@graview/ship 0.1.0

package/dist/door.d.ts

@@ -0,0 +1,22 @@
+import type { IncomingMessage, ServerResponse } from "node:http";
+/** Same origin, or no origin at all (curl, a test). Anything else is another site. */
+export declare function sameOrigin(headers: {
+    readonly origin?: string;
+    readonly host?: string;
+}): boolean;
+/** Whether this request came from the page this server serves. */
+export declare function fromThisApp(req: IncomingMessage): boolean;
+/** The request's body, refused past `limit` bytes with a sentence saying what was too much. */
+export declare function readBody(req: IncomingMessage, limit: number, what?: string): Promise<string>;
+export declare function sendJson(res: ServerResponse, status: number, body: unknown): void;
+/** The shape of the Vite plugin object, without importing Vite to say it. */
+export interface DevServerPlugin {
+    readonly name: string;
+    readonly apply: "serve";
+    configureServer(server: {
+        middlewares: {
+            use(path: string, handler: (req: IncomingMessage, res: ServerResponse) => void): void;
+        };
+    }): void;
+}
+//# sourceMappingURL=door.d.ts.map

package/dist/door.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"door.d.ts","sourceRoot":"","sources":["../src/door.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AASjE,sFAAsF;AACtF,wBAAgB,UAAU,CAAC,OAAO,EAAE;IAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,OAAO,CAOjG;AAED,kEAAkE;AAClE,wBAAgB,WAAW,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAGzD;AAED,+FAA+F;AAC/F,wBAAgB,QAAQ,CAAC,GAAG,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,SAAY,GAAG,OAAO,CAAC,MAAM,CAAC,CAa/F;AAED,wBAAgB,QAAQ,CAAC,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,IAAI,CAIjF;AAED,6EAA6E;AAC7E,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,eAAe,CAAC,MAAM,EAAE;QACtB,WAAW,EAAE;YAAE,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,KAAK,IAAI,GAAG,IAAI,CAAA;SAAE,CAAC;KACxG,GAAG,IAAI,CAAC;CACV"}

package/dist/door.js

@@ -0,0 +1,43 @@
+/*
+ * WHAT EVERY DEV-SERVER DOOR SHARES: who may knock, how much they may
+ * send, and the shape of the plugin that opens it. The local door, the
+ * decision door and the studio door each answered these three questions,
+ * and they must answer them the same way.
+ */
+/** Same origin, or no origin at all (curl, a test). Anything else is another site. */
+export function sameOrigin(headers) {
+    if (headers.origin === undefined)
+        return true;
+    try {
+        return new URL(headers.origin).host === headers.host;
+    }
+    catch {
+        return false;
+    }
+}
+/** Whether this request came from the page this server serves. */
+export function fromThisApp(req) {
+    const { origin, host } = req.headers;
+    return sameOrigin({ ...(origin ? { origin } : {}), ...(host ? { host } : {}) });
+}
+/** The request's body, refused past `limit` bytes with a sentence saying what was too much. */
+export function readBody(req, limit, what = "request") {
+    return new Promise((resolve, reject) => {
+        let body = "";
+        req.on("data", (chunk) => {
+            body += chunk.toString();
+            if (body.length > limit) {
+                reject(new Error(`That is more than ${Math.round(limit / 1_000_000)} MB of ${what} — send fewer, or smaller.`));
+                req.destroy();
+            }
+        });
+        req.on("end", () => resolve(body));
+        req.on("error", reject);
+    });
+}
+export function sendJson(res, status, body) {
+    res.statusCode = status;
+    res.setHeader("content-type", "application/json");
+    res.end(JSON.stringify(body));
+}
+//# sourceMappingURL=door.js.map

