@xapps-platform/xapp-manifest 0.1.1 → 0.1.2

package/dist/index.js

@@ -6862,22 +6862,134 @@ function normalizeHookIdempotencyScope(value) {
 
 // src/hookRegistry.ts
 var HOOK_REGISTRY = [
-  { trigger: "before:installation_create", implemented: true, blockingDefault: true, allowedEffectKinds: ["policy"], allowsDelegatedExecution: false, auditCategory: "guard_policy" },
-  { trigger: "before:widget_load", implemented: true, blockingDefault: true, allowedEffectKinds: ["policy"], allowsDelegatedExecution: false, auditCategory: "guard_policy" },
-  { trigger: "before:session_open", implemented: true, blockingDefault: true, allowedEffectKinds: ["policy"], allowsDelegatedExecution: false, auditCategory: "guard_policy" },
-  { trigger: "before:thread_create", implemented: true, blockingDefault: true, allowedEffectKinds: ["policy"], allowsDelegatedExecution: false, auditCategory: "guard_policy" },
-  { trigger: "before:tool_run", implemented: true, blockingDefault: true, allowedEffectKinds: ["policy"], allowsDelegatedExecution: true, auditCategory: "guard_policy" },
-  { trigger: "after:install", implemented: true, blockingDefault: false, allowedEffectKinds: ["policy", "integration_call"], allowsDelegatedExecution: false, auditCategory: "lifecycle" },
-  { trigger: "after:link_complete", implemented: true, blockingDefault: false, allowedEffectKinds: ["policy", "integration_call"], allowsDelegatedExecution: false, auditCategory: "lifecycle" },
-  { trigger: "before:link_revoke", implemented: true, blockingDefault: true, allowedEffectKinds: ["policy"], allowsDelegatedExecution: false, auditCategory: "guard_policy" },
-  { trigger: "before:uninstall", implemented: true, blockingDefault: true, allowedEffectKinds: ["policy"], allowsDelegatedExecution: false, auditCategory: "guard_policy" },
-  { trigger: "after:tool_complete", implemented: true, blockingDefault: false, allowedEffectKinds: ["policy", "integration_call"], allowsDelegatedExecution: true, auditCategory: "response" },
-  { trigger: "after:uninstall", implemented: true, blockingDefault: false, allowedEffectKinds: ["policy", "integration_call"], allowsDelegatedExecution: false, auditCategory: "lifecycle" },
-  { trigger: "after:payment_completed", implemented: true, blockingDefault: false, allowedEffectKinds: ["invoice", "policy", "notification", "integration_call"], allowsDelegatedExecution: true, auditCategory: "payment" },
-  { trigger: "after:payment_failed", implemented: false, blockingDefault: false, allowedEffectKinds: ["notification", "integration_call"], allowsDelegatedExecution: true, auditCategory: "payment" },
-  { trigger: "after:request_created", implemented: true, blockingDefault: false, allowedEffectKinds: ["notification", "integration_call"], allowsDelegatedExecution: true, auditCategory: "request" },
-  { trigger: "after:response_ready", implemented: false, blockingDefault: false, allowedEffectKinds: ["notification", "integration_call"], allowsDelegatedExecution: true, auditCategory: "response" },
-  { trigger: "after:response_finalized", implemented: true, blockingDefault: false, allowedEffectKinds: ["invoice", "policy", "notification", "integration_call"], allowsDelegatedExecution: true, auditCategory: "response" }
+  {
+    trigger: "before:installation_create",
+    implemented: true,
+    blockingDefault: true,
+    allowedEffectKinds: ["policy"],
+    allowsDelegatedExecution: false,
+    auditCategory: "guard_policy"
+  },
+  {
+    trigger: "before:widget_load",
+    implemented: true,
+    blockingDefault: true,
+    allowedEffectKinds: ["policy"],
+    allowsDelegatedExecution: false,
+    auditCategory: "guard_policy"
+  },
+  {
+    trigger: "before:session_open",
+    implemented: true,
+    blockingDefault: true,
+    allowedEffectKinds: ["policy"],
+    allowsDelegatedExecution: false,
+    auditCategory: "guard_policy"
+  },
+  {
+    trigger: "before:thread_create",
+    implemented: true,
+    blockingDefault: true,
+    allowedEffectKinds: ["policy"],
+    allowsDelegatedExecution: false,
+    auditCategory: "guard_policy"
+  },
+  {
+    trigger: "before:tool_run",
+    implemented: true,
+    blockingDefault: true,
+    allowedEffectKinds: ["policy"],
+    allowsDelegatedExecution: true,
+    auditCategory: "guard_policy"
+  },
+  {
+    trigger: "after:install",
+    implemented: true,
+    blockingDefault: false,
+    allowedEffectKinds: ["policy", "integration_call"],
+    allowsDelegatedExecution: false,
+    auditCategory: "lifecycle"
+  },
+  {
+    trigger: "after:link_complete",
+    implemented: true,
+    blockingDefault: false,
+    allowedEffectKinds: ["policy", "integration_call"],
+    allowsDelegatedExecution: false,
+    auditCategory: "lifecycle"
+  },
+  {
+    trigger: "before:link_revoke",
+    implemented: true,
+    blockingDefault: true,
+    allowedEffectKinds: ["policy"],
+    allowsDelegatedExecution: false,
+    auditCategory: "guard_policy"
+  },
+  {
+    trigger: "before:uninstall",
+    implemented: true,
+    blockingDefault: true,
+    allowedEffectKinds: ["policy"],
+    allowsDelegatedExecution: false,
+    auditCategory: "guard_policy"
+  },
+  {
+    trigger: "after:tool_complete",
+    implemented: true,
+    blockingDefault: false,
+    allowedEffectKinds: ["policy", "integration_call"],
+    allowsDelegatedExecution: true,
+    auditCategory: "response"
+  },
+  {
+    trigger: "after:uninstall",
+    implemented: true,
+    blockingDefault: false,
+    allowedEffectKinds: ["policy", "integration_call"],
+    allowsDelegatedExecution: false,
+    auditCategory: "lifecycle"
+  },
+  {
+    trigger: "after:payment_completed",
+    implemented: true,
+    blockingDefault: false,
+    allowedEffectKinds: ["invoice", "policy", "notification", "integration_call"],
+    allowsDelegatedExecution: true,
+    auditCategory: "payment"
+  },
+  {
+    trigger: "after:payment_failed",
+    implemented: false,
+    blockingDefault: false,
+    allowedEffectKinds: ["notification", "integration_call"],
+    allowsDelegatedExecution: true,
+    auditCategory: "payment"
+  },
+  {
+    trigger: "after:request_created",
+    implemented: true,
+    blockingDefault: false,
+    allowedEffectKinds: ["notification", "integration_call"],
+    allowsDelegatedExecution: true,
+    auditCategory: "request"
+  },
+  {
+    trigger: "after:response_ready",
+    implemented: false,
+    blockingDefault: false,
+    allowedEffectKinds: ["notification", "integration_call"],
+    allowsDelegatedExecution: true,
+    auditCategory: "response"
+  },
+  {
+    trigger: "after:response_finalized",
+    implemented: true,
+    blockingDefault: false,
+    allowedEffectKinds: ["invoice", "policy", "notification", "integration_call"],
+    allowsDelegatedExecution: true,
+    auditCategory: "response"
+  }
 ];
 var HOOK_REGISTRY_MAP = new Map(HOOK_REGISTRY.map((entry) => [entry.trigger, entry]));
 function getHookRegistryEntry(trigger) {
@@ -6954,6 +7066,51 @@ function buildNotificationTemplateRegistry(templates) {
   }
   return registry;
 }
+function normalizeTemplateLocale(input, fallbackLocale = "en") {
+  const raw = String(input || "").trim();
+  if (!raw) return fallbackLocale;
+  const parts = raw.replace(/_/g, "-").split("-").map((part) => part.trim()).filter(Boolean);
+  if (!parts.length) return fallbackLocale;
+  const [language, ...rest] = parts;
+  return [language.toLowerCase(), ...rest.map((part) => part.toUpperCase())].join("-");
+}
+function getTemplateLocaleCandidates(input, fallbackLocale = "en") {
+  const normalizedFallback = normalizeTemplateLocale(fallbackLocale, "en");
+  const normalized = normalizeTemplateLocale(input, normalizedFallback);
+  const out = /* @__PURE__ */ new Set([normalized]);
+  const dash = normalized.indexOf("-");
+  if (dash > 0) out.add(normalized.slice(0, dash));
+  const fallbackDash = normalizedFallback.indexOf("-");
+  if (fallbackDash > 0) out.add(normalizedFallback.slice(0, fallbackDash));
