@almadar/core 10.129.0 → 11.0.1

package/dist/mock/index.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../../src/mock/identityOwners.ts"],"names":[],"mappings":";;;;AAyBA,SAAS,eAAe,MAAA,EAAwC;AAC9D,EAAA,OAAA,CAAQ,MAAA,CAAO,QAAA,IAAY,EAAC,EAAG,QAAQ,qBAAqB,CAAA;AAC9D;AASA,SAAS,yBACP,QAAA,EACiD;AACjD,EAAA,MAAM,MAAuD,EAAC;AAC9D,EAAA,KAAA,MAAW,WAAW,QAAA,EAAU;AAC9B,IAAA,MAAM,MAAM,OAAA,CAAQ,MAAA;AACpB,IAAA,IAAI,OAAO,QAAQ,QAAA,IAAY,GAAA,KAAQ,QAAQ,QAAA,IAAY,GAAA,IAAQ,GAAA,CAAsB,QAAA,KAAa,IAAA,EAAM;AAC1G,MAAA,GAAA,CAAI,KAAK,EAAE,GAAA,EAAK,GAAA,EAAsB,OAAA,EAAS,MAAM,CAAA;AAAA,IACvD;AAAA,EACF;AACA,EAAA,KAAA,MAAW,WAAW,QAAA,EAAU;AAC9B,IAAA,KAAA,MAAW,GAAA,IAAO,OAAA,CAAQ,iBAAA,IAAqB,EAAC,EAAG;AACjD,MAAA,IAAI,OAAO,QAAQ,QAAA,IAAY,GAAA,KAAQ,QAAQ,QAAA,IAAY,GAAA,IAAQ,GAAA,CAAsB,QAAA,KAAa,IAAA,EAAM;AAC1G,QAAA,GAAA,CAAI,KAAK,EAAE,GAAA,EAAK,GAAA,EAAsB,OAAA,EAAS,OAAO,CAAA;AAAA,MACxD;AAAA,IACF;AAAA,EACF;AACA,EAAA,OAAO,GAAA;AACT;AAgBO,SAAS,mBAAmB,QAAA,EAAyD;AAC1F,EAAA,MAAM,MAAA,GAAS,yBAAyB,QAAQ,CAAA;AAChD,EAAA,MAAM,aAAa,MAAA,CAAO,IAAA,CAAK,CAAC,CAAA,KAAM,EAAE,OAAO,CAAA;AAC/C,EAAA,OAAO,MAAA,CAAO,MAAA,CAAO,CAAC,CAAA,KAAM,CAAA,CAAE,OAAA,IAAW,CAAC,UAAU,CAAA,CAAE,GAAA,CAAI,CAAC,CAAA,KAAM,EAAE,GAAG,CAAA;AACxE;AAQO,SAAS,mBAAmB,MAAA,EAA2C;AAC5E,EAAA,OAAO,mBAAmB,MAAA,CAAO,QAAA,IAAY,EAAE,CAAA,CAAE,CAAC,CAAA,EAAG,IAAA;AACvD;AAcO,SAAS,oBAAoB,MAAA,EAAiC;AACnE,EAAA,MAAM,MAAgB,EAAC;AACvB,EAAA,KAAA,MAAW,EAAE,KAAI,IAAK,wBAAA,CAAyB,OAAO,QAAA,IAAY,EAAE,CAAA,EAAG;AACrE,IAAA,IAAI,CAAC,IAAI,QAAA,CAAS,GAAA,CAAI,IAAI,CAAA,EAAG,GAAA,CAAI,IAAA,CAAK,GAAA,CAAI,IAAI,CAAA;AAAA,EAChD;AACA,EAAA,OAAO,GAAA;AACT;AAUO,SAAS,gBAAA,CACd,MAAA,EACA,KAAA,GAAQ,MAAA,EACuB;AAC/B,EAAA,MAAM,GAAA,GAAM,OAAO,MAAA,CAAO,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,SAAS,KAAK,CAAA;AACtD,EAAA,IAAI,CAAC,KAAK,OAAO,MAAA;AACjB,EAAA,OAAO,gBAAgB,GAAG,CAAA;AAC5B;AAEA,SAAS,gBAAgB,KAAA,EAAmD;AAC1E,EAAA,IAAI,YAAY,KAAA,IAAS,KAAA,CAAM,UAAU,KAAA,CAAM,MAAA,CAAO,SAAS,CAAA,EAAG;AAChE,IAAA,OAAO,KAAA,CAAM,MAAA;AAAA,EACf;AACA,EAAA,IAAI,OAAA,IAAW,KAAA,IAAS,KAAA,CAAM,KAAA,IAAS,YAAY,KAAA,CAAM,KAAA,IAAS,KAAA,CAAM,KAAA,CAAM,MAAA,IAAU,KAAA,CAAM,KAAA,CAAM,MAAA,CAAO,SAAS,CAAA,EAAG;AACrH,IAAA,OAAO,MAAM,KAAA,CAAM,MAAA;AAAA,EACrB;AACA,EAAA,OAAO,MAAA;AACT;AAWA,SAAS,YAAA,CAAa,GAAU,OAAA,EAAqC;AACnE,EAAA,IAAI,OAAO,CAAA,KAAM,QAAA,IAAY,CAAA,CAAE,WAAW,CAAA,EAAG,OAAO,CAAA,CAAA,CAAG,CAAA,EAAG,OAAO,CAAA,CAAE,KAAA,CAAM,OAAA,CAAQ,SAAS,CAAC,CAAA;AAC3F,EAAA,IAAI,MAAM,OAAA,CAAQ,CAAC,KAAK,CAAA,CAAE,MAAA,KAAW,KAAK,CAAA,CAAE,CAAC,MAAM,YAAA,IAAgB,CAAA,CAAE,CAAC,CAAA,KAAM,OAAA,IAAW,OAAO,CAAA,CAAE,CAAC,MAAM,QAAA,EAAU;AAC/G,IAAA,OAAO,EAAE,CAAC,CAAA;AAAA,EACZ;AACA,EAAA,OAAO,MAAA;AACT;AAIA,SAAS,UAAA,CAAW,CAAA,EAAU,OAAA,EAAiB,KAAA,EAAwB;AACrE,EAAA,OAAO,YAAA,CAAa,CAAA,EAAG,OAAO,CAAA,KAAM,KAAA;AACtC;AAUA,IAAM,YAAA,GAAkC,CAAC,GAAA,EAAK,IAAI,CAAA;AAgB3C,SAAS,sBAAA,CAAuB,IAAA,EAAa,GAAA,GAAgB,EAAC,EAAa;AAChF,EAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,IAAI,CAAA,EAAG;AACvB,IAAA,IAAI,IAAA,CAAK,WAAW,CAAA,EAAG;AACrB,MAAA,MAAM,CAAC,EAAA,EAAI,CAAA,EAAG,CAAC,CAAA,GAAI,IAAA;AACnB,MAAA,IAAI,OAAO,EAAA,KAAO,QAAA,IAAY,YAAA,CAAa,QAAA,CAAS,EAAE,CAAA,EAAG;AACvD,QAAA,MAAM,QAAQ,UAAA,CAAW,CAAA,EAAG,SAAS,IAAI,CAAA,GACrC,aAAa,CAAA,EAAG,SAAS,CAAA,GACzB,UAAA,CAAW,GAAG,OAAA,EAAS,IAAI,IACzB,YAAA,CAAa,CAAA,EAAG,SAAS,CAAA,GACzB,MAAA;AACN,QAAA,IAAI,KAAA,KAAU,UAAa,CAAC,GAAA,CAAI,SAAS,KAAK,CAAA,EAAG,GAAA,CAAI,IAAA,CAAK,KAAK,CAAA;AAAA,MACjE;AAAA,IACF;AACA,IAAA,KAAA,MAAW,IAAA,IAAQ,IAAA,EAAM,sBAAA,CAAuB,IAAA,EAAM,GAAG,CAAA;AAAA,EAC3D;AACA,EAAA,OAAO,GAAA;AACT;AAKA,SAAS,qBAAqB,QAAA,EAAqD;AACjF,EAAA,IAAI,QAAA,KAAa,QAAW,OAAO,KAAA;AACnC,EAAA,OAAO,CAAC,SAAS,IAAA,EAAM,QAAA,CAAS,QAAQ,QAAA,CAAS,MAAA,EAAQ,QAAA,CAAS,MAAM,CAAA,CAAE,IAAA;AAAA,IACxE,CAAC,SAAS,IAAA,KAAS,MAAA,IAAa,uBAAuB,IAAI,CAAA,CAAE,SAAS,IAAI;AAAA,GAC5E;AACF;AAwBO,SAAS,sBAAsB,MAAA,EAAiC;AACrE,EAAA,MAAM,UAAA,GAAa,oBAAoB,MAAM,CAAA;AAC7C,EAAA,IAAI,UAAA,CAAW,MAAA,KAAW,CAAA,EAAG,OAAO,EAAC;AAErC,EAAA,MAAM,MAAgB,EAAC;AACvB,EAAA,MAAM,IAAA,GAAO,eAAe,MAAM,CAAA;AAClC,EAAA,MAAM,oBAAA,uBAA2B,GAAA,EAAsB;AACvD,EAAA,KAAA,MAAW,OAAO,IAAA,EAAM;AACtB,IAAA,KAAA,MAAW,KAAA,IAAS,GAAA,CAAI,MAAA,IAAU,EAAC,EAAG;AAUpC,MAAA,IACE,KAAA,CAAM,IAAA,IACN,KAAA,CAAM,IAAA,KAAS,UAAA,IACf,CAAC,KAAA,CAAM,SAAA,IACP,UAAA,CAAW,QAAA,CAAS,KAAA,CAAM,QAAA,CAAS,MAAM,CAAA,EACzC;AACA,QAAA,GAAA,CAAI,KAAK,CAAA,EAAG,GAAA,CAAI,IAAI,CAAA,CAAA,EAAI,KAAA,CAAM,IAAI,CAAA,CAAE,CAAA;AACpC,QAAA,IAAI,IAAI,UAAA,EAAY;AAClB,UAAA,MAAM,OAAO,oBAAA,CAAqB,GAAA,CAAI,GAAA,CAAI,UAAU,KAAK,EAAC;AAC1D,UAAA,IAAI,CAAC,KAAK,QAAA,CAAS,KAAA,CAAM,IAAI,CAAA,EAAG,IAAA,CAAK,IAAA,CAAK,KAAA,CAAM,IAAI,CAAA;AACpD,UAAA,oBAAA,CAAqB,GAAA,CAAI,GAAA,CAAI,UAAA,EAAY,IAAI,CAAA;AAAA,QAC/C;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAIA,EAAA,KAAA,MAAW,QAAQ,UAAA,EAAY;AAC7B,IAAA,IAAI,oBAAA,CAAqB,oBAAA,CAAqB,MAAA,EAAQ,IAAI,CAAC,CAAA,EAAG;AAC5D,MAAA,MAAM,GAAA,GAAM,GAAG,IAAI,CAAA,GAAA,CAAA;AACnB,MAAA,IAAI,CAAC,GAAA,CAAI,QAAA,CAAS,GAAG,CAAA,EAAG,GAAA,CAAI,KAAK,GAAG,CAAA;AAAA,IACtC;AAAA,EACF;AAaA,EAAA,KAAA,MAAW,OAAO,IAAA,EAAM;AACtB,IAAA,MAAM,QAAA,GAAW,oBAAA,CAAqB,MAAA,EAAQ,GAAA,CAAI,IAAI,CAAA;AACtD,IAAA,IAAI,aAAa,MAAA,EAAW;AAC5B,IAAA,KAAA,MAAW,MAAA,IAAU,CAAC,QAAA,CAAS,IAAA,EAAM,SAAS,MAAA,EAAQ,QAAA,CAAS,MAAM,CAAA,EAAG;AACtE,MAAA,IAAI,WAAW,MAAA,EAAW;AAC1B,MAAA,KAAA,MAAW,KAAA,IAAS,sBAAA,CAAuB,MAAM,CAAA,EAAG;AAClD,QAAA,MAAM,GAAA,GAAM,CAAA,EAAG,GAAA,CAAI,IAAI,IAAI,KAAK,CAAA,CAAA;AAChC,QAAA,IAAI,CAAC,GAAA,CAAI,QAAA,CAAS,GAAG,CAAA,EAAG,GAAA,CAAI,KAAK,GAAG,CAAA;AAAA,MACtC;AAAA,IACF;AAAA,EACF;AAQA,EAAA,KAAA,MAAW,OAAO,IAAA,EAAM;AACtB,IAAA,MAAM,OAAO,GAAA,CAAI,UAAA,GAAa,qBAAqB,GAAA,CAAI,GAAA,CAAI,UAAU,CAAA,GAAI,MAAA;AACzE,IAAA,IAAI,CAAC,IAAA,EAAM;AACX,IAAA,KAAA,MAAW,OAAO,IAAA,EAAM;AACtB,MAAA,MAAM,GAAA,GAAM,CAAA,EAAG,GAAA,CAAI,IAAI,IAAI,GAAG,CAAA,CAAA;AAC9B,MAAA,IAAI,GAAA,CAAI,QAAA,CAAS,GAAG,CAAA,EAAG;AACvB,MAAA,IAAA,CAAK,GAAA,CAAI,MAAA,IAAU,EAAC,EAAG,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,IAAA,KAAS,GAAG,CAAA,EAAG,GAAA,CAAI,KAAK,GAAG,CAAA;AAAA,IAClE;AAAA,EACF;AACA,EAAA,OAAO,GAAA;AACT;AAUA,IAAM,eAAkC,CAAC,GAAA,EAAK,MAAM,IAAA,EAAM,KAAA,EAAO,MAAM,KAAK,CAAA;AAM5E,SAAS,iBAAiB,CAAA,EAAmB;AAC3C,EAAA,OAAO,OAAO,CAAA,KAAM,QAAA,IAAY,YAAA,CAAa,CAAA,EAAG,OAAO,CAAA,KAAM,MAAA;AAC/D;AAeA,SAAS,uBAAuB,KAAA,EAA+C;AAC7E,EAAA,MAAM,UAAA,GAAa,KAAA,CAAM,CAAC,CAAA,KAAM,MAAA;AAChC,EAAA,MAAM,OAAA,GAAU,UAAA,GAAa,KAAA,CAAM,KAAA,CAAM,CAAC,CAAA,GAAI,KAAA;AAC9C,EAAA,OAAO,OAAA,CAAQ,KAAA,CAAM,CAAC,CAAA,KAAmB,OAAO,CAAA,KAAM,QAAQ,CAAA,GAAI,CAAC,GAAG,OAAO,CAAA,GAAI,MAAA;AACnF;AAgCO,SAAS,wBAAA,CACd,IAAA,EACA,GAAA,mBAAgC,IAAI,KAAI,EACd;AAC1B,EAAA,IAAI,KAAA,CAAM,OAAA,CAAQ,IAAI,CAAA,EAAG;AACvB,IAAA,MAAM,CAAC,EAAA,EAAI,GAAG,IAAI,CAAA,GAAI,IAAA;AACtB,IAAA,IAAI,OAAO,EAAA,KAAO,QAAA,IAAY,IAAA,CAAK,MAAA,IAAU,CAAA,KAAM,YAAA,CAAa,QAAA,CAAS,EAAE,CAAA,IAAK,EAAA,KAAO,gBAAA,CAAA,EAAmB;AACxG,MAAA,MAAM,aAAa,EAAA,KAAO,gBAAA;AAC1B,MAAA,IAAI,SAAA;AACJ,MAAA,IAAI,WAAA;AACJ,MAAA,IAAI,UAAA,EAAY;AACd,QAAA,IAAI,gBAAA,CAAiB,IAAA,CAAK,CAAC,CAAC,CAAA,EAAG;AAC7B,UAAA,SAAA,GAAY,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,CAAC,CAAA;AAC3B,UAAA,WAAA,GAAc,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,CAAC,CAAA;AAAA,QAC/B,CAAA,MAAO;AACL,UAAA,SAAA,GAAY,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,CAAC,CAAA;AAC3B,UAAA,WAAA,GAAc,IAAA,CAAK,KAAA,CAAM,CAAA,EAAG,CAAC,CAAA;AAAA,QAC/B;AAAA,MACF,CAAA,MAAO;AACL,QAAA,SAAA,GAAY,IAAA;AACZ,QAAA,WAAA,GAAc,IAAA;AAAA,MAChB;AACA,MAAA,MAAM,KAAA,GAAQ,SAAA,CAAU,GAAA,CAAI,CAAC,QAAQ,YAAA,CAAa,GAAA,EAAK,OAAO,CAAC,CAAA,CAAE,IAAA,CAAK,CAAC,CAAA,KAAmB,MAAM,MAAS,CAAA;AACzG,MAAA,IAAI,UAAU,MAAA,EAAW;AACvB,QAAA,MAAM,oBAAA,GAAuB,YAAY,CAAC,CAAA;AAC1C,QAAA,MAAM,QAAA,GACJ,UAAA,IAAc,KAAA,CAAM,OAAA,CAAQ,oBAAoB,IAC3C,sBAAA,CAAuB,oBAAoB,CAAA,IAAK,EAAC,GAClD,WAAA;AACN,QAAA,KAAA,MAAW,WAAW,QAAA,EAAU;AAC9B,UAAA,IAAI,OAAO,OAAA,KAAY,QAAA,IAAY,CAAC,OAAA,CAAQ,UAAA,CAAW,GAAG,CAAA,EAAG;AAC3D,YAAA,MAAM,MAAM,GAAA,CAAI,GAAA,CAAI,KAAK,CAAA,wBAAS,GAAA,EAAY;AAC9C,YAAA,GAAA,CAAI,IAAI,OAAO,CAAA;AACf,YAAA,GAAA,CAAI,GAAA,CAAI,OAAO,GAAG,CAAA;AAAA,UACpB;AAAA,QACF;AAAA,MACF;AAAA,IACF;AACA,IAAA,KAAA,MAAW,IAAA,IAAQ,IAAA,EAAM,wBAAA,CAAyB,IAAA,EAAM,GAAG,CAAA;AAC3D,IAAA,OAAO,GAAA;AAAA,EACT;AACA,EAAA,IAAI,IAAA,KAAS,IAAA,IAAQ,OAAO,IAAA,KAAS,QAAA,EAAU;AAC7C,IAAA,KAAA,MAAW,SAAS,MAAA,CAAO,MAAA,CAAO,IAAI,CAAA,EAAG,wBAAA,CAAyB,OAAO,GAAG,CAAA;AAAA,EAC9E;AACA,EAAA,OAAO,GAAA;AACT;AAmBO,SAAS,oBAAA,CACd,MAAA,EACA,QAAA,EACA,KAAA,GAAQ,MAAA,EACY;AACpB,EAAA,IAAI,MAAA,KAAW,MAAA,IAAa,MAAA,KAAW,IAAA,EAAM,OAAO,MAAA;AACpD,EAAA,MAAM,KAAA,GAAQ,gBAAA,CAAiB,QAAA,EAAU,KAAK,CAAA;AAC9C,EAAA,IAAI,KAAA,KAAU,QAAW,OAAO,MAAA;AAChC,EAAA,MAAM,QAAA,GAAW,wBAAA,CAAyB,MAAM,CAAA,CAAE,IAAI,KAAK,CAAA;AAC3D,EAAA,IAAI,QAAA,KAAa,QAAW,OAAO,MAAA;AACnC,EAAA,OAAO,MAAM,IAAA,CAAK,CAAC,UAAU,QAAA,CAAS,GAAA,CAAI,KAAK,CAAC,CAAA;AAClD","file":"index.js","sourcesContent":["/**\n * Owner columns derived from a program's `[identity]` entity.\n *\n * The JS mirror of `orbital-core/src/runtime/seed.rs`\n * (`identity_entity_name` / `owner_fields_from_schema`). Both paths must agree:\n * a column is an owner column because the source *declared* it as a relation to\n * the `[identity]` entity (`patientId : Person`), never because its name looks\n * like one — a name-matching guess would silently scope the wrong column.\n *\n * @packageDocumentation\n */\n\nimport type { OrbitalEntity } from '../types/entity.js';\nimport type { EntityField } from '../types/field.js';\nimport type { OrbitalDefinition } from '../types/orbital.js';\nimport type { OrbitalSchema } from '../types/schema.js';\nimport type { SExpr } from '../types/expression.js';\nimport {\n  entityAccessPolicies,\n  orbitalInlineEntities,\n  type EntityAccessPolicies,\n} from '../access/entityAccess.js';\n\n/** Inline entity definitions of every orbital in a schema: each orbital's\n * primary entity plus any auxiliaries. */\nfunction inlineEntities(schema: OrbitalSchema): OrbitalEntity[] {\n  return (schema.orbitals ?? []).flatMap(orbitalInlineEntities);\n}\n\n/**\n * Every `[identity]`-tagged entity, primaries first, paired with whether it is\n * an orbital's PRIMARY entity or an auxiliary copy an import brought along.\n *\n * Compiled-path twin: `identity_entities_tagged` in\n * `orbital-compiler/src/phases/validation/identity/user_identity.rs` (L57-76).