@texuli/spec 0.7.0 → 0.9.0

package/README.md

@@ -14,9 +14,22 @@ by Texuli's Kotlin Multiplatform twin. The package is framework-free: no
 DOM, no Svelte, no Node APIs and no runtime dependencies.
 
 > **Status: 0.x release.** Texuli is in development. The packages are
-> published to npm as `0.7.0`, a pre-1.0 release (1.0.0 will be the first
-> stable release). Under 0.x, a new minor (`0.8.0`) may contain breaking
-> changes, so pin the exact version or use `^0.7.0`, which accepts only 0.7.x.
+> published to npm as `0.9.0`, a pre-1.0 release (1.0.0 will be the first
+> stable release). Under 0.x, a new minor (`0.10.0`) may contain breaking
+> changes, so pin the exact version or use `^0.9.0`, which accepts only 0.9.x.
+
+> **New in `0.9.0`.** `@texuli/spec@0.9.0` carries **spec 0.9.0**, a
+> stamp-only catalog projection refresh (the Button pending note and the
+> cartesian charts' `xKind` and `locale`, from the Protoyard gaps G94 and
+> G97): the envelope, the `$defs` and the diagnostic codes are unchanged,
+> and every `0.8.0` envelope migrates by stamping `spec`.
+
+> **New in `0.8.0`.** `@texuli/spec@0.8.0` carried **spec 0.8.0**, which adds
+> data-source bindings (the `@texuli/spec/source` subpath), the
+> agent-emittable `schema-form`, `canvas`, `spreadsheet`, `data-dashboard`
+> and `data-dashboard-widget` ids with their closed shapes, the closed
+> expression AST, and the pinned `schemas/canvas.schema.json`. Every
+> `0.7.0` envelope migrates by stamping `spec`.
 
 > **New in `0.7.0`.** `@texuli/spec@0.7.0` carries **spec 0.7.0**, which adds
 > an optional node `key` (unique in the tree), the agent-emittable
@@ -68,7 +81,7 @@ import {
   validateInstance,
 } from '@texuli/spec';
 
-SPEC_VERSION;                         // the spec version: '0.7.0' in @texuli/spec@0.7.0
+SPEC_VERSION;                         // the spec version: '0.9.0' in @texuli/spec@0.9.0
 SPEC_COMPONENT_IDS.includes('alert'); // true: the closed component vocabulary
 
 // The dialect validator: a closed subset of JSON Schema 2020-12.
@@ -100,7 +113,7 @@ import { type Schema, type SpecCatalog, validateBlueprint } from '@texuli/spec';
 import { migrateBlueprint } from '@texuli/spec/migrate';
 import { validateWorkflowGraph } from '@texuli/spec/workflow';
 
-const migrated = migrateBlueprint(blueprint); // 0.2.0 → … → 0.6.0 → 0.7.0; never throws
+const migrated = migrateBlueprint(blueprint); // 0.2.0 → … → 0.8.0 → 0.9.0; never throws
 const result = validateBlueprint(migrated.blueprint, {
   blueprintSchema: blueprintSchemaJson as Schema,
   catalog: componentsJson as SpecCatalog,
@@ -121,8 +134,11 @@ refused state or flow declaration), `unknown-state` (a binding or action
 names no declared variable), `binding` (a malformed, misplaced, read-only or
 ill-fitting binding), `action` (an action with the wrong fields or target),
 `unknown-event` (an `on` key the component does not fire) and `workflow` (a
-workflow graph rule), and, from spec 0.7.0, `duplicate-key` (a node key used
-twice in the tree). Deprecated components and props add a `deprecated`
+workflow graph rule), from spec 0.7.0, `duplicate-key` (a node key used
+twice in the tree), and, from spec 0.8.0, `source` (a malformed, misplaced or
+ill-fitting data-source binding, or any binding when the host passes no
+`sources`) and `unknown-source` (a source the host never registered).
+Deprecated components and props add a `deprecated`
 warning without failing.
 
