@bevel-software/platform-shared 0.14.0 → 0.19.0

package/dist/workflow/interface.d.ts

@@ -17,15 +17,24 @@
  * the final surface area.
  */
 import type { AuthUser } from '../auth/types.js';
-import type { AcquireLockResult, Branch, BranchWorkspaceStatus, CancelChangeRequestResult, Change, ChangeInput, ChangeRequest, ChangeRequestComment, ChangeRequestDetail, ChangeRequestState, ChangedFile, FileApproval, FileLock, MergeChangeRequestOutcome, OpenChangeRequestInput, PostChangeRequestCommentInput } from './types.js';
+import type { ChangeRequestApplyFailureKind } from '../git/pr.types.js';
+import type { AcquireLockResult, Branch, BranchSyncOutcome, BranchWorkspaceStatus, CancelChangeRequestResult, Change, ChangeInput, ChangeRequest, ChangeRequestComment, ChangeRequestDetail, ChangeRequestState, ChangedFile, FileApproval, FileLock, FolderChangeRequest, FolderChangeRequestRemoval, MergeBranchOutcome, MergeChangeRequestOutcome, OpenChangeRequestInput, PostChangeRequestCommentInput } from './types.js';
 export interface IWorkflowService {
+    /**
+     * `freshFetch` bypasses the fetch TTL; `strictFetch` makes a failed fetch
+     * throw instead of serving the stale refs — for a caller that uses the
+     * list to prove a branch ABSENT (a stale list proves nothing).
+     */
     listBranches(workspaceId: string, opts?: {
         freshFetch?: boolean;
+        strictFetch?: boolean;
     }): Promise<Branch[]>;
     /**
      * Create a new unprotected branch. Protected branches cannot be created
      * via the workflow — the protected set is bootstrapped from the KB repo's
-     * initial state and never grown at runtime.
+     * initial state and never grown at runtime. Holds the branch-lifecycle
+     * lock for `name`, so creation is serialised with the branch's deletion
+     * and with the retirement of a stale clone under that name.
      */
     createBranch(workspaceId: string, name: string, fromBase?: string): Promise<Branch>;
     /**
@@ -70,6 +79,31 @@ export interface IWorkflowService {
      * `user` when provided (falls back to the recovery bot).
      */
     updateFromRemote(workspaceId: string, user?: AuthUser): Promise<void>;
+    /**
+     * The remote-sync step for ONE branch's clone, driven by a git host's
+     * webhook or a pipeline rather than by a person's save. Pulls with the same
+     * rebase-and-autostash `updateFromRemote` uses and, when HEAD moved,
+     * announces the new tree (`fs-tree-changed`, one `file-changed` per path)
+     * so open browsers, agents and the catalogues see it at once.
+     *
+     * On a conflict it does what `updateFromRemote` does — the divergence goes
+     * to the same background recovery ladder (attributed to the recovery bot,
+     * since no person triggered the sync) — and, because that is not resolved
+     * at request time, reports it as a `conflict` outcome naming the files, so
+     * the caller can fail and a person can step in if recovery does not clear
+     * it. Never throws for a per-branch failure; every failure is an outcome.
+     */
+    syncWorkspaceFromRemote(workspaceId: string): Promise<BranchSyncOutcome>;
+    /**
+     * Retire the clone of a branch the host has deleted (a `remote-gone`
+     * outcome). Runs under the branch-lifecycle lock — the one `createBranch`
+     * and `deleteBranch` hold, so no Hexis operation can recreate the branch
+     * while the clone is examined and removed — revalidates against origin
+     * first, and backs off while a clone of the branch is being bootstrapped.
+     * A branch recreated in the meantime therefore keeps its clone. Returns
+     * whether the clone was removed.
+     */
+    retireRemoteGoneClone(workspaceId: string): Promise<boolean>;
     /**
      * Hard-reset the workspace's checked-out branch to `origin/<branch>` (fetch
      * first), discarding any local divergence. Break-glass primitive for
@@ -140,6 +174,18 @@ export interface IWorkflowService {
         baseline: string | null;
         current: string | null;
     }>;
+    /**
+     * One file as it stood at a change request's fork point (`sha`, which must
+     * lie on the target branch's history) — the "before" side of the request
+     * dialog's diff. `null` when the path did not exist there. Access is the
+     * caller's to check.
+     */
+    fileAtForkPoint(workspaceId: string, baseBranch: string, sha: string, path: string): Promise<string | null>;
+    /**
+     * A change request's current fork point: the merge base of the freshly
+     * fetched target and source branches, or `null` when they share no history.
+     */
+    changeRequestForkPoint(workspaceId: string, baseBranch: string, headBranch: string): Promise<string | null>;
     /**
      * Try to acquire an edit lock on `(branch, path)` for the caller. Returns
      * `{ acquired: true, lock }` on success; `{ acquired: false, lock }` if
@@ -161,9 +207,36 @@ export interface IWorkflowService {
      * `releaseLockUntouched`) — `releaseLock` rejects rather than ever enqueue
      * a commit for a hold that was never allowed to write. Internal callers
      * only; never plumbed from a route.
+     *
+     * Every non-coordination acquire also passes the READ-BEFORE-WRITE gate, on
+     * every branch: the caller must be able to read the path (for a new path,
+     * where it lands), or the path must start a new folder directly under one
+     * of the three roots (knowledge, skills, plugins). Nothing is created,
+     * changed or removed where its author cannot see it, whatever write rules
+     * say; a refusal is an `AccessDeniedError` whose `access.unreadable` names
+     * the place. A write that passed only as a platform-file restore is not
+     * asked — that rescue exists for a destination whose rules deny the admin
+     * making it.
+     *
+     * `opts.platformRestore` CLAIMS that this acquire is the destination side of
+     * an admin putting a misplaced platform file back (`access.md`, `roles.yaml`,
+     * `.bevelignore`, the agent guide), and names the move's `source` — the path the
+     * file is coming FROM, in the same spelling as `path`.
+     *
+     * It is a claim, not an authorisation. The implementation re-asks both
+     * halves of it: that source→path is a restore at all (a misplaced copy
+     * going back under its own name, never the root's own copy coming out —
+     * `isPlatformRestoreShape`), and that the access module
+     * (`canRestorePlatformFile`) lets this caller land this exact path. Only
+     * both yeses let the acquire past the write gate, so a caller that omits or
+     * fakes the source gains nothing: the gate never takes the route's word for
+     * which move this is.
      */
     acquireLock(workspaceId: string, branch: string, path: string, user: AuthUser, opts?: {
         coordination?: boolean;
+        platformRestore?: {
+            source: string;
+        };
     }): Promise<AcquireLockResult>;
     /** Heartbeat to keep an acquired lock alive past its current TTL. */
     heartbeatLock(workspaceId: string, branch: string, path: string, user: AuthUser): Promise<FileLock>;
@@ -276,9 +349,12 @@ export interface IWorkflowService {
      */
     openChangeRequest(workspaceId: string, user: AuthUser, input: OpenChangeRequestInput): Promise<ChangeRequestDetail>;
     /**
-     * Re-run `targetBranch → sourceBranch` merge on an existing change request.
-     * Used when the target has advanced since the change request was opened.
-     * Throws `NotImplementedWorkflowError` until the backing merge path lands.
+     * Re-run `targetBranch → sourceBranch` merge on an existing change request
+     * and push it — the request dialog's Update, offered when the target has
+     * advanced since the request was opened. Only the request's author or
+     * someone who may apply it (`viewerCanUpdate`) may run it (403 otherwise).
+     * A conflicting merge is aborted, leaving the branch exactly as it was, and
+     * surfaces as `ChangeRequestConflictsError` (409).
      */
     updateFromTarget(workspaceId: string, user: AuthUser, number: number): Promise<ChangeRequestDetail>;
     listComments(number: number): Promise<ChangeRequestComment[]>;
@@ -304,6 +380,20 @@ export interface IWorkflowService {
      * Returns true when this call closed it.
      */
     closeEmptyChangeRequest(number: number, user: AuthUser): Promise<boolean>;
+    /**
+     * The open change requests proposing files under a KB-repo-relative
+     * folder, each with whether the caller may take those files out of it
+     * (their own request, they are an admin, or they may write every file it
+     * proposes under the folder).
+     */
+    changeRequestsUnderFolder(folder: string, user: AuthUser): Promise<FolderChangeRequest[]>;
+    /**
+     * Take every file under the folder out of every open change request
+     * proposing one; a request left empty is withdrawn. All or nothing: refused
+     * (403), with nothing touched, when the caller may not act on even one of
+     * them.
+     */
+    removeFolderFromChangeRequests(folder: string, user: AuthUser): Promise<FolderChangeRequestRemoval[]>;
     /**
      * Close every open change request either of whose branches no longer exists
      * — source or target, since a proposal needs both ends. Such a request
@@ -342,5 +432,47 @@ export interface IWorkflowService {
     mergeChangeRequest(number: number, user: AuthUser, headSha: string, approvals: FileApproval[], state: ChangeRequestState, title: string, baseBranch: string, workspaceId: string, opts?: {
         bypass?: boolean;
     }): Promise<MergeChangeRequestOutcome>;
+    /** Start an apply attempt on a request; the token scopes `recordApplyFailure`. */
+    beginApplyAttempt(number: number): number;
+    /** End an attempt `beginApplyAttempt` started, whatever its outcome. */
+    endApplyAttempt(number: number, attempt: number): void;
+    /**
+     * Persist why an apply did not land on the (still open) request, and
+     * announce `change-request-apply-failed` to every session so the author and
+     * other viewers re-read it — not only the user who clicked. Resolves false,
+     * recording and announcing nothing, when `attempt` is no longer the latest
+     * or the request is no longer open.
+     */
+    recordApplyFailure(number: number, failure: {
+        reason: string;
+        kind: ChangeRequestApplyFailureKind;
+        at?: Date;
+    }, user: AuthUser, attempt: number): Promise<boolean>;
+    /**
+     * Merge `sourceBranch` into `targetBranch` directly, authored as `user`,
+     * and publish the target. The agent path for merging branches — it never
+     * lands a change request:
+     *
+     *   - refused (`OpenChangeRequestBlocksMergeError`, naming the request) when
+     *     a change request from `sourceBranch` into `targetBranch` is open; a
+     *     person merges that one in the app. The reverse direction — the target
+     *     into the source, the sync that keeps a draft current — is allowed.
+     *   - refused (`WorkflowDomainError`, `kind: 'protected-merge-target'`,
+     *     status 403, listing the denied paths) when `targetBranch` is protected
+     *     and `user` could not commit every file the merge changes directly to
+     *     it. Decided against the target commit the merge is built on, not a
+     *     workspace `HEAD` that may be behind it.
+     *   - refused (`WorkflowDomainError`, `kind: 'protected-merge-changes-roles'`,
+     *     status 403) when `targetBranch` is protected and the merge would
+     *     change its `roles.yaml` — whoever the caller is. Roles never change
+     *     through a merge; a change request's merge restores the target's copy
+     *     first, and this path refuses instead. Roles are changed in the app.
+     *   - refused (`WorkflowDomainError`, `kind: 'merge-target-busy'`, status
+     *     409) when `targetBranch`'s workspace still holds unshared edits: the
+     *     merge resets it to the published tip, which would discard them.
+     *
+     * Conflicts write nothing and come back as `conflicts-need-resolution`.
+     */
+    mergeBranch(user: AuthUser, sourceBranch: string, targetBranch: string): Promise<MergeBranchOutcome>;
 }
 //# sourceMappingURL=interface.d.ts.map

