@fuzdev/fuz_app 0.132.0 → 0.133.0

package/dist/actions/action_dispatcher.js

@@ -6,6 +6,7 @@
  *
  * @module
  */
+import { JsonrpcMessageFromClientToServer, JsonrpcMessageFromServerToClient, JsonrpcNotification, JsonrpcRequest, JsonrpcResponseOrError, JsonrpcErrorResponse } from '../http/jsonrpc.js';
 import { create_jsonrpc_error_response, create_jsonrpc_error_response_from_thrown, to_jsonrpc_message_id, is_jsonrpc_request, is_jsonrpc_notification } from '../http/jsonrpc_helpers.js';
 import { jsonrpc_error_messages } from '../http/jsonrpc_errors.js';
 import { to_input_params } from '../http/schema_helpers.js';

package/dist/actions/action_event_data.d.ts

@@ -28,11 +28,11 @@ export declare const ActionEventData: z.ZodObject<{
         execute: "execute";
     }>;
     step: z.ZodEnum<{
-        failed: "failed";
-        parsed: "parsed";
         initial: "initial";
+        parsed: "parsed";
         handling: "handling";
         handled: "handled";
+        failed: "failed";
     }>;
     method: z.ZodString;
     executor: z.ZodEnum<{

package/dist/actions/action_event_types.d.ts

@@ -12,11 +12,11 @@ export declare const ActionExecutor: z.ZodEnum<{
 }>;
 export type ActionExecutor = z.infer<typeof ActionExecutor>;
 export declare const ActionEventStep: z.ZodEnum<{
-    failed: "failed";
-    parsed: "parsed";
     initial: "initial";
+    parsed: "parsed";
     handling: "handling";
     handled: "handled";
+    failed: "failed";
 }>;
 export type ActionEventStep = z.infer<typeof ActionEventStep>;
 export declare const action_event_step_transitions: Record<ActionEventStep, ReadonlyArray<ActionEventStep>>;

package/dist/actions/action_rpc.js

@@ -13,6 +13,7 @@
  */
 import { z } from 'zod';
 import { DEV } from 'esm-env';
+import {} from '../http/route_spec.js';
 import { get_client_ip } from '../http/client_ip.js';
 import { get_request_context } from '../auth/request_context.js';
 import { ACCOUNT_ID_KEY, CREDENTIAL_TYPE_KEY, TOKEN_SCOPE_KEY, TEST_CONTEXT_PRESET_KEY } from '../hono_context.js';

