB,KAAK,CAAC,SAAS,oCAAoC;aAChF,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAED,MAAM,UAAU,GAAsD;QACrE,CAAC,WAAW,EAAE,SAAS,EAAE,CAAC,OAAO,CAAC,CAAC;QACnC,CAAC,YAAY,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC;QACtE,CAAC,kBAAkB,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;QACjF,CAAC,kBAAkB,EAAE,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC;QACpF;YACC,gBAAgB;YAChB,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC;YACzD,CAAC,cAAc,CAAC;SAChB;QACD,CAAC,kBAAkB,EAAE,CAAC,QAAQ,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,eAAe,CAAC,CAAC;KAClG,CAAC;IACF,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,IAAI,UAAU,EAAE,CAAC;QAChD,KAAK,MAAM,SAAS,IAAI,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;YACjD,GAAG,CAAC,QAAQ,CAAC;gBACZ,IAAI,EAAE,QAAQ;gBACd,IAAI;gBACJ,OAAO,EAAE,oBAAoB,KAAK,KAAK,SAAS,EAAE;aAClD,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IAED,2EAA2E;IAC3E,oEAAoE;IACpE,yEAAyE;IACzE,IAAI,QAAQ,CAAC,aAAa,KAAK,CAAC,EAAE,CAAC;QAClC,KAAK,MAAM,CAAC,KAAK,EAAE,UAAU,CAAC,IAAI,QAAQ,CAAC,YAAY,CAAC,OAAO,EAAE,EAAE,CAAC;YACnE,oEAAoE;YACpE,uEAAuE;YACvE,IAAI,CAAC,0BAA0B,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;gBACnE,GAAG,CAAC,QAAQ,CAAC;oBACZ,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,cAAc,EAAE,KAAK,EAAE,KAAK,CAAC;oBACpC,OAAO,EAAE,kCAAkC,UAAU,CAAC,GAAG,mEAAmE;iBAC5H,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;IACF,CAAC;IAED,uEAAuE;IACvE,wEAAwE;IACxE,sEAAsE;IACtE,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,aAAa,GAAG,CAAC,EAAE,CAAC;QAC7E,GAAG,CAAC,QAAQ,CAAC;YACZ,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,eAAe,CAAC;YACvB,OAAO,EAAE,wCAAwC;SACjD,CAAC,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,aAAa,GAAG,CAAC,EAAE,CAAC;QAChC,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;YACzD,IAAI,KAAK,CAAC,eAAe,KAAK,SAAS,EAAE,CAAC;gBACzC,GAAG,CAAC,QAAQ,CAAC;oBACZ,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,iBAAiB,CAAC;oBAC3C,OAAO,EAAE,0CAA0C;iBACnD,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;IACF,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACnE,KAAK,MAAM,MAAM,IAAI,QAAQ,CAAC,aAAa,IAAI,EAAE,EAAE,CAAC;YACnD,sEAAsE;YACtE,uDAAuD;YACvD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC1C,GAAG,CAAC,QAAQ,CAAC;oBACZ,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,eAAe,CAAC;oBACvB,OAAO,EAAE,mBAAmB,MAAM,CAAC,EAAE,YAAY,MAAM,CAAC,OAAO,CAAC,KAAK,gDAAgD;iBACrH,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;IACF,CAAC;IAED,MAAM,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAC;IACzC,IAAI,WAAW,EAAE,CAAC;QACjB,sEAAsE;QACtE,uEAAuE;QACvE,4DAA4D;QAC5D,IAAI,QAAQ,CAAC,aAAa,GAAG,CAAC,EAAE,CAAC;YAChC,GAAG,CAAC,QAAQ,CAAC;gBACZ,IAAI,EAAE,QAAQ;gBACd,IAAI,EAAE,CAAC,aAAa,CAAC;gBACrB,OAAO,EAAE,sCAAsC;aAC/C,CAAC,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACnE,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;QACxF,MAAM,aAAa,GAAG;YACrB,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAU,CAAC;YAC3F,GAAG,WAAW,CAAC,GAAG,CAAC,GAAG,CACrB,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAU,CAC9E;YACD,GAAG,WAAW,CAAC,MAAM,CAAC,GAAG,CACxB,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAU,CAC9E;SACD,CAAC;QAEF,KAAK,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,aAAa,EAAE,CAAC;YAC/D,sEAAsE;YACtE,uDAAuD;YACvD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBAChC,GAAG,CAAC,QAAQ,CAAC;oBACZ,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,aAAa,EAAE,KAAK,CAAC;oBAC5B,OAAO,EAAE,oCAAoC,QAAQ,YAAY,IAAI,CAAC,KAAK,gDAAgD;iBAC3H,CAAC,CAAC;YACJ,CAAC;YAED,uEAAuE;YACvE,uEAAuE;YACvE,IAAI,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAC/B,GAAG,CAAC,QAAQ,CAAC;oBACZ,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,aAAa,EAAE,KAAK,CAAC;oBAC5B,OAAO,EAAE,oCAAoC,QAAQ,wDAAwD;iBAC7G,CAAC,CAAC;YACJ,CAAC;YAED,qEAAqE;YACrE,oEAAoE;YACpE,gDAAgD;YAChD,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;gBAC5B,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC5B,GAAG,CAAC,QAAQ,CAAC;wBACZ,IAAI,EAAE,QAAQ;wBACd,IAAI,EAAE,CAAC,aAAa,EAAE,KAAK,CAAC;wBAC5B,OAAO,EAAE,iBAAiB,QAAQ,0BAA0B,GAAG,qCAAqC;qBACpG,CAAC,CAAC;gBACJ,CAAC;YACF,CAAC;QACF,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,MAAM,EAAE,CAAC;YACxC,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;gBAClB,GAAG,CAAC,QAAQ,CAAC;oBACZ,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,aAAa,EAAE,QAAQ,CAAC;oBAC/B,OAAO,EAAE,gBAAgB,KAAK,CAAC,GAAG,4DAA4D;iBAC9F,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;QAED,MAAM,sBAAsB,GAA8B;YACzD,CAAC,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;YAC5D,CAAC,WAAW,EAAE,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACzD,CAAC,aAAa,EAAE,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAClE,CAAC,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;SACpE,CAAC;QACF,KAAK,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,sBAAsB,EAAE,CAAC;YACtD,KAAK,MAAM,SAAS,IAAI,eAAe,CAAC,MAAM,CAAC,EAAE,CAAC;gBACjD,GAAG,CAAC,QAAQ,CAAC;oBACZ,IAAI,EAAE,QAAQ;oBACd,IAAI,EAAE,CAAC,aAAa,CAAC;oBACrB,OAAO,EAAE,yBAAyB,KAAK,KAAK,SAAS,EAAE;iBACvD,CAAC,CAAC;YACJ,CAAC;QACF,CAAC;IACF,CAAC;IAED,wEAAwE;IACxE,EAAE;IACF,4EAA4E;IAC5E,2EAA2E;IAC3E,yEAAyE;IACzE,uEAAuE;IACvE,4EAA4E;IAC5E,2EAA2E;IAC3E,MAAM;IACN,IAAI,QAAQ,CAAC,aAAa,IAAI,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QACxE,GAAG,CAAC,QAAQ,CAAC;YACZ,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,YAAY,EAAE,MAAM,CAAC;YAC5B,OAAO,EACN,wFAAwF;SACzF,CAAC,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/E,GAAG,CAAC,QAAQ,CAAC;YACZ,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,CAAC,aAAa,CAAC;YACrB,OAAO,EAAE,6DAA6D;SACtE,CAAC,CAAC;IACJ,CAAC;AACF,CAAC,CAAC,CAAC;AAeJ,8EAA8E;AAC9E,MAAM,UAAU,mCAAmC,CAClD,UAA0C;IAE1C,OAAO,UAAU,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;AACvD,CAAC"}

