@xemahq/dsl 0.1.1

package/dist/workflow/lib/compiler/manifest-source.js

@@ -0,0 +1,100 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.compileManifestSource = compileManifestSource;
+const workflow_1 = require("@xemahq/kernel-contracts/workflow");
+const workspace_manifest_1 = require("../../../workspace-manifest");
+const errors_1 = require("../errors");
+const interpolation_1 = require("../expression/interpolation");
+const action_shape_1 = require("./action-shape");
+const INLINE_MANIFEST_VERSION = '0.0.0';
+function compileManifestSource(jobKey, withBlock, actionManifest) {
+    if (!(0, action_shape_1.isAgentShapedAction)(actionManifest))
+        return null;
+    const block = withBlock ?? {};
+    const ref = block['compositionRef'];
+    if (typeof ref === 'string' && ref.length > 0) {
+        if (isLiteralString(ref)) {
+            return Object.freeze({ kind: 'ref', ref });
+        }
+        return Object.freeze({ kind: 'inline-deferred' });
+    }
+    if (ref !== undefined) {
+        return Object.freeze({ kind: 'inline-deferred' });
+    }
+    const mounts = block['mounts'];
+    if (containsExpressions(mounts)) {
+        return Object.freeze({ kind: 'inline-deferred' });
+    }
+    const agentSlug = block['agentSlug'];
+    const phaseKey = block['phaseKey'];
+    const deliverableSpecRef = block['deliverableSpecRef'];
+    const roleRaw = block['role'];
+    if (!isLiteralString(agentSlug) ||
+        !isLiteralStringOrUndefined(phaseKey) ||
+        !isLiteralStringOrNullOrUndefined(deliverableSpecRef) ||
+        !isLiteralStringOrUndefined(roleRaw)) {
+        return Object.freeze({ kind: 'inline-deferred' });
+    }
+    if (typeof roleRaw !== 'string' || !(0, workflow_1.isAgentRunRole)(roleRaw)) {
+        throw new errors_1.WorkflowDslError(workflow_1.WorkflowErrorCode.DSL_SEMANTIC_INVALID, `Job '${jobKey}' uses inline 'mounts:' but its 'with.role' is missing or not a canonical AgentRunRole. ` +
+            `Declare 'role' explicitly (e.g. 'unit-worker', 'coordinator', 'gate-reviewer'); the action schema enforces this at compile time.`, { jobKey, actionId: actionManifest.metadata.id });
+    }
+    const role = roleRaw;
+    const envelope = synthesizeInlineManifestEnvelope({
+        agentSlug,
+        phaseKey: typeof phaseKey === 'string' ? phaseKey : null,
+        role,
+        deliverableSpecRef: typeof deliverableSpecRef === 'string' ? deliverableSpecRef : null,
+        mounts: mounts,
+    });
+    const result = (0, workspace_manifest_1.compileManifest)(envelope, {});
+    if (!result.ok) {
+        throw new errors_1.WorkflowDslError(workflow_1.WorkflowErrorCode.DSL_SEMANTIC_INVALID, `Job '${jobKey}' inline workspace manifest failed to compile: ${result.errors
+            .map((e) => `${e.path}: ${e.message}`)
+            .join('; ')
+            .slice(0, 400)}`, { jobKey, actionId: actionManifest.metadata.id });
+    }
+    return Object.freeze({ kind: 'inline', compiled: result.compiled });
+}
+function synthesizeInlineManifestEnvelope(args) {
+    return {
+        apiVersion: 'xema.dev/workspace/v1',
+        kind: 'WorkspaceManifest',
+        metadata: {
+            slug: 'inline',
+            version: INLINE_MANIFEST_VERSION,
+            surfaceCompat: ['workflow'],
+        },
+        spec: {
+            agent: {
+                slug: args.agentSlug,
+                phase: args.phaseKey ?? 'default',
+                role: args.role,
+                ...(args.deliverableSpecRef === null
+                    ? {}
+                    : { deliverableSpecRef: args.deliverableSpecRef }),
+            },
+            mounts: args.mounts,
+        },
+    };
+}
+function containsExpressions(node) {
+    if (typeof node === 'string')
+        return interpolation_1.ANY_INTERPOLATION_RE.test(node);
+    if (Array.isArray(node))
+        return node.some(containsExpressions);
+    if (node !== null && typeof node === 'object') {
+        return Object.values(node).some(containsExpressions);
+    }
+    return false;
+}
+function isLiteralString(value) {
+    return typeof value === 'string' && !interpolation_1.ANY_INTERPOLATION_RE.test(value);
+}
+function isLiteralStringOrUndefined(value) {
+    return value === undefined || isLiteralString(value);
+}
+function isLiteralStringOrNullOrUndefined(value) {
+    return value === null || value === undefined || isLiteralString(value);
+}
+//# sourceMappingURL=manifest-source.js.map

package/dist/workflow/lib/compiler/manifest-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manifest-source.js","sourceRoot":"","sources":["../../../../src/workflow/lib/compiler/manifest-source.ts"],"names":[],"mappings":";;AA6CA,sDAoEC;AAjHD,gEAI2C;AAC3C,oEAA8D;AAE9D,sCAA6C;AAC7C,+DAAmE;AAEnE,iDAAqD;AAQrD,MAAM,uBAAuB,GAAG,OAAO,CAAC;AA2BxC,SAAgB,qBAAqB,CACnC,MAAc,EACd,SAAwD,EACxD,cAAqC;IAErC,IAAI,CAAC,IAAA,kCAAmB,EAAC,cAAc,CAAC;QAAE,OAAO,IAAI,CAAC;IACtD,MAAM,KAAK,GAAG,SAAS,IAAI,EAAE,CAAC;IAE9B,MAAM,GAAG,GAAG,KAAK,CAAC,gBAAgB,CAAC,CAAC;IACpC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9C,IAAI,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,KAAc,EAAE,GAAG,EAAE,CAAC,CAAC;QACtD,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,iBAA0B,EAAE,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QAEtB,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,iBAA0B,EAAE,CAAC,CAAC;IAC7D,CAAC;IAGD,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC/B,IAAI,mBAAmB,CAAC,MAAM,CAAC,EAAE,CAAC;QAChC,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,iBAA0B,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,MAAM,SAAS,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC;IACrC,MAAM,QAAQ,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC;IACnC,MAAM,kBAAkB,GAAG,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACvD,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;IAC9B,IACE,CAAC,eAAe,CAAC,SAAS,CAAC;QAC3B,CAAC,0BAA0B,CAAC,QAAQ,CAAC;QACrC,CAAC,gCAAgC,CAAC,kBAAkB,CAAC;QACrD,CAAC,0BAA0B,CAAC,OAAO,CAAC,EACpC,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,iBAA0B,EAAE,CAAC,CAAC;IAC7D,CAAC;IAED,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,CAAC,IAAA,yBAAc,EAAC,OAAO,CAAC,EAAE,CAAC;QAC5D,MAAM,IAAI,yBAAgB,CACxB,4BAAiB,CAAC,oBAAoB,EACtC,QAAQ,MAAM,0FAA0F;YACtG,kIAAkI,EACpI,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,CAAC,QAAQ,CAAC,EAAE,EAAE,CACjD,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC;IACrB,MAAM,QAAQ,GAAG,gCAAgC,CAAC;QAChD,SAAS;QACT,QAAQ,EAAE,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI;QACxD,IAAI;QACJ,kBAAkB,EAChB,OAAO,kBAAkB,KAAK,QAAQ,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAI;QACpE,MAAM,EAAE,MAA2C;KACpD,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,IAAA,oCAAe,EAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC7C,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,MAAM,IAAI,yBAAgB,CACxB,4BAAiB,CAAC,oBAAoB,EACtC,QAAQ,MAAM,kDAAkD,MAAM,CAAC,MAAM;aAC1E,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;aACrC,IAAI,CAAC,IAAI,CAAC;aACV,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAClB,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,CAAC,QAAQ,CAAC,EAAE,EAAE,CACjD,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,QAAiB,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;AAC/E,CAAC;AAeD,SAAS,gCAAgC,CAAC,IAAoB;IAC5D,OAAO;QACL,UAAU,EAAE,uBAAuB;QACnC,IAAI,EAAE,mBAAmB;QACzB,QAAQ,EAAE;YACR,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,uBAAuB;YAMhC,aAAa,EAAE,CAAC,UAAU,CAAC;SAC5B;QACD,IAAI,EAAE;YACJ,KAAK,EAAE;gBACL,IAAI,EAAE,IAAI,CAAC,SAAS;gBACpB,KAAK,EAAE,IAAI,CAAC,QAAQ,IAAI,SAAS;gBACjC,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,GAAG,CAAC,IAAI,CAAC,kBAAkB,KAAK,IAAI;oBAClC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,EAAE,CAAC;aACrD;YACD,MAAM,EAAE,IAAI,CAAC,MAAM;SACpB;KACF,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,IAAa;IACxC,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,oCAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACrE,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAC/D,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC9C,OAAO,MAAM,CAAC,MAAM,CAAC,IAA+B,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,oCAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,0BAA0B,CAAC,KAAc;IAChD,OAAO,KAAK,KAAK,SAAS,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,gCAAgC,CAAC,KAAc;IACtD,OAAO,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,IAAI,eAAe,CAAC,KAAK,CAAC,CAAC;AACzE,CAAC"}

