o 'u`jÅ2ã@s*dZddlmZddlZddlmZmZddlmZe  d¡Z e  d¡Z e  d¡Z e  d¡Z hd £Zhd £Zhd £Zhd £Ze  d ¡ZdZedddGdd„dƒƒZedddGdd„dƒƒZedddGdd„dƒƒZedddGdd„dƒƒZedddGdd„dƒƒZedddGdd„dƒƒZdS)z-Typed contracts for platform-compatible apps.é)Ú annotationsN)Ú dataclassÚfield)ÚAnyz^[a-z][a-z0-9_]{1,63}$z^[a-z][a-z0-9_.]{1,127}$zy^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-[0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*)?(?:\+[0-9A-Za-z-]+(?:\.[0-9A-Za-z-]+)*)?$>ÚpublicÚbusinessÚinternalÚ restrictedÚ confidential>ÚreadÚ calculateÚwrite_reversibleÚwrite_irreversible>ÚlowÚhighÚmediumÚcritical>ÚneverÚalwaysÚpolicyz^[a-z][a-z0-9_.:-]{1,127}$z1.0T)ÚfrozenÚslotsc@sBeZdZUded<ded<dZded<dZded<d Zded <d S) ÚCredentialFieldÚstrÚnameÚlabelÚsecretÚkindTÚboolÚrequiredÚÚ help_textN)Ú__name__Ú __module__Ú __qualname__Ú__annotations__rrr!©r&r&úplatform/apps/contracts.pyrs   rc@s–eZdZUdZdZded<dZded<dZded<d Zd ed <d Z d ed <d Z d ed <dZ ded<dZ ded<dZ ded<d Zd ed<d Zd ed<dS)ÚAgentCapabilityContractzGOptional semantic metadata used to expose one capability as an AI tool.FrÚexposedr rÚtitleÚsummaryr&útuple[str, ...]ÚdomainsÚuse_whenÚdo_not_use_whenr Ú risk_categoryrÚ risk_levelrÚ confirmationÚrequired_permissionsÚ allowed_rolesN)r"r#r$Ú__doc__r)r%r*r+r-r.r/r0r1r2r3r4r&r&r&r'r(#s           r(c@s¢eZdZUded<ded<eedZded<eedZded<dZd ed <d Z d ed <dZ d ed<dZ ded<dZ ded<dZ d ed<d Zd ed<dZded<dS)ÚActionContractrÚ capabilityÚ description©Údefault_factoryúdict[str, Any]Ú input_schemaÚ output_schemar&r,Úrequired_credentialsFrÚ side_effectsTÚ idempotentéÚintÚtimeout_secondsrÚdata_classificationÚerrorsÚidempotency_key_requiredNzAgentCapabilityContract | NoneÚagent)r"r#r$r%rÚdictr<r=r>r?r@rCrDrErFrGr&r&r&r'r64s        r6c@s4eZdZUded<eedZded<dZded<dS) Ú EventContractrrr9r;Úschemar r8N)r"r#r$r%rrHrJr8r&r&r&r'rIDs rIc@s–eZdZUdZded<ded<ded<ded<ded<ded <d Zded <d Zded <dZded<dZded<dZ ded<dZ ded<dZ ded<dS)ÚWordPressPackageContractzCOptional WordPress-side extension distributed for one platform app.rÚ package_idÚversionÚsource_directoryÚ entrypointÚ plugin_filer,Ú capabilitiesz0.2.0Úminimum_bridge_versionz6.0Úminimum_wordpress_versionz8.0Úminimum_php_versionNú str | NoneÚ artifact_nameÚsha256Ú signatureÚEd25519Úsignature_algorithm) r"r#r$r5r%rRrSrTrVrWrXrZr&r&r&r'rKKs       rKc@sªeZdZUded<ded<ded<eZded<dZded<eedZ d ed <d Z d ed <d Z ded<d Z ded<d Z ded<dZded<d"dd„Zd#dd„Zd$d d!„ZdS)%Ú AppManifestrÚapp_idÚ display_nameÚ app_versionÚcontract_versionr r8r9zdict[str, ActionContract]Úactionsr&ztuple[CredentialField, ...]Ú credentialsr,Úoutbound_capabilitiesztuple[EventContract, ...]Ú publishesÚ subscribesNzWordPressPackageContract | NoneÚwordpress_packageÚreturnú list[str]cCs6g}t |j¡s | d¡|jtkr| dt›¡|j ¡r$|j ¡s)| d¡t  |j ¡s4| d¡t ƒ}|j D]%}t |j ¡sK| d|j ›¡|j |vrY| d|j ›¡| |j ¡q:t ƒ}|j ¡D]ì\}}t |¡sz| d|›¡| d¡sˆ| d |›d ¡t |j¡s—| d |j›¡|j|vr¥| d |j›¡| |j¡t |jƒ|}|rÁ| d |›d t|ƒ›¡d|jkrÌdksÖn| d |›d¡|j ¡sä| d |›d¡|jrø|j d¡dkrø| d |›d¡|j d¡dkr | d |›d¡|j d¡s| d |›d¡|jtvr,| d |›d|j›¡t ƒ}|jD])} t | ¡sE| d |›d| ›¡| |vrU| d |›d| ›¡| | ¡q2|jrq|jsq|j sq| d|›d¡|j!} | rU| j"rU| j# ¡r‡| j$ ¡s| d|›d¡| j%s| d|›d¡| j&t'vr¯| d|›d | j&›¡| j(t)vrÁ| d|›d!| j(›¡| j*t+vrÓ| d|›d"| j*›¡| j&d#vré|jré| d|›d$| j&›¡| j& ,d%¡rý|jsý| d&|›d'¡|jr| j*d(kr| d&|›d)¡| j&d*kr%| j*d+kr%| d,|›d-¡| j-D]} t. | ¡s;| d|›d.| ›¡q(| j/D]} t | ¡sS| d|›d/| ›¡q@qh|j0D]"} |  1d0¡\} }}|rrt | ¡rrt |¡sz| d1| ›¡qYt ƒ}|j2D](}t |j ¡s”| d2|j ›¡|j |vr£| d3|j ›¡| |j ¡q‚|j3}|r=t |j4¡s½| d4¡|j5rÉ|j6rÉ|j7sÎ| d5¡|j6 8d6¡ 9d6¡d7›d6|j7›}|j:|krê| d8¡t  |j5¡sö| d9¡t |j;ƒ|}|r | d:t|ƒ›¡|j<|j=|j>f}t?