@fayz-ai/core 0.15.0 → 0.16.0

package/dist/app/app-config.d.ts

@@ -0,0 +1,101 @@
+import type { TenantPluginBinding } from '../types/plugins';
+/** One activation row: a plugin, or one facet of it. */
+export interface AppConfigPlugin {
+    plugin: string;
+    /** null for the plugin itself; a name for one of its parts. */
+    facet: string | null;
+    status: 'active' | 'disabled';
+    /** Who turned it on — manual, plan, trial, agent, default. */
+    source: string;
+    config: Record<string, unknown>;
+    /** When a trial or courtesy ends; null is forever. */
+    expires_at: string | null;
+}
+/** The tenant's difference over the menu the plugins offer. */
+export interface AppConfigNavEntry {
+    key: string;
+    hidden: boolean;
+    label: string | null;
+    section: 'main' | 'secondary' | 'settings' | null;
+    position: number | null;
+}
+export interface AppConfig {
+    tenant_id: string | null;
+    branding?: Record<string, unknown>;
+    settings?: Record<string, unknown>;
+    plugins: AppConfigPlugin[];
+    nav: AppConfigNavEntry[];
+    permissions?: string[];
+    generated_at?: string;
+}
+/** What a caller with no resolvable tenant gets: nothing, legibly. */
+export declare const EMPTY_APP_CONFIG: AppConfig;
+/**
+ * Reads the whole configuration in one round trip.
+ *
+ * Never throws: a shell that cannot render because the configuration call
+ * failed is worse than a shell that renders the defaults. The failure is
+ * returned as an empty configuration, which is the same thing the RPC returns
+ * for a caller with no tenant — and both are visible in one place rather than
+ * as a blank screen.
+ */
+export declare function fetchAppConfig(client: unknown, options?: {
+    tenantId?: string;
+    force?: boolean;
+}): Promise<AppConfig>;
+/** Drops what is cached — called after any write through the config RPCs. */
+export declare function invalidateAppConfig(tenantId?: string): void;
+export declare function normalizeAppConfig(raw: Partial<AppConfig>): AppConfig;
+/**
+ * The activation rows as the plugin runtime already understands them.
+ *
+ * `resolvePluginRuntime` has accepted `tenantPlugins: TenantPluginBinding[]`
+ * since it was written and nothing ever supplied them from anywhere but a file.
+ * This is that supply — facet rows are folded into their plugin's config under
+ * `facets`, because a facet is a part of a plugin and not a plugin.
+ */
+export declare function toTenantPluginBindings(config: AppConfig): TenantPluginBinding[];
+/**
+ * Applies the tenant's menu composition to what the plugins offer.
+ *
+ * Only the difference is stored, so an entry with no row here keeps exactly the
+ * position and label its plugin gave it — which is what lets a plugin ship a new
+ * entry and have it reach every tenant.
+ */
+export declare function applyNavComposition<T extends {
+    key: string;
+    label?: string;
+    section?: string;
+    position?: number;
+}>(entries: T[], nav: AppConfigNavEntry[]): T[];
+/** The keys a generated app must NOT ship in a file: they are per-tenant. */
+export declare const TENANT_OWNED_MANIFEST_KEYS: readonly ["theme", "branding", "locale"];
+export interface ManifestLike {
+    [key: string]: unknown;
+    theme?: Record<string, unknown>;
+    branding?: Record<string, unknown>;
+    locale?: Record<string, unknown>;
+    surfaces?: Record<string, {
+        plugins?: Array<{
+            id: string;
+            config?: Record<string, unknown>;
+        }>;
+    } & Record<string, unknown>>;
+}
+/**
+ * Folds the tenant's configuration over the bundle's manifest.
+ *
+ * What stays the manifest's: the surfaces, their scaffolds, and which plugin
+ * ids the bundle can load at all — an import-graph fact that no database row can
+ * change, because the code either shipped or it did not.
+ *
+ * What the database decides: branding, locale, and whether each of those
+ * plugins is on for this tenant, with its settings. That is the whole point of
+ * ADR 0023 — eleven customers stop needing eleven repositories, and turning a
+ * feature on stops being a deploy.
+ *
+ * An empty config changes nothing, so a pool that has not run migration 150 yet
+ * renders exactly what it rendered before.
+ */
+export declare function applyAppConfigToManifest<T extends ManifestLike>(manifest: T, config: AppConfig): T;
+//# sourceMappingURL=app-config.d.ts.map