package/dist/door.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"door.js","sourceRoot":"","sources":["../src/door.ts"],"names":[],"mappings":"AAEA;;;;;GAKG;AAEH,sFAAsF;AACtF,MAAM,UAAU,UAAU,CAAC,OAA6D;IACtF,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC9C,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,WAAW,CAAC,GAAoB;IAC9C,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC;IACrC,OAAO,UAAU,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AAClF,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,QAAQ,CAAC,GAAoB,EAAE,KAAa,EAAE,IAAI,GAAG,SAAS;IAC5E,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,IAAI,GAAG,EAAE,CAAC;QACd,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YAC/B,IAAI,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;YACzB,IAAI,IAAI,CAAC,MAAM,GAAG,KAAK,EAAE,CAAC;gBACxB,MAAM,CAAC,IAAI,KAAK,CAAC,qBAAqB,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,SAAS,CAAC,UAAU,IAAI,4BAA4B,CAAC,CAAC,CAAC;gBAChH,GAAG,CAAC,OAAO,EAAE,CAAC;YAChB,CAAC;QACH,CAAC,CAAC,CAAC;QACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;QACnC,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,GAAmB,EAAE,MAAc,EAAE,IAAa;IACzE,GAAG,CAAC,UAAU,GAAG,MAAM,CAAC;IACxB,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;IAClD,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AAChC,CAAC"}

package/dist/export.d.ts

@@ -0,0 +1,25 @@
+import type { AnySchema, GraviewApp, Operation, Store } from "@graview/core";
+import type { GraphSnapshot } from "./snapshot.js";
+/**
+ * THE ANTI-LOCK-IN CLAIM, as a data shape. Everything a deployment is —
+ * the graph, its whole attributed history, and the version it stands at —
+ * leaves in one JSON-serialisable bundle, and re-imports into any other
+ * deployment of the same declaration: hosted to self-hosted and back.
+ * A tenant who cannot leave was never a customer, only a hostage.
+ */
+export interface AppBundle {
+    readonly format: "graview-bundle";
+    readonly bundleVersion: 1;
+    readonly app: string;
+    readonly version: number;
+    readonly exportedAt: string;
+    readonly snapshot: GraphSnapshot;
+    readonly log: readonly Operation[];
+}
+export declare function exportBundle<S extends AnySchema>(app: GraviewApp<S>, store: Store<S>, options?: {
+    readonly log?: readonly Operation[];
+    readonly now?: () => string;
+}): AppBundle;
+/** Refuses a bundle for a different app or a newer format, plainly. */
+export declare function assertBundle<S extends AnySchema>(app: GraviewApp<S>, bundle: AppBundle): void;
+//# sourceMappingURL=export.d.ts.map

package/dist/export.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"export.d.ts","sourceRoot":"","sources":["../src/export.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAC7E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAEnD;;;;;;GAMG;AACH,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,QAAQ,CAAC,aAAa,EAAE,CAAC,CAAC;IAC1B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,QAAQ,CAAC,GAAG,EAAE,SAAS,SAAS,EAAE,CAAC;CACpC;AAED,wBAAgB,YAAY,CAAC,CAAC,SAAS,SAAS,EAC9C,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,EAClB,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EACf,OAAO,GAAE;IAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,SAAS,SAAS,EAAE,CAAC;IAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CAAO,GACjF,SAAS,CAYX;AAED,uEAAuE;AACvE,wBAAgB,YAAY,CAAC,CAAC,SAAS,SAAS,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,SAAS,GAAG,IAAI,CAkB7F"}

package/dist/export.js

@@ -0,0 +1,30 @@
+export function exportBundle(app, store, options = {}) {
+    return {
+        format: "graview-bundle",
+        bundleVersion: 1,
+        app: app.name,
+        version: app.version ?? 1,
+        exportedAt: (options.now ?? (() => new Date().toISOString()))(),
+        snapshot: store.snapshot(),
+        // The persisted log when the caller has one (it holds migration runs and
+        // prior sessions); the in-memory log otherwise.
+        log: options.log ?? store.log.all(),
+    };
+}
+/** Refuses a bundle for a different app or a newer format, plainly. */
+export function assertBundle(app, bundle) {
+    if (bundle.format !== "graview-bundle") {
+        throw new Error(`Not a graview bundle (format "${bundle.format}")`);
+    }
+    if (bundle.bundleVersion > 1) {
+        throw new Error(`Bundle format ${bundle.bundleVersion} is newer than this ship understands (1). Upgrade @graview/ship, then import.`);
+    }
+    if (bundle.app !== app.name) {
+        throw new Error(`This bundle is for "${bundle.app}", not "${app.name}"`);
+    }
+    if (bundle.version > (app.version ?? 1)) {
+        throw new Error(`Bundle is at version ${bundle.version}; this declaration only reaches ${app.version ?? 1}. ` +
+            `Upgrade the app, then import.`);
+    }
+}
+//# sourceMappingURL=export.js.map

