@chipschat/protocol 0.0.0-stage → 1.0.1

package/dist/src/space-icons.js

@@ -0,0 +1,142 @@
+/**
+ * The face a person has chosen for a space: a mark from Chips' own library and the ground it
+ * sits on (21 September 2026).
+ *
+ * It is a person's own setting, not a fact about the room (the alternative — `space.icon_set`
+ * on the log, one face for everybody — is a bigger thing and nobody has asked for it). So it
+ * lives beside the notification settings from M5.6 rather than in the event log: read and
+ * written over `/v1/me/space-icons`, private to the person who chose it, and carried to every
+ * device they sign in on. Two people may see one room differently, which is the point.
+ *
+ * An agent's face is the same pair, a mark and a ground, but it is the agent's and one for
+ * everybody: it rides on `agent.updated` and in the directory, not here (ADR 0089). So is a
+ * person's own face, on `person.face_set` (ADR 0139).
+ *
+ * Since 7 October 2026 a face may be letters in place of a mark: one or two of them, or an emoji
+ * or two, typed by the person choosing it ("AB", "X", "🦊"). Arjun asked for it on every face at
+ * once — a space's, an agent's and a person's own — so it is a third field of the one shape, not
+ * a shape of its own (ADR 0139).
+ *
+ * The ground is an **index**, not a colour. A hex on the wire would freeze the palette into
+ * every stored row: the lift of 21 September 2026 moved all eight avatar hues, and an index
+ * means everyone's chosen face moved with it instead of stranding them on the old paint.
+ */
+import { z } from "zod";
+/**
+ * How many grounds a client offers: the design system's eight avatar hues, and nineteen more
+ * that belong to no participant. A client draws index `n` from its own list; the wire only
+ * agrees on how many there are.
+ *
+ * Twelve until 26 September 2026, when Arjun asked for more colours: fifteen were added after
+ * them (a red, an orange, an olive, three greys and a deep shade of every hue), so a face chosen
+ * on the twelve kept its index and its colour. A client older than that draws an index past its
+ * own list on its first ground.
+ */
+export const SPACE_ICON_GROUNDS = 27;
+/** As many letters as a face holds: "AB", or one emoji beside another. */
+export const MOST_FACE_LETTERS = 2;
+/**
+ * One letter as a reader sees it: a base and whatever joins it — a combining accent, a skin tone,
+ * an emoji's variation selector or keycap, a flag's tags, or another emoji after a joiner — and a
+ * flag's two regional indicators. A face's "two letters" are two of these, so "👨‍👩‍👧" is one and
+ * "é" is one however it was typed.
+ *
+ * Written out rather than `Intl.Segmenter`, which Hermes does not have: the phone, the server and
+ * the web count the same letters the same way, and a face one of them takes the others take. It
+ * leaves out what a face would never be (Hangul typed jamo by jamo); a cluster it splits in two
+ * counts as two letters, which is a refusal, never a face drawn wrong.
+ */
+const LETTER = /\p{Regional_Indicator}{2}|\P{M}(?:[\p{M}\p{Emoji_Modifier}\u{E0020}-\u{E007F}]|\u200d\P{M}?)*|\p{M}+/gu;
+/** The letters of some text, as a reader counts them (`LETTER`). */
+export function lettersIn(text) {
+    return text.match(LETTER) ?? [];
+}
+/**
+ * What a face's letters are, from what was typed: no spaces, and no more than two. What a field
+ * keeps as somebody types, so a third letter or a space never reaches the face.
+ */
+export function faceLetters(typed) {
+    return lettersIn(typed.replace(/\s+/gu, "")).slice(0, MOST_FACE_LETTERS).join("");
+}
+/** How wide one letter is, in the font's size: a capital, a CJK character, an emoji. */
+const WIDTHS = { letter: 0.7, wide: 1, emoji: 1.2 };
+/** As wide as a face's letters may stand, in the initials' size: what two capitals take. */
+const ROOM = 1.7;
+/** A single emoji is this much larger than the initials, filling the face as one capital does. */
+const ONE_EMOJI = 1.25;
+const EMOJI = /\p{Extended_Pictographic}|\p{Regional_Indicator}/u;
+const WIDE = /\p{Ideographic}|[\u3040-\u30ff\uac00-\ud7a3]/u;
+function widthOf(letter) {
+    if (EMOJI.test(letter))
+        return WIDTHS.emoji;
+    return WIDE.test(letter) ? WIDTHS.wide : WIDTHS.letter;
+}
+/**
+ * How large a face's letters are drawn, against the size its initials are (ADR 0139): 1 for
+ * letters, which is the initials' own size; larger for one emoji, which fills a face as one
+ * capital does; smaller where two emoji, an emoji and a letter, or two wide characters would not
+ * fit inside it. Here, beside the letters' own rule, so the phone and the Mac draw them alike.