package/dist/schemas/dispatch.d.ts

@@ -0,0 +1,52 @@
+import * as z from 'zod/v4';
+/** Must track the runner protocol and Svelte MessagePort protocol version. */
+export declare const APPLET_DISPATCH_PROTOCOL_VERSION: 1;
+export declare const appletCorrelationIdSchema: z.ZodString;
+export declare const appletDispatchRequestSchema: z.ZodObject<{
+    type: z.ZodLiteral<"dispatch">;
+    version: z.ZodLiteral<1>;
+    correlationId: z.ZodString;
+    instanceId: z.ZodString;
+    release: z.ZodObject<{
+        componentId: z.ZodUUID;
+        version: z.ZodString;
+        bundleHash: z.ZodString;
+        manifestHash: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    registrationId: z.ZodString;
+    runId: z.ZodString;
+    leaseId: z.ZodString;
+    impl: z.ZodObject<{
+        surface: z.ZodEnum<{
+            server: "server";
+            client: "client";
+        }>;
+        entry: z.ZodString;
+        export: z.ZodString;
+    }, z.core.$strict>;
+    args: z.ZodRecord<z.ZodString, z.ZodType<import("@vibesdotdev/kernel/bootstrap").JsonValue, import("@vibesdotdev/kernel/bootstrap").JsonValue, z.core.$ZodTypeInternals<import("@vibesdotdev/kernel/bootstrap").JsonValue, import("@vibesdotdev/kernel/bootstrap").JsonValue>>>;
+}, z.core.$strip>;
+/** Untrusted sandbox answers: a missing or malformed failure detail is supported. */
+export declare const appletDispatchWireResponseSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    ok: z.ZodLiteral<true>;
+    result: z.ZodType<import("@vibesdotdev/kernel/bootstrap").JsonValue, import("@vibesdotdev/kernel/bootstrap").JsonValue, z.core.$ZodTypeInternals<import("@vibesdotdev/kernel/bootstrap").JsonValue, import("@vibesdotdev/kernel/bootstrap").JsonValue>>;
+}, z.core.$strip>, z.ZodObject<{
+    ok: z.ZodLiteral<false>;
+    error: z.ZodOptional<z.ZodUnknown>;
+}, z.core.$strip>], "ok">;
+export declare const appletDispatchErrorMessageSchema: z.ZodObject<{
+    message: z.ZodOptional<z.ZodUnknown>;
+}, z.core.$loose>;
+/** Host-normalized response, after bounding and sanitizing the sandbox's message. */
+export declare const appletDispatchResponseSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    ok: z.ZodLiteral<true>;
+    result: z.ZodType<import("@vibesdotdev/kernel/bootstrap").JsonValue, import("@vibesdotdev/kernel/bootstrap").JsonValue, z.core.$ZodTypeInternals<import("@vibesdotdev/kernel/bootstrap").JsonValue, import("@vibesdotdev/kernel/bootstrap").JsonValue>>;
+}, z.core.$strip>, z.ZodObject<{
+    ok: z.ZodLiteral<false>;
+    error: z.ZodObject<{
+        message: z.ZodString;
+    }, z.core.$strip>;
+}, z.core.$strip>], "ok">;
+export type AppletDispatchRequest = z.infer<typeof appletDispatchRequestSchema>;
+export type AppletDispatchResponse = z.infer<typeof appletDispatchResponseSchema>;
+//# sourceMappingURL=dispatch.d.ts.map

package/dist/schemas/dispatch.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatch.d.ts","sourceRoot":"","sources":["../../src/schemas/dispatch.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAK5B,8EAA8E;AAC9E,eAAO,MAAM,gCAAgC,EAAG,CAAU,CAAC;AAE3D,eAAO,MAAM,yBAAyB,aAA8C,CAAC;AAErF,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;iBAYtC,CAAC;AAEH,qFAAqF;AACrF,eAAO,MAAM,gCAAgC;;;;;;yBAG3C,CAAC;AAEH,eAAO,MAAM,gCAAgC;;iBAAqD,CAAC;AAEnG,qFAAqF;AACrF,eAAO,MAAM,4BAA4B;;;;;;;;yBAGvC,CAAC;AAEH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAChF,MAAM,MAAM,sBAAsB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,4BAA4B,CAAC,CAAC"}

package/dist/schemas/dispatch.js

@@ -0,0 +1,32 @@
+import * as z from 'zod/v4';
+import { JsonValueSchema } from '@vibesdotdev/kernel/schemas/json';
+import { componentReleaseRefSchema } from "./component-release-ref.js";
+import { appletImplRefSchema } from "./contributes.js";
+/** Must track the runner protocol and Svelte MessagePort protocol version. */
+export const APPLET_DISPATCH_PROTOCOL_VERSION = 1;
+export const appletCorrelationIdSchema = z.string().regex(/^[a-zA-Z0-9_-]{32,128}$/);
+export const appletDispatchRequestSchema = z.object({
+    type: z.literal('dispatch'),
+    version: z.literal(APPLET_DISPATCH_PROTOCOL_VERSION),
+    correlationId: appletCorrelationIdSchema,
+    instanceId: z.string(),
+    release: componentReleaseRefSchema,
+    registrationId: z.string(),
+    /** Bind the request to the mounted frame generation and its live lease. */
+    runId: z.string(),
+    leaseId: z.string(),
+    impl: appletImplRefSchema,
+    args: z.record(z.string(), JsonValueSchema)
+});
+/** Untrusted sandbox answers: a missing or malformed failure detail is supported. */
+export const appletDispatchWireResponseSchema = z.discriminatedUnion('ok', [
+    z.object({ ok: z.literal(true), result: JsonValueSchema }),
+    z.object({ ok: z.literal(false), error: z.unknown().optional() })
+]);
+export const appletDispatchErrorMessageSchema = z.looseObject({ message: z.unknown().optional() });
+/** Host-normalized response, after bounding and sanitizing the sandbox's message. */
+export const appletDispatchResponseSchema = z.discriminatedUnion('ok', [
+    z.object({ ok: z.literal(true), result: JsonValueSchema }),
+    z.object({ ok: z.literal(false), error: z.object({ message: z.string() }) })
+]);
+//# sourceMappingURL=dispatch.js.map

