@shipfox/expression 1.1.0

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["export {\n  WorkflowExpressionEvaluationError,\n  type WorkflowExpressionEvaluationFailureReason,\n  workflowExpressionEvaluationErrorCode,\n} from './evaluator/errors.js';\nexport {\n  evaluateWorkflowExpression,\n  evaluateWorkflowPredicate,\n  evaluateWorkflowPredicateFailClosed,\n  type FailClosedPredicateOutcome,\n  type WorkflowExpressionEvaluationContext,\n  type WorkflowExpressionEvaluationValue,\n} from './evaluator/evaluate-workflow-expression.js';\nexport {\n  createWorkflowExpression,\n  unsafeWorkflowExpressionFromSource,\n} from './expression/create-workflow-expression.js';\nexport {\n  InvalidWorkflowExpressionError,\n  invalidWorkflowExpressionErrorCode,\n} from './expression/errors.js';\nexport type {\n  CreateWorkflowExpressionParams,\n  ExpressionScalarType,\n  ExpressionType,\n  ExpressionTypeEnvironment,\n  ValidCelExpression,\n  WorkflowExpression,\n  WorkflowExpressionCheck,\n  WorkflowExpressionCheckOptions,\n} from './expression/workflow-expression.js';\nexport {\n  type CoerceStepOutputsResult,\n  coerceStepOutputs,\n  type JsonSchemaValidationResult,\n  jsonSchemaToExpressionType,\n  type OutputDeclarations,\n  type OutputType,\n  type OutputTypeDeclaration,\n  outputDeclarationsToExpressionFields,\n  outputDeclarationToExpressionType,\n  outputTypes,\n  type StepOutputCoercionError,\n  type StepOutputCoercionErrorReason,\n  validateJsonSchema,\n} from './outputs/index.js';\nexport {isBareContextReference} from './plan/bare-reference.js';\nexport {\n  analyzeContextKeyAccess,\n  analyzeContextRootKeyAccess,\n  type ContextKeyAccessAnalysis,\n  type ContextKeyAccessReference,\n  type ContextKeyAccessViolation,\n  type ContextRootKeyAccessAnalysis,\n  type ContextRootKeyAccessReference,\n} from './plan/context-key-access.js';\nexport {evaluatePlannedPredicateAtSite} from './plan/evaluate-planned-predicate.js';\nexport {\n  capTraceEntries,\n  capTraceValue,\n  EVALUATION_TRACE_MAX_ENTRIES,\n  EVALUATION_TRACE_VALUE_CAP_BYTES,\n  type EvaluationTraceEntry,\n  type EvaluationTraceLimitEntry,\n  type EvaluationTraceRowEntry,\n  evaluationTraceEntry,\n  predicateTraceEntry,\n} from './plan/evaluation-trace.js';\nexport {extractExactContextRoots} from './plan/extract-exact-context-roots.js';\nexport {\n  type FrozenResolvedField,\n  freezeResolvedFieldAtSite,\n  resolveFieldAtSite,\n  type SiteResolvedField,\n  type WorkflowTemplateDiagnostic,\n  type WorkflowTemplateFailurePolicy,\n} from './plan/freeze.js';\nexport {\n  type FrozenPlannedRunCommand,\n  freezePlannedRunCommandAtSite,\n} from './plan/freeze-run-command.js';\nexport {\n  type FieldPlan,\n  type FieldPlanResult,\n  type PlanViolation,\n  planInterpolationField,\n} from './plan/plan-field.js';\nexport {predicateSourceIsBooleanShaped} from './plan/predicate-shape.js';\nexport type {\n  ResolvedField,\n  ResolvedFieldDeferredSegment,\n  ResolvedFieldLiteralSegment,\n  ResolvedFieldSegment,\n} from './plan/resolved-field.js';\nexport {type RoutedExpression, routeExpression} from './plan/route-expression.js';\nexport {\n  type ServerEvaluabilityResult,\n  type ServerEvaluabilityViolation,\n  validateServerEvaluable,\n} from './plan/validate-server-evaluable.js';\nexport {\n  WorkflowTemplateResolutionError,\n  workflowTemplateResolutionErrorCode,\n} from './resolver/errors.js';\nexport {\n  type HoistedPlannedRunCommand,\n  hoistPlannedRunCommand,\n  type PlannedRunCommandBinding,\n  type RunCommandHoistOptions,\n  UnsafeRunInterpolationError,\n  unsafeRunInterpolationErrorCode,\n} from './run/hoist-run-command.js';\nexport {\n  InvalidWorkflowTemplateError,\n  invalidWorkflowTemplateErrorCode,\n} from './template/errors.js';\nexport {extractCelContextRoots} from './template/extract-cel-context-roots.js';\nexport {extractCelUntrustedPathAccesses} from './template/extract-cel-untrusted-path-accesses.js';\nexport {parseWorkflowTemplate} from './template/parse-workflow-template.js';\nexport type {\n  WorkflowTemplateExprSegment,\n  WorkflowTemplateLiteralSegment,\n  WorkflowTemplateSegment,\n} from './template/template-segment.js';\nexport {\n  type AvailabilitySite,\n  availabilitySites,\n  buildTypedRootsEnvironment,\n  type FillTarget,\n  getWorkflowContextAvailability,\n  getWorkflowContextDefinition,\n  getWorkflowContextHost,\n  getWorkflowContextSensitivity,\n  getWorkflowContextTypeEnvironment,\n  getWorkflowContextUntrustedPaths,\n  getWorkflowInterpolationFieldFailurePolicy,\n  getWorkflowPredicateFieldMinimumFillTarget,\n  type OpenWorkflowContextDefinition,\n  type ReservedRootDefinition,\n  type RunnerWorkflowContextDefinition,\n  resolveContextRootAvailability,\n  resolveContextRootHost,\n  rootsAvailableAt,\n  runnerFillTarget,\n  type TypedWorkflowContextDefinition,\n  unavailableRootsAt,\n  type WorkflowContextAvailabilityReferenceEntry,\n  type WorkflowContextDefinition,\n  type WorkflowContextHost,\n  type WorkflowContextName,\n  type WorkflowContextReservedRoot,\n  type WorkflowContextSensitivity,\n  type WorkflowContextShape,\n  type WorkflowContextTrustTier,\n  type WorkflowFieldFailurePolicy,\n  type WorkflowInterpolationFailurePolicy,\n  type WorkflowInterpolationField,\n  type WorkflowInterpolationFieldPolicy,\n  type WorkflowJobTypeOverlay,\n  type WorkflowPredicateField,\n  type WorkflowStepTypeOverlay,\n  workflowContextAvailabilityReference,\n  workflowContextDefinitions,\n  workflowContextHosts,\n  workflowContextNames,\n  workflowContextReservedRoots,\n  workflowContextRootRequiresLiteralKey,\n  workflowContextSensitivities,\n  workflowContextTrustTiers,\n  workflowFieldFailurePolicies,\n  workflowInterpolationFieldAcceptsContext,\n  workflowInterpolationFieldAcceptsHost,\n  workflowInterpolationFieldAcceptsTrustTier,\n  workflowInterpolationFieldPolicies,\n  workflowInterpolationFields,\n  workflowPredicateFieldFailurePolicy,\n  workflowPredicateFields,\n} from './workflow-context/workflow-context.js';\n"],"names":["WorkflowExpressionEvaluationError","workflowExpressionEvaluationErrorCode","evaluateWorkflowExpression","evaluateWorkflowPredicate","evaluateWorkflowPredicateFailClosed","createWorkflowExpression","unsafeWorkflowExpressionFromSource","InvalidWorkflowExpressionError","invalidWorkflowExpressionErrorCode","coerceStepOutputs","jsonSchemaToExpressionType","outputDeclarationsToExpressionFields","outputDeclarationToExpressionType","outputTypes","validateJsonSchema","isBareContextReference","analyzeContextKeyAccess","analyzeContextRootKeyAccess","evaluatePlannedPredicateAtSite","capTraceEntries","capTraceValue","EVALUATION_TRACE_MAX_ENTRIES","EVALUATION_TRACE_VALUE_CAP_BYTES","evaluationTraceEntry","predicateTraceEntry","extractExactContextRoots","freezeResolvedFieldAtSite","resolveFieldAtSite","freezePlannedRunCommandAtSite","planInterpolationField","predicateSourceIsBooleanShaped","routeExpression","validateServerEvaluable","WorkflowTemplateResolutionError","workflowTemplateResolutionErrorCode","hoistPlannedRunCommand","UnsafeRunInterpolationError","unsafeRunInterpolationErrorCode","InvalidWorkflowTemplateError","invalidWorkflowTemplateErrorCode","extractCelContextRoots","extractCelUntrustedPathAccesses","parseWorkflowTemplate","availabilitySites","buildTypedRootsEnvironment","getWorkflowContextAvailability","getWorkflowContextDefinition","getWorkflowContextHost","getWorkflowContextSensitivity","getWorkflowContextTypeEnvironment","getWorkflowContextUntrustedPaths","getWorkflowInterpolationFieldFailurePolicy","getWorkflowPredicateFieldMinimumFillTarget","resolveContextRootAvailability","resolveContextRootHost","rootsAvailableAt","runnerFillTarget","unavailableRootsAt","workflowContextAvailabilityReference","workflowContextDefinitions","workflowContextHosts","workflowContextNames","workflowContextReservedRoots","workflowContextRootRequiresLiteralKey","workflowContextSensitivities","workflowContextTrustTiers","workflowFieldFailurePolicies","workflowInterpolationFieldAcceptsContext","workflowInterpolationFieldAcceptsHost","workflowInterpolationFieldAcceptsTrustTier","workflowInterpolationFieldPolicies","workflowInterpolationFields","workflowPredicateFieldFailurePolicy","workflowPredicateFields"],"mappings":"AAAA,SACEA,iCAAiC,EAEjCC,qCAAqC,QAChC,wBAAwB;AAC/B,SACEC,0BAA0B,EAC1BC,yBAAyB,EACzBC,mCAAmC,QAI9B,8CAA8C;AACrD,SACEC,wBAAwB,EACxBC,kCAAkC,QAC7B,6CAA6C;AACpD,SACEC,8BAA8B,EAC9BC,kCAAkC,QAC7B,yBAAyB;AAWhC,SAEEC,iBAAiB,EAEjBC,0BAA0B,EAI1BC,oCAAoC,EACpCC,iCAAiC,EACjCC,WAAW,EAGXC,kBAAkB,QACb,qBAAqB;AAC5B,SAAQC,sBAAsB,QAAO,2BAA2B;AAChE,SACEC,uBAAuB,EACvBC,2BAA2B,QAMtB,+BAA+B;AACtC,SAAQC,8BAA8B,QAAO,uCAAuC;AACpF,SACEC,eAAe,EACfC,aAAa,EACbC,4BAA4B,EAC5BC,gCAAgC,EAIhCC,oBAAoB,EACpBC,mBAAmB,QACd,6BAA6B;AACpC,SAAQC,wBAAwB,QAAO,wCAAwC;AAC/E,SAEEC,yBAAyB,EACzBC,kBAAkB,QAIb,mBAAmB;AAC1B,SAEEC,6BAA6B,QACxB,+BAA+B;AACtC,SAIEC,sBAAsB,QACjB,uBAAuB;AAC9B,SAAQC,8BAA8B,QAAO,4BAA4B;AAOzE,SAA+BC,eAAe,QAAO,6BAA6B;AAClF,SAGEC,uBAAuB,QAClB,sCAAsC;AAC7C,SACEC,+BAA+B,EAC/BC,mCAAmC,QAC9B,uBAAuB;AAC9B,SAEEC,sBAAsB,EAGtBC,2BAA2B,EAC3BC,+BAA+B,QAC1B,6BAA6B;AACpC,SACEC,4BAA4B,EAC5BC,gCAAgC,QAC3B,uBAAuB;AAC9B,SAAQC,sBAAsB,QAAO,0CAA0C;AAC/E,SAAQC,+BAA+B,QAAO,oDAAoD;AAClG,SAAQC,qBAAqB,QAAO,wCAAwC;AAM5E,SAEEC,iBAAiB,EACjBC,0BAA0B,EAE1BC,8BAA8B,EAC9BC,4BAA4B,EAC5BC,sBAAsB,EACtBC,6BAA6B,EAC7BC,iCAAiC,EACjCC,gCAAgC,EAChCC,0CAA0C,EAC1CC,0CAA0C,EAI1CC,8BAA8B,EAC9BC,sBAAsB,EACtBC,gBAAgB,EAChBC,gBAAgB,EAEhBC,kBAAkB,EAgBlBC,oCAAoC,EACpCC,0BAA0B,EAC1BC,oBAAoB,EACpBC,oBAAoB,EACpBC,4BAA4B,EAC5BC,qCAAqC,EACrCC,4BAA4B,EAC5BC,yBAAyB,EACzBC,4BAA4B,EAC5BC,wCAAwC,EACxCC,qCAAqC,EACrCC,0CAA0C,EAC1CC,kCAAkC,EAClCC,2BAA2B,EAC3BC,mCAAmC,EACnCC,uBAAuB,QAClB,yCAAyC"}