package/dist/workflow/interface.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"interface.d.ts","sourceRoot":"","sources":["../../src/workflow/interface.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,KAAK,EACV,iBAAiB,EACjB,MAAM,EACN,qBAAqB,EACrB,yBAAyB,EACzB,MAAM,EACN,WAAW,EACX,aAAa,EACb,oBAAoB,EACpB,mBAAmB,EACnB,kBAAkB,EAClB,WAAW,EACX,YAAY,EACZ,QAAQ,EACR,yBAAyB,EACzB,sBAAsB,EACtB,6BAA6B,EAC9B,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,gBAAgB;IAG/B,YAAY,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACtF;;;;OAIG;IACH,YAAY,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACpF;;;;;;;;;OASG;IACH,YAAY,CACV,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,QAAQ,EACd,IAAI,CAAC,EAAE;QAAE,cAAc,CAAC,EAAE,OAAO,CAAA;KAAE,GAClC,OAAO,CAAC,IAAI,CAAC,CAAC;IAQjB,gGAAgG;IAChG,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAGlE;;;;OAIG;IACH,kBAAkB,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvE;;;;;;;;;;OAUG;IACH,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5F,4DAA4D;IAC5D,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnD;;;;;OAKG;IACH,gBAAgB,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtE;;;;OAIG;IACH,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClE;;;;OAIG;IACH,eAAe,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC7E;;;;OAIG;IACH,sBAAsB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAQ/D;;;;;;OAMG;IACH,YAAY,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACvF;;;;;;;;;;;;;;;;;OAiBG;IACH,aAAa,CACX,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,QAAQ,EACd,OAAO,EAAE,MAAM,EACf,SAAS,CAAC,EAAE,MAAM,EAAE,GACnB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC1B,+DAA+D;IAC/D,kBAAkB,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACzF;;;;;;OAMG;IACH,WAAW,CACT,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB;;;OAGG;IACH,gBAAgB,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAClF;;;;;OAKG;IACH,YAAY,CACV,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,MAAM,GACV,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;IAIhE;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,WAAW,CACT,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,QAAQ,EACd,IAAI,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,OAAO,CAAA;KAAE,GAChC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC9B,qEAAqE;IACrE,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpG;;;;;;;;OAQG;IACH,qBAAqB,CACnB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,QAAQ,EACd,OAAO,CAAC,EAAE,MAAM,GACf,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAE1B;;;;;;;;;;;;;;;;OAgBG;IACH,WAAW,CACT,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,QAAQ,GACb,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB;;;;;;;;;;;;OAYG;IACH,mBAAmB,CACjB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,QAAQ,GACb,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB;;;;;;;;;;OAUG;IACH,oBAAoB,CAClB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,QAAQ,GACb,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB;;;;;;;;OAQG;IACH,eAAe,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACrF;;;;;OAKG;IACH,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1D,8EAA8E;IAC9E,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;IAIrF,kBAAkB,CAAC,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;IACzE,sFAAsF;IACtF,4BAA4B,CAC1B,YAAY,EAAE,MAAM,EACpB,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,GACzB,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;IAC5B,uEAAuE;IACvE,yBAAyB,CACvB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,EACb,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,GACzB,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;IAC5B,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;IAChE,sBAAsB,CACpB,MAAM,EAAE,MAAM;IACd;;;;;;;OAOG;IACH,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,GACxF,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAC;IAEvC;;;;;;OAMG;IACH,iBAAiB,CACf,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,QAAQ,EACd,KAAK,EAAE,sBAAsB,GAC5B,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAEhC;;;;OAIG;IACH,gBAAgB,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAGpG,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAC;IAC9D,WAAW,CACT,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,QAAQ,EACd,KAAK,EAAE,6BAA6B,EACpC,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACjC,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC5G,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAIhF,WAAW,CACT,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,QAAQ,EACd,KAAK,EAAE,WAAW,EAAE,EACpB,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,MAAM,GAAG,IAAI,EAC3B,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;IAC3B,aAAa,CACX,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,QAAQ,EACd,KAAK,EAAE,WAAW,EAAE,EACpB,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,MAAM,GAAG,IAAI,EAC3B,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;IAE3B;;;;;;OAMG;IACH,uBAAuB,CACrB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,QAAQ,EACd,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,cAAc,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;IAE1D;;;;OAIG;IACH,uBAAuB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAE1E;;;;;;;;;;OAUG;IACH,sCAAsC,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAE1D;;;;OAIG;IACH,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEnE;;;;OAIG;IACH,mBAAmB,CACjB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,QAAQ,EACd,KAAK,EAAE,kBAAkB,EACzB,YAAY,EAAE,MAAM,GAAG,IAAI,EAC3B,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAEtC;;;;;;;;;;OAUG;IACH,kBAAkB,CAChB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,QAAQ,EACd,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,YAAY,EAAE,EACzB,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EACnB,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,GAC1B,OAAO,CAAC,yBAAyB,CAAC,CAAC;CACvC"}