package/dist/schemas/dispatch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dispatch.js","sourceRoot":"","sources":["../../src/schemas/dispatch.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAE,MAAM,kCAAkC,CAAC;AACnE,OAAO,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAEvD,8EAA8E;AAC9E,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAU,CAAC;AAE3D,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC;AAErF,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IACnD,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;IAC3B,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,gCAAgC,CAAC;IACpD,aAAa,EAAE,yBAAyB;IACxC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE;IACtB,OAAO,EAAE,yBAAyB;IAClC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE;IAC1B,2EAA2E;IAC3E,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,IAAI,EAAE,mBAAmB;IACzB,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,eAAe,CAAC;CAC3C,CAAC,CAAC;AAEH,qFAAqF;AACrF,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,kBAAkB,CAAC,IAAI,EAAE;IAC1E,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IAC1D,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC;CACjE,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gCAAgC,GAAG,CAAC,CAAC,WAAW,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AAEnG,qFAAqF;AACrF,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,kBAAkB,CAAC,IAAI,EAAE;IACtE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC;IAC1D,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC;CAC5E,CAAC,CAAC"}

package/dist/schemas/grants.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Access and capability grants — who may open an applet, and what exact
+ * operations/resources they approved for one exact release.
+ *
+ * Authority separation:
+ * - AccessGrant: identity-based (who may open)
+ * - CapabilityGrant: operation-based (what the applet may do)
+ * - LaunchLease: time-bound authority for one run/frame generation
+ *
+ * Grants are version-bound — they pin to the exact Component release that
+ * was consented to. Upgrading the instance requires re-consent.
+ */
+import * as z from 'zod/v4';
+export declare const appletAccessGrantSchema: z.ZodObject<{
+    id: z.ZodUUID;
+    instanceId: z.ZodUUID;
+    viewerUserId: z.ZodNullable<z.ZodString>;
+    viewerOrgId: z.ZodNullable<z.ZodString>;
+    scope: z.ZodDefault<z.ZodEnum<{
+        edit: "edit";
+        open: "open";
+        admin: "admin";
+    }>>;
+    grantReason: z.ZodNullable<z.ZodString>;
+    createdAt: z.ZodDate;
+    revokedAt: z.ZodNullable<z.ZodDate>;
+}, z.core.$strip>;
+export declare const appletCapabilityGrantSchema: z.ZodObject<{
+    id: z.ZodUUID;
+    instanceId: z.ZodUUID;
+    release: z.ZodObject<{
+        componentId: z.ZodUUID;
+        version: z.ZodString;
+        bundleHash: z.ZodString;
+        manifestHash: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+    capabilities: z.ZodArray<z.ZodString>;
+    capabilityReasons: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+    viewerUserId: z.ZodNullable<z.ZodString>;
+    viewerOrgId: z.ZodNullable<z.ZodString>;
+    consentedAt: z.ZodDate;
+    revokedAt: z.ZodNullable<z.ZodDate>;
+}, z.core.$strip>;
+export declare const appletLaunchLeaseSchema: z.ZodObject<{
+    id: z.ZodUUID;
+    instanceId: z.ZodUUID;
+    runId: z.ZodUUID;
+    nonce: z.ZodString;
+    issuedAt: z.ZodDate;
+    expiresAt: z.ZodDate;
+    revokedAt: z.ZodNullable<z.ZodDate>;
+}, z.core.$strip>;
+export type AppletAccessGrant = z.infer<typeof appletAccessGrantSchema>;
+export type AppletCapabilityGrant = z.infer<typeof appletCapabilityGrantSchema>;
+export type AppletLaunchLease = z.infer<typeof appletLaunchLeaseSchema>;
+//# sourceMappingURL=grants.d.ts.map

package/dist/schemas/grants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"grants.d.ts","sourceRoot":"","sources":["../../src/schemas/grants.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAG5B,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;iBAWlC,CAAC;AAEH,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;iBActC,CAAC;AAEH,eAAO,MAAM,uBAAuB;;;;;;;;iBAqBlC,CAAC;AAEH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AACxE,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAChF,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC"}