@graview/core 0.1.49 → 0.1.50

package/dist/publish.js

@@ -0,0 +1,23 @@
+import { actingAs, isSystem } from "./permissions/policy.js";
+import * as z from "./schema/zod.js";
+/** The built-in act that publishes: every store of an `on-publish` app answers to it once `@graview/core/publishing` is loaded. */
+export const PUBLISH = "publish";
+/** Whether an app's readers are served what was published rather than the head. */
+export const onPublish = (publishing) => publishing?.mode === "on-publish";
+/**
+ * Whether a seat is a reader — served what was published — under this
+ * declaration: not the system, and (unless it asked to see the app as
+ * readers do) holding no `working` role, an agent's read through the
+ * person it acts for.
+ */
+export const readsPublished = (publishing, principal, as) => onPublish(publishing) && !isSystem(principal) && (as === "published" || !(actingAs(principal).roles ?? []).some((role) => publishing.working.includes(role)));
+/*
+ * One object for the store, the seat view and `@graview/core/publishing`,
+ * found by a key every copy agrees on, as a seat's view is (`seat-of.ts`):
+ * the module a page fetches imports nothing of what it loaded first, so
+ * a bundler leaves all of that where it was — a page that never draws a
+ * store (the guest host) does not load the seat view for its sake.
+ */
+export const PUBLISHING = (globalThis[Symbol.for("@graview/core:publishing")] ??= {});
+PUBLISHING.input = () => z.object({ through: z.optional(z.number()) });
+//# sourceMappingURL=publish.js.map

package/dist/publish.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"publish.js","sourceRoot":"","sources":["../src/publish.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAE7D,OAAO,KAAK,CAAC,MAAM,iBAAiB,CAAC;AA4BrC,mIAAmI;AACnI,MAAM,CAAC,MAAM,OAAO,GAAG,SAAS,CAAC;AAEjC,mFAAmF;AACnF,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,UAAkC,EAA4B,EAAE,CAAC,UAAU,EAAE,IAAI,KAAK,YAAY,CAAC;AAE7H;;;;;GAKG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,UAAkC,EAAE,SAAoB,EAAE,EAAyB,EAAW,EAAE,CAC7H,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,KAAK,WAAW,IAAI,CAAC,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAyBhK;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,UAAU,GAAqB,CAAE,UAA2D,CAAC,MAAM,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;AAC1J,UAAU,CAAC,KAAK,GAAG,GAAG,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC"}

package/dist/publishing.d.ts

@@ -0,0 +1,10 @@
+import type { AnyMutationDefinition } from "./mutations/types.js";
+import type { OperationLog } from "./ops/log.js";
+import type { Principal, Refusal } from "./permissions/types.js";
+import type { Publishing } from "./publish.js";
+import type { AnySchema } from "./schema/schema.js";
+export declare const publishMutation: <S extends AnySchema>() => AnyMutationDefinition<S>;
+export declare function publishedSeqOf(log: Pick<OperationLog, "all" | "undoneIds">): number | undefined;
+/** Who may publish: a refusal in a sentence when this principal may not — whoever holds none of `publishers` (else `working`), the system aside. */
+export declare function publishRefusal(publishing: Publishing | undefined, principal: Principal): Refusal | undefined;
+//# sourceMappingURL=publishing.d.ts.map

package/dist/publishing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"publishing.d.ts","sourceRoot":"","sources":["../src/publishing.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAGjD,OAAO,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,KAAK,EAAE,UAAU,EAAoB,MAAM,cAAc,CAAC;AACjE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AA6BpD,eAAO,MAAM,eAAe,GAAI,CAAC,SAAS,SAAS,OAAK,qBAAqB,CAAC,CAAC,CAAiD,CAAC;AAYjI,wBAAgB,cAAc,CAAC,GAAG,EAAE,IAAI,CAAC,YAAY,EAAE,KAAK,GAAG,WAAW,CAAC,GAAG,MAAM,GAAG,SAAS,CAe/F;AAED,oJAAoJ;AACpJ,wBAAgB,cAAc,CAAC,UAAU,EAAE,UAAU,GAAG,SAAS,EAAE,SAAS,EAAE,SAAS,GAAG,OAAO,GAAG,SAAS,CAK5G"}

