openxiangda-contracts 2.16.1 → 2.17.0

package/dist/native-compiler/compiler.d.ts

@@ -4,6 +4,7 @@ declare const COMPILER_CONTRACT_VERSION: "native-4";
 export declare const NATIVE_CONTRACT_CAPACITY_V2: Readonly<{
     readonly perspectives: 100;
     readonly resources: 100;
+    readonly subjectReadSurfaces: 50;
     readonly capabilities: 2000;
     readonly operations: 500;
     readonly eventConsumers: 100;

package/dist/native-compiler/compiler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"compiler.d.ts","sourceRoot":"","sources":["../../src/native-compiler/compiler.ts"],"names":[],"mappings":"AAUA,OAAO,EAEL,KAAK,kCAAkC,IAAI,uCAAuC,EACnF,MAAM,aAAa,CAAC;AAwBrB,QAAA,MAAM,iBAAiB,mDAAmD,CAAC;AAC3E,QAAA,MAAM,yBAAyB,YAA2C,CAAC;AAgF3E,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;EAc7B,CAAC;AACZ,eAAO,MAAM,mBAAmB,6HAItB,CAAC;AACX,eAAO,MAAM,uBAAuB,u/CAkC1B,CAAC;AAGX,KAAK,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAEtC,MAAM,WAAW,gCAAgC;IAC/C,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,UAAU,CAAC;IAC1C,aAAa,EAAE,MAAM,GAAG,MAAM,GAAG,UAAU,CAAC;IAC5C,oBAAoB,EAAE,MAAM,CAAC;IAC7B,sBAAsB,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,6BAA6B,CAAC,CAAC,GAAG,UAAU;IAC3D,KAAK,EAAE,CAAC,CAAC;IACT,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,iCAAiC;IAChD,aAAa,EAAE,OAAO,iBAAiB,CAAC;IACxC,uBAAuB,EAAE,OAAO,yBAAyB,CAAC;IAC1D,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE;QACN,YAAY,EAAE,MAAM,CAAC;QACrB,cAAc,EAAE,MAAM,CAAC;QACvB,gBAAgB,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF,WAAW,EAAE;QACX,KAAK,EAAE,6BAA6B,CAAC;QACrC,IAAI,EAAE,6BAA6B,CAAC;QACpC,MAAM,EAAE,6BAA6B,CAAC;QACtC,SAAS,EAAE,6BAA6B,CAAC;QACzC,OAAO,EAAE,6BAA6B,CAAC;QACvC,SAAS,EAAE,6BAA6B,CAAC;KAC1C,CAAC;IACF,4BAA4B,EAAE,uCAAuC,EAAE,CAAC;IACxE,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,qBAAa,gCAAiC,SAAQ,KAAK;IACzD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBAG3C,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,WAAW,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM;CAY5C;AAED,wBAAgB,qCAAqC,CACnD,KAAK,EAAE,gCAAgC,GACtC,iCAAiC,CA+InC;AAED;;;GAGG;AACH,wBAAgB,qCAAqC,CACnD,MAAM,EAAE,UAAU,GACjB,uCAAuC,EAAE,CA2R3C;AAED,MAAM,WAAW,wBAAwB;IACvC,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC/B;AAED;;;;GAIG;AACH,wBAAgB,gCAAgC,CAAC,KAAK,EAAE;IACtD,SAAS,EAAE,UAAU,EAAE,CAAC;IACxB,YAAY,EAAE,UAAU,EAAE,CAAC;IAC3B,aAAa,EAAE,UAAU,EAAE,CAAC;IAC5B,eAAe,CAAC,EAAE,UAAU,EAAE,CAAC;CAChC,GAAG,wBAAwB,EAAE,CA4J7B"}
+{"version":3,"file":"compiler.d.ts","sourceRoot":"","sources":["../../src/native-compiler/compiler.ts"],"names":[],"mappings":"AAUA,OAAO,EAEL,KAAK,kCAAkC,IAAI,uCAAuC,EACnF,MAAM,aAAa,CAAC;AAyBrB,QAAA,MAAM,iBAAiB,mDAAmD,CAAC;AAC3E,QAAA,MAAM,yBAAyB,YAA2C,CAAC;AAgF3E,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;EAe7B,CAAC;AACZ,eAAO,MAAM,mBAAmB,6HAItB,CAAC;AACX,eAAO,MAAM,uBAAuB,u/CAkC1B,CAAC;AAGX,KAAK,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAEtC,MAAM,WAAW,gCAAgC;IAC/C,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,UAAU,CAAC;IAC1C,aAAa,EAAE,MAAM,GAAG,MAAM,GAAG,UAAU,CAAC;IAC5C,oBAAoB,EAAE,MAAM,CAAC;IAC7B,sBAAsB,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,6BAA6B,CAAC,CAAC,GAAG,UAAU;IAC3D,KAAK,EAAE,CAAC,CAAC;IACT,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,iCAAiC;IAChD,aAAa,EAAE,OAAO,iBAAiB,CAAC;IACxC,uBAAuB,EAAE,OAAO,yBAAyB,CAAC;IAC1D,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE;QACN,YAAY,EAAE,MAAM,CAAC;QACrB,cAAc,EAAE,MAAM,CAAC;QACvB,gBAAgB,EAAE,MAAM,CAAC;KAC1B,CAAC;IACF,WAAW,EAAE;QACX,KAAK,EAAE,6BAA6B,CAAC;QACrC,IAAI,EAAE,6BAA6B,CAAC;QACpC,MAAM,EAAE,6BAA6B,CAAC;QACtC,SAAS,EAAE,6BAA6B,CAAC;QACzC,OAAO,EAAE,6BAA6B,CAAC;QACvC,SAAS,EAAE,6BAA6B,CAAC;KAC1C,CAAC;IACF,4BAA4B,EAAE,uCAAuC,EAAE,CAAC;IACxE,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,qBAAa,