@chipschat/protocol 0.0.0-stage → 1.0.0

package/dist/src/names.d.ts

@@ -0,0 +1,58 @@
+/**
+ * When two names are one @-name, and the free name an agent is given (ADR 0091).
+ *
+ * A participant's whole-name handle is its name with the spaces left out, case aside (ADR 0081),
+ * so two names clash when that is the same: "Open Claw", "OpenClaw" and "openclaw". People are
+ * refused a name that clashes; an agent is numbered, "OpenClaw", "OpenClaw 2", "OpenClaw 3", so
+ * its @-name is `@OpenClaw2`. The server names agents with these, and the conformance fake and the
+ * clients read the same rule.
+ */
+/** The longest name a participant is called, a person's or an agent's. */
+export declare const MAX_NAME = 120;
+/**
+ * What a workspace's first person is called until they name themselves: what `chips serve` and
+ * the demo give them. Nobody they invite should read "You invited you" (JR-17): the join card says
+ * nobody's name for it, and You asks them for one before they invite anybody.
+ */
+export declare const FIRST_PERSON_NAME = "You";
+/** Why an agent can't be called Main or You. */
+export declare const NOT_AN_AGENT_WORDS = "An agent can't be called Main or You: Chips uses those words for the Main agent and for you.";
+/** Whether a name is Main or You as an @-name, which no agent may be called. */
+export declare function notAnAgentName(name: string): boolean;
+/** Why a name can't have a hidden character. */
+export declare const HIDDEN_CHARACTER_WORDS = "A name can't have hidden characters in it, such as a zero-width space or a mark that changes the text's direction.";
+/** Why a word of a name can't mix alphabets. */
+export declare const MIXED_LETTERS_WORDS = "A name can't mix Latin, Cyrillic and Greek letters in one word, since they can look the same.";
+/**
+ * Why a name a person typed, for themselves, an agent or a workspace, can't be had as it is, or
+ * nothing (SEC-33): a character nobody sees, which could make it pass for a name it isn't or turn
+ * the words after it around, or a word that mixes alphabets whose letters look alike.
+ */
+export declare function nameProblem(name: string): string | undefined;
+/**
+ * A name a harness or a device gave itself, with what nobody sees taken out (SEC-33). It isn't
+ * refused, since nobody typed it to be told; its clash is judged as it reads.
+ */
+export declare function withoutHidden(name: string): string;
+/**
+ * What a name is as an @-name: lowercased, its spaces left out, and what a reader sees, not what
+ * the characters are (SEC-33). Full-width and mathematical letters fold to plain ones, a hidden
+ * character counts for nothing, and a Cyrillic or Greek letter that looks Latin is that Latin
+ * letter, so "\u0410rjun", "Ar\u200bjun" and "\uff21rjun" clash with Arjun.
+ */
+export declare function clashKey(name: string): string;
+/**
+ * Whether a name is `base` or `base` numbered from 2: "OpenClaw 3" is a form of "OpenClaw". Case
+ * and spaces aside, as a clash is.
+ */
+export declare function isFormOf(name: string, base: string): boolean;
+/**
+ * The name an agent is given when it asks for `wanted`, beside the names `taken` (clash keys of
+ * everybody else who counts). It keeps `current` when that is `wanted`, or a numbered form of it,
+ * and still free, so a number never moves because a lower one came free. Otherwise `wanted` when
+ * it is free, else the smallest free number after it: "OpenClaw 2". A number at the end of
+ * `wanted` is the family's only when the name before it is taken, so "OpenClaw 2" beside an
+ * "OpenClaw" comes out "OpenClaw 3", and "India trip 2026" is a name of its own.
+ */
+export declare function freeAgentName(wanted: string, taken: ReadonlySet<string>, current?: string): string;
+//# sourceMappingURL=names.d.ts.map

package/dist/src/names.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"names.d.ts","sourceRoot":"","sources":["../../src/names.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,0EAA0E;AAC1E,eAAO,MAAM,QAAQ,MAAM,CAAC;AAE5B;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,QAAQ,CAAC;AASvC,gDAAgD;AAChD,eAAO,MAAM,kBAAkB,iGACiE,CAAC;AAEjG,gFAAgF;AAChF,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAEpD;AA0FD,gDAAgD;AAChD,eAAO,MAAM,sBAAsB,uHACmF,CAAC;AAEvH,gDAAgD;AAChD,eAAO,MAAM,mBAAmB,kGACiE,CAAC;AASlG;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAK5D;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAGlD;AAED;;;;;GAKG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAO7C;AAKD;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAI5D;AAQD;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAC3B,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,EAC1B,OAAO,CAAC,EAAE,MAAM,GACf,MAAM,CAYR"}