package/dist/publishing.js

@@ -0,0 +1,168 @@
+import { pastOf } from "./past.js";
+/** The store's and the seat view's own (`publish.ts`), found by its key: nothing of a page's first chunk is imported here. */
+const PUBLISHING = (globalThis[Symbol.for("@graview/core:publishing")] ??= {});
+/** What the seat view lends, once its module has run — which it has wherever a store is served. */
+const kit = () => PUBLISHING.kit;
+/*
+ * Written out here rather than imported where they are kept (`PUBLISH`,
+ * `onPublish`, the seat view's key and `bound`), so a page that fetches
+ * this asks its first chunk for as few names as it can.
+ */
+const NAME = "publish";
+const publishes = (publishing) => publishing?.mode === "on-publish";
+const SEAT = Symbol.for("@graview/core:seat");
+const bound = (target, prop) => {
+    const value = Reflect.get(target, prop, target);
+    return typeof value === "function" ? value.bind(target) : value;
+};
+/**
+ * "PUBLISH": no record is its subject and it makes none. Its one argument,
+ * `through`, publishes through an earlier seq; absent, everything to the
+ * head. The store writes its op itself (`publishedThrough`), so its body
+ * is never run; offered, as the store offers it, to `publishers`.
+ */
+let made;
+const act = () => (made ??= { name: NAME, title: "Publish", description: "Publish what collaborators have changed, so readers see it.", input: PUBLISHING.input(), apply() { } });
+export const publishMutation = () => act();
+/**
+ * HOW FAR READERS ARE SERVED: the `publishedThrough` of the last publish
+ * op that stands (an undone one does not — undoing a publish takes readers
+ * back to the one before), or `undefined` when nothing was ever published.
+ * Kept per log while its length and last op are the ones it was read at.
+ */
+const READ = new WeakMap();
+export function publishedSeqOf(log) {
+    const ops = log.all();
+    const last = ops.at(-1)?.id;
+    const held = READ.get(log);
+    if (held && held.length === ops.length && held.last === last)
+        return held.seq;
+    let seq;
+    let undone;
+    for (let at = ops.length - 1; at >= 0; at--) {
+        const op = ops[at];
+        if (op.publishedThrough === undefined || (undone ??= log.undoneIds()).has(op.id))
+            continue;
+        seq = op.publishedThrough;
+        break;
+    }
+    READ.set(log, { length: ops.length, last, seq });
+    return seq;
+}
+/** Who may publish: a refusal in a sentence when this principal may not — whoever holds none of `publishers` (else `working`), the system aside. */
+export function publishRefusal(publishing, principal) {
+    if (!publishes(publishing))
+        return { mutation: NAME, message: "this app is live: every edit reaches its readers as it is made, so there is nothing to publish.", wouldNeed: [] };
+    const roles = publishing.publishers ?? publishing.working;
+    if (!kit().reads({ mode: "on-publish", working: roles }, principal))
+        return undefined;
+    return { mutation: NAME, message: `only ${roles.join(", ") || "nobody"} may publish.`, wouldNeed: [...roles] };
+}
+/**
+ * THE MARKER A PUBLISH IS: one op that touches no record and says how far
+ * readers are served — through itself, or through `through` when the call
+ * names an earlier seq the store holds — appended to the store's log.
+ */
+const publishOp = (held, made, call, batch, author, options) => {
+    const { log } = held;
+    const seq = log.length;
+    const asked = call.args["through"];
+    if (asked !== undefined && (!Number.isInteger(asked) || asked < log.horizon || asked > seq)) {
+        throw new RangeError(`Cannot publish through seq ${String(asked)}: this store holds seqs ${log.horizon} to ${seq}.`);
+    }
+    const through = asked ?? seq + 1;
+    const was = publishedSeqOf(log) ?? log.horizon;
+    const changes = log.batches().filter((one) => !one.undone && one.ops.some((op) => op.seq >= was && op.seq < through && op.publishedThrough === undefined)).length;
+    const op = {
+        id: made.id,
+        seq,
+        batch,
+        author,
+        intent: through < was ? "Take back what was published" : `Publish ${changes === 1 ? "1 change" : `${changes} changes`}`,
+        ...(options.intent !== undefined ? { batchIntent: options.intent } : {}),
+        mutation: call,
+        primitives: [],
+        reads: [],
+        writes: [],
+        at: made.at,
+        ...(options.via !== undefined ? { via: options.via } : {}),
+        publishedThrough: through,
+    };
+    log.append(op);
+    return op;
+};
+/** The reads a reader's view answers from what was published; every other, and every write, is the head's. */
+const PUBLISHED_READS = new Set(["graph", "log", "snapshot", "batches", "violations", "findings", "canUndo", "servedSeq", "checkpoint"]);
+/**
+ * THE APP AS A READER IS SERVED IT, in an app that publishes: its graph,
+ * log, problems and history are those of the app as it stood at the last
+ * publish (`pastOf`) — before the first, the start of the log (the seed,
+ * or the horizon of a log compacted past it) — as the seat may see it;
+ * and every act, preview and permission still goes to the store and is
+ * judged at the head, where what the reader writes lands — read by readers
+ * when it is next published. It follows the published seq as a publish (or
+ * the undo of one) moves it, and tells its subscribers only when it does,
+ * with the change between the two.
+ */
+function servedBehind(store, principal) {
+    const { seatView, viewsOf, viewKey, diff: diffSnapshots } = kit();
+    const views = viewsOf(store);
+    const key = viewKey(principal, "published");
+    const held = views.get(key);
+    if (held)
+        return held;
+    const head = seatView(store, principal);
+    let kept;
+    const now = () => {
+        const seq = Math.max(store.publishedSeq ?? store.log.horizon, store.log.horizon);
+        if (seq >= store.log.length)
+            return head;
+        const id = store.log.all()[seq - 1 - store.log.horizon]?.id;
+        if (kept?.seq !== seq || kept.id !== id)
+            kept = { seq, id, view: seatView(pastOf(store, seq), principal) };
+        return kept.view;
+    };
+    const seqOf = (served) => served.servedSeq;
+    const subscribe = (listener) => {
+        let from = seqOf(now());
+        let shot = now().graph.snapshot();
+        return store.subscribe((() => {
+            const served = now();
+            const to = seqOf(served);
+            if (to === from)
+                return;
+            const after = served.graph.snapshot();
+            const ops = to > from ? served.log.all().filter((op) => op.seq >= from) : [];
+            const diff = diffSnapshots(shot, after);
+            [from, shot] = [to, after];
+            listener(diff, ops);
+        }));
+    };
+    const view = new Proxy(head, {
+        get(target, prop) {
+            switch (prop) {
+                case SEAT:
+                    return { store, principal };
+                case "subscribe":
+                    return subscribe;
+                case "seenBy":
+                    return (other, options) => store.seenBy(other, options);
+                case "seenFor":
+                    return principal;
+                default:
+                    return PUBLISHED_READS.has(prop) ? bound(now(), prop) : bound(target, prop);
+            }
+        },
+    });
+    views.set(key, view);
+    return view;
+}
+PUBLISHING.served = servedBehind;
+PUBLISHING.act = (held, declared) => (publishes(held.publishing) && !held.past && !declared.has(NAME) ? act() : undefined);
+PUBLISHING.verdict = (held, principal) => {
+    const refusal = publishRefusal(held.publishing, principal);
+    return refusal ? { ok: false, refusal } : { ok: true };
+};
+PUBLISHING.seq = (held) => (publishes(held.publishing) ? publishedSeqOf(held.log) : undefined);
+PUBLISHING.op = publishOp;
+//# sourceMappingURL=publishing.js.map

