cordisx 0.1.0-beta.2 → 0.1.0-beta.21

package/dist/src/renderer/page-header-breadcrumbs.d.ts

@@ -0,0 +1,32 @@
+import type { CordisXI18nService } from './i18n.js';
+import type { CordisXLocalizationSeat, CordisXLocalizedText, CordisXRouteReference } from '../contracts.js';
+/** Mounted standard-page title only; navigation retains the owner registry's policy. */
+export declare function createPageHeaderBreadcrumbs(options: {
+    readonly leading: HTMLElement;
+    readonly title: HTMLElement;
+    readonly active: () => boolean;
+    readonly button: () => HTMLButtonElement;
+    readonly resolve: (message: CordisXLocalizedText, index: number) => string;
+    readonly navigate: (reference: CordisXRouteReference) => Promise<void>;
+    readonly report: (error: unknown) => void;
+}): {
+    render: () => boolean;
+    update(next: readonly CordisXLocalizedText[], route: CordisXRouteReference): boolean;
+    dispose(): void;
+};
+export declare function mountLocalizedPageHeaderBreadcrumbs(options: Omit<Parameters<typeof createPageHeaderBreadcrumbs>[0], 'button' | 'resolve' | 'report'> & {
+    readonly i18n: CordisXI18nService;
+    readonly owner: string;
+    readonly site: string;
+    readonly defaultTitle: CordisXLocalizedText;
+    readonly localization: Pick<CordisXLocalizationSeat, 'effect'>;
+    readonly state: {
+        error?: string;
+    };
+    readonly notify: () => void;
+}): {
+    dispose(): void;
+    render: () => boolean;
+    update(next: readonly CordisXLocalizedText[], route: CordisXRouteReference): boolean;
+};
+//# sourceMappingURL=page-header-breadcrumbs.d.ts.map

package/dist/src/renderer/page-header-breadcrumbs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"page-header-breadcrumbs.d.ts","sourceRoot":"","sources":["../../../src/renderer/page-header-breadcrumbs.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAA;AAEnD,OAAO,KAAK,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,MAAM,iBAAiB,CAAA;AAI3G,wFAAwF;AACxF,wBAAgB,2BAA2B,CAAC,OAAO,EAAE;IACnD,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAA;IAC7B,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAA;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,OAAO,CAAA;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,iBAAiB,CAAA;IACxC,QAAQ,CAAC,OAAO,EAAE,CAAC,OAAO,EAAE,oBAAoB,EAAE,KAAK,EAAE,MAAM,KAAK,MAAM,CAAA;IAC1E,QAAQ,CAAC,QAAQ,EAAE,CAAC,SAAS,EAAE,qBAAqB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;IACtE,QAAQ,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAA;CAC1C;kBAMoB,OAAO;iBAiCX,SAAS,oBAAoB,EAAE,SAAS,qBAAqB,GAAG,OAAO;;EA6CvF;AAED,wBAAgB,mCAAmC,CACjD,OAAO,EAAE,IAAI,CAAC,UAAU,CAAC,OAAO,2BAA2B,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAC,GAAG;IAClG,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAA;IACjC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,YAAY,EAAE,oBAAoB,CAAA;IAC3C,QAAQ,CAAC,YAAY,EAAE,IAAI,CAAC,uBAAuB,EAAE,QAAQ,CAAC,CAAA;IAC9D,QAAQ,CAAC,KAAK,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,IAAI,CAAA;CAC5B;;kBAzFkB,OAAO;iBAiCX,SAAS,oBAAoB,EAAE,SAAS,qBAAqB,GAAG,OAAO;EAoFvF"}

package/dist/src/renderer/page-header-breadcrumbs.js

@@ -0,0 +1,126 @@
+import { pageChromeButton } from './navigation-pages.js';
+import { assertLocalizedText, immutableSnapshot } from './validation.js';
+import { assertRoute } from './surface-validation.js';
+/** Mounted standard-page title only; navigation retains the owner registry's policy. */
+export function createPageHeaderBreadcrumbs(options) {
+    let disposed = false;
+    let items;
+    let back;
+    let button;
+    const live = () => !disposed && options.active();
+    const render = () => {
+        if (!items)
+            return false;
+        if (!live())
+            return true;
+        const document = options.title.ownerDocument;
+        const resolved = items.map(options.resolve);
+        const nodes = [];
+        resolved.forEach((text, index) => {
+            if (index) {
+                const separator = document.createElement('span');
+                separator.textContent = '/';
+                separator.setAttribute('aria-hidden', 'true');
+                separator.style.cssText = 'flex:none;font-weight:400;opacity:.55';
+                nodes.push(separator);
+            }
+            const label = document.createElement('span');
+            label.textContent = text;
+            label.title = text;
+            label.style.cssText = `min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;flex:${index === resolved.length - 1 ? '0 1 auto' : '0 2 auto'}`;
+            if (index === resolved.length - 1)
+                label.setAttribute('aria-current', 'page');
+            nodes.push(label);
+        });
+        options.title.style.display = 'flex';
+        options.title.style.alignItems = 'center';
+        options.title.style.gap = '6px';
+        options.title.setAttribute('role', 'navigation');
+        options.title.setAttribute('aria-label', resolved.join(' / '));
+        options.title.replaceChildren(...nodes);
+        return true;
+    };
+    return {
+        render,
+        update(next, route) {
+            if (!live())
+                return false;
+            try {
+                if (!Array.isArray(next) || !next.length || next.length > 8)
+                    return false;
+                if (new TextEncoder().encode(JSON.stringify({ next, route })).byteLength > 16384)
+                    return false;
+                next.forEach((message, index) => assertLocalizedText(message, `header breadcrumb ${index}`));
+                assertRoute(route, 'header breadcrumb Back');
+                if (route.params !== undefined) {
+                    if (route.params === null || typeof route.params !== 'object' || Array.isArray(route.params))
+                        return false;
+                    for (const value of Object.values(route.params)) {
+                        if (value !== null && !['string', 'number', 'boolean'].includes(typeof value))
+                            return false;
+                        if (typeof value === 'number' && !Number.isFinite(value))
+                            return false;
+                    }
+                }
+                const clonedItems = immutableSnapshot(next);
+                const clonedRoute = immutableSnapshot(route);
+                // Resolve before touching live chrome so invalid localization fails closed.
+                clonedItems.forEach(options.resolve);
+                items = clonedItems;
+                back = clonedRoute;
+                if (!button) {
+                    button = options.button();
+                    button.addEventListener('click', () => {
+                        if (live() && back) {
+                            void options.navigate(back).catch(error => {
+                                if (live())
+                                    options.report(error);
+                            });
+                        }
+                    });
+                    options.leading.replaceChildren(button);
+                }
+                render();
+                return true;
+            }
+            catch {
+                return false;
+            }
+        },
+        dispose() {
+            disposed = true;
+            items = undefined;
+            back = undefined;
+            button?.remove();
+            button = undefined;
+        },
+    };
+}
+export function mountLocalizedPageHeaderBreadcrumbs(options) {
+    const controller = createPageHeaderBreadcrumbs({
+        ...options,
+        report: error => {
+            options.state.error = error instanceof Error ? error.message : String(error);
+            options.notify();
+        },
+        button: () => pageChromeButton(options.title.ownerDocument, 'Back', 'host:back'),
+        resolve: (message, index) => options.i18n.resolveFor(options.owner, message, `${options.site}.breadcrumb-title.${index}`).text,
+    });
+    options.localization.effect(() => {
+        if (!controller.render()) {
+            options.title.textContent =
+                options.i18n.resolveFor(options.owner, options.defaultTitle, `${options.site}.title`).text;
+        }
+        return () => options.i18n.clearDiagnosticSite(options.owner, `${options.site}.title`);
+    });
+    return {
+        ...controller,
+        dispose() {
+            controller.dispose();
+            for (let index = 0; index < 8; index++) {
+                options.i18n.clearDiagnosticSite(options.owner, `${options.site}.breadcrumb-title.${index}`);
+            }
+        },
+    };
+}
+//# sourceMappingURL=page-header-breadcrumbs.js.map

