@fabricorg/platform 0.12.1 → 1.1.0

package/CHANGELOG.md

@@ -1,5 +1,43 @@
 # @fabricorg/platform
 
+## 1.1.0
+
+### Minor Changes
+
+- c504d0a: Make durability a declared, diffable contract.
+
+  `CapabilityMetadata` gains `workflows`: each declares its task queue, the event that starts it, the
+  durable deadlines it carries (resolved from configuration keys, never literals), and which governed
+  action reverses each compensatable step. The field is additive, so `MODULE_MANIFEST_VERSION` stays
+  at 2.
+
+  `diffModuleManifests` classifies this plane instead of reporting one blanket capability change:
+  adding a workflow, timer or reversal is compatible; moving a task queue, changing a trigger, dropping
+  a deadline or repointing a reversal is potentially breaking; removing a workflow or reversal is
+  breaking.
+
+  The compiler validates serialized workflow declarations, which never pass through a registry, and
+  rejects an action declaring `completion: "immediate"` while `kind: "saga"` — a manifest contradiction
+  that now fails the build rather than a running host.
+
+  `platform-temporal` executes declared reversals. `runCompensatedSaga` unwinds newest-first, routes
+  every reversal through the governed Host under a distinct deterministic
+  `compensationInvocationIdentity`, and surfaces a reversal that itself failed on
+  `SagaCompensationError` rather than swallowing it. A step that _resolves_ with a non-successful
+  status — blocked, failed, parked for approval, sent to reconciliation — now triggers the unwind
+  instead of being recorded as completed. Step identities must be unique and may not use the reserved
+  `compensate:` prefix, and when a `workflow` declaration is supplied every reversal is checked against
+  it.
+
+## 1.0.0
+
+### Major Changes
+
+- Make the capability runtime vertical-neutral and instance-scoped. Move experience and display
+  semantics into a namespaced companion package, require explicit host registries, replace privacy
+  field defaults with caller-owned policy, add PostgreSQL projection adapters, and generate executable
+  ProjectionHost read and PlatformHost mutation seams.
+
 ## 0.12.1
 
 ### Patch Changes

package/README.md

@@ -48,10 +48,9 @@ That's what this package gives you. Nothing more.
 | `@fabricorg/platform/events` | `AssetEventEnvelope`, `EventTypeRegistry` |
 | `@fabricorg/platform/projections` | Replay/snapshot framework |
 | `@fabricorg/platform/adapters` | `AdapterRegistry`, retry + circuit-breaker |
-| `@fabricorg/platform/modules` | `FabricModule<TDb>`, `registerFabricModules` |
+| `@fabricorg/platform/modules` | `FabricModule<TDb>`, `createModuleRegistry` |
 | `@fabricorg/platform/manifest` | `exportModuleManifest`, `exportModuleManifestBundle`, `ModuleManifest` |
 | `@fabricorg/platform/ids` | `createFabricId`, `FABRIC_ID_PREFIXES` |
-| `@fabricorg/platform/displays` | `DisplayRendererRegistration` |
 | `@fabricorg/platform/privacy` | Redaction + data classification |
 | `@fabricorg/platform/evidence` | Compliance evidence packets |
 | `@fabricorg/platform/governance` | External footprints, delegated principals, obligations, attestations, and reconciliation |
@@ -69,7 +68,7 @@ Verticals declare a `FabricModule<TDb>` that registers their actions, policies,
 
 ```ts
 import type { FabricModule } from "@fabricorg/platform/modules";
-import { registerFabricModules } from "@fabricorg/platform/modules";
+import { createModuleRegistry } from "@fabricorg/platform/modules";
 
 const myModule: FabricModule<MyDbClient> = {
   namespace: "demo",
@@ -78,14 +77,13 @@ const myModule: FabricModule<MyDbClient> = {
   actions: [greet, /* ... */],
   policies: [/* ... */],
   stateMachines: [/* ... */],
-  displayRenderers: [],
 };
 
 // At app startup:
-registerFabricModules([myModule]);
+const registry = createModuleRegistry([myModule]);
 ```
 
-The platform never auto-loads a module. The host app composes them explicitly — no implicit defaults, no globals, no surprises.
+The platform never auto-loads a module. The host app composes an instance-scoped registry and injects it into its hosts. Experience roles, slots, action intents, and display rendering live in `@fabricorg/experience-contracts`, carried through the namespaced `fabric.experience/v1` extension.
 
 ## Exporting a module manifest
 
@@ -140,11 +138,12 @@ Your worker maps action IDs to implementations. The platform dispatches generica
 
 ## Portability boundary
 
-The `boundary.test.ts` in this package fails CI if any of these leak in:
+The repository Boundary Guard scans source and packed artifacts and fails CI if any of these leak in:
 
 - Concrete database/ORM imports — the literal `Prisma`, the field name `prisma:`, or the type default `TDb = any`
-- Vertical vocabulary (`lending.`, `borrower`, `lender`, `Vehicle`, `Party`, `Obligation`, `Offer`, etc.)
+- Vertical vocabulary from the governed denylist
 - "Register default" hooks (`registerDefaultPolicies`, etc.) — the platform never auto-loads anything
+- Module-scope mutable registries, import-time environment reads, or unapproved infrastructure imports
 
 This is what keeps the platform portable across verticals and consumers. If you fork or add new patterns specific to your domain, extend the list in `boundary.test.ts`.
 

package/dist/actions/index.cjs

@@ -1,48 +1,28 @@
 'use strict';
 
-var chunkJOATYJXQ_cjs = require('../chunk-JOATYJXQ.cjs');
+var chunkBFQNKQJE_cjs = require('../chunk-BFQNKQJE.cjs');
 