+ */
+export function lettersScale(letters) {
+    const each = lettersIn(letters);
+    const only = each[0];
+    if (each.length === 1 && only !== undefined && EMOJI.test(only))
+        return ONE_EMOJI;
+    const width = each.reduce((sum, letter) => sum + widthOf(letter), 0);
+    return width <= ROOM ? 1 : Math.round((ROOM / width) * 100) / 100;
+}
+/** Whether these are a face's letters as they are: one or two, nothing round them, nothing hidden. */
+function areFaceLetters(letters) {
+    const count = lettersIn(letters).length;
+    return (count >= 1 &&
+        count <= MOST_FACE_LETTERS &&
+        !/[\s\p{Cc}]/u.test(letters) &&
+        faceLetters(letters) === letters);
+}
+export const spaceIcon = z.object({
+    /**
+     * A mark's name in the library — letters only, as every name in it is — or empty, for a face
+     * that is a colour and nothing else.
+     *
+     * A ground is a choice in its own right: a room can be *the teal one* before it is the one
+     * with the rocket on it, and down a list of eighty rows the colour is what the eye catches
+     * first. Requiring a mark meant the picker's colour strip wrote nothing until a mark had been
+     * tapped — the swatch ticked, the row behind did not move, and it read as a broken button
+     * (Arjun, 22 September 2026: "it always fails the first time, then after 2-3 tries it starts
+     * working"). An empty mark draws the initials on the chosen ground, which is exactly what the
+     * picker previews.
+     */
+    icon: z
+        .string()
+        .max(40)
+        .regex(/^[a-zA-Z]*$/, "A mark's name is letters."),
+    ground: z
+        .number()
+        .int()
+        .min(0)
+        .max(SPACE_ICON_GROUNDS - 1),
+    /**
+     * Letters the face wears in place of a mark (ADR 0139): one or two, or an emoji or two, on the
+     * ground. With them the mark is empty. Absent, the face is its mark, or the initials on the
+     * ground when the mark is empty too. A client older than them draws the initials on the ground.
+     */
+    letters: z
+        .string()
+        .min(1)
+        .max(32)
+        .refine(areFaceLetters, "Up to two letters or emoji, and no spaces.")
+        .optional()
+        .describe("One or two letters, or an emoji or two, the face wears on its ground in place of a mark (ADR 0139); the mark is empty beside them. Absent on a face that is a mark, or only a colour."),
+});
+/** The face a person sent, or the reason it is not one. */
+export function parseSpaceIcon(raw) {
+    const parsed = spaceIcon.safeParse(raw);
+    if (parsed.success)
+        return { ok: true, value: parsed.data };
+    const first = parsed.error.issues[0];
+    return {
+        ok: false,
+        message: first === undefined ? "not a face" : `${first.path.join(".")}: ${first.message}`,
+    };
+}
+//# sourceMappingURL=space-icons.js.map

package/dist/src/space-icons.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"space-icons.js","sourceRoot":"","sources":["../../src/space-icons.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAErC,0EAA0E;AAC1E,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAEnC;;;;;;;;;;GAUG;AACH,MAAM,MAAM,GACV,wGAAwG,CAAC;AAE3G,oEAAoE;AACpE,MAAM,UAAU,SAAS,CAAC,IAAY;IACpC,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;AAClC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,KAAa;IACvC,OAAO,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACpF,CAAC;AAED,wFAAwF;AACxF,MAAM,MAAM,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,EAAW,CAAC;AAE7D,4FAA4F;AAC5F,MAAM,IAAI,GAAG,GAAG,CAAC;AAEjB,kGAAkG;AAClG,MAAM,SAAS,GAAG,IAAI,CAAC;AAEvB,MAAM,KAAK,GAAG,mDAAmD,CAAC;AAClE,MAAM,IAAI,GAAG,+CAA+C,CAAC;AAE7D,SAAS,OAAO,CAAC,MAAc;IAC7B,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC;IAC5C,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC;AACzD,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,OAAe;IAC1C,MAAM,IAAI,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACrB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAClF,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,GAAG,GAAG,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;IACrE,OAAO,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC;AACpE,CAAC;AAED,sGAAsG;AACtG,SAAS,cAAc,CAAC,OAAe;IACrC,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;IACxC,OAAO,CACL,KAAK,IAAI,CAAC;QACV,KAAK,IAAI,iBAAiB;QAC1B,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC;QAC5B,WAAW,CAAC,OAAO,CAAC,KAAK,OAAO,CACjC,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC;IAChC;;;;;;;;;;;OAWG;IACH,IAAI,EAAE,CAAC;SACJ,MAAM,EAAE;SACR,GAAG,CAAC,EAAE,CAAC;SACP,KAAK,CAAC,aAAa,EAAE,2BAA2B,CAAC;IACpD,MAAM,EAAE,CAAC;SACN,MAAM,EAAE;SACR,GAAG,EAAE;SACL,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,kBAAkB,GAAG,CAAC,CAAC;IAC9B;;;;OAIG;IACH,OAAO,EAAE,CAAC;SACP,MAAM,EAAE;SACR,GAAG,CAAC,CAAC,CAAC;SACN,GAAG,CAAC,EAAE,CAAC;SACP,MAAM,CAAC,cAAc,EAAE,4CAA4C,CAAC;SACpE,QAAQ,EAAE;SACV,QAAQ,CACP,uLAAuL,CACxL;CACJ,CAAC,CAAC;AAOH,2DAA2D;AAC3D,MAAM,UAAU,cAAc,CAC5B,GAAY;IAEZ,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACxC,IAAI,MAAM,CAAC,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;IAC5D,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACrC,OAAO;QACL,EAAE,EAAE,KAAK;QACT,OAAO,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,KAAK,CAAC,OAAO,EAAE;KAC1F,CAAC;AACJ,CAAC"}

package/dist/src/spend.d.ts

@@ -0,0 +1,57 @@
+/**
+ * What a room's job has spent, and what the room allows a job (ADR 0117).
+ *
+ * A **job** is the work a room's agents do after the last thing a person did there (a message, an
+ * answer, letting the agents carry on: the `PERSON_ACTS` the referee counts from), or after a brief
+ * was handed into the room, whichever is later. Its **spend** is what the runs reported costing
+ * after that point, of any harness: a run's own report is its total so far, so a run that began
+ * before the point counts only what it reported after it. A run that reported no cost counts
+ * nothing, and the room says how many did.
+ *
+ * Every room allows a job a **ceiling**: `DEFAULT_SPEND_CEILING_USD` until the workspace's owner,
+ * in the room, sets another (`space.spend_ceiling_set`, ADR 0196), from `SPEND_CEILING_MIN` to
+ * `SPEND_CEILING_MAX` in steps of `SPEND_CEILING_STEP`. Chips works the spend out and hands it to
+ * every harness with the message that gives a turn (`context.spend`), and to the agent in the
+ * room's note (`spendWords`).
+ *
+ * At `SPEND_WARN_AT` of the ceiling Chips warns the room's harnesses, and at the ceiling it holds
+ * the agents until a person acts (ADR 0118): `spendStage` says which.
+ */
+import { z } from "zod";
+/** What a room allows a job until a person there says otherwise, in US dollars. */
+export declare const DEFAULT_SPEND_CEILING_USD = 3;
+/** The least a room may allow a job. */
+export declare const SPEND_CEILING_MIN = 0.25;
+/** The most a room may allow a job. */
+export declare const SPEND_CEILING_MAX = 100;
+/** A ceiling is a whole number of these. */
+export declare const SPEND_CEILING_STEP = 0.25;
+/** The share of the ceiling at which Chips warns the room's harnesses (ADR 0118). */
+export declare const SPEND_WARN_AT = 0.8;
+/** Whether `usd` is a ceiling a room may have: in range, and a whole number of steps. */
+export declare function isSpendCeiling(usd: number): boolean;
+/** A ceiling as a room sets it: an amount, or `null` for the default. */
+export declare const spendCeiling: z.ZodNullable<z.ZodNumber>;
+export declare const jobSpend: z.ZodObject<{
+    ceiling_usd: z.ZodNumber;
+    spent_usd: z.ZodNumber;
+    since_seq: z.ZodInt;
+    uncounted_runs: z.ZodInt;
+}, z.core.$strip>;
+export type JobSpend = z.infer<typeof jobSpend>;
+/** An amount as the room's words say it: "$3.00", "$0.25". */
+export declare function dollars(usd: number): string;
+/**
+ * Where a job stands against its room's ceiling (ADR 0118): `within` it, `most` spent (from
+ * `SPEND_WARN_AT`), or at the `ceiling`, where Chips holds the agents until a person acts.