package/dist/src/names.js

@@ -0,0 +1,192 @@
+/**
+ * When two names are one @-name, and the free name an agent is given (ADR 0091).
+ *
+ * A participant's whole-name handle is its name with the spaces left out, case aside (ADR 0081),
+ * so two names clash when that is the same: "Open Claw", "OpenClaw" and "openclaw". People are
+ * refused a name that clashes; an agent is numbered, "OpenClaw", "OpenClaw 2", "OpenClaw 3", so
+ * its @-name is `@OpenClaw2`. The server names agents with these, and the conformance fake and the
+ * clients read the same rule.
+ */
+/** The longest name a participant is called, a person's or an agent's. */
+export const MAX_NAME = 120;
+/**
+ * What a workspace's first person is called until they name themselves: what `chips serve` and
+ * the demo give them. Nobody they invite should read "You invited you" (JR-17): the join card says
+ * nobody's name for it, and You asks them for one before they invite anybody.
+ */
+export const FIRST_PERSON_NAME = "You";
+/**
+ * What an agent can't be called (SEC-33): the word on the Main agent's tag, and the word a person
+ * reads in place of their own name. An agent asking for one is numbered, "Main 2", as one asking
+ * for a name somebody has; a person renaming one to it is told why not.
+ */
+const NOT_AN_AGENT = new Set(["main", "you"]);
+/** Why an agent can't be called Main or You. */
+export const NOT_AN_AGENT_WORDS = "An agent can't be called Main or You: Chips uses those words for the Main agent and for you.";
+/** Whether a name is Main or You as an @-name, which no agent may be called. */
+export function notAnAgentName(name) {
+    return NOT_AN_AGENT.has(clashKey(name));
+}
+/**
+ * The Cyrillic and Greek letters a reader takes for Latin ones, under the Latin letter they look
+ * like (SEC-33). A name in them is the Latin name for a clash, so "\u0410rjun" with a Cyrillic А is
+ * Arjun's. Not all of Unicode's confusables: the letters a name borrows to pass for somebody, with
+ * NFKC folding the full-width and mathematical ones before.
+ */
+const LOOK_LIKE = {
+    A: "\u0410\u0391", // Cyrillic А, Greek Α
+    B: "\u0412\u0392", // Cyrillic В, Greek Β
+    C: "\u0421", // Cyrillic С
+    E: "\u0415\u0395", // Cyrillic Е, Greek Ε
+    H: "\u041d\u0397", // Cyrillic Н, Greek Η
+    I: "\u0406\u04c0\u0399", // Cyrillic І and Ӏ, Greek Ι
+    J: "\u0408", // Cyrillic Ј
+    K: "\u041a\u039a", // Cyrillic К, Greek Κ
+    M: "\u041c\u039c", // Cyrillic М, Greek Μ
+    N: "\u039d", // Greek Ν
+    O: "\u041e\u039f", // Cyrillic О, Greek Ο
+    P: "\u0420\u03a1", // Cyrillic Р, Greek Ρ
+    Q: "\u051a", // Cyrillic Ԛ
+    S: "\u0405", // Cyrillic Ѕ
+    T: "\u0422\u03a4", // Cyrillic Т, Greek Τ
+    W: "\u051c", // Cyrillic Ԝ
+    X: "\u0425\u03a7", // Cyrillic Х, Greek Χ
+    Y: "\u0423\u04ae\u03a5", // Cyrillic У and Ү, Greek Υ
+    Z: "\u0396", // Greek Ζ
+    a: "\u0430\u03b1", // Cyrillic а, Greek α
+    c: "\u0441", // Cyrillic с
+    d: "\u0501", // Cyrillic ԁ
+    e: "\u0435", // Cyrillic е
+    h: "\u04bb", // Cyrillic һ
+    i: "\u0456\u03b9\u0131", // Cyrillic і, Greek ι, Latin dotless ı
+    j: "\u0458", // Cyrillic ј
+    k: "\u03ba", // Greek κ
+    l: "\u04cf", // Cyrillic ӏ
+    o: "\u043e\u03bf", // Cyrillic о, Greek ο
+    p: "\u0440\u03c1", // Cyrillic р, Greek ρ
+    q: "\u051b", // Cyrillic ԛ
+    s: "\u0455", // Cyrillic ѕ
+    u: "\u03c5", // Greek υ
+    v: "\u03bd", // Greek ν
+    w: "\u051d", // Cyrillic ԝ
+    x: "\u0445\u03c7", // Cyrillic х, Greek χ
+    y: "\u0443\u04af", // Cyrillic у and ү
+};
+const LATIN_OF = new Map(Object.entries(LOOK_LIKE).flatMap(([latin, others]) => [...others].map((other) => [other, latin])));
+/**
+ * What a reader doesn't see (SEC-33): control and format characters (zero-width spaces and
+ * joiners, text-direction marks, a soft hyphen), the joiner that combines graphemes, and the blank
+ * letters of Hangul and Braille.
+ */
+const HIDDEN = "\\p{Cc}\\p{Cf}\\u034f\\u115f\\u1160\\u3164\\uffa0\\u2800";
+/** Every unseen character, and the variation selectors an emoji is typed with, for a clash. */
+const UNSEEN = new RegExp(`[${HIDDEN}\\ufe00-\\ufe0f\\u{e0100}-\\u{e01ef}]`, "gu");
+/** One hidden character. */
+const HIDDEN_ONE = new RegExp(`[${HIDDEN}]`, "u");
+/** The zero-width non-joiner and joiner, which `hiddenAt` judges by what is either side. */
+const JOINER = /^[\u200c\u200d]$/u;
+/** A Latin, Cyrillic or Greek letter, a digit or a space: nothing a joiner shapes. */
+const PLAIN = /[\p{Script=Latin}\p{Script=Cyrillic}\p{Script=Greek}\p{Nd}\s]/u;
+/**
+ * Whether the character at `i` is one a reader can't account for. A joiner between two emoji makes
