oui-spec 0.4.1 → 0.6.0

package/dist/chunk-AFNWLRKV.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/core/brand.ts","../src/core/define-surface.ts","../src/core/create-oui.ts","../src/core/surface-runtime.ts"],"names":["createWebSocketTransport","argsHash","requiresApproval","surfacesHash","ARGS_HASH_PATTERN"],"mappings":";;;;;;AA2BO,SAAS,MACd,KAAA,EACuB;AACvB,EAAA,OAAO,KAAA;AACT;;;ACoGO,SAAS,cAId,UAAA,EACwC;AAExC,EAAA,MAAM,SAAA,uBAAgB,GAAA,EAAY;AAClC,EAAA,KAAA,MAAW,MAAA,IAAU,WAAW,OAAA,EAAS;AACvC,IAAA,IAAI,SAAA,CAAU,GAAA,CAAI,MAAA,CAAO,EAAE,CAAA,EAAG;AAC5B,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,CAAA,2BAAA,EAA8B,MAAA,CAAO,EAAE,CAAA,cAAA,EAAiB,WAAW,EAAE,CAAA,CAAA;AAAA,OACvE;AAAA,IACF;AACA,IAAA,SAAA,CAAU,GAAA,CAAI,OAAO,EAAE,CAAA;AAAA,EACzB;AAGA,EAAA,IAAI,WAAW,YAAA,EAAc;AAC3B,IAAA,MAAM,MAAA,uBAAa,GAAA,EAAY;AAC/B,IAAA,KAAA,MAAW,GAAA,IAAO,WAAW,YAAA,EAAc;AACzC,MAAA,IAAI,MAAA,CAAO,GAAA,CAAI,GAAA,CAAI,EAAE,CAAA,EAAG;AACtB,QAAA,MAAM,IAAI,KAAA;AAAA,UACR,CAAA,gCAAA,EAAmC,GAAA,CAAI,EAAE,CAAA,cAAA,EAAiB,WAAW,EAAE,CAAA,CAAA;AAAA,SACzE;AAAA,MACF;AACA,MAAA,MAAA,CAAO,GAAA,CAAI,IAAI,EAAE,CAAA;AAAA,IACnB;AAAA,EACF;AAEA,EAAA,OAAO,KAAA,CAA0B;AAAA,IAC/B,GAAG,UAAA;AAAA;AAAA,IAGH,UAAA,GAAyB;AACvB,MAAA,OAAO;AAAA,QACL,IAAI,UAAA,CAAW,EAAA;AAAA,QACf,MAAM,UAAA,CAAW,IAAA;AAAA,QACjB,aAAa,UAAA,CAAW,WAAA;AAAA,QACxB,SAAS,UAAA,CAAW,OAAA;AAAA,QACpB,YAAY,UAAA,CAAW,UAAA;AAAA,QACvB,OAAA,EAAS,UAAA,CAAW,OAAA,CAAQ,GAAA,CAAI,gBAAgB,CAAA;AAAA,QAChD,YAAA,EAAc,UAAA,CAAW,YAAA,EAAc,GAAA,CAAI,aAAa,CAAA;AAAA,QACxD,UAAU,UAAA,CAAW;AAAA,OACvB;AAAA,IACF,CAAA;AAAA;AAAA,IAGA,MAAM,aAAA,CACJ,QAAA,EACA,MAAA,EACA,OAAA,EAC8B;AAC9B,MAAA,MAAM,MAAA,GAAS,WAAW,OAAA,CAAQ,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,OAAO,QAAQ,CAAA;AAC/D,MAAA,IAAI,CAAC,MAAA,EAAQ;AACX,QAAA,OAAO;AAAA,UACL,OAAA,EAAS,KAAA;AAAA,UACT,KAAA,EAAO;AAAA,YACL,IAAA,EAAM,kBAAA;AAAA,YACN,OAAA,EAAS,CAAA,QAAA,EAAW,QAAQ,CAAA,wBAAA,EAA2B,WAAW,EAAE,CAAA,CAAA;AAAA;AACtE,SACF;AAAA,MACF;AACA,MAAA,IAAI;AACF,QAAA,OAAO,MAAM,MAAA,CAAO,OAAA,CAAQ,MAAA,EAAQ,OAAO,CAAA;AAAA,MAC7C,SAAS,GAAA,EAAK;AACZ,QAAA,OAAO;AAAA,UACL,OAAA,EAAS,KAAA;AAAA,UACT,KAAA,EAAO;AAAA,YACL,IAAA,EAAM,wBAAA;AAAA,YACN,SAAS,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG;AAAA;AAC1D,SACF;AAAA,MACF;AAAA,IACF,CAAA;AAAA;AAAA,IAGA,YAAA,GAAyB;AACvB,MAAA,OAAO,WAAW,OAAA,CAAQ,GAAA,CAAI,CAAC,CAAA,KAAM,EAAE,EAAE,CAAA;AAAA,IAC3C,CAAA;AAAA;AAAA,IAGA,iBAAiB,QAAA,EAAgD;AAC/D,MAAA,MAAM,MAAA,GAAS,WAAW,OAAA,CAAQ,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,OAAO,QAAQ,CAAA;AAC/D,MAAA,OAAO,MAAA,EAAQ,OAAA;AAAA,IACjB;AAAA,GACD,CAAA;AACH;AAyBA,SAAS,iBAAoB,MAAA,EAAwC;AACnE,EAAA,OAAO;AAAA,IACL,IAAI,MAAA,CAAO,EAAA;AAAA,IACX,aAAa,MAAA,CAAO,WAAA;AAAA,IACpB,GAAI,OAAO,KAAA,KAAU,MAAA,GAAY,EAAE,KAAA,EAAO,MAAA,CAAO,KAAA,EAAM,GAAI,EAAC;AAAA,IAC5D,GAAI,OAAO,MAAA,KAAW,MAAA,GAAY,EAAE,MAAA,EAAQ,MAAA,CAAO,MAAA,EAAO,GAAI,EAAC;AAAA,IAC/D,OAAO,MAAA,CAAO,KAAA;AAAA,IACd,QAAQ,MAAA,CAAO,MAAA;AAAA,IACf,SAAS,MAAA,CAAO,OAAA;AAAA,IAChB,OAAO,MAAA,CAAO,KAAA;AAAA,IACd,SAAS,MAAA,CAAO,OAAA;AAAA,IAChB,OAAO,MAAA,CAAO,KAAA;AAAA,IACd,eAAe,MAAA,CAAO,aAAA;AAAA,IACtB,mBAAmB,MAAA,CAAO,iBAAA;AAAA,IAC1B,MAAM,MAAA,CAAO;AAAA,GACf;AACF;AAEA,SAAS,cAAc,GAAA,EAA4C;AACjE,EAAA,OAAO;AAAA,IACL,IAAI,GAAA,CAAI,EAAA;AAAA,IACR,aAAa,GAAA,CAAI,WAAA;AAAA,IACjB,QAAQ,GAAA,CAAI;AAAA,GACd;AACF;;;ACpKO,SAAS,UAGd,MAAA,EACa;AACb,EAAA,MAAM;AAAA,IACJ,MAAA;AAAA,IACA,QAAA;AAAA,IACA,SAAA,EAAW;AAAA,GACb,GAAI,MAAA;AAKJ,EAAA,IAAI,CAAC,MAAA,EAAQ;AACX,IAAA,MAAM,IAAI,KAAA;AAAA,MACR;AAAA,KACF;AAAA,EACF;AACA,EAAA,IAAI,CAAC,KAAA,CAAM,OAAA,CAAQ,QAAQ,CAAA,IAAK,QAAA,CAAS,WAAW,CAAA,EAAG;AACrD,IAAA,MAAM,IAAI,MAAM,gDAAgD,CAAA;AAAA,EAClE;AAEA,EAAA,MAAM,IAAA,uBAAW,GAAA,EAAY;AAC7B,EAAA,KAAA,MAAW,WAAW,QAAA,EAAU;AAC9B,IAAA,IAAI,IAAA,CAAK,GAAA,CAAI,OAAA,CAAQ,EAAE,CAAA,EAAG;AACxB,MAAA,MAAM,IAAI,KAAA;AAAA,QACR,CAAA,4BAAA,EAA+B,QAAQ,EAAE,CAAA,sEAAA;AAAA,OAC3C;AAAA,IACF;AACA,IAAA,IAAA,CAAK,GAAA,CAAI,QAAQ,EAAE,CAAA;AAAA,EACrB;AAEA,EAAA,MAAM,SAAA,GAAY,KAAA;AAAA,IAChBA,0CAAA,CAAyB,QAAQ,eAAe;AAAA,GAClD;AAEA,EAAA,MAAM,IAAA,GAAO,IAAI,GAAA,CAAI,QAAA,CAAS,GAAA,CAAI,CAAC,CAAA,KAAM,CAAC,CAAA,CAAE,EAAA,EAAI,CAAC,CAAU,CAAC,CAAA;AAE5D,EAAA,OAAO;AAAA,IACL,SAAA;AAAA,IACA,WAAW,QAAA,CAAS,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,YAAY,CAAA;AAAA,IAE7C,MAAM,KAAA,GAAQ;AACZ,MAAA,MAAM,UAAU,OAAA,EAAQ;AACxB,MAAA,KAAA,MAAW,WAAW,QAAA,EAAU;AAC9B,QAAA,SAAA,CAAU,eAAA,CAAgB,OAAA,CAAQ,UAAA,EAAY,CAAA;AAAA,MAChD;AAAA,IACF,CAAA;AAAA,IAEA,IAAA,GAAO;AACL,MAAA,KAAA,MAAW,WAAW,QAAA,EAAU;AAC9B,QAAA,SAAA,CAAU,iBAAA,CAAkB,QAAQ,EAAE,CAAA;AAAA,MACxC;AACA,MAAA,SAAA,CAAU,OAAA,EAAQ;AAAA,IACpB,CAAA;AAAA,IAEA,WAAW,EAAA,EAAI;AACb,MAAA,OAAO,IAAA,CAAK,IAAI,EAAE,CAAA;AAAA,IACpB;AAAA,GACF;AACF;;;ACMA,IAAM,gBAAA,GAAmB,GAAA;AACzB,IAAM,yBAAA,GAA4B,GAAA;AAClC,IAAM,qBAAA,GAAwB,GAAA;AAC9B,IAAM,yBAAA,GAA4B,GAAA;AAClC,IAAM,cAAA,GAAiB,EAAA;AAEhB,SAAS,oBAAA,CACd,OAAA,GAAiC,EAAC,EAClB;AAChB,EAAA,MAAM,QAAA,GAAW,QAAQ,QAAA,IAAY,IAAA;AACrC,EAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,MAAA,EAAQ,OAAA,IAAW,gBAAA;AAC3C,EAAA,MAAM,eAAA,GACJ,OAAA,CAAQ,MAAA,EAAQ,SAAA,IAAa,yBAAA;AAC/B,EAAA,MAAM,YAAA,GAAe,QAAQ,YAAA,IAAgB,qBAAA;AAC7C,EAAA,MAAM,eAAA,GAAkB,QAAQ,eAAA,IAAmB,yBAAA;AAEnD,EAAA,IAAI,OAAA,GAAU,CAAA;AACd,EAAA,MAAM,UAAmB,EAAC;AAC1B,EAAA,MAAM,YAAA,uBAAmB,GAAA,EAAkC;AAC3D,EAAA,MAAM,sBAAA,uBAA6B,GAAA,EAAoB;AACvD,EAAA,MAAM,KAAA,uBAAY,GAAA,EAAY;AAC9B,EAAA,IAAI,QAAA,GAAW,CAAA;AACf,EAAA,MAAM,OAAA,uBAAc,GAAA,EAAsC;AAC1D,EAAA,MAAM,OAAA,uBAAc,GAAA,EAA4C;AAEhE,EAAA,MAAM,OAAA,uBAAc,GAAA,EAGlB;AACF,EAAA,MAAM,SAAA,uBAAgB,GAAA,EAAgB;AAEtC,EAAA,MAAM,IAAA,uBAAW,GAAA,EAGf;AACF,EAAA,SAAS,OAAO,SAAA,EAAmB;AACjC,IAAA,IAAI,GAAA,GAAM,IAAA,CAAK,GAAA,CAAI,SAAS,CAAA;AAC5B,IAAA,IAAI,CAAC,GAAA,EAAK;AACR,MAAA,IAAI,OAAA;AACJ,MAAA,MAAM,UAAU,IAAI,OAAA,CAAc,CAAC,CAAA,KAAO,UAAU,CAAE,CAAA;AACtD,MAAA,GAAA,GAAM,EAAE,SAAS,OAAA,EAAQ;AACzB,MAAA,IAAA,CAAK,GAAA,CAAI,WAAW,GAAG,CAAA;AAAA,IACzB;AACA,IAAA,OAAO,GAAA;AAAA,EACT;AACA,EAAA,SAAS,aAAa,SAAA,EAAkC;AACtD,IAAA,OAAO,MAAA,CAAO,SAAS,CAAA,CAAE,OAAA;AAAA,EAC3B;AAIA,EAAA,MAAM,QAAA,uBAAe,GAAA,EAGnB;AAIF,EAAA,MAAM,YAAA,uBAAmB,GAAA,EAAoB;AAC7C,EAAA,IAAI,YAAA,GAAe,KAAK,GAAA,EAAI;AAE5B,EAAA,MAAM,MAAA,uBAAa,GAAA,EAA8B;AAMjD,EAAA,eAAe,gBACb,OAAA,EACwB;AACxB,IAAA,MAAM,WAAW,OAAA,CAAQ,QAAA;AACzB,IAAA,IAAI,CAAC,QAAA;AACH,MAAA,OAAO,4DAAA;AACT,IAAA,IAAI,IAAA;AACJ,IAAA,IAAI;AACF,MAAA,IAAA,GAAO,MAAMC,0BAAA,CAAS,OAAA,CAAQ,MAAA,IAAU,EAAE,CAAA;AAAA,IAC5C,SAAS,GAAA,EAAK;AACZ,MAAA,OAAO,qDAAqD,GAAA,YAAe,KAAA,GAAQ,IAAI,OAAA,GAAU,MAAA,CAAO,GAAG,CAAC,CAAA,CAAA;AAAA,IAC9G;AAEA,IAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,GAAA,CAAI,QAAA,CAAS,UAAU,CAAA;AAC5C,IAAA,IAAI,CAAC,OAAO,OAAO,0CAAA;AACnB,IAAA,IAAI,IAAA,CAAK,GAAA,EAAI,IAAK,KAAA,CAAM,SAAA,EAAW;AACjC,MAAA,MAAA,CAAO,MAAA,CAAO,SAAS,UAAU,CAAA;AACjC,MAAA,OAAO,0BAAA;AAAA,IACT;AACA,IAAA,IAAI,SAAS,QAAA,KAAa,KAAA,CAAM,QAAA,IAAY,IAAA,KAAS,MAAM,QAAA,EAAU;AACnE,MAAA,OAAO,+CAAA;AAAA,IACT;AACA,IAAA,MAAA,CAAO,MAAA,CAAO,SAAS,UAAU,CAAA;AACjC,IAAA,OAAO,IAAA;AAAA,EACT;AAEA,EAAA,IAAI,MAAA,GAA4B,IAAA;AAChC,EAAA,IAAI,SAAA,GAAiC,IAAA;AACrC,EAAA,IAAI,kBAAqC,EAAC;AAO1C,EAAA,SAAS,OAAA,CAAQ,UAAU,IAAA,EAAM;AAC/B,IAAA,IAAI,OAAA,EAAS,YAAA,GAAe,IAAA,CAAK,GAAA,EAAI;AACrC,IAAA,KAAA,MAAW,CAAA,IAAK,CAAC,GAAG,SAAS,GAAG,CAAA,EAAE;AAAA,EACpC;AAEA,EAAA,SAAS,UAAU,SAAA,EAAsC;AACvD,IAAA,KAAA,IAAS,IAAI,OAAA,CAAQ,MAAA,GAAS,CAAA,EAAG,CAAA,IAAK,GAAG,CAAA,EAAA,EAAK;AAC5C,MAAA,IAAI,OAAA,CAAQ,CAAC,CAAA,CAAE,OAAA,CAAQ,OAAO,SAAA,EAAW,OAAO,QAAQ,CAAC,CAAA;AAAA,IAC3D;AACA,IAAA,OAAO,MAAA;AAAA,EACT;AAGA,EAAA,SAAS,aAAA,GAAyB;AAChC,IAAA,MAAM,IAAA,uBAAW,GAAA,EAAY;AAC7B,IAAA,MAAM,MAAe,EAAC;AACtB,IAAA,KAAA,MAAW,KAAK,OAAA,EAAS;AACvB,MAAA,IAAI,IAAA,CAAK,GAAA,CAAI,CAAA,CAAE,OAAA,CAAQ,EAAE,CAAA,EAAG;AAC5B,MAAA,IAAA,CAAK,GAAA,CAAI,CAAA,CAAE,OAAA,CAAQ,EAAE,CAAA;AACrB,MAAA,GAAA,CAAI,IAAA,CAAK,SAAA,CAAU,CAAA,CAAE,OAAA,CAAQ,EAAE,CAAE,CAAA;AAAA,IACnC;AACA,IAAA,OAAO,GAAA;AAAA,EACT;AAEA,EAAA,SAAS,gBAAgB,KAAA,EAAc;AACrC,IAAA,IAAI,CAAC,QAAA,IAAY,CAAC,SAAA,EAAW;AAC7B,IAAA,SAAA,CAAU,eAAA,CAAgB,KAAA,CAAM,OAAA,CAAQ,UAAA,EAAY,CAAA;AACpD,IAAA,MAAM,GAAA,GAAM,YAAA,CAAa,GAAA,CAAI,KAAA,CAAM,QAAQ,EAAE,CAAA;AAC7C,IAAA,IAAI,GAAA,EAAK;AACP,MAAA,KAAA,MAAW,CAAC,aAAA,EAAe,KAAK,CAAA,IAAK,GAAA,EAAK;AACxC,QAAA,SAAA,CAAU,eAAA,CAAgB;AAAA,UACxB,SAAA,EAAW,MAAM,OAAA,CAAQ,EAAA;AAAA,UACzB,aAAA;AAAA,UACA,KAAA;AAAA,UACA,SAAA,EAAW,KAAK,GAAA;AAAI,SACrB,CAAA;AAAA,MACH;AAAA,IACF;AAAA,EACF;AAEA,EAAA,SAAS,WAAA,GAAc;AACrB,IAAA,KAAA,MAAW,CAAA,IAAK,aAAA,EAAc,EAAG,eAAA,CAAgB,CAAC,CAAA;AAAA,EACpD;AAEA,EAAA,SAAS,cAAA,CACP,SAAA,EACA,aAAA,EACA,KAAA,EACA,UAAU,IAAA,EACV;AACA,IAAA,MAAM,GAAA,GAAM,CAAA,EAAG,SAAS,CAAA,EAAA,EAAS,aAAa,CAAA,CAAA;AAC9C,IAAA,IAAI,UAAA;AACJ,IAAA,IAAI;AACF,MAAA,UAAA,GAAa,IAAA,CAAK,SAAA,CAAU,KAAK,CAAA,IAAK,WAAA;AAAA,IACxC,CAAA,CAAA,MAAQ;AACN,MAAA,UAAA,GAAa,OAAO,KAAK,CAAA;AAAA,IAC3B;AACA,IAAA,IAAI,sBAAA,CAAuB,GAAA,CAAI,GAAG,CAAA,KAAM,UAAA,EAAY;AACpD,IAAA,sBAAA,CAAuB,GAAA,CAAI,KAAK,UAAU,CAAA;AAE1C,IAAA,IAAI,GAAA,GAAM,YAAA,CAAa,GAAA,CAAI,SAAS,CAAA;AACpC,IAAA,IAAI,CAAC,GAAA,EAAK;AACR,MAAA,GAAA,uBAAU,GAAA,EAAI;AACd,MAAA,YAAA,CAAa,GAAA,CAAI,WAAW,GAAG,CAAA;AAAA,IACjC;AACA,IAAA,GAAA,CAAI,GAAA,CAAI,aAAA,EAAe,UAAA,CAAW,KAAK,CAAC,CAAA;AAExC,IAAA,IAAI,YAAY,SAAA,EAAW;AACzB,MAAA,SAAA,CAAU,eAAA,CAAgB;AAAA,QACxB,SAAA;AAAA,QACA,aAAA;AAAA,QACA,KAAA;AAAA,QACA,SAAA,EAAW,KAAK,GAAA;AAAI,OACrB,CAAA;AAAA,IACH;AACA,IAAA,OAAA,CAAQ,OAAO,CAAA;AAAA,EACjB;AAEA,EAAA,SAAS,cAAc,SAAA,EAAmB;AACxC,IAAA,YAAA,CAAa,OAAO,SAAS,CAAA;AAC7B,IAAA,KAAA,MAAW,OAAO,CAAC,GAAG,sBAAA,CAAuB,IAAA,EAAM,CAAA,EAAG;AACpD,MAAA,IAAI,GAAA,CAAI,UAAA,CAAW,CAAA,EAAG,SAAS,CAAA,EAAA,CAAQ,CAAA;AACrC,QAAA,sBAAA,CAAuB,OAAO,GAAG,CAAA;AAAA,IACrC;AACA,IAAA,KAAA,MAAW,CAAC,GAAA,EAAK,KAAK,CAAA,IAAK,OAAA,EAAS;AAClC,MAAA,IAAI,GAAA,CAAI,UAAA,CAAW,CAAA,EAAG,SAAS,IAAQ,CAAA,EAAG;AACxC,QAAA,aAAA,CAAc,KAAK,CAAA;AACnB,QAAA,OAAA,CAAQ,OAAO,GAAG,CAAA;AAGlB,QAAA,OAAA,CAAQ,GAAA,CAAI,GAAG,CAAA,GAAI;AAAA,UACjB,IAAA,EAAM,qBAAA;AAAA,UACN,OAAA,EACE,YAAY,SAAS,CAAA,6HAAA;AAAA,SAGxB,CAAA;AACD,QAAA,OAAA,CAAQ,OAAO,GAAG,CAAA;AAAA,MACpB;AAAA,IACF;AAAA,EACF;AASA,EAAA,SAAS,YAAA,CACP,SAAA,EACA,SAAA,EACA,QAAA,EACA,SACA,cAAA,EACA;AACA,IAAA,MAAM,MAAA,GAAS,OACb,OAAA,EACA,IAAA,EACA,KAAA,KACG;AAEH,MAAA,MAAM,aAAa,SAAS,CAAA;AAC5B,MAAA,MAAM,OAAO,QAAA,EAAS;AACtB,MAAA,MAAM,KAAA,GAAQ,YAAA,CAAa,GAAA,CAAI,SAAS,CAAA;AACxC,MAAA,MAAA,CAAO;AAAA,QACL,SAAA;AAAA,QACA,OAAA;AAAA,QACA,GAAI,SAAS,MAAA,GAAY,EAAE,MAAM,UAAA,CAAW,IAAI,CAAA,EAAE,GAAI,EAAC;AAAA,QACvD,GAAI,KAAA,GAAQ,EAAE,KAAA,KAAU,EAAC;AAAA,QACzB,OAAA,EAAS,KAAA;AAAA,QACT,SAAA,EAAW,KAAK,GAAA,EAAI;AAAA,QACpB,GAAI,KAAK,YAAA,KAAiB,KAAA,GAAQ,EAAE,QAAA,EAAU,IAAA,CAAK,QAAA,EAAS,GAAI,EAAC;AAAA,QACjE,cAAc,IAAA,CAAK,YAAA;AAAA,QACnB,cAAc,IAAA,CAAK;AAAA,OACpB,CAAA;AACD,MAAA,IAAA,CAAK,OAAO,SAAS,CAAA;AACrB,MAAA,YAAA,CAAa,OAAO,SAAS,CAAA;AAAA,IAC/B,CAAA;AAGA,IAAA,MAAM,aAAA,GAAgB,CAAA,EAAG,SAAS,CAAA,CAAA,EAAI,QAAQ,CAAA,OAAA,CAAA;AAC9C,IAAA,MAAM,SAAA,GAAY,CAAA,EAAG,SAAS,CAAA,EAAA,EAAS,QAAQ,CAAA,CAAA;AAE/C,IAAA,IAAI,QAAQ,SAAA,EAAW;AACrB,MAAA,cAAA;AAAA,QACE,SAAA;AAAA,QACA,aAAA;AAAA,QACA,EAAE,MAAA,EAAQ,YAAA,EAAc,cAAA,EAAgB,SAAS,IAAA,EAAK;AAAA,QACtD;AAAA,OACF;AACA,MAAA;AAAA,IACF;AACA,IAAA,IAAI,CAAC,QAAQ,OAAA,EAAS;AACpB,MAAA,cAAA;AAAA,QACE,SAAA;AAAA,QACA,aAAA;AAAA,QACA,EAAE,MAAA,EAAQ,YAAA,EAAc,cAAA,EAAgB,SAAS,KAAA,EAAM;AAAA,QACvD;AAAA,OACF;AACA,MAAA;AAAA,IACF;AAEA,IAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,GAAA,CAAI,SAAS,CAAA;AACtC,IAAA,IAAI,QAAA,EAAU;AACZ,MAAA,aAAA,CAAc,QAAQ,CAAA;AACtB,MAAA,OAAA,CAAQ,OAAO,SAAS,CAAA;AACxB,MAAA,OAAA,CAAQ,GAAA,CAAI,SAAS,CAAA,GAAI;AAAA,QACvB,IAAA,EAAM,YAAA;AAAA,QACN,OAAA,EACE,IAAI,QAAQ,CAAA,sFAAA;AAAA,OAEf,CAAA;AACD,MAAA,OAAA,CAAQ,OAAO,SAAS,CAAA;AAAA,IAC1B;AAEA,IAAA,cAAA;AAAA,MACE,SAAA;AAAA,MACA,aAAA;AAAA,MACA,EAAE,MAAA,EAAQ,SAAA,EAAW,cAAA,EAAgB,SAAS,IAAA,EAAK;AAAA,MACnD;AAAA,KACF;AAEA,IAAA,MAAM,WAAA,GAAc,QAAQ,WAAA,IAAe,QAAA;AAC3C,IAAA,MAAM,WAAA,GAAc,QAAQ,aAAA,IAAiB,QAAA;AAC7C,IAAA,MAAM,SAAA,GAAY,KAAK,GAAA,EAAI;AAC3B,IAAA,IAAI,QAAA,GAAW,CAAA;AAEf,IAAA,MAAM,KAAA,GAAQ,YAAY,YAAY;AACpC,MAAA,QAAA,EAAA;AACA,MAAA,IAAI,WAAW,WAAA,IAAe,IAAA,CAAK,GAAA,EAAI,GAAI,YAAY,WAAA,EAAa;AAClE,QAAA,aAAA,CAAc,KAAK,CAAA;AACnB,QAAA,OAAA,CAAQ,OAAO,SAAS,CAAA;AACxB,QAAA,OAAA,CAAQ,OAAO,SAAS,CAAA;AACxB,QAAA,cAAA;AAAA,UACE,SAAA;AAAA,UACA,aAAA;AAAA,UACA,EAAE,MAAA,EAAQ,SAAA,EAAW,cAAA,EAAgB,SAAS,KAAA,EAAM;AAAA,UACpD;AAAA,SACF;AACA,QAAA,KAAK,MAAA,CAAO,OAAO,MAAA,EAAW;AAAA,UAC5B,IAAA,EAAM,SAAA;AAAA,UACN,OAAA,EAAS,IAAI,QAAQ,CAAA,2CAAA;AAAA,SACtB,CAAA;AACD,QAAA;AAAA,MACF;AACA,MAAA,MAAM,KAAA,GAAQ,UAAU,SAAS,CAAA;AACjC,MAAA,IAAI,CAAC,KAAA,EAAO;AAEV,QAAA,aAAA,CAAc,KAAK,CAAA;AACnB,QAAA,OAAA,CAAQ,OAAO,SAAS,CAAA;AACxB,QAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,GAAA,CAAI,SAAS,CAAA;AAClC,QAAA,OAAA,CAAQ,OAAO,SAAS,CAAA;AACxB,QAAA,IAAA,GAAO;AAAA,UACL,IAAA,EAAM,qBAAA;AAAA,UACN,OAAA,EACE,CAAA,SAAA,EAAY,SAAS,CAAA,wBAAA,EAA2B,QAAQ,CAAA,6FAAA;AAAA,SAG3D,CAAA;AACD,QAAA;AAAA,MACF;AAIA,MAAA,MAAM,MAAA,GAAS,MAAM,OAAA,CAAQ,OAAA,CAAQ,KAAK,CAAC,CAAA,KAAM,CAAA,CAAE,EAAA,KAAO,QAAQ,CAAA;AAClE,MAAA,MAAM,OAAA,GAAU,MAAA,EAAQ,OAAA,EAAS,OAAA,IAAW,OAAA,CAAQ,OAAA;AACpD,MAAA,IAAI,CAAC,OAAA,EAAS;AACd,MAAA,IAAI;AACF,QAAA,MAAM,IAAI,MAAM,OAAA,CAAQ,cAAA,EAAgB,KAAA,CAAM,YAAY,CAAA;AAC1D,QAAA,cAAA;AAAA,UACE,SAAA;AAAA,UACA,aAAA;AAAA,UACA;AAAA,YACE,GAAI,CAAA,CAAE,IAAA;AAAA,YACN,OAAA,EAAS,CAAC,CAAA,CAAE;AAAA,WACd;AAAA,UACA;AAAA,SACF;AACA,QAAA,IAAI,EAAE,IAAA,EAAM;AACV,UAAA,aAAA,CAAc,KAAK,CAAA;AACnB,UAAA,OAAA,CAAQ,OAAO,SAAS,CAAA;AACxB,UAAA,OAAA,CAAQ,OAAO,SAAS,CAAA;AACxB,UAAA,KAAK,MAAA,CAAO,IAAA,EAAM,CAAA,CAAE,IAAI,CAAA;AAAA,QAC1B;AAAA,MACF,SAAS,GAAA,EAAK;AAEZ,QAAA,cAAA;AAAA,UACE,SAAA;AAAA,UACA,aAAA;AAAA,UACA,EAAE,QAAQ,YAAA,EAAc,KAAA,EAAO,OAAO,GAAG,CAAA,EAAG,SAAS,IAAA,EAAK;AAAA,UAC1D;AAAA,SACF;AAAA,MACF;AAAA,IACF,CAAA,EAAG,QAAQ,UAAU,CAAA;AAErB,IAAA,OAAA,CAAQ,GAAA,CAAI,WAAW,KAAK,CAAA;AAC5B,IAAA,OAAA,CAAQ,GAAA,CAAI,WAAW,CAAC,KAAA,KAAU,KAAK,MAAA,CAAO,KAAA,EAAO,MAAA,EAAW,KAAK,CAAC,CAAA;AAAA,EACxE;AAIA,EAAA,eAAe,iBAAiB,KAAA,EAAiC;AAC/D,IAAA,MAAM,WAAW,KAAA,GAAQ,eAAA;AACzB,IAAA,WAAS;AACP,MAAA,MAAM,GAAA,GAAM,KAAK,GAAA,EAAI;AACrB,MAAA,MAAM,QAAA,GAAW,GAAA,GAAM,IAAA,CAAK,GAAA,CAAI,OAAO,YAAY,CAAA;AACnD,MAAA,IAAI,KAAA,CAAM,IAAA,KAAS,CAAA,IAAK,QAAA,IAAY,SAAS,OAAO,IAAA;AACpD,MAAA,IAAI,GAAA,IAAO,UAAU,OAAO,KAAA;AAC5B,MAAA,MAAM,MAAM,IAAA,CAAK,GAAA,CAAI,cAAA,EAAgB,QAAA,GAAW,GAAG,CAAC,CAAA;AAAA,IACtD;AAAA,EACF;AAIA,EAAA,eAAe,IAAI,OAAA,EAAqD;AACtE,IAAA,MAAM,SAAA,GAAY,KAAK,GAAA,EAAI;AAC3B,IAAA,MAAM,KAAA,GAAQ,SAAA,CAAU,OAAA,CAAQ,SAAS,CAAA;AAEzC,IAAA,IAAI,MAAA;AACJ,IAAA,IAAI,OAAA,GAAU,KAAA;AACd,IAAA,IAAI,CAAC,KAAA,EAAO;AACV,MAAA,MAAM,OAAA,GAAU,eAAc,CAAE,GAAA,CAAI,CAAC,CAAA,KAAM,CAAA,CAAE,QAAQ,EAAE,CAAA;AACvD,MAAA,MAAA,GAAS;AAAA,QACP,OAAA,EAAS,KAAA;AAAA,QACT,KAAA,EAAO;AAAA,UACL,IAAA,EAAM,qBAAA;AAAA,UACN,OAAA,EACE,CAAA,SAAA,EAAY,OAAA,CAAQ,SAAS,CAAA,sCAAA,EACR,OAAA,CAAQ,MAAA,GAAS,OAAA,CAAQ,IAAA,CAAK,IAAI,CAAA,GAAI,MAAM,CAAA,CAAA;AAAA;AACrE,OACF;AAAA,IACF,CAAA,MAAO;AACL,MAAA,MAAM,QAAA,GAAW,KAAA,CAAM,OAAA,CAAQ,OAAA,CAAQ,IAAA;AAAA,QACrC,CAAC,CAAA,KAAM,CAAA,CAAE,EAAA,KAAO,OAAA,CAAQ;AAAA,OAC1B;AACA,MAAA,MAAM,OAAA,GACJ,QAAA,IAAYC,kCAAA,CAAiB,QAAA,CAAS,MAAA,EAAQ,QAAA,CAAS,OAAO,CAAA,GAC1D,MAAM,eAAA,CAAgB,OAAO,CAAA,GAC7B,IAAA;AAEN,MAAA,MAAA,GAAS,OAAA,GACL;AAAA,QACE,OAAA,EAAS,KAAA;AAAA,QACT,KAAA,EAAO;AAAA,UACL,IAAA,EAAM,mBAAA;AAAA,UACN,OAAA,EAAS,CAAA,CAAA,EAAI,OAAA,CAAQ,QAAQ,kBAAkB,OAAO,CAAA,CAAA;AAAA;AACxD,OACF,GACA,MAAM,KAAA,CAAM,OAAA,CAAQ,aAAA;AAAA,QAClB,OAAA,CAAQ,QAAA;AAAA,QACR,OAAA,CAAQ,UAAU,EAAC;AAAA,QACnB,MAAM,UAAA;AAAW,OACnB;AACJ,MAAA,IAAI,OAAO,OAAA,EAAS;AAClB,QAAA,MAAM,MAAA,GAAS,KAAA,CAAM,OAAA,CAAQ,OAAA,CAAQ,IAAA;AAAA,UACnC,CAAC,CAAA,KAAM,CAAA,CAAE,EAAA,KAAO,OAAA,CAAQ;AAAA,SAC1B;AACA,QAAA,IAAI,QAAQ,OAAA,EAAS;AACnB,UAAA,OAAA,GAAU,IAAA;AACV,UAAA,YAAA;AAAA,YACE,OAAA,CAAQ,SAAA;AAAA,YACR,MAAM,OAAA,CAAQ,EAAA;AAAA,YACd,MAAA,CAAO,EAAA;AAAA,YACP,MAAA,CAAO,OAAA;AAAA,YACP,MAAA,CAAO,QAAQ,MAAA,CAAO;AAAA,WACxB;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAEA,IAAA,MAAM,OAAA,GAAU,MAAM,gBAAA,CAAiB,SAAS,CAAA;AAChD,IAAA,MAAM,OAAO,QAAA,EAAS;AACtB,IAAA,IAAI,SAAS,YAAA,CAAa,GAAA,CAAI,OAAA,CAAQ,SAAA,EAAW,KAAK,YAAa,CAAA;AAEnE,IAAA,OAAO;AAAA,MACL,WAAW,OAAA,CAAQ,SAAA;AAAA,MACnB,SAAS,MAAA,CAAO,OAAA;AAAA,MAChB,GAAI,MAAA,CAAO,IAAA,KAAS,MAAA,GAAY,EAAE,IAAA,EAAM,UAAA,CAAW,MAAA,CAAO,IAAI,CAAA,EAAE,GAAI,EAAC;AAAA,MACrE,GAAI,MAAA,CAAO,KAAA,GACP,EAAE,KAAA,EAAO,WAAW,MAAA,CAAO,KAAK,CAAA,EAA8B,GAC9D,EAAC;AAAA,MACL,GAAI,OAAA,GAAU,EAAE,OAAA,EAAS,IAAA,KAAS,EAAC;AAAA,MACnC,UAAA,EAAY,IAAA,CAAK,GAAA,EAAI,GAAI,SAAA;AAAA,MACzB,SAAA,EAAW,KAAK,GAAA,EAAI;AAAA;AAAA,MAEpB,GAAI,IAAA,CAAK,YAAA,KAAiB,OAAA,CAAQ,aAAA,GAC9B,EAAE,QAAA,EAAU,IAAA,CAAK,QAAA,EAAS,GAC1B,EAAC;AAAA,MACL,cAAc,IAAA,CAAK,YAAA;AAAA,MACnB,cAAc,IAAA,CAAK,YAAA;AAAA,MACnB;AAAA,KACF;AAAA,EACF;AAWA,EAAA,SAAS,MAAA,CAAO,QAAyB,UAAA,EAAyB;AAChE,IAAA,MAAM,KAAA,GAA6C;AAAA,MACjD,CAAC,YAAY,cAAc,CAAA;AAAA,MAC3B,CAAC,UAAA,EAAY,cAAA,EAAgB,MAAM;AAAA,KACrC;AACA,IAAA,MAAM,IAAA,GAAO,CAAC,KAAA,EAAwB,IAAA,KAAiB;AACrD,MAAA,SAAA,EAAW,UAAA,CAAW,KAAA,EAAO,CAAC,GAAA,KAAQ;AACpC,QAAA,IAAI,IAAI,EAAA,EAAI;AACV,UAAA,UAAA,IAAa;AACb,UAAA;AAAA,QACF;AACA,QAAA,MAAM,OAAA,GAAU,MAAM,IAAI,CAAA;AAC1B,QAAA,IAAI,CAAC,OAAA,EAAS;AACZ,UAAA,OAAA,CAAQ,IAAA;AAAA,YACN,CAAA,oBAAA,EAAuB,MAAA,CAAO,SAAS,CAAA,2BAAA,EAA8B,IAAI,MAAM,CAAA;AAAA,WACjF;AACA,UAAA;AAAA,QACF;AACA,QAAA,OAAA,CAAQ,IAAA;AAAA,UACN,CAAA,oBAAA,EAAuB,MAAA,CAAO,SAAS,CAAA,cAAA,EAAiB,GAAA,CAAI,MAAM,CAAA,sBAAA,EAAyB,OAAA,CAAQ,IAAA,CAAK,IAAI,CAAC,CAAA;AAAA,SAC/G;AACA,QAAA,IAAA,CAAK,QAAQ,MAAA,EAAQ,GAAA,CAAI,QAAQ,OAAO,CAAA,EAAG,OAAO,CAAC,CAAA;AAAA,MACrD,CAAC,CAAA;AAAA,IACH,CAAA;AACA,IAAA,IAAA,CAAK,QAAQ,CAAC,CAAA;AAAA,EAChB;AAEA,EAAA,SAAS,QAAQ,OAAA,EAAqD;AACpE,IAAA,MAAM,IAAA,GAAO,OAAA,CAAQ,GAAA,CAAI,OAAA,CAAQ,SAAS,CAAA;AAC1C,IAAA,IAAI,MAAM,OAAO,IAAA;AAEjB,IAAA,MAAM,OAAA,GAAU,IAAI,OAAO,CAAA;AAC3B,IAAA,OAAA,CAAQ,GAAA,CAAI,OAAA,CAAQ,SAAA,EAAW,OAAO,CAAA;AACtC,IAAA,OAAO,OAAA,CAAQ,OAAO,YAAA,EAAc;AAClC,MAAA,MAAM,MAAA,GAAS,OAAA,CAAQ,IAAA,EAAK,CAAE,MAAK,CAAE,KAAA;AACrC,MAAA,OAAA,CAAQ,OAAO,MAAM,CAAA;AACrB,MAAA,QAAA,CAAS,OAAO,MAAM,CAAA;AAAA,IACxB;AACA,IAAA,OAAO,OAAA;AAAA,EACT;AAIA,EAAA,SAAS,QAAA,GAA+B;AACtC,IAAA,MAAM,WAAyB,EAAC;AAChC,IAAA,MAAM,MAA8B,EAAC;AACrC,IAAA,KAAA,MAAW,CAAA,IAAK,eAAc,EAAG;AAC/B,MAAA,QAAA,CAAS,IAAA,CAAK,CAAA,CAAE,OAAA,CAAQ,UAAA,EAAY,CAAA;AACpC,MAAA,MAAM,MAAA,GAAS,YAAA,CAAa,GAAA,CAAI,CAAA,CAAE,QAAQ,EAAE,CAAA;AAC5C,MAAA,IAAI,MAAA,IAAU,OAAO,IAAA,GAAO,CAAA;AAC1B,QAAA,GAAA,CAAI,EAAE,OAAA,CAAQ,EAAE,CAAA,GAAI,MAAA,CAAO,YAAY,MAAM,CAAA;AAAA,IACjD;AACA,IAAA,OAAO;AAAA,MACL,QAAA;AAAA,MACA,YAAA,EAAc,GAAA;AAAA,MACd,YAAA,EAAcC,+BAAa,QAAQ;AAAA,KACrC;AAAA,EACF;AAIA,EAAA,SAAS,OAAO,IAAA,EAAyB;AACvC,IAAA,IAAI,SAAS,MAAA,EAAQ;AACrB,IAAA,KAAA,MAAW,GAAA,IAAO,iBAAiB,GAAA,EAAI;AACvC,IAAA,eAAA,GAAkB,EAAC;AACnB,IAAA,SAAA,EAAW,OAAA,EAAQ;AACnB,IAAA,SAAA,GAAY,IAAA;AACZ,IAAA,MAAA,GAAS,IAAA;AACT,IAAA,IAAI,CAAC,IAAA,EAAM;AAEX,IAAA,MAAM,CAAA,GAAIH,0CAAA,CAAyB,IAAA,EAAM,OAAA,CAAQ,SAAS,CAAA;AAC1D,IAAA,SAAA,GAAY,CAAA;AAEZ,IAAA,eAAA,CAAgB,IAAA;AAAA,MACd,CAAA,CAAE,QAAA,CAAS,CAAC,OAAA,EAAS,OAAA,KAAY;AAC/B,QAAA,IAAI,QAAQ,MAAA,IAAU,CAAC,OAAA,CAAQ,MAAA,CAAO,OAAO,CAAA,EAAG;AAC9C,UAAA,OAAA,CAAQ,IAAA;AAAA,YACN,CAAA,oDAAA,EAAuD,QAAQ,SAAS,CAAA,CAAA,EAAI,QAAQ,QAAQ,CAAA,EAAA,EAAK,QAAQ,SAAS,CAAA,CAAA;AAAA,WACpH;AACA,UAAA,OAAA,GAAU;AAAA,YACR,EAAA,EAAI,KAAA;AAAA,YACJ,MAAA,EAAQ;AAAA,WACT,CAAA;AACD,UAAA;AAAA,QACF;AAEA,QAAA,OAAA,GAAU,EAAE,EAAA,EAAI,IAAA,EAAM,CAAA;AACtB,QAAA,MAAM,KAAK,OAAA,CAAQ,SAAA;AACnB,QAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,GAAA,CAAI,EAAE,CAAA;AAI7B,QAAA,IAAI,KAAA,IAAS,KAAA,CAAM,KAAA,KAAU,MAAA,EAAQ;AACrC,QAAA,IAAI,SAAS,IAAA,CAAK,GAAA,EAAI,GAAI,KAAA,CAAM,KAAK,eAAA,EAAiB;AACtD,QAAA,IAAI,CAAC,KAAA,EAAO,QAAA,CAAS,GAAA,CAAI,EAAA,EAAI,EAAE,KAAA,EAAO,SAAA,EAAW,EAAA,EAAI,IAAA,CAAK,GAAA,EAAI,EAAG,CAAA;AACjE,QAAA,KAAK,OAAA,CAAQ,OAAO,CAAA,CAAE,IAAA,CAAK,CAAC,MAAA,KAAW;AAIrC,UAAA,IAAI,OAAA,CAAQ,IAAI,EAAE,CAAA;AAChB,YAAA,QAAA,CAAS,GAAA,CAAI,IAAI,EAAE,KAAA,EAAO,QAAQ,EAAA,EAAI,IAAA,CAAK,GAAA,EAAI,EAAG,CAAA;AACpD,UAAA,MAAA,CAAO,QAAQ,MAAM;AACnB,YAAA,IAAI,OAAA,CAAQ,IAAI,EAAE,CAAA;AAChB,cAAA,QAAA,CAAS,GAAA,CAAI,IAAI,EAAE,KAAA,EAAO,YAAY,EAAA,EAAI,IAAA,CAAK,GAAA,EAAI,EAAG,CAAA;AAAA,UAC1D,CAAC,CAAA;AACD,UAAA,MAAM,GAAA,GAAM,OAAO,EAAE,CAAA;AACrB,UAAA,GAAA,CAAI,OAAA,EAAQ;AAEZ,UAAA,IAAI,CAAC,MAAA,CAAO,OAAA,EAAS,IAAA,CAAK,OAAO,EAAE,CAAA;AAAA,QACrC,CAAC,CAAA;AAAA,MACH,CAAC;AAAA,KACH;AAEA,IAAA,IAAI,QAAA,EAAU;AAGZ,MAAA,eAAA,CAAgB,IAAA;AAAA,QACd,CAAA,CAAE,kBAAA,CAAmB,CAAC,SAAA,KAAc;AAClC,UAAA,IAAI,WAAW,WAAA,EAAY;AAAA,QAC7B,CAAC;AAAA,OACH;AACA,MAAA,IAAI,CAAA,CAAE,WAAW,WAAA,EAAY;AAAA,IAC/B;AAAA,EACF;AAEA,EAAA,IAAI,OAAA,CAAQ,MAAA,EAAQ,MAAA,CAAO,OAAA,CAAQ,MAAM,CAAA;AAIzC,EAAA,SAAS,KAAA,CACP,SACA,UAAA,EACgB;AAChB,IAAA,MAAM,KAAA,GAAe;AAAA,MACnB,GAAA,EAAK,OAAA,EAAA;AAAA,MACL,OAAA;AAAA,MACA;AAAA,KACF;AACA,IAAA,OAAA,CAAQ,KAAK,KAAK,CAAA;AAClB,IAAA,eAAA,CAAgB,KAAK,CAAA;AACrB,IAAA,OAAA,EAAQ;AAER,IAAA,IAAI,OAAA,GAAU,IAAA;AACd,IAAA,OAAO;AAAA,MACL,WAAW,OAAA,CAAQ,EAAA;AAAA,MACnB,eAAA,CAAgB,eAAe,KAAA,EAAO;AAEpC,QAAA,IAAI,CAAC,OAAA,IAAW,SAAA,CAAU,OAAA,CAAQ,EAAE,MAAM,KAAA,EAAO;AACjD,QAAA,cAAA,CAAe,OAAA,CAAQ,EAAA,EAAI,aAAA,EAAe,KAAK,CAAA;AAAA,MACjD,CAAA;AAAA,MACA,OAAA,GAAU;AACR,QAAA,IAAI,CAAC,OAAA,EAAS;AACd,QAAA,OAAA,GAAU,KAAA;AACV,QAAA,MAAM,CAAA,GAAI,OAAA,CAAQ,OAAA,CAAQ,KAAK,CAAA;AAC/B,QAAA,IAAI,CAAA,IAAK,CAAA,EAAG,OAAA,CAAQ,MAAA,CAAO,GAAG,CAAC,CAAA;AAC/B,QAAA,MAAM,WAAA,GAAc,SAAA,CAAU,OAAA,CAAQ,EAAE,CAAA;AACxC,QAAA,IAAI,WAAA,EAAa;AACf,UAAA,eAAA,CAAgB,WAAW,CAAA;AAAA,QAC7B,CAAA,MAAO;AACL,UAAA,aAAA,CAAc,QAAQ,EAAE,CAAA;AACxB,UAAA,IAAI,QAAA,IAAY,SAAA,EAAW,SAAA,CAAU,iBAAA,CAAkB,QAAQ,EAAE,CAAA;AAAA,QACnE;AACA,QAAA,OAAA,EAAQ;AAAA,MACV;AAAA,KACF;AAAA,EACF;AAEA,EAAA,OAAO;AAAA,IACL,KAAA;AAAA,IACA,MAAA;AAAA,IACA,QAAA;AAAA,IACA,OAAA;AAAA,IACA,IAAA,GAAO;AACL,MAAA,MAAM,EAAA,GAAK,QAAA,EAAA;AACX,MAAA,KAAA,CAAM,IAAI,EAAE,CAAA;AACZ,MAAA,OAAA,EAAQ;AACR,MAAA,IAAI,QAAA,GAAW,KAAA;AACf,MAAA,OAAO,MAAM;AACX,QAAA,IAAI,QAAA,EAAU;AACd,QAAA,QAAA,GAAW,IAAA;AACX,QAAA,KAAA,CAAM,OAAO,EAAE,CAAA;AACf,QAAA,OAAA,EAAQ;AAAA,MACV,CAAA;AAAA,IACF,CAAA;AAAA,IACA,cAAc,KAAA,EAAO;AACnB,MAAA,IACE,CAAC,KAAA,IACD,OAAO,KAAA,CAAM,UAAA,KAAe,YAC5B,CAAC,KAAA,CAAM,UAAA,IACP,OAAO,KAAA,CAAM,QAAA,KAAa,YAC1B,CAACI,mCAAA,CAAkB,IAAA,CAAK,KAAA,CAAM,QAAQ,CAAA,IACtC,CAAC,MAAA,CAAO,QAAA,CAAS,KAAA,CAAM,SAAS,CAAA,EAChC;AACA,QAAA,MAAM,IAAI,KAAA;AAAA,UACR;AAAA,SACF;AAAA,MACF;AACA,MAAA,MAAM,GAAA,GAAM,KAAK,GAAA,EAAI;AACrB,MAAA,KAAA,MAAW,CAAC,EAAA,EAAI,CAAC,CAAA,IAAK,MAAA,EAAQ,IAAI,GAAA,IAAO,CAAA,CAAE,SAAA,EAAW,MAAA,CAAO,MAAA,CAAO,EAAE,CAAA;AACtE,MAAA,MAAA,CAAO,IAAI,KAAA,CAAM,UAAA,EAAY,EAAE,GAAG,OAAO,CAAA;AAAA,IAC3C,CAAA;AAAA,IACA,UAAU,QAAA,EAAU;AAClB,MAAA,SAAA,CAAU,IAAI,QAAQ,CAAA;AACtB,MAAA,OAAO,MAAM;AACX,QAAA,SAAA,CAAU,OAAO,QAAQ,CAAA;AAAA,MAC3B,CAAA;AAAA,IACF,CAAA;AAAA,IACA,OAAA,GAAU;AACR,MAAA,KAAA,MAAW,KAAA,IAAS,OAAA,CAAQ,MAAA,EAAO,gBAAiB,KAAK,CAAA;AACzD,MAAA,OAAA,CAAQ,KAAA,EAAM;AACd,MAAA,OAAA,CAAQ,KAAA,EAAM;AACd,MAAA,MAAA,CAAO,IAAI,CAAA;AACX,MAAA,OAAA,CAAQ,MAAA,GAAS,CAAA;AACjB,MAAA,YAAA,CAAa,KAAA,EAAM;AACnB,MAAA,sBAAA,CAAuB,KAAA,EAAM;AAC7B,MAAA,KAAA,CAAM,KAAA,EAAM;AACZ,MAAA,SAAA,CAAU,KAAA,EAAM;AAChB,MAAA,IAAA,CAAK,KAAA,EAAM;AACX,MAAA,YAAA,CAAa,KAAA,EAAM;AACnB,MAAA,QAAA,CAAS,KAAA,EAAM;AACf,MAAA,MAAA,CAAO,KAAA,EAAM;AAAA,IACf;AAAA,GACF;AACF;AAKA,SAAS,OAAA,CACP,MAAA,EACA,MAAA,EACA,OAAA,EACiB;AACjB,EAAA,MAAM,GAAA,GAAuB,EAAE,GAAG,MAAA,EAAO;AACzC,EAAA,KAAA,MAAW,KAAA,IAAS,OAAA,EAAS,OAAO,GAAA,CAAI,KAAK,CAAA;AAC7C,EAAA,GAAA,CAAI,QAAA,GAAW,EAAE,OAAA,EAAS,IAAA,EAAM,QAAQ,OAAA,EAAS,CAAC,GAAG,OAAO,CAAA,EAAE;AAC9D,EAAA,OAAO,GAAA;AACT;AAEA,SAAS,MAAM,EAAA,EAA2B;AACxC,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,YAAY,UAAA,CAAW,OAAA,EAAS,EAAE,CAAC,CAAA;AACzD;AAOA,SAAS,WAAW,KAAA,EAAyB;AAC3C,EAAA,IAAI,KAAA,KAAU,QAAW,OAAO,MAAA;AAChC,EAAA,IAAI;AACF,IAAA,OAAO,IAAA,CAAK,KAAA,CAAM,IAAA,CAAK,SAAA,CAAU,KAAK,CAAC,CAAA;AAAA,EACzC,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,OAAO,KAAK,CAAA;AAAA,EACrB;AACF","file":"chunk-AFNWLRKV.cjs","sourcesContent":["/**\n * Nominal branding for values OUI must construct itself.\n *\n * Structural typing means any object with the right shape satisfies an\n * interface. That is how Closure Studio ended up hand-rolling OUI's transport:\n * `SocketLike` was importable, `OUITransport` was a plain interface, so an\n * integrator could satisfy every type without ever calling OUI. The result was\n * a second implementation of the wire — hardcoded namespace, re-declared\n * payload types on the server, and a dead `action:result` mapping alongside the\n * observation channel that already carried results.\n *\n * A unique symbol cannot be produced outside this module. Branding the types\n * OUI owns turns \"you should use our constructor\" into \"you cannot compile\n * without it\".\n */\n\ndeclare const OUI_BRAND: unique symbol;\n\n/** Marks a value as constructed by OUI itself. */\nexport interface OUIBranded<TKind extends string> {\n  readonly [OUI_BRAND]: TKind;\n}\n\n/**\n * Attach the brand at runtime. The property does not exist at runtime — the\n * symbol is declare-only — so this is a type-level assertion with no cost.\n */\nexport function brand<TKind extends string, T>(\n  value: T,\n): T & OUIBranded<TKind> {\n  return value as T & OUIBranded<TKind>;\n}\n","import type {\n  OUISurface,\n  OUIAction,\n  OUIObservation,\n  OUIActivation,\n  OUIActionPolling,\n  JSONSchema,\n  OUIEffectKind,\n} from \"../spec/index.js\";\nimport { brand, type OUIBranded } from \"./brand.js\";\n\n/**\n * Configuration for defining an OUI surface with handlers.\n * This is the \"integration file\" an app provides — it declares both\n * the schema (what the agent sees) and the implementation (what executes).\n */\nexport interface SurfaceDefinition<TContext = unknown> {\n  id: string;\n  name: string;\n  description: string;\n  version?: string;\n  activation?: OUIActivation;\n  actions: ActionDefinition<TContext>[];\n  observations?: ObservationDefinition[];\n  metadata?: Record<string, unknown>;\n}\n\n/**\n * Polling config with an optional resolve handler.\n * The spec's OUIActionPolling is the manifest shape (no functions).\n * The core extends it with the resolve implementation for the runtime.\n */\nexport interface ActionPollingConfig<\n  TContext = unknown,\n> extends OUIActionPolling {\n  /**\n   * Called on each poll interval. Receives the dispatch result from the handler\n   * plus the current context. Return { done: true, data } to stop polling,\n   * or { done: false, data } to continue.\n   */\n  resolve?: (\n    dispatchResult: unknown,\n    context: TContext,\n  ) => Promise<{ done: boolean; data: unknown }>;\n}\n\n/**\n * An action definition includes both the schema (for the agent) and\n * the handler (for execution). This is the single source of truth —\n * no separate YAML, no separate listener, no drift possible.\n */\nexport interface ActionDefinition<TContext = unknown> {\n  id: string;\n  description: string;\n  /** Its name as a person reads it, for a confirmation the user approves. */\n  title?: string;\n  /** What using it does; a `transaction` runs only on the user's approval of the exact request. */\n  effect?: OUIEffectKind;\n  input: JSONSchema;\n  output?: JSONSchema;\n  /** Destructive: it runs only on the user's approval of the exact request, unless it only reads. */\n  confirm?: boolean;\n  async?: boolean;\n\n  /**\n   * Polling/subscription config for async actions.\n   * After the handler returns, the OUI runtime starts polling or subscribing\n   * and pushes observation updates until the operation completes.\n   * Extends the spec's OUIActionPolling with an optional resolve handler.\n   */\n  polling?: ActionPollingConfig<TContext>;\n\n  usage?: string;\n  preconditions?: string;\n  estimatedDuration?: string;\n  tags?: string[];\n\n  /**\n   * The handler that executes when the agent invokes this action.\n   * Receives typed params and a context object (app-specific state/utilities).\n   * Returns a result that the agent sees as the tool output.\n   */\n  handler: (\n    params: Record<string, unknown>,\n    context: TContext,\n  ) => Promise<ActionHandlerResult>;\n}\n\nexport interface ActionHandlerResult {\n  success: boolean;\n  data?: unknown;\n  error?: { code: string; message: string; details?: unknown };\n  /** For async actions: metadata passed to the polling resolver */\n  dispatchMeta?: Record<string, unknown>;\n}\n\nexport interface ObservationDefinition {\n  id: string;\n  description: string;\n  schema: JSONSchema;\n  /** Function that returns the current observation value */\n  getValue?: () => unknown;\n}\n\n/**\n * Define an OUI surface — the single entry point for integrating\n * an application feature with the OUI protocol.\n *\n * This function validates the definition and returns a typed surface\n * object that can be registered with an agent runtime or transport layer.\n *\n * @example\n * ```typescript\n * const mySurface = defineSurface({\n *   id: 'my-feature',\n *   name: 'My Feature',\n *   description: 'Does something cool',\n *   actions: [\n *     {\n *       id: 'do_thing',\n *       description: 'Does the thing',\n *       input: { type: 'object', properties: { name: { type: 'string' } }, required: ['name'] },\n *       handler: async (params) => {\n *         const result = await doTheThing(params.name);\n *         return { success: true, data: result };\n *       },\n *     },\n *   ],\n * });\n * ```\n */\nexport function defineSurface<\n  TContext = unknown,\n  const TId extends string = string,\n>(\n  definition: SurfaceDefinition<TContext> & { id: TId },\n): DefinedSurface<TContext> & { id: TId } {\n  // Validate: no duplicate action IDs\n  const actionIds = new Set<string>();\n  for (const action of definition.actions) {\n    if (actionIds.has(action.id)) {\n      throw new Error(\n        `[OUI] Duplicate action ID \"${action.id}\" in surface \"${definition.id}\"`,\n      );\n    }\n    actionIds.add(action.id);\n  }\n\n  // Validate: no duplicate observation IDs\n  if (definition.observations) {\n    const obsIds = new Set<string>();\n    for (const obs of definition.observations) {\n      if (obsIds.has(obs.id)) {\n        throw new Error(\n          `[OUI] Duplicate observation ID \"${obs.id}\" in surface \"${definition.id}\"`,\n        );\n      }\n      obsIds.add(obs.id);\n    }\n  }\n\n  return brand<\"surface\", unknown>({\n    ...definition,\n\n    /** Extract the manifest (schema only, no handlers) for transmission to the agent runtime */\n    toManifest(): OUISurface {\n      return {\n        id: definition.id,\n        name: definition.name,\n        description: definition.description,\n        version: definition.version,\n        activation: definition.activation,\n        actions: definition.actions.map(actionToManifest),\n        observations: definition.observations?.map(obsToManifest),\n        metadata: definition.metadata,\n      };\n    },\n\n    /** Execute an action by ID with the given params and context */\n    async executeAction(\n      actionId: string,\n      params: Record<string, unknown>,\n      context: TContext,\n    ): Promise<ActionHandlerResult> {\n      const action = definition.actions.find((a) => a.id === actionId);\n      if (!action) {\n        return {\n          success: false,\n          error: {\n            code: \"ACTION_NOT_FOUND\",\n            message: `Action \"${actionId}\" not found on surface \"${definition.id}\"`,\n          },\n        };\n      }\n      try {\n        return await action.handler(params, context);\n      } catch (err) {\n        return {\n          success: false,\n          error: {\n            code: \"ACTION_EXECUTION_ERROR\",\n            message: err instanceof Error ? err.message : String(err),\n          },\n        };\n      }\n    },\n\n    /** Get all action IDs */\n    getActionIds(): string[] {\n      return definition.actions.map((a) => a.id);\n    },\n\n    /** Get the polling config for an action (if async) */\n    getPollingConfig(actionId: string): OUIActionPolling | undefined {\n      const action = definition.actions.find((a) => a.id === actionId);\n      return action?.polling;\n    },\n  }) as DefinedSurface<TContext> & { id: TId };\n}\n\n/** A fully defined surface with both manifest extraction and execution capabilities */\n/**\n * Branded so it can only come from `defineSurface`.\n *\n * Without the brand a plain object literal satisfies this interface\n * structurally, which is how an integrator can assemble a surface that never\n * ran defineSurface's duplicate-id checks and never produced a real manifest.\n */\nexport interface DefinedSurface<TContext = unknown>\n  extends SurfaceDefinition<TContext>, OUIBranded<\"surface\"> {\n  toManifest(): OUISurface;\n  executeAction(\n    actionId: string,\n    params: Record<string, unknown>,\n    context: TContext,\n  ): Promise<ActionHandlerResult>;\n  getActionIds(): string[];\n  /** Get the polling config for an action (if async) */\n  getPollingConfig(actionId: string): OUIActionPolling | undefined;\n}\n\n// ─── Internal helpers ────────────────────────────────────────────────────────\n\nfunction actionToManifest<T>(action: ActionDefinition<T>): OUIAction {\n  return {\n    id: action.id,\n    description: action.description,\n    ...(action.title !== undefined ? { title: action.title } : {}),\n    ...(action.effect !== undefined ? { effect: action.effect } : {}),\n    input: action.input,\n    output: action.output,\n    confirm: action.confirm,\n    async: action.async,\n    polling: action.polling,\n    usage: action.usage,\n    preconditions: action.preconditions,\n    estimatedDuration: action.estimatedDuration,\n    tags: action.tags,\n  };\n}\n\nfunction obsToManifest(obs: ObservationDefinition): OUIObservation {\n  return {\n    id: obs.id,\n    description: obs.description,\n    schema: obs.schema,\n  };\n}\n","/**\n * createOUI — a fixed set of surfaces announced over one socket.\n *\n * For a client whose surfaces come and go (a React app, where a page's\n * surfaces mount with the page), use `createSurfaceRuntime` instead: it keeps\n * the client's own record of what is mounted and answers every request.\n *\n * WHY THIS EXISTS\n *\n * OUI shipped a correct protocol and a correct transport, and its first\n * integrator used neither. studio-ui imported only the `SocketLike` TYPE from\n * oui-spec and rebuilt the wire by hand: a literal map of protocol types to\n * socket names, `oui:` hardcoded so the configurable namespace was unreachable,\n * payload interfaces re-declared on the server, and an `action:result` channel\n * mapped but never sent — duplicating the observation channel that already\n * carries results.