@graview/ship 0.1.0

package/LICENSE

@@ -0,0 +1,96 @@
+Elastic License 2.0
+
+## Acceptance
+
+By using the software, you agree to all of the terms and conditions below.
+
+## Copyright License
+
+The licensor grants you a non-exclusive, royalty-free, worldwide,
+non-sublicensable, non-transferable license to use, copy, distribute, make
+available, and prepare derivative works of the software, in each case subject
+to the limitations and conditions below.
+
+## Limitations
+
+You may not provide the software to third parties as a hosted or managed
+service, where the service provides users with access to any substantial set
+of the features or functionality of the software.
+
+You may not move, change, disable, or circumvent the license key
+functionality in the software, and you may not remove or obscure any
+functionality in the software that is protected by the license key.
+
+You may not alter, remove, or obscure any licensing, copyright, or other
+notices of the licensor in the software. Any use of the licensor's trademarks
+is subject to applicable law.
+
+## Patents
+
+The licensor grants you a license, under any patent claims the licensor can
+license, or becomes able to license, to make, have made, use, sell, offer for
+sale, import and have imported the software, in each case subject to the
+limitations and conditions in this license. This license does not cover any
+patent claims that you cause to be infringed by modifications or additions to
+the software. If you or your company make any written claim that the software
+infringes or contributes to infringement of any patent, your patent license
+for the software granted under these terms ends immediately. If your company
+makes such a claim, your patent license ends immediately for work on behalf
+of your company.
+
+## Notices
+
+You must ensure that anyone who gets a copy of any part of the software from
+you also gets a copy of these terms.
+
+If you modify the software, you must include in any modified copies of the
+software prominent notices stating that you have modified the software.
+
+## No Other Rights
+
+These terms do not imply any licenses other than those expressly granted in
+these terms.
+
+## Termination
+
+If you use the software in violation of these terms, such use is not
+licensed, and your licenses will automatically terminate. If the licensor
+provides you with a notice of your violation, and you cease all violation of
+this license no later than 30 days after you receive that notice, your
+licenses will be reinstated retroactively. However, if you violate these
+terms after such reinstatement, any additional violation of these terms will
+cause your licenses to terminate automatically and permanently.
+
+## No Liability
+
+*As far as the law allows, the software comes as is, without any warranty or
+condition, and the licensor will not be liable to you for any damages arising
+out of these terms or the use or nature of the software, under any kind of
+legal claim.*
+
+## Definitions
+
+The **licensor** is the entity offering these terms, and the **software** is
+the software the licensor makes available under these terms, including any
+portion of it.
+
+**you** refers to the individual or entity agreeing to these terms.
+
+**your company** is any legal entity, sole proprietorship, or other kind of
+organization that you work for, plus all organizations that have control
+over, are under the control of, or are under common control with that
+organization. **control** means ownership of substantially all the assets of
+an entity, or the power to direct its management and policies by vote,
+contract, or otherwise. Control can be direct or indirect.
+
+**your licenses** are all the licenses granted to you for the software under
+these terms.
+
+**use** means anything you do with the software requiring one of your
+licenses.
+
+**trademark** means trademarks, service marks, and similar rights.
+
+---
+
+Copyright 2025-2026 En Dash Consulting

