@xemahq/kernel-contracts 0.33.0 → 0.35.0

package/dist/app-runtime/index.d.ts

@@ -5,5 +5,9 @@ export * from './lib/delegated-session';
 export * from './lib/app-client';
 export * from './lib/app-lockfile';
 export * from './lib/branding-config';
+export * from './lib/surface-kind';
+export * from './lib/app-shell-binding';
+export * from './lib/app-channel';
+export * from './lib/app-release';
 export * from './lib/app';
 //# sourceMappingURL=index.d.ts.map

package/dist/app-runtime/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/app-runtime/index.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,kBAAkB,CAAC;AACjC,cAAc,oBAAoB,CAAC;AACnC,cAAc,uBAAuB,CAAC;AACtC,cAAc,WAAW,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/app-runtime/index.ts"],"names":[],"mappings":"AAAA,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,kBAAkB,CAAC;AACjC,cAAc,oBAAoB,CAAC;AACnC,cAAc,uBAAuB,CAAC;AACtC,cAAc,oBAAoB,CAAC;AACnC,cAAc,yBAAyB,CAAC;AACxC,cAAc,mBAAmB,CAAC;AAClC,cAAc,mBAAmB,CAAC;AAClC,cAAc,WAAW,CAAC"}

package/dist/app-runtime/index.js

@@ -21,5 +21,9 @@ __exportStar(require("./lib/delegated-session"), exports);
 __exportStar(require("./lib/app-client"), exports);
 __exportStar(require("./lib/app-lockfile"), exports);
 __exportStar(require("./lib/branding-config"), exports);
+__exportStar(require("./lib/surface-kind"), exports);
+__exportStar(require("./lib/app-shell-binding"), exports);
+__exportStar(require("./lib/app-channel"), exports);
+__exportStar(require("./lib/app-release"), exports);
 __exportStar(require("./lib/app"), exports);
 //# sourceMappingURL=index.js.map

package/dist/app-runtime/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/app-runtime/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,sDAAoC;AACpC,wDAAsC;AACtC,yDAAuC;AACvC,0DAAwC;AACxC,mDAAiC;AACjC,qDAAmC;AACnC,wDAAsC;AACtC,4CAA0B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/app-runtime/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,sDAAoC;AACpC,wDAAsC;AACtC,yDAAuC;AACvC,0DAAwC;AACxC,mDAAiC;AACjC,qDAAmC;AACnC,wDAAsC;AACtC,qDAAmC;AACnC,0DAAwC;AACxC,oDAAkC;AAClC,oDAAkC;AAClC,4CAA0B"}

package/dist/app-runtime/lib/app-channel.d.ts

@@ -0,0 +1,7 @@
+import { z } from 'zod';
+export declare enum AppChannel {
+    Preview = "preview",
+    Live = "live"
+}
+export declare const AppChannelSchema: z.ZodEnum<typeof AppChannel>;
+//# sourceMappingURL=app-channel.d.ts.map

package/dist/app-runtime/lib/app-channel.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-channel.d.ts","sourceRoot":"","sources":["../../../src/app-runtime/lib/app-channel.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AA0BxB,oBAAY,UAAU;IACpB,OAAO,YAAY;IACnB,IAAI,SAAS;CACd;AAED,eAAO,MAAM,gBAAgB,8BAA2B,CAAC"}

package/dist/app-runtime/lib/app-channel.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AppChannelSchema = exports.AppChannel = void 0;
+const zod_1 = require("zod");
+var AppChannel;
+(function (AppChannel) {
+    AppChannel["Preview"] = "preview";
+    AppChannel["Live"] = "live";
+})(AppChannel || (exports.AppChannel = AppChannel = {}));
+exports.AppChannelSchema = zod_1.z.nativeEnum(AppChannel);
+//# sourceMappingURL=app-channel.js.map

package/dist/app-runtime/lib/app-channel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-channel.js","sourceRoot":"","sources":["../../../src/app-runtime/lib/app-channel.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AA0BxB,IAAY,UAGX;AAHD,WAAY,UAAU;IACpB,iCAAmB,CAAA;IACnB,2BAAa,CAAA;AACf,CAAC,EAHW,UAAU,0BAAV,UAAU,QAGrB;AAEY,QAAA,gBAAgB,GAAG,OAAC,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC"}

package/dist/app-runtime/lib/app-release.d.ts

@@ -0,0 +1,24 @@
+import { z } from 'zod';
+import { type AppLockfile } from './app-lockfile';
+export declare enum AppReleaseState {
+    Preparing = "preparing",
+    Prepared = "prepared",
+    Activating = "activating",
+    Active = "active",
+    Superseded = "superseded",
+    Failed = "failed"
+}
+export declare const AppReleaseStateSchema: z.ZodEnum<typeof AppReleaseState>;
+export interface AppRelease {
+    id: string;
+    appId: string;
+    version: number;
+    definition: unknown;
+    lockfile: AppLockfile;
+    schemaPlan: unknown;
+    state: AppReleaseState;
+    preparedAt?: string;
+    activatedAt?: string;
+}
+export declare const AppReleaseSchema: z.ZodType<AppRelease>;
+//# sourceMappingURL=app-release.d.ts.map

package/dist/app-runtime/lib/app-release.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-release.d.ts","sourceRoot":"","sources":["../../../src/app-runtime/lib/app-release.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAqB,KAAK,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAoBrE,oBAAY,eAAe;IACzB,SAAS,cAAc;IACvB,QAAQ,aAAa;IACrB,UAAU,eAAe;IACzB,MAAM,WAAW;IACjB,UAAU,eAAe;IACzB,MAAM,WAAW;CAClB;AAED,eAAO,MAAM,qBAAqB,mCAAgC,CAAC;AAmCnE,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,OAAO,CAAC;IACpB,QAAQ,EAAE,WAAW,CAAC;IACtB,UAAU,EAAE,OAAO,CAAC;IACpB,KAAK,EAAE,eAAe,CAAC;IACvB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,eAAO,MAAM,gBAAgB,EAYvB,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC"}