+ */
+export type SpendStage = "within" | "most" | "ceiling";
+export declare function spendStage(spend: Pick<JobSpend, "ceiling_usd" | "spent_usd">): SpendStage;
+/**
+ * The room note's line about the job's spend (ADR 0117), with what Chips does at the ceiling
+ * (ADR 0118): "This job has spent $1.20 of the $3.00 this room allows a job; at $3.00 Chips holds
+ * the agents until a person acts." From most of it spent, what to do about it; at the ceiling,
+ * that the agents are held. Then how many runs reported no cost, when any did.
+ */
+export declare function spendWords(spend: JobSpend): string;
+//# sourceMappingURL=spend.d.ts.map

package/dist/src/spend.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spend.d.ts","sourceRoot":"","sources":["../../src/spend.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,mFAAmF;AACnF,eAAO,MAAM,yBAAyB,IAAI,CAAC;AAC3C,wCAAwC;AACxC,eAAO,MAAM,iBAAiB,OAAO,CAAC;AACtC,uCAAuC;AACvC,eAAO,MAAM,iBAAiB,MAAM,CAAC;AACrC,4CAA4C;AAC5C,eAAO,MAAM,kBAAkB,OAAO,CAAC;AACvC,qFAAqF;AACrF,eAAO,MAAM,aAAa,MAAM,CAAC;AAEjC,yFAAyF;AACzF,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAGnD;AAED,yEAAyE;AACzE,eAAO,MAAM,YAAY,4BAKZ,CAAC;AAEd,eAAO,MAAM,QAAQ;;;;;iBAyBqE,CAAC;AAC3F,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,QAAQ,CAAC,CAAC;AAEhD,8DAA8D;AAC9D,wBAAgB,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE3C;AAED;;;GAGG;AACH,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,MAAM,GAAG,SAAS,CAAC;AAEvD,wBAAgB,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,QAAQ,EAAE,aAAa,GAAG,WAAW,CAAC,GAAG,UAAU,CAMzF;AAED;;;;;GAKG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,QAAQ,GAAG,MAAM,CAWlD"}

package/dist/src/spend.js

@@ -0,0 +1,94 @@
+/**
+ * What a room's job has spent, and what the room allows a job (ADR 0117).
+ *
+ * A **job** is the work a room's agents do after the last thing a person did there (a message, an
+ * answer, letting the agents carry on: the `PERSON_ACTS` the referee counts from), or after a brief
+ * was handed into the room, whichever is later. Its **spend** is what the runs reported costing
+ * after that point, of any harness: a run's own report is its total so far, so a run that began
+ * before the point counts only what it reported after it. A run that reported no cost counts
+ * nothing, and the room says how many did.
+ *
+ * Every room allows a job a **ceiling**: `DEFAULT_SPEND_CEILING_USD` until the workspace's owner,
+ * in the room, sets another (`space.spend_ceiling_set`, ADR 0196), from `SPEND_CEILING_MIN` to
+ * `SPEND_CEILING_MAX` in steps of `SPEND_CEILING_STEP`. Chips works the spend out and hands it to
+ * every harness with the message that gives a turn (`context.spend`), and to the agent in the
+ * room's note (`spendWords`).
+ *
+ * At `SPEND_WARN_AT` of the ceiling Chips warns the room's harnesses, and at the ceiling it holds
+ * the agents until a person acts (ADR 0118): `spendStage` says which.
+ */
+import { z } from "zod";
+/** What a room allows a job until a person there says otherwise, in US dollars. */
+export const DEFAULT_SPEND_CEILING_USD = 3;
+/** The least a room may allow a job. */
+export const SPEND_CEILING_MIN = 0.25;
+/** The most a room may allow a job. */
+export const SPEND_CEILING_MAX = 100;
+/** A ceiling is a whole number of these. */
+export const SPEND_CEILING_STEP = 0.25;
+/** The share of the ceiling at which Chips warns the room's harnesses (ADR 0118). */
+export const SPEND_WARN_AT = 0.8;
+/** Whether `usd` is a ceiling a room may have: in range, and a whole number of steps. */
+export function isSpendCeiling(usd) {
+    if (!Number.isFinite(usd) || usd < SPEND_CEILING_MIN || usd > SPEND_CEILING_MAX)
+        return false;
+    return Number.isInteger(Math.round(usd * 1e6) / (SPEND_CEILING_STEP * 1e6));
+}
+/** A ceiling as a room sets it: an amount, or `null` for the default. */
+export const spendCeiling = z
+    .number()
+    .refine(isSpendCeiling, {
+    message: `From $${SPEND_CEILING_MIN} to $${SPEND_CEILING_MAX}, in steps of $${SPEND_CEILING_STEP}.`,
+})
+    .nullable();
+export const jobSpend = z
+    .object({
+    ceiling_usd: z
+        .number()
+        .positive()
+        .describe("What the room allows a job, in US dollars: its own ceiling, or the default (3) when nobody has set one."),
+    spent_usd: z
+        .number()
+        .nonnegative()
+        .describe("What the room's runs reported costing since the job began, in US dollars, every harness's together."),
+    since_seq: z
+        .int()
+        .nonnegative()
+        .describe("Where the job began: the `seq` of the last thing a person did in the room, or of the last brief handed into it, whichever is later; 0 when neither has happened."),
+    uncounted_runs: z
+        .int()
+        .nonnegative()
+        .describe("How many of the job's runs reported no cost, and so count nothing."),
+})
+    .describe("What a room's job has spent, against what the room allows a job (ADR 0117).");
+/** An amount as the room's words say it: "$3.00", "$0.25". */
+export function dollars(usd) {
+    return `$${usd.toFixed(2)}`;
+}
+export function spendStage(spend) {
+    // To the cent, as the words say it: a job at $2.999 has spent the $3.00 it was allowed.
