@inf-monkeys-tech/monkeys 1.1.17 → 1.1.19

package/lib/esm/contracts/index.mjs

@@ -9576,6 +9576,7 @@ var ReleaseDependencyRoleSchema = z15.enum([
   "view",
   "projection",
   "action",
+  "action-program",
   "token",
   "schema",
   "compiler",
@@ -9606,6 +9607,7 @@ var DependencyKindByRole = {
   view: "view",
   projection: "projection",
   action: "domain-command",
+  "action-program": "action-program",
   token: "design-token",
   schema: "schema",
   compiler: "compiler",
@@ -10558,8 +10560,14 @@ var QueryBindingSchema = z15.object({
 }).strict().superRefine((value, context) => {
   if (value.draftRetention) {
     const names = value.draftRetention.identityParameters;
-    if (value.execution !== "server" || new Set(names).size !== names.length || names.some((name) => !Object.prototype.hasOwnProperty.call(value.parameters, name))) {
-      context.addIssue({ code: "custom", path: ["draftRetention"], message: "Draft retention requires distinct declared Server query identity parameters." });
+    if (value.execution !== "server" || new Set(names).size !== names.length || names.some(
+      (name) => !Object.prototype.hasOwnProperty.call(value.parameters, name)
+    )) {
+      context.addIssue({
+        code: "custom",
+        path: ["draftRetention"],
+        message: "Draft retention requires distinct declared Server query identity parameters."
+      });
     }
   }
   if (value.targetProjection) {
@@ -11253,6 +11261,237 @@ var PageDataSchema = QueryBindingSchema.omit({
   cursorWindow: PageCursorWindowSchema.optional(),
   resultStateBindings: z15.array(PageResultStateBindingSchema).max(32).optional()
 }).strict();
+var ACTION_PROGRAM_ABI = "monkeys.action-program/2";
+var ActionProgramBudgetsSchema = z15.object({
+  rpcMs: z15.number().int().positive().max(3e4),
+  concurrentCalls: z15.number().int().positive().max(4),
+  calls: z15.number().int().positive().max(128),
+  messageBytes: z15.number().int().positive().max(1048576),
+  activeMs: z15.number().int().positive().max(12e4),
+  formMs: z15.number().int().positive().max(3e5),
+  wallMs: z15.number().int().positive().max(6e5)
+}).strict();
+var DEFAULT_ACTION_PROGRAM_BUDGETS = Object.freeze({
+  rpcMs: 3e4,
+  concurrentCalls: 4,
+  calls: 128,
+  messageBytes: 1048576,
+  activeMs: 12e4,
+  formMs: 3e5,
+  wallMs: 6e5
+});
+var ProgramSchemaRefSchema = RevisionRefSchema.refine(
+  (ref) => ref.kind === "schema",
+  "Expected an exact Schema reference."
+);
+var ActionProgramDependencySchema = z15.object({
+  kind: z15.enum(["query", "command"]),
+  revisionRef: RevisionRefSchema,
+  inputSchemaRevisionRef: ProgramSchemaRefSchema,
+  resultSchemaRevisionRef: ProgramSchemaRefSchema,
+  download: ActionBindingSchema.shape.success.shape.download,
+  // Fixed/identity arguments are injected by the trusted caller, never by guest code.
+  dynamicInputKeys: z15.array(ContractIdentifierSchema).max(128)
+}).strict().superRefine((value, context) => {
+  const expected = value.kind === "query" ? "domain-query-definition" : "domain-command";
+  if (value.revisionRef.kind !== expected)
+    context.addIssue({
+      code: "custom",
+      path: ["revisionRef", "kind"],
+      message: `Expected ${expected}.`
+    });
+  if (new Set(value.dynamicInputKeys).size !== value.dynamicInputKeys.length)
+    context.addIssue({
+      code: "custom",
+      path: ["dynamicInputKeys"],
+      message: "Dynamic input keys must be unique."
