@feltdb/core 0.7.4 → 0.8.0

package/dist/module-intent.js

@@ -0,0 +1,81 @@
+import { formatFlowSpec, parseFlowSpec } from './flowspec.js';
+import { findFeltDBModules, listFeltDBModules, resolveFeltDBModule } from './module.js';
+async function sourceHash(source) {
+    const digest = await crypto.subtle.digest('SHA-256', new TextEncoder().encode(source.replace(/\r\n/g, '\n')));
+    return `sha256:${Array.from(new Uint8Array(digest), byte => byte.toString(16).padStart(2, '0')).join('')}`;
+}
+export function resolveModuleIntent(value) {
+    const match = /^\s*implement\s+([a-z0-9][a-z0-9-]*)\s*[.!]?\s*$/i.exec(value);
+    const incrementalBilling = /^\s*(?:add|support|enable)\b.+\b(?:billing|plan|subscription)\b.*$/i.test(value);
+    if (!match && !incrementalBilling)
+        return undefined;
+    const requested = match ? match[1].toLowerCase() : 'billing';
+    const matches = findFeltDBModules(requested);
+    if (!matches.length)
+        throw new Error(`MODULE_NOT_AVAILABLE: ${requested}. No proposal created. Available modules: ${listFeltDBModules().map(module => module.id).join(', ')}`);
+    if (matches.length > 1)
+        throw new Error(`AMBIGUOUS_MODULE_INTENT: ${requested}. Available providers: ${matches.map(module => module.provider).join(', ')}`);
+    const module = matches[0];
+    return { action: match ? 'implement' : 'extend', module: module.id, provider: module.provider, version: module.version, original: value };
+}
+function billingOwner(spec, module) {
+    const names = new Set(spec.collections.map(collection => collection.name));
+    for (const pattern of module.patterns)
+        for (const candidate of pattern.owner_candidates)
+            if (names.has(candidate))
+                return candidate;
+    return spec.collections.find(collection => /user|account|member/i.test(collection.name))?.name ?? spec.collections[0]?.name ?? 'User';
+}
+export function planModuleImplementation(intent, snapshot, currentFlow) {
+    const module = resolveFeltDBModule({ name: intent.module, provider: intent.provider, version: intent.version });
+    const spec = parseFlowSpec(currentFlow);
+    const owner = billingOwner(spec, module);
+    const alreadyInstalled = Boolean(spec.modules?.some(value => value.name === module.id));
+    const pattern = module.patterns.find(value => value.owner_candidates.includes(owner)) ?? module.patterns[0];
+    const implementedEvents = new Set(spec.triggers.map(value => value.event));
+    const implementedWorkflows = new Set(spec.workflows.map(value => value.name));
+    return { intent, module, alreadyInstalled, owner, applicationModels: pattern.application_models,
+        relationships: [`BillingAccount.owner -> ${owner}`, `BillingAccount.customer -> ${module.id}.Customer`, `BillingAccount.subscription -> ${module.id}.Subscription`, `Entitlement.billing_account -> BillingAccount`],
+        events: module.reconciliation.map(value => value.event).filter(value => !implementedEvents.has(value)),
+        workflows: module.reconciliation.map(value => value.workflow).filter(value => !implementedWorkflows.has(value)),
+        capabilities: ['stripe.checkout.create', 'stripe.subscription.read', 'stripe.subscription.cancel'].filter(value => module.capabilities.includes(value)),
+        authorization: module.authorization, configuration: module.configuration.map(value => value.name), secrets: module.secrets.map(value => value.name),
+        stateFlow: [`${module.id}.subscription.updated`, `ReconcileSubscription`, `BillingAccount`, `Entitlement`],
+        warnings: ['Production webhook configuration and signature verification required'],
+    };
+}
+function addCollection(spec, collection) { if (!spec.collections.some(value => value.name === collection.name))
+    spec.collections.push(collection); }
+export async function createModuleImplementationProposal(input) {
+    const resolved = resolveModuleIntent(input.intent);
+    if (!resolved)
+        throw new Error('NOT_A_MODULE_INTENT');
+    const plan = planModuleImplementation(resolved, input.snapshot, input.currentFlow);
+    const spec = parseFlowSpec(input.currentFlow);
+    if (resolved.action === 'extend' && !plan.alreadyInstalled)
+        throw new Error(`MODULE_NOT_INSTALLED: ${plan.module.id}. Run implement ${plan.module.id} first.`);
+    if (!spec.modules?.some(value => value.name === plan.module.id))
+        spec.modules.push({ name: plan.module.id, provider: plan.module.provider, version: plan.module.version });
+    addCollection(spec, { name: 'BillingAccount', fields: [
+            { name: 'owner', type: `ref ${plan.owner}`, optional: false }, { name: 'customer', type: `ref ${plan.module.id}.Customer`, optional: false },
+            { name: 'subscription', type: `ref ${plan.module.id}.Subscription`, optional: true }, { name: 'status', type: 'text', optional: false },
+        ], indexes: [] });
+    addCollection(spec, { name: 'Entitlement', fields: [{ name: 'billing_account', type: 'ref BillingAccount', optional: false }, { name: 'key', type: 'text', optional: false }, { name: 'active', type: 'boolean', optional: false }], indexes: [] });
+    if (resolved.action === 'extend')
+        addCollection(spec, { name: 'BillingPlan', fields: [
+                { name: 'code', type: 'text', optional: false }, { name: 'interval', type: 'enum(monthly,annual)', optional: false },
+                { name: 'price', type: `ref ${plan.module.id}.Price`, optional: false }, { name: 'active', type: 'boolean', optional: false },
+            ], indexes: [] });
+    for (const reconciliation of plan.module.reconciliation) {
+        if (!spec.workflows.some(value => value.name === reconciliation.workflow))
+            spec.workflows.push({ name: reconciliation.workflow, parameters: '', steps: [{ name: 'reconcile', statements: ['read BillingAccount', 'write BillingAccount', 'write Entitlement', `capability ${plan.module.id}.subscription.read`] }] });
+        if (!spec.triggers.some(value => value.event === reconciliation.event))
+            spec.triggers.push({ event: reconciliation.event, statements: [`run ${reconciliation.workflow}`] });
+    }
+    if (!spec.policies.some(value => value.name === 'BillingAccount'))
+        spec.policies.push({ name: 'BillingAccount', statements: ['read: owner', 'write: owner'] });
+    const prefix = resolved.action === 'extend' ? 'Extend' : plan.alreadyInstalled ? 'Complete' : 'Implement';
+    return { baseContractHash: input.snapshot.contract_hash, baseFlowHash: await sourceHash(input.currentFlow), proposedFlow: formatFlowSpec(spec),
+        summary: `${prefix} ${plan.module.name}`, changes: [...(resolved.action === 'extend' ? ['BillingPlan (application-authoritative)', 'BillingPlan.price -> stripe.Price'] : plan.applicationModels.map(value => `${value.name} (${value.ownership})`)), ...plan.relationships, ...plan.workflows, ...plan.capabilities],
+        warnings: [...plan.warnings, ...(resolved.action === 'extend' ? ['Plan and price records must be configured through application data; no provider values were invented'] : [])], implementation: plan };
+}