package/dist/app-runtime/lib/app-release.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AppReleaseSchema = exports.AppReleaseStateSchema = exports.AppReleaseState = void 0;
+const zod_1 = require("zod");
+const app_lockfile_1 = require("./app-lockfile");
+var AppReleaseState;
+(function (AppReleaseState) {
+    AppReleaseState["Preparing"] = "preparing";
+    AppReleaseState["Prepared"] = "prepared";
+    AppReleaseState["Activating"] = "activating";
+    AppReleaseState["Active"] = "active";
+    AppReleaseState["Superseded"] = "superseded";
+    AppReleaseState["Failed"] = "failed";
+})(AppReleaseState || (exports.AppReleaseState = AppReleaseState = {}));
+exports.AppReleaseStateSchema = zod_1.z.nativeEnum(AppReleaseState);
+exports.AppReleaseSchema = zod_1.z.object({
+    id: zod_1.z.string().min(1),
+    appId: zod_1.z.string().min(1),
+    version: zod_1.z.number().int().positive({
+        message: 'AppRelease.version must be a positive integer (1-based).',
+    }),
+    definition: zod_1.z.unknown(),
+    lockfile: app_lockfile_1.AppLockfileSchema,
+    schemaPlan: zod_1.z.unknown(),
+    state: exports.AppReleaseStateSchema,
+    preparedAt: zod_1.z.string().min(1).optional(),
+    activatedAt: zod_1.z.string().min(1).optional(),
+});
+//# sourceMappingURL=app-release.js.map

package/dist/app-runtime/lib/app-release.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-release.js","sourceRoot":"","sources":["../../../src/app-runtime/lib/app-release.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,iDAAqE;AAoBrE,IAAY,eAOX;AAPD,WAAY,eAAe;IACzB,0CAAuB,CAAA;IACvB,wCAAqB,CAAA;IACrB,4CAAyB,CAAA;IACzB,oCAAiB,CAAA;IACjB,4CAAyB,CAAA;IACzB,oCAAiB,CAAA;AACnB,CAAC,EAPW,eAAe,+BAAf,eAAe,QAO1B;AAEY,QAAA,qBAAqB,GAAG,OAAC,CAAC,UAAU,CAAC,eAAe,CAAC,CAAC;AA+CtD,QAAA,gBAAgB,GAAG,OAAC,CAAC,MAAM,CAAC;IACvC,EAAE,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC;QACjC,OAAO,EAAE,0DAA0D;KACpE,CAAC;IACF,UAAU,EAAE,OAAC,CAAC,OAAO,EAAE;IACvB,QAAQ,EAAE,gCAAiB;IAC3B,UAAU,EAAE,OAAC,CAAC,OAAO,EAAE;IACvB,KAAK,EAAE,6BAAqB;IAC5B,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACxC,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC1C,CAA0B,CAAC"}

package/dist/app-runtime/lib/app-shell-binding.d.ts

@@ -0,0 +1,38 @@
+import { z } from 'zod';
+import { AudienceKind } from './audience-policy';
+export declare enum AppShellKind {
+    Hosted = "hosted",
+    Standalone = "standalone",
+    Embedded = "embedded",
+    Headless = "headless"
+}
+export declare const AppShellKindSchema: z.ZodEnum<typeof AppShellKind>;
+export declare enum AppHostBinding {
+    Xema = "xema",
+    CustomDomain = "custom-domain",
+    PathBased = "path-based"
+}
+export declare const AppHostBindingSchema: z.ZodEnum<typeof AppHostBinding>;
+export interface AppSurfaceDimensions {
+    readonly shell: AppShellKind;
+    readonly audience: AudienceKind;
+    readonly host: AppHostBinding;
+}
+export declare const AppSurfaceDimensionsSchema: z.ZodType<AppSurfaceDimensions>;
+export declare enum AppSurfaceConflictCode {
+    HeadlessWithChrome = "headless-with-chrome",
+    EmbeddedIsChrome = "embedded-is-chrome",
+    StandaloneNeedsOwnHost = "standalone-needs-own-host",
+    EmbeddedNeedsXemaHost = "embedded-needs-xema-host"
+}
+export interface AppSurfaceConflict {
+    readonly code: AppSurfaceConflictCode;
+    readonly message: string;
+}
+export interface AppSurfaceValidation {
+    readonly ok: boolean;
+    readonly conflicts: readonly AppSurfaceConflict[];
+}
+export declare function validateAppSurfaceCombination(dims: AppSurfaceDimensions): AppSurfaceValidation;
+export declare function isHeadlessEmbeddedContradiction(shell: AppShellKind, alsoEmbedded: boolean): boolean;
+//# sourceMappingURL=app-shell-binding.d.ts.map

package/dist/app-runtime/lib/app-shell-binding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-shell-binding.d.ts","sourceRoot":"","sources":["../../../src/app-runtime/lib/app-shell-binding.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAyBjD,oBAAY,YAAY;IACtB,MAAM,WAAW;IACjB,UAAU,eAAe;IACzB,QAAQ,aAAa;IACrB,QAAQ,aAAa;CACtB;AAED,eAAO,MAAM,kBAAkB,gCAA6B,CAAC;AAY7D,oBAAY,cAAc;IACxB,IAAI,SAAS;IACb,YAAY,kBAAkB;IAC9B,SAAS,eAAe;CACzB;AAED,eAAO,MAAM,oBAAoB,kCAA+B,CAAC;AAGjE,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAChC,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;CAC/B;AAED,eAAO,MAAM,0BAA0B,EAAE,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAMzB,CAAC;AAM/C,oBAAY,sBAAsB;IAChC,kBAAkB,yBAAyB;IAC3C,gBAAgB,uBAAuB;IACvC,sBAAsB,8BAA8B;IACpD,qBAAqB,6BAA6B;CACnD;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,SAAS,EAAE,SAAS,kBAAkB,EAAE,CAAC;CACnD;AAsBD,wBAAgB,6BAA6B,CAC3C,IAAI,EAAE,oBAAoB,GACzB,oBAAoB,CAgCtB;AASD,wBAAgB,+BAA+B,CAC7C,KAAK,EAAE,YAAY,EACnB,YAAY,EAAE,OAAO,GACpB,OAAO,CAET"}