+ * one, "\u{1f469}\u200d\u{1f4bb}", and in Persian or an Indian script it shapes the letters beside it, so there it
+ * counts as seen; at an end, or beside a plain letter, a digit, a space or another hidden
+ * character, it is hidden.
+ */
+function hiddenAt(chars, i) {
+    const each = chars[i];
+    if (!HIDDEN_ONE.test(each))
+        return false;
+    if (!JOINER.test(each))
+        return true;
+    const before = chars[i - 1];
+    const after = chars[i + 1];
+    const bare = (side) => side === undefined || PLAIN.test(side) || HIDDEN_ONE.test(side);
+    return bare(before) || bare(after);
+}
+/** Why a name can't have a hidden character. */
+export const HIDDEN_CHARACTER_WORDS = "A name can't have hidden characters in it, such as a zero-width space or a mark that changes the text's direction.";
+/** Why a word of a name can't mix alphabets. */
+export const MIXED_LETTERS_WORDS = "A name can't mix Latin, Cyrillic and Greek letters in one word, since they can look the same.";
+const ALPHABETS = [/\p{Script=Latin}/u, /\p{Script=Cyrillic}/u, /\p{Script=Greek}/u];
+/** Whether a word holds letters of two of Latin, Cyrillic and Greek: "\u0410rjun" with a Cyrillic А. */
+function mixesAlphabets(word) {
+    return ALPHABETS.filter((alphabet) => alphabet.test(word)).length > 1;
+}
+/**
+ * Why a name a person typed, for themselves, an agent or a workspace, can't be had as it is, or
+ * nothing (SEC-33): a character nobody sees, which could make it pass for a name it isn't or turn
+ * the words after it around, or a word that mixes alphabets whose letters look alike.
+ */
+export function nameProblem(name) {
+    const chars = [...name];
+    if (chars.some((_, i) => hiddenAt(chars, i)))
+        return HIDDEN_CHARACTER_WORDS;
+    if (name.split(/\s+/).some(mixesAlphabets))
+        return MIXED_LETTERS_WORDS;
+    return undefined;
+}
+/**
+ * A name a harness or a device gave itself, with what nobody sees taken out (SEC-33). It isn't
+ * refused, since nobody typed it to be told; its clash is judged as it reads.
+ */
+export function withoutHidden(name) {
+    const chars = [...name];
+    return chars.filter((_, i) => !hiddenAt(chars, i)).join("");
+}
+/**
+ * What a name is as an @-name: lowercased, its spaces left out, and what a reader sees, not what
+ * the characters are (SEC-33). Full-width and mathematical letters fold to plain ones, a hidden
+ * character counts for nothing, and a Cyrillic or Greek letter that looks Latin is that Latin
+ * letter, so "\u0410rjun", "Ar\u200bjun" and "\uff21rjun" clash with Arjun.
+ */
+export function clashKey(name) {
+    const seen = name.normalize("NFKC").replace(UNSEEN, "");
+    return [...seen]
+        .map((each) => LATIN_OF.get(each) ?? each)
+        .join("")
+        .toLowerCase()
+        .replace(/\s+/g, "");
+}
+/** A name ending in a space and a number: the name before it, and the number. */
+const NUMBERED = /^(.*\S)\s+([1-9]\d*)$/;
+/**
+ * Whether a name is `base` or `base` numbered from 2: "OpenClaw 3" is a form of "OpenClaw". Case
+ * and spaces aside, as a clash is.
+ */
+export function isFormOf(name, base) {
+    if (clashKey(name) === clashKey(base))
+        return true;
+    const parts = NUMBERED.exec(name.trim());
+    return parts !== null && parts[2] !== "1" && clashKey(parts[1]) === clashKey(base);
+}
+/** `family` with `n` after it, cut so the whole is no longer than a name may be. */
+function numbered(family, n) {
+    const suffix = ` ${n}`;
+    return `${family.slice(0, MAX_NAME - suffix.length).trimEnd()}${suffix}`;
+}
+/**
+ * The name an agent is given when it asks for `wanted`, beside the names `taken` (clash keys of
+ * everybody else who counts). It keeps `current` when that is `wanted`, or a numbered form of it,
+ * and still free, so a number never moves because a lower one came free. Otherwise `wanted` when
+ * it is free, else the smallest free number after it: "OpenClaw 2". A number at the end of
+ * `wanted` is the family's only when the name before it is taken, so "OpenClaw 2" beside an
+ * "OpenClaw" comes out "OpenClaw 3", and "India trip 2026" is a name of its own.
+ */
+export function freeAgentName(wanted, taken, current) {
+    const free = (name) => !taken.has(clashKey(name)) && !notAnAgentName(name);
+    const parts = NUMBERED.exec(wanted);
+    const family = parts !== null && !free(parts[1]) ? parts[1] : wanted;
+    if (current !== undefined && free(current)) {
+        if (isFormOf(current, wanted) || isFormOf(current, family))
+            return current;
+    }
+    if (free(wanted))
+        return wanted;
+    for (let n = 2;; n += 1) {
+        const name = numbered(family, n);
+        if (free(name))
+            return name;
+    }
+}
+//# sourceMappingURL=names.js.map