package/dist/module.d.ts

@@ -0,0 +1,76 @@
+export type FeltDBModuleOwnership = 'external-authoritative' | 'application-authoritative' | 'derived' | 'synchronized';
+export interface FeltDBModuleModel {
+    name: string;
+    authority: 'external';
+    ownership: FeltDBModuleOwnership;
+    fields: {
+        name: string;
+        type: string;
+        optional?: boolean;
+        immutable?: boolean;
+        externally_owned?: boolean;
+        application_readable?: boolean;
+    }[];
+}
+export interface FeltDBModuleRelationship {
+    from: string;
+    to: string;
+    kind: 'one' | 'many';
+}
+export interface FeltDBModuleRequirement {
+    name: string;
+    required: boolean;
+    environments?: string[];
+    description: string;
+}
+export interface FeltDBModulePattern {
+    name: string;
+    when: string;
+    owner_candidates: string[];
+    application_models: Array<{
+        name: string;
+        ownership: FeltDBModuleOwnership;
+        purpose: string;
+    }>;
+}
+export interface FeltDBModuleReconciliation {
+    event: string;
+    workflow: string;
+    reads: string[];
+    writes: string[];
+    outcome: string;
+}
+export interface FeltDBModuleDefinition {
+    id: string;
+    name: string;
+    version: string;
+    provider: string;
+    compatibility: string[];
+    models: FeltDBModuleModel[];
+    relationships: FeltDBModuleRelationship[];
+    events: string[];
+    capabilities: string[];
+    workflows: string[];
+    configuration: FeltDBModuleRequirement[];
+    secrets: FeltDBModuleRequirement[];
+    validation: string[];
+    dependencies: string[];
+    authorization: Array<{
+        capability: string;
+        subject: string;
+        implication: string;
+    }>;
+    patterns: FeltDBModulePattern[];
+    reconciliation: FeltDBModuleReconciliation[];
+}
+export interface FlowModuleDeclaration {
+    name: string;
+    provider: string;
+    version?: string;
+}
+export declare function listFeltDBModules(): FeltDBModuleDefinition[];
+export declare function resolveFeltDBModule(declaration: FlowModuleDeclaration): FeltDBModuleDefinition;
+export declare function findFeltDBModules(query: string): FeltDBModuleDefinition[];
+export declare function resolveFeltDBModules(declarations?: FlowModuleDeclaration[]): FeltDBModuleDefinition[];
+export declare function validateResolvedModules(modules: FeltDBModuleDefinition[], environment?: string): string[];
+//# sourceMappingURL=module.d.ts.map

package/dist/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../src/module.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,qBAAqB,GAAG,wBAAwB,GAAG,2BAA2B,GAAG,SAAS,GAAG,cAAc,CAAC;AACxH,MAAM,WAAW,iBAAiB;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,UAAU,CAAC;IAAC,SAAS,EAAE,qBAAqB,CAAC;IAAC,MAAM,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,OAAO,CAAC;QAAC,gBAAgB,CAAC,EAAE,OAAO,CAAC;QAAC,oBAAoB,CAAC,EAAE,OAAO,CAAA;KAAE,EAAE,CAAA;CAAE;AAC3P,MAAM,WAAW,wBAAwB;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,KAAK,GAAG,MAAM,CAAA;CAAE;AAC5F,MAAM,WAAW,uBAAuB;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,OAAO,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE;AAC1H,MAAM,WAAW,mBAAmB;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAAC,kBAAkB,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,qBAAqB,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE;AAC/L,MAAM,WAAW,0BAA0B;IAAG,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,EAAE,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AACnI,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,EAAE,CAAC;IACrF,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAAC,aAAa,EAAE,wBAAwB,EAAE,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAC;IACzF,YAAY,EAAE,MAAM,EAAE,CAAC;IAAC,SAAS,EAAE,MAAM,EAAE,CAAC;IAAC,aAAa,EAAE,uBAAuB,EAAE,CAAC;IACtF,OAAO,EAAE,uBAAuB,EAAE,CAAC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,EAAE,CAAC;IACjF,aAAa,EAAE,KAAK,CAAC;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnF,QAAQ,EAAE,mBAAmB,EAAE,CAAC;IAAC,cAAc,EAAE,0BAA0B,EAAE,CAAC;CAC/E;AACD,MAAM,WAAW,qBAAqB;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,CAAA;CAAE;AA4C3F,wBAAgB,iBAAiB,IAAI,sBAAsB,EAAE,CAA2E;AACxI,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,qBAAqB,GAAG,sBAAsB,CAM9F;AACD,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,sBAAsB,EAAE,CAGzE;AACD,wBAAgB,oBAAoB,CAAC,YAAY,GAAE,qBAAqB,EAAO,GAAG,sBAAsB,EAAE,CAA0F;AACpM,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,sBAAsB,EAAE,EAAE,WAAW,SAAgB,GAAG,MAAM,EAAE,CAEhH"}

