pomerado 0.1.0 → 0.1.2

package/README.md

@@ -246,9 +246,9 @@ corepack pnpm test:browser
 
 This repository owns the portable tests for its shared core and local runtime, with synthetic fixtures and the existing Vitest and Playwright runners. Browser tests exercise native Playwright, minting through MCP, generated integration MCPs, authentication and autofill using local fixture sites and scripted model responses. They need no Cloud account or model API key. Tests for hosted services stay in the application repository.
 
-Open shared core and local adapter pull requests here. Shared changes land here first.
+Outside pull requests are not accepted until a Contributor License Agreement is in place. Issues are welcome. See [CONTRIBUTING.md](CONTRIBUTING.md) for how changes land and [SECURITY.md](SECURITY.md) for reporting vulnerabilities privately.
 
-Public tests use synthetic sites and data. Keep customer-specific incidents, private credentials and internal issue references out of public contributions.
+Public tests use synthetic sites and data. Keep customer-specific incidents, private credentials and internal issue references out of public contributions. CI enforces this with a gitleaks secret scan and a public content scan. Run `node tools/check-public-content.ts` before you push. Link a public issue by its full URL.
 
 - Build and test the package before publishing an explicit versioned release. The release workflow validates the packed artifact before npm publication.
 - Adopt a tested release in Cloud through an exact dependency pin and locked integrity. Update the controller and sandbox images together.
@@ -259,3 +259,5 @@ The clone and build quickstart works independently of npm releases. Contributors
 ---
 
 Copyright (c) 2026 Pomerado. Licensed under GNU Affero General Public License version 3 only (`AGPL-3.0-only`). See [LICENSE](LICENSE).
+
+Third-party code keeps its own license. The Guardian policy in `typescript/src/guardian/upstream-policy.md` is adapted from [OpenAI Codex](https://github.com/openai/codex) under the Apache License 2.0. Its license and notice are in [third-party/codex/](third-party/codex/) and ship with the npm package.

package/dist/typescript/authoring/core/SKILL.md

@@ -140,6 +140,18 @@ request and the flow, never from one caller's account or example.
   schema, inside `Schema.optional(...)` for an optional one; a `Schema.Date` keeps it only on
   `Schema.optional(Schema.Date)` or `Schema.propertySignature(Schema.Date)`. Callers see each
   beside its name.
+- Shape inputs and outputs like Pomerado's own API, so every tool reads alike: field names in
+  snake_case; dates as `YYYY-MM-DD` and timestamps as ISO 8601 with an offset; money as an
+  integer in minor units with an ISO 4217 `currency` beside it, such as `total_minor` 12999 and
+  `currency` `"USD"`; enum values in lowercase snake_case (`"premium_economy"`); booleans named
+  as statements (`refundable`, not `is_refundable_flag`); lists named in the plural; and the
+  unit in the field name or its description (`duration_minutes`). Convert between these and the
+  site's own formats in code.
+- Give every input field one `examples` annotation value, which callers, the docs and the Try it
+  form use to assemble a sample request: public, generic data such as a well-known airport code
+  (`examples: ["SFO"]`), a date a few weeks ahead or a common product category. Never use a value
+  from this session: not the caller's input, the owner's answers or anything the site showed
+  this account.
 - Descriptions, titles, examples and defaults are published and reviewed for private data,
   and an annotation never declares its contents public. Explain constraints without copying private input
   or unneeded numeric identifiers; for a nonnegative safe integer,

package/dist/typescript/authoring/examples/dates-and-dropdowns.js

@@ -20,8 +20,11 @@ const failures = [
 export default defineOperation({
     name: "set_departure",
     input: Schema.Struct({
-        date: DateOnly.annotations({ description: "Departure date, YYYY-MM-DD" }),
-        cabin: Cabin.annotations({ description: "Cabin class to search" }),
+        date: DateOnly.annotations({
+            description: "Departure date, YYYY-MM-DD",
+            examples: ["2026-11-14"],
+        }),
+        cabin: Cabin.annotations({ description: "Cabin class to search", examples: ["economy"] }),
     }),
     output: Schema.Struct({
         date: DateOnly.annotations({ description: "Departure date the form now holds, YYYY-MM-DD" }),