gCAAiC,SAAQ,KAAK;IACzD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;gBAG3C,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,WAAW,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM;CAY5C;AAED,wBAAgB,qCAAqC,CACnD,KAAK,EAAE,gCAAgC,GACtC,iCAAiC,CAkJnC;AAED;;;GAGG;AACH,wBAAgB,qCAAqC,CACnD,MAAM,EAAE,UAAU,GACjB,uCAAuC,EAAE,CA4R3C;AAED,MAAM,WAAW,wBAAwB;IACvC,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,mBAAmB,EAAE,MAAM,EAAE,CAAC;IAC9B,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;CAC/B;AAED;;;;GAIG;AACH,wBAAgB,gCAAgC,CAAC,KAAK,EAAE;IACtD,SAAS,EAAE,UAAU,EAAE,CAAC;IACxB,YAAY,EAAE,UAAU,EAAE,CAAC;IAC3B,aAAa,EAAE,UAAU,EAAE,CAAC;IAC5B,eAAe,CAAC,EAAE,UAAU,EAAE,CAAC;CAChC,GAAG,wBAAwB,EAAE,CA4J7B"}

package/dist/native-compiler/compiler.js

@@ -7,6 +7,7 @@ import { OPENXIANGDA_COMPILER_CONTRACT_VERSION as OPENXIANGDA_V2_COMPILER_CONTRA
 import { canonicalJson, sha256Digest as sha256Canonical } from '../canonical.js';
 import { NativeDataFieldContractV2Error, nativeFieldRequiresCreateInputV2, parseNativeDataFieldsV2, parseNativeDataResourceInvariantsV2, validateNativeDataResourceReferencesV2, } from './data-field.js';
 import { validateNativeDataResourceSurfaceV2 } from './data-surface.js';
+import { nativeFieldSupportsSortV2 } from './field-query-plan.js';
 import { nativeScopeSourceGrantPathSupportedV2, nativeScopeSourceSubjectPathSupportedV2, resolveNativeScopeSourceFieldPathV2, } from './scope-source-field-path.js';
 import { NativeDataPolicyExpressionV2Error, nativeDataPolicyExpressionLeavesV2, nativeDataPolicyExpressionToCnfV2, } from './data-policy-expression.js';
 const CONFIG_SCHEMA = 'openxiangda.config-bundle/v3';
@@ -23,7 +24,7 @@ const FIELD_CODE_PATTERN = /^[A-Za-z][A-Za-z0-9_]{0,62}$/;
 const PROPERTY_CODE_PATTERN = /^[A-Za-z][A-Za-z0-9_]{0,127}$/;
 const SECRET_NAME_PATTERN = /^[a-z][a-z0-9]*(?:[-_][a-z0-9]+)*$/;
 const SECRET_ENV_PATTERN = /^[A-Z][A-Z0-9_]*$/;
-const WORKFLOW_CODE_PATTERN = /^[A-Za-z][A-Za-z0-9_-]{0,127}$/;
+const WORKFLOW_CODE_PATTERN = /^[a-z][a-z0-9-]{2,63}$/;
 const WORKFLOW_BINDING_CODE_PATTERN = /^[A-Za-z][A-Za-z0-9_-]{0,127}$/;
 const WORKFLOW_FACT_KEY_PATTERN = /^[A-Za-z][A-Za-z0-9_.]{0,127}$/;
 const WORKFLOW_SUMMARY_MAX_FIELDS = 16;
@@ -94,6 +95,7 @@ const EVENT_AUTHORIZATION_SYSTEM_FIELDS = new Set([
 export const NATIVE_CONTRACT_CAPACITY_V2 = Object.freeze({
     perspectives: 100,
     resources: 100,
+    subjectReadSurfaces: 50,
     capabilities: 2000,
     operations: 500,
     eventConsumers: 100,
@@ -196,6 +198,9 @@ export function compileNativeApplicationConfiguration(input) {
             appCode,
             resources: config.data.resources,
             resourceContracts: expectedContract.resources,
+            ...(expectedContract.subjectReadSurfaces
+                ? { subjectReadSurfaces: expectedContract.subjectReadSurfaces }
+                : {}),
         },
         events: {
             appCode,
@@ -309,6 +314,7 @@ export function compileRequiredPlatformCapabilitiesV3(config) {
                 path: operation.path,
                 capability: operation.capability,
                 platformAccess: operation.platformAccess || null,
+                ...(operation.browser ? { browser: operation.browser } : {}),
                 ai: operation.ai || null,
             })),
         },
@@ -702,8 +708,14 @@ function validateConfigurationEnvelope(config, appCode) {
     boundedArray(backend.operations, '/config/backend/operations', 500);
     validateBackendSecrets(backend.secrets);
     const data = object(config.data, '/config/data');
-    exactKeys(data, ['resources'], '/config/data', ['resourceDetailRoutes']);
+    exactKeys(data, ['resources'], '/config/data', [
+        'resourceDetailRoutes',
+        'subjectReadSurfaces',
+    ]);
