@autono/pinbox-core 0.18.0 → 0.20.0

package/dist/connectors/github.d.ts

@@ -1,4 +1,4 @@
-import { r as ConnectorTransport, t as Connector } from "../types-BmfT_m1p.js";
+import { r as ConnectorTransport, t as Connector } from "../types-BIm_s4nu.js";
 //#region src/connectors/github.d.ts
 declare function createGithubConnector(transport: ConnectorTransport): Connector;
 //#endregion

package/dist/connectors/index.d.ts

@@ -1,6 +1,6 @@
-import { g as ThreadMessage } from "../schema-BlM4lTLW.js";
-import { a as RemoteStatus, i as RemoteComment, n as ConnectorEvents, r as ConnectorTransport, t as Connector } from "../types-BmfT_m1p.js";
-import { c as PinStore } from "../store-DAB5CEA1.js";
+import { g as ThreadMessage } from "../schema-BLZ3MqMD.js";
+import { a as RemoteStatus, i as RemoteComment, n as ConnectorEvents, r as ConnectorTransport, t as Connector } from "../types-BIm_s4nu.js";
+import { c as PinStore } from "../store-QLtACKhW.js";
 //#region src/connectors/github-app.d.ts
 /** The slice of fetch this transport uses — injectable without dragging in Bun's extras. */
 type FetchLike = (input: string, init?: RequestInit) => Promise<Response>;
@@ -25,12 +25,38 @@ declare class GithubAppError extends Error {
   readonly status: number;
   constructor(message: string, status: number, hint?: string);
 }
+/** The App's own credential: a short-lived RS256 JWT with `iss` = app id. */
+declare function signAppJwt(appId: string, privateKeyPem: string, now?: () => number): Promise<string>;
+/** GitHub's standard request headers for the REST API. */
+declare function githubHeaders(bearer: string, json?: boolean): Record<string, string>;
+type InstallationToken = {
+  token: string;
+  expiresAt: number;
+};
+/** Exchange an App JWT for a one-hour installation token. */
+declare function mintInstallationToken(api: string, installationId: string, appJwt: string, fetchImpl: FetchLike): Promise<InstallationToken>;
 declare function createGithubAppTransport(opts: GithubAppTransportOptions): ConnectorTransport;
 /** PKCS#8 PEM in, PKCS#8 PEM out; PKCS#1 PEM (GitHub's download) is wrapped into PKCS#8. */
 declare function toPkcs8Pem(pem: string): string;
 /** PrivateKeyInfo ::= SEQUENCE { version 0, algorithm rsaEncryption, privateKey OCTET STRING }. */
 declare function pkcs1ToPkcs8(pkcs1: Uint8Array): Uint8Array;
 //#endregion
+//#region src/connectors/github-webhook.d.ts
+type GithubWebhookOptions = {
+  /** The webhook secret configured on the App — HMAC-SHA256 key for the signature. */
+  secret: string;
+  /** "owner/name": events for any other repository are acknowledged and ignored. */
+  repo: string;
+};
+/**
+ * Handle one webhook delivery. Returns the hub's machine envelope: 200 with
+ * `{ applied, ignored }`, 401 `E_AUTH` on a signature failure, 400 `E_INVALID_INPUT` on a
+ * body GitHub would never send.
+ */
+declare function handleGithubWebhook(req: Request, store: PinStore, opts: GithubWebhookOptions): Promise<Response>;
+/** `sha256=<hex hmac>` over the raw body, compared in constant time. */
+declare function signatureValid(secret: string, rawBody: string, header: string | null): Promise<boolean>;
+//#endregion
 //#region src/connectors/mirror.d.ts
 declare function createConnectorEvents(store: PinStore, pinId: string): ConnectorEvents;
 /**
@@ -64,4 +90,4 @@ type SlackConnectorOptions = {
 /** Links are `ref: "<channel>/<thread_ts>"`; every thread op derives channel + ts from the ref. */
 declare function createSlackConnector(transport: ConnectorTransport, opts: SlackConnectorOptions): Connector;
 //#endregion
-export { Connector, ConnectorEvents, ConnectorTransport, FetchLike, GithubAppError, GithubAppTransportOptions, POLL_OPEN_MS, POLL_RESOLVED_MS, RemoteComment, RemoteStatus, SlackConnectorOptions, SlackTransportOptions, createConnectorEvents, createGithubAppTransport, createSlackConnector, createSlackTransport, drainConnectorPolls, outboundCandidates, pkcs1ToPkcs8, toPkcs8Pem };
+export { Connector, ConnectorEvents, ConnectorTransport, FetchLike, GithubAppError, GithubAppTransportOptions, GithubWebhookOptions, InstallationToken, POLL_OPEN_MS, POLL_RESOLVED_MS, RemoteComment, RemoteStatus, SlackConnectorOptions, SlackTransportOptions, createConnectorEvents, createGithubAppTransport, createSlackConnector, createSlackTransport, drainConnectorPolls, githubHeaders, handleGithubWebhook, mintInstallationToken, outboundCandidates, pkcs1ToPkcs8, signAppJwt, signatureValid, toPkcs8Pem };

