@contractspec/bundle.library 3.7.5 → 3.7.7

package/dist/node/components/docs/safety/SafetyAuditingPage.js

@@ -10,7 +10,7 @@ function SafetyAuditingPage() {
         className: "space-y-4",
         children: [
           /* @__PURE__ */ jsx("h1", {
-            className: "text-4xl font-bold",
+            className: "font-bold text-4xl",
             children: "Audit Logs"
           }),
           /* @__PURE__ */ jsxs("p", {
@@ -38,7 +38,7 @@ function SafetyAuditingPage() {
         className: "space-y-4",
         children: [
           /* @__PURE__ */ jsx("h2", {
-            className: "text-2xl font-bold",
+            className: "font-bold text-2xl",
             children: "Why audit logs matter"
           }),
           /* @__PURE__ */ jsxs("div", {
@@ -47,7 +47,7 @@ function SafetyAuditingPage() {
               /* @__PURE__ */ jsxs("div", {
                 children: [
                   /* @__PURE__ */ jsx("h3", {
-                    className: "text-lg font-semibold",
+                    className: "font-semibold text-lg",
                     children: "Accountability"
                   }),
                   /* @__PURE__ */ jsx("p", {
@@ -59,7 +59,7 @@ function SafetyAuditingPage() {
               /* @__PURE__ */ jsxs("div", {
                 children: [
                   /* @__PURE__ */ jsx("h3", {
-                    className: "text-lg font-semibold",
+                    className: "font-semibold text-lg",
                     children: "Security"
                   }),
                   /* @__PURE__ */ jsx("p", {
@@ -71,7 +71,7 @@ function SafetyAuditingPage() {
               /* @__PURE__ */ jsxs("div", {
                 children: [
                   /* @__PURE__ */ jsx("h3", {
-                    className: "text-lg font-semibold",
+                    className: "font-semibold text-lg",
                     children: "Compliance"
                   }),
                   /* @__PURE__ */ jsx("p", {
@@ -83,7 +83,7 @@ function SafetyAuditingPage() {
               /* @__PURE__ */ jsxs("div", {
                 children: [
                   /* @__PURE__ */ jsx("h3", {
-                    className: "text-lg font-semibold",
+                    className: "font-semibold text-lg",
                     children: "Debugging"
                   }),
                   /* @__PURE__ */ jsx("p", {
@@ -100,7 +100,7 @@ function SafetyAuditingPage() {
         className: "space-y-4",
         children: [
           /* @__PURE__ */ jsx("h2", {
-            className: "text-2xl font-bold",
+            className: "font-bold text-2xl",
             children: "What ContractSpec logs"
           }),
           /* @__PURE__ */ jsx("p", {
@@ -108,7 +108,7 @@ function SafetyAuditingPage() {
             children: "ContractSpec automatically logs every significant operation, including:"
           }),
           /* @__PURE__ */ jsxs("ul", {
-            className: "text-muted-foreground list-inside list-disc space-y-2",
+            className: "list-inside list-disc space-y-2 text-muted-foreground",
             children: [
               /* @__PURE__ */ jsxs("li", {
                 children: [
@@ -173,7 +173,7 @@ function SafetyAuditingPage() {
         className: "space-y-4",
         children: [
           /* @__PURE__ */ jsx("h2", {
-            className: "text-2xl font-bold",
+            className: "font-bold text-2xl",
             children: "Audit log format"
           }),
           /* @__PURE__ */ jsx("p", {
@@ -181,7 +181,7 @@ function SafetyAuditingPage() {
             children: "Each audit log entry is a structured JSON object containing:"
           }),
           /* @__PURE__ */ jsx("div", {
-            className: "bg-background/50 border-border text-muted-foreground overflow-x-auto rounded-lg border p-4 font-mono text-sm",
+            className: "overflow-x-auto rounded-lg border border-border bg-background/50 p-4 font-mono text-muted-foreground text-sm",
             children: /* @__PURE__ */ jsx("pre", {
               children: `{
   "timestamp": "2025-11-13T14:32:15.123Z",
@@ -223,7 +223,7 @@ function SafetyAuditingPage() {
         className: "space-y-4",
         children: [