package/dist/outputs/index.d.ts

@@ -0,0 +1,2 @@
+export { type CoerceStepOutputsResult, coerceStepOutputs, type JsonSchemaValidationResult, jsonSchemaToExpressionType, type OutputDeclarations, type OutputType, type OutputTypeDeclaration, outputDeclarationsToExpressionFields, outputDeclarationToExpressionType, outputTypes, type StepOutputCoercionError, type StepOutputCoercionErrorReason, validateJsonSchema, } from './output-declarations.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/outputs/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/outputs/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,uBAAuB,EAC5B,iBAAiB,EACjB,KAAK,0BAA0B,EAC/B,0BAA0B,EAC1B,KAAK,kBAAkB,EACvB,KAAK,UAAU,EACf,KAAK,qBAAqB,EAC1B,oCAAoC,EACpC,iCAAiC,EACjC,WAAW,EACX,KAAK,uBAAuB,EAC5B,KAAK,6BAA6B,EAClC,kBAAkB,GACnB,MAAM,0BAA0B,CAAC"}

package/dist/outputs/index.js

@@ -0,0 +1,3 @@
+export { coerceStepOutputs, jsonSchemaToExpressionType, outputDeclarationsToExpressionFields, outputDeclarationToExpressionType, outputTypes, validateJsonSchema } from './output-declarations.js';
+
+//# sourceMappingURL=index.js.map

package/dist/outputs/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/outputs/index.ts"],"sourcesContent":["export {\n  type CoerceStepOutputsResult,\n  coerceStepOutputs,\n  type JsonSchemaValidationResult,\n  jsonSchemaToExpressionType,\n  type OutputDeclarations,\n  type OutputType,\n  type OutputTypeDeclaration,\n  outputDeclarationsToExpressionFields,\n  outputDeclarationToExpressionType,\n  outputTypes,\n  type StepOutputCoercionError,\n  type StepOutputCoercionErrorReason,\n  validateJsonSchema,\n} from './output-declarations.js';\n"],"names":["coerceStepOutputs","jsonSchemaToExpressionType","outputDeclarationsToExpressionFields","outputDeclarationToExpressionType","outputTypes","validateJsonSchema"],"mappings":"AAAA,SAEEA,iBAAiB,EAEjBC,0BAA0B,EAI1BC,oCAAoC,EACpCC,iCAAiC,EACjCC,WAAW,EAGXC,kBAAkB,QACb,2BAA2B"}

