@xemahq/dsl 0.6.0 → 0.7.0

package/src/workflow/lib/compiler/review-step.ts

@@ -40,7 +40,10 @@
  * worker's runtime contract — they intentionally diverge.
  */
 
-import { WorkflowErrorCode } from '@xemahq/kernel-contracts/workflow';
+import {
+  WorkflowErrorCode,
+  type CompiledManifestSource,
+} from '@xemahq/kernel-contracts/workflow';
 
 import { WorkflowDslError } from '../errors';
 import {
@@ -379,6 +382,7 @@ export function rewriteReviewStepWith(
   jobKey: string,
   payload: WorkflowJobDeclaration,
   workflow: WorkflowDocument,
+  manifestSourcesByJob: Readonly<Record<string, CompiledManifestSource | null>>,
 ): Readonly<Record<string, unknown>> {
   if (!isReviewActionRef(payload.uses)) {
     return payload.with ?? {};
@@ -423,6 +427,11 @@ export function rewriteReviewStepWith(
       step: shape.redraft.step,
       uses: producer.uses,
       with: producer.with ?? {},
+      manifestSource: requireRedraftManifestSource(
+        jobKey,
+        shape.redraft.step,
+        manifestSourcesByJob,
+      ),
     };
     const strategy = compileRedraftStrategyIR(producer.strategy);
     if (strategy !== null) {
@@ -437,6 +446,26 @@ export function rewriteReviewStepWith(
   return out;
 }
 
+function requireRedraftManifestSource(
+  reviewJobKey: string,
+  producerJobKey: string,
+  manifestSourcesByJob: Readonly<Record<string, CompiledManifestSource | null>>,
+): CompiledManifestSource {
+  const source = manifestSourcesByJob[producerJobKey];
+  if (source === undefined || source === null) {
+    throw new WorkflowDslError(
+      WorkflowErrorCode.DSL_SEMANTIC_INVALID,
+      `Job '${reviewJobKey}' redraft producer '${producerJobKey}' has no compiled Agent revision source.`,
+      {
+        jobKey: reviewJobKey,
+        fieldPath: 'with.redraft.step',
+        referencedJob: producerJobKey,
+      },
+    );
+  }
+  return source;
+}
+
 /**
  * Pre-resolve a producer step's authored matrix strategy into a
  * JSON-serializable IR descriptor the worker carries through the
@@ -513,5 +542,7 @@ function expandStaticMatrixAxes(
     }
     entries = next;
   }
-  return entries.map(Object.freeze) as readonly Readonly<Record<string, unknown>>[];
+  return entries.map(Object.freeze) as readonly Readonly<
+    Record<string, unknown>
+  >[];
 }

package/src/workflow/lib/compiler/types.ts

@@ -14,13 +14,13 @@ import type { ActionManifest, WorkflowDocument } from '../types';
  *
  *   - `workflow` — validated WorkflowDocument (pass through
  *     `validateWorkflowDocument` first).
- *   - `workflowRef` — slug/version/isSystem, resolved from the DB.
+ *   - `workflowRef` — slug/revision/content-contract identity, resolved from the DB.
  *   - `trigger` — the payload that fired this run.
  *   - `resolvedRefs` — map of `uses:` strings to resolved refs, populated
  *     by looking up each job's `uses:` in the action-manifest registry
  *     (for `xema/...`) or the reusable-workflow registry (for
  *     `xema://workflow/...`).
- *   - `workflowDefinitionVersionSha256` — sha256 of the source YAML the
+ *   - `workflowDefinitionContentHash` — content hash of the immutable source revision the
  *     compiler is consuming. Emitted into CompiledRun for audit.
  */
 export interface CompileInput {
@@ -29,11 +29,10 @@ export interface CompileInput {
   readonly trigger: TriggerPayload;
   readonly resolvedRefs: Readonly<Record<string, ResolvedRef>>;
   /**
-   * Map of agent slug → agent metadata the compiler needs for
-   * validation, keyed by bare slug. The engine pre-fetches this from
-   * llm-registry-api. The compiler validates that every literal
-   * `with.agentRef` / `with.reviewers[].agentRef` value resolves —
-   * parsing the bare slug off the `<slug>@<version>` ref before lookup.
+   * Map of authored literal agent ref → immutable Agent revision metadata.
+   * The engine resolves each exact ref through llm-registry-api before
+   * compilation. Literal refs are therefore compile-time selectors only:
+   * CompiledRun stores the immutable revision id + content hash.
    * Expression-shaped refs (e.g. `${{ inputs.agentSlug }}`) are skipped
    * — they resolve at dispatch and the activity's `AGENT_NOT_REGISTERED`
    * preflight catches them at runtime.
@@ -53,7 +52,7 @@ export interface CompileInput {
   readonly resolvedDeliverableSpecs?: Readonly<
     Record<string, ResolvedDeliverableSpec>
   >;
-  readonly workflowDefinitionVersionSha256: string;
+  readonly workflowDefinitionContentHash: string;
   /**
    * Contents of every wallet referenced under `requires.wallets`, plus
    * any additional wallets a dispatch caller asked for. The compiler
@@ -129,7 +128,8 @@ export interface InstallationCompileScope {
  */
 export interface ResolvedAgentMeta {
   readonly slug: string;
-  readonly snapshotHash: string;
+  readonly agentRevisionId: string;
+  readonly agentContentHash: string;
 }
 