package/dist/actions/action_spec.d.ts

@@ -51,14 +51,14 @@ export declare const ActionSpec: z.ZodObject<{
      */
     auth: z.ZodNullable<z.ZodObject<{
         account: z.ZodEnum<{
-            required: "required";
-            none: "none";
             optional: "optional";
+            none: "none";
+            required: "required";
         }>;
         actor: z.ZodEnum<{
-            required: "required";
-            none: "none";
             optional: "optional";
+            none: "none";
+            required: "required";
         }>;
         roles: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
         credential_types: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
@@ -108,9 +108,9 @@ export declare const ActionSpec: z.ZodObject<{
      * dispatchers don't read it.
      */
     rate_limit: z.ZodOptional<z.ZodEnum<{
-        both: "both";
         account: "account";
         ip: "ip";
+        both: "both";
     }>>;
 }, z.core.$strict>;
 export type ActionSpec = z.infer<typeof ActionSpec>;
@@ -128,21 +128,21 @@ export declare const RequestResponseActionSpec: z.ZodObject<{
     streams: z.ZodOptional<z.ZodString>;
     error_reasons: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
     rate_limit: z.ZodOptional<z.ZodEnum<{
-        both: "both";
         account: "account";
         ip: "ip";
+        both: "both";
     }>>;
     kind: z.ZodDefault<z.ZodLiteral<"request_response">>;
     auth: z.ZodObject<{
         account: z.ZodEnum<{
-            required: "required";
-            none: "none";
             optional: "optional";
+            none: "none";
+            required: "required";
         }>;
         actor: z.ZodEnum<{
-            required: "required";
-            none: "none";
             optional: "optional";
+            none: "none";
+            required: "required";
         }>;
         roles: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
         credential_types: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
@@ -163,9 +163,9 @@ export declare const RemoteNotificationActionSpec: z.ZodObject<{
     streams: z.ZodOptional<z.ZodString>;
     error_reasons: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
     rate_limit: z.ZodOptional<z.ZodEnum<{
-        both: "both";
         account: "account";
         ip: "ip";
+        both: "both";
     }>>;
     kind: z.ZodDefault<z.ZodLiteral<"remote_notification">>;
     auth: z.ZodDefault<z.ZodNull>;
@@ -193,9 +193,9 @@ export declare const LocalCallActionSpec: z.ZodObject<{
     streams: z.ZodOptional<z.ZodString>;
     error_reasons: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
     rate_limit: z.ZodOptional<z.ZodEnum<{
-        both: "both";
         account: "account";
         ip: "ip";
+        both: "both";
     }>>;
     kind: z.ZodDefault<z.ZodLiteral<"local_call">>;
     auth: z.ZodDefault<z.ZodNull>;
@@ -215,21 +215,21 @@ export declare const ActionSpecUnion: z.ZodUnion<readonly [z.ZodObject<{
     streams: z.ZodOptional<z.ZodString>;
     error_reasons: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
     rate_limit: z.ZodOptional<z.ZodEnum<{
-        both: "both";
         account: "account";
         ip: "ip";
+        both: "both";
     }>>;
     kind: z.ZodDefault<z.ZodLiteral<"request_response">>;
     auth: z.ZodObject<{
         account: z.ZodEnum<{
-            required: "required";
-            none: "none";
             optional: "optional";
+            none: "none";
+            required: "required";
         }>;
         actor: z.ZodEnum<{
-            required: "required";
-            none: "none";
             optional: "optional";
+            none: "none";
+            required: "required";
         }>;
         roles: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
         credential_types: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
@@ -248,9 +248,9 @@ export declare const ActionSpecUnion: z.ZodUnion<readonly [z.ZodObject<{
     streams: z.ZodOptional<z.ZodString>;
     error_reasons: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
     rate_limit: z.ZodOptional<z.ZodEnum<{
-        both: "both";
         account: "account";
         ip: "ip";
+        both: "both";
     }>>;
     kind: z.ZodDefault<z.ZodLiteral<"remote_notification">>;
     auth: z.ZodDefault<z.ZodNull>;
@@ -272,9 +272,9 @@ export declare const ActionSpecUnion: z.ZodUnion<readonly [z.ZodObject<{
     streams: z.ZodOptional<z.ZodString>;
     error_reasons: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
     rate_limit: z.ZodOptional<z.ZodEnum<{
-        both: "both";
         account: "account";
         ip: "ip";
+        both: "both";
     }>>;
     kind: z.ZodDefault<z.ZodLiteral<"local_call">>;
     auth: z.ZodDefault<z.ZodNull>;

package/dist/actions/perform_action.js

@@ -56,6 +56,7 @@
  */
 import { DEV } from 'esm-env';
 import { apply_authorization_phase, has_any_scoped_role } from '../auth/request_context.js';
+import {} from '../hono_context.js';
 import { to_input_params } from '../http/schema_helpers.js';
 import { dispatch_with_post_commit_rollback } from '../http/pending_effects.js';
 import { JSONRPC_VERSION } from '../http/jsonrpc.js';

package/dist/actions/register_action_ws.js

@@ -104,6 +104,7 @@ import { JsonrpcRequest } from '../http/jsonrpc.js';
 import { dev_only, jsonrpc_error_messages } from '../http/jsonrpc_errors.js';
 import { create_jsonrpc_error_response, create_jsonrpc_notification, to_jsonrpc_envelope_id, to_jsonrpc_message_id, to_jsonrpc_params, is_jsonrpc_object, is_jsonrpc_request, is_jsonrpc_request_id } from '../http/jsonrpc_helpers.js';
 import { TOKEN_SCOPE_KEY, TEST_CONTEXT_PRESET_KEY } from '../hono_context.js';
+import {} from './action_types.js';
 import { compile_action_registry } from './compile_action_registry.js';
 import { cancel_action_spec, CancelNotificationParams } from './cancel.js';
 import { DEFAULT_WS_MAX_MESSAGE_BYTES, WS_CLOSE_INTERNAL_ERROR, WS_CLOSE_MESSAGE_TOO_BIG, WS_CLOSE_POLICY_VIOLATION, WS_CLOSE_SERVER_HEARTBEAT_TIMEOUT, WS_CLOSE_SESSION_REVOKED, WS_CLOSE_SESSION_REVOKED_REASON, utf8_length, utf8_length_over } from './transports.js';

package/dist/auth/account_routes.js

@@ -22,7 +22,7 @@
  * @module
  */
 import { clear_session_cookie, create_session_and_set_cookie } from './session_middleware.js';
-import { to_session_account } from './account_schema.js';
+import { RoleGrantSummaryJson, to_session_account } from './account_schema.js';
 import { account_status_route_shape, create_account_route_shapes, DEFAULT_MAX_SESSIONS } from './account_route_schema.js';
 import { hash_session_token, query_session_revoke_all_for_account, query_session_revoke_by_hash_unscoped } from './session_queries.js';
 import { query_account_by_username_or_email, query_update_account_password } from './account_queries.js';

