@morit/cli 1.3.0 → 1.4.2

package/src/workspace.js

@@ -40,7 +40,7 @@ const SAFE_SEGMENT = /^[A-Za-z0-9._-]+$/;
 const WINDOWS_RESERVED = /^(?:con|prn|aux|nul|clock\$|com[1-9]|lpt[1-9])(?:\.|$)/i;
 const UI_IDENTIFIER = /^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/;
 const UI_STATE_KEY = /^[A-Za-z][A-Za-z0-9_]{0,63}$/;
-const UI_BINDING = /^(?:state|data|item)(?:\.[A-Za-z0-9_-]+){0,12}$/;
+const UI_BINDING = /^(?:state|data|item|context)(?:\.[A-Za-z0-9_-]+){0,12}$/;
 const UI_TEMPLATE_BINDING = /\{\{\s*([^{}]+?)\s*\}\}/g;
 const UI_SINGLE_TEMPLATE_BINDING = /^\{\{\s*([^{}]+?)\s*\}\}$/;
 const UI_ASSET_PATH = /^assets\/[A-Za-z0-9._-]+(?:\/[A-Za-z0-9._-]+)*\.(?:gif|jpe?g|png|webp)$/i;
@@ -152,7 +152,7 @@ export class LocalWorkspace {
       version: "1.0.0",
       cloud_project_id: null,
       required_secrets: [],
-      min_morit_version: "1.7.8",
+      min_morit_version: "1.7.12",
       max_morit_version: "1.999.999",
       permissions: [],
       capabilities: [],
@@ -727,10 +727,10 @@ async function signingKeyForPublisher(keyDirectory, publisher) {
   }
 }
 
-function previewHtml(manifest) {
-  return renderPreviewHtml(manifest);
-}
-
+function previewHtml(manifest) {
+  return renderPreviewHtml(manifest);
+}
+
 function validateMetadata(pluginId, name, publisher, description) {
   if (!PLUGIN_ID.test(pluginId) || pluginId.length > 120) throw new Error("plugin_id must be a reverse-domain lowercase identifier");
   if (typeof name !== "string" || name.trim().length < 1 || name.trim().length > 80) throw new Error("name must contain 1 to 80 characters");
@@ -813,6 +813,12 @@ function validateManifest(manifest, files) {
       throw new Error(`unsupported runtime adapter: ${adapter || "missing"}`);
     }
     validateRuntime(capability, runtime, permissions, credentials, connectors, dependencies);
+    for (const [field, schema] of [["input_schema", capability.input_schema], ["output_schema", capability.output_schema]]) {
+      if (schema === undefined) continue;
+      assertObject(schema, `capability ${capability.id} ${field}`);
+      if (Buffer.byteLength(JSON.stringify(schema), "utf8") > 16 * 1024) throw new Error(`capability ${capability.id} ${field} is too large`);
+      validateResponseSchema(schema, 0, true);
+    }
     if (adapter === "sandbox_python") {
       const entrypoint = normalizeEntrypointPath(runtime.entrypoint);
       if (!entrypoint.startsWith("src/") || !entrypoint.endsWith(".py")) throw new Error("sandbox_python entrypoint must be src/*.py");
@@ -1182,6 +1188,54 @@ function validateSlashCommands(commands, capabilities) {
   }
 }
 
+function validateHttpRuntime(runtime, endpoint) {
+  let url;
+  try { url = new URL(endpoint); } catch { throw new Error("http_json requires a valid HTTPS endpoint"); }
+  if (url.protocol !== "https:" || url.username || url.password || url.hash || (url.port && url.port !== "443") || endpoint.length > 2048) {
+    throw new Error("http_json requires a valid HTTPS endpoint");
+  }
+  if (!["GET", "POST"].includes(String(runtime.method || "POST").toUpperCase())) {
+    throw new Error("http_json supports GET and POST");
+  }
+  if (runtime.request_body != null) assertObject(runtime.request_body, "http_json request_body");
+  if (runtime.request_params != null) {
+    const params = runtime.request_params;
+    assertObject(params, "http_json request_params");
+    if (Object.keys(params).length > 32) throw new Error("http_json request_params accepts at most 32 parameters");
+    const entries = [];
+    for (const [name, value] of Object.entries(params)) {
+      if (!name.length || name.length > 80 || /[\x00-\x1f]/.test(name)) throw new Error("invalid http_json parameter name");
+      const values = Array.isArray(value) ? value : [value];
+      if (values.length > 64 || values.some(item => item != null && (
+        !["string", "number", "boolean"].includes(typeof item) || typeof item === "number" && !Number.isFinite(item)
+      ))) throw new Error("http_json parameters must be scalars or scalar lists");
+      for (const item of values) if (item != null) entries.push([name, String(item)]);
+    }
+    if (new URLSearchParams(entries).toString().length > 16 * 1024) throw new Error("http_json request_params is too large");
