@inf-monkeys-tech/monkeys 1.1.13 → 1.1.14

package/README.md

@@ -60,6 +60,6 @@ The current `OntologyBindingSchema`, `PageRuntimeBundleSchema`, and `compilePage
 
 `assertViewProviderContract` checks provider/capability identity and ownership, then checks the declared contract. Unversioned nodes require exact revisions. `assertDeclarativeCapabilityContract` can prove an unversioned snapshot equivalent by reconstructing and comparing its complete immutable manifest/provider hashes; IDs alone are insufficient. `projectRuntimeContracts` additionally uses governed historical entries to enrich a rebuildable Page or Workbench projection. It preserves definitions, release references and dependency snapshots, and recalculates only the projection content hash.
 
-`assertCompatibleCapabilityUpgrade` guards catalog activation and package publication. Compatible inputs accept every historical value; outputs must remain valid for historical consumers. Optional input properties, enum widening and documentation annotations are supported; unknown Schema changes fail closed. Provider identity, lifecycle, effects, placement and access requirements remain protected. Breaking changes require a separate capability/provider identity with the existing implementation retained. Behavioral regression tests remain necessary alongside Schema checks.
+`assertCompatibleCapabilityUpgrade` guards catalog activation and package publication. Compatible inputs accept every historical value; outputs must remain valid for historical consumers. Optional input properties, optional ports, enum widening and documentation annotations are supported; unknown Schema changes fail closed. Provider identity, lifecycle, effects, placement and access requirements remain protected. Breaking changes require a separate capability/provider identity with the existing implementation retained. Behavioral regression tests remain necessary alongside Schema checks.
 
 `sameSchemaContract` compares stable identity, tenant scope, Schema version and content hash, allowing a different metadata revision for identical Schema content. Raw query results, permissions, command validation and immutable snapshot verification must continue to use their owning validators.

package/lib/esm/index.mjs

@@ -26147,7 +26147,6 @@ var assertCompatibleCapabilityUpgrade = (previous, next) => {
   }
   const manifestContract = (entry) => ({
     kind: entry.manifest.kind,
-    ports: entry.manifest.ports,
     runtime: { ...entry.manifest.runtime, providerBindings: entry.manifest.runtime.providerBindings.map((binding) => ({ ...binding, providerRef: { ...binding.providerRef, version: void 0 } })) },
     placement: entry.manifest.placement,
     accessibility: entry.manifest.accessibility
@@ -26174,7 +26173,15 @@ var assertCompatibleCapabilityUpgrade = (previous, next) => {
   for (const direction of ["inputPorts", "outputPorts"]) {
     const oldPorts = oldRegistration[direction];
     const newPorts = newRegistration[direction];
-    if (oldPorts.length !== newPorts.length) throw new TypeError("Public runtime ports cannot be removed or replaced.");
+    const oldManifestPorts = previous.manifest.ports?.[direction === "inputPorts" ? "inputs" : "outputs"] ?? [];
+    const newManifestPorts = next.manifest.ports?.[direction === "inputPorts" ? "inputs" : "outputs"] ?? [];
+    for (const port of oldManifestPorts) {
+      const replacement = newManifestPorts.find((candidate) => candidate.name === port.name);
+      if (!replacement || canonicalContentHash(port) !== canonicalContentHash(replacement)) throw new TypeError("Published runtime port semantics changed.");
+    }
+    if (newManifestPorts.some((port) => port.required && !oldManifestPorts.some((previousPort) => previousPort.name === port.name)) || newPorts.some((port) => port.required && !oldPorts.some((previousPort) => previousPort.name === port.name))) {
+      throw new TypeError("New runtime ports must be optional for published declarations.");
+    }
     for (const port of oldPorts) {
       const replacement = newPorts.find((candidate) => candidate.name === port.name);
       if (!replacement || port.required !== replacement.required || port.multiple !== replacement.multiple) throw new TypeError("Public runtime port cardinality changed.");
@@ -26188,7 +26195,12 @@ var assertCompatibleCapabilityUpgrade = (previous, next) => {
   if (canonicalContentHash(requirements(oldRegistration)) !== canonicalContentHash(requirements(newRegistration))) {
     throw new TypeError("Runtime Ontology access requirements changed.");
   }
-  for (const key of ["allowedSideEffects", "actionRequirements", "allowedSlots", "supportedSurfaces", "allowedParentCapabilityRefs", "allowedChildCapabilityRefs"]) {
+  const existingOutputs = new Set(oldRegistration.outputPorts.map((port) => port.name));
+  const existingActions = newRegistration.actionRequirements.filter((requirement) => existingOutputs.has(requirement.outputPort));
+  if (canonicalContentHash(oldRegistration.actionRequirements) !== canonicalContentHash(existingActions)) {
+    throw new TypeError("Published output action and permission requirements changed.");
+  }
+  for (const key of ["allowedSideEffects", "allowedSlots", "supportedSurfaces", "allowedParentCapabilityRefs", "allowedChildCapabilityRefs"]) {
     if (canonicalContentHash(oldRegistration[key]) !== canonicalContentHash(newRegistration[key])) throw new TypeError(`Runtime contract ${key} changed.`);
   }
 };