@xemahq/dsl 0.1.1

package/dist/payload-codec/lib/http-blob-store.js

@@ -0,0 +1,139 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.HttpBlobStore = void 0;
+const enums_1 = require("./enums");
+const errors_1 = require("./errors");
+const blob_store_1 = require("./blob-store");
+const DEFAULT_REQUEST_TIMEOUT_MS = 30_000;
+const PUT_PATH = '/blobs';
+const GET_PATH_PREFIX = '/blobs/';
+class HttpBlobStore {
+    options;
+    kind = enums_1.BlobStoreKind.ARTIFACT_STORE;
+    constructor(options) {
+        this.options = options;
+        if (!options.baseUrl) {
+            throw new Error('HttpBlobStore: baseUrl is required.');
+        }
+    }
+    async put(bytes, contentType, orgId) {
+        assertOrgId(orgId);
+        const token = await this.options.tokenProvider();
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), this.options.requestTimeoutMs ?? DEFAULT_REQUEST_TIMEOUT_MS);
+        try {
+            const response = (await fetch(this.resolveUrl(PUT_PATH), {
+                method: 'POST',
+                headers: this.buildHeaders(token, contentType, orgId),
+                body: Buffer.from(bytes.buffer, bytes.byteOffset, bytes.byteLength),
+                signal: controller.signal,
+            }));
+            if (!response.ok) {
+                throw new errors_1.PayloadCodecError(errors_1.PayloadCodecErrorCode.BLOB_PUT_FAILED, `artifact-store-api POST /blobs failed: ${response.status} ${response.statusText}`, { status: response.status, orgId });
+            }
+            const parsed = (await response.json());
+            const data = parsed.data;
+            if (!data || typeof data.sha256 !== 'string') {
+                throw new errors_1.PayloadCodecError(errors_1.PayloadCodecErrorCode.BLOB_PUT_FAILED, 'artifact-store-api POST /blobs: malformed response envelope.', { received: parsed });
+            }
+            const expectedSha = (0, blob_store_1.sha256Hex)(bytes);
+            if (data.sha256 !== expectedSha) {
+                throw new errors_1.PayloadCodecError(errors_1.PayloadCodecErrorCode.SHA256_MISMATCH, 'artifact-store-api returned a different sha256 than the client computed.', { expected: expectedSha, received: data.sha256 });
+            }
+            const uri = typeof data.uri === 'string' && data.uri.length > 0
+                ? data.uri
+                : `artifact-store://${orgId}/${data.sha256}`;
+            const sizeBytes = typeof data.sizeBytes === 'number' ? data.sizeBytes : bytes.byteLength;
+            const contentTypeOut = typeof data.contentType === 'string' ? data.contentType : contentType;
+            const createdAt = typeof data.createdAt === 'string'
+                ? data.createdAt
+                : new Date().toISOString();
+            return {
+                store: this.kind,
+                uri,
+                sha256: data.sha256,
+                orgId,
+                sizeBytes,
+                contentType: contentTypeOut,
+                createdAt,
+            };
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    }
+    async get(ref) {
+        if (ref.store !== this.kind) {
+            throw new errors_1.PayloadCodecError(errors_1.PayloadCodecErrorCode.UNKNOWN_STORE_KIND, `HttpBlobStore cannot read blobs from store '${ref.store}'.`, { expected: this.kind, received: ref.store });
+        }
+        assertOrgId(ref.orgId);
+        const token = await this.options.tokenProvider();
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), this.options.requestTimeoutMs ?? DEFAULT_REQUEST_TIMEOUT_MS);
+        try {
+            const response = (await fetch(this.resolveUrl(`${GET_PATH_PREFIX}${encodeURIComponent(ref.sha256)}`), {
+                method: 'GET',
+                headers: this.buildHeaders(token, 'application/octet-stream', ref.orgId),
+                signal: controller.signal,
+            }));
+            if (!response.ok) {