package/dist/publishing.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"publishing.js","sourceRoot":"","sources":["../src/publishing.ts"],"names":[],"mappings":"AAwBA,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAMnC,8HAA8H;AAC9H,MAAM,UAAU,GAAqB,CAAE,UAA2D,CAAC,MAAM,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;AACnJ,mGAAmG;AACnG,MAAM,GAAG,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,GAAI,CAAC;AAElC;;;;GAIG;AACH,MAAM,IAAI,GAAG,SAAS,CAAC;AACvB,MAAM,SAAS,GAAG,CAAC,UAAkC,EAA4B,EAAE,CAAC,UAAU,EAAE,IAAI,KAAK,YAAY,CAAC;AACtH,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;AAC9C,MAAM,KAAK,GAAG,CAAC,MAAc,EAAE,IAAiB,EAAW,EAAE;IAC3D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAChD,OAAO,OAAO,KAAK,KAAK,UAAU,CAAC,CAAC,CAAE,KAAyC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;AACvG,CAAC,CAAC;AAEF;;;;;GAKG;AACH,IAAI,IAAwB,CAAC;AAC7B,MAAM,GAAG,GAAG,GAAW,EAAE,CAAC,CAAC,IAAI,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,WAAW,EAAE,6DAA6D,EAAE,KAAK,EAAE,UAAU,CAAC,KAAM,EAAE,EAAE,KAAK,KAAI,CAAC,EAAE,CAAC,CAAC;AAC1L,MAAM,CAAC,MAAM,eAAe,GAAG,GAAkD,EAAE,CAAC,GAAG,EAAyC,CAAC;AAKjI;;;;;GAKG;AACH,MAAM,IAAI,GAAG,IAAI,OAAO,EAA4G,CAAC;AACrI,MAAM,UAAU,cAAc,CAAC,GAA4C;IACzE,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,EAAE,CAAC;IACtB,MAAM,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3B,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC,GAAG,CAAC;IAC9E,IAAI,GAAuB,CAAC;IAC5B,IAAI,MAA+B,CAAC;IACpC,KAAK,IAAI,EAAE,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,EAAE,EAAE,CAAC;QAC5C,MAAM,EAAE,GAAG,GAAG,CAAC,EAAE,CAAE,CAAC;QACpB,IAAI,EAAE,CAAC,gBAAgB,KAAK,SAAS,IAAI,CAAC,MAAM,KAAK,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YAAE,SAAS;QAC3F,GAAG,GAAG,EAAE,CAAC,gBAAgB,CAAC;QAC1B,MAAM;IACR,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;IACjD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,oJAAoJ;AACpJ,MAAM,UAAU,cAAc,CAAC,UAAkC,EAAE,SAAoB;IACrF,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,iGAAiG,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IACjL,MAAM,KAAK,GAAG,UAAU,CAAC,UAAU,IAAI,UAAU,CAAC,OAAO,CAAC;IAC1D,IAAI,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IACtF,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,QAAQ,eAAe,EAAE,SAAS,EAAE,CAAC,GAAG,KAAK,CAAC,EAAE,CAAC;AACjH,CAAC;AAED;;;;GAIG;AACH,MAAM,SAAS,GAAsC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE;IAChG,MAAM,EAAE,GAAG,EAAE,GAAG,IAAY,CAAC;IAC7B,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC;IACvB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACnC,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAK,KAAgB,GAAG,GAAG,CAAC,OAAO,IAAK,KAAgB,GAAG,GAAG,CAAC,EAAE,CAAC;QACpH,MAAM,IAAI,UAAU,CAAC,8BAA8B,MAAM,CAAC,KAAK,CAAC,2BAA2B,GAAG,CAAC,OAAO,OAAO,GAAG,GAAG,CAAC,CAAC;IACvH,CAAC;IACD,MAAM,OAAO,GAAI,KAA4B,IAAI,GAAG,GAAG,CAAC,CAAC;IACzD,MAAM,GAAG,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC;IAC/C,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC,GAAG,GAAG,OAAO,IAAI,EAAE,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;IAClK,MAAM,EAAE,GAAG;QACT,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,GAAG;QACH,KAAK;QACL,MAAM;QACN,MAAM,EAAE,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC,WAAW,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,OAAO,UAAU,EAAE;QACvH,GAAG,CAAC,OAAO,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,QAAQ,EAAE,IAAI;QACd,UAAU,EAAE,EAAE;QACd,KAAK,EAAE,EAAE;QACT,MAAM,EAAE,EAAE;QACV,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,gBAAgB,EAAE,OAAO;KACb,CAAC;IACf,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACf,OAAO,EAAE,CAAC;AACZ,CAAC,CAAC;AAEF,8GAA8G;AAC9G,MAAM,eAAe,GAAG,IAAI,GAAG,CAAc,CAAC,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC;AAEtJ;;;;;;;;;;GAUG;AACH,SAAS,YAAY,CAAmB,KAAQ,EAAE,SAAoB;IACpE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,GAAG,GAAG,EAAE,CAAC;IAClE,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,IAAI;QAAE,OAAO,IAAS,CAAC;IAC3B,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;IACxC,IAAI,IAA6F,CAAC;IAClG,MAAM,GAAG,GAAG,GAAM,EAAE;QAClB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACjF,IAAI,GAAG,IAAI,KAAK,CAAC,GAAG,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzC,MAAM,EAAE,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QAC5D,IAAI,IAAI,EAAE,GAAG,KAAK,GAAG,IAAI,IAAI,CAAC,EAAE,KAAK,EAAE;YAAE,IAAI,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,KAAc,EAAE,GAAG,CAAiB,EAAE,SAAS,CAAC,EAAE,CAAC;QACpI,OAAO,IAAI,CAAC,IAAI,CAAC;IACnB,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,CAAC,MAAS,EAAU,EAAE,CAAE,MAAoD,CAAC,SAAS,CAAC;IACrG,MAAM,SAAS,GAAG,CAAC,QAAqE,EAAE,EAAE;QAC1F,IAAI,IAAI,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC;QACxB,IAAI,IAAI,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;QAClC,OAAO,KAAK,CAAC,SAAS,CAAC,CAAC,GAAG,EAAE;YAC3B,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC;YACrB,MAAM,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC;YACzB,IAAI,EAAE,KAAK,IAAI;gBAAE,OAAO;YACxB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;YACtC,MAAM,GAAG,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7E,MAAM,IAAI,GAAG,aAAa,CAAC,IAAa,EAAE,KAAc,CAAqB,CAAC;YAC9E,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;YAC3B,QAAQ,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACtB,CAAC,CAAU,CAAC,CAAC;IACf,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,IAAI,KAAK,CAAC,IAAI,EAAE;QAC3B,GAAG,CAAC,MAAM,EAAE,IAAI;YACd,QAAQ,IAAI,EAAE,CAAC;gBACb,KAAK,IAAI;oBACP,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;gBAC9B,KAAK,WAAW;oBACd,OAAO,SAAS,CAAC;gBACnB,KAAK,QAAQ;oBACX,OAAO,CAAC,KAAgB,EAAE,OAAqB,EAAE,EAAE,CAAE,KAAiF,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;gBAChK,KAAK,SAAS;oBACZ,OAAO,SAAS,CAAC;gBACnB;oBACE,OAAO,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAChF,CAAC;QACH,CAAC;KACF,CAAC,CAAC;IACH,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACrB,OAAO,IAAS,CAAC;AACnB,CAAC;AAED,UAAU,CAAC,MAAM,GAAG,YAAqB,CAAC;AAC1C,UAAU,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC,SAAS,CAAE,IAAa,CAAC,UAAU,CAAC,IAAI,CAAE,IAAa,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,GAAG,EAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AAC1J,UAAU,CAAC,OAAO,GAAG,CAAC,IAAI,EAAE,SAAS,EAAE,EAAE;IACvC,MAAM,OAAO,GAAG,cAAc,CAAE,IAAa,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IACrE,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACzD,CAAC,CAAC;AACF,UAAU,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,SAAS,CAAE,IAAa,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,cAAc,CAAE,IAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AACnH,UAAU,CAAC,EAAE,GAAG,SAAS,CAAC"}