package/dist/src/names.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"names.js","sourceRoot":"","sources":["../../src/names.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,0EAA0E;AAC1E,MAAM,CAAC,MAAM,QAAQ,GAAG,GAAG,CAAC;AAE5B;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,CAAC;AAEvC;;;;GAIG;AACH,MAAM,YAAY,GAAwB,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;AAEnE,gDAAgD;AAChD,MAAM,CAAC,MAAM,kBAAkB,GAC7B,8FAA8F,CAAC;AAEjG,gFAAgF;AAChF,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,OAAO,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;AAC1C,CAAC;AAED;;;;;GAKG;AACH,MAAM,SAAS,GAAqC;IAClD,CAAC,EAAE,cAAc,EAAE,sBAAsB;IACzC,CAAC,EAAE,cAAc,EAAE,sBAAsB;IACzC,CAAC,EAAE,QAAQ,EAAE,aAAa;IAC1B,CAAC,EAAE,cAAc,EAAE,sBAAsB;IACzC,CAAC,EAAE,cAAc,EAAE,sBAAsB;IACzC,CAAC,EAAE,oBAAoB,EAAE,4BAA4B;IACrD,CAAC,EAAE,QAAQ,EAAE,aAAa;IAC1B,CAAC,EAAE,cAAc,EAAE,sBAAsB;IACzC,CAAC,EAAE,cAAc,EAAE,sBAAsB;IACzC,CAAC,EAAE,QAAQ,EAAE,UAAU;IACvB,CAAC,EAAE,cAAc,EAAE,sBAAsB;IACzC,CAAC,EAAE,cAAc,EAAE,sBAAsB;IACzC,CAAC,EAAE,QAAQ,EAAE,aAAa;IAC1B,CAAC,EAAE,QAAQ,EAAE,aAAa;IAC1B,CAAC,EAAE,cAAc,EAAE,sBAAsB;IACzC,CAAC,EAAE,QAAQ,EAAE,aAAa;IAC1B,CAAC,EAAE,cAAc,EAAE,sBAAsB;IACzC,CAAC,EAAE,oBAAoB,EAAE,4BAA4B;IACrD,CAAC,EAAE,QAAQ,EAAE,UAAU;IACvB,CAAC,EAAE,cAAc,EAAE,sBAAsB;IACzC,CAAC,EAAE,QAAQ,EAAE,aAAa;IAC1B,CAAC,EAAE,QAAQ,EAAE,aAAa;IAC1B,CAAC,EAAE,QAAQ,EAAE,aAAa;IAC1B,CAAC,EAAE,QAAQ,EAAE,aAAa;IAC1B,CAAC,EAAE,oBAAoB,EAAE,uCAAuC;IAChE,CAAC,EAAE,QAAQ,EAAE,aAAa;IAC1B,CAAC,EAAE,QAAQ,EAAE,UAAU;IACvB,CAAC,EAAE,QAAQ,EAAE,aAAa;IAC1B,CAAC,EAAE,cAAc,EAAE,sBAAsB;IACzC,CAAC,EAAE,cAAc,EAAE,sBAAsB;IACzC,CAAC,EAAE,QAAQ,EAAE,aAAa;IAC1B,CAAC,EAAE,QAAQ,EAAE,aAAa;IAC1B,CAAC,EAAE,QAAQ,EAAE,UAAU;IACvB,CAAC,EAAE,QAAQ,EAAE,UAAU;IACvB,CAAC,EAAE,QAAQ,EAAE,aAAa;IAC1B,CAAC,EAAE,cAAc,EAAE,sBAAsB;IACzC,CAAC,EAAE,cAAc,EAAE,mBAAmB;CACvC,CAAC;AAEF,MAAM,QAAQ,GAAgC,IAAI,GAAG,CACnD,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,EAAE,EAAE,CACpD,CAAC,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,CAAU,CAAC,CACpD,CACF,CAAC;AAEF;;;;GAIG;AACH,MAAM,MAAM,GAAG,0DAA0D,CAAC;AAE1E,+FAA+F;AAC/F,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,MAAM,uCAAuC,EAAE,IAAI,CAAC,CAAC;AAEnF,4BAA4B;AAC5B,MAAM,UAAU,GAAG,IAAI,MAAM,CAAC,IAAI,MAAM,GAAG,EAAE,GAAG,CAAC,CAAC;AAElD,4FAA4F;AAC5F,MAAM,MAAM,GAAG,mBAAmB,CAAC;AAEnC,sFAAsF;AACtF,MAAM,KAAK,GAAG,gEAAgE,CAAC;AAE/E;;;;;GAKG;AACH,SAAS,QAAQ,CAAC,KAAwB,EAAE,CAAS;IACnD,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAW,CAAC;IAChC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACzC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,MAAM,IAAI,GAAG,CAAC,IAAwB,EAAE,EAAE,CACxC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClE,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;AACrC,CAAC;AAED,gDAAgD;AAChD,MAAM,CAAC,MAAM,sBAAsB,GACjC,oHAAoH,CAAC;AAEvH,gDAAgD;AAChD,MAAM,CAAC,MAAM,mBAAmB,GAC9B,+FAA+F,CAAC;AAElG,MAAM,SAAS,GAAG,CAAC,mBAAmB,EAAE,sBAAsB,EAAE,mBAAmB,CAAC,CAAC;AAErF,wGAAwG;AACxG,SAAS,cAAc,CAAC,IAAY;IAClC,OAAO,SAAS,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;AACxE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IACxB,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;QAAE,OAAO,sBAAsB,CAAC;IAC5E,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC;QAAE,OAAO,mBAAmB,CAAC;IACvE,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY;IACxC,MAAM,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC;IACxB,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC9D,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACxD,OAAO,CAAC,GAAG,IAAI,CAAC;SACb,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC;SACzC,IAAI,CAAC,EAAE,CAAC;SACR,WAAW,EAAE;SACb,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACzB,CAAC;AAED,iFAAiF;AACjF,MAAM,QAAQ,GAAG,uBAAuB,CAAC;AAEzC;;;GAGG;AACH,MAAM,UAAU,QAAQ,CAAC,IAAY,EAAE,IAAY;IACjD,IAAI,QAAQ,CAAC,IAAI,CAAC,KAAK,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnD,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IACzC,OAAO,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAW,CAAC,KAAK,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC/F,CAAC;AAED,oFAAoF;AACpF,SAAS,QAAQ,CAAC,MAAc,EAAE,CAAS;IACzC,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAC;IACvB,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,GAAG,MAAM,EAAE,CAAC;AAC3E,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,aAAa,CAC3B,MAAc,EACd,KAA0B,EAC1B,OAAgB;IAEhB,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;IACnF,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,KAAK,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAW,CAAC,CAAC,CAAC,CAAE,KAAK,CAAC,CAAC,CAAY,CAAC,CAAC,CAAC,MAAM,CAAC;IAC3F,IAAI,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3C,IAAI,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;YAAE,OAAO,OAAO,CAAC;IAC7E,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC;IAChC,KAAK,IAAI,CAAC,GAAG,CAAC,GAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACjC,IAAI,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IAC9B,CAAC;AACH,CAAC"}