\n */\nfunction identityEntitiesTaggedOf(\n  orbitals: readonly OrbitalDefinition[],\n): Array<{ def: OrbitalEntity; primary: boolean }> {\n  const out: Array<{ def: OrbitalEntity; primary: boolean }> = [];\n  for (const orbital of orbitals) {\n    const ref = orbital.entity;\n    if (typeof ref === 'object' && ref !== null && 'fields' in ref && (ref as OrbitalEntity).identity === true) {\n      out.push({ def: ref as OrbitalEntity, primary: true });\n    }\n  }\n  for (const orbital of orbitals) {\n    for (const ref of orbital.auxiliaryEntities ?? []) {\n      if (typeof ref === 'object' && ref !== null && 'fields' in ref && (ref as OrbitalEntity).identity === true) {\n        out.push({ def: ref as OrbitalEntity, primary: false });\n      }\n    }\n  }\n  return out;\n}\n\n/**\n * The `[identity]` entities that decide what `@user` resolves to, primaries\n * first then auxiliaries.\n *\n * A behavior declares its own roster so it runs standalone. Composing it never\n * imports that orbital, but a trait bound to one of its siblings drags the\n * roster in as an auxiliary copy, tag and all — so a PRIMARY roster shadows\n * every imported copy: the composing app decides who `@user` is. With no\n * primary roster the copies still count, which is what lets a thin app that\n * wraps one behavior inherit that behavior's roster.\n *\n * Compiled-path twin: `identity_entities` in\n * `orbital-compiler/src/phases/validation/identity/user_identity.rs` (L94-102).\n */\nexport function identityEntitiesOf(orbitals: readonly OrbitalDefinition[]): OrbitalEntity[] {\n  const tagged = identityEntitiesTaggedOf(orbitals);\n  const hasPrimary = tagged.some((e) => e.primary);\n  return tagged.filter((e) => e.primary || !hasPrimary).map((e) => e.def);\n}\n\n/**\n * The name of the schema's `[identity]` entity, if it declares one.\n *\n * Compiled-path twin: `identity_entities` in\n * `orbital-compiler/src/phases/validation/identity/user_identity.rs`.\n */\nexport function identityEntityName(schema: OrbitalSchema): string | undefined {\n  return identityEntitiesOf(schema.orbitals ?? [])[0]?.name;\n}\n\n/**\n * Every `[identity]`-tagged name, shadowed copies included.\n *\n * Owner-column derivation asks whether a relation targets *a* roster, not *the*\n * one: `Timesheet.employeeId : Employee` is an owner column whether or not\n * `Employee` won the `@user` binding. Dropping the shadowed names here would\n * leave an imported behavior's rows unscoped at runtime while the compiled path\n * treats the very same column as an owner column.\n *\n * Compiled-path twin: `identity_entity_names` in\n * `orbital-compiler/src/phases/validation/identity/user_identity.rs`.\n */\nexport function identityEntityNames(schema: OrbitalSchema): string[] {\n  const out: string[] = [];\n  for (const { def } of identityEntitiesTaggedOf(schema.orbitals ?? [])) {\n    if (!out.includes(def.name)) out.push(def.name);\n  }\n  return out;\n}\n\n/**\n * The declared vocabulary for an identity field, following `items` for the\n * array/map form. `roles : [\"a\" | \"b\"]` keeps the union on the ELEMENT, so a\n * multi-valued role field is read through `items` — one level, not recursive.\n *\n * Compiled-path twin: `vocabulary` in\n * `orbital-compiler/src/phases/validation/identity/user_identity.rs` (L125-134).\n */\nexport function roleVocabularyOf(\n  entity: OrbitalEntity,\n  field = 'role',\n): readonly string[] | undefined {\n  const def = entity.fields.find((f) => f.name === field);\n  if (!def) return undefined;\n  return fieldVocabulary(def);\n}\n\nfunction fieldVocabulary(field: EntityField): readonly string[] | undefined {\n  if ('values' in field && field.values && field.values.length > 0) {\n    return field.values;\n  }\n  if ('items' in field && field.items && 'values' in field.items && field.items.values && field.items.values.length > 0) {\n    return field.items.values;\n  }\n  return undefined;\n}\n\n/**\n * The field name `x` reads off `binding` — either the dotted-path form\n * (`@entity.id`) or the lowered `.lolo` call form (`(object/get @entity id)`\n * → `[\"object/get\", \"@entity\", \"id\"]`, the shape `std-time-tracking`'s\n * `Employee [identity]` actually compiles to; verified against\n * `packages/almadar-behaviors/behaviors/registry/app/organisms/\n * std-time-tracking.orb`). `undefined` when `x` reads a different binding, a\n * different shape entirely, or isn't a field read at all.\n */\nfunction fieldRefName(x: SExpr, binding: string): string | undefined {\n  if (typeof x === 'string' && x.startsWith(`${binding}.`)) return x.slice(binding.length + 1);\n  if (Array.isArray(x) && x.length === 3 && x[0] === 'object/get' && x[1] === binding && typeof x[2] === 'string') {\n    return x[2];\n  }\n  return undefined;\n}\n\n/** `true` when `x` reads field `field` off binding `binding` (either\n *  spelling — see {@link fieldRefName}). */\nfunction isFieldRef(x: SExpr, binding: string, field: string): boolean {\n  return fieldRefName(x, binding) === field;\n}\n\n/**\n * Equality operator spellings a direct-ownership comparison may use. `=` is\n * what `.lolo`-authored policies lower to; `==` stays shape-identical to the\n * Rust twin's generalized reader (`POLICY_EQ_OPS` in\n * `orbital-core/src/runtime/seed.rs`), which also accepts a codegen-derived\n * policy bridged through `OirBinaryOp::Eq`'s `==` spelling\n * (`access_policies.rs::owner_fields`).