@vibesdotdev/applets 0.0.0-stage → 1.0.0-rc.3

package/dist/applet-root-surface.js

@@ -0,0 +1,222 @@
+/**
+ * The one object an applet connection can reach.
+ *
+ * The host puts exactly this in its reference table for a connection, and
+ * `dispatchRequest` derefs `targetRef` through that table — so a frame cannot
+ * fabricate a ref and reach anything else. The surface here IS the attack
+ * surface, which is why it is small and why every method is named in the gate.
+ *
+ * Authorization is NOT re-done here; `createAppletInvokeGate` runs first on the
+ * `authz` phase. What this does is BIND: it reads scope and authority from the
+ * manifest and hands the backend a binding the caller could not have chosen.
+ * The gate proves a store was declared; this decides what that declaration
+ * MEANS. A caller that could name its own scope could read another viewer's
+ * rows.
+ *
+ * A2 runtime parity: the surface also carries a PRINCIPAL-BOUND runtime handle
+ * (`runtimeQuery`, `runtimeCall`, `runtimeToolCall`). The host binds the
+ * principal (local: the user; cloud: the viewer); the applet can never name it,
+ * and every call runs through the host's invoke pipeline so the same authz
+ * chain gates it as any other remote peer.
+ */
+import * as z from 'zod/v4';
+import { CapabilityError } from '@vibesdotdev/kernel';
+import { boundedJsonValueSchema } from '@vibesdotdev/shared/schemas';
+import { appletValueViolations, boundAppletValue, parseAppletRuntimeHostValue } from "./applet-value-bound.js";
+/**
+ * Every method an applet connection may call on its root surface. A host that
+ * serves the surface over runtime-rpc advertises exactly these as the listen
+ * target's `rootMethods`; an unadvertised method is refused before dispatch.
+ */
+export const APPLET_ROOT_SURFACE_METHODS = Object.freeze([
+    'storageGet',
+    'storageList',
+    'storagePut',
+    'storageDelete',
+    'assetUrl',
+    'capabilityInvoke',
+    'runtimeQuery',
+    'runtimeCall',
+    'runtimeToolCall'
+]);
+/** A function value: a callback argument or an unsubscribe answer, carried by the wire as a ref. */
+export const appletRuntimeCallbackSchema = z.custom((value) => value instanceof Function);
+/** A host's raw runtime answer, parsed where it enters the surface: a function, bounded JSON, or nothing. */
+export const appletRuntimeHostValueSchema = z.union([appletRuntimeCallbackSchema, boundedJsonValueSchema]).optional();
+/** Longest key an applet may address. Bounded because it reaches a store. */
+const MAX_KEY_LENGTH = 256;
+/** Largest page an applet may request in one call. */
+const MAX_LIST_LIMIT = 500;
+const storageKeySchema = z.string().min(1).max(MAX_KEY_LENGTH);
+/** Most positional runtime-call arguments one applet call may carry. */
+const MAX_RUNTIME_ARGS = 16;
+/** Most descriptors one runtime query answers. */
+export const MAX_RUNTIME_DESCRIPTORS = 100;
+/** Longest description the descriptor projection carries. */
+export const MAX_RUNTIME_DESCRIPTION = 280;
+/** Runtime names: kind ids, descriptor ids, method names and tool ids. */
+const runtimeNameSchema = z
+    .string()
+    .min(1)
+    .max(256)
+    .regex(/^[A-Za-z0-9][A-Za-z0-9._/-]*$/);
+const runtimeDescriptorViewSchema = z.object({
+    id: z.string().min(1).max(256),
+    name: z.string(),
+    description: z.string().max(MAX_RUNTIME_DESCRIPTION).optional(),
+    enabled: z.boolean()
+});
+/** What one `runtimeQuery` answers, checked at the surface before it crosses. */
+export const appletRuntimeQueryViewSchema = z.object({
+    kind: z.string().min(1).max(256),
+    total: z.number().int().nonnegative(),
+    truncated: z.boolean(),
+    descriptors: z.array(runtimeDescriptorViewSchema).max(MAX_RUNTIME_DESCRIPTORS)
+});
+export function createAppletRootSurface(input) {
+    const { instanceId, manifest, backend } = input;
+    function bind(descriptorId) {
+        const store = manifest.storage.find((candidate) => candidate.id === descriptorId);
+        if (!store) {
+            // Unreachable when the gate ran, and a refusal rather than a throw of
+            // `undefined` if this surface is ever reached another way. Defence in
+            // depth on the one object an untrusted peer can call — and the ONLY
+            // control on a host that runs no gate, such as `vibes applet serve`.
+            throw new CapabilityError(`Store "${descriptorId}" is not declared by this release.`, 'NOT_FOUND', {
+                reason: 'applet-store-undeclared',
+                details: { store: descriptorId }
+            });
+        }
+        return {
+            descriptorId: store.id,
+            scope: store.scope,
+            authority: store.authority,
+            instanceId
+        };
+    }
+    /** NaN and Infinity are not limits. `Math.trunc(NaN)` is NaN, and a NaN limit
+     * reaches the store as an empty page — the applet is told it has no data. */
+    function clampLimit(value) {
+        const requested = Number(value);
+        if (!Number.isFinite(requested))
+            return MAX_LIST_LIMIT;
+        return Math.min(Math.max(Math.trunc(requested), 1), MAX_LIST_LIMIT);
+    }
+    function checkKey(key) {
+        const checked = storageKeySchema.safeParse(key);
+        if (checked.success)
+            return checked.data;
+        throw new CapabilityError(`Storage key must be 1..${MAX_KEY_LENGTH} characters.`, 'INVALID_INPUT', {
+            reason: 'applet-store-key-invalid',
+            cause: checked.error
+        });
+    }
+    /** A runtime name (kind, descriptor id, method or tool id), or the given typed refusal. */
+    function checkRuntimeName(value, reason) {
+        const checked = runtimeNameSchema.safeParse(value);
+        if (checked.success)
+            return checked.data;