+  }
+  const response = runtime.response || {};
+  rejectUnknownFields(response, new Set(contract.object_fields.http_json_response), "http_json response");
+  const projection = "summary_path" in response || "data_path" in response;
+  if (projection && (Object.keys(response).some(name => !["summary_path", "data_path", "summary_prefix"].includes(name)) ||
+      !("summary_path" in response) && !("summary_prefix" in response))) {
+    throw new Error("http_json cannot mix object and collection response settings");
+  }
+  const validPath = value => typeof value === "string" && value.length > 0 && value.length <= 240 && value.split(".").every(part => /^(?:\*|[A-Za-z0-9_-]{1,80})$/.test(part));
+  for (const name of ["summary_path", "data_path", "collection_path", "id_path", "url_path"]) {
+    if (name in response && (!validPath(response[name]) || ["summary_path", "data_path"].includes(name) && response[name].split(".").includes("*"))) {
+      throw new Error(`invalid http_json response.${name}`);
+    }
+  }
+  for (const name of ["title_paths", "content_paths"]) {
+    if (name in response && (!Array.isArray(response[name]) || response[name].length > 24 || response[name].some(path => !validPath(path)))) {
+      throw new Error(`invalid http_json response.${name}`);
+    }
+  }
+  if ("max_items" in response && (!Number.isInteger(response.max_items) || response.max_items < 1 || response.max_items > 20)) {
+    throw new Error("invalid http_json response.max_items");
+  }
+}
+
 function validateRuntime(capability, runtime, permissions, credentials, connectors, dependencies) {
   const adapter = runtime.adapter;
   const credentialIds = new Set(credentials.map((value) => value.id));
@@ -1192,9 +1246,13 @@ function validateRuntime(capability, runtime, permissions, credentials, connecto
   if (adapter === "text_template" && (typeof runtime.template !== "string" || !runtime.template.trim() || runtime.template.length > 2000)) {
     throw new Error("text_template requires a bounded template");
   }
-  if (adapter === "http_json" && effectiveCredential && (
-    !credentialIds.has(effectiveCredential) || !permissions.has("network") || !permissions.has("credentials")
-  )) throw new Error("http_json requires a declared credential and network/credentials permissions");
+  if (adapter === "http_json") {
+    if (!permissions.has("network")) throw new Error("http_json requires network permission");
+    if (effectiveCredential && (!credentialIds.has(effectiveCredential) || !permissions.has("credentials"))) {
+      throw new Error("http_json requires a declared credential");
+    }
+    validateHttpRuntime(runtime, effectiveEndpoint);
+  }
   if (adapter === "mcp_http") {
     if (!permissions.has("network")) throw new Error("mcp_http requires network permission");
     if (effectiveCredential && (!credentialIds.has(effectiveCredential) || !permissions.has("credentials"))) throw new Error("mcp_http requires a declared credential");
@@ -1212,7 +1270,7 @@ function validateRuntime(capability, runtime, permissions, credentials, connecto
   }
   if (adapter === "neis_school") {
     if (!permissions.has("network") || !permissions.has("storage")) throw new Error("neis_school requires network and storage permissions");
-    if (!["setup", "lookup", "overview", "search", "reminder", "briefing"].includes(runtime.operation)) throw new Error("invalid neis_school operation");
+    if (!["school_search", "setup", "lookup", "overview", "search", "reminder", "briefing"].includes(runtime.operation)) throw new Error("invalid neis_school operation");
     if (["reminder", "briefing"].includes(runtime.operation) && !permissions.has("notifications")) throw new Error("NEIS reminder requires notifications permission");
   }
   if (capability.kind === "provider" && (runtime.role !== "search" || !adapter)) throw new Error("provider capabilities must declare a search runtime");
@@ -1242,11 +1300,15 @@ function validateRuntimeReferences(capabilities, connectors, connectorIds, depen
 function validateUiConfig(extension, capabilities, routeIds, files, hasStorage = false) {
   const config = extension.config === undefined ? {} : extension.config;
   const executable = new Set(capabilities.filter((value) => ["tool", "skill", "provider", "notification"].includes(value.kind)).map((value) => value.id));
