@texuli/spec 0.6.0 → 0.8.0

package/README.md

@@ -14,9 +14,23 @@ by Texuli's Kotlin Multiplatform twin. The package is framework-free: no
 DOM, no Svelte, no Node APIs and no runtime dependencies.
 
 > **Status: 0.x release.** Texuli is in development. The packages are
-> published to npm as `0.6.0`, a pre-1.0 release (1.0.0 will be the first
-> stable release). Under 0.x, a new minor (`0.7.0`) may contain breaking
-> changes, so pin the exact version or use `^0.6.0`, which accepts only 0.6.x.
+> published to npm as `0.8.0`, a pre-1.0 release (1.0.0 will be the first
+> stable release). Under 0.x, a new minor (`0.9.0`) may contain breaking
+> changes, so pin the exact version or use `^0.8.0`, which accepts only 0.8.x.
+
+> **New in `0.8.0`.** `@texuli/spec@0.8.0` carries **spec 0.8.0**, which adds
+> data-source bindings (the `@texuli/spec/source` subpath), the
+> agent-emittable `schema-form`, `canvas`, `spreadsheet`, `data-dashboard`
+> and `data-dashboard-widget` ids with their closed shapes, the closed
+> expression AST, and the pinned `schemas/canvas.schema.json`. Every
+> `0.7.0` envelope migrates by stamping `spec`.
+
+> **New in `0.7.0`.** `@texuli/spec@0.7.0` carries **spec 0.7.0**, which adds
+> an optional node `key` (unique in the tree), the agent-emittable
+> `document` id with its `$defs.document` shape, the `patchDocument` edit
+> op with a bounded RFC 6902 patch, and the pinned
+> `schemas/document.schema.json`. Every `0.6.0` envelope migrates by
+> stamping `spec`.
 
 > **New in `0.6.0`.** `@texuli/spec@0.6.0` carries **spec 0.6.0**: the
 > closed motion vocabulary (`@texuli/spec/motion`, below), and the new
@@ -61,7 +75,7 @@ import {
   validateInstance,
 } from '@texuli/spec';
 
-SPEC_VERSION;                         // the spec version: '0.6.0' in @texuli/spec@0.6.0
+SPEC_VERSION;                         // the spec version: '0.8.0' in @texuli/spec@0.8.0
 SPEC_COMPONENT_IDS.includes('alert'); // true: the closed component vocabulary
 
 // The dialect validator: a closed subset of JSON Schema 2020-12.
@@ -93,7 +107,7 @@ import { type Schema, type SpecCatalog, validateBlueprint } from '@texuli/spec';
 import { migrateBlueprint } from '@texuli/spec/migrate';
 import { validateWorkflowGraph } from '@texuli/spec/workflow';
 
-const migrated = migrateBlueprint(blueprint); // 0.2.0 → … → 0.5.0 → 0.6.0; never throws
+const migrated = migrateBlueprint(blueprint); // 0.2.0 → … → 0.7.0 → 0.8.0; never throws
 const result = validateBlueprint(migrated.blueprint, {
   blueprintSchema: blueprintSchemaJson as Schema,
   catalog: componentsJson as SpecCatalog,
@@ -114,7 +128,11 @@ refused state or flow declaration), `unknown-state` (a binding or action
 names no declared variable), `binding` (a malformed, misplaced, read-only or
 ill-fitting binding), `action` (an action with the wrong fields or target),
 `unknown-event` (an `on` key the component does not fire) and `workflow` (a
-workflow graph rule). Deprecated components and props add a `deprecated`
+workflow graph rule), from spec 0.7.0, `duplicate-key` (a node key used
+twice in the tree), and, from spec 0.8.0, `source` (a malformed, misplaced or
+ill-fitting data-source binding, or any binding when the host passes no
+`sources`) and `unknown-source` (a source the host never registered).
+Deprecated components and props add a `deprecated`
 warning without failing.
 
