@vibesdotdev/storage 0.0.2 → 1.0.0-rc.4

package/dist/schemas/tools/widgets.d.ts

@@ -0,0 +1,41 @@
+import * as z from 'zod/v4';
+export declare const ErrorContextSchema: z.ZodReadonly<z.ZodObject<{
+    error: z.ZodObject<{
+        name: z.ZodString;
+        code: z.ZodOptional<z.ZodString>;
+        reason: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>;
+}, z.core.$strip>>;
+export type ErrorContext = z.infer<typeof ErrorContextSchema>;
+export declare const StorageSvelteToolWidgetDescriptorSchema: z.ZodObject<{
+    id: z.ZodString;
+    kind: z.ZodLiteral<"tools/ui">;
+    name: z.ZodString;
+    description: z.ZodString;
+    surfaces: z.ZodTuple<[z.ZodLiteral<"web">], null>;
+    role: z.ZodLiteral<"widget">;
+    targetToolId: z.ZodString;
+    targetId: z.ZodString;
+    tags: z.ZodArray<z.ZodString>;
+    enabled: z.ZodLiteral<true>;
+    placement: z.ZodOptional<z.ZodEnum<{
+        inline: "inline";
+        top: "top";
+        bottom: "bottom";
+    }>>;
+}, z.core.$strip>;
+export type StorageSvelteToolWidgetDescriptor = z.infer<typeof StorageSvelteToolWidgetDescriptorSchema>;
+export declare const StorageSvelteToolWidgetDescriptorOptionsSchema: z.ZodObject<{
+    toolId: z.ZodString;
+    id: z.ZodOptional<z.ZodString>;
+    name: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+    placement: z.ZodOptional<z.ZodEnum<{
+        inline: "inline";
+        top: "top";
+        bottom: "bottom";
+    }>>;
+    tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+}, z.core.$strip>;
+export type StorageSvelteToolWidgetDescriptorOptions = z.infer<typeof StorageSvelteToolWidgetDescriptorOptionsSchema>;
+//# sourceMappingURL=widgets.d.ts.map

package/dist/schemas/tools/widgets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"widgets.d.ts","sourceRoot":"","sources":["../../../src/schemas/tools/widgets.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAG5B,eAAO,MAAM,kBAAkB;;;;;;kBAAyD,CAAC;AACzF,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAC9D,eAAO,MAAM,uCAAuC;;;;;;;;;;;;;;;;iBAIlD,CAAC;AACH,MAAM,MAAM,iCAAiC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uCAAuC,CAAC,CAAC;AACxG,eAAO,MAAM,8CAA8C;;;;;;;;;;;iBAGzD,CAAC;AACH,MAAM,MAAM,wCAAwC,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,8CAA8C,CAAC,CAAC"}

package/dist/schemas/tools/widgets.js

@@ -0,0 +1,13 @@
+import * as z from 'zod/v4';
+import { ValueFreeFailureSchema } from '@vibesdotdev/kernel';
+export const ErrorContextSchema = z.object({ error: ValueFreeFailureSchema }).readonly();
+export const StorageSvelteToolWidgetDescriptorSchema = z.object({
+    id: z.string(), kind: z.literal('tools/ui'), name: z.string(), description: z.string(),
+    surfaces: z.tuple([z.literal('web')]), role: z.literal('widget'), targetToolId: z.string(), targetId: z.string(),
+    tags: z.array(z.string()), enabled: z.literal(true), placement: z.enum(['inline', 'top', 'bottom']).optional()
+});
+export const StorageSvelteToolWidgetDescriptorOptionsSchema = z.object({
+    toolId: z.string(), id: z.string().optional(), name: z.string().optional(), description: z.string().optional(),
+    placement: z.enum(['inline', 'top', 'bottom']).optional(), tags: z.array(z.string()).optional()
+});
+//# sourceMappingURL=widgets.js.map

package/dist/schemas/tools/widgets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"widgets.js","sourceRoot":"","sources":["../../../src/schemas/tools/widgets.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAE7D,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;AAEzF,MAAM,CAAC,MAAM,uCAAuC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/D,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE;IACtF,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IAChH,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC9G,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,8CAA8C,GAAG,CAAC,CAAC,MAAM,CAAC;IACtE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9G,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC/F,CAAC,CAAC"}

package/dist/schemas/transform.d.ts

@@ -0,0 +1,32 @@
+import * as z from 'zod/v4';
+export declare const StorageTransformDescriptorSchema: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodOptional<z.ZodString>;
+    description: z.ZodOptional<z.ZodString>;
+    tags: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    hardware: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    enabled: z.ZodOptional<z.ZodBoolean>;
+    priority: z.ZodOptional<z.ZodNumber>;
+    capabilityId: z.ZodOptional<z.ZodString>;
+    requiredContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    optionalContext: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    config: z.ZodOptional<z.ZodUnknown>;
+    retention: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
+        maxAgeDays: z.ZodOptional<z.ZodNumber>;
+        maxEntries: z.ZodOptional<z.ZodNumber>;
+        maxBytes: z.ZodOptional<z.ZodNumber>;
+        cascadeFrom: z.ZodOptional<z.ZodString>;
+        ageField: z.ZodOptional<z.ZodString>;
+        reason: z.ZodString;
+        enforcedBy: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>]>>;
+    kind: z.ZodLiteral<"storage/transform">;
+    manifestId: z.ZodOptional<z.ZodString>;
+    direction: z.ZodDefault<z.ZodEnum<{
+        read: "read";
+        write: "write";
+        bidirectional: "bidirectional";
+    }>>;
+}, z.core.$strip>;
+export type StorageTransformDescriptor = z.infer<typeof StorageTransformDescriptorSchema>;
+//# sourceMappingURL=transform.d.ts.map

package/dist/schemas/transform.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transform.d.ts","sourceRoot":"","sources":["../../src/schemas/transform.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAG5B,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAgB3C,CAAC;AAEH,MAAM,MAAM,0BAA0B,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gCAAgC,CAAC,CAAC"}