package/dist/src/renderer/page-header-breadcrumbs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"page-header-breadcrumbs.js","sourceRoot":"","sources":["../../../src/renderer/page-header-breadcrumbs.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAExD,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AACxE,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAA;AAErD,wFAAwF;AACxF,MAAM,UAAU,2BAA2B,CAAC,OAQ3C;IACC,IAAI,QAAQ,GAAG,KAAK,CAAA;IACpB,IAAI,KAAkD,CAAA;IACtD,IAAI,IAAuC,CAAA;IAC3C,IAAI,MAAqC,CAAA;IACzC,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,CAAC,QAAQ,IAAI,OAAO,CAAC,MAAM,EAAE,CAAA;IAChD,MAAM,MAAM,GAAG,GAAY,EAAE;QAC3B,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAA;QACxB,IAAI,CAAC,IAAI,EAAE;YAAE,OAAO,IAAI,CAAA;QACxB,MAAM,QAAQ,GAAG,OAAO,CAAC,KAAK,CAAC,aAAa,CAAA;QAC5C,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;QAC3C,MAAM,KAAK,GAAkB,EAAE,CAAA;QAC/B,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE;YAC/B,IAAI,KAAK,EAAE,CAAC;gBACV,MAAM,SAAS,GAAG,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,CAAA;gBAChD,SAAS,CAAC,WAAW,GAAG,GAAG,CAAA;gBAC3B,SAAS,CAAC,YAAY,CAAC,aAAa,EAAE,MAAM,CAAC,CAAA;gBAC7C,SAAS,CAAC,KAAK,CAAC,OAAO,GAAG,uCAAuC,CAAA;gBACjE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;YACvB,CAAC;YACD,MAAM,KAAK,GAAG,QAAQ,CAAC,aAAa,CAAC,MAAM,CAAC,CAAA;YAC5C,KAAK,CAAC,WAAW,GAAG,IAAI,CAAA;YACxB,KAAK,CAAC,KAAK,GAAG,IAAI,CAAA;YAClB,KAAK,CAAC,KAAK,CAAC,OAAO,GAAG,8EACpB,KAAK,KAAK,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAC/C,EAAE,CAAA;YACF,IAAI,KAAK,KAAK,QAAQ,CAAC,MAAM,GAAG,CAAC;gBAAE,KAAK,CAAC,YAAY,CAAC,cAAc,EAAE,MAAM,CAAC,CAAA;YAC7E,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACnB,CAAC,CAAC,CAAA;QACF,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,GAAG,MAAM,CAAA;QACpC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,GAAG,QAAQ,CAAA;QACzC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,GAAG,KAAK,CAAA;QAC/B,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,EAAE,YAAY,CAAC,CAAA;QAChD,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;QAC9D,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAA;QACvC,OAAO,IAAI,CAAA;IACb,CAAC,CAAA;IACD,OAAO;QACL,MAAM;QACN,MAAM,CAAC,IAAqC,EAAE,KAA4B;YACxE,IAAI,CAAC,IAAI,EAAE;gBAAE,OAAO,KAAK,CAAA;YACzB,IAAI,CAAC;gBACH,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;oBAAE,OAAO,KAAK,CAAA;gBACzE,IAAI,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,UAAU,GAAG,KAAK;oBAAE,OAAO,KAAK,CAAA;gBAC9F,IAAI,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,mBAAmB,CAAC,OAAO,EAAE,qBAAqB,KAAK,EAAE,CAAC,CAAC,CAAA;gBAC5F,WAAW,CAAC,KAAK,EAAE,wBAAwB,CAAC,CAAA;gBAC5C,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;oBAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,IAAI,IAAI,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC;wBAAE,OAAO,KAAK,CAAA;oBAC1G,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;wBAChD,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,QAAQ,CAAC,OAAO,KAAK,CAAC;4BAAE,OAAO,KAAK,CAAA;wBAC3F,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;4BAAE,OAAO,KAAK,CAAA;oBACxE,CAAC;gBACH,CAAC;gBACD,MAAM,WAAW,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAA;gBAC3C,MAAM,WAAW,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAA;gBAC5C,4EAA4E;gBAC5E,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;gBACpC,KAAK,GAAG,WAAW,CAAA;gBACnB,IAAI,GAAG,WAAW,CAAA;gBAClB,IAAI,CAAC,MAAM,EAAE,CAAC;oBACZ,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAA;oBACzB,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE;wBACpC,IAAI,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC;4BACnB,KAAK,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE;gCACxC,IAAI,IAAI,EAAE;oCAAE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;4BACnC,CAAC,CAAC,CAAA;wBACJ,CAAC;oBACH,CAAC,CAAC,CAAA;oBACF,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC,CAAA;gBACzC,CAAC;gBACD,MAAM,EAAE,CAAA;gBACR,OAAO,IAAI,CAAA;YACb,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAA;YACd,CAAC;QACH,CAAC;QACD,OAAO;YACL,QAAQ,GAAG,IAAI,CAAA;YACf,KAAK,GAAG,SAAS,CAAA;YACjB,IAAI,GAAG,SAAS,CAAA;YAChB,MAAM,EAAE,MAAM,EAAE,CAAA;YAChB,MAAM,GAAG,SAAS,CAAA;QACpB,CAAC;KACF,CAAA;AACH,CAAC;AAED,MAAM,UAAU,mCAAmC,CACjD,OAQC;IAED,MAAM,UAAU,GAAG,2BAA2B,CAAC;QAC7C,GAAG,OAAO;QACV,MAAM,EAAE,KAAK,CAAC,EAAE;YACd,OAAO,CAAC,KAAK,CAAC,KAAK,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;YAC5E,OAAO,CAAC,MAAM,EAAE,CAAA;QAClB,CAAC;QACD,MAAM,EAAE,GAAG,EAAE,CAAC,gBAAgB,CAAC,OAAO,CAAC,KAAK,CAAC,aAAa,EAAE,MAAM,EAAE,WAAW,CAAC;QAChF,OAAO,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,CAC1B,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC,IAAI,qBAAqB,KAAK,EAAE,CAAC,CAAC,IAAI;KACpG,CAAC,CAAA;IACF,OAAO,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,EAAE;QAC/B,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC;YACzB,OAAO,CAAC,KAAK,CAAC,WAAW;gBACvB,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,YAAY,EAAE,GAAG,OAAO,CAAC,IAAI,QAAQ,CAAC,CAAC,IAAI,CAAA;QAC9F,CAAC;QACD,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,OAAO,CAAC,IAAI,QAAQ,CAAC,CAAA;IACvF,CAAC,CAAC,CAAA;IACF,OAAO;QACL,GAAG,UAAU;QACb,OAAO;YACL,UAAU,CAAC,OAAO,EAAE,CAAA;YACpB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;gBACvC,OAAO,CAAC,IAAI,CAAC,mBAAmB,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,OAAO,CAAC,IAAI,qBAAqB,KAAK,EAAE,CAAC,CAAA;YAC9F,CAAC;QACH,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/src/renderer/page-header-chrome.d.ts