 ## What's inside
@@ -127,6 +145,7 @@ warning without failing.
 | `@texuli/spec/surface` | Runtime: the state surface rules every validator shares (no imports) | `checkStateSurface`, `surfaceInputs`, `SPEC_CONTROL_STATE_TYPES`, `SURFACE_PLAYER_CODES`, `LIST_TEXT_PATTERN` |
 | `@texuli/spec/motion` | Runtime (new in `0.6.0`, spec `0.6.0`): the closed motion vocabulary and its check, shared by the catalog and the player ([motion.md](https://github.com/DailybotHQ/texuli/blob/main/packages/spec/docs/motion.md)) | `SPEC_MOTION_PRESETS`, `SPEC_MOTION_DURATIONS`, `SPEC_MOTION_STAGGERS`, `SPEC_MOTION_LEVELS`, `checkNodeMotion`, `checkEnvelopeMotion` |
 | `@texuli/spec/stream` | Runtime, opt-in (new in `0.6.0`): streamed blueprints ([stream.md](https://github.com/DailybotHQ/texuli/blob/main/packages/spec/docs/stream.md)) | `createJsonTokenizer`, `createBlueprintAssembler`, `createBlueprintStream`, `STREAM_NODE_ORDER` |
+| `@texuli/spec/source` | Runtime (new in `0.8.0`, spec `0.8.0`): data-source bindings, shared by the spec validator, `@texuli/catalog` and the player ([source.md](https://github.com/DailybotHQ/texuli/blob/main/packages/spec/docs/source.md)) | `checkSourceBinding`, `isSourceBinding`, `SOURCE_BINDING_KEY`, `SPEC_SOURCE_LIMITS`, `SPEC_SOURCE_FILTER_OPERATORS`, `SpecSourceDescriptor` |
 | `@texuli/spec/codegen` | Build time: generation and conformance | `buildSpec`, `projectCatalog`, `checkConformance`, `checkCatalogContract`, `formatJson`, `nextSpecVersion`, `checkVersionHistory` |
 
