@rytass/bpm-core-nestjs-module 0.19.0 → 0.20.1

package/src/lib/expression-function/expression-function.module.js

@@ -0,0 +1,34 @@
+"use strict";
+var ExpressionFunctionModule_1;
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ExpressionFunctionModule = void 0;
+const tslib_1 = require("tslib");
+const common_1 = require("@nestjs/common");
+const expression_function_provider_1 = require("./expression-function.provider");
+const expression_function_types_1 = require("./expression-function.types");
+/**
+ * Publishes the expression function registry (ADR 22 §3.5) under
+ * `BPM_EXPRESSION_FUNCTION_REGISTRY`. Global, because every module that
+ * evaluates or lints an expression (`ConditionModule` consumers: templates,
+ * the workflow engine, delegation) reads the same registry.
+ */
+let ExpressionFunctionModule = ExpressionFunctionModule_1 = class ExpressionFunctionModule {
+    static forRoot(options = {}) {
+        return {
+            exports: [expression_function_types_1.BPM_EXPRESSION_FUNCTION_REGISTRY],
+            global: true,
+            imports: [...(options.imports ?? [])],
+            module: ExpressionFunctionModule_1,
+            providers: [
+                ...(options.functionsProvider ? [options.functionsProvider] : []),
+                expression_function_provider_1.expressionFunctionRegistryProvider,
+            ],
+        };
+    }
+};
+exports.ExpressionFunctionModule = ExpressionFunctionModule;
+exports.ExpressionFunctionModule = ExpressionFunctionModule = ExpressionFunctionModule_1 = tslib_1.__decorate([
+    (0, common_1.Global)(),
+    (0, common_1.Module)({})
+], ExpressionFunctionModule);
+//# sourceMappingURL=expression-function.module.js.map

package/src/lib/expression-function/expression-function.module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"expression-function.module.js","sourceRoot":"","sources":["../../../../../../libs/bpm-core/src/lib/expression-function/expression-function.module.ts"],"names":[],"mappings":";;;;;AAAA,2CAMwB;AACxB,iFAAoF;AACpF,2EAGqC;AAcrC;;;;;GAKG;AAGI,IAAM,wBAAwB,gCAA9B,MAAM,wBAAwB;IACnC,MAAM,CAAC,OAAO,CAAC,UAA2C,EAAE;QAC1D,OAAO;YACL,OAAO,EAAE,CAAC,4DAAgC,CAAC;YAC3C,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC;YACrC,MAAM,EAAE,0BAAwB;YAChC,SAAS,EAAE;gBACT,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjE,iEAAkC;aACnC;SACF,CAAC;IACJ,CAAC;CACF,CAAA;AAbY,4DAAwB;mCAAxB,wBAAwB;IAFpC,IAAA,eAAM,GAAE;IACR,IAAA,eAAM,EAAC,EAAE,CAAC;GACE,wBAAwB,CAapC"}

package/src/lib/expression-function/expression-function.provider.d.ts

@@ -0,0 +1,17 @@
+import { Provider } from '@nestjs/common';
+import { BPMExpressionFunctionRegistry } from './expression-function.types';
+/**
+ * Resolves the registry every BPM module injects under
+ * `BPM_EXPRESSION_FUNCTION_REGISTRY`: the nine built-ins plus the host
+ * functions from `BPMRootModule`'s `expressionFunctions` runtime option and
+ * from a `BPM_EXPRESSION_FUNCTIONS` provider, in that order. With neither, only
+ * the built-ins are available.
+ *
+ * Every function is validated here, so a bad name, an async handler or an
+ * unsupported type fails the host's boot — for `forRoot` and `forRootAsync`
+ * alike — instead of the first evaluation that would reach it.
+ *
+ * Both sources are injected optionally so the module also resolves on its own,
+ * outside `BPMRootModule`.
+ */
+export declare const expressionFunctionRegistryProvider: Provider<BPMExpressionFunctionRegistry>;

package/src/lib/expression-function/expression-function.provider.js

@@ -0,0 +1,39 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.expressionFunctionRegistryProvider = void 0;
+const bpm_root_options_1 = require("../bpm/bpm-root-options");
+const expression_function_registry_1 = require("./expression-function.registry");
+const expression_function_types_1 = require("./expression-function.types");
+/**
+ * Resolves the registry every BPM module injects under
+ * `BPM_EXPRESSION_FUNCTION_REGISTRY`: the nine built-ins plus the host
+ * functions from `BPMRootModule`'s `expressionFunctions` runtime option and
+ * from a `BPM_EXPRESSION_FUNCTIONS` provider, in that order. With neither, only
+ * the built-ins are available.
+ *
+ * Every function is validated here, so a bad name, an async handler or an
+ * unsupported type fails the host's boot — for `forRoot` and `forRootAsync`
+ * alike — instead of the first evaluation that would reach it.
+ *
+ * Both sources are injected optionally so the module also resolves on its own,
+ * outside `BPMRootModule`.
+ */
+exports.expressionFunctionRegistryProvider = {
+    inject: [
+        { optional: true, token: bpm_root_options_1.BPM_ROOT_OPTIONS },
+        { optional: true, token: expression_function_types_1.BPM_EXPRESSION_FUNCTIONS },
+    ],
+    provide: expression_function_types_1.BPM_EXPRESSION_FUNCTION_REGISTRY,
+    useFactory: (rootOptions, hostFunctions) => {
+        const functions = [
+            ...(rootOptions?.expressionFunctions ?? []),
+            ...(hostFunctions ?? []),
+        ];
+        // Without host functions every consumer shares the built-ins-only
+        // registry, and with it the default engine environments.
+        return functions.length === 0
+            ? expression_function_registry_1.BUILT_IN_EXPRESSION_FUNCTION_REGISTRY
+            : new expression_function_registry_1.StaticBPMExpressionFunctionRegistry(functions);
+    },
+};
+//# sourceMappingURL=expression-function.provider.js.map