package/dist/export.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"export.js","sourceRoot":"","sources":["../src/export.ts"],"names":[],"mappings":"AAoBA,MAAM,UAAU,YAAY,CAC1B,GAAkB,EAClB,KAAe,EACf,UAAgF,EAAE;IAElF,OAAO;QACL,MAAM,EAAE,gBAAgB;QACxB,aAAa,EAAE,CAAC;QAChB,GAAG,EAAE,GAAG,CAAC,IAAI;QACb,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,CAAC;QACzB,UAAU,EAAE,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE;QAC/D,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAmB;QAC3C,yEAAyE;QACzE,gDAAgD;QAChD,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE;KACpC,CAAC;AACJ,CAAC;AAED,uEAAuE;AACvE,MAAM,UAAU,YAAY,CAAsB,GAAkB,EAAE,MAAiB;IACrF,IAAI,MAAM,CAAC,MAAM,KAAK,gBAAgB,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CAAC,iCAAkC,MAA8B,CAAC,MAAM,IAAI,CAAC,CAAC;IAC/F,CAAC;IACD,IAAI,MAAM,CAAC,aAAa,GAAG,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CACb,iBAAiB,MAAM,CAAC,aAAa,+EAA+E,CACrH,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,GAAG,KAAK,GAAG,CAAC,IAAI,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,uBAAuB,MAAM,CAAC,GAAG,WAAW,GAAG,CAAC,IAAI,GAAG,CAAC,CAAC;IAC3E,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CACb,wBAAwB,MAAM,CAAC,OAAO,mCAAmC,GAAG,CAAC,OAAO,IAAI,CAAC,IAAI;YAC3F,+BAA+B,CAClC,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/file-adapter.d.ts

@@ -0,0 +1,28 @@
+import type { PersistenceAdapter } from "@graview/core";
+/**
+ * Persistence a self-hoster can READ: a directory per scope holding
+ * `snapshot.json` (the current graph), `log.jsonl` (one operation per line,
+ * append-only — history as plain lines a person can grep), and `meta.json`
+ * (the stored schema version the migration engine compares against).
+ *
+ * Deliberately boring. The core's sqlite adapter exists for scale; this one
+ * exists so "where is my data" has an answer anyone can open.
+ */
+export interface FileAdapter extends PersistenceAdapter<string> {
+    loadMeta(scope: string): {
+        version: number;
+    } | null;
+    saveMeta(scope: string, meta: {
+        version: number;
+    }): void;
+    /**
+     * The directory it writes into.
+     *
+     * Said out loud because "where is my data" is the question this adapter
+     * exists to answer, and a health report that could only repeat the scope
+     * name was answering a different one.
+     */
+    readonly root: string;
+}
+export declare function createFileAdapter(root: string): FileAdapter;
+//# sourceMappingURL=file-adapter.d.ts.map

package/dist/file-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-adapter.d.ts","sourceRoot":"","sources":["../src/file-adapter.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAa,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAGnE;;;;;;;;GAQG;AACH,MAAM,WAAW,WAAY,SAAQ,kBAAkB,CAAC,MAAM,CAAC;IAC7D,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACpD,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IACzD;;;;;;OAMG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,CA4C3D"}

package/dist/file-adapter.js

@@ -0,0 +1,50 @@
+import { mkdirSync, readFileSync, rmSync, writeFileSync, appendFileSync, existsSync } from "node:fs";
+import { dirname, join } from "node:path";
+export function createFileAdapter(root) {
+    const place = (scope, file) => join(root, scope, file);
+    const read = (path) => {
+        if (!existsSync(path))
+            return null;
+        return JSON.parse(readFileSync(path, "utf8"));
+    };
+    const write = (path, value) => {
+        mkdirSync(dirname(path), { recursive: true });
+        writeFileSync(path, `${JSON.stringify(value, null, 2)}\n`);
+    };
+    return {
+        name: "file",
+        root,
+        async load(scope) {
+            return read(place(scope, "snapshot.json"));
+        },
+        async save(scope, snapshot) {
+            write(place(scope, "snapshot.json"), snapshot);
+        },
+        async delete(scope) {
+            rmSync(join(root, scope), { recursive: true, force: true });
+        },
+        async loadLog(scope) {
+            const path = place(scope, "log.jsonl");
+            if (!existsSync(path))
+                return [];
+            return readFileSync(path, "utf8")
+                .split("\n")
+                .filter((line) => line.trim().length > 0)
+                .map((line) => JSON.parse(line));
+        },
+        async appendOps(scope, ops) {
+            if (ops.length === 0)
+                return;
+            const path = place(scope, "log.jsonl");
+            mkdirSync(dirname(path), { recursive: true });
+            appendFileSync(path, ops.map((op) => JSON.stringify(op)).join("\n") + "\n");
+        },
+        loadMeta(scope) {
+            return read(place(scope, "meta.json"));
+        },
+        saveMeta(scope, meta) {
+            write(place(scope, "meta.json"), meta);
+        },
+    };
+}
+//# sourceMappingURL=file-adapter.js.map