package/dist/workflow/lib/compiler/matrix.d.ts

@@ -0,0 +1,4 @@
+import type { CompiledStrategy } from '@xemahq/kernel-contracts/workflow';
+import type { WorkflowStrategyDeclaration } from '../types';
+export declare function compileStrategy(declaration: WorkflowStrategyDeclaration | undefined, jobKey: string): CompiledStrategy;
+//# sourceMappingURL=matrix.d.ts.map

package/dist/workflow/lib/compiler/matrix.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"matrix.d.ts","sourceRoot":"","sources":["../../../../src/workflow/lib/compiler/matrix.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAIV,gBAAgB,EACjB,MAAM,mCAAmC,CAAC;AAE3C,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,UAAU,CAAC;AAgB5D,wBAAgB,eAAe,CAC7B,WAAW,EAAE,2BAA2B,GAAG,SAAS,EACpD,MAAM,EAAE,MAAM,GACb,gBAAgB,CAWlB"}

package/dist/workflow/lib/compiler/matrix.js

@@ -0,0 +1,76 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.compileStrategy = compileStrategy;
+const workflow_1 = require("@xemahq/kernel-contracts/workflow");
+const errors_1 = require("../errors");
+const expression_1 = require("../expression");
+const interpolation_1 = require("../expression/interpolation");
+const MATRIX_MAX_ENTRIES = 64;
+const MATRIX_DEFAULT_MAX_PARALLEL = 8;
+function compileStrategy(declaration, jobKey) {
+    if (!declaration) {
+        const single = { kind: workflow_1.MatrixStrategyKind.SINGLE };
+        return single;
+    }
+    if ('matrix' in declaration) {
+        return expandStaticMatrix(declaration.matrix, declaration.maxParallel, jobKey);
+    }
+    return compileDynamicStrategy(declaration.dynamic, declaration.maxParallel, jobKey);
+}
+function expandStaticMatrix(axes, maxParallelRaw, jobKey) {
+    const axisKeys = Object.keys(axes).sort();
+    if (axisKeys.length === 0) {
+        throw new errors_1.WorkflowDslError(workflow_1.WorkflowErrorCode.DSL_SEMANTIC_INVALID, `Job '${jobKey}' declares strategy.matrix with no axes.`, { jobKey });
+    }
+    let entries = [{}];
+    for (const axis of axisKeys) {
+        const values = axes[axis];
+        const next = [];
+        for (const partial of entries) {
+            for (const value of values) {
+                next.push({ ...partial, [axis]: value });
+            }
+            if (next.length > MATRIX_MAX_ENTRIES)
+                break;
+        }
+        entries = next;
+        if (entries.length > MATRIX_MAX_ENTRIES)
+            break;
+    }
+    if (entries.length > MATRIX_MAX_ENTRIES) {
+        throw new errors_1.WorkflowDslError(workflow_1.WorkflowErrorCode.DSL_MATRIX_CARDINALITY_EXCEEDED, `Job '${jobKey}' static matrix expansion produces ${entries.length} entries; cap is ${MATRIX_MAX_ENTRIES}.`, { jobKey, cap: MATRIX_MAX_ENTRIES, cardinality: entries.length });
+    }
+    const maxParallel = resolveMaxParallel(maxParallelRaw, entries.length);
+    return {
+        kind: workflow_1.MatrixStrategyKind.STATIC,
+        entries: entries.map(Object.freeze),
+        maxParallel,
+    };
+}
+function compileDynamicStrategy(declaration, maxParallelRaw, jobKey) {
+    const body = (0, interpolation_1.stripInterpolation)(declaration.from);
+    (0, expression_1.compileExpression)(body);
+    const maxEntries = declaration.maxEntries ?? MATRIX_MAX_ENTRIES;
+    if (maxEntries < 1 || maxEntries > MATRIX_MAX_ENTRIES) {
+        throw new errors_1.WorkflowDslError(workflow_1.WorkflowErrorCode.DSL_SEMANTIC_INVALID, `Job '${jobKey}' strategy.dynamic.maxEntries must be in [1, ${MATRIX_MAX_ENTRIES}]; got ${maxEntries}.`, { jobKey, maxEntries, cap: MATRIX_MAX_ENTRIES });
+    }
+    const maxParallel = resolveMaxParallel(maxParallelRaw, maxEntries);
+    return {
+        kind: workflow_1.MatrixStrategyKind.DYNAMIC,
+        fromExpression: body,
+        bindingName: declaration.as,
+        maxEntries,
+        maxParallel,
+        keyBy: declaration.keyBy ?? null,
+    };
+}
+function resolveMaxParallel(raw, cardinality) {
+    if (raw === undefined) {
+        return Math.min(MATRIX_DEFAULT_MAX_PARALLEL, Math.max(1, cardinality));
+    }
+    if (raw < 1) {
+        throw new errors_1.WorkflowDslError(workflow_1.WorkflowErrorCode.DSL_SEMANTIC_INVALID, `strategy.maxParallel must be >= 1 (got ${raw}).`, { raw });
+    }
+    return Math.min(raw, MATRIX_MAX_ENTRIES);
+}
+//# sourceMappingURL=matrix.js.map