package/dist/auth/audit_log_schema.d.ts

@@ -141,16 +141,16 @@ export declare const audit_metadata_schemas: Readonly<{
             concurrent_change: "concurrent_change";
         }>>;
         credential_type: z.ZodOptional<z.ZodEnum<{
-            session: "session";
             daemon_token: "daemon_token";
+            session: "session";
             api_token: "api_token";
         }>>;
     }, z.core.$loose>>;
     session_revoke: z.ZodObject<{
         session_id: z.core.$ZodBranded<z.ZodString, "SessionId", "out">;
         credential_type: z.ZodOptional<z.ZodEnum<{
-            session: "session";
             daemon_token: "daemon_token";
+            session: "session";
             api_token: "api_token";
         }>>;
     }, z.core.$loose>;
@@ -159,8 +159,8 @@ export declare const audit_metadata_schemas: Readonly<{
         reason: z.ZodOptional<z.ZodString>;
         attempted_account_id: z.ZodOptional<z.core.$ZodBranded<z.ZodUUID, "Uuid", "out">>;
         credential_type: z.ZodOptional<z.ZodEnum<{
-            session: "session";
             daemon_token: "daemon_token";
+            session: "session";
             api_token: "api_token";
         }>>;
     }, z.core.$loose>;
@@ -168,16 +168,16 @@ export declare const audit_metadata_schemas: Readonly<{
         token_id: z.ZodString;
         name: z.ZodString;
         credential_type: z.ZodOptional<z.ZodEnum<{
-            session: "session";
             daemon_token: "daemon_token";
+            session: "session";
             api_token: "api_token";
         }>>;
     }, z.core.$loose>;
     token_revoke: z.ZodObject<{
         token_id: z.ZodString;
         credential_type: z.ZodOptional<z.ZodEnum<{
-            session: "session";
             daemon_token: "daemon_token";
+            session: "session";
             api_token: "api_token";
         }>>;
     }, z.core.$loose>;

package/dist/auth/cell_action_specs.d.ts

@@ -385,8 +385,8 @@ export declare const CellListInput: z.ZodDefault<z.ZodObject<{
         updated_at: "updated_at";
     }>>;
     order_direction: z.ZodOptional<z.ZodEnum<{
-        desc: "desc";
         asc: "asc";
+        desc: "desc";
     }>>;
     limit: z.ZodOptional<z.ZodNumber>;
     offset: z.ZodOptional<z.ZodNumber>;
@@ -737,8 +737,8 @@ export declare const cell_list_action_spec: {
             updated_at: "updated_at";
         }>>;
         order_direction: z.ZodOptional<z.ZodEnum<{
-            desc: "desc";
             asc: "asc";
+            desc: "desc";
         }>>;
         limit: z.ZodOptional<z.ZodNumber>;
         offset: z.ZodOptional<z.ZodNumber>;
@@ -1090,8 +1090,8 @@ export declare const all_cell_action_specs: readonly [{
             updated_at: "updated_at";
         }>>;
         order_direction: z.ZodOptional<z.ZodEnum<{
-            desc: "desc";
             asc: "asc";
+            desc: "desc";
         }>>;
         limit: z.ZodOptional<z.ZodNumber>;
         offset: z.ZodOptional<z.ZodNumber>;

package/dist/auth/credential_type_schema.d.ts

@@ -45,8 +45,8 @@ export declare const CREDENTIAL_TYPE_DAEMON_TOKEN = "daemon_token";
 export declare const BUILTIN_CREDENTIAL_TYPES: readonly ["session", "api_token", "daemon_token"];
 /** Zod enum for builtin credential types only. */
 export declare const BuiltinCredentialType: z.ZodEnum<{
-    session: "session";
     daemon_token: "daemon_token";
+    session: "session";
     api_token: "api_token";
 }>;
 export type BuiltinCredentialType = z.infer<typeof BuiltinCredentialType>;

package/dist/cli/daemon.js

@@ -8,6 +8,7 @@
  * @module
  */
 import { z } from 'zod';
+import {} from '../runtime/deps.js';
 import { write_file_atomic } from '../runtime/fs.js';
 import { get_app_dir } from './config.js';
 /**

package/dist/cli/logger.js

@@ -11,6 +11,7 @@
  *
  * @module
  */
+import { Logger } from '@fuzdev/fuz_util/log.ts';
 /**
  * Creates a CLI logger wrapping a Logger with semantic output methods.
  *

package/dist/db/CLAUDE.md

@@ -178,7 +178,7 @@ DO NOTHING`), `_put_fact_refs`, `_get_fact` / `_get_fact_meta` / `_has_fact`
   `fsync`ed before the rename publishes it (twins the Rust `fuz_fact` §fsync
   posture: data-sync before rename, parent-dir fsync waived) — the serve path
   streams the file without re-hashing, so write-time durability is the guard.
-- **`fact_store_errors.ts`** — `PayloadTooLargeError` / `StorageFullError` (+
+- **`fact_store_errors.ts`** — `FactPayloadTooLargeError` / `FactStorageFullError` (+
   `is_enospc_error`) thrown by `put_stream`, for a consumer route's 413 / 507.
 - The HTTP serving plumbing lives under `server/` (`serve_fact_route.ts`,
   `x_accel.ts`).