\n *\n * Nothing was wrong with the spec. Nothing enforced it. Structural typing meant\n * every hand-rolled piece type-checked, and both ends agreed only by the\n * coincidence of matching string literals. Rename one and the other keeps\n * compiling and silently stops receiving.\n *\n * So the requirements are gated here:\n *\n *   OUI owns the wire. The integrator provides a socket; it cannot provide a\n *   transport, because `OUITransport` values are branded and only this module\n *   brands them.\n *\n *   OUI owns the result path. Every dispatch carries a requestId and is\n *   answered on OUI's result channel. An integrator cannot add a parallel\n *   channel because it cannot construct a transport to add one to.\n *\n *   The integrator owns content. Surfaces, action schemas, observation schemas\n *   and handlers all arrive through `defineSurface`, whose output is branded —\n *   so a plain object shaped like a surface will not compile.\n *\n *   Violations fail at compile time with a message naming the offending id.\n */\nimport type { OUITransport, OUITransportConfig } from \"../transport/types.js\";\nimport type { SocketLike } from \"../transport/websocket.js\";\nimport { createWebSocketTransport } from \"../transport/websocket.js\";\nimport type { DefinedSurface } from \"./define-surface.js\";\nimport { brand, type OUIBranded } from \"./brand.js\";\nimport type { OUIConfigError, ValidateSurfaceIds } from \"./validate.js\";\nimport type { OUISurface } from \"../spec/index.js\";\n\n/** A transport OUI constructed. Integrators cannot produce one. */\nexport type OwnedTransport = OUITransport & OUIBranded<\"transport\">;\n\n/** Surface ids as literal types, for the duplicate check. */\ntype SurfaceIds<T extends readonly DefinedSurface<never>[]> = {\n  [K in keyof T]: T[K][\"id\"];\n};\n\nexport interface OUIConfig<TSurfaces extends readonly DefinedSurface<never>[]> {\n  /**\n   * The socket OUI will speak over. The integrator owns the connection —\n   * auth, reconnection, lifecycle — and OUI owns what travels on it.\n   */\n  socket: SocketLike;\n\n  /**\n   * Surfaces produced by `defineSurface`. A plain object with the same shape\n   * will not compile: DefinedSurface is branded.\n   */\n  surfaces: TSurfaces;\n\n  /**\n   * Wire configuration. `namespace` defaults to 'oui' and is the supported way\n   * to change the event prefix — hardcoding it at the call site is what made\n   * this option unreachable in the first integration.\n   */\n  transport?: Omit<OUITransportConfig, \"namespace\"> & { namespace?: string };\n}\n\n/** A live OUI instance. */\nexport interface OUIInstance {\n  /** The transport OUI owns. Exposed for wiring, not for reimplementation. */\n  readonly transport: OwnedTransport;\n\n  /** Manifests for every registered surface, as the agent sees them. */\n  readonly manifests: readonly OUISurface[];\n\n  /** Register every surface and connect. */\n  start(): Promise<void>;\n\n  /**\n   * Deregister every surface and detach OUI from the socket. The socket stays\n   * connected: the integrator owns it, and other code may share it.\n   */\n  stop(): void;\n\n  /** Look up a registered surface by id. */\n  getSurface(id: string): DefinedSurface<never> | undefined;\n}\n\n/**\n * Instantiate OUI.\n *\n * `const` on the type parameter captures surface ids as literal types, which is\n * what allows duplicate detection to name the offending id rather than failing\n * with an unassignable-to-never error.\n */\nexport function createOUI<\n  const TSurfaces extends readonly DefinedSurface<never>[],\n>(\n  config: OUIConfig<TSurfaces> & ValidateSurfaceIds<SurfaceIds<TSurfaces>>,\n): OUIInstance {\n  const {\n    socket,\n    surfaces,\n    transport: transportConfig,\n  } = config as OUIConfig<TSurfaces>;\n\n  // Defensive, not decorative: the compile-time checks only bind when a caller\n  // passes literals. A surface list assembled at runtime, or JS with no types\n  // at all, reaches here unchecked.\n  if (!socket) {\n    throw new Error(\n      \"[OUI] createOUI requires a socket. OUI owns the wire; the integrator owns the connection.\",\n    );\n  }\n  if (!Array.isArray(surfaces) || surfaces.length === 0) {\n    throw new Error(\"[OUI] createOUI requires at least one surface.\");\n  }\n\n  const seen = new Set<string>();\n  for (const surface of surfaces) {\n    if (seen.has(surface.id)) {\n      throw new Error(\n        `[OUI] Duplicate surface id \"${surface.id}\". Registration is keyed by id, so the second would replace the first.`,\n      );\n    }\n    seen.add(surface.id);\n  }\n\n  const transport = brand<\"transport\", OUITransport>(\n    createWebSocketTransport(socket, transportConfig),\n  );\n\n  const byId = new Map(surfaces.map((s) => [s.id, s] as const));\n\n  return {\n    transport,\n    manifests: surfaces.map((s) => s.toManifest()),\n\n    async start() {\n      await transport.connect();\n      for (const surface of surfaces) {\n        transport.registerSurface(surface.toManifest());\n      }\n    },\n\n    stop() {\n      for (const surface of surfaces) {\n        transport.deregisterSurface(surface.id);\n      }\n      transport.dispose();\n    },\n\n    getSurface(id) {\n      return byId.get(id);\n    },\n  };\n}\n\n/** Re-exported so integrators can name the error type in tests. */\nexport type { OUIConfigError };\n","/**\n * The client-side surface runtime.\n *\n * Holds the surfaces a client has mounted, answers every action request with a\n * result, and produces the snapshot an agent runtime works from.\n *\n * WHY THIS EXISTS\n *\n * The first integration kept no client-side record of what was mounted. Each\n * surface hook registered itself with a server-side registry and listened for\n * dispatches on its own. Three things followed:\n *\n * - The registry was the only record of what the client could do, and it lost\n *   entries: a dead socket's cleanup removed a live tab's registration, and the\n *   browser never registered again. The agent then had no UI tools at all.\n * - Nothing answered a dispatch. The agent was told an action succeeded before\n *   the client had run it, and never saw the page an action led to.\n * - Every hook listened independently, through two paths, so one dispatch ran\n *   twice and nothing de-duplicated it.\n *\n * Here the client is the record. `snapshot()` is what the client can do right\n * now, and every request is run once, waited on until the UI settles, and\n * answered with its result and the snapshot after it.\n */\nimport type {\n  OUIActionRequest,\n  OUIActionResult,\n  OUIApprovalGrant,\n  OUIResultDelivery,\n  OUISurface,\n  OUISurfaceSnapshot,\n  OUIObservationSnapshot,\n} from \"../spec/index.js\";\nimport {\n  ARGS_HASH_PATTERN,\n  argsHash,\n  requiresApproval,\n} from \"../spec/approval.js\";\nimport { surfacesHash } from \"../spec/surfaces-hash.js\";\nimport type { OUITransport, OUITransportConfig } from \"../transport/types.js\";\nimport {\n  createWebSocketTransport,\n  type SocketLike,\n} from \"../transport/websocket.js\";\nimport type {\n  ActionHandlerResult,\n  ActionPollingConfig,\n  DefinedSurface,\n} from \"./define-surface.js\";\n\n// ─── Options ─────────────────────────────────────────────────────────────────\n\nexport interface SettleOptions {\n  /**\n   * The UI counts as settled once nothing has mounted, unmounted or changed an\n   * observation for this long, and no hold is open. Default 250 ms.\n   */\n  quietMs?: number;\n  /** Give up waiting after this long and answer with `settled: false`. Default 5000 ms. */\n  timeoutMs?: number;\n}\n\nexport interface SurfaceRuntimeOptions {\n  /** The socket to answer requests on. Can be set or replaced later with `attach`. */\n  socket?: SocketLike | null;\n\n  /** Wire configuration for the transport the runtime builds on the socket. */\n  transport?: OUITransportConfig;\n\n  /**\n   * Also announce registrations and observations over the transport, for agent\n   * runtimes that keep a server-side registry. Default true.\n   *\n   * An agent runtime that takes the client's snapshot instead (sent with each\n   * turn, and returned on every result) has no use for them: set false.\n   */\n  announce?: boolean;\n\n  settle?: SettleOptions;\n\n  /** How many answered request ids to remember, for de-duplication. Default 500. */\n  dedupeWindow?: number;\n\n  /**\n   * Decides whether a request that arrived on the socket may run at all. A\n   * refused request is neither run nor answered, and is logged.\n   *\n   * The server should be the only sender of action requests, but a client can\n   * also check that a request is one it expects: for example, only while its\n   * agent has a turn in progress. Requests passed to `execute` directly are\n   * not checked; they come from the application itself.\n   */\n  accept?: (request: OUIActionRequest) => boolean;\n\n  /**\n   * A request sent again while its answer is on the way is not answered again\n   * (§7.3.7): every copy of a large answer queues on the one socket, ahead of\n   * the next request's answer. Only once the answer has gone this long without\n   * the receiver acknowledging it — lost, or a receiver that does not\n   * acknowledge — is a repeat answered again. Default 8000 ms.\n   */\n  reanswerAfterMs?: number;\n}\n\n// ─── Public types ────────────────────────────────────────────────────────────\n\nexport interface MountedSurface {\n  readonly surfaceId: string;\n  /** Record an observation value. A no-op once unmounted. */\n  pushObservation(observationId: string, value: unknown): void;\n  /** Remove this mount. Other mounts of the same surface id are unaffected. */\n  unmount(): void;\n}\n\nexport interface SurfaceRuntime {\n  /**\n   * Mount a surface. `getContext` is read when an action runs, so handlers see\n   * the latest state rather than the state at mount time.\n   *\n   * Mounting the same surface id twice is allowed (React StrictMode does it on\n   * every mount); the most recent mount serves its actions.\n   */\n  mount<TContext>(\n    surface: DefinedSurface<TContext>,\n    getContext: () => TContext,\n  ): MountedSurface;\n\n  /** Answer requests arriving on this socket (null detaches). */\n  attach(socket: SocketLike | null): void;\n\n  /** What the client can do right now. */\n  snapshot(): OUISurfaceSnapshot;\n\n  /**\n   * Run a request once and resolve with its result. A request id seen before\n   * resolves with the first result instead of running again.\n   */\n  execute(request: OUIActionRequest): Promise<OUIActionResult>;\n\n  /**\n   * Keep the UI unsettled until the returned function is called. For work an\n   * action starts that mounting and unmounting cannot show, such as a route's\n   * code still loading or a page fetching the data it will display.\n   */\n  hold(): () => void;\n\n  /**\n   * Record that the user approved one request, here, through their own\n   * confirmation (the agent runtime's approval store answered it to this tab).\n   * An action that needs approval — a `transaction`, or a destructive write —\n   * runs only on a request whose `approval` matches an unused, unexpired grant\n   * for exactly its params. Each grant admits one request.\n   */\n  grantApproval(grant: OUIApprovalGrant): void;\n\n  /** Called whenever the snapshot changes. */\n  subscribe(listener: () => void): () => void;\n\n  /** Stop polling, detach from the socket and forget every mount. */\n  dispose(): void;\n}\n\n// ─── Implementation ──────────────────────────────────────────────────────────\n\ninterface Entry {\n  key: number;\n  surface: DefinedSurface<unknown>;\n  getContext: () => unknown;\n}\n\nconst DEFAULT_QUIET_MS = 250;\nconst DEFAULT_SETTLE_TIMEOUT_MS = 5000;\nconst DEFAULT_DEDUPE_WINDOW = 500;\nconst DEFAULT_REANSWER_AFTER_MS = 8000;\nconst SETTLE_TICK_MS = 50;\n\nexport function createSurfaceRuntime(\n  options: SurfaceRuntimeOptions = {},\n): SurfaceRuntime {\n  const announce = options.announce ?? true;\n  const quietMs = options.settle?.quietMs ?? DEFAULT_QUIET_MS;\n  const settleTimeoutMs =\n    options.settle?.timeoutMs ?? DEFAULT_SETTLE_TIMEOUT_MS;\n  const dedupeWindow = options.dedupeWindow ?? DEFAULT_DEDUPE_WINDOW;\n  const reanswerAfterMs = options.reanswerAfterMs ?? DEFAULT_REANSWER_AFTER_MS;\n\n  let nextKey = 1;\n  const entries: Entry[] = [];\n  const observations = new Map<string, Map<string, unknown>>();\n  const serializedObservations = new Map<string, string>();\n  const holds = new Set<number>();\n  let nextHold = 1;\n  const results = new Map<string, Promise<OUIActionResult>>();\n  const pollers = new Map<string, ReturnType<typeof setInterval>>();\n  // How each running poll answers its request if it has to stop early.\n  const abandon = new Map<\n    string,\n    (error: { code: string; message: string }) => void\n  >();\n  const listeners = new Set<() => void>();\n  // Resolves once a request's first result has been handed to the transport.\n  const acks = new Map<\n    string,\n    { promise: Promise<void>; resolve: () => void }\n  >();\n  function ackFor(requestId: string) {\n    let ack = acks.get(requestId);\n    if (!ack) {\n      let resolve!: () => void;\n      const promise = new Promise<void>((r) => (resolve = r));\n      ack = { promise, resolve };\n      acks.set(requestId, ack);\n    }\n    return ack;\n  }\n  function acknowledged(requestId: string): Promise<void> {\n    return ackFor(requestId).promise;\n  }\n  // How each request's first answer is getting to the agent runtime: still\n  // being worked out, sent (when), or acknowledged as received. A repeat of the\n  // request is answered again only when the answer may have been lost (§7.3.7).\n  const delivery = new Map<\n    string,\n    { state: \"running\" | \"sent\" | \"received\"; at: number }\n  >();\n  // The surfaces hash each request's first answer reported: an async action's\n  // final answer repeats its surfaces only if they changed since then, since\n  // the agent runtime waited for that first answer before waiting for this one.\n  const answeredHash = new Map<string, string>();\n  let lastChangeAt = Date.now();\n  // Approvals the user gave in this tab, by approval id, until used or expired.\n  const grants = new Map<string, OUIApprovalGrant>();\n\n  /**\n   * Why a request for an action that needs approval may not run, or null when\n   * it may — in which case its grant is used up.\n   */\n  async function approvalRefusal(\n    request: OUIActionRequest,\n  ): Promise<string | null> {\n    const approval = request.approval;\n    if (!approval)\n      return \"it needs the user's approval, and the request carries none\";\n    let hash: string;\n    try {\n      hash = await argsHash(request.params ?? {});\n    } catch (err) {\n      return `its params cannot be checked against an approval: ${err instanceof Error ? err.message : String(err)}`;\n    }\n    // Checked and used up with no await in between, so one grant admits one request.\n    const grant = grants.get(approval.approvalId);\n    if (!grant) return \"this tab holds no unused approval for it\";\n    if (Date.now() >= grant.expiresAt) {\n      grants.delete(approval.approvalId);\n      return \"its approval has expired\";\n    }\n    if (approval.argsHash !== grant.argsHash || hash !== grant.argsHash) {\n      return \"its params are not the ones the user approved\";\n    }\n    grants.delete(approval.approvalId);\n    return null;\n  }\n\n  let socket: SocketLike | null = null;\n  let transport: OUITransport | null = null;\n  let detachTransport: Array<() => void> = [];\n\n  /**\n   * `settles: false` for changes that are not the UI reacting to an action,\n   * such as an async job's progress: those notify listeners but do not keep\n   * an action's result waiting.\n   */\n  function changed(settles = true) {\n    if (settles) lastChangeAt = Date.now();\n    for (const l of [...listeners]) l();\n  }\n\n  function activeFor(surfaceId: string): Entry | undefined {\n    for (let i = entries.length - 1; i >= 0; i--) {\n      if (entries[i].surface.id === surfaceId) return entries[i];\n    }\n    return undefined;\n  }\n\n  /** Active entries, one per surface id, in the order each id was first mounted. */\n  function activeEntries(): Entry[] {\n    const seen = new Set<string>();\n    const out: Entry[] = [];\n    for (const e of entries) {\n      if (seen.has(e.surface.id)) continue;\n      seen.add(e.surface.id);\n      out.push(activeFor(e.surface.id)!);\n    }\n    return out;\n  }\n\n  function announceSurface(entry: Entry) {\n    if (!announce || !transport) return;\n    transport.registerSurface(entry.surface.toManifest());\n    const obs = observations.get(entry.surface.id);\n    if (obs) {\n      for (const [observationId, value] of obs) {\n        transport.pushObservation({\n          surfaceId: entry.surface.id,\n          observationId,\n          value,\n          timestamp: Date.now(),\n        });\n      }\n    }\n  }\n\n  function announceAll() {\n    for (const e of activeEntries()) announceSurface(e);\n  }\n\n  function setObservation(\n    surfaceId: string,\n    observationId: string,\n    value: unknown,\n    settles = true,\n  ) {\n    const key = `${surfaceId}\\u0000${observationId}`;\n    let serialized: string;\n    try {\n      serialized = JSON.stringify(value) ?? \"undefined\";\n    } catch {\n      serialized = String(value);\n    }\n    if (serializedObservations.get(key) === serialized) return;\n    serializedObservations.set(key, serialized);\n\n    let obs = observations.get(surfaceId);\n    if (!obs) {\n      obs = new Map();\n      observations.set(surfaceId, obs);\n    }\n    obs.set(observationId, toJsonSafe(value));\n\n    if (announce && transport) {\n      transport.pushObservation({\n        surfaceId,\n        observationId,\n        value,\n        timestamp: Date.now(),\n      });\n    }\n    changed(settles);\n  }\n\n  function forgetSurface(surfaceId: string) {\n    observations.delete(surfaceId);\n    for (const key of [...serializedObservations.keys()]) {\n      if (key.startsWith(`${surfaceId}\\u0000`))\n        serializedObservations.delete(key);\n    }\n    for (const [key, timer] of pollers) {\n      if (key.startsWith(`${surfaceId}\\u0000`)) {\n        clearInterval(timer);\n        pollers.delete(key);\n        // The request still gets its final answer: a poll that stops\n        // without one leaves the agent waiting forever.