+{"version":3,"file":"interface.d.ts","sourceRoot":"","sources":["../../src/workflow/interface.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACjD,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,oBAAoB,CAAC;AACxE,OAAO,KAAK,EACV,iBAAiB,EACjB,MAAM,EACN,iBAAiB,EACjB,qBAAqB,EACrB,yBAAyB,EACzB,MAAM,EACN,WAAW,EACX,aAAa,EACb,oBAAoB,EACpB,mBAAmB,EACnB,kBAAkB,EAClB,WAAW,EACX,YAAY,EACZ,QAAQ,EACR,mBAAmB,EACnB,0BAA0B,EAC1B,kBAAkB,EAClB,yBAAyB,EACzB,sBAAsB,EACtB,6BAA6B,EAC9B,MAAM,YAAY,CAAC;AAEpB,MAAM,WAAW,gBAAgB;IAG/B;;;;OAIG;IACH,YAAY,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE;QAAE,UAAU,CAAC,EAAE,OAAO,CAAC;QAAC,WAAW,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAC7G;;;;;;OAMG;IACH,YAAY,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACpF;;;;;;;;;OASG;IACH,YAAY,CACV,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,QAAQ,EACd,IAAI,CAAC,EAAE;QAAE,cAAc,CAAC,EAAE,OAAO,CAAA;KAAE,GAClC,OAAO,CAAC,IAAI,CAAC,CAAC;IAQjB,gGAAgG;IAChG,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAGlE;;;;OAIG;IACH,kBAAkB,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvE;;;;;;;;;;OAUG;IACH,iBAAiB,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5F,4DAA4D;IAC5D,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnD;;;;;OAKG;IACH,gBAAgB,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtE;;;;;;;;;;;;;OAaG;IACH,uBAAuB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACzE;;;;;;;;OAQG;IACH,qBAAqB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7D;;;;OAIG;IACH,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClE;;;;OAIG;IACH,eAAe,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC7E;;;;OAIG;IACH,sBAAsB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAQ/D;;;;;;OAMG;IACH,YAAY,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACvF;;;;;;;;;;;;;;;;;OAiBG;IACH,aAAa,CACX,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,QAAQ,EACd,OAAO,EAAE,MAAM,EACf,SAAS,CAAC,EAAE,MAAM,EAAE,GACnB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC1B,+DAA+D;IAC/D,kBAAkB,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IACzF;;;;;;OAMG;IACH,WAAW,CACT,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,MAAM,CAAC,CAAC;IACnB;;;OAGG;IACH,gBAAgB,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAClF;;;;;OAKG;IACH,YAAY,CACV,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,MAAM,EACZ,GAAG,EAAE,MAAM,GACV,OAAO,CAAC;QAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC,CAAC;IAChE;;;;;OAKG;IACH,eAAe,CACb,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,EAClB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC1B;;;OAGG;IACH,sBAAsB,CACpB,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAY1B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA6CG;IACH,WAAW,CACT,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,QAAQ,EACd,IAAI,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,OAAO,CAAC;QAAC,eAAe,CAAC,EAAE;YAAE,MAAM,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,GACtE,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC9B,qEAAqE;IACrE,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpG;;;;;;;;OAQG;IACH,qBAAqB,CACnB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,QAAQ,EACd,OAAO,CAAC,EAAE,MAAM,GACf,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAE1B;;;;;;;;;;;;;;;;OAgBG;IACH,WAAW,CACT,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,QAAQ,GACb,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB;;;;;;;;;;;;OAYG;IACH,mBAAmB,CACjB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,QAAQ,GACb,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB;;;;;;;;;;OAUG;IACH,oBAAoB,CAClB,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,QAAQ,GACb,OAAO,CAAC,IAAI,CAAC,CAAC;IACjB;;;;;;;;OAQG;IACH,eAAe,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACrF;;;;;OAKG;IACH,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1D,8EAA8E;IAC9E,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC;IAIrF,kBAAkB,CAAC,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;IACzE,sFAAsF;IACtF,4BAA4B,CAC1B,YAAY,EAAE,MAAM,EACpB,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,GACzB,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;IAC5B,uEAAuE;IACvE,yBAAyB,CACvB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,EACb,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,GACzB,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;IAC5B,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;IAChE,sBAAsB,CACpB,MAAM,EAAE,MAAM;IACd;;;;;;;OAOG;IACH,IAAI,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,GACxF,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAC;IAEvC;;;;;;OAMG;IACH,iBAAiB,CACf,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,QAAQ,EACd,KAAK,EAAE,sBAAsB,GAC5B,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAEhC;;;;;;;OAOG;IACH,gBAAgB,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAGpG,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAC;IAC9D,WAAW,CACT,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,QAAQ,EACd,KAAK,EAAE,6BAA6B,EACpC,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,oBAAoB,CAAC,CAAC;IACjC,WAAW,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC5G,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAIhF,WAAW,CACT,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,QAAQ,EACd,KAAK,EAAE,WAAW,EAAE,EACpB,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,MAAM,GAAG,IAAI,EAC3B,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;IAC3B,aAAa,CACX,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,QAAQ,EACd,KAAK,EAAE,WAAW,EAAE,EACpB,OAAO,EAAE,MAAM,EACf,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,MAAM,GAAG,IAAI,EAC3B,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;IAE3B;;;;;;OAMG;IACH,uBAAuB,CACrB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,QAAQ,EACd,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC;QAAE,MAAM,EAAE,OAAO,CAAC;QAAC,cAAc,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC,CAAC;IAE1D;;;;OAIG;IACH,uBAAuB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAE1E;;;;;OAKG;IACH,yBAAyB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAC;IAE1F;;;;;OAKG;IACH,8BAA8B,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,0BAA0B,EAAE,CAAC,CAAC;IAEtG;;;;;;;;;;OAUG;IACH,sCAAsC,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAE1D;;;;OAIG;IACH,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEnE;;;;OAIG;IACH,mBAAmB,CACjB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,QAAQ,EACd,KAAK,EAAE,kBAAkB,EACzB,YAAY,EAAE,MAAM,GAAG,IAAI,EAC3B,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAEtC;;;;;;;;;;OAUG;IACH,kBAAkB,CAChB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,QAAQ,EACd,OAAO,EAAE,MAAM,EACf,SAAS,EAAE,YAAY,EAAE,EACzB,KAAK,EAAE,kBAAkB,EACzB,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EACnB,IAAI,CAAC,EAAE;QAAE,MAAM,CAAC,EAAE,OAAO,CAAA;KAAE,GAC1B,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAEtC,kFAAkF;IAClF,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC;IAE1C,wEAAwE;IACxE,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAEvD;;;;;;OAMG;IACH,kBAAkB,CAChB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,6BAA6B,CAAC;QAAC,EAAE,CAAC,EAAE,IAAI,CAAA;KAAE,EAC3E,IAAI,EAAE,QAAQ,EACd,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,OAAO,CAAC,CAAC;IAEpB;;;;;;;;;;;;;;;;;;;;;;;;OAwBG;IACH,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;CACtG"}

