@clossys/butler 0.1.1

package/dist/schema.js

@@ -0,0 +1,304 @@
+/**
+ * The want contract: what a person asked for right now, and what they told
+ * us to keep doing.
+ *
+ * Two record families live here and they are deliberately not merged. An
+ * INTENT is a single request, interpreted, carrying a confidence, and true
+ * only until it has been acted on. A STANDING INSTRUCTION is a durable
+ * answer that keeps speaking for the person until it expires or the policy
+ * it answered is superseded. Both are consumer-authored data; nothing in
+ * this package ships a value, a topic vocabulary, a jurisdiction rule, or
+ * an obligation of its own.
+ *
+ * THE THREE-STATE MODEL, PRESERVED
+ * ---------------------------------
+ * `StandingState` is three states, not two. `"absent"` (never asked) is a
+ * distinct value from `"denied"` (asked, refused), and neither is a
+ * boolean. Collapsing them would make "never asked" indistinguishable from
+ * a passing signal — the same absence-of-signal-looks-like-a-passing-signal
+ * failure this repository already writes down for gate exit codes (see
+ * this repository's own contribution guide, "Gate CLIs exit `0` clean,
+ * `1` findings, `2` could not run"). `"granted"` and `"denied"` each carry
+ * the policy version they answered and when; a bare boolean can carry
+ * neither, which is exactly what turns a stored answer into an unauditable
+ * guess instead of a record.
+ *
+ * A fourth value, `"stale"`, exists only as an EVALUATION status
+ * (`StandingEvaluation`), never as a stored state — staleness is computed
+ * by comparing a stored record against the policy in force and the clock,
+ * so writing it down would be storing a derivation that starts rotting the
+ * moment it is written.
+ *
+ * IDENTIFIERS
+ * ------------
+ * `subjectId` is the person the want belongs to; `actorId` is whoever or
+ * whatever is acting. They are separate fields in every signature in this
+ * package and are never unified, because "the system acted on its own
+ * reading" and "the person asked for this" are the two things this whole
+ * package exists to keep apart. Both are opaque host-owned references —
+ * never an email address, a name, a phone number, or an IP. See
+ * `audit-shape.check.ts` for the compile-time proof that the audit event
+ * carries nothing else.
+ *
+ * Validation here is hand-rolled over `unknown`, with no schema library,
+ * matching every other package in this workspace (see the root
+ * `AGENTS.md`). These validators exist for the boundary where records
+ * arrive as untyped JSON — a preference-centre route body, a file the CLI
+ * reads, a value read back out of a host's own store — before anything
+ * downstream is allowed to trust them.
+ */
+import { isOneOf, isPlainObject, pushIssue, optionalTimestamp, requireArrayOf, requireBoolean, requireNumber, requireString, requireTimestamp, } from "./validation.js";
+/** Every provenance value, for a caller validating untyped input. */
+export const STANDING_PROVENANCES = ["stated", "inferred"];
+/** Every audit event type, for a caller validating untyped input. */
+export const STANDING_AUDIT_EVENT_TYPES = [
+    "granted",
+    "denied",
+    "withdrawn",
+    "reopened",
+    "policy-superseded",
+    "window-elapsed",
+    "confirmed",
+    "misread",
+];
+/** Every disposition, for a caller validating untyped input. */
+export const INTENT_DISPOSITIONS = ["acted", "handed-off", "awaiting-confirmation"];
+/** Every verdict, for a caller validating untyped input. */
+export const CONFIRMATION_VERDICTS = ["confirmed", "misread", "unclear"];
+// ------------------------------------------------------------------ validators
+function result(value, issues) {
+    if (value === undefined || issues.length > 0)
+        return { ok: false, issues };
+    return { ok: true, value };
+}
+function readPolicyVersion(value, path, issues) {
+    if (!isPlainObject(value)) {
+        pushIssue(issues, path, "must be an object with policyId and version");
+        return undefined;
+    }
+    const before = issues.length;
+    const policyId = requireString(value.policyId, `${path}.policyId`, issues, { minLength: 1 });
+    const version = requireString(value.version, `${path}.version`, issues, { minLength: 1 });
+    if (issues.length > before || policyId === undefined || version === undefined)
+        return undefined;
+    return { policyId, version };
+}
+function readCurrencyWindow(value, path, issues) {
+    if (!isPlainObject(value)) {
+        pushIssue(issues, path, "must be an object with a whole-number days field");
+        return undefined;
+    }
+    const days = requireNumber(value.days, `${path}.days`, issues, { min: 0, integer: true });
+    if (days === undefined)
+        return undefined;
+    return { days };
+}
+function readStandingState(value, path, issues) {
+    if (!isPlainObject(value)) {
+        pushIssue(issues, path, "must be an object with a kind of absent, denied, or granted");
+        return undefined;
+    }
+    const kind = value.kind;
+    if (kind === "absent")
+        return { kind: "absent" };
+    if (kind !== "denied" && kind !== "granted") {
+        pushIssue(issues, `${path}.kind`, 'must be "absent", "denied", or "granted"');
+        return undefined;
+    }
+    const before = issues.length;
+    const policyVersion = readPolicyVersion(value.policyVersion, `${path}.policyVersion`, issues);
+    const decidedAt = requireTimestamp(value.decidedAt, `${path}.decidedAt`, issues);
+    if (issues.length > before || policyVersion === undefined || decidedAt === undefined)
+        return undefined;
+    return { kind, policyVersion, decidedAt };
+}
+function readStandingInstruction(value, path, issues) {
+    if (!isPlainObject(value)) {
+        pushIssue(issues, path, "must be an object");
+        return undefined;
+    }
+    const before = issues.length;
+    const instructionId = requireString(value.instructionId, `${path}.instructionId`, issues, { minLength: 1 });
+    const subjectId = requireString(value.subjectId, `${path}.subjectId`, issues, { minLength: 1 });
+    const topic = requireString(value.topic, `${path}.topic`, issues, { minLength: 1 });
+    const state = readStandingState(value.state, `${path}.state`, issues);
+    const currency = readCurrencyWindow(value.currency, `${path}.currency`, issues);
+    const confirmedAt = optionalTimestamp(value.confirmedAt, `${path}.confirmedAt`, issues);
+    if (!isOneOf(value.provenance, STANDING_PROVENANCES)) {
+        pushIssue(issues, `${path}.provenance`, 'must be "stated" or "inferred"');
+    }
+    if (issues.length > before)
+        return undefined;
+    if (instructionId === undefined || subjectId === undefined || topic === undefined || state === undefined || currency === undefined)
+        return undefined;
+    return {
+        instructionId,
+        subjectId,
+        topic,
+        state,
+        provenance: value.provenance,
+        currency,