package/dist/workflow/lib/compiler/matrix.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"matrix.js","sourceRoot":"","sources":["../../../../src/workflow/lib/compiler/matrix.ts"],"names":[],"mappings":";;AAwBA,0CAcC;AAtCD,gEAA0F;AAO1F,sCAA6C;AAE7C,8CAAkD;AAClD,+DAAiE;AAGjE,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAC9B,MAAM,2BAA2B,GAAG,CAAC,CAAC;AAUtC,SAAgB,eAAe,CAC7B,WAAoD,EACpD,MAAc;IAEd,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,MAAM,MAAM,GAA2B,EAAE,IAAI,EAAE,6BAAkB,CAAC,MAAM,EAAE,CAAC;QAC3E,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,IAAI,QAAQ,IAAI,WAAW,EAAE,CAAC;QAC5B,OAAO,kBAAkB,CAAC,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IACjF,CAAC;IAED,OAAO,sBAAsB,CAAC,WAAW,CAAC,OAAO,EAAE,WAAW,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;AACtF,CAAC;AAED,SAAS,kBAAkB,CACzB,IAAkD,EAClD,cAAkC,EAClC,MAAc;IAEd,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1C,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,yBAAgB,CACxB,4BAAiB,CAAC,oBAAoB,EACtC,QAAQ,MAAM,0CAA0C,EACxD,EAAE,MAAM,EAAE,CACX,CAAC;IACJ,CAAC;IAGD,IAAI,OAAO,GAA8B,CAAC,EAAE,CAAC,CAAC;IAC9C,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAE,CAAC;QAC3B,MAAM,IAAI,GAA8B,EAAE,CAAC;QAC3C,KAAK,MAAM,OAAO,IAAI,OAAO,EAAE,CAAC;YAC9B,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,IAAI,CAAC,IAAI,CAAC,EAAE,GAAG,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;YAC3C,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,GAAG,kBAAkB;gBAAE,MAAM;QAC9C,CAAC;QACD,OAAO,GAAG,IAAI,CAAC;QACf,IAAI,OAAO,CAAC,MAAM,GAAG,kBAAkB;YAAE,MAAM;IACjD,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,GAAG,kBAAkB,EAAE,CAAC;QACxC,MAAM,IAAI,yBAAgB,CACxB,4BAAiB,CAAC,+BAA+B,EACjD,QAAQ,MAAM,sCAAsC,OAAO,CAAC,MAAM,oBAAoB,kBAAkB,GAAG,EAC3G,EAAE,MAAM,EAAE,GAAG,EAAE,kBAAkB,EAAE,WAAW,EAAE,OAAO,CAAC,MAAM,EAAE,CACjE,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,kBAAkB,CAAC,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAEvE,OAAO;QACL,IAAI,EAAE,6BAAkB,CAAC,MAAM;QAC/B,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAiD;QACnF,WAAW;KACZ,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAC7B,WAKC,EACD,cAAkC,EAClC,MAAc;IAEd,MAAM,IAAI,GAAG,IAAA,kCAAkB,EAAC,WAAW,CAAC,IAAI,CAAC,CAAC;IAIlD,IAAA,8BAAiB,EAAC,IAAI,CAAC,CAAC;IAExB,MAAM,UAAU,GAAG,WAAW,CAAC,UAAU,IAAI,kBAAkB,CAAC;IAChE,IAAI,UAAU,GAAG,CAAC,IAAI,UAAU,GAAG,kBAAkB,EAAE,CAAC;QACtD,MAAM,IAAI,yBAAgB,CACxB,4BAAiB,CAAC,oBAAoB,EACtC,QAAQ,MAAM,gDAAgD,kBAAkB,UAAU,UAAU,GAAG,EACvG,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,kBAAkB,EAAE,CAChD,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,kBAAkB,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;IAEnE,OAAO;QACL,IAAI,EAAE,6BAAkB,CAAC,OAAO;QAChC,cAAc,EAAE,IAAI;QACpB,WAAW,EAAE,WAAW,CAAC,EAAE;QAC3B,UAAU;QACV,WAAW;QACX,KAAK,EAAE,WAAW,CAAC,KAAK,IAAI,IAAI;KACjC,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,GAAuB,EAAE,WAAmB;IACtE,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,OAAO,IAAI,CAAC,GAAG,CAAC,2BAA2B,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;QACZ,MAAM,IAAI,yBAAgB,CACxB,4BAAiB,CAAC,oBAAoB,EACtC,0CAA0C,GAAG,IAAI,EACjD,EAAE,GAAG,EAAE,CACR,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;AAC3C,CAAC"}

package/dist/workflow/lib/compiler/mount-plan.d.ts

@@ -0,0 +1,4 @@
+import type { MountPlan } from '@xemahq/kernel-contracts/workflow';
+import type { ActionManifest } from '../types';
+export declare function compileMountPlan(jobKey: string, withBlock: Readonly<Record<string, unknown>> | undefined, actionManifest: ActionManifest | null): MountPlan;
+//# sourceMappingURL=mount-plan.d.ts.map

package/dist/workflow/lib/compiler/mount-plan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mount-plan.d.ts","sourceRoot":"","sources":["../../../../src/workflow/lib/compiler/mount-plan.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,mCAAmC,CAAC;AAEnE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAsC/C,wBAAgB,gBAAgB,CAC9B,MAAM,EAAE,MAAM,EACd,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,SAAS,EACxD,cAAc,EAAE,cAAc,GAAG,IAAI,GACpC,SAAS,CAqDX"}