+    });
+});
+var ActionProgramDefinitionSchema = z15.object({
+  contract: z15.literal("ActionProgramDefinition"),
+  schemaVersion: z15.literal(1),
+  programId: ContractIdentifierSchema,
+  ownerRepo: ContractIdentifierSchema,
+  tenantScope: TenantScopeSchema,
+  supportedSurface: z15.literal("studio"),
+  inputSchemaRevisionRef: ProgramSchemaRefSchema,
+  resultSchemaRevisionRef: ProgramSchemaRefSchema,
+  entry: z15.literal("main"),
+  abi: z15.literal(ACTION_PROGRAM_ABI),
+  compiler: z15.string().trim().min(1).max(128),
+  target: z15.literal("browser-worker-es2020"),
+  sourceHash: Sha256Schema,
+  compiledHash: Sha256Schema,
+  sourceMapHash: Sha256Schema,
+  dependencies: z15.array(ActionProgramDependencySchema).max(128),
+  effects: z15.array(
+    z15.enum([
+      "form",
+      "toast",
+      "refresh",
+      "download",
+      "state.get",
+      "state.set"
+    ])
+  ).max(6),
+  refreshAliases: z15.array(ContractIdentifierSchema).max(128),
+  stateAliases: z15.array(
+    z15.object({
+      alias: ContractIdentifierSchema,
+      schemaRevisionRef: ProgramSchemaRefSchema
+    }).strict()
+  ).max(128),
+  budgets: ActionProgramBudgetsSchema
+}).strict().superRefine((value, context) => {
+  for (const [name, keys] of [
+    [
+      "dependencies",
+      value.dependencies.map((dep) => `${dep.kind}:${dep.revisionRef.id}`)
+    ],
+    ["effects", value.effects],
+    ["refreshAliases", value.refreshAliases],
+    ["stateAliases", value.stateAliases.map((entry) => entry.alias)]
+  ])
+    if (new Set(keys).size !== keys.length)
+      context.addIssue({
+        code: "custom",
+        path: [name],
+        message: "Program declarations must be unique."
+      });
+  const refs = [
+    value.inputSchemaRevisionRef,
+    value.resultSchemaRevisionRef,
+    ...value.dependencies.flatMap((dep) => [
+      dep.revisionRef,
+      dep.inputSchemaRevisionRef,
+      dep.resultSchemaRevisionRef
+    ]),
+    ...value.stateAliases.map((entry) => entry.schemaRevisionRef)
+  ];
+  refs.forEach((ref, index) => {
+    if (ref.visibility === "tenant" && ref.tenantScope && tenantScopeKey(ref.tenantScope) !== tenantScopeKey(value.tenantScope))
+      context.addIssue({
+        code: "custom",
+        path: ["dependencies"],
+        message: `Cross-tenant program reference ${index}.`
+      });
+  });
+});
+var ActionProgramArtifactSchema = z15.object({
+  definition: ActionProgramDefinitionSchema,
+  // Hashes use canonicalContentHash of the exact UTF-8 string, not engine bytecode.
+  javascript: z15.string().min(1).max(262144).refine(
+    (value) => new TextEncoder().encode(value).length <= 262144,
+    "Program exceeds 256 KiB."
+  ),
+  sourceMap: z15.string().min(1).max(524288).refine(
+    (value) => new TextEncoder().encode(value).length <= 524288,
+    "Source map exceeds 512 KiB."
+  )
+}).strict();
+var ProgramInputSourceSchema = z15.discriminatedUnion("kind", [
+  ...BindingSourceSchema.options,
+  ExpressionBindingSourceSchema
+]);
+var ProgramBindingShape = {
+  bindingId: ContractIdentifierSchema,
+  inputMapping: z15.record(ContractIdentifierSchema, ProgramInputSourceSchema),
+  dependencyInputs: z15.record(
+    ContractIdentifierSchema,
+    z15.record(ContractIdentifierSchema, ProgramInputSourceSchema)
+  ),
+  accessPolicy: AccessPolicySchema,
+  confirmation: I18nTextSchema.optional(),
+  when: PageExpressionSchema.optional(),
+  concurrencyKeyPath: PageValuePathSchema.min(1),
+  refreshAliases: z15.record(
+    ContractIdentifierSchema,
+    z15.array(ContractIdentifierSchema).min(1).max(128)
+  ),
+  stateAliases: z15.record(ContractIdentifierSchema, ContractIdentifierSchema)
+};
+var PageProgramActionSchema = z15.object({
+  ...ProgramBindingShape,
+  program: ContractIdentifierSchema,
+  port: ContractIdentifierSchema
+}).strict();
+var ProgramBindingSchema = z15.object({
+  ...ProgramBindingShape,
+  source: z15.object({
+    capabilityInstanceId: ContractIdentifierSchema,
+    port: ContractIdentifierSchema
+  }).strict(),
+  sourceIntentSchemaRevisionRef: ProgramSchemaRefSchema,
+  programRevisionRef: RevisionRefSchema.refine(
+    (ref) => ref.kind === "action-program",
+    "Expected action-program reference."