package/dist/file-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-adapter.js","sourceRoot":"","sources":["../src/file-adapter.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,cAAc,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrG,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AA0B1C,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,MAAM,KAAK,GAAG,CAAC,KAAa,EAAE,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IACvE,MAAM,IAAI,GAAG,CAAI,IAAY,EAAY,EAAE;QACzC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QACnC,OAAO,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAM,CAAC;IACrD,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,KAAc,EAAE,EAAE;QAC7C,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,aAAa,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;IAC7D,CAAC,CAAC;IAEF,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,IAAI;QACJ,KAAK,CAAC,IAAI,CAAC,KAAK;YACd,OAAO,IAAI,CAAgB,KAAK,CAAC,KAAK,EAAE,eAAe,CAAC,CAAC,CAAC;QAC5D,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ;YACxB,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,eAAe,CAAC,EAAE,QAAQ,CAAC,CAAC;QACjD,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,KAAK;YAChB,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9D,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,KAAK;YACjB,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;YACvC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO,EAAE,CAAC;YACjC,OAAO,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC;iBAC9B,KAAK,CAAC,IAAI,CAAC;iBACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;iBACxC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAc,CAAC,CAAC;QAClD,CAAC;QACD,KAAK,CAAC,SAAS,CAAC,KAAK,EAAE,GAAG;YACxB,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO;YAC7B,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;YACvC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAC9C,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QAC9E,CAAC;QACD,QAAQ,CAAC,KAAK;YACZ,OAAO,IAAI,CAAsB,KAAK,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC,CAAC;QAC9D,CAAC;QACD,QAAQ,CAAC,KAAK,EAAE,IAAI;YAClB,KAAK,CAAC,KAAK,CAAC,KAAK,EAAE,WAAW,CAAC,EAAE,IAAI,CAAC,CAAC;QACzC,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/health.d.ts

@@ -0,0 +1,19 @@
+import type { AnySchema, Store } from "@graview/core";
+/**
+ * Whether a deployment is WELL, asked of the store itself. Not liveness —
+ * the process answering proves that — but coherence: the graph parses under
+ * its schema, no edge dangles, and the rules' standing is a number rather
+ * than a surprise. A service polls this per tenant; a self-hoster curls it.
+ */
+export interface HealthReport {
+    readonly ok: boolean;
+    readonly nodes: number;
+    readonly edges: number;
+    readonly violations: number;
+    readonly danglingEdges: readonly string[];
+    readonly at: string;
+}
+export declare function health<S extends AnySchema>(store: Store<S>, options?: {
+    readonly now?: () => string;
+}): HealthReport;
+//# sourceMappingURL=health.d.ts.map

package/dist/health.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.d.ts","sourceRoot":"","sources":["../src/health.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,eAAe,CAAC;AAEtD;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACrB;AAED,wBAAgB,MAAM,CAAC,CAAC,SAAS,SAAS,EACxC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EACf,OAAO,GAAE;IAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CAAO,GAC5C,YAAY,CAcd"}

