@ixo/editor 6.23.0 → 6.24.0

package/dist/{chunk-UIZV4YAW.js → chunk-DBH72SPW.js}

@@ -112,7 +112,7 @@ import {
   warnOnce,
   writeActionState,
   writeRunRecordAndReconcile
-} from "./chunk-VFYF2B5E.js";
+} from "./chunk-BTMC55BR.js";
 
 // src/mantine/hooks/usePanel.ts
 import { useCallback, useMemo, useEffect, useRef } from "react";
@@ -51875,4 +51875,4 @@ export {
   ixoGraphQLClient,
   getEntity
 };
-//# sourceMappingURL=chunk-UIZV4YAW.js.map
+//# sourceMappingURL=chunk-DBH72SPW.js.map

package/dist/{chunk-LBFFAKSN.js → chunk-R3H7TDTG.js}

@@ -14,7 +14,7 @@ import {
   swapBlocksInFragment,
   writeActionState,
   writeCompiledBlocksToFragment
-} from "./chunk-VFYF2B5E.js";
+} from "./chunk-BTMC55BR.js";
 
 // src/core/lib/flowCompiler/authoring.ts
 import * as Y from "yjs";
@@ -370,4 +370,4 @@ export {
   setFlowParticipantPowerLevel,
   setFlowParticipantRequirements
 };
-//# sourceMappingURL=chunk-LBFFAKSN.js.map
+//# sourceMappingURL=chunk-R3H7TDTG.js.map

package/dist/core/index.d.ts

@@ -1,5 +1,5 @@
-import { an as CompiledBlock, W as CompiledFlow, ao as CompiledEdge, af as FlowAgentCommand, ah as FlowAgentContext, ag as FlowAgentCommandResult, ai as FlowAgentExecutor, ak as FlowAgentNodeSnapshot, ap as FlowAgentBlockerCause, al as FlowAgentPublicNodeState, Q as FlowConnectionBinding } from '../store-B60v3oba.js';
-export { aH as AcquireFlowAgentLeaseParams, as as ActionBlockLike, at as ActionExecutionCompletionState, aX as ActorConstraint, A as AuthorizationResult, U as BaseUcanFlow, au as BuildActionRunInputsParams, av as BuildActionRunInputsResult, ad as BuildFlowAgentContextParams, a_ as CompiledFlowNode, L as CompilerRegistry, aW as ConditionRef, aI as CreateAgentCommandParams, aJ as EvaluateFlowAgentPolicyParams, aw as ExecuteActionBlockParams, ax as ExecuteActionBlockResult, E as ExecuteNodeParams, d as ExecutionContext, c as ExecutionOutcome, G as FLOW_CONNECTIONS_MAP_KEY, H as FLOW_CONNECTION_BINDINGS_MAP_KEY, F as FLOW_PARTICIPANTS_MAP_KEY, ae as FlowAgentActor, aM as FlowAgentCommandBase, aN as FlowAgentCommandStatus, aO as FlowAgentCommandType, aj as FlowAgentLease, aP as FlowAgentLedgerEvent, aQ as FlowAgentLedgerEventType, aR as FlowAgentMaps, aK as FlowAgentOrchestratorOptions, aS as FlowAgentPolicyDecision, aT as FlowAgentRunPhase, Y as FlowAgentService, aL as FlowAgentServiceOptions, am as FlowAgentTickResult, V as FlowCapability, P as FlowConnection, T as FlowConnectionRequirementKey, O as FlowParticipant, X as FlowStrategy, M as MergeResult, N as NodeActionResult, R as ReadFlowOptions, J as ReadFlowResult, aZ as RuntimeRef, S as SetupFlowOptions, I as SetupFlowResult, aY as TTLConstraint, aV as TriggerResolutionContext, a$ as TriggerSpec, Z as acquireFlowAgentLease, _ as appendAgentLedgerEvent, aq as buildActionRunInputs, a as buildAuthzFromProps, $ as buildFlowAgentContext, b as buildFlowNodeFromBlock, ay as canMatches, a0 as cleanupExpiredFlowAgentLeases, k as compileBaseUcanFlow, az as computeAgentCommandId, a1 as createAgentCommand, n as decompileToBaseUcanFlow, a2 as evaluateFlowAgentPolicy, ar as executeActionBlock, e as executeNode, a3 as executeQueuedAgentCommands, j as getActiveEditor, a4 as getFlowAgentMaps, i as isAuthorized, aA as isCapabilityMatch, aB as isExternalMutation, b0 as isRuntimeRef, m as mergeCompiledFlows, a5 as planRalphLoopCommands, a6 as queueAgentCommand, aC as readAgentCommands, a7 as readAgentLedgerEvents, l as readCompiledFlowFromYDoc, g as readFlow, aD as readFlowAgentLeases, r as readFlowAsBaseUcan, B as readFlowConnectionBindings, v as readFlowConnections, f as readFlowFromEditor, o as readFlowParticipants, a8 as readQueuedAgentCommands, a9 as releaseFlowAgentLease, x as removeFlowConnection, D as removeFlowConnectionBinding, p as removeFlowParticipant, aE as requiredCapabilityForCommand, aU as resolveRuntimeRefs, aF as resourceMatches, h as setActiveEditor, y as setFlowConnectionOptional, z as setFlowConnectionRequires, q as setFlowParticipantPowerLevel, t as setFlowParticipantRequirements, s as setupFlowFromBaseUcan, aa as tickFlowAgent, aG as updateAgentCommand, w as upsertFlowConnection, C as upsertFlowConnectionBinding, u as upsertFlowParticipant, ab as validateAgentCommand, ac as validateFlowAgentLease } from '../store-B60v3oba.js';
+import { an as CompiledBlock, W as CompiledFlow, ao as CompiledEdge, af as FlowAgentCommand, ah as FlowAgentContext, ag as FlowAgentCommandResult, ai as FlowAgentExecutor, ak as FlowAgentNodeSnapshot, ap as FlowAgentBlockerCause, al as FlowAgentPublicNodeState, Q as FlowConnectionBinding } from '../store-wmrw3T5K.js';
+export { aH as AcquireFlowAgentLeaseParams, as as ActionBlockLike, at as ActionExecutionCompletionState, aX as ActorConstraint, A as AuthorizationResult, U as BaseUcanFlow, au as BuildActionRunInputsParams, av as BuildActionRunInputsResult, ad as BuildFlowAgentContextParams, a_ as CompiledFlowNode, L as CompilerRegistry, aW as ConditionRef, aI as CreateAgentCommandParams, aJ as EvaluateFlowAgentPolicyParams, aw as ExecuteActionBlockParams, ax as ExecuteActionBlockResult, E as ExecuteNodeParams, d as ExecutionContext, c as ExecutionOutcome, G as FLOW_CONNECTIONS_MAP_KEY, H as FLOW_CONNECTION_BINDINGS_MAP_KEY, F as FLOW_PARTICIPANTS_MAP_KEY, ae as FlowAgentActor, aM as FlowAgentCommandBase, aN as FlowAgentCommandStatus, aO as FlowAgentCommandType, aj as FlowAgentLease, aP as FlowAgentLedgerEvent, aQ as FlowAgentLedgerEventType, aR as FlowAgentMaps, aK as FlowAgentOrchestratorOptions, aS as FlowAgentPolicyDecision, aT as FlowAgentRunPhase, Y as FlowAgentService, aL as FlowAgentServiceOptions, am as FlowAgentTickResult, V as FlowCapability, P as FlowConnection, T as FlowConnectionRequirementKey, O as FlowParticipant, X as FlowStrategy, M as MergeResult, N as NodeActionResult, R as ReadFlowOptions, J as ReadFlowResult, aZ as RuntimeRef, S as SetupFlowOptions, I as SetupFlowResult, aY as TTLConstraint, aV as TriggerResolutionContext, a$ as TriggerSpec, Z as acquireFlowAgentLease, _ as appendAgentLedgerEvent, aq as buildActionRunInputs, a as buildAuthzFromProps, $ as buildFlowAgentContext, b as buildFlowNodeFromBlock, ay as canMatches, a0 as cleanupExpiredFlowAgentLeases, k as compileBaseUcanFlow, az as computeAgentCommandId, a1 as createAgentCommand, n as decompileToBaseUcanFlow, a2 as evaluateFlowAgentPolicy, ar as executeActionBlock, e as executeNode, a3 as executeQueuedAgentCommands, j as getActiveEditor, a4 as getFlowAgentMaps, i as isAuthorized, aA as isCapabilityMatch, aB as isExternalMutation, b0 as isRuntimeRef, m as mergeCompiledFlows, a5 as planRalphLoopCommands, a6 as queueAgentCommand, aC as readAgentCommands, a7 as readAgentLedgerEvents, l as readCompiledFlowFromYDoc, g as readFlow, aD as readFlowAgentLeases, r as readFlowAsBaseUcan, B as readFlowConnectionBindings, v as readFlowConnections, f as readFlowFromEditor, o as readFlowParticipants, a8 as readQueuedAgentCommands, a9 as releaseFlowAgentLease, x as removeFlowConnection, D as removeFlowConnectionBinding, p as removeFlowParticipant, aE as requiredCapabilityForCommand, aU as resolveRuntimeRefs, aF as resourceMatches, h as setActiveEditor, y as setFlowConnectionOptional, z as setFlowConnectionRequires, q as setFlowParticipantPowerLevel, t as setFlowParticipantRequirements, s as setupFlowFromBaseUcan, aa as tickFlowAgent, aG as updateAgentCommand, w as upsertFlowConnection, C as upsertFlowConnectionBinding, u as upsertFlowParticipant, ab as validateAgentCommand, ac as validateFlowAgentLease } from '../store-wmrw3T5K.js';
 import { af as ActionDefinition, ap as ActionDoneContract, aq as ActionEventDefinition, ar as OutputSchemaField, ab as ActionServices, ag as FlowNodeRuntimeState, ad as RunEventAppender, as as RunEventInput, F as FlowRuntimeStateManager, at as RunJsonValue, au as ActionRunContext, av as CompletionCheck, k as StoredInvocation, aa as PendingInvocation, aw as ActionReadBackMetadata, a9 as IxoEditorType, ax as ReadBackTerminalState, ae as ActionResult, ay as ActionProofDeclaration, az as RunRecordDetails, g as UcanService, ac as ActionHandlers, U as UcanDelegationStore, S as StoredDelegation, I as InvocationStore, aA as FlowMetadata, a6 as FlowNode } from '../index-x1R0c9P_.js';
 export { bV as ActionContext, bD as ActionRunEventInput, bZ as BidService, bB as CancelRunParams, c4 as CarbonService, cm as ClaimCollectionURI, b_ as ClaimService, bC as CloseRunParams, b$ as CollectionService, c0 as CollectionUsersService, cw as CreateDelegationParams, cx as CreateInvocationParams, cv as CreateRootDelegationParams, cl as DID, D as DelegationChainValidationResult, l as DelegationGrant, bX as EmailService, c5 as EntityService, a8 as EvaluationStatus, ct as ExecutionWithInvocationResult, ba as ExplicitRunRequiredError, ck as FailedListenerRun, cu as FindProofsResult, bE as FinishRunResult, a7 as FlowNodeAuthzExtension, cq as FlowNodeBase, bx as FlowNotMigratedError, c6 as FlowRunLifecycleService, bW as HttpService, c2 as IntegrationsService, cr as InvocationRequest, cs as InvocationResult, aD as LEGACY_RUN_STORAGE_VERSION, bH as LifecycleRunEventInput, cn as LinkedClaim, aE as MULTI_RUN_STORAGE_VERSION, c1 as MatrixCredentialService, bF as MigrateFlowParams, bG as MigrateFlowResult, be as MultiRunMigrationResult, co as NodeServiceReport, cp as NodeState, bY as NotifyService, c3 as OracleService, aF as RUNS_TERMINAL_MAP_KEY, cj as RUN_RECORD_AUDIT_TYPE, aG as RUN_STORAGE_VERSION_KEY, bI as RunDefinitionBlock, bJ as RunDefinitionDrift, bK as RunDefinitionSnapshot, bL as RunJsonObject, bN as RunLifecycleAuthorizationDecision, by as RunLifecycleAuthorizationError, bO as RunLifecycleAuthorizationRequest, bP as RunLifecycleAuthorizer, bQ as RunLifecycleCapability, bM as RunLogEventInput, bR as RunManifest, bd as RunMeta, bz as RunNotMigratedError, bA as RunNotReadyError, bS as RunSnapshot, bf as RunStorageVersion, bg as RunTerminalRecord, bT as StartRunParams, bU as StartRunResult, bb as TerminalRunExecutionError, j as UcanCapability, h as UcanServiceConfig, i as UcanServiceHandlers, bc as UnknownRunError, aH as adoptLegacyRuntime, c7 as appendRunRecord, a$ as assertRunActionExecutionAllowed, bh as buildRunDefinitionSnapshot, bi as cancelRun, aI as clearAllActionState, aC as clearRuntimeForTemplateClone, bj as closeRun, aJ as collectPhantomLegacyRun, ci as computePendingInvocationId, bk as computeRunDefinitionHash, bl as computeRunSummary, ca as countPendingInvocations, d as createInvocationStore, e as createMemoryInvocationStore, b as createMemoryUcanDelegationStore, bm as createRunId, aK as createRunRuntimeReader, aL as createRunRuntimeReaderWithDoc, aM as createRunScopedRuntimeManager, bn as createRunUlid, c as createRuntimeStateManager, a as createUcanDelegationStore, f as createUcanService, aB as createYDocRuntimeManager, aN as deleteActionState, bo as detectRunDefinitionDrift, aO as enableMultiRunStorage, aP as ensureRun, cf as findFailedListenersForSourceRun, cb as getOrCreateBlockPendingMap, c9 as getPendingInvocationsMap, aQ as getRunActionsMap, aR as getRunMeta, aU as getRunStorageVersion, aS as getRunsMap, aT as getRunsTerminalMap, aV as hasLegacyRuntimeHistory, b0 as isBelowTheLineBlock, aW as isLegacyRuntimeAdoptionEnabled, aX as isRecordInRun, bp as listOpenRuns, bq as listRuns, br as migrateFlowToSessions, cd as queuePendingInvocation, aY as readActionState, aZ as readActionStates, cc as readPendingInvocations, bs as readRunActionStates, c8 as readRunRecords, bt as recordRunDefinitionDrift, ce as removePendingInvocation, cg as replayFailedListenerRun, a_ as resetActionState, b1 as resolveActiveRunId, b2 as resolveRecordRunId, b3 as resolveRunIdForExecution, b4 as resolveRunIdForRead, b5 as seedRunFromLegacyRuntime, bu as setAdvisoryActiveRunId, b6 as setMultiRunStorage, ch as snapshotInputRefs, bv as startRun, b7 as subscribeToActionState, bw as toRunJsonValue, b8 as usesLegacyRuntimeCompatibility, b9 as writeActionState } from '../index-x1R0c9P_.js';
 import * as Y from 'yjs';
@@ -42,6 +42,23 @@ declare const doneWhenCompleted: ActionDoneContract;
  * is the count of successful runs in the audit trail, not the summary entry.
  */
 declare const neverDone: ActionDoneContract;
+/** Normalize UCAN `can` abilities to the canonical slash vocabulary. */
+declare function normalizeCan(can: string): string;
+/**
+ * Normalize UCAN capability patterns while accepting dotted legacy aliases.
+ * Patterns follow the same vocabulary as abilities, so this delegates to
+ * {@link normalizeCan} (`claim.*` → `claim/*`, `xero.invoice.*` → `xero.invoice/*`).
+ */
+declare function normalizeCapabilityPattern(pattern: string): string;
+/** Resolve a registry action type to its canonical UCAN `can` ability. */
+declare function actionTypeToCan(type: string): string | undefined;
+/** Resolve a UCAN `can` ability to its canonical namespaced registry action type. */
+declare function canToActionType(can: string): string | undefined;
+interface CapabilityPatternCoversCanOptions {
+    allowGlobalWildcard?: boolean;
+}
+/** Return true when a capability pattern grants the requested `can` ability. */
+declare function capabilityPatternCoversCan(pattern: string, can: string, options?: CapabilityPatternCoversCanOptions): boolean;
 declare function registerAction<TInputs extends Record<string, any> = Record<string, any>>(definition: ActionDefinition<TInputs>): void;
 declare function getAction(type: string): ActionDefinition | undefined;
 declare function getAllActions(): ActionDefinition[];
@@ -1350,4 +1367,4 @@ declare function createOracleInitFlowTemplate(): {
     nodes: FlowNode[];
 };
 