@@ -0,0 +1,7 @@
+/** Host chrome uses adapter-projected geometry; consumers only read the public title inset. */
+export declare function createPageHeaderChrome(content: HTMLElement): {
+    readonly chrome: HTMLElement;
+    readonly leading: HTMLElement;
+    readonly title: HTMLElement;
+};
+//# sourceMappingURL=page-header-chrome.d.ts.map

package/dist/src/renderer/page-header-chrome.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"page-header-chrome.d.ts","sourceRoot":"","sources":["../../../src/renderer/page-header-chrome.ts"],"names":[],"mappings":"AAAA,+FAA+F;AAC/F,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,WAAW,GAAG;IAC5D,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;IAC5B,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAA;IAC7B,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAA;CAC5B,CAkCA"}

package/dist/src/renderer/page-header-chrome.js

@@ -0,0 +1,34 @@
+/** Host chrome uses adapter-projected geometry; consumers only read the public title inset. */
+export function createPageHeaderChrome(content) {
+    content.style.setProperty('--cordisx-page-title-inset', 'calc(max(var(--cordisx-page-chrome-leading-inset, 8px), var(--cordisx-page-chrome-safe-left, 0px)) + var(--cordisx-page-chrome-leading-size, 28px) + var(--cordisx-page-chrome-title-gap, 6px))');
+    const chrome = content.ownerDocument.createElement('header');
+    chrome.dataset.cordisxPageChrome = 'true';
+    chrome.dataset.cordisxDrag = 'true';
+    Object.assign(chrome.style, {
+        display: 'flex',
+        alignItems: 'center',
+        gap: 'var(--cordisx-page-chrome-title-gap, 6px)',
+        minHeight: 'var(--cordisx-page-chrome-height, 46px)',
+        padding: '0 12px',
+        boxShadow: 'inset 0 -1px var(--color-border, var(--cx-border, rgba(255,255,255,.084)))',
+        background: 'var(--color-background-surface, var(--cx-surface, #181818))',
+        flex: '0 0 auto',
+    });
+    chrome.style.paddingLeft =
+        'max(var(--cordisx-page-chrome-leading-inset, 8px), var(--cordisx-page-chrome-safe-left, 0px))';
+    chrome.style.setProperty('-webkit-app-region', 'drag');
+    const leading = content.ownerDocument.createElement('div');
+    leading.dataset.cordisxPageLeading = 'true';
+    leading.style.cssText =
+        'display:flex;width:var(--cordisx-page-chrome-leading-size,28px);height:var(--cordisx-page-chrome-leading-size,28px);flex:0 0 var(--cordisx-page-chrome-leading-size,28px);align-items:center;justify-content:center';
+    const titleGroup = content.ownerDocument.createElement('div');
+    titleGroup.dataset.cordisxPageTitle = 'true';
+    titleGroup.style.cssText = 'display:flex;align-items:center;gap:8px;min-width:0;flex:1';
+    const title = content.ownerDocument.createElement('strong');
+    title.style.cssText =
+        'min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;font-family:var(--cordisx-page-chrome-title-font-family,-apple-system,system-ui,Segoe UI,sans-serif);font-size:var(--cordisx-page-chrome-title-font-size,14px);font-weight:var(--cordisx-page-chrome-title-font-weight,500);line-height:var(--cordisx-page-chrome-title-line-height,24px)';
+    titleGroup.append(title);
+    chrome.append(leading, titleGroup);
+    return { chrome, leading, title };
+}
+//# sourceMappingURL=page-header-chrome.js.map

package/dist/src/renderer/page-header-chrome.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"page-header-chrome.js","sourceRoot":"","sources":["../../../src/renderer/page-header-chrome.ts"],"names":[],"mappings":"AAAA,+FAA+F;AAC/F,MAAM,UAAU,sBAAsB,CAAC,OAAoB;IAKzD,OAAO,CAAC,KAAK,CAAC,WAAW,CACvB,4BAA4B,EAC5B,iMAAiM,CAClM,CAAA;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAA;IAC5D,MAAM,CAAC,OAAO,CAAC,iBAAiB,GAAG,MAAM,CAAA;IACzC,MAAM,CAAC,OAAO,CAAC,WAAW,GAAG,MAAM,CAAA;IACnC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE;QAC1B,OAAO,EAAE,MAAM;QACf,UAAU,EAAE,QAAQ;QACpB,GAAG,EAAE,2CAA2C;QAChD,SAAS,EAAE,yCAAyC;QACpD,OAAO,EAAE,QAAQ;QACjB,SAAS,EAAE,4EAA4E;QACvF,UAAU,EAAE,6DAA6D;QACzE,IAAI,EAAE,UAAU;KACjB,CAAC,CAAA;IACF,MAAM,CAAC,KAAK,CAAC,WAAW;QACtB,+FAA+F,CAAA;IACjG,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAA;IACtD,MAAM,OAAO,GAAG,OAAO,CAAC,aAAa,CAAC,aAAa,CAAC,KAAK,CAAC,CAAA;IAC1D,OAAO,CAAC,OAAO,CAAC,kBAAkB,GAAG,MAAM,CAAA;IAC3C,OAAO,CAAC,KAAK,CAAC,OAAO;QACnB,qNAAqN,CAAA;IACvN,MAAM,UAAU,GAAG,OAAO,CAAC,aAAa,CAAC,aAAa,CAAC,KAAK,CAAC,CAAA;IAC7D,UAAU,CAAC,OAAO,CAAC,gBAAgB,GAAG,MAAM,CAAA;IAC5C,UAAU,CAAC,KAAK,CAAC,OAAO,GAAG,4DAA4D,CAAA;IACvF,MAAM,KAAK,GAAG,OAAO,CAAC,aAAa,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAA;IAC3D,KAAK,CAAC,KAAK,CAAC,OAAO;QACjB,iWAAiW,CAAA;IACnW,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IACxB,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,UAAU,CAAC,CAAA;IAClC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,CAAA;AACnC,CAAC"}

package/dist/src/renderer/page-surface-theme.d.ts

@@ -0,0 +1,3 @@
+/** Appearance belongs to the complete Host page, including chrome outside the React body. */
+export declare function projectPageSurfaceTheme(content: HTMLElement): () => void;
+//# sourceMappingURL=page-surface-theme.d.ts.map

package/dist/src/renderer/page-surface-theme.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"page-surface-theme.d.ts","sourceRoot":"","sources":["../../../src/renderer/page-surface-theme.ts"],"names":[],"mappings":"AAEA,6FAA6F;AAC7F,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,WAAW,GAAG,MAAM,IAAI,CAaxE"}

package/dist/src/renderer/page-surface-theme.js

@@ -0,0 +1,17 @@
+import { HostThemeProjection } from './host-theme.js';
+/** Appearance belongs to the complete Host page, including chrome outside the React body. */
+export function projectPageSurfaceTheme(content) {
+    Object.assign(content.style, {
+        position: 'absolute',
+        inset: '0',
+        display: 'flex',
+        flexDirection: 'column',
+        overflow: 'hidden',
+        background: 'var(--color-background-surface-under, var(--cx-surface, #141414))',
+        color: 'var(--color-text, var(--cx-text, #dfdfdf))',
+        font: '13px/1.45 ui-sans-serif, system-ui, sans-serif',
+        pointerEvents: 'auto',
+    });
+    return new HostThemeProjection(content.ownerDocument).attach(content);
+}
+//# sourceMappingURL=page-surface-theme.js.map

