@77-zhike/app-sdk 0.2.0-d7b1.2 → 0.2.0-d7b1.20

package/src/toolchain/real-build.js

@@ -1,17 +1,20 @@
+import { publicComponentNames } from '../ui/components.generated.js';
 import { createRequire } from "node:module";
 import { createHash } from "node:crypto";
-import { mkdir, rm, writeFile } from "node:fs/promises";
+import { mkdir, readFile, rm, writeFile } from "node:fs/promises";
 import { dirname, relative, resolve, sep } from "node:path";
 import { build } from "esbuild";
 import ts from "typescript";
 
+import { agentManifest, stripPath } from "./agents/discovery.js";
 import { serializeWebhookResponse } from "./webhook-response.js";
 
 import { TOOLING_VERSION } from "../config.js";
 import { ZhikeCliError } from "../errors.js";
 import { readProjectBinding } from "../project-binding.js";
 import { canonicalJsonBytes } from "./canonical-json.js";
-import { discoverAppSources } from "./source-discovery.js";
+import { discoverAppSources, validateImports } from "./source-discovery.js";
+import { createDependencyPolicyPlugin } from "./dependency-policy.js";
 import { createTransportTar } from "./transport-tar.js";
 
 export const APP_BUNDLE_PACKAGE_FORMAT = "zhike.app-bundle.v1";
@@ -32,18 +35,21 @@ export async function buildAppBundle({
 } = {}) {
   await readProjectBinding(projectDirectory, expectedEnvironment);
   const sources = await discoverAppSources(projectDirectory);
+  let clientBytes, serverBytes;
+  try {
+    clientBytes = sources.frontendExtensions.length > 0
+      ? await buildRemoteReactClient(projectDirectory, sources, development) : null;
+    serverBytes = sources.lifecycleEvents.length > 0 ||
+      sources.serverFunctions.length > 0 ||
+      sources.webhookHandlers.length > 0 ||
+      sources.workflowSteps.length > 0 ||
+      sources.workflowTriggers.length > 0 || sources.agents.length > 0 || sources.actions.length > 0
+      ? await buildServerArtifact(projectDirectory, sources) : null;
+  } catch (error) {
+    const policyError = error.errors?.find(item => item.detail instanceof ZhikeCliError)?.detail;
+    throw policyError ?? error;
+  }
   await assertTypeScriptProgram(projectDirectory, sources);
-
-  const clientBytes =
-    sources.frontendExtensions.length > 0
-      ? await buildRemoteReactClient(projectDirectory, sources, development)
-      : null;
-  const serverBytes =
-    sources.lifecycleEvents.length > 0 ||
-    sources.serverFunctions.length > 0 ||
-    sources.webhookHandlers.length > 0
-      ? await buildServerArtifact(projectDirectory, sources)
-      : null;
   const manifest = createManifest({
     clientBytes,
     serverBytes,
@@ -90,13 +96,15 @@ export async function buildAppBundle({
   });
 }
 
-async function assertTypeScriptProgram(projectDirectory, { sourceFiles, serverFunctions }) {
+async function assertTypeScriptProgram(projectDirectory, { sourceFiles, serverFunctions, agents, actions }) {
   const paths = {
     "@77-zhike/app-sdk": [resolve(SDK_SOURCE_ROOT, "index.d.ts")],
     "@77-zhike/app-sdk/client": [resolve(SDK_SOURCE_ROOT, "client", "index.d.ts")],
     "@77-zhike/app-sdk/server": [resolve(SDK_SOURCE_ROOT, "server", "index.d.ts")],
     "@77-zhike/app-sdk/ui": [resolve(SDK_SOURCE_ROOT, "ui", "index.d.ts")],
     "@77-zhike/app-sdk/forms": [resolve(SDK_SOURCE_ROOT, "forms", "index.d.ts")],
+    "@77-zhike/app-sdk/jsx-runtime": [resolve(SDK_SOURCE_ROOT, "jsx-runtime.d.ts")],
+    "@77-zhike/app-sdk/jsx-dev-runtime": [resolve(SDK_SOURCE_ROOT, "jsx-dev-runtime.d.ts")],
     "react": [resolve(dirname(createRequire(import.meta.url).resolve("@types/react/package.json")), "index.d.ts")],
     "react/jsx-runtime": [resolve(dirname(createRequire(import.meta.url).resolve("@types/react/package.json")), "jsx-runtime.d.ts")],
     "react/jsx-dev-runtime": [resolve(dirname(createRequire(import.meta.url).resolve("@types/react/package.json")), "jsx-dev-runtime.d.ts")],
@@ -104,6 +112,7 @@ async function assertTypeScriptProgram(projectDirectory, { sourceFiles, serverFu
   const options = {
     baseUrl: projectDirectory,
     jsx: ts.JsxEmit.ReactJSX,
+    jsxImportSource: "@77-zhike/app-sdk",
     lib: ["lib.es2022.d.ts", "lib.dom.d.ts"],
     module: ts.ModuleKind.ESNext,
     moduleResolution: ts.ModuleResolutionKind.Bundler,