package/src/lib/expression-function/expression-function.provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"expression-function.provider.js","sourceRoot":"","sources":["../../../../../../libs/bpm-core/src/lib/expression-function/expression-function.provider.ts"],"names":[],"mappings":";;;AACA,8DAGiC;AACjC,iFAGwC;AACxC,2EAKqC;AAErC;;;;;;;;;;;;;GAaG;AACU,QAAA,kCAAkC,GAC7C;IACE,MAAM,EAAE;QACN,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,mCAAgB,EAAE;QAC3C,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,EAAE,oDAAwB,EAAE;KACpD;IACD,OAAO,EAAE,4DAAgC;IACzC,UAAU,EAAE,CACV,WAA8C,EAC9C,aAA2D,EAC5B,EAAE;QACjC,MAAM,SAAS,GAAG;YAChB,GAAG,CAAC,WAAW,EAAE,mBAAmB,IAAI,EAAE,CAAC;YAC3C,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC;SACzB,CAAC;QAEF,kEAAkE;QAClE,yDAAyD;QACzD,OAAO,SAAS,CAAC,MAAM,KAAK,CAAC;YAC3B,CAAC,CAAC,oEAAqC;YACvC,CAAC,CAAC,IAAI,kEAAmC,CAAC,SAAS,CAAC,CAAC;IACzD,CAAC;CACF,CAAC"}

package/src/lib/expression-function/expression-function.registry.d.ts

@@ -0,0 +1,36 @@
+import { type BPMExpressionFunctionDescriptor, type BPMExpressionValueType } from '@rytass/bpm-core-shared';
+import type { BPMExpressionFunction, BPMExpressionFunctionRegistry } from './expression-function.types';
+/** Every value type a parameter or a result may declare (ADR 22 §3.5). */
+export declare const BPM_EXPRESSION_VALUE_TYPES: readonly BPMExpressionValueType[];
+/**
+ * Validates every host function (ADR 22 §3.5) and returns frozen copies:
+ * the name matches `BPM_EXPRESSION_FUNCTION_NAME_PATTERN` and is neither a
+ * built-in nor registered twice; the handler is a plain synchronous function;
+ * every parameter and the result declare a supported type.
+ *
+ * Throws a plain `Error` naming the function and the reason, so a host that
+ * registers a bad function does not boot.
+ */
+export declare const validateExpressionFunctions: (functions: readonly unknown[]) => readonly BPMExpressionFunction[];
+/**
+ * A fixed set of functions: the nine built-ins plus the host functions given
+ * at construction, validated there. Lookups are by own key only, so a name
+ * such as `constructor` or `toString` is never found on a prototype.
+ */
+export declare class StaticBPMExpressionFunctionRegistry implements BPMExpressionFunctionRegistry {
+    private readonly functions;
+    private readonly descriptors;
+    constructor(hostFunctions?: readonly BPMExpressionFunction[]);
+    get(name: string): BPMExpressionFunction | null;
+    list(): readonly BPMExpressionFunctionDescriptor[];
+    assertPublishable(names: readonly string[]): readonly string[];
+}
+/** Only the nine built-ins: what BPM uses when the host registers no function. */
+export declare class EmptyBPMExpressionFunctionRegistry extends StaticBPMExpressionFunctionRegistry {
+    constructor();
+}
+/**
+ * The shared built-ins-only registry. Evaluation falls back to it wherever no
+ * registry was handed in, so the built-ins are always available.
+ */
+export declare const BUILT_IN_EXPRESSION_FUNCTION_REGISTRY: BPMExpressionFunctionRegistry;