package/dist/src/no-reply.d.ts

@@ -0,0 +1,17 @@
+/**
+ * How an agent says it has nothing to say (ADR 0105): a post whose words are `NO_REPLY` and nothing
+ * else, the word OpenClaw's own agents already answer with. Chips records it as `turn.passed`, not
+ * as a message, so nobody is shown it and no agent is handed it; and a run that ends on it draws
+ * no line in the room. The server, the conformance fake and the client read it with one rule.
+ */
+/** The word itself. */
+export declare const NO_REPLY = "NO_REPLY";
+/** Whether words say only that there is nothing to say. */
+export declare function isNoReply(text: unknown): boolean;
+/**
+ * An agent's post that says only `NO_REPLY` made into its turn passed, in place: `turn.passed`,
+ * keeping its room, its run and what it answered. A person's words are theirs, whatever they are,
+ * and a post with files says something; both are left as they are. True when it was made one.
+ */
+export declare function passIfNothingSaid(event: Record<string, unknown>): boolean;
+//# sourceMappingURL=no-reply.d.ts.map

package/dist/src/no-reply.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-reply.d.ts","sourceRoot":"","sources":["../../src/no-reply.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,uBAAuB;AACvB,eAAO,MAAM,QAAQ,aAAa,CAAC;AAKnC,2DAA2D;AAC3D,wBAAgB,SAAS,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAEhD;AAgBD;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAUzE"}

package/dist/src/no-reply.js

@@ -0,0 +1,48 @@
+/**
+ * How an agent says it has nothing to say (ADR 0105): a post whose words are `NO_REPLY` and nothing
+ * else, the word OpenClaw's own agents already answer with. Chips records it as `turn.passed`, not
+ * as a message, so nobody is shown it and no agent is handed it; and a run that ends on it draws
+ * no line in the room. The server, the conformance fake and the client read it with one rule.
+ */
+/** The word itself. */
+export const NO_REPLY = "NO_REPLY";
+/** `NO_REPLY` alone, as a model writes it: in backticks, bold or quotes, or with a full stop. */
+const ALONE = /^[\s`*_"'“”]*NO_REPLY[\s`*_"'“”.!]*$/;
+/** Whether words say only that there is nothing to say. */
+export function isNoReply(text) {
+    return typeof text === "string" && ALONE.test(text);
+}
+/** What a passed turn keeps of the post it was: the envelope, and what it was answering. */
+const PASSED_KEEPS = new Set([
+    "v",
+    "type",
+    "id",
+    "ts",
+    "workspace_id",
+    "space_id",
+    "run_id",
+    "actor",
+    "idempotency_key",
+    "reply_to",
+]);
+/**
+ * An agent's post that says only `NO_REPLY` made into its turn passed, in place: `turn.passed`,
+ * keeping its room, its run and what it answered. A person's words are theirs, whatever they are,
+ * and a post with files says something; both are left as they are. True when it was made one.
+ */
+export function passIfNothingSaid(event) {
+    if (event["type"] !== "message.post" || !isNoReply(event["text"]))
+        return false;
+    const actor = event["actor"];
+    if (actor?.kind === "person" || actor?.kind === "system" || actor?.kind === undefined)
+        return false;
+    const files = [event["upload_ids"], event["attachments"]];
+    if (files.some((each) => Array.isArray(each) && each.length > 0))
+        return false;
+    for (const key of Object.keys(event))
+        if (!PASSED_KEEPS.has(key))
+            delete event[key];
+    event["type"] = "turn.passed";
+    return true;
+}
+//# sourceMappingURL=no-reply.js.map