     boundedArray(data.resources, '/config/data/resources', 100);
+    if (data.subjectReadSurfaces !== undefined) {
+        boundedArray(data.subjectReadSurfaces, '/config/data/subjectReadSurfaces', NATIVE_CONTRACT_CAPACITY_V2.subjectReadSurfaces);
+    }
     if (data.resourceDetailRoutes !== undefined) {
         boundedArray(data.resourceDetailRoutes, '/config/data/resourceDetailRoutes', 100);
     }
@@ -774,7 +786,12 @@ function validateContractEnvelope(contract, appCode, configDigest) {
         'routeManifest',
         'adminPages',
         'adminNavigation',
-    ], '/contracts', ['authentication', 'publicAccess', 'adminAccess']);
+    ], '/contracts', [
+        'authentication',
+        'publicAccess',
+        'adminAccess',
+        'subjectReadSurfaces',
+    ]);
     equal(contract.schemaVersion, CONTRACT_SCHEMA, '/contracts/schemaVersion');
     equal(contract.compilerContractVersion, COMPILER_CONTRACT_VERSION, '/contracts/compilerContractVersion');
     requiredString(contract.generatorVersion, '/contracts/generatorVersion', 128);
@@ -782,6 +799,9 @@ function validateContractEnvelope(contract, appCode, configDigest) {
     equal(contract.configDigest, configDigest, '/contracts/configDigest');
     boundedArray(contract.perspectives, '/contracts/perspectives', NATIVE_CONTRACT_CAPACITY_V2.perspectives);
     boundedArray(contract.resources, '/contracts/resources', NATIVE_CONTRACT_CAPACITY_V2.resources);
+    if (contract.subjectReadSurfaces !== undefined) {
+        boundedArray(contract.subjectReadSurfaces, '/contracts/subjectReadSurfaces', NATIVE_CONTRACT_CAPACITY_V2.subjectReadSurfaces);
+    }
     boundedArray(contract.capabilities, '/contracts/capabilities', NATIVE_CONTRACT_CAPACITY_V2.capabilities);
     boundedArray(contract.operations, '/contracts/operations', NATIVE_CONTRACT_CAPACITY_V2.operations);
     boundedArray(contract.eventConsumers, '/contracts/eventConsumers', NATIVE_CONTRACT_CAPACITY_V2.eventConsumers);
@@ -904,6 +924,7 @@ function compileExpectedContract(config, configDigest, generatorVersion) {
     ]);
     validateAdminNavigationReferences(config);
     const adminPages = compileAdminPages(config);
+    const subjectReadSurfaces = compileSubjectReadSurfaces(config, capabilities);
     return {
         schemaVersion: CONTRACT_SCHEMA,
         compilerContractVersion: COMPILER_CONTRACT_VERSION,
@@ -912,6 +933,7 @@ function compileExpectedContract(config, configDigest, generatorVersion) {
         configDigest,
         perspectives: config.perspectives,
         resources: compileResources(config),
+        ...(subjectReadSurfaces.length ? { subjectReadSurfaces } : {}),
         capabilities: sorted(capabilities, item => item.code),
         operations: compileOperations(config),
         eventConsumers,
@@ -1118,6 +1140,145 @@ function compileResources(config) {
         };
     }), (item) => item.code);
 }
+function compileSubjectReadSurfaces(config, capabilities) {
+    if (config.data.subjectReadSurfaces === undefined)
+        return [];
+    const declarations = boundedArray(config.data.subjectReadSurfaces, '/config/data/subjectReadSurfaces', NATIVE_CONTRACT_CAPACITY_V2.subjectReadSurfaces);
+    const capabilityCodes = new Set(capabilities.map(capability => String(capability.code)));
+    const resources = new Map(config.data.resources.map((raw, index) => {
+        const pointer = `/config/data/resources/${index}`;
+        const resource = validateResource(raw, pointer, config.appCode);
+        return [
+            String(resource.code),
+            {
+                resource,
+                fields: new Map(boundedArray(object(resource.schema, `${pointer}/schema`).fields, `${pointer}/schema/fields`, 500).map(field => {
+                    const declaration = object(field, `${pointer}/schema/fields`);