+  ),
+  definition: ActionProgramDefinitionSchema
+}).strict();
+function validateProgramBindingTargets(page, context) {
+  const ids = new Set(page.actionBindings.map((binding) => binding.bindingId));
+  const ports = new Set(
+    page.actionBindings.map(
+      (binding) => `${binding.source.capabilityInstanceId}:${binding.source.port}`
+    )
+  );
+  const dataIds = new Set(
+    [...page.ontologyBindings, ...page.queryBindings ?? []].map(
+      (binding) => binding.bindingId
+    )
+  );
+  for (const [index, binding] of (page.programBindings ?? []).entries()) {
+    const issue = (message) => context.addIssue({
+      code: "custom",
+      path: ["programBindings", index],
+      message
+    });
+    const port = `${binding.source.capabilityInstanceId}:${binding.source.port}`;
+    if (ids.has(binding.bindingId) || ports.has(port))
+      issue("Program binding id and event must be exclusive.");
+    ids.add(binding.bindingId);
+    ports.add(port);
+    if (!page.capabilityInstances.some(
+      (instance) => instance.instanceId === binding.source.capabilityInstanceId
+    ))
+      issue("Program source instance is missing.");
+    const exactKeys = (keys, expected) => keys.length === expected.length && keys.every((key) => expected.includes(key));
+    if (!exactKeys(
+      Object.keys(binding.refreshAliases),
+      binding.definition.refreshAliases
+    ) || Object.values(binding.refreshAliases).some(
+      (targets) => targets.some((target) => !dataIds.has(target))
+    ))
+      issue(
+        "Program refresh aliases must resolve exactly to declared data bindings."
+      );
+    if (!exactKeys(
+      Object.keys(binding.stateAliases),
+      binding.definition.stateAliases.map((entry) => entry.alias)
+    ))
+      issue("Program state aliases must match its manifest.");
+    for (const entry of binding.definition.stateAliases) {
+      const state = page.stateDefinitions?.find(
+        (state2) => state2.stateId === binding.stateAliases[entry.alias]
+      );
+      if (!state || !exactRevisionRef(state.schemaRevisionRef, entry.schemaRevisionRef))
+        issue("Program state alias has an incompatible Schema.");
+    }
+    const dependencyIds = binding.definition.dependencies.map(
+      (dep) => dep.revisionRef.id
+    );
+    if (!Object.keys(binding.dependencyInputs).every(
+      (key) => dependencyIds.includes(key)
+    ))
+      issue("Unknown program dependency input mapping.");
+    for (const dep of binding.definition.dependencies) {
+      if (Object.keys(binding.dependencyInputs[dep.revisionRef.id] ?? {}).some(
+        (key) => dep.dynamicInputKeys.includes(key)
+      ))
+        issue("Fixed dependency arguments cannot also be guest-writable.");
+    }
+  }
+}
 var PageActionSchema = ActionBindingSchema.omit({
   commandRevisionRef: true,
   source: true,
@@ -11295,6 +11534,7 @@ var PageNodeSchema = z15.lazy(
     }).strict().optional(),
     data: z15.array(PageDataSchema).optional(),
     actions: z15.array(PageActionSchema).optional(),
+    programActions: z15.array(PageProgramActionSchema).max(128).optional(),
     on: z15.array(PageInteractionSchema).optional(),
     effects: z15.array(PageEventEffectSchema).optional(),
     eventPayloads: z15.array(
@@ -11373,6 +11613,7 @@ var PageSchema = z15.object({
     for (const [field, values, target] of [
       ["data", node.data ?? [], dataIds],
       ["actions", node.actions ?? [], actionIds],
+      ["programActions", node.programActions ?? [], actionIds],
       ["on", node.on ?? [], interactionIds]
     ])
       for (const [index, value] of values.entries()) {
@@ -11426,6 +11667,7 @@ var ResolvedPageSchema = z15.object({
   ontologyBindings: z15.array(PersistedOntologyBindingSchema),
   queryBindings: z15.array(QueryBindingSchema).optional(),
   actionBindings: z15.array(ActionBindingSchema),
+  programBindings: z15.array(ProgramBindingSchema).max(128).optional(),
   pageAccessPolicy: AccessPolicySchema,
   managementAccess: ManagementAccessSchema,
   tokenRevisionRefs: z15.array(RevisionRefSchema).min(1),
@@ -11438,6 +11680,7 @@ var ResolvedPageSchema = z15.object({
     "restricted"
   ])
 }).strict().superRefine((value, context) => {
+  validateProgramBindingTargets(value, context);
   validateDeclaredRouteSurfaces(
     value.supportedSurfaces,
     value.routeClaims,
@@ -11795,6 +12038,35 @@ var ResolvedPageSchema = z15.object({
       )
     );
   }
+  (value.programBindings ?? []).forEach((binding, index) => {
+    const scopes = scopesForNode(
+      instanceNodes.get(binding.source.capabilityInstanceId)
+    );
+    checkScopedSources(binding.inputMapping, scopes, [
+      "programBindings",
+      index,
+      "inputMapping"
+    ]);
+    for (const [id, mapping] of Object.entries(binding.dependencyInputs))
+      checkScopedSources(mapping, scopes, [
+        "programBindings",
+        index,
+        "dependencyInputs",
+        id
+      ]);
+    if (binding.when) {
+      const reads = collectPageExpressionReads(binding.when);
+      checkScopedReads(reads, scopes, ["programBindings", index, "when"]);
+      if (reads.some(
+        (read) => read.root === "state" && !stateIds.has(read.path[0])
+      ))
+        context.addIssue({
+          code: "custom",
+          path: ["programBindings", index, "when"],
+          message: "Program condition references an unknown Page state."