 
 
 Object.defineProperty(exports, "ACTOR_TYPES", {
   enumerable: true,
-  get: function () { return chunkJOATYJXQ_cjs.ACTOR_TYPES; }
+  get: function () { return chunkBFQNKQJE_cjs.ACTOR_TYPES; }
 });
 Object.defineProperty(exports, "assertActionId", {
   enumerable: true,
-  get: function () { return chunkJOATYJXQ_cjs.assertActionId; }
+  get: function () { return chunkBFQNKQJE_cjs.assertActionId; }
 });
 Object.defineProperty(exports, "assertActorType", {
   enumerable: true,
-  get: function () { return chunkJOATYJXQ_cjs.assertActorType; }
+  get: function () { return chunkBFQNKQJE_cjs.assertActorType; }
 });
-Object.defineProperty(exports, "getRegisteredActionIds", {
+Object.defineProperty(exports, "createActionRegistry", {
   enumerable: true,
-  get: function () { return chunkJOATYJXQ_cjs.getRegisteredActionIds; }
+  get: function () { return chunkBFQNKQJE_cjs.createActionRegistry; }
 });
 Object.defineProperty(exports, "isActorType", {
   enumerable: true,
-  get: function () { return chunkJOATYJXQ_cjs.isActorType; }
-});
-Object.defineProperty(exports, "isRegisteredActionId", {
-  enumerable: true,
-  get: function () { return chunkJOATYJXQ_cjs.isRegisteredActionId; }
-});
-Object.defineProperty(exports, "registerAction", {
-  enumerable: true,
-  get: function () { return chunkJOATYJXQ_cjs.registerAction; }
-});
-Object.defineProperty(exports, "registerActionIfMissing", {
-  enumerable: true,
-  get: function () { return chunkJOATYJXQ_cjs.registerActionIfMissing; }
-});
-Object.defineProperty(exports, "resolveAction", {
-  enumerable: true,
-  get: function () { return chunkJOATYJXQ_cjs.resolveAction; }
-});
-Object.defineProperty(exports, "resolveRegisteredAction", {
-  enumerable: true,
-  get: function () { return chunkJOATYJXQ_cjs.resolveRegisteredAction; }
+  get: function () { return chunkBFQNKQJE_cjs.isActorType; }
 });
 //# sourceMappingURL=index.cjs.map
 //# sourceMappingURL=index.cjs.map

package/dist/actions/index.d.cts

@@ -159,11 +159,13 @@ interface SagaCompletion {
 }
 type SagaImplementation = (ctx: SagaContext, runChild: SagaRunChild) => Promise<SagaCompletion>;
 declare function assertActionId(actionId: string): asserts actionId is ActionId;
-declare function registerAction(definition: ActionDefinition): void;
-declare function resolveAction(actionId: ActionId): ActionDefinition | undefined;
-declare function isRegisteredActionId(actionId: string): actionId is ActionId;
-declare function resolveRegisteredAction(actionId: string): ActionDefinition | undefined;
-declare function getRegisteredActionIds(): ActionId[];
-declare function registerActionIfMissing(definition: ActionDefinition): void;
+interface ActionRegistry<TDb = unknown> {
+    register(definition: ActionDefinition<TDb>): void;
+    registerIfMissing(definition: ActionDefinition<TDb>): void;
+    resolve(actionId: ActionId): ActionDefinition<TDb> | undefined;
+    has(actionId: string): actionId is ActionId;
+    ids(): ActionId[];
+}
+declare function createActionRegistry<TDb = unknown>(definitions?: readonly ActionDefinition<TDb>[]): ActionRegistry<TDb>;
 
-export { ACTOR_TYPES, type ActionCompletionMode, type ActionConnectivity, type ActionConsistency, type ActionContext, type ActionDataSensitivity, type ActionDefinition, type ActionExecutionContract, type ActionHandler, type ActionId, type ActionIdempotencyStance, type ActionResult, type ActionStateMachineBinding, type ActionStatus, type ActorType, type AdapterStep, type AdapterStepRetryPolicy, type AuthorityMoment, type FabricRuntimeServices, type SagaChildActionInput, type SagaCompletion, type SagaCompletionEvent, type SagaContext, type SagaImplementation, type SagaRunChild, type SchemaParseIssue, type SchemaParseResult, type SchemaValidator, assertActionId, assertActorType, getRegisteredActionIds, isActorType, isRegisteredActionId, registerAction, registerActionIfMissing, resolveAction, resolveRegisteredAction };
+export { ACTOR_TYPES, type ActionCompletionMode, type ActionConnectivity, type ActionConsistency, type ActionContext, type ActionDataSensitivity, type ActionDefinition, type ActionExecutionContract, type ActionHandler, type ActionId, type ActionIdempotencyStance, type ActionRegistry, type ActionResult, type ActionStateMachineBinding, type ActionStatus, type ActorType, type AdapterStep, type AdapterStepRetryPolicy, type AuthorityMoment, type FabricRuntimeServices, type SagaChildActionInput, type SagaCompletion, type SagaCompletionEvent, type SagaContext, type SagaImplementation, type SagaRunChild, type SchemaParseIssue, type SchemaParseResult, type SchemaValidator, assertActionId, assertActorType, createActionRegistry, isActorType };

package/dist/actions/index.d.ts

@@ -159,11 +159,13 @@ interface SagaCompletion {
 }
 type SagaImplementation = (ctx: SagaContext, runChild: SagaRunChild) => Promise<SagaCompletion>;
 declare function assertActionId(actionId: string): asserts actionId is ActionId;
-declare function registerAction(definition: ActionDefinition): void;
-declare function resolveAction(actionId: ActionId): ActionDefinition | undefined;
-declare function isRegisteredActionId(actionId: string): actionId is ActionId;
-declare function resolveRegisteredAction(actionId: string): ActionDefinition | undefined;
-declare function getRegisteredActionIds(): ActionId[];
-declare function registerActionIfMissing(definition: ActionDefinition): void;
+interface ActionRegistry<TDb = unknown> {
+    register(definition: ActionDefinition<TDb>): void;
+    registerIfMissing(definition: ActionDefinition<TDb>): void;
+    resolve(actionId: ActionId): ActionDefinition<TDb> | undefined;
+    has(actionId: string): actionId is ActionId;
+    ids(): ActionId[];
+}
+declare function createActionRegistry<TDb = unknown>(definitions?: readonly ActionDefinition<TDb>[]): ActionRegistry<TDb>;
 
