@ixo/editor 6.16.1 → 6.18.0

package/dist/action-manifest.json

@@ -1185,7 +1185,7 @@
       "hasDynamicEvents": true,
       "hasDynamicOutputSchema": true,
       "eligibleForEventTrigger": false,
-      "hasCustomInputValidation": false,
+      "hasCustomInputValidation": true,
       "can": "collection/lifecycle",
       "requiredCapability": "flow/block/execute",
       "inputSchema": {
@@ -1377,7 +1377,7 @@
       "hasDynamicEvents": false,
       "hasDynamicOutputSchema": true,
       "eligibleForEventTrigger": true,
-      "hasCustomInputValidation": false,
+      "hasCustomInputValidation": true,
       "can": "collection/users",
       "requiredCapability": "flow/block/execute",
       "inputSchema": {
@@ -1836,7 +1836,7 @@
       "hasDynamicEvents": false,
       "hasDynamicOutputSchema": false,
       "eligibleForEventTrigger": true,
-      "hasCustomInputValidation": false,
+      "hasCustomInputValidation": true,
       "can": "email/send",
       "requiredCapability": "email/send",
       "inputSchema": {
@@ -2184,7 +2184,7 @@
       "hasDynamicEvents": false,
       "hasDynamicOutputSchema": false,
       "eligibleForEventTrigger": true,
-      "hasCustomInputValidation": false,
+      "hasCustomInputValidation": true,
       "can": "gmail.email/send",
       "requiredCapability": "flow/block/execute",
       "outputSchema": [
@@ -2240,7 +2240,7 @@
       "hasDynamicEvents": false,
       "hasDynamicOutputSchema": false,
       "eligibleForEventTrigger": true,
-      "hasCustomInputValidation": false,
+      "hasCustomInputValidation": true,
       "can": "googlecalendar.event/create",
       "requiredCapability": "flow/block/execute",
       "outputSchema": [
@@ -3532,7 +3532,7 @@
       "hasDynamicEvents": false,
       "hasDynamicOutputSchema": false,
       "eligibleForEventTrigger": false,
-      "hasCustomInputValidation": false,
+      "hasCustomInputValidation": true,
       "can": "governance/member-proposal",
       "requiredCapability": "flow/block/execute",
       "outputSchema": [
@@ -3828,7 +3828,7 @@
       "hasDynamicEvents": false,
       "hasDynamicOutputSchema": false,
       "eligibleForEventTrigger": false,
-      "hasCustomInputValidation": false,
+      "hasCustomInputValidation": true,
       "can": "governance/settings-proposal",
       "requiredCapability": "flow/block/execute",
       "outputSchema": [
@@ -4284,7 +4284,7 @@
       "hasDynamicEvents": false,
       "hasDynamicOutputSchema": false,
       "eligibleForEventTrigger": false,
-      "hasCustomInputValidation": false,
+      "hasCustomInputValidation": true,
       "can": "governance.transaction/send-funds",
       "requiredCapability": "flow/block/execute",
       "outputSchema": [
@@ -4570,7 +4570,7 @@
       "hasDynamicEvents": false,
       "hasDynamicOutputSchema": false,
       "eligibleForEventTrigger": true,
-      "hasCustomInputValidation": false,
+      "hasCustomInputValidation": true,
       "can": "http/request",
       "inputSchema": {
         "type": "object",
@@ -6013,7 +6013,7 @@
       "hasDynamicEvents": false,
       "hasDynamicOutputSchema": false,
       "eligibleForEventTrigger": true,
-      "hasCustomInputValidation": false,
+      "hasCustomInputValidation": true,
       "can": "outlook.email/send",
       "requiredCapability": "flow/block/execute",
       "outputSchema": [
@@ -6796,7 +6796,7 @@
       "hasDynamicEvents": false,
       "hasDynamicOutputSchema": false,
       "eligibleForEventTrigger": true,
-      "hasCustomInputValidation": false,
+      "hasCustomInputValidation": true,
       "can": "slack.message/send",
       "requiredCapability": "flow/block/execute",
       "outputSchema": [

package/dist/{chunk-SSHQ3OTO.js → chunk-KIRDKAO3.js}

@@ -10,7 +10,7 @@ import {
   replaceBlockInFragment,
   swapBlocksInFragment,
   writeCompiledBlocksToFragment
-} from "./chunk-WYIBJ24C.js";
+} from "./chunk-N7J2JFCX.js";
 