 ## What's inside
@@ -135,6 +151,7 @@ warning without failing.
 | `@texuli/spec/surface` | Runtime: the state surface rules every validator shares (no imports) | `checkStateSurface`, `surfaceInputs`, `SPEC_CONTROL_STATE_TYPES`, `SURFACE_PLAYER_CODES`, `LIST_TEXT_PATTERN` |
 | `@texuli/spec/motion` | Runtime (new in `0.6.0`, spec `0.6.0`): the closed motion vocabulary and its check, shared by the catalog and the player ([motion.md](https://github.com/DailybotHQ/texuli/blob/main/packages/spec/docs/motion.md)) | `SPEC_MOTION_PRESETS`, `SPEC_MOTION_DURATIONS`, `SPEC_MOTION_STAGGERS`, `SPEC_MOTION_LEVELS`, `checkNodeMotion`, `checkEnvelopeMotion` |
 | `@texuli/spec/stream` | Runtime, opt-in (new in `0.6.0`): streamed blueprints ([stream.md](https://github.com/DailybotHQ/texuli/blob/main/packages/spec/docs/stream.md)) | `createJsonTokenizer`, `createBlueprintAssembler`, `createBlueprintStream`, `STREAM_NODE_ORDER` |
+| `@texuli/spec/source` | Runtime (new in `0.8.0`, spec `0.8.0`): data-source bindings, shared by the spec validator, `@texuli/catalog` and the player ([source.md](https://github.com/DailybotHQ/texuli/blob/main/packages/spec/docs/source.md)) | `checkSourceBinding`, `isSourceBinding`, `SOURCE_BINDING_KEY`, `SPEC_SOURCE_LIMITS`, `SPEC_SOURCE_FILTER_OPERATORS`, `SpecSourceDescriptor` |
 | `@texuli/spec/codegen` | Build time: generation and conformance | `buildSpec`, `projectCatalog`, `checkConformance`, `checkCatalogContract`, `formatJson`, `nextSpecVersion`, `checkVersionHistory` |
 
 ## Key guarantees
@@ -195,6 +212,44 @@ warning without failing.
   nodes without a matching view or event, and writers of a host-bound
   variable. The spec, `@texuli/catalog`'s `validateDraft` and the Kotlin
   twin run the same rules.
+- **Data as a named source, never a request (spec 0.8.0, new in `0.8.0`).** A
+  component's `sourceable` prop may read rows with
+  `{"$source": name, "query": {...}, "map": {...}}`: an opaque name the host
+  registered, and a closed query (projection, the `@texuli/data` grid filter
+  model, sort, search, a page size). It is checked against the host's source
+  descriptors (`SpecDocuments.sources`) and refused without them; nothing in
+  it is a URL, SQL or code
+  ([source.md](https://github.com/DailybotHQ/texuli/blob/main/packages/spec/docs/source.md)).
+- **Forms as data, never patterns or code (spec 0.8.0, new in `0.8.0`).** The
+  agent-emittable `schema-form` id carries a closed form schema
+  (`$defs.formSchema`): fields of 15 closed types in sections or steps,
+  named formats and host validator names (never a regular expression),
+  and conditions and cross-field rules in the closed expression AST of
+  `@texuli/core/expression` (`$defs.expression`, the `numberFormula` and
+  `condition` shapes extended with strings, booleans, field references and
+  calls to a closed function table). The schema checks the shape; the
+  forms validator (`@texuli/forms/model`, `checkForm` in `validateDraft`)
+  checks the rest at the host's tier. The Kotlin twin decodes the shape and
+  its list caps and paints a placeholder (planned).
+- **Dashboards as data (spec 0.8.0, new in `0.8.0`).** The agent-emittable
+  `data-dashboard` id holds `data-dashboard-widget` children (`widgetId`,
+  `title` and a `place` in grid units); widget content is ordinary catalog
+  nodes, so its data comes only from host sources. The dashboard's `layout`
+  (a bounded list of `{id, x, y, w, h}` grid units) is bindable and
+  sourceable, so a state or a host source persists what people arrange. The
+  schema bounds the grid units; `@texuli/catalog` checks the composition
+  (widgets only directly in a dashboard, unique ids) on the web. The Kotlin
+  twin decodes the props and paints a placeholder (planned).
+- **Spreadsheets as data, formulas in a closed grammar (spec 0.8.0,
+  new in `0.8.0`).** The agent-emittable `spreadsheet` id (not `sheet`, which
+  is the texuli `Sheet` overlay) carries a sheet in its `sheet` prop
+  (`$defs.sheet`, `$defs.sheetTab`): `format` `texuli-sheet`, 1 to 16 tabs
+  of `{ id, name, rows, columns, cells }` with cells keyed by A1 address.
+  The schema checks that envelope and its caps; the sheet validator
+  (`@texuli/sheets/model`, `checkSheet` in `validateDraft`) parses every
+  formula with the sheet grammar (no `INDIRECT`, `OFFSET` or `RAND`, a
+  closed function set). The Kotlin twin decodes the envelope and its caps;
+  painting it is planned.
 - **List item text never hides or reorders itself.** String fields of list
   state items refuse control characters, bidirectional overrides and
   isolates, and invisible formatting characters (`SPEC_PATTERNS.listText`;
@@ -225,9 +280,15 @@ written for (`spec`; omitted means 0.2.0). `migrateBlueprint`
 (`@texuli/spec/migrate`) brings an
 envelope up to the current spec with pure, per-version steps
 (`src/migrations/`: `0.2.0 → 0.3.0`, `0.3.0 → 0.4.0`, `0.4.0 → 0.5.0`,
-`0.5.0 → 0.6.0` and `0.6.0 → 0.7.0`, each of which only stamps `spec`); a
-compatible version range is planned, not built. `@texuli/spec@0.7.0`
-carries spec `0.7.0` (digest
+`0.5.0 → 0.6.0`, `0.6.0 → 0.7.0`, `0.7.0 → 0.8.0` and `0.8.0 → 0.9.0`,
+each of which only stamps `spec`); a compatible version range is planned,
+not built. `@texuli/spec@0.9.0` carries spec `0.9.0` (digest
+`497df4d3b0c67d53483163ebd9bd73733b52caf5f8e2966478f1cf860e6f9d9d`), an
+additive catalog projection refresh (PLAN_011 T-gaps-87-95 and
+T-gaps-96-98); `@texuli/spec@0.8.0` carried spec `0.8.0` (digest
+`f6b6388280d247eb9c3106a925111f35b90d1ec3b59c23652542f06a9f103daf`), which
+adds data-source bindings, forms, canvases, dashboards and spreadsheets;
+`@texuli/spec@0.7.0` carried spec `0.7.0` (digest
 `43e44fa9a198d337d686b4e2d86882a06a676ae1e1c1f02d023b3a525795a8b2`), which
 adds node keys and documents; `@texuli/spec@0.6.0` carried spec `0.6.0` (digest
 `37141b85b9ab9f02af849a62a9c97ba729d6c5c2705130290bcdf45b308ea4cc`), which
@@ -255,6 +316,8 @@ conformance harness) are in
   [motion.md](https://github.com/DailybotHQ/texuli/blob/main/packages/spec/docs/motion.md)
 - Streamed blueprints (the incremental tokenizer, the canonical order and
   node shells; new in `0.6.0`): [stream.md](https://github.com/DailybotHQ/texuli/blob/main/packages/spec/docs/stream.md)
+- Data-source bindings (spec 0.8.0; new in `0.8.0`):
+  [source.md](https://github.com/DailybotHQ/texuli/blob/main/packages/spec/docs/source.md)
 - The Kotlin Multiplatform twin that consumes the generated models:
   [native/README.md](https://github.com/DailybotHQ/texuli/blob/main/native/README.md)
 - Architecture: [ARCHITECTURE.md](https://github.com/DailybotHQ/texuli/blob/main/docs/ARCHITECTURE.md)