|ƒr!t@|ƒs!| d;¡|j=r2tA d<|j=¡s2| d=¡|jBd>kr=| d?¡d@|vrH| dA¡ntCdBdC„|j D¡Dƒƒ}|js\|jra| dD¡|j rqdE|vrq| dF¡|S|j r™tCdGdC„|j D¡Dƒƒ}t |j d¡pŠdHƒ}dIdJh E|¡s™| dK¡|S)LNz;app_id must use lowercase letters, numbers, and underscoreszcontract_version must be z)display_name and description are requiredz(app_version must use semantic versioningzinvalid credential name: zduplicate credential: zinvalid action name: Ú_v1zaction z2 must include its contract suffix, for example _v1zinvalid capability: zduplicate capability: z! references unknown credentials: éi,z* timeout must be between 1 and 300 secondsz description is requiredÚtypeÚobjectz% input_schema must describe an objectz& output_schema must describe an objectrz+ output_schema must declare required fieldsz" has invalid data classification: z has invalid error code: z has duplicate error code: znon-idempotent action z must require an idempotency keyz agent tool z requires title and summaryz$ requires at least one use_when rulez has invalid risk category: z has invalid risk level: z" has invalid confirmation policy: >r r z" cannot classify a side effect as Úwrite_zagent write tool z must declare side_effectsrz cannot use confirmation=neverrrzirreversible agent tool z! must always require confirmationz" has invalid required permission: z has invalid allowed role: ú:z(invalid outbound capability permission: zinvalid event name: zduplicate event: zWordPress package_id is invalidzHWordPress package version, source_directory, and entrypoint are requiredú/éÿÿÿÿzEWordPress plugin_file must match the package directory and entrypointz6WordPress package version must use semantic versioningz3WordPress package references unknown capabilities: zOWordPress package release metadata must include artifact, sha256, and signaturez [0-9a-f]{64}zAWordPress package sha256 must contain 64 lowercase hex charactersrYz5WordPress package signature algorithm must be Ed25519úplatform.healthz&platform.health capability is requiredcsó|] }|jdkr|VqdS)rpN©r7©Ú.0Úcontractr&r&r'Ú ðó€ ÿþz'AppManifest.validate..z?platform.health cannot require credentials or have side effectsúplatform.credentials.testz7apps with credentials require platform.credentials.testcsrq)rxNrrrsr&r&r'rvùrwr&Ú connectedÚproviderz@platform.credentials.test output requires connected and provider)FÚ IDENTIFIERÚ fullmatchr\Úappendr_ÚCONTRACT_VERSIONr]Ústripr8ÚSEMVERr^ÚsetrarÚaddr`ÚitemsÚendswithÚ CAPABILITYr7r>ÚsortedrCr<Úgetr=rDÚDATA_CLASSIFICATIONSrEÚ ERROR_CODEr?r@rFrGr)r*r+r.r0ÚAGENT_RISK_CATEGORIESr1ÚAGENT_RISK_LEVELSr2ÚAGENT_CONFIRMATION_POLICIESÚ startswithr3Ú PERMISSIONr4rbÚ partitionrcrerLrMrNrOÚrstripÚsplitrPrQrVrWrXÚanyÚallÚrerZÚnextÚvaluesÚissubset)ÚselfrEÚcredential_namesÚ credentialrQÚactionruÚmissingÚaction_error_codesÚ error_coderGÚ permissionÚroleÚtargetÚ separatorr7Ú event_namesÚeventÚpackageÚexpected_plugin_fileÚunknown_capabilitiesÚrelease_fieldsÚ health_actionÚ test_actionÚrequired_outputr&r&r'Úvalidatels0                ÿÿ    ÿ ÿ  ÿÿ ÿ  ÿ€  € €    " ÿ  ÿ      ÿ   öÿÿzAppManifest.validater7rUcst‡fdd„|j ¡DƒdƒS)Nc3s"|] \}}|jˆkr|VqdS)Nrr)rtr›rurrr&r'rvs€ z4AppManifest.action_for_capability..)r•r`rƒ)r˜r7r&rrr'Úaction_for_capabilitysþz!AppManifest.action_for_capabilityÚ target_apprcCs|›d|›|jvS)Nrm)rb)r˜r®r7r&r&r'Ú allows_call szAppManifest.allows_call)rfrg)r7rrfrU)r®rr7rrfr)r"r#r$r%r~r_r8rrHr`rarbrcrdrer¬r­r¯r&r&r&r'r[^s          r[)r5Ú __future__rr”Ú dataclassesrrÚtypingrÚcompiler{r…r€r‰rˆrŠr‹rŒrŽr~rr(r6rIrKr[r&r&r&r'Ús:    ÿ