package/dist/db/fact_disk_storage.d.ts

@@ -78,12 +78,12 @@ export interface StreamFactToDiskResult {
  *   `facts_dir`), the buffer + remaining chunks spill to `<facts_dir>/.tmp/…`,
  *   then `rename` into `<facts_dir>/<shard>/<rest>` once the hash is known —
  *   `{kind: 'disk'}`. A body over the threshold with `facts_dir === undefined`
- *   throws `PayloadTooLargeError` (matches `PgFactStore.put`).
- * - **Cap enforcement.** Aborts with `PayloadTooLargeError` the moment the
+ *   throws `FactPayloadTooLargeError` (matches `PgFactStore.put`).
+ * - **Cap enforcement.** Aborts with `FactPayloadTooLargeError` the moment the
  *   running byte count passes `max_bytes` — the mid-stream backstop for a
  *   chunked or mis-declared `Content-Length`.
  * - **Disk-full.** An `ENOSPC` from the temp-file write surfaces as
- *   `StorageFullError`.
+ *   `FactStorageFullError`.
  *
  * @mutates `facts_dir` filesystem
  */

package/dist/db/fact_disk_storage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fact_disk_storage.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/db/fact_disk_storage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AASH,OAAO,EAAoB,KAAK,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AACnF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAEtD,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAE9F,OAAO,EAIN,KAAK,WAAW,EAChB,MAAM,oBAAoB,CAAC;AAG5B,sEAAsE;AACtE,eAAO,MAAM,gBAAgB,SAAS,CAAC;AAEvC,8EAA8E;AAC9E,eAAO,MAAM,0BAA0B,QAAiB,CAAC;AAEzD;;;;GAIG;AACH,MAAM,MAAM,mBAAmB,GAAG,IAAI,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,WAAW,CAAC,GACnF,IAAI,CAAC,WAAW,EAAE,OAAO,GAAG,QAAQ,GAAG,YAAY,GAAG,OAAO,CAAC,GAC9D,IAAI,CAAC,YAAY,EAAE,mBAAmB,CAAC,GACvC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;AAE9B;;;;;GAKG;AACH,MAAM,MAAM,eAAe,GAC1B;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,UAAU,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,WAAW,CAAA;CAAE,CAAC;AAEvF;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACtC,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,eAAe,CAAC;CAC3B;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,mBAAmB,GAC/B,MAAM,IAAI,CACT,mBAAmB,EACnB,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,mBAAmB,GAAG,OAAO,GAAG,MAAM,CACtE,EACD,WAAW,MAAM,GAAG,SAAS,EAC7B,QAAQ,cAAc,CAAC,UAAU,CAAC,EAClC,WAAW,MAAM,EACjB,oBAAoB,MAAM,KACxB,OAAO,CAAC,sBAAsB,CA8GhC,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,wBAAwB,GACpC,MAAM,IAAI,CAAC,mBAAmB,EAAE,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,YAAY,GAAG,OAAO,GAAG,MAAM,CAAC,EAChG,WAAW,MAAM,EACjB,MAAM,QAAQ,EACd,OAAO,UAAU,KACf,OAAO,CAAC,WAAW,CAgBrB,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,yBAAyB,GACrC,MAAM,IAAI,CAAC,mBAAmB,EAAE,WAAW,CAAC,EAC5C,WAAW,MAAM,EACjB,KAAK,MAAM,KACT,OAAO,CAAC,UAAU,CAIpB,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,kBAAkB,GAC9B,MAAM,IAAI,CAAC,mBAAmB,EAAE,SAAS,GAAG,MAAM,GAAG,QAAQ,CAAC,EAC9D,WAAW,MAAM,EACjB,UAAU;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,KAC3D,OAAO,CAAC,MAAM,CA0BhB,CAAC"}
+{"version":3,"file":"fact_disk_storage.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/db/fact_disk_storage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AASH,OAAO,EAAoB,KAAK,QAAQ,EAAE,MAAM,kCAAkC,CAAC;AACnF,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAEtD,OAAO,KAAK,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAE9F,OAAO,EAIN,KAAK,WAAW,EAChB,MAAM,oBAAoB,CAAC;AAO5B,sEAAsE;AACtE,eAAO,MAAM,gBAAgB,SAAS,CAAC;AAEvC,8EAA8E;AAC9E,eAAO,MAAM,0BAA0B,QAAiB,CAAC;AAEzD;;;;GAIG;AACH,MAAM,MAAM,mBAAmB,GAAG,IAAI,CAAC,UAAU,EAAE,MAAM,GAAG,SAAS,GAAG,WAAW,CAAC,GACnF,IAAI,CAAC,WAAW,EAAE,OAAO,GAAG,QAAQ,GAAG,YAAY,GAAG,OAAO,CAAC,GAC9D,IAAI,CAAC,YAAY,EAAE,mBAAmB,CAAC,GACvC,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;AAE9B;;;;;GAKG;AACH,MAAM,MAAM,eAAe,GAC1B;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,KAAK,EAAE,UAAU,CAAA;CAAE,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,WAAW,CAAA;CAAE,CAAC;AAEvF;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACtC,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,eAAe,CAAC;CAC3B;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,mBAAmB,GAC/B,MAAM,IAAI,CACT,mBAAmB,EACnB,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,mBAAmB,GAAG,OAAO,GAAG,MAAM,CACtE,EACD,WAAW,MAAM,GAAG,SAAS,EAC7B,QAAQ,cAAc,CAAC,UAAU,CAAC,EAClC,WAAW,MAAM,EACjB,oBAAoB,MAAM,KACxB,OAAO,CAAC,sBAAsB,CA8GhC,CAAC;AAEF;;;;;;;;GAQG;AACH,eAAO,MAAM,wBAAwB,GACpC,MAAM,IAAI,CAAC,mBAAmB,EAAE,OAAO,GAAG,QAAQ,GAAG,QAAQ,GAAG,YAAY,GAAG,OAAO,GAAG,MAAM,CAAC,EAChG,WAAW,MAAM,EACjB,MAAM,QAAQ,EACd,OAAO,UAAU,KACf,OAAO,CAAC,WAAW,CAgBrB,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,yBAAyB,GACrC,MAAM,IAAI,CAAC,mBAAmB,EAAE,WAAW,CAAC,EAC5C,WAAW,MAAM,EACjB,KAAK,MAAM,KACT,OAAO,CAAC,UAAU,CAIpB,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,kBAAkB,GAC9B,MAAM,IAAI,CAAC,mBAAmB,EAAE,SAAS,GAAG,MAAM,GAAG,QAAQ,CAAC,EAC9D,WAAW,MAAM,EACjB,UAAU;IAAE,UAAU,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,KAC3D,OAAO,CAAC,MAAM,CA0BhB,CAAC"}