package/dist/build.d.ts

@@ -7,8 +7,9 @@ export declare const NORMATIVE_DIRS: readonly ["schemas/", "catalog/", "fixtures
  * Normative schemas that are pinned by digest but are not in the dialect and
  * generate nothing: they are exported by a higher-layer engine and kept here
  * so the contract pins the exact version agents write against. Spec 0.7.0
- * pins `@texuli/document`'s JSON Schema export (ADR-011); a freshness test in
- * `@texuli/catalog` keeps it equal to `documentJsonSchema()`.
+ * pins `@texuli/document`'s JSON Schema export (ADR-011) and spec 0.8.0
+ * `@texuli/canvas`'s (ADR-012); freshness tests in `@texuli/catalog` keep
+ * them equal to `documentJsonSchema()` and `canvasJsonSchema()`.
  */
 export declare const EXTERNAL_SCHEMAS: readonly string[];
 /** The schema documents, their generated names and output files. */

package/dist/build.js

@@ -11,10 +11,14 @@ export const NORMATIVE_DIRS = ['schemas/', 'catalog/', 'fixtures/'];
  * Normative schemas that are pinned by digest but are not in the dialect and
  * generate nothing: they are exported by a higher-layer engine and kept here
  * so the contract pins the exact version agents write against. Spec 0.7.0
- * pins `@texuli/document`'s JSON Schema export (ADR-011); a freshness test in
- * `@texuli/catalog` keeps it equal to `documentJsonSchema()`.
+ * pins `@texuli/document`'s JSON Schema export (ADR-011) and spec 0.8.0
+ * `@texuli/canvas`'s (ADR-012); freshness tests in `@texuli/catalog` keep
+ * them equal to `documentJsonSchema()` and `canvasJsonSchema()`.
  */
-export const EXTERNAL_SCHEMAS = Object.freeze(['schemas/document.schema.json']);
+export const EXTERNAL_SCHEMAS = Object.freeze([
+    'schemas/canvas.schema.json',
+    'schemas/document.schema.json',
+]);
 /** The schema documents, their generated names and output files. */
 export const SCHEMA_UNITS = [
     { name: 'blueprint', prefix: 'Blueprint', ts: 'blueprint.ts', kt: 'Blueprint.kt' },

package/dist/catalog.d.ts

@@ -26,6 +26,7 @@ export interface BuiltCatalogLike {
         emit: readonly string[];
         events?: readonly SpecEventName[];
         bindable?: readonly string[];
+        sourceable?: readonly string[];
         deprecated?: SpecDeprecation;
         props: readonly {
             name: string;
@@ -39,8 +40,8 @@ export interface BuiltCatalogLike {
 }
 /**
  * Project a built catalog into the spec vocabulary. Deterministic: components
- * sorted by id, props by name, emit tiers, events and bindable props sorted;
- * events, bindable, property schemas and deprecations only when present. Capability is `unknown`
+ * sorted by id, props by name, emit tiers, events, bindable and sourceable
+ * props sorted; events, bindable, sourceable, property schemas and deprecations only when present. Capability is `unknown`
  * unless `capabilities` (the reviewed `catalog/capabilities.json`) records an
  * audited value (ADR-003: no id is portable until audited).
  */