+                    return [String(declaration.code), declaration];
+                })),
+            },
+        ];
+    }));
+    const surfaceCodes = new Set();
+    return sorted(declarations.map((raw, surfaceIndex) => {
+        const pointer = `/config/data/subjectReadSurfaces/${surfaceIndex}`;
+        const surface = object(raw, pointer);
+        exactKeys(surface, ['code', 'name', 'capability', 'subject', 'relations'], pointer);
+        const code = stableCode(surface.code, `${pointer}/code`);
+        if (surfaceCodes.has(code)) {
+            fail('NATIVE_SUBJECT_READ_SURFACE_CODE_DUPLICATE', `${pointer}/code`);
+        }
+        surfaceCodes.add(code);
+        const capability = capabilityCode(surface.capability, `${pointer}/capability`, config.appCode);
+        if (!capabilityCodes.has(capability)) {
+            fail('NATIVE_SUBJECT_READ_SURFACE_CAPABILITY_NOT_DECLARED', `${pointer}/capability`);
+        }
+        const subject = object(surface.subject, `${pointer}/subject`);
+        exactKeys(subject, ['resourceCode', 'fields'], `${pointer}/subject`);
+        const subjectResourceCode = resourceCode(subject.resourceCode, `${pointer}/subject/resourceCode`);
+        const subjectResource = resources.get(subjectResourceCode);
+        if (!subjectResource) {
+            fail('NATIVE_SUBJECT_READ_SURFACE_RESOURCE_NOT_DECLARED', `${pointer}/subject/resourceCode`);
+        }
+        const subjectFields = uniqueStrings(subject.fields, `${pointer}/subject/fields`, 100).map((field, index) => fieldCodeValue(field, `${pointer}/subject/fields/${index}`));
+        if (!subjectFields.length) {
+            fail('NATIVE_SUBJECT_READ_SURFACE_FIELDS_REQUIRED', `${pointer}/subject/fields`);
+        }
+        for (const [index, field] of subjectFields.entries()) {
+            const declaration = subjectResource.fields.get(field);
+            if (!declaration || declaration.type === 'subtable') {
+                fail('NATIVE_SUBJECT_READ_SURFACE_FIELD_INVALID', `${pointer}/subject/fields/${index}`);
+            }
+        }
+        const rawRelations = boundedArray(surface.relations, `${pointer}/relations`, 8);
+        if (!rawRelations.length) {
+            fail('NATIVE_SUBJECT_READ_SURFACE_RELATIONS_REQUIRED', `${pointer}/relations`);
+        }
+        const relationCodes = new Set();
+        let rowBudget = 0;
+        const relations = sorted(rawRelations.map((rawRelation, relationIndex) => {
+            const relationPointer = `${pointer}/relations/${relationIndex}`;
+            const relation = object(rawRelation, relationPointer);
+            exactKeys(relation, [
+                'code',
+                'resourceCode',
+                'foreignKeyField',
+                'fields',
+                'limit',
+            ], relationPointer, ['order']);
+            const relationCode = stableCode(relation.code, `${relationPointer}/code`);
+            if (relationCodes.has(relationCode)) {
+                fail('NATIVE_SUBJECT_READ_SURFACE_RELATION_CODE_DUPLICATE', `${relationPointer}/code`);
+            }
+            relationCodes.add(relationCode);
+            const relationResourceCode = resourceCode(relation.resourceCode, `${relationPointer}/resourceCode`);
+            const relationResource = resources.get(relationResourceCode);
+            if (!relationResource) {
+                fail('NATIVE_SUBJECT_READ_SURFACE_RESOURCE_NOT_DECLARED', `${relationPointer}/resourceCode`);
+            }
+            const foreignKeyField = fieldCodeValue(relation.foreignKeyField, `${relationPointer}/foreignKeyField`);
+            const foreignKey = relationResource.fields.get(foreignKeyField);
+            const foreignKeySource = object(foreignKey?.source || {}, `${relationPointer}/foreignKeyField/source`);