package/dist/health.js

@@ -0,0 +1,16 @@
+export function health(store, options = {}) {
+    const ids = new Set([...store.graph.allNodes()].map((node) => node.id));
+    const dangling = [...store.graph.allEdges()]
+        .filter((edge) => !ids.has(edge.from) || !ids.has(edge.to))
+        .map((edge) => `${edge.kind}:${edge.from}->${edge.to}`);
+    const violations = store.violations().length;
+    return {
+        ok: dangling.length === 0,
+        nodes: ids.size,
+        edges: [...store.graph.allEdges()].length,
+        violations,
+        danglingEdges: dangling,
+        at: (options.now ?? (() => new Date().toISOString()))(),
+    };
+}
+//# sourceMappingURL=health.js.map

package/dist/health.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"health.js","sourceRoot":"","sources":["../src/health.ts"],"names":[],"mappings":"AAiBA,MAAM,UAAU,MAAM,CACpB,KAAe,EACf,UAA2C,EAAE;IAE7C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IACxE,MAAM,QAAQ,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;SACzC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;SAC1D,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,EAAE,CAAC,MAAM,CAAC;IAC7C,OAAO;QACL,EAAE,EAAE,QAAQ,CAAC,MAAM,KAAK,CAAC;QACzB,KAAK,EAAE,GAAG,CAAC,IAAI;QACf,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,MAAM;QACzC,UAAU;QACV,aAAa,EAAE,QAAQ;QACvB,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE;KACxD,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,29 @@
+export { createFileAdapter } from "./file-adapter.js";
+export type { FileAdapter } from "./file-adapter.js";
+export { browserStartsFresh, createBrowserAdapter, forgetFreshParam, freshHref, } from "./browser-adapter.js";
+export type { BrowserAdapter, BrowserAdapterOptions, StorageLike } from "./browser-adapter.js";
+export { migrateSnapshot, pendingMigrations } from "./migrations.js";
+export { primitivesFor, primitivesForSteps, sayStep, stepsMigration } from "./steps.js";
+export { applySteps, contentOperation, SEED_SYNC_AUTHOR, seedSteps } from "./sync-seed.js";
+export type { SeedSyncOptions } from "./sync-seed.js";
+export type { MigrationStep } from "./steps.js";
+export type { MigrationRun } from "./migrations.js";
+export { openStore } from "./open-store.js";
+export type { OpenStoreOptions, OpenedStore } from "./open-store.js";
+export { applyToSnapshot } from "./snapshot.js";
+export type { GraphSnapshot } from "./snapshot.js";
+export { assertBundle, exportBundle } from "./export.js";
+export type { AppBundle } from "./export.js";
+export { health } from "./health.js";
+export type { HealthReport } from "./health.js";
+export { openRemote } from "./remote.js";
+export { createBroadcastPresence, presenceChannelName } from "./presence.js";
+export type { BroadcastPresenceOptions, ChannelLike } from "./presence.js";
+export type { RemoteOptions, RemoteStore } from "./remote.js";
+export { SEAT_HEADERS, serveStore, WIRE } from "./serve.js";
+export type { ServeOptions, ServedStore } from "./serve.js";
+export { backendFrom, serve, SERVE_USAGE, syncSeed } from "./cli.js";
+export type { StoreBackend } from "./cli.js";
+export { assertPhotoFits, photosUsed, storageBytes, PhotoTooLarge, PHOTO_BUDGET_BYTES, PHOTO_MAX_BYTES, } from "./photos.js";
+export type { PhotoBudget, PhotoField } from "./photos.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,YAAY,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,gBAAgB,EAChB,SAAS,GACV,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EAAE,cAAc,EAAE,qBAAqB,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAC/F,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AACxF,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAC3F,YAAY,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AACtD,YAAY,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAChD,YAAY,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,YAAY,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,YAAY,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AACzD,YAAY,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAC7C,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAC7E,YAAY,EAAE,wBAAwB,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC3E,YAAY,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC9D,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAC5D,YAAY,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC5D,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AACrE,YAAY,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAC7C,OAAO,EACL,eAAe,EACf,UAAU,EACV,YAAY,EACZ,aAAa,EACb,kBAAkB,EAClB,eAAe,GAChB,MAAM,aAAa,CAAC;AACrB,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC"}