           /* @__PURE__ */ jsx("h2", {
-            className: "text-2xl font-bold",
+            className: "font-bold text-2xl",
             children: "Storage and retention"
           }),
           /* @__PURE__ */ jsx("p", {
@@ -235,7 +235,7 @@ function SafetyAuditingPage() {
             children: "ContractSpec supports multiple storage backends:"
           }),
           /* @__PURE__ */ jsxs("ul", {
-            className: "text-muted-foreground list-inside list-disc space-y-2",
+            className: "list-inside list-disc space-y-2 text-muted-foreground",
             children: [
               /* @__PURE__ */ jsxs("li", {
                 children: [
@@ -273,7 +273,7 @@ function SafetyAuditingPage() {
         className: "space-y-4",
         children: [
           /* @__PURE__ */ jsx("h2", {
-            className: "text-2xl font-bold",
+            className: "font-bold text-2xl",
             children: "Querying audit logs"
           }),
           /* @__PURE__ */ jsx("p", {
@@ -281,7 +281,7 @@ function SafetyAuditingPage() {
             children: "ContractSpec provides a query API for searching audit logs. You can filter by:"
           }),
           /* @__PURE__ */ jsxs("ul", {
-            className: "text-muted-foreground list-inside list-disc space-y-2",
+            className: "list-inside list-disc space-y-2 text-muted-foreground",
             children: [
               /* @__PURE__ */ jsx("li", {
                 children: "Time range"
@@ -310,11 +310,11 @@ function SafetyAuditingPage() {
         className: "space-y-4",
         children: [
           /* @__PURE__ */ jsx("h2", {
-            className: "text-2xl font-bold",
+            className: "font-bold text-2xl",
             children: "Best practices"
           }),
           /* @__PURE__ */ jsxs("ul", {
-            className: "text-muted-foreground list-inside list-disc space-y-2",
+            className: "list-inside list-disc space-y-2 text-muted-foreground",
             children: [
               /* @__PURE__ */ jsxs("li", {
                 children: [

package/dist/node/components/docs/safety/SafetyMigrationsPage.js

@@ -10,7 +10,7 @@ function SafetyMigrationsPage() {
         className: "space-y-4",
         children: [
           /* @__PURE__ */ jsx("h1", {
-            className: "text-4xl font-bold",
+            className: "font-bold text-4xl",
             children: "Migrations"
           }),
           /* @__PURE__ */ jsxs("p", {
@@ -38,7 +38,7 @@ function SafetyMigrationsPage() {
         className: "space-y-4",
         children: [
           /* @__PURE__ */ jsx("h2", {
-            className: "text-2xl font-bold",
+            className: "font-bold text-2xl",
             children: "Why migrations matter"
           }),
           /* @__PURE__ */ jsx("p", {
@@ -46,7 +46,7 @@ function SafetyMigrationsPage() {
             children: "As your application evolves, you'll need to change your data model—adding new fields, renaming tables, changing data types, or restructuring relationships. Without a disciplined approach, these changes can lead to:"
           }),
           /* @__PURE__ */ jsxs("ul", {
-            className: "text-muted-foreground list-inside list-disc space-y-2",
+            className: "list-inside list-disc space-y-2 text-muted-foreground",
             children: [
               /* @__PURE__ */ jsx("li", {
                 children: "Data loss or corruption"
@@ -72,7 +72,7 @@ function SafetyMigrationsPage() {
         className: "space-y-4",
         children: [
           /* @__PURE__ */ jsx("h2", {
-            className: "text-2xl font-bold",
+            className: "font-bold text-2xl",
             children: "How MigrationSpec works"
           }),
           /* @__PURE__ */ jsxs("p", {
@@ -87,7 +87,7 @@ function SafetyMigrationsPage() {
             ]
           }),
           /* @__PURE__ */ jsxs("ul", {
-            className: "text-muted-foreground list-inside list-disc space-y-2",
+            className: "list-inside list-disc space-y-2 text-muted-foreground",
             children: [
               /* @__PURE__ */ jsxs("li", {
                 children: [
@@ -137,7 +137,7 @@ function SafetyMigrationsPage() {