package/dist/typescript/authoring/examples/dates-and-dropdowns.ts

@@ -23,8 +23,11 @@ export default defineOperation(
   {
     name: "set_departure",
     input: Schema.Struct({
-      date: DateOnly.annotations({ description: "Departure date, YYYY-MM-DD" }),
-      cabin: Cabin.annotations({ description: "Cabin class to search" }),
+      date: DateOnly.annotations({
+        description: "Departure date, YYYY-MM-DD",
+        examples: ["2026-11-14"],
+      }),
+      cabin: Cabin.annotations({ description: "Cabin class to search", examples: ["economy"] }),
     }),
     output: Schema.Struct({
       date: DateOnly.annotations({ description: "Departure date the form now holds, YYYY-MM-DD" }),

package/dist/typescript/authoring/examples/dates-and-files.d.ts

@@ -9,11 +9,11 @@ export declare const pickTravelDate: import("../../src/runtime/kernel-operation.
 }>;
 declare const _default: import("../../src/runtime/kernel-operation.js").KernelOperation<{
     readonly name: string;
-    readonly mimeType: string;
-    readonly contentBase64: string;
+    readonly mime_type: string;
+    readonly content_base64: string;
 }, {
-    readonly contentBase64: string;
-    readonly mimeType: string;
+    readonly content_base64: string;
+    readonly mime_type: string;
     readonly name: string;
 }, {
     readonly name: string;

package/dist/typescript/authoring/examples/dates-and-files.js

@@ -59,10 +59,10 @@ export default defineOperation({
         name: Schema.NonEmptyString.annotations({
             description: "File name for the document, with its extension",
         }),
-        mimeType: Schema.NonEmptyString.annotations({
+        mime_type: Schema.NonEmptyString.annotations({
             description: "The document's media type, such as application/pdf",
         }),
-        contentBase64: Schema.String.annotations({ description: "The document's bytes, base64" }),
+        content_base64: Schema.String.annotations({ description: "The document's bytes, base64" }),
     }),
     output: Schema.Struct({
         name: Schema.String.annotations({ description: "Name of the file the field now holds" }),
@@ -79,8 +79,8 @@ export default defineOperation({
         await field.setInputFiles(
           {
             name: ${JSON.stringify(input.name)},
-            mimeType: ${JSON.stringify(input.mimeType)},
-            buffer: Buffer.from(${JSON.stringify(input.contentBase64)}, "base64"),
+            mimeType: ${JSON.stringify(input.mime_type)},
+            buffer: Buffer.from(${JSON.stringify(input.content_base64)}, "base64"),
           },
           { timeout: 30000 },
         );
@@ -95,7 +95,7 @@ export default defineOperation({
     if ("failure" in result)
         throw new errors.OperationFailure(result.failure, { dispatch: "not_sent" });
     const file = result.files[0];
-    const size = Buffer.from(input.contentBase64, "base64").byteLength;
+    const size = Buffer.from(input.content_base64, "base64").byteLength;
     // Selection is not proof the site accepted the upload; this reads back only the choice.
     if (result.files.length !== 1 || file?.name !== input.name || file.size !== size)
         throw new errors.OperationFailure("The chosen file did not read back", { dispatch: "sent" });

package/dist/typescript/authoring/examples/dates-and-files.ts

@@ -76,10 +76,10 @@ export default defineOperation(
       name: Schema.NonEmptyString.annotations({
         description: "File name for the document, with its extension",
       }),
-      mimeType: Schema.NonEmptyString.annotations({
+      mime_type: Schema.NonEmptyString.annotations({
         description: "The document's media type, such as application/pdf",
       }),
-      contentBase64: Schema.String.annotations({ description: "The document's bytes, base64" }),
+      content_base64: Schema.String.annotations({ description: "The document's bytes, base64" }),
     }),
     output: Schema.Struct({
       name: Schema.String.annotations({ description: "Name of the file the field now holds" }),
@@ -97,8 +97,8 @@ export default defineOperation(
         await field.setInputFiles(
           {
             name: ${JSON.stringify(input.name)},
-            mimeType: ${JSON.stringify(input.mimeType)},
-            buffer: Buffer.from(${JSON.stringify(input.contentBase64)}, "base64"),
+            mimeType: ${JSON.stringify(input.mime_type)},
+            buffer: Buffer.from(${JSON.stringify(input.content_base64)}, "base64"),
           },
           { timeout: 30000 },
         );
@@ -118,7 +118,7 @@ export default defineOperation(
     if ("failure" in result)
       throw new errors.OperationFailure(result.failure, { dispatch: "not_sent" });
     const file = result.files[0];
-    const size = Buffer.from(input.contentBase64, "base64").byteLength;
+    const size = Buffer.from(input.content_base64, "base64").byteLength;
     // Selection is not proof the site accepted the upload; this reads back only the choice.
     if (result.files.length !== 1 || file?.name !== input.name || file.size !== size)
       throw new errors.OperationFailure("The chosen file did not read back", { dispatch: "sent" });

