@noodleseed/one 0.173.0 → 0.175.0

package/node_modules/@noodle-borg/cli-catalog/dist/catalog-data-solutions.js

@@ -2,6 +2,8 @@
 import { SOLUTION_DRAFTS } from './catalog-data-solution-drafts.js';
 import { AUTH_TOKEN, EXPECTED_REVISION, IDEMPOTENCY_KEY, INSTALLATION_ARGUMENT, JSON_FLAG, OPTIONAL_FLAG, PAGING_FLAGS, REQUIRED_ARGUMENT, SERVICE, SOLUTION_COMMON_FLAGS, } from './catalog-data-solution-flags.js';
 import { SOLUTION_PAGE } from './catalog-data-solution-page.js';
+import { COLLECTION_ARGUMENT, SOLUTION_RECORDS } from './catalog-data-solution-records.js';
+import { SOLUTION_WORKSPACE } from './catalog-data-solution-workspace.js';
 const APP = {
     ...OPTIONAL_FLAG,
     name: 'app',
@@ -24,105 +26,6 @@ const RETENTION = {
     summary: 'Managed-record retention in days.',
     constraints: { choices: [7, 30, 90], default: 30 },
 };
-const COLLECTION_ARGUMENT = {
-    ...REQUIRED_ARGUMENT,
-    name: 'collection',
-    summary: 'Managed collection key.',
-};
-const RECORD_ARGUMENT = {
-    ...REQUIRED_ARGUMENT,
-    name: 'record',
-    summary: 'Managed record identifier.',
-};
-const RECORD_QUERY_FLAGS = [
-    {
-        ...OPTIONAL_FLAG,
-        name: 'filters',
-        type: 'string',
-        value: '<json>',
-        summary: 'JSON array of up to eight field/value equality filters, combined with AND. Only declared fields.',
-    },
-    {
-        ...OPTIONAL_FLAG,
-        name: 'sort-field',
-        type: 'string',
-        value: '<field>',
-        summary: 'Declared native collection sort field.',
-    },
-    {
-        ...OPTIONAL_FLAG,
-        name: 'sort-direction',
-        type: 'string',
-        value: '<asc|desc>',
-        summary: 'Sort direction; requires --sort-field.',
-    },
-    {
-        ...OPTIONAL_FLAG,
-        name: 'created-at-from',
-        type: 'string',
-        value: '<timestamp>',
-        summary: 'Inclusive creation-time lower bound; narrows the 10,000-record payload-query scan.',
-    },
-    {
-        ...OPTIONAL_FLAG,
-        name: 'created-at-to',
-        type: 'string',
-        value: '<timestamp>',
-        summary: 'Inclusive creation-time upper bound.',
-    },
-];
-const RECORD_FLAGS = [
-    ...SOLUTION_COMMON_FLAGS,
-    {
-        ...OPTIONAL_FLAG,
-        name: 'data',
-        type: 'string',
-        value: '<json>',
-        summary: 'Structured JSON record data.',
-    },
-    {
-        ...OPTIONAL_FLAG,
-        name: 'idempotency-key',
-        type: 'string',
-        value: '<key>',
-        summary: 'Retry-safe create key.',
-    },
-    {
-        ...OPTIONAL_FLAG,
-        name: 'expected-revision',
-        type: 'integer',
-        value: '<revision>',
-        summary: 'Expected current record revision.',
-    },
-    {
-        ...OPTIONAL_FLAG,
-        name: 'status',
-        type: 'string',
-        value: '<status>',
-        summary: 'Record status or list filter.',
-    },
-    {
-        ...OPTIONAL_FLAG,
-        name: 'assignee',
-        type: 'string',
-        value: '<subject>',
-        summary: 'Assignee subject or list filter.',
-    },
-    {
-        ...OPTIONAL_FLAG,
-        name: 'note',
-        type: 'string',
-        value: '<text>',
-        summary: 'Operator note text.',
-    },
-    ...PAGING_FLAGS,
-    {
-        ...OPTIONAL_FLAG,
-        name: 'include-deleted',
-        type: 'boolean',
-        summary: 'Include payload-free tombstones.',
-    },
-];
 export const CATALOG_SOLUTIONS = {
     name: 'solutions',
     section: 'resources',
@@ -133,6 +36,7 @@ export const CATALOG_SOLUTIONS = {
     subcommands: [
         SOLUTION_DRAFTS,
         SOLUTION_PAGE,
+        SOLUTION_WORKSPACE,
         {
             name: 'installation-options',
             summary: 'List organizations currently authorized to install solutions.',
@@ -628,56 +532,7 @@ export const CATALOG_SOLUTIONS = {
                 },
             ],
         },
-        {
-            name: 'records',
-            summary: 'Operate one installed managed collection.',
-            arguments: [],
-            flags: [],
-            usage: 'solutions records <list|create|get|update|assign|status|note|activity|delete|migrate-schema|export> <installation> <collection> [record] [options]',
-            subcommands: [
-                ...[
-                    'list',
-                    'create',
-                    'get',
-                    'update',
-                    'assign',
-                    'status',
-                    'note',
-                    'activity',
-                    'delete',
-                    'migrate-schema',
-                    'export',
-                ].map((name) => ({
-                    name,
-                    summary: name === 'activity'
-                        ? 'Read native record history newest first; default 50, maximum 100, with --cursor for older pages.'
-                        : name === 'migrate-schema'
-                            ? 'Administrator-only conversion of an eligible legacy request record with revision protection.'
-                            : `${name[0]?.toUpperCase()}${name.slice(1)} managed records.`,
-                    arguments: [
-                        INSTALLATION_ARGUMENT,
-                        COLLECTION_ARGUMENT,
-                        ...(name === 'list' || name === 'create' || name === 'export' ? [] : [RECORD_ARGUMENT]),
-                    ],
-                    flags: [
-                        ...RECORD_FLAGS,
-                        ...(name === 'list' ? RECORD_QUERY_FLAGS : []),
-                        ...(name === 'update'
-                            ? [
-                                {
-                                    ...OPTIONAL_FLAG,
-                                    name: 'unset',
-                                    type: 'string',
-                                    value: '<fields>',
-                                    summary: 'Comma-separated optional field keys to remove; cannot overlap --data. May be used without --data.',
-                                },
-                            ]
-                            : []),
-                    ],
-                    jsonOutput: { mode: 'single' },
-                })),
-            ],
-        },
+        SOLUTION_RECORDS,
         {
             name: 'sources',
             summary: 'Inspect and control one external collection source.',