package/src/lib/expression-function/expression-function.registry.js

@@ -0,0 +1,231 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BUILT_IN_EXPRESSION_FUNCTION_REGISTRY = exports.EmptyBPMExpressionFunctionRegistry = exports.StaticBPMExpressionFunctionRegistry = exports.validateExpressionFunctions = exports.BPM_EXPRESSION_VALUE_TYPES = void 0;
+const node_util_1 = require("node:util");
+const bpm_core_shared_1 = require("@rytass/bpm-core-shared");
+const expression_function_built_ins_1 = require("./expression-function.built-ins");
+/** Every value type a parameter or a result may declare (ADR 22 §3.5). */
+exports.BPM_EXPRESSION_VALUE_TYPES = Object.freeze([
+    'bool',
+    'double',
+    'dyn',
+    'int',
+    'list',
+    'map',
+    'null',
+    'string',
+]);
+const VALUE_TYPES = new Set(exports.BPM_EXPRESSION_VALUE_TYPES);
+const BUILT_IN_NAMES = new Set(bpm_core_shared_1.BPM_BUILT_IN_EXPRESSION_FUNCTION_NAMES);
+const PARAMETER_NAME_PATTERN = /^[A-Za-z_][A-Za-z0-9_]*$/u;
+/*
+ * cel-js 0.8.2 (cel-legacy) lexes `true`, `false` and `null` without a word
+ * boundary and ahead of identifiers, so `nullable_v1(1)` is read as `null`
+ * followed by `able_v1` — a syntax error. cel-v2 has no such problem, but a
+ * host function must work in both dialects, so the name is refused here.
+ * (`in` is lexed with a boundary; `inRange_v1` is fine.)
+ */
+const CEL_LEGACY_KEYWORD_PREFIX = /^(?:true|false|null)/u;
+/*
+ * `async function`, `function*` and `async function*` all return something a
+ * synchronous evaluation cannot use.
+ *
+ * The primary check is the engine's own function kind (`util.types`): it is
+ * fixed when the function is created, so neither `Object.setPrototypeOf` nor
+ * an own `Symbol.toStringTag` changes it, and it holds across realms. It does
+ * not see through `bind`, so the prototype chain is checked too: every such
+ * function inherits from the intrinsic `AsyncFunction.prototype`,
+ * `GeneratorFunction.prototype` or `AsyncGeneratorFunction.prototype` of this
+ * realm, and a bound copy keeps that prototype. The tag is a last check for a
+ * bound handler from another realm.
+ *
+ * A bound copy whose prototype was also moved to `Function.prototype` and
+ * re-tagged still passes all three; such a handler returns a promise, which
+ * the call wrapper refuses as `EXPRESSION_FUNCTION_FAILED` (fail closed).
+ */
+const REFUSED_FUNCTION_PROTOTYPES = [
+    Object.getPrototypeOf(async () => undefined),
+    Object.getPrototypeOf(function* refusedGenerator() {
+        // Never called: only its prototype is read.
+    }),
+    Object.getPrototypeOf(async function* refusedAsyncGenerator() {
+        // Never called: only its prototype is read.
+    }),
+    // A build that compiled these down to plain functions would yield
+    // `Function.prototype`, which every handler inherits from: never compare to it.
+].filter((prototype) => prototype !== Function.prototype);
+const REFUSED_FUNCTION_TAGS = new Set([
+    '[object AsyncFunction]',
+    '[object AsyncGeneratorFunction]',
+    '[object GeneratorFunction]',
+]);
+const isAsyncOrGenerator = (handler) => node_util_1.types.isAsyncFunction(handler) ||
+    node_util_1.types.isGeneratorFunction(handler) ||
+    REFUSED_FUNCTION_PROTOTYPES.some((prototype) => Object.prototype.isPrototypeOf.call(prototype, handler)) ||
+    REFUSED_FUNCTION_TAGS.has(Object.prototype.toString.call(handler));
+const PREFIX = '[@rytass/bpm-core-nestjs-module]';
+const refuse = (name, reason) => {
+    throw new Error(`${PREFIX} Expression function "${name}" ${reason}.`);
+};
+const isRecord = (value) => typeof value === 'object' && value !== null && !Array.isArray(value);
+const readDisplayName = (candidate, index) => isRecord(candidate) && typeof candidate.name === 'string'
+    ? candidate.name
+    : `#${index}`;
+const readParameter = (name, candidate, index) => {
+    if (!isRecord(candidate)) {
+        return refuse(name, `has parameter ${index} that is not an object`);
+    }
+    if (typeof candidate.name !== 'string' ||
+        !PARAMETER_NAME_PATTERN.test(candidate.name)) {
+        return refuse(name, `has parameter ${index} without a valid name`);
+    }
+    if (typeof candidate.type !== 'string' || !VALUE_TYPES.has(candidate.type)) {
+        return refuse(name, `declares parameter "${candidate.name}" with an unsupported type (expected one of ${exports.BPM_EXPRESSION_VALUE_TYPES.join(', ')})`);
+    }
+    const { description } = candidate;
+    if (description !== undefined && typeof description !== 'string') {
+        return refuse(name, `declares parameter "${candidate.name}" with a description that is not a string`);
+    }
+    return Object.freeze({
+        ...(typeof description === 'string' ? { description } : {}),
+        name: candidate.name,
+        type: candidate.type,
+    });
+};
+/**
+ * Checks one host function and returns a frozen copy of it. Throws a plain
+ * `Error` naming the function and the reason; the host's boot fails with it.
+ * Uniqueness across the list is checked by {@link validateExpressionFunctions}.
+ */
+const validateExpressionFunction = (candidate, index) => {
+    const displayName = readDisplayName(candidate, index);
+    if (!isRecord(candidate)) {
+        return refuse(displayName, 'is not an object');
+    }
+    const { description, handler, label, name, parameters, returnType } = candidate;