package/dist/db/fact_disk_storage.js

@@ -36,7 +36,7 @@ import { to_hex } from '@fuzdev/fuz_util/hex.ts';
 import { FACT_HASH_PREFIX } from '@fuzdev/fuz_util/hash_schemas.ts';
 import { generate_random_base64url } from '../crypto.js';
 import { fact_disk_path, mint_file_fact_url, parse_file_fact_url } from './file_fact_url.js';
-import { is_enospc_error, PayloadTooLargeError, StorageFullError } from './fact_store_errors.js';
+import { is_enospc_error, FactPayloadTooLargeError, FactStorageFullError } from './fact_store_errors.js';
 /** Subdirectory under `facts_dir` for in-flight atomic temp files. */
 export const FACT_TMP_DIRNAME = '.tmp';
 /** Default age (1 hour) past which a `.tmp/*` file is considered orphaned. */
@@ -54,12 +54,12 @@ export const FACT_TMP_ORPHAN_MAX_AGE_MS = 60 * 60 * 1000;
  *   `facts_dir`), the buffer + remaining chunks spill to `<facts_dir>/.tmp/…`,
  *   then `rename` into `<facts_dir>/<shard>/<rest>` once the hash is known —
  *   `{kind: 'disk'}`. A body over the threshold with `facts_dir === undefined`
- *   throws `PayloadTooLargeError` (matches `PgFactStore.put`).
- * - **Cap enforcement.** Aborts with `PayloadTooLargeError` the moment the
+ *   throws `FactPayloadTooLargeError` (matches `PgFactStore.put`).
+ * - **Cap enforcement.** Aborts with `FactPayloadTooLargeError` the moment the
  *   running byte count passes `max_bytes` — the mid-stream backstop for a
  *   chunked or mis-declared `Content-Length`.
  * - **Disk-full.** An `ENOSPC` from the temp-file write surfaces as
- *   `StorageFullError`.
+ *   `FactStorageFullError`.
  *
  * @mutates `facts_dir` filesystem
  */
@@ -76,7 +76,7 @@ export const stream_fact_to_disk = async (deps, facts_dir, source, max_bytes, em
     const hash_and_count = (chunk) => {
         size += chunk.length;
         if (size > max_bytes)
-            throw new PayloadTooLargeError(size, max_bytes);
+            throw new FactPayloadTooLargeError(size, max_bytes);
         blake3.update(chunk);
         sha256.update(chunk);
     };
@@ -111,7 +111,7 @@ export const stream_fact_to_disk = async (deps, facts_dir, source, max_bytes, em
         if (facts_dir === undefined) {
             // Over the embedded threshold with nowhere to spill — same shape as the
             // `PgFactStore.put` oversize-without-disk_root reject.
-            throw new PayloadTooLargeError(size, embedded_threshold);
+            throw new FactPayloadTooLargeError(size, embedded_threshold);
         }
         // Phase 2: spill. A combined stream emits the already-hashed buffered
         // chunks, then continues pulling from `reader`, hashing each remaining
@@ -154,8 +154,8 @@ export const stream_fact_to_disk = async (deps, facts_dir, source, max_bytes, em
         catch (err) {
             await deps.remove(tmp_path).catch(() => undefined);
             if (is_enospc_error(err))
-                throw new StorageFullError(err);
-            throw err; // includes a mid-stream PayloadTooLargeError surfaced via the stream
+                throw new FactStorageFullError(err);
+            throw err; // includes a mid-stream FactPayloadTooLargeError surfaced via the stream
         }
         const hash = (FACT_HASH_PREFIX + to_hex(blake3.finalize()));
         const { shard, rest } = await commit_temp_to_cas(deps, tmp_path, facts_dir, hash);