package/node_modules/@noodle-borg/compiler/dist/artifact/assemble.js

@@ -1,6 +1,6 @@
 import { artifactConfig } from './config.js';
 import { ARTIFACT_SCHEMA_VERSION, } from './types.js';
-export function assembleRuntimeArtifact({ manifest, options, runtimeBranding, runtimeShell, artifactAmbientContext, state, artifactTools, allResources, artifactPrompts, packagedAssets, requirements, declared, customerEndpoints, knowledge, managedCollections, variables, }) {
+export function assembleRuntimeArtifact({ manifest, options, runtimeBranding, runtimeShell, artifactAmbientContext, state, artifactTools, allResources, artifactPrompts, packagedAssets, requirements, declared, customerEndpoints, knowledge, managedCollections, variables, toolInteractions, }) {
     // 4. Assemble the artifact. `resources`/`prompts` and their capability lists are emitted only when
     // present, keeping a tools-only artifact byte-identical to before this slice.
     const capabilities = {
@@ -54,6 +54,7 @@ export function assembleRuntimeArtifact({ manifest, options, runtimeBranding, ru
             ...(state !== undefined ? { state } : {}),
         },
         tools: artifactTools,
+        ...(toolInteractions === undefined ? {} : { toolInteractions }),
         ...(allResources.length > 0 ? { resources: allResources } : {}),
         ...(artifactPrompts.length > 0 ? { prompts: artifactPrompts } : {}),
         ...(packagedAssets.length > 0 ? { assets: packagedAssets.map(toArtifactAsset) } : {}),