+            if (!foreignKey ||
+                !['uuid', 'resource-ref.single'].includes(String(foreignKey.type)) ||
+                (foreignKey.type === 'resource-ref.single' &&
+                    (foreignKeySource.kind !== 'resource' ||
+                        foreignKeySource.resourceCode !== subjectResourceCode))) {
+                fail('NATIVE_SUBJECT_READ_SURFACE_RELATION_INVALID', `${relationPointer}/foreignKeyField`);
+            }
+            const fields = uniqueStrings(relation.fields, `${relationPointer}/fields`, 100).map((field, index) => fieldCodeValue(field, `${relationPointer}/fields/${index}`));
+            if (!fields.length) {
+                fail('NATIVE_SUBJECT_READ_SURFACE_FIELDS_REQUIRED', `${relationPointer}/fields`);
+            }
+            for (const [index, field] of fields.entries()) {
+                const declaration = relationResource.fields.get(field);
+                if (!declaration || declaration.type === 'subtable') {
+                    fail('NATIVE_SUBJECT_READ_SURFACE_FIELD_INVALID', `${relationPointer}/fields/${index}`);
+                }
+            }
+            const order = boundedArray(relation.order || [], `${relationPointer}/order`, 10).map((rawOrder, orderIndex) => {
+                const orderPointer = `${relationPointer}/order/${orderIndex}`;
+                const item = object(rawOrder, orderPointer);
+                exactKeys(item, ['field', 'direction'], orderPointer);
+                const field = fieldCodeValue(item.field, `${orderPointer}/field`);
+                const declaration = relationResource.fields.get(field);
+                if ((!EVENT_AUTHORIZATION_SYSTEM_FIELDS.has(field) && !declaration) ||
+                    declaration?.type === 'subtable' ||
+                    (declaration &&
+                        !nativeFieldSupportsSortV2(declaration.type))) {
+                    fail('NATIVE_SUBJECT_READ_SURFACE_ORDER_FIELD_INVALID', `${orderPointer}/field`);
+                }
+                if (!['asc', 'desc'].includes(String(item.direction))) {
+                    fail('NATIVE_SUBJECT_READ_SURFACE_ORDER_DIRECTION_INVALID', `${orderPointer}/direction`);
+                }
+                return { field, direction: item.direction };
+            });
+            const limit = boundedInteger(relation.limit, `${relationPointer}/limit`, 1, 100);
+            rowBudget += limit;
+            return {
+                code: relationCode,
+                resourceCode: relationResourceCode,
+                foreignKeyField,
+                fields: uniqueSorted(fields),
+                ...(order.length ? { order } : {}),
+                limit,
+            };
+        }), relation => relation.code);
+        if (rowBudget > 400) {
+            fail('NATIVE_SUBJECT_READ_SURFACE_ROW_LIMIT_EXCEEDED', `${pointer}/relations`);
+        }
+        return {
+            code,
+            name: requiredString(surface.name, `${pointer}/name`, 255),
+            capability,
+            subject: {
+                resourceCode: subjectResourceCode,
+                fields: uniqueSorted(subjectFields),
+            },
+            relations,
+        };
+    }), surface => surface.code);
+}
 function compileResourceDetailRoutes(config) {
     const declarations = config.data.resourceDetailRoutes === undefined
         ? []
@@ -1190,6 +1351,17 @@ function compileResourceDetailRoutes(config) {
     return result;
 }
 function compileOperations(config) {
+    const declaredResourceFields = new Map(config.data.resources.map((resource, resourceIndex) => {
+        const pointer = `/config/data/resources/${resourceIndex}`;
+        const declaration = validateResource(resource, pointer, config.appCode);
+        return [