+        throw new CapabilityError('Runtime names are 1..256 characters of [A-Za-z0-9._/-].', 'INVALID_INPUT', {
+            reason,
+            cause: checked.error
+        });
+    }
+    /** Positional runtime-call arguments: bounded in count; each bounded JSON or a callback (passed through). */
+    function checkRuntimeArgs(args) {
+        if (args === undefined)
+            return [];
+        const list = z.array(z.unknown()).safeParse(args);
+        if (!list.success) {
+            throw new CapabilityError('Runtime arguments must be an array.', 'INVALID_INPUT', {
+                reason: 'applet-runtime-call-invalid',
+                cause: list.error
+            });
+        }
+        if (list.data.length > MAX_RUNTIME_ARGS) {
+            throw new CapabilityError(`Runtime arguments must be at most ${MAX_RUNTIME_ARGS} values.`, 'INVALID_INPUT', {
+                reason: 'applet-runtime-call-invalid'
+            });
+        }
+        return list.data.map((arg) => {
+            const callback = appletRuntimeCallbackSchema.safeParse(arg);
+            return callback.success ? callback.data : boundAppletValue(arg, 'value');
+        });
+    }
+    /** This host binds no runtime handle to the surface; the applet cannot reach a runtime here. */
+    function runtimeUnavailable() {
+        return new CapabilityError('This host binds no runtime handle to the applet surface.', 'UNAVAILABLE', {
+            reason: 'applet-runtime-unavailable',
+            retryable: false
+        });
+    }
+    // Every method is `async` so EVERY failure is a rejection.
+    //
+    // `bind` and `checkKey` throw, and with a non-async arrow they threw
+    // SYNCHRONOUSLY — so one method had two failure modes and a caller had to
+    // handle both. Over RPC that difference is invisible until it is not, and this
+    // is the one object an untrusted peer calls.
+    return {
+        storageGet: async (descriptorId, key) => backend.storageGet(bind(descriptorId), checkKey(key)),
+        storageList: async (descriptorId, query) => {
+            // Clamped, not trusted. A caller asking for a million rows is asking
+            // the host to do a million rows of work.
+            const listQuery = {};
+            if (query?.limit !== undefined)
+                listQuery.limit = clampLimit(query.limit);
+            if (query?.cursor !== undefined)
+                listQuery.cursor = String(query.cursor).slice(0, 512);
+            return backend.storageList(bind(descriptorId), listQuery);
+        },
+        storagePut: async (descriptorId, key, value) => backend.storagePut(bind(descriptorId), checkKey(key), boundAppletValue(value, 'value')),
+        storageDelete: async (descriptorId, key) => backend.storageDelete(bind(descriptorId), checkKey(key)),
+        assetUrl: async (assetId) => {
+            const asset = manifest.assets.find((candidate) => candidate.assetId === assetId);
+            if (!asset) {
+                throw new CapabilityError(`Asset "${assetId}" is not referenced by this release.`, 'NOT_FOUND', {
+                    reason: 'applet-asset-unreferenced',
+                    details: { asset: assetId }
+                });
+            }
+            // The pinned revision and digest come from the MANIFEST, so an applet
+            // cannot ask for a different version of an asset it legitimately
+            // references.
+            return backend.assetUrl(asset.assetId, asset.revision, asset.digest);
+        },
+        // The capability answer is bounded like every other data answer: values in, answers out.
+        capabilityInvoke: async (capability, value) => boundAppletValue(await backend.capabilityInvoke(capability, boundAppletValue(value ?? {}, 'value')), 'answer'),
+        runtimeQuery: async (kind) => {
+            const backendQuery = backend.runtimeQuery;
+            if (!backendQuery)
+                throw runtimeUnavailable();
+            const checked = checkRuntimeName(kind, 'applet-runtime-query-invalid');
+            const view = appletRuntimeQueryViewSchema.safeParse(await backendQuery(checked));
+            if (!view.success) {
+                throw new CapabilityError('The runtime query answered a shape this surface cannot carry.', 'INVALID_INPUT', {
+                    reason: 'applet-runtime-query-invalid',
+                    details: { violations: appletValueViolations(view.error) },
+                    cause: view.error
+                });
+            }
+            return view.data;
+        },
+        // Variadic: a callback crosses runtime-rpc as a ref only as a TOP-LEVEL argument (one nested in an array is data).
+        runtimeCall: async (kind, id, method, ...args) => {
+            const backendCall = backend.runtimeCall;
+            if (!backendCall)
+                throw runtimeUnavailable();
+            const checkedKind = checkRuntimeName(kind, 'applet-runtime-call-invalid');
+            const checkedId = checkRuntimeName(id, 'applet-runtime-call-invalid');
+            const checkedMethod = checkRuntimeName(method, 'applet-runtime-call-invalid');
+            const checkedArgs = checkRuntimeArgs(args);
+            return parseAppletRuntimeHostValue(await backendCall(checkedKind, checkedId, checkedMethod, checkedArgs));
+        },
+        runtimeToolCall: async (toolId, input) => {
+            const backendToolCall = backend.runtimeToolCall;
+            if (!backendToolCall)
+                throw runtimeUnavailable();
+            const checked = checkRuntimeName(toolId, 'applet-runtime-tool-invalid');
+            return boundAppletValue(await backendToolCall(checked, boundAppletValue(input ?? {}, 'value')), 'answer');
+        }
+    };
+}
+//# sourceMappingURL=applet-root-surface.js.map