-export { ActionDefinition, ActionDoneContract, ActionHandlers, type ActionManifest, type ActionManifestEntry, ActionReadBackMetadata, type ActionReadBackResolution, type ActionReadBackResolver, type ActionReadBackResolverInput, ActionResult, ActionRunContext, ActionServices, type AddFlowNodeOptions, type BlockCondition, type BlockConditionInput, type BlockConditionsResult, type BlockExecutionEligibility, type BoundedRunOutput, type ClassifyNodeStateInput, CompiledBlock, CompiledEdge, CompiledFlow, CompletionCheck, type CompletionReconciliationTransition, type CompletionVerification, type CompletionVerificationStatus, type ConditionActionResult, type ConditionConfig, type ConditionEvaluationOptions, type ConditionEvaluationResult, type ConditionOperator, type DetailedResolution, type EvaluatorOperator, type ExecuteFlowAgentCoreCommandOptions, type ExecuteQueuedFlowAgentCoreCommandsOptions, FlowAgentBlockerCause, FlowAgentCommand, FlowAgentCommandResult, FlowAgentContext, FlowAgentExecutor, FlowAgentNodeSnapshot, FlowAgentPublicNodeState, FlowConnectionBinding, type FlowDocumentNode, type FlowDocumentRead, FlowNode, FlowNodeRuntimeState, FlowRuntimeStateManager, type FlowVersionString, INVOCATIONS_MAP_KEY, InvalidConditionConfigError, InvocationStore, LATEST_VERSION, MAX_RUN_ACTION_OUTPUT_BYTES, type ManifestDoneDeclaration, type ManifestProofDeclaration, OutputSchemaField, PROOF_MISSING_CODE, type ParsedReference, PendingInvocation, type PendingRunTimelineEvent, type ProofValidationResult, ReadBackTerminalState, type ReconcileActionReadBackParams, type ReconcileActionReadBackResult, type ReconcileCompletionParams, type ReconcileCompletionResult, type ResolveReferencesOptions, RunEventAppender, RunEventInput, RunJsonValue, RunRecordDetails, type RunTimelineAppendResult, SERVICE_VERBS, STEP_COMPLETED_EVENT, STEP_COMPLETED_EVENT_NAME, type ServiceVerb, StoredDelegation, StoredInvocation, UcanDelegationStore, UcanService, type UnresolvedReference, type UnresolvedReferenceReason, VERSION_MANIFEST, type VersionPolicy, XERO_TOOLKIT, XERO_WORK_ITEMS_MAP_NAME, XERO_WORK_TERMINAL_MAP_NAME, type XeroWorkAttempt, type XeroWorkItem, type XeroWorkItemFilter, type XeroWorkKind, type XeroWorkProvenance, type XeroWorkSource, type XeroWorkStatus, type XeroWorkTerminalRecord, addFlowNode, appendRunTimelineEvent, appendRunTimelineEvents, boundRunActionOutput, boundRunEventJson, buildBlockConditionsProp, buildServicesFromHandlers, buildXeroInvoiceWorkKey, buildXeroPaymentWorkKey, canToType, classifyBlockerCause, classifyNodeState, computeCID, computeJsonCID, createOracleInitFlowTemplate, createReference, createRunEventIdempotencyKey, dispatchFlowStartTriggers, doneWhenCompleted, evaluateBlockConditions, evaluateBlockConditionsForRun, evaluateBlockExecutionEligibilityForRun, evaluateCondition, executeFlowAgentCoreCommand, executeQueuedFlowAgentCoreCommands, findXeroWorkItems, findXeroWorkItemsForEditor, generateActionManifest, getAction, getActionByCan, getActionForBlock, getAliasEntries, getAllActions, getAllCanMappings, getEventsForBlock, getMissingActionInputs, getNestedValue, getOutputSchemaForBlock, getVersionPolicy, getXeroWorkItemsMap, getXeroWorkTerminalMap, hasAction, hasReferences, isActionDone, isActionTypeDone, isBlankInputValue, isTempUcanEnforcementDisabled, isVerifiedCompletion, isVersionAtLeast, markXeroWorkApproved, markXeroWorkApprovedForEditor, markXeroWorkCompleted, markXeroWorkCompletedForEditor, markXeroWorkFailed, markXeroWorkFailedForEditor, neverDone, normalizeActionReadBackMetadata, normalizeCondition, normalizeConditions, oracleInitSurveySchema, parseConditionConfig, parseConditionConfigStrict, parseReferences, parseServiceCan, readBlocksFromFragment, readFlowDocument, readFlowXeroBinding, readFlowXeroBindingFromEditor, readInvocationsForRun, readPendingRunTimelineEvents, reconcileActionReadBack, reconcileCompletion, reconcilePendingInvocations, registerAction, removeBlockFromFragment, removeFlowNode, reorderFlowNodes, replaceBlockInFragment, resetStepRuntime, resolveConditionSourceValue, resolveObjectReferences, resolveReferences, resolveReferencesDetailed, resolveSingleReference, retryPendingRunTimelineEvents, serviceCan, setBlockProps, setFormAnswers, setTempUcanEnforcementDisabled, snapshotNode, swapFlowBlocks, toEvaluatorOperator, typeToCan, updateNodeRuntime, updateXeroWorkReviewPayload, updateXeroWorkReviewPayloadForEditor, upsertXeroWorkItem, upsertXeroWorkItemForEditor, validateActionProof, verifyCompletion, writeCompiledBlocksToFragment, writeRunRecordAndReconcile };
+export { ActionDefinition, ActionDoneContract, ActionHandlers, type ActionManifest, type ActionManifestEntry, ActionReadBackMetadata, type ActionReadBackResolution, type ActionReadBackResolver, type ActionReadBackResolverInput, ActionResult, ActionRunContext, ActionServices, type AddFlowNodeOptions, type BlockCondition, type BlockConditionInput, type BlockConditionsResult, type BlockExecutionEligibility, type BoundedRunOutput, type CapabilityPatternCoversCanOptions, type ClassifyNodeStateInput, CompiledBlock, CompiledEdge, CompiledFlow, CompletionCheck, type CompletionReconciliationTransition, type CompletionVerification, type CompletionVerificationStatus, type ConditionActionResult, type ConditionConfig, type ConditionEvaluationOptions, type ConditionEvaluationResult, type ConditionOperator, type DetailedResolution, type EvaluatorOperator, type ExecuteFlowAgentCoreCommandOptions, type ExecuteQueuedFlowAgentCoreCommandsOptions, FlowAgentBlockerCause, FlowAgentCommand, FlowAgentCommandResult, FlowAgentContext, FlowAgentExecutor, FlowAgentNodeSnapshot, FlowAgentPublicNodeState, FlowConnectionBinding, type FlowDocumentNode, type FlowDocumentRead, FlowNode, FlowNodeRuntimeState, FlowRuntimeStateManager, type FlowVersionString, INVOCATIONS_MAP_KEY, InvalidConditionConfigError, InvocationStore, LATEST_VERSION, MAX_RUN_ACTION_OUTPUT_BYTES, type ManifestDoneDeclaration, type ManifestProofDeclaration, OutputSchemaField, PROOF_MISSING_CODE, type ParsedReference, PendingInvocation, type PendingRunTimelineEvent, type ProofValidationResult, ReadBackTerminalState, type ReconcileActionReadBackParams, type ReconcileActionReadBackResult, type ReconcileCompletionParams, type ReconcileCompletionResult, type ResolveReferencesOptions, RunEventAppender, RunEventInput, RunJsonValue, RunRecordDetails, type RunTimelineAppendResult, SERVICE_VERBS, STEP_COMPLETED_EVENT, STEP_COMPLETED_EVENT_NAME, type ServiceVerb, StoredDelegation, StoredInvocation, UcanDelegationStore, UcanService, type UnresolvedReference, type UnresolvedReferenceReason, VERSION_MANIFEST, type VersionPolicy, XERO_TOOLKIT, XERO_WORK_ITEMS_MAP_NAME, XERO_WORK_TERMINAL_MAP_NAME, type XeroWorkAttempt, type XeroWorkItem, type XeroWorkItemFilter, type XeroWorkKind, type XeroWorkProvenance, type XeroWorkSource, type XeroWorkStatus, type XeroWorkTerminalRecord, actionTypeToCan, addFlowNode, appendRunTimelineEvent, appendRunTimelineEvents, boundRunActionOutput, boundRunEventJson, buildBlockConditionsProp, buildServicesFromHandlers, buildXeroInvoiceWorkKey, buildXeroPaymentWorkKey, canToActionType, canToType, capabilityPatternCoversCan, classifyBlockerCause, classifyNodeState, computeCID, computeJsonCID, createOracleInitFlowTemplate, createReference, createRunEventIdempotencyKey, dispatchFlowStartTriggers, doneWhenCompleted, evaluateBlockConditions, evaluateBlockConditionsForRun, evaluateBlockExecutionEligibilityForRun, evaluateCondition, executeFlowAgentCoreCommand, executeQueuedFlowAgentCoreCommands, findXeroWorkItems, findXeroWorkItemsForEditor, generateActionManifest, getAction, getActionByCan, getActionForBlock, getAliasEntries, getAllActions, getAllCanMappings, getEventsForBlock, getMissingActionInputs, getNestedValue, getOutputSchemaForBlock, getVersionPolicy, getXeroWorkItemsMap, getXeroWorkTerminalMap, hasAction, hasReferences, isActionDone, isActionTypeDone, isBlankInputValue, isTempUcanEnforcementDisabled, isVerifiedCompletion, isVersionAtLeast, markXeroWorkApproved, markXeroWorkApprovedForEditor, markXeroWorkCompleted, markXeroWorkCompletedForEditor, markXeroWorkFailed, markXeroWorkFailedForEditor, neverDone, normalizeActionReadBackMetadata, normalizeCan, normalizeCapabilityPattern, normalizeCondition, normalizeConditions, oracleInitSurveySchema, parseConditionConfig, parseConditionConfigStrict, parseReferences, parseServiceCan, readBlocksFromFragment, readFlowDocument, readFlowXeroBinding, readFlowXeroBindingFromEditor, readInvocationsForRun, readPendingRunTimelineEvents, reconcileActionReadBack, reconcileCompletion, reconcilePendingInvocations, registerAction, removeBlockFromFragment, removeFlowNode, reorderFlowNodes, replaceBlockInFragment, resetStepRuntime, resolveConditionSourceValue, resolveObjectReferences, resolveReferences, resolveReferencesDetailed, resolveSingleReference, retryPendingRunTimelineEvents, serviceCan, setBlockProps, setFormAnswers, setTempUcanEnforcementDisabled, snapshotNode, swapFlowBlocks, toEvaluatorOperator, typeToCan, updateNodeRuntime, updateXeroWorkReviewPayload, updateXeroWorkReviewPayloadForEditor, upsertXeroWorkItem, upsertXeroWorkItemForEditor, validateActionProof, verifyCompletion, writeCompiledBlocksToFragment, writeRunRecordAndReconcile };