+            declaration.code,
+            new Map(declaration.schema.fields.map((field) => [
+                String(field.code),
+                field,
+            ])),
+        ];
+    }));
     const declaredResources = new Map(config.data.resources.map((resource, resourceIndex) => {
         const pointer = `/config/data/resources/${resourceIndex}`;
         const declaration = validateResource(resource, pointer, config.appCode);
@@ -1215,6 +1387,7 @@ function compileOperations(config) {
             'responseSchema',
             'description',
             'platformAccess',
+            'browser',
             'ai',
         ], pointer, true);
         const method = requiredString(operation.method, `${pointer}/method`, 16);
@@ -1224,6 +1397,7 @@ function compileOperations(config) {
         const code = stableCode(operation.code, `${pointer}/code`);
         validateBackendOperationAi(operation.ai, pointer, code, method, declaredResourceCodes);
         const platformAccess = validateOperationPlatformAccess(operation.platformAccess, `${pointer}/platformAccess`, declaredResources, declaredWorkflowCodes, new Set(config.authz.roles.map((role) => String(role.code))));
+        const browser = validateOperationBrowser(operation.browser, `${pointer}/browser`, method, operation.requestSchema, operation.responseSchema, declaredResources, declaredResourceFields, config.data.subjectReadSurfaces || []);
         return {
             code,
             method,
@@ -1237,9 +1411,169 @@ function compileOperations(config) {
                     description: optionalString(operation.description, `${pointer}/description`, 2000),
                 }),
             ...(platformAccess ? { platformAccess } : {}),
+            ...(browser ? { browser } : {}),
         };
     }), (item) => item.code);
 }
+function validateOperationBrowser(value, pointer, method, requestSchemaInput, responseSchemaInput, declaredResources, declaredResourceFields, subjectReadSurfacesInput) {
+    if (value === undefined)
+        return null;
+    const browser = object(value, pointer);
+    exactKeys(browser, ['exposure', 'behavior', 'idempotency', 'subject'], pointer, ['refreshTargets', 'fileIntent']);
+    equal(browser.exposure, 'authenticated', `${pointer}/exposure`);
+    const behavior = requiredString(browser.behavior, `${pointer}/behavior`, 32);
+    if (!['read', 'controlled'].includes(behavior)) {
+        fail('NATIVE_OPERATION_BROWSER_BEHAVIOR_INVALID', `${pointer}/behavior`);
+    }
+    const idempotency = requiredString(browser.idempotency, `${pointer}/idempotency`, 32);
+    if (!['none', 'required'].includes(idempotency) ||
+        (behavior === 'controlled' && idempotency !== 'required') ||
+        (behavior === 'read' && idempotency !== 'none')) {
+        fail('NATIVE_OPERATION_BROWSER_IDEMPOTENCY_INVALID', `${pointer}/idempotency`);
+    }
+    const subject = object(browser.subject, `${pointer}/subject`);
+    exactKeys(subject, ['resourceCode', 'inputField'], `${pointer}/subject`);
+    const resource = resourceCode(subject.resourceCode, `${pointer}/subject/resourceCode`);
+    if (!declaredResources.has(resource)) {
+        fail('NATIVE_OPERATION_BROWSER_SUBJECT_RESOURCE_NOT_DECLARED', `${pointer}/subject/resourceCode`);
+    }
+    const inputField = fieldCodeValue(subject.inputField, `${pointer}/subject/inputField`);
+    const requestSchema = object(requestSchemaInput, `${pointer}/requestSchema`);
+    const responseSchema = object(responseSchemaInput, `${pointer}/responseSchema`);
+    if (requestSchema.type !== 'object' ||
+        requestSchema.additionalProperties !== false ||
+        responseSchema.type !== 'object' ||
+        responseSchema.additionalProperties !== false) {