+                throw new errors_1.PayloadCodecError(errors_1.PayloadCodecErrorCode.BLOB_GET_FAILED, `artifact-store-api GET /blobs/${ref.sha256} failed: ${response.status} ${response.statusText}`, { status: response.status, sha256: ref.sha256, orgId: ref.orgId });
+            }
+            const buffer = new Uint8Array(await response.arrayBuffer());
+            const actualSha = (0, blob_store_1.sha256Hex)(buffer);
+            if (actualSha !== ref.sha256) {
+                throw new errors_1.PayloadCodecError(errors_1.PayloadCodecErrorCode.SHA256_MISMATCH, 'Blob fetched from artifact-store-api does not match the requested sha256.', { expected: ref.sha256, actual: actualSha });
+            }
+            return buffer;
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    }
+    async delete(ref) {
+        assertOrgId(ref.orgId);
+        const token = await this.options.tokenProvider();
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), this.options.requestTimeoutMs ?? DEFAULT_REQUEST_TIMEOUT_MS);
+        try {
+            const response = (await fetch(this.resolveUrl(`${GET_PATH_PREFIX}${encodeURIComponent(ref.sha256)}`), {
+                method: 'DELETE',
+                headers: this.buildHeaders(token, 'application/octet-stream', ref.orgId),
+                signal: controller.signal,
+            }));
+            if (response.status === 204) {
+                return { deleted: true };
+            }
+            if (response.status === 404) {
+                return { deleted: false };
+            }
+            throw new errors_1.PayloadCodecError(errors_1.PayloadCodecErrorCode.BLOB_GET_FAILED, `artifact-store-api DELETE /blobs/${ref.sha256} failed: ${response.status} ${response.statusText}`, { status: response.status, sha256: ref.sha256, orgId: ref.orgId });
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    }
+    resolveUrl(path) {
+        const base = this.options.baseUrl.replace(/\/+$/, '');
+        return `${base}${path}`;
+    }
+    buildHeaders(token, contentType, orgId) {
+        const headers = new Headers({
+            Authorization: `Bearer ${token}`,
+            'Content-Type': contentType,
+            'X-Org-Id': orgId,
+        });
+        const correlationId = this.options.correlationIdProvider?.();
+        if (correlationId) {
+            headers.set('X-Correlation-Id', correlationId);
+        }
+        return headers;
+    }
+}
+exports.HttpBlobStore = HttpBlobStore;
+function assertOrgId(orgId) {
+    if (typeof orgId !== 'string' || orgId.length === 0) {
+        throw new errors_1.PayloadCodecError(errors_1.PayloadCodecErrorCode.ORG_ID_REQUIRED, 'HttpBlobStore operations require a non-empty orgId for X-Org-Id.');
+    }
+}
+//# sourceMappingURL=http-blob-store.js.map

package/dist/payload-codec/lib/http-blob-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http-blob-store.js","sourceRoot":"","sources":["../../../src/payload-codec/lib/http-blob-store.ts"],"names":[],"mappings":";;;AAEA,mCAAwC;AACxC,qCAAoE;AACpE,6CAKsB;AAgBtB,MAAM,0BAA0B,GAAG,MAAM,CAAC;AAC1C,MAAM,QAAQ,GAAG,QAAQ,CAAC;AAC1B,MAAM,eAAe,GAAG,SAAS,CAAC;AAuBlC,MAAa,aAAa;IAGK;IAFpB,IAAI,GAAG,qBAAa,CAAC,cAAc,CAAC;IAE7C,YAA6B,OAA6B;QAA7B,YAAO,GAAP,OAAO,CAAsB;QACxD,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;YACrB,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAED,KAAK,CAAC,GAAG,CACP,KAAiB,EACjB,WAAmB,EACnB,KAAa;QAEb,WAAW,CAAC,KAAK,CAAC,CAAC;QACnB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;QACjD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CACtB,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EACxB,IAAI,CAAC,OAAO,CAAC,gBAAgB,IAAI,0BAA0B,CAC5D,CAAC;QACF,IAAI,CAAC;YAIH,MAAM,QAAQ,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE;gBACvD,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,CAAC;gBACrD,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,CAAC;gBACnE,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAA8B,CAAC;YACjC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,0BAAiB,CACzB,8BAAqB,CAAC,eAAe,EACrC,0CAA0C,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,EAClF,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