 ## Key guarantees
@@ -162,6 +181,12 @@ warning without failing.
   motion tokens: a blueprint never carries CSS, keyframes, milliseconds or
   code, and anything else is refused. The `0.5.0 → 0.6.0` migration only
   stamps `spec`.
+- **Documents as data (spec 0.7.0, new in `0.7.0`).** A
+  `document` node's `doc` must have the document shape (`$defs.document`);
+  the document's own vocabulary and URL policy are checked by
+  `@texuli/document` through `@texuli/catalog`'s `validateDraft`. Agents
+  edit documents with `patchDocument` (at most 1,000 RFC 6902 operations),
+  addressed by node `key`.
 - **Streams parse, never guess.** `@texuli/spec/stream` (new in `0.6.0`)
   reads a blueprint split anywhere in linear time under a byte budget and a
   depth cap, reports a node only once its shell (everything but
@@ -181,6 +206,44 @@ warning without failing.
   nodes without a matching view or event, and writers of a host-bound
   variable. The spec, `@texuli/catalog`'s `validateDraft` and the Kotlin
   twin run the same rules.
+- **Data as a named source, never a request (spec 0.8.0, new in `0.8.0`).** A
+  component's `sourceable` prop may read rows with
+  `{"$source": name, "query": {...}, "map": {...}}`: an opaque name the host
+  registered, and a closed query (projection, the `@texuli/data` grid filter
+  model, sort, search, a page size). It is checked against the host's source
+  descriptors (`SpecDocuments.sources`) and refused without them; nothing in
+  it is a URL, SQL or code
+  ([source.md](https://github.com/DailybotHQ/texuli/blob/main/packages/spec/docs/source.md)).
+- **Forms as data, never patterns or code (spec 0.8.0, new in `0.8.0`).** The
+  agent-emittable `schema-form` id carries a closed form schema
+  (`$defs.formSchema`): fields of 15 closed types in sections or steps,
+  named formats and host validator names (never a regular expression),
+  and conditions and cross-field rules in the closed expression AST of
+  `@texuli/core/expression` (`$defs.expression`, the `numberFormula` and
+  `condition` shapes extended with strings, booleans, field references and
+  calls to a closed function table). The schema checks the shape; the
+  forms validator (`@texuli/forms/model`, `checkForm` in `validateDraft`)
+  checks the rest at the host's tier. The Kotlin twin decodes the shape and
+  its list caps and paints a placeholder (planned).
+- **Dashboards as data (spec 0.8.0, new in `0.8.0`).** The agent-emittable
+  `data-dashboard` id holds `data-dashboard-widget` children (`widgetId`,
+  `title` and a `place` in grid units); widget content is ordinary catalog
+  nodes, so its data comes only from host sources. The dashboard's `layout`
+  (a bounded list of `{id, x, y, w, h}` grid units) is bindable and
+  sourceable, so a state or a host source persists what people arrange. The
+  schema bounds the grid units; `@texuli/catalog` checks the composition
+  (widgets only directly in a dashboard, unique ids) on the web. The Kotlin
+  twin decodes the props and paints a placeholder (planned).
+- **Spreadsheets as data, formulas in a closed grammar (spec 0.8.0,
+  new in `0.8.0`).** The agent-emittable `spreadsheet` id (not `sheet`, which
+  is the texuli `Sheet` overlay) carries a sheet in its `sheet` prop
+  (`$defs.sheet`, `$defs.sheetTab`): `format` `texuli-sheet`, 1 to 16 tabs
+  of `{ id, name, rows, columns, cells }` with cells keyed by A1 address.
+  The schema checks that envelope and its caps; the sheet validator
+  (`@texuli/sheets/model`, `checkSheet` in `validateDraft`) parses every
+  formula with the sheet grammar (no `INDIRECT`, `OFFSET` or `RAND`, a
+  closed function set). The Kotlin twin decodes the envelope and its caps;
+  painting it is planned.
 - **List item text never hides or reorders itself.** String fields of list
   state items refuse control characters, bidirectional overrides and
   isolates, and invisible formatting characters (`SPEC_PATTERNS.listText`;
@@ -210,9 +273,15 @@ catalog hash, and from 0.3.0 may declare the exact spec version it was
 written for (`spec`; omitted means 0.2.0). `migrateBlueprint`
 (`@texuli/spec/migrate`) brings an
 envelope up to the current spec with pure, per-version steps
-(`src/migrations/`: `0.2.0 → 0.3.0`, `0.3.0 → 0.4.0`, `0.4.0 → 0.5.0` and
-`0.5.0 → 0.6.0`, each of which only stamps `spec`); a compatible version range is planned,
-not built. `@texuli/spec@0.6.0` carries spec `0.6.0` (digest
+(`src/migrations/`: `0.2.0 → 0.3.0`, `0.3.0 → 0.4.0`, `0.4.0 → 0.5.0`,
+`0.5.0 → 0.6.0`, `0.6.0 → 0.7.0` and `0.7.0 → 0.8.0`, each of which only
+stamps `spec`); a compatible version range is planned, not built.
+`@texuli/spec@0.8.0` carries spec `0.8.0` (digest
+`f6b6388280d247eb9c3106a925111f35b90d1ec3b59c23652542f06a9f103daf`), which
+adds data-source bindings, forms, canvases, dashboards and spreadsheets;
+`@texuli/spec@0.7.0` carried spec `0.7.0` (digest
+`43e44fa9a198d337d686b4e2d86882a06a676ae1e1c1f02d023b3a525795a8b2`), which
+adds node keys and documents; `@texuli/spec@0.6.0` carried spec `0.6.0` (digest
 `37141b85b9ab9f02af849a62a9c97ba729d6c5c2705130290bcdf45b308ea4cc`), which
 adds the closed motion vocabulary (ADR-012); `@texuli/spec@0.5.0` carried
 spec `0.5.0`, which added the `data-cohort-table`,
@@ -238,6 +307,8 @@ conformance harness) are in
   [motion.md](https://github.com/DailybotHQ/texuli/blob/main/packages/spec/docs/motion.md)
 - Streamed blueprints (the incremental tokenizer, the canonical order and
   node shells; new in `0.6.0`): [stream.md](https://github.com/DailybotHQ/texuli/blob/main/packages/spec/docs/stream.md)
+- Data-source bindings (spec 0.8.0; new in `0.8.0`):
+  [source.md](https://github.com/DailybotHQ/texuli/blob/main/packages/spec/docs/source.md)
 - The Kotlin Multiplatform twin that consumes the generated models:
   [native/README.md](https://github.com/DailybotHQ/texuli/blob/main/native/README.md)
 - Architecture: [ARCHITECTURE.md](https://github.com/DailybotHQ/texuli/blob/main/docs/ARCHITECTURE.md)