+    if (typeof name !== 'string') {
+        return refuse(displayName, 'has no name');
+    }
+    if (BUILT_IN_NAMES.has(name)) {
+        return refuse(name, 'uses the name of a built-in function');
+    }
+    // The pattern also keeps a host name clear of every cel-v2 built-in and CEL
+    // keyword: none of them ends in `_v<digits>`.
+    if (!bpm_core_shared_1.BPM_EXPRESSION_FUNCTION_NAME_PATTERN.test(name)) {
+        return refuse(name, 'has an invalid name (lower camel segments joined by "_", ending in a version such as "_v1")');
+    }
+    if (CEL_LEGACY_KEYWORD_PREFIX.test(name)) {
+        return refuse(name, 'starts with "true", "false" or "null", which cel-legacy reads as a keyword; such a name can never be called there');
+    }
+    if (typeof handler !== 'function') {
+        return refuse(name, 'has no handler function');
+    }
+    if (isAsyncOrGenerator(handler)) {
+        return refuse(name, 'has an async or generator handler; handlers must be synchronous');
+    }
+    if (typeof label !== 'string' || !label.trim()) {
+        return refuse(name, 'has no label');
+    }
+    if (typeof description !== 'string') {
+        return refuse(name, 'has no description');
+    }
+    if (!Array.isArray(parameters)) {
+        return refuse(name, 'has no parameter list');
+    }
+    if (typeof returnType !== 'string' || !VALUE_TYPES.has(returnType)) {
+        return refuse(name, `declares an unsupported return type (expected one of ${exports.BPM_EXPRESSION_VALUE_TYPES.join(', ')})`);
+    }
+    const checkedParameters = Object.freeze(parameters.map((parameter, parameterIndex) => readParameter(name, parameter, parameterIndex)));
+    const parameterNames = checkedParameters.map((parameter) => parameter.name);
+    if (new Set(parameterNames).size !== parameterNames.length) {
+        return refuse(name, 'declares the same parameter name twice');
+    }
+    return Object.freeze({
+        description,
+        handler: handler,
+        label,
+        name,
+        parameters: checkedParameters,
+        returnType: returnType,
+    });
+};
+/**
+ * Validates every host function (ADR 22 §3.5) and returns frozen copies:
+ * the name matches `BPM_EXPRESSION_FUNCTION_NAME_PATTERN` and is neither a
+ * built-in nor registered twice; the handler is a plain synchronous function;
+ * every parameter and the result declare a supported type.
+ *
+ * Throws a plain `Error` naming the function and the reason, so a host that
+ * registers a bad function does not boot.
+ */
+const validateExpressionFunctions = (functions) => {
+    if (!Array.isArray(functions)) {
+        throw new Error(`${PREFIX} Expression functions must be given as an array.`);
+    }
+    const checked = functions.map(validateExpressionFunction);
+    checked.reduce((seen, fn) => {
+        if (seen.has(fn.name)) {
+            refuse(fn.name, 'is registered more than once');
+        }
+        return new Set([...seen, fn.name]);
+    }, new Set());
+    return Object.freeze(checked);
+};
+exports.validateExpressionFunctions = validateExpressionFunctions;
+const toDescriptor = (fn, builtIn) => Object.freeze({
+    builtIn,
+    description: fn.description,
+    label: fn.label,
+    name: fn.name,
+    parameters: fn.parameters,
+    returnType: fn.returnType,
+});
+const BUILT_INS = validateBuiltIns();
+/**
+ * The built-ins go through the same shape checks as host functions, except
+ * the name rule they are exempt from, so a mistake in them fails at import.
+ */
+function validateBuiltIns() {
+    return Object.freeze(expression_function_built_ins_1.BPM_BUILT_IN_EXPRESSION_FUNCTIONS.map((fn) => Object.freeze({
+        ...fn,
+        parameters: Object.freeze(fn.parameters.map((parameter, index) => readParameter(fn.name, parameter, index))),
+    })));
+}
+/**
+ * A fixed set of functions: the nine built-ins plus the host functions given
+ * at construction, validated there. Lookups are by own key only, so a name
+ * such as `constructor` or `toString` is never found on a prototype.
+ */
+class StaticBPMExpressionFunctionRegistry {
+    constructor(hostFunctions = []) {
+        const host = (0, exports.validateExpressionFunctions)(hostFunctions);
+        this.functions = new Map([...BUILT_INS, ...host].map((fn) => [fn.name, fn]));
+        this.descriptors = Object.freeze([
+            ...BUILT_INS.map((fn) => toDescriptor(fn, true)),
+            ...host.map((fn) => toDescriptor(fn, false)),
+        ]);
+    }
+    get(name) {
+        return this.functions.get(name) ?? null;
+    }
+    list() {
+        return this.descriptors;
+    }
+    assertPublishable(names) {
+        return [...new Set(names)].filter((name) => !this.functions.has(name));
+    }
+}
+exports.StaticBPMExpressionFunctionRegistry = StaticBPMExpressionFunctionRegistry;
+/** Only the nine built-ins: what BPM uses when the host registers no function. */
+class EmptyBPMExpressionFunctionRegistry extends StaticBPMExpressionFunctionRegistry {
+    constructor() {
+        super([]);
+    }
+}
+exports.EmptyBPMExpressionFunctionRegistry = EmptyBPMExpressionFunctionRegistry;
+/**
+ * The shared built-ins-only registry. Evaluation falls back to it wherever no
+ * registry was handed in, so the built-ins are always available.
+ */
+exports.BUILT_IN_EXPRESSION_FUNCTION_REGISTRY = new EmptyBPMExpressionFunctionRegistry();
+//# sourceMappingURL=expression-function.registry.js.map