+        ...(confirmedAt !== undefined ? { confirmedAt } : {}),
+    };
+}
+function readIntentRecord(value, path, issues) {
+    if (!isPlainObject(value)) {
+        pushIssue(issues, path, "must be an object");
+        return undefined;
+    }
+    const before = issues.length;
+    const intentId = requireString(value.intentId, `${path}.intentId`, issues, { minLength: 1 });
+    const subjectId = requireString(value.subjectId, `${path}.subjectId`, issues, { minLength: 1 });
+    const actorId = requireString(value.actorId, `${path}.actorId`, issues, { minLength: 1 });
+    const interpretation = requireString(value.interpretation, `${path}.interpretation`, issues, { minLength: 1 });
+    const confidence = requireNumber(value.confidence, `${path}.confidence`, issues, { min: 0, max: 1 });
+    const observedAt = requireTimestamp(value.observedAt, `${path}.observedAt`, issues);
+    if (!isOneOf(value.disposition, INTENT_DISPOSITIONS)) {
+        pushIssue(issues, `${path}.disposition`, 'must be "acted", "handed-off", or "awaiting-confirmation"');
+    }
+    if (issues.length > before)
+        return undefined;
+    if (intentId === undefined ||
+        subjectId === undefined ||
+        actorId === undefined ||
+        interpretation === undefined ||
+        confidence === undefined ||
+        observedAt === undefined) {
+        return undefined;
+    }
+    return { intentId, subjectId, actorId, interpretation, confidence, observedAt, disposition: value.disposition };
+}
+function readConfirmationRecord(value, path, issues) {
+    if (!isPlainObject(value)) {
+        pushIssue(issues, path, "must be an object");
+        return undefined;
+    }
+    const before = issues.length;
+    const intentId = requireString(value.intentId, `${path}.intentId`, issues, { minLength: 1 });
+    const subjectId = requireString(value.subjectId, `${path}.subjectId`, issues, { minLength: 1 });
+    const confirmedAt = requireTimestamp(value.confirmedAt, `${path}.confirmedAt`, issues);
+    if (!isOneOf(value.verdict, CONFIRMATION_VERDICTS)) {
+        pushIssue(issues, `${path}.verdict`, 'must be "confirmed", "misread", or "unclear"');
+    }
+    if (issues.length > before)
+        return undefined;
+    if (intentId === undefined || subjectId === undefined || confirmedAt === undefined)
+        return undefined;
+    return { intentId, subjectId, verdict: value.verdict, confirmedAt };
+}
+function readInstructionUsage(value, path, issues) {
+    if (!isPlainObject(value)) {
+        pushIssue(issues, path, "must be an object");
+        return undefined;
+    }
+    const before = issues.length;
+    const instructionId = requireString(value.instructionId, `${path}.instructionId`, issues, { minLength: 1 });
+    const actorId = requireString(value.actorId, `${path}.actorId`, issues, { minLength: 1 });
+    const usedAt = requireTimestamp(value.usedAt, `${path}.usedAt`, issues);
+    const currentPolicyVersion = readPolicyVersion(value.currentPolicyVersion, `${path}.currentPolicyVersion`, issues);
+    if (issues.length > before)
+        return undefined;
+    if (instructionId === undefined || actorId === undefined || usedAt === undefined || currentPolicyVersion === undefined)
+        return undefined;
+    return { instructionId, actorId, usedAt, currentPolicyVersion };
+}
+function readPathCost(value, path, issues) {
+    if (!isPlainObject(value)) {
+        pushIssue(issues, path, "must be an object with steps, requiresContact and requiresAccount");
+        return undefined;
+    }
+    const before = issues.length;
+    const steps = requireNumber(value.steps, `${path}.steps`, issues, { min: 0, integer: true });
+    const requiresContact = requireBoolean(value.requiresContact, `${path}.requiresContact`, issues);
+    const requiresAccount = requireBoolean(value.requiresAccount, `${path}.requiresAccount`, issues);
+    if (issues.length > before || steps === undefined || requiresContact === undefined || requiresAccount === undefined)
+        return undefined;
+    return { steps, requiresContact, requiresAccount };
+}
+function readPreferencePath(value, path, issues) {
+    if (!isPlainObject(value)) {
+        pushIssue(issues, path, "must be an object");
+        return undefined;
+    }
+    const before = issues.length;
+    const surfaceId = requireString(value.surfaceId, `${path}.surfaceId`, issues, { minLength: 1 });
+    const topic = requireString(value.topic, `${path}.topic`, issues, { minLength: 1 });
+    const grant = readPathCost(value.grant, `${path}.grant`, issues);
+    const withdraw = value.withdraw === undefined ? undefined : readPathCost(value.withdraw, `${path}.withdraw`, issues);
+    if (issues.length > before || surfaceId === undefined || topic === undefined || grant === undefined)
+        return undefined;
+    return { surfaceId, topic, grant, ...(withdraw !== undefined ? { withdraw } : {}) };
+}
+/** Validates one untyped `StandingInstruction`. Never throws. */
+export function validateStandingInstruction(value) {
+    const issues = [];
+    return result(readStandingInstruction(value, "(root)", issues), issues);
+}
+/** Validates an untyped array of `StandingInstruction`s. Never throws. */
+export function validateStandingInstructions(value) {
+    const issues = [];
+    return result(requireArrayOf(value, "(root)", issues, readStandingInstruction), issues);
+}
+/** Validates one untyped `IntentRecord`. Never throws. */
+export function validateIntentRecord(value) {
+    const issues = [];
+    return result(readIntentRecord(value, "(root)", issues), issues);
+}
+/** Validates an untyped array of `IntentRecord`s. Never throws. */
+export function validateIntentRecords(value) {
+    const issues = [];
+    return result(requireArrayOf(value, "(root)", issues, readIntentRecord), issues);
+}
+/** Validates one untyped `ConfirmationRecord`. Never throws. */
+export function validateConfirmationRecord(value) {
+    const issues = [];
+    return result(readConfirmationRecord(value, "(root)", issues), issues);
+}
+/** Validates an untyped array of `ConfirmationRecord`s. Never throws. */
+export function validateConfirmationRecords(value) {
+    const issues = [];
+    return result(requireArrayOf(value, "(root)", issues, readConfirmationRecord), issues);
+}
+/** Validates an untyped array of `InstructionUsage`s. Never throws. */
+export function validateInstructionUsages(value) {
+    const issues = [];
+    return result(requireArrayOf(value, "(root)", issues, readInstructionUsage), issues);
+}
+/** Validates an untyped array of `PreferencePath`s. Never throws. */
+export function validatePreferencePaths(value) {
+    const issues = [];
+    return result(requireArrayOf(value, "(root)", issues, readPreferencePath), issues);
+}
+/**
+ * Validates an untyped `ConfidenceFloor`. Separate from the record
+ * validators because the floor is not a record: it is the one declared
+ * value the confirmation gate reads, and a run that cannot validate it
+ * must decline rather than substitute one.