package/README.md

@@ -0,0 +1,95 @@
+# @graview/ship
+
+What **every** deployment of a Graview app needs, hosted or self-hosted: one `defineApp`
+declaration plus one persistence adapter is a running deployment.
+
+- **`openStore({ app, adapter })`** — load what was stored, migrate it forward, fold it into
+  a live `Store`, and keep the adapter current (every diff appends its operations and
+  rewrites the snapshot).
+- **`createFileAdapter(root)`** — persistence a person can read: `snapshot.json`,
+  append-only `log.jsonl`, `meta.json` with the stored schema version. The core's sqlite
+  adapter is the scale answer; this is the "where is my data" answer.
+- **`createBrowserAdapter()`** — the same three things in `localStorage`, for an app that
+  runs in the page with no server: the sample apps remember their edits through it,
+  attributed and undoable, migrations included. Import from `@graview/ship/browser` in a
+  bundle (the root entry carries the file adapter's `node:fs`). Conventions the helpers
+  read: `?fresh=1` returns to the seed (`openStore({ fresh })`), and a driven browser
+  starts fresh unless it says `?remember=1` — `browserStartsFresh()`, `forgetFreshParam()`.
+- **The store reopens with its history.** `openStore` hands the persisted log to the
+  store alongside the snapshot, so what was done in an earlier session is still in the
+  activity and still undoable — persistence is the op log, not a cache of the graph.
+- **Op-log-native migrations** — a declaration carries `version` and `migrations`
+  (`{ from, to, title, apply(snapshot) → primitives }`). Running one appends ordinary
+  operations: authored `system · ship:migration`, stating intent, carrying their inverse.
+  `graview check` refuses a chain with gaps or multi-version jumps before deploy time.
+- **`exportBundle` / `assertBundle`** — the anti-lock-in shape: graph + attributed history +
+  version in one JSON bundle, re-importable into any deployment of the same declaration.
+- **`health(store)`** — coherence, not liveness: dangling edges, standing, sizes.
+- **`serveStore` / `openRemote`** — the store behind HTTP, and the other end of the wire. A
+  client sends CALLS, never primitives; the server applies them through an ordinary `Store`
+  under the seat the request carries, so the policy refuses on the server exactly what it
+  refuses in a browser. `graview serve <entry>` is the command.
+- **Content moves as steps.** The step DSL (`stepsMigration`) has five content steps beside
+  the schema ones — `put-node`, `patch-node`, `drop-node`, `put-edge`, `drop-edge` — each
+  judged against the stored graph when it runs, so a default that is already there is not
+  put twice. `seedSteps(seed, live)` diffs a bootstrap seed against a live snapshot into
+  them; `applySteps(store, steps)` lands them as one logged, undoable operation authored
+  `system · ship:sync-seed`. `graview sync-seed <entry> --seed <file> --data <dir> [--apply]
+  [--prune]` is the command.
+
+## The seed is read once
+
+`seed` is what `openStore` puts in an EMPTY store — the first install, and never again.
+A store that has been opened before keeps what it has, whatever the seed file now says;
+that is the whole reason a person's edits survive a deploy. So a change to the default
+content is not a reason to delete the store (`fresh` is a demo's way back to the example,
+not a redesign tool): it is `graview sync-seed`, which says what would change and lands
+only that, under undo.
+
+## The wire
+
+Every route `serveStore` answers is `WIRE`, exported from the package and pinned by a test,
+so a host in front of it knows what it must keep answering for `openRemote`, `graview mcp
+--remote-url` and `graview apply --remote-url` to work unchanged:
+
+| Method | Path | Says |
+|---|---|---|
+| GET | `/graview/state` | the graph, the log and the stored version |
+| POST | `/graview/ops` | calls in, the ops they produced out — or `undo`, batches to take back; 409 with the policy's sentence when refused |
+| GET | `/graview/since?seq=N` | the ops appended after N — everyone else's |
+| GET | `/graview/health` | ship's own report, plus where the data is |
+| GET | `/graview/export` | the whole store as one bundle, the way out |
+| POST | `/graview/here` | say where you are; answers with who else is, and the ops since `seq` |
+| GET | `/graview/who` | who is here right now |
+| POST | `/graview/leave` | say you have gone |
+
+A request carries its seat in `x-graview-seat` and `x-graview-roles` (`SEAT_HEADERS`) by
+default; `serveStore({ seatOf })` is where a host reads its own credential instead. Whatever
+a host asks for rides along: `openRemote({ headers })` sends them with every request, and
+the framework never reads them. `openRemote(...).settled()` resolves once every call sent
+so far has been answered — a browser never waits for it; a host that must report the
+server's verdict before it exits does.
+
+## The hosted-store contract
+
+A third party stands up their own host — a file store or SQLite, `graview serve`,
+`graview mcp` — without forking anything here. Graview Cloud is the polished multi-tenant
+host of the same API, and it consumes this package the way any customer would.
+
+| Concern | In the framework | In a host (Graview Cloud, or yours) |
+|---|---|---|
+| Op log + snapshot + migrate on open | `openStore` | runs it on the server, per deployment |
+| The wire | `serveStore`, `openRemote`, `WIRE` | production TLS, a gateway URL |
+| Who is asking | `Principal` on every `apply`; `seatOf` reads the request | maps users, keys and agents to principals; tenancy; quotas |
+| Seed | read once, on an empty store | the same |
+| Default content moving | `seedSteps`, `applySteps`, `graview sync-seed` | when to run it, and for whom |
+| An agent attaching | `graview mcp`, `graview apply`, `--remote-url`, `--header` | issuing the keys those headers carry |
+| Schema moving | `version`, `migrations[]`, `graview check` | fleet upgrades |
+
+## The boundary
+
+Anything **one** deployment needs lives here. Anything only the **operator of many**
+deployments needs — tenancy, provisioning, deploy-to-URL, billing, fleet upgrades, the
+builder UX — lives in the `graview-cloud` repo, which consumes this package the way any
+customer would. If Cloud ever needs a private hook into the framework, that hook is a
+missing public seam to fix here first.