package/node_modules/@noodle-borg/compiler/dist/artifact/types.d.ts

@@ -5,6 +5,7 @@ import type { ArtifactVariableDeclaration } from '../business-variables.js';
 import type { CustomerEndpointPolicy } from '../customer-endpoint.js';
 import type { ManagedCollectionControls } from '../managed-collection-controls.js';
 import type { CondNode, ExprNode } from '../manifest/expression.js';
+import type { CollectControl } from '../manifest/interaction-schema.js';
 import type { Manifest } from '../manifest/schema.js';
 import type { OperationRef } from './operation-ref.js';
 export type { OperationRef, ResolvedCredentialBinding, ResolvedOperationRef, UnresolvedOperationRef, } from './operation-ref.js';
@@ -92,6 +93,36 @@ export interface ArtifactMeta {
     readonly ui?: WidgetUiMeta;
     readonly [key: string]: unknown;
 }
+/** One field a platform renderer collects for a `collect` interaction (ADR 0240). */
+export interface ArtifactCollectField {
+    readonly key: string;
+    readonly control: CollectControl;
+    /** Never enters the conversation model, transcript, logs or diagnostics. */
+    readonly private?: true;
+    /** May be left blank; the renderer submits the schema's empty value. */
+    readonly optional?: true;
+}
+/**
+ * Bounded interaction metadata an opener tool declares for one confirmed action (ADR 0240). Emitted
+ * under `RuntimeArtifact.toolInteractions` keyed by the opener, so the MCP-visible descriptor is
+ * unchanged; renderers exist only where the platform runs the conversation loop.
+ */
+export interface ArtifactCollectInteraction {
+    readonly kind: 'collect';
+    /** The confirmed action tool this collection prepares. */
+    readonly action: string;
+    readonly fields: readonly ArtifactCollectField[];
+    /** Action input property -> the opener output property that seeds it. */
+    readonly initialValues?: Readonly<Record<string, {
+        readonly fromOutput: string;
+    }>>;
+    readonly review: 'all';
+    readonly outcome: {
+        readonly success: string;
+    };
+    /** Developer-shortened confirmation expiry; profile defaults and the ceiling stay platform-owned. */
+    readonly confirmationExpirySeconds?: number;
+}
 export interface ArtifactToolAuthorization {
     /** Public descriptor discovery does not grant execution permission. */
     readonly discovery?: 'public';
@@ -407,6 +438,8 @@ export interface RuntimeArtifact {
     readonly source: ArtifactSource;
     readonly server: ArtifactServer;
     readonly tools: readonly ArtifactTool[];
+    /** `collect` interactions keyed by opener tool name (ADR 0240); absent when none is declared. */
+    readonly toolInteractions?: Readonly<Record<string, ArtifactCollectInteraction>>;
     readonly resources?: readonly ArtifactResource[];
     readonly prompts?: readonly ArtifactPrompt[];
     readonly assets?: readonly ArtifactPackagedAsset[];

package/node_modules/@noodle-borg/compiler/dist/artifact/version.d.ts

@@ -64,7 +64,8 @@
  */
 /** `0.21.0`: protected tools may opt into public descriptor discovery without execution permission. */
 /** `0.22.0`: governed public-page extraction declarations and ordinary generated tools. */
-export declare const ARTIFACT_SCHEMA_VERSION = "0.22.0";
+/** `0.23.0`: bounded `collect` interaction metadata keyed by opener tool (ADR 0240); never MCP-visible. */
+export declare const ARTIFACT_SCHEMA_VERSION = "0.23.0";
 /** mimeType for an MCP Apps UI resource (SEP-1865). Widgets are served under this profile. */
 export declare const MCP_APP_MIME_TYPE = "text/html;profile=mcp-app";
 //# sourceMappingURL=version.d.ts.map

package/node_modules/@noodle-borg/compiler/dist/artifact/version.js

@@ -64,7 +64,8 @@
  */
 /** `0.21.0`: protected tools may opt into public descriptor discovery without execution permission. */
 /** `0.22.0`: governed public-page extraction declarations and ordinary generated tools. */
-export const ARTIFACT_SCHEMA_VERSION = '0.22.0';
+/** `0.23.0`: bounded `collect` interaction metadata keyed by opener tool (ADR 0240); never MCP-visible. */
+export const ARTIFACT_SCHEMA_VERSION = '0.23.0';
 /** mimeType for an MCP Apps UI resource (SEP-1865). Widgets are served under this profile. */
 export const MCP_APP_MIME_TYPE = 'text/html;profile=mcp-app';
 //# sourceMappingURL=version.js.map