package/dist/workflow/lib/compiler/mount-plan.js

@@ -0,0 +1,96 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.compileMountPlan = compileMountPlan;
+const agent_workspace_1 = require("@xemahq/kernel-contracts/agent-workspace");
+const workflow_1 = require("@xemahq/kernel-contracts/workflow");
+const errors_1 = require("../errors");
+const action_shape_1 = require("./action-shape");
+const SPEC = agent_workspace_1.AWP_V1_SPEC;
+const LEGACY_MOUNT_KEYS = ['mountKeys', 'writableMountKeys'];
+function compileMountPlan(jobKey, withBlock, actionManifest) {
+    rejectLegacyShape(jobKey, withBlock);
+    enforceManifestSourceDiscriminator(jobKey, withBlock, actionManifest);
+    const mounts = extractMountsBlock(withBlock);
+    if (!mounts) {
+        return { readOnly: [], readWrite: [] };
+    }
+    const allowed = actionManifest?.spec.allowedMounts !== undefined
+        ? new Set(actionManifest.spec.allowedMounts)
+        : null;
+    const readOnly = [];
+    const readWrite = [];
+    const sortedKeys = Object.keys(mounts).sort();
+    for (const key of sortedKeys) {
+        const mode = parseMountValue(jobKey, key, mounts[key]);
+        if (!(0, agent_workspace_1.isKnownSlotKey)(SPEC, key)) {
+            throw new errors_1.WorkflowDslError(workflow_1.WorkflowErrorCode.DSL_SEMANTIC_INVALID, `Job '${jobKey}' requests mount '${key}' which is not a known slot in WorkspaceSpec '${SPEC.id}'.`, { jobKey, mountKey: key, knownSlots: SPEC.slots.map((s) => s.key) });
+        }
+        if (allowed !== null && !allowed.has(key)) {
+            throw new errors_1.WorkflowDslError(workflow_1.WorkflowErrorCode.DSL_SEMANTIC_INVALID, `Job '${jobKey}' requests mount '${key}' but action manifest does not list it in allowedMounts.`, { jobKey, mountKey: key, allowedMounts: [...allowed] });
+        }
+        const slot = (0, agent_workspace_1.findSlot)(SPEC, key);
+        const slotDefault = slot?.defaultMode ?? agent_workspace_1.SlotMode.ReadOnly;
+        const effective = mode ?? slotDefault;
+        if (slot && !slot.allowedModes.includes(effective)) {
+            throw new errors_1.WorkflowDslError(workflow_1.WorkflowErrorCode.DSL_SEMANTIC_INVALID, `Job '${jobKey}' requests mount '${key}' with mode '${effective}', which is not in slot allowedModes [${slot.allowedModes.join(', ')}].`, { jobKey, mountKey: key, requestedMode: effective, allowedModes: [...slot.allowedModes] });
+        }
+        if (effective === agent_workspace_1.SlotMode.ReadWrite) {
+            readWrite.push({ key });
+        }
+        else {
+            readOnly.push({ key });
+        }
+    }
+    return { readOnly, readWrite };
+}
+function parseMountValue(jobKey, mountKey, value) {
+    if (value === true)
+        return null;
+    if (value && typeof value === 'object' && !Array.isArray(value)) {
+        const obj = value;
+        const mode = obj['mode'];
+        if (mode === agent_workspace_1.SlotMode.ReadOnly || mode === agent_workspace_1.SlotMode.ReadWrite) {
+            return mode;
+        }
+        throw new errors_1.WorkflowDslError(workflow_1.WorkflowErrorCode.DSL_SEMANTIC_INVALID, `Job '${jobKey}' mount '${mountKey}' has invalid 'mode': must be '${agent_workspace_1.SlotMode.ReadOnly}' or '${agent_workspace_1.SlotMode.ReadWrite}'.`, { jobKey, mountKey, mode: typeof mode === 'string' ? mode : typeof mode });
+    }
+    throw new errors_1.WorkflowDslError(workflow_1.WorkflowErrorCode.DSL_SEMANTIC_INVALID, `Job '${jobKey}' mount '${mountKey}' value must be \`true\` or \`{ mode: 'read-only' | 'read-write' }\`.`, { jobKey, mountKey, valueKind: Array.isArray(value) ? 'array' : value === null ? 'null' : typeof value });
+}
+function extractMountsBlock(withBlock) {
+    if (!withBlock)
+        return null;
+    const raw = withBlock['mounts'];
+    if (raw === undefined)
+        return null;
+    if (raw === null || typeof raw !== 'object' || Array.isArray(raw)) {
+        throw new errors_1.WorkflowDslError(workflow_1.WorkflowErrorCode.DSL_SEMANTIC_INVALID, `\`with.mounts\` must be an object mapping slot keys to \`true\` or \`{ mode }\`.`, { mountsKind: Array.isArray(raw) ? 'array' : raw === null ? 'null' : typeof raw });
+    }
+    return raw;
+}
+function rejectLegacyShape(jobKey, withBlock) {
+    if (!withBlock)
+        return;
+    for (const legacyKey of LEGACY_MOUNT_KEYS) {
+        if (legacyKey in withBlock) {
+            throw new errors_1.WorkflowDslError(workflow_1.WorkflowErrorCode.DSL_SEMANTIC_INVALID, `Job '${jobKey}' uses legacy '${legacyKey}' on \`with:\`. Migrate to \`with.mounts\` (object form): \`mounts: { references: true, deliverables: { mode: 'read-write' } }\`.`, { jobKey, legacyKey });
+        }
+    }
+}
+function enforceManifestSourceDiscriminator(jobKey, withBlock, actionManifest) {
+    if (!(0, action_shape_1.isAgentShapedAction)(actionManifest))
+        return;
+    const hasRef = withBlock !== undefined &&
+        'compositionRef' in withBlock &&
+        typeof withBlock['compositionRef'] === 'string' &&
+        withBlock['compositionRef'].length > 0;
+    const hasMounts = withBlock !== undefined &&
+        'mounts' in withBlock &&
+        withBlock['mounts'] !== undefined;
+    if (hasRef && hasMounts) {
+        throw new errors_1.WorkflowDslError(workflow_1.WorkflowErrorCode.DSL_SEMANTIC_INVALID, `Job '${jobKey}' sets both \`compositionRef\` and \`mounts\` on \`with:\`. The action's manifest source is exactly one of the two.`, { jobKey, actionId: actionManifest.metadata.id });
+    }
+    if (!hasRef && !hasMounts) {
+        throw new errors_1.WorkflowDslError(workflow_1.WorkflowErrorCode.DSL_SEMANTIC_INVALID, `Job '${jobKey}' must set exactly one of \`compositionRef\` (long form) or \`mounts\` (short form) on \`with:\`.`, { jobKey, actionId: actionManifest.metadata.id });
+    }
+}
+//# sourceMappingURL=mount-plan.js.map

package/dist/workflow/lib/compiler/mount-plan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mount-plan.js","sourceRoot":"","sources":["../../../../src/workflow/lib/compiler/mount-plan.ts"],"names":[],"mappings":";;AAgDA,4CAyDC;AAzGD,8EAMkD;AAClD,gEAAsE;AAEtE,sCAA6C;AAE7C,iDAAqD;AAiCrD,MAAM,IAAI,GAAkB,6BAAW,CAAC;AAExC,MAAM,iBAAiB,GAAG,CAAC,WAAW,EAAE,mBAAmB,CAAU,CAAC;AAEtE,SAAgB,gBAAgB,CAC9B,MAAc,EACd,SAAwD,EACxD,cAAqC;IAErC,iBAAiB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAErC,kCAAkC,CAAC,MAAM,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;IAEtE,MAAM,MAAM,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAC;IAC7C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IACzC,CAAC;IAED,MAAM,OAAO,GACX,cAAc,EAAE,IAAI,CAAC,aAAa,KAAK,SAAS;QAC9C,CAAC,CAAC,IAAI,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,aAAa,CAAC;QAC5C,CAAC,CAAC,IAAI,CAAC;IAEX,MAAM,QAAQ,GAAsB,EAAE,CAAC;IACvC,MAAM,SAAS,GAAsB,EAAE,CAAC;IAExC,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9C,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,eAAe,CAAC,MAAM,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QACvD,IAAI,CAAC,IAAA,gCAAc,EAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,yBAAgB,CACxB,4BAAiB,CAAC,oBAAoB,EACtC,QAAQ,MAAM,qBAAqB,GAAG,iDAAiD,IAAI,CAAC,EAAE,IAAI,EAClG,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CACpE,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,yBAAgB,CACxB,4BAAiB,CAAC,oBAAoB,EACtC,QAAQ,MAAM,qBAAqB,GAAG,0DAA0D,EAChG,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,aAAa,EAAE,CAAC,GAAG,OAAO,CAAC,EAAE,CACvD,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,IAAA,0BAAQ,EAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACjC,MAAM,WAAW,GAAG,IAAI,EAAE,WAAW,IAAI,0BAAQ,CAAC,QAAQ,CAAC;QAC3D,MAAM,SAAS,GAAG,IAAI,IAAI,WAAW,CAAC;QACtC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACnD,MAAM,IAAI,yBAAgB,CACxB,4BAAiB,CAAC,oBAAoB,EACtC,QAAQ,MAAM,qBAAqB,GAAG,gBAAgB,SAAS,yCAAyC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EACxI,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,aAAa,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,EAAE,CAC1F,CAAC;QACJ,CAAC;QACD,IAAI,SAAS,KAAK,0BAAQ,CAAC,SAAS,EAAE,CAAC;YACrC,SAAS,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QAC1B,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;QACzB,CAAC;IACH,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;AACjC,CAAC;AAED,SAAS,eAAe,CACtB,MAAc,EACd,QAAgB,EAChB,KAAc;IAEd,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,GAAG,GAAG,KAAgC,CAAC;QAC7C,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC;QACzB,IAAI,IAAI,KAAK,0BAAQ,CAAC,QAAQ,IAAI,IAAI,KAAK,0BAAQ,CAAC,SAAS,EAAE,CAAC;YAC9D,OAAO,IAAI,CAAC;QACd,CAAC;QACD,MAAM,IAAI,yBAAgB,CACxB,4BAAiB,CAAC,oBAAoB,EACtC,QAAQ,MAAM,YAAY,QAAQ,kCAAkC,0BAAQ,CAAC,QAAQ,SAAS,0BAAQ,CAAC,SAAS,IAAI,EACpH,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,EAAE,CAC1E,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,yBAAgB,CACxB,4BAAiB,CAAC,oBAAoB,EACtC,QAAQ,MAAM,YAAY,QAAQ,uEAAuE,EACzG,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,KAAK,EAAE,CACzG,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CACzB,SAAwD;IAExD,IAAI,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAC5B,MAAM,GAAG,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAChC,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAClE,MAAM,IAAI,yBAAgB,CACxB,4BAAiB,CAAC,oBAAoB,EACtC,kFAAkF,EAClF,EAAE,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE,CAClF,CAAC;IACJ,CAAC;IACD,OAAO,GAAwC,CAAC;AAClD,CAAC;AAED,SAAS,iBAAiB,CACxB,MAAc,EACd,SAAwD;IAExD,IAAI,CAAC,SAAS;QAAE,OAAO;IACvB,KAAK,MAAM,SAAS,IAAI,iBAAiB,EAAE,CAAC;QAC1C,IAAI,SAAS,IAAI,SAAS,EAAE,CAAC;YAC3B,MAAM,IAAI,yBAAgB,CACxB,4BAAiB,CAAC,oBAAoB,EACtC,QAAQ,MAAM,kBAAkB,SAAS,mIAAmI,EAC5K,EAAE,MAAM,EAAE,SAAS,EAAE,CACtB,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAUD,SAAS,kCAAkC,CACzC,MAAc,EACd,SAAwD,EACxD,cAAqC;IAErC,IAAI,CAAC,IAAA,kCAAmB,EAAC,cAAc,CAAC;QAAE,OAAO;IACjD,MAAM,MAAM,GACV,SAAS,KAAK,SAAS;QACvB,gBAAgB,IAAI,SAAS;QAC7B,OAAO,SAAS,CAAC,gBAAgB,CAAC,KAAK,QAAQ;QAC9C,SAAS,CAAC,gBAAgB,CAAY,CAAC,MAAM,GAAG,CAAC,CAAC;IACrD,MAAM,SAAS,GACb,SAAS,KAAK,SAAS;QACvB,QAAQ,IAAI,SAAS;QACrB,SAAS,CAAC,QAAQ,CAAC,KAAK,SAAS,CAAC;IACpC,IAAI,MAAM,IAAI,SAAS,EAAE,CAAC;QACxB,MAAM,IAAI,yBAAgB,CACxB,4BAAiB,CAAC,oBAAoB,EACtC,QAAQ,MAAM,qHAAqH,EACnI,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,CAAC,QAAQ,CAAC,EAAE,EAAE,CACjD,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS,EAAE,CAAC;QAC1B,MAAM,IAAI,yBAAgB,CACxB,4BAAiB,CAAC,oBAAoB,EACtC,QAAQ,MAAM,mGAAmG,EACjH,EAAE,MAAM,EAAE,QAAQ,EAAE,cAAc,CAAC,QAAQ,CAAC,EAAE,EAAE,CACjD,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/workflow/lib/compiler/payload-reach-in.d.ts