         className: "space-y-4",
         children: [
           /* @__PURE__ */ jsx("h2", {
-            className: "text-2xl font-bold",
+            className: "font-bold text-2xl",
             children: "Example MigrationSpec"
           }),
           /* @__PURE__ */ jsx("p", {
@@ -145,7 +145,7 @@ function SafetyMigrationsPage() {
             children: "Here's a migration that adds an email verification field to the users table:"
           }),
           /* @__PURE__ */ jsx("div", {
-            className: "bg-background/50 border-border text-muted-foreground overflow-x-auto rounded-lg border p-4 font-mono text-sm",
+            className: "overflow-x-auto rounded-lg border border-border bg-background/50 p-4 font-mono text-muted-foreground text-sm",
             children: /* @__PURE__ */ jsx("pre", {
               children: `migrationId: add-email-verified
 version: 2025-11-13-001
@@ -179,7 +179,7 @@ validation:
         className: "space-y-4",
         children: [
           /* @__PURE__ */ jsx("h2", {
-            className: "text-2xl font-bold",
+            className: "font-bold text-2xl",
             children: "Running migrations"
           }),
           /* @__PURE__ */ jsx("p", {
@@ -187,7 +187,7 @@ validation:
             children: "Migrations are applied automatically during deployment. The ContractSpec runtime:"
           }),
           /* @__PURE__ */ jsxs("ol", {
-            className: "text-muted-foreground list-inside list-decimal space-y-2",
+            className: "list-inside list-decimal space-y-2 text-muted-foreground",
             children: [
               /* @__PURE__ */ jsx("li", {
                 children: "Checks which migrations have already been applied (stored in a migrations table)."
@@ -216,7 +216,7 @@ validation:
         className: "space-y-4",
         children: [
           /* @__PURE__ */ jsx("h2", {
-            className: "text-2xl font-bold",
+            className: "font-bold text-2xl",
             children: "Rolling back migrations"
           }),
           /* @__PURE__ */ jsxs("p", {
@@ -234,7 +234,7 @@ validation:
             children: "Note that rollbacks are not always possible—for example, if you've deleted a column, you cannot recover the data unless you have a backup. For destructive changes, it's best to use a multi-step migration:"
           }),
           /* @__PURE__ */ jsxs("ol", {
-            className: "text-muted-foreground list-inside list-decimal space-y-2",
+            className: "list-inside list-decimal space-y-2 text-muted-foreground",
             children: [
               /* @__PURE__ */ jsx("li", {
                 children: "Add the new column (reversible)."
@@ -256,11 +256,11 @@ validation:
         className: "space-y-4",
         children: [
           /* @__PURE__ */ jsx("h2", {
-            className: "text-2xl font-bold",
+            className: "font-bold text-2xl",
             children: "Best practices"
           }),
           /* @__PURE__ */ jsxs("ul", {
-            className: "text-muted-foreground list-inside list-disc space-y-2",
+            className: "list-inside list-disc space-y-2 text-muted-foreground",
             children: [
               /* @__PURE__ */ jsxs("li", {
                 children: [
@@ -326,7 +326,7 @@ validation:
         className: "space-y-4",
         children: [
           /* @__PURE__ */ jsx("h2", {
-            className: "text-2xl font-bold",
+            className: "font-bold text-2xl",
             children: "Zero-downtime migrations"
           }),
           /* @__PURE__ */ jsx("p", {
@@ -334,7 +334,7 @@ validation:
             children: "Some migrations can cause downtime if not handled carefully. For example, adding a NOT NULL column to a large table can lock the table for minutes. To avoid this, use a multi-step approach:"
           }),
           /* @__PURE__ */ jsxs("ol", {
-            className: "text-muted-foreground list-inside list-decimal space-y-2",
+            className: "list-inside list-decimal space-y-2 text-muted-foreground",
             children: [
               /* @__PURE__ */ jsx("li", {
                 children: "Add the column as nullable."