package/dist/core/index.js

@@ -14,7 +14,7 @@ import {
   swapFlowBlocks,
   updateNodeRuntime,
   upsertFlowParticipant
-} from "../chunk-LBFFAKSN.js";
+} from "../chunk-R3H7TDTG.js";
 import {
   ExplicitRunRequiredError,
   FLOW_CONNECTIONS_MAP_KEY,
@@ -46,6 +46,7 @@ import {
   XERO_WORK_ITEMS_MAP_NAME,
   XERO_WORK_TERMINAL_MAP_NAME,
   acquireFlowAgentLease,
+  actionTypeToCan,
   adoptLegacyRuntime,
   appendAgentLedgerEvent,
   appendRunRecord,
@@ -64,8 +65,10 @@ import {
   buildXeroInvoiceWorkKey,
   buildXeroPaymentWorkKey,
   canMatches,
+  canToActionType,
   canToType,
   cancelRun,
+  capabilityPatternCoversCan,
   classifyBlockerCause,
   classifyNodeState,
   cleanupExpiredFlowAgentLeases,
@@ -166,6 +169,8 @@ import {
   migrateFlowToSessions,
   neverDone,
   normalizeActionReadBackMetadata,
+  normalizeCan,
+  normalizeCapabilityPattern,
   normalizeCondition,
   normalizeConditions,
   parseConditionConfig,
@@ -253,7 +258,7 @@ import {
   writeActionState,
   writeCompiledBlocksToFragment,
   writeRunRecordAndReconcile
-} from "../chunk-VFYF2B5E.js";
+} from "../chunk-BTMC55BR.js";
 import {
   computeCID,
   computeJsonCID
@@ -670,6 +675,7 @@ export {
   XERO_WORK_ITEMS_MAP_NAME,
   XERO_WORK_TERMINAL_MAP_NAME,
   acquireFlowAgentLease,
+  actionTypeToCan,
   addFlowNode,
   adoptLegacyRuntime,
   appendAgentLedgerEvent,
@@ -689,8 +695,10 @@ export {
   buildXeroInvoiceWorkKey,
   buildXeroPaymentWorkKey,
   canMatches,
+  canToActionType,
   canToType,
   cancelRun,
+  capabilityPatternCoversCan,
   classifyBlockerCause,
   classifyNodeState,
   cleanupExpiredFlowAgentLeases,
@@ -794,6 +802,8 @@ export {
   migrateFlowToSessions,
   neverDone,
   normalizeActionReadBackMetadata,
+  normalizeCan,
+  normalizeCapabilityPattern,
   normalizeCondition,
   normalizeConditions,
   oracleInitSurveySchema,