\n */\nconst OWNER_EQ_OPS: readonly string[] = ['=', '=='];\n\n/**\n * Every column `expr` compares to `@user.id` via direct equality — the\n * general form of \"self-identity\": `@entity.<field> == @user.id` (either\n * operand order, either spelling — see `fieldRefName`) names `field` as an\n * owner column, whether `field` is the row's OWN `id` (distinct from a\n * relation column like `@entity.managerId == @user.id`) or any other\n * declared field (the shape `ORB_S_OWNER_FIELD_NOT_IDENTITY_TYPED` flags as\n * an authoring error when it is neither — codegen still needs to seed it).\n * Recurses through `and`/`or`/`not`/any other combinator —\n * `std-time-tracking`'s `Employee [identity]` declares\n * `@read (or (= @user.role \"approver\") (= (object/get @entity id) @user.id))`,\n * and the self-access arm counts even though it isn't the whole policy.\n * Rust twin: `owner_columns_from_policy` in `orbital-core/src/runtime/seed.rs`.\n */\nexport function ownerColumnsFromPolicy(expr: SExpr, out: string[] = []): string[] {\n  if (Array.isArray(expr)) {\n    if (expr.length === 3) {\n      const [op, a, b] = expr;\n      if (typeof op === 'string' && OWNER_EQ_OPS.includes(op)) {\n        const field = isFieldRef(b, '@user', 'id')\n          ? fieldRefName(a, '@entity')\n          : isFieldRef(a, '@user', 'id')\n            ? fieldRefName(b, '@entity')\n            : undefined;\n        if (field !== undefined && !out.includes(field)) out.push(field);\n      }\n    }\n    for (const item of expr) ownerColumnsFromPolicy(item, out);\n  }\n  return out;\n}\n\n/** `true` when ANY of `policies`' four declared directives self-identifies\n *  the row — the `[identity]` entity's OWN `id` compared directly to\n *  `@user.id` (see {@link ownerColumnsFromPolicy}). */\nfunction policiesSelfIdentify(policies: EntityAccessPolicies | undefined): boolean {\n  if (policies === undefined) return false;\n  return [policies.read, policies.create, policies.update, policies.delete].some(\n    (expr) => expr !== undefined && ownerColumnsFromPolicy(expr).includes('id'),\n  );\n}\n\n/**\n * Owner columns as `Entity.field` pairs — every NON-INTRINSIC relation field\n * pointing at an `[identity]`-tagged entity, shadowed imported rosters\n * included, PLUS `Entity.id` for an `[identity]` entity whose own declared\n * access policy compares its row directly to the viewer (self-identity), PLUS\n * any other column an entity's own declared `@read`/`@update`/`@delete`\n * compares to `@user.id` (see `ownerColumnsFromPolicy`). Empty when the\n * program declares no identity, which keeps every unmigrated app behaving\n * exactly as before.\n *\n * An `intrinsic: true` relation field is excluded even when it targets the\n * identity entity: intrinsic marks framework plumbing the owning trait\n * computes itself (`EntityField.intrinsic` doc, `types/field.ts`), never\n * domain ownership — a generic atom's self-relation (`ModalRecord.seedRow :\n * ModalRecord`, record-detail/modal edit-seed plumbing) gets its relation\n * target rewritten onto whatever entity the trait binds, so a self-identity\n * entity like `std-time-tracking`'s `Employee [identity]` ends up with an\n * `Employee.seedRow : Employee` self-relation that is structurally\n * indistinguishable from a real owner column by type/target alone. Stamping\n * it with the viewer id (as an owner column would be) creates a row that\n * references itself, which trips the entity's own `onDelete: restrict`.\n */\nexport function ownerFieldsFromSchema(schema: OrbitalSchema): string[] {\n  const identities = identityEntityNames(schema);\n  if (identities.length === 0) return [];\n\n  const out: string[] = [];\n  const defs = inlineEntities(schema);\n  const declaredByCollection = new Map<string, string[]>();\n  for (const def of defs) {\n    for (const field of def.fields ?? []) {\n      // Cardinality-one only: an owner column holds ONE viewer id. A\n      // `[Person]` array is a participant list, not ownership. Intrinsic\n      // fields are framework plumbing the owning trait computes itself\n      // (e.g. a record-detail/modal's `seedRow` edit-seed relation) — never\n      // domain ownership, even when the field happens to relate to the\n      // identity entity because a generic atom's self-relation was rewritten\n      // onto the concrete bound entity (`ModalRecord.seedRow : ModalRecord`\n      // → `Employee.seedRow : Employee` once bound). Rust twin:\n      // `owner_fields_from_schema` in `orbital-core/src/runtime/seed.rs`.\n      if (\n        field.name &&\n        field.type === 'relation' &&\n        !field.intrinsic &&\n        identities.includes(field.relation.entity)\n      ) {\n        out.push(`${def.name}.