@@ -117,11 +126,16 @@ async function assertTypeScriptProgram(projectDirectory, { sourceFiles, serverFu
   const rootNames = sourceFiles.map((path) => resolve(projectDirectory, "src", path));
   // 仅供 TypeScript 检查，不落盘、不进 Artifact；复用原包装的参数/结果合同。
   const contractPath = resolve(projectDirectory, ".zhike/server-function-contracts.ts");
+  const handlers = [
+    ...serverFunctions.map(item => ({ ...item, member: '' })),
+    ...agents.flatMap(agent => agent.tools.map(item => ({ ...item, member: '.execute' }))),
+    ...actions.map(item => ({...item, member: '.execute'})),
+  ];
   const contractSource = [
     'import type { ServerFunction } from "@77-zhike/app-sdk/server";',
-    ...serverFunctions.flatMap(({ relativePath }, index) => [
+    ...handlers.flatMap(({ relativePath, member }, index) => [
       `import handler${index} from ${JSON.stringify(`../src/${relativePath.slice(0, -3)}`)};`,
-      `type Contract${index} = ServerFunction<Parameters<typeof handler${index}>, Awaited<ReturnType<typeof handler${index}>>>;`,
+      `type Contract${index} = ServerFunction<Parameters<typeof handler${index}${member}>, Awaited<ReturnType<typeof handler${index}${member}>>>;`,
     ]),
   ].join("\n");
   const host = ts.createCompilerHost(options);
@@ -130,14 +144,14 @@ async function assertTypeScriptProgram(projectDirectory, { sourceFiles, serverFu
     resolve(fileName) === contractPath
       ? ts.createSourceFile(fileName, contractSource, languageVersion, true)
       : getSourceFile(fileName, languageVersion, onError, shouldCreateNewSourceFile);
-  if (serverFunctions.length) rootNames.push(contractPath);
+  if (handlers.length) rootNames.push(contractPath);
   const program = ts.createProgram({ rootNames, options, host });
   const diagnostics = ts.getPreEmitDiagnostics(program);
   if (diagnostics.length === 0) return;
   const diagnostic = diagnostics[0];
-  const contractLine = diagnostic.file?.fileName === contractPath
+  const contractLine = diagnostic.file && resolve(diagnostic.file.fileName) === contractPath
     ? diagnostic.file.getLineAndCharacterOfPosition(diagnostic.start || 0).line : -1;
-  const contractOwner = contractLine > 0 ? serverFunctions[Math.floor((contractLine - 1) / 2)] : null;
+  const contractOwner = contractLine > 0 ? handlers[Math.floor((contractLine - 1) / 2)] : null;
   const location = contractOwner ? `src/${contractOwner.relativePath}（参数/返回类型）` : diagnostic.file
     ? `${relative(projectDirectory, diagnostic.file.fileName).split(sep).join("/")}:${
         diagnostic.file.getLineAndCharacterOfPosition(diagnostic.start || 0).line + 1
@@ -156,13 +170,16 @@ async function buildRemoteReactClient(projectDirectory, sources, development) {
     `${JSON.stringify(item.key)}: extension${i}`).join(",");
   const result = await build({
     absWorkingDir: projectDirectory, bundle: true, charset: "utf8", format: "cjs",
-    legalComments: "none", logLevel: "silent", minify: !development, platform: "browser",
+    legalComments: "none", logLevel: "silent", minify: true, platform: "browser",
     external: ["@77-zhike/app-sdk/runtime", "react", "react/jsx-runtime", "react/jsx-dev-runtime", "@77-zhike/app-sdk/client", "@77-zhike/app-sdk/ui", "@77-zhike/app-sdk/forms"],
-    plugins: [createSdkBuildPlugin(projectDirectory, sources, "remote-client")],
+    plugins: [createSdkBuildPlugin(projectDirectory, sources, "remote-client"),
+      await createDependencyPolicyPlugin(projectDirectory, "client", validateImports)],
     sourcemap: development ? "inline" : false,
     banner: { js: 'export function createClientApp(platformModules) {\nconst module = { exports: {} };\nconst exports = module.exports;\nconst require = name => { if (!Object.hasOwn(platformModules, name)) throw new Error("runtime_module_unavailable"); return platformModules[name]; };\nconst Promise = require("@77-zhike/app-sdk/runtime").Promise;' },
     footer: { js: 'return module.exports;\n}' },
-    jsx: "automatic", jsxDev: development,
+    // dev 只增加源码映射；编译语义与正式发布一致，不能依赖宿主的 React 开发构建。
+    jsx: "automatic", jsxDev: false, jsxImportSource: "@77-zhike/app-sdk",
+    define: { "process.env.NODE_ENV": '"production"' },