package/src/lib/expression-function/expression-function.registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"expression-function.registry.js","sourceRoot":"","sources":["../../../../../../libs/bpm-core/src/lib/expression-function/expression-function.registry.ts"],"names":[],"mappings":";;;AAAA,yCAAkC;AAClC,6DAMiC;AACjC,mFAAoF;AAMpF,0EAA0E;AAC7D,QAAA,0BAA0B,GACrC,MAAM,CAAC,MAAM,CAAC;IACZ,MAAM;IACN,QAAQ;IACR,KAAK;IACL,KAAK;IACL,MAAM;IACN,KAAK;IACL,MAAM;IACN,QAAQ;CACT,CAAC,CAAC;AAEL,MAAM,WAAW,GAAwB,IAAI,GAAG,CAAC,kCAA0B,CAAC,CAAC;AAC7E,MAAM,cAAc,GAAwB,IAAI,GAAG,CACjD,wDAAsC,CACvC,CAAC;AACF,MAAM,sBAAsB,GAAG,2BAA2B,CAAC;AAE3D;;;;;;GAMG;AACH,MAAM,yBAAyB,GAAG,uBAAuB,CAAC;AAE1D;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,2BAA2B,GAAsB;IACrD,MAAM,CAAC,cAAc,CAAC,KAAK,IAAmB,EAAE,CAAC,SAAS,CAAW;IACrE,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC,gBAAgB;QAC9C,4CAA4C;IAC9C,CAAC,CAAW;IACZ,MAAM,CAAC,cAAc,CACnB,KAAK,SAAS,CAAC,CAAC,qBAAqB;QACnC,4CAA4C;IAC9C,CAAC,CACQ;IACX,kEAAkE;IAClE,gFAAgF;CACjF,CAAC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,KAAK,QAAQ,CAAC,SAAS,CAAC,CAAC;AAE1D,MAAM,qBAAqB,GAAwB,IAAI,GAAG,CAAC;IACzD,wBAAwB;IACxB,iCAAiC;IACjC,4BAA4B;CAC7B,CAAC,CAAC;AAEH,MAAM,kBAAkB,GAAG,CAAC,OAAe,EAAW,EAAE,CACtD,iBAAK,CAAC,eAAe,CAAC,OAAO,CAAC;IAC9B,iBAAK,CAAC,mBAAmB,CAAC,OAAO,CAAC;IAClC,2BAA2B,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAC7C,MAAM,CAAC,SAAS,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CACxD;IACD,qBAAqB,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;AAErE,MAAM,MAAM,GAAG,kCAAkC,CAAC;AAElD,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,MAAc,EAAS,EAAE;IACrD,MAAM,IAAI,KAAK,CAAC,GAAG,MAAM,yBAAyB,IAAI,KAAK,MAAM,GAAG,CAAC,CAAC;AACxE,CAAC,CAAC;AAEF,MAAM,QAAQ,GAAG,CAAC,KAAc,EAA8C,EAAE,CAC9E,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAEvE,MAAM,eAAe,GAAG,CAAC,SAAkB,EAAE,KAAa,EAAU,EAAE,CACpE,QAAQ,CAAC,SAAS,CAAC,IAAI,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ;IACvD,CAAC,CAAC,SAAS,CAAC,IAAI;IAChB,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC;AAElB,MAAM,aAAa,GAAG,CACpB,IAAY,EACZ,SAAkB,EAClB,KAAa,EACmB,EAAE;IAClC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACzB,OAAO,MAAM,CAAC,IAAI,EAAE,iBAAiB,KAAK,wBAAwB,CAAC,CAAC;IACtE,CAAC;IAED,IACE,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ;QAClC,CAAC,sBAAsB,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAC5C,CAAC;QACD,OAAO,MAAM,CAAC,IAAI,EAAE,iBAAiB,KAAK,uBAAuB,CAAC,CAAC;IACrE,CAAC;IAED,IAAI,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3E,OAAO,MAAM,CACX,IAAI,EACJ,uBAAuB,SAAS,CAAC,IAAI,+CAA+C,kCAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC7H,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,WAAW,EAAE,GAAG,SAAS,CAAC;IAElC,IAAI,WAAW,KAAK,SAAS,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;QACjE,OAAO,MAAM,CACX,IAAI,EACJ,uBAAuB,SAAS,CAAC,IAAI,2CAA2C,CACjF,CAAC;IACJ,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,GAAG,CAAC,OAAO,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3D,IAAI,EAAE,SAAS,CAAC,IAAI;QACpB,IAAI,EAAE,SAAS,CAAC,IAA8B;KAC/C,CAAC,CAAC;AACL,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,0BAA0B,GAAG,CACjC,SAAkB,EAClB,KAAa,EACU,EAAE;IACzB,MAAM,WAAW,GAAG,eAAe,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IAEtD,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACzB,OAAO,MAAM,CAAC,WAAW,EAAE,kBAAkB,CAAC,CAAC;IACjD,CAAC;IAED,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,GACjE,SAAS,CAAC;IAEZ,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,OAAO,MAAM,CAAC,WAAW,EAAE,aAAa,CAAC,CAAC;IAC5C,CAAC;IAED,IAAI,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,OAAO,MAAM,CAAC,IAAI,EAAE,sCAAsC,CAAC,CAAC;IAC9D,CAAC;IAED,4EAA4E;IAC5E,8CAA8C;IAC9C,IAAI,CAAC,sDAAoC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACrD,OAAO,MAAM,CACX,IAAI,EACJ,6FAA6F,