package/dist/outputs/output-declarations.d.ts

@@ -0,0 +1,39 @@
+import { type WorkflowDocumentStepOutputType, workflowDocumentStepOutputTypes } from '@shipfox/workflow-document';
+import type { ExpressionType } from '../expression/workflow-expression.js';
+export type OutputType = WorkflowDocumentStepOutputType;
+export interface OutputTypeDeclaration {
+    readonly type: OutputType;
+    readonly schema?: unknown;
+}
+export type OutputDeclarations = Readonly<Record<string, OutputTypeDeclaration>>;
+export type JsonSchemaValidationResult = {
+    readonly ok: true;
+} | {
+    readonly ok: false;
+    readonly reason: string;
+};
+export type StepOutputCoercionErrorReason = 'missing' | 'undeclared' | 'invalid_type' | 'invalid_json' | 'schema_invalid';
+export interface StepOutputCoercionError {
+    readonly key: string;
+    readonly reason: StepOutputCoercionErrorReason;
+    readonly expectedType?: OutputType;
+    readonly message: string;
+    readonly schemaError?: string;
+}
+export type CoerceStepOutputsResult = {
+    readonly ok: true;
+    readonly output: Record<string, unknown>;
+} | {
+    readonly ok: false;
+    readonly error: StepOutputCoercionError;
+};
+export { workflowDocumentStepOutputTypes as outputTypes };
+export declare function outputDeclarationToExpressionType(declaration: OutputTypeDeclaration): ExpressionType;
+export declare function outputDeclarationsToExpressionFields(declarations: OutputDeclarations): Readonly<Record<string, ExpressionType>>;
+export declare function jsonSchemaToExpressionType(schema: unknown): ExpressionType;
+export declare function validateJsonSchema(schema: unknown): JsonSchemaValidationResult;
+export declare function coerceStepOutputs(params: {
+    readonly declarations: OutputDeclarations;
+    readonly output: Record<string, unknown> | null | undefined;
+}): CoerceStepOutputsResult;
+//# sourceMappingURL=output-declarations.d.ts.map

package/dist/outputs/output-declarations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"output-declarations.d.ts","sourceRoot":"","sources":["../../src/outputs/output-declarations.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,8BAA8B,EACnC,+BAA+B,EAChC,MAAM,4BAA4B,CAAC;AAEpC,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,sCAAsC,CAAC;AAEzE,MAAM,MAAM,UAAU,GAAG,8BAA8B,CAAC;AAExD,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,MAAM,kBAAkB,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,qBAAqB,CAAC,CAAC,CAAC;AAEjF,MAAM,MAAM,0BAA0B,GAClC;IAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAA;CAAC,GACnB;IAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAC,CAAC;AAElD,MAAM,MAAM,6BAA6B,GACrC,SAAS,GACT,YAAY,GACZ,cAAc,GACd,cAAc,GACd,gBAAgB,CAAC;AAErB,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,6BAA6B,CAAC;IAC/C,QAAQ,CAAC,YAAY,CAAC,EAAE,UAAU,CAAC;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,MAAM,uBAAuB,GAC/B;IAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAC,GAC7D;IAAC,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,uBAAuB,CAAA;CAAC,CAAC;AAYlE,OAAO,EAAC,+BAA+B,IAAI,WAAW,EAAC,CAAC;AAExD,wBAAgB,iCAAiC,CAC/C,WAAW,EAAE,qBAAqB,GACjC,cAAc,CAahB;AAED,wBAAgB,oCAAoC,CAClD,YAAY,EAAE,kBAAkB,GAC/B,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC,CAO1C;AAED,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,OAAO,GAAG,cAAc,CA4B1E;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,OAAO,GAAG,0BAA0B,CAQ9E;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE;IACxC,QAAQ,CAAC,YAAY,EAAE,kBAAkB,CAAC;IAC1C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,GAAG,SAAS,CAAC;CAC7D,GAAG,uBAAuB,CAuC1B"}

