@authorbot/domain 0.1.37 → 0.1.39

package/CHANGELOG.md

@@ -9,6 +9,33 @@ Every published package shares this version. A tag builds, tests, and publishes
 all of them together, so `@authorbot/cli@0.1.15` and `@authorbot/api@0.1.15` are
 always the same commit.
 
+## 0.1.38
+
+- **Authorbot now has a complete local authoring mode.** `authorbot dev` runs
+  the real API and browser UI against a managed branch and persistent Git
+  worktree, with private SQLite state outside the book repository. It needs no
+  Cloudflare account or GitHub connection, and needs no network after the
+  packages are installed. Companion commands report status, print the private
+  starter agent environment, reset operational state without touching Git,
+  open a draft book pull request, and remove only worktrees Git can prove are
+  safe to clean up.
+- **Local editing follows the repository instead of fighting it.** API reads
+  are pinned to committed `HEAD`, while the preview can show direct editor
+  saves immediately. API writes pause while the worktree is dirty or on the
+  wrong branch, and resume after an explicit forward-moving author commit.
+  Local maintainer sign-in uses a one-use bootstrap link, book-specific
+  cookies, a stable `local:` identity, and a private full-editor starter token.
+- **The local browser loop is fast enough for Authorbot development.**
+  Astro/Vite serves the only browser origin and proxies the private loopback
+  API. Book and UI changes reload without throwing away SQLite or tokens, the
+  local toolbar reports branch and projection state, and a pending reload
+  waits when a form or editor has unsaved input. Backend source edits still
+  require restarting `authorbot dev`.
+- Local authoring uses Node's built-in SQLite instead of a native module.
+  Authorbot's CLI and local runtime now require Node 22.13 or newer. Cloudflare
+  remains the hosted production runtime. This release has no book-format
+  migration and no new D1 migration.
+
 ## 0.1.37
 
 - **Cloudflare D1 can now apply the Phase 3B capability backfill.** The 0.1.36

package/dist/index.d.ts

@@ -18,8 +18,8 @@ export { DECISION_RESULTS, DECISION_SUPPORT_CHANGED_EVENT, decisionResultSchema,
 export type { DecisionResult, SupportChangeOutcome, SupportChangeTransition, } from "./decision-support.js";
 export { PHASE3_WORK_ITEM_STATUSES, WORK_ITEM_STATUSES, WORK_ITEM_TRANSITIONS, canTransitionWorkItem, isPhase3WorkItemStatus, transitionWorkItem, } from "./work-item-state.js";
 export type { WorkItemStatus, WorkItemTransitionDenialReason, } from "./work-item-state.js";
-export { FORCE_CREATE_RULE_VERSION, MAX_OVERRIDE_REASON_LENGTH, MIN_OVERRIDE_REASON_LENGTH, authorizeCancelWorkItem, authorizeForceCreateWorkItem, authorizeRejectSuggestion, authorizeReopenSuggestion, cancelWorkItemCommandSchema, forceCreateWorkItemCommandSchema, overrideReasonSchema, rejectSuggestionCommandSchema, reopenSuggestionCommandSchema, } from "./overrides.js";
-export type { AnnotationPromotionDenialReason, CancelWorkItemCommand, ForceCreateWorkItemCommand, RejectSuggestionCommand, ReopenSuggestionCommand, SuggestionOverrideDenialReason, WorkItemOverrideDenialReason, } from "./overrides.js";
+export { FORCE_CREATE_RULE_VERSION, MAX_OVERRIDE_REASON_LENGTH, MIN_OVERRIDE_REASON_LENGTH, authorizeCancelWorkItem, authorizeForceCreateReplyWorkItem, authorizeForceCreateWorkItem, authorizeRejectSuggestion, authorizeReopenSuggestion, cancelWorkItemCommandSchema, forceCreateReplyWorkItemCommandSchema, forceCreateWorkItemCommandSchema, overrideReasonSchema, rejectSuggestionCommandSchema, reopenSuggestionCommandSchema, } from "./overrides.js";
+export type { AnnotationPromotionDenialReason, CancelWorkItemCommand, ForceCreateWorkItemCommand, ForceCreateReplyWorkItemCommand, RejectSuggestionCommand, ReopenSuggestionCommand, ReplyPromotionDenialReason, SuggestionOverrideDenialReason, WorkItemOverrideDenialReason, } from "./overrides.js";
 export { AGENT_TOKEN_PREFIX, AGENT_TOKEN_REGEX, AGENT_TOKEN_SECRET_LENGTH, DEFAULT_TOKEN_TTL_DAYS, LAST_USED_UPDATE_INTERVAL_MS, MAX_TOKEN_TTL_DAYS, SESSION_ID_LENGTH, SESSION_ID_REGEX, SESSION_TTL_DAYS, agentTokenSchema, checkTokenActive, isAgentTokenFormat, isSessionIdFormat, parseAgentToken, resolveSessionExpiry, resolveTokenExpiry, sessionIdSchema, shouldUpdateLastUsed, toTimestamp, } from "./token.js";
 export type { AgentTokenParseFailure, AgentTokenParseResult, TokenExpiryResult, TokenInactiveReason, } from "./token.js";
 export { DEFAULT_LEASE_CONFIG, LEASE_DURATION_MS, LEASE_MAX_TOTAL_DURATION_MS, LEASE_RENEWAL_DURATION_MS, LEASE_RENEWAL_PROMPT_BEFORE_MS, checkLeaseActive, checkLeaseRenewable, checkWorkItemClaimable, isLeaseExpired, leaseConfigSchema, parseIsoDuration, renewalPromptAt, resolveLeaseExpiry, shouldExpireLease, } from "./lease.js";