CAC9F,CAAC;IACJ,CAAC;IAED,IAAI,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,OAAO,MAAM,CACX,IAAI,EACJ,mHAAmH,CACpH,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,OAAO,KAAK,UAAU,EAAE,CAAC;QAClC,OAAO,MAAM,CAAC,IAAI,EAAE,yBAAyB,CAAC,CAAC;IACjD,CAAC;IAED,IAAI,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;QAChC,OAAO,MAAM,CACX,IAAI,EACJ,iEAAiE,CAClE,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QAC/C,OAAO,MAAM,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IACtC,CAAC;IAED,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;QACpC,OAAO,MAAM,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;IAC5C,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QAC/B,OAAO,MAAM,CAAC,IAAI,EAAE,uBAAuB,CAAC,CAAC;IAC/C,CAAC;IAED,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;QACnE,OAAO,MAAM,CACX,IAAI,EACJ,wDAAwD,kCAA0B,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACjG,CAAC;IACJ,CAAC;IAED,MAAM,iBAAiB,GAAG,MAAM,CAAC,MAAM,CACpC,UAAiC,CAAC,GAAG,CACpC,CAAC,SAAkB,EAAE,cAAsB,EAAE,EAAE,CAC7C,aAAa,CAAC,IAAI,EAAE,SAAS,EAAE,cAAc,CAAC,CACjD,CACF,CAAC;IACF,MAAM,cAAc,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IAE5E,IAAI,IAAI,GAAG,CAAC,cAAc,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC,MAAM,EAAE,CAAC;QAC3D,OAAO,MAAM,CAAC,IAAI,EAAE,wCAAwC,CAAC,CAAC;IAChE,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,WAAW;QACX,OAAO,EAAE,OAA2C;QACpD,KAAK;QACL,IAAI;QACJ,UAAU,EAAE,iBAAiB;QAC7B,UAAU,EAAE,UAAoC;KACjD,CAAC,CAAC;AACL,CAAC,CAAC;AAEF;;;;;;;;GAQG;AACI,MAAM,2BAA2B,GAAG,CACzC,SAA6B,EACK,EAAE;IACpC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,GAAG,MAAM,kDAAkD,CAC5D,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,SAAS,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;IAE1D,OAAO,CAAC,MAAM,CAAsB,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE;QAC/C,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YACtB,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,8BAA8B,CAAC,CAAC;QAClD,CAAC;QAED,OAAO,IAAI,GAAG,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IACrC,CAAC,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;IAEd,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAChC,CAAC,CAAC;AApBW,QAAA,2BAA2B,+BAoBtC;AAEF,MAAM,YAAY,GAAG,CACnB,EAAyB,EACzB,OAAgB,EACiB,EAAE,CACnC,MAAM,CAAC,MAAM,CAAC;IACZ,OAAO;IACP,WAAW,EAAE,EAAE,CAAC,WAAW;IAC3B,KAAK,EAAE,EAAE,CAAC,KAAK;IACf,IAAI,EAAE,EAAE,CAAC,IAAI;IACb,UAAU,EAAE,EAAE,CAAC,UAAU;IACzB,UAAU,EAAE,EAAE,CAAC,UAAU;CAC1B,CAAC,CAAC;AAEL,MAAM,SAAS,GAAqC,gBAAgB,EAAE,CAAC;AAEvE;;;GAGG;AACH,SAAS,gBAAgB;IACvB,OAAO,MAAM,CAAC,MAAM,CAClB,iEAAiC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAyB,EAAE,CAClE,MAAM,CAAC,MAAM,CAAC;QACZ,GAAG,EAAE;QACL,UAAU,EAAE,MAAM,CAAC,MAAM,CACvB,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,CACrC,aAAa,CAAC,EAAE,CAAC,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,CACzC,CACF;KACF,CAAC,CACH,CACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAa,mCAAmC;IAI9C,YAAY,gBAAkD,EAAE;QAC9D,MAAM,IAAI,GAAG,IAAA,mCAA2B,EAAC,aAAa,CAAC,CAAC;QAExD,IAAI,CAAC,SAAS,GAAG,IAAI,GAAG,CACtB,CAAC,GAAG,SAAS,EAAE,GAAG,IAAI,CAAC,CAAC,GAAG,CACzB,CAAC,EAAE,EAA4C,EAAE,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,CAChE,CACF,CAAC;QACF,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC;YAC/B,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;YAChD,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;SAC7C,CAAC,CAAC;IACL,CAAC;IAED,GAAG,CAAC,IAAY;QACd,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;IAC1C,CAAC;IAED,IAAI;QACF,OAAO,IAAI,CAAC,WAAW,CAAC;IAC1B,CAAC;IAED,iBAAiB,CAAC,KAAwB;QACxC,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACzE,CAAC;CACF;AA7BD,kFA6BC;AAED,kFAAkF;AAClF,MAAa,kCAAmC,SAAQ,mCAAmC;IACzF;QACE,KAAK,CAAC,EAAE,CAAC,CAAC;IACZ,CAAC;CACF;AAJD,gFAIC;AAED;;;GAGG;AACU,QAAA,qCAAqC,GAChD,IAAI,kCAAkC,EAAE,CAAC"}