package/dist/build.d.ts

@@ -3,6 +3,15 @@ import { SPEC_VERSION } from './version.js';
 export { SPEC_VERSION };
 /** Where normative files live inside the package. */
 export declare const NORMATIVE_DIRS: readonly ["schemas/", "catalog/", "fixtures/"];
+/**
+ * Normative schemas that are pinned by digest but are not in the dialect and
+ * generate nothing: they are exported by a higher-layer engine and kept here
+ * so the contract pins the exact version agents write against. Spec 0.7.0
+ * pins `@texuli/document`'s JSON Schema export (ADR-011) and spec 0.8.0
+ * `@texuli/canvas`'s (ADR-012); freshness tests in `@texuli/catalog` keep
+ * them equal to `documentJsonSchema()` and `canvasJsonSchema()`.
+ */
+export declare const EXTERNAL_SCHEMAS: readonly string[];
 /** The schema documents, their generated names and output files. */
 export declare const SCHEMA_UNITS: readonly [{
     readonly name: "blueprint";

package/dist/build.js

@@ -7,6 +7,18 @@ import { SPEC_VERSION } from "./version.js";
 export { SPEC_VERSION };
 /** Where normative files live inside the package. */
 export const NORMATIVE_DIRS = ['schemas/', 'catalog/', 'fixtures/'];
+/**
+ * Normative schemas that are pinned by digest but are not in the dialect and
+ * generate nothing: they are exported by a higher-layer engine and kept here
+ * so the contract pins the exact version agents write against. Spec 0.7.0
+ * pins `@texuli/document`'s JSON Schema export (ADR-011) and spec 0.8.0
+ * `@texuli/canvas`'s (ADR-012); freshness tests in `@texuli/catalog` keep
+ * them equal to `documentJsonSchema()` and `canvasJsonSchema()`.
+ */
+export const EXTERNAL_SCHEMAS = Object.freeze([
+    'schemas/canvas.schema.json',
+    'schemas/document.schema.json',
+]);
 /** The schema documents, their generated names and output files. */
 export const SCHEMA_UNITS = [
     { name: 'blueprint', prefix: 'Blueprint', ts: 'blueprint.ts', kt: 'Blueprint.kt' },

package/dist/catalog.d.ts

@@ -26,6 +26,7 @@ export interface BuiltCatalogLike {
         emit: readonly string[];
         events?: readonly SpecEventName[];
         bindable?: readonly string[];
+        sourceable?: readonly string[];
         deprecated?: SpecDeprecation;
         props: readonly {
             name: string;
@@ -39,8 +40,8 @@ export interface BuiltCatalogLike {
 }
 /**
  * Project a built catalog into the spec vocabulary. Deterministic: components
- * sorted by id, props by name, emit tiers, events and bindable props sorted;
- * events, bindable, property schemas and deprecations only when present. Capability is `unknown`
+ * sorted by id, props by name, emit tiers, events, bindable and sourceable
+ * props sorted; events, bindable, sourceable, property schemas and deprecations only when present. Capability is `unknown`
  * unless `capabilities` (the reviewed `catalog/capabilities.json`) records an
  * audited value (ADR-003: no id is portable until audited).
  */