package/dist/workflow/types.d.ts

@@ -104,6 +104,43 @@ export type MergeChangeRequestResult = MergePrResult;
 export type CancelChangeRequestResult = CancelPrResult;
 export type ChangeRequestComment = PrReviewComment;
 export type PostChangeRequestCommentInput = PostPrCommentInput;
+/**
+ * One open change request proposing files under a folder, as a folder delete
+ * lists it. `mayRemove`: the caller may take those files out of it (their own,
+ * they are an admin, or they may write every file it proposes under the
+ * folder); a refusal always says why.
+ */
+export type FolderChangeRequest = {
+    number: number;
+    title: string;
+    authorName: string | null;
+    /** The caller authored it. */
+    mine: boolean;
+    /** KB-repo-relative paths it proposes under the folder. */
+    paths: string[];
+} & ({
+    mayRemove: true;
+} | {
+    mayRemove: false;
+    reason: string;
+});
+/** What removing a folder's files did to one change request. */
+export interface FolderChangeRequestRemoval {
+    number: number;
+    removedPaths: string[];
+    /** The request proposed nothing else, so it was withdrawn. */
+    withdrawn: boolean;
+    /**
+     * Files under the folder it still proposes: added while the removal ran,
+     * so never judged, and left alone.
+     */
+    stillProposed: string[];
+    /**
+     * It proposes nothing now but was kept open, because a save to its branch
+     * was still landing — withdrawing would have deleted that save.
+     */
+    keptForSaves: boolean;
+}
 /**
  * Input for opening a new change request. The workflow auto-merges
  * `targetBranch` into `sourceBranch` as part of opening, so callers don't
@@ -137,4 +174,60 @@ export type MergeChangeRequestOutcome = {
     kind: 'conflicts-need-resolution';
     conflictedPaths: string[];
 };
+/**
+ * What a direct branch-to-branch merge (`mergeBranch`) did: landed as `sha`
+ * on the target (the target's own tip when it already contained the source),
+ * or stopped on conflicts, nothing written.
+ */
+export type MergeBranchOutcome = {
+    kind: 'merged';
+    sha: string;
+} | {
+    kind: 'conflicts-need-resolution';
+    conflictedPaths: string[];
+};
+/**
+ * What a remote sync did to one branch's clone. One entry per branch in the
+ * `POST /api/sync` response, so a pipeline can read exactly which branch
+ * moved, which was already current, and which needs a person.
+ *
+ *  - `updated`     — the clone moved from `from` (null when it had no commits
+ *                    yet) to `to`.
+ *  - `up-to-date`  — origin had nothing new; `to` is the unchanged HEAD.
+ *  - `not-cloned`  — Hexis has no clone of this branch, so there is nothing
+ *                    to refresh (the first visit clones it fresh).
+ *  - `remote-gone` — the branch no longer exists on the host; the stale clone
+ *                    is removed. Not a failure: a deleted branch has nothing
+ *                    to sync.
+ *  - `conflict`    — Hexis-side commits contradict what landed on the host.
+ *                    The clone is untouched; `error` is the message to show
+ *                    and `conflictedPaths` the files a person must reconcile.
+ *  - `error`       — the pull failed for another reason (origin unreachable,
+ *                    credential refused); `error` is the sanitised message.
+ */
+export type BranchSyncOutcome = {
+    branch: string;
+    outcome: 'updated';
+    from: string | null;
+    to: string;
+} | {
+    branch: string;
+    outcome: 'up-to-date';
+    to: string;
+} | {
+    branch: string;
+    outcome: 'not-cloned';
+} | {
+    branch: string;
+    outcome: 'remote-gone';
+} | {
+    branch: string;
+    outcome: 'conflict';
+    conflictedPaths: string[];
+    error: string;
+} | {
+    branch: string;
+    outcome: 'error';
+    error: string;
+};
 //# sourceMappingURL=types.d.ts.map

