@kaelen-ai/cli 0.1.16 → 0.1.18

package/dist/index.js

@@ -837,6 +837,7 @@ var BINDING_SCOPES = /* @__PURE__ */ new Set(["project", "principal"]);
 var CREDENTIAL_SOURCES = /* @__PURE__ */ new Set(["none", "platform", "secret_bundle"]);
 var TARGET_EXECUTION_KEYS = /* @__PURE__ */ new Set([
   "applications",
+  "application_bindings",
   "endpoints",
   "secret_names",
   "timeout_ms",
@@ -1129,6 +1130,13 @@ function validateTargetExecution(target, declaredApps, declaredEndpoints, errors
       errors.push(`${owner} references undeclared application "${ref}"`);
     }
   }
+  validateApplicationBindings(
+    owner,
+    executionRecord.application_bindings,
+    applicationRefs,
+    declaredApps,
+    errors
+  );
   const endpointRefs = validateScopeList(
     owner,
     "execution.endpoints",
@@ -1161,6 +1169,60 @@ function validateTargetExecution(target, declaredApps, declaredEndpoints, errors
     errors.push(`${owner} endpoints is no longer supported; use execution.endpoints`);
   }
 }
+function validateApplicationBindings(owner, value, applicationRefs, declaredApps, errors) {
+  if (value === void 0) {
+    if (applicationRefs.length > 0) {
+      errors.push(`${owner} execution.application_bindings is required when execution.applications is set`);
+    }
+    return;
+  }
+  if (!Array.isArray(value)) {
+    errors.push(`${owner} execution.application_bindings must be an array`);
+    return;
+  }
+  const applicationRefSet = new Set(applicationRefs);
+  const boundApplicationNames = /* @__PURE__ */ new Set();
+  const seenAliases = /* @__PURE__ */ new Set();
+  for (const entry of value) {
+    if (!isRecord2(entry)) {
+      errors.push(`${owner} execution.application_bindings entry must be an object`);
+      continue;
+    }
+    for (const key of Object.keys(entry)) {
+      if (key !== "application_name" && key !== "application_alias") {
+        errors.push(
+          `${owner} execution.application_bindings entry contains unsupported key "${key}"`
+        );
+      }
+    }
+    const applicationName = stringField2(entry, "application_name");
+    const applicationAlias = stringField2(entry, "application_alias");
+    if (!applicationName) {
+      errors.push(`${owner} execution.application_bindings entry application_name is required`);
+      continue;
+    }
+    if (!applicationAlias) {
+      errors.push(`${owner} execution.application_bindings entry application_alias is required`);
+      continue;
+    }
+    if (!declaredApps.has(applicationName)) {
+      errors.push(`${owner} execution.application_bindings references undeclared application "${applicationName}"`);
+    }
+    if (!applicationRefSet.has(applicationName)) {
+      errors.push(`${owner} execution.application_bindings references application "${applicationName}" not present in execution.applications`);
+    }
+    if (seenAliases.has(applicationAlias)) {
+      errors.push(`${owner} execution.application_bindings duplicates application_alias "${applicationAlias}"`);
+    }
+    seenAliases.add(applicationAlias);
+    boundApplicationNames.add(applicationName);
+  }
+  for (const ref of applicationRefs) {
+    if (!boundApplicationNames.has(ref)) {
+      errors.push(`${owner} execution.application_bindings is missing application "${ref}"`);
+    }
+  }
+}
 function validateRateBudget(owner, value, errors) {
   if (value === void 0) return;
   if (!isRecord2(value)) {
@@ -1231,11 +1293,14 @@ function validateToolCapability(appName, resourceName, tool, errors, seenCapabil
     errors.push(`tool "${expected}" capability mode does not match the tool mode`);
   }
   const audit = stringField2(capability, "audit");
-  if (mode === "write" && audit !== "sync") {