package/dist/catalog.js

@@ -13,8 +13,8 @@ export const WEB_ONLY_KINDS = ['slot', 'event', 'unknown'];
 export const WEB_ONLY_PROP_NAMES = ['class', 'className', 'style', 'renderer'];
 /**
  * Project a built catalog into the spec vocabulary. Deterministic: components
- * sorted by id, props by name, emit tiers, events and bindable props sorted;
- * events, bindable, property schemas and deprecations only when present. Capability is `unknown`
+ * sorted by id, props by name, emit tiers, events, bindable and sourceable
+ * props sorted; events, bindable, sourceable, property schemas and deprecations only when present. Capability is `unknown`
  * unless `capabilities` (the reviewed `catalog/capabilities.json`) records an
  * audited value (ADR-003: no id is portable until audited).
  */
@@ -45,6 +45,7 @@ export function projectCatalog(catalog, catalogHash, capabilities = {}) {
         })),
         ...(entry.events?.length ? { events: [...entry.events].sort() } : {}),
         ...(entry.bindable?.length ? { bindable: [...entry.bindable].sort() } : {}),
+        ...(entry.sourceable?.length ? { sourceable: [...entry.sourceable].sort() } : {}),
         ...(entry.deprecated ? { deprecated: { ...entry.deprecated } } : {}),
     }));
     return { catalogHash, components };

package/dist/codegen/index.d.ts

@@ -4,7 +4,7 @@
  * projection, the committed-file JSON format and the conformance harness.
  * Pure functions: callers read and write the files.
  */
-export { buildSpec, KOTLIN_OUT, NORMATIVE_DIRS, SCHEMA_UNITS, type SpecBuild, TS_OUT, } from '../build.js';
+export { buildSpec, EXTERNAL_SCHEMAS, KOTLIN_OUT, NORMATIVE_DIRS, SCHEMA_UNITS, type SpecBuild, TS_OUT, } from '../build.js';
 export { prettyJson } from '../canonical.js';
 export { type BuiltCatalogLike, projectCatalog } from '../catalog.js';
 export { type ConformanceIssue, checkCatalogContract, checkConformance, deprecationExpired, } from '../conformance.js';

package/dist/codegen/index.js

@@ -4,7 +4,7 @@
  * projection, the committed-file JSON format and the conformance harness.
  * Pure functions: callers read and write the files.
  */
-export { buildSpec, KOTLIN_OUT, NORMATIVE_DIRS, SCHEMA_UNITS, TS_OUT, } from "../build.js";
+export { buildSpec, EXTERNAL_SCHEMAS, KOTLIN_OUT, NORMATIVE_DIRS, SCHEMA_UNITS, TS_OUT, } from "../build.js";
 export { prettyJson } from "../canonical.js";
 export { projectCatalog } from "../catalog.js";
 export { checkCatalogContract, checkConformance, deprecationExpired, } from "../conformance.js";

package/dist/codegen/kotlin.js

@@ -391,6 +391,9 @@ export function vocabularyToKotlin(catalog, stamp) {
         if (c.bindable) {
             lines.push(`${INDENT}${INDENT}${INDENT}bindable = listOf(${c.bindable.map(kotlinString).join(', ')}),`);
         }
+        if (c.sourceable) {
+            lines.push(`${INDENT}${INDENT}${INDENT}sourceable = listOf(${c.sourceable.map(kotlinString).join(', ')}),`);
+        }
         if (c.deprecated)
             lines.push(`${INDENT}${INDENT}${INDENT}deprecated = ${deprecationExpr(c.deprecated)},`);
         lines.push(`${INDENT}${INDENT}),`);

package/dist/conformance.d.ts

@@ -9,7 +9,7 @@ export interface ConformanceIssue {
  * Run the spec's conformance harness (spec/Compose design §7.1 and §7.3)
  * over the normative files and the committed outputs (`manifest.json`,
  * `generated-manifest.json` and every generated file):
- * - every schema stays in the dialect;
+ * - every schema stays in the dialect (except the pinned `EXTERNAL_SCHEMAS`);
  * - `catalog/components.json` and `catalog/capabilities.json` are valid;
  * - the manifest digests match the normative files;
  * - regenerating gives byte-identical TypeScript and Kotlin, with no file