package/dist/app-runtime/lib/app-shell-binding.js

@@ -0,0 +1,58 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AppSurfaceConflictCode = exports.AppSurfaceDimensionsSchema = exports.AppHostBindingSchema = exports.AppHostBinding = exports.AppShellKindSchema = exports.AppShellKind = void 0;
+exports.validateAppSurfaceCombination = validateAppSurfaceCombination;
+exports.isHeadlessEmbeddedContradiction = isHeadlessEmbeddedContradiction;
+const zod_1 = require("zod");
+const audience_policy_1 = require("./audience-policy");
+var AppShellKind;
+(function (AppShellKind) {
+    AppShellKind["Hosted"] = "hosted";
+    AppShellKind["Standalone"] = "standalone";
+    AppShellKind["Embedded"] = "embedded";
+    AppShellKind["Headless"] = "headless";
+})(AppShellKind || (exports.AppShellKind = AppShellKind = {}));
+exports.AppShellKindSchema = zod_1.z.nativeEnum(AppShellKind);
+var AppHostBinding;
+(function (AppHostBinding) {
+    AppHostBinding["Xema"] = "xema";
+    AppHostBinding["CustomDomain"] = "custom-domain";
+    AppHostBinding["PathBased"] = "path-based";
+})(AppHostBinding || (exports.AppHostBinding = AppHostBinding = {}));
+exports.AppHostBindingSchema = zod_1.z.nativeEnum(AppHostBinding);
+exports.AppSurfaceDimensionsSchema = zod_1.z
+    .object({
+    shell: exports.AppShellKindSchema,
+    audience: zod_1.z.nativeEnum(audience_policy_1.AudienceKind),
+    host: exports.AppHostBindingSchema,
+})
+    .strict();
+var AppSurfaceConflictCode;
+(function (AppSurfaceConflictCode) {
+    AppSurfaceConflictCode["HeadlessWithChrome"] = "headless-with-chrome";
+    AppSurfaceConflictCode["EmbeddedIsChrome"] = "embedded-is-chrome";
+    AppSurfaceConflictCode["StandaloneNeedsOwnHost"] = "standalone-needs-own-host";
+    AppSurfaceConflictCode["EmbeddedNeedsXemaHost"] = "embedded-needs-xema-host";
+})(AppSurfaceConflictCode || (exports.AppSurfaceConflictCode = AppSurfaceConflictCode = {}));
+function validateAppSurfaceCombination(dims) {
+    const conflicts = [];
+    if (dims.shell === AppShellKind.Standalone &&
+        dims.host === AppHostBinding.PathBased) {
+        conflicts.push({
+            code: AppSurfaceConflictCode.StandaloneNeedsOwnHost,
+            message: 'A standalone app has its own full-page surface and cannot be path-based on a shared host; use xema or custom-domain.',
+        });
+    }
+    if (dims.shell === AppShellKind.Embedded &&
+        dims.host !== AppHostBinding.Xema) {
+        conflicts.push({
+            code: AppSurfaceConflictCode.EmbeddedNeedsXemaHost,
+            message: "An embedded app is served into a third-party page and relies on the Xema origin's CSP/cookies; it must be xema-hosted.",
+        });
+    }
+    return { ok: conflicts.length === 0, conflicts };
+}
+function isHeadlessEmbeddedContradiction(shell, alsoEmbedded) {
+    return shell === AppShellKind.Headless && alsoEmbedded;
+}
+//# sourceMappingURL=app-shell-binding.js.map

package/dist/app-runtime/lib/app-shell-binding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-shell-binding.js","sourceRoot":"","sources":["../../../src/app-runtime/lib/app-shell-binding.ts"],"names":[],"mappings":";;;AA8GA,sEAkCC;AASD,0EAKC;AA9JD,6BAAwB;AAExB,uDAAiD;AAyBjD,IAAY,YAKX;AALD,WAAY,YAAY;IACtB,iCAAiB,CAAA;IACjB,yCAAyB,CAAA;IACzB,qCAAqB,CAAA;IACrB,qCAAqB,CAAA;AACvB,CAAC,EALW,YAAY,4BAAZ,YAAY,QAKvB;AAEY,QAAA,kBAAkB,GAAG,OAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;AAY7D,IAAY,cAIX;AAJD,WAAY,cAAc;IACxB,+BAAa,CAAA;IACb,gDAA8B,CAAA;IAC9B,0CAAwB,CAAA;AAC1B,CAAC,EAJW,cAAc,8BAAd,cAAc,QAIzB;AAEY,QAAA,oBAAoB,GAAG,OAAC,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC;AASpD,QAAA,0BAA0B,GAAoC,OAAC;KACzE,MAAM,CAAC;IACN,KAAK,EAAE,0BAAkB;IACzB,QAAQ,EAAE,OAAC,CAAC,UAAU,CAAC,8BAAY,CAAC;IACpC,IAAI,EAAE,4BAAoB;CAC3B,CAAC;KACD,MAAM,EAAqC,CAAC;AAM/C,IAAY,sBAKX;AALD,WAAY,sBAAsB;IAChC,qEAA2C,CAAA;IAC3C,iEAAuC,CAAA;IACvC,8EAAoD,CAAA;IACpD,4EAAkD,CAAA;AACpD,CAAC,EALW,sBAAsB,sCAAtB,sBAAsB,QAKjC;AAgCD,SAAgB,6BAA6B,CAC3C,IAA0B;IAE1B,MAAM,SAAS,GAAyB,EAAE,CAAC;IAQ3C,IACE,IAAI,CAAC,KAAK,KAAK,YAAY,CAAC,UAAU;QACtC,IAAI,CAAC,IAAI,KAAK,cAAc,CAAC,SAAS,EACtC,CAAC;QACD,SAAS,CAAC,IAAI,CAAC;YACb,IAAI,EAAE,sBAAsB,CAAC,sBAAsB;YACnD,OAAO,EACL,sHAAsH;SACzH,CAAC,CAAC;IACL,CAAC;IAED,IACE,IAAI,CAAC,KAAK,KAAK,YAAY,CAAC,QAAQ;QACpC,IAAI,CAAC,IAAI,KAAK,cAAc,CAAC,IAAI,EACjC,CAAC;QACD,SAAS,CAAC,IAAI,CAAC;YACb,IAAI,EAAE,sBAAsB,CAAC,qBAAqB;YAClD,OAAO,EACL,wHAAwH;SAC3H,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,SAAS,EAAE,CAAC;AACnD,CAAC;AASD,SAAgB,+BAA+B,CAC7C,KAAmB,EACnB,YAAqB;IAErB,OAAO,KAAK,KAAK,YAAY,CAAC,QAAQ,IAAI,YAAY,CAAC;AACzD,CAAC"}

package/dist/app-runtime/lib/app.d.ts

@@ -6,6 +6,7 @@ import { type BiomeInstall } from './biome-install';
 import { type AudiencePolicy } from './audience-policy';
 import { type BrandingConfig } from './branding-config';
 import { type AppLockfile } from './app-lockfile';
+import { SurfaceKind } from './surface-kind';
 export interface CapabilityPolicyOverride {
     capability: CapabilityRef;
     allowedResources?: readonly string[];
@@ -21,6 +22,8 @@ export interface App {
     capabilityPolicy: CapabilityPolicyOverride[];
     branding: BrandingConfig;
     lockfile: AppLockfile;
+    surface: SurfaceKind;
+    activeReleaseId?: string;
 }
 export declare const AppSchema: z.ZodType<App>;
 //# sourceMappingURL=app.d.ts.map