package/dist/workflow/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/workflow/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EACV,UAAU,EACV,iBAAiB,EACjB,mBAAmB,EACnB,iBAAiB,EAClB,MAAM,iBAAiB,CAAC;AACzB,OAAO,KAAK,EACV,cAAc,EACd,iBAAiB,EACjB,aAAa,EACb,iBAAiB,EACjB,gBAAgB,EAChB,kBAAkB,EAClB,kBAAkB,EAClB,eAAe,EACf,eAAe,EAChB,MAAM,oBAAoB,CAAC;AAI5B,qDAAqD;AACrD,MAAM,MAAM,MAAM,GAAG,UAAU,CAAC;AAEhC;;;;;GAKG;AACH,MAAM,MAAM,qBAAqB,GAAG,iBAAiB,CAAC;AAItD;;;;;;GAMG;AACH,MAAM,MAAM,MAAM,GAAG,iBAAiB,CAAC;AAEvC;;;;;;GAMG;AACH,MAAM,MAAM,WAAW,GAAG,mBAAmB,CAAC;AAI9C;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,QAAQ;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB;;;;;;;OAOG;IACH,IAAI,CAAC,EAAE,MAAM,GAAG,cAAc,CAAC;IAC/B,sDAAsD;IACtD,UAAU,EAAE,MAAM,CAAC;IACnB,gFAAgF;IAChF,eAAe,EAAE,MAAM,CAAC;IACxB,iGAAiG;IACjG,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,MAAM,MAAM,iBAAiB,GACzB;IAAE,QAAQ,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,GAClC;IAAE,QAAQ,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,CAAC;AAIxC;;;;;;;;;GASG;AACH,MAAM,MAAM,aAAa,GAAG,kBAAkB,CAAC;AAC/C,MAAM,MAAM,mBAAmB,GAAG,iBAAiB,CAAC;AACpD,MAAM,MAAM,kBAAkB,GAAG,gBAAgB,CAAC;AAClD,MAAM,MAAM,WAAW,GAAG,eAAe,CAAC;AAE1C,MAAM,MAAM,YAAY,GAAG,iBAAiB,CAAC;AAC7C,MAAM,MAAM,wBAAwB,GAAG,aAAa,CAAC;AACrD,MAAM,MAAM,yBAAyB,GAAG,cAAc,CAAC;AACvD,MAAM,MAAM,oBAAoB,GAAG,eAAe,CAAC;AACnD,MAAM,MAAM,6BAA6B,GAAG,kBAAkB,CAAC;AAE/D;;;;;;;;;GASG;AACH,MAAM,WAAW,sBAAsB;IACrC,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,yBAAyB,GACjC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,wBAAwB,CAAA;CAAE,GACpD;IAAE,IAAI,EAAE,2BAA2B,CAAC;IAAC,eAAe,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/workflow/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EACV,UAAU,EACV,iBAAiB,EACjB,mBAAmB,EACnB,iBAAiB,EAClB,MAAM,iBAAiB,CAAC;AACzB,OAAO,KAAK,EACV,cAAc,EACd,iBAAiB,EACjB,aAAa,EACb,iBAAiB,EACjB,gBAAgB,EAChB,kBAAkB,EAClB,kBAAkB,EAClB,eAAe,EACf,eAAe,EAChB,MAAM,oBAAoB,CAAC;AAI5B,qDAAqD;AACrD,MAAM,MAAM,MAAM,GAAG,UAAU,CAAC;AAEhC;;;;;GAKG;AACH,MAAM,MAAM,qBAAqB,GAAG,iBAAiB,CAAC;AAItD;;;;;;GAMG;AACH,MAAM,MAAM,MAAM,GAAG,iBAAiB,CAAC;AAEvC;;;;;;GAMG;AACH,MAAM,MAAM,WAAW,GAAG,mBAAmB,CAAC;AAI9C;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,QAAQ;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB;;;;;;;OAOG;IACH,IAAI,CAAC,EAAE,MAAM,GAAG,cAAc,CAAC;IAC/B,sDAAsD;IACtD,UAAU,EAAE,MAAM,CAAC;IACnB,gFAAgF;IAChF,eAAe,EAAE,MAAM,CAAC;IACxB,iGAAiG;IACjG,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;GAGG;AACH,MAAM,MAAM,iBAAiB,GACzB;IAAE,QAAQ,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,GAClC;IAAE,QAAQ,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,QAAQ,CAAA;CAAE,CAAC;AAIxC;;;;;;;;;GASG;AACH,MAAM,MAAM,aAAa,GAAG,kBAAkB,CAAC;AAC/C,MAAM,MAAM,mBAAmB,GAAG,iBAAiB,CAAC;AACpD,MAAM,MAAM,kBAAkB,GAAG,gBAAgB,CAAC;AAClD,MAAM,MAAM,WAAW,GAAG,eAAe,CAAC;AAE1C,MAAM,MAAM,YAAY,GAAG,iBAAiB,CAAC;AAC7C,MAAM,MAAM,wBAAwB,GAAG,aAAa,CAAC;AACrD,MAAM,MAAM,yBAAyB,GAAG,cAAc,CAAC;AACvD,MAAM,MAAM,oBAAoB,GAAG,eAAe,CAAC;AACnD,MAAM,MAAM,6BAA6B,GAAG,kBAAkB,CAAC;AAE/D;;;;;GAKG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,8BAA8B;IAC9B,IAAI,EAAE,OAAO,CAAC;IACd,2DAA2D;IAC3D,KAAK,EAAE,MAAM,EAAE,CAAC;CACjB,GAAG,CAAC;IAAE,SAAS,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,SAAS,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAEjE,gEAAgE;AAChE,MAAM,WAAW,0BAA0B;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,8DAA8D;IAC9D,SAAS,EAAE,OAAO,CAAC;IACnB;;;OAGG;IACH,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB;;;OAGG;IACH,YAAY,EAAE,OAAO,CAAC;CACvB;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,sBAAsB;IACrC,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,yBAAyB,GACjC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,wBAAwB,CAAA;CAAE,GACpD;IAAE,IAAI,EAAE,2BAA2B,CAAC;IAAC,eAAe,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AAErE;;;;GAIG;AACH,MAAM,MAAM,kBAAkB,GAC1B;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAC/B;IAAE,IAAI,EAAE,2BAA2B,CAAC;IAAC,eAAe,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AAErE;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,MAAM,iBAAiB,GACzB;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GACvE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,YAAY,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GACrD;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,YAAY,CAAA;CAAE,GACzC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,aAAa,CAAA;CAAE,GAC1C;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,UAAU,CAAC;IAAC,eAAe,EAAE,MAAM,EAAE,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACjF;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC"}