package/dist/browser-adapter.d.ts

@@ -0,0 +1,84 @@
+import type { PersistenceAdapter } from "@graview/core";
+/**
+ * The slice of `Storage` this adapter needs — `localStorage` in a browser,
+ * a `Map` dressed as one in a test or a node rehearsal. Declared here rather
+ * than as the DOM's own type so the package needs no DOM lib to build.
+ */
+export interface StorageLike {
+    getItem(key: string): string | null;
+    setItem(key: string, value: string): void;
+    removeItem(key: string): void;
+}
+export interface BrowserAdapter extends PersistenceAdapter<string> {
+    loadMeta(scope: string): {
+        version: number;
+    } | null;
+    saveMeta(scope: string, meta: {
+        version: number;
+    }): void;
+    /** The storage keys this scope occupies — for a person or a test to look. */
+    keysFor(scope: string): {
+        snapshot: string;
+        log: string;
+        meta: string;
+    };
+}
+export interface BrowserAdapterOptions {
+    /** Defaults to the page's `localStorage`. */
+    readonly storage?: StorageLike;
+    /** Key prefix, so two apps on one origin do not read each other's graph. */
+    readonly prefix?: string;
+}
+/**
+ * Persistence in the browser itself: the SAME three things the file adapter
+ * writes — the snapshot, the append-only log, the stored schema version —
+ * as three `localStorage` entries per scope. It slots into `openStore`
+ * unchanged, migrations included, so a sample app that remembers is the
+ * same lifecycle as a deployment that does, minus the server.
+ *
+ * `localStorage` is synchronous and small (a few megabytes an origin), which
+ * is exactly right for a demo or a single person's graph and exactly wrong
+ * for a shared deployment — that is what the file and sqlite adapters are
+ * for. If a log outgrows it the honest next step is IndexedDB behind this
+ * same interface, not a bigger string.
+ *
+ * A write that fails (quota, a locked-down browser) THROWS, and `openStore`
+ * reports it: an app that believes it remembered and did not is the worst
+ * quiet state, so nothing here swallows an error.
+ */
+export declare function createBrowserAdapter(options?: BrowserAdapterOptions): BrowserAdapter;
+/**
+ * Whether THIS load should start from the seed rather than from what the
+ * browser remembers.
+ *
+ * `?fresh=1` asks for it outright — the address a "start fresh" control
+ * navigates to. Beyond that, a DRIVEN browser starts fresh unless it says
+ * `?remember=1`: a harness is a specification of the example, and a
+ * harness whose second `goto` inherited its first one's edits would be
+ * testing its own residue. A person's browser is never driven, so a
+ * person always gets what they left.
+ */
+export declare function browserStartsFresh(location?: {
+    readonly search: string;
+}, navigator?: {
+    readonly webdriver?: boolean;
+}): boolean;
+/**
+ * Drops `?fresh=1` from the address once it has been honoured, so the seed
+ * is the FIRST load rather than every load: a reload after starting fresh
+ * must keep what was done since, or "start fresh" is really "stop
+ * remembering".
+ */
+export declare function forgetFreshParam(win?: {
+    readonly location: {
+        readonly href: string;
+    };
+    readonly history: {
+        replaceState(data: unknown, unused: string, url: string): void;
+    };
+}): void;
+/** The address a "start fresh" control goes to: here, from the seed. */
+export declare function freshHref(location?: {
+    readonly href: string;
+}): string;
+//# sourceMappingURL=browser-adapter.d.ts.map