+  out.add(normalizedFallback);
+  out.add("en");
+  return Array.from(out);
+}
+function resolveNotificationTemplateVariant(input) {
+  const templateRef = String(input.templateRef || "").trim();
+  if (!templateRef) return null;
+  const registry = buildNotificationTemplateRegistry(input.templates);
+  const exact = registry.get(templateRef);
+  const templates = Array.isArray(input.templates) ? input.templates.filter(
+    (template) => Boolean(template && typeof template === "object")
+  ) : [];
+  const familyMatches = templates.filter(
+    (template) => String(template.family || "").trim() === templateRef
+  );
+  if (familyMatches.length > 0) {
+    const candidates = getTemplateLocaleCandidates(input.locale, input.fallbackLocale);
+    for (const candidate of candidates) {
+      const match = familyMatches.find(
+        (template) => normalizeTemplateLocale(template.locale, "") === candidate
+      );
+      if (match) return match;
+    }
+    const noLocaleMatch = familyMatches.find((template) => !String(template.locale || "").trim());
+    if (noLocaleMatch) return noLocaleMatch;
+  }
+  if (exact) return exact;
+  return familyMatches[0] || null;
+}
 function readNotificationRef(config) {
   if (!config || typeof config !== "object" || Array.isArray(config)) return "";
   return String(config.notification_ref ?? config.notificationRef ?? "").trim();
@@ -6976,7 +7133,10 @@ function resolveNotificationTemplateConfig(input) {
       }
     };
   }
-  const template = input.templates.get(templateRef);
+  const template = resolveNotificationTemplateVariant({
+    templates: Array.from(input.templates.values()),
+    templateRef
+  });
   if (!template) {
     return {
       ok: false,
@@ -7076,6 +7236,51 @@ function buildInvoiceTemplateRegistry(templates) {
   }
   return registry;
 }
+function normalizeTemplateLocale2(input, fallbackLocale = "en") {
+  const raw = String(input || "").trim();
+  if (!raw) return fallbackLocale;
+  const parts = raw.replace(/_/g, "-").split("-").map((part) => part.trim()).filter(Boolean);
+  if (!parts.length) return fallbackLocale;
+  const [language, ...rest] = parts;
+  return [language.toLowerCase(), ...rest.map((part) => part.toUpperCase())].join("-");
+}
+function getTemplateLocaleCandidates2(input, fallbackLocale = "en") {
+  const normalizedFallback = normalizeTemplateLocale2(fallbackLocale, "en");
+  const normalized = normalizeTemplateLocale2(input, normalizedFallback);
+  const out = /* @__PURE__ */ new Set([normalized]);
+  const dash = normalized.indexOf("-");
+  if (dash > 0) out.add(normalized.slice(0, dash));
+  const fallbackDash = normalizedFallback.indexOf("-");
+  if (fallbackDash > 0) out.add(normalizedFallback.slice(0, fallbackDash));
+  out.add(normalizedFallback);
+  out.add("en");
+  return Array.from(out);
+}
+function resolveInvoiceTemplateVariant(input) {
+  const templateRef = String(input.templateRef || "").trim();
+  if (!templateRef) return null;
+  const registry = buildInvoiceTemplateRegistry(input.templates);
+  const exact = registry.get(templateRef);
+  const templates = Array.isArray(input.templates) ? input.templates.filter(
+    (template) => Boolean(template && typeof template === "object")
+  ) : [];
+  const familyMatches = templates.filter(
+    (template) => String(template.family || "").trim() === templateRef
+  );
+  if (familyMatches.length > 0) {
+    const candidates = getTemplateLocaleCandidates2(input.locale, input.fallbackLocale);
+    for (const candidate of candidates) {
+      const match = familyMatches.find(
+        (template) => normalizeTemplateLocale2(template.locale, "") === candidate
+      );
+      if (match) return match;
+    }
+    const noLocaleMatch = familyMatches.find((template) => !String(template.locale || "").trim());
+    if (noLocaleMatch) return noLocaleMatch;
+  }
+  if (exact) return exact;
+  return familyMatches[0] || null;
+}
 function readInvoiceRef(config) {
   if (!config || typeof config !== "object" || Array.isArray(config)) return "";
   return String(config.invoice_ref ?? config.invoiceRef ?? "").trim();
@@ -7100,7 +7305,10 @@ function resolveInvoiceTemplateConfig(input) {
       }
     };
   }
-  const template = input.templates.get(templateRef);
+  const template = resolveInvoiceTemplateVariant({
+    templates: Array.from(input.templates.values()),
+    templateRef
+  });
   if (!template) {
     return {
       ok: false,
@@ -7313,10 +7521,14 @@ function normalizeRequiredSubjectProfileFamily(value) {
   if (["identity_basic", "identity-basic", "identity", "basic_identity"].includes(normalized)) {
     return "identity_basic";
   }
-  if (["billing_individual", "billing-individual", "individual", "person", "natural_person"].includes(normalized)) {
+  if (["billing_individual", "billing-individual", "individual", "person", "natural_person"].includes(
+    normalized
+  )) {
     return "billing_individual";
   }
-  if (["billing_business", "billing-business", "business", "company", "organization"].includes(normalized)) {
+  if (["billing_business", "billing-business", "business", "company", "organization"].includes(
+    normalized
+  )) {
     return "billing_business";
   }
   return null;
@@ -7378,23 +7590,76 @@ function resolveSubjectProfileRequirement(config) {
 }
 
 // src/index.ts
+function isLocalizedTextRecord(value) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return false;
+  return Object.values(value).every((entry) => entry == null || typeof entry === "string");
+}
+function normalizeManifestLocale(input, fallbackLocale = "en") {
+  const raw = String(input || "").trim();
+  if (!raw) return fallbackLocale;
+  const parts = raw.split("-").map((part) => part.trim()).filter(Boolean);
+  if (!parts.length) return fallbackLocale;
+  const [language, ...rest] = parts;
+  return [language.toLowerCase(), ...rest.map((part) => part.toUpperCase())].join("-");
+}
+function getManifestLocaleCandidates(input, fallbackLocale = "en") {
+  const normalizedFallback = normalizeManifestLocale(fallbackLocale, "en");
+  const normalized = normalizeManifestLocale(input, normalizedFallback);
+  const out = /* @__PURE__ */ new Set([normalized]);
+  const dash = normalized.indexOf("-");
+  if (dash > 0) out.add(normalized.slice(0, dash));
+  const fallbackDash = normalizedFallback.indexOf("-");
+  if (fallbackDash > 0) out.add(normalizedFallback.slice(0, fallbackDash));
+  out.add(normalizedFallback);
+  out.add("en");
+  return Array.from(out);
+}
+function resolveManifestLocalizedText(value, locale, fallbackLocale = "en") {
+  if (typeof value === "string") return value;
+  if (!isLocalizedTextRecord(value)) return "";
+  for (const candidate of getManifestLocaleCandidates(locale, fallbackLocale)) {
+    const resolved = value[candidate];
+    if (typeof resolved === "string" && resolved.trim()) return resolved;
+  }
+  for (const resolved of Object.values(value)) {
+    if (typeof resolved === "string" && resolved.trim()) return resolved;
+  }
+  return "";
+}
+function localizedTextSchema(maxLength, minLength = 0) {
+  const stringRule = { type: "string", maxLength };
+  if (minLength > 0) stringRule.minLength = minLength;
+  return {
+    anyOf: [
+      stringRule,
+      {
+        type: "object",
+        minProperties: 1,
+        propertyNames: { type: "string", minLength: 2, maxLength: 32 },
+        additionalProperties: {
+          anyOf: [{ ...stringRule }, { type: "null" }]
+        }
+      }
+    ]
+  };
+}
 var xappManifestJsonSchema = {
   type: "object",
   required: ["name", "slug", "version", "tools", "widgets"],
   additionalProperties: false,
   properties: {
-    title: { type: "string", maxLength: 200 },
+    title: localizedTextSchema(200),
     name: { type: "string", minLength: 1, maxLength: 200 },
     slug: { type: "string", minLength: 1, maxLength: 100 },
-    description: { type: "string", maxLength: 2e3 },