package/dist/index.js

@@ -0,0 +1,15 @@
+export { createFileAdapter } from "./file-adapter.js";
+export { browserStartsFresh, createBrowserAdapter, forgetFreshParam, freshHref, } from "./browser-adapter.js";
+export { migrateSnapshot, pendingMigrations } from "./migrations.js";
+export { primitivesFor, primitivesForSteps, sayStep, stepsMigration } from "./steps.js";
+export { applySteps, contentOperation, SEED_SYNC_AUTHOR, seedSteps } from "./sync-seed.js";
+export { openStore } from "./open-store.js";
+export { applyToSnapshot } from "./snapshot.js";
+export { assertBundle, exportBundle } from "./export.js";
+export { health } from "./health.js";
+export { openRemote } from "./remote.js";
+export { createBroadcastPresence, presenceChannelName } from "./presence.js";
+export { SEAT_HEADERS, serveStore, WIRE } from "./serve.js";
+export { backendFrom, serve, SERVE_USAGE, syncSeed } from "./cli.js";
+export { assertPhotoFits, photosUsed, storageBytes, PhotoTooLarge, PHOTO_BUDGET_BYTES, PHOTO_MAX_BYTES, } from "./photos.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AAEtD,OAAO,EACL,kBAAkB,EAClB,oBAAoB,EACpB,gBAAgB,EAChB,SAAS,GACV,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AACxF,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAI3F,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAE5C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAEhD,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEzD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAErC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,uBAAuB,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAG7E,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,YAAY,CAAC;AAE5D,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AAErE,OAAO,EACL,eAAe,EACf,UAAU,EACV,YAAY,EACZ,aAAa,EACb,kBAAkB,EAClB,eAAe,GAChB,MAAM,aAAa,CAAC"}

package/dist/migrations.d.ts

@@ -0,0 +1,31 @@
+import { type GraviewApp, type AnySchema, type MigrationDeclaration, type Operation } from "@graview/core";
+import type { GraphSnapshot } from "./snapshot.js";
+/**
+ * MIGRATIONS SPEAK THE OP LOG'S LANGUAGE.
+ *
+ * A migration answers with primitives — the same five words every other
+ * change is made of — and running one appends ordinary operations: authored
+ * (`system · ship:migration`), stating their intent, carrying their inverse
+ * because a patch carries its before. Schema evolution is therefore not a
+ * special ceremony outside the record; it IS the record, replayable and
+ * undoable in the same vocabulary as a person's edit.
+ */
+export interface MigrationRun {
+    readonly snapshot: GraphSnapshot;
+    readonly version: number;
+    /** The operations the run appended — empty when already current. */
+    readonly ops: readonly Operation[];
+}
+/** The single-step chain from a stored version to the declaration's. */
+export declare function pendingMigrations<S extends AnySchema>(app: GraviewApp<S>, storedVersion: number): readonly MigrationDeclaration[];
+/**
+ * Runs the chain over a stored snapshot, producing the migrated snapshot
+ * and the operations that record the run. Pure: nothing is written here —
+ * the caller (openStore, a service's fleet upgrader) owns the append and
+ * can therefore halt, stage, or roll back.
+ */
+export declare function migrateSnapshot<S extends AnySchema>(app: GraviewApp<S>, stored: GraphSnapshot, storedVersion: number, options?: {
+    readonly now?: () => string;
+    readonly nextOpId?: (step: string) => string;
+}): MigrationRun;
+//# sourceMappingURL=migrations.d.ts.map

package/dist/migrations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrations.d.ts","sourceRoot":"","sources":["../src/migrations.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,UAAU,EACf,KAAK,SAAS,EACd,KAAK,oBAAoB,EACzB,KAAK,SAAS,EAEf,MAAM,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAGnD;;;;;;;;;GASG;AAEH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,oEAAoE;IACpE,QAAQ,CAAC,GAAG,EAAE,SAAS,SAAS,EAAE,CAAC;CACpC;AAED,wEAAwE;AACxE,wBAAgB,iBAAiB,CAAC,CAAC,SAAS,SAAS,EACnD,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,EAClB,aAAa,EAAE,MAAM,GACpB,SAAS,oBAAoB,EAAE,CAsBjC;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,CAAC,SAAS,SAAS,EACjD,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,EAClB,MAAM,EAAE,aAAa,EACrB,aAAa,EAAE,MAAM,EACrB,OAAO,GAAE;IAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAA;CAAO,GAC1F,YAAY,CA+Bd"}