package/node_modules/@noodle-borg/compiler/dist/compile.js

@@ -15,6 +15,7 @@ import { parseAmbientContext } from './context-compile.js';
 import { findExternalRef, parseFulfilment } from './fulfilment-structural.js';
 import { compileManagedCollections } from './managed-collections.js';
 import { cspOriginFaults } from './manifest/csp-origins.js';
+import { compileToolInteractions } from './manifest/interaction-validation.js';
 import { parseManifestDocument } from './manifest/parse-document.js';
 import { manifestSchema } from './manifest/schema.js';
 import { resolveSchemaUses } from './manifest/schema-refs.js';
@@ -416,11 +417,14 @@ export function compileManifest(raw, options = {}) {
         toolUiMetaByName,
         errors,
     });
+    const toolInteractions = compileToolInteractions(manifest.tools, artifactTools, errors);
     errors.push(...validateWebsiteProjection(manifest.server.assistant, {
         tools: artifactTools,
         resources: artifactResources,
         prompts: artifactPrompts,
         knowledge,
+        interactions: toolInteractions,
+        connectors: declared,
     }));
     if (errors.length > 0) {
         return { ok: false, errors };
@@ -445,6 +449,7 @@ export function compileManifest(raw, options = {}) {
         ...(knowledge.length > 0 ? { knowledge } : {}),
         ...(managedCollections.length > 0 ? { managedCollections } : {}),
         ...(variables.length > 0 ? { variables } : {}),
+        ...(toolInteractions === undefined ? {} : { toolInteractions }),
     });
     const warnings = [
         ...brandingWarnings(manifest.server.branding),