package/dist/browser-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-adapter.d.ts","sourceRoot":"","sources":["../src/browser-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAa,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAGnE;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAAC;IACpC,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1C,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED,MAAM,WAAW,cAAe,SAAQ,kBAAkB,CAAC,MAAM,CAAC;IAChE,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACpD,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACzD,6EAA6E;IAC7E,OAAO,CAAC,KAAK,EAAE,MAAM,GAAG;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CACzE;AAED,MAAM,WAAW,qBAAqB;IACpC,6CAA6C;IAC7C,QAAQ,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC;IAC/B,4EAA4E;IAC5E,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,GAAE,qBAA0B,GAAG,cAAc,CA4CxF;AAaD;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,GAAE;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CACxB,EACX,SAAS,GAAE;IAAE,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAA;CAE9B,GACV,OAAO,CAKT;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,GAAG,GAAE;IACH,QAAQ,CAAC,QAAQ,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7C,QAAQ,CAAC,OAAO,EAAE;QAAE,YAAY,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;CAChE,GACtB,IAAI,CAKN;AAED,wEAAwE;AACxE,wBAAgB,SAAS,CACvB,QAAQ,GAAE;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CACtB,GACV,MAAM,CAIR"}

package/dist/browser-adapter.js

@@ -0,0 +1,111 @@
+/**
+ * Persistence in the browser itself: the SAME three things the file adapter
+ * writes — the snapshot, the append-only log, the stored schema version —
+ * as three `localStorage` entries per scope. It slots into `openStore`
+ * unchanged, migrations included, so a sample app that remembers is the
+ * same lifecycle as a deployment that does, minus the server.
+ *
+ * `localStorage` is synchronous and small (a few megabytes an origin), which
+ * is exactly right for a demo or a single person's graph and exactly wrong
+ * for a shared deployment — that is what the file and sqlite adapters are
+ * for. If a log outgrows it the honest next step is IndexedDB behind this
+ * same interface, not a bigger string.
+ *
+ * A write that fails (quota, a locked-down browser) THROWS, and `openStore`
+ * reports it: an app that believes it remembered and did not is the worst
+ * quiet state, so nothing here swallows an error.
+ */
+export function createBrowserAdapter(options = {}) {
+    const prefix = options.prefix ?? "graview";
+    const storage = options.storage ?? pageStorage();
+    const keysFor = (scope) => ({
+        snapshot: `${prefix}:${scope}:snapshot`,
+        log: `${prefix}:${scope}:log`,
+        meta: `${prefix}:${scope}:meta`,
+    });
+    const read = (key) => {
+        const raw = storage.getItem(key);
+        return raw === null ? null : JSON.parse(raw);
+    };
+    const write = (key, value) => storage.setItem(key, JSON.stringify(value));
+    return {
+        name: "browser",
+        keysFor,
+        async load(scope) {
+            return read(keysFor(scope).snapshot);
+        },
+        async save(scope, snapshot) {
+            write(keysFor(scope).snapshot, snapshot);
+        },
+        async delete(scope) {
+            const keys = keysFor(scope);
+            storage.removeItem(keys.snapshot);
+            storage.removeItem(keys.log);
+            storage.removeItem(keys.meta);
+        },
+        async loadLog(scope) {
+            return read(keysFor(scope).log) ?? [];
+        },
+        async appendOps(scope, ops) {
+            if (ops.length === 0)
+                return;
+            const key = keysFor(scope).log;
+            write(key, [...(read(key) ?? []), ...ops]);
+        },
+        loadMeta(scope) {
+            return read(keysFor(scope).meta);
+        },
+        saveMeta(scope, meta) {
+            write(keysFor(scope).meta, meta);
+        },
+    };
+}
+function pageStorage() {
+    const found = globalThis.localStorage;
+    if (!found) {
+        throw new Error("createBrowserAdapter: no localStorage here — pass `storage` (any object with " +
+            "getItem/setItem/removeItem) when running outside a browser.");
+    }
+    return found;
+}
+/**
+ * Whether THIS load should start from the seed rather than from what the
+ * browser remembers.
+ *
+ * `?fresh=1` asks for it outright — the address a "start fresh" control
+ * navigates to. Beyond that, a DRIVEN browser starts fresh unless it says
+ * `?remember=1`: a harness is a specification of the example, and a
+ * harness whose second `goto` inherited its first one's edits would be
+ * testing its own residue. A person's browser is never driven, so a
+ * person always gets what they left.
+ */
+export function browserStartsFresh(location = globalThis
+    .location, navigator = globalThis.navigator) {
+    const params = new URLSearchParams(location.search);
+    if (params.get("fresh") === "1")
+        return true;
+    if (params.get("remember") === "1")
+        return false;
+    return navigator?.webdriver === true;
+}
+/**
+ * Drops `?fresh=1` from the address once it has been honoured, so the seed
+ * is the FIRST load rather than every load: a reload after starting fresh
+ * must keep what was done since, or "start fresh" is really "stop
+ * remembering".
+ */
+export function forgetFreshParam(win = globalThis) {
+    const url = new URL(win.location.href);
+    if (url.searchParams.get("fresh") !== "1")
+        return;
+    url.searchParams.delete("fresh");
+    win.history.replaceState(null, "", url.toString());
+}
+/** The address a "start fresh" control goes to: here, from the seed. */
+export function freshHref(location = globalThis
+    .location) {
+    const url = new URL(location.href);
+    url.searchParams.set("fresh", "1");
+    return url.toString();
+}
+//# sourceMappingURL=browser-adapter.js.map