\n        abandon.get(key)?.({\n          code: \"SURFACE_NOT_MOUNTED\",\n          message:\n            `Surface \"${surfaceId}\" left the page before its action finished, ` +\n            \"so it is no longer being followed. Check what the page shows \" +\n            \"before trying again.\",\n        });\n        abandon.delete(key);\n      }\n    }\n  }\n\n  // ─── Polling (async actions) ──────────────────────────────────────────────\n\n  /**\n   * Polls an async action to completion, publishing progress as an observation\n   * and, when it ends, the request's final result (OUI spec §7.3: an async\n   * action is acknowledged, then answered once more when it finishes).\n   */\n  function startPolling(\n    requestId: string,\n    surfaceId: string,\n    actionId: string,\n    polling: ActionPollingConfig<unknown>,\n    dispatchResult: unknown,\n  ) {\n    const finish = async (\n      success: boolean,\n      data: unknown,\n      error?: { code: string; message: string },\n    ) => {\n      // The acknowledgment goes first: a job can finish before the UI settles.\n      await acknowledged(requestId);\n      const snap = snapshot();\n      const known = answeredHash.get(requestId);\n      answer({\n        requestId,\n        success,\n        ...(data !== undefined ? { data: toJsonSafe(data) } : {}),\n        ...(error ? { error } : {}),\n        interim: false,\n        timestamp: Date.now(),\n        ...(snap.surfacesHash !== known ? { surfaces: snap.surfaces } : {}),\n        observations: snap.observations,\n        surfacesHash: snap.surfacesHash,\n      });\n      acks.delete(requestId);\n      answeredHash.delete(requestId);\n    };\n\n    // The observation id is the one surfaces have always published under.\n    const observationId = `${surfaceId}:${actionId}:status`;\n    const pollerKey = `${surfaceId}\\u0000${actionId}`;\n\n    if (polling.subscribe) {\n      setObservation(\n        surfaceId,\n        observationId,\n        { status: \"dispatched\", dispatchResult, interim: true },\n        false,\n      );\n      return;\n    }\n    if (!polling.resolve) {\n      setObservation(\n        surfaceId,\n        observationId,\n        { status: \"dispatched\", dispatchResult, interim: false },\n        false,\n      );\n      return;\n    }\n\n    const existing = pollers.get(pollerKey);\n    if (existing) {\n      clearInterval(existing);\n      pollers.delete(pollerKey);\n      abandon.get(pollerKey)?.({\n        code: \"SUPERSEDED\",\n        message:\n          `\"${actionId}\" was started again before this run finished, ` +\n          \"so only the newer run is being followed.\",\n      });\n      abandon.delete(pollerKey);\n    }\n\n    setObservation(\n      surfaceId,\n      observationId,\n      { status: \"polling\", dispatchResult, interim: true },\n      false,\n    );\n\n    const maxAttempts = polling.maxAttempts ?? Infinity;\n    const maxDuration = polling.maxDurationMs ?? Infinity;\n    const startedAt = Date.now();\n    let attempts = 0;\n\n    const timer = setInterval(async () => {\n      attempts++;\n      if (attempts > maxAttempts || Date.now() - startedAt > maxDuration) {\n        clearInterval(timer);\n        pollers.delete(pollerKey);\n        abandon.delete(pollerKey);\n        setObservation(\n          surfaceId,\n          observationId,\n          { status: \"timeout\", dispatchResult, interim: false },\n          false,\n        );\n        void finish(false, undefined, {\n          code: \"TIMEOUT\",\n          message: `\"${actionId}\" did not finish within its polling limits.`,\n        });\n        return;\n      }\n      const entry = activeFor(surfaceId);\n      if (!entry) {\n        // forgetSurface normally gets here first; answer anyway.\n        clearInterval(timer);\n        pollers.delete(pollerKey);\n        const gone = abandon.get(pollerKey);\n        abandon.delete(pollerKey);\n        gone?.({\n          code: \"SURFACE_NOT_MOUNTED\",\n          message:\n            `Surface \"${surfaceId}\" left the page before \"${actionId}\" ` +\n            \"finished, so it is no longer being followed. Check what the \" +\n            \"page shows before trying again.\",\n        });\n        return;\n      }\n      // The surface may have remounted without this action (a control that is\n      // disabled while its job runs, say). The job is still running, so keep\n      // following it with the polling it started with.\n      const action = entry.surface.actions.find((a) => a.id === actionId);\n      const resolve = action?.polling?.resolve ?? polling.resolve;\n      if (!resolve) return;\n      try {\n        const r = await resolve(dispatchResult, entry.getContext());\n        setObservation(\n          surfaceId,\n          observationId,\n          {\n            ...(r.data as Record<string, unknown>),\n            interim: !r.done,\n          },\n          false,\n        );\n        if (r.done) {\n          clearInterval(timer);\n          pollers.delete(pollerKey);\n          abandon.delete(pollerKey);\n          void finish(true, r.data);\n        }\n      } catch (err) {\n        // A transient failure is reported, not fatal: keep polling.\n        setObservation(\n          surfaceId,\n          observationId,\n          { status: \"poll_error\", error: String(err), interim: true },\n          false,\n        );\n      }\n    }, polling.intervalMs);\n\n    pollers.set(pollerKey, timer);\n    abandon.set(pollerKey, (error) => void finish(false, undefined, error));\n  }\n\n  // ─── Settling ─────────────────────────────────────────────────────────────\n\n  async function waitUntilSettled(since: number): Promise<boolean> {\n    const deadline = since + settleTimeoutMs;\n    for (;;) {\n      const now = Date.now();\n      const quietFor = now - Math.max(since, lastChangeAt);\n      if (holds.size === 0 && quietFor >= quietMs) return true;\n      if (now >= deadline) return false;\n      await sleep(Math.min(SETTLE_TICK_MS, deadline - now));\n    }\n  }\n\n  // ─── Execution ────────────────────────────────────────────────────────────\n\n  async function run(request: OUIActionRequest): Promise<OUIActionResult> {\n    const startedAt = Date.now();\n    const entry = activeFor(request.surfaceId);\n\n    let result: ActionHandlerResult;\n    let interim = false;\n    if (!entry) {\n      const mounted = activeEntries().map((e) => e.surface.id);\n      result = {\n        success: false,\n        error: {\n          code: \"SURFACE_NOT_MOUNTED\",\n          message:\n            `Surface \"${request.surfaceId}\" is not on screen. ` +\n            `Mounted surfaces: ${mounted.length ? mounted.join(\", \") : \"none\"}.`,\n        },\n      };\n    } else {\n      const declared = entry.surface.actions.find(\n        (a) => a.id === request.actionId,\n      );\n      const refusal =\n        declared && requiresApproval(declared.effect, declared.confirm)\n          ? await approvalRefusal(request)\n          : null;\n      // executeAction turns a thrown handler into ACTION_EXECUTION_ERROR.\n      result = refusal\n        ? {\n            success: false,\n            error: {\n              code: \"APPROVAL_REQUIRED\",\n              message: `\"${request.actionId}\" was not run: ${refusal}.`,\n            },\n          }\n        : await entry.surface.executeAction(\n            request.actionId,\n            request.params ?? {},\n            entry.getContext(),\n          );\n      if (result.success) {\n        const action = entry.surface.actions.find(\n          (a) => a.id === request.actionId,\n        );\n        if (action?.polling) {\n          interim = true;\n          startPolling(\n            request.requestId,\n            entry.surface.id,\n            action.id,\n            action.polling,\n            result.data ?? result.dispatchMeta,\n          );\n        }\n      }\n    }\n\n    const settled = await waitUntilSettled(startedAt);\n    const snap = snapshot();\n    if (interim) answeredHash.set(request.requestId, snap.surfacesHash!);\n\n    return {\n      requestId: request.requestId,\n      success: result.success,\n      ...(result.data !== undefined ? { data: toJsonSafe(result.data) } : {}),\n      ...(result.error\n        ? { error: toJsonSafe(result.error) as OUIActionResult[\"error\"] }\n        : {}),\n      ...(interim ? { interim: true } : {}),\n      durationMs: Date.now() - startedAt,\n      timestamp: Date.now(),\n      // Only what the agent runtime does not already hold (§7.3.4).\n      ...(snap.surfacesHash !== request.knownSurfaces\n        ? { surfaces: snap.surfaces }\n        : {}),\n      observations: snap.observations,\n      surfacesHash: snap.surfacesHash,\n      settled,\n    };\n  }\n\n  // ─── Answering ────────────────────────────────────────────────────────────\n\n  /**\n   * Send an answer, and if the receiving side refuses it, send it again\n   * trimmed, saying why (§7.3.6): first without the page's surfaces and\n   * observations, then without the action's data too. An answer that is\n   * refused and not sent again leaves the agent waiting until its deadline,\n   * then reporting an action that ran as one that did not answer.\n   */\n  function answer(result: OUIActionResult, onReceived?: () => void) {\n    const steps: Array<OUIResultDelivery[\"omitted\"]> = [\n      [\"surfaces\", \"observations\"],\n      [\"surfaces\", \"observations\", \"data\"],\n    ];\n    const send = (frame: OUIActionResult, step: number) => {\n      transport?.sendResult(frame, (ack) => {\n        if (ack.ok) {\n          onReceived?.();\n          return;\n        }\n        const omitted = steps[step];\n        if (!omitted) {\n          console.warn(\n            `[OUI] The answer to ${result.requestId} was refused even trimmed: ${ack.reason}`,\n          );\n          return;\n        }\n        console.warn(\n          `[OUI] The answer to ${result.requestId} was refused (${ack.reason}); sending it without ${omitted.join(\", \")}`,\n        );\n        send(trimmed(result, ack.reason, omitted), step + 1);\n      });\n    };\n    send(result, 0);\n  }\n\n  function execute(request: OUIActionRequest): Promise<OUIActionResult> {\n    const seen = results.get(request.requestId);\n    if (seen) return seen;\n\n    const pending = run(request);\n    results.set(request.requestId, pending);\n    while (results.size > dedupeWindow) {\n      const oldest = results.keys().next().value as string;\n      results.delete(oldest);\n      delivery.delete(oldest);\n    }\n    return pending;\n  }\n\n  // ─── Snapshot ─────────────────────────────────────────────────────────────\n\n  function snapshot(): OUISurfaceSnapshot {\n    const surfaces: OUISurface[] = [];\n    const obs: OUIObservationSnapshot = {};\n    for (const e of activeEntries()) {\n      surfaces.push(e.surface.toManifest());\n      const values = observations.get(e.surface.id);\n      if (values && values.size > 0)\n        obs[e.surface.id] = Object.fromEntries(values);\n    }\n    return {\n      surfaces,\n      observations: obs,\n      surfacesHash: surfacesHash(surfaces),\n    };\n  }\n\n  // ─── Transport ────────────────────────────────────────────────────────────\n\n  function attach(next: SocketLike | null) {\n    if (next === socket) return;\n    for (const off of detachTransport) off();\n    detachTransport = [];\n    transport?.dispose();\n    transport = null;\n    socket = next;\n    if (!next) return;\n\n    const t = createWebSocketTransport(next, options.transport);\n    transport = t;\n\n    detachTransport.push(\n      t.onAction((request, receipt) => {\n        if (options.accept && !options.accept(request)) {\n          console.warn(\n            `[OUI] Refused a request the client does not accept: ${request.surfaceId}.${request.actionId} (${request.requestId})`,\n          );\n          receipt?.({\n            ok: false,\n            reason: \"this client does not accept requests now\",\n          });\n          return;\n        }\n        // Received: the sender need not send it again (§7.3.7).\n        receipt?.({ ok: true });\n        const id = request.requestId;\n        const prior = delivery.get(id);\n        // A repeat while the answer is being worked out, or is on its way, or\n        // has arrived, gets no second copy: copies of a large answer queue on\n        // the one socket ahead of the next request's answer.\n        if (prior && prior.state !== \"sent\") return;\n        if (prior && Date.now() - prior.at < reanswerAfterMs) return;\n        if (!prior) delivery.set(id, { state: \"running\", at: Date.now() });\n        void execute(request).then((result) => {\n          // Answer on whichever transport is live when the result is ready: a\n          // reconnect in between keeps the same socket, so this still reaches\n          // the runtime that asked.\n          if (results.has(id))\n            delivery.set(id, { state: \"sent\", at: Date.now() });\n          answer(result, () => {\n            if (results.has(id))\n              delivery.set(id, { state: \"received\", at: Date.now() });\n          });\n          const ack = ackFor(id);\n          ack.resolve();\n          // Keep the gate only while a final result may still follow.\n          if (!result.interim) acks.delete(id);\n        });\n      }),\n    );\n\n    if (announce) {\n      // A server-side registry forgets a socket's surfaces when it drops, so\n      // every (re)connection announces them again.\n      detachTransport.push(\n        t.onConnectionChange((connected) => {\n          if (connected) announceAll();\n        }),\n      );\n      if (t.connected) announceAll();\n    }\n  }\n\n  if (options.socket) attach(options.socket);\n\n  // ─── Mounting ─────────────────────────────────────────────────────────────\n\n  function mount<TContext>(\n    surface: DefinedSurface<TContext>,\n    getContext: () => TContext,\n  ): MountedSurface {\n    const entry: Entry = {\n      key: nextKey++,\n      surface: surface as unknown as DefinedSurface<unknown>,\n      getContext: getContext as () => unknown,\n    };\n    entries.push(entry);\n    announceSurface(entry);\n    changed();\n\n    let mounted = true;\n    return {\n      surfaceId: surface.id,\n      pushObservation(observationId, value) {\n        // Only the mount serving the surface speaks for it.\n        if (!mounted || activeFor(surface.id) !== entry) return;\n        setObservation(surface.id, observationId, value);\n      },\n      unmount() {\n        if (!mounted) return;\n        mounted = false;\n        const i = entries.indexOf(entry);\n        if (i >= 0) entries.splice(i, 1);\n        const replacement = activeFor(surface.id);\n        if (replacement) {\n          announceSurface(replacement);\n        } else {\n          forgetSurface(surface.id);\n          if (announce && transport) transport.deregisterSurface(surface.id);\n        }\n        changed();\n      },\n    };\n  }\n\n  return {\n    mount,\n    attach,\n    snapshot,\n    execute,\n    hold() {\n      const id = nextHold++;\n      holds.add(id);\n      changed();\n      let released = false;\n      return () => {\n        if (released) return;\n        released = true;\n        holds.delete(id);\n        changed();\n      };\n    },\n    grantApproval(grant) {\n      if (\n        !grant ||\n        typeof grant.approvalId !== \"string\" ||\n        !grant.approvalId ||\n        typeof grant.argsHash !== \"string\" ||\n        !ARGS_HASH_PATTERN.test(grant.argsHash) ||\n        !Number.isFinite(grant.expiresAt)\n      ) {\n        throw new Error(\n          \"[OUI] grantApproval needs an approvalId, an args hash and an expiry\",\n        );\n      }\n      const now = Date.now();\n      for (const [id, g] of grants) if (now >= g.expiresAt) grants.delete(id);\n      grants.set(grant.approvalId, { ...grant });\n    },\n    subscribe(listener) {\n      listeners.add(listener);\n      return () => {\n        listeners.delete(listener);\n      };\n    },\n    dispose() {\n      for (const timer of pollers.values()) clearInterval(timer);\n      pollers.clear();\n      abandon.clear();\n      attach(null);\n      entries.length = 0;\n      observations.clear();\n      serializedObservations.clear();\n      holds.clear();\n      listeners.clear();\n      acks.clear();\n      answeredHash.clear();\n      delivery.clear();\n      grants.clear();\n    },\n  };\n}\n\n// ─── Helpers ─────────────────────────────────────────────────────────────────\n\n/** `result` without the fields `omitted` names, saying so and why (§7.3.6). */\nfunction trimmed(\n  result: OUIActionResult,\n  reason: string,\n  omitted: OUIResultDelivery[\"omitted\"],\n): OUIActionResult {\n  const out: OUIActionResult = { ...result };\n  for (const field of omitted) delete out[field];\n  out.delivery = { trimmed: true, reason, omitted: [...omitted] };\n  return out;\n}\n\nfunction sleep(ms: number): Promise<void> {\n  return new Promise((resolve) => setTimeout(resolve, ms));\n}\n\n/**\n * Results and observations cross a wire as JSON. A handler returning something\n * that is not (a DOM node, a class instance with cycles) must not take the\n * result down with it.\n */\nfunction toJsonSafe(value: unknown): unknown {\n  if (value === undefined) return undefined;\n  try {\n    return JSON.parse(JSON.stringify(value));\n  } catch {\n    return String(value);\n  }\n}\n"]}