package/dist/src/renderer/page-surface-theme.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"page-surface-theme.js","sourceRoot":"","sources":["../../../src/renderer/page-surface-theme.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AAErD,6FAA6F;AAC7F,MAAM,UAAU,uBAAuB,CAAC,OAAoB;IAC1D,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE;QAC3B,QAAQ,EAAE,UAAU;QACpB,KAAK,EAAE,GAAG;QACV,OAAO,EAAE,MAAM;QACf,aAAa,EAAE,QAAQ;QACvB,QAAQ,EAAE,QAAQ;QAClB,UAAU,EAAE,mEAAmE;QAC/E,KAAK,EAAE,4CAA4C;QACnD,IAAI,EAAE,gDAAgD;QACtD,aAAa,EAAE,MAAM;KACtB,CAAC,CAAA;IACF,OAAO,IAAI,mBAAmB,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAA;AACvE,CAAC"}

package/dist/src/renderer/platform/platform-agent-runtime.d.ts

@@ -3,15 +3,19 @@ import type { AgentRuntimeCapability } from '@cordisx/protocol/agents/v1';
 import type { CordisXPluginIdentity } from '../../contracts.js';
 import type { PluginGenerationView } from '../generation-visibility.js';
 import type { CordisXPermissionPolicyRecordV4, CordisXPermissionPolicyV2 } from '../../permission-contracts.js';
-import { AgentRuntimeAuthorization, AgentRuntimeConnection, AgentRuntimePermissionFence, AgentRuntimeRouteScope, AgentRuntimeScopeSource, DevelopmentAgentRuntimeAuthorizationAuthority, DevelopmentAgentRuntimePolicySeedAuthority, PlaygroundScenarioAgentRuntimeRouteAuthority, Registration } from './platform-permission-types.js';
+import { AgentRuntimeAuthorization, AgentRuntimeConnection, AgentRuntimePermissionFence, AgentRuntimeRouteScope, AgentRuntimeScopeSource, DevelopmentAgentRuntimePolicySeedAuthority, PlaygroundScenarioAgentRuntimeRouteAuthority, Registration } from './platform-permission-types.js';
 export declare abstract class PlatformAgentRuntimeBroker extends PlatformPermissionBrokerBase {
+    private taskScopeValidator?;
+    private taskScopeReadback?;
+    /** Connected by the Host runtime only; plugins never receive the broker. */
+    setAgentTaskScopeValidator(validate: NonNullable<typeof this.taskScopeValidator>, readback: NonNullable<typeof this.taskScopeReadback>): void;
     /** Installs the current opaque transport generation. Replacing it fences every lease. */
     replaceAgentRuntimeConnection(connection: AgentRuntimeConnection): void;
     clearAgentRuntimeConnection(): void;
     /** Host Router only: records the active same-plugin route projection. */
     replaceAgentRuntimeRouteScope(scope: AgentRuntimeRouteScope): void;
     revokeAgentRuntimeRoute(routeInstanceId: string): void;
-    /** Returns an exact revocable lease only after a registered v5/v6 declaration and exact policy match. */
+    /** Scope-checked, revocable authorization using the shared development default. */
     authorizeAgentRuntime(input: Readonly<{
         identity: CordisXPluginIdentity;
         capability: AgentRuntimeCapability;
@@ -20,29 +24,10 @@ export declare abstract class PlatformAgentRuntimeBroker extends PlatformPermiss
         connection: AgentRuntimeConnection;
         view?: PluginGenerationView;
     }>): Promise<AgentRuntimeAuthorization>;
-    /** Host development composition only: applies a normal exact policy without opening interactive UI. */
-    authorizeDevelopmentAgentRuntime(authority: DevelopmentAgentRuntimeAuthorizationAuthority, input: Readonly<{
-        identity: CordisXPluginIdentity;
-        capability: AgentRuntimeCapability;
-        sessionId: string;
-        scopeSource: AgentRuntimeScopeSource;
-        connection: AgentRuntimeConnection;
-        view?: PluginGenerationView;
-    }>): Promise<AgentRuntimeAuthorization>;
-    protected authorizeAgentRuntimeInternal(input: Readonly<{
-        identity: CordisXPluginIdentity;
-        capability: AgentRuntimeCapability;
-        sessionId: string;
-        scopeSource: AgentRuntimeScopeSource;
-        connection: AgentRuntimeConnection;
-        view?: PluginGenerationView;
-    }>, developmentAutoApprove: boolean): Promise<AgentRuntimeAuthorization>;
     isAgentRuntimeLeaseActive(identity: CordisXPluginIdentity, leaseId: string, view?: PluginGenerationView): boolean;
     subscribeAgentRuntimePermissionFences(listener: (fence: AgentRuntimePermissionFence) => void): () => void;
     /** Development composition receives this opaque authority; production does not create one. */
     createDevelopmentAgentRuntimePolicySeedAuthority(): DevelopmentAgentRuntimePolicySeedAuthority;
-    /** Created only by a Host development composition and never projected into plugin context. */
-    createDevelopmentAgentRuntimeAuthorizationAuthority(): DevelopmentAgentRuntimeAuthorizationAuthority;
     /** Host Playground only: mint authority for an exact scenario route beside the visible Room route. */
     createPlaygroundScenarioAgentRuntimeRouteAuthority(): PlaygroundScenarioAgentRuntimeRouteAuthority;
     /**
@@ -57,14 +42,15 @@ export declare abstract class PlatformAgentRuntimeBroker extends PlatformPermiss
         sessionIds: readonly [string, ...string[]];
         policy: CordisXPermissionPolicyV2;
     }>[]): Promise<void>;
+    private agentRuntimeScopeCurrent;
     protected validAgentRuntimeScopeSource(registration: Registration, input: Readonly<{
         sessionId: string;
         capability: AgentRuntimeCapability;
         scopeSource: AgentRuntimeScopeSource;
     }>, declaredScope: unknown, authorityRequester: unknown): boolean;
-    protected agentRuntimePolicyRecord(registration: Registration, capability: AgentRuntimeCapability, sessionId: string, policy: CordisXPermissionPolicyV2): CordisXPermissionPolicyRecordV4;
-    protected agentRuntimePolicyRecordForIdentity(identity: CordisXPluginIdentity, capability: AgentRuntimeCapability, sessionId: string, policy: CordisXPermissionPolicyV2): CordisXPermissionPolicyRecordV4;
-    protected agentRuntimePolicyKey(registration: Registration, capability: AgentRuntimeCapability, sessionId: string): string;
+    protected agentRuntimePolicyRecord(registration: Registration, capability: AgentRuntimeCapability, sessionId: string, policy: CordisXPermissionPolicyV2, scopeSource?: AgentRuntimeScopeSource): CordisXPermissionPolicyRecordV4;
+    protected agentRuntimePolicyRecordForIdentity(identity: CordisXPluginIdentity, capability: AgentRuntimeCapability, sessionId: string, policy: CordisXPermissionPolicyV2, scopeSource?: AgentRuntimeScopeSource, manifestScope?: unknown): CordisXPermissionPolicyRecordV4;
+    protected agentRuntimePolicyKey(registration: Registration, capability: AgentRuntimeCapability, sessionId: string, scopeSource?: AgentRuntimeScopeSource): string;
     protected fenceAgentRuntime(identity: CordisXPluginIdentity | undefined, code: AgentRuntimePermissionFence['code'], registrationToken?: object): void;
     protected agentRuntimeRouteValues(): readonly AgentRuntimeRouteScope[];
     protected fenceAgentRuntimeRouteInstance(routeInstanceId: string, code: AgentRuntimePermissionFence['code']): void;