+  const capabilitySchemas = new Map(capabilities.map((value) => [value.id, {
+    input_schema: value.input_schema,
+    output_schema: value.output_schema,
+  }]));
   if (hasStorage) for (const capability of STORAGE_TOOLS) executable.add(capability);
   if (extension.point === "response" && config.ui_schema !== 2) throw new Error("response UI requires UI Runtime v2");
   if (config.ui_schema === 2) {
     if (config.placement != null && !["card", "action"].includes(extension.point)) throw new Error("UI placement is only valid for home extensions");
-    validateUiRuntimeV2(config, executable, routeIds);
+    validateUiRuntimeV2(config, executable, routeIds, capabilitySchemas);
     validateResponseComponent(config, extension.point === "response");
     for (const asset of uiRuntimeAssetPaths(config.view)) {
       if (!(asset in files)) throw new Error(`UI image asset is not packaged: ${asset}`);
@@ -1376,7 +1438,7 @@ function validateLegacyUiForm(form, executable, extensionId) {
   }
 }
 
-function validateUiRuntimeV2(config, executable, routes) {
+function validateUiRuntimeV2(config, executable, routes, capabilitySchemas = new Map()) {
   rejectUnknownFields(config, new Set(contract.ui_runtime.config_fields), "UI Runtime v2");
   if (config.ui_schema !== 2) throw new Error("UI Runtime version must be 2");
   validateUiIcon(config.icon);
@@ -1429,6 +1491,7 @@ function validateUiRuntimeV2(config, executable, routes) {
   validateUiNavigation(config.navigation, executable, routes, sourceIds, stateKeys);
   assertObject(config.view, "UI Runtime v2 view");
   validateUiNode(config.view, 0, { value: 0 }, executable, routes, sourceIds, stateKeys, null);
+  validateUiCapabilityBindings(config, sources, capabilitySchemas);
 }
 
 function validateUiTheme(theme, variant = false) {
@@ -1600,7 +1663,7 @@ function validateUiNode(node, depth, counter, executable, routes, sources, state
   const props = node.props === undefined ? {} : node.props;
   validateUiProps(node.type, props, sources, stateKeys);
   validateUiCondition(node.visible_when, stateKeys, sources);
-  if (node.action != null && !["surface", "card", "button", "chip"].includes(node.type)) {
+  if (node.action != null && !["surface", "card", "button", "chip", "form", "field", "select", "switch"].includes(node.type)) {
     throw new Error("UI action requires an interactive component");
   }
   validateUiAction(node.action, executable, routes, sources, stateKeys);
@@ -1633,7 +1696,7 @@ function validateUiProps(nodeType, props, sources, stateKeys) {
     "border_radius", "elevation", "opacity", "clip", "enabled", "tooltip", "semantic_label", "exclude_semantics",
   ]);
   if (nodeType === "surface") rejectUnknownFields(props, surfaceProps, "surface UI component props");
-  for (const key of ["text", "title", "subtitle", "label", "supporting", "placeholder", "empty_text", "value", "tooltip", "semantic_label"]) {
+  for (const key of ["text", "title", "subtitle", "label", "supporting", "placeholder", "empty_text", "value", "tooltip", "semantic_label", "error_text", "submit_label"]) {
     if (props[key] !== undefined) {
       optionalUiTemplate(props[key], 1200, true);
       validateTemplateReferences(props[key], stateKeys, sources);
@@ -1644,6 +1707,11 @@ function validateUiProps(nodeType, props, sources, stateKeys) {
   }
   if (props.icon !== undefined) validateUiIcon(props.icon, true);
   if (props.max_lines !== undefined && (!Number.isInteger(props.max_lines) || props.max_lines < 1 || props.max_lines > 100)) throw new Error("UI numeric property max_lines is invalid");
+  if (props.input_type !== undefined && !["text", "number", "email", "url"].includes(props.input_type)) throw new Error("UI input type is invalid");
+  for (const key of ["min_length", "max_length"]) if (props[key] !== undefined && (!Number.isInteger(props[key]) || props[key] < 0 || props[key] > 2000)) throw new Error(`UI ${key} is invalid`);
+  if ((props.min_length ?? 0) > (props.max_length ?? 2000)) throw new Error("UI text length constraints are invalid");
+  for (const key of ["minimum", "maximum"]) if (props[key] !== undefined) validateUiNumber(props[key], `UI ${key}`, -1000000000, 1000000000);