${field.name}`);\n        if (def.collection) {\n          const cols = declaredByCollection.get(def.collection) ?? [];\n          if (!cols.includes(field.name)) cols.push(field.name);\n          declaredByCollection.set(def.collection, cols);\n        }\n      }\n    }\n  }\n\n  // Self-identity: the `[identity]` entity's OWN `id` is the owner column\n  // when its declared access policy compares it directly to `@user.id`.\n  for (const name of identities) {\n    if (policiesSelfIdentify(entityAccessPolicies(schema, name))) {\n      const key = `${name}.id`;\n      if (!out.includes(key)) out.push(key);\n    }\n  }\n\n  // Policy-derived: a column an entity's OWN `@read`/`@update`/`@delete`\n  // compares to `@user.id` is an owner column whether or not it is a\n  // relation-to-identity FIELD — the codegen twin\n  // (`access_policies.rs::owner_fields`, same reader) already finds this\n  // shape (a policy naming a non-relation field), which the type-only scan\n  // above cannot. `@create` is excluded — it compares the row being\n  // written, which says nothing about what a fixture should already own.\n  // Deduped against the type-derived set above (a relation field whose\n  // policy also names it, e.g. `managerId`, is not double-counted). Rust\n  // twin: `owner_fields_from_schema`'s policy-derived arm in\n  // `orbital-core/src/runtime/seed.rs`.\n  for (const def of defs) {\n    const policies = entityAccessPolicies(schema, def.name);\n    if (policies === undefined) continue;\n    for (const policy of [policies.read, policies.update, policies.delete]) {\n      if (policy === undefined) continue;\n      for (const field of ownerColumnsFromPolicy(policy)) {\n        const key = `${def.name}.${field}`;\n        if (!out.includes(key)) out.push(key);\n      }\n    }\n  }\n\n  // Collection mirror of `entityAccessTable`'s policy inheritance: an entity\n  // sharing a collection with a declaring sibling is scoped by that sibling's\n  // @read policy, so its same-named column IS the owner column the policy\n  // compares — an imported atom's entity structurally cannot declare the\n  // relation itself (it does not know the app's identity entity). Still\n  // declaration-grounded, never name-guessing across collections.\n  for (const def of defs) {\n    const cols = def.collection ? declaredByCollection.get(def.collection) : undefined;\n    if (!cols) continue;\n    for (const col of cols) {\n      const key = `${def.name}.${col}`;\n      if (out.includes(key)) continue;\n      if ((def.fields ?? []).some((f) => f.name === col)) out.push(key);\n    }\n  }\n  return out;\n}\n\n/**\n * Equality operators an access-policy comparison may use. Compiled-path twin:\n * `EQUALITY_OPS` in `orbital-compiler/src/phases/validation/identity/user_identity.rs`\n * — shared there with the orbital-import role-literal rewrite\n * (`inline/rewrite.rs` `rewrite_role_literals`), so this JS list and\n * {@link collectUserFieldLiterals} must stay shape-identical to that Rust\n * pair too.\n */\nconst EQUALITY_OPS: readonly string[] = ['=', '==', '!=', '!==', 'eq', 'neq'];\n\n/** `true` when `x` is a direct `@user.<field>` sigil read (either spelling —\n *  see {@link fieldRefName}), regardless of WHICH field. Used to locate the\n *  sigil operand of an `array/includes` node BY CONTENT rather than\n *  position — see {@link collectUserFieldLiterals}'s doc. */\nfunction isUserFieldSigil(x: SExpr): boolean {\n  return typeof x === 'string' && fieldRefName(x, '@user') !== undefined;\n}\n\n/**\n * Is an `array/includes` haystack array a LITERAL role list, and if so,\n * which elements are the members? Twin of Rust\n * `validation::user_identity::literal_haystack_members` (`user_identity.rs`)\n * — the two must stay shape-identical: either a `[\"list\", …]`\n * array-construction call (Rust `mark_literal_list_in_place`'s wrap for a\n * config-array-override value that would otherwise collide with operator\n * dispatch; both `.lolo` spellings `(a b)`/`[a, b]` lower through it) whose\n * TAIL is all-string, or a bare array whose every element (including\n * position 0) is a string literal. Any other shape — a nested call like\n * `[\"object/get\", [\"array/nth\", …], \"allowedRoles\"]`, std-step-flow's\n * per-step dynamic role guard — is not a literal haystack: `undefined`.\n */\nfunction literalHaystackMembers(items: readonly SExpr[]): string[] | undefined {\n  const isListCall = items[0] === 'list';\n  const members = isListCall ? items.slice(1) : items;\n  return members.every((v): v is string => typeof v === 'string') ? [...members] : undefined;\n}\n\n/**\n * Every literal an expression compares against `@user.<field>` (any field),\n * keyed by field name — the collecting counterpart of `orbital-compiler`'s\n * `validation::user_identity::check_comparison` (B4-R4; the two must stay\n * shape-identical, each cites the other): an equality node (`EQUALITY_OPS`)\n * or an `array/includes` node, walked transparently through `and`/`or`/`not`\n * and any other combinator (the Rust check runs on EVERY array node\n * regardless of what wraps it, so this does too).