+ */
+export function validateConfidenceFloor(value) {
+    const issues = [];
+    if (!isPlainObject(value)) {
+        pushIssue(issues, "(root)", "must be an object with a minimumConfidence field");
+        return { ok: false, issues };
+    }
+    const minimumConfidence = requireNumber(value.minimumConfidence, "(root).minimumConfidence", issues, { min: 0, max: 1 });
+    return result(minimumConfidence === undefined ? undefined : { minimumConfidence }, issues);
+}
+/** Validates an untyped `PolicyVersion`. Never throws. */
+export function validatePolicyVersion(value) {
+    const issues = [];
+    return result(readPolicyVersion(value, "(root)", issues), issues);
+}
+/** Convenience guard over `validateStandingInstruction`, for callers that only need the boolean answer at a type boundary. */
+export function isStandingInstruction(value) {
+    return validateStandingInstruction(value).ok;
+}
+/** Convenience guard over `validateIntentRecord`. */
+export function isIntentRecord(value) {
+    return validateIntentRecord(value).ok;
+}
+/** Convenience guard over `validateConfirmationRecord`. */
+export function isConfirmationRecord(value) {
+    return validateConfirmationRecord(value).ok;
+}
+//# sourceMappingURL=schema.js.map

package/dist/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../src/schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AAEH,OAAO,EACL,OAAO,EACP,aAAa,EACb,SAAS,EACT,iBAAiB,EACjB,cAAc,EACd,cAAc,EACd,aAAa,EACb,aAAa,EACb,gBAAgB,GAGjB,MAAM,iBAAiB,CAAC;AAgCzB,qEAAqE;AACrE,MAAM,CAAC,MAAM,oBAAoB,GAAkC,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;AAuG1F,qEAAqE;AACrE,MAAM,CAAC,MAAM,0BAA0B,GAAsC;IAC3E,SAAS;IACT,QAAQ;IACR,WAAW;IACX,UAAU;IACV,mBAAmB;IACnB,gBAAgB;IAChB,WAAW;IACX,SAAS;CACV,CAAC;AA4DF,gEAAgE;AAChE,MAAM,CAAC,MAAM,mBAAmB,GAAiC,CAAC,OAAO,EAAE,YAAY,EAAE,uBAAuB,CAAC,CAAC;AAmClH,4DAA4D;AAC5D,MAAM,CAAC,MAAM,qBAAqB,GAAmC,CAAC,WAAW,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;AAsEzG,gFAAgF;AAEhF,SAAS,MAAM,CAAI,KAAoB,EAAE,MAAyB;IAChE,IAAI,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAC3E,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAC7B,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc,EAAE,IAAY,EAAE,MAAyB;IAChF,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,6CAA6C,CAAC,CAAC;QACvE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7B,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,IAAI,WAAW,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;IAC7F,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,IAAI,UAAU,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;IAC1F,IAAI,MAAM,CAAC,MAAM,GAAG,MAAM,IAAI,QAAQ,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAChG,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AAC/B,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc,EAAE,IAAY,EAAE,MAAyB;IACjF,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,kDAAkD,CAAC,CAAC;QAC5E,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,EAAE,GAAG,IAAI,OAAO,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1F,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACzC,OAAO,EAAE,IAAI,EAAE,CAAC;AAClB,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc,EAAE,IAAY,EAAE,MAAyB;IAChF,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,6DAA6D,CAAC,CAAC;QACvF,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACxB,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IACjD,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5C,SAAS,CAAC,MAAM,EAAE,GAAG,IAAI,OAAO,EAAE,0CAA0C,CAAC,CAAC;QAC9E,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7B,MAAM,aAAa,GAAG,iBAAiB,CAAC,KAAK,CAAC,aAAa,EAAE,GAAG,IAAI,gBAAgB,EAAE,MAAM,CAAC,CAAC;IAC9F,MAAM,SAAS,GAAG,gBAAgB,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,IAAI,YAAY,EAAE,MAAM,CAAC,CAAC;IACjF,IAAI,MAAM,CAAC,MAAM,GAAG,MAAM,IAAI,aAAa,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACvG,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC;AAC5C,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAc,EAAE,IAAY,EAAE,MAAyB;IACtF,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,mBAAmB,CAAC,CAAC;QAC7C,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7B,MAAM,aAAa,GAAG,aAAa,CAAC,KAAK,CAAC,aAAa,EAAE,GAAG,IAAI,gBAAgB,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;IAC5G,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,IAAI,YAAY,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;IAChG,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,IAAI,QAAQ,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;IACpF,MAAM,KAAK,GAAG,iBAAiB,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,IAAI,QAAQ,EAAE,MAAM,CAAC,CAAC;IACtE,MAAM,QAAQ,GAAG,kBAAkB,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,IAAI,WAAW,EAAE,MAAM,CAAC,CAAC;IAChF,MAAM,WAAW,GAAG,iBAAiB,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,IAAI,cAAc,EAAE,MAAM,CAAC,CAAC;IACxF,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,oBAAoB,CAAC,EAAE,CAAC;QACrD,SAAS,CAAC,MAAM,EAAE,GAAG,IAAI,aAAa,EAAE,gCAAgC,CAAC,CAAC;IAC5E,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,GAAG,MAAM;QAAE,OAAO,SAAS,CAAC;IAC7C,IAAI,aAAa,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACrJ,OAAO;QACL,aAAa;QACb,SAAS;QACT,KAAK;QACL,KAAK;QACL,UAAU,EAAE,KAAK,CAAC,UAAgC;QAClD,QAAQ;QACR,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACtD,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc,EAAE,IAAY,EAAE,MAAyB;IAC/E,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,mBAAmB,CAAC,CAAC;QAC7C,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7B,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,IAAI,WAAW,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;IAC7F,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,IAAI,YAAY,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;IAChG,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,IAAI,UAAU,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;IAC1F,MAAM,cAAc,GAAG,aAAa,CAAC,KAAK,CAAC,cAAc,EAAE,GAAG,IAAI,iBAAiB,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;IAC/G,MAAM,UAAU,GAAG,aAAa,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,IAAI,aAAa,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IACrG,MAAM,UAAU,GAAG,gBAAgB,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,IAAI,aAAa,EAAE,MAAM,CAAC,CAAC;IACpF,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,mBAAmB,CAAC,EAAE,CAAC;QACrD,SAAS,CAAC,MAAM,EAAE,GAAG,IAAI,cAAc,EAAE,2DAA2D,CAAC,CAAC;IACxG,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,GAAG,MAAM;QAAE,OAAO,SAAS,CAAC;IAC7C,IACE,QAAQ,KAAK,SAAS;QACtB,SAAS,KAAK,SAAS;QACvB,OAAO,KAAK,SAAS;QACrB,cAAc,KAAK,SAAS;QAC5B,UAAU,KAAK,SAAS;QACxB,UAAU,KAAK,SAAS,EACxB,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,KAAK,CAAC,WAAgC,EAAE,CAAC;AACvI,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAc,EAAE,IAAY,EAAE,MAAyB;IACrF,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,mBAAmB,CAAC,CAAC;QAC7C,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7B,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,IAAI,WAAW,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;IAC7F,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,IAAI,YAAY,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;IAChG,MAAM,WAAW,GAAG,gBAAgB,CAAC,KAAK,CAAC,WAAW,EAAE,GAAG,IAAI,cAAc,EAAE,MAAM,CAAC,CAAC;IACvF,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,qBAAqB,CAAC,EAAE,CAAC;QACnD,SAAS,CAAC,MAAM,EAAE,GAAG,IAAI,UAAU,EAAE,8CAA8C,CAAC,CAAC;IACvF,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,GAAG,MAAM;QAAE,OAAO,SAAS,CAAC;IAC7C,IAAI,QAAQ,KAAK,SAAS,IAAI,SAAS,KAAK,SAAS,IAAI,WAAW,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACrG,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,CAAC,OAA8B,EAAE,WAAW,EAAE,CAAC;AAC7F,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc,EAAE,IAAY,EAAE,MAAyB;IACnF,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,mBAAmB,CAAC,CAAC;QAC7C,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7B,MAAM,aAAa,GAAG,aAAa,CAAC,KAAK,CAAC,aAAa,EAAE,GAAG,IAAI,gBAAgB,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;IAC5G,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,IAAI,UAAU,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;IAC1F,MAAM,MAAM,GAAG,gBAAgB,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,IAAI,SAAS,EAAE,MAAM,CAAC,CAAC;IACxE,MAAM,oBAAoB,GAAG,iBAAiB,CAAC,KAAK,CAAC,oBAAoB,EAAE,GAAG,IAAI,uBAAuB,EAAE,MAAM,CAAC,CAAC;IACnH,IAAI,MAAM,CAAC,MAAM,GAAG,MAAM;QAAE,OAAO,SAAS,CAAC;IAC7C,IAAI,aAAa,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,IAAI,oBAAoB,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACzI,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;AAClE,CAAC;AAED,SAAS,YAAY,CAAC,KAAc,EAAE,IAAY,EAAE,MAAyB;IAC3E,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,mEAAmE,CAAC,CAAC;QAC7F,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7B,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,IAAI,QAAQ,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7F,MAAM,eAAe,GAAG,cAAc,CAAC,KAAK,CAAC,eAAe,EAAE,GAAG,IAAI,kBAAkB,EAAE,MAAM,CAAC,CAAC;IACjG,MAAM,eAAe,GAAG,cAAc,CAAC,KAAK,CAAC,eAAe,EAAE,GAAG,IAAI,kBAAkB,EAAE,MAAM,CAAC,CAAC;IACjG,IAAI,MAAM,CAAC,MAAM,GAAG,MAAM,IAAI,KAAK,KAAK,SAAS,IAAI,eAAe,KAAK,SAAS,IAAI,eAAe,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACtI,OAAO,EAAE,KAAK,EAAE,eAAe,EAAE,eAAe,EAAE,CAAC;AACrD,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAc,EAAE,IAAY,EAAE,MAAyB;IACjF,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,mBAAmB,CAAC,CAAC;QAC7C,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7B,MAAM,SAAS,GAAG,aAAa,CAAC,KAAK,CAAC,SAAS,EAAE,GAAG,IAAI,YAAY,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;IAChG,MAAM,KAAK,GAAG,aAAa,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,IAAI,QAAQ,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;IACpF,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,IAAI,QAAQ,EAAE,MAAM,CAAC,CAAC;IACjE,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,IAAI,WAAW,EAAE,MAAM,CAAC,CAAC;IACrH,IAAI,MAAM,CAAC,MAAM,GAAG,MAAM,IAAI,SAAS,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACtH,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACtF,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,2BAA2B,CAAC,KAAc;IACxD,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,OAAO,MAAM,CAAC,uBAAuB,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;AAC1E,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,4BAA4B,CAAC,KAAc;IACzD,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,OAAO,MAAM,CAAC,cAAc,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,uBAAuB,CAAC,EAAE,MAAM,CAAC,CAAC;AAC1F,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,OAAO,MAAM,CAAC,gBAAgB,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;AACnE,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,OAAO,MAAM,CAAC,cAAc,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,gBAAgB,CAAC,EAAE,MAAM,CAAC,CAAC;AACnF,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,0BAA0B,CAAC,KAAc;IACvD,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,OAAO,MAAM,CAAC,sBAAsB,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;AACzE,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,2BAA2B,CAAC,KAAc;IACxD,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,OAAO,MAAM,CAAC,cAAc,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,sBAAsB,CAAC,EAAE,MAAM,CAAC,CAAC;AACzF,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,yBAAyB,CAAC,KAAc;IACtD,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,OAAO,MAAM,CAAC,cAAc,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,oBAAoB,CAAC,EAAE,MAAM,CAAC,CAAC;AACvF,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,uBAAuB,CAAC,KAAc;IACpD,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,OAAO,MAAM,CAAC,cAAc,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,kBAAkB,CAAC,EAAE,MAAM,CAAC,CAAC;AACrF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAAc;IACpD,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,SAAS,CAAC,MAAM,EAAE,QAAQ,EAAE,kDAAkD,CAAC,CAAC;QAChF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IAC/B,CAAC;IACD,MAAM,iBAAiB,GAAG,aAAa,CAAC,KAAK,CAAC,iBAAiB,EAAE,0BAA0B,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;IACzH,OAAO,MAAM,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,EAAE,MAAM,CAAC,CAAC;AAC7F,CAAC;AAED,0DAA0D;AAC1D,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,MAAM,MAAM,GAAsB,EAAE,CAAC;IACrC,OAAO,MAAM,CAAC,iBAAiB,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC;AACpE,CAAC;AAED,8HAA8H;AAC9H,MAAM,UAAU,qBAAqB,CAAC,KAAc;IAClD,OAAO,2BAA2B,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;AAC/C,CAAC;AAED,qDAAqD;AACrD,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,OAAO,oBAAoB,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;AACxC,CAAC;AAED,2DAA2D;AAC3D,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,OAAO,0BAA0B,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;AAC9C,CAAC"}

package/dist/validation.d.ts

@@ -0,0 +1,74 @@
+/**
+ * Shared, dependency-free validation primitives for `schema.ts`. This
+ * package hand-rolls its entity validation rather than depending on a
+ * schema library — see `schema.ts`'s top-level doc comment for why, and
+ * `@clossys/strategist`'s `validation.ts` for the precedent this
+ * file follows: plain type guards over `unknown`, accumulating findings
+ * into an array, never throwing.
+ *
+ * Every `require*` helper below takes the same three leading arguments —
+ * `value` (the candidate, still `unknown`), `path` (an absolute,
+ * human-readable location like `"instructions[2].currency.days"`), and
+ * `issues` (the caller's shared, mutated-in-place array) — and returns
+ * either the narrowed value or `undefined`. A caller never has to inspect
+ * the return value to know whether something went wrong: every failure is
+ * also recorded into `issues` at the moment it is discovered, so the
+ * standard pattern (used throughout `schema.ts`) is to snapshot
+ * `issues.length` before validating an object's fields and compare it
+ * after — if it grew, something in this object failed, regardless of which
+ * field.
+ */
+export interface ValidationIssue {
+    /** Absolute, dot/bracket-joined location, e.g. `"intents[0].confidence"`, or `"(root)"` for a whole-value shape problem. */
+    path: string;
+    message: string;
+}
+export type ValidationResult<T> = {
+    ok: true;
+    value: T;
+} | {
+    ok: false;
+    issues: ValidationIssue[];
+};
+/** A hand-rolled validator: takes an unknown value, returns a `ValidationResult<T>`. Never throws. */
+export type Validator<T> = (value: unknown) => ValidationResult<T>;
+export declare function isPlainObject(value: unknown): value is Record<string, unknown>;
+/** A closed-vocabulary check. Membership is decided by the caller's own literal list, never by a shape heuristic. */
+export declare function isOneOf<T extends string>(value: unknown, list: readonly T[]): value is T;
+/** A short, readable description of an arbitrary value for an error message — never the value's full (potentially huge, potentially person-attributable) content. */
+export declare function describeValue(value: unknown): string;
+export declare function pushIssue(issues: ValidationIssue[], path: string, message: string): void;
+export declare function requireString(value: unknown, path: string, issues: ValidationIssue[], opts?: {
+    minLength?: number;
+}): string | undefined;
+/** Same as `requireString`, except `undefined` is valid (the field is optional) and produces no issue. */
+export declare function optionalString(value: unknown, path: string, issues: ValidationIssue[], opts?: {
+    minLength?: number;
+}): string | undefined;
+/**
+ * A timestamp this package can actually order and subtract. A record whose
+ * time cannot be parsed is a validation failure, never a record silently
+ * treated as "now" — the currency gate's whole job is arithmetic on these
+ * values, and a fabricated one would make an expired instruction read as
+ * current.