package/dist/chunk-B2EFZMGY.js

@@ -0,0 +1,159 @@
+// src/spec/types.ts
+var OUI_PROTOCOL_EVENTS = {
+  SURFACE_REGISTER: "surface:register",
+  SURFACE_DEREGISTER: "surface:deregister",
+  ACTION_REQUEST: "action:request",
+  ACTION_RESULT: "action:result",
+  OBSERVATION_UPDATE: "observation:update"
+};
+
+// src/spec/approval.ts
+var OUI_EFFECT_KINDS = [
+  "view",
+  "selection",
+  "navigate",
+  "open",
+  "edit",
+  "file",
+  "mutate",
+  "job",
+  "transaction"
+];
+var OUI_EFFECT_ACCESS = {
+  view: "read",
+  selection: "read",
+  navigate: "read",
+  open: "read",
+  edit: "write",
+  file: "write",
+  mutate: "write",
+  job: "write",
+  transaction: "write"
+};
+function effectAccess(effect) {
+  return effect === void 0 ? "write" : OUI_EFFECT_ACCESS[effect];
+}
+function requiresApproval(effect, destructive) {
+  if (effect === "transaction") return true;
+  return !!destructive && effectAccess(effect) === "write";
+}
+var ARGS_HASH_PATTERN = /^[0-9a-f]{64}$/;
+function canonicalJson(value) {
+  return serialize(value, "$");
+}
+async function argsHash(params) {
+  const canonical = canonicalJson(params);
+  const subtle = await webCrypto();
+  const digest = await subtle.digest(
+    "SHA-256",
+    new TextEncoder().encode(canonical)
+  );
+  let hex = "";
+  for (const byte of new Uint8Array(digest))
+    hex += byte.toString(16).padStart(2, "0");
+  return hex;
+}
+async function webCrypto() {
+  const global = globalThis.crypto?.subtle;
+  if (global) return global;
+  const nodeCrypto = "node:crypto";
+  try {
+    const mod = await import(
+      /* @vite-ignore */
+      nodeCrypto
+    );
+    if (mod.webcrypto?.subtle) return mod.webcrypto.subtle;
+  } catch {
+  }
+  throw new Error(
+    "[OUI] argsHash needs WebCrypto (crypto.subtle), which this runtime does not provide"
+  );
+}
+function refuse(path, what) {
+  throw new TypeError(`[OUI] ${path} is not I-JSON: ${what}`);
+}
+function serialize(value, path) {
+  switch (typeof value) {
+    case "string":
+      return quote(value, path);
+    case "number":
+      if (!Number.isFinite(value)) refuse(path, String(value));
+      return JSON.stringify(value);
+    case "boolean":
+      return value ? "true" : "false";
+    case "object": {
+      if (value === null) return "null";
+      if (Array.isArray(value)) {
+        return `[${value.map((item, i) => serialize(item, `${path}[${i}]`)).join(",")}]`;
+      }
+      const proto = Object.getPrototypeOf(value);
+      if (proto !== Object.prototype && proto !== null) {
+        refuse(path, `a ${proto?.constructor?.name ?? "non-plain"} object`);
+      }
+      const record = value;
+      const keys = Object.keys(record).filter((k) => record[k] !== void 0).sort();
+      return `{${keys.map(
+        (k) => `${quote(k, `${path} key`)}:${serialize(record[k], `${path}.${k}`)}`
+      ).join(",")}}`;
+    }
+    default:
+      return refuse(path, typeof value);
+  }
+}
+function quote(text, path) {
+  for (let i = 0; i < text.length; i++) {
+    const unit = text.charCodeAt(i);
+    if (unit >= 55296 && unit <= 56319) {
+      const next = text.charCodeAt(i + 1);
+      if (next >= 56320 && next <= 57343) {
+        i++;
+        continue;
+      }
+      refuse(path, `a lone surrogate at ${i}`);
+    }
+    if (unit >= 56320 && unit <= 57343)
+      refuse(path, `a lone surrogate at ${i}`);
+  }
+  return JSON.stringify(text);
+}
+
+// src/spec/surfaces-hash.ts
+var PREFIX = "fnv1a64:";
+function surfacesHash(surfaces) {
+  return PREFIX + fnv1a64(sortedJson(surfaces));
+}
+function sortedJson(value) {
+  return JSON.stringify(sortKeys(value)) ?? "null";
+}
+function sortKeys(value) {
+  if (Array.isArray(value)) return value.map(sortKeys);
+  if (value && typeof value === "object") {
+    const out = {};
+    for (const key of Object.keys(value).sort()) {
+      const member = value[key];
+      if (member !== void 0) out[key] = sortKeys(member);
+    }
+    return out;
+  }
+  return value;
+}
+function fnv1a64(text) {
+  let hi = 3421674724;
+  let lo = 2216829733;
+  for (let i = 0; i < text.length; i++) {
+    lo = (lo ^ text.charCodeAt(i)) >>> 0;
+    const loProduct = lo * 435;
+    const carry = Math.floor(loProduct / 4294967296);
+    const newLo = loProduct >>> 0;
+    hi = Math.imul(hi, 435) + Math.imul(lo, 256) + carry >>> 0;
+    lo = newLo;
+  }
+  return hex32(hi) + hex32(lo);
+}
+function hex32(n) {
+  return (n >>> 0).toString(16).padStart(8, "0");
+}
+
+export { ARGS_HASH_PATTERN, OUI_EFFECT_ACCESS, OUI_EFFECT_KINDS, OUI_PROTOCOL_EVENTS, argsHash, canonicalJson, effectAccess, requiresApproval, surfacesHash };
+//# sourceMappingURL=chunk-B2EFZMGY.js.map
+//# sourceMappingURL=chunk-B2EFZMGY.js.map

package/dist/chunk-B2EFZMGY.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/spec/types.ts","../src/spec/approval.ts","../src/spec/surfaces-hash.ts"],"names":[],"mappings":";AAiYO,IAAM,mBAAA,GAAsB;AAAA,EACjC,gBAAA,EAAkB,kBAAA;AAAA,EAClB,kBAAA,EAAoB,oBAAA;AAAA,EACpB,cAAA,EAAgB,gBAAA;AAAA,EAChB,aAAA,EAAe,eAAA;AAAA,EACf,kBAAA,EAAoB;AACtB;;;AC9VO,IAAM,gBAAA,GAA6C;AAAA,EACxD,MAAA;AAAA,EACA,WAAA;AAAA,EACA,UAAA;AAAA,EACA,MAAA;AAAA,EACA,MAAA;AAAA,EACA,MAAA;AAAA,EACA,QAAA;AAAA,EACA,KAAA;AAAA,EACA;AACF;AAGO,IAAM,iBAAA,GAET;AAAA,EACF,IAAA,EAAM,MAAA;AAAA,EACN,SAAA,EAAW,MAAA;AAAA,EACX,QAAA,EAAU,MAAA;AAAA,EACV,IAAA,EAAM,MAAA;AAAA,EACN,IAAA,EAAM,OAAA;AAAA,EACN,IAAA,EAAM,OAAA;AAAA,EACN,MAAA,EAAQ,OAAA;AAAA,EACR,GAAA,EAAK,OAAA;AAAA,EACL,WAAA,EAAa;AACf;AAGO,SAAS,aACd,MAAA,EACkB;AAClB,EAAA,OAAO,MAAA,KAAW,MAAA,GAAY,OAAA,GAAU,iBAAA,CAAkB,MAAM,CAAA;AAClE;AAOO,SAAS,gBAAA,CACd,QACA,WAAA,EACS;AACT,EAAA,IAAI,MAAA,KAAW,eAAe,OAAO,IAAA;AACrC,EAAA,OAAO,CAAC,CAAC,WAAA,IAAe,YAAA,CAAa,MAAM,CAAA,KAAM,OAAA;AACnD;AAgBO,IAAM,iBAAA,GAAoB;AAe1B,SAAS,cAAc,KAAA,EAAwB;AACpD,EAAA,OAAO,SAAA,CAAU,OAAO,GAAG,CAAA;AAC7B;AAGA,eAAsB,SAAS,MAAA,EAAkC;AAC/D,EAAA,MAAM,SAAA,GAAY,cAAc,MAAM,CAAA;AACtC,EAAA,MAAM,MAAA,GAAS,MAAM,SAAA,EAAU;AAC/B,EAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,MAAA;AAAA,IAC1B,SAAA;AAAA,IACA,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,SAAS;AAAA,GACpC;AACA,EAAA,IAAI,GAAA,GAAM,EAAA;AACV,EAAA,KAAA,MAAW,IAAA,IAAQ,IAAI,UAAA,CAAW,MAAM,CAAA;AACtC,IAAA,GAAA,IAAO,KAAK,QAAA,CAAS,EAAE,CAAA,CAAE,QAAA,CAAS,GAAG,GAAG,CAAA;AAC1C,EAAA,OAAO,GAAA;AACT;AAMA,eAAe,SAAA,GAAmC;AAChD,EAAA,MAAM,MAAA,GAAS,WAAW,MAAA,EAAQ,MAAA;AAClC,EAAA,IAAI,QAAQ,OAAO,MAAA;AACnB,EAAA,MAAM,UAAA,GAAa,aAAA;AACnB,EAAA,IAAI;AACF,IAAA,MAAM,MAAO,MAAM;AAAA;AAAA,MAA0B;AAAA,KAAA;AAG7C,IAAA,IAAI,GAAA,CAAI,SAAA,EAAW,MAAA,EAAQ,OAAO,IAAI,SAAA,CAAU,MAAA;AAAA,EAClD,CAAA,CAAA,MAAQ;AAAA,EAER;AACA,EAAA,MAAM,IAAI,KAAA;AAAA,IACR;AAAA,GACF;AACF;AAEA,SAAS,MAAA,CAAO,MAAc,IAAA,EAAqB;AACjD,EAAA,MAAM,IAAI,SAAA,CAAU,CAAA,MAAA,EAAS,IAAI,CAAA,gBAAA,EAAmB,IAAI,CAAA,CAAE,CAAA;AAC5D;AAEA,SAAS,SAAA,CAAU,OAAgB,IAAA,EAAsB;AACvD,EAAA,QAAQ,OAAO,KAAA;AAAO,IACpB,KAAK,QAAA;AACH,MAAA,OAAO,KAAA,CAAM,OAAO,IAAI,CAAA;AAAA,IAC1B,KAAK,QAAA;AACH,MAAA,IAAI,CAAC,OAAO,QAAA,CAAS,KAAK,GAAG,MAAA,CAAO,IAAA,EAAM,MAAA,CAAO,KAAK,CAAC,CAAA;AAEvD,MAAA,OAAO,IAAA,CAAK,UAAU,KAAK,CAAA;AAAA,IAC7B,KAAK,SAAA;AACH,MAAA,OAAO,QAAQ,MAAA,GAAS,OAAA;AAAA,IAC1B,KAAK,QAAA,EAAU;AACb,MAAA,IAAI,KAAA,KAAU,MAAM,OAAO,MAAA;AAC3B,MAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,EAAG;AACxB,QAAA,OAAO,IAAI,KAAA,CAAM,GAAA,CAAI,CAAC,IAAA,EAAM,MAAM,SAAA,CAAU,IAAA,EAAM,CAAA,EAAG,IAAI,IAAI,CAAC,CAAA,CAAA,CAAG,CAAC,CAAA,CAAE,IAAA,CAAK,GAAG,CAAC,CAAA,CAAA,CAAA;AAAA,MAC/E;AACA,MAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,cAAA,CAAe,KAAK,CAAA;AACzC,MAAA,IAAI,KAAA,KAAU,MAAA,CAAO,SAAA,IAAa,KAAA,KAAU,IAAA,EAAM;AAChD,QAAA,MAAA,CAAO,MAAM,CAAA,EAAA,EAAK,KAAA,EAAO,WAAA,EAAa,IAAA,IAAQ,WAAW,CAAA,OAAA,CAAS,CAAA;AAAA,MACpE;AACA,MAAA,MAAM,MAAA,GAAS,KAAA;AAEf,MAAA,MAAM,IAAA,GAAO,MAAA,CAAO,IAAA,CAAK,MAAM,CAAA,CAC5B,MAAA,CAAO,CAAC,CAAA,KAAM,MAAA,CAAO,CAAC,CAAA,KAAM,MAAS,EACrC,IAAA,EAAK;AACR,MAAA,OAAO,IAAI,IAAA,CACR,GAAA;AAAA,QACC,CAAC,CAAA,KACC,CAAA,EAAG,MAAM,CAAA,EAAG,CAAA,EAAG,IAAI,CAAA,IAAA,CAAM,CAAC,IAAI,SAAA,CAAU,MAAA,CAAO,CAAC,CAAA,EAAG,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,CAAC,EAAE,CAAC,CAAA;AAAA,OACtE,CACC,IAAA,CAAK,GAAG,CAAC,CAAA,CAAA,CAAA;AAAA,IACd;AAAA,IACA;AACE,MAAA,OAAO,MAAA,CAAO,IAAA,EAAM,OAAO,KAAK,CAAA;AAAA;AAEtC;AAEA,SAAS,KAAA,CAAM,MAAc,IAAA,EAAsB;AAEjD,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,IAAA,CAAK,QAAQ,CAAA,EAAA,EAAK;AACpC,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,UAAA,CAAW,CAAC,CAAA;AAC9B,IAAA,IAAI,IAAA,IAAQ,KAAA,IAAU,IAAA,IAAQ,KAAA,EAAQ;AACpC,MAAA,MAAM,IAAA,GAAO,IAAA,CAAK,UAAA,CAAW,CAAA,GAAI,CAAC,CAAA;AAClC,MAAA,IAAI,IAAA,IAAQ,KAAA,IAAU,IAAA,IAAQ,KAAA,EAAQ;AACpC,QAAA,CAAA,EAAA;AACA,QAAA;AAAA,MACF;AACA,MAAA,MAAA,CAAO,IAAA,EAAM,CAAA,oBAAA,EAAuB,CAAC,CAAA,CAAE,CAAA;AAAA,IACzC;AACA,IAAA,IAAI,IAAA,IAAQ,SAAU,IAAA,IAAQ,KAAA;AAC5B,MAAA,MAAA,CAAO,IAAA,EAAM,CAAA,oBAAA,EAAuB,CAAC,CAAA,CAAE,CAAA;AAAA,EAC3C;AACA,EAAA,OAAO,IAAA,CAAK,UAAU,IAAI,CAAA;AAC5B;;;AC9LA,IAAM,MAAA,GAAS,UAAA;AAGR,SAAS,aAAa,QAAA,EAAyC;AACpE,EAAA,OAAO,MAAA,GAAS,OAAA,CAAQ,UAAA,CAAW,QAAQ,CAAC,CAAA;AAC9C;AASA,SAAS,WAAW,KAAA,EAAwB;AAC1C,EAAA,OAAO,IAAA,CAAK,SAAA,CAAU,QAAA,CAAS,KAAK,CAAC,CAAA,IAAK,MAAA;AAC5C;AAEA,SAAS,SAAS,KAAA,EAAyB;AACzC,EAAA,IAAI,MAAM,OAAA,CAAQ,KAAK,GAAG,OAAO,KAAA,CAAM,IAAI,QAAQ,CAAA;AACnD,EAAA,IAAI,KAAA,IAAS,OAAO,KAAA,KAAU,QAAA,EAAU;AACtC,IAAA,MAAM,MAA+B,EAAC;AACtC,IAAA,KAAA,MAAW,OAAO,MAAA,CAAO,IAAA,CAAK,KAAgC,CAAA,CAAE,MAAK,EAAG;AACtE,MAAA,MAAM,MAAA,GAAU,MAAkC,GAAG,CAAA;AACrD,MAAA,IAAI,WAAW,MAAA,EAAW,GAAA,CAAI,GAAG,CAAA,GAAI,SAAS,MAAM,CAAA;AAAA,IACtD;AACA,IAAA,OAAO,GAAA;AAAA,EACT;AACA,EAAA,OAAO,KAAA;AACT;AAMO,SAAS,QAAQ,IAAA,EAAsB;AAE5C,EAAA,IAAI,EAAA,GAAK,UAAA;AACT,EAAA,IAAI,EAAA,GAAK,UAAA;AACT,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,IAAA,CAAK,QAAQ,CAAA,EAAA,EAAK;AACpC,IAAA,EAAA,GAAA,CAAM,EAAA,GAAK,IAAA,CAAK,UAAA,CAAW,CAAC,CAAA,MAAO,CAAA;AAGnC,IAAA,MAAM,YAAY,EAAA,GAAK,GAAA;AACvB,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,KAAA,CAAM,SAAA,GAAY,UAAW,CAAA;AAChD,IAAA,MAAM,QAAQ,SAAA,KAAc,CAAA;AAC5B,IAAA,EAAA,GAAM,IAAA,CAAK,IAAA,CAAK,EAAA,EAAI,GAAK,CAAA,GAAI,KAAK,IAAA,CAAK,EAAA,EAAI,GAAK,CAAA,GAAI,KAAA,KAAW,CAAA;AAC/D,IAAA,EAAA,GAAK,KAAA;AAAA,EACP;AACA,EAAA,OAAO,KAAA,CAAM,EAAE,CAAA,GAAI,KAAA,CAAM,EAAE,CAAA;AAC7B;AAEA,SAAS,MAAM,CAAA,EAAmB;AAChC,EAAA,OAAA,CAAQ,MAAM,CAAA,EAAG,QAAA,CAAS,EAAE,CAAA,CAAE,QAAA,CAAS,GAAG,GAAG,CAAA;AAC/C","file":"chunk-B2EFZMGY.js","sourcesContent":["import type { OUIActionApproval, OUIEffectKind } from \"./approval.js\";\n\n/**\n * OUI — Open UI Specification\n *\n * The machine-readable contract for agent-controllable user interfaces.\n * Any UI application that implements this interface can be controlled by\n * any OUI-compatible agent runtime.\n */\n\n/** JSON Schema type (subset used by OUI) */\nexport type JSONSchema = {\n  type?: string | string[];\n  properties?: Record<string, JSONSchema>;\n  items?: JSONSchema;\n  required?: string[];\n  enum?: (string | number | boolean)[];\n  description?: string;\n  default?: unknown;\n  oneOf?: JSONSchema[];\n  anyOf?: JSONSchema[];\n  allOf?: JSONSchema[];\n  const?: unknown;\n  minimum?: number;\n  maximum?: number;\n  minLength?: number;\n  maxLength?: number;\n  pattern?: string;\n  format?: string;\n  additionalProperties?: boolean | JSONSchema;\n};\n\n/**\n * A Surface is a controllable boundary within an application.\n * It declares what an agent can do (actions), what it can observe (state),\n * and when it's available (activation conditions).\n *\n * Think of it as \"one page\" or \"one feature\" of an application, described\n * in a way that an agent can understand and operate.\n */\nexport interface OUISurface {\n  /** Unique identifier for this surface (e.g., 'dataviz-wizard', 'document-editor') */\n  id: string;\n\n  /** Human-readable name */\n  name: string;\n\n  /** Description of what this surface does — included in agent context */\n  description: string;\n\n  /** Version of this surface's contract (semver) */\n  version?: string;\n\n  /** Actions the agent can invoke on this surface */\n  actions: OUIAction[];\n\n  /** Observable state the agent can read */\n  observations?: OUIObservation[];\n\n  /** When this surface is active/available */\n  activation?: OUIActivation;\n\n  /** Additional metadata for agent context */\n  metadata?: Record<string, unknown>;\n}\n\n/**\n * Declarative polling configuration for async actions.\n * The OUI runtime in the browser manages the polling lifecycle automatically\n * after the action handler returns its dispatch result.\n */\nexport interface OUIActionPolling {\n  /** How often to check (milliseconds) */\n  intervalMs: number;\n\n  /** Max poll attempts before giving up (optional) */\n  maxAttempts?: number;\n\n  /** Max total duration before giving up in ms (alternative to maxAttempts) */\n  maxDurationMs?: number;\n\n  /**\n   * Subscribe to a realtime event instead of polling.\n   * If provided, the runtime listens for this event instead of using setInterval.\n   * More efficient when realtime infrastructure exists.\n   */\n  subscribe?: {\n    /** Event name to listen for */\n    event: string;\n    /**\n     * Filter to match the event. Values prefixed with '$dispatchResult.'\n     * are resolved from the handler's return value.\n     * Example: { jobId: '$dispatchResult.jobId' }\n     */\n    filter?: Record<string, unknown>;\n  };\n}\n\n/**\n * An Action is a single operation an agent can perform on a surface.\n * Each action becomes a \"tool\" that the LLM can call.\n *\n * The action's handler executes in the UI (or API) and returns a result\n * that the agent sees as the tool's output.\n */\nexport interface OUIAction {\n  /** Unique action identifier (becomes the tool name) */\n  id: string;\n\n  /** Human-readable description — this is what the LLM reads to decide when to use it */\n  description: string;\n\n  /** The action's name as a person reads it, for a confirmation the user approves. */\n  title?: string;\n\n  /**\n   * What using the action does. A `transaction` runs only on the user's\n   * approval of the exact request (see `requiresApproval`). Undeclared counts\n   * as a write.\n   */\n  effect?: OUIEffectKind;\n\n  /** JSON Schema for the action's input parameters */\n  input: JSONSchema;\n\n  /** JSON Schema for the action's return value (optional — agent still gets the result) */\n  output?: JSONSchema;\n\n  /**\n   * Destructive: the action removes or replaces something the person made.\n   * Unless its effect only reads, it runs only on the user's approval of the\n   * exact request, which the surface runtime checks before it runs.\n   */\n  confirm?: boolean;\n\n  /** If true, the action is async — returns immediately with a job/tracking ID */\n  async?: boolean;\n\n  /** Declarative polling configuration — runtime manages the polling lifecycle after dispatch */\n  polling?: OUIActionPolling;\n\n  /** Human-readable hint about when this action is appropriate to use */\n  usage?: string;\n\n  /**\n   * Preconditions that should be met before this action is called.\n   * Expressed as a description (for the LLM) not as executable logic.\n   */\n  preconditions?: string;\n\n  /** Estimated duration hint (e.g., \"instant\", \"2-5s\", \"30-120s\") */\n  estimatedDuration?: string;\n\n  /** Tags for categorization */\n  tags?: string[];\n}\n\n/**\n * An Observation is a piece of application state that the agent can read.\n * Observations are pushed to the agent in real-time as the app state changes,\n * giving it situational awareness without needing screenshots.