 /**

package/src/workflow/lib/expression/context.ts

@@ -85,7 +85,7 @@ export interface XemaContext {
   };
   readonly workflow: {
     readonly key: string;
-    readonly version: string;
+    readonly revisionNumber: number;
   };
   readonly job: {
     readonly key: string;
@@ -142,7 +142,7 @@ export const EMPTY_CONTEXT_SEEDS = {
       correlationId: '',
       actor: Object.freeze({ subject: null, kind: XemaActorKind.System }),
     }),
-    workflow: Object.freeze({ key: '', version: '' }),
+    workflow: Object.freeze({ key: '', revisionNumber: 0 }),
     job: Object.freeze({ key: '', attempt: 0 }),
   }) as XemaContext,
 } as const;

package/src/workflow/lib/types.ts

@@ -1,4 +1,7 @@
-import type { ConcurrencyMode, PermissionScope } from '@xemahq/kernel-contracts/workflow';
+import type {
+  ConcurrencyMode,
+  PermissionScope,
+} from '@xemahq/kernel-contracts/workflow';
 
 /**
  * Authored-shape TypeScript types for a Xema workflow document. These match
@@ -90,7 +93,8 @@ export interface WorkflowStructuredOutputDeclaration
   readonly schemaRef?: string;
 }
 
-export interface WorkflowTextOutputDeclaration extends WorkflowOutputDeclarationBase {
+export interface WorkflowTextOutputDeclaration
+  extends WorkflowOutputDeclarationBase {
   readonly kind: 'text';
 }
 
@@ -119,7 +123,12 @@ export interface WorkflowConnectorRequirement {
 
 export interface WorkflowMetadata {
   readonly name: string;
-  readonly version: string;
+  /**
+   * Compatibility version for an explicitly reusable public workflow API.
+   * Ordinary workflows omit this; their immutable revision is generated by
+   * the workflow registry.
+   */
+  readonly contractVersion?: string;
   readonly title?: string;
   readonly description?: string;
   readonly category?: string;
@@ -155,7 +164,13 @@ export interface WorkflowCallDeclaration {
 }
 
 export interface WorkflowInputDeclaration {
-  readonly type: 'string' | 'number' | 'integer' | 'boolean' | 'object' | 'array';
+  readonly type:
+    | 'string'
+    | 'number'
+    | 'integer'
+    | 'boolean'
+    | 'object'
+    | 'array';
   readonly required?: boolean;
   readonly default?: unknown;
   readonly description?: string;
@@ -207,7 +222,12 @@ export interface WorkflowRetryDeclaration {
   readonly nonRetryableErrorTypes?: readonly string[];
 }
 
-export type WorkflowPermissions = Partial<Record<'repos' | 'kb' | 'backlog' | 'connectors' | 'artifacts' | 'memory', PermissionScope>>;
+export type WorkflowPermissions = Partial<
+  Record<
+    'repos' | 'kb' | 'backlog' | 'connectors' | 'artifacts' | 'memory',
+    PermissionScope
+  >
+>;
 
 export interface WorkflowJobDeclaration {
   readonly title?: string;
@@ -224,8 +244,14 @@ export interface WorkflowJobDeclaration {
 }
 
 export type WorkflowStrategyDeclaration =
-  | { readonly matrix: Readonly<Record<string, readonly unknown[]>>; readonly maxParallel?: number }
-  | { readonly dynamic: WorkflowDynamicStrategyDeclaration; readonly maxParallel?: number };
+  | {
+      readonly matrix: Readonly<Record<string, readonly unknown[]>>;
+      readonly maxParallel?: number;
+    }
+  | {
+      readonly dynamic: WorkflowDynamicStrategyDeclaration;
+      readonly maxParallel?: number;
+    };
 
 export interface WorkflowDynamicStrategyDeclaration {
   readonly from: string;
@@ -307,7 +333,11 @@ export interface ActionManifestSpec {
   readonly allowedMounts?: readonly string[];
   readonly retryDefaults: ActionManifestRetryDefaults;
   readonly timeoutDefaults: ActionManifestTimeoutDefaults;
-  readonly auditEventMapping?: Partial<{ started: string; succeeded: string; failed: string }>;
+  readonly auditEventMapping?: Partial<{
+    started: string;
+    succeeded: string;
+    failed: string;
+  }>;
   /**
    * Declarative contracts the action opts into. The DSL compiler reads
    * this list to decide which validation lanes apply — e.g. the