package/dist/schemas/transform.js

@@ -0,0 +1,18 @@
+import * as z from 'zod/v4';
+import { RuntimeDescriptorSchema } from '@vibesdotdev/kernel/schemas/descriptor';
+export const StorageTransformDescriptorSchema = RuntimeDescriptorSchema.extend({
+    kind: z.literal('storage/transform'),
+    /**
+     * Optional binding to a `storage/manifest` descriptor — most transforms
+     * exist to serve one specific manifest. Helpers can verify that the
+     * caller's descriptor matches when resolving by id.
+     */
+    manifestId: z.string().optional(),
+    /**
+     * Direction this transform supports. `'bidirectional'` is the common
+     * case (DB row ↔ wire descriptor); `'read'` means the manifest is
+     * read-only over HTTP (no write-path mapping needed).
+     */
+    direction: z.enum(['read', 'write', 'bidirectional']).default('bidirectional')
+});
+//# sourceMappingURL=transform.js.map

package/dist/schemas/transform.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transform.js","sourceRoot":"","sources":["../../src/schemas/transform.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AAEjF,MAAM,CAAC,MAAM,gCAAgC,GAAG,uBAAuB,CAAC,MAAM,CAAC;IAC9E,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC;IAEpC;;;;OAIG;IACH,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAEjC;;;;OAIG;IACH,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,eAAe,CAAC,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC;CAC9E,CAAC,CAAC"}

package/dist/schemas/zod-schema-value.d.ts

@@ -0,0 +1,8 @@
+import * as z from 'zod/v4';
+/**
+ * A zod (v4) schema, recognized by zod's own structural marker (`_zod`), not
+ * `instanceof`: a schema built by another copy of zod in the install (the
+ * isolated store can hold several) is still a schema.
+ */
+export declare const ZodSchemaValueSchema: z.ZodCustom<z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>, z.ZodType<unknown, unknown, z.core.$ZodTypeInternals<unknown, unknown>>>;
+//# sourceMappingURL=zod-schema-value.d.ts.map

package/dist/schemas/zod-schema-value.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"zod-schema-value.d.ts","sourceRoot":"","sources":["../../src/schemas/zod-schema-value.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,+JAA6E,CAAC"}

package/dist/schemas/zod-schema-value.js

@@ -0,0 +1,8 @@
+import * as z from 'zod/v4';
+/**
+ * A zod (v4) schema, recognized by zod's own structural marker (`_zod`), not
+ * `instanceof`: a schema built by another copy of zod in the install (the
+ * isolated store can hold several) is still a schema.
+ */
+export const ZodSchemaValueSchema = z.custom((value) => value instanceof Object && '_zod' in value);
+//# sourceMappingURL=zod-schema-value.js.map

package/dist/schemas/zod-schema-value.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zod-schema-value.js","sourceRoot":"","sources":["../../src/schemas/zod-schema-value.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAE5B;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAY,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,YAAY,MAAM,IAAI,MAAM,IAAI,KAAK,CAAC,CAAC"}

package/dist/server/manifest-route.d.ts

@@ -11,9 +11,9 @@
  *      (`runtime.query('storage/manifest').withId(params.id)`).
  *   2. Verifies the descriptor declares the running app as its owner
  *      via `adapterConfig['storage.cloud-api'].ownerApp === appId`.
- *      Cross-app callers get a 403, which keeps the contract clean
- *      and prevents accidental data leaks from a borrower app being
- *      asked to serve data it doesn't own.
+ *      Cross-app callers get a 403 with a clear ownership message
+ *      (wrong app — not a tenant existence oracle). Per-loader
+ *      authorization failures return **404** fail-closed.
  *   3. Dispatches to a per-descriptor loader the app provides — one
  *      function per descriptor for `load` / `save` / `delete`.
  *      Loaders are the bridge between the owning app's local data
@@ -30,7 +30,12 @@
  * doesn't import `@sveltejs/kit`. Apps re-export the produced GET/PUT/
  * DELETE/HEAD from a `+server.ts` file.
  */
-import type { StorageManifestDescriptor } from '../schemas/manifest-descriptor.ts';
+import * as z from 'zod/v4';
+import { type VibesRuntime } from '@vibesdotdev/kernel';
+import { type StorageManifestDescriptor } from '../schemas/manifest-descriptor.ts';
+/** A request body or loader payload as it crosses the wire (a loader's `validate` parses it). */
+declare const ManifestRouteBodySchema: z.ZodUnknown;
+export type ManifestRouteBody = z.infer<typeof ManifestRouteBodySchema>;
 /**
  * Structural type matching SvelteKit's `RequestEvent`. Keeps this
  * module framework-agnostic. `locals` stays `unknown` because each
@@ -52,13 +57,14 @@ export interface ManifestLoader<T = unknown> {
     /** Optional delete path; omit to make the descriptor non-deletable over HTTP. */
     delete?: (event: ManifestRouteEvent) => Promise<void>;
     /**
-     * Optional per-request authorization. Return `false` to send 403.
-     * Default: allow all (the SvelteKit auth hooks have already gated
-     * unauthenticated traffic before this handler runs).
+     * Optional per-request authorization. Return `false` to send **404**
+     * (fail-closed — no existence oracle). Default: allow all (the
+     * SvelteKit auth hooks have already gated unauthenticated traffic
+     * before this handler runs).
      */
     authorize?: (event: ManifestRouteEvent, op: ManifestOperation) => boolean | Promise<boolean>;
     /** Optional zod schema for validating PUT bodies before the loader sees them. */
-    validate?: (data: unknown) => unknown;
+    validate?: (data: ManifestRouteBody) => ManifestRouteBody;
 }
 export interface ManifestRouteOptions {
     /** This app's id; must match `descriptor.adapterConfig['storage.cloud-api'].ownerApp`. */
@@ -67,10 +73,11 @@ export interface ManifestRouteOptions {
     loaders: Record<string, ManifestLoader>;
     /**
      * Resolver for the runtime descriptor lookup. Defaults to
-     * `(id) => getVibesRuntime().query('storage/manifest').withId(id).firstDescriptor()`.
+     * `(id, runtime) => runtime.query('storage/manifest').withId(id).firstDescriptor()`,
+     * where `runtime` is the handed `event.locals.runtime`.
      * Override for tests.
      */
-    resolveDescriptor?: (id: string) => Promise<StorageManifestDescriptor | null>;
+    resolveDescriptor?: (id: string, runtime: VibesRuntime) => Promise<StorageManifestDescriptor | null>;
     /**
      * Returns the expected `Authorization: Bearer <token>` for internal
      * cross-app calls. When the inbound request's bearer matches, loader
@@ -89,4 +96,5 @@ export type ManifestRouteHandlers = {
     HEAD: (event: ManifestRouteEvent) => Promise<Response>;
 };
 export declare function createManifestRouteHandler(opts: ManifestRouteOptions): ManifestRouteHandlers;
+export {};
 //# sourceMappingURL=manifest-route.d.ts.map