package/dist/core/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/core/templates/oracleInitFlow.ts"],"sourcesContent":["import type { FlowMetadata } from '../types/editor';\nimport type { FlowNode } from '../types/authorization';\n\n// ---------------------------------------------------------------------------\n// SurveyJS schema for the oracle configuration form\n// ---------------------------------------------------------------------------\n\nexport const oracleInitSurveySchema = {\n  title: 'Oracle Configuration',\n  description: 'Provide the details needed to initialise a new oracle on the IXO network.',\n  logoPosition: 'right',\n  pages: [\n    {\n      name: 'basicInfo',\n      title: 'Basic Information',\n      elements: [\n        {\n          type: 'text',\n          name: 'projectName',\n          title: 'Project Name',\n          description: 'Used as the folder name — no spaces or special characters.',\n          isRequired: true,\n          validators: [\n            {\n              type: 'regex',\n              text: 'Only lowercase letters, numbers, and hyphens are allowed (no spaces or special characters).',\n              regex: '^[a-z0-9]+(-[a-z0-9]+)*$',\n            },\n          ],\n        },\n        {\n          type: 'text',\n          name: 'pin',\n          title: 'PIN',\n          description: 'A 6-digit PIN used to secure wallet operations.',\n          isRequired: true,\n          inputType: 'password',\n          maxLength: 6,\n          validators: [\n            {\n              type: 'regex',\n              text: 'PIN must be exactly 6 digits.',\n              regex: '^\\\\d{6}$',\n            },\n          ],\n        },\n      ],\n    },\n    {\n      name: 'oracleDetails',\n      title: 'Oracle Details',\n      elements: [\n        {\n          type: 'text',\n          name: 'oracleName',\n          title: 'Oracle Name',\n          isRequired: true,\n        },\n        {\n          type: 'text',\n          name: 'orgName',\n          title: 'Organisation Name',\n          isRequired: true,\n        },\n        {\n          type: 'comment',\n          name: 'description',\n          title: 'Description',\n          isRequired: true,\n        },\n        {\n          type: 'text',\n          name: 'location',\n          title: 'Location',\n          isRequired: true,\n        },\n        {\n          type: 'text',\n          name: 'logoUrl',\n          title: 'Logo URL',\n          isRequired: true,\n          inputType: 'url',\n          validators: [{ type: 'url' }],\n        },\n        {\n          type: 'text',\n          name: 'coverImageUrl',\n          title: 'Cover Image URL',\n          isRequired: true,\n          inputType: 'url',\n          validators: [{ type: 'url' }],\n        },\n      ],\n    },\n    {\n      name: 'serviceConfig',\n      title: 'Service Configuration',\n      elements: [\n        {\n          type: 'text',\n          name: 'apiUrl',\n          title: 'API URL',\n          isRequired: true,\n          inputType: 'url',\n          defaultValue: 'http://localhost:4000',\n          validators: [{ type: 'url' }],\n        },\n        {\n          type: 'text',\n          name: 'price',\n          title: 'Price',\n          description: 'Service price in IXO tokens (minimum 1).',\n          isRequired: true,\n          inputType: 'number',\n          defaultValue: 100,\n          validators: [\n            {\n              type: 'numeric',\n              text: 'Price must be at least 1.',\n              minValue: 1,\n            },\n          ],\n        },\n        {\n          type: 'dropdown',\n          name: 'llmModel',\n          title: 'LLM Model',\n          isRequired: true,\n          choices: [\n            { value: 'kimi-k2.5', text: 'Kimi K2.5' },\n            { value: 'claude-sonnet', text: 'Claude Sonnet' },\n            { value: 'gpt-4o', text: 'GPT-4o' },\n            { value: 'gemini-2.5', text: 'Gemini 2.5' },\n            { value: 'llama-4', text: 'Llama 4' },\n            { value: 'custom', text: 'Custom' },\n          ],\n        },\n        {\n          type: 'comment',\n          name: 'opening',\n          title: 'Opening Message',\n          description: 'The greeting or introduction the agent uses when starting a conversation.',\n          isRequired: false,\n        },\n        {\n          type: 'comment',\n          name: 'communicationStyle',\n          title: 'Communication Style',\n          description: 'How the agent should communicate (e.g. formal, friendly, concise).',\n          isRequired: false,\n        },\n        {\n          type: 'comment',\n          name: 'capabilities',\n          title: 'What can the agent do?',\n          description: 'Describe what this agent is capable of doing for users.',\n          isRequired: false,\n        },\n      ],\n    },\n  ],\n};\n\n// ---------------------------------------------------------------------------\n// Template generator\n// ---------------------------------------------------------------------------\n\nexport function createOracleInitFlowTemplate(): {\n  metadata: FlowMetadata;\n  nodes: FlowNode[];\n} {\n  const metadata: FlowMetadata = {\n    '@context': 'https://schema.ixo.world/flow/v1',\n    _type: 'flow/oracle-init',\n    schema_version: '1.0.0',\n    doc_id: '',\n    title: 'Oracle Init Flow',\n    createdAt: new Date().toISOString(),\n    createdBy: '',\n    flowOwnerDid: '',\n  };\n\n  const nodes: FlowNode[] = [\n    // ------------------------------------------------------------------\n    // [1] Form — collects all oracle configuration\n    // ------------------------------------------------------------------\n    {\n      id: 'oracle-form',\n      type: 'form',\n      props: {\n        title: 'Oracle Configuration',\n        description: 'Enter the details for your new oracle.',\n        icon: 'checklist',\n        surveySchema: JSON.stringify(oracleInitSurveySchema),\n      },\n    },\n\n    // ------------------------------------------------------------------\n    // [2] Skills — skill/MCP configuration\n    // ------------------------------------------------------------------\n    {\n      id: 'oracle-skills',\n      type: 'skills',\n      props: {\n        title: 'Oracle Skills & MCP Servers',\n        description: 'Configure skills and MCP servers for the oracle.',\n        icon: 'tools',\n        skills: '[]',\n        entityDid: '',\n        mcpServers: '[]',\n        status: 'pending',\n      },\n      activationCondition: {\n        upstreamNodeId: 'oracle-form',\n        requiredStatus: 'approved',\n      },\n    },\n\n    // ------------------------------------------------------------------\n    // [3] Action — Generate & Fund Wallet\n    //     Generates a new wallet and funds it in one step.\n    // ------------------------------------------------------------------\n    {\n      id: 'oracle-wallet',\n      type: 'action',\n      props: {\n        title: 'Generate & Fund Wallet',\n        description: 'Generate a new IXO wallet and fund it with tokens.',\n        icon: 'bolt',\n        actionType: 'qi/wallet.generateAndFund',\n        inputs: JSON.stringify({}),\n        requiresConfirmation: '',\n      },\n      activationCondition: {\n        upstreamNodeId: 'oracle-skills',\n        requiredStatus: 'approved',\n      },\n    },\n\n    // ------------------------------------------------------------------\n    // [4] Action — Create Identity (IID + Matrix)\n    //     Creates the on-chain IID document, then registers the Matrix account.\n    // ------------------------------------------------------------------\n    {\n      id: 'oracle-identity',\n      type: 'action',\n      props: {\n        title: 'Create Identity',\n        description: 'Create on-chain DID document and register Matrix account.',\n        icon: 'bolt',\n        actionType: 'qi/identity.create',\n        inputs: JSON.stringify({\n          mnemonic: '{{oracle-wallet.output.mnemonic}}',\n          did: '{{oracle-wallet.output.did}}',\n          address: '{{oracle-wallet.output.address}}',\n          pubKey: '{{oracle-wallet.output.pubKey}}',\n          formAnswers: '{{oracle-form.output.form.answers}}',\n        }),\n        requiresConfirmation: '',\n      },\n      activationCondition: {\n        upstreamNodeId: 'oracle-wallet',\n        requiredStatus: 'approved',\n      },\n    },\n\n    // ------------------------------------------------------------------\n    // [5] Action — Create Oracle Entity\n    //     On-chain entity creation with P-256 encryption key.\n    // ------------------------------------------------------------------\n    {\n      id: 'oracle-entity-create',\n      type: 'action',\n      props: {\n        title: 'Create Oracle Entity',\n        description: 'Create the oracle entity on the IXO network.',\n        icon: 'bolt',\n        actionType: 'qi/entity.createOracle',\n        inputs: JSON.stringify({\n          // Wallet outputs\n          mnemonic: '{{oracle-wallet.output.mnemonic}}',\n          address: '{{oracle-wallet.output.address}}',\n          did: '{{oracle-wallet.output.did}}',\n          pubKey: '{{oracle-wallet.output.pubKey}}',\n          // Matrix outputs (from identity block)\n          matrixAccessToken: '{{oracle-identity.output.matrixAccessToken}}',\n          matrixRoomId: '{{oracle-identity.output.matrixRoomId}}',\n          // Form outputs — whole blob, action parses & destructures\n          formAnswers: '{{oracle-form.output.form.answers}}',\n        }),\n        requiresConfirmation: '',\n      },\n      activationCondition: {\n        upstreamNodeId: 'oracle-identity',\n        requiredStatus: 'approved',\n      },\n    },\n\n    // ------------------------------------------------------------------\n    // [6] Action — Configure Oracle (contract + secrets + config)\n    //     Creates the user↔oracle DM room, encrypts secrets, stores config.