     stdin: { contents: `${imports}\nexport const extensions = Object.freeze({${entries}});`, loader: "tsx", resolveDir: projectDirectory, sourcefile: "zhike-client-entry.tsx" },
     // 原生 await 不经过 Promise.then；降级后的 helper 必须使用工厂内受管 Promise。
     target: "es2022", supported: { "async-await": false, "async-generator": false }, treeShaking: true, write: false,
@@ -178,7 +195,12 @@ async function buildServerArtifact(projectDirectory, sources) {
   const hasConnectionLifecycle = sources.lifecycleEvents.some(
     ({ event }) => event === "connection-added" || event === "connection-removed",
   );
+  const tools = [...sources.agents.flatMap(agent => agent.tools), ...sources.actions];
+  const toolImports = tools.map((tool, index) => `import agentTool${index} from "./src/${tool.relativePath}";`);
+  const agentToolDeclarations = `const agentTools = new Map([${tools.map((tool, index) => `[${JSON.stringify(tool.entry)}, agentTool${index}]`).join(",")}]);`;
+  const agentToolDispatch = `  if (request.kind === "agent_tool" || request.kind === "app_action") { const prefix = request.kind === "app_action" ? "action/" : "agent-tool/"; const tool = typeof request.entryKey === "string" && request.entryKey.startsWith(prefix) ? agentTools.get(request.entryKey) : null; if (!tool) throw new Error("runtime_agent_tool_not_found"); return tool.execute(Object.freeze({ ...request.input })); }\n`;
   const imports = [
+    ...toolImports,
     ...(hasConnectionLifecycle
       ? ['import { getWorkspaceConnection as getLifecycleConnection } from "@77-zhike/app-sdk/server";']
       : []),
@@ -194,6 +216,14 @@ async function buildServerArtifact(projectDirectory, sources) {
       (definition, index) =>
         `import webhookHandler${index} from "./src/${definition.relativePath}";`,
     ),
+    ...sources.workflowSteps.map(
+      (definition, index) =>
+        `import workflowStep${index} from "./src/${definition.handlerPaths.execute}";`,
+    ),
+    ...sources.workflowTriggers.map(
+      (definition, index) => Object.entries(definition.handlerPaths).map(([name, path]) =>
+        `import workflowTrigger${index}_${name} from "./src/${path}";`).join("\n"),
+    ),
   ].join("\n");
   const lifecycleEntries = sources.lifecycleEvents
     .map(
@@ -213,7 +243,19 @@ async function buildServerArtifact(projectDirectory, sources) {
         `[${JSON.stringify(definition.key)}, webhookHandler${index}]`,
     )
     .join(",\n");
-  const stdin = `${imports}\n${serializeWebhookResponse.toString()}\nconst lifecycleEvents = new Map([${lifecycleEntries}]);\nconst serverFunctions = new Map([${serverEntries}]);\nconst webhookHandlers = new Map([${webhookEntries}]);\nexport async function dispatchServerInvocation(request) {\n  if (!request || typeof request !== "object") throw new Error("runtime_invocation_invalid");\n  if (request.kind === "lifecycle_event") {\n    const definition = lifecycleEvents.get(request.entryKey);\n    if (!definition) throw new Error("runtime_lifecycle_event_not_found");\n    const params = definition.event === "app-installed" || definition.event === "app-uninstalled" ? request.context : Object.freeze({ connection: getLifecycleConnection() });\n    await definition.handler(params);\n    return null;\n  }\n  if (request.kind === "server_function") {\n    const handler = serverFunctions.get(request.entryKey);\n    if (!handler) throw new Error("runtime_server_function_not_found");\n    return handler(...request.args);\n  }\n  if (request.kind === "webhook_handler") {\n    const handler = webhookHandlers.get(request.entryKey);\n    if (!handler) throw new Error("runtime_webhook_handler_not_found");\n    const input = request.webRequest;\n    const webRequest = new Request(input.url, { method: input.method, headers: input.headers, body: ["GET", "HEAD"].includes(input.method) ? undefined : input.body });\n    const response = await handler(webRequest, Object.freeze({ ...request.context }));\n    if (!(response instanceof Response)) throw new Error("runtime_webhook_response_invalid");\n    return serializeWebhookResponse(response);\n  }\n  throw new Error("runtime_invocation_kind_invalid");\n}\n`;
+  const workflowEntries = sources.workflowSteps
+    .map((definition, index) => `[${JSON.stringify(definition.entry)}, workflowStep${index}]`)
+    .join(",\n");