package/dist/src/renderer/platform/platform-agent-runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"platform-agent-runtime.d.ts","sourceRoot":"","sources":["../../../../src/renderer/platform/platform-agent-runtime.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAA;AACnF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAA;AACzE,OAAO,KAAK,EAIV,qBAAqB,EACtB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAA;AAEvE,OAAO,KAAK,EAAE,+BAA+B,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAA;AAM/G,OAAO,EACL,yBAAyB,EACzB,sBAAsB,EAEtB,2BAA2B,EAC3B,sBAAsB,EACtB,uBAAuB,EACvB,6CAA6C,EAC7C,0CAA0C,EAI1C,4CAA4C,EAC5C,YAAY,EAOb,MAAM,gCAAgC,CAAA;AAEvC,8BAAsB,0BAA2B,SAAQ,4BAA4B;IACnF,yFAAyF;IACzF,6BAA6B,CAAC,UAAU,EAAE,sBAAsB,GAAG,IAAI;IAQvE,2BAA2B,IAAI,IAAI;IAOnC,yEAAyE;IACzE,6BAA6B,CAAC,KAAK,EAAE,sBAAsB,GAAG,IAAI;IAkBlE,uBAAuB,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI;IAUtD,yGAAyG;IACnG,qBAAqB,CACzB,KAAK,EAAE,QAAQ,CAAC;QACd,QAAQ,EAAE,qBAAqB,CAAA;QAC/B,UAAU,EAAE,sBAAsB,CAAA;QAClC,SAAS,EAAE,MAAM,CAAA;QACjB,WAAW,EAAE,uBAAuB,CAAA;QACpC,UAAU,EAAE,sBAAsB,CAAA;QAClC,IAAI,CAAC,EAAE,oBAAoB,CAAA;KAC5B,CAAC,GACD,OAAO,CAAC,yBAAyB,CAAC;IAIrC,uGAAuG;IACjG,gCAAgC,CACpC,SAAS,EAAE,6CAA6C,EACxD,KAAK,EAAE,QAAQ,CAAC;QACd,QAAQ,EAAE,qBAAqB,CAAA;QAC/B,UAAU,EAAE,sBAAsB,CAAA;QAClC,SAAS,EAAE,MAAM,CAAA;QACjB,WAAW,EAAE,uBAAuB,CAAA;QACpC,UAAU,EAAE,sBAAsB,CAAA;QAClC,IAAI,CAAC,EAAE,oBAAoB,CAAA;KAC5B,CAAC,GACD,OAAO,CAAC,yBAAyB,CAAC;cAOrB,6BAA6B,CAC3C,KAAK,EAAE,QAAQ,CAAC;QACd,QAAQ,EAAE,qBAAqB,CAAA;QAC/B,UAAU,EAAE,sBAAsB,CAAA;QAClC,SAAS,EAAE,MAAM,CAAA;QACjB,WAAW,EAAE,uBAAuB,CAAA;QACpC,UAAU,EAAE,sBAAsB,CAAA;QAClC,IAAI,CAAC,EAAE,oBAAoB,CAAA;KAC5B,CAAC,EACF,sBAAsB,EAAE,OAAO,GAC9B,OAAO,CAAC,yBAAyB,CAAC;IAyIrC,yBAAyB,CAAC,QAAQ,EAAE,qBAAqB,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,oBAAoB,GAAG,OAAO;IAcjH,qCAAqC,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,2BAA2B,KAAK,IAAI,GAAG,MAAM,IAAI;IAKzG,8FAA8F;IAC9F,gDAAgD,IAAI,0CAA0C;IAM9F,8FAA8F;IAC9F,mDAAmD,IAAI,6CAA6C;IAMpG,sGAAsG;IACtG,kDAAkD,IAAI,4CAA4C;IAMlG;;;OAGG;IACH,2CAA2C,CACzC,SAAS,EAAE,4CAA4C,EACvD,mBAAmB,EAAE,MAAM,EAC3B,KAAK,EAAE,sBAAsB,GAC5B,MAAM,IAAI;IAsCb,qFAAqF;IACrF,mDAAmD,CACjD,SAAS,EAAE,4CAA4C,EACvD,KAAK,EAAE,sBAAsB,GAC5B,MAAM,IAAI;IA0BP,wBAAwB,CAC5B,SAAS,EAAE,0CAA0C,EACrD,QAAQ,EAAE,qBAAqB,EAC/B,OAAO,EAAE,SAAS,QAAQ,CACxB;QACE,UAAU,EAAE,sBAAsB,CAAA;QAClC,UAAU,EAAE,SAAS,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAA;QAC1C,MAAM,EAAE,yBAAyB,CAAA;KAClC,CACF,EAAE,GACF,OAAO,CAAC,IAAI,CAAC;IAiBhB,SAAS,CAAC,4BAA4B,CACpC,YAAY,EAAE,YAAY,EAC1B,KAAK,EAAE,QAAQ,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,sBAAsB,CAAC;QAAC,WAAW,EAAE,uBAAuB,CAAA;KAAE,CAAC,EAChH,aAAa,EAAE,OAAO,EACtB,kBAAkB,EAAE,OAAO,GAC1B,OAAO;IA2CV,SAAS,CAAC,wBAAwB,CAChC,YAAY,EAAE,YAAY,EAC1B,UAAU,EAAE,sBAAsB,EAClC,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,yBAAyB,GAChC,+BAA+B;IAIlC,SAAS,CAAC,mCAAmC,CAC3C,QAAQ,EAAE,qBAAqB,EAC/B,UAAU,EAAE,sBAAsB,EAClC,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,yBAAyB,GAChC,+BAA+B;IAelC,SAAS,CAAC,qBAAqB,CAC7B,YAAY,EAAE,YAAY,EAC1B,UAAU,EAAE,sBAAsB,EAClC,SAAS,EAAE,MAAM,GAChB,MAAM;IAIT,SAAS,CAAC,iBAAiB,CACzB,QAAQ,EAAE,qBAAqB,GAAG,SAAS,EAC3C,IAAI,EAAE,2BAA2B,CAAC,MAAM,CAAC,EACzC,iBAAiB,CAAC,EAAE,MAAM,GACzB,IAAI;IA8BP,SAAS,CAAC,uBAAuB,IAAI,SAAS,sBAAsB,EAAE;IAOtE,SAAS,CAAC,8BAA8B,CAAC,eAAe,EAAE,MAAM,EAAE,IAAI,EAAE,2BAA2B,CAAC,MAAM,CAAC,GAAG,IAAI;IAalH,SAAS,CAAC,yCAAyC,CAAC,mBAAmB,EAAE,MAAM,GAAG,IAAI;CAOvF"}