+  if ((props.minimum ?? -1000000000) > (props.maximum ?? 1000000000)) throw new Error("UI numeric constraints are invalid");
   for (const key of ["columns", "size", "limit"]) {
     if (props[key] !== undefined && (!Number.isInteger(props[key]) || props[key] < 0 || props[key] > 100)) throw new Error(`UI numeric property ${key} is invalid`);
   }
@@ -1668,7 +1736,7 @@ function validateUiProps(nodeType, props, sources, stateKeys) {
   for (const key of ["left", "top", "right", "bottom"]) if (props[key] !== undefined) validateUiNumber(props[key], `UI position ${key}`, -4096, 4096);
   if (props.stack_at !== undefined && (!Number.isInteger(props.stack_at) || props.stack_at < 0 || props.stack_at > 1200)) throw new Error("UI stack_at is invalid");
   if (props.min_item_width !== undefined && (!Number.isInteger(props.min_item_width) || props.min_item_width < 96 || props.min_item_width > 600)) throw new Error("UI min_item_width is invalid");
-  for (const key of ["persist", "selected", "dense", "show_legend", "full_width", "exclude_semantics", "clip", "shrink_wrap", "enabled"]) if (props[key] !== undefined && typeof props[key] !== "boolean") throw new Error(`UI boolean property ${key} is invalid`);
+  for (const key of ["persist", "selected", "dense", "show_legend", "full_width", "exclude_semantics", "clip", "shrink_wrap", "enabled", "required", "searchable"]) if (props[key] !== undefined && typeof props[key] !== "boolean") throw new Error(`UI boolean property ${key} is invalid`);
   if (props.fit !== undefined && !["contain", "cover", "fill", "fit_width", "fit_height", "none", "scale_down"].includes(props.fit)) throw new Error("UI image fit is invalid");
   if (props.scroll_direction !== undefined && !["vertical", "horizontal"].includes(props.scroll_direction)) throw new Error("UI scroll direction is invalid");
   if (["image", "avatar"].includes(nodeType)) validateUiImageSource(props, sources);
@@ -1688,6 +1756,11 @@ function validateUiProps(nodeType, props, sources, stateKeys) {
   if (nodeType === "chart" && !["bar", "line", "donut", "scatter"].includes(chartType)) throw new Error("UI chart type is invalid");
   if (nodeType === "calendar" && props.state_key != null && !stateKeys.has(props.state_key)) throw new Error("UI calendar state is unknown");
   if (["field", "select", "switch"].includes(nodeType) && !stateKeys.has(props.state_key)) throw new Error("UI state field is unknown");
+  if (props.suggestions !== undefined || props.suggestions_source !== undefined) {
+    if (nodeType !== "field" || (props.suggestions !== undefined && props.suggestions_source !== undefined)) throw new Error("UI autocomplete options are invalid");
+    if (props.suggestions !== undefined && (!Array.isArray(props.suggestions) || props.suggestions.length < 1 || props.suggestions.length > 32 || props.suggestions.some((value) => typeof value !== "string" || !value.trim() || value.length > 120))) throw new Error("UI autocomplete options are invalid");
+    if (props.suggestions_source !== undefined) validateUiDataBinding(props.suggestions_source, sources, "autocomplete");
+  }
   if (props.options != null) {
     if (nodeType !== "select" || !Array.isArray(props.options) || props.options.length < 1 || props.options.length > 32) throw new Error("UI select options are invalid");
     for (const option of props.options) {
@@ -1696,6 +1769,18 @@ function validateUiProps(nodeType, props, sources, stateKeys) {
       optionalUiText(option.label, 80, { required: true });
     }
   }
+  if (props.options !== undefined && props.options_source !== undefined) throw new Error("UI select cannot declare two options sources");
+  if (props.options_source !== undefined) {
+    if (nodeType !== "select") throw new Error("UI options source requires a select");
+    validateUiDataBinding(props.options_source, sources, "select options");
+  }
+  if (props.searchable !== undefined && nodeType !== "select") throw new Error("UI searchable requires a select");
+  for (const key of ["required", "min_length", "max_length", "minimum", "maximum", "error_text"]) if (props[key] !== undefined && !["field", "select", "switch"].includes(nodeType)) throw new Error("UI validation properties require an input");
+  if (props.submit_label !== undefined && nodeType !== "form") throw new Error("UI submit label requires a form");