@@ -197,7 +197,7 @@ export const write_fact_bytes_to_disk = async (deps, facts_dir, hash, bytes) =>
     catch (err) {
         await deps.remove(tmp_path).catch(() => undefined);
         if (is_enospc_error(err))
-            throw new StorageFullError(err);
+            throw new FactStorageFullError(err);
         throw err;
     }
     const { shard, rest } = await commit_temp_to_cas(deps, tmp_path, facts_dir, hash);
@@ -273,7 +273,7 @@ export const sweep_orphan_temps = async (deps, facts_dir, options) => {
  * the file without re-hashing, so the bytes must be stable before they become
  * the canonical body), then either drop the temp (byte-identical content already
  * present — idempotent dedup) or atomically `rename` it into place. On any
- * failure the temp is unlinked and an `ENOSPC` is surfaced as `StorageFullError`.
+ * failure the temp is unlinked and an `ENOSPC` is surfaced as `FactStorageFullError`.
  * The single commit path shared by both writers above — twins the Rust `fuz_fact`
  * `SpillFile::rename_into_cas` (data-sync before rename; parent-dir fsync waived).
  *
@@ -295,7 +295,7 @@ const commit_temp_to_cas = async (deps, tmp_path, facts_dir, hash) => {
     catch (err) {
         await deps.remove(tmp_path).catch(() => undefined);
         if (is_enospc_error(err))
-            throw new StorageFullError(err);
+            throw new FactStorageFullError(err);
         throw err;
     }
     return { shard, rest };

package/dist/db/fact_store.d.ts

@@ -24,7 +24,7 @@
  * oversize `put` throws. `put_stream` needs `fs` for a body of any size — with
  * none it throws before reading the stream — and `disk_root` for the
  * over-threshold spill: with none, a body that passes the threshold throws
- * `PayloadTooLargeError`.
+ * `FactPayloadTooLargeError`.
  *
  * Every `external_url` the store writes is a `file:<shard>/<rest>` URL into its
  * own disk CAS, and that CAS is the only place `get` reads external bytes from
@@ -58,7 +58,7 @@ export declare const FACT_EMBEDDED_THRESHOLD_DEFAULT: number;
  * reads disk-backed facts from it. When either is unset the store writes
  * embedded rows only and `get` returns `null` for an external row: an oversize
  * `put` throws; `put_stream` throws for a body of any size when `fs` is unset,
- * and with `fs` but no `disk_root` throws `PayloadTooLargeError` for a body
+ * and with `fs` but no `disk_root` throws `FactPayloadTooLargeError` for a body
  * that passes the threshold. `log` is optional — its call sites are the
  * warnings on the paths where `get` returns `null` for an external row.
  */
@@ -91,8 +91,8 @@ export declare class PgFactStore implements FactStore {
      * BLAKE3 + SHA-256 in one pass, buffer to the embedded threshold, spill to the
      * disk CAS), then inserts the `fact` row by placement — embedded bytes go to
      * the PG `bytes` column, disk-spilled bytes record the `file:` `external_url`.
-     * The cap is enforced mid-stream (`PayloadTooLargeError`); a disk-full mid-
-     * stream throws `StorageFullError`.
+     * The cap is enforced mid-stream (`FactPayloadTooLargeError`); a disk-full mid-
+     * stream throws `FactStorageFullError`.
      *
      * Refs: explicit `options.refs` are recorded; JSON auto-extraction is NOT
      * attempted (it would need a buffered re-read, defeating the bounded-memory