package/dist/catalog.js

@@ -13,8 +13,8 @@ export const WEB_ONLY_KINDS = ['slot', 'event', 'unknown'];
 export const WEB_ONLY_PROP_NAMES = ['class', 'className', 'style', 'renderer'];
 /**
  * Project a built catalog into the spec vocabulary. Deterministic: components
- * sorted by id, props by name, emit tiers, events and bindable props sorted;
- * events, bindable, property schemas and deprecations only when present. Capability is `unknown`
+ * sorted by id, props by name, emit tiers, events, bindable and sourceable
+ * props sorted; events, bindable, sourceable, property schemas and deprecations only when present. Capability is `unknown`
  * unless `capabilities` (the reviewed `catalog/capabilities.json`) records an
  * audited value (ADR-003: no id is portable until audited).
  */
@@ -45,6 +45,7 @@ export function projectCatalog(catalog, catalogHash, capabilities = {}) {
         })),
         ...(entry.events?.length ? { events: [...entry.events].sort() } : {}),
         ...(entry.bindable?.length ? { bindable: [...entry.bindable].sort() } : {}),
+        ...(entry.sourceable?.length ? { sourceable: [...entry.sourceable].sort() } : {}),
         ...(entry.deprecated ? { deprecated: { ...entry.deprecated } } : {}),
     }));
     return { catalogHash, components };

package/dist/codegen/kotlin.js

@@ -391,6 +391,9 @@ export function vocabularyToKotlin(catalog, stamp) {
         if (c.bindable) {
             lines.push(`${INDENT}${INDENT}${INDENT}bindable = listOf(${c.bindable.map(kotlinString).join(', ')}),`);
         }
+        if (c.sourceable) {
+            lines.push(`${INDENT}${INDENT}${INDENT}sourceable = listOf(${c.sourceable.map(kotlinString).join(', ')}),`);
+        }
         if (c.deprecated)
             lines.push(`${INDENT}${INDENT}${INDENT}deprecated = ${deprecationExpr(c.deprecated)},`);
         lines.push(`${INDENT}${INDENT}),`);

package/dist/conformance.js

@@ -135,7 +135,15 @@ export function checkConformance(normative, committed) {
         }
     }
     if (blueprintSchema) {
-        const documents = { blueprintSchema, catalog, workflowSchema, validateWorkflowGraph };
+        // The fixture host's data sources (spec 0.8.0): source bindings are checked against them.
+        const host = json('fixtures/sources.json');
+        const documents = {
+            blueprintSchema,
+            catalog,
+            workflowSchema,
+            validateWorkflowGraph,
+            ...(host?.sources ? { sources: host.sources } : {}),
+        };
         for (const path of Object.keys(normative).filter((p) => p.startsWith('fixtures/golden/'))) {
             const result = validateBlueprint(json(path), documents);
             for (const d of result.diagnostics) {
@@ -188,6 +196,16 @@ export function checkCatalogContract(catalog, specVersion = SPEC_VERSION) {
                 });
             }
         }
+        for (const name of component.sourceable ?? []) {
+            const prop = component.props.find((p) => p.name === name);
+            if (!prop || prop.extension || prop.kind !== 'array') {
+                issues.push({
+                    check: 'prop-schema',
+                    path,
+                    message: `${component.id}: sourceable "${name}" is not a portable array prop`,
+                });
+            }
+        }
         if (new Set(component.events ?? []).size !== (component.events ?? []).length) {
             issues.push({ check: 'catalog', path, message: `${component.id}: events repeat` });
         }

package/dist/contract.d.ts

@@ -21,7 +21,7 @@ export type SpecActionOp = (typeof SPEC_ACTION_OPS)[number];
 export declare const SPEC_EVENT_NAMES: readonly ["press", "change", "select", "submit", "dismiss", "move"];
 export type SpecEventName = (typeof SPEC_EVENT_NAMES)[number];
 /** The `$ref` targets a catalog property schema may name. */
-export declare const SPEC_PROP_REFS: readonly ["binding", "reorder", "action", "eventMap", "condition", "workflowGraph", "document"];
+export declare const SPEC_PROP_REFS: readonly ["binding", "reorder", "action", "eventMap", "condition", "workflowGraph", "document", "formSchema", "canvas", "sheet"];
 /** The fields each action op takes (besides `op`) and the ones it needs. */
 export declare const ACTION_FIELDS: Readonly<Record<SpecActionOp, {
     readonly allowed: readonly string[];
@@ -58,6 +58,9 @@ export declare const SPEC_LIMITS: Readonly<{
     documentBlocks: 2000;
     /** Operations one `patchDocument` patch may carry (`$defs.documentPatch`, ADR-011). */
     documentPatchOps: 1000;
+    /** Shapes and connectors a `canvas` node's canvas may hold at its top level (`$defs.canvas`). */
+    canvasShapes: 5000;
+    canvasConnectors: 5000;
 }>;
 /** The name patterns, as the schemas write them. */
 export declare const SPEC_PATTERNS: Readonly<{