package/dist/module.js

@@ -0,0 +1,61 @@
+const stripe = {
+    id: 'stripe', name: 'Stripe-compatible billing', version: '1.0.0', provider: 'stripe-compatible',
+    compatibility: ['stripe', 'stripe-compatible'],
+    models: ['Customer', 'Product', 'Price', 'Subscription', 'SubscriptionItem', 'Invoice', 'PaymentIntent', 'CheckoutSession', 'PaymentMethod', 'Refund', 'WebhookEvent']
+        .map(name => ({ name, authority: 'external', ownership: 'external-authoritative', fields: [
+            { name: 'id', type: 'text', immutable: true, externally_owned: true, application_readable: true },
+            { name: 'status', type: 'text', optional: true, externally_owned: true, application_readable: true },
+            { name: 'created_at', type: 'datetime', externally_owned: true, application_readable: true },
+            { name: 'metadata', type: 'json', optional: true, externally_owned: true, application_readable: true },
+        ] })),
+    relationships: [
+        { from: 'Customer', to: 'Subscription', kind: 'many' }, { from: 'Subscription', to: 'SubscriptionItem', kind: 'many' },
+        { from: 'SubscriptionItem', to: 'Price', kind: 'one' }, { from: 'Price', to: 'Product', kind: 'one' },
+        { from: 'Customer', to: 'Invoice', kind: 'many' }, { from: 'Invoice', to: 'PaymentIntent', kind: 'one' },
+    ],
+    events: ['stripe.customer.created', 'stripe.customer.updated', 'stripe.subscription.created', 'stripe.subscription.updated', 'stripe.subscription.deleted', 'stripe.invoice.paid', 'stripe.invoice.payment_failed', 'stripe.checkout.session.completed'],
+    capabilities: ['stripe.customer.read', 'stripe.customer.create', 'stripe.checkout.create', 'stripe.subscription.read', 'stripe.subscription.create', 'stripe.subscription.cancel', 'stripe.invoice.read', 'stripe.webhooks.receive'],
+    workflows: ['ReconcileSubscription', 'ReconcileFailedPayment'],
+    configuration: [{ name: 'STRIPE_PUBLISHABLE_KEY', required: false, description: 'Browser-safe publishable provider key' }],
+    secrets: [{ name: 'STRIPE_SECRET_KEY', required: true, description: 'Server-side provider credential' }, { name: 'STRIPE_WEBHOOK_SECRET', required: true, environments: ['production'], description: 'Webhook signature verification secret' }],
+    validation: ['Webhook receivers must verify signatures', 'Checkout creation requires authenticated authorization'],
+    dependencies: [],
+    authorization: [
+        { capability: 'stripe.checkout.create', subject: 'authenticated', implication: 'A signed-in billing owner may create a hosted checkout session' },
+        { capability: 'stripe.subscription.cancel', subject: 'owner', implication: 'Only the billing owner may cancel a subscription' },
+    ],
+    patterns: [
+        { name: 'organization billing', when: 'The application contains Organization or Workspace state', owner_candidates: ['Organization', 'Workspace'], application_models: [
+                { name: 'BillingAccount', ownership: 'application-authoritative', purpose: 'Connect the application billing owner to provider state' },
+                { name: 'Entitlement', ownership: 'derived', purpose: 'Materialize product access from reconciled subscription state' },
+            ] },
+        { name: 'user billing', when: 'The application is user-centric and has no organizational owner', owner_candidates: ['User', 'Account'], application_models: [
+                { name: 'BillingAccount', ownership: 'application-authoritative', purpose: 'Connect the user to provider state' },
+                { name: 'Entitlement', ownership: 'derived', purpose: 'Materialize product access from reconciled subscription state' },
+            ] },
+    ],
+    reconciliation: [
+        { event: 'stripe.subscription.updated', workflow: 'ReconcileSubscription', reads: ['stripe.Subscription', 'BillingAccount'], writes: ['BillingAccount', 'Entitlement'], outcome: 'Subscription changes become application entitlements' },
+        { event: 'stripe.invoice.payment_failed', workflow: 'ReconcileFailedPayment', reads: ['stripe.Invoice', 'BillingAccount'], writes: ['BillingAccount', 'Entitlement'], outcome: 'Failed payment state restricts derived entitlements' },
+    ],
+};
+const definitions = new Map([[stripe.id, stripe]]);
+export function listFeltDBModules() { return [...definitions.values()].map(value => structuredClone(value)); }
+export function resolveFeltDBModule(declaration) {
+    const definition = definitions.get(declaration.name);
+    if (!definition)
+        throw new Error(`UNKNOWN_MODULE: ${declaration.name}`);
+    if (!definition.compatibility.includes(declaration.provider))
+        throw new Error(`INCOMPATIBLE_MODULE_PROVIDER: ${declaration.name} does not support ${declaration.provider}`);
+    if (declaration.version && declaration.version !== definition.version)
+        throw new Error(`INCOMPATIBLE_MODULE_VERSION: ${declaration.name}@${declaration.version}; available ${definition.version}`);
+    return { ...structuredClone(definition), provider: declaration.provider };
+}
+export function findFeltDBModules(query) {
+    const normalized = query.trim().toLowerCase();