package/dist/server/manifest-route.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"manifest-route.d.ts","sourceRoot":"","sources":["../../src/server/manifest-route.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAGH,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAInF;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IAClC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACxC,OAAO,EAAE,OAAO,CAAC;IACjB,GAAG,EAAE,GAAG,CAAC;IACT,MAAM,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,OAAO,GAAG,QAAQ,CAAC;AAE5D,MAAM,WAAW,cAAc,CAAC,CAAC,GAAG,OAAO;IAC1C,6EAA6E;IAC7E,IAAI,EAAE,CAAC,KAAK,EAAE,kBAAkB,KAAK,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACvD,4EAA4E;IAC5E,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7D,iFAAiF;IACjF,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,kBAAkB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtD;;;;OAIG;IACH,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,kBAAkB,EAAE,EAAE,EAAE,iBAAiB,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7F,iFAAiF;IACjF,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,OAAO,CAAC;CACtC;AAED,MAAM,WAAW,oBAAoB;IACpC,0FAA0F;IAC1F,KAAK,EAAE,MAAM,CAAC;IACd,iEAAiE;IACjE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACxC;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,yBAAyB,GAAG,IAAI,CAAC,CAAC;IAC9E;;;;;;;;OAQG;IACH,oBAAoB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;CACvD;AAuBD,MAAM,MAAM,qBAAqB,GAAG;IACnC,GAAG,EAAE,CAAC,KAAK,EAAE,kBAAkB,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IACtD,GAAG,EAAE,CAAC,KAAK,EAAE,kBAAkB,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IACtD,MAAM,EAAE,CAAC,KAAK,EAAE,kBAAkB,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IACzD,IAAI,EAAE,CAAC,KAAK,EAAE,kBAAkB,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;CACvD,CAAC;AAyEF,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,oBAAoB,GAAG,qBAAqB,CA8H5F"}
+{"version":3,"file":"manifest-route.d.ts","sourceRoot":"","sources":["../../src/server/manifest-route.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAmB,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAEzE,OAAO,EAAsC,KAAK,yBAAyB,EAAE,MAAM,mCAAmC,CAAC;AAGvH,iGAAiG;AACjG,QAAA,MAAM,uBAAuB,cAAc,CAAC;AAC5C,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAcxE;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IAClC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACxC,OAAO,EAAE,OAAO,CAAC;IACjB,GAAG,EAAE,GAAG,CAAC;IACT,MAAM,EAAE,OAAO,CAAC;CAChB;AAED,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,OAAO,GAAG,QAAQ,CAAC;AAE5D,MAAM,WAAW,cAAc,CAAC,CAAC,GAAG,OAAO;IAC1C,6EAA6E;IAC7E,IAAI,EAAE,CAAC,KAAK,EAAE,kBAAkB,KAAK,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;IACvD,4EAA4E;IAC5E,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC7D,iFAAiF;IACjF,MAAM,CAAC,EAAE,CAAC,KAAK,EAAE,kBAAkB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtD;;;;;OAKG;IACH,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,kBAAkB,EAAE,EAAE,EAAE,iBAAiB,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7F,iFAAiF;IACjF,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,iBAAiB,KAAK,iBAAiB,CAAC;CAC1D;AAED,MAAM,WAAW,oBAAoB;IACpC,0FAA0F;IAC1F,KAAK,EAAE,MAAM,CAAC;IACd,iEAAiE;IACjE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACxC;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,YAAY,KAAK,OAAO,CAAC,yBAAyB,GAAG,IAAI,CAAC,CAAC;IACrG;;;;;;;;OAQG;IACH,oBAAoB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;CACvD;AAyBD,MAAM,MAAM,qBAAqB,GAAG;IACnC,GAAG,EAAE,CAAC,KAAK,EAAE,kBAAkB,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IACtD,GAAG,EAAE,CAAC,KAAK,EAAE,kBAAkB,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IACtD,MAAM,EAAE,CAAC,KAAK,EAAE,kBAAkB,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IACzD,IAAI,EAAE,CAAC,KAAK,EAAE,kBAAkB,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;CACvD,CAAC;AA8EF,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,oBAAoB,GAAG,qBAAqB,CAkH5F"}