\n    // ------------------------------------------------------------------\n    {\n      id: 'oracle-configure',\n      type: 'action',\n      props: {\n        title: 'Configure Oracle',\n        description: 'Contract oracle, encrypt secrets, and store configuration.',\n        icon: 'bolt',\n        actionType: 'qi/oracle.configureOracle',\n        inputs: JSON.stringify({\n          // Contract input\n          oracleEntityDid: '{{oracle-entity-create.output.entityDid}}',\n          // Secrets routing (matrixRoomId comes from contract phase, not inputs)\n          publicKeyMultibase: '{{oracle-entity-create.output.encryptionPublicKeyMultibase}}',\n          verificationMethodId: '{{oracle-entity-create.output.encryptionVerificationMethodId}}',\n          // Fresh mxLogin params\n          matrixHomeServerUrl: '{{oracle-identity.output.matrixHomeServerUrl}}',\n          matrixUsername: '{{oracle-identity.output.matrixUserId}}',\n          // Sensitive plaintext values\n          mnemonic: '{{oracle-wallet.output.mnemonic}}',\n          matrixPassword: '{{oracle-identity.output.matrixPassword}}',\n          matrixRecoveryPhrase: '{{oracle-identity.output.matrixRecoveryPhrase}}',\n          // MCP auth secrets (already JWE-encrypted by skills block FlowDetail)\n          mcpAuthSecrets: '{{oracle-skills.output.mcpAuthSecrets}}',\n          // Skills outputs\n          skills: '{{oracle-skills.output.skills}}',\n          mcpServers: '{{oracle-skills.output.mcpServers}}',\n          // Identifiers\n          matrixUserId: '{{oracle-identity.output.matrixUserId}}',\n          matrixAccountRoomId: '{{oracle-identity.output.matrixRoomId}}',\n          entityDid: '{{oracle-entity-create.output.entityDid}}',\n          oracleAddress: '{{oracle-wallet.output.address}}',\n          oracleDid: '{{oracle-wallet.output.did}}',\n          // Form outputs — whole blob, action parses & destructures\n          formAnswers: '{{oracle-form.output.form.answers}}',\n        }),\n        requiresConfirmation: '',\n      },\n      activationCondition: {\n        upstreamNodeId: 'oracle-entity-create',\n        requiredStatus: 'approved',\n      },\n    },\n\n    // ------------------------------------------------------------------\n    // [7] Action — Deploy Oracle (setup + start)\n    //     Clones repo, writes config, builds, then starts the process.\n    // ------------------------------------------------------------------\n    {\n      id: 'oracle-deploy',\n      type: 'action',\n      props: {\n        title: 'Deploy Oracle',\n        description: 'Set up environment and start the oracle process.',\n        icon: 'bolt',\n        actionType: 'qi/oracle.deploy',\n        inputs: JSON.stringify({\n          entityDid: '{{oracle-entity-create.output.entityDid}}',\n          roomId: '{{oracle-configure.output.userOracleRoomId}}',\n          skills: '{{oracle-skills.output.skills}}',\n          mcpServers: '{{oracle-skills.output.mcpServers}}',\n          mnemonic: '{{oracle-wallet.output.mnemonic}}',\n          matrixPassword: '{{oracle-identity.output.matrixPassword}}',\n          matrixRecoveryPhrase: '{{oracle-identity.output.matrixRecoveryPhrase}}',\n          matrixUsername: '{{oracle-identity.output.matrixUserId}}',\n          matrixAccountRoomId: '{{oracle-identity.output.matrixRoomId}}',\n          freshAccessToken: '{{oracle-configure.output.freshAccessToken}}',\n          openRouterApiKey: '{{oracle-configure.output.openRouterApiKeyPlaintext}}',\n          // Form outputs — whole blob, action parses & destructures\n          formAnswers: '{{oracle-form.output.form.answers}}',\n        }),\n        requiresConfirmation: '',\n      },\n      activationCondition: {\n        upstreamNodeId: 'oracle-configure',\n        requiredStatus: 'approved',\n      },\n    },\n\n    // ------------------------------------------------------------------\n    // [8] Secrets — display credentials and download\n    // ------------------------------------------------------------------\n    {\n      id: 'oracle-secrets',\n      type: 'secrets',\n      props: {\n        title: 'Oracle Credentials',\n        description: 'Download your oracle credentials after setup is complete.',\n        icon: 'key',\n        downloadEndpoint: '',\n        entityDid: '{{oracle-entity-create.output.entityDid}}',\n      },\n      activationCondition: {\n        upstreamNodeId: 'oracle-deploy',\n        requiredStatus: 'approved',\n      },\n    },\n  ];\n\n  return { metadata, nodes };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAOO,IAAM,yBAAyB;AAAA,EACpC,OAAO;AAAA,EACP,aAAa;AAAA,EACb,cAAc;AAAA,EACd,OAAO;AAAA,IACL;AAAA,MACE,MAAM;AAAA,MACN,OAAO;AAAA,MACP,UAAU;AAAA,QACR;AAAA,UACE,MAAM;AAAA,UACN,MAAM;AAAA,UACN,OAAO;AAAA,UACP,aAAa;AAAA,UACb,YAAY;AAAA,UACZ,YAAY;AAAA,YACV;AAAA,cACE,MAAM;AAAA,cACN,MAAM;AAAA,cACN,OAAO;AAAA,YACT;AAAA,UACF;AAAA,QACF;AAAA,QACA;AAAA,UACE,MAAM;AAAA,UACN,MAAM;AAAA,UACN,OAAO;AAAA,UACP,aAAa;AAAA,UACb,YAAY;AAAA,UACZ,WAAW;AAAA,UACX,WAAW;AAAA,UACX,YAAY;AAAA,YACV;AAAA,cACE,MAAM;AAAA,cACN,MAAM;AAAA,cACN,OAAO;AAAA,YACT;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,OAAO;AAAA,MACP,UAAU;AAAA,QACR;AAAA,UACE,MAAM;AAAA,UACN,MAAM;AAAA,UACN,OAAO;AAAA,UACP,YAAY;AAAA,QACd;AAAA,QACA;AAAA,UACE,MAAM;AAAA,UACN,MAAM;AAAA,UACN,OAAO;AAAA,UACP,YAAY;AAAA,QACd;AAAA,QACA;AAAA,UACE,MAAM;AAAA,UACN,MAAM;AAAA,UACN,OAAO;AAAA,UACP,YAAY;AAAA,QACd;AAAA,QACA;AAAA,UACE,MAAM;AAAA,UACN,MAAM;AAAA,UACN,OAAO;AAAA,UACP,YAAY;AAAA,QACd;AAAA,QACA;AAAA,UACE,MAAM;AAAA,UACN,MAAM;AAAA,UACN,OAAO;AAAA,UACP,YAAY;AAAA,UACZ,WAAW;AAAA,UACX,YAAY,CAAC,EAAE,MAAM,MAAM,CAAC;AAAA,QAC9B;AAAA,QACA;AAAA,UACE,MAAM;AAAA,UACN,MAAM;AAAA,UACN,OAAO;AAAA,UACP,YAAY;AAAA,UACZ,WAAW;AAAA,UACX,YAAY,CAAC,EAAE,MAAM,MAAM,CAAC;AAAA,QAC9B;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,OAAO;AAAA,MACP,UAAU;AAAA,QACR;AAAA,UACE,MAAM;AAAA,UACN,MAAM;AAAA,UACN,OAAO;AAAA,UACP,YAAY;AAAA,UACZ,WAAW;AAAA,UACX,cAAc;AAAA,UACd,YAAY,CAAC,EAAE,MAAM,MAAM,CAAC;AAAA,QAC9B;AAAA,QACA;AAAA,UACE,MAAM;AAAA,UACN,MAAM;AAAA,UACN,OAAO;AAAA,UACP,aAAa;AAAA,UACb,YAAY;AAAA,UACZ,WAAW;AAAA,UACX,cAAc;AAAA,UACd,YAAY;AAAA,YACV;AAAA,cACE,MAAM;AAAA,cACN,MAAM;AAAA,cACN,UAAU;AAAA,YACZ;AAAA,UACF;AAAA,QACF;AAAA,QACA;AAAA,UACE,MAAM;AAAA,UACN,MAAM;AAAA,UACN,OAAO;AAAA,UACP,YAAY;AAAA,UACZ,SAAS;AAAA,YACP,EAAE,OAAO,aAAa,MAAM,YAAY;AAAA,YACxC,EAAE,OAAO,iBAAiB,MAAM,gBAAgB;AAAA,YAChD,EAAE,OAAO,UAAU,MAAM,SAAS;AAAA,YAClC,EAAE,OAAO,cAAc,MAAM,aAAa;AAAA,YAC1C,EAAE,OAAO,WAAW,MAAM,UAAU;AAAA,YACpC,EAAE,OAAO,UAAU,MAAM,SAAS;AAAA,UACpC;AAAA,QACF;AAAA,QACA;AAAA,UACE,MAAM;AAAA,UACN,MAAM;AAAA,UACN,OAAO;AAAA,UACP,aAAa;AAAA,UACb,YAAY;AAAA,QACd;AAAA,QACA;AAAA,UACE,MAAM;AAAA,UACN,MAAM;AAAA,UACN,OAAO;AAAA,UACP,aAAa;AAAA,UACb,YAAY;AAAA,QACd;AAAA,QACA;AAAA,UACE,MAAM;AAAA,UACN,MAAM;AAAA,UACN,OAAO;AAAA,UACP,aAAa;AAAA,UACb,YAAY;AAAA,QACd;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAMO,SAAS,+BAGd;AACA,QAAM,WAAyB;AAAA,IAC7B,YAAY;AAAA,IACZ,OAAO;AAAA,IACP,gBAAgB;AAAA,IAChB,QAAQ;AAAA,IACR,OAAO;AAAA,IACP,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IAClC,WAAW;AAAA,IACX,cAAc;AAAA,EAChB;AAEA,QAAM,QAAoB;AAAA;AAAA;AAAA;AAAA,IAIxB;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,OAAO;AAAA,QACL,OAAO;AAAA,QACP,aAAa;AAAA,QACb,MAAM;AAAA,QACN,cAAc,KAAK,UAAU,sBAAsB;AAAA,MACrD;AAAA,IACF;AAAA;AAAA;AAAA;AAAA,IAKA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,OAAO;AAAA,QACL,OAAO;AAAA,QACP,aAAa;AAAA,QACb,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,WAAW;AAAA,QACX,YAAY;AAAA,QACZ,QAAQ;AAAA,MACV;AAAA,MACA,qBAAqB;AAAA,QACnB,gBAAgB;AAAA,QAChB,gBAAgB;AAAA,MAClB;AAAA,IACF;AAAA;AAAA;AAAA;AAAA;AAAA,IAMA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,OAAO;AAAA,QACL,OAAO;AAAA,QACP,aAAa;AAAA,QACb,MAAM;AAAA,QACN,YAAY;AAAA,QACZ,QAAQ,KAAK,UAAU,CAAC,CAAC;AAAA,QACzB,sBAAsB;AAAA,MACxB;AAAA,MACA,qBAAqB;AAAA,QACnB,gBAAgB;AAAA,QAChB,gBAAgB;AAAA,MAClB;AAAA,IACF;AAAA;AAAA;AAAA;AAAA;AAAA,IAMA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,OAAO;AAAA,QACL,OAAO;AAAA,QACP,aAAa;AAAA,QACb,MAAM;AAAA,QACN,YAAY;AAAA,QACZ,QAAQ,KAAK,UAAU;AAAA,UACrB,UAAU;AAAA,UACV,KAAK;AAAA,UACL,SAAS;AAAA,UACT,QAAQ;AAAA,UACR,aAAa;AAAA,QACf,CAAC;AAAA,QACD,sBAAsB;AAAA,MACxB;AAAA,MACA,qBAAqB;AAAA,QACnB,gBAAgB;AAAA,QAChB,gBAAgB;AAAA,MAClB;AAAA,IACF;AAAA;AAAA;AAAA;AAAA;AAAA,IAMA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,OAAO;AAAA,QACL,OAAO;AAAA,QACP,aAAa;AAAA,QACb,MAAM;AAAA,QACN,YAAY;AAAA,QACZ,QAAQ,KAAK,UAAU;AAAA;AAAA,UAErB,UAAU;AAAA,UACV,SAAS;AAAA,UACT,KAAK;AAAA,UACL,QAAQ;AAAA;AAAA,UAER,mBAAmB;AAAA,UACnB,cAAc;AAAA;AAAA,UAEd,aAAa;AAAA,QACf,CAAC;AAAA,QACD,sBAAsB;AAAA,MACxB;AAAA,MACA,qBAAqB;AAAA,QACnB,gBAAgB;AAAA,QAChB,gBAAgB;AAAA,MAClB;AAAA,IACF;AAAA;AAAA;AAAA;AAAA;AAAA,IAMA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,OAAO;AAAA,QACL,OAAO;AAAA,QACP,aAAa;AAAA,QACb,MAAM;AAAA,QACN,YAAY;AAAA,QACZ,QAAQ,KAAK,UAAU;AAAA;AAAA,UAErB,iBAAiB;AAAA;AAAA,UAEjB,oBAAoB;AAAA,UACpB,sBAAsB;AAAA;AAAA,UAEtB,qBAAqB;AAAA,UACrB,gBAAgB;AAAA;AAAA,UAEhB,UAAU;AAAA,UACV,gBAAgB;AAAA,UAChB,sBAAsB;AAAA;AAAA,UAEtB,gBAAgB;AAAA;AAAA,UAEhB,QAAQ;AAAA,UACR,YAAY;AAAA;AAAA,UAEZ,cAAc;AAAA,UACd,qBAAqB;AAAA,UACrB,WAAW;AAAA,UACX,eAAe;AAAA,UACf,WAAW;AAAA;AAAA,UAEX,aAAa;AAAA,QACf,CAAC;AAAA,QACD,sBAAsB;AAAA,MACxB;AAAA,MACA,qBAAqB;AAAA,QACnB,gBAAgB;AAAA,QAChB,gBAAgB;AAAA,MAClB;AAAA,IACF;AAAA;AAAA;AAAA;AAAA;AAAA,IAMA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,OAAO;AAAA,QACL,OAAO;AAAA,QACP,aAAa;AAAA,QACb,MAAM;AAAA,QACN,YAAY;AAAA,QACZ,QAAQ,KAAK,UAAU;AAAA,UACrB,WAAW;AAAA,UACX,QAAQ;AAAA,UACR,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,UAAU;AAAA,UACV,gBAAgB;AAAA,UAChB,sBAAsB;AAAA,UACtB,gBAAgB;AAAA,UAChB,qBAAqB;AAAA,UACrB,kBAAkB;AAAA,UAClB,kBAAkB;AAAA;AAAA,UAElB,aAAa;AAAA,QACf,CAAC;AAAA,QACD,sBAAsB;AAAA,MACxB;AAAA,MACA,qBAAqB;AAAA,QACnB,gBAAgB;AAAA,QAChB,gBAAgB;AAAA,MAClB;AAAA,IACF;AAAA;AAAA;AAAA;AAAA,IAKA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,OAAO;AAAA,QACL,OAAO;AAAA,QACP,aAAa;AAAA,QACb,MAAM;AAAA,QACN,kBAAkB;AAAA,QAClB,WAAW;AAAA,MACb;AAAA,MACA,qBAAqB;AAAA,QACnB,gBAAgB;AAAA,QAChB,gBAAgB;AAAA,MAClB;AAAA,IACF;AAAA,EACF;AAEA,SAAO,EAAE,UAAU,MAAM;AAC3B;","names":[]}