\n *\n * `array/includes` is directional, but the sigil can sit on EITHER side:\n * `(array/includes @user.roles \"ghost\")` checks a literal against a\n * multi-valued field's own vocabulary (field is the haystack, position 0);\n * the Stage-B orbital-import role rewrite (Rust `inline/rewrite.rs`\n * `rewrite_role_literals`, which `check_comparison` mirrors) instead\n * produces `(array/includes [\"owner\",\"project_manager\"] @user.role)` — a\n * literal ARRAY haystack with the sigil as the needle, position 1 (found\n * live: Project Friday's imported `Timesheet.@delete` after `roles {\n * approver: [owner, project_manager] }`). So the sigil is located BY\n * CONTENT, never position: check position 0 first, fall back to position 1.\n * The OTHER side is then flattened to a literal list — a scalar (equality,\n * or an `array/includes` whose haystack is the sigil's own multi-valued\n * field) or, for the role-rewrite shape, every string element of a literal\n * array.\n *\n * A collected literal is a CANDIDATE a viewer might satisfy the expression\n * with, never a proof: a policy that ANDs the field check with an unrelated\n * condition can still reject a viewer carrying it. Callers that need\n * certainty re-check with the real evaluator (`checkMutationAccess` /\n * `evaluate`), the way any other synthesized dispatch is confirmed.\n */\nexport function collectUserFieldLiterals(\n  expr: SExpr,\n  out: Map<string, Set<string>> = new Map(),\n): Map<string, Set<string>> {\n  if (Array.isArray(expr)) {\n    const [op, ...args] = expr;\n    if (typeof op === 'string' && args.length >= 2 && (EQUALITY_OPS.includes(op) || op === 'array/includes')) {\n      const isIncludes = op === 'array/includes';\n      let sigilSide: SExpr[];\n      let literalSide: SExpr[];\n      if (isIncludes) {\n        if (isUserFieldSigil(args[0])) {\n          sigilSide = args.slice(0, 1);\n          literalSide = args.slice(1, 2);\n        } else {\n          sigilSide = args.slice(1, 2);\n          literalSide = args.slice(0, 1);\n        }\n      } else {\n        sigilSide = args;\n        literalSide = args;\n      }\n      const field = sigilSide.map((arg) => fieldRefName(arg, '@user')).find((f): f is string => f !== undefined);\n      if (field !== undefined) {\n        const literalArrayHaystack = literalSide[0];\n        const literals: SExpr[] =\n          isIncludes && Array.isArray(literalArrayHaystack)\n            ? (literalHaystackMembers(literalArrayHaystack) ?? [])\n            : literalSide;\n        for (const literal of literals) {\n          if (typeof literal === 'string' && !literal.startsWith('@')) {\n            const set = out.get(field) ?? new Set<string>();\n            set.add(literal);\n            out.set(field, set);\n          }\n        }\n      }\n    }\n    for (const item of expr) collectUserFieldLiterals(item, out);\n    return out;\n  }\n  if (expr !== null && typeof expr === 'object') {\n    for (const value of Object.values(expr)) collectUserFieldLiterals(value, out);\n  }\n  return out;\n}\n\n/**\n * A `@user.<field>` value that satisfies `policy`, chosen from the identity\n * entity's own declared vocabulary — never a guess: only a literal BOTH\n * (a) compared against `field` in an equality/`array/includes` node\n * somewhere in `policy` (see {@link collectUserFieldLiterals}) AND (b) a\n * declared member of `identity`'s `field` vocabulary (see\n * {@link roleVocabularyOf}) is a candidate. The pick is deterministic — the\n * first vocabulary value, in declaration order, that is also a candidate —\n * so two callers asking about the same policy always agree.\n *\n * `undefined` when `policy` is absent/`null` (no restriction — nothing to\n * satisfy), `field` carries no declared vocabulary on `identity`, or no\n * declared value appears anywhere in the policy. The last case is a genuine\n * finding for the CALLER to report, not a probe defect to paper over: the\n * policy structurally cannot be satisfied by any roster member, so forcing a\n * viewer past it would misreport an unreachable transition as reachable.\n */\nexport function roleSatisfyingPolicy(\n  policy: SExpr | undefined,\n  identity: OrbitalEntity,\n  field = 'role',\n): string | undefined {\n  if (policy === undefined || policy === null) return undefined;\n  const vocab = roleVocabularyOf(identity, field);\n  if (vocab === undefined) return undefined;\n  const accepted = collectUserFieldLiterals(policy).get(field);\n  if (accepted === undefined) return undefined;\n  return vocab.find((value) => accepted.has(value));\n}\n"]}

package/dist/schema-T5RT5s6H.d.ts

@@ -1,282 +0,0 @@
-import { z } from 'zod';
-import { E as EventPayloadField, a as Orbital, b as OsGrants, D as Deployment, L as LazyPage, c as DeclaredTraitConfig, T as Trait } from './orbital-CkFdDS9f.js';
-import { a as ThemeRef, T as ThemeDefinition, D as DomainContext, b as DesignPreferences, c as DesignTokens, C as CustomPatternMap } from './domain-Dz3jP-UM.js';
-import { S as ServiceDefinition, I as IdentityLedger } from './effect-CiEVLsZz.js';
-import { R as RuntimeValue } from './expression-D0Fs0riG.js';
-
-/**
- * Orbital Schema Type (Self-Contained)
- *
- * Defines the OrbitalSchema - the top-level application definition.