-export { ACTOR_TYPES, type ActionCompletionMode, type ActionConnectivity, type ActionConsistency, type ActionContext, type ActionDataSensitivity, type ActionDefinition, type ActionExecutionContract, type ActionHandler, type ActionId, type ActionIdempotencyStance, type ActionResult, type ActionStateMachineBinding, type ActionStatus, type ActorType, type AdapterStep, type AdapterStepRetryPolicy, type AuthorityMoment, type FabricRuntimeServices, type SagaChildActionInput, type SagaCompletion, type SagaCompletionEvent, type SagaContext, type SagaImplementation, type SagaRunChild, type SchemaParseIssue, type SchemaParseResult, type SchemaValidator, assertActionId, assertActorType, getRegisteredActionIds, isActorType, isRegisteredActionId, registerAction, registerActionIfMissing, resolveAction, resolveRegisteredAction };
+export { ACTOR_TYPES, type ActionCompletionMode, type ActionConnectivity, type ActionConsistency, type ActionContext, type ActionDataSensitivity, type ActionDefinition, type ActionExecutionContract, type ActionHandler, type ActionId, type ActionIdempotencyStance, type ActionRegistry, type ActionResult, type ActionStateMachineBinding, type ActionStatus, type ActorType, type AdapterStep, type AdapterStepRetryPolicy, type AuthorityMoment, type FabricRuntimeServices, type SagaChildActionInput, type SagaCompletion, type SagaCompletionEvent, type SagaContext, type SagaImplementation, type SagaRunChild, type SchemaParseIssue, type SchemaParseResult, type SchemaValidator, assertActionId, assertActorType, createActionRegistry, isActorType };

package/dist/actions/index.js

@@ -1,3 +1,3 @@
-export { ACTOR_TYPES, assertActionId, assertActorType, getRegisteredActionIds, isActorType, isRegisteredActionId, registerAction, registerActionIfMissing, resolveAction, resolveRegisteredAction } from '../chunk-4RMKUYRX.js';
+export { ACTOR_TYPES, assertActionId, assertActorType, createActionRegistry, isActorType } from '../chunk-4QOA3VU5.js';
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map

package/dist/chunk-4QOA3VU5.js

@@ -0,0 +1,47 @@
+// actions/index.ts
+var ACTOR_TYPES = [
+  "natural_person",
+  "agent",
+  "system",
+  "service_account",
+  "external_system",
+  "integration"
+];
+function isActorType(value) {
+  return ACTOR_TYPES.includes(value);
+}
+function assertActorType(value) {
+  if (!isActorType(value)) {
+    throw new Error(`Invalid actorType: ${value}`);
+  }
+}
+function assertActionId(actionId) {
+  if (!/^[a-z][a-z0-9-]*\.[a-z][a-z0-9_]*$/.test(actionId)) {
+    throw new Error(`Invalid action ID: ${actionId}`);
+  }
+}
+function createActionRegistry(definitions = []) {
+  const actions = /* @__PURE__ */ new Map();
+  const register = (definition) => {
+    assertActionId(definition.actionId);
+    if (actions.has(definition.actionId)) throw new Error(`Action "${definition.actionId}" is already registered`);
+    if (definition.mutatesDomain && definition.emitsEvents.length === 0) {
+      throw new Error(`Action "${definition.actionId}" mutates domain but emits no events. Every mutating action must emit at least one AssetEvent.`);
+    }
+    actions.set(definition.actionId, definition);
+  };
+  for (const definition of definitions) register(definition);
+  return {
+    register,
+    registerIfMissing(definition) {
+      if (!actions.has(definition.actionId)) register(definition);
+    },
+    resolve: (actionId) => actions.get(actionId),
+    has: (actionId) => actions.has(actionId),
+    ids: () => Array.from(actions.keys())
+  };
+}
+
+export { ACTOR_TYPES, assertActionId, assertActorType, createActionRegistry, isActorType };
+//# sourceMappingURL=chunk-4QOA3VU5.js.map
+//# sourceMappingURL=chunk-4QOA3VU5.js.map