+    return listFeltDBModules().filter(module => module.id === normalized || module.name.toLowerCase().includes(normalized) || module.compatibility.some(value => value.includes(normalized)));
+}
+export function resolveFeltDBModules(declarations = []) { return declarations.map(resolveFeltDBModule).sort((a, b) => a.id.localeCompare(b.id)); }
+export function validateResolvedModules(modules, environment = 'development') {
+    return modules.flatMap(module => [...module.secrets.filter(value => value.required && (!value.environments || value.environments.includes(environment))).map(value => `${value.name} is required in ${environment} runtime configuration`), ...module.capabilities.filter(value => value.endsWith('.create')).map(value => `${value} requires an explicit authorization policy`)]);
+}

package/dist/proposal.d.ts

@@ -1,6 +1,7 @@
 import { type FeltDBContractSnapshot } from './application-development.js';
 export declare const FELTDB_PROPOSAL_COLLECTION = "_feltdb.Proposal";
 export declare const FELTDB_PROPOSAL_EVENT_COLLECTION = "_feltdb.ProposalEvent";
+export declare const FELTDB_PROPOSAL_PREVIEW_COLLECTION = "_feltdb.ProposalPreview";
 export declare const FELTDB_PROPOSAL_VERSION = 1;
 export type ProposalStatus = 'proposed' | 'validated' | 'previewed' | 'approved' | 'applied' | 'rejected' | 'expired';
 export interface ProposalSourceOperation {
@@ -28,9 +29,33 @@ export interface FeltDBProposalRecord {
     approved_by?: string;
     approved_at?: string | number;
     applied_at?: string | number;
+    preview_id?: string;
     expires_at?: string | number;
     metadata: Record<string, string>;
     parent_proposal_id?: string;
+    module_versions: {
+        id: string;
+        provider: string;
+        version: string;
+    }[];
+    base_module_versions?: {
+        id: string;
+        provider: string;
+        version: string;
+    }[];
+    module_impact: {
+        modules: string[];
+        models: string[];
+        relationships: string[];
+        events: string[];
+        workflows: string[];
+        capabilities: string[];
+        authorization: string[];
+        configuration: string[];
+        secrets: string[];
+        ownership: Record<string, string>;
+        state_flow: string[];
+    };
 }
 export interface FeltDBProposalEvent {
     id: string;
@@ -41,6 +66,58 @@ export interface FeltDBProposalEvent {
     created_at: string | number;
     metadata: Record<string, string>;
 }
+export interface ProposalReadiness {
+    status: ProposalStatus;
+    readiness: 'ready' | 'blocked';
+    blockers: ('contract_changed' | 'flow_changed' | 'module_versions_changed' | 'expired')[];
+    notes: string[];
+    current_contract_hash: string;
+    proposal_contract_hash: string;
+    current_flow_hash: string;
+    proposal_flow_hash: string;
+    stale: boolean;
+    expires_at?: string | number;
+}
+export interface FeltDBProposalPreviewArtifact {
+    preview_id: string;
+    proposal_id: string;
+    application_id: string;
+    environment: string;
+    proposal_hash: string;
+    created_at: string;
+    expires_at: string;
+    status: 'ready';
+    current: FeltDBContractSnapshot;
+    proposed: FeltDBContractSnapshot;
+    current_contract: FeltDBContractSnapshot;
+    proposed_contract: FeltDBContractSnapshot;
+    semantic_diff: string[];
+    state_flow: string[];
+    capabilities: unknown[];
+    workflows: unknown[];
+    authorization: unknown[];
+    configuration: string[];
+    secrets: string[];
+    modules: string[];
+    ownership: Record<string, string>;
+    relationships: string[];
+    events: string[];
+    seeded_records: {
+        collection: string;
+        id: string;
+        preview_data: true;
+    }[];
+    data_classification: 'synthetic_preview';
+    external_side_effects: 'simulated';
+    readiness: ProposalReadiness;
+    proposal: FeltDBProposalRecord;
+}
+/** Canonical human diagnostic used by CLI and Studio text surfaces. */
+export declare function renderProposalDiagnostic(proposal: FeltDBProposalRecord, options?: {
+    readiness?: ProposalReadiness;
+    history?: FeltDBProposalEvent[];
+    preview?: FeltDBProposalPreviewArtifact;
+}): string[];
 export interface ProposalStore {
     get<T>(collection: string, id: string): Promise<T | undefined>;
     list<T>(collection: string): Promise<T[]>;
@@ -72,11 +149,10 @@ export declare class FeltDBProposalService {
     list(): Promise<FeltDBProposalRecord[]>;
     get(id: string): Promise<FeltDBProposalRecord>;
     history(id: string): Promise<FeltDBProposalEvent[]>;
+    readiness(id: string): Promise<ProposalReadiness>;
     validate(id: string, actor: string): Promise<FeltDBProposalRecord>;
-    preview(id: string, actor: string): Promise<{
-        proposal: FeltDBProposalRecord;
-        contract: FeltDBContractSnapshot;
-    }>;
+    preview(id: string, actor: string): Promise<FeltDBProposalPreviewArtifact>;
+    getPreview(id: string): Promise<FeltDBProposalPreviewArtifact>;
     transition(id: string, status: 'approved' | 'rejected' | 'expired' | 'applied', actor: string, authority?: string, approveAuthorization?: boolean): Promise<FeltDBProposalRecord>;
     private assertMutable;
     private move;