-    errors.push(`write tool "${expected}" must use sync audit`);
+  if (audit !== "finish_only" && audit !== "pre_call") {
+    errors.push(`tool "${expected}" capability audit must be finish_only or pre_call`);
+  }
+  if (mode === "write" && audit !== "pre_call") {
+    errors.push(`write tool "${expected}" must use pre_call audit`);
   }
-  if (mode === "read" && audit !== "async") {
-    errors.push(`read tool "${expected}" must use async audit`);
+  if (mode === "read" && audit !== "finish_only") {
+    errors.push(`read tool "${expected}" must use finish_only audit`);
   }
   const exposure = stringField2(capability, "credential_exposure");
   if (exposure !== "none" && exposure !== "stdlib") {
@@ -2468,18 +2533,11 @@ ${stdout || "(empty)"}`
 
 // src/build/manifest.ts
 async function generateManifest(input) {
-  const entrypoints = {};
-  for (const b of input.behaviorBundles) {
-    entrypoints[b.name] = `behaviors/${b.name}.js`;
-  }
-  for (const c of input.conversationBundles) {
-    entrypoints[c.name] = `conversations/${c.name}.js`;
-  }
   const m = await evaluateAndEmitManifest({
     cwd: input.cwd,
     outDir: input.outDir,
     userFiles: input.userFiles,
-    entrypoints
+    entrypoints: input.entrypoints
   });
   await writeFile(
     join(input.outDir, "manifest.json"),
@@ -2510,7 +2568,7 @@ function canonicalize(value) {
 }
 
 // src/build/catalog.ts
-var CATALOG_CONTRACT_VERSION = "io.invocation.v2";
+var CATALOG_CONTRACT_VERSION = "io.catalog.v1";
 var CATALOG_SNAPSHOT_VERSION = "io_runtime.snapshot.v2";
 var WEBHOOK_RESOURCE_KIND = "webhook";
 var PLATFORM_TOOL_KINDS = /* @__PURE__ */ new Set(["email", "calendar", "contacts"]);
@@ -2943,7 +3001,6 @@ var INTERNAL_RUN = "__io_cli_compiled_run";
 var INTERNAL_ON_START = "__io_cli_compiled_on_start";
 var INTERNAL_ON_MESSAGE = "__io_cli_compiled_on_message";
 var INTERNAL_ON_END = "__io_cli_compiled_on_end";
-var INTERNAL_APPLICATIONS = "__io_cli_compiled_applications";
 function conversationChannel(name) {
   return `session:${name}`;
 }
@@ -3045,13 +3102,6 @@ function functionSourceFromProperty(source, prop, label) {
   }
   return source.slice(value.start, value.end);
 }
-function expressionSourceFromProperty(source, prop, label) {
-  const value = prop.value;
-  if (!value) {
-    throw new BuildError(`compiled target is missing ${label} value`);
-  }
-  return source.slice(value.start, value.end);
-}
 function replaceRange(source, start, end, text) {
   return `${source.slice(0, start)}${text}${source.slice(end)}`;
 }
@@ -3389,8 +3439,6 @@ function buildBehaviorReplacement(source, spec, behavior) {
   }
   const execution = compactExecution(behavior.execution);
   const runSource = functionSourceFromProperty(source, run, "run");
-  const applications = findProperty(spec, "applications");
-  const applicationsSource = applications ? expressionSourceFromProperty(source, applications, "applications") : void 0;
   const configEntries = [
     `kind: "behavior"`,
     `name: ${JSON.stringify(behavior.name)}`,
@@ -3399,13 +3447,9 @@ function buildBehaviorReplacement(source, spec, behavior) {
   if (execution) {
     configEntries.push(`execution: ${JSON.stringify(execution)}`);
   }
-  if (applicationsSource) {
-    configEntries.push(`applications: ${INTERNAL_APPLICATIONS}`);
-  }
   const configSource = `Object.freeze({ ${configEntries.join(", ")} })`;
   return {
     replacement: [
-      ...applicationsSource ? [`const ${INTERNAL_APPLICATIONS} = ${applicationsSource};`] : [],
       `const ${INTERNAL_CONFIG} = ${configSource};`,
       `const ${INTERNAL_RUN} = ${runSource};`,
       `export { ${INTERNAL_CONFIG} as config, ${INTERNAL_RUN} as run };`