package/dist/refused.d.ts

@@ -3,9 +3,12 @@
  *
  * A refusal reached a client as a sentence and nothing else, so an MCP tool
  * and an interface told "you may not" from "it is gone" by matching words.
- * The set is closed and on the stability surface (docs/stability.md): a
- * code never changes meaning, and before 1.0 one may be added, the
- * changelog saying so (`unavailable`, FR-66; `refused`, FR-119).
+ * The set is OPEN and on the stability surface (docs/stability.md): a code
+ * never changes meaning, a code may be added within a major, the changelog
+ * saying so (`unavailable`, FR-66; `refused`, FR-119; `unauthenticated`
+ * and `quota`, 1.0's foundation), and a client meeting a code it does not
+ * know treats it as a final refusal — the change is taken back, its
+ * sentence shown — never as `unavailable`.
  *
  *   forbidden  the seat may not: the policy, a sight, an agent's `may`, a module turned off
  *   missing    what the call names is not there: a record, or a batch to take back
@@ -13,16 +16,20 @@
  *   limit      the host's hard cap: the call can never succeed as asked, however long the caller waits
  *   unavailable  the host takes no changes for a while — a room read-only while it is checked, storage that failed to write — and does not know for how long
  *   refused    the act's own rule said no to a well-formed call: a document act's `allowedWhen`, a TypeScript mutation's `ActRefusal` (FR-119)
+ *   unauthenticated  the host does not know who is asking: no session, or one that ran out; signing in again may let the same change through
+ *   quota      the account the app belongs to has used what its plan allows: the change may succeed once the allowance grows, never by waiting
  *
- * `limit` and `unavailable` are the host's to say; nothing in the store
- * says them. Neither is `busy`: busy is "not now, after `retryAfter`", and
+ * A body too large to take is `limit` (413), and a caller sending too much
+ * too fast is told `busy` with a wait (429), which is not a refusal.
+ * `limit`, `unavailable`, `unauthenticated` and `quota` are the host's to
+ * say; nothing in the store says them. Neither is `busy`: busy is "not now, after `retryAfter`", and
  * the client keeps the change and sends it again (FR-45). `unavailable` is
  * the one refusal that is not final: nothing was judged, and the client
  * keeps the change pending and sends it again, backing off as it does to
  * reconnect, until the host takes it. A refusal of any other reason is
  * final, and the change is taken back.
  */
-export declare const REFUSAL_REASONS: readonly ["forbidden", "missing", "invalid", "limit", "unavailable", "refused"];
+export declare const REFUSAL_REASONS: readonly ["forbidden", "missing", "invalid", "limit", "unavailable", "refused", "unauthenticated", "quota"];
 export type RefusalReason = (typeof REFUSAL_REASONS)[number];
 /**
  * A REFUSAL AN ACT SAYS ITSELF, TYPED (FR-110).

package/dist/refused.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"refused.d.ts","sourceRoot":"","sources":["../src/refused.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,eAAO,MAAM,eAAe,iFAAkF,CAAC;AAE/G,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;AAE7D;;;;;;;;;;;;;;;;;;;GAmBG;AACH,qBAAa,UAAW,SAAQ,KAAK;IAEjC,QAAQ,CAAC,QAAQ,EAAE,MAAM;IACzB,QAAQ,CAAC,MAAM,EAAE,aAAa;gBADrB,QAAQ,EAAE,MAAM,EAChB,MAAM,GAAE,aAAyB;CAK7C"}
+{"version":3,"file":"refused.d.ts","sourceRoot":"","sources":["../src/refused.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,eAAO,MAAM,eAAe,6GAA8G,CAAC;AAE3I,MAAM,MAAM,aAAa,GAAG,CAAC,OAAO,eAAe,CAAC,CAAC,MAAM,CAAC,CAAC;AAE7D;;;;;;;;;;;;;;;;;;;GAmBG;AACH,qBAAa,UAAW,SAAQ,KAAK;IAEjC,QAAQ,CAAC,QAAQ,EAAE,MAAM;IACzB,QAAQ,CAAC,MAAM,EAAE,aAAa;gBADrB,QAAQ,EAAE,MAAM,EAChB,MAAM,GAAE,aAAyB;CAK7C"}

package/dist/refused.js

@@ -3,9 +3,12 @@
  *
  * A refusal reached a client as a sentence and nothing else, so an MCP tool
  * and an interface told "you may not" from "it is gone" by matching words.
- * The set is closed and on the stability surface (docs/stability.md): a
- * code never changes meaning, and before 1.0 one may be added, the
- * changelog saying so (`unavailable`, FR-66; `refused`, FR-119).
+ * The set is OPEN and on the stability surface (docs/stability.md): a code
+ * never changes meaning, a code may be added within a major, the changelog
+ * saying so (`unavailable`, FR-66; `refused`, FR-119; `unauthenticated`
+ * and `quota`, 1.0's foundation), and a client meeting a code it does not
+ * know treats it as a final refusal — the change is taken back, its
+ * sentence shown — never as `unavailable`.
  *
  *   forbidden  the seat may not: the policy, a sight, an agent's `may`, a module turned off
  *   missing    what the call names is not there: a record, or a batch to take back
@@ -13,16 +16,20 @@
  *   limit      the host's hard cap: the call can never succeed as asked, however long the caller waits
  *   unavailable  the host takes no changes for a while — a room read-only while it is checked, storage that failed to write — and does not know for how long
  *   refused    the act's own rule said no to a well-formed call: a document act's `allowedWhen`, a TypeScript mutation's `ActRefusal` (FR-119)
+ *   unauthenticated  the host does not know who is asking: no session, or one that ran out; signing in again may let the same change through
+ *   quota      the account the app belongs to has used what its plan allows: the change may succeed once the allowance grows, never by waiting
  *
- * `limit` and `unavailable` are the host's to say; nothing in the store
- * says them. Neither is `busy`: busy is "not now, after `retryAfter`", and
+ * A body too large to take is `limit` (413), and a caller sending too much
+ * too fast is told `busy` with a wait (429), which is not a refusal.
+ * `limit`, `unavailable`, `unauthenticated` and `quota` are the host's to
+ * say; nothing in the store says them. Neither is `busy`: busy is "not now, after `retryAfter`", and
  * the client keeps the change and sends it again (FR-45). `unavailable` is
  * the one refusal that is not final: nothing was judged, and the client
  * keeps the change pending and sends it again, backing off as it does to
  * reconnect, until the host takes it. A refusal of any other reason is
  * final, and the change is taken back.
  */
-export const REFUSAL_REASONS = ["forbidden", "missing", "invalid", "limit", "unavailable", "refused"];
+export const REFUSAL_REASONS = ["forbidden", "missing", "invalid", "limit", "unavailable", "refused", "unauthenticated", "quota"];
 /**
  * A REFUSAL AN ACT SAYS ITSELF, TYPED (FR-110).
  *