+  const triggerEntries = sources.workflowTriggers.flatMap((definition, index) =>
+    Object.entries(definition.entries).map(([name, entry]) =>
+      `[${JSON.stringify(entry)}, workflowTrigger${index}_${name}]`)).join(",\n");
+  const triggerDeclarations = sources.workflowTriggers.length > 0
+    ? `const workflowTriggers = new Map([${triggerEntries}]);\n`
+    : "";
+  const triggerDispatch = sources.workflowTriggers.length > 0
+    ? `  if (request.kind === "workflow_trigger") {\n    const handler = workflowTriggers.get(request.entryKey);\n    if (!handler) throw new Error("runtime_workflow_trigger_not_found");\n    const result = await handler(Object.freeze({ ...request.params }));\n    return request.entryKey.endsWith("/deactivate") ? null : result;\n  }\n`
+    : "";
+  const stdin = `${imports}\n${serializeWebhookResponse.toString()}\nconst lifecycleEvents = new Map([${lifecycleEntries}]);\nconst serverFunctions = new Map([${serverEntries}]);\nconst webhookHandlers = new Map([${webhookEntries}]);\nconst workflowSteps = new Map([${workflowEntries}]);\n${triggerDeclarations}${agentToolDeclarations}\nexport async function dispatchServerInvocation(request) {\n  if (!request || typeof request !== "object") throw new Error("runtime_invocation_invalid");\n  if (request.kind === "lifecycle_event") {\n    const definition = lifecycleEvents.get(request.entryKey);\n    if (!definition) throw new Error("runtime_lifecycle_event_not_found");\n    const params = definition.event === "app-installed" || definition.event === "app-uninstalled" ? request.context : Object.freeze({ connection: getLifecycleConnection() });\n    await definition.handler(params);\n    return null;\n  }\n  if (request.kind === "server_function") {\n    const handler = serverFunctions.get(request.entryKey);\n    if (!handler) throw new Error("runtime_server_function_not_found");\n    return handler(...request.args);\n  }\n  if (request.kind === "workflow_step") {\n    const handler = workflowSteps.get(request.entryKey);\n    if (!handler) throw new Error("runtime_workflow_step_not_found");\n    return handler(Object.freeze({ config: request.config }));\n  }\n${triggerDispatch}${agentToolDispatch}  if (request.kind === "webhook_handler") {\n    const handler = webhookHandlers.get(request.entryKey);\n    if (!handler) throw new Error("runtime_webhook_handler_not_found");\n    const input = request.webRequest;\n    const webRequest = new Request(input.url, { method: input.method, headers: input.headers, body: ["GET", "HEAD"].includes(input.method) ? undefined : input.body });\n    const response = await handler(webRequest, Object.freeze({ ...request.context }));\n    if (!(response instanceof Response)) throw new Error("runtime_webhook_response_invalid");\n    return serializeWebhookResponse(response);\n  }\n  throw new Error("runtime_invocation_kind_invalid");\n}\n`;
   const result = await build({
     absWorkingDir: projectDirectory,
     bundle: true,
@@ -223,7 +265,8 @@ async function buildServerArtifact(projectDirectory, sources) {
     logLevel: "silent",
     minify: true,
     platform: "browser",
-    plugins: [createSdkBuildPlugin(projectDirectory, sources, "server")],
+    plugins: [createSdkBuildPlugin(projectDirectory, sources, "server"),
+      await createDependencyPolicyPlugin(projectDirectory, "server", validateImports)],
     sourcemap: false,
     stdin: { contents: stdin, loader: "ts", resolveDir: projectDirectory, sourcefile: "zhike-server-entry.ts" },
     target: "es2022",
@@ -243,6 +286,38 @@ function createSdkBuildPlugin(projectDirectory, sources, target) {
   return {
     name: "zhike-app-sdk-runtime",
     setup(buildApi) {
+      buildApi.onResolve({ filter: /^@77-zhike\/app-sdk\/jsx(?:-dev)?-runtime$/ }, args => ({ path: args.path, namespace: "zhike-jsx" }));
+      buildApi.onLoad({ filter: /.*/, namespace: "zhike-jsx" }, args => ({
+        contents: args.path.endsWith("jsx-dev-runtime")
+          ? 'export { jsxDEV, Fragment } from "react/jsx-dev-runtime";'
+          : 'export { jsx, jsxs, Fragment } from "react/jsx-runtime";', loader: "js",
+      }));
+      if (target === 'remote-client') {
+        buildApi.onResolve({ filter: /\.css\?inline$/ }, args => args.path.startsWith('.')