package/node_modules/@noodle-borg/compiler/dist/errors.d.ts

@@ -1,7 +1,7 @@
 import type { AppPackageArtifactV1 } from '@noodle-borg/app-package';
 import type { RuntimeArtifact } from './artifact/types.js';
 import type { PackagedAsset } from './assets.js';
-export type CompileErrorCode = 'invalid_context_provider' | 'yaml_parse_error' | 'invalid_shape' | 'invalid_name' | 'duplicate_name' | 'reserved_name' | 'unsupported_manifest_version' | 'reserved_for_future_version' | 'invalid_operation_ref' | 'external_ref' | 'invalid_schema_ref' | 'unknown_schema_ref' | 'schema_ref_conflict' | 'invalid_expression' | 'expr_unknown_root' | 'expr_root_unavailable' | 'expr_operator_not_allowed' | 'expr_if_not_boolean' | 'unknown_step_ref' | 'forward_step_ref' | 'self_step_ref' | 'duplicate_step_id' | 'invalid_fulfilment' | 'invalid_elicitation_schema' | 'invalid_elicitation_flow' | 'invalid_confirmation_flow' | 'arg_type_mismatch' | 'ambient_context_action' | 'duplicate_resource' | 'duplicate_prompt' | 'duplicate_resource_uri' | 'unsupported_uri_template' | 'duplicate_widget' | 'unknown_widget_tool' | 'unknown_widget_action_tool' | 'duplicate_widget_tool' | 'invalid_widget_binding' | 'invalid_widget_state_handle' | 'widget_html_too_large' | 'widget_html_total_too_large' | 'invalid_asset' | 'invalid_capability_requirement' | 'state_secret_field' | 'invalid_knowledge' | 'knowledge_unhashed' | 'invalid_managed_collection' | 'invalid_variable_declaration' | 'invalid_managed_collection_source' | 'unknown_connector_alias' | 'connector_not_in_catalog' | 'unknown_operation' | 'connector_binding_required' | 'ambiguous_nested_connector_binding' | 'invalid_connector_call_graph' | 'unsupported_credential_profile' | 'credential_scope_mismatch' | 'credential_audience_mismatch' | 'customer_endpoint_auth_required' | 'customer_endpoint_mapping_required' | 'customer_endpoint_unknown_mapping' | 'customer_endpoint_bridge_unsupported' | 'assistant_messaging_unsupported' | 'assistant_capability_unknown' | 'assistant_public_user_reference' | 'assistant_public_effect_unconfirmed' | 'customer_endpoint_action_unsupported' | 'customer_endpoint_surface_unsupported' | 'customer_endpoint_credential_source_unsupported' | 'customer_endpoint_policy_conflict' | 'customer_endpoint_routing_inconsistent' | 'unused_connector_alias' | 'arg_mismatch' | 'agent_guide_invalid' | 'agent_guide_duplicate_workflow' | 'agent_guide_duplicate_example' | 'agent_guide_example_workflow_missing' | 'agent_guide_capability_missing' | 'agent_guide_capability_kind' | 'app_package_sensitive_content';
+export type CompileErrorCode = 'invalid_context_provider' | 'yaml_parse_error' | 'invalid_shape' | 'invalid_name' | 'duplicate_name' | 'reserved_name' | 'unsupported_manifest_version' | 'reserved_for_future_version' | 'invalid_operation_ref' | 'external_ref' | 'invalid_schema_ref' | 'unknown_schema_ref' | 'schema_ref_conflict' | 'invalid_expression' | 'expr_unknown_root' | 'expr_root_unavailable' | 'expr_operator_not_allowed' | 'expr_if_not_boolean' | 'unknown_step_ref' | 'forward_step_ref' | 'self_step_ref' | 'duplicate_step_id' | 'invalid_fulfilment' | 'invalid_elicitation_schema' | 'invalid_elicitation_flow' | 'invalid_confirmation_flow' | 'arg_type_mismatch' | 'ambient_context_action' | 'duplicate_resource' | 'duplicate_prompt' | 'duplicate_resource_uri' | 'unsupported_uri_template' | 'duplicate_widget' | 'unknown_widget_tool' | 'unknown_widget_action_tool' | 'duplicate_widget_tool' | 'invalid_widget_binding' | 'invalid_widget_state_handle' | 'widget_html_too_large' | 'widget_html_total_too_large' | 'invalid_asset' | 'invalid_capability_requirement' | 'state_secret_field' | 'invalid_knowledge' | 'knowledge_unhashed' | 'invalid_managed_collection' | 'invalid_variable_declaration' | 'invalid_managed_collection_source' | 'unknown_connector_alias' | 'connector_not_in_catalog' | 'unknown_operation' | 'connector_binding_required' | 'ambiguous_nested_connector_binding' | 'invalid_connector_call_graph' | 'unsupported_credential_profile' | 'credential_scope_mismatch' | 'credential_audience_mismatch' | 'customer_endpoint_auth_required' | 'customer_endpoint_mapping_required' | 'customer_endpoint_unknown_mapping' | 'customer_endpoint_bridge_unsupported' | 'assistant_messaging_unsupported' | 'assistant_capability_unknown' | 'assistant_public_user_reference' | 'assistant_public_effect_unconfirmed' | 'interaction_action_invalid' | 'interaction_field_unknown' | 'interaction_field_control_mismatch' | 'interaction_field_missing' | 'interaction_initial_value_unknown' | 'interaction_consent_invalid' | 'interaction_expiry_invalid' | 'channel_dependency_missing' | 'channel_requirement_unsupported' | 'customer_endpoint_action_unsupported' | 'customer_endpoint_surface_unsupported' | 'customer_endpoint_credential_source_unsupported' | 'customer_endpoint_policy_conflict' | 'customer_endpoint_routing_inconsistent' | 'unused_connector_alias' | 'arg_mismatch' | 'agent_guide_invalid' | 'agent_guide_duplicate_workflow' | 'agent_guide_duplicate_example' | 'agent_guide_example_workflow_missing' | 'agent_guide_capability_missing' | 'agent_guide_capability_kind' | 'app_package_sensitive_content';
 export interface CompileError {
     readonly code: CompileErrorCode;
     /** Dotted path to the offending location (e.g. `tools.1.name`); empty string for the document root. */