package/dist/workspace/access-verbs.d.ts

@@ -0,0 +1,83 @@
+/**
+ * The access verbs and the ONE dependency graph between them.
+ *
+ * Shared so that everything that folds verbs — the resolver in core-backend,
+ * the eligible lists it serves, and the share dialog in core-frontend that
+ * renders and edits them — reads the same table. A second fold written out by
+ * hand somewhere else is how the sheet comes to show "Owner" for someone the
+ * resolver refuses, or writes a `read:` line under an `owner:` it just granted.
+ *
+ * `read` controls who may VIEW a path. It is default-deny: a path with no
+ * effective grant of any verb is not readable. `write` is editing (and, with
+ * it, approval rights), `download` is saving a copy, `owner` is the contact
+ * point for the node and the right to manage its access.
+ */
+/**
+ * Verbs an `access.md` frontmatter can grant, each a list of principals
+ * optionally prefixed with `deny `. `AccessFile.entries` in the backend is
+ * statically keyed on this union; keep `Verb` and `KNOWN_VERBS` in lockstep.
+ */
+export declare const KNOWN_VERBS: readonly ["read", "write", "download", "owner"];
+export type Verb = (typeof KNOWN_VERBS)[number];
+/**
+ * THE DEPENDENCY GRAPH — what holding each verb presupposes, declared once.
+ * `owner` presupposes `write` and `download`; `write` and `download` each
+ * presuppose `read`; `read` presupposes nothing. Everything about how verbs
+ * fold into one another is DERIVED from this table, in both directions:
+ *
+ *   - a GRANT confers, downwards, every verb the granted one presupposes
+ *     (`sourceVerbsFor`, `effectiveVerbs`): an owner may edit, save and open;
+ *     an editor may open; someone trusted with a copy may open it;
+ *   - a DENIAL strips, upwards, every verb that presupposes the denied one
+ *     (`requiredVerbsFor`): nobody owns what they may not edit, and nobody
+ *     edits or saves what they may not open.
+ *
+ * Neither converse is implied: a `deny write` says nothing about `read`, and a
+ * `read` grant confers no `write`. `write` and `download` are independent of
+ * each other. Add a verb, or change what one presupposes, HERE and nowhere
+ * else; every list and fold below follows.
+ */
+export declare const VERB_REQUIRES: Readonly<Record<Verb, readonly Verb[]>>;
+/**
+ * Verbs whose GRANT confers `verb`, target verb first: `verb` itself, then
+ * every verb that presupposes it, in `KNOWN_VERBS` order.
+ */
+export declare function sourceVerbsFor(verb: Verb): Verb[];
+/**
+ * Verbs whose DENIAL strips `verb`, target verb first: `verb` itself, then
+ * every verb it presupposes, in `KNOWN_VERBS` order.
+ */
+export declare function requiredVerbsFor(verb: Verb): Verb[];
+/**
+ * The verbs in the order a change to a principal's set has to be APPLIED:
+ * broadest first, so every verb comes before the verbs it presupposes (ties in
+ * `KNOWN_VERBS` order). Lowering must start at the top — denying `write` while
+ * an `owner:` grant still stands in the same file is refused as ineffective,
+ * since owner confers write; stripping owner first removes what was conferring
+ * it. Raising reads the same order for the opposite reason: granting `owner`
+ * first satisfies the rest in one line.
+ */
+export declare const VERBS_BROADEST_FIRST: readonly Verb[];
+/** One flag per verb: what a principal holds, or what a form has ticked. */
+export type VerbSet = Record<Verb, boolean>;
+/** A partial set — flags left out read as not held. */
+export type VerbFlags = Partial<Record<Verb, boolean>>;
+/**
+ * The grant fold, as a whole set: what a principal EFFECTIVELY holds given the
+ * verbs they are granted. Each verb is held when it, or any verb that
+ * presupposes it, is in `held`. Idempotent on an already-folded set.
+ */
+export declare function effectiveVerbs(held: VerbFlags): VerbSet;
+/**
+ * True when some OTHER verb in `held` confers `verb` — it is implied, not
+ * chosen, which is what a form renders as checked-and-disabled.
+ */
+export declare function conferredByOthers(held: VerbFlags, verb: Verb): boolean;
+/**
+ * The fewest grant lines that produce `held`: every held verb that no other
+ * held verb confers, broadest first. `{ owner }` is one line; `{ write, read,
+ * download }` is `write` and `download` (read rides on either); `{ read,
+ * download }` is `download` alone. A flag left out is not granted.
+ */
+export declare function minimalGrantVerbs(held: VerbFlags): Verb[];
+//# sourceMappingURL=access-verbs.d.ts.map