package/dist/applet-root-surface.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"applet-root-surface.js","sourceRoot":"","sources":["../src/applet-root-surface.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAGrE,OAAO,EAAE,qBAAqB,EAAE,gBAAgB,EAAE,2BAA2B,EAAE,MAAM,yBAAyB,CAAC;AAiF/G;;;;GAIG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,MAAM,CAAC,MAAM,CAAC;IACxD,YAAY;IACZ,aAAa;IACb,YAAY;IACZ,eAAe;IACf,UAAU;IACV,kBAAkB;IAClB,cAAc;IACd,aAAa;IACb,iBAAiB;CACR,CAAgD,CAAC;AAE3D,oGAAoG;AACpG,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAwB,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,YAAY,QAAQ,CAAC,CAAC;AACjH,6GAA6G;AAC7G,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,2BAA2B,EAAE,sBAAsB,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;AAEtH,6EAA6E;AAC7E,MAAM,cAAc,GAAG,GAAG,CAAC;AAC3B,sDAAsD;AACtD,MAAM,cAAc,GAAG,GAAG,CAAC;AAC3B,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;AAC/D,wEAAwE;AACxE,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAC5B,kDAAkD;AAClD,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAC3C,6DAA6D;AAC7D,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAC3C,0EAA0E;AAC1E,MAAM,iBAAiB,GAAG,CAAC;KACzB,MAAM,EAAE;KACR,GAAG,CAAC,CAAC,CAAC;KACN,GAAG,CAAC,GAAG,CAAC;KACR,KAAK,CAAC,+BAA+B,CAAC,CAAC;AAEzC,MAAM,2BAA2B,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC9B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;IAChB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,QAAQ,EAAE;IAC/D,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;CACpB,CAAC,CAAC;AAEH,iFAAiF;AACjF,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAC,MAAM,CAAC;IACpD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAChC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACrC,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE;IACtB,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC,GAAG,CAAC,uBAAuB,CAAC;CAC9E,CAAC,CAAC;AAEH,MAAM,UAAU,uBAAuB,CAAC,KAIvC;IACA,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IAEhD,SAAS,IAAI,CAAC,YAAoB;QACjC,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,YAAY,CAAC,CAAC;QAClF,IAAI,CAAC,KAAK,EAAE,CAAC;YACZ,sEAAsE;YACtE,sEAAsE;YACtE,oEAAoE;YACpE,qEAAqE;YACrE,MAAM,IAAI,eAAe,CAAC,UAAU,YAAY,oCAAoC,EAAE,WAAW,EAAE;gBAClG,MAAM,EAAE,yBAAyB;gBACjC,OAAO,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE;aAChC,CAAC,CAAC;QACJ,CAAC;QACD,OAAO;YACN,YAAY,EAAE,KAAK,CAAC,EAAE;YACtB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,UAAU;SACV,CAAC;IACH,CAAC;IAED;iFAC6E;IAC7E,SAAS,UAAU,CAAC,KAAa;QAChC,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;QAChC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;YAAE,OAAO,cAAc,CAAC;QACvD,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;IACrE,CAAC;IAED,SAAS,QAAQ,CAAC,GAAW;QAC5B,MAAM,OAAO,GAAG,gBAAgB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QAChD,IAAI,OAAO,CAAC,OAAO;YAAE,OAAO,OAAO,CAAC,IAAI,CAAC;QACzC,MAAM,IAAI,eAAe,CAAC,0BAA0B,cAAc,cAAc,EAAE,eAAe,EAAE;YAClG,MAAM,EAAE,0BAA0B;YAClC,KAAK,EAAE,OAAO,CAAC,KAAK;SACpB,CAAC,CAAC;IACJ,CAAC;IAED,2FAA2F;IAC3F,SAAS,gBAAgB,CAAC,KAAa,EAAE,MAAc;QACtD,MAAM,OAAO,GAAG,iBAAiB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACnD,IAAI,OAAO,CAAC,OAAO;YAAE,OAAO,OAAO,CAAC,IAAI,CAAC;QACzC,MAAM,IAAI,eAAe,CAAC,yDAAyD,EAAE,eAAe,EAAE;YACrG,MAAM;YACN,KAAK,EAAE,OAAO,CAAC,KAAK;SACpB,CAAC,CAAC;IACJ,CAAC;IAED,6GAA6G;IAC7G,SAAS,gBAAgB,CAAC,IAA6C;QACtE,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YACnB,MAAM,IAAI,eAAe,CAAC,qCAAqC,EAAE,eAAe,EAAE;gBACjF,MAAM,EAAE,6BAA6B;gBACrC,KAAK,EAAE,IAAI,CAAC,KAAK;aACjB,CAAC,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;YACzC,MAAM,IAAI,eAAe,CAAC,qCAAqC,gBAAgB,UAAU,EAAE,eAAe,EAAE;gBAC3G,MAAM,EAAE,6BAA6B;aACrC,CAAC,CAAC;QACJ,CAAC;QACD,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;YAC5B,MAAM,QAAQ,GAAG,2BAA2B,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;YAC5D,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAC1E,CAAC,CAAC,CAAC;IACJ,CAAC;IAED,gGAAgG;IAChG,SAAS,kBAAkB;QAC1B,OAAO,IAAI,eAAe,CAAC,0DAA0D,EAAE,aAAa,EAAE;YACrG,MAAM,EAAE,4BAA4B;YACpC,SAAS,EAAE,KAAK;SAChB,CAAC,CAAC;IACJ,CAAC;IAED,2DAA2D;IAC3D,EAAE;IACF,qEAAqE;IACrE,0EAA0E;IAC1E,+EAA+E;IAC/E,6CAA6C;IAC7C,OAAO;QACN,UAAU,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC9F,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,EAAE;YAC1C,qEAAqE;YACrE,yCAAyC;YACzC,MAAM,SAAS,GAAuD,EAAE,CAAC;YACzE,IAAI,KAAK,EAAE,KAAK,KAAK,SAAS;gBAAE,SAAS,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YAC1E,IAAI,KAAK,EAAE,MAAM,KAAK,SAAS;gBAAE,SAAS,CAAC,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;YACvF,OAAO,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,SAAS,CAAC,CAAC;QAC3D,CAAC;QACD,UAAU,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,CAC9C,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,gBAAgB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QACxF,aAAa,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,EAAE,EAAE,CAC1C,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;QACzD,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;YAC3B,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;YACjF,IAAI,CAAC,KAAK,EAAE,CAAC;gBACZ,MAAM,IAAI,eAAe,CAAC,UAAU,OAAO,sCAAsC,EAAE,WAAW,EAAE;oBAC/F,MAAM,EAAE,2BAA2B;oBACnC,OAAO,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE;iBAC3B,CAAC,CAAC;YACJ,CAAC;YACD,sEAAsE;YACtE,iEAAiE;YACjE,cAAc;YACd,OAAO,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACtE,CAAC;QACD,yFAAyF;QACzF,gBAAgB,EAAE,KAAK,EAAE,UAAU,EAAE,KAAK,EAAE,EAAE,CAC7C,gBAAgB,CAAC,MAAM,OAAO,CAAC,gBAAgB,CAAC,UAAU,EAAE,gBAAgB,CAAC,KAAK,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC,EAAE,QAAQ,CAAC;QAC/G,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE;YAC5B,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,CAAC;YAC1C,IAAI,CAAC,YAAY;gBAAE,MAAM,kBAAkB,EAAE,CAAC;YAC9C,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,EAAE,8BAA8B,CAAC,CAAC;YACvE,MAAM,IAAI,GAAG,4BAA4B,CAAC,SAAS,CAAC,MAAM,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;YACjF,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACnB,MAAM,IAAI,eAAe,CACxB,+DAA+D,EAC/D,eAAe,EACf;oBACC,MAAM,EAAE,8BAA8B;oBACtC,OAAO,EAAE,EAAE,UAAU,EAAE,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;oBAC1D,KAAK,EAAE,IAAI,CAAC,KAAK;iBACjB,CACD,CAAC;YACH,CAAC;YACD,OAAO,IAAI,CAAC,IAAI,CAAC;QAClB,CAAC;QACD,mHAAmH;QACnH,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,EAAE;YAChD,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;YACxC,IAAI,CAAC,WAAW;gBAAE,MAAM,kBAAkB,EAAE,CAAC;YAC7C,MAAM,WAAW,GAAG,gBAAgB,CAAC,IAAI,EAAE,6BAA6B,CAAC,CAAC;YAC1E,MAAM,SAAS,GAAG,gBAAgB,CAAC,EAAE,EAAE,6BAA6B,CAAC,CAAC;YACtE,MAAM,aAAa,GAAG,gBAAgB,CAAC,MAAM,EAAE,6BAA6B,CAAC,CAAC;YAC9E,MAAM,WAAW,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;YAC3C,OAAO,2BAA2B,CAAC,MAAM,WAAW,CAAC,WAAW,EAAE,SAAS,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC;QAC3G,CAAC;QACD,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE;YACxC,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,CAAC;YAChD,IAAI,CAAC,eAAe;gBAAE,MAAM,kBAAkB,EAAE,CAAC;YACjD,MAAM,OAAO,GAAG,gBAAgB,CAAC,MAAM,EAAE,6BAA6B,CAAC,CAAC;YACxE,OAAO,gBAAgB,CAAC,MAAM,eAAe,CAAC,OAAO,EAAE,gBAAgB,CAAC,KAAK,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;QAC3G,CAAC;KACD,CAAC;AACH,CAAC"}