package/dist/outputs/output-declarations.js

@@ -0,0 +1,295 @@
+import { workflowDocumentStepOutputTypes } from '@shipfox/workflow-document';
+import { Ajv } from 'ajv';
+const ajv = new Ajv({
+    strict: false
+});
+const coercingAjv = new Ajv({
+    strict: false,
+    coerceTypes: true,
+    allErrors: true,
+    addUsedSchema: false
+});
+const jsonOutputValidatorCache = new Map();
+const fallbackJsonType = {
+    kind: 'map'
+};
+export { workflowDocumentStepOutputTypes as outputTypes };
+export function outputDeclarationToExpressionType(declaration) {
+    switch(declaration.type){
+        case 'string':
+            return 'string';
+        case 'number':
+            return 'double';
+        case 'boolean':
+            return 'bool';
+        case 'json':
+            return declaration.schema === undefined ? fallbackJsonType : jsonSchemaToExpressionType(declaration.schema);
+    }
+}
+export function outputDeclarationsToExpressionFields(declarations) {
+    return Object.fromEntries(Object.entries(declarations).map(([key, declaration])=>[
+            key,
+            outputDeclarationToExpressionType(declaration)
+        ]));
+}
+export function jsonSchemaToExpressionType(schema) {
+    if (!isPlainRecord(schema)) return fallbackJsonType;
+    if (hasUnsupportedCombinator(schema)) return fallbackJsonType;
+    const type = schema.type;
+    if (Array.isArray(type)) return fallbackJsonType;
+    switch(type){
+        case 'string':
+            return 'string';
+        case 'number':
+            return 'double';
+        case 'integer':
+            return 'int';
+        case 'boolean':
+            return 'bool';
+        case 'null':
+            return 'null';
+        case 'array':
+            return {
+                kind: 'list',
+                element: jsonSchemaToExpressionType(schema.items)
+            };
+        case 'object':
+            return closedObjectJsonSchemaToExpressionType(schema);
+        default:
+            return fallbackJsonType;
+    }
+}
+export function validateJsonSchema(schema) {
+    const valid = ajv.validateSchema(schema);
+    if (valid) return {
+        ok: true
+    };
+    return {
+        ok: false,
+        reason: ajv.errorsText(ajv.errors, {
+            separator: '; '
+        })
+    };
+}
+export function coerceStepOutputs(params) {
+    const declaredKeys = Object.keys(params.declarations);
+    const output = params.output ?? {};
+    for (const key of declaredKeys){
+        if (Object.hasOwn(output, key)) continue;
+        const declaration = params.declarations[key];
+        return {
+            ok: false,
+            error: {
+                key,
+                reason: 'missing',
+                ...declaration === undefined ? {} : {
+                    expectedType: declaration.type
+                },
+                message: `Output "${key}" is required by the step output declaration.`
+            }
+        };
+    }
+    for (const key of Object.keys(output)){
+        if (Object.hasOwn(params.declarations, key)) continue;
+        return {
+            ok: false,
+            error: {
+                key,
+                reason: 'undeclared',
+                message: `Output "${key}" is not declared by the step output schema.`
+            }
+        };
+    }
+    const coerced = {};
+    for (const [key, declaration] of Object.entries(params.declarations)){
+        const value = output[key];
+        const result = coerceStepOutputValue(key, declaration, value);
+        if (!result.ok) return result;
+        coerced[key] = result.value;
+    }
+    return {
+        ok: true,
+        output: coerced
+    };
+}
+function coerceStepOutputValue(key, declaration, value) {
+    switch(declaration.type){
+        case 'string':
+            return coerceStringOutput(key, value);
+        case 'number':
+            return coerceNumberOutput(key, value);
+        case 'boolean':
+            return coerceBooleanOutput(key, value);
+        case 'json':
+            return coerceJsonOutput(key, declaration, value);
+    }
+}
+function coerceStringOutput(key, value) {
+    if (typeof value === 'string') return {
+        ok: true,
+        value
+    };
+    return invalidTypeError(key, 'string', 'must be a string');
+}
+function coerceNumberOutput(key, value) {
+    if (typeof value === 'number' && Number.isFinite(value)) return {
+        ok: true,
+        value
+    };
+    if (typeof value === 'string') {
+        const trimmed = value.trim();
+        if (trimmed !== '') {
+            const number = Number(trimmed);
+            if (Number.isFinite(number)) return {
+                ok: true,
+                value: number
+            };
+        }
+    }
+    return invalidTypeError(key, 'number', 'must be a finite number or numeric string');
+}
+function coerceBooleanOutput(key, value) {
+    if (typeof value === 'boolean') return {
+        ok: true,
+        value
+    };
+    if (value === 'true') return {
+        ok: true,
+        value: true
+    };
+    if (value === 'false') return {
+        ok: true,
+        value: false
+    };
+    return invalidTypeError(key, 'boolean', 'must be a boolean or the string "true" or "false"');
+}
+function coerceJsonOutput(key, declaration, value) {
+    const parsed = parseJsonOutputValue(key, value);
+    if (!parsed.ok) return parsed;
+    if (declaration.schema === undefined) return {
+        ok: true,
+        value: parsed.value
+    };
+    const data = {
+        value: cloneJsonValue(parsed.value)
+    };
+    const validate = validatorForJsonOutputSchema(declaration.schema);
+    if (validate(data)) return {
+        ok: true,
+        value: data.value
+    };
+    return {
+        ok: false,
+        error: {
+            key,
+            reason: 'schema_invalid',
+            expectedType: 'json',
+            message: `Output "${key}" does not match its JSON Schema.`,
+            schemaError: coercingAjv.errorsText(validate.errors, {
+                separator: '; '
+            })
+        }
+    };
+}
+function parseJsonOutputValue(key, value) {
+    if (typeof value !== 'string') return {
+        ok: true,
+        value
+    };
+    try {
+        return {
+            ok: true,
+            value: JSON.parse(value)
+        };
+    } catch  {
+        if (looksLikeJsonContainer(value)) {
+            return {
+                ok: false,
+                error: {
+                    key,
+                    reason: 'invalid_json',
+                    expectedType: 'json',
+                    message: `Output "${key}" must be valid JSON.`
+                }
+            };
+        }
+        return {
+            ok: true,
+            value
+        };
+    }
+}
+function invalidTypeError(key, expectedType, detail) {
+    return {
+        ok: false,
+        error: {
+            key,
+            reason: 'invalid_type',
+            expectedType,
+            message: `Output "${key}" ${detail}.`
+        }
+    };
+}
+function validatorForJsonOutputSchema(schema) {
+    const key = stableJsonStringify(schema);
+    const cached = jsonOutputValidatorCache.get(key);
+    if (cached !== undefined) return cached;
+    const validate = coercingAjv.compile({
+        type: 'object',
+        properties: {
+            value: schema
+        },
+        required: [
+            'value'
+        ],
+        additionalProperties: false
+    });
+    jsonOutputValidatorCache.set(key, validate);
+    return validate;
+}
+function closedObjectJsonSchemaToExpressionType(schema) {
+    const properties = schema.properties;
+    const required = schema.required;
+    // CEL object fields are required when statically typed. Optional JSON Schema
+    // fields would make valid runtime values fail type-checking, so keep those
+    // schemas opaque.
+    if (schema.additionalProperties !== false || !isPlainRecord(properties) || !Array.isArray(required) || !required.every((field)=>typeof field === 'string') || Object.keys(properties).some((field)=>!required.includes(field))) {
+        return fallbackJsonType;
+    }
+    return {
+        kind: 'object',
+        fields: Object.fromEntries(Object.entries(properties).map(([field, fieldSchema])=>[
+                field,
+                jsonSchemaToExpressionType(fieldSchema)
+            ]))
+    };
+}
+function hasUnsupportedCombinator(schema) {
+    return schema.oneOf !== undefined || schema.anyOf !== undefined || schema.allOf !== undefined || schema.not !== undefined || schema.enum !== undefined || schema.const !== undefined || schema.patternProperties !== undefined || schema.nullable === true;
+}
+function isPlainRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function cloneJsonValue(value) {
+    if (value === undefined) return undefined;
+    const serialized = JSON.stringify(value);
+    if (serialized === undefined) return value;
+    return JSON.parse(serialized);
+}
+function stableJsonStringify(value) {
+    return JSON.stringify(canonicalJson(value));
+}
+function canonicalJson(value) {
+    if (Array.isArray(value)) return value.map(canonicalJson);
+    if (!isPlainRecord(value)) return value;
+    return Object.fromEntries(Object.keys(value).sort().map((key)=>[
+            key,
+            canonicalJson(value[key])
+        ]));
+}
+function looksLikeJsonContainer(value) {
+    const trimmed = value.trimStart();
+    return trimmed.startsWith('{') || trimmed.startsWith('[');
+}
+
+//# sourceMappingURL=output-declarations.js.map