package/dist/migrations.js

@@ -0,0 +1,59 @@
+import { invert, normalise, writesOf, } from "@graview/core";
+import { applyToSnapshot } from "./snapshot.js";
+/** The single-step chain from a stored version to the declaration's. */
+export function pendingMigrations(app, storedVersion) {
+    const target = app.version ?? storedVersion;
+    const bySource = new Map((app.migrations ?? []).map((m) => [m.from, m]));
+    const chain = [];
+    let at = storedVersion;
+    while (at < target) {
+        const step = bySource.get(at);
+        if (step && step.to <= step.from) {
+            throw new Error(`Migration ${step.from}→${step.to} does not advance — the chain would never terminate.`);
+        }
+        if (!step) {
+            throw new Error(`No migration from version ${at} — a stored graph there cannot reach ${target}. ` +
+                `graview check would have said so.`);
+        }
+        chain.push(step);
+        at = step.to;
+    }
+    return chain;
+}
+/**
+ * Runs the chain over a stored snapshot, producing the migrated snapshot
+ * and the operations that record the run. Pure: nothing is written here —
+ * the caller (openStore, a service's fleet upgrader) owns the append and
+ * can therefore halt, stage, or roll back.
+ */
+export function migrateSnapshot(app, stored, storedVersion, options = {}) {
+    const now = options.now ?? (() => new Date().toISOString());
+    const nextOpId = options.nextOpId ?? ((step) => `migration:${step}:${now()}`);
+    let snapshot = stored;
+    const ops = [];
+    const batch = `migration:${storedVersion}->${app.version ?? storedVersion}`;
+    for (const step of pendingMigrations(app, storedVersion)) {
+        /*
+         * Normalised, like every other op: a step that clears a field says so
+         * with a value rather than with an absence, so the inverse it carries is
+         * still there after the log has been through JSON.
+         */
+        const primitives = step.apply(snapshot).map(normalise);
+        snapshot = applyToSnapshot(snapshot, primitives);
+        ops.push({
+            id: nextOpId(`${step.from}-${step.to}`),
+            seq: -1, // The appender assigns the real position in its log.
+            batch,
+            author: { kind: "system", id: "ship:migration" },
+            intent: `migration ${step.from}→${step.to}: ${step.title}`,
+            mutation: null,
+            primitives,
+            inverse: [...primitives].reverse().map(invert),
+            reads: [],
+            writes: [...new Set(primitives.flatMap(writesOf))],
+            at: now(),
+        });
+    }
+    return { snapshot, version: app.version ?? storedVersion, ops };
+}
+//# sourceMappingURL=migrations.js.map

package/dist/migrations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrations.js","sourceRoot":"","sources":["../src/migrations.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,MAAM,EACN,SAAS,EACT,QAAQ,GAMT,MAAM,eAAe,CAAC;AAEvB,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAoBhD,wEAAwE;AACxE,MAAM,UAAU,iBAAiB,CAC/B,GAAkB,EAClB,aAAqB;IAErB,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,IAAI,aAAa,CAAC;IAC5C,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACzE,MAAM,KAAK,GAA2B,EAAE,CAAC;IACzC,IAAI,EAAE,GAAG,aAAa,CAAC;IACvB,OAAO,EAAE,GAAG,MAAM,EAAE,CAAC;QACnB,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC9B,IAAI,IAAI,IAAI,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CACb,aAAa,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,sDAAsD,CACxF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CACb,6BAA6B,EAAE,wCAAwC,MAAM,IAAI;gBAC/E,mCAAmC,CACtC,CAAC;QACJ,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjB,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;IACf,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAC7B,GAAkB,EAClB,MAAqB,EACrB,aAAqB,EACrB,UAAyF,EAAE;IAE3F,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,aAAa,IAAI,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC;IACtF,IAAI,QAAQ,GAAG,MAAM,CAAC;IACtB,MAAM,GAAG,GAAgB,EAAE,CAAC;IAC5B,MAAM,KAAK,GAAG,aAAa,aAAa,KAAK,GAAG,CAAC,OAAO,IAAI,aAAa,EAAE,CAAC;IAE5E,KAAK,MAAM,IAAI,IAAI,iBAAiB,CAAC,GAAG,EAAE,aAAa,CAAC,EAAE,CAAC;QACzD;;;;WAIG;QACH,MAAM,UAAU,GAAyB,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7E,QAAQ,GAAG,eAAe,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACjD,GAAG,CAAC,IAAI,CAAC;YACP,EAAE,EAAE,QAAQ,CAAC,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,EAAE,CAAC;YACvC,GAAG,EAAE,CAAC,CAAC,EAAE,qDAAqD;YAC9D,KAAK;YACL,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,gBAAgB,EAAE;YAChD,MAAM,EAAE,aAAa,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,EAAE,KAAK,IAAI,CAAC,KAAK,EAAE;YAC1D,QAAQ,EAAE,IAAI;YACd,UAAU;YACV,OAAO,EAAE,CAAC,GAAG,UAAU,CAAC,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC;YAC9C,KAAK,EAAE,EAAE;YACT,MAAM,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;YAClD,EAAE,EAAE,GAAG,EAAE;SACV,CAAC,CAAC;IACL,CAAC;IAED,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,IAAI,aAAa,EAAE,GAAG,EAAE,CAAC;AAClE,CAAC"}