package/dist/typescript/authoring/examples/dialog-picker.d.ts

@@ -5,8 +5,8 @@ declare const _default: import("../../src/runtime/kernel-operation.js").KernelOp
     readonly key: string;
     readonly query: string;
 }, {
-    readonly selectedKey: string;
+    readonly selected_key: string;
 }, {
-    readonly selectedKey: string;
+    readonly selected_key: string;
 }>;
 export default _default;

package/dist/typescript/authoring/examples/dialog-picker.js

@@ -1,6 +1,6 @@
 import { Schema } from "effect";
 import { defineOperation } from "../../src/browser/index.js";
-const Picked = Schema.Union(Schema.Struct({ selectedKey: Schema.NonEmptyString }), Schema.Struct({
+const Picked = Schema.Union(Schema.Struct({ selected_key: Schema.NonEmptyString }), Schema.Struct({
     failure: Schema.Literal("query_mismatch", "option_identity_mismatch", "committed_key_mismatch"),
 }));
 // These roles, names and data attributes describe one synthetic site's observed picker.
@@ -14,7 +14,7 @@ export default defineOperation({
         }),
     }),
     output: Schema.Struct({
-        selectedKey: Schema.NonEmptyString.annotations({
+        selected_key: Schema.NonEmptyString.annotations({
             description: "Catalog key the page now shows as selected",
         }),
     }),
@@ -45,7 +45,7 @@ export default defineOperation({
         const committed = page.getByRole("textbox", { name: "Selected catalog key", exact: true });
         const until = Date.now() + 30000;
         while (Date.now() < until) {
-          if ((await committed.inputValue({ timeout: 1000 })) === key) return { selectedKey: key };
+          if ((await committed.inputValue({ timeout: 1000 })) === key) return { selected_key: key };
           await page.waitForTimeout(100);
         }
         return { failure: "committed_key_mismatch" };

package/dist/typescript/authoring/examples/dialog-picker.ts

@@ -2,7 +2,7 @@ import { Schema } from "effect";
 import { defineOperation } from "../../src/browser/index.js";
 
 const Picked = Schema.Union(
-  Schema.Struct({ selectedKey: Schema.NonEmptyString }),
+  Schema.Struct({ selected_key: Schema.NonEmptyString }),
   Schema.Struct({
     failure: Schema.Literal("query_mismatch", "option_identity_mismatch", "committed_key_mismatch"),
   }),
@@ -20,7 +20,7 @@ export default defineOperation(
       }),
     }),
     output: Schema.Struct({
-      selectedKey: Schema.NonEmptyString.annotations({
+      selected_key: Schema.NonEmptyString.annotations({
         description: "Catalog key the page now shows as selected",
       }),
     }),
@@ -52,7 +52,7 @@ export default defineOperation(
         const committed = page.getByRole("textbox", { name: "Selected catalog key", exact: true });
         const until = Date.now() + 30000;
         while (Date.now() < until) {
-          if ((await committed.inputValue({ timeout: 1000 })) === key) return { selectedKey: key };
+          if ((await committed.inputValue({ timeout: 1000 })) === key) return { selected_key: key };
           await page.waitForTimeout(100);
         }
         return { failure: "committed_key_mismatch" };

package/dist/typescript/authoring/examples/native-dialog.d.ts

@@ -1,7 +1,7 @@
 declare const _default: import("../../src/runtime/kernel-operation.js").KernelOperation<{
-    readonly invoiceId: string;
+    readonly invoice_id: string;
 }, {
-    readonly invoiceId: string;
+    readonly invoice_id: string;
 }, {
     readonly deleted: boolean;
 }, {