@@ -0,0 +1,14 @@
+import { type PayloadReachInPin } from '@xemahq/kernel-contracts/workflow';
+import { type ExpressionNode } from '../expression';
+import type { WorkflowDocument } from '../types';
+import type { ResolvedDeliverableSpec, ResolvedRef } from './types';
+export declare function validatePayloadReachIns(doc: WorkflowDocument, resolvedSpecs: Readonly<Record<string, ResolvedDeliverableSpec>>, resolvedRefs: Readonly<Record<string, ResolvedRef>>): void;
+export declare function collectPayloadReachInsForJob(doc: WorkflowDocument, jobKey: string, job: WorkflowDocument['jobs'][string], resolvedSpecs: Readonly<Record<string, ResolvedDeliverableSpec>>, resolvedRefs: Readonly<Record<string, ResolvedRef>>): readonly PayloadReachInPin[];
+interface PayloadReachIn {
+    readonly upstreamJobKey: string;
+    readonly outputName: string;
+    readonly field: string;
+}
+export declare function walkPayloadReachIns(node: ExpressionNode, visit: (access: PayloadReachIn) => void): void;
+export {};
+//# sourceMappingURL=payload-reach-in.d.ts.map

package/dist/workflow/lib/compiler/payload-reach-in.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"payload-reach-in.d.ts","sourceRoot":"","sources":["../../../../src/workflow/lib/compiler/payload-reach-in.ts"],"names":[],"mappings":"AA4BA,OAAO,EAGL,KAAK,iBAAiB,EACvB,MAAM,mCAAmC,CAAC;AAE3C,OAAO,EAIL,KAAK,cAAc,EAEpB,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AACjD,OAAO,KAAK,EAAE,uBAAuB,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AAmDpE,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,gBAAgB,EACrB,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC,EAChE,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,GAClD,IAAI,CAoCN;AAYD,wBAAgB,4BAA4B,CAC1C,GAAG,EAAE,gBAAgB,EACrB,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,gBAAgB,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,EACrC,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC,EAChE,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,GAClD,SAAS,iBAAiB,EAAE,CA+B9B;AAoGD,UAAU,cAAc;IACtB,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,cAAc,EACpB,KAAK,EAAE,CAAC,MAAM,EAAE,cAAc,KAAK,IAAI,GACtC,IAAI,CAoCN"}