+    const spent = Math.round(spend.spent_usd * 100);
+    const ceiling = Math.round(spend.ceiling_usd * 100);
+    if (spent >= ceiling)
+        return "ceiling";
+    return spent >= Math.round(ceiling * SPEND_WARN_AT) ? "most" : "within";
+}
+/**
+ * The room note's line about the job's spend (ADR 0117), with what Chips does at the ceiling
+ * (ADR 0118): "This job has spent $1.20 of the $3.00 this room allows a job; at $3.00 Chips holds
+ * the agents until a person acts." From most of it spent, what to do about it; at the ceiling,
+ * that the agents are held. Then how many runs reported no cost, when any did.
+ */
+export function spendWords(spend) {
+    const spent = dollars(spend.spent_usd);
+    const ceiling = dollars(spend.ceiling_usd);
+    const stage = spendStage(spend);
+    const line = stage === "ceiling"
+        ? `This job has spent ${spent} of the ${ceiling} this space allows a job, so Chips holds the agents until a person acts: start nothing new, and say what is done and what is left.`
+        : `This job has spent ${spent} of the ${ceiling} this space allows a job; at ${ceiling} Chips holds the agents until a person acts.${stage === "most" ? " Most of it is spent: finish the step you are on, and say what is left." : ""}`;
+    const n = spend.uncounted_runs;
+    if (n === 0)
+        return line;
+    return `${line} ${n === 1 ? "1 run here reported no cost and is" : `${n} runs here reported no cost and are`} not counted.`;
+}
+//# sourceMappingURL=spend.js.map

package/dist/src/spend.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spend.js","sourceRoot":"","sources":["../../src/spend.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,mFAAmF;AACnF,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC;AAC3C,wCAAwC;AACxC,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,CAAC;AACtC,uCAAuC;AACvC,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AACrC,4CAA4C;AAC5C,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,CAAC;AACvC,qFAAqF;AACrF,MAAM,CAAC,MAAM,aAAa,GAAG,GAAG,CAAC;AAEjC,yFAAyF;AACzF,MAAM,UAAU,cAAc,CAAC,GAAW;IACxC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,iBAAiB,IAAI,GAAG,GAAG,iBAAiB;QAAE,OAAO,KAAK,CAAC;IAC9F,OAAO,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,kBAAkB,GAAG,GAAG,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,yEAAyE;AACzE,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC;KAC1B,MAAM,EAAE;KACR,MAAM,CAAC,cAAc,EAAE;IACtB,OAAO,EAAE,SAAS,iBAAiB,QAAQ,iBAAiB,kBAAkB,kBAAkB,GAAG;CACpG,CAAC;KACD,QAAQ,EAAE,CAAC;AAEd,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC;KACtB,MAAM,CAAC;IACN,WAAW,EAAE,CAAC;SACX,MAAM,EAAE;SACR,QAAQ,EAAE;SACV,QAAQ,CACP,yGAAyG,CAC1G;IACH,SAAS,EAAE,CAAC;SACT,MAAM,EAAE;SACR,WAAW,EAAE;SACb,QAAQ,CACP,qGAAqG,CACtG;IACH,SAAS,EAAE,CAAC;SACT,GAAG,EAAE;SACL,WAAW,EAAE;SACb,QAAQ,CACP,kKAAkK,CACnK;IACH,cAAc,EAAE,CAAC;SACd,GAAG,EAAE;SACL,WAAW,EAAE;SACb,QAAQ,CAAC,oEAAoE,CAAC;CAClF,CAAC;KACD,QAAQ,CAAC,6EAA6E,CAAC,CAAC;AAG3F,8DAA8D;AAC9D,MAAM,UAAU,OAAO,CAAC,GAAW;IACjC,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;AAC9B,CAAC;AAQD,MAAM,UAAU,UAAU,CAAC,KAAkD;IAC3E,wFAAwF;IACxF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,GAAG,GAAG,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,GAAG,GAAG,CAAC,CAAC;IACpD,IAAI,KAAK,IAAI,OAAO;QAAE,OAAO,SAAS,CAAC;IACvC,OAAO,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC1E,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,KAAe;IACxC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACvC,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;IAChC,MAAM,IAAI,GACR,KAAK,KAAK,SAAS;QACjB,CAAC,CAAC,sBAAsB,KAAK,WAAW,OAAO,oIAAoI;QACnL,CAAC,CAAC,sBAAsB,KAAK,WAAW,OAAO,gCAAgC,OAAO,+CAA+C,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,yEAAyE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAC7O,MAAM,CAAC,GAAG,KAAK,CAAC,cAAc,CAAC;IAC/B,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACzB,OAAO,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,oCAAoC,CAAC,CAAC,CAAC,GAAG,CAAC,qCAAqC,eAAe,CAAC;AAC9H,CAAC"}