package/dist/typescript/authoring/examples/native-dialog.js

@@ -7,7 +7,7 @@ const InvoiceId = Schema.String.pipe(Schema.pattern(/^[A-Za-z0-9_-]{1,100}$/));
 export default defineOperation({
     name: "delete_invoice",
     input: Schema.Struct({
-        invoiceId: InvoiceId.annotations({ description: "ID of the invoice to delete" }),
+        invoice_id: InvoiceId.annotations({ description: "ID of the invoice to delete" }),
     }),
     output: Schema.Struct({
         deleted: Schema.Boolean.annotations({
@@ -18,7 +18,7 @@ export default defineOperation({
     const raised = await kernel.browsers.playwright.execute(sessionId, {
         timeout_sec: 30,
         code: `
-        const row = page.getByRole("row").filter({ has: page.getByText(${JSON.stringify(input.invoiceId)}, { exact: true }) });
+        const row = page.getByRole("row").filter({ has: page.getByText(${JSON.stringify(input.invoice_id)}, { exact: true }) });
         if ((await row.count()) !== 1) return { failure: "invoice_missing" };
         const shown = new Promise((resolve) => page.once("dialog", (dialog) => {
           globalThis.dialog = dialog;
@@ -53,7 +53,7 @@ export default defineOperation({
             ? `await globalThis.dialog.accept(${JSON.stringify(decision.promptText ?? "")});`
             : "await globalThis.dialog.dismiss();"}
         delete globalThis.dialog;
-        const row = page.getByRole("row").filter({ has: page.getByText(${JSON.stringify(input.invoiceId)}, { exact: true }) });
+        const row = page.getByRole("row").filter({ has: page.getByText(${JSON.stringify(input.invoice_id)}, { exact: true }) });
         // Read the result back: the row is gone only if the site deleted it.
         await row.waitFor({ state: ${JSON.stringify(decision.choice === "accept" ? "detached" : "visible")}, timeout: 10000 });
         return { deleted: (await row.count()) === 0 };

package/dist/typescript/authoring/examples/native-dialog.ts

@@ -10,7 +10,7 @@ export default defineOperation(
   {
     name: "delete_invoice",
     input: Schema.Struct({
-      invoiceId: InvoiceId.annotations({ description: "ID of the invoice to delete" }),
+      invoice_id: InvoiceId.annotations({ description: "ID of the invoice to delete" }),
     }),
     output: Schema.Struct({
       deleted: Schema.Boolean.annotations({
@@ -22,7 +22,7 @@ export default defineOperation(
     const raised = await kernel.browsers.playwright.execute(sessionId, {
       timeout_sec: 30,
       code: `
-        const row = page.getByRole("row").filter({ has: page.getByText(${JSON.stringify(input.invoiceId)}, { exact: true }) });
+        const row = page.getByRole("row").filter({ has: page.getByText(${JSON.stringify(input.invoice_id)}, { exact: true }) });
         if ((await row.count()) !== 1) return { failure: "invoice_missing" };
         const shown = new Promise((resolve) => page.once("dialog", (dialog) => {
           globalThis.dialog = dialog;
@@ -64,7 +64,7 @@ export default defineOperation(
             : "await globalThis.dialog.dismiss();"
         }
         delete globalThis.dialog;
-        const row = page.getByRole("row").filter({ has: page.getByText(${JSON.stringify(input.invoiceId)}, { exact: true }) });
+        const row = page.getByRole("row").filter({ has: page.getByText(${JSON.stringify(input.invoice_id)}, { exact: true }) });
         // Read the result back: the row is gone only if the site deleted it.
         await row.waitFor({ state: ${JSON.stringify(decision.choice === "accept" ? "detached" : "visible")}, timeout: 10000 });
         return { deleted: (await row.count()) === 0 };

package/dist/typescript/authoring/examples/navigation.d.ts

@@ -1,12 +1,12 @@
 export declare const detailNavigation: import("../../src/runtime/kernel-operation.js").KernelOperation<{
-    readonly recordId: string;
+    readonly record_id: string;
 }, {
-    readonly recordId: string;
+    readonly record_id: string;
 }, {
-    readonly recordId: string;
+    readonly record_id: string;
     readonly title: string;
 }, {
-    readonly recordId: string;
+    readonly record_id: string;
     readonly title: string;
 }>;
 declare const _default: import("../../src/runtime/kernel-operation.js").KernelOperation<{}, {}, {