package/dist/workflow/lib/compiler/payload-reach-in.js

@@ -0,0 +1,273 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validatePayloadReachIns = validatePayloadReachIns;
+exports.collectPayloadReachInsForJob = collectPayloadReachInsForJob;
+exports.walkPayloadReachIns = walkPayloadReachIns;
+const workflow_1 = require("@xemahq/kernel-contracts/workflow");
+const errors_1 = require("../errors");
+const expression_1 = require("../expression");
+function lookupOutputBindingSpecRef(upstream, outputName, resolvedRefs) {
+    const ref = resolvedRefs[upstream.uses];
+    const bindings = ref?.actionManifest?.spec.outputBindings;
+    if (!bindings)
+        return null;
+    const binding = bindings[outputName];
+    if (!binding)
+        return null;
+    const specRef = binding.deliverableSpecRef;
+    if (typeof specRef !== 'string' || specRef.length === 0)
+        return null;
+    return specRef;
+}
+function validatePayloadReachIns(doc, resolvedSpecs, resolvedRefs) {
+    if (Object.keys(resolvedSpecs).length === 0)
+        return;
+    for (const [jobKey, job] of Object.entries(doc.jobs)) {
+        const expressions = collectJobExpressions(jobKey, job);
+        for (const { source, fieldPath } of expressions) {
+            const ast = (0, expression_1.compileExpression)(source);
+            walkPayloadReachIns(ast, (access) => {
+                validateReachIn(doc, jobKey, fieldPath, access, resolvedSpecs, resolvedRefs);
+            });
+        }
+    }
+    const callOutputs = doc.on.workflow_call?.outputs;
+    if (callOutputs) {
+        for (const [outputName, expr] of Object.entries(callOutputs)) {
+            const ast = (0, expression_1.compileExpression)((0, expression_1.stripInterpolation)(expr));
+            walkPayloadReachIns(ast, (access) => {
+                validateReachIn(doc, '<workflow_call.outputs>', `on.workflow_call.outputs.${outputName}`, access, resolvedSpecs, resolvedRefs);
+            });
+        }
+    }
+}
+function collectPayloadReachInsForJob(doc, jobKey, job, resolvedSpecs, resolvedRefs) {
+    if (Object.keys(resolvedSpecs).length === 0)
+        return [];
+    const pins = [];
+    const seen = new Set();
+    const expressions = collectJobExpressions(jobKey, job);
+    for (const { source, fieldPath } of expressions) {
+        let ast;
+        try {
+            ast = (0, expression_1.compileExpression)(source);
+        }
+        catch {
+            continue;
+        }
+        walkPayloadReachIns(ast, (access) => {
+            const pin = resolveReachInPin(doc, fieldPath, access, resolvedSpecs, resolvedRefs);
+            if (pin === null)
+                return;
+            const dedupeKey = `${pin.upstreamJobKey}|${pin.outputName}|${pin.specRef}`;
+            if (seen.has(dedupeKey))
+                return;
+            seen.add(dedupeKey);
+            pins.push(pin);
+        });
+    }
+    return pins;
+}
+function resolveReachInPin(doc, fieldPath, access, resolvedSpecs, resolvedRefs) {
+    const upstream = doc.jobs[access.upstreamJobKey];
+    if (!upstream)
+        return null;
+    if (upstream.outputs && Object.keys(upstream.outputs).length > 0) {
+        return null;
+    }
+    let specRef = null;
+    let outputName = null;
+    if (access.outputName !== '<indexed>' &&
+        access.outputName !== '<byKey>') {
+        const perOutputRef = lookupOutputBindingSpecRef(upstream, access.outputName, resolvedRefs);
+        if (perOutputRef !== null) {
+            specRef = perOutputRef;
+            outputName = access.outputName;
+        }
+    }
+    if (specRef === null) {
+        const withMap = upstream.with;
+        const fromWith = withMap?.['deliverableSpecRef'];
+        if (typeof fromWith !== 'string' || fromWith.length === 0)
+            return null;
+        if (fromWith.includes('${{'))
+            return null;
+        specRef = fromWith;
+    }
+    const spec = resolvedSpecs[specRef];
+    if (!spec)
+        return null;
+    const at = specRef.lastIndexOf('@');
+    const specVersion = at >= 0 ? specRef.slice(at + 1) : '';
+    if (specVersion.length === 0)
+        return null;
+    return {
+        fieldPath,
+        upstreamJobKey: access.upstreamJobKey,
+        outputName,
+        specRef,
+        specVersion,
+    };
+}
+function collectJobExpressions(jobKey, job) {
+    const out = [];
+    if (job.if !== undefined) {
+        out.push({ source: (0, expression_1.stripInterpolation)(job.if), fieldPath: `${jobKey}.if` });
+    }
+    if (job.with) {
+        for (const ext of (0, expression_1.extractInterpolations)(job.with, [jobKey, 'with'])) {
+            out.push({ source: ext.source, fieldPath: ext.path.join('.') });
+        }
+    }
+    if (job.outputs) {
+        for (const [name, expr] of Object.entries(job.outputs)) {
+            out.push({
+                source: (0, expression_1.stripInterpolation)(expr),
+                fieldPath: `${jobKey}.outputs.${name}`,
+            });
+        }
+    }
+    if (job.strategy && 'dynamic' in job.strategy) {
+        out.push({
+            source: (0, expression_1.stripInterpolation)(job.strategy.dynamic.from),
+            fieldPath: `${jobKey}.strategy.dynamic.from`,
+        });
+    }
+    return out;
+}
+function walkPayloadReachIns(node, visit) {
+    const match = matchPayloadReachIn(node);
+    if (match !== null) {
+        visit(match);
+    }
+    switch (node.kind) {
+        case expression_1.ExpressionNodeKind.MEMBER:
+            walkPayloadReachIns(node.target, visit);
+            return;
+        case expression_1.ExpressionNodeKind.INDEX:
+            walkPayloadReachIns(node.target, visit);
+            walkPayloadReachIns(node.index, visit);
+            return;
+        case expression_1.ExpressionNodeKind.CALL:
+            for (const arg of node.args)
+                walkPayloadReachIns(arg, visit);
+            return;
+        case expression_1.ExpressionNodeKind.UNARY_NOT:
+            walkPayloadReachIns(node.operand, visit);
+            return;
+        case expression_1.ExpressionNodeKind.BINARY_EQ:
+        case expression_1.ExpressionNodeKind.BINARY_NEQ:
+        case expression_1.ExpressionNodeKind.BINARY_AND:
+        case expression_1.ExpressionNodeKind.BINARY_OR:
+            walkPayloadReachIns(node.left, visit);
+            walkPayloadReachIns(node.right, visit);
+            return;
+        case expression_1.ExpressionNodeKind.LITERAL:
+        case expression_1.ExpressionNodeKind.IDENTIFIER:
+            return;
+    }
+}
+function matchPayloadReachIn(node) {
+    if (node.kind !== expression_1.ExpressionNodeKind.MEMBER)
+        return null;
+    const field = node.property;
+    if ((0, workflow_1.isArtifactRefEnvelopeField)(field))
+        return null;
+    const base = node.target;
+    if (base.kind === expression_1.ExpressionNodeKind.MEMBER) {
+        const outputName = base.property;
+        if (outputName === 'byKey')
+            return null;
+        const outputsNode = base.target;
+        const upstreamKey = matchNeedsOutputsRoot(outputsNode);
+        if (upstreamKey !== null) {
+            return { upstreamJobKey: upstreamKey, outputName, field };
+        }
+    }
+    if (base.kind === expression_1.ExpressionNodeKind.INDEX) {
+        const indexed = base.target;
+        const upstreamFromOutputs = matchNeedsOutputsRoot(indexed);
+        if (upstreamFromOutputs !== null) {
+            return {
+                upstreamJobKey: upstreamFromOutputs,
+                outputName: '<indexed>',
+                field,
+            };
+        }
+        if (indexed.kind === expression_1.ExpressionNodeKind.MEMBER &&
+            indexed.property === 'byKey') {
+            const upstreamFromByKey = matchNeedsOutputsRoot(indexed.target);
+            if (upstreamFromByKey !== null) {
+                return {
+                    upstreamJobKey: upstreamFromByKey,
+                    outputName: '<byKey>',
+                    field,
+                };
+            }
+        }
+    }
+    return null;
+}
+function matchNeedsOutputsRoot(node) {
+    if (node.kind !== expression_1.ExpressionNodeKind.MEMBER)
+        return null;
+    if (node.property !== 'outputs')
+        return null;
+    const needsRoot = node.target;
+    if (needsRoot.kind !== expression_1.ExpressionNodeKind.MEMBER)
+        return null;
+    const upstreamKey = needsRoot.property;
+    const ident = needsRoot.target;
+    if (ident.kind !== expression_1.ExpressionNodeKind.IDENTIFIER)
+        return null;
+    if (ident.name !== 'needs')
+        return null;
+    return upstreamKey;
+}
+function validateReachIn(doc, consumerJobKey, fieldPath, access, resolvedSpecs, resolvedRefs) {
+    const upstream = doc.jobs[access.upstreamJobKey];
+    if (!upstream) {
+        return;
+    }
+    if (upstream.outputs && Object.keys(upstream.outputs).length > 0) {
+        return;
+    }
+    const perOutputBinding = access.outputName === '<indexed>' || access.outputName === '<byKey>'
+        ? null
+        : lookupOutputBindingSpecRef(upstream, access.outputName, resolvedRefs);
+    const withMap = upstream.with;
+    const specRef = perOutputBinding ?? withMap?.['deliverableSpecRef'];
+    if (typeof specRef === 'string' && specRef.includes('${{')) {
+        return;
+    }
+    if (typeof specRef !== 'string' || specRef.length === 0) {
+        throw new errors_1.WorkflowDslError(workflow_1.WorkflowErrorCode.DSL_FIELD_NOT_TYPED, `${fieldPath}: 'needs.${access.upstreamJobKey}.outputs.${access.outputName}.${access.field}' reaches into the payload of an output that has no schema-bearing deliverable spec. Either bind a typed 'with.deliverableSpecRef' on '${access.upstreamJobKey}' or use the 'fromJSON(...)' escape hatch.`, {
+            consumerJobKey,
+            upstreamJobKey: access.upstreamJobKey,
+            outputName: access.outputName,
+            field: access.field,
+            fieldPath,
+        });
+    }
+    const spec = resolvedSpecs[specRef];
+    if (!spec) {
+        return;
+    }
+    if (!spec.topLevelKeys || spec.topLevelKeys.length === 0) {
+        return;
+    }
+    if (spec.topLevelKeys.includes(access.field)) {
+        return;
+    }
+    const knownPreview = spec.topLevelKeys.slice(0, 12).join(', ');
+    throw new errors_1.WorkflowDslError(workflow_1.WorkflowErrorCode.DSL_FIELD_NOT_IN_SCHEMA, `${fieldPath}: 'needs.${access.upstreamJobKey}.outputs.${access.outputName}.${access.field}' is not a top-level field on deliverable spec '${spec.ref}' (bound by '${access.upstreamJobKey}.with.deliverableSpecRef'). Known fields: [${knownPreview}].`, {
+        consumerJobKey,
+        upstreamJobKey: access.upstreamJobKey,
+        outputName: access.outputName,
+        field: access.field,
+        fieldPath,
+        specRef: spec.ref,
+        knownFields: [...spec.topLevelKeys],
+    });
+}
+//# sourceMappingURL=payload-reach-in.js.map

