Module params 

Rules over a step’s with: values that hold in every build.

These sit beside ActionType::required_with_fields and ActionType::reads_contract: what an action requires of its block, in one place both the resolver and the runtime can read. Keeping them here lets an editor report them, since the language server links the model and the resolver but no backend.

Only rules that travel with the document belong here. RSA-9999 is not a key algorithm on any machine, so rejecting it is portable. Whether this binary can generate an ML-DSA key is a property of the build doing the checking, and that question is answered by the action handler instead, at the point where a backend exists to ask.

Structs

EntryShape

What an enter_value or enter_secret step says about the value it asks for, as the with: fields spell it.

ParamError

A with: value an action cannot accept.

Enums

FormatSpec

format: as a step writes it: the name of a Format, or a pattern.

Functions

check

Check the literal part of a step’s with: block.