+    description: localizedTextSchema(2e3),
     image: { type: "string", maxLength: 2048 },
     tags: { type: "array", maxItems: 50, items: { type: "string", maxLength: 64 } },
     terms: {
       type: "object",
       additionalProperties: false,
       properties: {
-        title: { type: "string", maxLength: 200 },
-        text: { type: "string", maxLength: 2e4 },
+        title: localizedTextSchema(200),
+        text: localizedTextSchema(2e4),
         url: { type: "string", maxLength: 2048 },
         version: { type: "string", maxLength: 64 }
       }
@@ -7655,8 +7920,8 @@ var xappManifestJsonSchema = {
         additionalProperties: false,
         properties: {
           tool_name: { type: "string", minLength: 1, maxLength: 100 },
-          title: { type: "string", minLength: 1, maxLength: 200 },
-          description: { type: "string", maxLength: 2e3 },
+          title: localizedTextSchema(200, 1),
+          description: localizedTextSchema(2e3),
           input_schema: { type: "object" },
           input_ui_schema: { type: "object" },
           output_ui_schema: { type: "object" },
@@ -7713,12 +7978,12 @@ var xappManifestJsonSchema = {
             enum: ["platform", "publisher", "json-forms", "ui-kit", "app-shell"]
           },
           bind_tool_name: { type: "string", maxLength: 100 },
-          title: { type: "string", minLength: 1, maxLength: 200 },
+          title: localizedTextSchema(200, 1),
           accessibility: {
             type: "object",
             additionalProperties: false,
             properties: {
-              label: { type: "string", minLength: 1, maxLength: 300 },
+              label: localizedTextSchema(300, 1),
               role: { type: "string", minLength: 1, maxLength: 50 }
             }
           },
@@ -7811,19 +8076,237 @@ var xappManifestJsonSchema = {
       type: "object",
       additionalProperties: false,
       properties: {
-        executor_mode: { type: "string", enum: ["PUBLIC_EXECUTOR", "PRIVATE_EXECUTOR", "AGENT_TUNNEL"] },
+        executor_mode: {
+          type: "string",
+          enum: ["PUBLIC_EXECUTOR", "PRIVATE_EXECUTOR", "AGENT_TUNNEL"]
+        },
         auth_mode: { type: "string", enum: ["PUBLISHER_APP", "USER_DELEGATED", "HYBRID"] },
         signing_policy: { type: "string", enum: ["none", "subject_proof", "publisher_proof"] },
         webhooks: { type: "object" },
         proxy_policy: { type: "object" }
       }
     },
-    payment_guard_definitions: { type: "array", maxItems: 50, items: { type: "object", required: ["name"], additionalProperties: false, properties: { name: { type: "string", minLength: 1, maxLength: 200 }, payment_type: { type: "string", maxLength: 100 }, payment_issuer_mode: { type: "string", maxLength: 100, enum: ["owner_managed", "gateway_managed", "tenant_delegated", "publisher_delegated", "any"] }, payment_scheme: { type: "string", maxLength: 100 }, payment_network: { type: "string", maxLength: 100 }, payment_allowed_issuers: { type: "array", maxItems: 20, items: { type: "string", maxLength: 100, enum: ["tenant", "publisher", "gateway", "tenant_delegated", "publisher_delegated"] } }, payment_return_contract: { type: "string", maxLength: 200 }, payment_return_required: { type: "boolean" }, payment_return_max_age_s: { type: "number", minimum: 0, maximum: 86400 }, payment_return_hmac_secret_refs: { type: "object" }, payment_return_hmac_secrets: { type: "object" }, payment_return_hmac_delegated_secret_refs: { type: "object" }, payment_return_hmac_delegated_secrets: { type: "object" }, payment_provider_credentials: { type: "object" }, payment_provider_credentials_refs: { type: "object" }, payment_provider_secret_refs: { type: "object" }, pricing_model: { type: "string", maxLength: 100 }, pricing: { type: "object", additionalProperties: false, properties: { currency: { type: "string", maxLength: 32 }, default_amount: { type: "number" }, xapp_prices: { type: "object", additionalProperties: { type: "number" } }, tool_overrides: { type: "object", additionalProperties: { type: "number" } }, description: { type: "string", maxLength: 500 }, asset: { type: "string", maxLength: 256 }, pay_to: { type: "string", maxLength: 256 }, payTo: { type: "string", maxLength: 256 } } }, receipt_field: { type: "string", maxLength: 200 }, payment_url: { type: "string", maxLength: 2048 }, accepts: { type: "array", maxItems: 20, items: { type: "object", additionalProperties: true } }, payment_ui: { type: "object" }, policy: { type: "object" }, action: { type: "object" }, owner_override_allowlist: { type: "array", maxItems: 100, items: { type: "string", minLength: 1, maxLength: 200 } }, owner_pricing_floor: { type: "object", additionalProperties: false, properties: { default_amount: { type: "number" }, xapp_prices: { type: "object", additionalProperties: { type: "number" } }, tool_overrides: { type: "object", additionalProperties: { type: "number" } } } } } } },
-    subject_profile_guard_definitions: { type: "array", maxItems: 50, items: { type: "object", required: ["name"], additionalProperties: false, properties: { name: { type: "string", minLength: 1, maxLength: 200 }, policy: { type: "object" }, action: { type: "object" }, tools: { type: "array", maxItems: 100, items: { type: "string", minLength: 1, maxLength: 200 } }, subject_profile_requirement: { type: "object" }, subject_profile_remediation: { type: "object" }, subject_profile_sources: { type: "object" }, owner_override_allowlist: { type: "array", maxItems: 100, items: { type: "string", minLength: 1, maxLength: 200 } } } } },
-    notification_definitions: { type: "array", maxItems: 50, items: { type: "object", required: ["name"], additionalProperties: false, properties: { name: { type: "string", minLength: 1, maxLength: 200 }, channel: { type: "string", enum: ["email"] }, effect_kind: { type: "string", enum: ["policy", "invoice", "notification", "integration_call"] }, effectKind: { type: "string", enum: ["policy", "invoice", "notification", "integration_call"] }, provider_key: { type: "string", maxLength: 100 }, providerKey: { type: "string", maxLength: 100 }, execution_mode: { type: "string", maxLength: 100 }, executionMode: { type: "string", maxLength: 100 }, provider_scope: { type: "string", maxLength: 100 }, providerScope: { type: "string", maxLength: 100 }, provider_execution: { type: "string", maxLength: 100 }, providerExecution: { type: "string", maxLength: 100 }, failure_policy: { type: "string", maxLength: 100 }, failurePolicy: { type: "string", maxLength: 100 }, retry_policy: { type: "object" }, retryPolicy: { type: "object" }, idempotency_scope: { type: "string", maxLength: 100 }, idempotencyScope: { type: "string", maxLength: 100 }, template_ref: { type: "string", maxLength: 200 }, templateRef: { type: "string", maxLength: 200 }, target: { type: "object" }, template: { type: "object" } } } },
-    notification_templates: { type: "array", maxItems: 50, items: { type: "object", required: ["name"], additionalProperties: false, properties: { name: { type: "string", minLength: 1, maxLength: 200 }, channel: { type: "string", enum: ["email"] }, subject: { type: "string", maxLength: 500 }, text: { type: "string", maxLength: 2e4 }, html: { type: "string", maxLength: 1e5 } } } },
-    invoice_definitions: { type: "array", maxItems: 50, items: { type: "object", required: ["name"], additionalProperties: false, properties: { name: { type: "string", minLength: 1, maxLength: 200 }, provider_key: { type: "string", maxLength: 100 }, providerKey: { type: "string", maxLength: 100 }, effect_kind: { type: "string", enum: ["policy", "invoice", "notification", "integration_call"] }, effectKind: { type: "string", enum: ["policy", "invoice", "notification", "integration_call"] }, execution_mode: { type: "string", maxLength: 100 }, executionMode: { type: "string", maxLength: 100 }, provider_scope: { type: "string", maxLength: 100 }, providerScope: { type: "string", maxLength: 100 }, provider_execution: { type: "string", maxLength: 100 }, providerExecution: { type: "string", maxLength: 100 }, failure_policy: { type: "string", maxLength: 100 }, failurePolicy: { type: "string", maxLength: 100 }, idempotency_scope: { type: "string", maxLength: 100 }, idempotencyScope: { type: "string", maxLength: 100 }, invoice_template_ref: { type: "string", maxLength: 200 }, invoiceTemplateRef: { type: "string", maxLength: 200 }, invoice: { type: "object" }, template: { type: "object" } } } },