package/dist/connectors/index.js

@@ -1,3 +1,3 @@
-import { a as outboundCandidates, i as createConnectorEvents, n as POLL_RESOLVED_MS, r as drainConnectorPolls, t as POLL_OPEN_MS } from "../poll-BrcAuaAz.js";
-import { a as pkcs1ToPkcs8, i as createGithubAppTransport, n as createSlackTransport, o as toPkcs8Pem, r as GithubAppError, t as createSlackConnector } from "../slack-Dnq9bnXd.js";
-export { GithubAppError, POLL_OPEN_MS, POLL_RESOLVED_MS, createConnectorEvents, createGithubAppTransport, createSlackConnector, createSlackTransport, drainConnectorPolls, outboundCandidates, pkcs1ToPkcs8, toPkcs8Pem };
+import { a as createConnectorEvents, n as POLL_RESOLVED_MS, o as outboundCandidates, r as drainConnectorPolls, t as POLL_OPEN_MS } from "../poll-ZSv3wN9C.js";
+import { a as GithubAppError, c as mintInstallationToken, d as toPkcs8Pem, i as signatureValid, l as pkcs1ToPkcs8, n as createSlackTransport, o as createGithubAppTransport, r as handleGithubWebhook, s as githubHeaders, t as createSlackConnector, u as signAppJwt } from "../slack-C4P0AbuZ.js";
+export { GithubAppError, POLL_OPEN_MS, POLL_RESOLVED_MS, createConnectorEvents, createGithubAppTransport, createSlackConnector, createSlackTransport, drainConnectorPolls, githubHeaders, handleGithubWebhook, mintInstallationToken, outboundCandidates, pkcs1ToPkcs8, signAppJwt, signatureValid, toPkcs8Pem };

package/dist/delivery/openclaw.d.ts

@@ -1,5 +1,5 @@
-import { t as GetPin } from "../payload-CYbjb8ZB.js";
-import { n as DeliveryAdapter } from "../router-DOwWVak2.js";
+import { t as GetPin } from "../payload-CmKx5yL2.js";
+import { n as DeliveryAdapter } from "../router-NoiuUFb-.js";
 //#region src/delivery/openclaw.d.ts
 declare function createOpenclawAdapter(opts?: {
   command?: string[];

package/dist/delivery/openclaw.js

@@ -1,4 +1,4 @@
-import { n as resolveBinary, r as payloadForEvent, t as drainToExit } from "../proc-BMp_pbPS.js";
+import { n as resolveBinary, r as payloadForEvent, t as drainToExit } from "../proc-CBLeAM7c.js";
 //#region src/delivery/openclaw.ts
 const PUSH_ARGS = [
 	"system",

package/dist/delivery/resume.d.ts

@@ -1,5 +1,5 @@
-import { t as GetPin } from "../payload-CYbjb8ZB.js";
-import { n as DeliveryAdapter } from "../router-DOwWVak2.js";
+import { t as GetPin } from "../payload-CmKx5yL2.js";
+import { n as DeliveryAdapter } from "../router-NoiuUFb-.js";
 //#region src/delivery/resume.d.ts
 type ResumeCommand = (key: string, prompt: string) => string[];
 declare const RESUME_COMMANDS: Record<string, ResumeCommand>;

package/dist/delivery/resume.js

@@ -1,4 +1,4 @@
-import { n as resolveBinary, r as payloadForEvent, t as drainToExit } from "../proc-BMp_pbPS.js";
+import { n as resolveBinary, r as payloadForEvent, t as drainToExit } from "../proc-CBLeAM7c.js";
 //#region src/delivery/resume.ts
 const RESUME_COMMANDS = {
 	claude: (key, prompt) => [