package/dist/index.js

@@ -8,7 +8,7 @@ export { MAX_BODY_BYTES, MAX_TOKEN_NAME_LENGTH, bodySchema, normalizeBody, creat
 export { VOTE_VALUES, authorizeVote, castVoteCommandSchema, clearVoteCommandSchema, voteValueSchema, } from "./vote.js";
 export { DECISION_RESULTS, DECISION_SUPPORT_CHANGED_EVENT, decisionResultSchema, resolveSupportChange, } from "./decision-support.js";
 export { PHASE3_WORK_ITEM_STATUSES, WORK_ITEM_STATUSES, WORK_ITEM_TRANSITIONS, canTransitionWorkItem, isPhase3WorkItemStatus, transitionWorkItem, } from "./work-item-state.js";
-export { FORCE_CREATE_RULE_VERSION, MAX_OVERRIDE_REASON_LENGTH, MIN_OVERRIDE_REASON_LENGTH, authorizeCancelWorkItem, authorizeForceCreateWorkItem, authorizeRejectSuggestion, authorizeReopenSuggestion, cancelWorkItemCommandSchema, forceCreateWorkItemCommandSchema, overrideReasonSchema, rejectSuggestionCommandSchema, reopenSuggestionCommandSchema, } from "./overrides.js";
+export { FORCE_CREATE_RULE_VERSION, MAX_OVERRIDE_REASON_LENGTH, MIN_OVERRIDE_REASON_LENGTH, authorizeCancelWorkItem, authorizeForceCreateReplyWorkItem, authorizeForceCreateWorkItem, authorizeRejectSuggestion, authorizeReopenSuggestion, cancelWorkItemCommandSchema, forceCreateReplyWorkItemCommandSchema, forceCreateWorkItemCommandSchema, overrideReasonSchema, rejectSuggestionCommandSchema, reopenSuggestionCommandSchema, } from "./overrides.js";
 export { AGENT_TOKEN_PREFIX, AGENT_TOKEN_REGEX, AGENT_TOKEN_SECRET_LENGTH, DEFAULT_TOKEN_TTL_DAYS, LAST_USED_UPDATE_INTERVAL_MS, MAX_TOKEN_TTL_DAYS, SESSION_ID_LENGTH, SESSION_ID_REGEX, SESSION_TTL_DAYS, agentTokenSchema, checkTokenActive, isAgentTokenFormat, isSessionIdFormat, parseAgentToken, resolveSessionExpiry, resolveTokenExpiry, sessionIdSchema, shouldUpdateLastUsed, toTimestamp, } from "./token.js";
 export { DEFAULT_LEASE_CONFIG, LEASE_DURATION_MS, LEASE_MAX_TOTAL_DURATION_MS, LEASE_RENEWAL_DURATION_MS, LEASE_RENEWAL_PROMPT_BEFORE_MS, checkLeaseActive, checkLeaseRenewable, checkWorkItemClaimable, isLeaseExpired, leaseConfigSchema, parseIsoDuration, renewalPromptAt, resolveLeaseExpiry, shouldExpireLease, } from "./lease.js";
 export { LEASE_TOKEN_PREFIX, LEASE_TOKEN_REGEX, LEASE_TOKEN_SECRET_LENGTH, isLeaseTokenFormat, leaseTokenSchema, parseLeaseToken, } from "./lease-token.js";