package/dist/src/visibility.d.ts

@@ -0,0 +1,170 @@
+/**
+ * Who may see an event (phase-0-review finding 6).
+ *
+ * Reading the log and subscribing to it are both scoped by membership: a credential sees the
+ * spaces it belongs to, and nothing else. Before this, any credential in a workspace
+ * could read every space's events, including a direct space it was not in.
+ *
+ * The rule, in one place so the live path and the replay path cannot drift:
+ *
+ * - An event that belongs to a space is visible only to that space's members.
+ * - An event with no space — a workspace-wide thing — is visible to everyone in the
+ *   workspace. In Phase 1 nothing appends one in normal flow; the ones that arrive in M1.4 and
+ *   M3 (a policy change, a budget warning) will want per-recipient scoping, which is theirs to
+ *   add. What an agent said in no room (`message.held`, ADR 0087) has no space either, and is
+ *   its harness's alone: its words are for the room it joins next, not for the workspace.
+ * - A person asking for a copy of an agent (`agent.fork`, ADR 0087) is visible to the agent's
+ *   harness, which makes the copy for a room it is not in.
+ * - A person asking a harness for a new agent (`agent.asked`, ADR 0108) is visible to that
+ *   harness, which makes the agent for a room it is not in.
+ * - A harness's agent being made, renamed, archived, given a face or deleted (`agent.registered`,
+ *   `agent.updated`, `agent.deleted`) has no space either, and went to everybody: a guest in no room with the
+ *   agent, and every other harness, were sent its name and its harness's own key for it (agents
+ *   review, finding 3). It is its harness's to hear, and anybody's who is told every agent: an
+ *   owner or admin of the workspace. Since his call of 19 October 2026 (ADR 0034's addendum) that
+ *   is no longer every person who is not a guest: a member is told the agents in their rooms, as
+ *   a guest is. Whoever shares a room with the agent, and a person who owns its harness, are told
+ *   too, which the caller works out, since a room is not something an event with none can say.
+ * - The event that adds or removes a participant is always visible to that participant, so a
+ *   person can see themselves join a space they are not yet listed in.
+ * - The event that opens a space is visible to whoever opened it, who is its first
+ *   member (ADR 0018) but is not yet listed anywhere a live session has read — and to the
+ *   person it was opened *for*, since ADR 0024, because a harness opens a space for its owner
+ *   as it finds one and they would otherwise never be sent the event that names it — and to the
+ *   harness it was asked *of*, when a person opens a room for a harness to claim, which is how
+ *   the harness hears that there is one before it is added to it.
+ * - The event that opens a thread is visible to everyone in the space it grows in (M5.4): a
+ *   thread has no members of its own, and its events are theirs from then on.
+ * - An approval that names the viewer as somebody who may answer it is visible to them
+ *   wherever it is (M5.5): the lane's lead, handed a low-risk ask by policy, is not in the
+ *   specialist's room and would otherwise never be sent what it is to decide. Since ADR 0042 a
+ *   person named from elsewhere in the workspace is in the same position, and the decision and
+ *   its outcome name them too, so what they were sent is answered on their screen as well.