package/dist/refused.js.map

@@ -1 +1 @@
-{"version":3,"file":"refused.js","sourceRoot":"","sources":["../src/refused.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,aAAa,EAAE,SAAS,CAAU,CAAC;AAI/G;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,OAAO,UAAW,SAAQ,KAAK;IAExB;IACA;IAFX,YACW,QAAgB,EAChB,SAAwB,SAAS;QAE1C,KAAK,CAAC,QAAQ,CAAC,CAAC;QAHP,aAAQ,GAAR,QAAQ,CAAQ;QAChB,WAAM,GAAN,MAAM,CAA2B;QAG1C,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;IAC3B,CAAC;CACF"}
+{"version":3,"file":"refused.js","sourceRoot":"","sources":["../src/refused.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,WAAW,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,iBAAiB,EAAE,OAAO,CAAU,CAAC;AAI3I;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,OAAO,UAAW,SAAQ,KAAK;IAExB;IACA;IAFX,YACW,QAAgB,EAChB,SAAwB,SAAS;QAE1C,KAAK,CAAC,QAAQ,CAAC,CAAC;QAHP,aAAQ,GAAR,QAAQ,CAAQ;QAChB,WAAM,GAAN,MAAM,CAA2B;QAG1C,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;IAC3B,CAAC;CACF"}

package/dist/schema/collaborative.d.ts

@@ -0,0 +1,14 @@
+export declare const COLLABORATIVE: unique symbol;
+/** Marks a schema as typed together (`true`, the default) or written whole (`false`), whatever it would be by default. */
+export declare const markCollaborative: <T extends object>(schema: T, on?: boolean) => T;
+/**
+ * Whether a field is typed together: its mark where it has one, under
+ * optional, default and nullable; else whether it is declared prose — a
+ * Markdown field, or a string declared to hold more than 500 characters.
+ */
+export declare function isCollaborativeField(schema: unknown): boolean;
+/** Whether one field of a kind is typed together, read off the declaration: false for a field the kind does not declare. */
+export declare function collaborativeFieldOf(schema: {
+    tryDefinition(kind: string): unknown;
+}, kind: string | undefined, field: string): boolean;
+//# sourceMappingURL=collaborative.d.ts.map

package/dist/schema/collaborative.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"collaborative.d.ts","sourceRoot":"","sources":["../../src/schema/collaborative.ts"],"names":[],"mappings":"AAkBA,eAAO,MAAM,aAAa,eAA4C,CAAC;AASvE,0HAA0H;AAC1H,eAAO,MAAM,iBAAiB,GAAI,CAAC,SAAS,MAAM,EAAE,QAAQ,CAAC,EAAE,YAAS,KAAG,CAI1E,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAiB7D;AAED,4HAA4H;AAC5H,wBAAgB,oBAAoB,CAAC,MAAM,EAAE;IAAE,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAIvI"}

package/dist/schema/collaborative.js

@@ -0,0 +1,65 @@
+/*
+ * TEXT TYPED TOGETHER (Roadmap f-collab-text, phase 2).
+ *
+ * Whether two people may type into one text field at once — each keystroke
+ * a splice, transformed over the others — is the declaration's to say, and
+ * never the value's: an empty draft of an essay is typed together as the
+ * essay is. Declared prose is, unless it says otherwise: a Markdown field,
+ * a document's `text`, a string declared to hold more than 500 characters
+ * (`z.string().max(5000)`). A short string — a name, a code, a status — is
+ * written whole, and a stale write of it is a conflict to choose over.
+ *
+ * The mark is on the schema's def, as Markdown's is (`markdown.ts`), so a
+ * clone shares it and a wrapper holds it inside; `markCollaborative(schema,
+ * false)` says a long field is written whole, and a document's field says
+ * `"collaborative": false | true`, marked where it is built (`fieldSchema`)
+ * by the same `Symbol.for`. Read without zod, so the store carries it and
+ * not zod's helpers.
+ */
+export const COLLABORATIVE = Symbol.for("@graview/core:collaborative");
+const MARKDOWN = Symbol.for("@graview/core:markdown");
+/** What a string field may hold beyond which it is prose, as a record's page reads it (`isLongText`). */
+const PROSE_ALLOWED = 500;
+const defOf = (schema) => (typeof schema === "object" && schema !== null ? schema._zod?.def : undefined);
+/** Marks a schema as typed together (`true`, the default) or written whole (`false`), whatever it would be by default. */
+export const markCollaborative = (schema, on = true) => {
+    const def = defOf(schema);
+    if (def)
+        def[COLLABORATIVE] = on ? 1 : 0;
+    return schema;
+};
+/**
+ * Whether a field is typed together: its mark where it has one, under
+ * optional, default and nullable; else whether it is declared prose — a
+ * Markdown field, or a string declared to hold more than 500 characters.
+ */
+export function isCollaborativeField(schema) {
+    let at = schema;
+    for (let depth = 0; depth < 6; depth++) {
+        const def = defOf(at);
+        if (!def)
+            return false;
+        if (def[COLLABORATIVE] !== undefined)
+            return def[COLLABORATIVE] === 1;
+        if (def[MARKDOWN] === 1)
+            return true;
+        if (def.type === "string") {
+            return (def.checks ?? []).some((check) => {
+                const said = defOf(check);
+                return said?.check === "max_length" && (said.maximum ?? 0) > PROSE_ALLOWED;
+            });
+        }
+        if (def.innerType === undefined)
+            return false;
+        at = def.innerType;
+    }
+    return false;
+}
+/** Whether one field of a kind is typed together, read off the declaration: false for a field the kind does not declare. */
+export function collaborativeFieldOf(schema, kind, field) {
+    if (kind === undefined || field === "id" || field === "kind")
+        return false;
+    const shape = schema.tryDefinition(kind)?.fields?.shape;
+    return !!shape && Object.prototype.hasOwnProperty.call(shape, field) && isCollaborativeField(shape[field]);
+}
+//# sourceMappingURL=collaborative.js.map

