botmux-workflow-core 3.16.0 → 3.17.0

package/dist/cjs/index.cjs

@@ -147,6 +147,79 @@ function isRecord(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 
+// src/workflows/v3/artifact-contract.ts
+var MANIFEST_FILE_KINDS = [
+  "markdown",
+  "json",
+  "text",
+  "code",
+  "log",
+  "binary",
+  "directory"
+];
+var MANIFEST_SUMMARY_MAX_BYTES = 4 * 1024;
+var MANIFEST_PREVIEW_MAX_BYTES = 4 * 1024;
+
+// src/workflows/v3/artifact-contract-declarations.ts
+var V3_ARTIFACT_OUTPUT_KEY_RE = /^[A-Za-z0-9._-]+$/;
+var V3_ARTIFACT_OUTPUT_MAX_COUNT = 32;
+var V3_ARTIFACT_OUTPUT_MAX_BYTES = 4 * 1024;
+function normalizeArtifactOutputs(value, where, problems) {
+  if (value === void 0) return void 0;
+  if (!isRecord2(value) || Object.keys(value).length === 0) {
+    problems.push(`${where}.outputs must be a non-empty object when present`);
+    return void 0;
+  }
+  const entries = Object.entries(value);
+  if (entries.length > V3_ARTIFACT_OUTPUT_MAX_COUNT) {
+    problems.push(`${where}.outputs has ${entries.length} entries (max ${V3_ARTIFACT_OUTPUT_MAX_COUNT})`);
+  }
+  if (Buffer.byteLength(JSON.stringify(value), "utf-8") > V3_ARTIFACT_OUTPUT_MAX_BYTES) {
+    problems.push(`${where}.outputs exceeds ${V3_ARTIFACT_OUTPUT_MAX_BYTES} serialized bytes`);
+  }
+  const out = /* @__PURE__ */ Object.create(null);
+  const paths = /* @__PURE__ */ new Set();
+  for (const [key, raw] of entries) {
+    const itemWhere = `${where}.outputs.${JSON.stringify(key)}`;
+    if (!V3_ARTIFACT_OUTPUT_KEY_RE.test(key)) {
+      problems.push(`${itemWhere} key must match ${V3_ARTIFACT_OUTPUT_KEY_RE}`);
+      continue;
+    }
+    if (!isRecord2(raw)) {
+      problems.push(`${itemWhere} must be { path, kind }`);
+      continue;
+    }
+    const extra = Object.keys(raw).filter((field) => field !== "path" && field !== "kind");
+    if (extra.length > 0) {
+      problems.push(`${itemWhere} has unsupported key(s): ${extra.join(", ")} (allowed: path, kind)`);
+      continue;
+    }
+    if (!isPortableRelativeArtifactPath(raw.path)) {
+      problems.push(`${itemWhere}.path must be a portable relative path without '.', '..', or empty segments`);
+      continue;
+    }
+    if (typeof raw.kind !== "string" || !MANIFEST_FILE_KINDS.includes(raw.kind)) {
+      problems.push(`${itemWhere}.kind must be one of ${MANIFEST_FILE_KINDS.join(" | ")}`);
+      continue;
+    }
+    if (paths.has(raw.path)) {
+      problems.push(`${where}.outputs contains duplicate path ${JSON.stringify(raw.path)}`);
+      continue;
+    }
+    paths.add(raw.path);
+    out[key] = { path: raw.path, kind: raw.kind };
+  }
+  return out;
+}
+function isPortableRelativeArtifactPath(value) {
+  if (typeof value !== "string" || value.length === 0 || value.startsWith("/") || value.includes("\\") || value.includes("\0") || /^[A-Za-z]:/.test(value)) return false;
+  const segments = value.split("/");
+  return segments.every((segment) => segment !== "" && segment !== "." && segment !== "..");
+}
+function isRecord2(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+
 // src/workflows/v3/dag.ts
 var NODE_KINDS = ["goal", "host", "loop"];
 var V3_HOST_EXECUTORS = ["feishu-send", "feishu-reply", "botmux-schedule"];
@@ -196,6 +269,10 @@ function validateDag(raw) {
   if (!isObject(raw)) {
     throw new DagValidationError(["root must be a JSON object"]);
   }
+  const schemaVersion = raw.schemaVersion === void 0 ? 1 : raw.schemaVersion;
+  if (schemaVersion !== 1 && schemaVersion !== 2) {
+    problems.push(`schemaVersion must be 1 or 2 (got ${JSON.stringify(raw.schemaVersion)})`);
+  }
   if (typeof raw.runId !== "string" || !SEGMENT_RE.test(raw.runId)) {
     problems.push(`runId must be a path-safe string matching ${SEGMENT_RE} (got ${JSON.stringify(raw.runId)})`);