package/dist/typescript/authoring/examples/navigation.js

@@ -9,16 +9,19 @@ const Detail = Schema.Union(Schema.Struct({ title: Schema.NonEmptyString }), Sch
 export const detailNavigation = defineOperation({
     name: "read_record_detail",
     input: Schema.Struct({
-        recordId: RecordId.annotations({ description: "ID of the record to read, as in its URL" }),
+        record_id: RecordId.annotations({
+            description: "ID of the record to read, as in its URL",
+            examples: ["record_42"],
+        }),
     }),
     output: Schema.Struct({
-        recordId: RecordId.annotations({ description: "ID of the record read" }),
+        record_id: RecordId.annotations({ description: "ID of the record read" }),
         title: Schema.NonEmptyString.annotations({ description: "The record's title" }),
     }),
 }, async ({ kernel, sessionId, siteOrigin, siteDomain, input, errors }) => {
     if (siteOrigin === undefined)
         throw new errors.OperationFailure("No site origin for a live run", { dispatch: "not_sent" });
-    const target = new URL(`/records/${input.recordId}`, siteOrigin);
+    const target = new URL(`/records/${input.record_id}`, siteOrigin);
     const answer = await kernel.browsers.playwright.execute(sessionId, {
         timeout_sec: 90,
         code: `
@@ -28,7 +31,7 @@ export const detailNavigation = defineOperation({
         const siteDomain = ${JSON.stringify(siteDomain ?? null)};
         const onSite = (url) => siteDomain === null ? url.origin === ${JSON.stringify(siteOrigin)}
           : url.protocol === "https:" && (url.hostname === siteDomain || url.hostname.endsWith("." + siteDomain));
-        const recordId = ${JSON.stringify(input.recordId)};
+        const recordId = ${JSON.stringify(input.record_id)};
         const detail = page.getByRole("region", { name: "Record details", exact: true });
         const interstitial = page.getByRole("region", { name: "Continue to record", exact: true });
         const proceed = interstitial.getByRole("button", { name: "Continue", exact: true });
@@ -81,7 +84,7 @@ export const detailNavigation = defineOperation({
     const result = Schema.decodeUnknownSync(Detail)(answer.result);
     if ("failure" in result)
         throw new errors.OperationFailure(result.failure);
-    return { recordId: input.recordId, title: result.title };
+    return { record_id: input.record_id, title: result.title };
 });
 // A bounded first-page read. A fast exploration load does not remove the readiness wait.
 export default defineOperation({

package/dist/typescript/authoring/examples/navigation.ts

@@ -20,17 +20,20 @@ export const detailNavigation = defineOperation(
   {
     name: "read_record_detail",
     input: Schema.Struct({
-      recordId: RecordId.annotations({ description: "ID of the record to read, as in its URL" }),
+      record_id: RecordId.annotations({
+        description: "ID of the record to read, as in its URL",
+        examples: ["record_42"],
+      }),
     }),
     output: Schema.Struct({
-      recordId: RecordId.annotations({ description: "ID of the record read" }),
+      record_id: RecordId.annotations({ description: "ID of the record read" }),
       title: Schema.NonEmptyString.annotations({ description: "The record's title" }),
     }),
   },
   async ({ kernel, sessionId, siteOrigin, siteDomain, input, errors }) => {
     if (siteOrigin === undefined)
       throw new errors.OperationFailure("No site origin for a live run", { dispatch: "not_sent" });
-    const target = new URL(`/records/${input.recordId}`, siteOrigin);
+    const target = new URL(`/records/${input.record_id}`, siteOrigin);
     const answer = await kernel.browsers.playwright.execute(sessionId, {
       timeout_sec: 90,
       code: `
@@ -40,7 +43,7 @@ export const detailNavigation = defineOperation(
         const siteDomain = ${JSON.stringify(siteDomain ?? null)};
         const onSite = (url) => siteDomain === null ? url.origin === ${JSON.stringify(siteOrigin)}
           : url.protocol === "https:" && (url.hostname === siteDomain || url.hostname.endsWith("." + siteDomain));
-        const recordId = ${JSON.stringify(input.recordId)};
+        const recordId = ${JSON.stringify(input.record_id)};
         const detail = page.getByRole("region", { name: "Record details", exact: true });
         const interstitial = page.getByRole("region", { name: "Continue to record", exact: true });
         const proceed = interstitial.getByRole("button", { name: "Continue", exact: true });
@@ -92,7 +95,7 @@ export const detailNavigation = defineOperation(
       throw new errors.OperationFailure(String(answer.error), { stderr: answer.stderr });
     const result = Schema.decodeUnknownSync(Detail)(answer.result);
     if ("failure" in result) throw new errors.OperationFailure(result.failure);
-    return { recordId: input.recordId, title: result.title };
+    return { record_id: input.record_id, title: result.title };
   },
 );
 