+ */
+export declare function requireTimestamp(value: unknown, path: string, issues: ValidationIssue[]): string | undefined;
+/** Same as `requireTimestamp`, except `undefined` is valid (the field is optional) and produces no issue. */
+export declare function optionalTimestamp(value: unknown, path: string, issues: ValidationIssue[]): string | undefined;
+export declare function requireNumber(value: unknown, path: string, issues: ValidationIssue[], opts?: {
+    min?: number;
+    max?: number;
+    integer?: boolean;
+}): number | undefined;
+/** A real boolean, never a truthy string or number — the same discipline the donor's `isGpcSignal` applies to `present`. */
+export declare function requireBoolean(value: unknown, path: string, issues: ValidationIssue[]): boolean | undefined;
+/**
+ * An array where each item is read by `itemReader` — the same
+ * `(value, path, issues) => T | undefined` shape every function in this
+ * file follows, so an entity's own per-object reader (e.g. `readIntent` in
+ * `schema.ts`) plugs directly into this without an adapter.
+ */
+export declare function requireArrayOf<T>(value: unknown, path: string, issues: ValidationIssue[], itemReader: (item: unknown, itemPath: string, issues: ValidationIssue[]) => T | undefined): T[] | undefined;
+/** Joins `ValidationIssue[]` into one-line-per-issue text a CLI can print directly. */
+export declare function summarizeIssues(issues: readonly ValidationIssue[]): string;
+//# sourceMappingURL=validation.d.ts.map

package/dist/validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../src/validation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,MAAM,WAAW,eAAe;IAC9B,4HAA4H;IAC5H,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,gBAAgB,CAAC,CAAC,IAAI;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,eAAe,EAAE,CAAA;CAAE,CAAC;AAEpG,sGAAsG;AACtG,MAAM,MAAM,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,KAAK,gBAAgB,CAAC,CAAC,CAAC,CAAC;AAEnE,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAE9E;AAED,qHAAqH;AACrH,wBAAgB,OAAO,CAAC,CAAC,SAAS,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,EAAE,GAAG,KAAK,IAAI,CAAC,CAExF;AAED,qKAAqK;AACrK,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAQpD;AAED,wBAAgB,SAAS,CAAC,MAAM,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAExF;AAED,wBAAgB,aAAa,CAC3B,KAAK,EAAE,OAAO,EACd,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,eAAe,EAAE,EACzB,IAAI,CAAC,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5B,MAAM,GAAG,SAAS,CAWpB;AAED,0GAA0G;AAC1G,wBAAgB,cAAc,CAC5B,KAAK,EAAE,OAAO,EACd,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,eAAe,EAAE,EACzB,IAAI,CAAC,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5B,MAAM,GAAG,SAAS,CAGpB;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,GAAG,SAAS,CAQ5G;AAED,6GAA6G;AAC7G,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,GAAG,SAAS,CAG7G;AAED,wBAAgB,aAAa,CAC3B,KAAK,EAAE,OAAO,EACd,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,eAAe,EAAE,EACzB,IAAI,CAAC,EAAE;IAAE,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,GACvD,MAAM,GAAG,SAAS,CAkBpB;AAED,4HAA4H;AAC5H,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,GAAG,OAAO,GAAG,SAAS,CAM3G;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,CAAC,EAC9B,KAAK,EAAE,OAAO,EACd,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,eAAe,EAAE,EACzB,UAAU,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,eAAe,EAAE,KAAK,CAAC,GAAG,SAAS,GACxF,CAAC,EAAE,GAAG,SAAS,CAajB;AAED,uFAAuF;AACvF,wBAAgB,eAAe,CAAC,MAAM,EAAE,SAAS,eAAe,EAAE,GAAG,MAAM,CAE1E"}

package/dist/validation.js

@@ -0,0 +1,140 @@
+/**
+ * Shared, dependency-free validation primitives for `schema.ts`. This
+ * package hand-rolls its entity validation rather than depending on a
+ * schema library — see `schema.ts`'s top-level doc comment for why, and
+ * `@clossys/strategist`'s `validation.ts` for the precedent this
+ * file follows: plain type guards over `unknown`, accumulating findings
+ * into an array, never throwing.
+ *
+ * Every `require*` helper below takes the same three leading arguments —
+ * `value` (the candidate, still `unknown`), `path` (an absolute,
+ * human-readable location like `"instructions[2].currency.days"`), and
+ * `issues` (the caller's shared, mutated-in-place array) — and returns
+ * either the narrowed value or `undefined`. A caller never has to inspect
+ * the return value to know whether something went wrong: every failure is
+ * also recorded into `issues` at the moment it is discovered, so the
+ * standard pattern (used throughout `schema.ts`) is to snapshot
+ * `issues.length` before validating an object's fields and compare it
+ * after — if it grew, something in this object failed, regardless of which
+ * field.
+ */
+export function isPlainObject(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+/** A closed-vocabulary check. Membership is decided by the caller's own literal list, never by a shape heuristic. */
+export function isOneOf(value, list) {
+    return typeof value === "string" && list.includes(value);
+}
+/** A short, readable description of an arbitrary value for an error message — never the value's full (potentially huge, potentially person-attributable) content. */
+export function describeValue(value) {
+    if (value === undefined)
+        return "undefined";
+    if (value === null)
+        return "null";
+    if (Array.isArray(value))
+        return `an array (${value.length} item(s))`;
+    const t = typeof value;
+    if (t === "object")
+        return "an object";
+    if (t === "string")
+        return JSON.stringify(value);
+    return String(value);
+}
+export function pushIssue(issues, path, message) {
+    issues.push({ path, message });
+}
+export function requireString(value, path, issues, opts) {
+    if (typeof value !== "string") {
+        pushIssue(issues, path, `must be a string, got ${describeValue(value)}`);
+        return undefined;
+    }
+    const minLength = opts?.minLength ?? 0;
+    if (value.trim().length < minLength) {
+        pushIssue(issues, path, `must be at least ${minLength} non-whitespace character(s) long`);
+        return undefined;
+    }
+    return value;
+}
+/** Same as `requireString`, except `undefined` is valid (the field is optional) and produces no issue. */
+export function optionalString(value, path, issues, opts) {
+    if (value === undefined)
+        return undefined;
+    return requireString(value, path, issues, opts);
+}
+/**
+ * A timestamp this package can actually order and subtract. A record whose
+ * time cannot be parsed is a validation failure, never a record silently
+ * treated as "now" — the currency gate's whole job is arithmetic on these
+ * values, and a fabricated one would make an expired instruction read as
+ * current.