package/dist/app/app-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-config.d.ts","sourceRoot":"","sources":["../../src/app/app-config.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAA;AAE3D,wDAAwD;AACxD,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAA;IACd,+DAA+D;IAC/D,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,MAAM,EAAE,QAAQ,GAAG,UAAU,CAAA;IAC7B,8DAA8D;IAC9D,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC/B,sDAAsD;IACtD,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;CAC1B;AAED,+DAA+D;AAC/D,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,EAAE,OAAO,CAAA;IACf,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,OAAO,EAAE,MAAM,GAAG,WAAW,GAAG,UAAU,GAAG,IAAI,CAAA;IACjD,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;CACxB;AAED,MAAM,WAAW,SAAS;IACxB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAClC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAClC,OAAO,EAAE,eAAe,EAAE,CAAA;IAC1B,GAAG,EAAE,iBAAiB,EAAE,CAAA;IACxB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;IACtB,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AAED,sEAAsE;AACtE,eAAO,MAAM,gBAAgB,EAAE,SAKhB,CAAA;AAcf;;;;;;;;GAQG;AACH,wBAAsB,cAAc,CAClC,MAAM,EAAE,OAAO,EACf,OAAO,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,GACnD,OAAO,CAAC,SAAS,CAAC,CAcpB;AAED,6EAA6E;AAC7E,wBAAgB,mBAAmB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAG3D;AAED,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,CAAC,SAAS,CAAC,GAAG,SAAS,CAUrE;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,SAAS,GAAG,mBAAmB,EAAE,CA2B/E;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,SAAS;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,EAChH,OAAO,EAAE,CAAC,EAAE,EACZ,GAAG,EAAE,iBAAiB,EAAE,GACvB,CAAC,EAAE,CAeL;AAQD,6EAA6E;AAC7E,eAAO,MAAM,0BAA0B,0CAA2C,CAAA;AAElF,MAAM,WAAW,YAAY;IAC3B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;IACtB,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAClC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAChC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE;QAAE,OAAO,CAAC,EAAE,KAAK,CAAC;YAAE,EAAE,EAAE,MAAM,CAAC;YAAC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;SAAE,CAAC,CAAA;KAAE,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;CAC3H;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,wBAAwB,CAAC,CAAC,SAAS,YAAY,EAAE,QAAQ,EAAE,CAAC,EAAE,MAAM,EAAE,SAAS,GAAG,CAAC,CAoClG"}

package/dist/app/service-client.d.ts

@@ -0,0 +1,69 @@
+/** Why a call did not produce a value. Each one has a different right answer. */
+export type ServiceRefusal = 
+/** The service is not registered, or was turned off. */
+'unknown_service'
+/** No tenant in scope — a caller that cannot be placed. */
+ | 'no_tenant'
+/** The caller lacks the permission the service requires. */
+ | 'forbidden'
+/** The tenant has not contracted it: an upsell, not an error. */
+ | 'not_contracted'
+/** It did not answer in time. */
+ | 'timeout'
+/** It answered with a failure. */
+ | 'failed'
+/** There is nothing to call through (no client, no session). */
+ | 'unavailable';
+export interface ServiceSuccess<T> {
+    ok: true;
+    data: T;
+    durationMs: number;
+}
+export interface ServiceFailure {
+    ok: false;
+    reason: ServiceRefusal;
+    /** What the user can still do, as the service itself declared it. */
+    manualFallback?: string;
+    /** For `not_contracted`: what to offer. */
+    entitlement?: string;
+    plugin?: string;
+    /** For `forbidden`: what would be needed. */
+    permission?: string;
+    message?: string;
+}
+export type ServiceResult<T> = ServiceSuccess<T> | ServiceFailure;
+export interface CallServiceOptions {
+    /** Overrides the timeout the registry declares for this service. */
+    timeoutMs?: number;
+    /** The edge function that performs the HTTP leg. Defaults to 'service-router'. */
+    router?: string;
+    /**
+     * Calls on behalf of a tenant with no session — the event consumer's 2am
+     * reaction (#278). Requires a service-role client; a browser client passing
+     * this is refused by the router, not by trust.
+     */
+    tenantId?: string;
+}
+/**
+ * Calls a service by name.
+ *
+ * Two round trips by design. The first asks the database whether the call is
+ * allowed — which costs nothing and answers the same way everywhere, so a
+ * refusal never leaves the cluster and an unentitled tenant never reaches the
+ * service at all. Only an allowed call makes the second.
+ */
+export declare function callService<T = unknown>(client: unknown, name: string, payload?: Record<string, unknown>, options?: CallServiceOptions): Promise<ServiceResult<T>>;
+/**
+ * Calls a service for a tenant with no user present — the worker draining the
+ * event log (#277) reacting to a fact at 2am (#278).
+ *
+ * Same door, same refusals, same never-throws contract. What differs is who is
+ * asking: there is no person, so there is no permission to check, and the
+ * entitlement rule carries the whole decision because a tenant's contract is a
+ * property of the tenant rather than of who is looking.
+ *
+ * The client must hold the service role. A browser client that passes a tenant
+ * is refused by the router, which checks rather than trusts.
+ */
+export declare function callServiceForTenant<T = unknown>(client: unknown, tenantId: string, name: string, payload?: Record<string, unknown>, options?: Omit<CallServiceOptions, 'tenantId'>): Promise<ServiceResult<T>>;
+//# sourceMappingURL=service-client.d.ts.map