package/dist/typescript/authoring/examples/parser.d.ts

@@ -5,7 +5,7 @@ declare const _default: import("../../src/runtime/kernel-operation.js").KernelOp
 }, {
     readonly invoices: readonly {
         readonly id: string;
-        readonly totalMinor: number;
+        readonly total_minor: number;
         readonly currency: "USD";
     }[];
     readonly complete: boolean;
@@ -14,7 +14,7 @@ declare const _default: import("../../src/runtime/kernel-operation.js").KernelOp
     readonly invoices: readonly {
         readonly currency: "USD";
         readonly id: string;
-        readonly totalMinor: number;
+        readonly total_minor: number;
     }[];
 }>;
 export default _default;

package/dist/typescript/authoring/examples/parser.js

@@ -2,7 +2,7 @@ import { Schema } from "effect";
 import { defineOperation } from "../../src/browser/index.js";
 const Invoice = Schema.Struct({
     id: Schema.NonEmptyString.annotations({ description: "The site's invoice ID" }),
-    totalMinor: Schema.Int.annotations({ description: "Invoice total in cents" }),
+    total_minor: Schema.Int.annotations({ description: "Invoice total in minor units (cents)" }),
     currency: Schema.Literal("USD").annotations({ description: "Currency of the total" }),
 });
 const Body = Schema.Struct({

package/dist/typescript/authoring/examples/parser.ts

@@ -3,7 +3,7 @@ import { defineOperation } from "../../src/browser/index.js";
 
 const Invoice = Schema.Struct({
   id: Schema.NonEmptyString.annotations({ description: "The site's invoice ID" }),
-  totalMinor: Schema.Int.annotations({ description: "Invoice total in cents" }),
+  total_minor: Schema.Int.annotations({ description: "Invoice total in minor units (cents)" }),
   currency: Schema.Literal("USD").annotations({ description: "Currency of the total" }),
 });
 const Body = Schema.Struct({

package/dist/typescript/authoring/examples/write-session.d.ts

@@ -2,48 +2,48 @@ import { Schema } from "effect";
 export declare const OrderInput: Schema.Struct<{
     item: Schema.refine<string, typeof Schema.String>;
     quantity: Schema.refine<number, typeof Schema.Int>;
-    giftWrap: Schema.SchemaClass<boolean, boolean, never>;
+    gift_wrap: Schema.SchemaClass<boolean, boolean, never>;
 }>;
 /** Act step 1: fills the checkout on the site origin page and stops before the commit. */
 export declare const fillStep: import("../../src/runtime/kernel-operation.js").KernelOperation<{
     readonly item: string;
     readonly quantity: number;
-    readonly giftWrap: boolean;
+    readonly gift_wrap: boolean;
 }, {
-    readonly giftWrap: boolean;
+    readonly gift_wrap: boolean;
     readonly item: string;
     readonly quantity: number;
 }, {
-    readonly reviewShown: boolean;
+    readonly review_shown: boolean;
 }, {
-    readonly reviewShown: boolean;
+    readonly review_shown: boolean;
 }>;
 /** Act step 2: continues on the page step 1 left, commits once and reads the confirmation. */
 export declare const placeStep: import("../../src/runtime/kernel-operation.js").KernelOperation<{
     readonly item: string;
     readonly quantity: number;
-    readonly giftWrap: boolean;
+    readonly gift_wrap: boolean;
 }, {
-    readonly giftWrap: boolean;
+    readonly gift_wrap: boolean;
     readonly item: string;
     readonly quantity: number;
 }, {
-    readonly orderNumber: string;
+    readonly order_number: string;
 }, {
-    readonly orderNumber: string;
+    readonly order_number: string;
 }>;
 /** The composed script, published without another run: the whole flow from the site origin page. */
 declare const _default: import("../../src/runtime/kernel-operation.js").KernelOperation<{
     readonly item: string;
     readonly quantity: number;
-    readonly giftWrap: boolean;
+    readonly gift_wrap: boolean;
 }, {
-    readonly giftWrap: boolean;
+    readonly gift_wrap: boolean;
     readonly item: string;
     readonly quantity: number;
 }, {
-    readonly orderNumber: string;
+    readonly order_number: string;
 }, {
-    readonly orderNumber: string;
+    readonly order_number: string;
 }>;
 export default _default;