package/dist/app-runtime/lib/app.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../../../src/app-runtime/lib/app.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAEL,KAAK,aAAa,EACnB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAEL,KAAK,aAAa,EACnB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAsB,KAAK,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACxE,OAAO,EAAwB,KAAK,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAC9E,OAAO,EAAwB,KAAK,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAC9E,OAAO,EAAqB,KAAK,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAUrE,MAAM,WAAW,wBAAwB;IACvC,UAAU,EAAE,aAAa,CAAC;IAC1B,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,mBAAmB,CAAC,EAAE,SAAS,uBAAuB,EAAE,CAAC;IACzD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,eAAO,MAAM,8BAA8B,EAKrC,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;AAqB1C,MAAM,WAAW,GAAG;IAClB,GAAG,EAAE,aAAa,CAAC;IACnB,eAAe,EAAE,YAAY,EAAE,CAAC;IAChC,WAAW,EAAE,uBAAuB,CAAC;IACrC,SAAS,EAAE,cAAc,EAAE,CAAC;IAC5B,gBAAgB,EAAE,wBAAwB,EAAE,CAAC;IAC7C,QAAQ,EAAE,cAAc,CAAC;IACzB,QAAQ,EAAE,WAAW,CAAC;CACvB;AAED,eAAO,MAAM,SAAS,EAchB,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC"}
+{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../../../src/app-runtime/lib/app.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAEL,KAAK,aAAa,EACnB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAEL,KAAK,uBAAuB,EAC7B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAEL,KAAK,aAAa,EACnB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAsB,KAAK,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACxE,OAAO,EAAwB,KAAK,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAC9E,OAAO,EAAwB,KAAK,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAC9E,OAAO,EAAqB,KAAK,WAAW,EAAE,MAAM,gBAAgB,CAAC;AACrE,OAAO,EAAE,WAAW,EAAqB,MAAM,gBAAgB,CAAC;AAUhE,MAAM,WAAW,wBAAwB;IACvC,UAAU,EAAE,aAAa,CAAC;IAC1B,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,mBAAmB,CAAC,EAAE,SAAS,uBAAuB,EAAE,CAAC;IACzD,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,eAAO,MAAM,8BAA8B,EAKrC,CAAC,CAAC,OAAO,CAAC,wBAAwB,CAAC,CAAC;AA+B1C,MAAM,WAAW,GAAG;IAClB,GAAG,EAAE,aAAa,CAAC;IACnB,eAAe,EAAE,YAAY,EAAE,CAAC;IAChC,WAAW,EAAE,uBAAuB,CAAC;IACrC,SAAS,EAAE,cAAc,EAAE,CAAC;IAC5B,gBAAgB,EAAE,wBAAwB,EAAE,CAAC;IAC7C,QAAQ,EAAE,cAAc,CAAC;IACzB,QAAQ,EAAE,WAAW,CAAC;IACtB,OAAO,EAAE,WAAW,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,eAAO,MAAM,SAAS,EAgCH,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC"}

package/dist/app-runtime/lib/app.js

@@ -9,17 +9,17 @@ const biome_install_1 = require("./biome-install");
 const audience_policy_1 = require("./audience-policy");
 const branding_config_1 = require("./branding-config");
 const app_lockfile_1 = require("./app-lockfile");
+const surface_kind_1 = require("./surface-kind");
 exports.CapabilityPolicyOverrideSchema = zod_1.z.object({
     capability: capability_1.CapabilityRefSchema,
     allowedResources: zod_1.z.array(zod_1.z.string().min(1)).readonly().optional(),
     allowedEnvironments: zod_1.z.array(execution_environment_1.ExecutionEnvironmentRefSchema).readonly().optional(),
     rateLimit: zod_1.z.number().int().positive().optional(),
 });
-exports.AppSchema = zod_1.z.object({
+exports.AppSchema = zod_1.z
+    .object({
     ref: object_1.XemaObjectRefSchema,
-    installedBiomes: zod_1.z.array(biome_install_1.BiomeInstallSchema).min(1, {
-        message: 'App.installedBiomes must contain at least one BiomeInstall; an App with zero biomes has no capability surface.',
-    }),
+    installedBiomes: zod_1.z.array(biome_install_1.BiomeInstallSchema),
     defaultZone: execution_environment_1.ExecutionEnvironmentRefSchema,
     audiences: zod_1.z.array(audience_policy_1.AudiencePolicySchema).min(1, {
         message: 'App.audiences must contain at least one AudiencePolicy; an App with zero audiences is unreachable.',
@@ -27,5 +27,20 @@ exports.AppSchema = zod_1.z.object({
     capabilityPolicy: zod_1.z.array(exports.CapabilityPolicyOverrideSchema),
     branding: branding_config_1.BrandingConfigSchema,
     lockfile: app_lockfile_1.AppLockfileSchema,
+    surface: surface_kind_1.SurfaceKindSchema,
+    activeReleaseId: zod_1.z.string().min(1).optional(),
+})
+    .superRefine((app, ctx) => {
+    if (app.surface !== surface_kind_1.SurfaceKind.Declared && app.installedBiomes.length === 0) {
+        ctx.addIssue({
+            code: 'too_small',
+            minimum: 1,
+            origin: 'array',
+            inclusive: true,
+            path: ['installedBiomes'],
+            message: `App.installedBiomes must contain at least one BiomeInstall for a '${app.surface}' App; ` +
+                'one with zero biomes has no capability surface. Only a `declared` App may install none.',
+        });
+    }
 });
 //# sourceMappingURL=app.js.map