package/dist/applet-value-bound.d.ts

@@ -0,0 +1,24 @@
+/**
+ * The one rule that bounds a value at the applet boundary, in both directions.
+ *
+ * Package-internal: not re-exported from `src/index.ts` and not a package
+ * export. The root surface, the local serve backend and the capability
+ * dispatcher all call it, so a refusal reads the same wherever it is raised.
+ *
+ * The refusal is value-free. Bound messages name only limits and counts, so
+ * they are copied into the message and `details.violations`. Issue PATHS are
+ * keys from the value itself, so they never leave this module.
+ */
+import * as z from 'zod/v4';
+import type { JsonValue } from '@vibesdotdev/shared/types';
+import { type AppletRuntimeAnswer, type AppletRuntimeHostValue } from './applet-root-surface.ts';
+/** The bound messages of a failed parse, messages only: an issue path is value keys and never crosses. */
+export declare function appletValueViolations(error: z.ZodError): string[];
+/**
+ * A value in (`'value'`) or an answer out (`'answer'`), as bounded JSON, or the typed
+ * `INVALID_INPUT` `applet-value-unbounded` refusal naming the first violated bound.
+ */
+export declare function boundAppletValue(value: unknown, subject: 'value' | 'answer'): JsonValue;
+/** A host's raw runtime answer: a function crosses back as a ref; anything else is a bounded answer or refused. */
+export declare function parseAppletRuntimeHostValue(value: AppletRuntimeHostValue): AppletRuntimeAnswer;
+//# sourceMappingURL=applet-value-bound.d.ts.map

package/dist/applet-value-bound.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"applet-value-bound.d.ts","sourceRoot":"","sources":["../src/applet-value-bound.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAG5B,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAC3D,OAAO,EAEN,KAAK,mBAAmB,EACxB,KAAK,sBAAsB,EAC3B,MAAM,0BAA0B,CAAC;AAQlC,0GAA0G;AAC1G,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,CAAC,CAAC,QAAQ,GAAG,MAAM,EAAE,CAEjE;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,GAAG,QAAQ,GAAG,SAAS,CAWvF;AAED,mHAAmH;AACnH,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,sBAAsB,GAAG,mBAAmB,CAG9F"}

package/dist/applet-value-bound.js

@@ -0,0 +1,46 @@
+/**
+ * The one rule that bounds a value at the applet boundary, in both directions.
+ *
+ * Package-internal: not re-exported from `src/index.ts` and not a package
+ * export. The root surface, the local serve backend and the capability
+ * dispatcher all call it, so a refusal reads the same wherever it is raised.
+ *
+ * The refusal is value-free. Bound messages name only limits and counts, so
+ * they are copied into the message and `details.violations`. Issue PATHS are
+ * keys from the value itself, so they never leave this module.
+ */
+import * as z from 'zod/v4';
+import { CapabilityError } from '@vibesdotdev/kernel';
+import { boundedJsonValueSchema } from '@vibesdotdev/shared/schemas';
+import { appletRuntimeCallbackSchema } from "./applet-root-surface.js";
+/** Most bound messages one refusal reports. */
+const MAX_REPORTED_VIOLATIONS = 8;
+/** Bounded JSON at the applet boundary: nothing (a void answer, an omitted value) crosses as `null`. */
+const appletBoundedValueSchema = z.preprocess((value) => value ?? null, boundedJsonValueSchema);
+/** The bound messages of a failed parse, messages only: an issue path is value keys and never crosses. */
+export function appletValueViolations(error) {
+    return error.issues.slice(0, MAX_REPORTED_VIOLATIONS).map((issue) => issue.message);
+}
+/**
+ * A value in (`'value'`) or an answer out (`'answer'`), as bounded JSON, or the typed
+ * `INVALID_INPUT` `applet-value-unbounded` refusal naming the first violated bound.
+ */
+export function boundAppletValue(value, subject) {
+    const bounded = appletBoundedValueSchema.safeParse(value);
+    if (bounded.success)
+        return bounded.data;
+    const violations = appletValueViolations(bounded.error);
+    const more = bounded.error.issues.length > 1 ? ` (+${bounded.error.issues.length - 1} more)` : '';
+    const prefix = subject === 'answer' ? 'Runtime answer refused' : 'Value refused';
+    throw new CapabilityError(`${prefix}: ${violations[0] ?? 'not bounded JSON'}${more}`, 'INVALID_INPUT', {
+        reason: 'applet-value-unbounded',
+        details: { violations },
+        cause: bounded.error
+    });
+}
+/** A host's raw runtime answer: a function crosses back as a ref; anything else is a bounded answer or refused. */
+export function parseAppletRuntimeHostValue(value) {
+    const callback = appletRuntimeCallbackSchema.safeParse(value);
+    return callback.success ? callback.data : boundAppletValue(value, 'answer');
+}
+//# sourceMappingURL=applet-value-bound.js.map