package/dist/node/components/docs/safety/SafetyOverviewPage.js

@@ -1,234 +1,97 @@
 // src/components/docs/safety/SafetyOverviewPage.tsx
 import Link from "@contractspec/lib.ui-link";
-import { ChevronRight } from "lucide-react";
 import { jsx, jsxs } from "react/jsx-runtime";
+var safetyPages = [
+  {
+    title: "Spec signing",
+    body: "Protect the integrity of what gets deployed and make changes verifiable.",
+    href: "/docs/safety/signing"
+  },
+  {
+    title: "Policy decision points",
+    body: "Apply governance consistently across operations, data access, and generated surfaces.",
+    href: "/docs/safety/pdp"
+  },
+  {
+    title: "Audit trails",
+    body: "Record operational and policy decisions with enough context to inspect and explain them later.",
+    href: "/docs/safety/auditing"
+  },
+  {
+    title: "Migrations",
+    body: "Evolve data and schema boundaries without losing control of the system.",
+    href: "/docs/safety/migrations"
+  },
+  {
+    title: "Tenant isolation",
+    body: "Keep configuration, access rules, and sensitive data bounded by tenant.",
+    href: "/docs/safety/tenant-isolation"
+  },
+  {
+    title: "Security and trust",
+    body: "Understand the trust model, release process, and security expectations around the OSS system.",
+    href: "/docs/safety/security-trust"
+  }
+];
 function SafetyOverviewPage() {
   return /* @__PURE__ */ jsxs("div", {
-    className: "space-y-8",
+    className: "space-y-10",
     children: [
       /* @__PURE__ */ jsxs("div", {
-        className: "space-y-4",
+        className: "space-y-3",
         children: [
+          /* @__PURE__ */ jsx("p", {
+            className: "editorial-kicker",
+            children: "Operate"
+          }),
           /* @__PURE__ */ jsx("h1", {
-            className: "text-4xl font-bold",
-            children: "Safety Overview"
+            className: "font-serif text-4xl tracking-[-0.04em] md:text-5xl",
+            children: "Safety is part of the system model, not an afterthought."
           }),
-          /* @__PURE__ */ jsxs("p", {
-            className: "text-muted-foreground",
-            children: [
-              "ContractSpec is designed with ",
-              /* @__PURE__ */ jsx("strong", {
-                children: "safety by default"
-              }),
-              ". Every operation is governed by policies, every change is audited, and every deployment is reversible. This section covers the core safety mechanisms that protect your application and data."
-            ]
+          /* @__PURE__ */ jsx("p", {
+            className: "max-w-3xl text-lg text-muted-foreground leading-8",
+            children: "ContractSpec is meant to survive real change: new generated surfaces, policy updates, migrations, integration churn, and operator handoffs. The safety layer makes those changes inspectable, reversible, and governed."
           })
         ]
       }),
       /* @__PURE__ */ jsxs("div", {
-        className: "space-y-4",
+        className: "editorial-proof-strip",
         children: [
-          /* @__PURE__ */ jsx("h2", {
-            className: "text-2xl font-bold",
-            children: "Core safety features"
-          }),
           /* @__PURE__ */ jsxs("div", {
-            className: "space-y-6",
+            className: "editorial-stat",
             children: [
-              /* @__PURE__ */ jsxs("div", {
-                className: "space-y-2",
-                children: [
-                  /* @__PURE__ */ jsx("h3", {
-                    className: "text-xl font-semibold",
-                    children: /* @__PURE__ */ jsx(Link, {
-                      href: "/docs/safety/signing",
-                      className: "text-violet-400 hover:text-violet-300",
-                      children: "Spec Signing"
-                    })
-                  }),
-                  /* @__PURE__ */ jsx("p", {
-                    className: "text-muted-foreground",
-                    children: "All specifications are cryptographically signed before deployment. This ensures that only authorized changes reach production and that specs cannot be tampered with in transit or at rest. Signatures are verified at runtime, and unsigned specs are rejected."