package/dist/browser-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-adapter.js","sourceRoot":"","sources":["../src/browser-adapter.ts"],"names":[],"mappings":"AA4BA;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,oBAAoB,CAAC,UAAiC,EAAE;IACtE,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,SAAS,CAAC;IAC3C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,WAAW,EAAE,CAAC;IACjD,MAAM,OAAO,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,CAAC;QAClC,QAAQ,EAAE,GAAG,MAAM,IAAI,KAAK,WAAW;QACvC,GAAG,EAAE,GAAG,MAAM,IAAI,KAAK,MAAM;QAC7B,IAAI,EAAE,GAAG,MAAM,IAAI,KAAK,OAAO;KAChC,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,CAAI,GAAW,EAAY,EAAE;QACxC,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,OAAO,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAO,CAAC;IACtD,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,CAAC,GAAW,EAAE,KAAc,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IAE3F,OAAO;QACL,IAAI,EAAE,SAAS;QACf,OAAO;QACP,KAAK,CAAC,IAAI,CAAC,KAAK;YACd,OAAO,IAAI,CAAgB,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC;QACtD,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ;YACxB,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QAC3C,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,KAAK;YAChB,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;YAC5B,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAClC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC7B,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChC,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,KAAK;YACjB,OAAO,IAAI,CAAc,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QACrD,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG;YACxB,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO;YAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC;YAC/B,KAAK,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAc,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC;QAC1D,CAAC;QACD,QAAQ,CAAC,KAAK;YACZ,OAAO,IAAI,CAAsB,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC;QACxD,CAAC;QACD,QAAQ,CAAC,KAAK,EAAE,IAAI;YAClB,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACnC,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,WAAW;IAClB,MAAM,KAAK,GAAI,UAA6C,CAAC,YAAY,CAAC;IAC1E,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CACb,+EAA+E;YAC7E,6DAA6D,CAChE,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,kBAAkB,CAChC,WAAyC,UAA0D;KAChG,QAAQ,EACX,YACE,UACD,CAAC,SAAS;IAEX,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACpD,IAAI,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAC7C,IAAI,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC;IACjD,OAAO,SAAS,EAAE,SAAS,KAAK,IAAI,CAAC;AACvC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAC9B,MAGI,UAAmB;IAEvB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,GAAG;QAAE,OAAO;IAClD,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACjC,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;AACrD,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,SAAS,CACvB,WAAuC,UAAwD;KAC5F,QAAQ;IAEX,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACnC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IACnC,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;AACxB,CAAC"}