-    invoice_templates: { type: "array", maxItems: 50, items: { type: "object", required: ["name"], additionalProperties: true, properties: { name: { type: "string", minLength: 1, maxLength: 200 }, title: { type: "string", maxLength: 500 }, text: { type: "string", maxLength: 2e4 }, html: { type: "string", maxLength: 1e5 } } } }
+    payment_guard_definitions: {
+      type: "array",
+      maxItems: 50,
+      items: {
+        type: "object",
+        required: ["name"],
+        additionalProperties: false,
+        properties: {
+          name: { type: "string", minLength: 1, maxLength: 200 },
+          payment_type: { type: "string", maxLength: 100 },
+          payment_issuer_mode: {
+            type: "string",
+            maxLength: 100,
+            enum: [
+              "owner_managed",
+              "gateway_managed",
+              "tenant_delegated",
+              "publisher_delegated",
+              "any"
+            ]
+          },
+          payment_scheme: { type: "string", maxLength: 100 },
+          payment_network: { type: "string", maxLength: 100 },
+          payment_allowed_issuers: {
+            type: "array",
+            maxItems: 20,
+            items: {
+              type: "string",
+              maxLength: 100,
+              enum: ["tenant", "publisher", "gateway", "tenant_delegated", "publisher_delegated"]
+            }
+          },
+          payment_return_contract: { type: "string", maxLength: 200 },
+          payment_return_required: { type: "boolean" },
+          payment_return_max_age_s: { type: "number", minimum: 0, maximum: 86400 },
+          payment_return_hmac_secret_refs: { type: "object" },
+          payment_return_hmac_secrets: { type: "object" },
+          payment_return_hmac_delegated_secret_refs: { type: "object" },
+          payment_return_hmac_delegated_secrets: { type: "object" },
+          payment_provider_credentials: { type: "object" },
+          payment_provider_credentials_refs: { type: "object" },
+          payment_provider_secret_refs: { type: "object" },
+          pricing_model: { type: "string", maxLength: 100 },
+          pricing: {
+            type: "object",
+            additionalProperties: false,
+            properties: {
+              currency: { type: "string", maxLength: 32 },
+              default_amount: { type: "number" },
+              xapp_prices: { type: "object", additionalProperties: { type: "number" } },
+              tool_overrides: { type: "object", additionalProperties: { type: "number" } },
+              description: { type: "string", maxLength: 500 },
+              asset: { type: "string", maxLength: 256 },
+              pay_to: { type: "string", maxLength: 256 },
+              payTo: { type: "string", maxLength: 256 }
+            }
+          },
+          receipt_field: { type: "string", maxLength: 200 },
+          payment_url: { type: "string", maxLength: 2048 },
+          accepts: {
+            type: "array",
+            maxItems: 20,
+            items: { type: "object", additionalProperties: true }
+          },
+          payment_ui: { type: "object" },
+          policy: { type: "object" },
+          action: { type: "object" },
+          owner_override_allowlist: {
+            type: "array",
+            maxItems: 100,
+            items: { type: "string", minLength: 1, maxLength: 200 }
+          },
+          owner_pricing_floor: {
+            type: "object",
+            additionalProperties: false,
+            properties: {
+              default_amount: { type: "number" },
+              xapp_prices: { type: "object", additionalProperties: { type: "number" } },
+              tool_overrides: { type: "object", additionalProperties: { type: "number" } }
+            }
+          }
+        }
+      }
+    },
+    subject_profile_guard_definitions: {
+      type: "array",
+      maxItems: 50,
+      items: {
+        type: "object",
+        required: ["name"],
+        additionalProperties: false,
+        properties: {
+          name: { type: "string", minLength: 1, maxLength: 200 },
+          policy: { type: "object" },
+          action: { type: "object" },
+          tools: {
+            type: "array",
+            maxItems: 100,
+            items: { type: "string", minLength: 1, maxLength: 200 }
+          },
+          subject_profile_requirement: { type: "object" },
+          subject_profile_remediation: { type: "object" },
+          subject_profile_sources: { type: "object" },
+          owner_override_allowlist: {
+            type: "array",
+            maxItems: 100,
+            items: { type: "string", minLength: 1, maxLength: 200 }
+          }
+        }
+      }
+    },
+    notification_definitions: {
+      type: "array",
+      maxItems: 50,
+      items: {
+        type: "object",
+        required: ["name"],
+        additionalProperties: false,
+        properties: {
+          name: { type: "string", minLength: 1, maxLength: 200 },
+          channel: { type: "string", enum: ["email"] },
+          effect_kind: {
+            type: "string",
+            enum: ["policy", "invoice", "notification", "integration_call"]
+          },
+          effectKind: {
+            type: "string",
+            enum: ["policy", "invoice", "notification", "integration_call"]
+          },
+          provider_key: { type: "string", maxLength: 100 },
+          providerKey: { type: "string", maxLength: 100 },
+          execution_mode: { type: "string", maxLength: 100 },
+          executionMode: { type: "string", maxLength: 100 },
+          provider_scope: { type: "string", maxLength: 100 },
+          providerScope: { type: "string", maxLength: 100 },
+          provider_execution: { type: "string", maxLength: 100 },
+          providerExecution: { type: "string", maxLength: 100 },
+          failure_policy: { type: "string", maxLength: 100 },
+          failurePolicy: { type: "string", maxLength: 100 },
+          retry_policy: { type: "object" },
+          retryPolicy: { type: "object" },
+          idempotency_scope: { type: "string", maxLength: 100 },
+          idempotencyScope: { type: "string", maxLength: 100 },
+          template_ref: { type: "string", maxLength: 200 },
+          templateRef: { type: "string", maxLength: 200 },
+          target: { type: "object" },
+          template: { type: "object" }
+        }
+      }
+    },
+    notification_templates: {
+      type: "array",
+      maxItems: 50,
+      items: {
+        type: "object",
+        required: ["name"],
+        additionalProperties: false,
+        properties: {
+          name: { type: "string", minLength: 1, maxLength: 200 },
+          family: { type: "string", minLength: 1, maxLength: 200 },
+          locale: { type: "string", minLength: 2, maxLength: 32 },
+          channel: { type: "string", enum: ["email"] },
+          subject: { type: "string", maxLength: 500 },
+          text: { type: "string", maxLength: 2e4 },
+          html: { type: "string", maxLength: 1e5 }
+        }
+      }
+    },
+    invoice_definitions: {
+      type: "array",
+      maxItems: 50,
+      items: {
+        type: "object",
+        required: ["name"],
+        additionalProperties: false,
+        properties: {
+          name: { type: "string", minLength: 1, maxLength: 200 },
+          provider_key: { type: "string", maxLength: 100 },