+{"version":3,"sources":["../../src/core/templates/oracleInitFlow.ts"],"sourcesContent":["import type { FlowMetadata } from '../types/editor';\nimport type { FlowNode } from '../types/authorization';\n\n// ---------------------------------------------------------------------------\n// SurveyJS schema for the oracle configuration form\n// ---------------------------------------------------------------------------\n\nexport const oracleInitSurveySchema = {\n  title: 'Oracle Configuration',\n  description: 'Provide the details needed to initialise a new oracle on the IXO network.',\n  logoPosition: 'right',\n  pages: [\n    {\n      name: 'basicInfo',\n      title: 'Basic Information',\n      elements: [\n        {\n          type: 'text',\n          name: 'projectName',\n          title: 'Project Name',\n          description: 'Used as the folder name — no spaces or special characters.',\n          isRequired: true,\n          validators: [\n            {\n              type: 'regex',\n              text: 'Only lowercase letters, numbers, and hyphens are allowed (no spaces or special characters).',\n              regex: '^[a-z0-9]+(-[a-z0-9]+)*$',\n            },\n          ],\n        },\n        {\n          type: 'text',\n          name: 'pin',\n          title: 'PIN',\n          description: 'A 6-digit PIN used to secure wallet operations.',\n          isRequired: true,\n          inputType: 'password',\n          maxLength: 6,\n          validators: [\n            {\n              type: 'regex',\n              text: 'PIN must be exactly 6 digits.',\n              regex: '^\\\\d{6}$',\n            },\n          ],\n        },\n      ],\n    },\n    {\n      name: 'oracleDetails',\n      title: 'Oracle Details',\n      elements: [\n        {\n          type: 'text',\n          name: 'oracleName',\n          title: 'Oracle Name',\n          isRequired: true,\n        },\n        {\n          type: 'text',\n          name: 'orgName',\n          title: 'Organisation Name',\n          isRequired: true,\n        },\n        {\n          type: 'comment',\n          name: 'description',\n          title: 'Description',\n          isRequired: true,\n        },\n        {\n          type: 'text',\n          name: 'location',\n          title: 'Location',\n          isRequired: true,\n        },\n        {\n          type: 'text',\n          name: 'logoUrl',\n          title: 'Logo URL',\n          isRequired: true,\n          inputType: 'url',\n          validators: [{ type: 'url' }],\n        },\n        {\n          type: 'text',\n          name: 'coverImageUrl',\n          title: 'Cover Image URL',\n          isRequired: true,\n          inputType: 'url',\n          validators: [{ type: 'url' }],\n        },\n      ],\n    },\n    {\n      name: 'serviceConfig',\n      title: 'Service Configuration',\n      elements: [\n        {\n          type: 'text',\n          name: 'apiUrl',\n          title: 'API URL',\n          isRequired: true,\n          inputType: 'url',\n          defaultValue: 'http://localhost:4000',\n          validators: [{ type: 'url' }],\n        },\n        {\n          type: 'text',\n          name: 'price',\n          title: 'Price',\n          description: 'Service price in IXO tokens (minimum 1).',\n          isRequired: true,\n          inputType: 'number',\n          defaultValue: 100,\n          validators: [\n            {\n              type: 'numeric',\n              text: 'Price must be at least 1.',\n              minValue: 1,\n            },\n          ],\n        },\n        {\n          type: 'dropdown',\n          name: 'llmModel',\n          title: 'LLM Model',\n          isRequired: true,\n          choices: [\n            { value: 'kimi-k2.5', text: 'Kimi K2.5' },\n            { value: 'claude-sonnet', text: 'Claude Sonnet' },\n            { value: 'gpt-4o', text: 'GPT-4o' },\n            { value: 'gemini-2.5', text: 'Gemini 2.5' },\n            { value: 'llama-4', text: 'Llama 4' },\n            { value: 'custom', text: 'Custom' },\n          ],\n        },\n        {\n          type: 'comment',\n          name: 'opening',\n          title: 'Opening Message',\n          description: 'The greeting or introduction the agent uses when starting a conversation.',\n          isRequired: false,\n        },\n        {\n          type: 'comment',\n          name: 'communicationStyle',\n          title: 'Communication Style',\n          description: 'How the agent should communicate (e.g. formal, friendly, concise).',\n          isRequired: false,\n        },\n        {\n          type: 'comment',\n          name: 'capabilities',\n          title: 'What can the agent do?',\n          description: 'Describe what this agent is capable of doing for users.',\n          isRequired: false,\n        },\n      ],\n    },\n  ],\n};\n\n// ---------------------------------------------------------------------------\n// Template generator\n// ---------------------------------------------------------------------------\n\nexport function createOracleInitFlowTemplate(): {\n  metadata: FlowMetadata;\n  nodes: FlowNode[];\n} {\n  const metadata: FlowMetadata = {\n    '@context': 'https://schema.ixo.world/flow/v1',\n    _type: 'flow/oracle-init',\n    schema_version: '1.0.0',\n    doc_id: '',\n    title: 'Oracle Init Flow',\n    createdAt: new Date().toISOString(),\n    createdBy: '',\n    flowOwnerDid: '',\n  };\n\n  const nodes: FlowNode[] = [\n    // ------------------------------------------------------------------\n    // [1] Form — collects all oracle configuration\n    // ------------------------------------------------------------------\n    {\n      id: 'oracle-form',\n      type: 'form',\n      props: {\n        title: 'Oracle Configuration',\n        description: 'Enter the details for your new oracle.',\n        icon: 'checklist',\n        surveySchema: JSON.stringify(oracleInitSurveySchema),\n      },\n    },\n\n    // ------------------------------------------------------------------\n    // [2] Skills — skill/MCP configuration\n    // ------------------------------------------------------------------\n    {\n      id: 'oracle-skills',\n      type: 'skills',\n      props: {\n        title: 'Oracle Skills & MCP Servers',\n        description: 'Configure skills and MCP servers for the oracle.',\n        icon: 'tools',\n        skills: '[]',\n        entityDid: '',\n        mcpServers: '[]',\n        status: 'pending',\n      },\n      activationCondition: {\n        upstreamNodeId: 'oracle-form',\n        requiredStatus: 'approved',\n      },\n    },\n\n    // ------------------------------------------------------------------\n    // [3] Action — Generate & Fund Wallet\n    //     Generates a new wallet and funds it in one step.\n    // ------------------------------------------------------------------\n    {\n      id: 'oracle-wallet',\n      type: 'action',\n      props: {\n        title: 'Generate & Fund Wallet',\n        description: 'Generate a new IXO wallet and fund it with tokens.',\n        icon: 'bolt',\n        actionType: 'qi/wallet.generateAndFund',\n        inputs: JSON.stringify({}),\n        requiresConfirmation: '',\n      },\n      activationCondition: {\n        upstreamNodeId: 'oracle-skills',\n        requiredStatus: 'approved',\n      },\n    },\n\n    // ------------------------------------------------------------------\n    // [4] Action — Create Identity (IID + Matrix)\n    //     Creates the on-chain IID document, then registers the Matrix account.\n    // ------------------------------------------------------------------\n    {\n      id: 'oracle-identity',\n      type: 'action',\n      props: {\n        title: 'Create Identity',\n        description: 'Create on-chain DID document and register Matrix account.',\n        icon: 'bolt',\n        actionType: 'qi/identity.create',\n        inputs: JSON.stringify({\n          mnemonic: '{{oracle-wallet.output.mnemonic}}',\n          did: '{{oracle-wallet.output.did}}',\n          address: '{{oracle-wallet.output.address}}',\n          pubKey: '{{oracle-wallet.output.pubKey}}',\n          formAnswers: '{{oracle-form.output.form.answers}}',\n        }),\n        requiresConfirmation: '',\n      },\n      activationCondition: {\n        upstreamNodeId: 'oracle-wallet',\n        requiredStatus: 'approved',\n      },\n    },\n\n    // ------------------------------------------------------------------\n    // [5] Action — Create Oracle Entity\n    //     On-chain entity creation with P-256 encryption key.\n    // ------------------------------------------------------------------\n    {\n      id: 'oracle-entity-create',\n      type: 'action',\n      props: {\n        title: 'Create Oracle Entity',\n        description: 'Create the oracle entity on the IXO network.',\n        icon: 'bolt',\n        actionType: 'qi/entity.createOracle',\n        inputs: JSON.stringify({\n          // Wallet outputs\n          mnemonic: '{{oracle-wallet.output.mnemonic}}',\n          address: '{{oracle-wallet.output.address}}',\n          did: '{{oracle-wallet.output.did}}',\n          pubKey: '{{oracle-wallet.output.pubKey}}',\n          // Matrix outputs (from identity block)\n          matrixAccessToken: '{{oracle-identity.output.matrixAccessToken}}',\n          matrixRoomId: '{{oracle-identity.output.matrixRoomId}}',\n          // Form outputs — whole blob, action parses & destructures\n          formAnswers: '{{oracle-form.output.form.answers}}',\n        }),\n        requiresConfirmation: '',\n      },\n      activationCondition: {\n        upstreamNodeId: 'oracle-identity',\n        requiredStatus: 'approved',\n      },\n    },\n\n    // ------------------------------------------------------------------\n    // [6] Action — Configure Oracle (contract + secrets + config)\n    //     Creates the user↔oracle DM room, encrypts secrets, stores config.