 // src/core/lib/flowCompiler/authoring.ts
 import * as Y from "yjs";
@@ -257,4 +257,4 @@ export {
   resetStepRuntime,
   setFormAnswers
 };
-//# sourceMappingURL=chunk-SSHQ3OTO.js.map
+//# sourceMappingURL=chunk-KIRDKAO3.js.map

package/dist/{chunk-EWKSBZ62.js → chunk-LMNQ5HT6.js}

@@ -77,7 +77,7 @@ import {
   verifyCompletion,
   warnOnce,
   writeRunRecordAndReconcile
-} from "./chunk-WYIBJ24C.js";
+} from "./chunk-N7J2JFCX.js";
 
 // src/mantine/hooks/usePanel.ts
 import { useCallback, useMemo, useEffect, useRef } from "react";
@@ -51530,4 +51530,4 @@ export {
   ixoGraphQLClient,
   getEntity
 };
-//# sourceMappingURL=chunk-EWKSBZ62.js.map
+//# sourceMappingURL=chunk-LMNQ5HT6.js.map

package/dist/{chunk-WYIBJ24C.js → chunk-N7J2JFCX.js}

@@ -718,6 +718,8 @@ var CAN_TO_TYPE = {
   "bid/evaluate": "qi/bid.evaluate",
   "claim/submit": "qi/claim.submit",
   "claim/evaluate": "qi/claim.evaluate",
+  "collection/lifecycle": "qi/collection.lifecycle",
+  "collection/users": "qi/collection.users",
   "email/send": "qi/email.send",
   "notification/push": "qi/notification.push",
   "matrix/dm": "qi/matrix.dm",
@@ -1681,6 +1683,15 @@ registerAction({
     { path: "operation", displayName: "Operation", type: "string", description: "add | remove | update-weight" },
     { path: "createdAt", displayName: "Created At", type: "string", description: "ISO timestamp of proposal creation" }
   ],
+  // Mirrors run()'s throw-preamble (there is no inputSchema to declare
+  // requiredness on): coreAddress, operation and a non-empty members list.
+  getMissingInputs: (inputs) => {
+    const missing = [];
+    if (!String(inputs.coreAddress || "").trim()) missing.push("coreAddress");
+    if (!String(inputs.operation || "").trim()) missing.push("operation");
+    if (!Array.isArray(inputs.members) || inputs.members.length === 0) missing.push("members");
+    return missing;
+  },
   run: async (inputs, ctx) => {
     const handlers = ctx.handlers;
     if (!handlers) {
@@ -1770,6 +1781,17 @@ registerAction({
     { path: "coreAddress", displayName: "Core Address", type: "string", description: "The DAO core contract address" },
     { path: "createdAt", displayName: "Created At", type: "string", description: "ISO timestamp of proposal creation" }
   ],
+  // Mirrors run()'s throw-preamble (there is no inputSchema to declare
+  // requiredness on): coreAddress and the three numeric voting settings.
+  getMissingInputs: (inputs) => {
+    const missing = [];
+    if (!String(inputs.coreAddress || "").trim()) missing.push("coreAddress");
+    for (const name of ["votingPeriodHours", "quorumPercent", "thresholdPercent"]) {
+      const value = inputs[name];
+      if (value === void 0 || value === null || String(value).trim() === "") missing.push(name);
+    }
+    return missing;
+  },
   run: async (inputs, ctx) => {
     const handlers = ctx.handlers;
     if (!handlers) {
@@ -1964,6 +1986,17 @@ registerAction({
     { path: "recipient", displayName: "Recipient", type: "string", description: "Destination address of the spend" },
     { path: "createdAt", displayName: "Created At", type: "string", description: "ISO timestamp of proposal creation" }
   ],
+  // Mirrors run()'s throw-preamble (there is no inputSchema to declare
+  // requiredness on): coreAddress, recipient, denom and amount.
+  getMissingInputs: (inputs) => {
+    const missing = [];
+    for (const name of ["coreAddress", "recipient", "denom"]) {
+      if (!String(inputs[name] || "").trim()) missing.push(name);
+    }
+    const amount = inputs.amount;
+    if (amount === void 0 || amount === null || String(amount).trim() === "") missing.push("amount");