package/dist/app-runtime/lib/app.js.map

@@ -1 +1 @@
-{"version":3,"file":"app.js","sourceRoot":"","sources":["../../../src/app-runtime/lib/app.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,iDAG0B;AAC1B,uEAGqC;AACrC,yCAGsB;AACtB,mDAAwE;AACxE,uDAA8E;AAC9E,uDAA8E;AAC9E,iDAAqE;AAiBxD,QAAA,8BAA8B,GAAG,OAAC,CAAC,MAAM,CAAC;IACrD,UAAU,EAAE,gCAAmB;IAC/B,gBAAgB,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAClE,mBAAmB,EAAE,OAAC,CAAC,KAAK,CAAC,qDAA6B,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACjF,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAClD,CAAwC,CAAC;AA+B7B,QAAA,SAAS,GAAG,OAAC,CAAC,MAAM,CAAC;IAChC,GAAG,EAAE,4BAAmB;IACxB,eAAe,EAAE,OAAC,CAAC,KAAK,CAAC,kCAAkB,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE;QAClD,OAAO,EACL,gHAAgH;KACnH,CAAC;IACF,WAAW,EAAE,qDAA6B;IAC1C,SAAS,EAAE,OAAC,CAAC,KAAK,CAAC,sCAAoB,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE;QAC9C,OAAO,EACL,oGAAoG;KACvG,CAAC;IACF,gBAAgB,EAAE,OAAC,CAAC,KAAK,CAAC,sCAA8B,CAAC;IACzD,QAAQ,EAAE,sCAAoB;IAC9B,QAAQ,EAAE,gCAAiB;CAC5B,CAAmB,CAAC"}
+{"version":3,"file":"app.js","sourceRoot":"","sources":["../../../src/app-runtime/lib/app.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,iDAG0B;AAC1B,uEAGqC;AACrC,yCAGsB;AACtB,mDAAwE;AACxE,uDAA8E;AAC9E,uDAA8E;AAC9E,iDAAqE;AACrE,iDAAgE;AAiBnD,QAAA,8BAA8B,GAAG,OAAC,CAAC,MAAM,CAAC;IACrD,UAAU,EAAE,gCAAmB;IAC/B,gBAAgB,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAClE,mBAAmB,EAAE,OAAC,CAAC,KAAK,CAAC,qDAA6B,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACjF,SAAS,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;CAClD,CAAwC,CAAC;AA2C7B,QAAA,SAAS,GAAG,OAAC;KACvB,MAAM,CAAC;IACN,GAAG,EAAE,4BAAmB;IACxB,eAAe,EAAE,OAAC,CAAC,KAAK,CAAC,kCAAkB,CAAC;IAC5C,WAAW,EAAE,qDAA6B;IAC1C,SAAS,EAAE,OAAC,CAAC,KAAK,CAAC,sCAAoB,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE;QAC9C,OAAO,EACL,oGAAoG;KACvG,CAAC;IACF,gBAAgB,EAAE,OAAC,CAAC,KAAK,CAAC,sCAA8B,CAAC;IACzD,QAAQ,EAAE,sCAAoB;IAC9B,QAAQ,EAAE,gCAAiB;IAC3B,OAAO,EAAE,gCAAiB;IAC1B,eAAe,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CAC9C,CAAC;KACD,WAAW,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;IAKxB,IAAI,GAAG,CAAC,OAAO,KAAK,0BAAW,CAAC,QAAQ,IAAI,GAAG,CAAC,eAAe,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC7E,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,WAAW;YACjB,OAAO,EAAE,CAAC;YACV,MAAM,EAAE,OAAO;YACf,SAAS,EAAE,IAAI;YACf,IAAI,EAAE,CAAC,iBAAiB,CAAC;YACzB,OAAO,EACL,qEAAqE,GAAG,CAAC,OAAO,SAAS;gBACzF,yFAAyF;SAC5F,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAA8B,CAAC"}

package/dist/app-runtime/lib/branding-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"branding-config.d.ts","sourceRoot":"","sources":["../../../src/app-runtime/lib/branding-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AA4BxB,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACpC;AAED,eAAO,MAAM,oBAAoB,EAkB3B,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC"}
+{"version":3,"file":"branding-config.d.ts","sourceRoot":"","sources":["../../../src/app-runtime/lib/branding-config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAkCxB,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACpC;AAED,eAAO,MAAM,oBAAoB,EAkB3B,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC"}

package/dist/app-runtime/lib/branding-config.js.map

@@ -1 +1 @@
-{"version":3,"file":"branding-config.js","sourceRoot":"","sources":["../../../src/app-runtime/lib/branding-config.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAaxB,MAAM,mBAAmB,GACvB,uIAAuI,CAAC;AAqB7H,QAAA,oBAAoB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC3C,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE;QAC7B,OAAO,EAAE,wDAAwD;KAClE,CAAC;IACF,OAAO,EAAE,OAAC;SACP,MAAM,EAAE;SACR,GAAG,CAAC;QACH,OAAO,EAAE,6CAA6C;KACvD,CAAC;SACD,QAAQ,EAAE;IACb,YAAY,EAAE,OAAC;SACZ,MAAM,EAAE;SACR,KAAK,CAAC,mBAAmB,EAAE;QAC1B,OAAO,EACL,6IAA6I;KAChJ,CAAC;SACD,QAAQ,EAAE;IACb,SAAS,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACrE,CAA8B,CAAC"}
+{"version":3,"file":"branding-config.js","sourceRoot":"","sources":["../../../src/app-runtime/lib/branding-config.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAaxB,MAAM,mBAAmB,GACvB,uIAAuI,CAAC;AA2B7H,QAAA,oBAAoB,GAAG,OAAC,CAAC,MAAM,CAAC;IAC3C,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE;QAC7B,OAAO,EAAE,wDAAwD;KAClE,CAAC;IACF,OAAO,EAAE,OAAC;SACP,MAAM,EAAE;SACR,GAAG,CAAC;QACH,OAAO,EAAE,6CAA6C;KACvD,CAAC;SACD,QAAQ,EAAE;IACb,YAAY,EAAE,OAAC;SACZ,MAAM,EAAE;SACR,KAAK,CAAC,mBAAmB,EAAE;QAC1B,OAAO,EACL,6IAA6I;KAChJ,CAAC;SACD,QAAQ,EAAE;IACb,SAAS,EAAE,OAAC,CAAC,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACrE,CAA8B,CAAC"}

package/dist/app-runtime/lib/delegated-session.js

@@ -6,7 +6,7 @@ const capability_1 = require("../../capability");
 const execution_environment_1 = require("../../execution-environment");
 exports.DelegatedSessionClaimsSchema = zod_1.z.object({
     sub: zod_1.z.string().min(1, {
-        message: 'DelegatedSessionClaims.sub must be a non-empty subject identifier (e.g. `external-user:<id>` or `anon:<random>`).',
+        message: 'DelegatedSessionClaims.sub must be a non-empty subject identifier (e.g. `external-subject:<id>` or `anon:<random>`).',
     }),
     act: zod_1.z.string().min(1, {
         message: 'DelegatedSessionClaims.act must be a non-empty actor identifier (e.g. `app:<appClientId>`).',