+}
+
+function validateUiDataBinding(value, sources, label) {
+  if (typeof value !== "string" || !UI_BINDING.test(value) || !value.startsWith("data.") || !sources.has(value.split(".")[1])) throw new Error(`UI ${label} source is invalid`);
 }
 
 function validateUiImageSource(props, sources) {
@@ -1737,8 +1822,21 @@ function validateUiInsets(value, label) {
   for (const item of Object.values(value)) validateUiNumber(item, label, 0, 128);
 }
 
-function validateUiCondition(condition, stateKeys, sources) {
+function validateUiCondition(condition, stateKeys, sources, depth = 0, counter = { value: 0 }) {
   if (condition == null) return;
+  assertObject(condition, "UI visibility condition");
+  counter.value += 1;
+  if (depth > 4 || counter.value > 32) throw new Error("UI visibility condition is too complex");
+  const composites = ["all", "any", "not"].filter((key) => Object.hasOwn(condition, key));
+  if (composites.length) {
+    if (composites.length !== 1 || Object.keys(condition).length !== 1) throw new Error("UI visibility condition is invalid");
+    const key = composites[0];
+    if (key === "not") return validateUiCondition(condition.not, stateKeys, sources, depth + 1, counter);
+    const children = condition[key];
+    if (!Array.isArray(children) || children.length < 1 || children.length > 8) throw new Error("UI visibility condition group is invalid");
+    for (const child of children) validateUiCondition(child, stateKeys, sources, depth + 1, counter);
+    return;
+  }
   rejectUnknownFields(condition, new Set(["path", "equals", "not_equals", "exists"]), "UI visibility condition");
   if (typeof condition.path !== "string" || !UI_BINDING.test(condition.path)) throw new Error("UI visibility path is invalid");
   validateKnownBinding(condition.path, stateKeys, sources);
@@ -1747,13 +1845,23 @@ function validateUiCondition(condition, stateKeys, sources) {
   if (checks[0] !== "exists") validateUiJson(condition[checks[0]], 0);
 }
 
-function validateUiAction(action, executable, routes, sources, stateKeys, required = false) {
+function validateUiAction(action, executable, routes, sources, stateKeys, required = false, depth = 0, counter = { value: 0 }) {
   if (action == null) {
     if (required) throw new Error("UI action is required");
     return;
   }
+  assertObject(action, "UI action");
+  counter.value += 1;
+  if (depth > 4 || counter.value > 16) throw new Error("UI action flow is too complex");
   rejectUnknownFields(action, new Set(contract.ui_runtime.action_fields), "UI action");
-  if (!["invoke", "navigate", "set_state", "refresh", "back"].includes(action.type)) throw new Error("UI action type is invalid");
+  if (!["invoke", "navigate", "set_state", "refresh", "back", "flow"].includes(action.type)) throw new Error("UI action type is invalid");
+  if (action.validate !== undefined && typeof action.validate !== "boolean") throw new Error("UI action validation flag is invalid");
+  if (action.type === "flow") {
+    rejectUnknownFields(action, new Set(["type", "mode", "actions", "continue_on_error", "validate"]), "UI action flow");
+    if (!["sequential", "parallel"].includes(action.mode) || !Array.isArray(action.actions) || action.actions.length < 1 || action.actions.length > 8 || (action.continue_on_error !== undefined && typeof action.continue_on_error !== "boolean")) throw new Error("UI action flow is invalid");
+    for (const child of action.actions) validateUiAction(child, executable, routes, sources, stateKeys, true, depth + 1, counter);
+    return;
+  }
   if (action.type === "invoke") {
     if (!executable.has(action.capability)) throw new Error("UI action targets a non-executable capability");
     optionalUiTemplate(action.query, 2000);
@@ -1768,6 +1876,11 @@ function validateUiAction(action, executable, routes, sources, stateKeys, requir
     if (!["platform", "fade", "slide", "none"].includes(transition)) throw new Error("UI navigation transition is invalid");
     const replace = action.replace === undefined ? false : action.replace;
     if (typeof replace !== "boolean") throw new Error("UI navigation replacement is invalid");
+    const parameters = action.parameters === undefined ? {} : action.parameters;