package/dist/workflow/lib/compiler/payload-reach-in.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"payload-reach-in.js","sourceRoot":"","sources":["../../../../src/workflow/lib/compiler/payload-reach-in.ts"],"names":[],"mappings":";;AA6FA,0DAwCC;AAYD,oEAqCC;AA0GD,kDAuCC;AA3SD,gEAI2C;AAC3C,sCAA6C;AAC7C,8CAMuB;AAcvB,SAAS,0BAA0B,CACjC,QAA0C,EAC1C,UAAkB,EAClB,YAAmD;IAEnD,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,QAAQ,GAAG,GAAG,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,CAAC;IAC1D,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,MAAM,OAAO,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;IACrC,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,OAAO,GAAG,OAAO,CAAC,kBAAkB,CAAC;IAC3C,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrE,OAAO,OAAO,CAAC;AACjB,CAAC;AA0BD,SAAgB,uBAAuB,CACrC,GAAqB,EACrB,aAAgE,EAChE,YAAmD;IAEnD,IAAI,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAEpD,KAAK,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,WAAW,GAAG,qBAAqB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;QACvD,KAAK,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,WAAW,EAAE,CAAC;YAChD,MAAM,GAAG,GAAG,IAAA,8BAAiB,EAAC,MAAM,CAAC,CAAC;YACtC,mBAAmB,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE;gBAClC,eAAe,CACb,GAAG,EACH,MAAM,EACN,SAAS,EACT,MAAM,EACN,aAAa,EACb,YAAY,CACb,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,GAAG,CAAC,EAAE,CAAC,aAAa,EAAE,OAAO,CAAC;IAClD,IAAI,WAAW,EAAE,CAAC;QAChB,KAAK,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YAC7D,MAAM,GAAG,GAAG,IAAA,8BAAiB,EAAC,IAAA,+BAAkB,EAAC,IAAI,CAAC,CAAC,CAAC;YACxD,mBAAmB,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE;gBAClC,eAAe,CACb,GAAG,EACH,yBAAyB,EACzB,4BAA4B,UAAU,EAAE,EACxC,MAAM,EACN,aAAa,EACb,YAAY,CACb,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC;AAYD,SAAgB,4BAA4B,CAC1C,GAAqB,EACrB,MAAc,EACd,GAAqC,EACrC,aAAgE,EAChE,YAAmD;IAEnD,IAAI,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEvD,MAAM,IAAI,GAAwB,EAAE,CAAC;IACrC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,MAAM,WAAW,GAAG,qBAAqB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACvD,KAAK,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,WAAW,EAAE,CAAC;QAChD,IAAI,GAAG,CAAC;QACR,IAAI,CAAC;YACH,GAAG,GAAG,IAAA,8BAAiB,EAAC,MAAM,CAAC,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,SAAS;QACX,CAAC;QACD,mBAAmB,CAAC,GAAG,EAAE,CAAC,MAAM,EAAE,EAAE;YAClC,MAAM,GAAG,GAAG,iBAAiB,CAC3B,GAAG,EACH,SAAS,EACT,MAAM,EACN,aAAa,EACb,YAAY,CACb,CAAC;YACF,IAAI,GAAG,KAAK,IAAI;gBAAE,OAAO;YACzB,MAAM,SAAS,GAAG,GAAG,GAAG,CAAC,cAAc,IAAI,GAAG,CAAC,UAAU,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;YAC3E,IAAI,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;gBAAE,OAAO;YAChC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACpB,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACjB,CAAC,CAAC,CAAC;IACL,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAUD,SAAS,iBAAiB,CACxB,GAAqB,EACrB,SAAiB,EACjB,MAAsB,EACtB,aAAgE,EAChE,YAAmD;IAEnD,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IACjD,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3B,IAAI,QAAQ,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjE,OAAO,IAAI,CAAC;IACd,CAAC;IAMD,IAAI,OAAO,GAAkB,IAAI,CAAC;IAClC,IAAI,UAAU,GAAkB,IAAI,CAAC;IACrC,IACE,MAAM,CAAC,UAAU,KAAK,WAAW;QACjC,MAAM,CAAC,UAAU,KAAK,SAAS,EAC/B,CAAC;QACD,MAAM,YAAY,GAAG,0BAA0B,CAC7C,QAAQ,EACR,MAAM,CAAC,UAAU,EACjB,YAAY,CACb,CAAC;QACF,IAAI,YAAY,KAAK,IAAI,EAAE,CAAC;YAC1B,OAAO,GAAG,YAAY,CAAC;YACvB,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;QACjC,CAAC;IACH,CAAC;IACD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,MAAM,OAAO,GAAG,QAAQ,CAAC,IAA2C,CAAC;QACrE,MAAM,QAAQ,GAAG,OAAO,EAAE,CAAC,oBAAoB,CAAC,CAAC;QACjD,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACvE,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAC1C,OAAO,GAAG,QAAQ,CAAC;IACrB,CAAC;IAED,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACpC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,EAAE,GAAG,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,WAAW,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1C,OAAO;QACL,SAAS;QACT,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,UAAU;QACV,OAAO;QACP,WAAW;KACZ,CAAC;AACJ,CAAC;AAOD,SAAS,qBAAqB,CAC5B,MAAc,EACd,GAAqC;IAErC,MAAM,GAAG,GAA0B,EAAE,CAAC;IACtC,IAAI,GAAG,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;QACzB,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAA,+BAAkB,EAAC,GAAG,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,MAAM,KAAK,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;QACb,KAAK,MAAM,GAAG,IAAI,IAAA,kCAAqB,EAAC,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,EAAE,CAAC;YACpE,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IACD,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;QAChB,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;YACvD,GAAG,CAAC,IAAI,CAAC;gBACP,MAAM,EAAE,IAAA,+BAAkB,EAAC,IAAI,CAAC;gBAChC,SAAS,EAAE,GAAG,MAAM,YAAY,IAAI,EAAE;aACvC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,IAAI,SAAS,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QAC9C,GAAG,CAAC,IAAI,CAAC;YACP,MAAM,EAAE,IAAA,+BAAkB,EAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC;YACrD,SAAS,EAAE,GAAG,MAAM,wBAAwB;SAC7C,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAQD,SAAgB,mBAAmB,CACjC,IAAoB,EACpB,KAAuC;IAEvC,MAAM,KAAK,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,KAAK,CAAC,KAAK,CAAC,CAAC;IAIf,CAAC;IACD,QAAQ,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,+BAAkB,CAAC,MAAM;YAC5B,mBAAmB,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACxC,OAAO;QACT,KAAK,+BAAkB,CAAC,KAAK;YAC3B,mBAAmB,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACxC,mBAAmB,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YACvC,OAAO;QACT,KAAK,+BAAkB,CAAC,IAAI;YAI1B,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,IAAI;gBAAE,mBAAmB,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC7D,OAAO;QACT,KAAK,+BAAkB,CAAC,SAAS;YAC/B,mBAAmB,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACzC,OAAO;QACT,KAAK,+BAAkB,CAAC,SAAS,CAAC;QAClC,KAAK,+BAAkB,CAAC,UAAU,CAAC;QACnC,KAAK,+BAAkB,CAAC,UAAU,CAAC;QACnC,KAAK,+BAAkB,CAAC,SAAS;YAC/B,mBAAmB,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YACtC,mBAAmB,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YACvC,OAAO;QACT,KAAK,+BAAkB,CAAC,OAAO,CAAC;QAChC,KAAK,+BAAkB,CAAC,UAAU;YAChC,OAAO;IACX,CAAC;AACH,CAAC;AAgBD,SAAS,mBAAmB,CAAC,IAAoB;IAC/C,IAAI,IAAI,CAAC,IAAI,KAAK,+BAAkB,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzD,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC;IAC5B,IAAI,IAAA,qCAA0B,EAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAInD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC;IAGzB,IAAI,IAAI,CAAC,IAAI,KAAK,+BAAkB,CAAC,MAAM,EAAE,CAAC;QAC5C,MAAM,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC;QACjC,IAAI,UAAU,KAAK,OAAO;YAAE,OAAO,IAAI,CAAC;QACxC,MAAM,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC;QAChC,MAAM,WAAW,GAAG,qBAAqB,CAAC,WAAW,CAAC,CAAC;QACvD,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;YACzB,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;QAC5D,CAAC;IACH,CAAC;IAGD,IAAI,IAAI,CAAC,IAAI,KAAK,+BAAkB,CAAC,KAAK,EAAE,CAAC;QAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC;QAE5B,MAAM,mBAAmB,GAAG,qBAAqB,CAAC,OAAO,CAAC,CAAC;QAC3D,IAAI,mBAAmB,KAAK,IAAI,EAAE,CAAC;YACjC,OAAO;gBACL,cAAc,EAAE,mBAAmB;gBACnC,UAAU,EAAE,WAAW;gBACvB,KAAK;aACN,CAAC;QACJ,CAAC;QAED,IACE,OAAO,CAAC,IAAI,KAAK,+BAAkB,CAAC,MAAM;YAC1C,OAAO,CAAC,QAAQ,KAAK,OAAO,EAC5B,CAAC;YACD,MAAM,iBAAiB,GAAG,qBAAqB,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAChE,IAAI,iBAAiB,KAAK,IAAI,EAAE,CAAC;gBAC/B,OAAO;oBACL,cAAc,EAAE,iBAAiB;oBACjC,UAAU,EAAE,SAAS;oBACrB,KAAK;iBACN,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAMD,SAAS,qBAAqB,CAAC,IAAoB;IACjD,IAAI,IAAI,CAAC,IAAI,KAAK,+BAAkB,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzD,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC7C,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC;IAC9B,IAAI,SAAS,CAAC,IAAI,KAAK,+BAAkB,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAC9D,MAAM,WAAW,GAAG,SAAS,CAAC,QAAQ,CAAC;IACvC,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC;IAC/B,IAAI,KAAK,CAAC,IAAI,KAAK,+BAAkB,CAAC,UAAU;QAAE,OAAO,IAAI,CAAC;IAC9D,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IACxC,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,SAAS,eAAe,CACtB,GAAqB,EACrB,cAAsB,EACtB,SAAiB,EACjB,MAAsB,EACtB,aAAgE,EAChE,YAAmD;IAEnD,MAAM,QAAQ,GAAG,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IACjD,IAAI,CAAC,QAAQ,EAAE,CAAC;QAGd,OAAO;IACT,CAAC;IAMD,IAAI,QAAQ,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjE,OAAO;IACT,CAAC;IAID,MAAM,gBAAgB,GACpB,MAAM,CAAC,UAAU,KAAK,WAAW,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS;QAClE,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,0BAA0B,CAAC,QAAQ,EAAE,MAAM,CAAC,UAAU,EAAE,YAAY,CAAC,CAAC;IAE5E,MAAM,OAAO,GAAG,QAAQ,CAAC,IAA2C,CAAC;IACrE,MAAM,OAAO,GAAG,gBAAgB,IAAI,OAAO,EAAE,CAAC,oBAAoB,CAAC,CAAC;IAIpE,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3D,OAAO;IACT,CAAC;IAED,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACxD,MAAM,IAAI,yBAAgB,CACxB,4BAAiB,CAAC,mBAAmB,EACrC,GAAG,SAAS,YAAY,MAAM,CAAC,cAAc,YAAY,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,KAAK,0IAA0I,MAAM,CAAC,cAAc,4CAA4C,EACrS;YACE,cAAc;YACd,cAAc,EAAE,MAAM,CAAC,cAAc;YACrC,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,SAAS;SACV,CACF,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACpC,IAAI,CAAC,IAAI,EAAE,CAAC;QAIV,OAAO;IACT,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAGzD,OAAO;IACT,CAAC;IACD,IAAI,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAI7C,OAAO;IACT,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/D,MAAM,IAAI,yBAAgB,CACxB,4BAAiB,CAAC,uBAAuB,EACzC,GAAG,SAAS,YAAY,MAAM,CAAC,cAAc,YAAY,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,KAAK,mDAAmD,IAAI,CAAC,GAAG,gBAAgB,MAAM,CAAC,cAAc,8CAA8C,YAAY,IAAI,EACxP;QACE,cAAc;QACd,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,SAAS;QACT,OAAO,EAAE,IAAI,CAAC,GAAG;QACjB,WAAW,EAAE,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC;KACpC,CACF,CAAC;AACJ,CAAC"}