,KAAK,EAAE,CACnC,CAAC;YACJ,CAAC;YACD,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAQpC,CAAC;YACF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;YACzB,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC7C,MAAM,IAAI,0BAAiB,CACzB,8BAAqB,CAAC,eAAe,EACrC,8DAA8D,EAC9D,EAAE,QAAQ,EAAE,MAAM,EAAE,CACrB,CAAC;YACJ,CAAC;YACD,MAAM,WAAW,GAAG,IAAA,sBAAS,EAAC,KAAK,CAAC,CAAC;YACrC,IAAI,IAAI,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;gBAChC,MAAM,IAAI,0BAAiB,CACzB,8BAAqB,CAAC,eAAe,EACrC,0EAA0E,EAC1E,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,CACjD,CAAC;YACJ,CAAC;YAID,MAAM,GAAG,GACP,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC;gBACjD,CAAC,CAAC,IAAI,CAAC,GAAG;gBACV,CAAC,CAAC,oBAAoB,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACjD,MAAM,SAAS,GACb,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC;YACzE,MAAM,cAAc,GAClB,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC;YACxE,MAAM,SAAS,GACb,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ;gBAChC,CAAC,CAAC,IAAI,CAAC,SAAS;gBAChB,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;YAC/B,OAAO;gBACL,KAAK,EAAE,IAAI,CAAC,IAAI;gBAChB,GAAG;gBACH,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,KAAK;gBACL,SAAS;gBACT,WAAW,EAAE,cAAc;gBAC3B,SAAS;aACV,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAY;QACpB,IAAI,GAAG,CAAC,KAAK,KAAK,IAAI,CAAC,IAAI,EAAE,CAAC;YAC5B,MAAM,IAAI,0BAAiB,CACzB,8BAAqB,CAAC,kBAAkB,EACxC,+CAA+C,GAAG,CAAC,KAAK,IAAI,EAC5D,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,GAAG,CAAC,KAAK,EAAE,CAC7C,CAAC;QACJ,CAAC;QACD,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACvB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;QACjD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CACtB,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EACxB,IAAI,CAAC,OAAO,CAAC,gBAAgB,IAAI,0BAA0B,CAC5D,CAAC;QACF,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,CAAC,MAAM,KAAK,CAC3B,IAAI,CAAC,UAAU,CAAC,GAAG,eAAe,GAAG,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EACtE;gBACE,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,0BAA0B,EAAE,GAAG,CAAC,KAAK,CAAC;gBACxE,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CACF,CAA8B,CAAC;YAChC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,IAAI,0BAAiB,CACzB,8BAAqB,CAAC,eAAe,EACrC,iCAAiC,GAAG,CAAC,MAAM,YAAY,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,EAC/F,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAClE,CAAC;YACJ,CAAC;YACD,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;YAC5D,MAAM,SAAS,GAAG,IAAA,sBAAS,EAAC,MAAM,CAAC,CAAC;YACpC,IAAI,SAAS,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC;gBAC7B,MAAM,IAAI,0BAAiB,CACzB,8BAAqB,CAAC,eAAe,EACrC,2EAA2E,EAC3E,EAAE,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,CAC5C,CAAC;YACJ,CAAC;YACD,OAAO,MAAM,CAAC;QAChB,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CACV,GAAsC;QAEtC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACvB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,CAAC;QACjD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CACtB,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EACxB,IAAI,CAAC,OAAO,CAAC,gBAAgB,IAAI,0BAA0B,CAC5D,CAAC;QACF,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,CAAC,MAAM,KAAK,CAC3B,IAAI,CAAC,UAAU,CAAC,GAAG,eAAe,GAAG,kBAAkB,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,EACtE;gBACE,MAAM,EAAE,QAAQ;gBAChB,OAAO,EAAE,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,0BAA0B,EAAE,GAAG,CAAC,KAAK,CAAC;gBACxE,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CACF,CAA8B,CAAC;YAChC,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAM5B,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;YAC3B,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAG5B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YAC5B,CAAC;YACD,MAAM,IAAI,0BAAiB,CACzB,8BAAqB,CAAC,eAAe,EACrC,oCAAoC,GAAG,CAAC,MAAM,YAAY,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,EAAE,EAClG,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAClE,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