+          ? { path: resolve(args.resolveDir, args.path.slice(0, -7)), namespace: 'zhike-native-css' }
+          : { errors: [{ text: 'NativeDOM 样式必须使用本地相对路径' }] });
+        buildApi.onLoad({ filter: /.*/, namespace: 'zhike-native-css' }, async args => ({
+          contents: await readFile(args.path, 'utf8'), loader: 'text', watchFiles: [args.path],
+        }));
+      }
+      if (target === "remote-client") {
+        // 新构建固化 authoring 默认值；Guest 仍为不可变旧 Bundle 提供兼容模块。
+        buildApi.onResolve({ filter: /^@77-zhike\/app-sdk\/ui$/ }, args => args.namespace === "zhike-ui-authoring"
+          ? { path: args.path, external: true }
+          : { path: args.path, namespace: "zhike-ui-authoring" });
+        buildApi.onLoad({ filter: /.*/, namespace: "zhike-ui-authoring" }, () => ({ loader: "js", contents: `
+          import * as ui from "@77-zhike/app-sdk/ui";
+          import { createElement } from "react";
+          export const TextBlock = props => createElement(ui.TextBlock, { ...props, align: props.align ?? "left" });
+          export const Badge = props => {
+            if (props.tone !== undefined) throw new Error("Badge.tone 已移除，请使用 StatusBadge");
+            return createElement(ui.Badge, props);
+          };
+          export const TableCell = Object.defineProperties(props => createElement(ui.TableCell, props), { Avatar: { get: () => ui.Avatar }, Badge: { value: Badge } });
+          export const Table = Object.defineProperties(props => createElement(ui.Table, props), { Header: { get: () => ui.Table.Header }, HeaderCell: { get: () => ui.Table.HeaderCell }, Body: { get: () => ui.Table.Body }, Row: { get: () => ui.Table.Row }, Cell: { value: TableCell } });
+          export const { ${[...publicComponentNames.filter(name => !["TextBlock", "Badge", "Table", "TableCell"].includes(name)), "Typography", "Widget", "useConversation"].join(", ")} } = ui;
+        ` }));
+      }
       if (target !== "remote-client") buildApi.onResolve({ filter: /^@77-zhike\/app-sdk\/(client|server)$/ }, (args) => ({
         external: target === "server" && args.path.endsWith("/server"),
         path: args.path,
@@ -252,7 +327,10 @@ function createSdkBuildPlugin(projectDirectory, sources, target) {
       }));
       buildApi.onLoad({ filter: /.*/, namespace: "zhike-sdk-runtime" }, (args) => {
         if (args.path.endsWith("/client")) {
-          return { contents: "export const defineFrontendExtension = (definition) => definition;", loader: "js" };
+          return {
+            contents: "export const defineFrontendExtension = (definition) => definition; export const definePage = (definition) => ({ ...definition, type: 'page' }); export const defineToolRenderer = (definition) => ({ ...definition, type: 'tool-renderer' });",
+            loader: "js",
+          };
         }
         return { contents: "export const defineLifecycleEvent = (definition) => definition; export const defineServerFunction = (handler) => handler; export const defineWebhookHandler = (definition) => definition; export const createWebhookHandler = async () => { throw new Error('webhook_handler_runtime_unavailable'); }; export const listWebhookHandlers = async () => { throw new Error('webhook_handler_runtime_unavailable'); }; export const deleteWebhookHandler = async () => { throw new Error('webhook_handler_runtime_unavailable'); };", loader: "js" };
       });
@@ -291,7 +369,7 @@ function createManifest({ clientBytes, serverBytes, sources }) {
     sdkAbiVersion: "2",
     toolchainVersion: TOOLING_VERSION,
     ...(sources.frontendExtensions.length > 0
-      ? { clientRuntime: { runtimeVersion: "remote-react.v2" } } : {}),
+      ? { clientRuntime: { runtimeVersion: "remote-react.v3" } } : {}),