package/dist/outputs/output-declarations.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/outputs/output-declarations.ts"],"sourcesContent":["import {\n  type WorkflowDocumentStepOutputType,\n  workflowDocumentStepOutputTypes,\n} from '@shipfox/workflow-document';\nimport {Ajv, type AnySchema, type ValidateFunction} from 'ajv';\nimport type {ExpressionType} from '../expression/workflow-expression.js';\n\nexport type OutputType = WorkflowDocumentStepOutputType;\n\nexport interface OutputTypeDeclaration {\n  readonly type: OutputType;\n  readonly schema?: unknown;\n}\n\nexport type OutputDeclarations = Readonly<Record<string, OutputTypeDeclaration>>;\n\nexport type JsonSchemaValidationResult =\n  | {readonly ok: true}\n  | {readonly ok: false; readonly reason: string};\n\nexport type StepOutputCoercionErrorReason =\n  | 'missing'\n  | 'undeclared'\n  | 'invalid_type'\n  | 'invalid_json'\n  | 'schema_invalid';\n\nexport interface StepOutputCoercionError {\n  readonly key: string;\n  readonly reason: StepOutputCoercionErrorReason;\n  readonly expectedType?: OutputType;\n  readonly message: string;\n  readonly schemaError?: string;\n}\n\nexport type CoerceStepOutputsResult =\n  | {readonly ok: true; readonly output: Record<string, unknown>}\n  | {readonly ok: false; readonly error: StepOutputCoercionError};\n\nconst ajv = new Ajv({strict: false});\nconst coercingAjv = new Ajv({\n  strict: false,\n  coerceTypes: true,\n  allErrors: true,\n  addUsedSchema: false,\n});\nconst jsonOutputValidatorCache = new Map<string, ValidateFunction>();\nconst fallbackJsonType = {kind: 'map'} as const satisfies ExpressionType;\n\nexport {workflowDocumentStepOutputTypes as outputTypes};\n\nexport function outputDeclarationToExpressionType(\n  declaration: OutputTypeDeclaration,\n): ExpressionType {\n  switch (declaration.type) {\n    case 'string':\n      return 'string';\n    case 'number':\n      return 'double';\n    case 'boolean':\n      return 'bool';\n    case 'json':\n      return declaration.schema === undefined\n        ? fallbackJsonType\n        : jsonSchemaToExpressionType(declaration.schema);\n  }\n}\n\nexport function outputDeclarationsToExpressionFields(\n  declarations: OutputDeclarations,\n): Readonly<Record<string, ExpressionType>> {\n  return Object.fromEntries(\n    Object.entries(declarations).map(([key, declaration]) => [\n      key,\n      outputDeclarationToExpressionType(declaration),\n    ]),\n  );\n}\n\nexport function jsonSchemaToExpressionType(schema: unknown): ExpressionType {\n  if (!isPlainRecord(schema)) return fallbackJsonType;\n  if (hasUnsupportedCombinator(schema)) return fallbackJsonType;\n\n  const type = schema.type;\n  if (Array.isArray(type)) return fallbackJsonType;\n\n  switch (type) {\n    case 'string':\n      return 'string';\n    case 'number':\n      return 'double';\n    case 'integer':\n      return 'int';\n    case 'boolean':\n      return 'bool';\n    case 'null':\n      return 'null';\n    case 'array':\n      return {\n        kind: 'list',\n        element: jsonSchemaToExpressionType(schema.items),\n      };\n    case 'object':\n      return closedObjectJsonSchemaToExpressionType(schema);\n    default:\n      return fallbackJsonType;\n  }\n}\n\nexport function validateJsonSchema(schema: unknown): JsonSchemaValidationResult {\n  const valid = ajv.validateSchema(schema as AnySchema);\n  if (valid) return {ok: true};\n\n  return {\n    ok: false,\n    reason: ajv.errorsText(ajv.errors, {separator: '; '}),\n  };\n}\n\nexport function coerceStepOutputs(params: {\n  readonly declarations: OutputDeclarations;\n  readonly output: Record<string, unknown> | null | undefined;\n}): CoerceStepOutputsResult {\n  const declaredKeys = Object.keys(params.declarations);\n  const output = params.output ?? {};\n\n  for (const key of declaredKeys) {\n    if (Object.hasOwn(output, key)) continue;\n    const declaration = params.declarations[key];\n    return {\n      ok: false,\n      error: {\n        key,\n        reason: 'missing',\n        ...(declaration === undefined ? {} : {expectedType: declaration.type}),\n        message: `Output \"${key}\" is required by the step output declaration.`,\n      },\n    };\n  }\n\n  for (const key of Object.keys(output)) {\n    if (Object.hasOwn(params.declarations, key)) continue;\n    return {\n      ok: false,\n      error: {\n        key,\n        reason: 'undeclared',\n        message: `Output \"${key}\" is not declared by the step output schema.`,\n      },\n    };\n  }\n\n  const coerced: Record<string, unknown> = {};\n  for (const [key, declaration] of Object.entries(params.declarations)) {\n    const value = output[key];\n    const result = coerceStepOutputValue(key, declaration, value);\n    if (!result.ok) return result;\n    coerced[key] = result.value;\n  }\n\n  return {ok: true, output: coerced};\n}\n\ntype CoerceStepOutputValueResult =\n  | {readonly ok: true; readonly value: unknown}\n  | {readonly ok: false; readonly error: StepOutputCoercionError};\n\nfunction coerceStepOutputValue(\n  key: string,\n  declaration: OutputTypeDeclaration,\n  value: unknown,\n): CoerceStepOutputValueResult {\n  switch (declaration.type) {\n    case 'string':\n      return coerceStringOutput(key, value);\n    case 'number':\n      return coerceNumberOutput(key, value);\n    case 'boolean':\n      return coerceBooleanOutput(key, value);\n    case 'json':\n      return coerceJsonOutput(key, declaration, value);\n  }\n}\n\nfunction coerceStringOutput(key: string, value: unknown): CoerceStepOutputValueResult {\n  if (typeof value === 'string') return {ok: true, value};\n  return invalidTypeError(key, 'string', 'must be a string');\n}\n\nfunction coerceNumberOutput(key: string, value: unknown): CoerceStepOutputValueResult {\n  if (typeof value === 'number' && Number.isFinite(value)) return {ok: true, value};\n\n  if (typeof value === 'string') {\n    const trimmed = value.trim();\n    if (trimmed !