\n    // ------------------------------------------------------------------\n    {\n      id: 'oracle-configure',\n      type: 'action',\n      props: {\n        title: 'Configure Oracle',\n        description: 'Contract oracle, encrypt secrets, and store configuration.',\n        icon: 'bolt',\n        actionType: 'qi/oracle.configureOracle',\n        inputs: JSON.stringify({\n          // Contract input\n          oracleEntityDid: '{{oracle-entity-create.output.entityDid}}',\n          // Secrets routing (matrixRoomId comes from contract phase, not inputs)\n          publicKeyMultibase: '{{oracle-entity-create.output.encryptionPublicKeyMultibase}}',\n          verificationMethodId: '{{oracle-entity-create.output.encryptionVerificationMethodId}}',\n          // Fresh mxLogin params\n          matrixHomeServerUrl: '{{oracle-identity.output.matrixHomeServerUrl}}',\n          matrixUsername: '{{oracle-identity.output.matrixUserId}}',\n          // Sensitive plaintext values\n          mnemonic: '{{oracle-wallet.output.mnemonic}}',\n          matrixPassword: '{{oracle-identity.output.matrixPassword}}',\n          matrixRecoveryPhrase: '{{oracle-identity.output.matrixRecoveryPhrase}}',\n          // MCP auth secrets (already JWE-encrypted by skills block FlowDetail)\n          mcpAuthSecrets: '{{oracle-skills.output.mcpAuthSecrets}}',\n          // Skills outputs\n          skills: '{{oracle-skills.output.skills}}',\n          mcpServers: '{{oracle-skills.output.mcpServers}}',\n          // Identifiers\n          matrixUserId: '{{oracle-identity.output.matrixUserId}}',\n          matrixAccountRoomId: '{{oracle-identity.output.matrixRoomId}}',\n          entityDid: '{{oracle-entity-create.output.entityDid}}',\n          oracleAddress: '{{oracle-wallet.output.address}}',\n          oracleDid: '{{oracle-wallet.output.did}}',\n          // Form outputs — whole blob, action parses & destructures\n          formAnswers: '{{oracle-form.output.form.answers}}',\n        }),\n        requiresConfirmation: '',\n      },\n      activationCondition: {\n        upstreamNodeId: 'oracle-entity-create',\n        requiredStatus: 'approved',\n      },\n    },\n\n    // ------------------------------------------------------------------\n    // [7] Action — Deploy Oracle (setup + start)\n    //     Clones repo, writes config, builds, then starts the process.\n    // ------------------------------------------------------------------\n    {\n      id: 'oracle-deploy',\n      type: 'action',\n      props: {\n        title: 'Deploy Oracle',\n        description: 'Set up environment and start the oracle process.',\n        icon: 'bolt',\n        actionType: 'qi/oracle.deploy',\n        inputs: JSON.stringify({\n          entityDid: '{{oracle-entity-create.output.entityDid}}',\n          roomId: '{{oracle-configure.output.userOracleRoomId}}',\n          skills: '{{oracle-skills.output.skills}}',\n          mcpServers: '{{oracle-skills.output.mcpServers}}',\n          mnemonic: '{{oracle-wallet.output.mnemonic}}',\n          matrixPassword: '{{oracle-identity.output.matrixPassword}}',\n          matrixRecoveryPhrase: '{{oracle-identity.output.matrixRecoveryPhrase}}',\n          matrixUsername: '{{oracle-identity.output.matrixUserId}}',\n          matrixAccountRoomId: '{{oracle-identity.output.matrixRoomId}}',\n          freshAccessToken: '{{oracle-configure.output.freshAccessToken}}',\n          openRouterApiKey: '{{oracle-configure.output.openRouterApiKeyPlaintext}}',\n          // Form outputs — whole blob, action parses & destructures\n          formAnswers: '{{oracle-form.output.form.answers}}',\n        }),\n        requiresConfirmation: '',\n      },\n      activationCondition: {\n        upstreamNodeId: 'oracle-configure',\n        requiredStatus: 'approved',\n      },\n    },\n\n    // ------------------------------------------------------------------\n    // [8] Secrets — display credentials and download\n    // ------------------------------------------------------------------\n    {\n      id: 'oracle-secrets',\n      type: 'secrets',\n      props: {\n        title: 'Oracle Credentials',\n        description: 'Download your oracle credentials after setup is complete.',\n        icon: 'key',\n        downloadEndpoint: '',\n        entityDid: '{{oracle-entity-create.output.entityDid}}',\n      },\n      activationCondition: {\n        upstreamNodeId: 'oracle-deploy',\n        requiredStatus: 'approved',\n      },\n    },\n  ];\n\n  return { metadata, nodes };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAOO,IAAM,yBAAyB;AAAA,EACpC,OAAO;AAAA,EACP,aAAa;AAAA,EACb,cAAc;AAAA,EACd,OAAO;AAAA,IACL;AAAA,MACE,MAAM;AAAA,MACN,OAAO;AAAA,MACP,UAAU;AAAA,QACR;AAAA,UACE,MAAM;AAAA,UACN,MAAM;AAAA,UACN,OAAO;AAAA,UACP,aAAa;AAAA,UACb,YAAY;AAAA,UACZ,YAAY;AAAA,YACV;AAAA,cACE,MAAM;AAAA,cACN,MAAM;AAAA,cACN,OAAO;AAAA,YACT;AAAA,UACF;AAAA,QACF;AAAA,QACA;AAAA,UACE,MAAM;AAAA,UACN,MAAM;AAAA,UACN,OAAO;AAAA,UACP,aAAa;AAAA,UACb,YAAY;AAAA,UACZ,WAAW;AAAA,UACX,WAAW;AAAA,UACX,YAAY;AAAA,YACV;AAAA,cACE,MAAM;AAAA,cACN,MAAM;AAAA,cACN,OAAO;AAAA,YACT;AAAA,UACF;AAAA,QACF;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,OAAO;AAAA,MACP,UAAU;AAAA,QACR;AAAA,UACE,MAAM;AAAA,UACN,MAAM;AAAA,UACN,OAAO;AAAA,UACP,YAAY;AAAA,QACd;AAAA,QACA;AAAA,UACE,MAAM;AAAA,UACN,MAAM;AAAA,UACN,OAAO;AAAA,UACP,YAAY;AAAA,QACd;AAAA,QACA;AAAA,UACE,MAAM;AAAA,UACN,MAAM;AAAA,UACN,OAAO;AAAA,UACP,YAAY;AAAA,QACd;AAAA,QACA;AAAA,UACE,MAAM;AAAA,UACN,MAAM;AAAA,UACN,OAAO;AAAA,UACP,YAAY;AAAA,QACd;AAAA,QACA;AAAA,UACE,MAAM;AAAA,UACN,MAAM;AAAA,UACN,OAAO;AAAA,UACP,YAAY;AAAA,UACZ,WAAW;AAAA,UACX,YAAY,CAAC,EAAE,MAAM,MAAM,CAAC;AAAA,QAC9B;AAAA,QACA;AAAA,UACE,MAAM;AAAA,UACN,MAAM;AAAA,UACN,OAAO;AAAA,UACP,YAAY;AAAA,UACZ,WAAW;AAAA,UACX,YAAY,CAAC,EAAE,MAAM,MAAM,CAAC;AAAA,QAC9B;AAAA,MACF;AAAA,IACF;AAAA,IACA;AAAA,MACE,MAAM;AAAA,MACN,OAAO;AAAA,MACP,UAAU;AAAA,QACR;AAAA,UACE,MAAM;AAAA,UACN,MAAM;AAAA,UACN,OAAO;AAAA,UACP,YAAY;AAAA,UACZ,WAAW;AAAA,UACX,cAAc;AAAA,UACd,YAAY,CAAC,EAAE,MAAM,MAAM,CAAC;AAAA,QAC9B;AAAA,QACA;AAAA,UACE,MAAM;AAAA,UACN,MAAM;AAAA,UACN,OAAO;AAAA,UACP,aAAa;AAAA,UACb,YAAY;AAAA,UACZ,WAAW;AAAA,UACX,cAAc;AAAA,UACd,YAAY;AAAA,YACV;AAAA,cACE,MAAM;AAAA,cACN,MAAM;AAAA,cACN,UAAU;AAAA,YACZ;AAAA,UACF;AAAA,QACF;AAAA,QACA;AAAA,UACE,MAAM;AAAA,UACN,MAAM;AAAA,UACN,OAAO;AAAA,UACP,YAAY;AAAA,UACZ,SAAS;AAAA,YACP,EAAE,OAAO,aAAa,MAAM,YAAY;AAAA,YACxC,EAAE,OAAO,iBAAiB,MAAM,gBAAgB;AAAA,YAChD,EAAE,OAAO,UAAU,MAAM,SAAS;AAAA,YAClC,EAAE,OAAO,cAAc,MAAM,aAAa;AAAA,YAC1C,EAAE,OAAO,WAAW,MAAM,UAAU;AAAA,YACpC,EAAE,OAAO,UAAU,MAAM,SAAS;AAAA,UACpC;AAAA,QACF;AAAA,QACA;AAAA,UACE,MAAM;AAAA,UACN,MAAM;AAAA,UACN,OAAO;AAAA,UACP,aAAa;AAAA,UACb,YAAY;AAAA,QACd;AAAA,QACA;AAAA,UACE,MAAM;AAAA,UACN,MAAM;AAAA,UACN,OAAO;AAAA,UACP,aAAa;AAAA,UACb,YAAY;AAAA,QACd;AAAA,QACA;AAAA,UACE,MAAM;AAAA,UACN,MAAM;AAAA,UACN,OAAO;AAAA,UACP,aAAa;AAAA,UACb,YAAY;AAAA,QACd;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACF;AAMO,SAAS,+BAGd;AACA,QAAM,WAAyB;AAAA,IAC7B,YAAY;AAAA,IACZ,OAAO;AAAA,IACP,gBAAgB;AAAA,IAChB,QAAQ;AAAA,IACR,OAAO;AAAA,IACP,YAAW,oBAAI,KAAK,GAAE,YAAY;AAAA,IAClC,WAAW;AAAA,IACX,cAAc;AAAA,EAChB;AAEA,QAAM,QAAoB;AAAA;AAAA;AAAA;AAAA,IAIxB;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,OAAO;AAAA,QACL,OAAO;AAAA,QACP,aAAa;AAAA,QACb,MAAM;AAAA,QACN,cAAc,KAAK,UAAU,sBAAsB;AAAA,MACrD;AAAA,IACF;AAAA;AAAA;AAAA;AAAA,IAKA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,OAAO;AAAA,QACL,OAAO;AAAA,QACP,aAAa;AAAA,QACb,MAAM;AAAA,QACN,QAAQ;AAAA,QACR,WAAW;AAAA,QACX,YAAY;AAAA,QACZ,QAAQ;AAAA,MACV;AAAA,MACA,qBAAqB;AAAA,QACnB,gBAAgB;AAAA,QAChB,gBAAgB;AAAA,MAClB;AAAA,IACF;AAAA;AAAA;AAAA;AAAA;AAAA,IAMA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,OAAO;AAAA,QACL,OAAO;AAAA,QACP,aAAa;AAAA,QACb,MAAM;AAAA,QACN,YAAY;AAAA,QACZ,QAAQ,KAAK,UAAU,CAAC,CAAC;AAAA,QACzB,sBAAsB;AAAA,MACxB;AAAA,MACA,qBAAqB;AAAA,QACnB,gBAAgB;AAAA,QAChB,gBAAgB;AAAA,MAClB;AAAA,IACF;AAAA;AAAA;AAAA;AAAA;AAAA,IAMA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,OAAO;AAAA,QACL,OAAO;AAAA,QACP,aAAa;AAAA,QACb,MAAM;AAAA,QACN,YAAY;AAAA,QACZ,QAAQ,KAAK,UAAU;AAAA,UACrB,UAAU;AAAA,UACV,KAAK;AAAA,UACL,SAAS;AAAA,UACT,QAAQ;AAAA,UACR,aAAa;AAAA,QACf,CAAC;AAAA,QACD,sBAAsB;AAAA,MACxB;AAAA,MACA,qBAAqB;AAAA,QACnB,gBAAgB;AAAA,QAChB,gBAAgB;AAAA,MAClB;AAAA,IACF;AAAA;AAAA;AAAA;AAAA;AAAA,IAMA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,OAAO;AAAA,QACL,OAAO;AAAA,QACP,aAAa;AAAA,QACb,MAAM;AAAA,QACN,YAAY;AAAA,QACZ,QAAQ,KAAK,UAAU;AAAA;AAAA,UAErB,UAAU;AAAA,UACV,SAAS;AAAA,UACT,KAAK;AAAA,UACL,QAAQ;AAAA;AAAA,UAER,mBAAmB;AAAA,UACnB,cAAc;AAAA;AAAA,UAEd,aAAa;AAAA,QACf,CAAC;AAAA,QACD,sBAAsB;AAAA,MACxB;AAAA,MACA,qBAAqB;AAAA,QACnB,gBAAgB;AAAA,QAChB,gBAAgB;AAAA,MAClB;AAAA,IACF;AAAA;AAAA;AAAA;AAAA;AAAA,IAMA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,OAAO;AAAA,QACL,OAAO;AAAA,QACP,aAAa;AAAA,QACb,MAAM;AAAA,QACN,YAAY;AAAA,QACZ,QAAQ,KAAK,UAAU;AAAA;AAAA,UAErB,iBAAiB;AAAA;AAAA,UAEjB,oBAAoB;AAAA,UACpB,sBAAsB;AAAA;AAAA,UAEtB,qBAAqB;AAAA,UACrB,gBAAgB;AAAA;AAAA,UAEhB,UAAU;AAAA,UACV,gBAAgB;AAAA,UAChB,sBAAsB;AAAA;AAAA,UAEtB,gBAAgB;AAAA;AAAA,UAEhB,QAAQ;AAAA,UACR,YAAY;AAAA;AAAA,UAEZ,cAAc;AAAA,UACd,qBAAqB;AAAA,UACrB,WAAW;AAAA,UACX,eAAe;AAAA,UACf,WAAW;AAAA;AAAA,UAEX,aAAa;AAAA,QACf,CAAC;AAAA,QACD,sBAAsB;AAAA,MACxB;AAAA,MACA,qBAAqB;AAAA,QACnB,gBAAgB;AAAA,QAChB,gBAAgB;AAAA,MAClB;AAAA,IACF;AAAA;AAAA;AAAA;AAAA;AAAA,IAMA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,OAAO;AAAA,QACL,OAAO;AAAA,QACP,aAAa;AAAA,QACb,MAAM;AAAA,QACN,YAAY;AAAA,QACZ,QAAQ,KAAK,UAAU;AAAA,UACrB,WAAW;AAAA,UACX,QAAQ;AAAA,UACR,QAAQ;AAAA,UACR,YAAY;AAAA,UACZ,UAAU;AAAA,UACV,gBAAgB;AAAA,UAChB,sBAAsB;AAAA,UACtB,gBAAgB;AAAA,UAChB,qBAAqB;AAAA,UACrB,kBAAkB;AAAA,UAClB,kBAAkB;AAAA;AAAA,UAElB,aAAa;AAAA,QACf,CAAC;AAAA,QACD,sBAAsB;AAAA,MACxB;AAAA,MACA,qBAAqB;AAAA,QACnB,gBAAgB;AAAA,QAChB,gBAAgB;AAAA,MAClB;AAAA,IACF;AAAA;AAAA;AAAA;AAAA,IAKA;AAAA,MACE,IAAI;AAAA,MACJ,MAAM;AAAA,MACN,OAAO;AAAA,QACL,OAAO;AAAA,QACP,aAAa;AAAA,QACb,MAAM;AAAA,QACN,kBAAkB;AAAA,QAClB,WAAW;AAAA,MACb;AAAA,MACA,qBAAqB;AAAA,QACnB,gBAAgB;AAAA,QAChB,gBAAgB;AAAA,MAClB;AAAA,IACF;AAAA,EACF;AAEA,SAAO,EAAE,UAAU,MAAM;AAC3B;","names":[]}