package/dist/src/no-reply.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"no-reply.js","sourceRoot":"","sources":["../../src/no-reply.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,uBAAuB;AACvB,MAAM,CAAC,MAAM,QAAQ,GAAG,UAAU,CAAC;AAEnC,iGAAiG;AACjG,MAAM,KAAK,GAAG,sCAAsC,CAAC;AAErD,2DAA2D;AAC3D,MAAM,UAAU,SAAS,CAAC,IAAa;IACrC,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACtD,CAAC;AAED,4FAA4F;AAC5F,MAAM,YAAY,GAAwB,IAAI,GAAG,CAAC;IAChD,GAAG;IACH,MAAM;IACN,IAAI;IACJ,IAAI;IACJ,cAAc;IACd,UAAU;IACV,QAAQ;IACR,OAAO;IACP,iBAAiB;IACjB,UAAU;CACX,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAA8B;IAC9D,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,cAAc,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAChF,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAA4C,CAAC;IACxE,IAAI,KAAK,EAAE,IAAI,KAAK,QAAQ,IAAI,KAAK,EAAE,IAAI,KAAK,QAAQ,IAAI,KAAK,EAAE,IAAI,KAAK,SAAS;QACnF,OAAO,KAAK,CAAC;IACf,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC;IAC1D,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC/E,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC;IACpF,KAAK,CAAC,MAAM,CAAC,GAAG,aAAa,CAAC;IAC9B,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/src/notifications.d.ts

@@ -0,0 +1,81 @@
+/**
+ * A person's notification settings (M5.6): the three tiers of attention (blueprint: Decide now
+ * breaks through, Review today is batched hourly, FYI is a daily digest), quiet hours, a word
+ * per harness, and one per room. Held on the server, per person, private to them; read and written over
+ * `/v1/me/notifications`, and applied on whichever device raises the banner.
+ */
+import { z } from "zod";
+/** A time of day, `HH:MM`, in the person's own clock. */
+export declare const timeOfDay: z.ZodString;
+export declare const quietHours: z.ZodObject<{
+    from: z.ZodString;
+    to: z.ZodString;
+    breakthrough: z.ZodDefault<z.ZodEnum<{
+        decide: "decide";
+        none: "none";
+    }>>;
+}, z.core.$strip>;
+/** How much a person hears from one harness: everything, only its decisions, or nothing. */
+export declare const harnessNotifications: z.ZodEnum<{
+    all: "all";
+    decide: "decide";
+    none: "none";
+}>;
+/**
+ * How much a person hears from one room on their phone (ADRs 0198, 0216): every message in it,
+ * what its people write and what @s them, only what @s them, or nothing. A decision is the Decide
+ * tier's, whatever this says.
+ */
+export declare const spaceNotifications: z.ZodEnum<{
+    all: "all";
+    mentions: "mentions";
+    none: "none";
+    people: "people";
+}>;
+export declare const notificationSettings: z.ZodObject<{
+    decide: z.ZodDefault<z.ZodEnum<{
+        off: "off";
+        now: "now";
+    }>>;
+    review: z.ZodDefault<z.ZodEnum<{
+        off: "off";
+        hourly: "hourly";
+    }>>;
+    fyi: z.ZodDefault<z.ZodEnum<{
+        off: "off";
+        daily: "daily";
+    }>>;
+    quiet: z.ZodOptional<z.ZodObject<{
+        from: z.ZodString;
+        to: z.ZodString;
+        breakthrough: z.ZodDefault<z.ZodEnum<{
+            decide: "decide";
+            none: "none";
+        }>>;
+    }, z.core.$strip>>;
+    harnesses: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodEnum<{
+        all: "all";
+        decide: "decide";
+        none: "none";
+    }>>>;
+    spaces: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
+        all: "all";
+        mentions: "mentions";
+        none: "none";
+        people: "people";
+    }>>>;
+}, z.core.$strip>;
+export type NotificationSettings = z.infer<typeof notificationSettings>;
+export type QuietHours = z.infer<typeof quietHours>;
+export type HarnessNotifications = z.infer<typeof harnessNotifications>;
+export type SpaceNotifications = z.infer<typeof spaceNotifications>;
+export declare const DEFAULT_NOTIFICATION_SETTINGS: NotificationSettings;
+/** The settings a person sent, with the defaults filled in, or the reason they are not settings. */
+export declare function parseNotificationSettings(raw: unknown): {
+    ok: true;
+    value: NotificationSettings;
+} | {
+    ok: false;
+    message: string;
+};
+//# sourceMappingURL=notifications.d.ts.map

package/dist/src/notifications.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"notifications.d.ts","sourceRoot":"","sources":["../../src/notifications.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,yDAAyD;AACzD,eAAO,MAAM,SAAS,aAGyC,CAAC;AAEhE,eAAO,MAAM,UAAU;;;;;;;iBAYpB,CAAC;AAEJ,4FAA4F;AAC5F,eAAO,MAAM,oBAAoB;;;;EAAoC,CAAC;AAEtE;;;;GAIG;AACH,eAAO,MAAM,kBAAkB;;;;;EAAgD,CAAC;AAEhF,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAe/B,CAAC;AAEH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AACxE,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,UAAU,CAAC,CAAC;AACpD,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AACxE,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAEpE,eAAO,MAAM,6BAA6B,EAAE,oBAK3C,CAAC;AAEF,oGAAoG;AACpG,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,OAAO,GACX;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,oBAAoB,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAQ5E"}