+ * - A message a person deleted for themselves, and their Undo (ADR 0167), are theirs alone,
+ *   though they belong to a room: nobody else in it, and no harness, is told that one person
+ *   stopped seeing a line. The one rule that takes something away from a room's members.
+ *
+ * The replay path builds a SQL predicate from the same member set (see the server's event store)
+ * plus the membership events naming the viewer. The join needs no special case — a viewer's set
+ * already lists every space they are in — but a removal is from a space they are no longer in,
+ * and a client resuming after it left a space elsewhere must still be told.
+ *
+ * It lives with the protocol so that the server and the conformance fake ask the same function:
+ * the fake's own copy had come to send what an agent said in no room to everybody (agents
+ * review, finding 37).
+ */
+/** An event as the rule needs it: what it is, where, by whom, and what it carries. */
+export interface SeenEvent {
+    readonly type: string;
+    readonly space_id: string | null;
+    readonly actor: {
+        readonly id: string;
+    };
+    readonly payload: Readonly<Record<string, unknown>>;
+}
+export interface Viewer {
+    readonly participantId: string;
+    /** The spaces this viewer is a member of, resolved from the memberships projection. */
+    readonly memberSpaces: ReadonlySet<string>;
+    /**
+     * Whether the viewer is told who every person in the workspace is: a person who is not a guest
+     * (ADR 0034). A guest and a harness are told only whom they share a room with.
+     */
+    readonly seesDirectory?: boolean | undefined;
+    /**
+     * Whether the viewer is told every agent in the workspace: an owner or admin, who may move,
+     * archive or delete any of them (his call of 19 October 2026, ADR 0034's addendum). Anybody
+     * else is told the agents in their rooms, and a harness its own.
+     */
+    readonly seesAgents?: boolean | undefined;
+    /**
+     * Who else the viewer is in rooms: a harness's agents (ADR 0087), which it speaks for on one
+     * connection. What names one of them names the viewer.
+     */
+    readonly alsoIs?: ReadonlySet<string> | undefined;
+}
+/** The events that add a participant to a space or remove one. Always visible to that participant. */
+export declare const MEMBERSHIP_EVENTS: ReadonlySet<string>;
+/**
+ * Where an agent is (ADR 0087): put in a room or taken out of one. The room is told, as of
+ * anything in it, and so is the agent's harness, which has left the room by the time its agent's
+ * release is written. Nobody else: a person reads an agent's room from the directory, and an
+ * event naming a room a client has never heard of would make it one.
+ */
+export declare const WHEREABOUTS_EVENTS: ReadonlySet<string>;
+/**
+ * A person asking for a copy of an agent in a room (ADR 0087, Fork). The room is told, as of
+ * anything in it, and so is the agent's harness, which makes the copy: the agent it names is in
+ * another room, so its harness is not a member of the room the copy is for.
+ */
+export declare const FORK_EVENTS: ReadonlySet<string>;
+/**
+ * A person asking a harness for a new agent in a room (ADR 0108). The room is told, as of anything
+ * in it, and so is the harness the event names, which makes the agent: no agent of its is there
+ * yet, and a harness is a member of no room itself.
+ */
+export declare const ASK_EVENTS: ReadonlySet<string>;
+/**
+ * What an agent said while in no room (ADR 0087, rule 6). It has no space, so the workspace-wide
+ * rule would send it to everyone — every person, guests too, and every other harness — before
+ * the room it is meant for hears it. Only the agent's own harness is told; a person reads how
+ * many wait from the directory (`held`).
+ */
+export declare const HELD_EVENTS: ReadonlySet<string>;
+/**
+ * A harness's agent made or changed (ADR 0087): who it is, what it is called, whether it is
+ * archived, the face it wears. No space, and not everybody's: see the rule above.
+ */
+export declare const DIRECTORY_EVENTS: ReadonlySet<string>;
+/**
+ * What came of a join request (ADR 0122): who asked, from where, and what a person let in. No
+ * space, and not everybody's: a harness and a guest are told nothing of who else is let in. A
+ * person who sees the whole directory is, as they see the harness appear in it.
+ */
+export declare const JOIN_EVENTS: ReadonlySet<string>;
+/**
+ * A person's face chosen (ADR 0139). No space, and a person's to see, not a harness's: a harness
+ * draws nobody, and one that does not know the event has no business being sent it. A person who
+ * sees the directory is told, as of a join; a guest reads it the next time it reads who is who.
+ */
+export declare const FACE_EVENTS: ReadonlySet<string>;
+/**
+ * An agent's changes locked or let go (ADR 0199). No space, and a person's to see, not a harness's,
+ * as a face is: the lock holds people's hands, and a harness is held by nothing it says. A person
+ * told every agent is told; anybody else reads it the next time they read who is who.