package/dist/app-runtime/lib/delegated-session.js.map

@@ -1 +1 @@
-{"version":3,"file":"delegated-session.js","sourceRoot":"","sources":["../../../src/app-runtime/lib/delegated-session.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,iDAG0B;AAC1B,uEAGqC;AAoCxB,QAAA,4BAA4B,GAAG,OAAC,CAAC,MAAM,CAAC;IACnD,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE;QACrB,OAAO,EACL,mHAAmH;KACtH,CAAC;IACF,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE;QACrB,OAAO,EACL,6FAA6F;KAChG,CAAC;IACF,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE;QACrB,OAAO,EAAE,uDAAuD;KACjE,CAAC;IACF,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE;QACzB,OAAO,EAAE,+DAA+D;KACzE,CAAC;IACF,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE;QACzB,OAAO,EAAE,+DAA+D;KACzE,CAAC;IACF,WAAW,EAAE,qDAA6B;IAC1C,YAAY,EAAE,OAAC,CAAC,KAAK,CAAC,gCAAmB,CAAC;IAC1C,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC;QAC7B,OAAO,EACL,yFAAyF;KAC5F,CAAC;CACH,CAAsC,CAAC"}
+{"version":3,"file":"delegated-session.js","sourceRoot":"","sources":["../../../src/app-runtime/lib/delegated-session.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AACxB,iDAG0B;AAC1B,uEAGqC;AAoCxB,QAAA,4BAA4B,GAAG,OAAC,CAAC,MAAM,CAAC;IACnD,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE;QACrB,OAAO,EACL,sHAAsH;KACzH,CAAC;IACF,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE;QACrB,OAAO,EACL,6FAA6F;KAChG,CAAC;IACF,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE;QACrB,OAAO,EAAE,uDAAuD;KACjE,CAAC;IACF,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE;QACzB,OAAO,EAAE,+DAA+D;KACzE,CAAC;IACF,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE;QACzB,OAAO,EAAE,+DAA+D;KACzE,CAAC;IACF,WAAW,EAAE,qDAA6B;IAC1C,YAAY,EAAE,OAAC,CAAC,KAAK,CAAC,gCAAmB,CAAC;IAC1C,GAAG,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC;QAC7B,OAAO,EACL,yFAAyF;KAC5F,CAAC;CACH,CAAsC,CAAC"}

package/dist/app-runtime/lib/surface-kind.d.ts

@@ -0,0 +1,8 @@
+import { z } from 'zod';
+export declare enum SurfaceKind {
+    Declared = "declared",
+    Composed = "composed",
+    Coded = "coded"
+}
+export declare const SurfaceKindSchema: z.ZodEnum<typeof SurfaceKind>;
+//# sourceMappingURL=surface-kind.d.ts.map

package/dist/app-runtime/lib/surface-kind.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"surface-kind.d.ts","sourceRoot":"","sources":["../../../src/app-runtime/lib/surface-kind.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAuBxB,oBAAY,WAAW;IACrB,QAAQ,aAAa;IACrB,QAAQ,aAAa;IACrB,KAAK,UAAU;CAChB;AAED,eAAO,MAAM,iBAAiB,+BAA4B,CAAC"}

package/dist/app-runtime/lib/surface-kind.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SurfaceKindSchema = exports.SurfaceKind = void 0;
+const zod_1 = require("zod");
+var SurfaceKind;
+(function (SurfaceKind) {
+    SurfaceKind["Declared"] = "declared";
+    SurfaceKind["Composed"] = "composed";
+    SurfaceKind["Coded"] = "coded";
+})(SurfaceKind || (exports.SurfaceKind = SurfaceKind = {}));
+exports.SurfaceKindSchema = zod_1.z.nativeEnum(SurfaceKind);
+//# sourceMappingURL=surface-kind.js.map

package/dist/app-runtime/lib/surface-kind.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"surface-kind.js","sourceRoot":"","sources":["../../../src/app-runtime/lib/surface-kind.ts"],"names":[],"mappings":";;;AAAA,6BAAwB;AAuBxB,IAAY,WAIX;AAJD,WAAY,WAAW;IACrB,oCAAqB,CAAA;IACrB,oCAAqB,CAAA;IACrB,8BAAe,CAAA;AACjB,CAAC,EAJW,WAAW,2BAAX,WAAW,QAItB;AAEY,QAAA,iBAAiB,GAAG,OAAC,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC"}

package/dist/capability/index.d.ts

@@ -1,5 +1,6 @@
 export * from './lib/capability-ref';
 export * from './lib/connector-capability-ref';
+export * from './lib/first-party-capability-domains';
 export * from './lib/capability-grant';
 export * from './lib/capability-policy';
 export * from './lib/permission-profile';

package/dist/capability/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/capability/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC;AACrC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,0BAA0B,CAAC;AACzC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,iBAAiB,CAAC;AAChC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/capability/index.ts"],"names":[],"mappings":"AAAA,cAAc,sBAAsB,CAAC;AACrC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,sCAAsC,CAAC;AACrD,cAAc,wBAAwB,CAAC;AACvC,cAAc,yBAAyB,CAAC;AACxC,cAAc,0BAA0B,CAAC;AACzC,cAAc,gCAAgC,CAAC;AAC/C,cAAc,iBAAiB,CAAC;AAChC,cAAc,+BAA+B,CAAC;AAC9C,cAAc,cAAc,CAAC"}

package/dist/capability/index.js

@@ -16,6 +16,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./lib/capability-ref"), exports);
 __exportStar(require("./lib/connector-capability-ref"), exports);
+__exportStar(require("./lib/first-party-capability-domains"), exports);
 __exportStar(require("./lib/capability-grant"), exports);
 __exportStar(require("./lib/capability-policy"), exports);
 __exportStar(require("./lib/permission-profile"), exports);

package/dist/capability/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/capability/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,uDAAqC;AACrC,iEAA+C;AAC/C,yDAAuC;AACvC,0DAAwC;AACxC,2DAAyC;AACzC,iEAA+C;AAC/C,kDAAgC;AAChC,gEAA8C;AAC9C,+CAA6B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/capability/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,uDAAqC;AACrC,iEAA+C;AAC/C,uEAAqD;AACrD,yDAAuC;AACvC,0DAAwC;AACxC,2DAAyC;AACzC,iEAA+C;AAC/C,kDAAgC;AAChC,gEAA8C;AAC9C,+CAA6B"}