package/dist/proposal.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"proposal.d.ts","sourceRoot":"","sources":["../src/proposal.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,sBAAsB,EAE5B,MAAM,8BAA8B,CAAC;AAEtC,eAAO,MAAM,0BAA0B,qBAAqB,CAAC;AAC7D,eAAO,MAAM,gCAAgC,0BAA0B,CAAC;AACxE,eAAO,MAAM,uBAAuB,IAAI,CAAC;AAEzC,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,WAAW,GAAG,WAAW,GAAG,UAAU,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC;AACtH,MAAM,WAAW,uBAAuB;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,KAAK,GAAG,QAAQ,GAAG,QAAQ,CAAA;CAAE;AACjG,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,cAAc,CAAC;IACvB,gBAAgB,EAAE,CAAC,CAAC;IACpB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,WAAW,EAAE;QAAE,KAAK,EAAE,uBAAuB,EAAE,CAAA;KAAE,CAAC;IAClD,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,GAAG,MAAM,CAAC;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC9B,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC7B,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AACD,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,cAAc,CAAC;IAAC,SAAS,EAAE,cAAc,CAAC;IACzF,KAAK,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9E;AAED,MAAM,WAAW,aAAa;IAC5B,GAAG,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC;IAC/D,IAAI,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;IAC1C,MAAM,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnE,OAAO,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACrE;AAED,MAAM,WAAW,eAAe;IAAG,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,sBAAsB,CAAA;CAAE;AAOrF,qBAAa,qBAAqB;IACpB,OAAO,CAAC,KAAK;IAAiB,OAAO,CAAC,OAAO;IAAkC,OAAO,CAAC,mBAAmB,CAAC;gBAAnG,KAAK,EAAE,aAAa,EAAU,OAAO,EAAE,MAAM,OAAO,CAAC,eAAe,CAAC,EAAU,mBAAmB,CAAC,EAAE,MAAM,YAAA;IAEzH,MAAM,CAAC,KAAK,EAAE;QAClB,cAAc,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,kBAAkB,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAC;QAChG,aAAa,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC9G,kBAAkB,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;KAC3D,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAcjC,IAAI,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;IACjC,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAI9C,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC;IAInD,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAelE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;;;;IASjC,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,UAAU,GAAG,SAAS,GAAG,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,oBAAoB,UAAQ,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAWrL,OAAO,CAAC,aAAa;YAIP,IAAI;YAKJ,KAAK;CAKpB"}
+{"version":3,"file":"proposal.d.ts","sourceRoot":"","sources":["../src/proposal.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,sBAAsB,EAE5B,MAAM,8BAA8B,CAAC;AAGtC,eAAO,MAAM,0BAA0B,qBAAqB,CAAC;AAC7D,eAAO,MAAM,gCAAgC,0BAA0B,CAAC;AACxE,eAAO,MAAM,kCAAkC,4BAA4B,CAAC;AAC5E,eAAO,MAAM,uBAAuB,IAAI,CAAC;AAazC,MAAM,MAAM,cAAc,GAAG,UAAU,GAAG,WAAW,GAAG,WAAW,GAAG,UAAU,GAAG,SAAS,GAAG,UAAU,GAAG,SAAS,CAAC;AACtH,MAAM,WAAW,uBAAuB;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,KAAK,GAAG,QAAQ,GAAG,QAAQ,CAAA;CAAE;AACjG,MAAM,WAAW,oBAAoB;IACnC,EAAE,EAAE,MAAM,CAAC;IACX,cAAc,EAAE,MAAM,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,cAAc,CAAC;IACvB,gBAAgB,EAAE,CAAC,CAAC;IACpB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,WAAW,EAAE;QAAE,KAAK,EAAE,uBAAuB,EAAE,CAAA;KAAE,CAAC;IAClD,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,GAAG,MAAM,CAAC;IAC5B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC9B,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC7B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC7B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,eAAe,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IACrE,oBAAoB,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC3E,aAAa,EAAE;QAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAC;QAAC,aAAa,EAAE,MAAM,EAAE,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAC;QAAC,SAAS,EAAE,MAAM,EAAE,CAAC;QAAC,YAAY,EAAE,MAAM,EAAE,CAAC;QAAC,aAAa,EAAE,MAAM,EAAE,CAAC;QAAC,aAAa,EAAE,MAAM,EAAE,CAAC;QAAC,OAAO,EAAE,MAAM,EAAE,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAC,MAAM,CAAC,CAAC;QAAC,UAAU,EAAE,MAAM,EAAE,CAAA;KAAE,CAAC;CAC7Q;AACD,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,cAAc,CAAC;IAAC,SAAS,EAAE,cAAc,CAAC;IACzF,KAAK,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC9E;AACD,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,cAAc,CAAC;IACvB,SAAS,EAAE,OAAO,GAAG,SAAS,CAAC;IAC/B,QAAQ,EAAE,CAAC,kBAAkB,GAAG,cAAc,GAAG,yBAAyB,GAAG,SAAS,CAAC,EAAE,CAAC;IAC1F,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,sBAAsB,EAAE,MAAM,CAAC;IAC/B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,KAAK,EAAE,OAAO,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CAC9B;AACD,MAAM,WAAW,6BAA6B;IAC5C,UAAU,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IACrF,aAAa,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,CAAC;IAC/E,OAAO,EAAE,sBAAsB,CAAC;IAAC,QAAQ,EAAE,sBAAsB,CAAC;IAClE,gBAAgB,EAAE,sBAAsB,CAAC;IAAC,iBAAiB,EAAE,sBAAsB,CAAC;IACpF,aAAa,EAAE,MAAM,EAAE,CAAC;IAAC,UAAU,EAAE,MAAM,EAAE,CAAC;IAAC,YAAY,EAAE,OAAO,EAAE,CAAC;IAAC,SAAS,EAAE,OAAO,EAAE,CAAC;IAC7F,aAAa,EAAE,OAAO,EAAE,CAAC;IAAC,aAAa,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,EAAE,CAAC;IACxF,SAAS,EAAE,MAAM,CAAC,MAAM,EAAC,MAAM,CAAC,CAAC;IAAC,aAAa,EAAE,MAAM,EAAE,CAAC;IAAC,MAAM,EAAE,MAAM,EAAE,CAAC;IAC5E,cAAc,EAAE;QAAE,UAAU,EAAC,MAAM,CAAC;QAAC,EAAE,EAAC,MAAM,CAAC;QAAC,YAAY,EAAC,IAAI,CAAA;KAAE,EAAE,CAAC;IACtE,mBAAmB,EAAE,mBAAmB,CAAC;IAAC,qBAAqB,EAAE,WAAW,CAAC;IAAC,SAAS,EAAE,iBAAiB,CAAC;IAC3G,QAAQ,EAAE,oBAAoB,CAAC;CAChC;AAED,uEAAuE;AACvE,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,oBAAoB,EAC9B,OAAO,GAAE;IAAE,SAAS,CAAC,EAAE,iBAAiB,CAAC;IAAC,OAAO,CAAC,EAAE,mBAAmB,EAAE,CAAC;IAAC,OAAO,CAAC,EAAE,6BAA6B,CAAA;CAAO,GACxH,MAAM,EAAE,CA4BV;AAED,MAAM,WAAW,aAAa;IAC5B,GAAG,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,SAAS,CAAC,CAAC;IAC/D,IAAI,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC,CAAC;IAC1C,MAAM,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACnE,OAAO,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACrE;AAED,MAAM,WAAW,eAAe;IAAG,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,sBAAsB,CAAA;CAAE;AAOrF,qBAAa,qBAAqB;IACpB,OAAO,CAAC,KAAK;IAAiB,OAAO,CAAC,OAAO;IAAkC,OAAO,CAAC,mBAAmB,CAAC;gBAAnG,KAAK,EAAE,aAAa,EAAU,OAAO,EAAE,MAAM,OAAO,CAAC,eAAe,CAAC,EAAU,mBAAmB,CAAC,EAAE,MAAM,YAAA;IAEzH,MAAM,CAAC,KAAK,EAAE;QAClB,cAAc,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,kBAAkB,EAAE,MAAM,CAAC;QAAC,cAAc,EAAE,MAAM,CAAC;QAChG,aAAa,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAC9G,kBAAkB,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;KAC3D,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAkBjC,IAAI,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;IACjC,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAI9C,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,EAAE,CAAC;IAInD,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAcjD,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;IA+BlE,OAAO,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,6BAA6B,CAAC;IAqB1E,UAAU,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,6BAA6B,CAAC;IAS9D,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,UAAU,GAAG,SAAS,GAAG,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,EAAE,oBAAoB,UAAQ,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAkBrL,OAAO,CAAC,aAAa;YAIP,IAAI;YAKJ,KAAK;CAKpB"}