-                  })
-                ]
-              }),
-              /* @__PURE__ */ jsxs("div", {
-                className: "space-y-2",
-                children: [
-                  /* @__PURE__ */ jsx("h3", {
-                    className: "text-xl font-semibold",
-                    children: /* @__PURE__ */ jsx(Link, {
-                      href: "/docs/safety/pdp",
-                      className: "text-violet-400 hover:text-violet-300",
-                      children: "Policy Decision Points (PDP)"
-                    })
-                  }),
-                  /* @__PURE__ */ jsx("p", {
-                    className: "text-muted-foreground",
-                    children: "Every API call, UI render, and data access passes through a centralized Policy Decision Point. The PDP evaluates attribute-based access control (ABAC) rules and PII policies to determine whether the operation is allowed. This ensures consistent enforcement across your entire application."
-                  })
-                ]
-              }),
-              /* @__PURE__ */ jsxs("div", {
-                className: "space-y-2",
-                children: [
-                  /* @__PURE__ */ jsx("h3", {
-                    className: "text-xl font-semibold",
-                    children: /* @__PURE__ */ jsx(Link, {
-                      href: "/docs/safety/auditing",
-                      className: "text-violet-400 hover:text-violet-300",
-                      children: "Audit Logs"
-                    })
-                  }),
-                  /* @__PURE__ */ jsx("p", {
-                    className: "text-muted-foreground",
-                    children: "ContractSpec automatically records every operation in tamper-evident audit logs. These logs capture who did what, when, and why—including policy decisions, data access, and administrative actions. Audit logs are essential for compliance, security investigations, and debugging."
-                  })
-                ]
+              /* @__PURE__ */ jsx("span", {
+                className: "editorial-label",
+                children: "Operating rule"
               }),
-              /* @__PURE__ */ jsxs("div", {
-                className: "space-y-2",
-                children: [
-                  /* @__PURE__ */ jsx("h3", {
-                    className: "text-xl font-semibold",
-                    children: /* @__PURE__ */ jsx(Link, {
-                      href: "/docs/safety/migrations",
-                      className: "text-violet-400 hover:text-violet-300",
-                      children: "Migrations"
-                    })
-                  }),
-                  /* @__PURE__ */ jsxs("p", {
-                    className: "text-muted-foreground",
-                    children: [
-                      "Schema and data migrations are managed through",
-                      " ",
-                      /* @__PURE__ */ jsx("strong", {
-                        children: "MigrationSpecs"
-                      }),
-                      ". Each migration is versioned, reversible, and tested before deployment. This allows you to evolve your application safely without downtime or data loss."
-                    ]
-                  })
-                ]
-              }),
-              /* @__PURE__ */ jsxs("div", {
-                className: "space-y-2",
-                children: [
-                  /* @__PURE__ */ jsx("h3", {
-                    className: "text-xl font-semibold",
-                    children: "Dark Launch & Rollback"
-                  }),
-                  /* @__PURE__ */ jsx("p", {
-                    className: "text-muted-foreground",
-                    children: 'New features can be deployed in "dark launch" mode, where they run in production but are not visible to users. This allows you to test performance and correctness with real traffic before enabling the feature. If issues arise, you can instantly roll back to the previous version without redeploying.'
-                  })
-                ]
-              }),
-              /* @__PURE__ */ jsxs("div", {
-                className: "space-y-2",
-                children: [
-                  /* @__PURE__ */ jsx("h3", {
-                    className: "text-xl font-semibold",
-                    children: "Data Classification"
-                  }),
-                  /* @__PURE__ */ jsx("p", {
-                    className: "text-muted-foreground",
-                    children: "Fields in your specs can be tagged with sensitivity levels (e.g., PII, PHI, confidential). The policy engine uses these tags to enforce access controls, redaction rules, and data retention policies automatically. This reduces the risk of accidental data leaks."