package/dist/browser.d.ts

@@ -0,0 +1,26 @@
+/**
+ * The browser entry: everything in `@graview/ship` that does not need a
+ * filesystem. An app bundled for the page imports from here, so a bundler
+ * never meets `node:fs` through the file adapter.
+ */
+export { browserStartsFresh, createBrowserAdapter, forgetFreshParam, freshHref, } from "./browser-adapter.js";
+export type { BrowserAdapter, BrowserAdapterOptions, StorageLike } from "./browser-adapter.js";
+export { migrateSnapshot, pendingMigrations } from "./migrations.js";
+export { primitivesFor, sayStep, stepsMigration } from "./steps.js";
+export type { MigrationStep } from "./steps.js";
+export type { MigrationRun } from "./migrations.js";
+export { openStore } from "./open-store.js";
+export type { OpenStoreOptions, OpenedStore } from "./open-store.js";
+export { applyToSnapshot } from "./snapshot.js";
+export type { GraphSnapshot } from "./snapshot.js";
+export { assertBundle, exportBundle } from "./export.js";
+export type { AppBundle } from "./export.js";
+export { health } from "./health.js";
+export type { HealthReport } from "./health.js";
+export { openRemote } from "./remote.js";
+export { createBroadcastPresence, presenceChannelName } from "./presence.js";
+export type { BroadcastPresenceOptions, ChannelLike } from "./presence.js";
+export type { RemoteOptions, RemoteStore } from "./remote.js";
+export { assertPhotoFits, photosUsed, storageBytes, PhotoTooLarge, PHOTO_BUDGET_BYTES, PHOTO_MAX_BYTES, } from "./photos.js";
+export type { PhotoBudget, PhotoField } from "./photos.js";
+//# sourceMappingURL=browser.d.ts.map

package/dist/browser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser.d.ts","sourceRoot":"","sources":["../src/browser.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,gBAAgB,EAChB,SAAS,GACV,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EAAE,cAAc,EAAE,qBAAqB,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAC/F,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AACpE,YAAY,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAChD,YAAY,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,YAAY,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,YAAY,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACzD,YAAY,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAC7E,YAAY,EAAE,wBAAwB,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC3E,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC9D,OAAO,EACL,eAAe,EACf,UAAU,EACV,YAAY,EACZ,aAAa,EACb,kBAAkB,EAClB,eAAe,GAChB,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC"}

package/dist/browser.js

@@ -0,0 +1,16 @@
+/**
+ * The browser entry: everything in `@graview/ship` that does not need a
+ * filesystem. An app bundled for the page imports from here, so a bundler
+ * never meets `node:fs` through the file adapter.
+ */
+export { browserStartsFresh, createBrowserAdapter, forgetFreshParam, freshHref, } from "./browser-adapter.js";
+export { migrateSnapshot, pendingMigrations } from "./migrations.js";
+export { primitivesFor, sayStep, stepsMigration } from "./steps.js";
+export { openStore } from "./open-store.js";
+export { applyToSnapshot } from "./snapshot.js";
+export { assertBundle, exportBundle } from "./export.js";
+export { health } from "./health.js";
+export { openRemote } from "./remote.js";
+export { createBroadcastPresence, presenceChannelName } from "./presence.js";
+export { assertPhotoFits, photosUsed, storageBytes, PhotoTooLarge, PHOTO_BUDGET_BYTES, PHOTO_MAX_BYTES, } from "./photos.js";
+//# sourceMappingURL=browser.js.map

package/dist/browser.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser.js","sourceRoot":"","sources":["../src/browser.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,gBAAgB,EAChB,SAAS,GACV,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAGpE,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE5C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEhD,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEzD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAG7E,OAAO,EACL,eAAe,EACf,UAAU,EACV,YAAY,EACZ,aAAa,EACb,kBAAkB,EAClB,eAAe,GAChB,MAAM,aAAa,CAAC"}