package/dist/server/manifest-route.js

@@ -11,9 +11,9 @@
  *      (`runtime.query('storage/manifest').withId(params.id)`).
  *   2. Verifies the descriptor declares the running app as its owner
  *      via `adapterConfig['storage.cloud-api'].ownerApp === appId`.
- *      Cross-app callers get a 403, which keeps the contract clean
- *      and prevents accidental data leaks from a borrower app being
- *      asked to serve data it doesn't own.
+ *      Cross-app callers get a 403 with a clear ownership message
+ *      (wrong app — not a tenant existence oracle). Per-loader
+ *      authorization failures return **404** fail-closed.
  *   3. Dispatches to a per-descriptor loader the app provides — one
  *      function per descriptor for `load` / `save` / `delete`.
  *      Loaders are the bridge between the owning app's local data
@@ -30,8 +30,21 @@
  * doesn't import `@sveltejs/kit`. Apps re-export the produced GET/PUT/
  * DELETE/HEAD from a `+server.ts` file.
  */
+import * as z from 'zod/v4';
+import { CapabilityError } from '@vibesdotdev/kernel';
 import { getLogger } from '@vibesdotdev/logging';
-const logger = getLogger('storage.manifest-route');
+import { StorageCloudApiAdapterConfigSchema } from "../schemas/manifest-descriptor.js";
+import { outcomeOf } from "../utils/failure-of.js";
+/** A request body or loader payload as it crosses the wire (a loader's `validate` parses it). */
+const ManifestRouteBodySchema = z.unknown();
+/** The cloud-api client's PUT envelope (`{ value: data }`). */
+const ValueEnvelopeSchema = z.object({ value: ManifestRouteBodySchema });
+/** The host hook hands the request runtime on `event.locals.runtime`. */
+const LocalsRuntimeSchema = z.object({ runtime: z.custom((value) => value instanceof Object) });
+/** The cloud-api config's owner app, read on its own (a malformed config has no owner). */
+const OwnerAppSchema = StorageCloudApiAdapterConfigSchema.pick({ ownerApp: true }).partial();
+/** The route's Logging: the handed request runtime's, never an ambient default. */
+const routeLogger = (runtime) => getLogger('storage.manifest-route', runtime);
 function tryAuthorizeInternal(event, opts) {
     const expected = opts.internalServiceToken?.()?.trim();
     if (!expected)
@@ -42,7 +55,9 @@ function tryAuthorizeInternal(event, opts) {
     const presented = header.slice(7).trim();
     if (!presented || presented !== expected)
         return false;
+    // Keep the host's locals (notably `runtime`); only the actor is replaced.
     const augmented = {
+        ...(event.locals instanceof Object ? event.locals : undefined),
         user: { id: 'system', email: 'system@vibes.internal', isSuperuser: true, internal: true }
     };
     event.locals = augmented;
@@ -54,27 +69,25 @@ function jsonResponse(status, body) {
         headers: { 'content-type': 'application/json' }
     });
 }
-async function defaultResolveDescriptor(id) {
-    const { getVibesRuntime } = await import('@vibesdotdev/runtime');
-    const runtime = getVibesRuntime();
-    const scoped = runtime.query('storage/manifest').withId(id);
-    if (typeof scoped.firstDescriptor !== 'function')
-        return null;
-    return scoped.firstDescriptor() ?? null;
+async function defaultResolveDescriptor(id, runtime) {
+    return runtime.query('storage/manifest').withId(id).firstDescriptor();
 }
 function getOwnerApp(descriptor) {
-    const raw = descriptor.adapterConfig?.['storage.cloud-api'];
-    if (!raw || typeof raw !== 'object')
-        return null;
-    const value = raw.ownerApp;
-    return typeof value === 'string' && value.length > 0 ? value : null;
+    const config = OwnerAppSchema.safeParse(descriptor.adapterConfig?.['storage.cloud-api'] ?? {});
+    const ownerApp = config.success ? config.data.ownerApp : undefined;
+    return ownerApp && ownerApp.length > 0 ? ownerApp : null;
 }
 async function resolveAndGate(event, opts) {
     const id = event.params.id;
     if (!id)
         return { ok: false, response: jsonResponse(400, { error: 'Missing descriptor id' }) };
+    const locals = LocalsRuntimeSchema.safeParse(event.locals);
+    if (!locals.success) {
+        throw new CapabilityError('The manifest route requires event.locals.runtime (the runtime handed by the host hook)', 'UNAVAILABLE', { reason: 'runtime-unavailable', retryable: false, details: { id } });
+    }
     const resolveDescriptor = opts.resolveDescriptor ?? defaultResolveDescriptor;
-    const descriptor = await resolveDescriptor(id);
+    const runtime = locals.data.runtime;
+    const descriptor = await resolveDescriptor(id, runtime);
     if (!descriptor) {
         return { ok: false, response: jsonResponse(404, { error: `Unknown storage descriptor: ${id}` }) };
     }
@@ -104,49 +117,44 @@ async function resolveAndGate(event, opts) {
             })
         };
     }
-    return { ok: true, descriptor, loader };
+    return { ok: true, descriptor, loader, runtime };
 }
 export function createManifestRouteHandler(opts) {
     if (!opts.appId)
         throw new Error('createManifestRouteHandler: appId is required');
-    const authorize = async (event, loader, op, internal) => {
+    const authorize = async (event, gated, op, internal) => {
+        const { loader } = gated;
         if (internal)
             return true;
-        if (!loader.authorize)
+        const authorizeHook = loader.authorize;
+        if (!authorizeHook)
             return true;
-        try {
-            return await loader.authorize(event, op);
-        }
-        catch (error) {
-            logger.warn(`authorize threw for ${event.params.id}`, {
-                error: error instanceof Error ? error.message : String(error)
-            });
-            return false;
-        }
+        const decided = await outcomeOf(async () => authorizeHook(event, op));
+        if (decided.ok)
+            return decided.value;
+        // A throwing authorize hook fails closed (404), and says why.
+        routeLogger(gated.runtime).warn('Manifest route authorize hook threw', { manifestId: event.params.id, failure: decided.failure });
+        return false;
     };
     const GET = async (event) => {
         const gated = await resolveAndGate(event, opts);
         if (!gated.ok)
             return gated.response;
         const internal = tryAuthorizeInternal(event, opts);
-        if (!(await authorize(event, gated.loader, 'read', internal))) {
-            return jsonResponse(403, { error: 'Forbidden' });
-        }
-        try {
-            const value = await gated.loader.load(event);
-            // `{ value }` matches the wire shape consumed by the cloud-api
-            // adapter's fetch client (see `cloud-api.fetch-client.ts:131`,
-            // `data.value` lookup). Keeping this in lockstep with the adapter