package/dist/src/notifications.js

@@ -0,0 +1,65 @@
+/**
+ * A person's notification settings (M5.6): the three tiers of attention (blueprint: Decide now
+ * breaks through, Review today is batched hourly, FYI is a daily digest), quiet hours, a word
+ * per harness, and one per room. Held on the server, per person, private to them; read and written over
+ * `/v1/me/notifications`, and applied on whichever device raises the banner.
+ */
+import { z } from "zod";
+/** A time of day, `HH:MM`, in the person's own clock. */
+export const timeOfDay = z
+    .string()
+    .regex(/^([01]\d|2[0-3]):[0-5]\d$/)
+    .describe("A time of day, HH:MM, on the device's own clock.");
+export const quietHours = z
+    .object({
+    from: timeOfDay,
+    to: timeOfDay,
+    /**
+     * What still gets through: a decision, since an approval expires and a run is blocked on it
+     * (the blueprint's "breaks through"), or nothing at all.
+     */
+    breakthrough: z.enum(["decide", "none"]).default("decide"),
+})
+    .describe("A window each day in which Review and FYI wait; `from` may be after `to` for a window across midnight.");
+/** How much a person hears from one harness: everything, only its decisions, or nothing. */
+export const harnessNotifications = z.enum(["all", "decide", "none"]);
+/**
+ * How much a person hears from one room on their phone (ADRs 0198, 0216): every message in it,
+ * what its people write and what @s them, only what @s them, or nothing. A decision is the Decide
+ * tier's, whatever this says.
+ */
+export const spaceNotifications = z.enum(["all", "people", "mentions", "none"]);
+export const notificationSettings = z.object({
+    /** Decide now: at once, or never a banner (its room still shows it). */
+    decide: z.enum(["now", "off"]).default("now"),
+    /** Review today: batched, one banner an hour at most, or off. */
+    review: z.enum(["hourly", "off"]).default("hourly"),
+    /** FYI: rolled into one banner a day, or off. */
+    fyi: z.enum(["daily", "off"]).default("daily"),
+    quiet: quietHours.optional(),
+    /** By harness id; a harness not listed is `all`. */
+    harnesses: z.record(z.string().min(1).max(120), harnessNotifications).default({}),
+    /**
+     * By space id; a room not listed is `people` (ADR 0216). Absent from what an app older than
+     * ADR 0198 sends, and then what was saved is kept.
+     */
+    spaces: z.record(z.string().min(1).max(120), spaceNotifications).optional(),
+});
+export const DEFAULT_NOTIFICATION_SETTINGS = {
+    decide: "now",
+    review: "hourly",
+    fyi: "daily",
+    harnesses: {},
+};
+/** The settings a person sent, with the defaults filled in, or the reason they are not settings. */
+export function parseNotificationSettings(raw) {
+    const parsed = notificationSettings.safeParse(raw);
+    if (parsed.success)
+        return { ok: true, value: parsed.data };
+    const issue = parsed.error.issues[0];
+    return {
+        ok: false,
+        message: issue === undefined ? "not settings" : `${issue.path.join(".")}: ${issue.message}`,
+    };
+}
+//# sourceMappingURL=notifications.js.map

package/dist/src/notifications.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notifications.js","sourceRoot":"","sources":["../../src/notifications.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,yDAAyD;AACzD,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC;KACvB,MAAM,EAAE;KACR,KAAK,CAAC,2BAA2B,CAAC;KAClC,QAAQ,CAAC,kDAAkD,CAAC,CAAC;AAEhE,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC;KACxB,MAAM,CAAC;IACN,IAAI,EAAE,SAAS;IACf,EAAE,EAAE,SAAS;IACb;;;OAGG;IACH,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;CAC3D,CAAC;KACD,QAAQ,CACP,wGAAwG,CACzG,CAAC;AAEJ,4FAA4F;AAC5F,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;AAEtE;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;AAEhF,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,wEAAwE;IACxE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IAC7C,iEAAiE;IACjE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IACnD,iDAAiD;IACjD,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IAC9C,KAAK,EAAE,UAAU,CAAC,QAAQ,EAAE;IAC5B,oDAAoD;IACpD,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,oBAAoB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACjF;;;OAGG;IACH,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,kBAAkB,CAAC,CAAC,QAAQ,EAAE;CAC5E,CAAC,CAAC;AAOH,MAAM,CAAC,MAAM,6BAA6B,GAAyB;IACjE,MAAM,EAAE,KAAK;IACb,MAAM,EAAE,QAAQ;IAChB,GAAG,EAAE,OAAO;IACZ,SAAS,EAAE,EAAE;CACd,CAAC;AAEF,oGAAoG;AACpG,MAAM,UAAU,yBAAyB,CACvC,GAAY;IAEZ,MAAM,MAAM,GAAG,oBAAoB,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACnD,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;IAC5D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACrC,OAAO;QACL,EAAE,EAAE,KAAK;QACT,OAAO,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE;KAC5F,CAAC;AACJ,CAAC"}