package/dist/capability/lib/first-party-capability-domains.d.ts

@@ -0,0 +1,29 @@
+import { z } from 'zod';
+export declare const FIRST_PARTY_CAPABILITY_DOMAINS: readonly ["xema-shell", "store", "biome", "connector", "kb", "agent", "memory", "model", "model-resolution", "mcp-tool", "workflow", "studio", "interactive-session", "agent-session", "document", "notification", "space", "mailops", "workspace", "worker-runtime", "artifact", "search"];
+export type FirstPartyCapabilityDomain = (typeof FIRST_PARTY_CAPABILITY_DOMAINS)[number];
+export declare const FirstPartyCapabilityDomainSchema: z.ZodEnum<{
+    search: "search";
+    kb: "kb";
+    memory: "memory";
+    agent: "agent";
+    studio: "studio";
+    "agent-session": "agent-session";
+    document: "document";
+    artifact: "artifact";
+    workflow: "workflow";
+    biome: "biome";
+    model: "model";
+    connector: "connector";
+    "xema-shell": "xema-shell";
+    store: "store";
+    "model-resolution": "model-resolution";
+    "mcp-tool": "mcp-tool";
+    "interactive-session": "interactive-session";
+    notification: "notification";
+    space: "space";
+    mailops: "mailops";
+    workspace: "workspace";
+    "worker-runtime": "worker-runtime";
+}>;
+export declare function isFirstPartyCapabilityDomain(domain: string): domain is FirstPartyCapabilityDomain;
+//# sourceMappingURL=first-party-capability-domains.d.ts.map

package/dist/capability/lib/first-party-capability-domains.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"first-party-capability-domains.d.ts","sourceRoot":"","sources":["../../../src/capability/lib/first-party-capability-domains.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AA0BxB,eAAO,MAAM,8BAA8B,6RAuBjC,CAAC;AAEX,MAAM,MAAM,0BAA0B,GACpC,CAAC,OAAO,8BAA8B,CAAC,CAAC,MAAM,CAAC,CAAC;AAElD,eAAO,MAAM,gCAAgC;;;;;;;;;;;;;;;;;;;;;;;EAK5C,CAAC;AAYF,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,MAAM,GACb,MAAM,IAAI,0BAA0B,CAEtC"}

package/dist/capability/lib/first-party-capability-domains.js

@@ -0,0 +1,35 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FirstPartyCapabilityDomainSchema = exports.FIRST_PARTY_CAPABILITY_DOMAINS = void 0;
+exports.isFirstPartyCapabilityDomain = isFirstPartyCapabilityDomain;
+const zod_1 = require("zod");
+exports.FIRST_PARTY_CAPABILITY_DOMAINS = [
+    'xema-shell',
+    'store',
+    'biome',
+    'connector',
+    'kb',
+    'agent',
+    'memory',
+    'model',
+    'model-resolution',
+    'mcp-tool',
+    'workflow',
+    'studio',
+    'interactive-session',
+    'agent-session',
+    'document',
+    'notification',
+    'space',
+    'mailops',
+    'workspace',
+    'worker-runtime',
+    'artifact',
+    'search',
+];
+exports.FirstPartyCapabilityDomainSchema = zod_1.z.enum(exports.FIRST_PARTY_CAPABILITY_DOMAINS);
+const FIRST_PARTY_CAPABILITY_DOMAIN_SET = new Set(exports.FIRST_PARTY_CAPABILITY_DOMAINS);
+function isFirstPartyCapabilityDomain(domain) {
+    return FIRST_PARTY_CAPABILITY_DOMAIN_SET.has(domain);
+}
+//# sourceMappingURL=first-party-capability-domains.js.map

package/dist/capability/lib/first-party-capability-domains.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"first-party-capability-domains.js","sourceRoot":"","sources":["../../../src/capability/lib/first-party-capability-domains.ts"],"names":[],"mappings":";;;AAuEA,oEAIC;AA3ED,6BAAwB;AA0BX,QAAA,8BAA8B,GAAG;IAC5C,YAAY;IACZ,OAAO;IACP,OAAO;IACP,WAAW;IACX,IAAI;IACJ,OAAO;IACP,QAAQ;IACR,OAAO;IACP,kBAAkB;IAClB,UAAU;IACV,UAAU;IACV,QAAQ;IACR,qBAAqB;IACrB,eAAe;IACf,UAAU;IACV,cAAc;IACd,OAAO;IACP,SAAS;IACT,WAAW;IACX,gBAAgB;IAChB,UAAU;IACV,QAAQ;CACA,CAAC;AAKE,QAAA,gCAAgC,GAAG,OAAC,CAAC,IAAI,CACpD,sCAGC,CACF,CAAC;AAEF,MAAM,iCAAiC,GAAwB,IAAI,GAAG,CACpE,sCAA8B,CAC/B,CAAC;AAQF,SAAgB,4BAA4B,CAC1C,MAAc;IAEd,OAAO,iCAAiC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AACvD,CAAC"}

package/dist/principal/index.d.ts

@@ -0,0 +1,6 @@
+export * from './lib/delegation-grant';
+export * from './lib/delegation-chain';
+export * from './lib/clamp-authority';
+export * from './lib/execution-principal';
+export * from './lib/app-invocation-identity';
+//# sourceMappingURL=index.d.ts.map

package/dist/principal/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/principal/index.ts"],"names":[],"mappings":"AAAA,cAAc,wBAAwB,CAAC;AACvC,cAAc,wBAAwB,CAAC;AACvC,cAAc,uBAAuB,CAAC;AACtC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,+BAA+B,CAAC"}

package/dist/principal/index.js

@@ -0,0 +1,22 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./lib/delegation-grant"), exports);
+__exportStar(require("./lib/delegation-chain"), exports);
+__exportStar(require("./lib/clamp-authority"), exports);
+__exportStar(require("./lib/execution-principal"), exports);
+__exportStar(require("./lib/app-invocation-identity"), exports);
+//# sourceMappingURL=index.js.map

package/dist/principal/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/principal/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,yDAAuC;AACvC,yDAAuC;AACvC,wDAAsC;AACtC,4DAA0C;AAC1C,gEAA8C"}

package/dist/principal/lib/app-invocation-identity.d.ts

@@ -0,0 +1,22 @@
+import { z } from 'zod';
+import { type SubjectRef } from '../../subject';
+export declare enum AppInvocationMode {
+    OnBehalfOfUser = "on-behalf-of-user",
+    AsApp = "as-app"
+}
+export declare const AppInvocationModeSchema: z.ZodEnum<typeof AppInvocationMode>;
+export interface OnBehalfOfUserIdentity {
+    mode: AppInvocationMode.OnBehalfOfUser;
+    user: SubjectRef;
+    appId: string;
+}
+export interface AsAppIdentity {
+    mode: AppInvocationMode.AsApp;
+    appId: string;
+}
+export type AppInvocationIdentity = OnBehalfOfUserIdentity | AsAppIdentity;
+export declare const OnBehalfOfUserIdentitySchema: z.ZodType<OnBehalfOfUserIdentity>;
+export declare const AsAppIdentitySchema: z.ZodType<AsAppIdentity>;
+export declare const AppInvocationIdentitySchema: z.ZodType<AppInvocationIdentity>;
+export declare function resolveInvocationActor(identity: AppInvocationIdentity): SubjectRef;
+//# sourceMappingURL=app-invocation-identity.d.ts.map