-            // means borrower apps get descriptor records back without bespoke
-            // translation per app.
-            return jsonResponse(200, { value });
-        }
-        catch (error) {
-            logger.error(`load failed for ${event.params.id}`, {
-                error: error instanceof Error ? error.message : String(error)
-            });
-            return jsonResponse(500, { error: 'Failed to load manifest data' });
-        }
+        if (!(await authorize(event, gated, 'read', internal))) {
+            // Fail-closed 404 — no existence oracle for unauthorized descriptors.
+            return jsonResponse(404, { error: 'Not found' });
+        }
+        const loaded = await outcomeOf(() => gated.loader.load(event));
+        if (!loaded.ok) {
+            routeLogger(gated.runtime).error('Manifest route load failed', { manifestId: event.params.id, failure: loaded.failure });
+            return jsonResponse(500, { error: 'Failed to load manifest data', failure: loaded.failure });
+        }
+        // `{ value }` matches the wire shape consumed by the cloud-api
+        // adapter's fetch client (its `data.value` lookup). Keeping this in
+        // lockstep with the adapter means borrower apps get descriptor records
+        // back without bespoke translation per app.
+        return jsonResponse(200, { value: loaded.value });
     };
     const HEAD = async (event) => {
         const gated = await resolveAndGate(event, opts);
@@ -154,16 +162,15 @@ export function createManifestRouteHandler(opts) {
             return new Response(null, { status: gated.response.status });
         }
         const internal = tryAuthorizeInternal(event, opts);
-        if (!(await authorize(event, gated.loader, 'read', internal))) {
-            return new Response(null, { status: 403 });
+        if (!(await authorize(event, gated, 'read', internal))) {
+            return new Response(null, { status: 404 });
         }
-        try {
-            const data = await gated.loader.load(event);
-            return new Response(null, { status: data == null ? 404 : 200 });
-        }
-        catch {
+        const loaded = await outcomeOf(() => gated.loader.load(event));
+        if (!loaded.ok) {
+            routeLogger(gated.runtime).error('Manifest route load failed', { manifestId: event.params.id, failure: loaded.failure });
             return new Response(null, { status: 500 });
         }
+        return new Response(null, { status: loaded.value == null ? 404 : 200 });
     };
     const PUT = async (event) => {
         const gated = await resolveAndGate(event, opts);
@@ -173,32 +180,25 @@ export function createManifestRouteHandler(opts) {
             return jsonResponse(405, { error: 'Descriptor is read-only over HTTP' });
         }
         const internal = tryAuthorizeInternal(event, opts);
-        if (!(await authorize(event, gated.loader, 'write', internal))) {
-            return jsonResponse(403, { error: 'Forbidden' });
-        }
-        let body;
-        try {
-            body = await event.request.json();
-        }
-        catch {
-            return jsonResponse(400, { error: 'Body must be valid JSON' });
-        }
-        // Cloud-api fetch client wraps the payload as `{ value: data }`
-        // (see `cloud-api.fetch-client.ts:144`). Unwrap once on the server
-        // so loaders see the raw manifest record.
-        const unwrappedBody = body && typeof body === 'object' && 'value' in body
-            ? body.value
-            : body;
-        try {
-            const validated = gated.loader.validate ? gated.loader.validate(unwrappedBody) : unwrappedBody;
-            await gated.loader.save(event, validated);
-            return jsonResponse(200, { ok: true });
-        }
-        catch (error) {
-            const message = error instanceof Error ? error.message : String(error);
-            logger.error(`save failed for ${event.params.id}`, { error: message });
-            return jsonResponse(500, { error: 'Failed to save manifest data', detail: message });
-        }
+        if (!(await authorize(event, gated, 'write', internal))) {
+            return jsonResponse(404, { error: 'Not found' });
+        }
+        const body = await outcomeOf(() => event.request.json());
+        if (!body.ok)
+            return jsonResponse(400, { error: 'Body must be valid JSON', failure: body.failure });
+        // Cloud-api fetch client wraps the payload as `{ value: data }`. Unwrap
+        // once on the server so loaders see the raw manifest record.
+        const envelope = ValueEnvelopeSchema.safeParse(body.value);
+        const unwrappedBody = envelope.success ? envelope.data.value : body.value;
+        const save = gated.loader.save;
+        const validate = gated.loader.validate;
+        const saved = await outcomeOf(() => save(event, validate ? validate(unwrappedBody) : unwrappedBody));
+        if (!saved.ok) {
+            // The failure's value-free facts only: a thrown text can echo the body.
+            routeLogger(gated.runtime).error('Manifest route save failed', { manifestId: event.params.id, failure: saved.failure });
+            return jsonResponse(500, { error: 'Failed to save manifest data', failure: saved.failure });
+        }
+        return jsonResponse(200, { ok: true });
     };
     const DELETE = async (event) => {
         const gated = await resolveAndGate(event, opts);
@@ -208,18 +208,16 @@ export function createManifestRouteHandler(opts) {
             return jsonResponse(405, { error: 'Descriptor is not deletable over HTTP' });
         }
         const internal = tryAuthorizeInternal(event, opts);
-        if (!(await authorize(event, gated.loader, 'delete', internal))) {
-            return jsonResponse(403, { error: 'Forbidden' });
-        }
-        try {
-            await gated.loader.delete(event);
-            return jsonResponse(200, { ok: true });
+        if (!(await authorize(event, gated, 'delete', internal))) {
+            return jsonResponse(404, { error: 'Not found' });
         }
-        catch (error) {
-            const message = error instanceof Error ? error.message : String(error);
-            logger.error(`delete failed for ${event.params.id}`, { error: message });
-            return jsonResponse(500, { error: 'Failed to delete manifest data', detail: message });
+        const remove = gated.loader.delete;
+        const deleted = await outcomeOf(() => remove(event));
+        if (!deleted.ok) {
+            routeLogger(gated.runtime).error('Manifest route delete failed', { manifestId: event.params.id, failure: deleted.failure });
+            return jsonResponse(500, { error: 'Failed to delete manifest data', failure: deleted.failure });
         }
+        return jsonResponse(200, { ok: true });
     };
     return { GET, PUT, DELETE, HEAD };
 }