package/dist/delivery/router.d.ts

@@ -1,2 +1,2 @@
-import { a as HOOK_CAPABLE_AGENTS, c as buildReplyPrompt, i as hooksEscalateMs, n as DeliveryAdapter, o as createHooksAdapter, r as DeliveryRouter, s as buildInjectionContext, t as DEFAULT_HOOKS_ESCALATE_MS } from "../router-DOwWVak2.js";
+import { a as HOOK_CAPABLE_AGENTS, c as buildReplyPrompt, i as hooksEscalateMs, n as DeliveryAdapter, o as createHooksAdapter, r as DeliveryRouter, s as buildInjectionContext, t as DEFAULT_HOOKS_ESCALATE_MS } from "../router-NoiuUFb-.js";
 export { DEFAULT_HOOKS_ESCALATE_MS, DeliveryAdapter, DeliveryRouter, HOOK_CAPABLE_AGENTS, buildInjectionContext, buildReplyPrompt, createHooksAdapter, hooksEscalateMs };

package/dist/delivery/router.js

@@ -1,3 +1,3 @@
 import { n as buildReplyPrompt, t as buildInjectionContext } from "../context-BHcEpzVb.js";
-import { a as createHooksAdapter, i as HOOK_CAPABLE_AGENTS, n as DeliveryRouter, r as hooksEscalateMs, t as DEFAULT_HOOKS_ESCALATE_MS } from "../router-BH74psWn.js";
+import { a as createHooksAdapter, i as HOOK_CAPABLE_AGENTS, n as DeliveryRouter, r as hooksEscalateMs, t as DEFAULT_HOOKS_ESCALATE_MS } from "../router-DrYLHCF4.js";
 export { DEFAULT_HOOKS_ESCALATE_MS, DeliveryRouter, HOOK_CAPABLE_AGENTS, buildInjectionContext, buildReplyPrompt, createHooksAdapter, hooksEscalateMs };

package/dist/delivery/webhook.d.ts

@@ -1,4 +1,4 @@
-import { n as DeliveryAdapter } from "../router-DOwWVak2.js";
+import { n as DeliveryAdapter } from "../router-NoiuUFb-.js";
 //#region src/delivery/webhook.d.ts
 type WebhookConfig = {
   url: string;

package/dist/do.d.ts

@@ -1,7 +1,7 @@
-import { a as Link, g as ThreadMessage, m as SessionRef, r as Attachment, s as Pin, t as AppliedEdit } from "./schema-BlM4lTLW.js";
-import { t as Connector } from "./types-BmfT_m1p.js";
-import { r as SessionStore } from "./sessions-BOrd8Yvv.js";
-import { a as LinkStore, c as PinStore, i as DeliveryStore, l as StoredEvent, t as CursorStore } from "./store-DAB5CEA1.js";
+import { a as Link, g as ThreadMessage, m as SessionRef, r as Attachment, s as Pin, t as AppliedEdit } from "./schema-BLZ3MqMD.js";
+import { t as Connector } from "./types-BIm_s4nu.js";
+import { r as SessionStore } from "./sessions-Bd7_G5jW.js";
+import { a as LinkStore, c as PinStore, i as DeliveryStore, l as StoredEvent, t as CursorStore } from "./store-QLtACKhW.js";
 import { Broadcaster } from "./ws.js";
 import { DurableObjectState, R2Bucket, WebSocket } from "@cloudflare/workers-types";
 //#region src/do-store.d.ts
@@ -40,6 +40,7 @@ type PinboxDoEnv = {
   GITHUB_INSTALLATION_ID?: string;
   GITHUB_REPO?: string;
   GITHUB_API_BASE?: string;
+  GITHUB_WEBHOOK_SECRET?: string;
   SLACK_BOT_TOKEN?: string;
   SLACK_CHANNEL?: string;
   MEDIA?: R2Bucket;
@@ -75,6 +76,11 @@ declare class PinboxHubDO {
   constructor(ctx: DurableObjectState, env: PinboxDoEnv);
   fetch(req: Request): Promise<Response>;
   private intercept;
+  /**
+   * GitHub cannot present our credential: the HMAC signature is this route's whole auth
+   * (github-webhook.ts), so it sits outside the bearer/JWT gate. Unconfigured ⇒ falls to 404.
+   */
+  private githubWebhook;
   webSocketMessage(ws: WebSocket, message: string | ArrayBuffer): void;
   webSocketClose(_ws: WebSocket, _code: number, _reason: string, _wasClean: boolean): void;
   /**