== '') {\n      const number = Number(trimmed);\n      if (Number.isFinite(number)) return {ok: true, value: number};\n    }\n  }\n\n  return invalidTypeError(key, 'number', 'must be a finite number or numeric string');\n}\n\nfunction coerceBooleanOutput(key: string, value: unknown): CoerceStepOutputValueResult {\n  if (typeof value === 'boolean') return {ok: true, value};\n  if (value === 'true') return {ok: true, value: true};\n  if (value === 'false') return {ok: true, value: false};\n  return invalidTypeError(key, 'boolean', 'must be a boolean or the string \"true\" or \"false\"');\n}\n\nfunction coerceJsonOutput(\n  key: string,\n  declaration: OutputTypeDeclaration,\n  value: unknown,\n): CoerceStepOutputValueResult {\n  const parsed = parseJsonOutputValue(key, value);\n  if (!parsed.ok) return parsed;\n\n  if (declaration.schema === undefined) return {ok: true, value: parsed.value};\n\n  const data = {value: cloneJsonValue(parsed.value)};\n  const validate = validatorForJsonOutputSchema(declaration.schema);\n  if (validate(data)) return {ok: true, value: data.value};\n\n  return {\n    ok: false,\n    error: {\n      key,\n      reason: 'schema_invalid',\n      expectedType: 'json',\n      message: `Output \"${key}\" does not match its JSON Schema.`,\n      schemaError: coercingAjv.errorsText(validate.errors, {separator: '; '}),\n    },\n  };\n}\n\nfunction parseJsonOutputValue(key: string, value: unknown): CoerceStepOutputValueResult {\n  if (typeof value !== 'string') return {ok: true, value};\n\n  try {\n    return {ok: true, value: JSON.parse(value) as unknown};\n  } catch {\n    if (looksLikeJsonContainer(value)) {\n      return {\n        ok: false,\n        error: {\n          key,\n          reason: 'invalid_json',\n          expectedType: 'json',\n          message: `Output \"${key}\" must be valid JSON.`,\n        },\n      };\n    }\n    return {ok: true, value};\n  }\n}\n\nfunction invalidTypeError(\n  key: string,\n  expectedType: OutputType,\n  detail: string,\n): CoerceStepOutputValueResult {\n  return {\n    ok: false,\n    error: {\n      key,\n      reason: 'invalid_type',\n      expectedType,\n      message: `Output \"${key}\" ${detail}.`,\n    },\n  };\n}\n\nfunction validatorForJsonOutputSchema(schema: unknown): ValidateFunction {\n  const key = stableJsonStringify(schema);\n  const cached = jsonOutputValidatorCache.get(key);\n  if (cached !== undefined) return cached;\n\n  const validate = coercingAjv.compile({\n    type: 'object',\n    properties: {value: schema},\n    required: ['value'],\n    additionalProperties: false,\n  });\n  jsonOutputValidatorCache.set(key, validate);\n  return validate;\n}\n\nfunction closedObjectJsonSchemaToExpressionType(\n  schema: Readonly<Record<string, unknown>>,\n): ExpressionType {\n  const properties = schema.properties;\n  const required = schema.required;\n  // CEL object fields are required when statically typed. Optional JSON Schema\n  // fields would make valid runtime values fail type-checking, so keep those\n  // schemas opaque.\n  if (\n    schema.additionalProperties !== false ||\n    !isPlainRecord(properties) ||\n    !Array.isArray(required) ||\n    !required.every((field) => typeof field === 'string') ||\n    Object.keys(properties).some((field) => !required.includes(field))\n  ) {\n    return fallbackJsonType;\n  }\n\n  return {\n    kind: 'object',\n    fields: Object.fromEntries(\n      Object.entries(properties).map(([field, fieldSchema]) => [\n        field,\n        jsonSchemaToExpressionType(fieldSchema),\n      ]),\n    ),\n  };\n}\n\nfunction hasUnsupportedCombinator(schema: Readonly<Record<string, unknown>>): boolean {\n  return (\n    schema.oneOf !== undefined ||\n    schema.anyOf !== undefined ||\n    schema.allOf !== undefined ||\n    schema.not !== undefined ||\n    schema.enum !== undefined ||\n    schema.const !== undefined ||\n    schema.patternProperties !== undefined ||\n    schema.nullable === true\n  );\n}\n\nfunction isPlainRecord(value: unknown): value is Readonly<Record<string, unknown>> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\nfunction cloneJsonValue(value: unknown): unknown {\n  if (value === undefined) return undefined;\n  const serialized = JSON.stringify(value);\n  if (serialized === undefined) return value;\n  return JSON.parse(serialized) as unknown;\n}\n\nfunction stableJsonStringify(value: unknown): string {\n  return JSON.stringify(canonicalJson(value));\n}\n\nfunction canonicalJson(value: unknown): unknown {\n  if (Array.isArray(value)) return value.map(canonicalJson);\n  if (!isPlainRecord(value)) return value;\n\n  return Object.fromEntries(\n    Object.keys(value)\n      .sort()\n      .map((key) => [key, canonicalJson(value[key])]),\n  );\n}\n\nfunction looksLikeJsonContainer(value: string): boolean {\n  const trimmed = value.trimStart();\n  return trimmed.startsWith('{') || trimmed.startsWith('[');\n}\n"],"names":["workflowDocumentStepOutputTypes","Ajv","ajv","strict","coercingAjv","coerceTypes","allErrors","addUsedSchema","jsonOutputValidatorCache","Map","fallbackJsonType","kind","outputTypes","outputDeclarationToExpressionType","declaration","type","schema","undefined","jsonSchemaToExpressionType","outputDeclarationsToExpressionFields","declarations","Object","fromEntries","entries","map","key","isPlainRecord","hasUnsupportedCombinator","Array","isArray","element","items","closedObjectJsonSchemaToExpressionType","validateJsonSchema","valid","validateSchema","ok","reason","errorsText","errors","separator","coerceStepOutputs","params","declaredKeys","keys","output","hasOwn","error","expectedType","message","coerced","value","result","coerceStepOutputValue","coerceStringOutput","coerceNumberOutput","coerceBooleanOutput","coerceJsonOutput","invalidTypeError","Number","isFinite","trimmed","trim","number","parsed","parseJsonOutputValue","data","cloneJsonValue","validate","validatorForJsonOutputSchema","schemaError","JSON","parse","looksLikeJsonContainer","detail","stableJsonStringify","cached","get","compile","properties","required","additionalProperties","set","every","field","some","includes","fields","fieldSchema","oneOf","anyOf","allOf","not","enum","const","patternProperties","