package/dist/index.d.ts

@@ -1,5 +1,5 @@
 export { q as ApiRequestBlockProps, h as ApiRequestBlockSpec, A as AuthorizationTab, d as AuthorizationTabState, B as BlockPresenceUser, i as CheckboxBlockProps, g as CheckboxBlockSpec, C as CoverImage, c as CoverImageProps, D as DevUcanGrantButton, v as Entity, w as EntityResponse, f as EntitySigningSetup, x as EntityVariables, E as EvaluationTab, e as EvaluationTabState, F as FlowPermissionsPanel, n as FlowStepRefProps, l as FlowStepRefSpec, G as GrantPermissionModal, y as GraphQLClient, M as GraphQLRequest, J as GraphQLResponse, H as HttpMethod, I as IxoEditor, b as IxoEditorProps, K as KeyValuePair, k as ListBlockProps, j as ListBlockSettings, L as ListBlockSpec, O as OverviewBlock, o as OverviewBlockProps, p as ProposalBlockProps, P as ProposalBlockSpec, t as getEntity, m as inlineContentSpecs, z as ixoGraphQLClient, r as useBlockPresence, a as useCreateCollaborativeIxoEditor, u as useCreateIxoEditor, s as useTrackBlockFocus } from './graphql-client-DQD1v9Yw.js';
-export { A as AuthorizationResult, U as BaseUcanFlow, ad as BuildFlowAgentContextParams, W as CompiledFlow, L as CompilerRegistry, E as ExecuteNodeParams, d as ExecutionContext, c as ExecutionOutcome, G as FLOW_CONNECTIONS_MAP_KEY, H as FLOW_CONNECTION_BINDINGS_MAP_KEY, F as FLOW_PARTICIPANTS_MAP_KEY, ae as FlowAgentActor, af as FlowAgentCommand, ag as FlowAgentCommandResult, ah as FlowAgentContext, ai as FlowAgentExecutor, aj as FlowAgentLease, ak as FlowAgentNodeSnapshot, al as FlowAgentPublicNodeState, Y as FlowAgentService, am as FlowAgentTickResult, V as FlowCapability, P as FlowConnection, Q as FlowConnectionBinding, T as FlowConnectionRequirementKey, O as FlowParticipant, X as FlowStrategy, M as MergeResult, N as NodeActionResult, R as ReadFlowOptions, J as ReadFlowResult, K as ReadableEditor, S as SetupFlowOptions, I as SetupFlowResult, Z as acquireFlowAgentLease, _ as appendAgentLedgerEvent, a as buildAuthzFromProps, $ as buildFlowAgentContext, b as buildFlowNodeFromBlock, a0 as cleanupExpiredFlowAgentLeases, k as compileBaseUcanFlow, a1 as createAgentCommand, n as decompileToBaseUcanFlow, a2 as evaluateFlowAgentPolicy, e as executeNode, a3 as executeQueuedAgentCommands, j as getActiveEditor, a4 as getFlowAgentMaps, i as isAuthorized, m as mergeCompiledFlows, a5 as planRalphLoopCommands, a6 as queueAgentCommand, a7 as readAgentLedgerEvents, l as readCompiledFlowFromYDoc, g as readFlow, r as readFlowAsBaseUcan, B as readFlowConnectionBindings, v as readFlowConnections, f as readFlowFromEditor, o as readFlowParticipants, a8 as readQueuedAgentCommands, a9 as releaseFlowAgentLease, x as removeFlowConnection, D as removeFlowConnectionBinding, p as removeFlowParticipant, h as setActiveEditor, y as setFlowConnectionOptional, z as setFlowConnectionRequires, q as setFlowParticipantPowerLevel, t as setFlowParticipantRequirements, s as setupFlowFromBaseUcan, aa as tickFlowAgent, w as upsertFlowConnection, C as upsertFlowConnectionBinding, u as upsertFlowParticipant, ab as validateAgentCommand, ac as validateFlowAgentLease } from './store-B60v3oba.js';
+export { A as AuthorizationResult, U as BaseUcanFlow, ad as BuildFlowAgentContextParams, W as CompiledFlow, L as CompilerRegistry, E as ExecuteNodeParams, d as ExecutionContext, c as ExecutionOutcome, G as FLOW_CONNECTIONS_MAP_KEY, H as FLOW_CONNECTION_BINDINGS_MAP_KEY, F as FLOW_PARTICIPANTS_MAP_KEY, ae as FlowAgentActor, af as FlowAgentCommand, ag as FlowAgentCommandResult, ah as FlowAgentContext, ai as FlowAgentExecutor, aj as FlowAgentLease, ak as FlowAgentNodeSnapshot, al as FlowAgentPublicNodeState, Y as FlowAgentService, am as FlowAgentTickResult, V as FlowCapability, P as FlowConnection, Q as FlowConnectionBinding, T as FlowConnectionRequirementKey, O as FlowParticipant, X as FlowStrategy, M as MergeResult, N as NodeActionResult, R as ReadFlowOptions, J as ReadFlowResult, K as ReadableEditor, S as SetupFlowOptions, I as SetupFlowResult, Z as acquireFlowAgentLease, _ as appendAgentLedgerEvent, a as buildAuthzFromProps, $ as buildFlowAgentContext, b as buildFlowNodeFromBlock, a0 as cleanupExpiredFlowAgentLeases, k as compileBaseUcanFlow, a1 as createAgentCommand, n as decompileToBaseUcanFlow, a2 as evaluateFlowAgentPolicy, e as executeNode, a3 as executeQueuedAgentCommands, j as getActiveEditor, a4 as getFlowAgentMaps, i as isAuthorized, m as mergeCompiledFlows, a5 as planRalphLoopCommands, a6 as queueAgentCommand, a7 as readAgentLedgerEvents, l as readCompiledFlowFromYDoc, g as readFlow, r as readFlowAsBaseUcan, B as readFlowConnectionBindings, v as readFlowConnections, f as readFlowFromEditor, o as readFlowParticipants, a8 as readQueuedAgentCommands, a9 as releaseFlowAgentLease, x as removeFlowConnection, D as removeFlowConnectionBinding, p as removeFlowParticipant, h as setActiveEditor, y as setFlowConnectionOptional, z as setFlowConnectionRequires, q as setFlowParticipantPowerLevel, t as setFlowParticipantRequirements, s as setupFlowFromBaseUcan, aa as tickFlowAgent, w as upsertFlowConnection, C as upsertFlowConnectionBinding, u as upsertFlowParticipant, ab as validateAgentCommand, ac as validateFlowAgentLease } from './store-wmrw3T5K.js';
 export { K as Addr, A as AuthzExecActionTypes, z as BlockRequirements, y as BlocknoteContextValue, x as BlocknoteHandlers, B as BlocknoteProvider, R as CosmosMsgForEmpty, D as DelegationChainValidationResult, l as DelegationGrant, M as Expiration, F as FlowRuntimeStateManager, $ as ImportProtocolTemplateResult, _ as ImportProtocolTemplatesToSpaceParams, I as InvocationStore, q as IxoCollaborativeEditorOptions, p as IxoCollaborativeUser, o as IxoEditorConfig, m as IxoEditorOptions, n as IxoEditorTheme, X as ListProtocolDeedsWithTemplatesParams, a0 as MatrixPrivacySettings, a1 as MatrixRoom, a2 as MatrixSpace, a4 as MatrixSpaceStructure, a3 as MatrixSubspace, W as ProposalAction, P as ProposalResponse, Y as ProtocolDeedWithTemplates, Z as ProtocolTemplateSummary, C as SingleChoiceProposal, w as StakeType, w as StakeTypeValue, N as Status, S as StoredDelegation, k as StoredInvocation, O as Threshold, T as Timestamp, a5 as Translate, j as UcanCapability, U as UcanDelegationStore, g as UcanService, h as UcanServiceConfig, i as UcanServiceHandlers, L as Uint128, J as User, V as ValidatorActionType, H as Vote, G as VoteInfo, E as VoteResponse, Q as Votes, r as blockSpecs, d as createInvocationStore, e as createMemoryInvocationStore, b as createMemoryUcanDelegationStore, c as createRuntimeStateManager, a as createUcanDelegationStore, f as createUcanService, s as getExtraSlashMenuItems, u as useBlocknoteContext, t as useBlocknoteHandlers, v as useTranslate } from './index-x1R0c9P_.js';
 export { Block, BlockNoteEditor, BlockNoteSchema, DefaultBlockSchema, DefaultInlineContentSchema, DefaultStyleSchema, PartialBlock } from '@blocknote/core';
 export { CloneDocumentResult, cloneDocument } from '@ixo/matrix-crdt';

package/dist/index.js

@@ -30,7 +30,7 @@ import {
   useCreateIxoEditor,
   useTrackBlockFocus,
   useTranslate
-} from "./chunk-UIZV4YAW.js";
+} from "./chunk-DBH72SPW.js";
 import {
   FLOW_PARTICIPANTS_MAP_KEY,
   readFlowParticipants,
@@ -38,7 +38,7 @@ import {
   setFlowParticipantPowerLevel,
   setFlowParticipantRequirements,
   upsertFlowParticipant
-} from "./chunk-LBFFAKSN.js";
+} from "./chunk-R3H7TDTG.js";
 import {
   FLOW_CONNECTIONS_MAP_KEY,
   FLOW_CONNECTION_BINDINGS_MAP_KEY,
@@ -87,7 +87,7 @@ import {
   upsertFlowConnectionBinding,
   validateAgentCommand,
   validateFlowAgentLease
-} from "./chunk-VFYF2B5E.js";
+} from "./chunk-BTMC55BR.js";
 
 // src/index.ts
 import { cloneDocument } from "@ixo/matrix-crdt";

package/dist/mantine/index.js

@@ -85,7 +85,7 @@ import {
   useRunEventLog,
   useRunSessionId,
   useTrackBlockFocus
-} from "../chunk-UIZV4YAW.js";
+} from "../chunk-DBH72SPW.js";
 import {
   DM_NOTIFICATIONS_MAP_KEY,
   RUNS_MAP_KEY,
@@ -97,7 +97,7 @@ import {
   sendDirectMessage,
   setDMNotificationRecord,
   shouldNotify
-} from "../chunk-VFYF2B5E.js";
+} from "../chunk-BTMC55BR.js";
 
 // src/mantine/components/DebugButton.tsx
 import React, { useEffect, useRef, useState } from "react";

package/dist/{store-B60v3oba.d.ts → store-wmrw3T5K.d.ts}

@@ -948,6 +948,19 @@ declare function cleanupExpiredFlowAgentLeases(leases: Map<FlowAgentLease>, now?
 
 declare function requiredCapabilityForCommand(type: FlowAgentCommandType, flowUri: string, nodeId: string): UcanCapability;
 declare function isCapabilityMatch(granted: UcanCapability, required: UcanCapability): boolean;
+/**
+ * Match a granted capability pattern against a required `can`.
+ *
+ * ⚠️ This is the **trusted flow-agent policy** matcher: it allows the global
+ * `'*'` wildcard, so a delegation granting `can: '*'` matches every ability.
+ * It is re-exported from `src/core/index.ts` — do not use it to gate public or
+ * untrusted matching. For that, call `capabilityPatternCoversCan` directly and
+ * leave `allowGlobalWildcard` off (the default), which rejects `'*'`.
+ *
+ * Note: the granted side is normalized (`normalizeCan`), so dotted legacy
+ * grants such as `flow.notify` / `flow.*` now match `flow/notify` where they
+ * were previously inert.
+ */
 declare function canMatches(granted: string, required: string): boolean;
 declare function resourceMatches(granted: string, required: string): boolean;
 interface EvaluateFlowAgentPolicyParams {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ixo/editor",
-  "version": "6.23.0",
+  "version": "6.24.0",
   "description": "A custom BlockNote editor wrapper for IXO team",
   "type": "module",
   "main": "./dist/index.js",