   }
@@ -232,9 +309,9 @@ function validateDag(raw) {
     if (fromList.includes(id)) problems.push(`node "${id}" depends on itself`);
     if (new Set(fromList).size !== fromList.length) problems.push(`node "${id}".depends has duplicates`);
     const triggerRule = normTriggerRule(n.triggerRule, depends.length, `node "${id}"`, problems);
-    const inputs = normInputs(n.inputs, id, problems);
+    const inputs = normInputs(n.inputs, id, problems, schemaVersion === 2 ? 2 : 1);
     if (type === "loop") {
-      const loopFields = normLoopFields(n, id, problems);
+      const loopFields = normLoopFields(n, id, problems, schemaVersion === 2 ? 2 : 1);
       if (loopFields) {
         nodes.push({
           id,
@@ -251,6 +328,7 @@ function validateDag(raw) {
       continue;
     }
     if (type === "host") {
+      if (n.outputs !== void 0) problems.push(`host node "${id}".outputs is not supported`);
       if (n.goal !== void 0) problems.push(`host node "${id}".goal is not supported`);
       if (n.bot !== void 0) problems.push(`host node "${id}".bot is not supported \u2014 host nodes do not spawn a CLI`);
       if (n.override !== void 0) problems.push(`host node "${id}".override is not supported`);
@@ -326,6 +404,10 @@ function validateDag(raw) {
     const humanGate = normHumanGate(n.humanGate, `node "${id}"`, problems);
     const override = normOverride(n.override, `node "${id}"`, problems);
     const revisitTo = normRevisitTo(n.revisitTo, id, problems);
+    if (schemaVersion !== 2 && n.outputs !== void 0) {
+      problems.push(`goal node "${id}".outputs requires schemaVersion 2`);
+    }
+    const outputs = schemaVersion === 2 ? normalizeArtifactOutputs(n.outputs, `goal node "${id}"`, problems) : void 0;
     nodes.push({
       id,
       type,
@@ -335,6 +417,7 @@ function validateDag(raw) {
       triggerRule,
       override,
       inputs,
+      outputs,
       timeoutSec,
       humanGate,
       resultSchema,
@@ -350,6 +433,14 @@ function validateDag(raw) {
         problems.push(`node "${node.id}".inputs references unknown node "${inp.from}"`);
       } else if (!node.depends.some((d) => d.from === inp.from)) {
         problems.push(`node "${node.id}".inputs.from "${inp.from}" must also be in depends`);
+      } else if (inp.output !== void 0) {
+        const source = nodes.find((candidate) => candidate.id === inp.from);
+        const outputs = source?.type === "loop" ? source.body?.nodes.find((bodyNode) => bodyNode.id === source.output?.from)?.outputs : source?.outputs;
+        if (!outputs || !Object.prototype.hasOwnProperty.call(outputs, inp.output)) {
+          problems.push(
+            `node "${node.id}".inputs output ${JSON.stringify(inp.output)} is not declared by source "${inp.from}"`
+          );
+        }
       }
     }
     if (node.type === "host") {
@@ -428,7 +519,11 @@ function validateDag(raw) {
     }
   }
   if (problems.length > 0) throw new DagValidationError(problems);
-  const dag = { runId: raw.runId, nodes };
+  const dag = {
+    ...raw.schemaVersion !== void 0 ? { schemaVersion } : {},
+    runId: raw.runId,
+    nodes
+  };
   topologicalOrder(dag);
   return dag;
 }
@@ -742,7 +837,7 @@ function downstreamCone(nodeId, nodes) {
 function nodeByIdUnsafe(nodes, nodeId) {
   return nodes.find((node) => node.id === nodeId);
 }
-function normLoopFields(n, id, problems) {
+function normLoopFields(n, id, problems, schemaVersion) {
   const where = `loop node "${id}"`;
   const before = problems.length;
   if (n.timeoutSec !== void 0) {
@@ -813,10 +908,14 @@ function normLoopFields(n, id, problems) {
     const bFromList = bdepends.map((d) => d.from);