package/dist/server/manifest-route.js.map

@@ -1 +1 @@
-{"version":3,"file":"manifest-route.js","sourceRoot":"","sources":["../../src/server/manifest-route.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAGjD,MAAM,MAAM,GAAG,SAAS,CAAC,wBAAwB,CAAC,CAAC;AA6DnD,SAAS,oBAAoB,CAC5B,KAAyB,EACzB,IAA0B;IAE1B,MAAM,QAAQ,GAAG,IAAI,CAAC,oBAAoB,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACvD,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5B,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC1D,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IACzE,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,IAAI,CAAC,SAAS,IAAI,SAAS,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACvD,MAAM,SAAS,GAAmB;QACjC,IAAI,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,uBAAuB,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE;KACzF,CAAC;IACD,KAA6B,CAAC,MAAM,GAAG,SAAS,CAAC;IAClD,OAAO,IAAI,CAAC;AACb,CAAC;AASD,SAAS,YAAY,CAAC,MAAc,EAAE,IAAa;IAClD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;QACzC,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAC/C,CAAC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,wBAAwB,CAAC,EAAU;IACjD,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;IACjE,MAAM,OAAO,GAAG,eAAe,EAAE,CAAC;IAClC,MAAM,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,MAAM,CAAC,EAAE,CAEzD,CAAC;IACF,IAAI,OAAO,MAAM,CAAC,eAAe,KAAK,UAAU;QAAE,OAAO,IAAI,CAAC;IAC9D,OAAO,MAAM,CAAC,eAAe,EAAE,IAAI,IAAI,CAAC;AACzC,CAAC;AAED,SAAS,WAAW,CAAC,UAAqC;IACzD,MAAM,GAAG,GAAG,UAAU,CAAC,aAAa,EAAE,CAAC,mBAAmB,CAAC,CAAC;IAC5D,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IACjD,MAAM,KAAK,GAAI,GAA+B,CAAC,QAAQ,CAAC;IACxD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;AACrE,CAAC;AAED,KAAK,UAAU,cAAc,CAC5B,KAAyB,EACzB,IAA0B;IAK1B,MAAM,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;IAC3B,IAAI,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,EAAE,CAAC;IAE/F,MAAM,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,IAAI,wBAAwB,CAAC;IAC7E,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,EAAE,CAAC,CAAC;IAC/C,IAAI,CAAC,UAAU,EAAE,CAAC;QACjB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,+BAA+B,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;IACnG,CAAC;IAED,MAAM,KAAK,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IACtC,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,OAAO;YACN,EAAE,EAAE,KAAK;YACT,QAAQ,EAAE,YAAY,CAAC,GAAG,EAAE;gBAC3B,KAAK,EAAE,eAAe,EAAE,0GAA0G;aAClI,CAAC;SACF,CAAC;IACH,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;QAC1B,OAAO;YACN,EAAE,EAAE,KAAK;YACT,QAAQ,EAAE,YAAY,CAAC,GAAG,EAAE;gBAC3B,KAAK,EAAE,eAAe,EAAE,kBAAkB,KAAK,WAAW,IAAI,CAAC,KAAK,qCAAqC;aACzG,CAAC;SACF,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAChC,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,OAAO;YACN,EAAE,EAAE,KAAK;YACT,QAAQ,EAAE,YAAY,CAAC,GAAG,EAAE;gBAC3B,KAAK,EAAE,QAAQ,IAAI,CAAC,KAAK,sBAAsB,EAAE,2CAA2C;aAC5F,CAAC;SACF,CAAC;IACH,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,IAA0B;IACpE,IAAI,CAAC,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IAElF,MAAM,SAAS,GAAG,KAAK,EACtB,KAAyB,EACzB,MAAsB,EACtB,EAAqB,EACrB,QAAiB,EACE,EAAE;QACrB,IAAI,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC1B,IAAI,CAAC,MAAM,CAAC,SAAS;YAAE,OAAO,IAAI,CAAC;QACnC,IAAI,CAAC;YACJ,OAAO,MAAM,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC1C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,CAAC,IAAI,CAAC,uBAAuB,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE;gBACrD,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC7D,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACd,CAAC;IACF,CAAC,CAAC;IAEF,MAAM,GAAG,GAAG,KAAK,EAAE,KAAyB,EAAqB,EAAE;QAClE,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC,KAAK,CAAC,EAAE;YAAE,OAAO,KAAK,CAAC,QAAQ,CAAC;QAErC,MAAM,QAAQ,GAAG,oBAAoB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACnD,IAAI,CAAC,CAAC,MAAM,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;YAC/D,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QAClD,CAAC;QAED,IAAI,CAAC;YACJ,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC7C,+DAA+D;YAC/D,+DAA+D;YAC/D,kEAAkE;YAClE,kEAAkE;YAClE,uBAAuB;YACvB,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACrC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,CAAC,KAAK,CAAC,mBAAmB,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE;gBAClD,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAC7D,CAAC,CAAC;YACH,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC,CAAC;QACrE,CAAC;IACF,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG,KAAK,EAAE,KAAyB,EAAqB,EAAE;QACnE,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACf,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9D,CAAC;QAED,MAAM,QAAQ,GAAG,oBAAoB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACnD,IAAI,CAAC,CAAC,MAAM,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;YAC/D,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC5C,CAAC;QAED,IAAI,CAAC;YACJ,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC5C,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;QACjE,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC5C,CAAC;IACF,CAAC,CAAC;IAEF,MAAM,GAAG,GAAG,KAAK,EAAE,KAAyB,EAAqB,EAAE;QAClE,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC,KAAK,CAAC,EAAE;YAAE,OAAO,KAAK,CAAC,QAAQ,CAAC;QAErC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACxB,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACnD,IAAI,CAAC,CAAC,MAAM,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;YAChE,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QAClD,CAAC;QAED,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACJ,IAAI,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC;YACR,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;QAChE,CAAC;QAED,gEAAgE;QAChE,mEAAmE;QACnE,0CAA0C;QAC1C,MAAM,aAAa,GAClB,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,IAAK,IAAgC;YAC/E,CAAC,CAAE,IAAgC,CAAC,KAAK;YACzC,CAAC,CAAC,IAAI,CAAC;QAET,IAAI,CAAC;YACJ,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;YAC/F,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YAC1C,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,MAAM,CAAC,KAAK,CAAC,mBAAmB,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;YACvE,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,8BAA8B,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QACtF,CAAC;IACF,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,KAAK,EAAE,KAAyB,EAAqB,EAAE;QACrE,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC,KAAK,CAAC,EAAE;YAAE,OAAO,KAAK,CAAC,QAAQ,CAAC;QAErC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YAC1B,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,uCAAuC,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACnD,IAAI,CAAC,CAAC,MAAM,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;YACjE,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QAClD,CAAC;QAED,IAAI,CAAC;YACJ,MAAM,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACjC,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACxC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvE,MAAM,CAAC,KAAK,CAAC,qBAAqB,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;YACzE,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,gCAAgC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QACxF,CAAC;IACF,CAAC,CAAC;IAEF,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AACnC,CAAC"}