package/src/lib/expression-function/expression-function.types.d.ts

@@ -0,0 +1,30 @@
+import type { BPMExpressionFunctionDescriptor, BPMExpressionValue } from '@rytass/bpm-core-shared';
+/**
+ * A function an expression may call (ADR 22 §3.5). The handler is host code:
+ * it must be synchronous and pure, and only ever sees deep-frozen copies of
+ * its arguments. The core never passes it an auth context.
+ */
+export interface BPMExpressionFunction extends Omit<BPMExpressionFunctionDescriptor, 'builtIn'> {
+    readonly handler: (...args: readonly BPMExpressionValue[]) => BPMExpressionValue;
+}
+/**
+ * The functions available to expressions: the core built-ins plus whatever
+ * the host registered. Shared contract between the publish lint (P2) and the
+ * registry implementation (P3); see docs/24 §3.
+ */
+export interface BPMExpressionFunctionRegistry {
+    /** The function registered under `name`, or `null`. */
+    get(name: string): BPMExpressionFunction | null;
+    /** Descriptors of every available function, built-ins first. */
+    list(): readonly BPMExpressionFunctionDescriptor[];
+    /**
+     * The names among `names` that are not available, in their first-seen
+     * order and without duplicates. An empty result means all are available;
+     * publish and rollback refuse a version whose result is not empty.
+     */
+    assertPublishable(names: readonly string[]): readonly string[];
+}
+/** Host-provided functions, as a multi-value list. Unset means none. */
+export declare const BPM_EXPRESSION_FUNCTIONS: unique symbol;
+/** The resolved registry the core injects. */
+export declare const BPM_EXPRESSION_FUNCTION_REGISTRY: unique symbol;

package/src/lib/expression-function/expression-function.types.js

@@ -0,0 +1,8 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BPM_EXPRESSION_FUNCTION_REGISTRY = exports.BPM_EXPRESSION_FUNCTIONS = void 0;
+/** Host-provided functions, as a multi-value list. Unset means none. */
+exports.BPM_EXPRESSION_FUNCTIONS = Symbol('BPM_EXPRESSION_FUNCTIONS');
+/** The resolved registry the core injects. */
+exports.BPM_EXPRESSION_FUNCTION_REGISTRY = Symbol('BPM_EXPRESSION_FUNCTION_REGISTRY');
+//# sourceMappingURL=expression-function.types.js.map

package/src/lib/expression-function/expression-function.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"expression-function.types.js","sourceRoot":"","sources":["../../../../../../libs/bpm-core/src/lib/expression-function/expression-function.types.ts"],"names":[],"mappings":";;;AAqCA,wEAAwE;AAC3D,QAAA,wBAAwB,GAAG,MAAM,CAAC,0BAA0B,CAAC,CAAC;AAE3E,8CAA8C;AACjC,QAAA,gCAAgC,GAAG,MAAM,CACpD,kCAAkC,CACnC,CAAC"}

package/src/lib/expression-function/index.d.ts

@@ -0,0 +1,5 @@
+export * from './expression-function.built-ins';
+export * from './expression-function.module';
+export * from './expression-function.provider';
+export * from './expression-function.registry';
+export * from './expression-function.types';

package/src/lib/expression-function/index.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const tslib_1 = require("tslib");
+tslib_1.__exportStar(require("./expression-function.built-ins"), exports);
+tslib_1.__exportStar(require("./expression-function.module"), exports);
+tslib_1.__exportStar(require("./expression-function.provider"), exports);
+tslib_1.__exportStar(require("./expression-function.registry"), exports);
+tslib_1.__exportStar(require("./expression-function.types"), exports);
+//# sourceMappingURL=index.js.map

package/src/lib/expression-function/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../libs/bpm-core/src/lib/expression-function/index.ts"],"names":[],"mappings":";;;AAAA,0EAAgD;AAChD,uEAA6C;AAC7C,yEAA+C;AAC/C,yEAA+C;AAC/C,sEAA4C"}