@@ -3413,9 +3457,7 @@ function buildBehaviorReplacement(source, spec, behavior) {
     refs: /* @__PURE__ */ new Set([
       INTERNAL_CONFIG,
       INTERNAL_RUN,
-      ...applicationsSource ? [INTERNAL_APPLICATIONS] : [],
-      ...refsFromExpressionSource(runSource),
-      ...applicationsSource ? refsFromExpressionSource(applicationsSource) : []
+      ...refsFromExpressionSource(runSource)
     ])
   };
 }
@@ -3430,11 +3472,9 @@ function buildConversationReplacement(source, spec, conversation) {
   const execution = compactExecution(conversation.execution);
   const onStart = findProperty(spec, "onStart");
   const onEnd = findProperty(spec, "onEnd");
-  const applications = findProperty(spec, "applications");
   const onMessageSource = functionSourceFromProperty(source, onMessage, "onMessage");
   const onStartSource = onStart ? functionSourceFromProperty(source, onStart, "onStart") : void 0;
   const onEndSource = onEnd ? functionSourceFromProperty(source, onEnd, "onEnd") : void 0;
-  const applicationsSource = applications ? expressionSourceFromProperty(source, applications, "applications") : void 0;
   const configEntries = [
     `kind: "conversation"`,
     `name: ${JSON.stringify(conversation.name)}`,
@@ -3444,24 +3484,18 @@ function buildConversationReplacement(source, spec, conversation) {
   if (execution) {
     configEntries.push(`execution: ${JSON.stringify(execution)}`);
   }
-  if (applicationsSource) {
-    configEntries.push(`applications: ${INTERNAL_APPLICATIONS}`);
-  }
   const configSource = `Object.freeze({ ${configEntries.join(", ")} })`;
   const refs = /* @__PURE__ */ new Set([
     INTERNAL_CONFIG,
     INTERNAL_ON_START,
     INTERNAL_ON_MESSAGE,
     INTERNAL_ON_END,
-    ...applicationsSource ? [INTERNAL_APPLICATIONS] : [],
     ...refsFromExpressionSource(onMessageSource),
     ...onStartSource ? refsFromExpressionSource(onStartSource) : [],
-    ...onEndSource ? refsFromExpressionSource(onEndSource) : [],
-    ...applicationsSource ? refsFromExpressionSource(applicationsSource) : []
+    ...onEndSource ? refsFromExpressionSource(onEndSource) : []
   ]);
   return {
     replacement: [
-      ...applicationsSource ? [`const ${INTERNAL_APPLICATIONS} = ${applicationsSource};`] : [],
       `const ${INTERNAL_CONFIG} = ${configSource};`,
       `const ${INTERNAL_ON_START} = ${onStartSource ?? "undefined"};`,
       `const ${INTERNAL_ON_MESSAGE} = ${onMessageSource};`,
@@ -3546,12 +3580,17 @@ async function buildPipeline(config, cwd = process.cwd(), minify = false, buildD
     bundleAll(allBehaviorSources, outDir, "behaviors", minify),
     bundleAll(allConversationSources, outDir, "conversations", minify)
   ]);
+  const entrypoints = Object.fromEntries(
+    [...behaviorBundles, ...conversationBundles].map((bundle) => [
+      bundle.name,
+      relative(outDir, bundle.outFile).split("\\").join("/")
+    ])
+  );
   const manifest = await generateManifest({
     cwd,
     userFiles: files,
     outDir,
-    behaviorBundles,
-    conversationBundles
+    entrypoints
   });
   validateManifest(manifest);
   const { catalog: catalog2, warnings } = generateCatalog(manifest);
@@ -4127,7 +4166,7 @@ function isPlainObject(value) {
 }
 function isCatalogShape(value) {
   if (!isPlainObject(value)) return false;
-  return value.contract_version === "io.invocation.v2" && value.snapshot_version === "io_runtime.snapshot.v2" && typeof value.catalog_hash === "string" && isPlainObject(value.resources) && isPlainObject(value.signals) && isPlainObject(value.tools) && isPlainObject(value.schemas);