+{"version":3,"file":"manifest-route.js","sourceRoot":"","sources":["../../src/server/manifest-route.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAqB,MAAM,qBAAqB,CAAC;AACzE,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,kCAAkC,EAAkC,MAAM,mCAAmC,CAAC;AACvH,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAEnD,iGAAiG;AACjG,MAAM,uBAAuB,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC;AAG5C,+DAA+D;AAC/D,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;AAEzE,yEAAyE;AACzE,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,CAAe,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,YAAY,MAAM,CAAC,EAAE,CAAC,CAAC;AAE9G,2FAA2F;AAC3F,MAAM,cAAc,GAAG,kCAAkC,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;AAE7F,mFAAmF;AACnF,MAAM,WAAW,GAAG,CAAC,OAAqB,EAAE,EAAE,CAAC,SAAS,CAAC,wBAAwB,EAAE,OAAO,CAAC,CAAC;AA+D5F,SAAS,oBAAoB,CAC5B,KAAyB,EACzB,IAA0B;IAE1B,MAAM,QAAQ,GAAG,IAAI,CAAC,oBAAoB,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACvD,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5B,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAC1D,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;QAAE,OAAO,KAAK,CAAC;IACzE,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,IAAI,CAAC,SAAS,IAAI,SAAS,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACvD,0EAA0E;IAC1E,MAAM,SAAS,GAAmB;QACjC,GAAG,CAAC,KAAK,CAAC,MAAM,YAAY,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QAC9D,IAAI,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,uBAAuB,EAAE,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE;KACzF,CAAC;IACF,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC;IACzB,OAAO,IAAI,CAAC;AACb,CAAC;AASD,SAAS,YAAY,CAAQ,MAAc,EAAE,IAAW;IACvD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;QACzC,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;KAC/C,CAAC,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,wBAAwB,CACtC,EAAU,EACV,OAAqB;IAErB,OAAO,OAAO,CAAC,KAAK,CAA4B,kBAAkB,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,eAAe,EAAE,CAAC;AAClG,CAAC;AAED,SAAS,WAAW,CAAC,UAAqC;IACzD,MAAM,MAAM,GAAG,cAAc,CAAC,SAAS,CAAC,UAAU,CAAC,aAAa,EAAE,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/F,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;IACnE,OAAO,QAAQ,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1D,CAAC;AAED,KAAK,UAAU,cAAc,CAC5B,KAAyB,EACzB,IAA0B;IAK1B,MAAM,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;IAC3B,IAAI,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,EAAE,CAAC;IAE/F,MAAM,MAAM,GAAG,mBAAmB,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC3D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACrB,MAAM,IAAI,eAAe,CACxB,wFAAwF,EACxF,aAAa,EACb,EAAE,MAAM,EAAE,qBAAqB,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,CACpE,CAAC;IACH,CAAC;IACD,MAAM,iBAAiB,GAAG,IAAI,CAAC,iBAAiB,IAAI,wBAAwB,CAAC;IAC7E,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;IACpC,MAAM,UAAU,GAAG,MAAM,iBAAiB,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IACxD,IAAI,CAAC,UAAU,EAAE,CAAC;QACjB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,+BAA+B,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;IACnG,CAAC;IAED,MAAM,KAAK,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IACtC,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,OAAO;YACN,EAAE,EAAE,KAAK;YACT,QAAQ,EAAE,YAAY,CAAC,GAAG,EAAE;gBAC3B,KAAK,EAAE,eAAe,EAAE,0GAA0G;aAClI,CAAC;SACF,CAAC;IACH,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;QAC1B,OAAO;YACN,EAAE,EAAE,KAAK;YACT,QAAQ,EAAE,YAAY,CAAC,GAAG,EAAE;gBAC3B,KAAK,EAAE,eAAe,EAAE,kBAAkB,KAAK,WAAW,IAAI,CAAC,KAAK,qCAAqC;aACzG,CAAC;SACF,CAAC;IACH,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAChC,IAAI,CAAC,MAAM,EAAE,CAAC;QACb,OAAO;YACN,EAAE,EAAE,KAAK;YACT,QAAQ,EAAE,YAAY,CAAC,GAAG,EAAE;gBAC3B,KAAK,EAAE,QAAQ,IAAI,CAAC,KAAK,sBAAsB,EAAE,2CAA2C;aAC5F,CAAC;SACF,CAAC;IACH,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;AAClD,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,IAA0B;IACpE,IAAI,CAAC,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IAElF,MAAM,SAAS,GAAG,KAAK,EACtB,KAAyB,EACzB,KAAwD,EACxD,EAAqB,EACrB,QAAiB,EACE,EAAE;QACrB,MAAM,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;QACzB,IAAI,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC1B,MAAM,aAAa,GAAG,MAAM,CAAC,SAAS,CAAC;QACvC,IAAI,CAAC,aAAa;YAAE,OAAO,IAAI,CAAC;QAChC,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC;QACtE,IAAI,OAAO,CAAC,EAAE;YAAE,OAAO,OAAO,CAAC,KAAK,CAAC;QACrC,8DAA8D;QAC9D,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,qCAAqC,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QAClI,OAAO,KAAK,CAAC;IACd,CAAC,CAAC;IAEF,MAAM,GAAG,GAAG,KAAK,EAAE,KAAyB,EAAqB,EAAE;QAClE,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC,KAAK,CAAC,EAAE;YAAE,OAAO,KAAK,CAAC,QAAQ,CAAC;QAErC,MAAM,QAAQ,GAAG,oBAAoB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACnD,IAAI,CAAC,CAAC,MAAM,SAAS,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;YACxD,sEAAsE;YACtE,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QAClD,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/D,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YAChB,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,4BAA4B,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;YACzH,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,8BAA8B,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QAC9F,CAAC;QACD,+DAA+D;QAC/D,oEAAoE;QACpE,uEAAuE;QACvE,4CAA4C;QAC5C,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IACnD,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG,KAAK,EAAE,KAAyB,EAAqB,EAAE;QACnE,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACf,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9D,CAAC;QAED,MAAM,QAAQ,GAAG,oBAAoB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACnD,IAAI,CAAC,CAAC,MAAM,SAAS,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;YACxD,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC5C,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/D,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;YAChB,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,4BAA4B,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;YACzH,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC;IACzE,CAAC,CAAC;IAEF,MAAM,GAAG,GAAG,KAAK,EAAE,KAAyB,EAAqB,EAAE;QAClE,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC,KAAK,CAAC,EAAE;YAAE,OAAO,KAAK,CAAC,QAAQ,CAAC;QAErC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;YACxB,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC,CAAC;QAC1E,CAAC;QACD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACnD,IAAI,CAAC,CAAC,MAAM,SAAS,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;YACzD,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QAClD,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAA+B,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QACrF,IAAI,CAAC,IAAI,CAAC,EAAE;YAAE,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,yBAAyB,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;QAEpG,wEAAwE;QACxE,6DAA6D;QAC7D,MAAM,QAAQ,GAAG,mBAAmB,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC3D,MAAM,aAAa,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;QAE1E,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC;QAC/B,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC;QACvC,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC;QACrG,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;YACf,wEAAwE;YACxE,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,4BAA4B,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YACxH,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,8BAA8B,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;QAC7F,CAAC;QACD,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACxC,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,KAAK,EAAE,KAAyB,EAAqB,EAAE;QACrE,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAChD,IAAI,CAAC,KAAK,CAAC,EAAE;YAAE,OAAO,KAAK,CAAC,QAAQ,CAAC;QAErC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YAC1B,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,uCAAuC,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACnD,IAAI,CAAC,CAAC,MAAM,SAAS,CAAC,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC;YAC1D,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QAClD,CAAC;QAED,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC;QACnC,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACrD,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;YACjB,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,8BAA8B,EAAE,EAAE,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;YAC5H,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,gCAAgC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QACjG,CAAC;QACD,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IACxC,CAAC,CAAC;IAEF,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AACnC,CAAC"}