package/dist/typescript/authoring/examples/write-session.js

@@ -11,15 +11,15 @@ export const OrderInput = Schema.Struct({
     quantity: Schema.Int.pipe(Schema.between(1, 99)).annotations({
         description: "How many to order, 1 to 99",
     }),
-    giftWrap: Schema.Boolean.annotations({ description: "Whether to add gift wrap" }),
+    gift_wrap: Schema.Boolean.annotations({ description: "Whether to add gift wrap" }),
 });
 const Placed = Schema.Struct({
-    orderNumber: Schema.NonEmptyString.annotations({
+    order_number: Schema.NonEmptyString.annotations({
         description: "Order number from the confirmation",
     }),
 });
-const Filled = Schema.Union(Schema.Struct({ reviewShown: Schema.Literal(true) }), Schema.Struct({ failure: Schema.Literal("checkout_changed") }));
-const Confirmed = Schema.Union(Schema.Struct({ orderNumber: Schema.NonEmptyString }), Schema.Struct({ failure: Schema.Literal("review_missing", "not_confirmed") }));
+const Filled = Schema.Union(Schema.Struct({ review_shown: Schema.Literal(true) }), Schema.Struct({ failure: Schema.Literal("checkout_changed") }));
+const Confirmed = Schema.Union(Schema.Struct({ order_number: Schema.NonEmptyString }), Schema.Struct({ failure: Schema.Literal("review_missing", "not_confirmed") }));
 // The act steps and the composed script share these calls, so the published script repeats
 // exactly what the session did.
 /** From the site origin page: open the checkout, fill it from the input and stop at the review step. */
@@ -36,10 +36,10 @@ const fillCheckout = async ({ kernel, sessionId, siteOrigin, input, errors }) =>
       if ((await form.count()) !== 1) return { failure: "checkout_changed" };
       await form.getByLabel("Item", { exact: true }).fill(input.item, { timeout: 5000 });
       await form.getByLabel("Quantity", { exact: true }).fill(String(input.quantity), { timeout: 5000 });
-      await form.getByLabel("Gift wrap", { exact: true }).setChecked(input.giftWrap, { timeout: 5000 });
+      await form.getByLabel("Gift wrap", { exact: true }).setChecked(input.gift_wrap, { timeout: 5000 });
       await form.getByRole("button", { name: "Continue", exact: true }).click({ timeout: 5000 });
       await page.getByRole("button", { name: "Place order", exact: true }).waitFor({ timeout: 10000 });
-      return { reviewShown: true };
+      return { review_shown: true };
     `,
     });
     if (!answer.success)
@@ -63,7 +63,7 @@ const placeAndConfirm = async ({ kernel, sessionId, errors, verified, enteringCo
       const confirmation = page.getByRole("status", { name: "Order confirmation", exact: true });
       try { await confirmation.waitFor({ timeout: 15000 }); } catch { return { failure: "not_confirmed" }; }
       const number = /^Order (ORD-[0-9]+)/.exec(await confirmation.innerText())?.[1];
-      return number === undefined ? { failure: "not_confirmed" } : { orderNumber: number };
+      return number === undefined ? { failure: "not_confirmed" } : { order_number: number };
     `,
     });
     // A failure after the click leaves the write uncertain. Nothing here resubmits it.
@@ -83,11 +83,11 @@ export const fillStep = defineOperation({
     name: "fill_checkout",
     input: OrderInput,
     output: Schema.Struct({
-        reviewShown: Schema.Boolean.annotations({ description: "True once the review step shows" }),
+        review_shown: Schema.Boolean.annotations({ description: "True once the review step shows" }),
     }),
 }, async (context) => {
     await fillCheckout(context);
-    return { reviewShown: true };
+    return { review_shown: true };
 });
 /** Act step 2: continues on the page step 1 left, commits once and reads the confirmation. */
 export const placeStep = defineOperation({ name: "place_order", input: OrderInput, output: Placed }, placeAndConfirm);