+{"version":3,"file":"platform-agent-runtime.d.ts","sourceRoot":"","sources":["../../../../src/renderer/platform/platform-agent-runtime.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAA;AACnF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAA;AACzE,OAAO,KAAK,EAIV,qBAAqB,EACtB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAA;AAEvE,OAAO,KAAK,EAAE,+BAA+B,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAA;AAM/G,OAAO,EACL,yBAAyB,EACzB,sBAAsB,EAEtB,2BAA2B,EAC3B,sBAAsB,EACtB,uBAAuB,EACvB,0CAA0C,EAI1C,4CAA4C,EAC5C,YAAY,EAOb,MAAM,gCAAgC,CAAA;AAEvC,8BAAsB,0BAA2B,SAAQ,4BAA4B;IACnF,OAAO,CAAC,kBAAkB,CAAC,CAKf;IAEZ,OAAO,CAAC,iBAAiB,CAAC,CAKL;IAErB,4EAA4E;IAC5E,0BAA0B,CACxB,QAAQ,EAAE,WAAW,CAAC,OAAO,IAAI,CAAC,kBAAkB,CAAC,EACrD,QAAQ,EAAE,WAAW,CAAC,OAAO,IAAI,CAAC,iBAAiB,CAAC,GACnD,IAAI;IAKP,yFAAyF;IACzF,6BAA6B,CAAC,UAAU,EAAE,sBAAsB,GAAG,IAAI;IAQvE,2BAA2B,IAAI,IAAI;IAOnC,yEAAyE;IACzE,6BAA6B,CAAC,KAAK,EAAE,sBAAsB,GAAG,IAAI;IAkBlE,uBAAuB,CAAC,eAAe,EAAE,MAAM,GAAG,IAAI;IAUtD,mFAAmF;IAC7E,qBAAqB,CACzB,KAAK,EAAE,QAAQ,CAAC;QACd,QAAQ,EAAE,qBAAqB,CAAA;QAC/B,UAAU,EAAE,sBAAsB,CAAA;QAClC,SAAS,EAAE,MAAM,CAAA;QACjB,WAAW,EAAE,uBAAuB,CAAA;QACpC,UAAU,EAAE,sBAAsB,CAAA;QAClC,IAAI,CAAC,EAAE,oBAAoB,CAAA;KAC5B,CAAC,GACD,OAAO,CAAC,yBAAyB,CAAC;IA6JrC,yBAAyB,CAAC,QAAQ,EAAE,qBAAqB,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,oBAAoB,GAAG,OAAO;IAgBjH,qCAAqC,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,2BAA2B,KAAK,IAAI,GAAG,MAAM,IAAI;IAKzG,8FAA8F;IAC9F,gDAAgD,IAAI,0CAA0C;IAM9F,sGAAsG;IACtG,kDAAkD,IAAI,4CAA4C;IAMlG;;;OAGG;IACH,2CAA2C,CACzC,SAAS,EAAE,4CAA4C,EACvD,mBAAmB,EAAE,MAAM,EAC3B,KAAK,EAAE,sBAAsB,GAC5B,MAAM,IAAI;IAsCb,qFAAqF;IACrF,mDAAmD,CACjD,SAAS,EAAE,4CAA4C,EACvD,KAAK,EAAE,sBAAsB,GAC5B,MAAM,IAAI;IA0BP,wBAAwB,CAC5B,SAAS,EAAE,0CAA0C,EACrD,QAAQ,EAAE,qBAAqB,EAC/B,OAAO,EAAE,SAAS,QAAQ,CACxB;QACE,UAAU,EAAE,sBAAsB,CAAA;QAClC,UAAU,EAAE,SAAS,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAA;QAC1C,MAAM,EAAE,yBAAyB,CAAA;KAClC,CACF,EAAE,GACF,OAAO,CAAC,IAAI,CAAC;YAiBF,wBAAwB;IAuBtC,SAAS,CAAC,4BAA4B,CACpC,YAAY,EAAE,YAAY,EAC1B,KAAK,EAAE,QAAQ,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,sBAAsB,CAAC;QAAC,WAAW,EAAE,uBAAuB,CAAA;KAAE,CAAC,EAChH,aAAa,EAAE,OAAO,EACtB,kBAAkB,EAAE,OAAO,GAC1B,OAAO;IAoEV,SAAS,CAAC,wBAAwB,CAChC,YAAY,EAAE,YAAY,EAC1B,UAAU,EAAE,sBAAsB,EAClC,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,yBAAyB,EACjC,WAAW,CAAC,EAAE,uBAAuB,GACpC,+BAA+B;IAOlC,SAAS,CAAC,mCAAmC,CAC3C,QAAQ,EAAE,qBAAqB,EAC/B,UAAU,EAAE,sBAAsB,EAClC,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,yBAAyB,EACjC,WAAW,CAAC,EAAE,uBAAuB,EACrC,aAAa,CAAC,EAAE,OAAO,GACtB,+BAA+B;IAsBlC,SAAS,CAAC,qBAAqB,CAC7B,YAAY,EAAE,YAAY,EAC1B,UAAU,EAAE,sBAAsB,EAClC,SAAS,EAAE,MAAM,EACjB,WAAW,CAAC,EAAE,uBAAuB,GACpC,MAAM;IAIT,SAAS,CAAC,iBAAiB,CACzB,QAAQ,EAAE,qBAAqB,GAAG,SAAS,EAC3C,IAAI,EAAE,2BAA2B,CAAC,MAAM,CAAC,EACzC,iBAAiB,CAAC,EAAE,MAAM,GACzB,IAAI;IA8BP,SAAS,CAAC,uBAAuB,IAAI,SAAS,sBAAsB,EAAE;IAOtE,SAAS,CAAC,8BAA8B,CAAC,eAAe,EAAE,MAAM,EAAE,IAAI,EAAE,2BAA2B,CAAC,MAAM,CAAC,GAAG,IAAI;IAalH,SAAS,CAAC,yCAAyC,CAAC,mBAAmB,EAAE,MAAM,GAAG,IAAI;CAOvF"}