\n */\nexport interface OUIObservation {\n  /** Unique identifier for this observation */\n  id: string;\n\n  /** Description of what this observation represents */\n  description: string;\n\n  /** JSON Schema for the observation's value */\n  schema: JSONSchema;\n\n  /** How frequently this observation updates */\n  updateFrequency?: \"realtime\" | \"on-change\" | \"polling\";\n}\n\n/**\n * Activation conditions — when a surface is available to the agent.\n * A surface might only be active on a specific page, when certain\n * entities are loaded, or under specific application states.\n */\nexport interface OUIActivation {\n  /** URL path(s) where this surface is active */\n  routes?: string | string[];\n\n  /** Entity type/ID that must be present for this surface to activate */\n  entity?: {\n    type: string;\n    id?: string;\n  };\n\n  /** Custom predicate description (for documentation, not execution) */\n  condition?: string;\n}\n\n// ─── Protocol Types ──────────────────────────────────────────────────────────\n\n/**\n * A request from the agent runtime to execute an action on a surface.\n */\nexport interface OUIActionRequest {\n  /** Unique request ID for correlation */\n  requestId: string;\n\n  /** Which surface this request targets */\n  surfaceId: string;\n\n  /** Which action to invoke */\n  actionId: string;\n\n  /** The action's input parameters (validated against the action's input schema) */\n  params: Record<string, unknown>;\n\n  /** Timestamp of the request */\n  timestamp: number;\n\n  /**\n   * The user's approval this request runs on, for an action that needs one.\n   * The surface runtime runs such an action only when this matches a grant\n   * the tab received from the user's own confirmation, for exactly `params`.\n   */\n  approval?: OUIActionApproval;\n\n  /**\n   * The `surfacesHash` of the surfaces the agent runtime already holds for\n   * this client: from its snapshot, or from an earlier result. A client whose\n   * surfaces still hash to this answers without `surfaces`, so a result\n   * carries the client's surfaces only when they changed (§7.3.4).\n   */\n  knownSurfaces?: string;\n}\n\n/**\n * Why a client's answer is shorter than the result it produced: the receiving\n * side refused the full answer (too large, or otherwise not accepted), so the\n * client sent it again without the parts named in `omitted`. The action's own\n * outcome — `success`, `error`, and `data` unless omitted — is still the one\n * that happened (§7.3.6).\n */\nexport interface OUIResultDelivery {\n  trimmed: true;\n  /** What the receiving side said when it refused the full answer. */\n  reason: string;\n  /** The fields left out of this answer. */\n  omitted: Array<\"surfaces\" | \"observations\" | \"data\">;\n}\n\n/**\n * The result of an action execution, returned from the surface to the agent.\n */\nexport interface OUIActionResult {\n  /** Correlates to the request */\n  requestId: string;\n\n  /** Whether the action succeeded */\n  success: boolean;\n\n  /** The action's return data (if successful) */\n  data?: unknown;\n\n  /** Error information (if failed) */\n  error?: {\n    code: string;\n    message: string;\n    details?: unknown;\n  };\n\n  /** Progress indicator for interim polling results (0-100) */\n  progress?: number;\n\n  /** Whether this is an interim update (polling still in progress) or final */\n  interim?: boolean;\n\n  /** Duration of execution in milliseconds */\n  durationMs?: number;\n\n  /** Timestamp of the result */\n  timestamp: number;\n\n  /**\n   * The surfaces active on the client once the action's effects settled.\n   *\n   * An action can change what the agent is able to do next: navigating\n   * unmounts one page's surfaces and mounts another's. Without this, the agent\n   * would act on the capability set it had before the action, which is the\n   * set the action just replaced.\n   */\n  surfaces?: OUISurface[];\n\n  /** Latest observation values per surface once the action's effects settled. */\n  observations?: OUIObservationSnapshot;\n\n  /**\n   * The hash of the client's surfaces once the action's effects settled\n   * (`surfacesHash`). Always present from a client that sends it; `surfaces`\n   * is then present only when this differs from the request's\n   * `knownSurfaces`, and an agent runtime that holds surfaces with this hash\n   * keeps using them.\n   */\n  surfacesHash?: string;\n\n  /** Present when this answer was trimmed to be delivered (§7.3.6). */\n  delivery?: OUIResultDelivery;\n\n  /**\n   * False when the client's deadline passed before its UI settled, so\n   * `surfaces` and `observations` may still be changing. Absent or true\n   * otherwise.\n   */\n  settled?: boolean;\n}\n\n/** Latest observation values, keyed by surface id and then observation id. */\nexport type OUIObservationSnapshot = Record<string, Record<string, unknown>>;\n\n/**\n * What a client can do right now: the surfaces it has mounted and their latest\n * observation values. A client sends this to its agent runtime (for example,\n * with each turn), and returns it on every action result.\n */\nexport interface OUISurfaceSnapshot {\n  surfaces: OUISurface[];\n  observations: OUIObservationSnapshot;\n  /**\n   * `surfacesHash(surfaces)`: what an agent runtime sends back as a request's\n   * `knownSurfaces`, so the client's answer need not repeat surfaces the\n   * runtime already holds.\n   */\n  surfacesHash?: string;\n}\n\n/**\n * An observation update pushed from the surface to the agent.\n */\nexport interface OUIObservationUpdate {\n  /** Which surface this observation belongs to */\n  surfaceId: string;\n\n  /** Which observation updated */\n  observationId: string;\n\n  /** The new value */\n  value: unknown;\n\n  /** Timestamp of the update */\n  timestamp: number;\n}\n\n/**\n * Surface registration event — sent when a surface becomes active.\n */\nexport interface OUISurfaceRegistration {\n  /** The full surface manifest */\n  surface: OUISurface;\n\n  /** Timestamp of registration */\n  timestamp: number;\n}\n\n/**\n * Surface deregistration event — sent when a surface becomes inactive.\n */\nexport interface OUISurfaceDeregistration {\n  /** Which surface is being deregistered */\n  surfaceId: string;\n\n  /** Timestamp */\n  timestamp: number;\n}\n\n// ─── Transport Protocol Events ───────────────────────────────────────────────\n\n/**\n * All protocol events exchanged between agent runtime and surfaces.\n */\nexport type OUIProtocolEvent =\n  | { type: \"surface:register\"; payload: OUISurfaceRegistration }\n  | { type: \"surface:deregister\"; payload: OUISurfaceDeregistration }\n  | { type: \"action:request\"; payload: OUIActionRequest }\n  | { type: \"action:result\"; payload: OUIActionResult }\n  | { type: \"observation:update\"; payload: OUIObservationUpdate };\n\n/**\n * Protocol event type strings (for type guards and routing).\n */\nexport const OUI_PROTOCOL_EVENTS = {\n  SURFACE_REGISTER: \"surface:register\",\n  SURFACE_DEREGISTER: \"surface:deregister\",\n  ACTION_REQUEST: \"action:request\",\n  ACTION_RESULT: \"action:result\",\n  OBSERVATION_UPDATE: \"observation:update\",\n} as const;\n","/**\n * Approvals: an irreversible action runs only on an approval the user gave,\n * bound to the exact request.\n *\n * An agent runtime stops at an action that needs approval and shows the user\n * a confirmation. Its approval store issues a single-use grant when the user\n * confirms, and the request that then reaches the tab carries `approval:\n * { approvalId, argsHash }`. The surface runtime runs the action only when\n * that matches a grant this tab received from the user's own confirmation.\n *\n * Everything that checks a request computes the same args hash: SHA-256 over\n * the RFC 8785 (JCS) canonical JSON of its params, lowercase hex. The\n * published vectors (`oui-spec/approval-vectors.json`) hold every\n * implementation, in any language, to it.\n */\n\n/**\n * What using an action does. One vocabulary for every kind of action, so an\n * action is told apart by what it changes:\n *\n * | Effect | What it changes | Access |\n * |---|---|---|\n * | `view`, `selection`, `navigate`, `open` | What is shown | read |\n * | `edit` | The document, one undo step | write |\n * | `file` | Imports or exports a file | write |\n * | `mutate` | Backend data, through an API operation | write |\n * | `job` | Starts work that outlives the call | write |\n * | `transaction` | An irreversible external act: an order, a payment, a send, a publish | write, approved |\n */\nexport type OUIEffectKind =\n  | \"view\"\n  | \"selection\"\n  | \"navigate\"\n  | \"open\"\n  | \"edit\"\n  | \"file\"\n  | \"mutate\"\n  | \"job\"\n  | \"transaction\";\n\n/** Every effect, in the order of the table above. */\nexport const OUI_EFFECT_KINDS: readonly OUIEffectKind[] = [\n  \"view\",\n  \"selection\",\n  \"navigate\",\n  \"open\",\n  \"edit\",\n  \"file\",\n  \"mutate\",\n  \"job\",\n  \"transaction\",\n];\n\n/** Whether an effect only changes what is shown, or changes something. */\nexport const OUI_EFFECT_ACCESS: Readonly<\n  Record<OUIEffectKind, \"read\" | \"write\">\n> = {\n  view: \"read\",\n  selection: \"read\",\n  navigate: \"read\",\n  open: \"read\",\n  edit: \"write\",\n  file: \"write\",\n  mutate: \"write\",\n  job: \"write\",\n  transaction: \"write\",\n};\n\n/** `read` or `write`. An action that declares no effect is a `write`: nothing says it only shows. */\nexport function effectAccess(\n  effect: OUIEffectKind | undefined,\n): \"read\" | \"write\" {\n  return effect === undefined ? \"write\" : OUI_EFFECT_ACCESS[effect];\n}\n\n/**\n * Whether running an action needs the user's approval of the exact request: a\n * `transaction` always, and a `write` declared destructive. An agent\n * runtime's policy may require it of more; nothing waives these.\n */\nexport function requiresApproval(\n  effect: OUIEffectKind | undefined,\n  destructive?: boolean,\n): boolean {\n  if (effect === \"transaction\") return true;\n  return !!destructive && effectAccess(effect) === \"write\";\n}\n\n/** What a request for an approved action carries. */\nexport interface OUIActionApproval {\n  approvalId: string;\n  /** `argsHash(params)` of the request the user approved. */\n  argsHash: string;\n}\n\n/** A grant this tab holds: the user approved this request here. */\nexport interface OUIApprovalGrant extends OUIActionApproval {\n  /** Epoch ms after which the grant no longer admits anything. */\n  expiresAt: number;\n}\n\n/** An args hash: 64 lowercase hex digits. */\nexport const ARGS_HASH_PATTERN = /^[0-9a-f]{64}$/;\n\n/**\n * The RFC 8785 canonical form of a JSON value:\n * - object members sorted by their names' UTF-16 code units, with no\n *   whitespace;\n * - numbers in ECMAScript's shortest round-trip form (`-0` is `0`);\n * - strings escaped as ECMAScript's `JSON.stringify` escapes them.\n *\n * The value must be I-JSON (RFC 7493): anything JSON cannot carry — `NaN`,\n * infinities, `undefined` outside an object member, a bigint, a function, a\n * symbol, a class instance, or a string with a lone surrogate — is refused\n * rather than hashed as something the other end never receives. An object\n * member whose value is `undefined` is left out, as it is on the wire.\n */\nexport function canonicalJson(value: unknown): string {\n  return serialize(value, \"$\");\n}\n\n/** SHA-256 of the canonical JSON of a request's params, lowercase hex. Runs wherever WebCrypto does. */\nexport async function argsHash(params: unknown): Promise<string> {\n  const canonical = canonicalJson(params);\n  const subtle = await webCrypto();\n  const digest = await subtle.digest(\n    \"SHA-256\",\n    new TextEncoder().encode(canonical),\n  );\n  let hex = \"\";\n  for (const byte of new Uint8Array(digest))\n    hex += byte.toString(16).padStart(2, \"0\");\n  return hex;\n}\n\n/**\n * WebCrypto: global in browsers and Node 19+; Node 18 has it only on\n * `node:crypto`, imported here by a specifier bundlers leave alone.\n */\nasync function webCrypto(): Promise<SubtleCrypto> {\n  const global = globalThis.crypto?.subtle;\n  if (global) return global;\n  const nodeCrypto = \"node:crypto\";\n  try {\n    const mod = (await import(/* @vite-ignore */ nodeCrypto)) as {\n      webcrypto?: { subtle?: SubtleCrypto };\n    };\n    if (mod.webcrypto?.subtle) return mod.webcrypto.subtle;\n  } catch {\n    // Not Node: fall through to the error below.\n  }\n  throw new Error(\n    \"[OUI] argsHash needs WebCrypto (crypto.subtle), which this runtime does not provide\",\n  );\n}\n\nfunction refuse(path: string, what: string): never {\n  throw new TypeError(`[OUI] ${path} is not I-JSON: ${what}`);\n}\n\nfunction serialize(value: unknown, path: string): string {\n  switch (typeof value) {\n    case \"string\":\n      return quote(value, path);\n    case \"number\":\n      if (!Number.isFinite(value)) refuse(path, String(value));\n      // ECMAScript's Number-to-string is RFC 8785's number form, and prints -0 as 0.\n      return JSON.stringify(value);\n    case \"boolean\":\n      return value ? \"true\" : \"false\";\n    case \"object\": {\n      if (value === null) return \"null\";\n      if (Array.isArray(value)) {\n        return `[${value.map((item, i) => serialize(item, `${path}[${i}]`)).join(\",\")}]`;\n      }\n      const proto = Object.getPrototypeOf(value);\n      if (proto !== Object.prototype && proto !== null) {\n        refuse(path, `a ${proto?.constructor?.name ?? \"non-plain\"} object`);\n      }\n      const record = value as Record<string, unknown>;\n      // Default string order compares UTF-16 code units, which is RFC 8785's order.\n      const keys = Object.keys(record)\n        .filter((k) => record[k] !== undefined)\n        .sort();\n      return `{${keys\n        .map(\n          (k) =>\n            `${quote(k, `${path} key`)}:${serialize(record[k], `${path}.${k}`)}`,\n        )\n        .join(\",\")}}`;\n    }\n    default:\n      return refuse(path, typeof value);\n  }\n}\n\nfunction quote(text: string, path: string): string {\n  // I-JSON strings are well-formed Unicode: a lone surrogate has no UTF-8 form.\n  for (let i = 0; i < text.length; i++) {\n    const unit = text.charCodeAt(i);\n    if (unit >= 0xd800 && unit <= 0xdbff) {\n      const next = text.charCodeAt(i + 1);\n      if (next >= 0xdc00 && next <= 0xdfff) {\n        i++;\n        continue;\n      }\n      refuse(path, `a lone surrogate at ${i}`);\n    }\n    if (unit >= 0xdc00 && unit <= 0xdfff)\n      refuse(path, `a lone surrogate at ${i}`);\n  }\n  return JSON.stringify(text);\n}\n","/**\n * The identity of a set of surfaces, for an answer that need not repeat them\n * (§7.3.4).\n *\n * A client's surfaces are what an agent may do; every result used to carry\n * them all, so each answer weighed what the page's whole manifest weighs —\n * on a studio page with a hundred and fifty actions, about 265 KB for a click.\n * A relay that caps a frame then drops whole answers, and the agent hears\n * nothing. With this hash the agent runtime says which surfaces it holds\n * (`knownSurfaces`), and the client sends its surfaces only when they differ.\n *\n * The hash is of the surfaces' canonical JSON (object keys sorted), so it does\n * not depend on the order a manifest's fields were written in, and is the\n * same wherever it is computed. It is a 64-bit FNV-1a over the JSON's UTF-16\n * code units, kept as two 32-bit halves: not a security measure — the agent\n * runtime is told the surfaces by the same client that hashes them — but\n * collision-resistant enough that two different capability sets of one page\n * never share one.\n */\nimport type { OUISurface } from \"./types.js\";\n\n/** The prefix names the algorithm, so a different one is a different hash rather than a false match. */\nconst PREFIX = \"fnv1a64:\";\n\n/** `surfaces`' hash, as a result's `surfacesHash` and a request's `knownSurfaces` carry it. */\nexport function surfacesHash(surfaces: readonly OUISurface[]): string {\n  return PREFIX + fnv1a64(sortedJson(surfaces));\n}\n\n/**\n * JSON with every object's keys sorted, and what JSON cannot carry dropped as\n * JSON.stringify drops it. Not approval.ts's `canonicalJson`, which refuses\n * such values on purpose (an approval must hash exactly what crosses the\n * wire): a snapshot is taken on every answer, and must never throw on a\n * manifest that carries, say, an `undefined` in an array.\n */\nfunction sortedJson(value: unknown): string {\n  return JSON.stringify(sortKeys(value)) ?? \"null\";\n}\n\nfunction sortKeys(value: unknown): unknown {\n  if (Array.isArray(value)) return value.map(sortKeys);\n  if (value && typeof value === \"object\") {\n    const out: Record<string, unknown> = {};\n    for (const key of Object.keys(value as Record<string, unknown>).sort()) {\n      const member = (value as Record<string, unknown>)[key];\n      if (member !== undefined) out[key] = sortKeys(member);\n    }\n    return out;\n  }\n  return value;\n}\n\n/**\n * 64-bit FNV-1a (offset 0xcbf29ce484222325, prime 0x100000001b3) in two 32-bit\n * halves, so it runs without BigInt and stays fast on a few hundred KB.\n */\nexport function fnv1a64(text: string): string {\n  // The 64-bit offset basis, as high and low 32-bit halves.\n  let hi = 0xcbf29ce4;\n  let lo = 0x84222325;\n  for (let i = 0; i < text.length; i++) {\n    lo = (lo ^ text.charCodeAt(i)) >>> 0;\n    // Multiply (hi:lo) by the prime 0x00000100_000001b3, keeping 64 bits:\n    // lo*0x1b3, and hi*0x1b3 + lo*0x100 carried into the high half.\n    const loProduct = lo * 0x1b3;\n    const carry = Math.floor(loProduct / 0x100000000);\n    const newLo = loProduct >>> 0;\n    hi = (Math.imul(hi, 0x1b3) + Math.imul(lo, 0x100) + carry) >>> 0;\n    lo = newLo;\n  }\n  return hex32(hi) + hex32(lo);\n}\n\nfunction hex32(n: number): string {\n  return (n >>> 0).toString(16).padStart(8, \"0\");\n}\n"]}