package/dist/proposal.js

@@ -1,7 +1,53 @@
 import { createContractSnapshot, flowSourceHash, validateFlowProposal, } from './application-development.js';
+import { validateResolvedModules } from './module.js';
 export const FELTDB_PROPOSAL_COLLECTION = '_feltdb.Proposal';
 export const FELTDB_PROPOSAL_EVENT_COLLECTION = '_feltdb.ProposalEvent';
+export const FELTDB_PROPOSAL_PREVIEW_COLLECTION = '_feltdb.ProposalPreview';
 export const FELTDB_PROPOSAL_VERSION = 1;
+function redactProposalSecretValues(input) {
+    const visit = (value, key = '') => {
+        if (value === null || value === undefined)
+            return value;
+        if (typeof value === 'string')
+            return /(?:sk_(?:live|test)_|whsec_|-----BEGIN PRIVATE KEY-----)/.test(value) ? '[REDACTED]' : value;
+        if (Array.isArray(value))
+            return value.map(item => visit(item));
+        if (typeof value === 'object')
+            return Object.fromEntries(Object.entries(value).map(([name, child]) => [/secret|password|token|api_?key|credential|private_?key/i.test(name) ? name : name, /secret|password|token|api_?key|credential|private_?key/i.test(name) ? '[REDACTED]' : visit(child, name)]));
+        return /secret|password|token|api_?key|credential|private_?key/i.test(key) ? '[REDACTED]' : value;
+    };
+    return visit(structuredClone(input));
+}
+/** Canonical human diagnostic used by CLI and Studio text surfaces. */
+export function renderProposalDiagnostic(proposal, options = {}) {
+    const impact = proposal.module_impact;
+    const section = (name, values) => values.length ? [name, ...values.map(value => `  ${value}`)] : [];
+    const readiness = options.readiness;
+    return [
+        `Proposal: ${proposal.id}`,
+        proposal.summary,
+        `Status  ${proposal.status.toUpperCase()}`,
+        `Application  ${proposal.application_id}`,
+        `Environment  ${proposal.environment}`,
+        `Contract  v${proposal.base_contract_version}  ${proposal.base_contract_hash}`,
+        `Flow  ${proposal.base_flow_hash}`,
+        ...(proposal.parent_proposal_id ? [`Based on  ${proposal.parent_proposal_id}`] : []),
+        ...section('MODULES', proposal.module_versions.map(value => `+ ${value.id} (${value.provider}) ${value.version}`)),
+        ...section('STATE', impact.models.map(value => `+ ${value}`)),
+        ...section('RELATIONSHIPS', impact.relationships.map(value => `+ ${value}`)),
+        ...section('WORKFLOWS', impact.workflows.map(value => `+ ${value}`)),
+        ...section('EVENTS', impact.events.map(value => `+ ${value}`)),
+        ...section('CAPABILITIES', impact.capabilities.map(value => `+ ${value}`)),
+        ...section('AUTHORIZATION', impact.authorization.map(value => `+ ${value}`)),
+        ...section('CONFIGURATION', [...impact.configuration.map(value => `${value}  configuration`), ...impact.secrets.map(value => `${value}  required / secret`)]),
+        ...(readiness ? ['READINESS',
+            `  ${readiness.stale ? '!' : '✓'} Contract and flow ${readiness.stale ? 'stale' : 'current'}`,
+            `  ${readiness.blockers.length ? readiness.blockers.join(', ') : 'No blockers'}`] : []),
+        ...(options.preview ? ['PREVIEW', '  Current → Proposed available', `  ${options.preview.preview_id}`] : []),
+        ...section('HISTORY', (options.history ?? []).map(value => `✓ ${value.to_status}`)),
+        ...section('WARNINGS', proposal.warnings.map(value => `! ${value}`)),
+    ];
+}
 const transitions = {
     proposed: ['validated', 'rejected'], validated: ['previewed', 'rejected'], previewed: ['approved', 'rejected'],
     approved: ['applied', 'expired'], applied: [], rejected: [], expired: [],
@@ -22,11 +68,15 @@ export class FeltDBProposalService {
         if (input.base_contract_hash !== current.snapshot.contract_hash || input.base_flow_hash !== await flowSourceHash(current.source))
             throw new Error('STALE_PROPOSAL');
         const id = `p_${crypto.randomUUID().replace(/-/g, '')}`;
-        const record = { id, application_id: input.application_id, environment: input.environment,
+        const safeInput = redactProposalSecretValues(input);
+        const record = { id, application_id: safeInput.application_id, environment: safeInput.environment,
             status: 'proposed', proposal_version: FELTDB_PROPOSAL_VERSION, base_contract_version: current.snapshot.contract_version,
-            base_contract_hash: input.base_contract_hash, base_flow_hash: input.base_flow_hash, proposed_flow: input.proposed_flow,
-            contract_diff: [], source_plan: { files: [] }, summary: input.summary, warnings: input.warnings ?? [], created_by: input.actor,
-            created_at: new Date().toISOString(), expires_at: input.expires_at, metadata: input.metadata ?? {}, parent_proposal_id: input.parent_proposal_id };
+            base_contract_hash: safeInput.base_contract_hash, base_flow_hash: safeInput.base_flow_hash, proposed_flow: safeInput.proposed_flow,
+            contract_diff: [], source_plan: { files: [] }, summary: safeInput.summary, warnings: safeInput.warnings ?? [], created_by: safeInput.actor,
+            created_at: new Date().toISOString(), expires_at: safeInput.expires_at, metadata: safeInput.metadata ?? {}, parent_proposal_id: safeInput.parent_proposal_id,
+            base_module_versions: current.snapshot.modules.map(value => ({ id: value.id, provider: value.provider, version: value.version })),
+            module_versions: current.snapshot.modules.map(value => ({ id: value.id, provider: value.provider, version: value.version })),
+            module_impact: { modules: [], models: [], relationships: [], events: [], workflows: [], capabilities: [], authorization: [], configuration: [], secrets: [], ownership: {}, state_flow: [] } };
         await this.store.create(FELTDB_PROPOSAL_COLLECTION, id, record);
         await this.event(id, undefined, 'proposed', input.actor);
         return record;
@@ -41,6 +91,25 @@ export class FeltDBProposalService {
     async history(id) {
         return (await this.store.list(FELTDB_PROPOSAL_EVENT_COLLECTION)).filter(value => value.proposal_id === id);
     }
+    async readiness(id) {
+        const record = await this.get(id);
+        const current = await this.context();
+        const currentFlowHash = await flowSourceHash(current.source);
+        const currentModules = current.snapshot.modules.map(value => ({ id: value.id, provider: value.provider, version: value.version }));
+        const blockers = [];
+        if (record.base_contract_hash !== current.snapshot.contract_hash)
+            blockers.push('contract_changed');
+        if (record.base_flow_hash !== currentFlowHash)
+            blockers.push('flow_changed');
+        if (JSON.stringify(record.base_module_versions ?? []) !== JSON.stringify(currentModules))
+            blockers.push('module_versions_changed');
+        if (record.expires_at && (typeof record.expires_at === 'number' ? record.expires_at * 1000 : Date.parse(record.expires_at)) <= Date.now())
+            blockers.push('expired');
+        return { status: record.status, readiness: blockers.length ? 'blocked' : 'ready', blockers, notes: [],
+            current_contract_hash: current.snapshot.contract_hash, proposal_contract_hash: record.base_contract_hash,