     if (bFromList.includes(bid)) problems.push(`${where}.body node "${bid}" depends on itself`);
     if (new Set(bFromList).size !== bFromList.length) problems.push(`${where}.body node "${bid}".depends has duplicates`);
-    const binputs = normInputs(b.inputs, `${id}.body.${bid}`, problems);
+    const binputs = normInputs(b.inputs, `${id}.body.${bid}`, problems, schemaVersion);
     const btimeout = normTimeoutSec(b.timeoutSec, `${where}.body node "${bid}"`, problems);
     const bschema = normResultSchema(b.resultSchema, `${id}.body.${bid}`, problems);
     const boverride = normOverride(b.override, `${where}.body node "${bid}"`, problems);
+    if (schemaVersion !== 2 && b.outputs !== void 0) {
+      problems.push(`${where}.body node "${bid}".outputs requires schemaVersion 2`);
+    }
+    const boutputs = schemaVersion === 2 ? normalizeArtifactOutputs(b.outputs, `${where}.body node "${bid}"`, problems) : void 0;
     bodyNodes.push({
       id: bid,
       type: "goal",
@@ -825,6 +924,7 @@ function normLoopFields(n, id, problems) {
       depends: bdepends,
       override: boverride,
       inputs: binputs,
+      outputs: boutputs,
       timeoutSec: btimeout,
       humanGate: null,
       resultSchema: bschema
@@ -839,6 +939,13 @@ function normLoopFields(n, id, problems) {
         problems.push(`${where}.body node "${bn.id}".inputs references unknown body node "${inp.from}"`);
       } else if (!bn.depends.some((d) => d.from === inp.from)) {
         problems.push(`${where}.body node "${bn.id}".inputs.from "${inp.from}" must also be in depends`);
+      } else if (inp.output !== void 0) {
+        const source = bodyNodes.find((candidate) => candidate.id === inp.from);
+        if (!source?.outputs || !Object.prototype.hasOwnProperty.call(source.outputs, inp.output)) {
+          problems.push(
+            `${where}.body node "${bn.id}".inputs output ${JSON.stringify(inp.output)} is not declared by source "${inp.from}"`
+          );
+        }
       }
     }
   }
@@ -1064,7 +1171,7 @@ function normResultSchema(v, id, problems) {
   }
   return schema;
 }
-function normInputs(v, id, problems) {
+function normInputs(v, id, problems, schemaVersion) {
   if (v === void 0) return [];
   if (!Array.isArray(v)) {
     problems.push(`node "${id}".inputs must be an array`);
@@ -1077,9 +1184,29 @@ function normInputs(v, id, problems) {
       problems.push(`node "${id}".inputs[${j}] must be { from: <nodeId>, select? }`);
       continue;
     }
-    const extra = Object.keys(inp).filter((k) => k !== "from" && k !== "select");
+    const extra = Object.keys(inp).filter((k) => k !== "from" && k !== "select" && k !== "output");
     if (extra.length > 0) {
-      problems.push(`node "${id}".inputs[${j}] has unsupported key(s): ${extra.join(", ")} (allowed: from, select)`);
+      problems.push(`node "${id}".inputs[${j}] has unsupported key(s): ${extra.join(", ")} (allowed: from, select/output)`);
+      continue;
+    }
+    if (schemaVersion === 2) {
+      if (inp.select !== void 0) {
+        problems.push(`node "${id}".inputs[${j}].select is legacy-only; schemaVersion 2 must use output`);
+        continue;
+      }
+      if (inp.output === void 0) {
+        out.push({ from: inp.from });
+        continue;
+      }
+      if (typeof inp.output !== "string" || !SEGMENT_RE.test(inp.output)) {
+        problems.push(`node "${id}".inputs[${j}].output must be a stable key matching ${SEGMENT_RE}`);
+        continue;
+      }
+      out.push({ from: inp.from, output: inp.output });
+      continue;
+    }
+    if (inp.output !== void 0) {
+      problems.push(`node "${id}".inputs[${j}].output requires schemaVersion 2`);
       continue;
     }
     if (inp.select === void 0) {