package/dist/schema/collaborative.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"collaborative.js","sourceRoot":"","sources":["../../src/schema/collaborative.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;AACvE,MAAM,QAAQ,GAAG,MAAM,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;AAEtD,yGAAyG;AACzG,MAAM,aAAa,GAAG,GAAG,CAAC;AAG1B,MAAM,KAAK,GAAG,CAAC,MAAe,EAAmB,EAAE,CAAC,CAAC,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,CAAC,CAAC,CAAE,MAAmC,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AAEjK,0HAA0H;AAC1H,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAmB,MAAS,EAAE,EAAE,GAAG,IAAI,EAAK,EAAE;IAC7E,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAwC,CAAC;IACjE,IAAI,GAAG;QAAE,GAAG,CAAC,aAAa,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACzC,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAe;IAClD,IAAI,EAAE,GAAG,MAAM,CAAC;IAChB,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;QACvC,MAAM,GAAG,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC;QACtB,IAAI,CAAC,GAAG;YAAE,OAAO,KAAK,CAAC;QACvB,IAAI,GAAG,CAAC,aAAa,CAAC,KAAK,SAAS;YAAE,OAAO,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QACtE,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACrC,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC1B,OAAO,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;gBACvC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAuE,CAAC;gBAChG,OAAO,IAAI,EAAE,KAAK,KAAK,YAAY,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC,GAAG,aAAa,CAAC;YAC7E,CAAC,CAAC,CAAC;QACL,CAAC;QACD,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QAC9C,EAAE,GAAG,GAAG,CAAC,SAAS,CAAC;IACrB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,4HAA4H;AAC5H,MAAM,UAAU,oBAAoB,CAAC,MAAgD,EAAE,IAAwB,EAAE,KAAa;IAC5H,IAAI,IAAI,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,MAAM;QAAE,OAAO,KAAK,CAAC;IAC3E,MAAM,KAAK,GAAI,MAAM,CAAC,aAAa,CAAC,IAAI,CAAkE,EAAE,MAAM,EAAE,KAAK,CAAC;IAC1H,OAAO,CAAC,CAAC,KAAK,IAAI,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,oBAAoB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;AAC7G,CAAC"}

package/dist/seen.d.ts

@@ -5,6 +5,7 @@ import type { Operation } from "./ops/types.js";
 import { type SeatLens } from "./ops/withheld.js";
 import { type Judged } from "./permissions/sight.js";
 import type { Principal } from "./permissions/types.js";
+import { type Publishing } from "./publish.js";
 /**
  * WHETHER ANYTHING IS KEPT FROM THIS SEAT: a sight the policy declares
  * (FR-02), or a module the workspace has off (FR-12). When neither, every
@@ -60,6 +61,36 @@ export declare function seatLens(store: Judged, principal: Principal): SeatLens;
 export declare function logSeenBy(store: Judged, principal: Principal): readonly Operation[];
 /** A log reading over a seat's redacted ops, for `checkUndo`. */
 export declare function readingOf(ops: readonly Operation[], epochs: LogReading["epochs"]): LogReading;
+/**
+ * WHERE A SEAT'S VIEW IS SERVED THROUGH (`servedSeq`): the head, for a seat
+ * of a live app and a collaborator of one that publishes — the view reads
+ * its store as it grows — or what was published, for a reader of one
+ * (`servedBehind`), which moves when a publish does. The store a seat's
+ * view is of, the module reading what is off and the policy are each the
+ * store's own, so the view's key is the seat and this.
+ */
+export declare const viewKey: (principal: Principal, served: "head" | "published") => string;
+export declare const bound: (target: object, prop: PropertyKey) => unknown;
+/**
+ * THE APP AS THIS SEAT IS SERVED IT.
+ *
+ * Every surface reads `store.graph` — the scene, the pages, Find, the
+ * chat, an agent's tools — and none of them asked who was looking: a
+ * storefront showed a stranger every customer's name, email and finance
+ * question, because a policy could only say who may ACT. With the policy's
+ * `sees` declared, this is the store a surface is handed: its graph, its
+ * log, its history and its problems hold only what the principal may see,
+ * and every act still goes to the store itself, judged there — at the
+ * head — as always. With no `sees`, it is the store, unchanged.
+ *
+ * What a seat is served is not promised to be the head: it is served
+ * through `servedSeq`, which is the head today and which a policy may set
+ * behind it (docs/stability.md, "Served state and the head"). Nor is it
+ * promised to be one object per principal: the view is kept to save
+ * judging again, keyed by what serving depends on (`viewKey`).
+ */
+/** The key a seat's view answers with the store it is of and the seat (`seatOf`, `@graview/core/seat-of`'s reading of it). */
+export declare const SEAT: unique symbol;
 /**
  * WHAT A SEAT'S VIEW IS A VIEW OF: a store as `seenBy` reads it — beyond
  * what judges its sight, its graph and its log whole, which the view serves
@@ -84,6 +115,18 @@ export interface Viewed extends Judged {
         readonly author: Principal;
     }): unknown;
     checkpoint(options?: never): Epoch | undefined;
+    readonly publishing?: Publishing | undefined;
+    readonly publishedSeq?: number | undefined;
+    subscribe(listener: never): () => void;
+}
+/** How a seat asks to be served: as it is (the default), or — a collaborator previewing — as readers are, `"published"`. */
+export interface SeenOptions {
+    readonly as?: "head" | "published";
 }
-export declare function seenBy<T extends Viewed>(store: T, principal: Principal): T;
+export declare function seenBy<T extends Viewed>(store: T, principal: Principal, options?: SeenOptions): T;
+/** Whether readers of an app that publishes can be served here: true once `@graview/core/publishing` is loaded. */
+export declare const servesReaders: () => boolean;
+export declare function viewsOf(store: object): Map<string, unknown>;
+/** The app as a seat is served it at the head: what its sight reaches, as the store grows. */
+export declare function seatView<T extends Viewed>(store: T, principal: Principal): T;
 //# sourceMappingURL=seen.d.ts.map