package/dist/overrides.d.ts

@@ -45,8 +45,16 @@ export declare const forceCreateWorkItemCommandSchema: z.ZodObject<{
     reason: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
 }, z.core.$strict>;
 export type ForceCreateWorkItemCommand = z.infer<typeof forceCreateWorkItemCommandSchema>;
+/** Force-create Work from one reply without promoting its whole annotation. */
+export declare const forceCreateReplyWorkItemCommandSchema: z.ZodObject<{
+    annotationId: z.ZodString;
+    replyId: z.ZodString;
+    reason: z.ZodOptional<z.ZodPipe<z.ZodString, z.ZodTransform<string, string>>>;
+}, z.core.$strict>;
+export type ForceCreateReplyWorkItemCommand = z.infer<typeof forceCreateReplyWorkItemCommandSchema>;
 export type SuggestionOverrideDenialReason = "not-maintainer" | "not-a-suggestion" | "illegal-transition";
 export type AnnotationPromotionDenialReason = "not-maintainer" | "illegal-transition";
+export type ReplyPromotionDenialReason = "not-maintainer" | "illegal-transition";
 /** Reject an open suggestion (`open -> rejected`). */
 export declare function authorizeRejectSuggestion(input: {
     actorRole: Role;
@@ -76,4 +84,9 @@ export declare function authorizeForceCreateWorkItem(input: {
     annotationKind: AnnotationKind;
     annotationStatus: AnnotationStatus;
 }): Decision<AnnotationPromotionDenialReason>;
+/** Promote one committed, open reply without changing the parent annotation. */
+export declare function authorizeForceCreateReplyWorkItem(input: {
+    actorRole: Role;
+    replyStatus: "pending_git" | "open" | "withdrawn";
+}): Decision<ReplyPromotionDenialReason>;
 //# sourceMappingURL=overrides.d.ts.map

package/dist/overrides.js

@@ -46,6 +46,12 @@ export const forceCreateWorkItemCommandSchema = z.strictObject({
     annotationId: uuidv7Schema,
     reason: overrideReasonSchema.optional(),
 });
+/** Force-create Work from one reply without promoting its whole annotation. */
+export const forceCreateReplyWorkItemCommandSchema = z.strictObject({
+    annotationId: uuidv7Schema,
+    replyId: uuidv7Schema,
+    reason: overrideReasonSchema.optional(),
+});
 function requireMaintainer(actorRole) {
     if (actorRole !== "maintainer") {
         return denied("not-maintainer", "only a maintainer may perform overrides");
@@ -106,4 +112,14 @@ export function authorizeForceCreateWorkItem(input) {
     }
     return ALLOWED;
 }
+/** Promote one committed, open reply without changing the parent annotation. */
+export function authorizeForceCreateReplyWorkItem(input) {
+    const maintainer = requireMaintainer(input.actorRole);
+    if (!maintainer.allowed)
+        return maintainer;
+    if (input.replyStatus !== "open") {
+        return denied("illegal-transition", `a reply with status "${input.replyStatus}" cannot receive a work item (only "open")`);
+    }
+    return ALLOWED;
+}
 //# sourceMappingURL=overrides.js.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@authorbot/domain",
-  "version": "0.1.37",
+  "version": "0.1.39",
   "description": "Pure domain logic for Authorbot: role/scope authorization, annotation and Git-operation state machines, command validators, and token/session value rules (Phase 2 contract section 3)",
   "keywords": [
     "authorbot",
@@ -40,7 +40,7 @@
   ],
   "dependencies": {
     "zod": "^4.0.0",
-    "@authorbot/schemas": "0.1.37"
+    "@authorbot/schemas": "0.1.39"
   },
   "devDependencies": {
     "@types/node": "^22.0.0",