     artifacts: {
       ...(clientBytes
         ? {
@@ -314,7 +392,7 @@ function createManifest({ clientBytes, serverBytes, sources }) {
           }
         : {}),
     },
-    frontendExtensions: sources.frontendExtensions.map(({ key, type, entry, label, icon, objects }) => ({
+    frontendExtensions: sources.frontendExtensions.map(({ key, type, entry, label, icon, objects, name, order, variant, showInNavigation, showHeader, fillHeight }) => ({
       artifact: "client",
       entry,
       key,
@@ -322,12 +400,22 @@ function createManifest({ clientBytes, serverBytes, sources }) {
       ...(label === undefined ? {} : { label }),
       ...(icon === undefined ? {} : { icon }),
       ...(objects === undefined ? {} : { objects }),
+      ...(name === undefined ? {} : { name }),
+      ...(order === undefined ? {} : { order }),
+      ...(variant === undefined ? {} : { variant }),
+      ...(showInNavigation === undefined ? {} : { showInNavigation }),
+      ...(showHeader === undefined ? {} : { showHeader }),
+      ...(fillHeight === undefined ? {} : { fillHeight }),
     })),
     lifecycleEvents: sources.lifecycleEvents.map(({ event, key }) => ({
       artifact: "server",
       event,
       key,
     })),
+    ...(sources.agents.length ? { agents: sources.agents.map(agentManifest) } : {}),
+    ...((sources.actions.length || sources.dataCapabilities.length || sources.agents.some(agent => agent.aiExposure || agent.actionRefs || agent.tools.some(tool => tool.aiExposure))) ? {aiCapabilitiesVersion:'1'} : {}),
+    ...(sources.actions.length ? {actions:sources.actions.map(stripPath)} : {}),
+    ...(sources.dataCapabilities.length ? {dataCapabilities:sources.dataCapabilities.map(stripPath)} : {}),
     serverFunctions: sources.serverFunctions.map(({ key }) => ({
       artifact: "server",
       key,
@@ -337,6 +425,20 @@ function createManifest({ clientBytes, serverBytes, sources }) {
       key,
       methods,
     })),
+    ...(sources.workflowSteps.length > 0 ? { workflowSteps: sources.workflowSteps.map(
+      ({ key, title, description, connection, configSchema, outcomes, entry }) => ({
+        artifact: "server", key, entry, title,
+        ...(description === undefined ? {} : { description }),
+        connection, configSchema, outcomes,
+      }),
+    ) } : {}),
+    ...(sources.workflowTriggers.length > 0 ? { workflowTriggers: sources.workflowTriggers.map(
+      ({ key, title, description, connection, requestHeaders, configSchema, outcomes, entries }) => ({
+        artifact: "server", key, entries, title,
+        ...(description === undefined ? {} : { description }),
+        connection, requestHeaders, configSchema, outcomes,
+      }),
+    ) } : {}),
   };
 }
 
@@ -344,8 +446,14 @@ function createServerDefinitionsDigest(sources) {
   return sha256(
     canonicalJsonBytes({
       lifecycleEvents: sources.lifecycleEvents.map(({ event, key }) => ({ event, key })),
+      ...(sources.agents.length ? { agents: sources.agents.map(({ key, tools }) => ({
+        key, tools: tools.map(({ key: toolKey, entry }) => ({ key: toolKey, entry })),
+      })) } : {}),
+      ...(sources.actions.length ? {actions:sources.actions.map(({key,entry})=>({key,entry}))} : {}),
       serverFunctions: sources.serverFunctions.map(({ key }) => ({ key })),
       webhookHandlers: sources.webhookHandlers.map(({ key, methods }) => ({ key, methods })),
+      ...(sources.workflowSteps.length > 0 ? { workflowSteps: sources.workflowSteps.map(({ key, entry }) => ({ key, entry })) } : {}),
+      ...(sources.workflowTriggers.length > 0 ? { workflowTriggers: sources.workflowTriggers.map(({ key, entries }) => ({ key, entries })) } : {}),
     }),
   );
 }