+          providerKey: { type: "string", maxLength: 100 },
+          effect_kind: {
+            type: "string",
+            enum: ["policy", "invoice", "notification", "integration_call"]
+          },
+          effectKind: {
+            type: "string",
+            enum: ["policy", "invoice", "notification", "integration_call"]
+          },
+          execution_mode: { type: "string", maxLength: 100 },
+          executionMode: { type: "string", maxLength: 100 },
+          provider_scope: { type: "string", maxLength: 100 },
+          providerScope: { type: "string", maxLength: 100 },
+          provider_execution: { type: "string", maxLength: 100 },
+          providerExecution: { type: "string", maxLength: 100 },
+          failure_policy: { type: "string", maxLength: 100 },
+          failurePolicy: { type: "string", maxLength: 100 },
+          idempotency_scope: { type: "string", maxLength: 100 },
+          idempotencyScope: { type: "string", maxLength: 100 },
+          invoice_template_ref: { type: "string", maxLength: 200 },
+          invoiceTemplateRef: { type: "string", maxLength: 200 },
+          invoice: { type: "object" },
+          template: { type: "object" }
+        }
+      }
+    },
+    invoice_templates: {
+      type: "array",
+      maxItems: 50,
+      items: {
+        type: "object",
+        required: ["name"],
+        additionalProperties: true,
+        properties: {
+          name: { type: "string", minLength: 1, maxLength: 200 },
+          family: { type: "string", minLength: 1, maxLength: 200 },
+          locale: { type: "string", minLength: 2, maxLength: 32 },
+          title: { type: "string", maxLength: 500 },
+          text: { type: "string", maxLength: 2e4 },
+          html: { type: "string", maxLength: 1e5 }
+        }
+      }
+    }
   }
 };
 var Ajv = import_ajv.default;
@@ -7870,23 +8353,53 @@ function validateJsonFormsStepDispatch(tool, knownToolNames) {
     if (!isRecord(xapps) || !("onStepComplete" in xapps)) return;
     const action = xapps.onStepComplete;
     if (!isRecord(action)) {
-      throw Object.assign(new Error(`Tool ${tool.tool_name} input_ui_schema step ${idx + 1} xapps.onStepComplete must be an object`), { status: 400 });
+      throw Object.assign(
+        new Error(
+          `Tool ${tool.tool_name} input_ui_schema step ${idx + 1} xapps.onStepComplete must be an object`
+        ),
+        { status: 400 }
+      );
     }
     if (String(action.type) !== "request") {
-      throw Object.assign(new Error(`Tool ${tool.tool_name} input_ui_schema step ${idx + 1} xapps.onStepComplete.type must be "request"`), { status: 400 });
+      throw Object.assign(
+        new Error(
+          `Tool ${tool.tool_name} input_ui_schema step ${idx + 1} xapps.onStepComplete.type must be "request"`
+        ),
+        { status: 400 }
+      );
     }
     const toolName = String(action.toolName ?? "").trim();
     if (!toolName) {
-      throw Object.assign(new Error(`Tool ${tool.tool_name} input_ui_schema step ${idx + 1} xapps.onStepComplete.toolName is required`), { status: 400 });
+      throw Object.assign(
+        new Error(
+          `Tool ${tool.tool_name} input_ui_schema step ${idx + 1} xapps.onStepComplete.toolName is required`
+        ),
+        { status: 400 }
+      );
     }
     if (!knownToolNames.has(toolName)) {
-      throw Object.assign(new Error(`Tool ${tool.tool_name} input_ui_schema step ${idx + 1} xapps.onStepComplete.toolName references unknown tool: ${toolName}`), { status: 400 });
+      throw Object.assign(
+        new Error(
+          `Tool ${tool.tool_name} input_ui_schema step ${idx + 1} xapps.onStepComplete.toolName references unknown tool: ${toolName}`
+        ),
+        { status: 400 }
+      );
     }
     if ("payloadMapping" in action && !isRecord(action.payloadMapping)) {
-      throw Object.assign(new Error(`Tool ${tool.tool_name} input_ui_schema step ${idx + 1} xapps.onStepComplete.payloadMapping must be an object`), { status: 400 });
+      throw Object.assign(
+        new Error(
+          `Tool ${tool.tool_name} input_ui_schema step ${idx + 1} xapps.onStepComplete.payloadMapping must be an object`
+        ),
+        { status: 400 }
+      );
     }
     if ("resultMapping" in action && !isRecord(action.resultMapping)) {
-      throw Object.assign(new Error(`Tool ${tool.tool_name} input_ui_schema step ${idx + 1} xapps.onStepComplete.resultMapping must be an object`), { status: 400 });
+      throw Object.assign(
+        new Error(
+          `Tool ${tool.tool_name} input_ui_schema step ${idx + 1} xapps.onStepComplete.resultMapping must be an object`
+        ),
+        { status: 400 }
+      );
     }
   });
 }
@@ -7931,7 +8444,9 @@ function validateLinkingSetupUrl(setupUrl) {
   const allowInsecure = String(process.env.XAPPS_ALLOW_INSECURE_LINKING_URLS || "").trim().toLowerCase();
   const insecureAllowed = allowInsecure === "true" || allowInsecure === "1";
   if (parsed.protocol !== "https:" && !isLoopbackHostname(parsed.hostname) && !insecureAllowed) {
-    throw Object.assign(new Error("linking.setup_url must use https unless it targets localhost"), { status: 400 });
+    throw Object.assign(new Error("linking.setup_url must use https unless it targets localhost"), {
+      status: 400
+    });
   }
   const allowlist = parseUrlAllowlist("XAPPS_LINKING_SETUP_URL_ALLOWLIST");
   if (!matchesUrlAllowlist(parsed, allowlist)) {
@@ -7963,7 +8478,12 @@ function validateWidgetResultPresentation(widget) {
     if (rawValue === void 0 || rawValue === null || String(rawValue).trim() === "") continue;
     const normalized = normalizeResultPresentation(rawValue);
     if (normalized === "__invalid__") {
-      throw Object.assign(new Error(`Widget ${widget.widget_name} ${fieldPath} must be one of: runtime_default, inline, publisher_managed`), { status: 400 });
+      throw Object.assign(
+        new Error(
+          `Widget ${widget.widget_name} ${fieldPath} must be one of: runtime_default, inline, publisher_managed`
+        ),
+        { status: 400 }
+      );
     }
   }
 }
@@ -7971,9 +8491,17 @@ function validateGuardHookConfig(guard, resolvedConfigOverride) {
   const rawConfig = isPlainObject(guard.config) ? guard.config : null;
   const effectiveConfig = resolvedConfigOverride && isPlainObject(resolvedConfigOverride) ? resolvedConfigOverride : rawConfig;
   if (!effectiveConfig) return;
-  const unresolvedNotificationRef = Boolean(rawConfig && readNotificationRef(rawConfig) && !resolvedConfigOverride);
-  const unresolvedInvoiceRef = Boolean(rawConfig && readInvoiceRef(rawConfig) && !resolvedConfigOverride);
-  const resolved = normalizeHookGuardConfig({ slug: guard.slug, trigger: guard.trigger, config: effectiveConfig });
+  const unresolvedNotificationRef = Boolean(
+    rawConfig && readNotificationRef(rawConfig) && !resolvedConfigOverride
+  );
+  const unresolvedInvoiceRef = Boolean(
+    rawConfig && readInvoiceRef(rawConfig) && !resolvedConfigOverride
+  );
+  const resolved = normalizeHookGuardConfig({
+    slug: guard.slug,
+    trigger: guard.trigger,
+    config: effectiveConfig
+  });
   const effectKind = resolved.config.effectKind;
   const executionMode = resolved.config.executionMode;
   const providerScope = resolved.config.providerScope;
@@ -7982,37 +8510,81 @@ function validateGuardHookConfig(guard, resolvedConfigOverride) {
   const hookMeta = resolved.hook;
   const supportedFieldChecks = [
     ["config.effect_kind", rawConfig?.effect_kind ?? rawConfig?.effectKind],
-    ["config.execution_mode", rawConfig?.execution_mode ?? rawConfig?.executionMode],
-    ["config.provider_scope", rawConfig?.provider_scope ?? rawConfig?.providerScope],
-    ["config.failure_policy", rawConfig?.failure_policy ?? rawConfig?.failurePolicy],
-    ["config.idempotency_scope", rawConfig?.idempotency_scope ?? rawConfig?.idempotencyScope]
+    [
+      "config.execution_mode",