+        fail('NATIVE_OPERATION_BROWSER_SCHEMA_ROOT_INVALID', `${pointer}/requestSchema`);
+    }
+    const requestProperties = object(requestSchema.properties, `${pointer}/requestSchema/properties`);
+    const requiredFields = new Set(requestSchema.required === undefined
+        ? []
+        : uniqueStrings(requestSchema.required, `${pointer}/requestSchema/required`, 200));
+    if (!(inputField in requestProperties) || !requiredFields.has(inputField)) {
+        fail('NATIVE_OPERATION_BROWSER_SUBJECT_INPUT_INVALID', `${pointer}/subject/inputField`);
+    }
+    const subjectInputSchema = object(requestProperties[inputField], `${pointer}/requestSchema/properties/${inputField}`);
+    if (subjectInputSchema.type !== 'string' ||
+        subjectInputSchema.format !== 'uuid') {
+        fail('NATIVE_OPERATION_BROWSER_SUBJECT_INPUT_INVALID', `${pointer}/subject/inputField`);
+    }
+    const surfaces = new Map((Array.isArray(subjectReadSurfacesInput) ? subjectReadSurfacesInput : []).map((raw, index) => {
+        const declaration = object(raw, `/config/data/subjectReadSurfaces/${index}`);
+        return [
+            String(declaration.code),
+            String(object(declaration.subject, `/config/data/subjectReadSurfaces/${index}/subject`).resourceCode),
+        ];
+    }));
+    const refreshTargets = browser.refreshTargets === undefined
+        ? []
+        : boundedArray(browser.refreshTargets, `${pointer}/refreshTargets`, 16);
+    const refreshKeys = new Set();
+    const normalizedTargets = sorted(refreshTargets.map((raw, index) => {
+        const targetPointer = `${pointer}/refreshTargets/${index}`;
+        const target = object(raw, targetPointer);
+        exactKeys(target, ['kind', 'code'], targetPointer);
+        equal(target.kind, 'subject-surface', `${targetPointer}/kind`);
+        const code = stableCode(target.code, `${targetPointer}/code`);
+        if (refreshKeys.has(code) ||
+            !surfaces.has(code) ||
+            surfaces.get(code) !== resource) {
+            fail('NATIVE_OPERATION_BROWSER_REFRESH_TARGET_INVALID', `${targetPointer}/code`);
+        }
+        refreshKeys.add(code);
+        return { kind: 'subject-surface', code };
+    }), target => `${target.kind}:${target.code}`);
+    const fileIntent = validateOperationFileIntent(browser.fileIntent, `${pointer}/fileIntent`, method, behavior, idempotency, resource, requestProperties, requiredFields, declaredResourceFields);
+    return {
+        exposure: 'authenticated',
+        behavior,
+        idempotency,
+        subject: { resourceCode: resource, inputField },
+        ...(normalizedTargets.length ? { refreshTargets: normalizedTargets } : {}),
+        ...(fileIntent ? { fileIntent } : {}),
+    };
+}
+function validateOperationFileIntent(value, pointer, method, behavior, idempotency, subjectResourceCode, requestProperties, requiredFields, declaredResources) {
+    if (value === undefined)
+        return null;
+    const intent = object(value, pointer);
+    exactKeys(intent, [
+        'recordResourceCode',
+        'recordIdInputField',
+        'relationField',
+        'fileNameField',
+        'contentTypeField',
+        'sizeField',
+        'purposes',
+        'maxTtlSeconds',
+        'maxBytes',
+    ], pointer);
+    if (method !== 'GET' || behavior !== 'read' || idempotency !== 'none') {
+        fail('NATIVE_OPERATION_FILE_INTENT_BEHAVIOR_INVALID', pointer);
+    }
+    const recordResourceCode = resourceCode(intent.recordResourceCode, `${pointer}/recordResourceCode`);
+    const fields = declaredResources.get(recordResourceCode);
+    if (!fields) {
+        fail('NATIVE_OPERATION_FILE_INTENT_RESOURCE_NOT_DECLARED', `${pointer}/recordResourceCode`);
+    }
+    const recordIdInputField = fieldCodeValue(intent.recordIdInputField, `${pointer}/recordIdInputField`);