+    assertObject(parameters, "UI navigation parameters");
+    validateUiBindingValue(parameters, 0, stateKeys, sources);
+    if (action.result_state !== undefined && !stateKeys.has(action.result_state)) throw new Error("UI navigation result state is unknown");
+    if (action.result_state !== undefined && replace) throw new Error("replacement navigation cannot return a result");
   } else if (action.type === "set_state") {
     assertObject(action.values, "UI state action values");
     if (!Object.keys(action.values).length || Object.keys(action.values).some((key) => !stateKeys.has(key))) throw new Error("UI state action targets an unknown state key");
@@ -1776,8 +1889,21 @@ function validateUiAction(action, executable, routes, sources, stateKeys, requir
     if (typeof persist !== "boolean") throw new Error("UI state persistence flag is invalid");
   } else if (action.type === "refresh") {
     if (!sources.has(action.source)) throw new Error("UI refresh source is unknown");
-  } else if (Object.keys(action).length !== 1) throw new Error("back UI action cannot contain arguments");
+  } else {
+    rejectUnknownFields(action, new Set(["type", "result"]), "back UI action");
+    const result = action.result === undefined ? {} : action.result;
+    assertObject(result, "UI route result");
+    validateUiBindingValue(result, 0, stateKeys, sources);
+  }
   if (action.type !== "navigate" && (action.transition !== undefined || action.replace !== undefined)) throw new Error("navigation options require a navigate UI action");
+  const allowed = {
+    invoke: new Set(["type", "capability", "query", "arguments", "store", "validate"]),
+    navigate: new Set(["type", "target", "transition", "replace", "parameters", "result_state", "validate"]),
+    set_state: new Set(["type", "values", "persist"]),
+    refresh: new Set(["type", "source"]),
+    back: new Set(["type", "result"]),
+  }[action.type];
+  rejectUnknownFields(action, allowed, "UI action");
 }
 
 function validateUiBindingValue(value, depth, stateKeys, sources) {
@@ -1818,6 +1944,73 @@ function validateUiJson(value, depth) {
   for (const item of Object.values(value)) validateUiJson(item, depth + 1);
 }
 
+function validateUiCapabilityBindings(config, sources, capabilitySchemas) {
+  const sourceCapabilities = new Map(sources.map((source) => [source.id, source.capability]));
+  for (const source of sources) {
+    const schema = capabilitySchemas.get(source.capability)?.input_schema;
+    if (schema !== undefined && !uiSchemaAccepts(schema, source.arguments === undefined ? {} : source.arguments)) {
+      throw new Error(`UI data source ${source.id} does not match capability input_schema`);
+    }
+  }
+  function visit(value) {
+    if (typeof value === "string") {
+      for (const match of value.matchAll(UI_TEMPLATE_BINDING)) {
+        const parts = match[1].trim().split(".");
+        if (parts.length < 4 || parts[0] !== "data" || parts[2] !== "data") continue;
+        const schema = capabilitySchemas.get(sourceCapabilities.get(parts[1]))?.output_schema;
+        if (schema !== undefined && !uiSchemaHasPath(schema, parts.slice(3))) throw new Error("UI binding references an unknown capability output");
+      }
+      return;
+    }
+    if (Array.isArray(value)) return value.forEach(visit);
+    if (!value || typeof value !== "object") return;
+    if (value.type === "invoke") {
+      const schema = capabilitySchemas.get(value.capability)?.input_schema;
+      if (schema !== undefined && !uiSchemaAccepts(schema, value.arguments === undefined ? {} : value.arguments)) throw new Error("UI action does not match capability input_schema");
+    }
+    Object.values(value).forEach(visit);
+  }
+  visit(config);
+}
+
+function uiSchemaAccepts(schema, value) {
+  if (!schema || typeof schema !== "object" || Array.isArray(schema)) return false;
+  if (typeof value === "string") {
+    const exact = UI_SINGLE_TEMPLATE_BINDING.exec(value);
+    if (exact) return true;
+    if ([...value.matchAll(UI_TEMPLATE_BINDING)].length) return schema.type === "string";
+  }
+  if (schema.enum !== undefined && !schema.enum.some((item) => JSON.stringify(item) === JSON.stringify(value))) return false;
+  if (schema.type === "null") return value === null;