package/dist/principal/lib/app-invocation-identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-invocation-identity.d.ts","sourceRoot":"","sources":["../../../src/principal/lib/app-invocation-identity.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAGL,KAAK,UAAU,EAChB,MAAM,eAAe,CAAC;AAmBvB,oBAAY,iBAAiB;IAE3B,cAAc,sBAAsB;IAEpC,KAAK,WAAW;CACjB;AAED,eAAO,MAAM,uBAAuB,qCAAkC,CAAC;AAMvE,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,iBAAiB,CAAC,cAAc,CAAC;IAEvC,IAAI,EAAE,UAAU,CAAC;IAEjB,KAAK,EAAE,MAAM,CAAC;CACf;AAMD,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,iBAAiB,CAAC,KAAK,CAAC;IAE9B,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,MAAM,qBAAqB,GAAG,sBAAsB,GAAG,aAAa,CAAC;AAa3E,eAAO,MAAM,4BAA4B,EAChB,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;AAE3D,eAAO,MAAM,mBAAmB,EAAiB,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;AAE1E,eAAO,MAAM,2BAA2B,EAGlC,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAC;AASvC,wBAAgB,sBAAsB,CACpC,QAAQ,EAAE,qBAAqB,GAC9B,UAAU,CAOZ"}

package/dist/principal/lib/app-invocation-identity.js

@@ -0,0 +1,36 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AppInvocationIdentitySchema = exports.AsAppIdentitySchema = exports.OnBehalfOfUserIdentitySchema = exports.AppInvocationModeSchema = exports.AppInvocationMode = void 0;
+exports.resolveInvocationActor = resolveInvocationActor;
+const zod_1 = require("zod");
+const subject_1 = require("../../subject");
+var AppInvocationMode;
+(function (AppInvocationMode) {
+    AppInvocationMode["OnBehalfOfUser"] = "on-behalf-of-user";
+    AppInvocationMode["AsApp"] = "as-app";
+})(AppInvocationMode || (exports.AppInvocationMode = AppInvocationMode = {}));
+exports.AppInvocationModeSchema = zod_1.z.nativeEnum(AppInvocationMode);
+const onBehalfOfUserShape = zod_1.z.object({
+    mode: zod_1.z.literal(AppInvocationMode.OnBehalfOfUser),
+    user: subject_1.SubjectRefSchema,
+    appId: zod_1.z.string().min(1),
+});
+const asAppShape = zod_1.z.object({
+    mode: zod_1.z.literal(AppInvocationMode.AsApp),
+    appId: zod_1.z.string().min(1),
+});
+exports.OnBehalfOfUserIdentitySchema = onBehalfOfUserShape;
+exports.AsAppIdentitySchema = asAppShape;
+exports.AppInvocationIdentitySchema = zod_1.z.discriminatedUnion('mode', [
+    onBehalfOfUserShape,
+    asAppShape,
+]);
+function resolveInvocationActor(identity) {
+    switch (identity.mode) {
+        case AppInvocationMode.OnBehalfOfUser:
+            return identity.user;
+        case AppInvocationMode.AsApp:
+            return { kind: subject_1.SubjectKind.App, id: identity.appId };
+    }
+}
+//# sourceMappingURL=app-invocation-identity.js.map

package/dist/principal/lib/app-invocation-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-invocation-identity.js","sourceRoot":"","sources":["../../../src/principal/lib/app-invocation-identity.ts"],"names":[],"mappings":";;;AAqFA,wDASC;AA9FD,6BAAwB;AACxB,2CAIuB;AAmBvB,IAAY,iBAKX;AALD,WAAY,iBAAiB;IAE3B,yDAAoC,CAAA;IAEpC,qCAAgB,CAAA;AAClB,CAAC,EALW,iBAAiB,iCAAjB,iBAAiB,QAK5B;AAEY,QAAA,uBAAuB,GAAG,OAAC,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC;AA0BvE,MAAM,mBAAmB,GAAG,OAAC,CAAC,MAAM,CAAC;IACnC,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,cAAc,CAAC;IACjD,IAAI,EAAE,0BAAgB;IACtB,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACzB,CAAC,CAAC;AAEH,MAAM,UAAU,GAAG,OAAC,CAAC,MAAM,CAAC;IAC1B,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,KAAK,CAAC;IACxC,KAAK,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACzB,CAAC,CAAC;AAEU,QAAA,4BAA4B,GACvC,mBAAwD,CAAC;AAE9C,QAAA,mBAAmB,GAAG,UAAsC,CAAC;AAE7D,QAAA,2BAA2B,GAAG,OAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACtE,mBAAmB;IACnB,UAAU;CACX,CAAqC,CAAC;AASvC,SAAgB,sBAAsB,CACpC,QAA+B;IAE/B,QAAQ,QAAQ,CAAC,IAAI,EAAE,CAAC;QACtB,KAAK,iBAAiB,CAAC,cAAc;YACnC,OAAO,QAAQ,CAAC,IAAI,CAAC;QACvB,KAAK,iBAAiB,CAAC,KAAK;YAC1B,OAAO,EAAE,IAAI,EAAE,qBAAW,CAAC,GAAG,EAAE,EAAE,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;IACzD,CAAC;AACH,CAAC"}

package/dist/principal/lib/clamp-authority.d.ts

@@ -0,0 +1,4 @@
+import type { CapabilityRef } from '../../capability';
+export declare function clampAuthority(executorGrants: ReadonlySet<CapabilityRef>, actorEffective: ReadonlySet<CapabilityRef>): Set<CapabilityRef>;
+export declare function clampAuthorityChain(authoritySets: ReadonlyArray<ReadonlySet<CapabilityRef>>): Set<CapabilityRef>;
+//# sourceMappingURL=clamp-authority.d.ts.map

package/dist/principal/lib/clamp-authority.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"clamp-authority.d.ts","sourceRoot":"","sources":["../../../src/principal/lib/clamp-authority.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AA4BtD,wBAAgB,cAAc,CAC5B,cAAc,EAAE,WAAW,CAAC,aAAa,CAAC,EAC1C,cAAc,EAAE,WAAW,CAAC,aAAa,CAAC,GACzC,GAAG,CAAC,aAAa,CAAC,CAapB;AASD,wBAAgB,mBAAmB,CACjC,aAAa,EAAE,aAAa,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,GACvD,GAAG,CAAC,aAAa,CAAC,CAQpB"}