+ */
+export function requireTimestamp(value, path, issues) {
+    const asString = requireString(value, path, issues, { minLength: 1 });
+    if (asString === undefined)
+        return undefined;
+    if (Number.isNaN(Date.parse(asString))) {
+        pushIssue(issues, path, `must be a parseable timestamp, got ${describeValue(value)}`);
+        return undefined;
+    }
+    return asString;
+}
+/** Same as `requireTimestamp`, except `undefined` is valid (the field is optional) and produces no issue. */
+export function optionalTimestamp(value, path, issues) {
+    if (value === undefined)
+        return undefined;
+    return requireTimestamp(value, path, issues);
+}
+export function requireNumber(value, path, issues, opts) {
+    if (typeof value !== "number" || !Number.isFinite(value)) {
+        pushIssue(issues, path, `must be a finite number, got ${describeValue(value)}`);
+        return undefined;
+    }
+    if (opts?.integer === true && !Number.isInteger(value)) {
+        pushIssue(issues, path, `must be a whole number, got ${describeValue(value)}`);
+        return undefined;
+    }
+    if (opts?.min !== undefined && value < opts.min) {
+        pushIssue(issues, path, `must be at least ${opts.min}, got ${describeValue(value)}`);
+        return undefined;
+    }
+    if (opts?.max !== undefined && value > opts.max) {
+        pushIssue(issues, path, `must be at most ${opts.max}, got ${describeValue(value)}`);
+        return undefined;
+    }
+    return value;
+}
+/** A real boolean, never a truthy string or number — the same discipline the donor's `isGpcSignal` applies to `present`. */
+export function requireBoolean(value, path, issues) {
+    if (typeof value !== "boolean") {
+        pushIssue(issues, path, `must be a boolean, got ${describeValue(value)}`);
+        return undefined;
+    }
+    return value;
+}
+/**
+ * An array where each item is read by `itemReader` — the same
+ * `(value, path, issues) => T | undefined` shape every function in this
+ * file follows, so an entity's own per-object reader (e.g. `readIntent` in
+ * `schema.ts`) plugs directly into this without an adapter.
+ */
+export function requireArrayOf(value, path, issues, itemReader) {
+    if (!Array.isArray(value)) {
+        pushIssue(issues, path, `must be an array, got ${describeValue(value)}`);
+        return undefined;
+    }
+    const out = [];
+    let ok = true;
+    value.forEach((item, i) => {
+        const result = itemReader(item, `${path}[${i}]`, issues);
+        if (result === undefined)
+            ok = false;
+        else
+            out.push(result);
+    });
+    return ok ? out : undefined;
+}
+/** Joins `ValidationIssue[]` into one-line-per-issue text a CLI can print directly. */
+export function summarizeIssues(issues) {
+    return issues.map((issue) => `${issue.path}: ${issue.message}`).join("; ");
+}
+//# sourceMappingURL=validation.js.map

package/dist/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../src/validation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAaH,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,qHAAqH;AACrH,MAAM,UAAU,OAAO,CAAmB,KAAc,EAAE,IAAkB;IAC1E,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAK,IAA0B,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAClF,CAAC;AAED,qKAAqK;AACrK,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,WAAW,CAAC;IAC5C,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,MAAM,CAAC;IAClC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,aAAa,KAAK,CAAC,MAAM,WAAW,CAAC;IACtE,MAAM,CAAC,GAAG,OAAO,KAAK,CAAC;IACvB,IAAI,CAAC,KAAK,QAAQ;QAAE,OAAO,WAAW,CAAC;IACvC,IAAI,CAAC,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACjD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,MAAyB,EAAE,IAAY,EAAE,OAAe;IAChF,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,KAAc,EACd,IAAY,EACZ,MAAyB,EACzB,IAA6B;IAE7B,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,yBAAyB,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACzE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,EAAE,SAAS,IAAI,CAAC,CAAC;IACvC,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;QACpC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,oBAAoB,SAAS,mCAAmC,CAAC,CAAC;QAC1F,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,0GAA0G;AAC1G,MAAM,UAAU,cAAc,CAC5B,KAAc,EACd,IAAY,EACZ,MAAyB,EACzB,IAA6B;IAE7B,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,OAAO,aAAa,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;AAClD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAc,EAAE,IAAY,EAAE,MAAyB;IACtF,MAAM,QAAQ,GAAG,aAAa,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;IACtE,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC7C,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QACvC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,sCAAsC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACtF,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,6GAA6G;AAC7G,MAAM,UAAU,iBAAiB,CAAC,KAAc,EAAE,IAAY,EAAE,MAAyB;IACvF,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,OAAO,gBAAgB,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;AAC/C,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,KAAc,EACd,IAAY,EACZ,MAAyB,EACzB,IAAwD;IAExD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACzD,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,gCAAgC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAChF,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,IAAI,EAAE,OAAO,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QACvD,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,+BAA+B,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC/E,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,IAAI,EAAE,GAAG,KAAK,SAAS,IAAI,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAChD,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,oBAAoB,IAAI,CAAC,GAAG,SAAS,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACrF,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,IAAI,EAAE,GAAG,KAAK,SAAS,IAAI,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAChD,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,mBAAmB,IAAI,CAAC,GAAG,SAAS,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACpF,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,4HAA4H;AAC5H,MAAM,UAAU,cAAc,CAAC,KAAc,EAAE,IAAY,EAAE,MAAyB;IACpF,IAAI,OAAO,KAAK,KAAK,SAAS,EAAE,CAAC;QAC/B,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,0BAA0B,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC1E,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAC5B,KAAc,EACd,IAAY,EACZ,MAAyB,EACzB,UAAyF;IAEzF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,yBAAyB,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACzE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,GAAG,GAAQ,EAAE,CAAC;IACpB,IAAI,EAAE,GAAG,IAAI,CAAC;IACd,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;QACxB,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;QACzD,IAAI,MAAM,KAAK,SAAS;YAAE,EAAE,GAAG,KAAK,CAAC;;YAChC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9B,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,eAAe,CAAC,MAAkC;IAChE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC7E,CAAC"}

package/dist/web/index.d.ts

@@ -0,0 +1,5 @@
+/** Must match package.json's `peerDependencies.react` exactly — `peer-guard.test.ts` asserts that directly. */
+export declare const REACT_DECLARED_RANGE = ">=18";
+export { useStandingWants } from "./useStandingWants.js";
+export type { StandingWantsClient, UseStandingWantsOptions, UseStandingWantsResult } from "./useStandingWants.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/web/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/web/index.ts"],"names":[],"mappings":"AAqBA,+GAA+G;AAC/G,eAAO,MAAM,oBAAoB,SAAS,CAAC;AAG3C,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,YAAY,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/web/index.js

@@ -0,0 +1,25 @@
+/**
+ * @clossys/butler/web — preference-surface state, built entirely on
+ * the root package's pure functions.