package/node_modules/@noodle-borg/compiler/dist/index.d.ts

@@ -3,7 +3,7 @@ export { APP_PACKAGE_V1_VALIDATION_LIMITS, appPackageArtifactV1Schema, canonical
 export { type ParsedUri, type ParseUriResult, parseUriTemplate, type TemplateUri, } from '@noodle-borg/uri-template';
 export { compileAppPackage } from './app-package/compile.js';
 export { isSafeReadTool, requiresToolConfirmation } from './artifact/consent.js';
-export { ARTIFACT_SCHEMA_VERSION, type ArtifactConnectionSource, type ArtifactConnectorBinding, type ArtifactCustomerAuthRouting, type ArtifactFulfilment, type ArtifactManagedCollection, type ArtifactMeta, type ArtifactPackagedAsset, type ArtifactPrompt, type ArtifactPromptArgument, type ArtifactResource, type ArtifactServer, type ArtifactServerContext, type ArtifactState, type ArtifactStateHandle, type ArtifactStateHandleKind, type ArtifactStateHandleScope, type ArtifactStep, type ArtifactTool, type ArtifactToolAuthorization, type ExprMap, type JsonSchema, MCP_APP_MIME_TYPE, type OperationRef, type ResolvedCredentialBinding, type ResolvedOperationRef, type RuntimeArtifact, type UnresolvedOperationRef, type WidgetUiMeta, } from './artifact/types.js';
+export { ARTIFACT_SCHEMA_VERSION, type ArtifactCollectField, type ArtifactCollectInteraction, type ArtifactConnectionSource, type ArtifactConnectorBinding, type ArtifactCustomerAuthRouting, type ArtifactFulfilment, type ArtifactManagedCollection, type ArtifactMeta, type ArtifactPackagedAsset, type ArtifactPrompt, type ArtifactPromptArgument, type ArtifactResource, type ArtifactServer, type ArtifactServerContext, type ArtifactState, type ArtifactStateHandle, type ArtifactStateHandleKind, type ArtifactStateHandleScope, type ArtifactStep, type ArtifactTool, type ArtifactToolAuthorization, type ExprMap, type JsonSchema, MCP_APP_MIME_TYPE, type OperationRef, type ResolvedCredentialBinding, type ResolvedOperationRef, type RuntimeArtifact, type UnresolvedOperationRef, type WidgetUiMeta, } from './artifact/types.js';
 export { assetReference, type HostedAssetOptions, type HostedPackagedAsset, isPackagedAssetReference, type LocalAssetOptions, localAssetRoutePrefix, type PackagedAsset, type PackagedAssetReference, type PreparedPackagedAsset, prepareLocalAssets, } from './assets.js';
 export { type ArtifactVariableDeclaration, compileVariableDeclarations, MAX_VARIABLE_DECLARATIONS, MAX_VARIABLE_SCHEMA_BYTES, MAX_VARIABLE_SCHEMA_DEPTH, MAX_VARIABLE_VALUE_BYTES, type VariableDeclarationManifest, validateVariableDeclaration, variableDeclarationManifestSchema, } from './business-variables.js';
 export { InMemoryCatalog } from './catalog/in-memory.js';
@@ -21,7 +21,7 @@ export { type ArrayNode, type CoalesceNode, type CondNode, type ExprNode, type O
 export { isValidName, parseOperationRef } from './manifest/naming.js';
 export { type Manifest, manifestSchema } from './manifest/schema.js';
 export { type ResolveSchemaResult, resolveSchemaUses, type SchemasMap, } from './manifest/schema-refs.js';
-export { anonymousBehavior } from './manifest/website-projection.js';
+export { anonymousBehavior, isNativeRecordsOperation } from './manifest/website-projection.js';
 export { type SniffedImage, sniffImageBytes } from './mime-sniffing.js';
 export { BUILTIN_RECORD_CATALOG_CONNECTOR, RECORD_CONNECTOR_ID, RECORD_CONNECTOR_VERSION, RECORD_OPERATION_SIGNATURES, } from './native-record-operations.js';
 export { manifestJsonSchema } from './schema-export.js';

package/node_modules/@noodle-borg/compiler/dist/index.js

@@ -18,7 +18,7 @@ export { parseCondition, parseValue, } from './manifest/expression.js';
 export { isValidName, parseOperationRef } from './manifest/naming.js';
 export { manifestSchema } from './manifest/schema.js';
 export { resolveSchemaUses, } from './manifest/schema-refs.js';
-export { anonymousBehavior } from './manifest/website-projection.js';
+export { anonymousBehavior, isNativeRecordsOperation } from './manifest/website-projection.js';
 export { sniffImageBytes } from './mime-sniffing.js';
 export { BUILTIN_RECORD_CATALOG_CONNECTOR, RECORD_CONNECTOR_ID, RECORD_CONNECTOR_VERSION, RECORD_OPERATION_SIGNATURES, } from './native-record-operations.js';
 export { manifestJsonSchema } from './schema-export.js';