- * An application is a composition of orbitals: App = Σ(Orbitals)
- *
- * @packageDocumentation
- */
-
-/**
- * OrbitalSchema - The top-level application definition.
- *
- * An application is a composition of orbitals:
- * App = Σ(Orbitals)
- *
- * Custom traits can be defined at the schema level and referenced
- * by orbitals via TraitRef. This allows LLMs to generate custom
- * traits that aren't in the trait library.
- */
-/**
- * One `@config.<knob>` → render-ui prop substitution recorded by the inline
- * phase. Lets a consumer trace a resolved render-ui literal back to the config
- * knob it came from (the `@config.X` string is erased after substitution).
- * Mirrors the Rust `ConfigProvenanceRecord`.
- */
-interface ConfigProvenanceRecord {
-    /** Resolved trait name (post call-site rename) owning the render-ui effect. */
-    trait: string;
-    /** Pattern path within the render-ui tree (e.g. `root.children.0`). */
-    patternPath?: string;
-    /** The pattern-node prop key whose value was a `@config.X` binding. */
-    prop: string;
-    /** The config knob name (`X` in `@config.X`). */
-    knob: string;
-}
-/** Compiler-emitted schema metadata — the resolved `.orb` `_metadata` block. */
-interface SchemaMetadata {
-    version?: number;
-    createdAt?: number;
-    source?: string;
-    updatedAt?: number;
-    /** Config→knob provenance keyed by orbital name. See {@link ConfigProvenanceRecord}. */
-    configProvenance?: Record<string, ConfigProvenanceRecord[]>;
-    /** For a program with `locales`: each loaded behavior → its source folder, relative to the program's (catalogs at `<folder>/locales/<locale>/<name>.json`). */
-    messageSources?: Record<string, string>;
-    /** Compiled client programs: where each effect operator the client's traits run executes, for a kernel with no operator table. */
-    operatorSites?: Record<string, 'client' | 'server' | 'any'>;
-    /** Compiled client programs: the operator-table facts a kernel reads at dispatch. */
-    dispatchFacts?: DispatchFacts;
-}
-/** The operator-table facts a browser kernel reads at dispatch (`emit` busExcluded, `program/dispatch` targetOptions). */
-interface DispatchFacts {
-    busExcluded: string[];
-    targetOptions: string[];
-}
-/** App-level site modifiers: `origin`, `icon`, `siteName` (→ `name`), `signIn`. */
-interface SiteMeta {
-    /** Canonical production origin, e.g. `https://orb.almadar.io`. */
-    origin?: string;
-    /** Site icon path served from the public folder. */
-    icon?: string;
-    /** Site name (og:site_name). */
-    name?: string;
-    /** Route an `access: authenticated` page sends a non-admitted viewer to. */
-    signIn?: string;
-}
-/**
- * The sign-in route every host provides itself (the compiled shell's login form, the
- * runtime host's sign-in surface). `signIn:` may name it without a page, and no page
- * may be declared on it. Mirrors `orbital-core` `HOST_SIGN_IN_ROUTE`.
- */
-declare const HOST_SIGN_IN_ROUTE = "/login";
-/** Whether `path` is {@link HOST_SIGN_IN_ROUTE}, ignoring a trailing slash. */
-declare function isHostSignInRoute(path: string): boolean;
-declare const SiteMetaSchema: z.ZodObject<{
-    origin: z.ZodOptional<z.ZodString>;
-    icon: z.ZodOptional<z.ZodString>;
-    name: z.ZodOptional<z.ZodString>;
-    signIn: z.ZodOptional<z.ZodString>;
-}, z.core.$strict>;
-/** A program's merged message catalogs: locale → qualified key (`<behavior>:<key>`) → message. `orb resolve` writes one `<stem>.<locale>.json` per locale. */
-type MessageCatalogs = Record<string, Record<string, string>>;
-interface OrbitalSchema {
-    types?: Record<string, EventPayloadField[]>;
-    typeContractVersion?: 1;
-    /** Application name */
-    name: string;
-    /** Description */
-    description?: string;
-    /**
-     * App-level theme: the skin every orbital's `@currentTheme` seeds from
-     * unless the orbital declares its own `theme` (precedence: orbital →
-     * app → the runtime's baseline default). Authored as `theme "<key>"` in
-     * the `.lolo` app header; a full `<base>-<light|dark>` registry key.
-     * Distinct from {@link OrbitalSchema.config} — this names a registry
-     * theme, not a declared knob.
-     */
-    theme?: ThemeRef;
-    /**
-     * The registry themes the program switches to inside a page (a sub-frame's
-     * `data-theme`, a theme switcher's options), beyond its app and orbital
-     * themes. Authored as `themes: [<key>, …]` in the `.lolo` app header; each
-     * a full `<base>-<light|dark>` registry key.
-     */
-    themes?: string[];
-    /**
-     * The theme presets this program references (app and orbital `theme`
-     * keys) plus the runtime default, written by `orb` when it compiles the
-     * program for a runtime, so a kernel with no installed `@almadar/core`
-     * (wasm, mobile) resolves `@currentTheme` from the program alone. Never
-     * authored; absent on a source `.orb`.
-     */
-    themeDefinitions?: ThemeDefinition[];
-    /**
-     * Short human-readable summary distinct from `description`. Typically an
-     * AI-generated one-liner used by app list views, breadcrumbs, and the
-     * `GET /graphs/:appId/domain-text` projection. Kept separate from
-     * `description` (which may be longer / authored copy) so consumers can
-     * present a stable short label without truncating.
-     */
-    summary?: string;
-    /** Version (semver) */
-    version?: string;
-    /** Domain context - user request + classification */
-    domainContext?: DomainContext;
-    /** Design preferences */
-    design?: DesignPreferences;
-    /**
-     * Design tokens - reusable Tailwind class collections.
-     * Reference via `token: "surfaces.glass"` in patterns.