+        });
+    }
+  });
   value.actionBindings.forEach((binding, index) => {
     const scopes = scopesForNode(
       instanceNodes.get(binding.source.capabilityInstanceId)
@@ -12375,7 +12647,10 @@ var ResolvedPageSchema = z15.object({
     const conflictingInteraction = interactionBindings.some(
       (candidate) => candidate.source.capabilityInstanceId === sourceId && candidate.source.port === binding.cursorWindow.pageChangePort
     );
-    const conflictingAction = value.actionBindings.some(
+    const conflictingAction = [
+      ...value.actionBindings,
+      ...value.programBindings ?? []
+    ].some(
       (candidate) => candidate.source.capabilityInstanceId === sourceId && candidate.source.port === binding.cursorWindow.pageChangePort
     );
     if (conflictingInteraction || conflictingAction) {
@@ -12386,6 +12661,20 @@ var ResolvedPageSchema = z15.object({
       });
     }
   });
+  (value.programBindings ?? []).forEach((binding, index) => {
+    validatePageStateSources(binding.inputMapping, [
+      "programBindings",
+      index,
+      "inputMapping"
+    ]);
+    for (const [id, mapping] of Object.entries(binding.dependencyInputs))
+      validatePageStateSources(mapping, [
+        "programBindings",
+        index,
+        "dependencyInputs",
+        id
+      ]);
+  });
   value.actionBindings.forEach((binding, index) => {
     if (!instanceIds.has(binding.source.capabilityInstanceId)) {
       context.addIssue({
@@ -13226,6 +13515,7 @@ var CompatiblePageRuntimeBundleSchema = z15.object({
   ontologyBindings: z15.array(PersistedOntologyBindingSchema),
   queryBindings: z15.array(QueryBindingSchema).default([]),
   actionBindings: z15.array(ActionBindingSchema),
+  programBindings: z15.array(ProgramBindingSchema).max(128).optional(),
   pageAccessPolicy: AccessPolicySchema,
   tokenRevisionRefs: z15.array(RevisionRefSchema),
   performanceBudgetRef: RevisionRefSchema,
@@ -13248,6 +13538,7 @@ var CompatiblePageRuntimeBundleSchema = z15.object({
       message: "Denied capability identities must be unique declared instances."
     });
   }
+  validateProgramBindingTargets(value, context);
   validateRuntimeBundleBase(value, "page-release", context);
   value.routeClaims.forEach((claim, index) => {
     if (claim.surface !== value.surface) {
@@ -20495,13 +20786,50 @@ var pageStreamRoutes = {
   control: (releaseSlotId, bindingId, streamId) => `${route(releaseSlotId, bindingId, streamId)}/control`
 };
 var PageStreamControlResultSchema = z30.object({ requestId: z30.string().uuid(), accepted: z30.literal(true) }).strict();
+
+// src/contracts/action-program-http.ts
+import { z as z31 } from "zod";
+var PrepareActionProgramRequestSchema = z31.object({
+  artifact: ActionProgramArtifactSchema,
+  expectedVersion: z31.number().int().min(0)
+}).strict();
+var RegisterActionProgramRequestSchema = PrepareActionProgramRequestSchema.extend({
+  planHash: Sha256Schema,
+  idempotencyKey: ContractIdentifierSchema
+}).strict();
+var ReadActionProgramRequestSchema = z31.object({ revisionRef: RevisionRefSchema }).strict();
+var RuntimeProgramLoadRequestSchema = z31.object({
+  context: DeclarativeRuntimeActionExecuteIntentSchema
+}).strict();
+var RuntimeProgramCallRequestSchema = RuntimeProgramLoadRequestSchema.extend({
+  kind: z31.enum(["query", "command"]),