package/dist/src/renderer/platform/platform-agent-runtime.js

@@ -5,6 +5,13 @@ import { normalizePermissionPolicyRecordV4, permissionRecordKeyV4 } from '../../
 import { isPermissionPolicyRecordV4 } from '../../permission-persistence.js';
 import { agentRuntimeIdentityKey, isAgentRuntimePermission, isApprovalAuthorityRequesterRouteScope, isHostRouteSessionScopeBinding, sameAgentRuntimeConnection, sameAgentRuntimeRoute, validAgentRuntimeConnection, validAgentRuntimeOpaqueId, validAgentRuntimeRoute, validAgentRuntimeSessionId, } from './platform-permission-types.js';
 export class PlatformAgentRuntimeBroker extends PlatformPermissionBrokerBase {
+    taskScopeValidator;
+    taskScopeReadback;
+    /** Connected by the Host runtime only; plugins never receive the broker. */
+    setAgentTaskScopeValidator(validate, readback) {
+        this.taskScopeValidator = validate;
+        this.taskScopeReadback = readback;
+    }
     /** Installs the current opaque transport generation. Replacing it fences every lease. */
     replaceAgentRuntimeConnection(connection) {
         if (!validAgentRuntimeConnection(connection))
@@ -52,23 +59,19 @@ export class PlatformAgentRuntimeBroker extends PlatformPermissionBrokerBase {
             this.fenceAgentRuntime({ source: route.owner.source, id: route.owner.pluginId }, 'route-replaced');
         }
     }
-    /** Returns an exact revocable lease only after a registered v5/v6 declaration and exact policy match. */
+    /** Scope-checked, revocable authorization using the shared development default. */
     async authorizeAgentRuntime(input) {
-        return await this.authorizeAgentRuntimeInternal(input, false);
-    }
-    /** Host development composition only: applies a normal exact policy without opening interactive UI. */
-    async authorizeDevelopmentAgentRuntime(authority, input) {
-        if (!this.developmentAgentRuntimeAuthorizations.has(authority)) {
-            throw new Error('Agent Session development authorization authority is invalid');
-        }
-        return await this.authorizeAgentRuntimeInternal(input, true);
-    }
-    async authorizeAgentRuntimeInternal(input, developmentAutoApprove) {
         const registration = this.registration(input.identity, input.view);
         if (registration === undefined || !validAgentRuntimeSessionId(input.sessionId)
             || !sameAgentRuntimeConnection(this.agentRuntimeConnection, input.connection)
             || (registration.manifest.schemaVersion !== 5 && registration.manifest.schemaVersion !== 6
-                && registration.manifest.schemaVersion !== 7 && registration.manifest.schemaVersion !== 8))
+                && registration.manifest.schemaVersion !== 7 && registration.manifest.schemaVersion !== 8
+                && registration.manifest.schemaVersion !== 9 && registration.manifest.schemaVersion !== 10
+                && registration.manifest.schemaVersion !== 11 && registration.manifest.schemaVersion !== 12
+                && registration.manifest.schemaVersion !== 13))
+            return Object.freeze({ authorized: false });
+        if (registration.manifest.$schema
+            !== `https://raw.githubusercontent.com/cordisx/cordisx-protocol/main/schemas/plugin-manifest.v${registration.manifest.schemaVersion}.schema.json`)
             return Object.freeze({ authorized: false });
         const declaration = registration.manifest.capabilities.find((item) => (item.name === input.capability && isAgentRuntimePermission(item.name)));
         if (declaration === undefined)
@@ -78,34 +81,34 @@ export class PlatformAgentRuntimeBroker extends PlatformPermissionBrokerBase {
             ? declaration.scope.authorityRequester
             : undefined;
         const rationale = 'rationale' in declaration ? declaration.rationale : undefined;
-        if (!this.validAgentRuntimeScopeSource(registration, input, declaredSessionIds, authorityRequester)) {
+        if (!await this.agentRuntimeScopeCurrent(registration, input, declaredSessionIds, authorityRequester)) {
             return Object.freeze({ authorized: false });
         }
-        const policyKey = this.agentRuntimePolicyKey(registration, input.capability, input.sessionId);
-        const policy = this.policyRecords.get(policyKey);
-        if (!developmentAutoApprove && isPermissionPolicyRecordV4(policy) && policy.policy === 'deny-persistent') {
+        if (!this.isRegistered(registration) || !sameAgentRuntimeConnection(this.agentRuntimeConnection, input.connection)) {
             return Object.freeze({ authorized: false });
         }
-        if (developmentAutoApprove && (!isPermissionPolicyRecordV4(policy) || policy.policy !== 'allow-persistent')) {
-            const record = this.agentRuntimePolicyRecord(registration, input.capability, input.sessionId, 'allow-persistent');
-            try {
-                await this.persistV4([record]);
-            }
-            catch {
-                return Object.freeze({ authorized: false });
-            }
-            if (!this.isRegistered(registration) || !sameAgentRuntimeConnection(this.agentRuntimeConnection, input.connection)
-                || !this.validAgentRuntimeScopeSource(registration, input, declaredSessionIds, authorityRequester)) {
-                return Object.freeze({ authorized: false });
-            }
-            this.policyRecords.set(permissionRecordKeyV4(record), record);
-            this.changed();
+        const policyKey = this.agentRuntimePolicyKey(registration, input.capability, input.sessionId, input.scopeSource);
+        const policy = this.policyRecords.get(policyKey);
+        if (isPermissionPolicyRecordV4(policy) && policy.policy === 'deny-persistent') {
+            return Object.freeze({ authorized: false });
         }
-        else if (!isPermissionPolicyRecordV4(policy) || policy.policy !== 'allow-persistent') {
+        const development = this.developmentPermission(registration, input.capability);
+        if (!development && (!isPermissionPolicyRecordV4(policy) || policy.policy !== 'allow-persistent')) {
+            const task = input.scopeSource.kind === 'host-agent-task'
+                ? input.scopeSource
+                : input.scopeSource.kind === 'host-agent-task-authority'
+                    ? input.scopeSource.lease.taskSource
+                    : undefined;
+            const display = (value) => value.replace(/[\u0000-\u001f\u007f]/gu, ' ').slice(0, 512);
+            const taskReason = task === undefined ? undefined : Object.freeze({
+                namespace: 'permission',
+                key: 'agent-runtime.task-approval',
+                fallback: `${input.capability} for command ${display(task.commandId)}; operation ${display(task.operationId)}; requester Session ${display(task.sessionId)}${input.capability === 'approvals.answer' ? `; authority Session ${display(input.sessionId)}` : ''}`,
+            });
             const promptDeclaration = Object.freeze({
                 name: input.capability,
                 required: declaration.required,
-                reason: rationale?.description ?? Object.freeze({
+                reason: taskReason ?? rationale?.description ?? Object.freeze({
                     namespace: 'permission',
                     key: `agent-runtime.${input.capability}`,
                     fallback: `${input.capability} for one exact Agent Session`,
@@ -143,11 +146,11 @@ export class PlatformAgentRuntimeBroker extends PlatformPermissionBrokerBase {
             if (decision !== 'allow' && decision !== 'allow-once')
                 return Object.freeze({ authorized: false });
             if (!this.isRegistered(registration) || !sameAgentRuntimeConnection(this.agentRuntimeConnection, input.connection)
-                || !this.validAgentRuntimeScopeSource(registration, input, declaredSessionIds, authorityRequester)) {
+                || !await this.agentRuntimeScopeCurrent(registration, input, declaredSessionIds, authorityRequester)) {
                 return Object.freeze({ authorized: false });
             }
             if (decision === 'allow') {
-                const record = this.agentRuntimePolicyRecord(registration, input.capability, input.sessionId, 'allow-persistent');
+                const record = this.agentRuntimePolicyRecord(registration, input.capability, input.sessionId, 'allow-persistent', input.scopeSource);
                 try {
                     await this.persistV4([record]);
                 }
@@ -155,14 +158,18 @@ export class PlatformAgentRuntimeBroker extends PlatformPermissionBrokerBase {
                     return Object.freeze({ authorized: false });
                 }
                 if (!this.isRegistered(registration) || !sameAgentRuntimeConnection(this.agentRuntimeConnection, input.connection)
-                    || !this.validAgentRuntimeScopeSource(registration, input, declaredSessionIds, authorityRequester)) {
+                    || !await this.agentRuntimeScopeCurrent(registration, input, declaredSessionIds, authorityRequester)) {
                     return Object.freeze({ authorized: false });