package/dist/contract.js

@@ -33,6 +33,12 @@ export const SPEC_PROP_REFS = [
     'condition',
     'workflowGraph',
     'document',
+    // Spec 0.8.0 (ADR-015): the closed form schema of a `schema-form` node.
+    'formSchema',
+    // Spec 0.8.0 (ADR-012): the canvas a `canvas` node carries (envelope only).
+    'canvas',
+    // Spec 0.8.0 (ADR-015): the sheet a `spreadsheet` node carries (envelope only).
+    'sheet',
 ];
 /** The fields each action op takes (besides `op`) and the ones it needs. */
 export const ACTION_FIELDS = Object.freeze({
@@ -81,6 +87,9 @@ export const SPEC_LIMITS = Object.freeze({
     documentBlocks: 2000,
     /** Operations one `patchDocument` patch may carry (`$defs.documentPatch`, ADR-011). */
     documentPatchOps: 1000,
+    /** Shapes and connectors a `canvas` node's canvas may hold at its top level (`$defs.canvas`). */
+    canvasShapes: 5000,
+    canvasConnectors: 5000,
 });
 /** The name patterns, as the schemas write them. */
 export const SPEC_PATTERNS = Object.freeze({

package/dist/generated/typescript/blueprint.d.ts

@@ -111,6 +111,175 @@ export interface BlueprintNumberFormula {
     ifTrue?: BlueprintNumberFormula;
     ifFalse?: BlueprintNumberFormula;
 }
+/**
+ * The closed expression AST of @texuli/core/expression (spec 0.8.0, ADR-015): the numberFormula and
+ * condition shapes extended with strings, booleans, null, field references and calls to a closed
+ * function table (len, lower, upper, trim, contains, startsWith, endsWith, isEmpty, coalesce,
+ * includes, count, sum, abs, floor, ceil, number, today, date, isDate, daysBetween, addDays, year,
+ * month, day). Structural shape only: which members each op needs, the function table and arity, at
+ * most 1,000 nodes and depth 32 are checked by the runtime parser; ref and range are reserved for
+ * dialects (sheets) and refused in forms. Never code, never a regular expression.
+ */
+export interface BlueprintExpression {
+    op: 'num' | 'str' | 'bool' | 'null' | 'var' | 'field' | 'ref' | 'range' | 'add' | 'sub' | 'mul' | 'div' | 'mod' | 'pow' | 'neg' | 'lt' | 'lte' | 'gt' | 'gte' | 'eq' | 'neq' | 'and' | 'or' | 'not' | 'if' | 'min' | 'max' | 'concat' | 'round' | 'clamp' | 'call';
+    /**
+     * A literal for num (number), str (string, at most 32,768 characters) and bool; an expression for
+     * neg, not, round and clamp.
+     */
+    value?: unknown;
+    /** The field (or var) a reference reads. */
+    name?: string;
+    /** A dialect reference (sheets); refused in forms. */
+    ref?: string;
+    from?: string;
+    to?: string;
+    left?: BlueprintExpression;
+    right?: BlueprintExpression;
+    base?: BlueprintExpression;
+    exponent?: BlueprintExpression;
+    /** Operands of and, or, min, max, concat and call (at most 64). */
+    args?: readonly BlueprintExpression[];
+    digits?: number;
+    min?: BlueprintExpression;
+    max?: BlueprintExpression;
+    test?: BlueprintExpression;
+    ifTrue?: BlueprintExpression;
+    ifFalse?: BlueprintExpression;
+    /** A function of the closed table. */
+    fn?: string;
+}
+/** One choice of a select, radio or multiselect field. */
+export interface BlueprintFormOption {
+    value: string;
+    label: string;
+    description?: string;
+}
+/**
+ * Conditions on a field as expressions over earlier fields: shown while show holds, required while
+ * require holds, editable while enable holds. Hidden and disabled fields are not validated or
+ * submitted; only true holds (unknown does not).
+ */
+export interface BlueprintFormWhen {
+    show?: BlueprintExpression;
+    require?: BlueprintExpression;
+    enable?: BlueprintExpression;
+}
+/** When a step or section shows: an expression over earlier fields. */
+export interface BlueprintFormVisibility {
+    show?: BlueprintExpression;
+}
+/** A help link under a field; href passes the URL policy at the host's tier. */
+export interface BlueprintFormLink {
+    label: string;
+    href: string;
+}
+/** Plain-text messages that replace the defaults per rule ({label}, {min}, {max} are filled in). */
+export interface BlueprintFormMessages {
+    required?: string;
+    minLength?: string;
+    maxLength?: string;
+    min?: string;
+    max?: string;
+    step?: string;
+    format?: string;
+    minItems?: string;
+    maxItems?: string;
+    option?: string;
+    fileType?: string;
+    fileSize?: string;
+}
+/**
+ * One field of a closed type. Which members apply to which type, value types, option membership,
+ * ranges and the conditions' field references are checked by @texuli/forms/model
+ * (validateFormSchema). Formats are names; a pattern is never accepted.
+ */
+export interface BlueprintFormField {
+    /** The key in the submitted values, unique in the form. */
+    name: string;
+    type: 'text' | 'textarea' | 'number' | 'email' | 'url' | 'date' | 'time' | 'select' | 'multiselect' | 'checkbox' | 'radio' | 'switch' | 'slider' | 'file' | 'tags';
+    label: string;
+    description?: string;
+    placeholder?: string;
+    /**
+     * A value of the field's type (a string, number, boolean, YYYY-MM-DD, HH:MM or a list of option
+     * values). Not for file fields.
+     */