+ */
+export declare const LOCK_EVENTS: ReadonlySet<string>;
+/**
+ * A person deleting a message for themselves, and taking that back (ADR 0167). They belong to the
+ * room the message is in, and are sent only to the person who did them, on each of their devices.
+ */
+export declare const SELF_EVENTS: ReadonlySet<string>;
+/**
+ * Whether a live event should be delivered to a viewer. For `DIRECTORY_EVENTS` a caller that
+ * gets `false` asks one thing more, which this cannot: whether the viewer shares a room with the
+ * agent the event is about, or is a person who owns its harness.
+ */
+export declare function canSee(event: SeenEvent, viewer: Viewer): boolean;
+/**
+ * The events that carry who may answer an approval, resolved to ids. The two decisions are
+ * here as well since ADR 0042: somebody named outside the room is sent the ask, so they are
+ * sent what came of it — otherwise the card on their phone would never cool.
+ */
+export declare const APPROVER_EVENTS: ReadonlySet<string>;
+/** True when an approval names the viewer as somebody who may answer it (M5.5). */
+export declare function namesApprover(event: SeenEvent, participantId: string): boolean;
+/** True when this opens a thread in one of the viewer's spaces, which makes it theirs too (M5.4). */
+export declare function opensThreadIn(event: SeenEvent, memberSpaces: ReadonlySet<string>): boolean;
+/**
+ * True when this is a space being opened for the viewer: by them, on their behalf, or for them
+ * to claim. A harness asked beside another from the + (`also_asked_of`) is asked as much as the
+ * first: it was sent nothing until its next `hello`, so it never learnt the room was asked of it,
+ * and the first words there went unanswered (agents review, finding 17).
+ */
+export declare function opensFor(event: SeenEvent, participantId: string): boolean;
+/**
+ * True when a membership event is about this viewer, so they see the moment they are added: the
+ * one added or removed, or either side of a replacement (ADR 0087).
+ */
+export declare function namesViewer(event: SeenEvent, participantId: string): boolean;
+//# sourceMappingURL=visibility.d.ts.map

package/dist/src/visibility.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"visibility.d.ts","sourceRoot":"","sources":["../../src/visibility.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsDG;AAEH,sFAAsF;AACtF,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,QAAQ,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACrD;AAED,MAAM,WAAW,MAAM;IACrB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,uFAAuF;IACvF,QAAQ,CAAC,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC3C;;;OAGG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC7C;;;;OAIG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC1C;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC;CACnD;AAOD,sGAAsG;AACtG,eAAO,MAAM,iBAAiB,EAAE,WAAW,CAAC,MAAM,CAIhD,CAAC;AAEH;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,EAAE,WAAW,CAAC,MAAM,CAGjD,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,WAAW,EAAE,WAAW,CAAC,MAAM,CAA2B,CAAC;AAExE;;;;GAIG;AACH,eAAO,MAAM,UAAU,EAAE,WAAW,CAAC,MAAM,CAA4B,CAAC;AAExE;;;;;GAKG;AACH,eAAO,MAAM,WAAW,EAAE,WAAW,CAAC,MAAM,CAA6B,CAAC;AAE1E;;;GAGG;AACH,eAAO,MAAM,gBAAgB,EAAE,WAAW,CAAC,MAAM,CAI/C,CAAC;AAEH;;;;GAIG;AACH,eAAO,MAAM,WAAW,EAAE,WAAW,CAAC,MAAM,CAA4C,CAAC;AAEzF;;;;GAIG;AACH,eAAO,MAAM,WAAW,EAAE,WAAW,CAAC,MAAM,CAAgC,CAAC;AAE7E;;;;GAIG;AACH,eAAO,MAAM,WAAW,EAAE,WAAW,CAAC,MAAM,CAA+B,CAAC;AAE5E;;;GAGG;AACH,eAAO,MAAM,WAAW,EAAE,WAAW,CAAC,MAAM,CAAgD,CAAC;AAkB7F;;;;GAIG;AACH,wBAAgB,MAAM,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAgBhE;AAED;;;;GAIG;AACH,eAAO,MAAM,eAAe,EAAE,WAAW,CAAC,MAAM,CAK9C,CAAC;AAEH,mFAAmF;AACnF,wBAAgB,aAAa,CAAC,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAI9E;AAED,qGAAqG;AACrG,wBAAgB,aAAa,CAAC,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,OAAO,CAI1F;AAED;;;;;GAKG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CASzE;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,GAAG,OAAO,CAO5E"}