package/dist/do.js

@@ -1,12 +1,12 @@
-import { AttachmentSchema, PinInputSchema, PinSchema, SessionRefSchema, ThreadMessageSchema } from "./schema.js";
+import { a as PinSchema, c as SessionRefSchema, i as PinInputSchema, l as ThreadMessageSchema, n as AttachmentSchema } from "./schema-DDpii7iQ.js";
 import { a as NotFoundError, i as ConflictError, o as newId, t as SessionSchema } from "./sessions-DrCVTMfI.js";
-import { t as MIGRATIONS } from "./store-IR3o5YwY.js";
-import { r as drainConnectorPolls } from "./poll-BrcAuaAz.js";
-import { n as createHubHandler, o as ok, r as err } from "./hub-I67BuX9S.js";
+import { t as MIGRATIONS } from "./store-Daziyk0_.js";
+import { r as drainConnectorPolls } from "./poll-ZSv3wN9C.js";
+import { n as createHubHandler, o as ok, r as err } from "./hub-Ds7W5n89.js";
 import { ClientHelloSchema, WS_CLOSE_PROTOCOL, WS_CLOSE_UNAUTHORIZED, WS_TOKEN_SUBPROTOCOL_PREFIX, encodeWsEvent } from "./ws-protocol.js";
-import { n as DeliveryRouter } from "./router-BH74psWn.js";
+import { n as DeliveryRouter } from "./router-DrYLHCF4.js";
 import { createWebhookAdapter } from "./delivery/webhook.js";
-import { i as createGithubAppTransport, n as createSlackTransport, t as createSlackConnector } from "./slack-Dnq9bnXd.js";
+import { n as createSlackTransport, o as createGithubAppTransport, r as handleGithubWebhook, t as createSlackConnector } from "./slack-C4P0AbuZ.js";
 import { createGithubConnector } from "./connectors/github.js";
 import { i as verifyJwt, n as verifyNone, r as verifyToken } from "./verify-BDt9d9Np.js";
 //#region src/do-store-registries.ts
@@ -564,6 +564,8 @@ var DoBroadcaster = class {
 		return this.state.getWebSockets(topic).length;
 	}
 };
+/** Hub-root path of the GitHub webhook receiver (`/_pinbox/webhooks/github` on the Worker). */
+const WEBHOOK_PATH = "/webhooks/github";
 /** Retry cadence for the delivery queue. Coarse: the receiver being down is not urgent. */
 const DRAIN_INTERVAL_MS = 3e4;
 /** Later than any due_at this hub can write, so `due()` answers "anything pending?". */
@@ -653,11 +655,25 @@ var PinboxHubDO = class {
 		return await this.intercept(req, url, verify) ?? this.handler(req);
 	}
 	async intercept(req, url, verify) {
+		if (req.method === "POST" && url.pathname === WEBHOOK_PATH) return this.githubWebhook(req);
 		if (req.method === "POST" && url.pathname === "/attachments") return await this.unauthorized(verify, req) ?? this.createAttachment(req, url);
 		const mediaKey = /^\/media\/([^/]+)$/.exec(url.pathname)?.[1];
 		if (req.method === "GET" && mediaKey !== void 0) return await this.unauthorized(verify, req) ?? this.serveMedia(mediaKey);
 		return null;
 	}
+	/**
+	* GitHub cannot present our credential: the HMAC signature is this route's whole auth
+	* (github-webhook.ts), so it sits outside the bearer/JWT gate. Unconfigured ⇒ falls to 404.
+	*/
+	githubWebhook(req) {
+		const secret = this.env.GITHUB_WEBHOOK_SECRET;
+		const repo = this.env.GITHUB_REPO;
+		if (secret === void 0 || secret === "" || repo === void 0 || repo === "") return null;
+		return handleGithubWebhook(req, this.store, {
+			secret,
+			repo
+		});
+	}
 	webSocketMessage(ws, message) {
 		if (typeof message !== "string") {
 			this.protocolError(ws, "binary frames are not part of protocol 1");