package/dist/db/fact_store.js

@@ -24,7 +24,7 @@
  * oversize `put` throws. `put_stream` needs `fs` for a body of any size — with
  * none it throws before reading the stream — and `disk_root` for the
  * over-threshold spill: with none, a body that passes the threshold throws
- * `PayloadTooLargeError`.
+ * `FactPayloadTooLargeError`.
  *
  * Every `external_url` the store writes is a `file:<shard>/<rest>` URL into its
  * own disk CAS, and that CAS is the only place `get` reads external bytes from
@@ -100,8 +100,8 @@ export class PgFactStore {
      * BLAKE3 + SHA-256 in one pass, buffer to the embedded threshold, spill to the
      * disk CAS), then inserts the `fact` row by placement — embedded bytes go to
      * the PG `bytes` column, disk-spilled bytes record the `file:` `external_url`.
-     * The cap is enforced mid-stream (`PayloadTooLargeError`); a disk-full mid-
-     * stream throws `StorageFullError`.
+     * The cap is enforced mid-stream (`FactPayloadTooLargeError`); a disk-full mid-
+     * stream throws `FactStorageFullError`.
      *
      * Refs: explicit `options.refs` are recorded; JSON auto-extraction is NOT
      * attempted (it would need a buffered re-read, defeating the bounded-memory

package/dist/db/fact_store_errors.d.ts

@@ -14,7 +14,7 @@
  * mis-declared `Content-Length` that the cheap header pre-check can't catch.
  * A consumer route maps this to `413`.
  */
-export declare class PayloadTooLargeError extends Error {
+export declare class FactPayloadTooLargeError extends Error {
     /** Bytes read before the cap tripped (may exceed `max_bytes` by one chunk). */
     readonly bytes_read: number;
     readonly max_bytes: number;
@@ -26,13 +26,13 @@ export declare class PayloadTooLargeError extends Error {
  * a best-effort free-space preflight can't promise (chunked uploads, TOCTOU
  * races). A consumer route maps this to `507`.
  */
-export declare class StorageFullError extends Error {
+export declare class FactStorageFullError extends Error {
     constructor(cause?: unknown);
 }
 /**
  * Whether a thrown value is a Node filesystem `ENOSPC` (no space left on
  * device). Used by the streaming disk write to translate the raw FS error
- * into a `StorageFullError`.
+ * into a `FactStorageFullError`.
  */
 export declare const is_enospc_error: (err: unknown) => boolean;
 //# sourceMappingURL=fact_store_errors.d.ts.map

package/dist/db/fact_store_errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"fact_store_errors.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/db/fact_store_errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH;;;;;GAKG;AACH,qBAAa,oBAAqB,SAAQ,KAAK;IAC9C,+EAA+E;IAC/E,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;gBACf,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;CAMjD;AAED;;;;;GAKG;AACH,qBAAa,gBAAiB,SAAQ,KAAK;gBAC9B,KAAK,CAAC,EAAE,OAAO;CAI3B;AAED;;;;GAIG;AACH,eAAO,MAAM,eAAe,GAAI,KAAK,OAAO,KAAG,OAID,CAAC"}
+{"version":3,"file":"fact_store_errors.d.ts","sourceRoot":"../src/lib/","sources":["../../src/lib/db/fact_store_errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH;;;;;GAKG;AACH,qBAAa,wBAAyB,SAAQ,KAAK;IAClD,+EAA+E;IAC/E,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;gBACf,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;CAMjD;AAED;;;;;GAKG;AACH,qBAAa,oBAAqB,SAAQ,KAAK;gBAClC,KAAK,CAAC,EAAE,OAAO;CAI3B;AAED;;;;GAIG;AACH,eAAO,MAAM,eAAe,GAAI,KAAK,OAAO,KAAG,OAID,CAAC"}