+            current_flow_hash: currentFlowHash, proposal_flow_hash: record.base_flow_hash,
+            stale: blockers.some(value => value !== 'expired'), expires_at: record.expires_at };
+    }
     async validate(id, actor) {
         const record = await this.get(id);
         this.assertMutable(record, 'proposed');
@@ -54,6 +123,22 @@ export class FeltDBProposalService {
         ];
         record.source_plan = { files: [{ path: 'feltdb.flow', operation: 'modify' }, { path: 'src/feltdb/generated-contract.ts', operation: 'modify' }] };
         record.warnings = [...new Set([...record.warnings, ...review.authorizationChanges.map(value => `Authorization ${value.widening ? 'widened' : 'changed'}: ${value.policy}: ${(value.before ?? []).join(' | ')} -> ${(value.after ?? []).join(' | ')}`)])];
+        record.warnings = [...new Set([...record.warnings, ...validateResolvedModules(review.proposedContract.manifest.modules ?? [], record.environment)])];
+        record.module_versions = (review.proposedContract.manifest.modules ?? []).map(value => ({ id: value.id, provider: value.provider, version: value.version }));
+        const moduleIds = new Set((review.proposedContract.manifest.modules ?? []).map(value => value.id));
+        record.module_impact = {
+            modules: [...moduleIds],
+            models: review.proposedSpec.collections.flatMap(collection => collection.fields.map(field => field.type.startsWith('ref ') ? field.type.slice(4) : '').filter(value => value.includes('.') && moduleIds.has(value.split('.')[0]))),
+            relationships: review.proposedSpec.collections.flatMap(collection => collection.fields.filter(field => field.type.startsWith('ref ')).map(field => `${collection.name}.${field.name} -> ${field.type.slice(4)}`)),
+            events: review.proposedSpec.triggers.map(value => value.event).filter(value => moduleIds.has(value.split('.')[0])),
+            workflows: review.proposedSpec.workflows.map(value => value.name),
+            capabilities: review.proposedContract.manifest.capabilities.filter(value => value.provider && moduleIds.has(value.provider)).map(value => value.name),
+            authorization: review.proposedSpec.policies.flatMap(value => value.statements.map(statement => `${value.name}: ${statement}`)),
+            configuration: (review.proposedContract.manifest.modules ?? []).flatMap(value => value.configuration.map(item => item.name)),
+            secrets: (review.proposedContract.manifest.modules ?? []).flatMap(value => value.secrets.map(item => item.name)),
+            ownership: Object.fromEntries((review.proposedContract.manifest.modules ?? []).flatMap(value => value.models.map(model => [`${value.id}.${model.name}`, model.ownership]))),
+            state_flow: (review.proposedContract.manifest.modules ?? []).flatMap(value => value.reconciliation.map(item => `${item.event} -> ${item.workflow} -> ${item.writes.join(', ')}`)),
+        };
         return this.move(record, 'validated', actor);
     }
     async preview(id, actor) {
@@ -62,8 +147,40 @@ export class FeltDBProposalService {
         const current = await this.context();
         const review = await validateFlowProposal({ proposal: { baseContractHash: record.base_contract_hash, baseFlowHash: record.base_flow_hash,
                 proposedFlow: record.proposed_flow, summary: record.summary, changes: [], warnings: record.warnings }, currentFlow: current.source, snapshot: current.snapshot });
+        const proposed = createContractSnapshot(review.proposedContract, { environment: record.environment, contractVersion: record.base_contract_version + 1 });
+        const readiness = await this.readiness(id);
+        const now = Date.now();
+        const previewId = `pv_${crypto.randomUUID().replace(/-/g, '')}`;
         await this.move(record, 'previewed', actor);
-        return { proposal: record, contract: createContractSnapshot(review.proposedContract, { environment: record.environment, contractVersion: record.base_contract_version + 1 }) };
+        record.preview_id = previewId;
+        await this.store.replace(FELTDB_PROPOSAL_COLLECTION, record.id, record);
+        const impact = record.module_impact;
+        const artifact = {
+            preview_id: previewId, proposal_id: id, application_id: record.application_id, environment: record.environment,
+            proposal_hash: record.base_contract_hash, created_at: new Date(now).toISOString(), expires_at: new Date(now + 60 * 60 * 1000).toISOString(), status: 'ready',
+            current: current.snapshot, proposed, current_contract: current.snapshot, proposed_contract: proposed,
+            semantic_diff: record.contract_diff, state_flow: impact.state_flow, capabilities: proposed.capabilities, workflows: proposed.workflows,
+            authorization: proposed.policies, configuration: impact.configuration, secrets: impact.secrets, modules: impact.modules,
+            ownership: impact.ownership, relationships: impact.relationships, events: impact.events,
+            seeded_records: proposed.schema.map(collection => ({ collection: collection.name, id: `preview_${collection.name.toLowerCase()}`, preview_data: true })),
+            data_classification: 'synthetic_preview', external_side_effects: 'simulated', readiness, proposal: record,
+        };
+        await this.store.create(FELTDB_PROPOSAL_PREVIEW_COLLECTION, previewId, artifact);
+        return artifact;
+    }
+    async getPreview(id) {
+        const artifact = await this.store.get(FELTDB_PROPOSAL_PREVIEW_COLLECTION, id);
+        if (!artifact)
+            throw new Error('PREVIEW_NOT_FOUND');
+        if (Date.parse(artifact.expires_at) <= Date.now())
+            throw new Error('PREVIEW_EXPIRED');
+        const proposal = await this.get(artifact.proposal_id);
+        if (proposal.preview_id !== id)
+            throw new Error('PREVIEW_INVALIDATED');
+        const readiness = await this.readiness(proposal.id);
+        if (readiness.stale)
+            throw new Error('PREVIEW_INVALIDATED');
+        return artifact;
     }
     async transition(id, status, actor, authority, approveAuthorization = false) {
         const record = await this.get(id);
@@ -72,6 +189,16 @@ export class FeltDBProposalService {
             throw new Error('PROPOSAL_EXPIRED');
         if (status === 'applied' && (!this.repositoryAuthority || authority !== this.repositoryAuthority))
             throw new Error('REPOSITORY_AUTHORITY_REQUIRED');
+        if (status === 'approved') {
+            if (!record.preview_id)
+                throw new Error('PREVIEW_REQUIRED');
+            await this.getPreview(record.preview_id);
+            const current = await this.context();
+            if (record.application_id !== current.snapshot.application.application_id || record.environment !== current.snapshot.application.environment)
+                throw new Error('PROPOSAL_SCOPE_MISMATCH');
+            if (record.base_contract_hash !== current.snapshot.contract_hash || record.base_flow_hash !== await flowSourceHash(current.source))
+                throw new Error('STALE_PROPOSAL');
+        }
         if (status === 'approved' && record.warnings.some(value => value.startsWith('Authorization ')) && !approveAuthorization)
             throw new Error('AUTHORIZATION_APPROVAL_REQUIRED');
         if (status === 'approved') {