-     */
-    designTokens?: DesignTokens;
-    /**
-     * Custom pattern definitions for app-specific reusable patterns.
-     * Register custom designs that can be referenced by name.
-     */
-    customPatterns?: CustomPatternMap;
-    /** Array of orbitals */
-    orbitals: Orbital[];
-    /** `locales [en, ar, sl]` — the locales this program ships; every `(i18n/t …)` key must exist in each one's catalog. */
-    locales?: string[];
-    /** `public: "./public"` — a folder beside the program copied verbatim to the built site's root. */
-    publicDir?: string;
-    /** `app … [store: Driver]` — the default store-driver orbital for persistent entities that name none. */
-    store?: string;
-    /** Origins (`scheme://host[:port]`) the program's `http` effects may reach. */
-    egress?: string[];
-    /** `os-grants { … }` — the `os/` permissions the whole program holds; every orbital inherits them. */
-    osGrants?: OsGrants;
-    /** `deployment { target: [Orbital, …] }` — which orbitals ship to which target. */
-    deployment?: Deployment;
-    /** `inbound: [...]` — the hook names (`/api/hooks/<name>`) the program accepts deliveries on. */
-    inbound?: string[];
-    /** Site modifiers from the app bracket (`origin`, `icon`, `siteName`, `signIn`). */
-    site?: SiteMeta;
-    /** Pages served by `uses lazy` behaviors, each loaded from its own `.orb` when opened. */
-    lazyPages?: LazyPage[];
-    /** External services */
-    services?: ServiceDefinition[];
-    /**
-     * Organism-level DECLARED knobs (§4.5) — shared by every orbital in this
-     * schema, forwarded via `@config.<knob>`. Distinct from `Orbital.config`,
-     * which declares one orbital's own knobs.
-     */
-    config?: DeclaredTraitConfig;
-    /** Compiler-emitted metadata (resolved `.orb` `_metadata`). */
-    _metadata?: SchemaMetadata;
-    /**
-     * V4 IR schema version. Distinct from the semver `version` above; gates the
-     * identity-keyed reference semantics. Optional/unset for pre-V4 schemas.
-     */
-    schemaVersion?: number;
-    /**
-     * V4 identity ledger — the sole name↔id map for this schema's nodes. Optional
-     * until the Phase-7 flip; absent on pre-V4 schemas.
-     */
-    ledger?: IdentityLedger;
-}
-declare const ConfigProvenanceRecordSchema: z.ZodObject<{
-    trait: z.ZodString;
-    patternPath: z.ZodOptional<z.ZodString>;
-    prop: z.ZodString;
-    knob: z.ZodString;
-}, z.core.$strip>;
-declare const SchemaMetadataSchema: z.ZodObject<{
-    version: z.ZodOptional<z.ZodNumber>;
-    createdAt: z.ZodOptional<z.ZodNumber>;
-    source: z.ZodOptional<z.ZodString>;
-    updatedAt: z.ZodOptional<z.ZodNumber>;
-    configProvenance: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodObject<{
-        trait: z.ZodString;
-        patternPath: z.ZodOptional<z.ZodString>;
-        prop: z.ZodString;
-        knob: z.ZodString;
-    }, z.core.$strip>>>>;
-    messageSources: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
-    operatorSites: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
-        any: "any";
-        client: "client";
-        server: "server";
-    }>>>;
-    dispatchFacts: z.ZodOptional<z.ZodObject<{
-        busExcluded: z.ZodArray<z.ZodString>;
-        targetOptions: z.ZodArray<z.ZodString>;
-    }, z.core.$strip>>;
-}, z.core.$strip>;
-declare const OrbitalSchemaSchema: z.ZodType<OrbitalSchema, object>;
-/**
- * Flattened `OrbitalSchema` view used by the persistence/runtime layer.
- *
- * Canonical `OrbitalSchema` keeps every trait inside its owning
- * `OrbitalDefinition.traits`. Some runtime paths (e.g. the orbital-agent
- * stream, Firestore persistence) additionally roll the resolved trait set up
- * to the top level as `traits[]` so diffs and list views don't have to walk
- * every orbital.
- *
- * This is intentionally a LOSSY persisted view, NOT the canonical authoring
- * shape: it carries the rolled-up array alongside the per-orbital trait
- * lists, and consumers should prefer `OrbitalSchema` whenever the rolled-up
- * surface isn't required.
- */
-interface OrbitalSchemaWithTraits extends OrbitalSchema {
-    /** Flattened trait set rolled up from all orbitals. Persisted-view only. */
-    traits?: Trait[];
-}
-/**
- * Parses raw data into a validated OrbitalSchema.
- *
- * Uses Zod validation to ensure the data conforms to the OrbitalSchema structure.
- * Throws a ZodError if validation fails. For safe parsing that doesn't throw,
- * use `safeParseOrbitalSchema()` instead.
- *
- * @param {unknown} data - Raw data to parse (typically JSON)
- * @returns {OrbitalSchema} Validated orbital schema
- * @throws {z.ZodError} If data doesn't match OrbitalSchema structure
- *
- * @example
- * ```typescript
- * try {
- *   const schema = parseOrbitalSchema(jsonData);
- *   console.log('Valid schema:', schema.name);
- * } catch (error) {
- *   console.error('Invalid schema:', error);
- * }
- * ```
- *
- * @see safeParseOrbitalSchema
- */
-declare function parseOrbitalSchema(data: RuntimeValue): OrbitalSchema;
-/**
- * Safely parses raw data into a validated OrbitalSchema without throwing.
- *
- * Uses Zod's safeParse method to validate data and return a result object
- * instead of throwing errors. This is useful for form validation and
- * user input handling where you want to gracefully handle invalid data.
- *
- * @param {unknown} data - Raw data to parse (typically JSON)
- * @returns {z.ZodSafeParseResult<OrbitalSchema>} Parse result with success/status
- *
- * @example
- * ```typescript
- * const result = safeParseOrbitalSchema(jsonData);
- * if (result.success) {
- *   console.log('Valid schema:', result.data.name);
- * } else {
- *   console.error('Validation errors:', result.error);
- * }
- * ```
- *
- * @see parseOrbitalSchema
- */
-declare function safeParseOrbitalSchema(data: RuntimeValue): z.ZodSafeParseResult<OrbitalSchema>;
-type OrbitalSchemaInput = z.input<typeof OrbitalSchemaSchema>;
-
-export { HOST_SIGN_IN_ROUTE as H, ConfigProvenanceRecordSchema as a, OrbitalSchemaSchema as c, SchemaMetadataSchema as e, SiteMetaSchema as g, isHostSignInRoute as i, parseOrbitalSchema as p, safeParseOrbitalSchema as s };
-export type { ConfigProvenanceRecord as C, DispatchFacts as D, MessageCatalogs as M, OrbitalSchema as O, SchemaMetadata as S, OrbitalSchemaInput as b, OrbitalSchemaWithTraits as d, SiteMeta as f };