IAEO,UAAU,CAAC,IAAY;QAC7B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACtD,OAAO,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC;IAC1B,CAAC;IAEO,YAAY,CAAC,KAAa,EAAE,WAAmB,EAAE,KAAa;QACpE,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC;YAC1B,aAAa,EAAE,UAAU,KAAK,EAAE;YAChC,cAAc,EAAE,WAAW;YAC3B,UAAU,EAAE,KAAK;SAClB,CAAC,CAAC;QACH,MAAM,aAAa,GAAG,IAAI,CAAC,OAAO,CAAC,qBAAqB,EAAE,EAAE,CAAC;QAC7D,IAAI,aAAa,EAAE,CAAC;YAClB,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,aAAa,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;CACF;AArMD,sCAqMC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,0BAAiB,CACzB,8BAAqB,CAAC,eAAe,EACrC,kEAAkE,CACnE,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/payload-codec/lib/lru-cache.d.ts

@@ -0,0 +1,12 @@
+export declare class BytesLruCache {
+    private readonly capacityBytes;
+    private readonly entries;
+    private totalBytes;
+    constructor(capacityBytes: number);
+    get(key: string): Uint8Array | null;
+    put(key: string, value: Uint8Array): void;
+    clear(): void;
+    get size(): number;
+    get count(): number;
+}
+//# sourceMappingURL=lru-cache.d.ts.map

package/dist/payload-codec/lib/lru-cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"lru-cache.d.ts","sourceRoot":"","sources":["../../../src/payload-codec/lib/lru-cache.ts"],"names":[],"mappings":"AAUA,qBAAa,aAAa;IAIZ,OAAO,CAAC,QAAQ,CAAC,aAAa;IAH1C,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiC;IACzD,OAAO,CAAC,UAAU,CAAK;gBAEM,aAAa,EAAE,MAAM;IAUlD,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,UAAU,GAAG,IAAI;IAgBnC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,IAAI;IA0BzC,KAAK,IAAI,IAAI;IAMb,IAAI,IAAI,IAAI,MAAM,CAEjB;IAGD,IAAI,KAAK,IAAI,MAAM,CAElB;CACF"}

package/dist/payload-codec/lib/lru-cache.js

@@ -0,0 +1,59 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BytesLruCache = void 0;
+class BytesLruCache {
+    capacityBytes;
+    entries = new Map();
+    totalBytes = 0;
+    constructor(capacityBytes) {
+        this.capacityBytes = capacityBytes;
+        if (!Number.isFinite(capacityBytes) || capacityBytes < 0) {
+            throw new Error(`BytesLruCache: capacityBytes must be a non-negative finite number, got ${capacityBytes}.`);
+        }
+    }
+    get(key) {
+        const found = this.entries.get(key);
+        if (found === undefined) {
+            return null;
+        }
+        this.entries.delete(key);
+        this.entries.set(key, found);
+        return found;
+    }
+    put(key, value) {
+        if (value.byteLength > this.capacityBytes) {
+            return;
+        }
+        if (this.entries.has(key)) {
+            const prev = this.entries.get(key);
+            this.totalBytes -= prev.byteLength;
+            this.entries.delete(key);
+        }
+        this.entries.set(key, value);
+        this.totalBytes += value.byteLength;
+        while (this.totalBytes > this.capacityBytes) {
+            const oldest = this.entries.keys().next();
+            if (oldest.done === true) {
+                break;
+            }
+            const evicted = this.entries.get(oldest.value);
+            if (evicted === undefined) {
+                break;
+            }
+            this.totalBytes -= evicted.byteLength;
+            this.entries.delete(oldest.value);
+        }
+    }
+    clear() {
+        this.entries.clear();
+        this.totalBytes = 0;
+    }
+    get size() {
+        return this.totalBytes;
+    }
+    get count() {
+        return this.entries.size;
+    }
+}
+exports.BytesLruCache = BytesLruCache;
+//# sourceMappingURL=lru-cache.js.map