+    default?: unknown;
+    options?: readonly BlueprintFormOption[];
+    required?: boolean;
+    when?: BlueprintFormWhen;
+    minLength?: number;
+    maxLength?: number;
+    /** A number for number and slider; YYYY-MM-DD for date; HH:MM for time. */
+    min?: unknown;
+    /** A number for number and slider; YYYY-MM-DD for date; HH:MM for time. */
+    max?: unknown;
+    /** Above 0, for number and slider. */
+    step?: number;
+    minItems?: number;
+    maxItems?: number;
+    /** A named format, checked by owned linear-time code. */
+    format?: 'email' | 'url' | 'phone' | 'postal-code' | 'postal-code-us' | 'postal-code-ca' | 'postal-code-uk' | 'postal-code-de' | 'postal-code-fr' | 'postal-code-es' | 'postal-code-mx' | 'postal-code-br' | 'postal-code-co' | 'postal-code-in' | 'postal-code-jp' | 'postal-code-au' | 'digits' | 'alphanumeric' | 'slug' | 'iso-date' | 'time' | 'hex-color';
+    /**
+     * The name of a validator the host registered (sync or async); an unregistered name fails closed.
+     */
+    validator?: string;
+    messages?: BlueprintFormMessages;
+    rows?: number;
+    /** File types: MIME types (image/png, image/*) or extensions (.pdf). */
+    accept?: readonly string[];
+    /** Largest accepted file in bytes; the host uploads files. */
+    maxSize?: number;
+    /** An autocomplete token; payment, credential and one-time-code tokens are absent. */
+    autocomplete?: 'off' | 'name' | 'given-name' | 'family-name' | 'nickname' | 'email' | 'tel' | 'organization' | 'organization-title' | 'street-address' | 'address-level1' | 'address-level2' | 'postal-code' | 'country-name' | 'language' | 'url' | 'bday';
+    link?: BlueprintFormLink;
+}
+/** A group of fields (a fieldset when titled). */
+export interface BlueprintFormSection {
+    id: string;
+    title?: string;
+    description?: string;
+    when?: BlueprintFormVisibility;
+    fields: readonly BlueprintFormField[];
+}
+/**
+ * One step of a multi-step form: exactly one of fields or sections; validated before the next step
+ * opens.
+ */
+export interface BlueprintFormStep {
+    id: string;
+    title: string;
+    description?: string;
+    when?: BlueprintFormVisibility;
+    fields?: readonly BlueprintFormField[];
+    sections?: readonly BlueprintFormSection[];
+}
+/**
+ * A cross-field rule: fails when test is false (unknown passes); the message attaches to field, or
+ * to the form.
+ */
+export interface BlueprintFormRule {
+    id: string;
+    test: BlueprintExpression;
+    message: string;
+    field?: string;
+}
+/**
+ * A form as data (spec 0.8.0, ADR-015), the schema prop of a schema-form node: a title and exactly
+ * one of fields (one page), sections or steps (a multi-step flow), plus cross-field rules. At most
+ * 200 fields, 50 sections, 20 steps and 50 rules. Checked again by @texuli/forms/model at the
+ * host's tier (validateDraft): closed members per type, unique names, options, ranges, named
+ * formats, link URLs, and conditions that read earlier fields only.
+ */
+export interface BlueprintFormSchema {
+    title: string;
+    description?: string;
+    submitLabel?: string;
+    fields?: readonly BlueprintFormField[];
+    sections?: readonly BlueprintFormSection[];
+    steps?: readonly BlueprintFormStep[];
+    rules?: readonly BlueprintFormRule[];
+}
 /** A local state variable name. */
 export type BlueprintStateName = string;
 /** A host data source name, such as tickets.open. */
@@ -273,6 +442,114 @@ export interface BlueprintDocumentPatchOperation {
 }
 /** A bounded RFC 6902 patch (ADR-011): at most 1,000 operations; test operations are encouraged. */
 export type BlueprintDocumentPatch = readonly BlueprintDocumentPatchOperation[];
+/**
+ * A Texuli canvas (spec 0.8.0, ADR-012): the format, version, metadata, grid, shapes and connectors
+ * of @texuli/canvas. This contract checks the envelope of the canvas only; the closed shape
+ * vocabulary and palette, text safety, the URL policy and the caps are checked by
+ * @texuli/canvas/model (schemas/canvas.schema.json) inside the runtime validator, @texuli/catalog's
+ * validateDraft, at the host's tier (the host supplies checkCanvas).
+ */
+export interface BlueprintCanvas {
+    format: 'texuli-canvas';
+    formatVersion: 1;
+    /** Title, locale and description. */
+    meta?: Readonly<Record<string, unknown>>;
+    /** The snap grid in world units. */
+    grid?: number;
+    /**
+     * The shapes, bottom to top: rect, ellipse, diamond, line, arrow, path, text, sticky, image (a
+     * host ref and alt text), frame and group (which hold shapes).
+     */
+    shapes: readonly Readonly<Record<string, unknown>>[];
+    /**
+     * Connectors between shapes or points, routed straight, elbow or curved, with optional caps and a
+     * label.
+     */
+    connectors: readonly Readonly<Record<string, unknown>>[];
+}
+/**
+ * A Texuli sheet, the sheet prop of a spreadsheet node (spec 0.8.0, ADR-012 and ADR-015): the
+ * format, version, metadata and tabs of @texuli/sheets. This contract checks the envelope of the
+ * sheet only (format, version, members, at most 16 tabs, each with an id, a name, a row and column