package/dist/app/service-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-client.d.ts","sourceRoot":"","sources":["../../src/app/service-client.ts"],"names":[],"mappings":"AAgBA,iFAAiF;AACjF,MAAM,MAAM,cAAc;AACxB,wDAAwD;AACtD,iBAAiB;AACnB,2DAA2D;GACzD,WAAW;AACb,4DAA4D;GAC1D,WAAW;AACb,iEAAiE;GAC/D,gBAAgB;AAClB,iCAAiC;GAC/B,SAAS;AACX,kCAAkC;GAChC,QAAQ;AACV,gEAAgE;GAC9D,aAAa,CAAA;AAEjB,MAAM,WAAW,cAAc,CAAC,CAAC;IAC/B,EAAE,EAAE,IAAI,CAAA;IACR,IAAI,EAAE,CAAC,CAAA;IACP,UAAU,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,KAAK,CAAA;IACT,MAAM,EAAE,cAAc,CAAA;IACtB,qEAAqE;IACrE,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,2CAA2C;IAC3C,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,6CAA6C;IAC7C,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,MAAM,aAAa,CAAC,CAAC,IAAI,cAAc,CAAC,CAAC,CAAC,GAAG,cAAc,CAAA;AAajE,MAAM,WAAW,kBAAkB;IACjC,oEAAoE;IACpE,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,kFAAkF;IAClF,MAAM,CAAC,EAAE,MAAM,CAAA;IACf;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED;;;;;;;GAOG;AACH,wBAAsB,WAAW,CAAC,CAAC,GAAG,OAAO,EAC3C,MAAM,EAAE,OAAO,EACf,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,EACrC,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CA6D3B;AA2CD;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAAC,CAAC,GAAG,OAAO,EAC9C,MAAM,EAAE,OAAO,EACf,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAM,EACrC,OAAO,GAAE,IAAI,CAAC,kBAAkB,EAAE,UAAU,CAAM,GACjD,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAE3B"}

package/dist/{chunk-NBKFYGVD.js → chunk-2ZAUJVYP.js}

@@ -1413,6 +1413,21 @@ function resolveDataProvider(entityDef, mockData, options = {}) {
   return createMockProvider(entityDef, mockData);
 }
 
+// src/data/missing-objects.ts
+var missing = /* @__PURE__ */ new Set();
+function isKnownMissing(key) {
+  return missing.has(key);
+}
+function rememberIfMissing(key, error) {
+  if (!error) return false;
+  if (toDataError(error).kind !== "missing-object") return false;
+  missing.add(key);
+  return true;
+}
+function resetMissingObjects() {
+  missing.clear();
+}
+
 // src/data/query.ts
 var DEFAULT_TIMEOUT_MS = 15e3;
 var DEFAULT_RETRY_DELAY_MS = 150;
@@ -1677,6 +1692,6 @@ async function bulkRemove(provider, ids, options) {
   return { removed, failed };
 }
 
-export { CustomFieldsError, DATA_CHANGED_EVENT, DataError, FIELDS_TABLE, attachPersistentCache, bulkCreate, bulkRemove, cacheKeyFor, cachePrefixFor, clearCustomFieldsCache, countByTenant, createArchetypeProvider, createEventBus, createFayzApiProvider, createMockProvider, dataCall, dataQuery, emitDataChanged, eventBus, getActiveUnitId, getPersistentCache, invalidateCount, isUnitMode, localList, matchesDataChange, mergeCustomFields, registerDataTelemetry, replicaKeyFor, resetActiveUnit, resolveCustomFields, resolveDataProvider, setActiveUnitId, setUnitMode, subscribeActiveUnit, syncReplica, toDataError, useActiveUnitId, useDataChanged, useUnitMode, validateCustomFields, withCache, withOffline };
-//# sourceMappingURL=chunk-NBKFYGVD.js.map
-//# sourceMappingURL=chunk-NBKFYGVD.js.map
+export { CustomFieldsError, DATA_CHANGED_EVENT, DataError, FIELDS_TABLE, attachPersistentCache, bulkCreate, bulkRemove, cacheKeyFor, cachePrefixFor, clearCustomFieldsCache, countByTenant, createArchetypeProvider, createEventBus, createFayzApiProvider, createMockProvider, dataCall, dataQuery, emitDataChanged, eventBus, getActiveUnitId, getPersistentCache, invalidateCount, isKnownMissing, isUnitMode, localList, matchesDataChange, mergeCustomFields, registerDataTelemetry, rememberIfMissing, replicaKeyFor, resetActiveUnit, resetMissingObjects, resolveCustomFields, resolveDataProvider, setActiveUnitId, setUnitMode, subscribeActiveUnit, syncReplica, toDataError, useActiveUnitId, useDataChanged, useUnitMode, validateCustomFields, withCache, withOffline };
+//# sourceMappingURL=chunk-2ZAUJVYP.js.map
+//# sourceMappingURL=chunk-2ZAUJVYP.js.map