+  dependencyId: ContractIdentifierSchema,
+  args: JsonObjectSchema,
+  stepKey: z31.string().min(1).max(128),
+  recoveryOnly: z31.literal(true).optional()
+}).strict();
+var RuntimeProgramLoadResultSchema = z31.object({
+  artifact: ActionProgramArtifactSchema,
+  input: JsonObjectSchema,
+  schemas: z31.array(z31.object({ revisionRef: RevisionRefSchema, document: JsonObjectSchema }).strict()).max(512)
+}).strict();
+var RuntimeProgramCallResultSchema = z31.object({ value: JsonObjectSchema }).strict();
+var RuntimeProgramDownloadResultSchema = z31.discriminatedUnion("kind", [
+  z31.object({ kind: z31.literal("native"), download: DeclarativeNativeDownloadSchema }).strict(),
+  z31.object({ kind: z31.literal("text-artifact"), fileName: z31.string().min(1).max(255), mimeType: z31.enum(["application/json", "text/plain", "text/csv"]), content: z31.string().max(1048576) }).strict()
+]);
 export {
+  ACTION_PROGRAM_ABI,
   AGENT_MODE_CAPABILITIES,
   AGENT_SESSION_CAPABILITY_EVIDENCE,
   AGENT_SESSION_COMMAND_POLICIES,
   AGENT_SESSION_RUNTIME_CAPABILITIES,
   AccessPolicySchema,
   ActionBindingSchema,
+  ActionProgramArtifactSchema,
+  ActionProgramBudgetsSchema,
+  ActionProgramDefinitionSchema,
+  ActionProgramDependencySchema,
   ActionResultBindingEffectSchema,
   ActionResultBindingEffectSourceSchema,
   ActionResultClipboardEffectSchema,
@@ -20640,6 +20968,7 @@ export {
   DECLARATIVE_CONTROL_ONTOLOGY_DEFINITIONS,
   DECLARATIVE_CONTROL_SCHEMA_VERSION,
   DECLARATIVE_MIGRATION_ERROR_CODES,
+  DEFAULT_ACTION_PROGRAM_BUDGETS,
   DEFAULT_AGENT_WORKBENCH_SIDEBAR_SECTIONS,
   DataContinuityEnvelopeSchema,
   DeclarationGraphEdgeSchema,
@@ -20860,6 +21189,7 @@ export {
   PageNavigationProjectionSchema,
   PageNodeSchema,
   PageOperatorSchema,
+  PageProgramActionSchema,
   PagePropertyBindingSchema,
   PageReleaseSchema,
   PageRendererProjectionSchema,
@@ -20887,6 +21217,7 @@ export {
   PermissionBundleSchema,
   PermissionDefinitionSchema,
   PersistedOntologyBindingSchema,
+  PrepareActionProgramRequestSchema,
   ProductAccessDeclarationSchema,
   ProductBodySchema,
   ProductContextSchema,
@@ -20894,6 +21225,7 @@ export {
   ProductDeclarativeAuthoringCatalogSchema,
   ProductDeclarativeCapabilityRegistrationSchema,
   ProductSurfaceSchema,
+  ProgramBindingSchema,
   ProjectionSpecSchema,
   PublicationPlanOperationSchema,
   PublicationPlanSchema,
@@ -20914,6 +21246,7 @@ export {
   RadarScoreProjectionSchema,
   RadarSelectionSchema,
   RadarWritebackRecordSchema,
+  ReadActionProgramRequestSchema,
   ReadablePageRuntimeBundleSchema,
   RecordEditorDraftOperationSchema,
   RecordEditorDraftSchema,
@@ -20922,6 +21255,7 @@ export {
   RecordEditorSubmissionSnapshotSchema,
   RecordEditorValidationDetailsSchema,
   ReferenceVisibilitySchema,
+  RegisterActionProgramRequestSchema,
   RegisteredServiceDomainQueryDataSourceSchema,
   ReleaseDependencyRoleSchema,
   ReleaseDependencySchema,
@@ -20952,6 +21286,11 @@ export {
   RoutePathTemplateSchema,
   RouteSpaceParameterSchema,
   RouteSpaceSchema,
+  RuntimeProgramCallRequestSchema,
+  RuntimeProgramCallResultSchema,
+  RuntimeProgramDownloadResultSchema,
+  RuntimeProgramLoadRequestSchema,
+  RuntimeProgramLoadResultSchema,
   SavedRadarQuerySchema,
   SchemaDefinitionSchema,
   ScopedIdentityRefSchema,