+ * count within the caps, and cells keyed by A1 address); the cell inputs, the formula grammar and
+ * its closed function set, text safety and the cell cap are checked by @texuli/sheets/model
+ * (validateSheet) inside the runtime validator, @texuli/catalog's validateDraft (the host supplies
+ * checkSheet).
+ */
+export interface BlueprintSheet {
+    format: 'texuli-sheet';
+    formatVersion: 1;
+    /** The title. */
+    meta?: Readonly<Record<string, unknown>>;
+    /**
+     * The tabs, in order: { id, name, rows (1 to 10,000), columns (1 to 256), cells } where cells
+     * maps A1 addresses to a number, a boolean, text or formula text that starts with =.
+     */
+    sheets: readonly BlueprintSheetTab[];
+}
+/**
+ * One tab of a sheet: a stable id, the name formulas use, the row and column counts, and the cell
+ * inputs by A1 address.
+ */
+export interface BlueprintSheetTab {
+    id: string;
+    name: string;
+    rows: number;
+    columns: number;
+    cells?: Readonly<Record<string, unknown>>;
+}
+/**
+ * A data source the host registered (spec 0.8.0, ADR-015): an opaque name, never a URL. Checked
+ * against the host's registry; with no registry a binding is refused.
+ */
+export type BlueprintSourceName = string;
+/** A field the source declares. */
+export type BlueprintSourceFieldName = string;
+/**
+ * The @texuli/data grid filter model: a condition ({type: condition, field, operator, value}) or an
+ * and/or group ({type: group, op, children}). At most 6 levels and 64 nodes. Which members each
+ * type takes, the operators each field allows and the value types are checked by the validator
+ * against the source's declaration.
+ */
+export interface BlueprintSourceFilter {
+    type: 'condition' | 'group';
+    field?: BlueprintSourceFieldName;
+    operator?: 'eq' | 'neq' | 'contains' | 'in' | 'between' | 'before' | 'after' | 'isEmpty' | 'isNotEmpty';
+    /**
+     * A string, number, boolean or null; a list of them for in (at most 100) and between (exactly 2).
+     * Data, never code.
+     */
+    value?: unknown;
+    op?: 'and' | 'or';
+    children?: readonly BlueprintSourceFilter[];
+}
+/** One sort key on a sortable field. */
+export interface BlueprintSourceSort {
+    field: BlueprintSourceFieldName;
+    direction?: 'asc' | 'desc';
+}
+/**
+ * The closed query a data-source binding sends (ADR-015): projection, a filter, sort keys, search
+ * text and a page size. The host adapter receives it validated and decides how to run it; Texuli
+ * never builds URLs, SQL or code from it.
+ */
+export interface BlueprintSourceQuery {
+    fields?: readonly BlueprintSourceFieldName[];
+    filter?: BlueprintSourceFilter;
+    sort?: readonly BlueprintSourceSort[];
+    search?: string;
+    pageSize?: number;
+}
+/**
+ * Reads a whole sourceable prop from a host data source (spec 0.8.0, ADR-015): {"$source": name,
+ * "query": {...}, "map": {itemField: sourceField}}. The player loads the rows through the host's
+ * registry; map renames source fields to the component's item fields (at most 16 entries).
+ */
+export interface BlueprintSourceBinding {
+    $source: BlueprintSourceName;
+    query?: BlueprintSourceQuery;
+    map?: Readonly<Record<string, BlueprintSourceFieldName>>;
+}
 /**
  * Envelope version 1 around one catalog tree (ADR-004, audit G13). Mirrors what
  * @texuli/catalog/envelope reads; a declared status, activation or tier is display data, never
@@ -280,8 +557,14 @@ export type BlueprintDocumentPatch = readonly BlueprintDocumentPatchOperation[];
  * state and a flow; spec 0.6.0 (ADR-012, ADR-013) adds the closed motion vocabulary: a node motion
  * and the envelope motion level; spec 0.7.0 (ADR-011, ADR-012, ADR-014) adds an optional node key
  * (a stable instance id, unique in the tree), the document shape a `document` node carries and the
- * patchDocument edit op with its bounded RFC 6902 patch. Planned minor additions: the native
- * profile and several roots.
+ * patchDocument edit op with its bounded RFC 6902 patch. Spec 0.8.0 (ADR-012, ADR-015) adds
+ * data-source bindings: a sourceable prop may read rows from a source the host registered
+ * ({"$source": name, "query": {...}}), with a closed query, and forms as data: the closed form
+ * schema a `schema-form` node carries ($defs.formSchema) with conditions and cross-field rules in
+ * the closed expression AST of @texuli/core/expression ($defs.expression). Spec 0.8.0 (ADR-012)
+ * adds the canvas shape a `canvas` node carries ($defs.canvas). Spec 0.9.0 refreshes the catalog
+ * projection only (an additive minor; the envelope shape is unchanged). Planned minor additions:
+ * the native profile and several roots.
  */
 export interface BlueprintEnvelope {
     format: 'texuli-blueprint';
@@ -305,7 +588,7 @@ export interface BlueprintEnvelope {
     /**
      * The spec version the envelope was written for. Omitted means 0.2.0; migrateBlueprint stamps it.
      */
-    spec?: '0.3.0' | '0.4.0' | '0.5.0' | '0.6.0' | '0.7.0';
+    spec?: '0.3.0' | '0.4.0' | '0.5.0' | '0.6.0' | '0.7.0' | '0.8.0' | '0.9.0';
     /**
      * Local state declarations (ADR-008), at most 64. Names, counts and per-type rules are checked by
      * the validator.