package/dist/applet-value-bound.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"applet-value-bound.js","sourceRoot":"","sources":["../src/applet-value-bound.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAErE,OAAO,EACN,2BAA2B,EAG3B,MAAM,0BAA0B,CAAC;AAElC,+CAA+C;AAC/C,MAAM,uBAAuB,GAAG,CAAC,CAAC;AAElC,wGAAwG;AACxG,MAAM,wBAAwB,GAAG,CAAC,CAAC,UAAU,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,IAAI,IAAI,EAAE,sBAAsB,CAAC,CAAC;AAEhG,0GAA0G;AAC1G,MAAM,UAAU,qBAAqB,CAAC,KAAiB;IACtD,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,uBAAuB,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;AACrF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAc,EAAE,OAA2B;IAC3E,MAAM,OAAO,GAAG,wBAAwB,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC1D,IAAI,OAAO,CAAC,OAAO;QAAE,OAAO,OAAO,CAAC,IAAI,CAAC;IACzC,MAAM,UAAU,GAAG,qBAAqB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACxD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IAClG,MAAM,MAAM,GAAG,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,eAAe,CAAC;IACjF,MAAM,IAAI,eAAe,CAAC,GAAG,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,kBAAkB,GAAG,IAAI,EAAE,EAAE,eAAe,EAAE;QACtG,MAAM,EAAE,wBAAwB;QAChC,OAAO,EAAE,EAAE,UAAU,EAAE;QACvB,KAAK,EAAE,OAAO,CAAC,KAAK;KACpB,CAAC,CAAC;AACJ,CAAC;AAED,mHAAmH;AACnH,MAAM,UAAU,2BAA2B,CAAC,KAA6B;IACxE,MAAM,QAAQ,GAAG,2BAA2B,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IAC9D,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;AAC7E,CAAC"}

package/dist/applets.cloud.plugin.d.ts

@@ -0,0 +1,4 @@
+/** Executable applet tool; compose alongside the universal Applets descriptors. */
+declare const plugin: import("@vibesdotdev/kernel").RuntimePlugin;
+export default plugin;
+//# sourceMappingURL=applets.cloud.plugin.d.ts.map

package/dist/applets.cloud.plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"applets.cloud.plugin.d.ts","sourceRoot":"","sources":["../src/applets.cloud.plugin.ts"],"names":[],"mappings":"AAEA,mFAAmF;AACnF,QAAA,MAAM,MAAM,6CAMV,CAAC;AAEH,eAAe,MAAM,CAAC"}

package/dist/applets.cloud.plugin.js

@@ -0,0 +1,11 @@
+import { createRuntimePlugin, loader } from '@vibesdotdev/kernel';
+/** Executable applet tool; compose alongside the universal Applets descriptors. */
+const plugin = createRuntimePlugin({
+    id: 'applets.cloud',
+    name: 'Applets cloud tool',
+    loaders: [
+        loader('applet', { kind: 'tools/tool', scope: 'cloud' }, () => import("./tools/applet.impl.js"))
+    ]
+});
+export default plugin;
+//# sourceMappingURL=applets.cloud.plugin.js.map

package/dist/applets.cloud.plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"applets.cloud.plugin.js","sourceRoot":"","sources":["../src/applets.cloud.plugin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAElE,mFAAmF;AACnF,MAAM,MAAM,GAAG,mBAAmB,CAAC;IAClC,EAAE,EAAE,eAAe;IACnB,IAAI,EAAE,oBAAoB;IAC1B,OAAO,EAAE;QACR,MAAM,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC;KAChG;CACD,CAAC,CAAC;AAEH,eAAe,MAAM,CAAC"}

package/dist/applets.consumer.plugin.d.ts

@@ -0,0 +1,4 @@
+/** Executable applet tool; compose alongside the universal Applets descriptors. */
+declare const plugin: import("@vibesdotdev/kernel").RuntimePlugin;
+export default plugin;
+//# sourceMappingURL=applets.consumer.plugin.d.ts.map

package/dist/applets.consumer.plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"applets.consumer.plugin.d.ts","sourceRoot":"","sources":["../src/applets.consumer.plugin.ts"],"names":[],"mappings":"AAEA,mFAAmF;AACnF,QAAA,MAAM,MAAM,6CAMV,CAAC;AAEH,eAAe,MAAM,CAAC"}

package/dist/applets.consumer.plugin.js

@@ -0,0 +1,11 @@
+import { createRuntimePlugin, loader } from '@vibesdotdev/kernel';
+/** Executable applet tool; compose alongside the universal Applets descriptors. */
+const plugin = createRuntimePlugin({
+    id: 'applets.consumer',
+    name: 'Applets consumer tool',
+    loaders: [
+        loader('applet', { kind: 'tools/tool', scope: 'consumer' }, () => import("./tools/applet.impl.js"))
+    ]
+});
+export default plugin;
+//# sourceMappingURL=applets.consumer.plugin.js.map

package/dist/applets.consumer.plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"applets.consumer.plugin.js","sourceRoot":"","sources":["../src/applets.consumer.plugin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAElE,mFAAmF;AACnF,MAAM,MAAM,GAAG,mBAAmB,CAAC;IAClC,EAAE,EAAE,kBAAkB;IACtB,IAAI,EAAE,uBAAuB;IAC7B,OAAO,EAAE;QACR,MAAM,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC;KACnG;CACD,CAAC,CAAC;AAEH,eAAe,MAAM,CAAC"}