package/dist/{hub-I67BuX9S.js → hub-Ds7W5n89.js}

@@ -1,6 +1,6 @@
-import { AppliedEditSchema, AttachmentSchema, PinInputSchema, SessionRefSchema } from "./schema.js";
+import { c as SessionRefSchema, i as PinInputSchema, n as AttachmentSchema, t as AppliedEditSchema } from "./schema-DDpii7iQ.js";
 import { a as NotFoundError, i as ConflictError, o as newId } from "./sessions-DrCVTMfI.js";
-import { t as POLL_OPEN_MS } from "./poll-BrcAuaAz.js";
+import { t as POLL_OPEN_MS } from "./poll-ZSv3wN9C.js";
 import { t as buildInjectionContext } from "./context-BHcEpzVb.js";
 import { z } from "zod";
 //#region src/routes-links.ts

package/dist/hub-server.d.ts

@@ -1,5 +1,5 @@
-import { r as Attachment } from "./schema-BlM4lTLW.js";
-import { c as PinStore } from "./store-DAB5CEA1.js";
+import { r as Attachment } from "./schema-BLZ3MqMD.js";
+import { c as PinStore } from "./store-QLtACKhW.js";
 import { HubOptions } from "./hub.js";
 //#region src/attachments.d.ts
 interface AttachmentSink {

package/dist/hub-server.js

@@ -1,4 +1,4 @@
-import { c as registerAttachmentSink, n as createHubHandler } from "./hub-I67BuX9S.js";
+import { c as registerAttachmentSink, n as createHubHandler } from "./hub-Ds7W5n89.js";
 import { ClientHelloSchema, WS_CLOSE_PROTOCOL, WS_CLOSE_UNAUTHORIZED, WS_TOKEN_SUBPROTOCOL_PREFIX, encodeWsEvent } from "./ws-protocol.js";
 //#region src/attachments-local.ts
 const EXTENSIONS = {

package/dist/hub.d.ts

@@ -1,5 +1,5 @@
-import { t as Connector } from "./types-BmfT_m1p.js";
-import { c as PinStore } from "./store-DAB5CEA1.js";
+import { t as Connector } from "./types-BIm_s4nu.js";
+import { c as PinStore } from "./store-QLtACKhW.js";
 //#region src/hub.d.ts
 type Identity = {
   userId: string;
@@ -26,6 +26,20 @@ declare function mustGetPin(store: PinStore, id: string): {
   text: string;
   kind: "comment" | "move" | "note";
   target?: {
+    model?: {
+      modelId: string;
+      revision: string;
+      partId: string;
+      position: [number, number, number];
+      normal?: [number, number, number] | undefined;
+      units: "cm" | "in" | "m" | "mm";
+      faceIndex?: number | undefined;
+      camera?: {
+        position: [number, number, number];
+        target: [number, number, number];
+        up: [number, number, number];
+      } | undefined;
+    } | undefined;
     url?: string | undefined;
     selector?: string | undefined;
     tag?: string | undefined;
@@ -55,6 +69,20 @@ declare function mustGetPin(store: PinStore, id: string): {
       textRuns?: string[] | undefined;
     } | undefined;
     targets?: {
+      model?: {
+        modelId: string;
+        revision: string;
+        partId: string;
+        position: [number, number, number];
+        normal?: [number, number, number] | undefined;
+        units: "cm" | "in" | "m" | "mm";
+        faceIndex?: number | undefined;
+        camera?: {
+          position: [number, number, number];
+          target: [number, number, number];
+          up: [number, number, number];
+        } | undefined;
+      } | undefined;
       url?: string | undefined;
       selector?: string | undefined;
       tag?: string | undefined;

package/dist/hub.js

@@ -1,2 +1,2 @@
-import { a as mustGetPin, i as match, n as createHubHandler, o as ok, r as err, s as readJson, t as BodyNotJsonError } from "./hub-I67BuX9S.js";
+import { a as mustGetPin, i as match, n as createHubHandler, o as ok, r as err, s as readJson, t as BodyNotJsonError } from "./hub-Ds7W5n89.js";
 export { BodyNotJsonError, createHubHandler, err, match, mustGetPin, ok, readJson };

package/dist/markdown.d.ts

@@ -1,4 +1,4 @@
-import { s as Pin } from "./schema-BlM4lTLW.js";
+import { s as Pin } from "./schema-BLZ3MqMD.js";
 //#region src/markdown.d.ts
 type DetailLevel = "compact" | "standard" | "forensic";
 declare function pinsToMarkdown(pins: Pin[], level: DetailLevel): string;