+    return missing;
+  },
   run: async (inputs, ctx) => {
     const handlers = ctx.handlers;
     if (!handlers) {
@@ -2883,6 +2916,9 @@ registerAction({
       body: { type: "string", description: "Request body; sent for non-GET methods. Accepts a string or an object (serialized to JSON)." }
     }
   },
+  // run() accepts `endpoint` OR `url` — mirror the alias the schema's
+  // required array can't express.
+  getMissingInputs: (inputs) => String(inputs.endpoint || inputs.url || "").trim() ? [] : ["endpoint"],
   run: async (inputs, ctx) => {
     const endpoint = inputs.endpoint ?? inputs.url;
     const url = typeof endpoint === "string" ? endpoint : "";
@@ -2953,6 +2989,14 @@ registerAction({
     { path: "messageId", displayName: "Message ID", type: "string", description: "The unique ID of the sent email" },
     { path: "sentAt", displayName: "Sent At", type: "string", description: "Timestamp when the email was sent" }
   ],
+  // run() accepts `template` OR `templateName` for the template — the
+  // schema's required array can't express the alias, so mirror the OR here.
+  getMissingInputs: (inputs) => {
+    const missing = [];
+    if (!String(inputs.to || "").trim()) missing.push("to");
+    if (!String(inputs.template || "").trim() && !String(inputs.templateName || "").trim()) missing.push("templateName");
+    return missing;
+  },
   run: async (inputs, ctx) => {
     if (!ctx.services.email) {
       throw new Error("Email service not configured");
@@ -7409,6 +7453,10 @@ registerAction({
   type: COLLECTION_LIFECYCLE_ACTION_TYPE,
   can: "collection/lifecycle",
   sideEffect: true,
+  // Chain transaction signed as the entity admin — only the human in the
+  // Portal FlowDetail holds that authority. Orchestrators gather inputs and
+  // hand off; they must not run or delegate this.
+  executionOwner: "human",
   // Dynamic resolvers predate merge-by-default and intentionally control
   // the full vocabulary (e.g. returning [] to hide the static baseline).
   dynamicResolutionMode: "replace",
@@ -7439,6 +7487,21 @@ registerAction({
       intents: { type: "object", description: "create/updateIntents \u2014 intent configuration." }
     }
   },
+  // Mirrors run()'s throw-preamble: `operation` selects the branch, `create`
+  // needs the entity + protocol DIDs, and every other op targets an existing
+  // collection so it needs `collectionId`. Per-op value validity (state enum,
+  // quota vs count, at-least-one-date) stays with run().
+  getMissingInputs: (inputs) => {
+    const operation = String(inputs?.operation || "").trim();
+    if (!operation) return ["operation"];
+    if (operation === "create") {
+      const missing = [];
+      if (!String(inputs?.entity || "").trim()) missing.push("entity");
+      if (!String(inputs?.protocol || "").trim()) missing.push("protocol");
+      return missing;
+    }
+    return String(inputs?.collectionId || "").trim() ? [] : ["collectionId"];
+  },
   run: async (inputs, ctx) => {
     const service = ctx.services.collection;
     if (!service) {
@@ -7656,6 +7719,10 @@ registerAction({
   type: COLLECTION_USERS_ACTION_TYPE,
   can: "collection/users",
   sideEffect: true,
+  // Authz grants signed by the entity admin — only the human in the Portal
+  // FlowDetail holds that authority. Orchestrators gather inputs and hand
+  // off; they must not run or delegate this.
+  executionOwner: "human",
   // Dynamic resolvers predate merge-by-default and intentionally control
   // the full vocabulary (e.g. returning [] to hide the static baseline).
   dynamicResolutionMode: "replace",
@@ -7692,6 +7759,16 @@ registerAction({