+  if (schema.type === "boolean") return typeof value === "boolean";
+  if (schema.type === "integer") return Number.isInteger(value) && (schema.minimum === undefined || value >= schema.minimum) && (schema.maximum === undefined || value <= schema.maximum);
+  if (schema.type === "number") return typeof value === "number" && Number.isFinite(value) && (schema.minimum === undefined || value >= schema.minimum) && (schema.maximum === undefined || value <= schema.maximum);
+  if (schema.type === "string") return typeof value === "string" && value.length >= (schema.minLength ?? 0) && value.length <= (schema.maxLength ?? 2000);
+  if (schema.type === "array") return Array.isArray(value) && value.length >= (schema.minItems ?? 0) && value.length <= (schema.maxItems ?? 64) && value.every((item) => uiSchemaAccepts(schema.items, item));
+  if (schema.type !== "object" || !value || typeof value !== "object" || Array.isArray(value)) return false;
+  const properties = schema.properties || {};
+  if ((schema.required || []).some((key) => !Object.hasOwn(value, key))) return false;
+  if (schema.additionalProperties === false && Object.keys(value).some((key) => !Object.hasOwn(properties, key))) return false;
+  return Object.entries(value).every(([key, item]) => !Object.hasOwn(properties, key) || uiSchemaAccepts(properties[key], item));
+}
+
+function uiSchemaHasPath(schema, parts) {
+  let current = schema;
+  for (const part of parts) {
+    if (!current || typeof current !== "object" || Array.isArray(current)) return false;
+    if (current.type === "array") {
+      current = current.items;
+      if (part === "length") return true;
+      if (/^\d+$/.test(part)) continue;
+    }
+    if (!current || current.type !== "object") return false;
+    const properties = current.properties || {};
+    if (!Object.hasOwn(properties, part)) return current.additionalProperties !== false;
+    current = properties[part];
+  }
+  return true;
+}
+
 function optionalUiTemplate(value, maximum, required = false) {
   if (value === undefined || value === null) {
     if (required) throw new Error("UI text template is required");
@@ -1836,6 +2029,12 @@ function validateKnownBinding(path, stateKeys, sources) {
   const parts = path.split(".");
   if (parts[0] === "state" && (parts.length < 2 || !stateKeys.has(parts[1]))) throw new Error("UI state binding is unknown");
   if (parts[0] === "data" && (parts.length < 2 || !sources.has(parts[1]))) throw new Error("UI data binding is unknown");
+  if (parts[0] === "context") {
+    const roots = new Set(["platform", "screen", "permissions", "connections", "connected", "loading", "errors", "route"]);
+    if (parts.length < 2 || !roots.has(parts[1])) throw new Error("UI runtime context binding is unknown");
+    if (parts[1] === "screen" && (parts.length !== 3 || !["width", "height", "size_class"].includes(parts[2]))) throw new Error("UI screen context binding is unknown");
+    if (["loading", "errors"].includes(parts[1]) && (parts.length !== 3 || !sources.has(parts[2]))) throw new Error("UI data-source context binding is unknown");
+  }
 }
 
 function optionalUiText(value, maximum, { required = false, identifier = false } = {}) {

package/assets/docs/README.md

@@ -1,107 +0,0 @@
-# Morit Plugin 개발 문서
-
-이 문서는 아이디어를 실제 설치 가능한 `.mplg`로 만드는 순서대로 구성되어 있습니다. 플러그인은
-실행 코드를 앱에 직접 주입하지 않습니다. Manifest와 JSON fragment로 기능·화면·권한을 선언하고,
-Morit Host가 서명과 계약을 확인한 뒤 공용 런타임으로 실행합니다.
-
-## 가장 짧은 개발 경로
-
-```text
-요구사항 정리
-  → 프로젝트 생성
-  → manifest와 기능 fragment 작성
-  → 화면·상태·내비게이션 작성
-  → 권한·설정·알림 연결
-  → validate
-  → preview
-  → build
-  → verify
-  → 실제 앱 설치·실사용 테스트
-  → deploy
-```
-
-공식 CLI를 사용하는 기본 명령은 다음과 같습니다.
-
-```bash
-npx -y @morit/cli plugin setup . \
-  --id com.example.study \
-  --name "Study" \
-  --publisher example
-npx -y @morit/cli plugin validate .
-npx -y @morit/cli plugin preview . --output ./dist/preview.html
-npx -y @morit/cli plugin build .
-npx -y @morit/cli login
-npx -y @morit/cli plugin add .
-npx -y @morit/cli plugin deploy . --visibility private
-```
-
-같은 safe renderer는 공식 CLI, Local/Remote Plugin MCP의 `morit_project_preview`, 저장소 도구
-`python tools/morit_plugin.py preview <project>`에서 사용합니다. preview의 라이트·다크 전환으로
-계약과 배치를 확인하고, 실제 Flutter focus·navigation·Tool 흐름은 앱에서도 확인합니다.