package/dist/chunk-4QOA3VU5.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../actions/index.ts"],"names":[],"mappings":";AAwBO,IAAM,WAAA,GAAoC;AAAA,EAChD,gBAAA;AAAA,EACA,OAAA;AAAA,EACA,QAAA;AAAA,EACA,iBAAA;AAAA,EACA,iBAAA;AAAA,EACA;AACD;AAEO,SAAS,YAAY,KAAA,EAAmC;AAC9D,EAAA,OAAQ,WAAA,CAAkC,SAAS,KAAK,CAAA;AACzD;AAEO,SAAS,gBAAgB,KAAA,EAA2C;AAC1E,EAAA,IAAI,CAAC,WAAA,CAAY,KAAK,CAAA,EAAG;AACxB,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,mBAAA,EAAsB,KAAK,CAAA,CAAE,CAAA;AAAA,EAC9C;AACD;AA2KO,SAAS,eAAe,QAAA,EAAgD;AAC9E,EAAA,IAAI,CAAC,oCAAA,CAAqC,IAAA,CAAK,QAAQ,CAAA,EAAG;AACzD,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,mBAAA,EAAsB,QAAQ,CAAA,CAAE,CAAA;AAAA,EACjD;AACD;AAUO,SAAS,oBAAA,CAAoC,WAAA,GAAgD,EAAC,EAAwB;AAC5H,EAAA,MAAM,OAAA,uBAAc,GAAA,EAAqC;AACzD,EAAA,MAAM,QAAA,GAAW,CAAC,UAAA,KAA4C;AAC7D,IAAA,cAAA,CAAe,WAAW,QAAQ,CAAA;AAClC,IAAA,IAAI,OAAA,CAAQ,GAAA,CAAI,UAAA,CAAW,QAAQ,CAAA,EAAG,MAAM,IAAI,KAAA,CAAM,CAAA,QAAA,EAAW,UAAA,CAAW,QAAQ,CAAA,uBAAA,CAAyB,CAAA;AAC7G,IAAA,IAAI,UAAA,CAAW,aAAA,IAAiB,UAAA,CAAW,WAAA,CAAY,WAAW,CAAA,EAAG;AACpE,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,QAAA,EAAW,UAAA,CAAW,QAAQ,CAAA,8FAAA,CAAgG,CAAA;AAAA,IAC/I;AACA,IAAA,OAAA,CAAQ,GAAA,CAAI,UAAA,CAAW,QAAA,EAAU,UAAU,CAAA;AAAA,EAC5C,CAAA;AACA,EAAA,KAAA,MAAW,UAAA,IAAc,WAAA,EAAa,QAAA,CAAS,UAAU,CAAA;AACzD,EAAA,OAAO;AAAA,IACN,QAAA;AAAA,IACA,kBAAkB,UAAA,EAAY;AAC7B,MAAA,IAAI,CAAC,OAAA,CAAQ,GAAA,CAAI,WAAW,QAAQ,CAAA,WAAY,UAAU,CAAA;AAAA,IAC3D,CAAA;AAAA,IACA,OAAA,EAAS,CAAC,QAAA,KAAa,OAAA,CAAQ,IAAI,QAAQ,CAAA;AAAA,IAC3C,GAAA,EAAK,CAAC,QAAA,KAAmC,OAAA,CAAQ,IAAI,QAAoB,CAAA;AAAA,IACzE,KAAK,MAAM,KAAA,CAAM,IAAA,CAAK,OAAA,CAAQ,MAAM;AAAA,GACrC;AACD","file":"chunk-4QOA3VU5.js","sourcesContent":["export type ActionId = `${string}.${string}`;\n\nexport interface SchemaParseIssue {\n\tpath: PropertyKey[];\n\tmessage: string;\n}\n\nexport type SchemaParseResult<T = unknown> =\n\t| { success: true; data: T }\n\t| { success: false; error: { issues: SchemaParseIssue[] } };\n\nexport interface SchemaValidator<T = unknown> {\n\tparse(input: unknown): T;\n\tsafeParse(input: unknown): SchemaParseResult<T>;\n}\n\nexport type ActorType =\n\t| \"natural_person\"\n\t| \"agent\"\n\t| \"system\"\n\t| \"service_account\"\n\t| \"external_system\"\n\t| \"integration\";\n\nexport const ACTOR_TYPES: readonly ActorType[] = [\n\t\"natural_person\",\n\t\"agent\",\n\t\"system\",\n\t\"service_account\",\n\t\"external_system\",\n\t\"integration\",\n] as const;\n\nexport function isActorType(value: string): value is ActorType {\n\treturn (ACTOR_TYPES as readonly string[]).includes(value);\n}\n\nexport function assertActorType(value: string): asserts value is ActorType {\n\tif (!isActorType(value)) {\n\t\tthrow new Error(`Invalid actorType: ${value}`);\n\t}\n}\n\nexport type ActionStatus =\n\t| \"pending\"\n\t| \"running\"\n\t| \"completed\"\n\t| \"failed\"\n\t| \"blocked_by_policy\"\n\t| \"waiting_for_approval\"\n\t| \"reconciliation_required\"\n\t| \"validation_failed\";\n\nexport interface FabricRuntimeServices {\n\treadonly [serviceName: string]: unknown;\n}\n\nexport interface ActionContext<TDb = unknown> {\n\tactionInvocationId: string;\n\ttenantId: string;\n\tspaceId: string;\n\tactorId: string;\n\tactorType: ActorType;\n\tcorrelationId: string;\n\tcausationId?: string;\n\tprovenance?: { source: string; auditAttributes?: Record<string, string> };\n\tdb: TDb;\n\tservices?: FabricRuntimeServices;\n}\n\nexport interface ActionResult {\n\tsuccess: boolean;\n\tdata?: Record<string, unknown>;\n\terror?: string;\n}\n\nexport type ActionHandler<TDb = unknown> = (\n\tctx: ActionContext<TDb>,\n\tparams: unknown,\n) => Promise<ActionResult>;\n\nexport interface AdapterStepRetryPolicy {\n\tidempotent: boolean;\n\tmaxAttempts?: number;\n\tinitialDelayMs?: number;\n\tbackoffMultiplier?: number;\n\tmaxDelayMs?: number;\n}\n\nexport interface AdapterStep {\n\tadapterType: string;\n\toperation: string;\n\tretryPolicy?: AdapterStepRetryPolicy;\n\tgetInput: (\n\t\tparams: unknown,\n\t\thandlerResult: Record<string, unknown>,\n\t) => Record<string, unknown> | undefined;\n}\n\nexport interface ActionStateMachineBinding {\n\tentityType: string;\n\ttargetState: string | ((params: unknown) => string);\n\tgetEntityId: (params: unknown) => string | undefined;\n}\n\nexport interface ActionDefinition<TDb = unknown> {\n\tactionId: ActionId;\n\tnamespace: string;\n\tversion: number;\n\tschema: SchemaValidator;\n\t/** Optional validation contract for the public handler result data. */\n\tresultSchema?: SchemaValidator;\n\thandler?: ActionHandler<TDb>;\n\trequiredRoles?: string[];\n\trequiredPermissions?: string[];\n\tpolicies?: `${string}.v${number}`[];\n\temitsEvents: string[];\n\tidempotent: boolean;\n\tmutatesDomain: boolean;\n\t/** Portable execution semantics used by hosts, gateways, and generated capability contracts. */\n\texecution?: ActionExecutionContract;\n\tstateMachine?: ActionStateMachineBinding;\n\tadapterSteps?: AdapterStep[];\n\t/** Completion actions can attest only after all external adapter work succeeds. */\n\teventPhase?: \"before_adapters\" | \"after_adapters\";\n\t/**\n\t * If \"saga\", the action is a multi-step orchestration. The worker dispatches\n\t * to a registered saga implementation instead of running `handler` directly.