package/node_modules/@noodle-borg/compiler/dist/manifest/interaction-schema.d.ts

@@ -0,0 +1,41 @@
+import { z } from 'zod';
+/**
+ * The `collect` interaction block (ADR 0240): bounded metadata on an opener tool describing which
+ * fields a platform renderer collects for one confirmed action, which are private, what is reviewed,
+ * and what to say on success. It carries meaning only: no layout, ordering script or screen language.
+ * Field, action and output references are checked against the declared tools by the compile pass
+ * (`interaction-validation.ts`), which also bounds `confirmationExpiry` so a bad value reports its own
+ * code instead of a shape error.
+ */
+export declare const COLLECT_CONTROLS: readonly ["text", "textarea", "email", "phone", "url", "select", "consent"];
+export type CollectControl = (typeof COLLECT_CONTROLS)[number];
+export declare const toolInteractionSchema: z.ZodObject<{
+    kind: z.ZodLiteral<"collect">;
+    action: z.ZodString;
+    initialValues: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
+        fromOutput: z.ZodString;
+    }, z.core.$strict>>>;
+    fields: z.ZodArray<z.ZodObject<{
+        key: z.ZodString;
+        control: z.ZodEnum<{
+            email: "email";
+            text: "text";
+            textarea: "textarea";
+            phone: "phone";
+            url: "url";
+            select: "select";
+            consent: "consent";
+        }>;
+        private: z.ZodOptional<z.ZodLiteral<true>>;
+        optional: z.ZodOptional<z.ZodLiteral<true>>;
+    }, z.core.$strict>>;
+    review: z.ZodLiteral<"all">;
+    outcome: z.ZodObject<{
+        success: z.ZodString;
+    }, z.core.$strict>;
+    confirmationExpiry: z.ZodOptional<z.ZodObject<{
+        seconds: z.ZodNumber;
+    }, z.core.$strict>>;
+}, z.core.$strict>;
+export type ToolInteractionManifest = z.infer<typeof toolInteractionSchema>;
+//# sourceMappingURL=interaction-schema.d.ts.map

package/node_modules/@noodle-borg/compiler/dist/manifest/interaction-schema.js

@@ -0,0 +1,62 @@
+import { z } from 'zod';
+import { NAME_PATTERN } from './naming.js';
+/**
+ * The `collect` interaction block (ADR 0240): bounded metadata on an opener tool describing which
+ * fields a platform renderer collects for one confirmed action, which are private, what is reviewed,
+ * and what to say on success. It carries meaning only: no layout, ordering script or screen language.
+ * Field, action and output references are checked against the declared tools by the compile pass
+ * (`interaction-validation.ts`), which also bounds `confirmationExpiry` so a bad value reports its own
+ * code instead of a shape error.
+ */
+export const COLLECT_CONTROLS = [
+    'text',
+    'textarea',
+    'email',
+    'phone',
+    'url',
+    'select',
+    'consent',
+];
+const MAX_COLLECT_FIELDS = 32;
+const MAX_PROPERTY_KEY_CHARS = 128;
+const MAX_OUTCOME_CHARS = 280;
+const propertyKeySchema = z.string().min(1).max(MAX_PROPERTY_KEY_CHARS);
+const collectFieldSchema = z
+    .object({
+    key: propertyKeySchema,
+    control: z.enum(COLLECT_CONTROLS),
+    /** Never enters the conversation model, transcript, logs or diagnostics. Opt-in per field. */
+    private: z.literal(true).optional(),
+    /** The person may leave it blank; the renderer submits the schema's empty value. */
+    optional: z.literal(true).optional(),
+})
+    .strict();
+export const toolInteractionSchema = z
+    .object({
+    kind: z.literal('collect'),
+    /** The confirmed action tool this collection prepares, by name. */
+    action: z.string().regex(NAME_PATTERN),
+    /** Action input property -> the opener output property that seeds it. */
+    initialValues: z
+        .record(propertyKeySchema, z.object({ fromOutput: propertyKeySchema }).strict())
+        .optional(),
+    fields: z
+        .array(collectFieldSchema)
+        .min(1)
+        .max(MAX_COLLECT_FIELDS)
+        .superRefine((fields, ctx) => {
+        const seen = new Set();
+        for (const field of fields) {
+            if (seen.has(field.key)) {
+                ctx.addIssue({ code: 'custom', message: `duplicate field key "${field.key}"` });
+            }
+            seen.add(field.key);
+        }
+    }),
+    review: z.literal('all'),
+    outcome: z.object({ success: z.string().trim().min(1).max(MAX_OUTCOME_CHARS) }).strict(),
+    /** A developer may only shorten the profile default; the compile pass checks the bound. */
+    confirmationExpiry: z.object({ seconds: z.number() }).strict().optional(),
+})
+    .strict();
+//# sourceMappingURL=interaction-schema.js.map