+      rawConfig?.execution_mode ?? rawConfig?.executionMode
+    ],
+    [
+      "config.provider_scope",
+      rawConfig?.provider_scope ?? rawConfig?.providerScope
+    ],
+    [
+      "config.failure_policy",
+      rawConfig?.failure_policy ?? rawConfig?.failurePolicy
+    ],
+    [
+      "config.idempotency_scope",
+      rawConfig?.idempotency_scope ?? rawConfig?.idempotencyScope
+    ]
   ];
   for (const [fieldPath, rawValue] of supportedFieldChecks) {
     if (rawValue === void 0 || rawValue === null || String(rawValue).trim() === "") continue;
     if (fieldPath === "config.effect_kind" && !(resolved.config.effectKind || "").trim() || fieldPath === "config.execution_mode" && !(resolved.config.executionMode || "").trim() || fieldPath === "config.provider_scope" && !(resolved.config.providerScope || "").trim() || fieldPath === "config.failure_policy" && !(resolved.config.failurePolicy || "").trim() || fieldPath === "config.idempotency_scope" && !(resolved.config.idempotencyScope || "").trim()) {
-      throw Object.assign(new Error(`Guard ${guard.slug} ${fieldPath} has unsupported value: ${String(rawValue)}`), { status: 400 });
+      throw Object.assign(
+        new Error(`Guard ${guard.slug} ${fieldPath} has unsupported value: ${String(rawValue)}`),
+        { status: 400 }
+      );
     }
   }
   if (effectKind && guard.trigger.startsWith("before:") && effectKind !== "policy") {
-    throw Object.assign(new Error(`Guard ${guard.slug} effect_kind=${effectKind} is not supported on blocking trigger ${guard.trigger}`), { status: 400 });
+    throw Object.assign(
+      new Error(
+        `Guard ${guard.slug} effect_kind=${effectKind} is not supported on blocking trigger ${guard.trigger}`
+      ),
+      { status: 400 }
+    );
   }
   if (effectKind && hookMeta && !hookMeta.allowedEffectKinds.includes(effectKind)) {
-    throw Object.assign(new Error(`Guard ${guard.slug} effect_kind=${effectKind} is not supported on trigger ${guard.trigger}`), { status: 400 });
+    throw Object.assign(
+      new Error(
+        `Guard ${guard.slug} effect_kind=${effectKind} is not supported on trigger ${guard.trigger}`
+      ),
+      { status: 400 }
+    );
   }
   if (effectKind === "policy" && (providerScope || idempotencyScope) && guard.trigger.startsWith("before:")) {
-    throw Object.assign(new Error(`Guard ${guard.slug} policy effect on ${guard.trigger} must not declare provider_scope or idempotency_scope`), { status: 400 });
+    throw Object.assign(
+      new Error(
+        `Guard ${guard.slug} policy effect on ${guard.trigger} must not declare provider_scope or idempotency_scope`
+      ),
+      { status: 400 }
+    );
   }
   if (executionMode === "gateway_delegated" && providerScope === "gateway") {
-    throw Object.assign(new Error(`Guard ${guard.slug} gateway_delegated execution requires provider_scope tenant or publisher`), { status: 400 });
+    throw Object.assign(
+      new Error(
+        `Guard ${guard.slug} gateway_delegated execution requires provider_scope tenant or publisher`
+      ),
+      { status: 400 }
+    );
   }
   if ((effectKind === "invoice" || effectKind === "notification") && !providerScope && !unresolvedNotificationRef && !unresolvedInvoiceRef) {
-    throw Object.assign(new Error(`Guard ${guard.slug} effect_kind=${effectKind} requires provider_scope`), { status: 400 });
+    throw Object.assign(
+      new Error(`Guard ${guard.slug} effect_kind=${effectKind} requires provider_scope`),
+      { status: 400 }
+    );
   }
   if ((effectKind === "invoice" || effectKind === "notification") && !failurePolicy && !unresolvedNotificationRef && !unresolvedInvoiceRef) {
-    throw Object.assign(new Error(`Guard ${guard.slug} effect_kind=${effectKind} requires failure_policy`), { status: 400 });
+    throw Object.assign(
+      new Error(`Guard ${guard.slug} effect_kind=${effectKind} requires failure_policy`),
+      { status: 400 }
+    );
   }
   if ((effectKind === "invoice" || effectKind === "notification") && !idempotencyScope && !unresolvedNotificationRef && !unresolvedInvoiceRef) {
-    throw Object.assign(new Error(`Guard ${guard.slug} effect_kind=${effectKind} requires idempotency_scope`), { status: 400 });
+    throw Object.assign(
+      new Error(`Guard ${guard.slug} effect_kind=${effectKind} requires idempotency_scope`),
+      { status: 400 }
+    );
   }
 }
 function readPaymentGuardRef(config) {
@@ -8024,31 +8596,48 @@ function validateAdapterShape(tool) {
   if (!adapter || !isPlainObject(adapter)) return;
   const path = String(adapter.path ?? "").trim();
   if (!path.startsWith("/")) {
-    throw Object.assign(new Error(`Tool ${tool.tool_name} adapter.path must start with "/"`), { status: 400 });
+    throw Object.assign(new Error(`Tool ${tool.tool_name} adapter.path must start with "/"`), {
+      status: 400
+    });
   }
   const query = adapter.query;
   if (query !== void 0 && !isPlainObject(query)) {
-    throw Object.assign(new Error(`Tool ${tool.tool_name} adapter.query must be an object`), { status: 400 });
+    throw Object.assign(new Error(`Tool ${tool.tool_name} adapter.query must be an object`), {
+      status: 400
+    });
   }
   const headers = adapter.headers;
   if (headers !== void 0) {
     if (!isPlainObject(headers)) {
-      throw Object.assign(new Error(`Tool ${tool.tool_name} adapter.headers must be an object`), { status: 400 });
+      throw Object.assign(new Error(`Tool ${tool.tool_name} adapter.headers must be an object`), {
+        status: 400
+      });
     }
     for (const headerName of Object.keys(headers)) {
       const trimmed = String(headerName).trim();
       if (!trimmed || !/^[A-Za-z0-9-]+$/.test(trimmed)) {
-        throw Object.assign(new Error(`Tool ${tool.tool_name} adapter.headers has invalid header name: ${headerName}`), { status: 400 });
+        throw Object.assign(
+          new Error(
+            `Tool ${tool.tool_name} adapter.headers has invalid header name: ${headerName}`
+          ),
+          { status: 400 }
+        );
       }
     }
   }
   const responseMapping = adapter.response_mapping;
   if (responseMapping !== void 0) {
     if (!isPlainObject(responseMapping)) {
-      throw Object.assign(new Error(`Tool ${tool.tool_name} adapter.response_mapping must be an object`), { status: 400 });
+      throw Object.assign(
+        new Error(`Tool ${tool.tool_name} adapter.response_mapping must be an object`),
+        { status: 400 }
+      );
     }
     if (Object.keys(responseMapping).length === 0) {
-      throw Object.assign(new Error(`Tool ${tool.tool_name} adapter.response_mapping must not be empty`), { status: 400 });
+      throw Object.assign(
+        new Error(`Tool ${tool.tool_name} adapter.response_mapping must not be empty`),
+        { status: 400 }
+      );
     }
     const outputSchema = isPlainObject(tool.output_schema) ? tool.output_schema : null;
     const schemaType = String(outputSchema?.type ?? "").trim();
@@ -8056,13 +8645,23 @@ function validateAdapterShape(tool) {
     if (schemaType === "object" && schemaProperties) {
       for (const mappedKey of Object.keys(responseMapping)) {
         if (!Object.prototype.hasOwnProperty.call(schemaProperties, mappedKey)) {
-          throw Object.assign(new Error(`Tool ${tool.tool_name} adapter.response_mapping key "${mappedKey}" is not declared in output_schema.properties`), { status: 400 });
+          throw Object.assign(
+            new Error(
+              `Tool ${tool.tool_name} adapter.response_mapping key "${mappedKey}" is not declared in output_schema.properties`
+            ),
+            { status: 400 }
+          );
         }
       }
       const required = Array.isArray(outputSchema?.required) ? outputSchema.required.map((v) => String(v || "").trim()).filter(Boolean) : [];
       for (const requiredField of required) {
         if (!Object.prototype.hasOwnProperty.call(responseMapping, requiredField)) {