\n\t */\n\tkind?: \"atomic\" | \"saga\";\n}\n\nexport type ActionConnectivity = \"online-required\" | \"offline-capturable\";\nexport type AuthorityMoment = \"capture\" | \"execution\" | \"both\";\nexport type ActionIdempotencyStance = \"required\" | \"supported\" | \"prohibited\";\nexport type ActionCompletionMode = \"immediate\" | \"accepted\" | \"long-running\";\nexport type ActionConsistency = \"authoritative-now\" | \"provisional-until-reconciled\";\nexport type ActionDataSensitivity = \"public\" | \"internal\" | \"confidential\" | \"restricted\";\n\nexport interface ActionExecutionContract {\n\tconnectivity: ActionConnectivity;\n\tauthorityMoment: AuthorityMoment;\n\tidempotency: ActionIdempotencyStance;\n\tcompletion: ActionCompletionMode;\n\tconsistency: ActionConsistency;\n\tsensitivity?: ActionDataSensitivity;\n}\n\nexport interface SagaContext {\n\tactionInvocationId: string;\n\ttenantId: string;\n\tspaceId: string;\n\tparameters: unknown;\n\tsleep?: (delayMs: number) => Promise<void>;\n\tquery?: <T = unknown>(model: string, operation: string, args: unknown) => Promise<T>;\n\t/**\n\t * Wait for a named external signal carrying a payload of `T`, with a timeout.\n\t *\n\t * Resolves with the payload of the first signal received, or `null` if the timeout\n\t * fires first. Subsequent signals with the same name received before another\n\t * `awaitSignal` call are buffered (FIFO) so no signal is lost.\n\t *\n\t * Intended for agent-driven and webhook-driven coordination: replace polling loops\n\t * with push-based wakeups while preserving the saga's deterministic replay\n\t * semantics (the runtime is responsible for capturing signals into workflow history).\n\t *\n\t * Optional. Runtimes that cannot implement push-based signaling (e.g. an in-memory\n\t * test harness) may omit this; sagas should treat absence as a fallback condition\n\t * and use `sleep` + `query` polling instead.\n\t *\n\t * Signal *senders* are runtime-specific (e.g. a Temporal `WorkflowClient.signal()`\n\t * call from an action handler). Apps that need to send signals from action\n\t * handlers should expose a coordination service via `ActionContext.services`\n\t * — the platform does not prescribe the sender API.\n\t *\n\t * @example\n\t * const payload = await ctx.awaitSignal?.<{ result: Record<string, unknown> }>(\n\t *   \"userInputProcessed\",\n\t *   5 * 60 * 1000,\n\t * );\n\t * if (payload) { /* handle pushed result *\\/ }\n\t * else        { /* timeout — fall back to deterministic path *\\/ }\n\t */\n\tawaitSignal?: <T = unknown>(signalName: string, timeoutMs: number) => Promise<T | null>;\n}\n\nexport interface SagaChildActionInput {\n\tsuffix: string;\n\tactionId: string;\n\tparameters: Record<string, unknown>;\n}\n\nexport type SagaRunChild = (input: SagaChildActionInput) => Promise<Record<string, unknown>>;\n\nexport interface SagaCompletionEvent {\n\teventType: string;\n\tsubjectType: string;\n\tsubjectId: string;\n\tpayload: unknown;\n\teventSchemaVersion?: number;\n}\n\nexport interface SagaCompletion {\n\tresultData: Record<string, unknown>;\n\tevent?: SagaCompletionEvent;\n}\n\nexport type SagaImplementation = (\n\tctx: SagaContext,\n\trunChild: SagaRunChild,\n) => Promise<SagaCompletion>;\n\nexport function assertActionId(actionId: string): asserts actionId is ActionId {\n\tif (!/^[a-z][a-z0-9-]*\\.[a-z][a-z0-9_]*$/.test(actionId)) {\n\t\tthrow new Error(`Invalid action ID: ${actionId}`);\n\t}\n}\n\nexport interface ActionRegistry<TDb = unknown> {\n\tregister(definition: ActionDefinition<TDb>): void;\n\tregisterIfMissing(definition: ActionDefinition<TDb>): void;\n\tresolve(actionId: ActionId): ActionDefinition<TDb> | undefined;\n\thas(actionId: string): actionId is ActionId;\n\tids(): ActionId[];\n}\n\nexport function createActionRegistry<TDb = unknown>(definitions: readonly ActionDefinition<TDb>[] = []): ActionRegistry<TDb> {\n\tconst actions = new Map<ActionId, ActionDefinition<TDb>>();\n\tconst register = (definition: ActionDefinition<TDb>): void => {\n\t\tassertActionId(definition.actionId);\n\t\tif (actions.has(definition.actionId)) throw new Error(`Action \"${definition.actionId}\" is already registered`);\n\t\tif (definition.mutatesDomain && definition.emitsEvents.length === 0) {\n\t\t\tthrow new Error(`Action \"${definition.actionId}\" mutates domain but emits no events. Every mutating action must emit at least one AssetEvent.`);\n\t\t}\n\t\tactions.set(definition.actionId, definition);\n\t};\n\tfor (const definition of definitions) register(definition);\n\treturn {\n\t\tregister,\n\t\tregisterIfMissing(definition) {\n\t\t\tif (!actions.has(definition.actionId)) register(definition);\n\t\t},\n\t\tresolve: (actionId) => actions.get(actionId),\n\t\thas: (actionId): actionId is ActionId => actions.has(actionId as ActionId),\n\t\tids: () => Array.from(actions.keys()),\n\t};\n}\n"]}