package/dist/cli.d.ts

@@ -0,0 +1,48 @@
+import type { PersistenceAdapter } from "@graview/core";
+import type { GraphSnapshot } from "./snapshot.js";
+/**
+ * `graview serve` — the store behind HTTP, and the data in a folder you can
+ * open.
+ *
+ * The file adapter is the default because the point of this command is the
+ * answer to "where is my data": a directory holding `snapshot.json`, a
+ * `log.jsonl` with one operation per line that a person can `grep`, and a
+ * `meta.json` carrying the stored version. `--sqlite` swaps the adapter and
+ * changes nothing else, which is the actual claim about adapters.
+ */
+export declare const SERVE_USAGE = "  graview serve <entry> [--data <dir>] [--port <n>] [--seed <file>] [--sqlite <file>]\n      Serves the app's store over HTTP. The op log is the wire: a client\n      sends calls, the store judges them under the caller's own seat, and\n      the ops come back. Data lives in <dir> (default ./data) as readable\n      JSON, or in a SQLite file with --sqlite.\n\n  graview sync-seed <entry> --seed <file> [--data <dir> | --sqlite <file>]\n                            [--apply] [--prune] [--json]\n      Diffs the bootstrap seed against the live store and says, as content\n      steps, what would bring the store in step with it: records put,\n      fields patched, ties made. Prints and exits by default; --apply lands\n      the steps as one logged, undoable operation; --prune also drops what\n      the seed no longer has. The seed itself is only ever read at first\n      install \u2014 this is how default content moves afterwards, in place of\n      deleting the store.\n";
+/** The same store, whichever command asked: parsed from the flags every store command shares. */
+export declare const STORE_FLAGS = "--data <dir> (default ./data) | --sqlite <file>, and --seed <file> for a first install";
+export declare function flag(argv: readonly string[], name: string): string | undefined;
+export interface StoreBackend {
+    readonly adapter: PersistenceAdapter<string> & {
+        loadMeta?(scope: string): {
+            version: number;
+        } | null;
+        saveMeta?(scope: string, meta: {
+            version: number;
+        }): void;
+    };
+    /** Where the data is, in words a person can open. */
+    readonly where: string;
+    readonly seed?: GraphSnapshot;
+}
+/**
+ * THE BACKEND FLAGS, PARSED ONCE. `serve`, `sync-seed`, `mcp` and `apply`
+ * all take the same store: a folder of readable JSON, or a SQLite file, and
+ * a seed for a first install. One parser, so the four commands cannot come
+ * to mean different things by the same words.
+ */
+export declare function backendFrom(argv: readonly string[], cwd?: string): Promise<StoreBackend>;
+export declare function serve(argv: readonly string[]): Promise<number>;
+/**
+ * `graview sync-seed` — default content moves without a wipe.
+ *
+ * Read-only unless `--apply` is said, because the steps are the product: a
+ * person or an agent reads what WOULD change and decides. Applying lands
+ * them through `applySteps`, which is `receive` on the open store — the
+ * adapter hears it like any change, the log carries it with its inverse,
+ * and undo is the ordinary undo.
+ */
+export declare function syncSeed(argv: readonly string[]): Promise<number>;
+//# sourceMappingURL=cli.d.ts.map

package/dist/cli.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../src/cli.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAc,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAIpE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAInD;;;;;;;;;GASG;AACH,eAAO,MAAM,WAAW,q9BAevB,CAAC;AAEF,iGAAiG;AACjG,eAAO,MAAM,WAAW,2FAA2F,CAAC;AAEpH,wBAAgB,IAAI,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAI9E;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC,MAAM,CAAC,GAAG;QAC7C,QAAQ,CAAC,CAAC,KAAK,EAAE,MAAM,GAAG;YAAE,OAAO,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAC;QACrD,QAAQ,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE;YAAE,OAAO,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAC;KAC3D,CAAC;IACF,qDAAqD;IACrD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC;CAC/B;AAED;;;;;GAKG;AACH,wBAAsB,WAAW,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,EAAE,GAAG,SAAgB,GAAG,OAAO,CAAC,YAAY,CAAC,CAUrG;AAoBD,wBAAsB,KAAK,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAyBpE;AAED;;;;;;;;GAQG;AACH,wBAAsB,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,CAkDvE"}