package/dist/markdown.js

@@ -29,6 +29,8 @@ function standardFacts(pin) {
 	const target = pin.target;
 	const lines = [];
 	if (target?.url !== void 0) lines.push(`  - url: ${target.url}`);
+	const model = target?.model;
+	if (model) lines.push(`  - model: ${model.modelId} @ ${model.revision}; part: ${model.partId}; local point: ${model.position.join(", ")} ${model.units}`);
 	const source = sourceRef(pin);
 	if (source !== void 0) lines.push(`  - source: ${source}`);
 	const rect = target?.rect;
@@ -44,6 +46,7 @@ function standardFacts(pin) {
 */
 function forensicBlock(pin) {
 	const forensic = {};
+	if (pin.target?.model) forensic["model"] = pin.target.model;
 	if (pin.target?.context) forensic["context"] = pin.target.context;
 	if (pin.env && Object.keys(pin.env).length > 0) forensic["env"] = pin.env;
 	if (Object.keys(forensic).length === 0) return [];
@@ -62,6 +65,8 @@ function forensicBlock(pin) {
 * a pin the same way.
 */
 function pinLocus(pin) {
+	const model = pin.target?.model;
+	if (model) return `${model.modelId}/${model.partId} @ ${model.revision}`;
 	return pin.target?.selector ?? sourceRef(pin) ?? pin.target?.url;
 }
 function sourceRef(pin) {

package/dist/payload-CmKx5yL2.d.ts

@@ -0,0 +1,6 @@
+import { s as Pin } from "./schema-BLZ3MqMD.js";
+import "./store-QLtACKhW.js";
+//#region src/delivery/payload.d.ts
+type GetPin = (id: string) => Pin | null;
+//#endregion
+export { GetPin as t };

package/dist/{poll-BrcAuaAz.js → poll-ZSv3wN9C.js}

@@ -249,4 +249,4 @@ function advances(next, current) {
 	return current === null || next > current;
 }
 //#endregion
-export { outboundCandidates as a, createConnectorEvents as i, POLL_RESOLVED_MS as n, drainConnectorPolls as r, POLL_OPEN_MS as t };
+export { createConnectorEvents as a, inboundEvents as i, POLL_RESOLVED_MS as n, outboundCandidates as o, drainConnectorPolls as r, POLL_OPEN_MS as t };

package/dist/{proc-BMp_pbPS.js → proc-CBLeAM7c.js}

@@ -1,4 +1,4 @@
-import { PinSchema, ThreadMessageSchema } from "./schema.js";
+import { a as PinSchema, l as ThreadMessageSchema } from "./schema-DDpii7iQ.js";
 import { n as buildReplyPrompt, t as buildInjectionContext } from "./context-BHcEpzVb.js";
 //#region src/delivery/payload.ts
 /**

package/dist/{router-BH74psWn.js → router-DrYLHCF4.js}

@@ -1,4 +1,4 @@
-import { PinSchema, ThreadMessageSchema } from "./schema.js";
+import { a as PinSchema, l as ThreadMessageSchema } from "./schema-DDpii7iQ.js";
 //#region src/delivery/hooks.ts
 /** Agents whose hook systems can register + pull (research §1: shared hooks schema). */
 const HOOK_CAPABLE_AGENTS = /* @__PURE__ */ new Set([

package/dist/{router-DOwWVak2.d.ts → router-NoiuUFb-.d.ts}

@@ -1,6 +1,6 @@
-import { g as ThreadMessage, s as Pin } from "./schema-BlM4lTLW.js";
-import { t as Session } from "./sessions-BOrd8Yvv.js";
-import { c as PinStore, l as StoredEvent } from "./store-DAB5CEA1.js";
+import { g as ThreadMessage, s as Pin } from "./schema-BLZ3MqMD.js";
+import { t as Session } from "./sessions-Bd7_G5jW.js";
+import { c as PinStore, l as StoredEvent } from "./store-QLtACKhW.js";
 //#region src/delivery/context.d.ts
 /**
  * The per-turn injection context: every open pin at the `compact` dial,