package/dist/conformance.js

@@ -1,4 +1,4 @@
-import { buildSpec } from "./build.js";
+import { buildSpec, EXTERNAL_SCHEMAS } from "./build.js";
 import { CAPABILITIES } from "./catalog.js";
 import { checkPropSchema, defCollisions } from "./contract.js";
 import { checkSchemaDocument, isRecord, validateInstance } from "./dialect.js";
@@ -9,7 +9,7 @@ import { validateWorkflowGraph } from "./workflow.js";
  * Run the spec's conformance harness (spec/Compose design §7.1 and §7.3)
  * over the normative files and the committed outputs (`manifest.json`,
  * `generated-manifest.json` and every generated file):
- * - every schema stays in the dialect;
+ * - every schema stays in the dialect (except the pinned `EXTERNAL_SCHEMAS`);
  * - `catalog/components.json` and `catalog/capabilities.json` are valid;
  * - the manifest digests match the normative files;
  * - regenerating gives byte-identical TypeScript and Kotlin, with no file
@@ -26,7 +26,8 @@ export function checkConformance(normative, committed) {
     const issues = [];
     const json = (path) => JSON.parse(normative[path] ?? 'null');
     const schemas = {};
-    for (const path of Object.keys(normative).filter((p) => p.startsWith('schemas/'))) {
+    const dialectSchemas = Object.keys(normative).filter((p) => p.startsWith('schemas/') && !EXTERNAL_SCHEMAS.includes(p));
+    for (const path of dialectSchemas) {
         const schema = json(path);
         schemas[path] = schema;
         for (const issue of checkSchemaDocument(schema)) {
@@ -134,7 +135,15 @@ export function checkConformance(normative, committed) {
         }
     }
     if (blueprintSchema) {
-        const documents = { blueprintSchema, catalog, workflowSchema, validateWorkflowGraph };
+        // The fixture host's data sources (spec 0.8.0): source bindings are checked against them.
+        const host = json('fixtures/sources.json');
+        const documents = {
+            blueprintSchema,
+            catalog,
+            workflowSchema,
+            validateWorkflowGraph,
+            ...(host?.sources ? { sources: host.sources } : {}),
+        };
         for (const path of Object.keys(normative).filter((p) => p.startsWith('fixtures/golden/'))) {
             const result = validateBlueprint(json(path), documents);
             for (const d of result.diagnostics) {
@@ -187,6 +196,16 @@ export function checkCatalogContract(catalog, specVersion = SPEC_VERSION) {
                 });
             }
         }
+        for (const name of component.sourceable ?? []) {
+            const prop = component.props.find((p) => p.name === name);
+            if (!prop || prop.extension || prop.kind !== 'array') {
+                issues.push({
+                    check: 'prop-schema',
+                    path,
+                    message: `${component.id}: sourceable "${name}" is not a portable array prop`,
+                });
+            }
+        }
         if (new Set(component.events ?? []).size !== (component.events ?? []).length) {
             issues.push({ check: 'catalog', path, message: `${component.id}: events repeat` });
         }