package/src/lib/form/form-schema.validator.js

@@ -6,6 +6,9 @@ exports.lintFormSchemaJson = lintFormSchemaJson;
 const form_1 = require("@rytass/bpm-core-shared/form");
 const form_org_unit_value_validator_1 = require("./form-org-unit-value.validator");
 const form_table_reference_1 = require("./form-table-reference");
+const form_data_source_expression_1 = require("../form-data-source/form-data-source.expression");
+/** The longest `EXPRESSION` binding the runtime evaluates (ConditionService). */
+const MAX_EXPRESSION_BINDING_LENGTH = 2000;
 const SUPPORTED_FIELD_TYPES = [
     'boolean',
     'checkbox',
@@ -466,7 +469,30 @@ function lintDataSourceBinding(value, path, scope) {
                 : []),
         ];
     }
-    return [...errors, `${path}.from.kind must be FIELD, CONSTANT, or ROW_FIELD`];
+    // Only the shape here: a draft with a half-written expression must still
+    // save. Its cel-v2 lint (roots, functions, field types, the parameter's
+    // type) needs the DataSource descriptor and runs with the registry check at
+    // publish (`FormDataSourceService.lintDefinitionSchemaEnvironment`).
+    if (from.kind === 'EXPRESSION') {
+        // A blank expression is a draft the designer has not written yet; the
+        // publish lint refuses it (`EXPR_PARSE_FAILED`).
+        return [
+            ...errors,
+            ...(typeof from.expression === 'string'
+                ? []
+                : [`${path}.from.expression must be a string`]),
+            ...(typeof from.expression === 'string' &&
+                from.expression.trim().length > MAX_EXPRESSION_BINDING_LENGTH
+                ? [
+                    `${path}.from.expression must be ${MAX_EXPRESSION_BINDING_LENGTH} characters or fewer`,
+                ]
+                : []),
+        ];
+    }
+    return [
+        ...errors,
+        `${path}.from.kind must be FIELD, CONSTANT, ROW_FIELD, or EXPRESSION`,
+    ];
 }
 function lintFieldBindingTarget(fieldKey, path, scope) {
     if (typeof fieldKey !== 'string') {
@@ -752,8 +778,7 @@ function lintHiddenDataSourceDependencies(fields) {
         .filter((fieldKey) => typeof fieldKey === 'string'));
     const message = (path, dependencyKey) => `${path}.dataSource 所屬欄位為 hidden，只能綁定同為 hidden 的欄位，不可綁定顯示中的欄位：${dependencyKey}`;
     const readVisibleDependencies = (owner) => readBindingSources(owner)
-        .filter((from) => from.kind === 'FIELD')
-        .map((from) => from.fieldKey)
+        .flatMap(readTopLevelBindingDependencies)
         .filter((dependencyKey) => typeof dependencyKey === 'string' && visibleKeys.has(dependencyKey));
     return fields.flatMap((field, index) => {
         if (!isRecord(field) || field.hidden !== true) {
@@ -791,13 +816,26 @@ function readFieldDependencyEntries(field) {
         [
             `top:${fieldKey}`,
             readBindingSources(field)
-                .filter((from) => from.kind === 'FIELD')
-                .map((from) => from.fieldKey)
-                .filter((dependencyKey) => typeof dependencyKey === 'string')
+                .flatMap(readTopLevelBindingDependencies)
                 .map((dependencyKey) => `top:${dependencyKey}`),
         ],
     ];
 }
+/**
+ * The top-level fields a binding reads: a `FIELD`'s key, or every `form.<key>`
+ * an `EXPRESSION` reads, from its AST (ADR 22 §3.7). The lint refuses dynamic
+ * access, so this is the whole dependency set; an expression that does not
+ * parse adds no edge here and is refused by the publish lint instead.
+ */
+function readTopLevelBindingDependencies(from) {
+    if (from.kind === 'FIELD') {
+        return typeof from.fieldKey === 'string' ? [from.fieldKey] : [];
+    }
+    if (from.kind === 'EXPRESSION' && typeof from.expression === 'string') {
+        return (0, form_data_source_expression_1.readExpressionBindingDependencies)(from.expression)?.formFieldKeys ?? [];
+    }
+    return [];
+}
 function readColumnDependencyNode(from, tableKey) {
     if (from.kind === 'FIELD' && typeof from.fieldKey === 'string') {
         return [`top:${from.fieldKey}`];
@@ -805,6 +843,15 @@ function readColumnDependencyNode(from, tableKey) {
     if (from.kind === 'ROW_FIELD' && typeof from.columnKey === 'string') {
         return [`col:${tableKey}.${from.columnKey}`];
     }
+    if (from.kind === 'EXPRESSION' && typeof from.expression === 'string') {
+        const dependencies = (0, form_data_source_expression_1.readExpressionBindingDependencies)(from.expression);
+        return dependencies
+            ? [
+                ...dependencies.formFieldKeys.map((key) => `top:${key}`),
+                ...dependencies.rowColumnKeys.map((key) => `col:${tableKey}.${key}`),
+            ]
+            : [];
+    }
     return [];
 }
 function readBindingSources(field) {