package/dist/seen.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"seen.d.ts","sourceRoot":"","sources":["../src/seen.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAgB,SAAS,EAAE,aAAa,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAC3G,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAuB,KAAK,KAAK,EAAE,KAAK,UAAU,EAAE,KAAK,YAAY,EAAE,MAAM,cAAc,CAAC;AAEnG,OAAO,KAAK,EAAS,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAGvD,OAAO,EAAuB,KAAK,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAEvE,OAAO,EAA4D,KAAK,MAAM,EAAgB,MAAM,wBAAwB,CAAC;AAC7H,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAaxD;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,GAAG,OAAO,CAGtE;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG;IAAE,QAAQ,CAAC,MAAM,EAAE;QAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,CAAA;CAAE,EAAE,MAAM,EAAE,SAAS,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,KAAK,OAAO,CAUzJ;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,GAAG,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAWnF;AAuED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,GAAG,QAAQ,CAEtE;AAmLD,iKAAiK;AACjK,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,GAAG,SAAS,SAAS,EAAE,CAkDnF;AAWD,iEAAiE;AACjE,wBAAgB,SAAS,CAAC,GAAG,EAAE,SAAS,SAAS,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,GAAG,UAAU,CAE7F;AA8BD;;;;;;GAMG;AACH,MAAM,WAAW,MAAO,SAAQ,MAAM;IACpC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC,GAAG;QAAE,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,KAAK,GAAG,SAAS,aAAa,EAAE,CAAC;QAAC,QAAQ,IAAI,aAAa,CAAC,aAAa,CAAC,CAAC;QAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS,SAAS,EAAE,CAAC;QAAC,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS,SAAS,EAAE,CAAA;KAAE,CAAC;IAC3Q,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC;IAC3B,UAAU,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,GAAG,SAAS,IAAI,CAAC,SAAS,EAAE,WAAW,GAAG,SAAS,CAAC,EAAE,CAAC;IAC7F,QAAQ,IAAI,SAAS;QAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC/C,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC;IACrD,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAA;KAAE,GAAG,OAAO,CAAC;IACvF,UAAU,CAAC,OAAO,CAAC,EAAE,KAAK,GAAG,KAAK,GAAG,SAAS,CAAC;CAChD;AAED,wBAAgB,MAAM,CAAC,CAAC,SAAS,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,SAAS,GAAG,CAAC,CAsM1E"}
+{"version":3,"file":"seen.d.ts","sourceRoot":"","sources":["../src/seen.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAgB,SAAS,EAAE,aAAa,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAC3G,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAuB,KAAK,KAAK,EAAE,KAAK,UAAU,EAAE,KAAK,YAAY,EAAE,MAAM,cAAc,CAAC;AAEnG,OAAO,KAAK,EAAS,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAGvD,OAAO,EAAuB,KAAK,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAEvE,OAAO,EAA4D,KAAK,MAAM,EAAgB,MAAM,wBAAwB,CAAC;AAC7H,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAExD,OAAO,EAA8B,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AAa3E;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,GAAG,OAAO,CAGtE;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG;IAAE,QAAQ,CAAC,MAAM,EAAE;QAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,CAAA;CAAE,EAAE,MAAM,EAAE,SAAS,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,KAAK,OAAO,CAUzJ;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,MAAM,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,GAAG,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAWnF;AAuED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,GAAG,QAAQ,CAEtE;AAmLD,iKAAiK;AACjK,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,GAAG,SAAS,SAAS,EAAE,CAkDnF;AAWD,iEAAiE;AACjE,wBAAgB,SAAS,CAAC,GAAG,EAAE,SAAS,SAAS,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,GAAG,UAAU,CAE7F;AAiBD;;;;;;;GAOG;AACH,eAAO,MAAM,OAAO,GAAI,WAAW,SAAS,EAAE,QAAQ,MAAM,GAAG,WAAW,KAAG,MAA2C,CAAC;AAEzH,eAAO,MAAM,KAAK,GAAI,QAAQ,MAAM,EAAE,MAAM,WAAW,KAAG,OAGzD,CAAC;AAEF;;;;;;;;;;;;;;;;;GAiBG;AACH,8HAA8H;AAC9H,eAAO,MAAM,IAAI,eAAmC,CAAC;AAErD;;;;;;GAMG;AACH,MAAM,WAAW,MAAO,SAAQ,MAAM;IACpC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC,EAAE,aAAa,CAAC,GAAG;QAAE,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAC,EAAE,KAAK,GAAG,SAAS,aAAa,EAAE,CAAC;QAAC,QAAQ,IAAI,aAAa,CAAC,aAAa,CAAC,CAAC;QAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS,SAAS,EAAE,CAAC;QAAC,OAAO,CAAC,EAAE,EAAE,MAAM,GAAG,SAAS,SAAS,EAAE,CAAA;KAAE,CAAC;IAC3Q,QAAQ,CAAC,GAAG,EAAE,YAAY,CAAC;IAC3B,UAAU,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,GAAG,SAAS,IAAI,CAAC,SAAS,EAAE,WAAW,GAAG,SAAS,CAAC,EAAE,CAAC;IAC7F,QAAQ,IAAI,SAAS;QAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC/C,WAAW,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,GAAG,OAAO,CAAC;IACrD,OAAO,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAA;KAAE,GAAG,OAAO,CAAC;IACvF,UAAU,CAAC,OAAO,CAAC,EAAE,KAAK,GAAG,KAAK,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,UAAU,CAAC,EAAE,UAAU,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3C,SAAS,CAAC,QAAQ,EAAE,KAAK,GAAG,MAAM,IAAI,CAAC;CACxC;AAED,4HAA4H;AAC5H,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG,WAAW,CAAC;CACpC;AAED,wBAAgB,MAAM,CAAC,CAAC,SAAS,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,GAAE,WAAgB,GAAG,CAAC,CAOrG;AAED,mHAAmH;AACnH,eAAO,MAAM,aAAa,QAAO,OAA0C,CAAC;AAE5E,wBAAgB,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAI3D;AAED,8FAA8F;AAC9F,wBAAgB,QAAQ,CAAC,CAAC,SAAS,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,SAAS,EAAE,SAAS,GAAG,CAAC,CAwM5E"}