package/dist/payload-codec/lib/lru-cache.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lru-cache.js","sourceRoot":"","sources":["../../../src/payload-codec/lib/lru-cache.ts"],"names":[],"mappings":";;;AAUA,MAAa,aAAa;IAIK;IAHZ,OAAO,GAAG,IAAI,GAAG,EAAsB,CAAC;IACjD,UAAU,GAAG,CAAC,CAAC;IAEvB,YAA6B,aAAqB;QAArB,kBAAa,GAAb,aAAa,CAAQ;QAChD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;YACzD,MAAM,IAAI,KAAK,CAAC,0EAA0E,aAAa,GAAG,CAAC,CAAC;QAC9G,CAAC;IACH,CAAC;IAMD,GAAG,CAAC,GAAW;QACb,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACzB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC7B,OAAO,KAAK,CAAC;IACf,CAAC;IAOD,GAAG,CAAC,GAAW,EAAE,KAAiB;QAChC,IAAI,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;YAC1C,OAAO;QACT,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC;YACpC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,UAAU,CAAC;YACnC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC3B,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC7B,IAAI,CAAC,UAAU,IAAI,KAAK,CAAC,UAAU,CAAC;QACpC,OAAO,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;YAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC;YAC1C,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;gBACzB,MAAM;YACR,CAAC;YACD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC/C,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;gBAC1B,MAAM;YACR,CAAC;YACD,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC,UAAU,CAAC;YACtC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAGD,KAAK;QACH,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QACrB,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC;IACtB,CAAC;IAGD,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAGD,IAAI,KAAK;QACP,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3B,CAAC;CACF;AAtED,sCAsEC"}

package/dist/schema/action.schema.json

@@ -0,0 +1,181 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://xema.dev/schemas/workflow/v1alpha1/Action.json",
+  "title": "Xema Action Manifest",
+  "description": "Declarative manifest for a single action version. Manifests live in plugins/software-dev/workflow-config/actions/ and are seeded into the workflow-engine action registry.",
+  "type": "object",
+  "required": ["apiVersion", "kind", "metadata", "spec"],
+  "additionalProperties": false,
+  "properties": {
+    "apiVersion": { "type": "string", "const": "xema.dev/workflow/v1alpha1" },
+    "kind": { "type": "string", "const": "Action" },
+    "metadata": { "$ref": "#/$defs/Metadata" },
+    "spec": { "$ref": "#/$defs/Spec" }
+  },
+  "$defs": {
+    "Metadata": {
+      "type": "object",
+      "required": ["id", "version"],
+      "additionalProperties": false,
+      "properties": {
+        "id": {
+          "type": "string",
+          "pattern": "^[a-z][a-z0-9-]*/[a-z][a-z0-9-]{0,62}$",
+          "description": "Canonical action id as `<namespace>/<actionId>`, e.g. `xema/agent` or `software-dev/scm-checkout`."
+        },
+        "version": {
+          "type": "string",
+          "pattern": "^[0-9]+\\.[0-9]+\\.[0-9]+(-[A-Za-z0-9.-]+)?$"
+        },
+        "title": { "type": "string", "maxLength": 120 },
+        "description": { "type": "string", "maxLength": 4000 }
+      }
+    },
+    "Spec": {
+      "type": "object",
+      "required": ["executionKind", "taskQueue", "inputs", "outputs", "permissions", "retryDefaults", "timeoutDefaults"],
+      "additionalProperties": false,
+      "properties": {
+        "executionKind": { "type": "string", "enum": ["activity", "child_workflow"] },
+        "taskQueue": { "type": "string", "enum": ["xema_default", "xema_agent", "xema_human"] },
+        "actionKind": {
+          "type": "string",
+          "description": "Semantic category — drives consumer presentation (FE canvas shape, badge icon). Optional; omitted manifests are treated as 'generic'. Closed list mirrors `ActionKind` in `@xemahq/workflow-contracts`.",
+          "enum": [
+            "agent",
+            "review",
+            "wait",
+            "timer",
+            "aggregate",
+            "dispatch",
+            "branch",
+            "loop",
+            "publish",
+            "notify",
+            "inquiry",
+            "fetch",
+            "transform",
+            "validate",
+            "terminate",
+            "generic"
+          ]
+        },
+        "inputs": {
+          "type": "object",
+          "description": "JSON Schema (Draft 2020-12) for the action's `with:` arguments."