                 }
                 this.policyRecords.set(permissionRecordKeyV4(record), record);
                 this.changed();
             }
         }
-        const existing = [...this.agentRuntimeLeases.values()].find(item => (item.identity.source === input.identity.source && item.identity.id === input.identity.id
+        const taskSource = input.scopeSource.kind === 'host-agent-task' || input.scopeSource.kind === 'host-agent-task-authority'
+            ? input.scopeSource
+            : undefined;
+        const existing = [...this.agentRuntimeLeases.values()].find(item => (item.taskSource === taskSource
+            && item.identity.source === input.identity.source && item.identity.id === input.identity.id
             && item.capability === input.capability && item.lease.sessionId === input.sessionId
             && sameAgentRuntimeConnection(item.connection, input.connection)
             && item.routeInstanceId
@@ -175,6 +182,7 @@ export class PlatformAgentRuntimeBroker extends PlatformPermissionBrokerBase {
             lease,
             identity: Object.freeze({ ...input.identity }),
             capability: input.capability,
+            ...(taskSource === undefined ? {} : { taskSource }),
             connection: Object.freeze({ ...input.connection }),
             ...(input.scopeSource.kind === 'host-route'
                 ? { routeInstanceId: input.scopeSource.routeInstanceId, routeSessionId: input.scopeSource.params.sessionId }
@@ -192,6 +200,8 @@ export class PlatformAgentRuntimeBroker extends PlatformPermissionBrokerBase {
             && lease.identity.source === identity.source && lease.identity.id === identity.id
             && lease.moduleGeneration === registration.generation.moduleGeneration
             && sameAgentRuntimeConnection(lease.connection, this.agentRuntimeConnection)
+            && (lease.taskSource === undefined
+                || this.taskScopeValidator?.(identity, lease.capability, lease.lease.sessionId, lease.taskSource) === true)
             && (lease.routeInstanceId === undefined || this.agentRuntimeRouteValues().some(route => (route.routeInstanceId === lease.routeInstanceId
                 && route.params.sessionId === (lease.routeSessionId ?? lease.lease.sessionId)
                 && route.owner.source === identity.source && route.owner.pluginId === identity.id)));
@@ -206,12 +216,6 @@ export class PlatformAgentRuntimeBroker extends PlatformPermissionBrokerBase {
         this.developmentAgentRuntimeSeeds.add(authority);
         return authority;
     }
-    /** Created only by a Host development composition and never projected into plugin context. */
-    createDevelopmentAgentRuntimeAuthorizationAuthority() {
-        const authority = Object.freeze({});
-        this.developmentAgentRuntimeAuthorizations.add(authority);
-        return authority;
-    }
     /** Host Playground only: mint authority for an exact scenario route beside the visible Room route. */
     createPlaygroundScenarioAgentRuntimeRouteAuthority() {
         const authority = Object.freeze({});
@@ -305,7 +309,42 @@ export class PlatformAgentRuntimeBroker extends PlatformPermissionBrokerBase {
         this.changed();
         await this.persistV4(records);
     }
+    async agentRuntimeScopeCurrent(registration, input, declaredScope, authorityRequester) {
+        if (!this.validAgentRuntimeScopeSource(registration, input, declaredScope, authorityRequester))
+            return false;
+        if (input.scopeSource.kind !== 'host-agent-task' && input.scopeSource.kind !== 'host-agent-task-authority') {
+            return true;
+        }
+        try {
+            return await this.taskScopeReadback?.(input.identity, input.capability, input.sessionId, input.scopeSource)
+                === true && this.validAgentRuntimeScopeSource(registration, input, declaredScope, authorityRequester);
+        }
+        catch {
+            return false;
+        }
+    }
     validAgentRuntimeScopeSource(registration, input, declaredScope, authorityRequester) {
+        const declaration = registration.manifest.capabilities.find(item => item.name === input.capability);
+        const taskScope = declaration !== undefined && 'task' in declaration.scope ? declaration.scope.task : undefined;
+        const taskRequester = declaration !== undefined && 'taskRequester' in declaration.scope
+            ? declaration.scope.taskRequester
+            : undefined;
+        if (input.scopeSource.kind === 'host-agent-task' || input.scopeSource.kind === 'host-agent-task-authority') {
+            if (registration.manifest.schemaVersion !== 12 && registration.manifest.schemaVersion !== 13
+                || declaredScope !== undefined && input.scopeSource.kind === 'host-agent-task-authority')
+                return false;
+            const source = input.scopeSource.kind === 'host-agent-task'
+                ? input.scopeSource
+                : input.scopeSource.lease.taskSource;
+            const selector = input.scopeSource.kind === 'host-agent-task' ? taskScope : taskRequester;
+            return selector !== undefined && selector.kind === 'agent-task-command' && selector.commandId === source.commandId
+                && source.owner.pluginId === `${registration.identity.source}:${registration.identity.id}`
+                && this.taskScopeValidator?.(registration.identity, input.capability, input.sessionId, input.scopeSource)
+                    === true;
+        }
+        if ((taskScope !== undefined && declaredScope === undefined)
+            || (taskRequester !== undefined && authorityRequester === undefined))
+            return false;
         if (input.scopeSource.kind === 'host-create') {
             return input.capability === 'agents.create'
                 && input.scopeSource.reservedSessionId === input.sessionId
@@ -337,17 +376,27 @@ export class PlatformAgentRuntimeBroker extends PlatformPermissionBrokerBase {
                 && declaredScope.param === 'sessionId';
         }
         return declaredScope === undefined
-            && (registration.manifest.schemaVersion === 8 || registration.manifest.schemaVersion === 9)
+            && (registration.manifest.schemaVersion === 8 || registration.manifest.schemaVersion === 9
+                || registration.manifest.schemaVersion === 10 || registration.manifest.schemaVersion === 11
+                || registration.manifest.schemaVersion === 12 || registration.manifest.schemaVersion === 13)
             && input.capability === 'approvals.answer'
             && input.sessionId !== route.params.sessionId
             && isApprovalAuthorityRequesterRouteScope(authorityRequester)
             && authorityRequester.requester.routeId === route.routeId
             && authorityRequester.requester.param === 'sessionId';
     }
-    agentRuntimePolicyRecord(registration, capability, sessionId, policy) {
-        return this.agentRuntimePolicyRecordForIdentity(registration.identity, capability, sessionId, policy);
+    agentRuntimePolicyRecord(registration, capability, sessionId, policy, scopeSource) {
+        return this.agentRuntimePolicyRecordForIdentity(registration.identity, capability, sessionId, policy, scopeSource, {
+            schema: registration.manifest.$schema,
+            declaration: registration.manifest.capabilities.find(item => item.name === capability),
+        });
     }
-    agentRuntimePolicyRecordForIdentity(identity, capability, sessionId, policy) {
+    agentRuntimePolicyRecordForIdentity(identity, capability, sessionId, policy, scopeSource, manifestScope) {
+        const task = scopeSource?.kind === 'host-agent-task'
+            ? scopeSource
+            : scopeSource?.kind === 'host-agent-task-authority'
+                ? scopeSource.lease.taskSource
+                : undefined;
         return normalizePermissionPolicyRecordV4({
             $schema: CORDISX_PERMISSION_POLICY_SCHEMA_V4,
             schemaVersion: 4,
@@ -356,13 +405,13 @@ export class PlatformAgentRuntimeBroker extends PlatformPermissionBrokerBase {
                 identity: { source: identity.source, pluginId: identity.id },
                 capability,
                 scope: { sessionIds: [sessionId] },
-                securityFingerprint: `sha256:${sha256Hex(JSON.stringify({ capability, sessionId }))}`,
+                securityFingerprint: `sha256:${sha256Hex(JSON.stringify({ capability, sessionId, ...(task === undefined ? {} : { task, manifestScope }) }))}`,
             },
             policy,
         });
     }
-    agentRuntimePolicyKey(registration, capability, sessionId) {
-        return permissionRecordKeyV4(this.agentRuntimePolicyRecord(registration, capability, sessionId, 'ask'));
+    agentRuntimePolicyKey(registration, capability, sessionId, scopeSource) {
+        return permissionRecordKeyV4(this.agentRuntimePolicyRecord(registration, capability, sessionId, 'ask', scopeSource));
     }
     fenceAgentRuntime(identity, code, registrationToken) {
         if (code === 'plugin-generation-replaced' && identity !== undefined) {