package/dist/{chunk-35SDMFCR.js → chunk-53YJK3LK.js}

@@ -1,15 +1,8 @@
-import { assertPortableJsonSchema, registerObjectType } from './chunk-4MMMXV4Q.js';
-import { registerPolicyIfMissing } from './chunk-6ER62UUN.js';
-import { registerViewContractIfMissing } from './chunk-FSUYD4F4.js';
-import { registerStateMachineIfMissing } from './chunk-T2JLSZN6.js';
-import { registerActionIfMissing } from './chunk-4RMKUYRX.js';
-import { registerDisplayRenderer } from './chunk-O5WVBQ7P.js';
-import { isValidEventType, registerSubjectType, registerEventType } from './chunk-3O4GMCCE.js';
+import { assertPortableJsonSchema } from './chunk-NETLRKDS.js';
+import { viewContractKey } from './chunk-J5LS5BSI.js';
+import { createEventContractRegistry } from './chunk-NHGBTPPE.js';
 
 // modules/index.ts
-var registeredModuleNamespaces = /* @__PURE__ */ new Set();
-var registeredQualifiedObjectTypes = /* @__PURE__ */ new Set();
-var registeredObjectDefinitions = /* @__PURE__ */ new Map();
 function getModuleDependencyNamespace(dependency) {
   return typeof dependency === "string" ? dependency : dependency.namespace;
 }
@@ -30,15 +23,26 @@ function validateModuleNamespace(namespace) {
   }
 }
 function createModuleRegistry(modules = []) {
-  const registered = /* @__PURE__ */ new Map();
-  for (const module of modules) {
-    validateModuleNamespace(module.namespace);
-    if (registered.has(module.namespace)) {
-      throw new Error(`Duplicate FabricModule namespace "${module.namespace}".`);
-    }
-    registered.set(module.namespace, module);
-  }
-  return { modules: registered };
+  const orderedModules = validateAndOrderFabricModules(modules);
+  const registered = new Map(orderedModules.map((module) => [module.namespace, module]));
+  const actions = new Map(orderedModules.flatMap((module) => (module.actions ?? []).map((action) => [action.actionId, action])));
+  const policies = new Map(orderedModules.flatMap((module) => (module.policies ?? []).map((policy) => {
+    const evaluator = policy;
+    return [evaluator.policyId, evaluator];
+  })));
+  const machines = new Map(orderedModules.flatMap((module) => (module.stateMachines ?? []).map((machine) => {
+    const definition = machine;
+    return [definition.entityType, definition];
+  })));
+  const views = new Map(orderedModules.flatMap((module) => (module.views ?? []).map((view) => [viewContractKey(view), view])));
+  return {
+    modules: registered,
+    orderedModules,
+    resolveAction: (actionId) => actions.get(actionId),
+    resolvePolicy: (policyId) => policies.get(policyId),
+    resolveStateMachine: (entityType) => machines.get(entityType),
+    resolveView: (name, version) => views.get(`${name}@${version}`)
+  };
 }
 function validateIdentifierList(values, label, namespace) {
   for (const value of values ?? []) {
@@ -106,6 +110,56 @@ function validateObjectDefinition(objectType, namespace, context) {
     }
   }
 }
+function validateCapabilityWorkflows(module, context) {
+  const workflows = module.capability?.workflows ?? [];
+  const actionsById = new Map((module.actions ?? []).map((action) => [action.actionId, action]));
+  const names = /* @__PURE__ */ new Set();
+  for (const workflow of workflows) {
+    if (!/^[A-Za-z][A-Za-z0-9_-]*$/.test(workflow.name)) {
+      throw new Error(`Module "${module.namespace}" declares invalid workflow name "${workflow.name}".`);
+    }
+    if (names.has(workflow.name)) {
+      throw new Error(`Module "${module.namespace}" declares duplicate workflow "${workflow.name}".`);
+    }
+    names.add(workflow.name);
+    if (!/^[a-z][a-z0-9-]*(\.[a-z][a-z0-9-]*)*$/.test(workflow.taskQueue)) {
+      throw new Error(`Module "${module.namespace}" workflow "${workflow.name}" declares invalid task queue "${workflow.taskQueue}".`);
+    }
+    if (workflow.startedBy !== void 0) {
+      const known = context.plannedEventTypes?.has(workflow.startedBy) ?? (module.eventTypes ?? []).some((eventType) => getEventTypeName(eventType) === workflow.startedBy);
+      if (!known) {
+        throw new Error(`Module "${module.namespace}" workflow "${workflow.name}" is started by unknown event type "${workflow.startedBy}".`);
+      }
+    }
+    const timerNames = /* @__PURE__ */ new Set();
+    for (const timer of workflow.timers ?? []) {
+      if (!timer.name.trim() || !timer.configKey.trim()) {
+        throw new Error(`Module "${module.namespace}" workflow "${workflow.name}" has a timer without a name or configKey.`);
+      }
+      if (timerNames.has(timer.name)) {
+        throw new Error(`Module "${module.namespace}" workflow "${workflow.name}" declares duplicate timer "${timer.name}".`);
+      }
+      timerNames.add(timer.name);
+    }
+    const steps = /* @__PURE__ */ new Set();
+    for (const compensation of workflow.compensations ?? []) {
+      if (!compensation.step.trim()) {