-          throw Object.assign(new Error(`Tool ${tool.tool_name} adapter.response_mapping must include required output field "${requiredField}"`), { status: 400 });
+          throw Object.assign(
+            new Error(
+              `Tool ${tool.tool_name} adapter.response_mapping must include required output field "${requiredField}"`
+            ),
+            { status: 400 }
+          );
         }
       }
     }
@@ -8070,7 +8669,10 @@ function validateAdapterShape(tool) {
 }
 function parseXappManifest(input, options) {
   if (!validate(input)) {
-    throw Object.assign(new Error("Invalid manifest"), { status: 400, details: validate.errors ?? null });
+    throw Object.assign(new Error("Invalid manifest"), {
+      status: 400,
+      details: validate.errors ?? null
+    });
   }
   const manifest = input;
   const paymentDefinitions = Array.isArray(manifest.payment_guard_definitions) ? manifest.payment_guard_definitions : [];
@@ -8096,8 +8698,10 @@ function parseXappManifest(input, options) {
     const [definitions, names, label] = list;
     for (const def of definitions) {
       const name = String(def?.name ?? "").trim();
-      if (!name) throw Object.assign(new Error(`${label} entries require non-empty name`), { status: 400 });
-      if (names.has(name)) throw Object.assign(new Error(`Duplicate ${label} name: ${name}`), { status: 400 });
+      if (!name)
+        throw Object.assign(new Error(`${label} entries require non-empty name`), { status: 400 });
+      if (names.has(name))
+        throw Object.assign(new Error(`Duplicate ${label} name: ${name}`), { status: 400 });
       names.add(name);
     }
   }
@@ -8116,19 +8720,32 @@ function parseXappManifest(input, options) {
     for (const [groupName, group] of Object.entries(manifest.endpoint_groups)) {
       for (const member of group.members) {
         if (!endpointNames.has(member)) {
-          throw Object.assign(new Error(`Endpoint group ${groupName} references unknown endpoint: ${member}`), { status: 400 });
+          throw Object.assign(
+            new Error(`Endpoint group ${groupName} references unknown endpoint: ${member}`),
+            { status: 400 }
+          );
         }
       }
     }
   }
-  const knownToolNames = new Set((manifest.tools ?? []).map((tool) => String(tool.tool_name || "").trim()));
+  const knownToolNames = new Set(
+    (manifest.tools ?? []).map((tool) => String(tool.tool_name || "").trim())
+  );
   const referencedPaymentDefinitionNames = /* @__PURE__ */ new Set();
   const referencedSubjectProfileDefinitionNames = /* @__PURE__ */ new Set();
-  const notificationDefinitionRegistry = buildNotificationDefinitionRegistry(manifest.notification_definitions ?? []);
-  const notificationTemplateRegistry = buildNotificationTemplateRegistry(manifest.notification_templates ?? []);
-  const invoiceDefinitionRegistry = buildInvoiceDefinitionRegistry(manifest.invoice_definitions ?? []);
+  const notificationDefinitionRegistry = buildNotificationDefinitionRegistry(
+    manifest.notification_definitions ?? []
+  );
+  const notificationTemplateRegistry = buildNotificationTemplateRegistry(
+    manifest.notification_templates ?? []
+  );
+  const invoiceDefinitionRegistry = buildInvoiceDefinitionRegistry(
+    manifest.invoice_definitions ?? []
+  );
   const invoiceTemplateRegistry = buildInvoiceTemplateRegistry(manifest.invoice_templates ?? []);
-  const subjectProfileDefinitionRegistry = buildSubjectProfileDefinitionRegistry(manifest.subject_profile_guard_definitions ?? []);
+  const subjectProfileDefinitionRegistry = buildSubjectProfileDefinitionRegistry(
+    manifest.subject_profile_guard_definitions ?? []
+  );
   const referencedNotificationDefinitionNames = /* @__PURE__ */ new Set();
   const referencedNotificationTemplateNames = /* @__PURE__ */ new Set();
   const referencedInvoiceDefinitionNames = /* @__PURE__ */ new Set();
@@ -8138,7 +8755,12 @@ function parseXappManifest(input, options) {
     if (!templateRef) continue;
     referencedNotificationTemplateNames.add(templateRef);
     if (!notificationTemplateRegistry.has(templateRef)) {
-      throw Object.assign(new Error(`notification_definitions entry ${String(def?.name ?? "unknown")} references unknown template_ref: ${templateRef}`), { status: 400 });
+      throw Object.assign(
+        new Error(
+          `notification_definitions entry ${String(def?.name ?? "unknown")} references unknown template_ref: ${templateRef}`
+        ),
+        { status: 400 }
+      );
     }
   }
   for (const def of invoiceDefinitions) {
@@ -8146,7 +8768,12 @@ function parseXappManifest(input, options) {
     if (!templateRef) continue;
     referencedInvoiceTemplateNames.add(templateRef);
     if (!invoiceTemplateRegistry.has(templateRef)) {
-      throw Object.assign(new Error(`invoice_definitions entry ${String(def?.name ?? "unknown")} references unknown invoice_template_ref: ${templateRef}`), { status: 400 });
+      throw Object.assign(
+        new Error(
+          `invoice_definitions entry ${String(def?.name ?? "unknown")} references unknown invoice_template_ref: ${templateRef}`
+        ),
+        { status: 400 }
+      );
     }
   }
   for (const widget of manifest.widgets ?? []) validateWidgetResultPresentation(widget);
@@ -8163,18 +8790,33 @@ function parseXappManifest(input, options) {
         manifest.endpoints && isRecord(manifest.endpoints) ? Object.keys(manifest.endpoints) : []
       );
       if (!endpointNames.has(endpointRef)) {
-        throw Object.assign(new Error(`Tool ${tool.tool_name} dispatch_policy.endpoint_ref references unknown endpoint: ${endpointRef}`), { status: 400 });
+        throw Object.assign(
+          new Error(
+            `Tool ${tool.tool_name} dispatch_policy.endpoint_ref references unknown endpoint: ${endpointRef}`
+          ),
+          { status: 400 }
+        );
       }
     }
     const requiredPolicyFields = Array.isArray(policy.required_policy_fields) ? policy.required_policy_fields : [];
     const normalizedRequired = requiredPolicyFields.map((v) => normalizeDispatchPolicyFieldName(String(v ?? ""))).filter(Boolean);
     for (const field of normalizedRequired) {
       if (!CANONICAL_REQUIRED_POLICY_FIELDS.has(field)) {
-        throw Object.assign(new Error(`Tool ${tool.tool_name} dispatch_policy.required_policy_fields contains unknown policy field: ${field}`), { status: 400 });
+        throw Object.assign(
+          new Error(
+            `Tool ${tool.tool_name} dispatch_policy.required_policy_fields contains unknown policy field: ${field}`
+          ),
+          { status: 400 }
+        );
       }
     }
     if (new Set(normalizedRequired).size !== normalizedRequired.length) {
-      throw Object.assign(new Error(`Tool ${tool.tool_name} dispatch_policy.required_policy_fields contains duplicates after normalization`), { status: 400 });
+      throw Object.assign(
+        new Error(
+          `Tool ${tool.tool_name} dispatch_policy.required_policy_fields contains duplicates after normalization`
+        ),
+        { status: 400 }
+      );
     }
     validateJsonFormsStepDispatch(tool, knownToolNames);
   }
@@ -8197,7 +8839,11 @@ function parseXappManifest(input, options) {
         source: "consumer_manifest",
         templates: notificationTemplateRegistry
       });
-      if (!resolved.ok) throw Object.assign(new Error(resolved.message), { status: 400, details: resolved.details });
+      if (!resolved.ok)
+        throw Object.assign(new Error(resolved.message), {
+          status: 400,
+          details: resolved.details
+        });
       return resolved.config;
     })() : null;
     const resolvedInvoiceConfig = invoiceRef && invoiceDefinitionRegistry.has(invoiceRef) ? (() => {
@@ -8207,7 +8853,11 @@ function parseXappManifest(input, options) {
         source: "consumer_manifest",
         templates: invoiceTemplateRegistry
       });