package/dist/workspace/access-verbs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-verbs.d.ts","sourceRoot":"","sources":["../../src/workspace/access-verbs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH;;;;GAIG;AACH,eAAO,MAAM,WAAW,iDAAkD,CAAC;AAC3E,MAAM,MAAM,IAAI,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhD;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,SAAS,IAAI,EAAE,CAAC,CAKjE,CAAC;AAcF;;;GAGG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,IAAI,GAAG,IAAI,EAAE,CAEjD;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,IAAI,GAAG,IAAI,EAAE,CAGnD;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,oBAAoB,EAAE,SAAS,IAAI,EAG/C,CAAC;AAEF,4EAA4E;AAC5E,MAAM,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAC5C,uDAAuD;AACvD,MAAM,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;AAEvD;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,SAAS,GAAG,OAAO,CAIvD;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,GAAG,OAAO,CAEtE;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,SAAS,GAAG,IAAI,EAAE,CAEzD"}

package/dist/workspace/access-verbs.js

@@ -0,0 +1,110 @@
+/**
+ * The access verbs and the ONE dependency graph between them.
+ *
+ * Shared so that everything that folds verbs — the resolver in core-backend,
+ * the eligible lists it serves, and the share dialog in core-frontend that
+ * renders and edits them — reads the same table. A second fold written out by
+ * hand somewhere else is how the sheet comes to show "Owner" for someone the
+ * resolver refuses, or writes a `read:` line under an `owner:` it just granted.
+ *
+ * `read` controls who may VIEW a path. It is default-deny: a path with no
+ * effective grant of any verb is not readable. `write` is editing (and, with
+ * it, approval rights), `download` is saving a copy, `owner` is the contact
+ * point for the node and the right to manage its access.
+ */
+/**
+ * Verbs an `access.md` frontmatter can grant, each a list of principals
+ * optionally prefixed with `deny `. `AccessFile.entries` in the backend is
+ * statically keyed on this union; keep `Verb` and `KNOWN_VERBS` in lockstep.
+ */
+export const KNOWN_VERBS = ['read', 'write', 'download', 'owner'];
+/**
+ * THE DEPENDENCY GRAPH — what holding each verb presupposes, declared once.
+ * `owner` presupposes `write` and `download`; `write` and `download` each
+ * presuppose `read`; `read` presupposes nothing. Everything about how verbs
+ * fold into one another is DERIVED from this table, in both directions:
+ *
+ *   - a GRANT confers, downwards, every verb the granted one presupposes
+ *     (`sourceVerbsFor`, `effectiveVerbs`): an owner may edit, save and open;
+ *     an editor may open; someone trusted with a copy may open it;
+ *   - a DENIAL strips, upwards, every verb that presupposes the denied one
+ *     (`requiredVerbsFor`): nobody owns what they may not edit, and nobody
+ *     edits or saves what they may not open.
+ *
+ * Neither converse is implied: a `deny write` says nothing about `read`, and a
+ * `read` grant confers no `write`. `write` and `download` are independent of
+ * each other. Add a verb, or change what one presupposes, HERE and nowhere
+ * else; every list and fold below follows.
+ */
+export const VERB_REQUIRES = {
+    read: [],
+    write: ['read'],
+    download: ['read'],
+    owner: ['write', 'download'],
+};
+/** `verb` and everything it presupposes, transitively. */
+function presupposedBy(verb) {
+    const out = new Set();
+    const visit = (v) => {
+        if (out.has(v))
+            return;
+        out.add(v);
+        for (const dep of VERB_REQUIRES[v])
+            visit(dep);
+    };
+    visit(verb);
+    return out;
+}
+/**
+ * Verbs whose GRANT confers `verb`, target verb first: `verb` itself, then
+ * every verb that presupposes it, in `KNOWN_VERBS` order.
+ */
+export function sourceVerbsFor(verb) {
+    return [verb, ...KNOWN_VERBS.filter((v) => v !== verb && presupposedBy(v).has(verb))];
+}
+/**
+ * Verbs whose DENIAL strips `verb`, target verb first: `verb` itself, then
+ * every verb it presupposes, in `KNOWN_VERBS` order.
+ */
+export function requiredVerbsFor(verb) {
+    const needs = presupposedBy(verb);
+    return [verb, ...KNOWN_VERBS.filter((v) => v !== verb && needs.has(v))];
+}
+/**
+ * The verbs in the order a change to a principal's set has to be APPLIED:
+ * broadest first, so every verb comes before the verbs it presupposes (ties in
+ * `KNOWN_VERBS` order). Lowering must start at the top — denying `write` while
+ * an `owner:` grant still stands in the same file is refused as ineffective,
+ * since owner confers write; stripping owner first removes what was conferring
+ * it. Raising reads the same order for the opposite reason: granting `owner`
+ * first satisfies the rest in one line.
+ */
+export const VERBS_BROADEST_FIRST = [...KNOWN_VERBS].sort((a, b) => presupposedBy(b).size - presupposedBy(a).size || KNOWN_VERBS.indexOf(a) - KNOWN_VERBS.indexOf(b));
+/**
+ * The grant fold, as a whole set: what a principal EFFECTIVELY holds given the
+ * verbs they are granted. Each verb is held when it, or any verb that
+ * presupposes it, is in `held`. Idempotent on an already-folded set.
+ */
+export function effectiveVerbs(held) {
+    const out = {};
+    for (const verb of KNOWN_VERBS)
+        out[verb] = sourceVerbsFor(verb).some((w) => held[w] === true);
+    return out;
+}
+/**
+ * True when some OTHER verb in `held` confers `verb` — it is implied, not
+ * chosen, which is what a form renders as checked-and-disabled.
+ */
+export function conferredByOthers(held, verb) {
+    return sourceVerbsFor(verb).some((w) => w !== verb && held[w] === true);
+}
+/**
+ * The fewest grant lines that produce `held`: every held verb that no other
+ * held verb confers, broadest first. `{ owner }` is one line; `{ write, read,
+ * download }` is `write` and `download` (read rides on either); `{ read,
+ * download }` is `download` alone. A flag left out is not granted.
+ */
+export function minimalGrantVerbs(held) {
+    return VERBS_BROADEST_FIRST.filter((verb) => held[verb] === true && !conferredByOthers(held, verb));
+}
+//# sourceMappingURL=access-verbs.js.map