package/dist/studio/app.d.ts

@@ -9,11 +9,13 @@ export interface StudioAppProps {
     namespace?: string;
     deploymentRuntime?: string;
     applicationUrl?: string;
+    applicationId?: string;
+    environment?: string;
     developmentSession?: Record<string, string>;
     managedPublish?: ManagedPublishConfiguration;
     sourceSync?: SourceSyncConfiguration;
     onConnect?: (url: string, token: string) => void;
 }
-export declare function StudioApp({ db, remoteUrl, token, namespace, deploymentRuntime, applicationUrl, developmentSession, managedPublish, sourceSync, onConnect }: StudioAppProps): React.JSX.Element;
+export declare function StudioApp({ db, remoteUrl, token, namespace, deploymentRuntime, applicationUrl, applicationId, environment, developmentSession, managedPublish, sourceSync, onConnect }: StudioAppProps): React.JSX.Element;
 export default StudioApp;
 //# sourceMappingURL=app.d.ts.map

package/dist/studio/app.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../src/app.tsx"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAA8B,MAAM,OAAO,CAAC;AAgBnD,OAA4B,EAAE,KAAK,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AACzG,OAAO,EAAa,KAAK,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAIjF,OAAO,EAAgC,KAAK,YAAY,EAAE,MAAM,cAAc,CAAC;AAC/E,OAAO,WAAW,CAAC;AAEnB,MAAM,WAAW,cAAc;IAC7B,EAAE,CAAC,EAAE,YAAY,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5C,cAAc,CAAC,EAAE,2BAA2B,CAAC;IAC7C,UAAU,CAAC,EAAE,uBAAuB,CAAC;IACrC,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;CAClD;AAED,wBAAgB,SAAS,CAAC,EAAE,EAAE,EAAE,SAAc,EAAE,KAAU,EAAE,SAAqB,EAAE,iBAA6B,EAAE,cAAmB,EAAE,kBAAkB,EAAE,cAAc,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,cAAc,qBA+IjN;AAED,eAAe,SAAS,CAAC"}
+{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../src/app.tsx"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,KAA8B,MAAM,OAAO,CAAC;AAgBnD,OAA4B,EAAE,KAAK,2BAA2B,EAAE,MAAM,kCAAkC,CAAC;AACzG,OAAO,EAAa,KAAK,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAMjF,OAAO,EAAgC,KAAK,YAAY,EAAE,MAAM,cAAc,CAAC;AAC/E,OAAO,WAAW,CAAC;AAEnB,MAAM,WAAW,cAAc;IAC7B,EAAE,CAAC,EAAE,YAAY,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kBAAkB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5C,cAAc,CAAC,EAAE,2BAA2B,CAAC;IAC7C,UAAU,CAAC,EAAE,uBAAuB,CAAC;IACrC,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;CAClD;AAED,wBAAgB,SAAS,CAAC,EAAE,EAAE,EAAE,SAAc,EAAE,KAAU,EAAE,SAAqB,EAAE,iBAA6B,EAAE,cAAmB,EAAE,aAAkB,EAAE,WAA0B,EAAE,kBAAkB,EAAE,cAAc,EAAE,UAAU,EAAE,SAAS,EAAE,EAAE,cAAc,qBAqJjQ;AAED,eAAe,SAAS,CAAC"}

package/dist/studio/components/AskFeltDB.d.ts

@@ -13,8 +13,9 @@ export interface SourceSyncConfiguration {
         credentialConfigured: boolean;
     };
 }
-export declare function AskFeltDB({ configuration, onApplied }: {
+export declare function AskFeltDB({ configuration, onApplied, onProposalCreated }: {
     configuration?: SourceSyncConfiguration;
     onApplied?: () => void;
+    onProposalCreated?: (proposalId: string) => void;
 }): React.JSX.Element;
 //# sourceMappingURL=AskFeltDB.d.ts.map

package/dist/studio/components/AskFeltDB.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"AskFeltDB.d.ts","sourceRoot":"","sources":["../../src/components/AskFeltDB.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAmB,MAAM,OAAO,CAAC;AAGxC,MAAM,WAAW,uBAAuB;IAAG,OAAO,EAAE,OAAO,CAAC;IAAC,aAAa,EAAE,OAAO,CAAC;IAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE;QAAE,QAAQ,EAAE,cAAc,GAAG,mBAAmB,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,OAAO,CAAC;QAAC,kBAAkB,EAAE,OAAO,CAAC;QAAC,oBAAoB,EAAE,OAAO,CAAA;KAAE,CAAA;CAAE;AAKtS,wBAAgB,SAAS,CAAC,EAAE,aAAa,EAAE,SAAS,EAAE,EAAE;IAAE,aAAa,CAAC,EAAE,uBAAuB,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,IAAI,CAAA;CAAE,qBA0E1H"}
+{"version":3,"file":"AskFeltDB.d.ts","sourceRoot":"","sources":["../../src/components/AskFeltDB.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAmB,MAAM,OAAO,CAAC;AAGxC,MAAM,WAAW,uBAAuB;IAAG,OAAO,EAAE,OAAO,CAAC;IAAC,aAAa,EAAE,OAAO,CAAC;IAAC,WAAW,CAAC,EAAE,OAAO,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE;QAAE,QAAQ,EAAE,cAAc,GAAG,mBAAmB,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,OAAO,CAAC;QAAC,kBAAkB,EAAE,OAAO,CAAC;QAAC,oBAAoB,EAAE,OAAO,CAAA;KAAE,CAAA;CAAE;AAKtS,wBAAgB,SAAS,CAAC,EAAE,aAAa,EAAE,SAAS,EAAE,iBAAiB,EAAE,EAAE;IAAE,aAAa,CAAC,EAAE,uBAAuB,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,IAAI,CAAC;IAAC,iBAAiB,CAAC,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,IAAI,CAAA;CAAE,qBA4E/L"}

package/dist/studio/components/ContractInspector.d.ts

@@ -0,0 +1,7 @@
+import { default as React } from 'react';
+import { FlowSpec } from '@feltdb/core';
+export declare function ContractInspector({ model, section }: {
+    model: FlowSpec | null;
+    section: 'schema' | 'policies';
+}): React.JSX.Element;
+//# sourceMappingURL=ContractInspector.d.ts.map

package/dist/studio/components/ContractInspector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ContractInspector.d.ts","sourceRoot":"","sources":["../../src/components/ContractInspector.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAE7C,wBAAgB,iBAAiB,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;IAAE,KAAK,EAAE,QAAQ,GAAG,IAAI,CAAC;IAAC,OAAO,EAAE,QAAQ,GAAC,UAAU,CAAA;CAAE,qBAM7G"}

package/dist/studio/components/ManagedInstancePanel.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ManagedInstancePanel.d.ts","sourceRoot":"","sources":["../../src/components/ManagedInstancePanel.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAmB,MAAM,OAAO,CAAC;AAGxC,eAAO,MAAM,oBAAoB,EAAE,KAAK,CAAC,EAuRxC,CAAC;AAEF,eAAe,oBAAoB,CAAC"}
+{"version":3,"file":"ManagedInstancePanel.d.ts","sourceRoot":"","sources":["../../src/components/ManagedInstancePanel.tsx"],"names":[],"mappings":"AAAA,OAAO,KAAmB,MAAM,OAAO,CAAC;AAGxC,eAAO,MAAM,oBAAoB,EAAE,KAAK,CAAC,EAmRxC,CAAC;AAEF,eAAe,oBAAoB,CAAC"}

package/dist/studio/components/ManagedInstancePanel.js

@@ -106,11 +106,7 @@ var i = () => {
 							if (!u) return;
 							let t = e.generateEnvContent({
 								url: `https://${i}-feltdb.fly.dev`,
-								token: u.secret,
-								namespace: u.namespace,
-								applicationId: i,
-								revisionId: "v0.5-alpha",
-								environment: "staging"
+								token: u.secret
 							}), n = new Blob([t], { type: "text/plain" }), r = URL.createObjectURL(n), a = document.createElement("a");
 							a.href = r, a.download = ".env.local", document.body.appendChild(a), a.click(), document.body.removeChild(a), URL.revokeObjectURL(r);
 						},

package/dist/studio/components/ModuleExplorer.d.ts

@@ -0,0 +1,6 @@
+import { default as React } from 'react';
+import { FlowSpec } from '@feltdb/core';
+export declare function ModuleExplorer({ model }: {
+    model: FlowSpec | null;
+}): React.JSX.Element;
+//# sourceMappingURL=ModuleExplorer.d.ts.map