-                  })
-                ]
+              /* @__PURE__ */ jsx("span", {
+                className: "editorial-stat-value",
+                children: "explicit change beats hidden mutation"
               })
             ]
-          })
-        ]
-      }),
-      /* @__PURE__ */ jsxs("div", {
-        className: "space-y-4",
-        children: [
-          /* @__PURE__ */ jsx("h2", {
-            className: "text-2xl font-bold",
-            children: "Why safety matters"
           }),
           /* @__PURE__ */ jsx("p", {
-            className: "text-muted-foreground",
-            children: "Modern applications handle sensitive data and critical operations. A single bug or misconfiguration can lead to data breaches, compliance violations, or service outages. ContractSpec's safety features are not optional add-ons—they are built into the core platform and enforced automatically."
-          }),
-          /* @__PURE__ */ jsx("p", {
-            className: "text-muted-foreground",
-            children: "By making safety the default, ContractSpec allows you to move fast without breaking things. You can deploy new features confidently, knowing that policies are enforced, changes are audited, and rollbacks are always available."
+            className: "max-w-2xl text-muted-foreground text-sm leading-7",
+            children: "Use policies, signing, audit trails, and migrations to keep the system legible even as AI-assisted workflows accelerate change volume."
           })
         ]
       }),
-      /* @__PURE__ */ jsxs("div", {
-        className: "space-y-4",
-        children: [
-          /* @__PURE__ */ jsx("h2", {
-            className: "text-2xl font-bold",
-            children: "Next steps"
-          }),
-          /* @__PURE__ */ jsx("p", {
-            className: "text-muted-foreground",
-            children: "Explore each safety feature in detail using the links above, or continue with the advanced topics:"
-          }),
-          /* @__PURE__ */ jsxs("div", {
-            className: "flex flex-wrap gap-4 pt-4",
-            children: [
-              /* @__PURE__ */ jsxs(Link, {
-                href: "/docs/safety/signing",
-                className: "btn-primary",
-                children: [
-                  "Spec Signing ",
-                  /* @__PURE__ */ jsx(ChevronRight, {
-                    size: 16,
-                    className: "inline"
-                  })
-                ]
-              }),
-              /* @__PURE__ */ jsxs(Link, {
-                href: "/docs/safety/pdp",
-                className: "btn-ghost",
-                children: [
-                  "Policy Decision Points ",
-                  /* @__PURE__ */ jsx(ChevronRight, {
-                    size: 16,
-                    className: "inline"
-                  })
-                ]
-              }),
-              /* @__PURE__ */ jsxs(Link, {
-                href: "/docs/safety/auditing",
-                className: "btn-ghost",
-                children: [
-                  "Audit Logs ",
-                  /* @__PURE__ */ jsx(ChevronRight, {
-                    size: 16,
-                    className: "inline"
-                  })
-                ]
-              }),
-              /* @__PURE__ */ jsxs(Link, {
-                href: "/docs/safety/migrations",
-                className: "btn-ghost",
-                children: [
-                  "Migrations ",
-                  /* @__PURE__ */ jsx(ChevronRight, {
-                    size: 16,
-                    className: "inline"
-                  })
-                ]
-              }),
-              /* @__PURE__ */ jsxs(Link, {
-                href: "/docs/safety/security-trust",
-                className: "btn-ghost",
-                children: [
-                  "Security & Trust ",
-                  /* @__PURE__ */ jsx(ChevronRight, {
-                    size: 16,
-                    className: "inline"
-                  })
-                ]
-              })
-            ]
-          })
-        ]
+      /* @__PURE__ */ jsx("div", {
+        className: "grid gap-4 md:grid-cols-2",
+        children: safetyPages.map((page) => /* @__PURE__ */ jsxs(Link, {
+          href: page.href,
+          className: "editorial-panel",
+          children: [
+            /* @__PURE__ */ jsx("h2", {
+              className: "font-semibold text-xl",
+              children: page.title
+            }),
+            /* @__PURE__ */ jsx("p", {
+              className: "mt-2 text-muted-foreground text-sm leading-7",
+              children: page.body
+            })
+          ]
+        }, page.href))
       })
     ]
   });