       members: { type: "array", description: "Resolved members to fan the grant out to when granteeKind is group-members." }
     }
   },
+  // Only the decision inputs are human-askable: `operation` selects the
+  // branch and `collectionId` targets the collection (often filled by the
+  // `created` event of an upstream collection.lifecycle block). adminAddress,
+  // role and grantee fields are resolved by the host/FlowDetail, so a blank
+  // there is not something to escalate to a human for.
+  getMissingInputs: (inputs) => {
+    const operation = String(inputs?.operation || "").trim();
+    if (!operation) return ["operation"];
+    return String(inputs?.collectionId || "").trim() ? [] : ["collectionId"];
+  },
   run: async (inputs, ctx) => {
     const service = ctx.services.collectionUsers;
     if (!service) {
@@ -8154,6 +8231,13 @@ function fieldValues(inputs) {
 function missingRequired(schema, values) {
   return (schema.parameters.required || []).filter((name) => !(values[name] ?? "").trim());
 }
+function delegatedToolMissingInputs(schema, rawInputs) {
+  const parsed = parseDelegatedToolInputs(rawInputs);
+  const missing = [];
+  if (!parsed.connection?.bindingId) missing.push("connection");
+  missing.push(...missingRequired(schema, fieldValues(parsed)));
+  return missing;
+}
 function coerceToolArgs(schema, values) {
   const out = {};
   for (const [name, prop] of Object.entries(schema.parameters.properties || {})) {
@@ -8237,6 +8321,9 @@ registerAction({
   requiredCapability: "flow/block/execute",
   // Can be wired to another block's event (e.g. form submitted → send email).
   eligibleForEventTrigger: true,
+  // Mirrors executeDelegatedTool's gates: the bound connection plus the
+  // tool schema's required fields, so orchestrators ask before run() throws.
+  getMissingInputs: (inputs) => delegatedToolMissingInputs(GMAIL_SEND_SCHEMA, inputs),
   outputSchema: GMAIL_SEND_OUTPUT_SCHEMA,
   events: [
     {
@@ -8314,6 +8401,9 @@ registerAction({
   requiredCapability: "flow/block/execute",
   // Can be wired to another block's event (e.g. form submitted → send email).
   eligibleForEventTrigger: true,
+  // Mirrors executeDelegatedTool's gates: the bound connection plus the
+  // tool schema's required fields, so orchestrators ask before run() throws.
+  getMissingInputs: (inputs) => delegatedToolMissingInputs(OUTLOOK_SEND_SCHEMA, inputs),
   outputSchema: OUTLOOK_SEND_OUTPUT_SCHEMA,
   events: [
     {
@@ -8388,6 +8478,9 @@ registerAction({
   requiredCapability: "flow/block/execute",
   // Can be wired to another block's event (e.g. form submitted → post message).
   eligibleForEventTrigger: true,
+  // Mirrors executeDelegatedTool's gates: the bound connection plus the
+  // tool schema's required fields, so orchestrators ask before run() throws.
+  getMissingInputs: (inputs) => delegatedToolMissingInputs(SLACK_SEND_SCHEMA, inputs),
   outputSchema: SLACK_SEND_OUTPUT_SCHEMA,
   events: [
     {
@@ -8464,6 +8557,9 @@ registerAction({
   defaultRequiresConfirmation: true,
   requiredCapability: "flow/block/execute",
   eligibleForEventTrigger: true,
+  // Mirrors executeDelegatedTool's gates: the bound connection plus the
+  // tool schema's required fields, so orchestrators ask before run() throws.
+  getMissingInputs: (inputs) => delegatedToolMissingInputs(GOOGLECALENDAR_CREATE_SCHEMA, inputs),
   outputSchema: GOOGLECALENDAR_CREATE_OUTPUT_SCHEMA,
   events: [
     {
@@ -15206,4 +15302,4 @@ export {
   executeQueuedFlowAgentCoreCommands,
   FlowAgentService
 };
-//# sourceMappingURL=chunk-WYIBJ24C.js.map
+//# sourceMappingURL=chunk-N7J2JFCX.js.map