package/dist/storage-explorer.consumer.plugin.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Trusted consumer host for the renderer-safe storage explorer capability.
+ *
+ * The universal storage plugin declares the kind, descriptor, and remote
+ * exposure. Only the daemon surface composes this plugin, keeping the Platform
+ * delegation body out of browser bundles.
+ */
+export declare const storageExplorerConsumerPlugin: import("@vibesdotdev/kernel").RuntimePlugin;
+export default storageExplorerConsumerPlugin;
+//# sourceMappingURL=storage-explorer.consumer.plugin.d.ts.map

package/dist/storage-explorer.consumer.plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-explorer.consumer.plugin.d.ts","sourceRoot":"","sources":["../src/storage-explorer.consumer.plugin.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AASH,eAAO,MAAM,6BAA6B,6CAgBxC,CAAC;AAEH,eAAe,6BAA6B,CAAC"}

package/dist/storage-explorer.consumer.plugin.js

@@ -0,0 +1,24 @@
+/**
+ * Trusted consumer host for the renderer-safe storage explorer capability.
+ *
+ * The universal storage plugin declares the kind, descriptor, and remote
+ * exposure. Only the daemon surface composes this plugin, keeping the Platform
+ * delegation body out of browser bundles.
+ */
+import storageConsumerPlugin from "./storage.consumer.plugin.js";
+import { createRuntimePlugin, loader } from '@vibesdotdev/kernel';
+import { storageExplorerCapabilityDescriptor, storageExplorerCapabilityKind } from "./client/storage-explorer-capability.js";
+export const storageExplorerConsumerPlugin = createRuntimePlugin({
+    id: 'storage/explorer.consumer',
+    name: 'Storage Explorer Consumer Host',
+    description: 'Trusted consumer-worker implementation for renderer-safe account storage browsing.',
+    dependencies: ['storage'],
+    async onRegister(runtime) {
+        await runtime.registerPlugin(storageConsumerPlugin);
+    },
+    loaders: [
+        loader(storageExplorerCapabilityDescriptor.id, { kind: storageExplorerCapabilityKind.id, scope: 'worker' }, () => import("./client/storage-explorer-capability.impl.worker.js"))
+    ]
+});
+export default storageExplorerConsumerPlugin;
+//# sourceMappingURL=storage-explorer.consumer.plugin.js.map

package/dist/storage-explorer.consumer.plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-explorer.consumer.plugin.js","sourceRoot":"","sources":["../src/storage-explorer.consumer.plugin.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,qBAAqB,MAAM,8BAA8B,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EACN,mCAAmC,EACnC,6BAA6B,EAC7B,MAAM,yCAAyC,CAAC;AAEjD,MAAM,CAAC,MAAM,6BAA6B,GAAG,mBAAmB,CAAC;IAChE,EAAE,EAAE,2BAA2B;IAC/B,IAAI,EAAE,gCAAgC;IACtC,WAAW,EAAE,oFAAoF;IACjG,YAAY,EAAE,CAAC,SAAS,CAAC;IACzB,KAAK,CAAC,UAAU,CAAC,OAAO;QACvB,MAAM,OAAO,CAAC,cAAc,CAAC,qBAAqB,CAAC,CAAC;IACrD,CAAC;IAED,OAAO,EAAE;QACR,MAAM,CACL,mCAAmC,CAAC,EAAE,EACtC,EAAE,IAAI,EAAE,6BAA6B,CAAC,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,EAC3D,GAAG,EAAE,CAAC,MAAM,CAAC,qDAAqD,CAAC,CACnE;KACD;CACD,CAAC,CAAC;AAEH,eAAe,6BAA6B,CAAC"}

package/dist/storage-policy.context.descriptor.js

@@ -1,4 +1,4 @@
-import { createRuntimeAsset } from "@vibesdotdev/runtime/factory/asset";
+import { createRuntimeAsset } from "@vibesdotdev/kernel/factory/asset";
 /**
  * Storage Policy Context Descriptor
  *

package/dist/storage-policy.context.descriptor.js.map

@@ -1 +1 @@
-{"version":3,"file":"storage-policy.context.descriptor.js","sourceRoot":"","sources":["../src/storage-policy.context.descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AAExE;;;;;GAKG;AACH,eAAe,kBAAkB,CAAC;IAChC,EAAE,EAAE,gBAAgB;IACpB,IAAI,EAAE,SAAS;IACf,IAAI,EAAE,wBAAwB;IAC9B,WAAW,EACT,+EAA+E;IACjF,IAAI,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC;IACtC,OAAO,EAAE,IAAI;CACd,CAAC,CAAC"}
+{"version":3,"file":"storage-policy.context.descriptor.js","sourceRoot":"","sources":["../src/storage-policy.context.descriptor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAEvE;;;;;GAKG;AACH,eAAe,kBAAkB,CAAC;IAChC,EAAE,EAAE,gBAAgB;IACpB,IAAI,EAAE,SAAS;IACf,IAAI,EAAE,wBAAwB;IAC9B,WAAW,EACT,+EAA+E;IACjF,IAAI,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC;IACtC,OAAO,EAAE,IAAI;CACd,CAAC,CAAC"}