+    const recordIdSchema = object(requestProperties[recordIdInputField], `${pointer}/recordIdInputField`);
+    if (!requiredFields.has(recordIdInputField) ||
+        recordIdSchema.type !== 'string' ||
+        recordIdSchema.format !== 'uuid') {
+        fail('NATIVE_OPERATION_FILE_INTENT_RECORD_INPUT_INVALID', `${pointer}/recordIdInputField`);
+    }
+    const relationField = fieldCodeValue(intent.relationField, `${pointer}/relationField`);
+    const relation = fields.get(relationField);
+    if (!relation ||
+        !['uuid', 'resource-ref.single'].includes(String(relation.type)) ||
+        (String(relation.type) === 'resource-ref.single' &&
+            (String(object(relation.source, `${pointer}/relationField`).kind || '') !==
+                'resource' ||
+                String(object(relation.source, `${pointer}/relationField`).resourceCode || '') !==
+                    subjectResourceCode))) {
+        fail('NATIVE_OPERATION_FILE_INTENT_RELATION_INVALID', `${pointer}/relationField`);
+    }
+    const metadata = [
+        ['fileNameField', ['text.short', 'text.long']],
+        ['contentTypeField', ['text.short', 'text.long']],
+        ['sizeField', ['number.integer']],
+    ];
+    const normalizedMetadata = {};
+    for (const [key, allowedTypes] of metadata) {
+        const fieldCode = fieldCodeValue(intent[key], `${pointer}/${key}`);
+        if (!allowedTypes.includes(String(fields.get(fieldCode)?.type))) {
+            fail('NATIVE_OPERATION_FILE_INTENT_METADATA_INVALID', `${pointer}/${key}`);
+        }
+        normalizedMetadata[key] = fieldCode;
+    }
+    const purposes = sorted(uniqueStrings(intent.purposes, `${pointer}/purposes`, 2), item => item);
+    if (!purposes.length ||
+        purposes.some(purpose => !['preview', 'download'].includes(purpose))) {
+        fail('NATIVE_OPERATION_FILE_INTENT_PURPOSE_INVALID', `${pointer}/purposes`);
+    }
+    const maxTtlSeconds = Number(intent.maxTtlSeconds);
+    if (!Number.isSafeInteger(maxTtlSeconds) ||
+        maxTtlSeconds < 1 ||
+        maxTtlSeconds > 300) {
+        fail('NATIVE_OPERATION_FILE_INTENT_TTL_INVALID', `${pointer}/maxTtlSeconds`);
+    }
+    const maxBytes = Number(intent.maxBytes);
+    if (!Number.isSafeInteger(maxBytes) || maxBytes < 1 || maxBytes > 104857600) {
+        fail('NATIVE_OPERATION_FILE_INTENT_SIZE_INVALID', `${pointer}/maxBytes`);
+    }
+    return {
+        recordResourceCode,
+        recordIdInputField,
+        relationField,
+        fileNameField: normalizedMetadata.fileNameField,
+        contentTypeField: normalizedMetadata.contentTypeField,
+        sizeField: normalizedMetadata.sizeField,
+        purposes,
+        maxTtlSeconds,
+        maxBytes,
+    };
+}
 function validateOperationPlatformAccess(value, pointer, declaredResources, declaredWorkflowCodes, declaredRoleCodes) {
     if (value === undefined)
         return null;
@@ -4030,6 +4364,7 @@ function validateWorkflowDefinition(definition, pointer) {
         }
         const targets = [];
         if (node.kind === 'approval') {
+            requiredString(node.title, `${nodePointer}/title`, 255);
             workflowBindingCode(node.binding, `${nodePointer}/binding`);
             if (!['single', 'any', 'all', 'sequence'].includes(node.mode)) {
                 fail('NATIVE_WORKFLOW_APPROVAL_MODE_INVALID', `${nodePointer}/mode`);
@@ -4059,6 +4394,7 @@ function validateWorkflowDefinition(definition, pointer) {
             targets.push(requiredString(node.otherwise, `${nodePointer}/otherwise`, 128));
         }
         else {
+            requiredString(node.title, `${nodePointer}/title`, 255);
             requiredString(node.outcome, `${nodePointer}/outcome`, 128);
         }
         for (const target of targets) {