-      if (!resolved.ok) throw Object.assign(new Error(resolved.message), { status: 400, details: resolved.details });
+      if (!resolved.ok)
+        throw Object.assign(new Error(resolved.message), {
+          status: 400,
+          details: resolved.details
+        });
       return resolved.config;
     })() : null;
     const resolvedHookFamilyConfig = resolvedNotificationConfig ?? resolvedInvoiceConfig;
@@ -8215,14 +8865,24 @@ function parseXappManifest(input, options) {
     if (templateRef) {
       referencedNotificationTemplateNames.add(templateRef);
       if (!notificationTemplateRegistry.has(templateRef)) {
-        throw Object.assign(new Error(`Guard ${String(guard?.slug || "unknown")} references unknown template_ref: ${templateRef}`), { status: 400 });
+        throw Object.assign(
+          new Error(
+            `Guard ${String(guard?.slug || "unknown")} references unknown template_ref: ${templateRef}`
+          ),
+          { status: 400 }
+        );
       }
     }
     const invoiceTemplateRef = resolvedInvoiceConfig && isRecord(resolvedInvoiceConfig) ? readInvoiceTemplateRef(resolvedInvoiceConfig) : readInvoiceTemplateRef(guardConfig);
     if (invoiceTemplateRef) {
       referencedInvoiceTemplateNames.add(invoiceTemplateRef);
       if (!invoiceTemplateRegistry.has(invoiceTemplateRef)) {
-        throw Object.assign(new Error(`Guard ${String(guard?.slug || "unknown")} references unknown invoice_template_ref: ${invoiceTemplateRef}`), { status: 400 });
+        throw Object.assign(
+          new Error(
+            `Guard ${String(guard?.slug || "unknown")} references unknown invoice_template_ref: ${invoiceTemplateRef}`
+          ),
+          { status: 400 }
+        );
       }
     }
     validateGuardHookConfig(guard, resolvedHookFamilyConfig);
@@ -8232,7 +8892,11 @@ function parseXappManifest(input, options) {
         definition: subjectProfileDefinitionRegistry.get(subjectProfileGuardRef),
         source: "consumer_manifest"
       });
-      if (!resolved.ok) throw Object.assign(new Error(`Guard ${guardSlug}: ${resolved.message}`), { status: 400, details: resolved.details });
+      if (!resolved.ok)
+        throw Object.assign(new Error(`Guard ${guardSlug}: ${resolved.message}`), {
+          status: 400,
+          details: resolved.details
+        });
       return resolved.config;
     })() : null;
     const subjectProfileRequirement = resolveSubjectProfileRequirement(
@@ -8240,7 +8904,10 @@ function parseXappManifest(input, options) {
     );
     const expectsSubjectProfileContract = guardSlug === "subject-profile-check" || explicitPolicyKind === "subject_profile" || explicitPolicyKind === "subject-profile" || subjectProfileRequirement.ok && subjectProfileRequirement.source !== "none";
     if (expectsSubjectProfileContract && !subjectProfileRequirement.ok) {
-      throw Object.assign(new Error(`Guard ${guardSlug}: ${subjectProfileRequirement.message}`), { status: 400, details: subjectProfileRequirement.details });
+      throw Object.assign(new Error(`Guard ${guardSlug}: ${subjectProfileRequirement.message}`), {
+        status: 400,
+        details: subjectProfileRequirement.details
+      });
     }
     const ref = readPaymentGuardRef(guardConfig);
     if (!ref) continue;
@@ -8250,7 +8917,10 @@ function parseXappManifest(input, options) {
         String(guardConfig.tool_name ?? guardConfig.toolName ?? "").trim()
       );
       if (hasExplicitTool) continue;
-      throw Object.assign(new Error(`Guard ${guardSlug} references unknown payment_guard_ref: ${ref}`), { status: 400 });
+      throw Object.assign(
+        new Error(`Guard ${guardSlug} references unknown payment_guard_ref: ${ref}`),
+        { status: 400 }
+      );
     }
   }
   const emitWarning = options?.warn;
@@ -8258,34 +8928,61 @@ function parseXappManifest(input, options) {
     if (process.env.NODE_ENV === "test") return;
     emitWarning?.({ kind, details });
   };
-  const unreferencedPaymentDefinitions = Array.from(paymentDefinitionNames).filter((name) => !referencedPaymentDefinitionNames.has(name));
+  const unreferencedPaymentDefinitions = Array.from(paymentDefinitionNames).filter(
+    (name) => !referencedPaymentDefinitionNames.has(name)
+  );
   if (referencedPaymentDefinitionNames.size > 0 && unreferencedPaymentDefinitions.length > 0) {
-    warnIfNeeded("unreferenced_payment_guard_definitions", { definitions: unreferencedPaymentDefinitions });
+    warnIfNeeded("unreferenced_payment_guard_definitions", {
+      definitions: unreferencedPaymentDefinitions
+    });
   }
-  const unreferencedSubjectProfileDefinitions = Array.from(subjectProfileDefinitionNames).filter((name) => !referencedSubjectProfileDefinitionNames.has(name));
+  const unreferencedSubjectProfileDefinitions = Array.from(subjectProfileDefinitionNames).filter(
+    (name) => !referencedSubjectProfileDefinitionNames.has(name)
+  );
   if (referencedSubjectProfileDefinitionNames.size > 0 && unreferencedSubjectProfileDefinitions.length > 0) {
-    warnIfNeeded("unreferenced_subject_profile_guard_definitions", { definitions: unreferencedSubjectProfileDefinitions });
+    warnIfNeeded("unreferenced_subject_profile_guard_definitions", {
+      definitions: unreferencedSubjectProfileDefinitions
+    });
   }
-  const unreferencedNotificationDefinitions = Array.from(notificationDefinitionNames).filter((name) => !referencedNotificationDefinitionNames.has(name));
+  const unreferencedNotificationDefinitions = Array.from(notificationDefinitionNames).filter(
+    (name) => !referencedNotificationDefinitionNames.has(name)
+  );
   if (referencedNotificationDefinitionNames.size > 0 && unreferencedNotificationDefinitions.length > 0) {
-    warnIfNeeded("unreferenced_notification_definitions", { definitions: unreferencedNotificationDefinitions });
+    warnIfNeeded("unreferenced_notification_definitions", {
+      definitions: unreferencedNotificationDefinitions
+    });
   }
-  const unreferencedNotificationTemplates = Array.from(notificationTemplateNames).filter((name) => !referencedNotificationTemplateNames.has(name));
+  const unreferencedNotificationTemplates = Array.from(notificationTemplateNames).filter(
+    (name) => !referencedNotificationTemplateNames.has(name)
+  );
   if (notificationTemplateNames.size > 0 && unreferencedNotificationTemplates.length > 0) {
-    warnIfNeeded("unreferenced_notification_templates", { templates: unreferencedNotificationTemplates });
+    warnIfNeeded("unreferenced_notification_templates", {
+      templates: unreferencedNotificationTemplates
+    });
   }
-  const unreferencedInvoiceDefinitions = Array.from(invoiceDefinitionNames).filter((name) => !referencedInvoiceDefinitionNames.has(name));
+  const unreferencedInvoiceDefinitions = Array.from(invoiceDefinitionNames).filter(
+    (name) => !referencedInvoiceDefinitionNames.has(name)
+  );
   if (referencedInvoiceDefinitionNames.size > 0 && unreferencedInvoiceDefinitions.length > 0) {
-    warnIfNeeded("unreferenced_invoice_definitions", { definitions: unreferencedInvoiceDefinitions });
+    warnIfNeeded("unreferenced_invoice_definitions", {
+      definitions: unreferencedInvoiceDefinitions
+    });
   }
-  const unreferencedInvoiceTemplates = Array.from(invoiceTemplateNames).filter((name) => !referencedInvoiceTemplateNames.has(name));
+  const unreferencedInvoiceTemplates = Array.from(invoiceTemplateNames).filter(
+    (name) => !referencedInvoiceTemplateNames.has(name)
+  );
   if (invoiceTemplateNames.size > 0 && unreferencedInvoiceTemplates.length > 0) {
     warnIfNeeded("unreferenced_invoice_templates", { templates: unreferencedInvoiceTemplates });
   }
   return manifest;
 }
 export {
+  getManifestLocaleCandidates,
+  normalizeManifestLocale,
   parseXappManifest,
+  resolveInvoiceTemplateVariant,
+  resolveManifestLocalizedText,
+  resolveNotificationTemplateVariant,
   xappManifestJsonSchema
 };
 //# sourceMappingURL=index.js.map