-
-## 개발 순서별 인덱스
-
-### 1. 시작과 개발 흐름
-
-1. [시작하기와 개발 흐름](getting-started.md) — 개발 방식 선택, 첫 프로젝트, 완료 조건
-2. [앱에서 플러그인 만들기](app-builder.md) — 단순 Tool을 앱 Builder로 만드는 범위
-
-### 2. 프로젝트와 계약
-
-3. [프로젝트 구조와 fragment](project-structure.md) — 디렉터리, 병합 규칙, 패키지 포함 파일
-4. [Manifest 레퍼런스](manifest.md) — ID, 버전, capability, connector, dependency
-5. [Instance, Connector, 복합 패키지](instances-and-connectors.md) — 사용자별 실행 단위와 계정 연결
-
-### 3. 화면과 사용자 경험
-
-6. [화면, 레이아웃, 내비게이션](screens-layout-navigation.md) — 화면 역할과 이동 구조
-7. [기본·커스텀 컴포넌트](components.md) — 각 node의 목적, 속성, 제약
-8. [토큰, 크기, 색, 여백, 반응형](design-tokens-responsive.md) — Material 3 기반 시각 규칙
-9. [화면 분리와 정보 계층](information-hierarchy.md) — 한 화면에 정보를 몰지 않는 설계
-10. [UI extension point](ui-extensions.md) — Host의 어느 위치에 UI를 노출할지 선택
-11. [UI Runtime v2 레퍼런스](ui-runtime-v2.md) — data, state, binding, event 계약
-12. [Response UI와 Agent Timeline](ai-response-and-timeline.md) — AI 메시지 안의 결과 UI
-
-### 4. 기능, 데이터, 사용자 제어
-
-13. [Tool, Skill, Search, Slash Command](tool-and-skill.md) — capability와 runtime adapter
-14. [권한, 설정, 저장소, 알림](permissions-and-data.md) — 최소 권한과 Host action
-15. [Plugin Local Storage와 AI 접근](plugin-storage.md) — namespace, CRUD, migration, 격리, AI Tool
-16. [외부 서비스 인증과 Cloud Secrets](authentication.md) — OAuth, API key, 비밀 값 경계
-17. [AI Skill과 파일 산출물](ai-skill-and-docx-workflow.md) — 실제 파일을 반환하는 완료 흐름
-
-### 5. 플랫폼
-
-18. [Android, iOS, Desktop 호환](platform-compatibility.md) — 현재 지원 범위와 이식 원칙
-
-### 6. 검증과 배포
-
-19. [공식 CLI 개발 흐름](local-cli.md) — setup, sync, preview, build, deploy
-20. [패키징과 테스트](packaging-and-testing.md) — 서명, 무결성, 테스트 층
-21. [오류 해결](troubleshooting.md) — validate, preview, build, 설치, 실행 오류 구분
-22. [예제 검증 방법과 확인 경계](verification.md) — 자동·live·실기기 검증의 차이
-
-### 7. SDK, MCP, API
-
-23. [CLI와 AI 에이전트 MCP](sdk-and-mcp.md) — Codex·Claude 등 로컬/원격 연결
-24. [원격 Plugin MCP](remote-mcp.md) — Cloud Project를 다루는 Tool 계약
-25. [수명주기와 HTTP API](lifecycle-and-api.md) — Host API와 설치·실행 상태
-
-### 8. 실제 예제
-
-26. [학교 생활 플러그인](examples-school-life.md) — 공개 NEIS와 AI 할 일을 사용하는 학생용 경험
-27. [학교 생활 개인정보 처리](school-life-privacy.md) — 저장·전송·삭제 범위
-28. [Notion 플러그인](examples-notion.md) — OAuth Connection과 실제 문서 검색
-
-## 문서가 배포되는 위치
-
-`docs/plugin_docs`가 문서 콘텐츠의 공통 원본입니다. 같은 파일이 다음 위치에 복사되거나 빌드 시
-포함됩니다.
-
-- `@morit/cli`: npm 패키지의 `assets/docs`
-- Local MCP `@morit/plugin-mcp`: npm 패키지의 `assets/docs`
-- Remote MCP: 서비스 이미지의 `/app/docs/plugin_docs`
-- `developers.moring.co`: `docs-index.json`의 순서와 경로로 생성한 MDX
-
-네 배포 위치는 같은 계약과 예제를 제공하며, 문서의 JSON은 공식 CLI와 Host 계약으로 지속
-검증합니다. 각 경로에서 별도 규격을 정의하지 않습니다.