package/dist/contract.d.ts

@@ -21,7 +21,7 @@ export type SpecActionOp = (typeof SPEC_ACTION_OPS)[number];
 export declare const SPEC_EVENT_NAMES: readonly ["press", "change", "select", "submit", "dismiss", "move"];
 export type SpecEventName = (typeof SPEC_EVENT_NAMES)[number];
 /** The `$ref` targets a catalog property schema may name. */
-export declare const SPEC_PROP_REFS: readonly ["binding", "reorder", "action", "eventMap", "condition", "workflowGraph"];
+export declare const SPEC_PROP_REFS: readonly ["binding", "reorder", "action", "eventMap", "condition", "workflowGraph", "document", "formSchema", "canvas", "sheet"];
 /** The fields each action op takes (besides `op`) and the ones it needs. */
 export declare const ACTION_FIELDS: Readonly<Record<SpecActionOp, {
     readonly allowed: readonly string[];
@@ -54,6 +54,13 @@ export declare const SPEC_LIMITS: Readonly<{
     workflowStringLength: 2000;
     /** Deepest prop value walked for nested bindings. */
     propDepth: 32;
+    /** Top-level blocks a `document` node's doc may hold (`$defs.document.blocks`). */
+    documentBlocks: 2000;
+    /** Operations one `patchDocument` patch may carry (`$defs.documentPatch`, ADR-011). */
+    documentPatchOps: 1000;
+    /** Shapes and connectors a `canvas` node's canvas may hold at its top level (`$defs.canvas`). */
+    canvasShapes: 5000;
+    canvasConnectors: 5000;
 }>;
 /** The name patterns, as the schemas write them. */
 export declare const SPEC_PATTERNS: Readonly<{
@@ -62,6 +69,8 @@ export declare const SPEC_PATTERNS: Readonly<{
     flowName: "^[a-z][a-z0-9-]{0,31}$";
     intentName: "^[A-Za-z][A-Za-z0-9_-]{0,63}$";
     itemKey: "^[A-Za-z0-9._:-]{1,64}$";
+    /** A node's stable instance id (spec 0.7.0, ADR-014), unique in its tree. */
+    nodeKey: "^[A-Za-z0-9._:-]{1,64}$";
     groupName: "^[a-z][a-z0-9-]{0,31}$";
     workflowId: "^[A-Za-z0-9._:-]{1,64}$";
     workflowFieldName: "^[a-z][A-Za-z0-9_]{0,31}$";
@@ -88,6 +97,7 @@ export declare const SPEC_REGEX: Readonly<{
     dataName: RegExp;
     intentName: RegExp;
     itemKey: RegExp;
+    nodeKey: RegExp;
     listText: RegExp;
 }>;
 /**

package/dist/contract.js

@@ -32,6 +32,13 @@ export const SPEC_PROP_REFS = [
     'eventMap',
     'condition',
     'workflowGraph',
+    'document',
+    // Spec 0.8.0 (ADR-015): the closed form schema of a `schema-form` node.
+    'formSchema',
+    // Spec 0.8.0 (ADR-012): the canvas a `canvas` node carries (envelope only).
+    'canvas',
+    // Spec 0.8.0 (ADR-015): the sheet a `spreadsheet` node carries (envelope only).
+    'sheet',
 ];
 /** The fields each action op takes (besides `op`) and the ones it needs. */
 export const ACTION_FIELDS = Object.freeze({
@@ -76,6 +83,13 @@ export const SPEC_LIMITS = Object.freeze({
     workflowStringLength: 2000,
     /** Deepest prop value walked for nested bindings. */
     propDepth: 32,
+    /** Top-level blocks a `document` node's doc may hold (`$defs.document.blocks`). */
+    documentBlocks: 2000,
+    /** Operations one `patchDocument` patch may carry (`$defs.documentPatch`, ADR-011). */
+    documentPatchOps: 1000,
+    /** Shapes and connectors a `canvas` node's canvas may hold at its top level (`$defs.canvas`). */
+    canvasShapes: 5000,
+    canvasConnectors: 5000,
 });
 /** The name patterns, as the schemas write them. */
 export const SPEC_PATTERNS = Object.freeze({
@@ -84,6 +98,8 @@ export const SPEC_PATTERNS = Object.freeze({
     flowName: '^[a-z][a-z0-9-]{0,31}$',
     intentName: '^[A-Za-z][A-Za-z0-9_-]{0,63}$',
     itemKey: '^[A-Za-z0-9._:-]{1,64}$',
+    /** A node's stable instance id (spec 0.7.0, ADR-014), unique in its tree. */
+    nodeKey: '^[A-Za-z0-9._:-]{1,64}$',
     groupName: '^[a-z][a-z0-9-]{0,31}$',
     workflowId: '^[A-Za-z0-9._:-]{1,64}$',
     workflowFieldName: '^[a-z][A-Za-z0-9_]{0,31}$',
@@ -110,6 +126,7 @@ export const SPEC_REGEX = Object.freeze({
     dataName: new RegExp(SPEC_PATTERNS.dataName, 'u'),
     intentName: new RegExp(SPEC_PATTERNS.intentName, 'u'),
     itemKey: new RegExp(SPEC_PATTERNS.itemKey, 'u'),
+    nodeKey: new RegExp(SPEC_PATTERNS.nodeKey, 'u'),
     listText: new RegExp(SPEC_PATTERNS.listText, 'u'),
 });
 /**