package/dist/applets.plugin.d.ts

@@ -0,0 +1,3 @@
+export declare const appletsPlugin: import("@vibesdotdev/kernel").RuntimePlugin;
+export default appletsPlugin;
+//# sourceMappingURL=applets.plugin.d.ts.map

package/dist/applets.plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"applets.plugin.d.ts","sourceRoot":"","sources":["../src/applets.plugin.ts"],"names":[],"mappings":"AAYA,eAAO,MAAM,aAAa,6CAuBxB,CAAC;AAEH,eAAe,aAAa,CAAC"}

package/dist/applets.plugin.js

@@ -0,0 +1,30 @@
+import { appletCapabilityKind } from "./capabilities/capability.kind.js";
+import { createRuntimePlugin, loader } from '@vibesdotdev/kernel';
+import { appletStorageRecordDescriptors } from "./storage/records.js";
+import { appletsClientDescriptor } from "./client/contract.js";
+import appletDescriptor from "./tools/applet.descriptor.js";
+import { appletTemplateKind } from "./templates/template.kind.js";
+import appletsDocsDescriptor from "./docs/applets.docs.descriptor.js";
+import { appletsRepositoryContextDescriptor } from "./client/repository.context.js";
+import appletsConfigDescriptor from "./config/applets.config.descriptor.js";
+export const appletsPlugin = createRuntimePlugin({
+    id: 'applets',
+    name: 'Applets',
+    description: 'Applet instance, execution, state, event, and provenance storage; the applets runtime client; and the agent-facing applet tool.',
+    dependencies: ['context', 'runtime-client', 'storage'],
+    // Register domain kinds; each host composes its own scoped implementations.
+    kinds: [appletTemplateKind, appletCapabilityKind],
+    descriptors: [
+        ...appletStorageRecordDescriptors,
+        appletsRepositoryContextDescriptor,
+        appletsClientDescriptor,
+        appletDescriptor,
+        appletsDocsDescriptor,
+        appletsConfigDescriptor
+    ],
+    loaders: [
+        loader(appletsClientDescriptor.id, { kind: 'runtime/client' }, () => import("./client/runtime-client.js"))
+    ]
+});
+export default appletsPlugin;
+//# sourceMappingURL=applets.plugin.js.map

package/dist/applets.plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"applets.plugin.js","sourceRoot":"","sources":["../src/applets.plugin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,mCAAmC,CAAC;AACzE,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,8BAA8B,EAAE,MAAM,sBAAsB,CAAC;AACtE,OAAO,EAAE,uBAAuB,EAAE,MAAM,sBAAsB,CAAC;AAC/D,OAAO,gBAAgB,MAAM,8BAA8B,CAAC;AAC5D,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,qBAAqB,MAAM,mCAAmC,CAAC;AACtE,OAAO,EACN,kCAAkC,EAClC,MAAM,gCAAgC,CAAC;AACxC,OAAO,uBAAuB,MAAM,uCAAuC,CAAC;AAE5E,MAAM,CAAC,MAAM,aAAa,GAAG,mBAAmB,CAAC;IAChD,EAAE,EAAE,SAAS;IACb,IAAI,EAAE,SAAS;IACf,WAAW,EACV,iIAAiI;IAClI,YAAY,EAAE,CAAC,SAAS,EAAE,gBAAgB,EAAE,SAAS,CAAC;IACtD,4EAA4E;IAC5E,KAAK,EAAE,CAAC,kBAAkB,EAAE,oBAAoB,CAAC;IACjD,WAAW,EAAE;QACZ,GAAG,8BAA8B;QACjC,kCAAkC;QAClC,uBAAuB;QACvB,gBAAgB;QAChB,qBAAqB;QACrB,uBAAuB;KACvB;IACD,OAAO,EAAE;QACR,MAAM,CACL,uBAAuB,CAAC,EAAE,EAC1B,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAC1B,GAAG,EAAE,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAC1C;KACD;CACD,CAAC,CAAC;AAEH,eAAe,aAAa,CAAC"}