+ *
+ * `react`/`react-dom` are OPTIONAL peers of this subpath specifically (see
+ * package.json's `peerDependenciesMeta`) — importing
+ * `@clossys/butler` (the root) or `@clossys/butler/inbound`
+ * never pulls in React; only importing `@clossys/butler/web` does.
+ * This module asserts the installed `react` version against this package's
+ * declared range at import time, so an absent or incompatible React fails
+ * loudly here instead of crashing later inside a hook with no version named
+ * as the cause. See `internal/peer-version.ts` for the guard itself.
+ *
+ * This subpath ships no rendering and no copy. What a preference surface
+ * says to a person, and what it looks like, are the consumer's own values;
+ * what is offered here is the state machine underneath it, including the
+ * structural half of withdrawal parity — see `useStandingWants`.
+ */
+import { version as reactVersion } from "react";
+import { assertPeerVersion } from "./internal/peer-version.js";
+/** Must match package.json's `peerDependencies.react` exactly — `peer-guard.test.ts` asserts that directly. */
+export const REACT_DECLARED_RANGE = ">=18";
+assertPeerVersion({ peer: "react", declaredRange: REACT_DECLARED_RANGE, foundVersion: reactVersion });
+export { useStandingWants } from "./useStandingWants.js";
+//# sourceMappingURL=index.js.map

package/dist/web/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/web/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,OAAO,IAAI,YAAY,EAAE,MAAM,OAAO,CAAC;AAChD,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAE/D,+GAA+G;AAC/G,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC;AAC3C,iBAAiB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE,oBAAoB,EAAE,YAAY,EAAE,YAAY,EAAE,CAAC,CAAC;AAEtG,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/web/internal/peer-version.d.ts

@@ -0,0 +1,53 @@
+/**
+ * `assertPeerVersion` — the runtime half of `./web`'s "optional peer, no
+ * install-time signal in either direction" problem. `react`/`react-dom` are
+ * declared `peerDependenciesMeta: { optional: true }` (see package.json) so
+ * a consumer can install `@clossys/butler` (the root, provider-
+ * neutral core) without ever installing React — only `./web` needs it. But
+ * an ABSENT or OUT-OF-RANGE `react` produces no signal of any kind without
+ * this guard: a consumer on an incompatible React version would otherwise
+ * learn about it from whatever `./web` happened to crash on deep inside
+ * React itself, with nothing naming a version range as the cause. See
+ * `web/index.ts`'s own guard call, evaluated once at import time via
+ * `react`'s own exported `version`, for where this is wired in.
+ *
+ * This is the same obligation this repository's own contribution guide
+ * states for every requirement this workspace takes on: requiring a
+ * prerequisite is legitimate; failing silently when it is unmet is not,
+ * because that turns a setup error into a debugging session inside
+ * somebody else's codebase.
+ *
+ * PORTED, NOT SHARED, from `packages/consent/src/web/internal/peer-version.ts`
+ * — identical algorithm, copied rather than imported across a package
+ * boundary for the structural reason that file's own header gives: that
+ * package does not expose this as part of its public API surface, and even
+ * if it did, `@clossys/butler` would gain nothing by taking a real
+ * runtime dependency on a sibling just to reach one shared utility, and its
+ * "zero runtime dependencies" claim would then be wrong. Keep the copies in
+ * sync by hand if the ported range algorithm ever changes.
+ *
+ * DELIBERATELY PURE — NO `node:*` IMPORTS IN THIS FILE. `./web`'s entry
+ * point is reachable from a browser bundle (a client component rendering
+ * a preference surface), not just a Node process, so the version check reads
+ * `react`'s own exported `version` directly rather than any Node-only
+ * fs-based resolver.
+ */
+export interface AssertPeerVersionInput {
+    /** The optional peer's package name, e.g. `"react"`. */
+    peer: string;
+    /** This package's own `peerDependencies` range for `peer`. */
+    declaredRange: string;
+    /** The peer's real installed version, or `undefined` if it could not be resolved at all. */
+    foundVersion: string | undefined;
+}
+/**
+ * Throws a named, actionable error naming the package, the declared range,
+ * and the version actually found. Never returns a boolean — a guard must
+ * state where control goes when it declines. A missing peer and an
+ * out-of-range peer throw genuinely DIFFERENT messages — "not installed"
+ * and "installed but incompatible" are different problems with different
+ * fixes. An unparseable declared range or installed version is a third,
+ * equally loud error, never an assumed pass.
+ */
+export declare function assertPeerVersion(input: AssertPeerVersionInput): void;
+//# sourceMappingURL=peer-version.d.ts.map