package/dist/workflow/lib/compiler/permissions.d.ts

@@ -0,0 +1,6 @@
+import { PermissionResource, PermissionScope } from '@xemahq/kernel-contracts/workflow';
+import type { WorkflowPermissions } from '../types';
+export declare const ZERO_PERMISSIONS: Readonly<Record<PermissionResource, PermissionScope>>;
+export declare function normalizePermissions(authored: WorkflowPermissions | undefined): Readonly<Record<PermissionResource, PermissionScope>>;
+export declare function assertJobPermissionsFit(jobPermissions: Readonly<Record<PermissionResource, PermissionScope>>, workflowPermissions: Readonly<Record<PermissionResource, PermissionScope>>, jobKey: string): void;
+//# sourceMappingURL=permissions.d.ts.map

package/dist/workflow/lib/compiler/permissions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../../../../src/workflow/lib/compiler/permissions.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kBAAkB,EAClB,eAAe,EAEhB,MAAM,mCAAmC,CAAC;AAE3C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAC;AAWpD,eAAO,MAAM,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,kBAAkB,EAAE,eAAe,CAAC,CAQ/E,CAAC;AAGL,wBAAgB,oBAAoB,CAClC,QAAQ,EAAE,mBAAmB,GAAG,SAAS,GACxC,QAAQ,CAAC,MAAM,CAAC,kBAAkB,EAAE,eAAe,CAAC,CAAC,CAUvD;AAOD,wBAAgB,uBAAuB,CACrC,cAAc,EAAE,QAAQ,CAAC,MAAM,CAAC,kBAAkB,EAAE,eAAe,CAAC,CAAC,EACrE,mBAAmB,EAAE,QAAQ,CAAC,MAAM,CAAC,kBAAkB,EAAE,eAAe,CAAC,CAAC,EAC1E,MAAM,EAAE,MAAM,GACb,IAAI,CAYN"}