package/dist/chunk-LDECTDPU.cjs

@@ -0,0 +1,169 @@
+'use strict';
+
+// src/spec/types.ts
+var OUI_PROTOCOL_EVENTS = {
+  SURFACE_REGISTER: "surface:register",
+  SURFACE_DEREGISTER: "surface:deregister",
+  ACTION_REQUEST: "action:request",
+  ACTION_RESULT: "action:result",
+  OBSERVATION_UPDATE: "observation:update"
+};
+
+// src/spec/approval.ts
+var OUI_EFFECT_KINDS = [
+  "view",
+  "selection",
+  "navigate",
+  "open",
+  "edit",
+  "file",
+  "mutate",
+  "job",
+  "transaction"
+];
+var OUI_EFFECT_ACCESS = {
+  view: "read",
+  selection: "read",
+  navigate: "read",
+  open: "read",
+  edit: "write",
+  file: "write",
+  mutate: "write",
+  job: "write",
+  transaction: "write"
+};
+function effectAccess(effect) {
+  return effect === void 0 ? "write" : OUI_EFFECT_ACCESS[effect];
+}
+function requiresApproval(effect, destructive) {
+  if (effect === "transaction") return true;
+  return !!destructive && effectAccess(effect) === "write";
+}
+var ARGS_HASH_PATTERN = /^[0-9a-f]{64}$/;
+function canonicalJson(value) {
+  return serialize(value, "$");
+}
+async function argsHash(params) {
+  const canonical = canonicalJson(params);
+  const subtle = await webCrypto();
+  const digest = await subtle.digest(
+    "SHA-256",
+    new TextEncoder().encode(canonical)
+  );
+  let hex = "";
+  for (const byte of new Uint8Array(digest))
+    hex += byte.toString(16).padStart(2, "0");
+  return hex;
+}
+async function webCrypto() {
+  const global = globalThis.crypto?.subtle;
+  if (global) return global;
+  const nodeCrypto = "node:crypto";
+  try {
+    const mod = await import(
+      /* @vite-ignore */
+      nodeCrypto
+    );
+    if (mod.webcrypto?.subtle) return mod.webcrypto.subtle;
+  } catch {
+  }
+  throw new Error(
+    "[OUI] argsHash needs WebCrypto (crypto.subtle), which this runtime does not provide"
+  );
+}
+function refuse(path, what) {
+  throw new TypeError(`[OUI] ${path} is not I-JSON: ${what}`);
+}
+function serialize(value, path) {
+  switch (typeof value) {
+    case "string":
+      return quote(value, path);
+    case "number":
+      if (!Number.isFinite(value)) refuse(path, String(value));
+      return JSON.stringify(value);
+    case "boolean":
+      return value ? "true" : "false";
+    case "object": {
+      if (value === null) return "null";
+      if (Array.isArray(value)) {
+        return `[${value.map((item, i) => serialize(item, `${path}[${i}]`)).join(",")}]`;
+      }
+      const proto = Object.getPrototypeOf(value);
+      if (proto !== Object.prototype && proto !== null) {
+        refuse(path, `a ${proto?.constructor?.name ?? "non-plain"} object`);
+      }
+      const record = value;
+      const keys = Object.keys(record).filter((k) => record[k] !== void 0).sort();
+      return `{${keys.map(
+        (k) => `${quote(k, `${path} key`)}:${serialize(record[k], `${path}.${k}`)}`
+      ).join(",")}}`;
+    }
+    default:
+      return refuse(path, typeof value);
+  }
+}
+function quote(text, path) {
+  for (let i = 0; i < text.length; i++) {
+    const unit = text.charCodeAt(i);
+    if (unit >= 55296 && unit <= 56319) {
+      const next = text.charCodeAt(i + 1);
+      if (next >= 56320 && next <= 57343) {
+        i++;
+        continue;
+      }
+      refuse(path, `a lone surrogate at ${i}`);
+    }
+    if (unit >= 56320 && unit <= 57343)
+      refuse(path, `a lone surrogate at ${i}`);
+  }
+  return JSON.stringify(text);
+}
+
+// src/spec/surfaces-hash.ts
+var PREFIX = "fnv1a64:";
+function surfacesHash(surfaces) {
+  return PREFIX + fnv1a64(sortedJson(surfaces));
+}
+function sortedJson(value) {
+  return JSON.stringify(sortKeys(value)) ?? "null";
+}
+function sortKeys(value) {
+  if (Array.isArray(value)) return value.map(sortKeys);
+  if (value && typeof value === "object") {
+    const out = {};
+    for (const key of Object.keys(value).sort()) {
+      const member = value[key];
+      if (member !== void 0) out[key] = sortKeys(member);
+    }
+    return out;
+  }
+  return value;
+}
+function fnv1a64(text) {
+  let hi = 3421674724;
+  let lo = 2216829733;
+  for (let i = 0; i < text.length; i++) {
+    lo = (lo ^ text.charCodeAt(i)) >>> 0;
+    const loProduct = lo * 435;
+    const carry = Math.floor(loProduct / 4294967296);
+    const newLo = loProduct >>> 0;
+    hi = Math.imul(hi, 435) + Math.imul(lo, 256) + carry >>> 0;
+    lo = newLo;
+  }
+  return hex32(hi) + hex32(lo);
+}
+function hex32(n) {
+  return (n >>> 0).toString(16).padStart(8, "0");
+}
+
+exports.ARGS_HASH_PATTERN = ARGS_HASH_PATTERN;
+exports.OUI_EFFECT_ACCESS = OUI_EFFECT_ACCESS;
+exports.OUI_EFFECT_KINDS = OUI_EFFECT_KINDS;
+exports.OUI_PROTOCOL_EVENTS = OUI_PROTOCOL_EVENTS;
+exports.argsHash = argsHash;
+exports.canonicalJson = canonicalJson;
+exports.effectAccess = effectAccess;
+exports.requiresApproval = requiresApproval;
+exports.surfacesHash = surfacesHash;
+//# sourceMappingURL=chunk-LDECTDPU.cjs.map
+//# sourceMappingURL=chunk-LDECTDPU.cjs.map

package/dist/chunk-LDECTDPU.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/spec/types.ts","../src/spec/approval.ts","../src/spec/surfaces-hash.ts"],"names":[],"mappings":";;;AAiYO,IAAM,mBAAA,GAAsB;AAAA,EACjC,gBAAA,EAAkB,kBAAA;AAAA,EAClB,kBAAA,EAAoB,oBAAA;AAAA,EACpB,cAAA,EAAgB,gBAAA;AAAA,EAChB,aAAA,EAAe,eAAA;AAAA,EACf,kBAAA,EAAoB;AACtB;;;AC9VO,IAAM,gBAAA,GAA6C;AAAA,EACxD,MAAA;AAAA,EACA,WAAA;AAAA,EACA,UAAA;AAAA,EACA,MAAA;AAAA,EACA,MAAA;AAAA,EACA,MAAA;AAAA,EACA,QAAA;AAAA,EACA,KAAA;AAAA,EACA;AACF;AAGO,IAAM,iBAAA,GAET;AAAA,EACF,IAAA,EAAM,MAAA;AAAA,EACN,SAAA,EAAW,MAAA;AAAA,EACX,QAAA,EAAU,MAAA;AAAA,EACV,IAAA,EAAM,MAAA;AAAA,EACN,IAAA,EAAM,OAAA;AAAA,EACN,IAAA,EAAM,OAAA;AAAA,EACN,MAAA,EAAQ,OAAA;AAAA,EACR,GAAA,EAAK,OAAA;AAAA,EACL,WAAA,EAAa;AACf;AAGO,SAAS,aACd,MAAA,EACkB;AAClB,EAAA,OAAO,MAAA,KAAW,MAAA,GAAY,OAAA,GAAU,iBAAA,CAAkB,MAAM,CAAA;AAClE;AAOO,SAAS,gBAAA,CACd,QACA,WAAA,EACS;AACT,EAAA,IAAI,MAAA,KAAW,eAAe,OAAO,IAAA;AACrC,EAAA,OAAO,CAAC,CAAC,WAAA,IAAe,YAAA,CAAa,MAAM,CAAA,KAAM,OAAA;AACnD;AAgBO,IAAM,iBAAA,GAAoB;AAe1B,SAAS,cAAc,KAAA,EAAwB;AACpD,EAAA,OAAO,SAAA,CAAU,OAAO,GAAG,CAAA;AAC7B;AAGA,eAAsB,SAAS,MAAA,EAAkC;AAC/D,EAAA,MAAM,SAAA,GAAY,cAAc,MAAM,CAAA;AACtC,EAAA,MAAM,MAAA,GAAS,MAAM,SAAA,EAAU;AAC/B,EAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,MAAA;AAAA,IAC1B,SAAA;AAAA,IACA,IAAI,WAAA,EAAY,CAAE,MAAA,CAAO,SAAS;AAAA,GACpC;AACA,EAAA,IAAI,GAAA,GAAM,EAAA;AACV,EAAA,KAAA,MAAW,IAAA,IAAQ,IAAI,UAAA,CAAW,MAAM,CAAA;AACtC,IAAA,GAAA,IAAO,KAAK,QAAA,CAAS,EAAE,CAAA,CAAE,QAAA,CAAS,GAAG,GAAG,CAAA;AAC1C,EAAA,OAAO,GAAA;AACT;AAMA,eAAe,SAAA,GAAmC;AAChD,EAAA,MAAM,MAAA,GAAS,WAAW,MAAA,EAAQ,MAAA;AAClC,EAAA,IAAI,QAAQ,OAAO,MAAA;AACnB,EAAA,MAAM,UAAA,GAAa,aAAA;AACnB,EAAA,IAAI;AACF,IAAA,MAAM,MAAO,MAAM;AAAA;AAAA,MAA0B;AAAA,KAAA;AAG7C,IAAA,IAAI,GAAA,CAAI,SAAA,EAAW,MAAA,EAAQ,OAAO,IAAI,SAAA,CAAU,MAAA;AAAA,EAClD,CAAA,CAAA,MAAQ;AAAA,EAER;AACA,EAAA,MAAM,IAAI,KAAA;AAAA,IACR;AAAA,GACF;AACF;AAEA,SAAS,MAAA,CAAO,MAAc,IAAA,EAAqB;AACjD,EAAA,MAAM,IAAI,SAAA,CAAU,CAAA,MAAA,EAAS,IAAI,CAAA,gBAAA,EAAmB,IAAI,CAAA,CAAE,CAAA;AAC5D;AAEA,SAAS,SAAA,CAAU,OAAgB,IAAA,EAAsB;AACvD,EAAA,QAAQ,OAAO,KAAA;AAAO,IACpB,KAAK,QAAA;AACH,MAAA,OAAO,KAAA,CAAM,OAAO,IAAI,CAAA;AAAA,IAC1B,KAAK,QAAA;AACH,MAAA,IAAI,CAAC,OAAO,QAAA,CAAS,KAAK,GAAG,MAAA,CAAO,IAAA,EAAM,MAAA,CAAO,KAAK,CAAC,CAAA;AAEvD,MAAA,OAAO,IAAA,CAAK,UAAU,KAAK,CAAA;AAAA,IAC7B,KAAK,SAAA;AACH,MAAA,OAAO,QAAQ,MAAA,GAAS,OAAA;AAAA,IAC1B,KAAK,QAAA,EAAU;AACb,MAAA,IAAI,KAAA,KAAU,MAAM,OAAO,MAAA;AAC3B,MAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,KAAK,CAAA,EAAG;AACxB,QAAA,OAAO,IAAI,KAAA,CAAM,GAAA,CAAI,CAAC,IAAA,EAAM,MAAM,SAAA,CAAU,IAAA,EAAM,CAAA,EAAG,IAAI,IAAI,CAAC,CAAA,CAAA,CAAG,CAAC,CAAA,CAAE,IAAA,CAAK,GAAG,CAAC,CAAA,CAAA,CAAA;AAAA,MAC/E;AACA,MAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,cAAA,CAAe,KAAK,CAAA;AACzC,MAAA,IAAI,KAAA,KAAU,MAAA,CAAO,SAAA,IAAa,KAAA,KAAU,IAAA,EAAM;AAChD,QAAA,MAAA,CAAO,MAAM,CAAA,EAAA,EAAK,KAAA,EAAO,WAAA,EAAa,IAAA,IAAQ,WAAW,CAAA,OAAA,CAAS,CAAA;AAAA,MACpE;AACA,MAAA,MAAM,MAAA,GAAS,KAAA;AAEf,MAAA,MAAM,IAAA,GAAO,MAAA,CAAO,IAAA,CAAK,MAAM,CAAA,CAC5B,MAAA,CAAO,CAAC,CAAA,KAAM,MAAA,CAAO,CAAC,CAAA,KAAM,MAAS,EACrC,IAAA,EAAK;AACR,MAAA,OAAO,IAAI,IAAA,CACR,GAAA;AAAA,QACC,CAAC,CAAA,KACC,CAAA,EAAG,MAAM,CAAA,EAAG,CAAA,EAAG,IAAI,CAAA,IAAA,CAAM,CAAC,IAAI,SAAA,CAAU,MAAA,CAAO,CAAC,CAAA,EAAG,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,CAAC,EAAE,CAAC,CAAA;AAAA,OACtE,CACC,IAAA,CAAK,GAAG,CAAC,CAAA,CAAA,CAAA;AAAA,IACd;AAAA,IACA;AACE,MAAA,OAAO,MAAA,CAAO,IAAA,EAAM,OAAO,KAAK,CAAA;AAAA;AAEtC;AAEA,SAAS,KAAA,CAAM,MAAc,IAAA,EAAsB;AAEjD,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,IAAA,CAAK,QAAQ,CAAA,EAAA,EAAK;AACpC,IAAA,MAAM,IAAA,GAAO,IAAA,CAAK,UAAA,CAAW,CAAC,CAAA;AAC9B,IAAA,IAAI,IAAA,IAAQ,KAAA,IAAU,IAAA,IAAQ,KAAA,EAAQ;AACpC,MAAA,MAAM,IAAA,GAAO,IAAA,CAAK,UAAA,CAAW,CAAA,GAAI,CAAC,CAAA;AAClC,MAAA,IAAI,IAAA,IAAQ,KAAA,IAAU,IAAA,IAAQ,KAAA,EAAQ;AACpC,QAAA,CAAA,EAAA;AACA,QAAA;AAAA,MACF;AACA,MAAA,MAAA,CAAO,IAAA,EAAM,CAAA,oBAAA,EAAuB,CAAC,CAAA,CAAE,CAAA;AAAA,IACzC;AACA,IAAA,IAAI,IAAA,IAAQ,SAAU,IAAA,IAAQ,KAAA;AAC5B,MAAA,MAAA,CAAO,IAAA,EAAM,CAAA,oBAAA,EAAuB,CAAC,CAAA,CAAE,CAAA;AAAA,EAC3C;AACA,EAAA,OAAO,IAAA,CAAK,UAAU,IAAI,CAAA;AAC5B;;;AC9LA,IAAM,MAAA,GAAS,UAAA;AAGR,SAAS,aAAa,QAAA,EAAyC;AACpE,EAAA,OAAO,MAAA,GAAS,OAAA,CAAQ,UAAA,CAAW,QAAQ,CAAC,CAAA;AAC9C;AASA,SAAS,WAAW,KAAA,EAAwB;AAC1C,EAAA,OAAO,IAAA,CAAK,SAAA,CAAU,QAAA,CAAS,KAAK,CAAC,CAAA,IAAK,MAAA;AAC5C;AAEA,SAAS,SAAS,KAAA,EAAyB;AACzC,EAAA,IAAI,MAAM,OAAA,CAAQ,KAAK,GAAG,OAAO,KAAA,CAAM,IAAI,QAAQ,CAAA;AACnD,EAAA,IAAI,KAAA,IAAS,OAAO,KAAA,KAAU,QAAA,EAAU;AACtC,IAAA,MAAM,MAA+B,EAAC;AACtC,IAAA,KAAA,MAAW,OAAO,MAAA,CAAO,IAAA,CAAK,KAAgC,CAAA,CAAE,MAAK,EAAG;AACtE,MAAA,MAAM,MAAA,GAAU,MAAkC,GAAG,CAAA;AACrD,MAAA,IAAI,WAAW,MAAA,EAAW,GAAA,CAAI,GAAG,CAAA,GAAI,SAAS,MAAM,CAAA;AAAA,IACtD;AACA,IAAA,OAAO,GAAA;AAAA,EACT;AACA,EAAA,OAAO,KAAA;AACT;AAMO,SAAS,QAAQ,IAAA,EAAsB;AAE5C,EAAA,IAAI,EAAA,GAAK,UAAA;AACT,EAAA,IAAI,EAAA,GAAK,UAAA;AACT,EAAA,KAAA,IAAS,CAAA,GAAI,CAAA,EAAG,CAAA,GAAI,IAAA,CAAK,QAAQ,CAAA,EAAA,EAAK;AACpC,IAAA,EAAA,GAAA,CAAM,EAAA,GAAK,IAAA,CAAK,UAAA,CAAW,CAAC,CAAA,MAAO,CAAA;AAGnC,IAAA,MAAM,YAAY,EAAA,GAAK,GAAA;AACvB,IAAA,MAAM,KAAA,GAAQ,IAAA,CAAK,KAAA,CAAM,SAAA,GAAY,UAAW,CAAA;AAChD,IAAA,MAAM,QAAQ,SAAA,KAAc,CAAA;AAC5B,IAAA,EAAA,GAAM,IAAA,CAAK,IAAA,CAAK,EAAA,EAAI,GAAK,CAAA,GAAI,KAAK,IAAA,CAAK,EAAA,EAAI,GAAK,CAAA,GAAI,KAAA,KAAW,CAAA;AAC/D,IAAA,EAAA,GAAK,KAAA;AAAA,EACP;AACA,EAAA,OAAO,KAAA,CAAM,EAAE,CAAA,GAAI,KAAA,CAAM,EAAE,CAAA;AAC7B;AAEA,SAAS,MAAM,CAAA,EAAmB;AAChC,EAAA,OAAA,CAAQ,MAAM,CAAA,EAAG,QAAA,CAAS,EAAE,CAAA,CAAE,QAAA,CAAS,GAAG,GAAG,CAAA;AAC/C","file":"chunk-LDECTDPU.cjs","sourcesContent":["import type { OUIActionApproval, OUIEffectKind } from \"./approval.js\";\n\n/**\n * OUI — Open UI Specification\n *\n * The machine-readable contract for agent-controllable user interfaces.\n * Any UI application that implements this interface can be controlled by\n * any OUI-compatible agent runtime.\n */\n\n/** JSON Schema type (subset used by OUI) */\nexport type JSONSchema = {\n  type?: string | string[];\n  properties?: Record<string, JSONSchema>;\n  items?: JSONSchema;\n  required?: string[];\n  enum?: (string | number | boolean)[];\n  description?: string;\n  default?: unknown;\n  oneOf?: JSONSchema[];\n  anyOf?: JSONSchema[];\n  allOf?: JSONSchema[];\n  const?: unknown;\n  minimum?: number;\n  maximum?: number;\n  minLength?: number;\n  maxLength?: number;\n  pattern?: string;\n  format?: string;\n  additionalProperties?: boolean | JSONSchema;\n};\n\n/**\n * A Surface is a controllable boundary within an application.\n * It declares what an agent can do (actions), what it can observe (state),\n * and when it's available (activation conditions).\n *\n * Think of it as \"one page\" or \"one feature\" of an application, described\n * in a way that an agent can understand and operate.\n */\nexport interface OUISurface {\n  /** Unique identifier for this surface (e.g., 'dataviz-wizard', 'document-editor') */\n  id: string;\n\n  /** Human-readable name */\n  name: string;\n\n  /** Description of what this surface does — included in agent context */\n  description: string;\n\n  /** Version of this surface's contract (semver) */\n  version?: string;\n\n  /** Actions the agent can invoke on this surface */\n  actions: OUIAction[];\n\n  /** Observable state the agent can read */\n  observations?: OUIObservation[];\n\n  /** When this surface is active/available */\n  activation?: OUIActivation;\n\n  /** Additional metadata for agent context */\n  metadata?: Record<string, unknown>;\n}\n\n/**\n * Declarative polling configuration for async actions.\n * The OUI runtime in the browser manages the polling lifecycle automatically\n * after the action handler returns its dispatch result.\n */\nexport interface OUIActionPolling {\n  /** How often to check (milliseconds) */\n  intervalMs: number;\n\n  /** Max poll attempts before giving up (optional) */\n  maxAttempts?: number;\n\n  /** Max total duration before giving up in ms (alternative to maxAttempts) */\n  maxDurationMs?: number;\n\n  /**\n   * Subscribe to a realtime event instead of polling.\n   * If provided, the runtime listens for this event instead of using setInterval.\n   * More efficient when realtime infrastructure exists.\n   */\n  subscribe?: {\n    /** Event name to listen for */\n    event: string;\n    /**\n     * Filter to match the event. Values prefixed with '$dispatchResult.'\n     * are resolved from the handler's return value.\n     * Example: { jobId: '$dispatchResult.jobId' }\n     */\n    filter?: Record<string, unknown>;\n  };\n}\n\n/**\n * An Action is a single operation an agent can perform on a surface.\n * Each action becomes a \"tool\" that the LLM can call.\n *\n * The action's handler executes in the UI (or API) and returns a result\n * that the agent sees as the tool's output.\n */\nexport interface OUIAction {\n  /** Unique action identifier (becomes the tool name) */\n  id: string;\n\n  /** Human-readable description — this is what the LLM reads to decide when to use it */\n  description: string;\n\n  /** The action's name as a person reads it, for a confirmation the user approves. */\n  title?: string;\n\n  /**\n   * What using the action does. A `transaction` runs only on the user's\n   * approval of the exact request (see `requiresApproval`). Undeclared counts\n   * as a write.\n   */\n  effect?: OUIEffectKind;\n\n  /** JSON Schema for the action's input parameters */\n  input: JSONSchema;\n\n  /** JSON Schema for the action's return value (optional — agent still gets the result) */\n  output?: JSONSchema;\n\n  /**\n   * Destructive: the action removes or replaces something the person made.\n   * Unless its effect only reads, it runs only on the user's approval of the\n   * exact request, which the surface runtime checks before it runs.\n   */\n  confirm?: boolean;\n\n  /** If true, the action is async — returns immediately with a job/tracking ID */\n  async?: boolean;\n\n  /** Declarative polling configuration — runtime manages the polling lifecycle after dispatch */\n  polling?: OUIActionPolling;\n\n  /** Human-readable hint about when this action is appropriate to use */\n  usage?: string;\n\n  /**\n   * Preconditions that should be met before this action is called.\n   * Expressed as a description (for the LLM) not as executable logic.\n   */\n  preconditions?: string;\n\n  /** Estimated duration hint (e.g., \"instant\", \"2-5s\", \"30-120s\") */\n  estimatedDuration?: string;\n\n  /** Tags for categorization */\n  tags?: string[];\n}\n\n/**\n * An Observation is a piece of application state that the agent can read.\n * Observations are pushed to the agent in real-time as the app state changes,\n * giving it situational awareness without needing screenshots.\n */\nexport interface OUIObservation {\n  /** Unique identifier for this observation */\n  id: string;\n\n  /** Description of what this observation represents */\n  description: string;\n\n  /** JSON Schema for the observation's value */\n  schema: JSONSchema;\n\n  /** How frequently this observation updates */\n  updateFrequency?: \"realtime\" | \"on-change\" | \"polling\";\n}\n\n/**\n * Activation conditions — when a surface is available to the agent.\n * A surface might only be active on a specific page, when certain\n * entities are loaded, or under specific application states.