+        },
+        "outputs": {
+          "type": "object",
+          "description": "JSON Schema (Draft 2020-12) for the action's emitted outputs."
+        },
+        "outputBindings": {
+          "type": "object",
+          "description": "Optional per-output deliverable-spec bindings. Keys are output names declared in `outputs`. Each entry pins the output's payload shape to a deliverable spec; the DSL compiler reads this first for typed reach-in validation, falling back to the job-level `with.deliverableSpecRef` when absent.",
+          "additionalProperties": {
+            "type": "object",
+            "additionalProperties": false,
+            "properties": {
+              "deliverableSpecRef": {
+                "type": "string",
+                "description": "Canonical `<slug>@<version>` (e.g. `metrics-snapshot@1.0.0`).",
+                "pattern": "^[a-z][a-z0-9-]*@[0-9]+\\.[0-9]+\\.[0-9]+$"
+              }
+            }
+          }
+        },
+        "permissions": {
+          "type": "object",
+          "description": "Minimum permission scope this action requires.",
+          "additionalProperties": false,
+          "properties": {
+            "repos": { "type": "string", "enum": ["none", "read", "limited", "write"] },
+            "kb": { "type": "string", "enum": ["none", "read", "limited", "write"] },
+            "backlog": { "type": "string", "enum": ["none", "read", "limited", "write"] },
+            "integrations": { "type": "string", "enum": ["none", "read", "limited", "write"] },
+            "artifacts": { "type": "string", "enum": ["none", "read", "limited", "write"] }
+          }
+        },
+        "allowedMounts": {
+          "type": "array",
+          "items": { "type": "string", "pattern": "^[a-z][a-z0-9-]*$" },
+          "uniqueItems": true
+        },
+        "retryDefaults": {
+          "type": "object",
+          "required": ["maxAttempts", "initialInterval", "backoffCoefficient", "maximumInterval"],
+          "additionalProperties": false,
+          "properties": {
+            "maxAttempts": { "type": "integer", "minimum": 1, "maximum": 20 },
+            "initialInterval": { "type": "string", "pattern": "^([1-9][0-9]*)(s|m|h)$" },
+            "backoffCoefficient": { "type": "number", "minimum": 1.0, "maximum": 10.0 },
+            "maximumInterval": { "type": "string", "pattern": "^([1-9][0-9]*)(s|m|h)$" },
+            "nonRetryableErrorTypes": {
+              "type": "array",
+              "items": { "type": "string", "minLength": 1 }
+            }
+          }
+        },
+        "timeoutDefaults": {
+          "type": "object",
+          "required": ["startToClose"],
+          "additionalProperties": false,
+          "properties": {
+            "startToClose": { "type": "string", "pattern": "^([1-9][0-9]*)(s|m|h)$" },
+            "heartbeat": { "type": "string", "pattern": "^([1-9][0-9]*)(s|m|h)$" }
+          }
+        },
+        "auditEventMapping": {
+          "type": "object",
+          "description": "Mapping from step lifecycle to audit-log-api event code.",
+          "additionalProperties": false,
+          "properties": {
+            "started": { "type": "string", "minLength": 1 },
+            "succeeded": { "type": "string", "minLength": 1 },
+            "failed": { "type": "string", "minLength": 1 }
+          }
+        },
+        "consumes": {
+          "type": "array",
+          "description": "Declarative contracts the action opts into. The DSL compiler reads this list to decide which validation lanes apply — e.g. the `workspace-manifest@v1` entry enables the manifest-source triplet and the frontend canvas Inspector renders the manifest picker.",