nullable","serialized","stringify","canonicalJson","sort","trimStart","startsWith"],"mappings":"AAAA,SAEEA,+BAA+B,QAC1B,6BAA6B;AACpC,SAAQC,GAAG,QAA8C,MAAM;AAmC/D,MAAMC,MAAM,IAAID,IAAI;IAACE,QAAQ;AAAK;AAClC,MAAMC,cAAc,IAAIH,IAAI;IAC1BE,QAAQ;IACRE,aAAa;IACbC,WAAW;IACXC,eAAe;AACjB;AACA,MAAMC,2BAA2B,IAAIC;AACrC,MAAMC,mBAAmB;IAACC,MAAM;AAAK;AAErC,SAAQX,mCAAmCY,WAAW,GAAE;AAExD,OAAO,SAASC,kCACdC,WAAkC;IAElC,OAAQA,YAAYC,IAAI;QACtB,KAAK;YACH,OAAO;QACT,KAAK;YACH,OAAO;QACT,KAAK;YACH,OAAO;QACT,KAAK;YACH,OAAOD,YAAYE,MAAM,KAAKC,YAC1BP,mBACAQ,2BAA2BJ,YAAYE,MAAM;IACrD;AACF;AAEA,OAAO,SAASG,qCACdC,YAAgC;IAEhC,OAAOC,OAAOC,WAAW,CACvBD,OAAOE,OAAO,CAACH,cAAcI,GAAG,CAAC,CAAC,CAACC,KAAKX,YAAY,GAAK;YACvDW;YACAZ,kCAAkCC;SACnC;AAEL;AAEA,OAAO,SAASI,2BAA2BF,MAAe;IACxD,IAAI,CAACU,cAAcV,SAAS,OAAON;IACnC,IAAIiB,yBAAyBX,SAAS,OAAON;IAE7C,MAAMK,OAAOC,OAAOD,IAAI;IACxB,IAAIa,MAAMC,OAAO,CAACd,OAAO,OAAOL;IAEhC,OAAQK;QACN,KAAK;YACH,OAAO;QACT,KAAK;YACH,OAAO;QACT,KAAK;YACH,OAAO;QACT,KAAK;YACH,OAAO;QACT,KAAK;YACH,OAAO;QACT,KAAK;YACH,OAAO;gBACLJ,MAAM;gBACNmB,SAASZ,2BAA2BF,OAAOe,KAAK;YAClD;QACF,KAAK;YACH,OAAOC,uCAAuChB;QAChD;YACE,OAAON;IACX;AACF;AAEA,OAAO,SAASuB,mBAAmBjB,MAAe;IAChD,MAAMkB,QAAQhC,IAAIiC,cAAc,CAACnB;IACjC,IAAIkB,OAAO,OAAO;QAACE,IAAI;IAAI;IAE3B,OAAO;QACLA,IAAI;QACJC,QAAQnC,IAAIoC,UAAU,CAACpC,IAAIqC,MAAM,EAAE;YAACC,WAAW;QAAI;IACrD;AACF;AAEA,OAAO,SAASC,kBAAkBC,MAGjC;IACC,MAAMC,eAAetB,OAAOuB,IAAI,CAACF,OAAOtB,YAAY;IACpD,MAAMyB,SAASH,OAAOG,MAAM,IAAI,CAAC;IAEjC,KAAK,MAAMpB,OAAOkB,aAAc;QAC9B,IAAItB,OAAOyB,MAAM,CAACD,QAAQpB,MAAM;QAChC,MAAMX,cAAc4B,OAAOtB,YAAY,CAACK,IAAI;QAC5C,OAAO;YACLW,IAAI;YACJW,OAAO;gBACLtB;gBACAY,QAAQ;gBACR,GAAIvB,gBAAgBG,YAAY,CAAC,IAAI;oBAAC+B,cAAclC,YAAYC,IAAI;gBAAA,CAAC;gBACrEkC,SAAS,CAAC,QAAQ,EAAExB,IAAI,6CAA6C,CAAC;YACxE;QACF;IACF;IAEA,KAAK,MAAMA,OAAOJ,OAAOuB,IAAI,CAACC,QAAS;QACrC,IAAIxB,OAAOyB,MAAM,CAACJ,OAAOtB,YAAY,EAAEK,MAAM;QAC7C,OAAO;YACLW,IAAI;YACJW,OAAO;gBACLtB;gBACAY,QAAQ;gBACRY,SAAS,CAAC,QAAQ,EAAExB,IAAI,4CAA4C,CAAC;YACvE;QACF;IACF;IAEA,MAAMyB,UAAmC,CAAC;IAC1C,KAAK,MAAM,CAACzB,KAAKX,YAAY,IAAIO,OAAOE,OAAO,CAACmB,OAAOtB,YAAY,EAAG;QACpE,MAAM+B,QAAQN,MAAM,CAACpB,IAAI;QACzB,MAAM2B,SAASC,sBAAsB5B,KAAKX,aAAaqC;QACvD,IAAI,CAACC,OAAOhB,EAAE,EAAE,OAAOgB;QACvBF,OAAO,CAACzB,IAAI,GAAG2B,OAAOD,KAAK;IAC7B;IAEA,OAAO;QAACf,IAAI;QAAMS,QAAQK;IAAO;AACnC;AAMA,SAASG,sBACP5B,GAAW,EACXX,WAAkC,EAClCqC,KAAc;IAEd,OAAQrC,YAAYC,IAAI;QACtB,KAAK;YACH,OAAOuC,mBAAmB7B,KAAK0B;QACjC,KAAK;YACH,OAAOI,mBAAmB9B,KAAK0B;QACjC,KAAK;YACH,OAAOK,oBAAoB/B,KAAK0B;QAClC,KAAK;YACH,OAAOM,iBAAiBhC,KAAKX,aAAaqC;IAC9C;AACF;AAEA,SAASG,mBAAmB7B,GAAW,EAAE0B,KAAc;IACrD,IAAI,OAAOA,UAAU,UAAU,OAAO;QAACf,IAAI;QAAMe;IAAK;IACtD,OAAOO,iBAAiBjC,KAAK,UAAU;AACzC;AAEA,SAAS8B,mBAAmB9B,GAAW,EAAE0B,KAAc;IACrD,IAAI,OAAOA,UAAU,YAAYQ,OAAOC,QAAQ,CAACT,QAAQ,OAAO;QAACf,IAAI;QAAMe;IAAK;IAEhF,IAAI,OAAOA,UAAU,UAAU;QAC7B,MAAMU,UAAUV,MAAMW,IAAI;QAC1B,IAAID,YAAY,IAAI;YAClB,MAAME,SAASJ,OAAOE;YACtB,IAAIF,OAAOC,QAAQ,CAACG,SAAS,OAAO;gBAAC3B,IAAI;gBAAMe,OAAOY;YAAM;QAC9D;IACF;IAEA,OAAOL,iBAAiBjC,KAAK,UAAU;AACzC;AAEA,SAAS+B,oBAAoB/B,GAAW,EAAE0B,KAAc;IACtD,IAAI,OAAOA,UAAU,WAAW,OAAO;QAACf,IAAI;QAAMe;IAAK;IACvD,IAAIA,UAAU,QAAQ,OAAO;QAACf,IAAI;QAAMe,OAAO;IAAI;IACnD,IAAIA,UAAU,SAAS,OAAO;QAACf,IAAI;QAAMe,OAAO;IAAK;IACrD,OAAOO,iBAAiBjC,KAAK,WAAW;AAC1C;AAEA,SAASgC,iBACPhC,GAAW,EACXX,WAAkC,EAClCqC,KAAc;IAEd,MAAMa,SAASC,qBAAqBxC,KAAK0B;IACzC,IAAI,CAACa,OAAO5B,EAAE,EAAE,OAAO4B;IAEvB,IAAIlD,YAAYE,MAAM,KAAKC,WAAW,OAAO;QAACmB,IAAI;QAAMe,OAAOa,OAAOb,KAAK;IAAA;IAE3E,MAAMe,OAAO;QAACf,OAAOgB,eAAeH,OAAOb,KAAK;IAAC;IACjD,MAAMiB,WAAWC,6BAA6BvD,YAAYE,MAAM;IAChE,IAAIoD,SAASF,OAAO,OAAO;QAAC9B,IAAI;QAAMe,OAAOe,KAAKf,KAAK;IAAA;IAEvD,OAAO;QACLf,IAAI;QACJW,OAAO;YACLtB;YACAY,QAAQ;YACRW,cAAc;YACdC,SAAS,CAAC,QAAQ,EAAExB,IAAI,iCAAiC,CAAC;YAC1D6C,aAAalE,YAAYkC,UAAU,CAAC8B,SAAS7B,MAAM,EAAE;gBAACC,WAAW;YAAI;QACvE;IACF;AACF;AAEA,SAASyB,qBAAqBxC,GAAW,EAAE0B,KAAc;IACvD,IAAI,OAAOA,UAAU,UAAU,OAAO;QAACf,IAAI;QAAMe;IAAK;IAEtD,IAAI;QACF,OAAO;YAACf,IAAI;YAAMe,OAAOoB,KAAKC,KAAK,CAACrB;QAAiB;IACvD,EAAE,OAAM;QACN,IAAIsB,uBAAuBtB,QAAQ;YACjC,OAAO;gBACLf,IAAI;gBACJW,OAAO;oBACLtB;oBACAY,QAAQ;oBACRW,cAAc;oBACdC,SAAS,CAAC,QAAQ,EAAExB,IAAI,qBAAqB,CAAC;gBAChD;YACF;QACF;QACA,OAAO;YAACW,IAAI;YAAMe;QAAK;IACzB;AACF;AAEA,SAASO,iBACPjC,GAAW,EACXuB,YAAwB,EACxB0B,MAAc;IAEd,OAAO;QACLtC,IAAI;QACJW,OAAO;YACLtB;YACAY,QAAQ;YACRW;YACAC,SAAS,CAAC,QAAQ,EAAExB,IAAI,EAAE,EAAEiD,OAAO,CAAC,CAAC;QACvC;IACF;AACF;AAEA,SAASL,6BAA6BrD,MAAe;IACnD,MAAMS,MAAMkD,oBAAoB3D;IAChC,MAAM4D,SAASpE,yBAAyBqE,GAAG,CAACpD;IAC5C,IAAImD,WAAW3D,WAAW,OAAO2D;IAEjC,MAAMR,WAAWhE,YAAY0E,OAAO,CAAC;QACnC/D,MAAM;QACNgE,YAAY;YAAC5B,OAAOnC;QAAM;QAC1BgE,UAAU;YAAC;SAAQ;QACnBC,sBAAsB;IACxB;IACAzE,yBAAyB0E,GAAG,CAACzD,KAAK2C;IAClC,OAAOA;AACT;AAEA,SAASpC,uCACPhB,MAAyC;IAEzC,MAAM+D,aAAa/D,OAAO+D,UAAU;IACpC,MAAMC,WAAWhE,OAAOgE,QAAQ;IAChC,6EAA6E;IAC7E,2EAA2E;IAC3E,kBAAkB;IAClB,IACEhE,OAAOiE,oBAAoB,KAAK,SAChC,CAACvD,cAAcqD,eACf,CAACnD,MAAMC,OAAO,CAACmD,aACf,CAACA,SAASG,KAAK,CAAC,CAACC,QAAU,OAAOA,UAAU,aAC5C/D,OAAOuB,IAAI,CAACmC,YAAYM,IAAI,CAAC,CAACD,QAAU,CAACJ,SAASM,QAAQ,CAACF,SAC3D;QACA,OAAO1E;IACT;IAEA,OAAO;QACLC,MAAM;QACN4E,QAAQlE,OAAOC,WAAW,CACxBD,OAAOE,OAAO,CAACwD,YAAYvD,GAAG,CAAC,CAAC,CAAC4D,OAAOI,YAAY,GAAK;gBACvDJ;gBACAlE,2BAA2BsE;aAC5B;IAEL;AACF;AAEA,SAAS7D,yBAAyBX,MAAyC;IACzE,OACEA,OAAOyE,KAAK,KAAKxE,aACjBD,OAAO0E,KAAK,KAAKzE,aACjBD,OAAO2E,KAAK,KAAK1E,aACjBD,OAAO4E,GAAG,KAAK3E,aACfD,OAAO6E,IAAI,KAAK5E,aAChBD,OAAO8E,KAAK,KAAK7E,aACjBD,OAAO+E,iBAAiB,KAAK9E,aAC7BD,OAAOgF,QAAQ,KAAK;AAExB;AAEA,SAAStE,cAAcyB,KAAc;IACnC,OAAO,OAAOA,UAAU,YAAYA,UAAU,QAAQ,CAACvB,MAAMC,OAAO,CAACsB;AACvE;AAEA,SAASgB,eAAehB,KAAc;IACpC,IAAIA,UAAUlC,WAAW,OAAOA;IAChC,MAAMgF,aAAa1B,KAAK2B,SAAS,CAAC/C;IAClC,IAAI8C,eAAehF,WAAW,OAAOkC;IACrC,OAAOoB,KAAKC,KAAK,CAACyB;AACpB;AAEA,SAAStB,oBAAoBxB,KAAc;IACzC,OAAOoB,KAAK2B,SAAS,CAACC,cAAchD;AACtC;AAEA,SAASgD,cAAchD,KAAc;IACnC,IAAIvB,MAAMC,OAAO,CAACsB,QAAQ,OAAOA,MAAM3B,GAAG,CAAC2E;IAC3C,IAAI,CAACzE,cAAcyB,QAAQ,OAAOA;IAElC,OAAO9B,OAAOC,WAAW,CACvBD,OAAOuB,IAAI,CAACO,OACTiD,IAAI,GACJ5E,GAAG,CAAC,CAACC,MAAQ;YAACA;YAAK0E,cAAchD,KAAK,CAAC1B,IAAI;SAAE;AAEpD;AAEA,SAASgD,uBAAuBtB,KAAa;IAC3C,MAAMU,UAAUV,MAAMkD,SAAS;IAC/B,OAAOxC,QAAQyC,UAAU,CAAC,QAAQzC,QAAQyC,UAAU,CAAC;AACvD"}