+        throw new Error(`Module "${module.namespace}" workflow "${workflow.name}" has a compensation without a step.`);
+      }
+      if (steps.has(compensation.step)) {
+        throw new Error(`Module "${module.namespace}" workflow "${workflow.name}" declares duplicate compensation for step "${compensation.step}".`);
+      }
+      steps.add(compensation.step);
+      const compensatingAction = actionsById.get(compensation.actionId);
+      if (!compensatingAction) {
+        throw new Error(`Module "${module.namespace}" workflow "${workflow.name}" compensates step "${compensation.step}" with unknown action "${compensation.actionId}".`);
+      }
+      if (!compensatingAction.idempotent || compensatingAction.execution?.idempotency === "prohibited") {
+        throw new Error(`Module "${module.namespace}" workflow "${workflow.name}" compensates step "${compensation.step}" with non-idempotent action "${compensation.actionId}"; a reversal must be safely repeatable.`);
+      }
+    }
+  }
+}
 function validateManifest(module, context = {}) {
   validateModuleNamespace(module.namespace);
   const dependencies = (module.dependencies ?? []).map(getModuleDependencyNamespace);
@@ -115,25 +169,15 @@ function validateManifest(module, context = {}) {
     if (!module.capability.displayName.trim() || !module.capability.description.trim()) {
       throw new Error(`Module "${module.namespace}" capability requires displayName and description.`);
     }
-    if (new Set(module.capability.roles ?? []).size !== (module.capability.roles ?? []).length || (module.capability.roles ?? []).some((role) => !/^[a-z][a-z0-9-]*$/.test(role))) {
-      throw new Error(`Module "${module.namespace}" capability has invalid or duplicate roles.`);
-    }
-    const slots = /* @__PURE__ */ new Set();
-    for (const slot of module.capability.slots ?? []) {
-      if (!/^[a-z][a-z0-9-]*$/.test(slot.name) || slots.has(slot.name)) {
-        throw new Error(`Module "${module.namespace}" capability has invalid or duplicate slot "${slot.name}".`);
+    for (const namespace of Object.keys(module.capability.extensions ?? {})) {
+      if (!/^[a-z][a-z0-9.-]*\.[a-z0-9.-]+\/v[1-9][0-9]*$/.test(namespace)) {
+        throw new Error(`Module "${module.namespace}" capability has invalid extension namespace "${namespace}".`);
       }
-      slots.add(slot.name);
-      if (slot.shape) assertPortableJsonSchema(slot.shape, `Capability slot "${slot.name}" shape`);
-    }
-    const intents = /* @__PURE__ */ new Set();
-    for (const intent of module.capability.actionIntents ?? []) {
-      if (!/^[a-z][a-z0-9-]*(?:\.[a-z][a-z0-9-]*)+$/.test(intent.name) || intents.has(intent.name)) throw new Error(`Module "${module.namespace}" capability has invalid or duplicate action intent "${intent.name}".`);
-      intents.add(intent.name);
     }
     for (const port of module.capability.requirements?.ports ?? []) {
       if (!/^[a-z][a-z0-9-]*$/.test(port.name)) throw new Error(`Module "${module.namespace}" capability has invalid port requirement "${port.name}".`);
     }
+    validateCapabilityWorkflows(module, context);
   }
   for (const eventType of module.eventTypes ?? []) if (typeof eventType !== "string" && eventType.schema) assertPortableJsonSchema(eventType.schema, `Event "${eventType.eventType}" schema`);
   for (const action of module.actions ?? []) {
@@ -205,15 +249,6 @@ function validateManifest(module, context = {}) {
       );
     }
   }
-  for (const descriptor of module.displayRenderers ?? []) {
-    const isPlannedEventType = context.plannedEventTypes?.has(descriptor.eventType) ?? false;
-    const isModuleEventType = eventTypes.includes(descriptor.eventType);
-    if (!isValidEventType(descriptor.eventType) && !isModuleEventType && !isPlannedEventType) {
-      throw new Error(
-        `Display renderer registered for unknown event type "${descriptor.eventType}". Register the event type before adding a display renderer.`
-      );
-    }
-  }
   const viewKeys = /* @__PURE__ */ new Set();
   for (const view of module.views ?? []) {
     if (!view.name.startsWith(`${module.namespace}/`) || !/^[a-z][a-z0-9-]*\/[a-z][a-z0-9/_-]*$/.test(view.name)) {
@@ -233,7 +268,7 @@ function validateManifest(module, context = {}) {
     for (const consumption of view.consumes) {
       const isPlanned = context.plannedEventTypes?.has(consumption.eventType) ?? false;
       const isModuleEvent = eventTypes.includes(consumption.eventType);
-      if (!isValidEventType(consumption.eventType) && !isPlanned && !isModuleEvent) {
+      if (!isPlanned && !isModuleEvent) {
         throw new Error(`View "${key}" consumes unknown event type "${consumption.eventType}".`);
       }
       if (consumption.schemaVersions.length === 0 || consumption.schemaVersions.some((version) => !Number.isInteger(version) || version < 1)) {
@@ -242,12 +277,12 @@ function validateManifest(module, context = {}) {