package/dist/seen.js

@@ -4,6 +4,8 @@ import { writersOf } from "./ops/writers.js";
 import { namesUnseen, redact } from "./ops/withheld.js";
 import { actingAs, grantsTo, isSystem } from "./permissions/policy.js";
 import { FIELD_SIGHT, fieldsJudged, partialSight, recordsOf, sees } from "./permissions/sight.js";
+import { diffSnapshots } from "./graph/diff.js";
+import { PUBLISHING, readsPublished } from "./publish.js";
 const NOTHING = new Set();
 /**
  * The kinds kept from a seat because their module is off (FR-12): from
@@ -293,7 +295,7 @@ const touchedIds = (ops) => {
         for (const primitive of op.primitives) {
             if (primitive.op === "add-node" || primitive.op === "remove-node")
                 ids.add(primitive.node.id);
-            else if (primitive.op === "patch-node")
+            else if (primitive.op === "patch-node" || primitive.op === "splice-text")
                 ids.add(primitive.id);
             else {
                 ids.add(primitive.edge.from);
@@ -370,17 +372,33 @@ export function readingOf(ops, epochs) {
     return { all: () => ops, undoneIds: () => undoneIn(ops), epochs };
 }
 const VIEWS = new WeakMap();
-/** A seat, keyed by the seat the policy judges: an agent for Nick is not the same agent alone. */
+/**
+ * A seat, keyed by the seat the policy judges: an agent for Nick is not the
+ * same agent alone. It is everything serving reads of the principal — its
+ * kind, the id and roles sight is judged by (`actingAs`), and whether it
+ * acts for somebody — and nothing it does not (a session, a name), so two
+ * tabs of one seat share what they are served.
+ */
 function seatKey(principal) {
     const judged = isSystem(principal) ? principal : actingAs(principal);
-    return `${principal.kind}|${judged.id ?? ""}|${(judged.roles ?? []).join(",")}|${principal.onBehalfOf ? "for" : ""}`;
+    // An agent's own id too: two agents for one person are two seats, and each view answers as its own (`seenFor`, `wouldChange`, `preview`).
+    return `${principal.kind}|${judged.id ?? ""}|${(judged.roles ?? []).join(",")}|${principal.onBehalfOf ? `for:${principal.id ?? ""}` : ""}`;
 }
-const bound = (target, prop) => {
+/**
+ * WHERE A SEAT'S VIEW IS SERVED THROUGH (`servedSeq`): the head, for a seat
+ * of a live app and a collaborator of one that publishes — the view reads
+ * its store as it grows — or what was published, for a reader of one
+ * (`servedBehind`), which moves when a publish does. The store a seat's
+ * view is of, the module reading what is off and the policy are each the
+ * store's own, so the view's key is the seat and this.
+ */
+export const viewKey = (principal, served) => `${seatKey(principal)}@${served}`;
+export const bound = (target, prop) => {
     const value = Reflect.get(target, prop, target);
     return typeof value === "function" ? value.bind(target) : value;
 };
 /**
- * THE STORE AS ONE PRINCIPAL MAY SEE IT.
+ * THE APP AS THIS SEAT IS SERVED IT.
  *
  * Every surface reads `store.graph` — the scene, the pages, Find, the
  * chat, an agent's tools — and none of them asked who was looking: a
@@ -388,19 +406,41 @@ const bound = (target, prop) => {
  * question, because a policy could only say who may ACT. With the policy's
  * `sees` declared, this is the store a surface is handed: its graph, its
  * log, its history and its problems hold only what the principal may see,
- * and every act still goes to the store itself, judged there as always.
- * With no `sees`, it is the store, unchanged.
+ * and every act still goes to the store itself, judged there — at the
+ * head — as always. With no `sees`, it is the store, unchanged.
+ *
+ * What a seat is served is not promised to be the head: it is served
+ * through `servedSeq`, which is the head today and which a policy may set
+ * behind it (docs/stability.md, "Served state and the head"). Nor is it
+ * promised to be one object per principal: the view is kept to save
+ * judging again, keyed by what serving depends on (`viewKey`).
  */
 /** The key a seat's view answers with the store it is of and the seat (`seatOf`, `@graview/core/seat-of`'s reading of it). */
-const SEAT = Symbol.for("@graview/core:seat");
-export function seenBy(store, principal) {
-    // A module off keeps its kinds from every seat as a sight would (FR-12); the view reads which are off as it goes. The system is kept from nothing.
-    if (!hidesFrom(store, principal))
-        return store;
-    const key = seatKey(principal);
+export const SEAT = Symbol.for("@graview/core:seat");
+export function seenBy(store, principal, options = {}) {
+    // A reader of an app that publishes is served what was published (Roadmap f-publishing-lifecycle), once `@graview/core/publishing` says how; until then, refused — never the head.
+    if (readsPublished(store.publishing, principal, options.as)) {
+        if (PUBLISHING.served)
+            return PUBLISHING.served(store, principal);
+        throw new Error("Load @graview/core/publishing to serve a reader of an app that publishes.");
+    }
+    return seatView(store, principal);
+}
+/** Whether readers of an app that publishes can be served here: true once `@graview/core/publishing` is loaded. */
+export const servesReaders = () => PUBLISHING.served !== undefined;
+export function viewsOf(store) {
     let views = VIEWS.get(store);
     if (!views)
         VIEWS.set(store, (views = new Map()));
+    return views;
+}
+/** The app as a seat is served it at the head: what its sight reaches, as the store grows. */
+export function seatView(store, principal) {
+    // A module off keeps its kinds from every seat as a sight would (FR-12); the view reads which are off as it goes. The system is kept from nothing.
+    if (!hidesFrom(store, principal))
+        return store;
+    const key = viewKey(principal, "head");
+    const views = viewsOf(store);
     const held = views.get(key);
     if (held)
         return held;
@@ -577,9 +617,12 @@ export function seenBy(store, principal) {
                 case "preview":
                     return (call, context, options) => target.preview(call, context, { author: principal, ...options });
                 case "seenBy":
-                    return (other) => seenBy(target, other);
+                    return (other, options) => seenBy(target, other, options);
                 case "seenFor":
                     return principal;
+                // Where what this seat is served ends: the store's own (`servedSeq`) — its head, or a past's seq; never set through the view.
+                case "servedSeq":
+                    return target.servedSeq;
                 // A checkpoint taken through the seat's view is the one it is served.
                 case "checkpoint":
                     return (options) => servedIf(target.checkpoint(options));
@@ -591,4 +634,6 @@ export function seenBy(store, principal) {
     views.set(key, view);
     return view;
 }
+// What the reader's view borrows of this module (`@graview/core/publishing`), lent rather than imported.
+PUBLISHING.kit = { seatView: seatView, viewsOf, viewKey, diff: diffSnapshots, reads: readsPublished };
 //# sourceMappingURL=seen.js.map