package/dist/generated/typescript/blueprint.js

@@ -1,3 +1,3 @@
 // Generated by @texuli/spec from schemas/blueprint.schema.json. Do not edit: run the spec generator.
-// Spec 0.7.0, digest 43e44fa9a198d337d686b4e2d86882a06a676ae1e1c1f02d023b3a525795a8b2
+// Spec 0.9.0, digest 497df4d3b0c67d53483163ebd9bd73733b52caf5f8e2966478f1cf860e6f9d9d
 export {};

package/dist/generated/typescript/catalog-schema.d.ts

@@ -14,6 +14,11 @@ export interface SpecComponent {
     events?: readonly SpecEventName[];
     /** Props a node may two-way bind (node bind). */
     bindable?: readonly string[];
+    /**
+     * Props a node may read from a host data source (spec 0.8.0, ADR-015): {"$source": name, "query":
+     * {...}}. Each names an array prop whose items are rows.
+     */
+    sourceable?: readonly string[];
     deprecated?: SpecDeprecation;
 }
 export interface SpecProp {

package/dist/generated/typescript/catalog-schema.js

@@ -1,3 +1,3 @@
 // Generated by @texuli/spec from schemas/catalog.schema.json. Do not edit: run the spec generator.
-// Spec 0.7.0, digest 43e44fa9a198d337d686b4e2d86882a06a676ae1e1c1f02d023b3a525795a8b2
+// Spec 0.9.0, digest 497df4d3b0c67d53483163ebd9bd73733b52caf5f8e2966478f1cf860e6f9d9d
 export {};

package/dist/generated/typescript/diagnostics.d.ts

@@ -4,7 +4,7 @@ export interface SpecDiagnostic {
     message: string;
     id?: string;
 }
-export type SpecDiagnosticCode = 'schema' | 'unknown-id' | 'unknown-prop' | 'prop-type' | 'enum-value' | 'missing-required' | 'extension-prop' | 'catalog-mismatch' | 'unsupported-profile' | 'unknown-slot' | 'state' | 'unknown-state' | 'binding' | 'action' | 'unknown-event' | 'workflow' | 'duplicate-key';
+export type SpecDiagnosticCode = 'schema' | 'unknown-id' | 'unknown-prop' | 'prop-type' | 'enum-value' | 'missing-required' | 'extension-prop' | 'catalog-mismatch' | 'unsupported-profile' | 'unknown-slot' | 'state' | 'unknown-state' | 'binding' | 'action' | 'unknown-event' | 'workflow' | 'duplicate-key' | 'source' | 'unknown-source';
 export interface SpecWarning {
     code: SpecWarningCode;
     path: string;