     }
   }
 }
-function sortModulesByDependency(modules, registeredNamespaces = registeredModuleNamespaces) {
+function sortModulesByDependency(modules, registeredNamespaces = /* @__PURE__ */ new Set()) {
   const modulesByNamespace = /* @__PURE__ */ new Map();
   for (const module of modules) {
     validateModuleNamespace(module.namespace);
     if (modulesByNamespace.has(module.namespace)) {
-      throw new Error(`Duplicate Fabric module namespace "${module.namespace}".`);
+      throw new Error(`Duplicate FabricModule namespace "${module.namespace}".`);
     }
     modulesByNamespace.set(module.namespace, module);
   }
@@ -291,9 +326,6 @@ function assertAcyclicRelations(modules) {
   ];
   for (const kind of relationKinds) {
     const edges = /* @__PURE__ */ new Map();
-    for (const [source, objectType] of registeredObjectDefinitions) {
-      edges.set(source, (objectType.relations ?? []).filter(kind.include).map((relation) => relation.target));
-    }
     for (const module of modules) {
       for (const objectType of module.objectTypes ?? []) {
         if (typeof objectType === "string") continue;
@@ -316,53 +348,13 @@ function assertAcyclicRelations(modules) {
     for (const node of edges.keys()) visit(node, []);
   }
 }
-function registerValidatedFabricModule(module) {
-  for (const objectType of module.objectTypes ?? []) {
-    registerObjectType(getObjectTypeName(objectType));
-    const qualified = qualifiedObjectType(module.namespace, getObjectTypeName(objectType));
-    registeredQualifiedObjectTypes.add(qualified);
-    if (typeof objectType !== "string") registeredObjectDefinitions.set(qualified, objectType);
-  }
-  for (const subjectType of module.subjectTypes ?? []) {
-    registerSubjectType(subjectType);
-  }
-  for (const eventType of module.eventTypes ?? []) {
-    registerEventType(getEventTypeName(eventType));
-  }
-  for (const policy of module.policies ?? []) {
-    registerPolicyIfMissing(policy);
-  }
-  for (const machine of module.stateMachines ?? []) {
-    registerStateMachineIfMissing(machine);
-  }
-  for (const action of module.actions ?? []) {
-    registerActionIfMissing(action);
-  }
-  for (const descriptor of module.displayRenderers ?? []) {
-    registerDisplayRenderer(descriptor.eventType, descriptor.renderer);
-  }
-  for (const view of module.views ?? []) registerViewContractIfMissing(view);
-  registeredModuleNamespaces.add(module.namespace);
-}
-function registerFabricModule(module) {
-  const availableObjectTypes = /* @__PURE__ */ new Set([
-    ...registeredQualifiedObjectTypes,
-    ...(module.objectTypes ?? []).map((objectType) => qualifiedObjectType(module.namespace, getObjectTypeName(objectType)))
-  ]);
-  validateManifest(module, { availableNamespaces: registeredModuleNamespaces, availableObjectTypes });
-  assertAcyclicRelations([module]);
-  registerValidatedFabricModule(module);
-}
-function registerFabricModules(modules) {
-  const availableNamespaces = /* @__PURE__ */ new Set([
-    ...registeredModuleNamespaces,
-    ...modules.map((module) => module.namespace)
-  ]);
+function validateAndOrderFabricModules(modules) {
+  const availableNamespaces = new Set(modules.map((module) => module.namespace));
   const plannedEventTypes = new Set(
     modules.flatMap((module) => (module.eventTypes ?? []).map(getEventTypeName))
   );
+  for (const eventType of createEventContractRegistry().eventTypes()) plannedEventTypes.add(eventType);
   const availableObjectTypes = /* @__PURE__ */ new Set([
-    ...registeredQualifiedObjectTypes,
     ...modules.flatMap(
       (module) => (module.objectTypes ?? []).map((objectType) => qualifiedObjectType(module.namespace, getObjectTypeName(objectType)))
     )
@@ -371,13 +363,15 @@ function registerFabricModules(modules) {
     validateManifest(module, { availableNamespaces, plannedEventTypes, availableObjectTypes });
   }
   assertAcyclicRelations(modules);
-  const sortedModules = sortModulesByDependency(modules);
-  for (const module of sortedModules) {
-    registerValidatedFabricModule(module);
-  }
-  return sortedModules;
+  return sortModulesByDependency(modules);
+}
+function registerFabricModules(modules) {
+  return validateAndOrderFabricModules(modules);
+}
+function registerFabricModule(module) {
+  validateAndOrderFabricModules([module]);
 }
 
-export { createModuleRegistry, getEventTypeName, getModuleDependencyNamespace, getObjectTypeName, registerFabricModule, registerFabricModules, validateModuleNamespace };
-//# sourceMappingURL=chunk-35SDMFCR.js.map
-//# sourceMappingURL=chunk-35SDMFCR.js.map
+export { createModuleRegistry, getEventTypeName, getModuleDependencyNamespace, getObjectTypeName, registerFabricModule, registerFabricModules, validateAndOrderFabricModules, validateModuleNamespace };
+//# sourceMappingURL=chunk-53YJK3LK.js.map
+//# sourceMappingURL=chunk-53YJK3LK.js.map