package/dist/plan/bare-reference.d.ts

@@ -0,0 +1,2 @@
+export declare function isBareContextReference(source: string): boolean;
+//# sourceMappingURL=bare-reference.d.ts.map

package/dist/plan/bare-reference.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bare-reference.d.ts","sourceRoot":"","sources":["../../src/plan/bare-reference.ts"],"names":[],"mappings":"AAEA,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAM9D"}

package/dist/plan/bare-reference.js

@@ -0,0 +1,23 @@
+import { parse as parseCel } from '@marcbachmann/cel-js';
+export function isBareContextReference(source) {
+    try {
+        return bareMemberAccessDepth(parseCel(source).ast) > 0;
+    } catch  {
+        return false;
+    }
+}
+function bareMemberAccessDepth(node) {
+    switch(node.op){
+        case 'id':
+            return 0;
+        case '.':
+            {
+                const targetDepth = bareMemberAccessDepth(node.args[0]);
+                return targetDepth >= 0 ? targetDepth + 1 : -1;
+            }
+        default:
+            return -1;
+    }
+}
+
+//# sourceMappingURL=bare-reference.js.map

package/dist/plan/bare-reference.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/plan/bare-reference.ts"],"sourcesContent":["import {type ASTNode, parse as parseCel} from '@marcbachmann/cel-js';\n\nexport function isBareContextReference(source: string): boolean {\n  try {\n    return bareMemberAccessDepth(parseCel(source).ast) > 0;\n  } catch {\n    return false;\n  }\n}\n\nfunction bareMemberAccessDepth(node: ASTNode): number {\n  switch (node.op) {\n    case 'id':\n      return 0;\n    case '.': {\n      const targetDepth = bareMemberAccessDepth(node.args[0]);\n      return targetDepth >= 0 ? targetDepth + 1 : -1;\n    }\n    default:\n      return -1;\n  }\n}\n"],"names":["parse","parseCel","isBareContextReference","source","bareMemberAccessDepth","ast","node","op","targetDepth","args"],"mappings":"AAAA,SAAsBA,SAASC,QAAQ,QAAO,uBAAuB;AAErE,OAAO,SAASC,uBAAuBC,MAAc;IACnD,IAAI;QACF,OAAOC,sBAAsBH,SAASE,QAAQE,GAAG,IAAI;IACvD,EAAE,OAAM;QACN,OAAO;IACT;AACF;AAEA,SAASD,sBAAsBE,IAAa;IAC1C,OAAQA,KAAKC,EAAE;QACb,KAAK;YACH,OAAO;QACT,KAAK;YAAK;gBACR,MAAMC,cAAcJ,sBAAsBE,KAAKG,IAAI,CAAC,EAAE;gBACtD,OAAOD,eAAe,IAAIA,cAAc,IAAI,CAAC;YAC/C;QACA;YACE,OAAO,CAAC;IACZ;AACF"}

package/dist/plan/context-key-access.d.ts

@@ -0,0 +1,25 @@
+import type { WorkflowExpression } from '../expression/workflow-expression.js';
+export interface ContextKeyAccessReference {
+    readonly root: 'vars' | 'secrets';
+    readonly store?: string;
+    readonly key: string;
+}
+export interface ContextKeyAccessViolation {
+    readonly root: string;
+    readonly source: string;
+}
+export interface ContextKeyAccessAnalysis {
+    readonly references: readonly ContextKeyAccessReference[];
+    readonly violations: readonly ContextKeyAccessViolation[];
+}
+export interface ContextRootKeyAccessReference {
+    readonly root: string;
+    readonly key: string;
+}
+export interface ContextRootKeyAccessAnalysis {
+    readonly references: readonly ContextRootKeyAccessReference[];
+    readonly violations: readonly ContextKeyAccessViolation[];
+}
+export declare function analyzeContextKeyAccess(expression: WorkflowExpression | string): ContextKeyAccessAnalysis;
+export declare function analyzeContextRootKeyAccess(expression: WorkflowExpression | string, roots: readonly string[]): ContextRootKeyAccessAnalysis;
+//# sourceMappingURL=context-key-access.d.ts.map

package/dist/plan/context-key-access.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context-key-access.d.ts","sourceRoot":"","sources":["../../src/plan/context-key-access.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAC,kBAAkB,EAAC,MAAM,sCAAsC,CAAC;AAoB7E,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,UAAU,EAAE,SAAS,yBAAyB,EAAE,CAAC;IAC1D,QAAQ,CAAC,UAAU,EAAE,SAAS,yBAAyB,EAAE,CAAC;CAC3D;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,UAAU,EAAE,SAAS,6BAA6B,EAAE,CAAC;IAC9D,QAAQ,CAAC,UAAU,EAAE,SAAS,yBAAyB,EAAE,CAAC;CAC3D;AAaD,wBAAgB,uBAAuB,CACrC,UAAU,EAAE,kBAAkB,GAAG,MAAM,GACtC,wBAAwB,CAY1B;AAED,wBAAgB,2BAA2B,CACzC,UAAU,EAAE,kBAAkB,GAAG,MAAM,EACvC,KAAK,EAAE,SAAS,MAAM,EAAE,GACvB,4BAA4B,CAa9B"}