package/dist/{schema-BlM4lTLW.d.ts → schema-BLZ3MqMD.d.ts}

@@ -1,4 +1,28 @@
 import { z } from "zod";
+//#region src/model-anchor.d.ts
+/** A point in a named part's LOCAL coordinates, pinned to an immutable model revision.
+ * No implicit reprojection across edits: hosts must explicitly migrate stale anchors. */
+declare const ModelAnchorSchema: z.ZodObject<{
+  modelId: z.ZodString;
+  revision: z.ZodString;
+  partId: z.ZodString;
+  position: z.ZodTuple<[z.ZodNumber, z.ZodNumber, z.ZodNumber], null>;
+  normal: z.ZodOptional<z.ZodTuple<[z.ZodNumber, z.ZodNumber, z.ZodNumber], null>>;
+  units: z.ZodEnum<{
+    cm: "cm";
+    in: "in";
+    m: "m";
+    mm: "mm";
+  }>;
+  faceIndex: z.ZodOptional<z.ZodNumber>;
+  camera: z.ZodOptional<z.ZodObject<{
+    position: z.ZodTuple<[z.ZodNumber, z.ZodNumber, z.ZodNumber], null>;
+    target: z.ZodTuple<[z.ZodNumber, z.ZodNumber, z.ZodNumber], null>;
+    up: z.ZodTuple<[z.ZodNumber, z.ZodNumber, z.ZodNumber], null>;
+  }, z.core.$strip>>;
+}, z.core.$strict>;
+type ModelAnchor = z.infer<typeof ModelAnchorSchema>;
+//#endregion
 //#region src/schema.d.ts
 declare const SCHEMA_VERSION = 1;
 declare const RectSchema: z.ZodType<{
@@ -80,6 +104,25 @@ declare const PinInputSchema: z.ZodObject<{
     note: "note";
   }>>;
   target: z.ZodOptional<z.ZodObject<{
+    model: z.ZodOptional<z.ZodObject<{
+      modelId: z.ZodString;
+      revision: z.ZodString;
+      partId: z.ZodString;
+      position: z.ZodTuple<[z.ZodNumber, z.ZodNumber, z.ZodNumber], null>;
+      normal: z.ZodOptional<z.ZodTuple<[z.ZodNumber, z.ZodNumber, z.ZodNumber], null>>;
+      units: z.ZodEnum<{
+        cm: "cm";
+        in: "in";
+        m: "m";
+        mm: "mm";
+      }>;
+      faceIndex: z.ZodOptional<z.ZodNumber>;
+      camera: z.ZodOptional<z.ZodObject<{
+        position: z.ZodTuple<[z.ZodNumber, z.ZodNumber, z.ZodNumber], null>;
+        target: z.ZodTuple<[z.ZodNumber, z.ZodNumber, z.ZodNumber], null>;
+        up: z.ZodTuple<[z.ZodNumber, z.ZodNumber, z.ZodNumber], null>;
+      }, z.core.$strip>>;
+    }, z.core.$strict>>;
     url: z.ZodOptional<z.ZodString>;
     selector: z.ZodOptional<z.ZodString>;
     tag: z.ZodOptional<z.ZodString>;
@@ -118,6 +161,25 @@ declare const PinInputSchema: z.ZodObject<{
       textRuns: z.ZodOptional<z.ZodArray<z.ZodString>>;
     }, z.core.$strip>>;
     targets: z.ZodOptional<z.ZodArray<z.ZodObject<{
+      model: z.ZodOptional<z.ZodObject<{
+        modelId: z.ZodString;
+        revision: z.ZodString;
+        partId: z.ZodString;
+        position: z.ZodTuple<[z.ZodNumber, z.ZodNumber, z.ZodNumber], null>;
+        normal: z.ZodOptional<z.ZodTuple<[z.ZodNumber, z.ZodNumber, z.ZodNumber], null>>;
+        units: z.ZodEnum<{
+          cm: "cm";
+          in: "in";
+          m: "m";
+          mm: "mm";
+        }>;
+        faceIndex: z.ZodOptional<z.ZodNumber>;
+        camera: z.ZodOptional<z.ZodObject<{
+          position: z.ZodTuple<[z.ZodNumber, z.ZodNumber, z.ZodNumber], null>;
+          target: z.ZodTuple<[z.ZodNumber, z.ZodNumber, z.ZodNumber], null>;
+          up: z.ZodTuple<[z.ZodNumber, z.ZodNumber, z.ZodNumber], null>;
+        }, z.core.$strip>>;