\n */\nexport interface OUIActivation {\n  /** URL path(s) where this surface is active */\n  routes?: string | string[];\n\n  /** Entity type/ID that must be present for this surface to activate */\n  entity?: {\n    type: string;\n    id?: string;\n  };\n\n  /** Custom predicate description (for documentation, not execution) */\n  condition?: string;\n}\n\n// ─── Protocol Types ──────────────────────────────────────────────────────────\n\n/**\n * A request from the agent runtime to execute an action on a surface.\n */\nexport interface OUIActionRequest {\n  /** Unique request ID for correlation */\n  requestId: string;\n\n  /** Which surface this request targets */\n  surfaceId: string;\n\n  /** Which action to invoke */\n  actionId: string;\n\n  /** The action's input parameters (validated against the action's input schema) */\n  params: Record<string, unknown>;\n\n  /** Timestamp of the request */\n  timestamp: number;\n\n  /**\n   * The user's approval this request runs on, for an action that needs one.\n   * The surface runtime runs such an action only when this matches a grant\n   * the tab received from the user's own confirmation, for exactly `params`.\n   */\n  approval?: OUIActionApproval;\n\n  /**\n   * The `surfacesHash` of the surfaces the agent runtime already holds for\n   * this client: from its snapshot, or from an earlier result. A client whose\n   * surfaces still hash to this answers without `surfaces`, so a result\n   * carries the client's surfaces only when they changed (§7.3.4).\n   */\n  knownSurfaces?: string;\n}\n\n/**\n * Why a client's answer is shorter than the result it produced: the receiving\n * side refused the full answer (too large, or otherwise not accepted), so the\n * client sent it again without the parts named in `omitted`. The action's own\n * outcome — `success`, `error`, and `data` unless omitted — is still the one\n * that happened (§7.3.6).\n */\nexport interface OUIResultDelivery {\n  trimmed: true;\n  /** What the receiving side said when it refused the full answer. */\n  reason: string;\n  /** The fields left out of this answer. */\n  omitted: Array<\"surfaces\" | \"observations\" | \"data\">;\n}\n\n/**\n * The result of an action execution, returned from the surface to the agent.\n */\nexport interface OUIActionResult {\n  /** Correlates to the request */\n  requestId: string;\n\n  /** Whether the action succeeded */\n  success: boolean;\n\n  /** The action's return data (if successful) */\n  data?: unknown;\n\n  /** Error information (if failed) */\n  error?: {\n    code: string;\n    message: string;\n    details?: unknown;\n  };\n\n  /** Progress indicator for interim polling results (0-100) */\n  progress?: number;\n\n  /** Whether this is an interim update (polling still in progress) or final */\n  interim?: boolean;\n\n  /** Duration of execution in milliseconds */\n  durationMs?: number;\n\n  /** Timestamp of the result */\n  timestamp: number;\n\n  /**\n   * The surfaces active on the client once the action's effects settled.\n   *\n   * An action can change what the agent is able to do next: navigating\n   * unmounts one page's surfaces and mounts another's. Without this, the agent\n   * would act on the capability set it had before the action, which is the\n   * set the action just replaced.\n   */\n  surfaces?: OUISurface[];\n\n  /** Latest observation values per surface once the action's effects settled. */\n  observations?: OUIObservationSnapshot;\n\n  /**\n   * The hash of the client's surfaces once the action's effects settled\n   * (`surfacesHash`). Always present from a client that sends it; `surfaces`\n   * is then present only when this differs from the request's\n   * `knownSurfaces`, and an agent runtime that holds surfaces with this hash\n   * keeps using them.\n   */\n  surfacesHash?: string;\n\n  /** Present when this answer was trimmed to be delivered (§7.3.6). */\n  delivery?: OUIResultDelivery;\n\n  /**\n   * False when the client's deadline passed before its UI settled, so\n   * `surfaces` and `observations` may still be changing. Absent or true\n   * otherwise.\n   */\n  settled?: boolean;\n}\n\n/** Latest observation values, keyed by surface id and then observation id. */\nexport type OUIObservationSnapshot = Record<string, Record<string, unknown>>;\n\n/**\n * What a client can do right now: the surfaces it has mounted and their latest\n * observation values. A client sends this to its agent runtime (for example,\n * with each turn), and returns it on every action result.\n */\nexport interface OUISurfaceSnapshot {\n  surfaces: OUISurface[];\n  observations: OUIObservationSnapshot;\n  /**\n   * `surfacesHash(surfaces)`: what an agent runtime sends back as a request's\n   * `knownSurfaces`, so the client's answer need not repeat surfaces the\n   * runtime already holds.\n   */\n  surfacesHash?: string;\n}\n\n/**\n * An observation update pushed from the surface to the agent.\n */\nexport interface OUIObservationUpdate {\n  /** Which surface this observation belongs to */\n  surfaceId: string;\n\n  /** Which observation updated */\n  observationId: string;\n\n  /** The new value */\n  value: unknown;\n\n  /** Timestamp of the update */\n  timestamp: number;\n}\n\n/**\n * Surface registration event — sent when a surface becomes active.\n */\nexport interface OUISurfaceRegistration {\n  /** The full surface manifest */\n  surface: OUISurface;\n\n  /** Timestamp of registration */\n  timestamp: number;\n}\n\n/**\n * Surface deregistration event — sent when a surface becomes inactive.\n */\nexport interface OUISurfaceDeregistration {\n  /** Which surface is being deregistered */\n  surfaceId: string;\n\n  /** Timestamp */\n  timestamp: number;\n}\n\n// ─── Transport Protocol Events ───────────────────────────────────────────────\n\n/**\n * All protocol events exchanged between agent runtime and surfaces.\n */\nexport type OUIProtocolEvent =\n  | { type: \"surface:register\"; payload: OUISurfaceRegistration }\n  | { type: \"surface:deregister\"; payload: OUISurfaceDeregistration }\n  | { type: \"action:request\"; payload: OUIActionRequest }\n  | { type: \"action:result\"; payload: OUIActionResult }\n  | { type: \"observation:update\"; payload: OUIObservationUpdate };\n\n/**\n * Protocol event type strings (for type guards and routing).\n */\nexport const OUI_PROTOCOL_EVENTS = {\n  SURFACE_REGISTER: \"surface:register\",\n  SURFACE_DEREGISTER: \"surface:deregister\",\n  ACTION_REQUEST: \"action:request\",\n  ACTION_RESULT: \"action:result\",\n  OBSERVATION_UPDATE: \"observation:update\",\n} as const;\n","/**\n * Approvals: an irreversible action runs only on an approval the user gave,\n * bound to the exact request.\n *\n * An agent runtime stops at an action that needs approval and shows the user\n * a confirmation. Its approval store issues a single-use grant when the user\n * confirms, and the request that then reaches the tab carries `approval:\n * { approvalId, argsHash }`. The surface runtime runs the action only when\n * that matches a grant this tab received from the user's own confirmation.\n *\n * Everything that checks a request computes the same args hash: SHA-256 over\n * the RFC 8785 (JCS) canonical JSON of its params, lowercase hex. The\n * published vectors (`oui-spec/approval-vectors.json`) hold every\n * implementation, in any language, to it.\n */\n\n/**\n * What using an action does. One vocabulary for every kind of action, so an\n * action is told apart by what it changes:\n *\n * | Effect | What it changes | Access |\n * |---|---|---|\n * | `view`, `selection`, `navigate`, `open` | What is shown | read |\n * | `edit` | The document, one undo step | write |\n * | `file` | Imports or exports a file | write |\n * | `mutate` | Backend data, through an API operation | write |\n * | `job` | Starts work that outlives the call | write |\n * | `transaction` | An irreversible external act: an order, a payment, a send, a publish | write, approved |\n */\nexport type OUIEffectKind =\n  | \"view\"\n  | \"selection\"\n  | \"navigate\"\n  | \"open\"\n  | \"edit\"\n  | \"file\"\n  | \"mutate\"\n  | \"job\"\n  | \"transaction\";\n\n/** Every effect, in the order of the table above. */\nexport const OUI_EFFECT_KINDS: readonly OUIEffectKind[] = [\n  \"view\",\n  \"selection\",\n  \"navigate\",\n  \"open\",\n  \"edit\",\n  \"file\",\n  \"mutate\",\n  \"job\",\n  \"transaction\",\n];\n\n/** Whether an effect only changes what is shown, or changes something. */\nexport const OUI_EFFECT_ACCESS: Readonly<\n  Record<OUIEffectKind, \"read\" | \"write\">\n> = {\n  view: \"read\",\n  selection: \"read\",\n  navigate: \"read\",\n  open: \"read\",\n  edit: \"write\",\n  file: \"write\",\n  mutate: \"write\",\n  job: \"write\",\n  transaction: \"write\",\n};\n\n/** `read` or `write`. An action that declares no effect is a `write`: nothing says it only shows. */\nexport function effectAccess(\n  effect: OUIEffectKind | undefined,\n): \"read\" | \"write\" {\n  return effect === undefined ? \"write\" : OUI_EFFECT_ACCESS[effect];\n}\n\n/**\n * Whether running an action needs the user's approval of the exact request: a\n * `transaction` always, and a `write` declared destructive. An agent\n * runtime's policy may require it of more; nothing waives these.\n */\nexport function requiresApproval(\n  effect: OUIEffectKind | undefined,\n  destructive?: boolean,\n): boolean {\n  if (effect === \"transaction\") return true;\n  return !!destructive && effectAccess(effect) === \"write\";\n}\n\n/** What a request for an approved action carries. */\nexport interface OUIActionApproval {\n  approvalId: string;\n  /** `argsHash(params)` of the request the user approved. */\n  argsHash: string;\n}\n\n/** A grant this tab holds: the user approved this request here. */\nexport interface OUIApprovalGrant extends OUIActionApproval {\n  /** Epoch ms after which the grant no longer admits anything. */\n  expiresAt: number;\n}\n\n/** An args hash: 64 lowercase hex digits. */\nexport const ARGS_HASH_PATTERN = /^[0-9a-f]{64}$/;\n\n/**\n * The RFC 8785 canonical form of a JSON value:\n * - object members sorted by their names' UTF-16 code units, with no\n *   whitespace;\n * - numbers in ECMAScript's shortest round-trip form (`-0` is `0`);\n * - strings escaped as ECMAScript's `JSON.stringify` escapes them.\n *\n * The value must be I-JSON (RFC 7493): anything JSON cannot carry — `NaN`,\n * infinities, `undefined` outside an object member, a bigint, a function, a\n * symbol, a class instance, or a string with a lone surrogate — is refused\n * rather than hashed as something the other end never receives. An object\n * member whose value is `undefined` is left out, as it is on the wire.\n */\nexport function canonicalJson(value: unknown): string {\n  return serialize(value, \"$\");\n}\n\n/** SHA-256 of the canonical JSON of a request's params, lowercase hex. Runs wherever WebCrypto does. */\nexport async function argsHash(params: unknown): Promise<string> {\n  const canonical = canonicalJson(params);\n  const subtle = await webCrypto();\n  const digest = await subtle.digest(\n    \"SHA-256\",\n    new TextEncoder().encode(canonical),\n  );\n  let hex = \"\";\n  for (const byte of new Uint8Array(digest))\n    hex += byte.toString(16).padStart(2, \"0\");\n  return hex;\n}\n\n/**\n * WebCrypto: global in browsers and Node 19+; Node 18 has it only on\n * `node:crypto`, imported here by a specifier bundlers leave alone.\n */\nasync function webCrypto(): Promise<SubtleCrypto> {\n  const global = globalThis.crypto?.subtle;\n  if (global) return global;\n  const nodeCrypto = \"node:crypto\";\n  try {\n    const mod = (await import(/* @vite-ignore */ nodeCrypto)) as {\n      webcrypto?: { subtle?: SubtleCrypto };\n    };\n    if (mod.webcrypto?.subtle) return mod.webcrypto.subtle;\n  } catch {\n    // Not Node: fall through to the error below.\n  }\n  throw new Error(\n    \"[OUI] argsHash needs WebCrypto (crypto.subtle), which this runtime does not provide\",\n  );\n}\n\nfunction refuse(path: string, what: string): never {\n  throw new TypeError(`[OUI] ${path} is not I-JSON: ${what}`);\n}\n\nfunction serialize(value: unknown, path: string): string {\n  switch (typeof value) {\n    case \"string\":\n      return quote(value, path);\n    case \"number\":\n      if (!Number.isFinite(value)) refuse(path, String(value));\n      // ECMAScript's Number-to-string is RFC 8785's number form, and prints -0 as 0.\n      return JSON.stringify(value);\n    case \"boolean\":\n      return value ? \"true\" : \"false\";\n    case \"object\": {\n      if (value === null) return \"null\";\n      if (Array.isArray(value)) {\n        return `[${value.map((item, i) => serialize(item, `${path}[${i}]`)).join(\",\")}]`;\n      }\n      const proto = Object.getPrototypeOf(value);\n      if (proto !== Object.prototype && proto !== null) {\n        refuse(path, `a ${proto?.constructor?.name ?? \"non-plain\"} object`);\n      }\n      const record = value as Record<string, unknown>;\n      // Default string order compares UTF-16 code units, which is RFC 8785's order.\n      const keys = Object.keys(record)\n        .filter((k) => record[k] !== undefined)\n        .sort();\n      return `{${keys\n        .map(\n          (k) =>\n            `${quote(k, `${path} key`)}:${serialize(record[k], `${path}.${k}`)}`,\n        )\n        .join(\",\")}}`;\n    }\n    default:\n      return refuse(path, typeof value);\n  }\n}\n\nfunction quote(text: string, path: string): string {\n  // I-JSON strings are well-formed Unicode: a lone surrogate has no UTF-8 form.\n  for (let i = 0; i < text.length; i++) {\n    const unit = text.charCodeAt(i);\n    if (unit >= 0xd800 && unit <= 0xdbff) {\n      const next = text.charCodeAt(i + 1);\n      if (next >= 0xdc00 && next <= 0xdfff) {\n        i++;\n        continue;\n      }\n      refuse(path, `a lone surrogate at ${i}`);\n    }\n    if (unit >= 0xdc00 && unit <= 0xdfff)\n      refuse(path, `a lone surrogate at ${i}`);\n  }\n  return JSON.stringify(text);\n}\n","/**\n * The identity of a set of surfaces, for an answer that need not repeat them\n * (§7.3.4).\n *\n * A client's surfaces are what an agent may do; every result used to carry\n * them all, so each answer weighed what the page's whole manifest weighs —\n * on a studio page with a hundred and fifty actions, about 265 KB for a click.\n * A relay that caps a frame then drops whole answers, and the agent hears\n * nothing. With this hash the agent runtime says which surfaces it holds\n * (`knownSurfaces`), and the client sends its surfaces only when they differ.\n *\n * The hash is of the surfaces' canonical JSON (object keys sorted), so it does\n * not depend on the order a manifest's fields were written in, and is the\n * same wherever it is computed. It is a 64-bit FNV-1a over the JSON's UTF-16\n * code units, kept as two 32-bit halves: not a security measure — the agent\n * runtime is told the surfaces by the same client that hashes them — but\n * collision-resistant enough that two different capability sets of one page\n * never share one.\n */\nimport type { OUISurface } from \"./types.js\";\n\n/** The prefix names the algorithm, so a different one is a different hash rather than a false match. */\nconst PREFIX = \"fnv1a64:\";\n\n/** `surfaces`' hash, as a result's `surfacesHash` and a request's `knownSurfaces` carry it. */\nexport function surfacesHash(surfaces: readonly OUISurface[]): string {\n  return PREFIX + fnv1a64(sortedJson(surfaces));\n}\n\n/**\n * JSON with every object's keys sorted, and what JSON cannot carry dropped as\n * JSON.stringify drops it. Not approval.ts's `canonicalJson`, which refuses\n * such values on purpose (an approval must hash exactly what crosses the\n * wire): a snapshot is taken on every answer, and must never throw on a\n * manifest that carries, say, an `undefined` in an array.\n */\nfunction sortedJson(value: unknown): string {\n  return JSON.stringify(sortKeys(value)) ?? \"null\";\n}\n\nfunction sortKeys(value: unknown): unknown {\n  if (Array.isArray(value)) return value.map(sortKeys);\n  if (value && typeof value === \"object\") {\n    const out: Record<string, unknown> = {};\n    for (const key of Object.keys(value as Record<string, unknown>).sort()) {\n      const member = (value as Record<string, unknown>)[key];\n      if (member !== undefined) out[key] = sortKeys(member);\n    }\n    return out;\n  }\n  return value;\n}\n\n/**\n * 64-bit FNV-1a (offset 0xcbf29ce484222325, prime 0x100000001b3) in two 32-bit\n * halves, so it runs without BigInt and stays fast on a few hundred KB.\n */\nexport function fnv1a64(text: string): string {\n  // The 64-bit offset basis, as high and low 32-bit halves.\n  let hi = 0xcbf29ce4;\n  let lo = 0x84222325;\n  for (let i = 0; i < text.length; i++) {\n    lo = (lo ^ text.charCodeAt(i)) >>> 0;\n    // Multiply (hi:lo) by the prime 0x00000100_000001b3, keeping 64 bits:\n    // lo*0x1b3, and hi*0x1b3 + lo*0x100 carried into the high half.\n    const loProduct = lo * 0x1b3;\n    const carry = Math.floor(loProduct / 0x100000000);\n    const newLo = loProduct >>> 0;\n    hi = (Math.imul(hi, 0x1b3) + Math.imul(lo, 0x100) + carry) >>> 0;\n    lo = newLo;\n  }\n  return hex32(hi) + hex32(lo);\n}\n\nfunction hex32(n: number): string {\n  return (n >>> 0).toString(16).padStart(8, \"0\");\n}\n"]}