+  return value.contract_version === "io.catalog.v1" && value.snapshot_version === "io_runtime.snapshot.v2" && typeof value.catalog_hash === "string" && isPlainObject(value.resources) && isPlainObject(value.signals) && isPlainObject(value.tools) && isPlainObject(value.schemas);
 }
 function isManifestShape(value) {
   if (!isPlainObject(value)) return false;
@@ -4144,7 +4183,7 @@ function parseRemoteCatalog(catalogJson) {
   }
   if (!isCatalogShape(parsed)) {
     throw new ConfigError(
-      "Remote deployment catalog does not match the io.invocation.v2 catalog shape."
+      "Remote deployment catalog does not match the io.catalog.v1 catalog shape."
     );
   }
   return parsed;
@@ -4192,6 +4231,15 @@ async function executeGraphQLUnauth(apiUrl, query, variables, headers = {}) {
   }
   return payload.data;
 }
+function serializePrincipalInput(input) {
+  return {
+    ...input.externalId !== void 0 ? { externalId: input.externalId } : {},
+    ...input.state !== void 0 ? {
+      state: input.state.toUpperCase()
+    } : {},
+    ...input.metadata !== void 0 ? { metadata: input.metadata } : {}
+  };
+}
 async function refreshAndSave(apiUrl, refreshToken) {
   let data;
   try {
@@ -4441,7 +4489,10 @@ function createClient(config) {
           }
         }
       `,
-      { projectId: projectIdValue, input }
+      {
+        projectId: projectIdValue,
+        input: serializePrincipalInput(input)
+      }
     );
     return data.createPrincipal;
   }
@@ -4460,7 +4511,11 @@ function createClient(config) {
           }
         }
       `,
-      { projectId: projectIdValue, id, input }
+      {
+        projectId: projectIdValue,
+        id,
+        input: serializePrincipalInput(input)
+      }
     );
     return data.updatePrincipal ?? null;
   }
@@ -4644,7 +4699,6 @@ function createClient(config) {
           eventName,
           payloadJson: JSON.stringify(input.payload ?? {}),
           metadataJson: JSON.stringify(input.metadata ?? {}),
-          correlationId: input.correlationId,
           causationId: input.causationId,
           idempotencyKey: input.idempotencyKey,
           sourceName: input.sourceName
@@ -6387,7 +6441,6 @@ async function signalEmitCommand(name, options) {
       principalId: options.principalId,
       payload,
       metadata,
-      correlationId: options.correlationId,
       causationId: options.causationId,
       idempotencyKey: options.idempotencyKey,
       sourceName: options.sourceName
@@ -6516,7 +6569,7 @@ function isRecord4(value) {
 }
 function isCatalogShape2(value) {
   if (!isRecord4(value)) return false;
-  return value.contract_version === "io.invocation.v2" && value.snapshot_version === "io_runtime.snapshot.v2" && typeof value.catalog_hash === "string" && isRecord4(value.resources) && isRecord4(value.signals) && isRecord4(value.tools) && isRecord4(value.schemas);
+  return value.contract_version === "io.catalog.v1" && value.snapshot_version === "io_runtime.snapshot.v2" && typeof value.catalog_hash === "string" && isRecord4(value.resources) && isRecord4(value.signals) && isRecord4(value.tools) && isRecord4(value.schemas);
 }
 async function readLocalCatalog(buildDir) {
   const path = resolve(process.cwd(), buildDir, "catalog.json");
@@ -6543,7 +6596,7 @@ async function readLocalCatalog(buildDir) {
   }
   if (!isCatalogShape2(parsed)) {
     throw new CliError(
-      `Local catalog at ${path} does not match the io.invocation.v2 catalog shape.`,
+      `Local catalog at ${path} does not match the io.catalog.v1 catalog shape.`,
       "CATALOG_SHAPE_MISMATCH"
     );
   }
@@ -6664,7 +6717,7 @@ async function catalogShowCommand(options) {
 
 // src/index.ts
 var program = new Command();
-program.name("io").description("IO CLI \u2014 build and deploy behaviors").version("0.1.16");