+      }, z.core.$strict>>;
       url: z.ZodOptional<z.ZodString>;
       selector: z.ZodOptional<z.ZodString>;
       tag: z.ZodOptional<z.ZodString>;
@@ -227,6 +289,25 @@ declare const PinSchema: z.ZodObject<{
     note: "note";
   }>>;
   target: z.ZodOptional<z.ZodObject<{
+    model: z.ZodOptional<z.ZodObject<{
+      modelId: z.ZodString;
+      revision: z.ZodString;
+      partId: z.ZodString;
+      position: z.ZodTuple<[z.ZodNumber, z.ZodNumber, z.ZodNumber], null>;
+      normal: z.ZodOptional<z.ZodTuple<[z.ZodNumber, z.ZodNumber, z.ZodNumber], null>>;
+      units: z.ZodEnum<{
+        cm: "cm";
+        in: "in";
+        m: "m";
+        mm: "mm";
+      }>;
+      faceIndex: z.ZodOptional<z.ZodNumber>;
+      camera: z.ZodOptional<z.ZodObject<{
+        position: z.ZodTuple<[z.ZodNumber, z.ZodNumber, z.ZodNumber], null>;
+        target: z.ZodTuple<[z.ZodNumber, z.ZodNumber, z.ZodNumber], null>;
+        up: z.ZodTuple<[z.ZodNumber, z.ZodNumber, z.ZodNumber], null>;
+      }, z.core.$strip>>;
+    }, z.core.$strict>>;
     url: z.ZodOptional<z.ZodString>;
     selector: z.ZodOptional<z.ZodString>;
     tag: z.ZodOptional<z.ZodString>;
@@ -265,6 +346,25 @@ declare const PinSchema: z.ZodObject<{
       textRuns: z.ZodOptional<z.ZodArray<z.ZodString>>;
     }, z.core.$strip>>;
     targets: z.ZodOptional<z.ZodArray<z.ZodObject<{
+      model: z.ZodOptional<z.ZodObject<{
+        modelId: z.ZodString;
+        revision: z.ZodString;
+        partId: z.ZodString;
+        position: z.ZodTuple<[z.ZodNumber, z.ZodNumber, z.ZodNumber], null>;
+        normal: z.ZodOptional<z.ZodTuple<[z.ZodNumber, z.ZodNumber, z.ZodNumber], null>>;
+        units: z.ZodEnum<{
+          cm: "cm";
+          in: "in";
+          m: "m";
+          mm: "mm";
+        }>;
+        faceIndex: z.ZodOptional<z.ZodNumber>;
+        camera: z.ZodOptional<z.ZodObject<{
+          position: z.ZodTuple<[z.ZodNumber, z.ZodNumber, z.ZodNumber], null>;
+          target: z.ZodTuple<[z.ZodNumber, z.ZodNumber, z.ZodNumber], null>;
+          up: z.ZodTuple<[z.ZodNumber, z.ZodNumber, z.ZodNumber], null>;
+        }, z.core.$strip>>;
+      }, z.core.$strict>>;
       url: z.ZodOptional<z.ZodString>;
       selector: z.ZodOptional<z.ZodString>;
       tag: z.ZodOptional<z.ZodString>;
@@ -405,4 +505,4 @@ type Attachment = z.infer<typeof AttachmentSchema>;
 type Link = z.infer<typeof LinkSchema>;
 declare function pinJsonSchema(): Record<string, unknown>;
 //#endregion
-export { ThreadMessageSchema as _, Link as a, PinInput as c, Rect as d, RectSchema as f, ThreadMessage as g, SessionRefSchema as h, AttachmentSchema as i, PinInputSchema as l, SessionRef as m, AppliedEditSchema as n, LinkSchema as o, SCHEMA_VERSION as p, Attachment as r, Pin as s, AppliedEdit as t, PinSchema as u, pinJsonSchema as v };
+export { ThreadMessageSchema as _, Link as a, ModelAnchorSchema as b, PinInput as c, Rect as d, RectSchema as f, ThreadMessage as g, SessionRefSchema as h, AttachmentSchema as i, PinInputSchema as l, SessionRef as m, AppliedEditSchema as n, LinkSchema as o, SCHEMA_VERSION as p, Attachment as r, Pin as s, AppliedEdit as t, PinSchema as u, pinJsonSchema as v, ModelAnchor as y };