package/dist/typescript/authoring/examples/write-session.ts

@@ -13,20 +13,20 @@ export const OrderInput = Schema.Struct({
   quantity: Schema.Int.pipe(Schema.between(1, 99)).annotations({
     description: "How many to order, 1 to 99",
   }),
-  giftWrap: Schema.Boolean.annotations({ description: "Whether to add gift wrap" }),
+  gift_wrap: Schema.Boolean.annotations({ description: "Whether to add gift wrap" }),
 });
 type OrderInput = typeof OrderInput.Type;
 const Placed = Schema.Struct({
-  orderNumber: Schema.NonEmptyString.annotations({
+  order_number: Schema.NonEmptyString.annotations({
     description: "Order number from the confirmation",
   }),
 });
 const Filled = Schema.Union(
-  Schema.Struct({ reviewShown: Schema.Literal(true) }),
+  Schema.Struct({ review_shown: Schema.Literal(true) }),
   Schema.Struct({ failure: Schema.Literal("checkout_changed") }),
 );
 const Confirmed = Schema.Union(
-  Schema.Struct({ orderNumber: Schema.NonEmptyString }),
+  Schema.Struct({ order_number: Schema.NonEmptyString }),
   Schema.Struct({ failure: Schema.Literal("review_missing", "not_confirmed") }),
 );
 type Context = KernelOperationContext<OrderInput>;
@@ -48,10 +48,10 @@ const fillCheckout = async ({ kernel, sessionId, siteOrigin, input, errors }: Co
       if ((await form.count()) !== 1) return { failure: "checkout_changed" };
       await form.getByLabel("Item", { exact: true }).fill(input.item, { timeout: 5000 });
       await form.getByLabel("Quantity", { exact: true }).fill(String(input.quantity), { timeout: 5000 });
-      await form.getByLabel("Gift wrap", { exact: true }).setChecked(input.giftWrap, { timeout: 5000 });
+      await form.getByLabel("Gift wrap", { exact: true }).setChecked(input.gift_wrap, { timeout: 5000 });
       await form.getByRole("button", { name: "Continue", exact: true }).click({ timeout: 5000 });
       await page.getByRole("button", { name: "Place order", exact: true }).waitFor({ timeout: 10000 });
-      return { reviewShown: true };
+      return { review_shown: true };
     `,
   });
   if (!answer.success)
@@ -82,7 +82,7 @@ const placeAndConfirm = async ({
       const confirmation = page.getByRole("status", { name: "Order confirmation", exact: true });
       try { await confirmation.waitFor({ timeout: 15000 }); } catch { return { failure: "not_confirmed" }; }
       const number = /^Order (ORD-[0-9]+)/.exec(await confirmation.innerText())?.[1];
-      return number === undefined ? { failure: "not_confirmed" } : { orderNumber: number };
+      return number === undefined ? { failure: "not_confirmed" } : { order_number: number };
     `,
   });
   // A failure after the click leaves the write uncertain. Nothing here resubmits it.
@@ -104,12 +104,12 @@ export const fillStep = defineOperation(
     name: "fill_checkout",
     input: OrderInput,
     output: Schema.Struct({
-      reviewShown: Schema.Boolean.annotations({ description: "True once the review step shows" }),
+      review_shown: Schema.Boolean.annotations({ description: "True once the review step shows" }),
     }),
   },
   async (context) => {
     await fillCheckout(context);
-    return { reviewShown: true };
+    return { review_shown: true };
   },
 );
 

package/dist/typescript/src/guardian/upstream-policy.d.ts

@@ -10,7 +10,8 @@ export declare class UpstreamPolicySlotInvalid extends UpstreamPolicySlotInvalid
 /**
  * Puts Pomerado's policy in the upstream policy's one slot. An adapter calls it when it is built,
  * so a policy file without the slot stops startup instead of Guardian reviewing without
- * Pomerado's policy.
+ * Pomerado's policy. A leading HTML comment is dropped first, so the file's licence notice is
+ * neither sent to the model nor counted as a slot.
  */
 export declare const withTenantPolicy: (upstreamPolicy: string, tenantPolicy: string) => string;
 export {};