+          "items": { "$ref": "#/$defs/ActionContract" }
+        }
+      }
+    },
+    "ActionContract": {
+      "description": "Versioned consume-contract declaration. Kinds: `workspace-manifest@v1` (manifest-source triplet) and `agent-composition@v1` (`with.composition` slug@version reference).",
+      "oneOf": [
+        { "$ref": "#/$defs/WorkspaceManifestActionContract" },
+        { "$ref": "#/$defs/AgentCompositionActionContract" }
+      ]
+    },
+    "WorkspaceManifestActionContract": {
+      "type": "object",
+      "required": ["kind", "version"],
+      "additionalProperties": false,
+      "properties": {
+        "kind": { "type": "string", "const": "workspace-manifest" },
+        "version": { "type": "string", "const": "v1" },
+        "surfaces": {
+          "type": "array",
+          "description": "Restricts the surfaces the action can be invoked on. Must intersect the manifest's `metadata.surfaceCompat`.",
+          "items": { "type": "string", "enum": ["workflow", "agent-session"] },
+          "uniqueItems": true
+        },
+        "roleHint": {
+          "type": "string",
+          "description": "Pins the manifest's `spec.agent.role` to a closed `AgentRunRole`. Compile-time fail when a workflow points the action at a manifest whose role doesn't match."
+        }
+      }
+    },
+    "AgentCompositionActionContract": {
+      "type": "object",
+      "required": ["kind", "version"],
+      "additionalProperties": false,
+      "description": "Opts the action into the `with.composition` field — a `slug@version` reference to an Agent Composition resolved at dispatch time by the runtime.",
+      "properties": {
+        "kind": { "type": "string", "const": "agent-composition" },
+        "version": { "type": "string", "const": "v1" }
+      }
+    }
+  }
+}

package/dist/schema/reusable-workflow.schema.json

@@ -0,0 +1,46 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://xema.dev/schemas/workflow/v1alpha1/ReusableWorkflow.json",
+  "title": "Xema Reusable Workflow",
+  "description": "A workflow invoked via `workflow_call` from another workflow. Must declare `on.workflow_call`.",
+  "type": "object",
+  "required": ["apiVersion", "kind", "metadata", "on", "jobs"],
+  "additionalProperties": false,
+  "properties": {
+    "apiVersion": { "type": "string", "const": "xema.dev/workflow/v1alpha1" },
+    "kind": { "type": "string", "const": "Workflow" },
+    "metadata": {
+      "$ref": "https://xema.dev/schemas/workflow/v1alpha1/Workflow.json#/$defs/Metadata"
+    },
+    "on": {
+      "type": "object",
+      "required": ["workflow_call"],
+      "additionalProperties": false,
+      "properties": {
+        "workflow_call": {
+          "$ref": "https://xema.dev/schemas/workflow/v1alpha1/Workflow.json#/$defs/WorkflowCallTrigger"
+        }
+      }
+    },
+    "concurrency": {
+      "$ref": "https://xema.dev/schemas/workflow/v1alpha1/Workflow.json#/$defs/Concurrency"
+    },
+    "defaults": {
+      "$ref": "https://xema.dev/schemas/workflow/v1alpha1/Workflow.json#/$defs/Defaults"
+    },
+    "permissions": {
+      "$ref": "https://xema.dev/schemas/workflow/v1alpha1/Workflow.json#/$defs/Permissions"
+    },
+    "vars": { "type": "object", "additionalProperties": true },
+    "jobs": {
+      "type": "object",
+      "minProperties": 1,
+      "additionalProperties": {
+        "$ref": "https://xema.dev/schemas/workflow/v1alpha1/Workflow.json#/$defs/Job"
+      },
+      "propertyNames": {
+        "$ref": "https://xema.dev/schemas/workflow/v1alpha1/Workflow.json#/$defs/JobKey"
+      }
+    }
+  }
+}