@objectstack/runtime 10.2.0 → 11.0.0

package/dist/index.d.cts

@@ -98,6 +98,7 @@ declare const StandaloneStackConfigSchema: z.ZodObject<{
     environmentId: z.ZodOptional<z.ZodString>;
     artifactPath: z.ZodOptional<z.ZodString>;
     projectRoot: z.ZodOptional<z.ZodString>;
+    dev: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>;
 type StandaloneStackConfig = z.input<typeof StandaloneStackConfigSchema>;
 interface StandaloneStackResult {
@@ -1013,6 +1014,49 @@ declare class HttpDispatcher {
      * engine access.
      */
     private buildMcpBridge;
+    /**
+     * [ADR-0066 D4] Shared capability gate for an action invocation. Returns a
+     * human-readable error string when the caller's `systemPermissions` don't
+     * cover the action's declared `requiredPermissions`, or `null` when allowed.
+     * System/engine self-invocation (`isSystem`) bypasses; an action without
+     * `requiredPermissions` is ungated. Single-sourced so the REST `/actions/...`
+     * route and the MCP `run_action` bridge enforce the SAME declaration.
+     */
+    private actionPermissionError;
+    /**
+     * Whether an action has a headless invocation path (so MCP can run it).
+     * Mirrors the supported-type set of the (now cloud-side) action-tools
+     * bridge: `script` needs a handler binding (`target`) or an inline `body`;
+     * `flow` needs a `target` and an automation service. UI-only types
+     * (`url`, `modal`, `form`) and `api` have no server dispatch here.
+     */
+    private isHeadlessInvokableAction;
+    /** True when an action is destructive by author signal/heuristic (HITL hint). */
+    private actionLooksDestructive;
+    /** Project an action's declarative metadata into a lean MCP summary. */
+    private summarizeAction;
+    /** Map an ObjectStack field type to a JSON-Schema primitive (conservative). */
+    private jsonTypeOf;
+    /** Resolve an action's params into LLM-facing summaries (field-backed types resolved). */
+    private summarizeActionParams;
+    /** Slim engine facade matching the ActionContext.engine shape handlers expect. */
+    private buildActionEngineFacade;
+    /**
+     * Resolve + invoke a business action by its declarative name for the MCP
+     * `run_action` tool. Enforces the ADR-0066 D4 capability gate and RLS as the
+     * caller, loads the subject record under RLS for row-context actions, and
+     * dispatches through the framework's `engine.executeAction` (script/body) or
+     * automation flow runner (flow). Throws on denial / not-found / handler
+     * failure so the tool surfaces a clean tool-error. No service-ai dependency.
+     */
+    private invokeBusinessAction;
+    /**
+     * Find an action's declarative definition by name across object metadata,
+     * optionally scoped to a single object. Returns the action plus its owning
+     * object name, or `null`. Throws when the name is ambiguous across objects
+     * and no `objectName` was supplied (so `run_action` can ask for one).
+     */
+    private resolveActionByName;
     /**
      * Generate a `sys_api_key` and return the raw secret EXACTLY ONCE
      * (`POST /keys`). This is the only mint path — the raw key is never stored

package/dist/index.d.ts

@@ -98,6 +98,7 @@ declare const StandaloneStackConfigSchema: z.ZodObject<{
     environmentId: z.ZodOptional<z.ZodString>;
     artifactPath: z.ZodOptional<z.ZodString>;
     projectRoot: z.ZodOptional<z.ZodString>;
+    dev: z.ZodOptional<z.ZodBoolean>;
 }, z.core.$strip>;
 type StandaloneStackConfig = z.input<typeof StandaloneStackConfigSchema>;
 interface StandaloneStackResult {
@@ -1013,6 +1014,49 @@ declare class HttpDispatcher {
      * engine access.
      */
     private buildMcpBridge;
+    /**
+     * [ADR-0066 D4] Shared capability gate for an action invocation. Returns a
+     * human-readable error string when the caller's `systemPermissions` don't
+     * cover the action's declared `requiredPermissions`, or `null` when allowed.
+     * System/engine self-invocation (`isSystem`) bypasses; an action without
+     * `requiredPermissions` is ungated. Single-sourced so the REST `/actions/...`
+     * route and the MCP `run_action` bridge enforce the SAME declaration.
+     */
+    private actionPermissionError;
+    /**
+     * Whether an action has a headless invocation path (so MCP can run it).
+     * Mirrors the supported-type set of the (now cloud-side) action-tools
+     * bridge: `script` needs a handler binding (`target`) or an inline `body`;
+     * `flow` needs a `target` and an automation service. UI-only types
+     * (`url`, `modal`, `form`) and `api` have no server dispatch here.
+     */
+    private isHeadlessInvokableAction;
+    /** True when an action is destructive by author signal/heuristic (HITL hint). */
+    private actionLooksDestructive;
+    /** Project an action's declarative metadata into a lean MCP summary. */
+    private summarizeAction;
+    /** Map an ObjectStack field type to a JSON-Schema primitive (conservative). */
+    private jsonTypeOf;
+    /** Resolve an action's params into LLM-facing summaries (field-backed types resolved). */
+    private summarizeActionParams;
+    /** Slim engine facade matching the ActionContext.engine shape handlers expect. */
+    private buildActionEngineFacade;
+    /**
+     * Resolve + invoke a business action by its declarative name for the MCP
+     * `run_action` tool. Enforces the ADR-0066 D4 capability gate and RLS as the
+     * caller, loads the subject record under RLS for row-context actions, and
+     * dispatches through the framework's `engine.executeAction` (script/body) or
+     * automation flow runner (flow). Throws on denial / not-found / handler
+     * failure so the tool surfaces a clean tool-error. No service-ai dependency.
+     */
+    private invokeBusinessAction;
+    /**
+     * Find an action's declarative definition by name across object metadata,
+     * optionally scoped to a single object. Returns the action plus its owning
+     * object name, or `null`. Throws when the name is ambiguous across objects
+     * and no `objectName` was supplied (so `run_action` can ask for one).
+     */
+    private resolveActionByName;
     /**
      * Generate a `sys_api_key` and return the raw secret EXACTLY ONCE
      * (`POST /keys`). This is the only mint path — the raw key is never stored