package/dist/src/pages.d.ts

@@ -0,0 +1,32 @@
+/**
+ * What somebody else's HTML page may do (ADR 0059 and its addendum, ADR 0201). A harness writes
+ * what its model writes, so a page it sends is untrusted whatever the harness is; and a mock is
+ * what it is for, so its script runs. Under this policy a script written in the page runs, an
+ * inline handler too, and a picture, a font, a sound or a clip the page carries in itself is
+ * drawn and played (a `data:` address, or a `blob:` its script made), so a page that is one
+ * file whole is everything it needs. Nothing leaves: no script by address, no `eval`, nothing
+ * fetched, sent, framed or connected, and no picture, font or media from the network, so a
+ * script cannot reach the network the device is on, not even by loading something from it and
+ * timing the answer.
+ *
+ * It is here, in the package the server and the clients share, because it is written in two
+ * places that must agree: the phone writes it into the document (`withHtmlPolicy` in core), and
+ * the server answers it as a header from the page door (`GET /v1/pages/:ticket`), where the
+ * frame on the web loads the page from. A directive added for one is added for both.
+ */
+export declare const HTML_POLICY = "default-src 'none'; img-src data: blob:; font-src data:; media-src data: blob:; style-src 'unsafe-inline'; script-src 'unsafe-inline'";
+/**
+ * What the frame the Mac and the web draw a page in may do (ADR 0059, decision 2; ADR 0100):
+ * scripts, and a window opened by a tap, which escapes the sandbox so a link in a mock opens as a
+ * page of its own. No `allow-same-origin`, so the page's origin is nobody's and it reaches nothing
+ * of the app's; no top navigation, no forms. The page door answers the same words in its policy's
+ * `sandbox` directive, so the document sandboxes itself wherever it is opened.
+ */
+export declare const PAGE_SANDBOX = "allow-scripts allow-popups allow-popups-to-escape-sandbox";
+/**
+ * The policy a page's door answers as a header, on the server (`GET /v1/pages/:ticket`) and in
+ * the Mac shell (`chips-page://`, ADR 0201's addendum): what the page may do, and the sandbox it
+ * is drawn in, so the document sandboxes itself wherever it is opened.
+ */
+export declare const PAGE_HEADER_POLICY = "default-src 'none'; img-src data: blob:; font-src data:; media-src data: blob:; style-src 'unsafe-inline'; script-src 'unsafe-inline'; sandbox allow-scripts allow-popups allow-popups-to-escape-sandbox";
+//# sourceMappingURL=pages.d.ts.map

package/dist/src/pages.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pages.d.ts","sourceRoot":"","sources":["../../src/pages.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,WAAW,0IACiH,CAAC;AAE1I;;;;;;GAMG;AACH,eAAO,MAAM,YAAY,8DAA8D,CAAC;AAExF;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,6MAA4C,CAAC"}

package/dist/src/pages.js

@@ -0,0 +1,32 @@
+/**
+ * What somebody else's HTML page may do (ADR 0059 and its addendum, ADR 0201). A harness writes
+ * what its model writes, so a page it sends is untrusted whatever the harness is; and a mock is
+ * what it is for, so its script runs. Under this policy a script written in the page runs, an
+ * inline handler too, and a picture, a font, a sound or a clip the page carries in itself is
+ * drawn and played (a `data:` address, or a `blob:` its script made), so a page that is one
+ * file whole is everything it needs. Nothing leaves: no script by address, no `eval`, nothing
+ * fetched, sent, framed or connected, and no picture, font or media from the network, so a
+ * script cannot reach the network the device is on, not even by loading something from it and
+ * timing the answer.
+ *
+ * It is here, in the package the server and the clients share, because it is written in two
+ * places that must agree: the phone writes it into the document (`withHtmlPolicy` in core), and
+ * the server answers it as a header from the page door (`GET /v1/pages/:ticket`), where the
+ * frame on the web loads the page from. A directive added for one is added for both.
+ */
+export const HTML_POLICY = "default-src 'none'; img-src data: blob:; font-src data:; media-src data: blob:; style-src 'unsafe-inline'; script-src 'unsafe-inline'";
+/**
+ * What the frame the Mac and the web draw a page in may do (ADR 0059, decision 2; ADR 0100):
+ * scripts, and a window opened by a tap, which escapes the sandbox so a link in a mock opens as a
+ * page of its own. No `allow-same-origin`, so the page's origin is nobody's and it reaches nothing
+ * of the app's; no top navigation, no forms. The page door answers the same words in its policy's
+ * `sandbox` directive, so the document sandboxes itself wherever it is opened.
+ */
+export const PAGE_SANDBOX = "allow-scripts allow-popups allow-popups-to-escape-sandbox";
+/**
+ * The policy a page's door answers as a header, on the server (`GET /v1/pages/:ticket`) and in
+ * the Mac shell (`chips-page://`, ADR 0201's addendum): what the page may do, and the sandbox it
+ * is drawn in, so the document sandboxes itself wherever it is opened.
+ */
+export const PAGE_HEADER_POLICY = `${HTML_POLICY}; sandbox ${PAGE_SANDBOX}`;
+//# sourceMappingURL=pages.js.map

package/dist/src/pages.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pages.js","sourceRoot":"","sources":["../../src/pages.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,WAAW,GACtB,uIAAuI,CAAC;AAE1I;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,2DAA2D,CAAC;AAExF;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,WAAW,aAAa,YAAY,EAAE,CAAC"}