+program.name("io").description("IO CLI \u2014 build and deploy behaviors").version("0.1.18");
 program.command("init").description("Initialize io.config.json for the current project").option("--yes", "Overwrite existing config without prompting").action(initCommand);
 program.command("build").description("Build behaviors from the io/ directory").option("--dir <path>", "Source directory", "io").option("--minify", "Minify bundles", false).action(buildCommand);
 program.command("deploy").description("Build and package for deployment").option("--dir <path>", "Source directory", "io").option("--no-minify", "Skip minification").option("--yes", "Skip confirmation prompt").option("--watch", "Tail deployment status until it reaches a terminal state").action(deployCommand);
@@ -6685,7 +6738,7 @@ principals.command("create <external-id>").description("Create a principal in th
 principals.command("update <id>").description("Update a principal").option("--project-id <id>", "Override the configured project ID").option("--external-id <external-id>", "Replace the external ID").option("--state <state>", "Principal state: active, inactive, or archived").option("--metadata <json>", "Replace principal metadata with a JSON object").action(principalsUpdateCommand);
 principals.command("delete <id>").description("Delete a principal").option("--project-id <id>", "Override the configured project ID").action(principalsDeleteCommand);
 var signals = program.command("signals").description("Emit runtime signals");
-signals.command("emit <name>").description("Emit a signal into the active project's event stream").option("--payload <json>", "Signal payload as a JSON object", "{}").option("--metadata <json>", "Signal metadata as a JSON object", "{}").option("--project-id <id>", "Override the configured project ID").requiredOption("--principal-id <id>", "Project principal ID for the emitted signal").option("--correlation-id <id>", "Correlation ID to attach to the signal").option("--causation-id <id>", "Causation ID to attach to the signal").option("--idempotency-key <key>", "Optional idempotency key").option("--source-name <name>", "Optional source name for the emitted signal").option("--json", "Print the raw emitted event as JSON", false).action(signalEmitCommand);
+signals.command("emit <name>").description("Emit a signal into the active project's event stream").option("--payload <json>", "Signal payload as a JSON object", "{}").option("--metadata <json>", "Signal metadata as a JSON object", "{}").option("--project-id <id>", "Override the configured project ID").requiredOption("--principal-id <id>", "Project principal ID for the emitted signal").option("--causation-id <id>", "Causation ID to attach to the signal").option("--idempotency-key <key>", "Optional idempotency key").option("--source-name <name>", "Optional source name for the emitted signal").option("--json", "Print the raw emitted event as JSON", false).action(signalEmitCommand);
 program.command("quota").description("Show current quota usage for the active organization").action(quotaCommand);
 program.command("logs").description("Show recent activity events").option("--limit <count>", "Number of events to show", "50").option("--type <types...>", "Filter by event types").option("--since <duration>", "Show events since (e.g. 15m, 1h, 7d)").option("--follow", "Tail events in real-time").action(logsCommand);
 program.command("reconcile").description("Force runtime to reconcile resources for the active project").option("--project-id <id>", "Override the configured project ID").option("--watch", "Tail activity events after the reconcile request").action(reconcileCommand);