package/dist/authorization.d.ts

@@ -0,0 +1,87 @@
+/**
+ * Invoke-time authorization for a contributed implementation.
+ *
+ * This is the load-bearing capability check, and the only one that is not
+ * advisory. Two earlier designs were wrong in ways worth naming, because the
+ * shape of this function is a direct response to both:
+ *
+ * 1. `requires ⊆ manifest.capabilities` is VACUOUS as a security control. Both
+ *    sides are author-authored in one file, so an author writes the same
+ *    escalation twice and passes. It is a coherence check, nothing more.
+ *
+ * 2. Deregistering shim loaders on revoke is NOT a boundary. Registration is a
+ *    cache; a long-lived runtime keeps its shims until something restarts it.
+ *    Authority must therefore be re-derived from live state on EVERY dispatch,
+ *    which is what this function does. Nothing here may be memoized.
+ *
+ * Consent is a one-time human act. Enforcement is per-call and never cached.
+ */
+import type { AppletCapabilityGrant, AppletLaunchLease } from './schemas/grants.ts';
+import type { AppletSubscription } from './schemas/subscription.ts';
+import type { ComponentReleaseRef } from './schemas/component-release-ref.ts';
+export type AppletAuthorizationDenial = 'subscription-revoked' | 'subscription-paused' | 'subscription-needs-consent' | 'grant-mismatched' | 'grant-instance-mismatch' | 'lease-required' | 'grant-revoked' | 'grant-release-mismatch' | 'release-mismatch' | 'lease-revoked' | 'lease-expired' | 'lease-mismatched' | 'lease-run-mismatch' | 'capability-not-granted';
+export type AppletAuthorizationDecision = {
+    allowed: true;
+} | {
+    allowed: false;
+    reason: AppletAuthorizationDenial;
+    detail: string;
+};
+export interface AppletAuthorizationInput {
+    subscription: AppletSubscription;
+    grant: AppletCapabilityGrant;
+    /** Present for a run-scoped dispatch; omitted for a subscription-scoped one. */
+    lease?: AppletLaunchLease;
+    /**
+     * Whether a live launch lease is mandatory for this dispatch.
+     *
+     * An optional lease is a hole if the caller decides: forgetting to pass one
+     * silently skips expiry and revocation.
+     *
+     * DEFAULTS CLOSED. A dispatch requires a live lease unless the caller
+     * explicitly proves it is subscription-scoped by passing `false`. Keying this
+     * off a surface enum meant any new surface value silently lost lease
+     * enforcement with no test failing.
+     */
+    leaseRequired?: boolean;
+    /** The release the dispatch claims to be running. */
+    release: ComponentReleaseRef;
+    /** Capability tags the contributed implementation declared. */
+    requires: readonly string[];
+    /**
+     * The run this dispatch belongs to, as claimed INDEPENDENTLY of the lease.
+     *
+     * Only meaningful when the caller knows its run from another source. The shim
+     * does not: it reads the lease and would be comparing the lease to itself, so
+     * it deliberately passes nothing rather than performing a check that can
+     * never deny. A surface that tracks runs separately should pass it.
+     */
+    runId?: string;
+    now: Date;
+}
+/**
+ * Decide whether one contributed implementation may run right now.
+ *
+ * Fails closed on every branch: an unexpected state is a denial, never a
+ * fallthrough to allowed.
+ */
+export declare function authorizeAppletContribution(input: AppletAuthorizationInput): AppletAuthorizationDecision;
+/**
+ * Whether a contribution should be REGISTERED at all for this grant.
+ *
+ * A capability marked `required: false` may be declined at consent. A tool that
+ * needs a declined capability must be absent from `vibes tools list` rather than
+ * present and always throwing — a listed tool that never works is worse than one
+ * that was never offered.
+ */
+export declare function isContributionRegistrable(requires: readonly string[], grantedCapabilities: readonly string[]): boolean;
+/** Consent cannot promise authority for which the trusted host has no implementation. */
+export declare function assertSupportedAppletCapabilities(requested: readonly string[], supported: Iterable<string>): void;
+/** Derive consent from pinned metadata; legacy releases without a definition treat every tag as required. */
+export declare function selectSupportedAppletCapabilities(tags: readonly string[], definition: {
+    capabilities: readonly {
+        tag: string;
+        required?: boolean;
+    }[];
+} | null, supported: Iterable<string>): string[];
+//# sourceMappingURL=authorization.d.ts.map

package/dist/authorization.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authorization.d.ts","sourceRoot":"","sources":["../src/authorization.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,KAAK,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AACpF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AACpE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oCAAoC,CAAC;AAE9E,MAAM,MAAM,yBAAyB,GAClC,sBAAsB,GACtB,qBAAqB,GACrB,4BAA4B,GAC5B,kBAAkB,GAClB,yBAAyB,GACzB,gBAAgB,GAChB,eAAe,GACf,wBAAwB,GACxB,kBAAkB,GAClB,eAAe,GACf,eAAe,GACf,kBAAkB,GAClB,oBAAoB,GACpB,wBAAwB,CAAC;AAE5B,MAAM,MAAM,2BAA2B,GACtC;IAAE,OAAO,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,yBAAyB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE3F,MAAM,WAAW,wBAAwB;IACxC,YAAY,EAAE,kBAAkB,CAAC;IACjC,KAAK,EAAE,qBAAqB,CAAC;IAC7B,gFAAgF;IAChF,KAAK,CAAC,EAAE,iBAAiB,CAAC;IAC1B;;;;;;;;;;OAUG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,qDAAqD;IACrD,OAAO,EAAE,mBAAmB,CAAC;IAC7B,+DAA+D;IAC/D,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5B;;;;;;;OAOG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,GAAG,EAAE,IAAI,CAAC;CACV;AAkBD;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAC1C,KAAK,EAAE,wBAAwB,GAC7B,2BAA2B,CAmI7B;AAED;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CACxC,QAAQ,EAAE,SAAS,MAAM,EAAE,EAC3B,mBAAmB,EAAE,SAAS,MAAM,EAAE,GACpC,OAAO,CAGT;AAED,yFAAyF;AACzF,wBAAgB,iCAAiC,CAChD,SAAS,EAAE,SAAS,MAAM,EAAE,EAC5B,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,GACzB,IAAI,CAMN;AAED,6GAA6G;AAC7G,wBAAgB,iCAAiC,CAChD,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,UAAU,EAAE;IAAE,YAAY,EAAE,SAAS;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,EAAE,CAAA;CAAE,GAAG,IAAI,EACnF,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,GACzB,MAAM,EAAE,CAqBV"}