package/dist/db/fact_store_errors.js

@@ -14,13 +14,13 @@
  * mis-declared `Content-Length` that the cheap header pre-check can't catch.
  * A consumer route maps this to `413`.
  */
-export class PayloadTooLargeError extends Error {
+export class FactPayloadTooLargeError extends Error {
     /** Bytes read before the cap tripped (may exceed `max_bytes` by one chunk). */
     bytes_read;
     max_bytes;
     constructor(bytes_read, max_bytes) {
         super(`payload too large: read ${bytes_read} bytes, exceeds ${max_bytes} byte limit`);
-        this.name = 'PayloadTooLargeError';
+        this.name = 'FactPayloadTooLargeError';
         this.bytes_read = bytes_read;
         this.max_bytes = max_bytes;
     }
@@ -31,16 +31,16 @@ export class PayloadTooLargeError extends Error {
  * a best-effort free-space preflight can't promise (chunked uploads, TOCTOU
  * races). A consumer route maps this to `507`.
  */
-export class StorageFullError extends Error {
+export class FactStorageFullError extends Error {
     constructor(cause) {
         super('storage_full', cause === undefined ? undefined : { cause });
-        this.name = 'StorageFullError';
+        this.name = 'FactStorageFullError';
     }
 }
 /**
  * Whether a thrown value is a Node filesystem `ENOSPC` (no space left on
  * device). Used by the streaming disk write to translate the raw FS error
- * into a `StorageFullError`.
+ * into a `FactStorageFullError`.
  */
 export const is_enospc_error = (err) => typeof err === 'object' &&
     err !== null &&

package/dist/env/load.js

@@ -6,6 +6,7 @@
  *
  * @module
  */
+import { z } from 'zod';
 /**
  * Error thrown when environment validation fails.
  *

package/dist/hono_context.d.ts

@@ -24,8 +24,8 @@ import type { RequestContext } from './auth/request_context.js';
 export declare const CREDENTIAL_TYPES: readonly ["session", "api_token", "daemon_token"];
 /** Credential type — how a request was authenticated. */
 export declare const CredentialType: z.ZodEnum<{
-    session: "session";
     daemon_token: "daemon_token";
+    session: "session";
     api_token: "api_token";
 }>;
 export type CredentialType = z.infer<typeof CredentialType>;

package/dist/http/CLAUDE.md

@@ -151,7 +151,7 @@ WS); see ../../../docs/architecture.md §DEV-only Output Validation.
 `http/error_schemas.ts` is the **declarative** error surface:
 
 - `ERROR_*` `snake_case` string constants — single source of truth; use `.literal(ERROR_*)` in Zod schemas and inline checks in handlers
-- `ApiError`, `ValidationError`, `PermissionError`, `CredentialTypeRequiredError`, `RateLimitError`, `PayloadTooLargeError`, `ForeignKeyError` — standard shapes
+- `ApiError`, `ValidationError`, `PermissionError`, `CredentialTypeRequiredError`, `RateLimitError`, `PayloadTooLargeError`, `UnsupportedContentTypeError`, `ForeignKeyError` — standard shapes
 - `RouteErrorSchemas = Partial<Record<number, z.ZodType>>`
 - `RateLimitKey = 'ip' | 'account' | 'both'`
 
@@ -173,7 +173,7 @@ merges three layers, later overrides earlier at the same status code:
    - `auth.roles?.length` → 403 `PermissionError` (carries `required_roles`)
    - `auth.credential_types?.length` → 403 `CredentialTypeRequiredError` (carries `required_credential_types`; both gates set yields `z.union([PermissionError, CredentialTypeRequiredError])`)
    - `rate_limit` → 429 `RateLimitError`
-   - `checks_content_type` (every `POST`) → 415 `ApiError` (`unsupported_content_type`)
+   - `checks_content_type` (every `POST`) → 415 `UnsupportedContentTypeError`
    - `auth.actor !== 'none'` → widens 400 to a union with `ActorRequiredError` / `ActorNotOnAccountError` and adds 500 union of `NoActorsOnAccountError` / `AccountVanishedError`. Mirrors what the dispatcher's authorization phase actually emits on routes whose input declares `acting?: ActingActor` (per registry-time invariant 2) — so DEV-mode error-schema validation doesn't reject the auth phase's body.
 2. **Middleware** — from `MiddlewareSpec.errors` that apply to the route's path (via `middleware_applies`)
 3. **Explicit** — `RouteSpec.errors` — always wins

package/dist/http/auth_shape.d.ts

@@ -91,9 +91,9 @@ export declare const parse_acting: (value: unknown) => string | undefined;
  *   without an actor binding).
  */
 export declare const AuthAxisState: z.ZodEnum<{
-    required: "required";
-    none: "none";
     optional: "optional";
+    none: "none";
+    required: "required";
 }>;
 export type AuthAxisState = z.infer<typeof AuthAxisState>;
 /**
@@ -123,14 +123,14 @@ export type AuthAxisState = z.infer<typeof AuthAxisState>;
  */
 export declare const RouteAuth: z.ZodObject<{
     account: z.ZodEnum<{
-        required: "required";
-        none: "none";
         optional: "optional";
+        none: "none";
+        required: "required";
     }>;
     actor: z.ZodEnum<{
-        required: "required";
-        none: "none";
         optional: "optional";
+        none: "none";
+        required: "required";
     }>;
     roles: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodString>>>;
     credential_types: z.ZodOptional<z.ZodReadonly<z.ZodArray<z.ZodString>>>;