package/dist/workspace/access-verbs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"access-verbs.js","sourceRoot":"","sources":["../../src/workspace/access-verbs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,CAAU,CAAC;AAG3E;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,aAAa,GAA4C;IACpE,IAAI,EAAE,EAAE;IACR,KAAK,EAAE,CAAC,MAAM,CAAC;IACf,QAAQ,EAAE,CAAC,MAAM,CAAC;IAClB,KAAK,EAAE,CAAC,OAAO,EAAE,UAAU,CAAC;CAC7B,CAAC;AAEF,0DAA0D;AAC1D,SAAS,aAAa,CAAC,IAAU;IAC/B,MAAM,GAAG,GAAG,IAAI,GAAG,EAAQ,CAAC;IAC5B,MAAM,KAAK,GAAG,CAAC,CAAO,EAAE,EAAE;QACxB,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,OAAO;QACvB,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACX,KAAK,MAAM,GAAG,IAAI,aAAa,CAAC,CAAC,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IACjD,CAAC,CAAC;IACF,KAAK,CAAC,IAAI,CAAC,CAAC;IACZ,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,IAAU;IACvC,OAAO,CAAC,IAAI,EAAE,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,aAAa,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACxF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAU;IACzC,MAAM,KAAK,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IAClC,OAAO,CAAC,IAAI,EAAE,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1E,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAoB,CAAC,GAAG,WAAW,CAAC,CAAC,IAAI,CACxE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,CACnG,CAAC;AAOF;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,IAAe;IAC5C,MAAM,GAAG,GAAG,EAAa,CAAC;IAC1B,KAAK,MAAM,IAAI,IAAI,WAAW;QAAE,GAAG,CAAC,IAAI,CAAC,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;IAC/F,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAe,EAAE,IAAU;IAC3D,OAAO,cAAc,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC;AAC1E,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAe;IAC/C,OAAO,oBAAoB,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AACtG,CAAC"}

package/dist/workspace/agent-preamble.d.ts

@@ -0,0 +1,33 @@
+/**
+ * The rules about the deployment preamble's TEXT that both sides need to
+ * agree on: the file it lives in, the caps it is cut at, and what counts as a
+ * private comment inside it.
+ *
+ * These lived in the backend composer and were mirrored by hand in the
+ * frontend editor, whose own comment said so. The two are not free to differ:
+ * the editor decides what an admin is shown and what it writes back, the
+ * composer decides what agents receive, and a drift between them shows the
+ * admin one description while agents get another.
+ *
+ * Pure: no IO, no clock, no platform assumptions.
+ */
+/** The repository-root file an admin edits. */
+export declare const PREAMBLE_FILE = "mcp-description.md";
+/** UTF-16 units of preamble sent on the handshake before the marker replaces the rest. */
+export declare const PREAMBLE_CAP = 6000;
+/** UTF-16 units of the whole tool prefix (fixed line included). */
+export declare const TOOL_PREFIX_CAP = 300;
+/**
+ * Remove every `<!-- … -->` block.
+ *
+ * A `<!--` that is never closed takes the rest of the text with it and is
+ * reported, so a caller can warn: that is the fail-closed half of the rule,
+ * and it is why an admin's private note cannot leak through the likeliest
+ * editing slip. The editor strips the same blocks to decide what to show, and
+ * closes an unterminated one when it writes back.
+ */
+export declare function stripHtmlComments(text: string): {
+    text: string;
+    unterminated: boolean;
+};
+//# sourceMappingURL=agent-preamble.d.ts.map

package/dist/workspace/agent-preamble.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-preamble.d.ts","sourceRoot":"","sources":["../../src/workspace/agent-preamble.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,+CAA+C;AAC/C,eAAO,MAAM,aAAa,uBAAuB,CAAC;AAElD,0FAA0F;AAC1F,eAAO,MAAM,YAAY,OAAQ,CAAC;AAElC,mEAAmE;AACnE,eAAO,MAAM,eAAe,MAAM,CAAC;AAEnC;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,OAAO,CAAA;CAAE,CAcvF"}

package/dist/workspace/agent-preamble.js

@@ -0,0 +1,45 @@
+/**
+ * The rules about the deployment preamble's TEXT that both sides need to
+ * agree on: the file it lives in, the caps it is cut at, and what counts as a
+ * private comment inside it.
+ *
+ * These lived in the backend composer and were mirrored by hand in the
+ * frontend editor, whose own comment said so. The two are not free to differ:
+ * the editor decides what an admin is shown and what it writes back, the
+ * composer decides what agents receive, and a drift between them shows the
+ * admin one description while agents get another.
+ *
+ * Pure: no IO, no clock, no platform assumptions.
+ */
+/** The repository-root file an admin edits. */
+export const PREAMBLE_FILE = 'mcp-description.md';
+/** UTF-16 units of preamble sent on the handshake before the marker replaces the rest. */
+export const PREAMBLE_CAP = 6_000;
+/** UTF-16 units of the whole tool prefix (fixed line included). */
+export const TOOL_PREFIX_CAP = 300;
+/**
+ * Remove every `<!-- … -->` block.
+ *
+ * A `<!--` that is never closed takes the rest of the text with it and is
+ * reported, so a caller can warn: that is the fail-closed half of the rule,
+ * and it is why an admin's private note cannot leak through the likeliest
+ * editing slip. The editor strips the same blocks to decide what to show, and
+ * closes an unterminated one when it writes back.
+ */
+export function stripHtmlComments(text) {
+    let out = '';
+    let from = 0;
+    for (;;) {
+        const open = text.indexOf('<!--', from);
+        if (open === -1) {
+            out += text.slice(from);
+            return { text: out, unterminated: false };
+        }
+        out += text.slice(from, open);
+        const close = text.indexOf('-->', open + 4);
+        if (close === -1)
+            return { text: out, unterminated: true };
+        from = close + 3;
+    }
+}
+//# sourceMappingURL=agent-preamble.js.map

package/dist/workspace/agent-preamble.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-preamble.js","sourceRoot":"","sources":["../../src/workspace/agent-preamble.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,+CAA+C;AAC/C,MAAM,CAAC,MAAM,aAAa,GAAG,oBAAoB,CAAC;AAElD,0FAA0F;AAC1F,MAAM,CAAC,MAAM,YAAY,GAAG,KAAK,CAAC;AAElC,mEAAmE;AACnE,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,CAAC;AAEnC;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,SAAS,CAAC;QACR,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QACxC,IAAI,IAAI,KAAK,CAAC,CAAC,EAAE,CAAC;YAChB,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACxB,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;QAC5C,CAAC;QACD,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC;QAC5C,IAAI,KAAK,KAAK,CAAC,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;QAC3D,IAAI,GAAG,KAAK,GAAG,CAAC,CAAC;IACnB,CAAC;AACH,CAAC"}