package/dist/open-store.d.ts

@@ -0,0 +1,57 @@
+import { Store, type AnySchema, type GraviewApp, type Operation, type PersistenceAdapter, type StoreOptions } from "@graview/core";
+import type { GraphSnapshot } from "./snapshot.js";
+/**
+ * ONE declaration plus ONE adapter is a running deployment.
+ *
+ * `openStore` is the lifecycle every deployment repeats and no app should
+ * write: load what was stored, migrate it forward (the run recorded as
+ * ordinary operations in the persisted log), fold it into a live store, and
+ * keep the adapter current — every applied diff appends its operations and
+ * rewrites the snapshot, so a crash loses nothing that was ever notified.
+ */
+export interface OpenStoreOptions<S extends AnySchema> {
+    readonly app: GraviewApp<S>;
+    readonly adapter: PersistenceAdapter<string> & {
+        loadMeta?(scope: string): {
+            version: number;
+        } | null;
+        saveMeta?(scope: string, meta: {
+            version: number;
+        }): void;
+    };
+    readonly scope?: string;
+    /** First-run data when nothing is stored yet. */
+    readonly seed?: GraphSnapshot;
+    /**
+     * The version of a stored graph that predates version metadata. Absent,
+     * a metaless store is assumed CURRENT — the conservative reading, since
+     * migrating data that is already new-shaped corrupts it.
+     */
+    readonly assumeVersion?: number;
+    /** Told when a persistence write fails; absent, failures reach the console. */
+    readonly onPersistError?: (error: unknown) => void;
+    /**
+     * Discard what is stored for this scope and start from the seed. The
+     * way back to the example for a demo that has been edited into a corner —
+     * a graph you cannot leave teaches distrust. Everything stored is deleted
+     * first, so the seed really is the first load again.
+     */
+    readonly fresh?: boolean;
+    /**
+     * Overrides for the store. The declaration's own policy and modules are
+     * applied before these, so an app that declares who may do what gets it
+     * enforced by the store ship opens without saying so twice.
+     */
+    readonly storeOptions?: Partial<StoreOptions<S>>;
+}
+export interface OpenedStore<S extends AnySchema> {
+    readonly store: Store<S>;
+    /** Operations the opening appended: the migration run, when one happened. */
+    readonly migrated: readonly Operation[];
+    /** Resolves when every write accepted so far has settled on the adapter. */
+    flush(): Promise<void>;
+    /** Stops persisting. The store keeps working; nothing further is written. */
+    close(): void;
+}
+export declare function openStore<S extends AnySchema>(options: OpenStoreOptions<S>): Promise<OpenedStore<S>>;
+//# sourceMappingURL=open-store.d.ts.map

package/dist/open-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"open-store.d.ts","sourceRoot":"","sources":["../src/open-store.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,EACL,KAAK,SAAS,EACd,KAAK,UAAU,EACf,KAAK,SAAS,EACd,KAAK,kBAAkB,EACvB,KAAK,YAAY,EAClB,MAAM,eAAe,CAAC;AAEvB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAEnD;;;;;;;;GAQG;AAEH,MAAM,WAAW,gBAAgB,CAAC,CAAC,SAAS,SAAS;IACnD,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,kBAAkB,CAAC,MAAM,CAAC,GAAG;QAC7C,QAAQ,CAAC,CAAC,KAAK,EAAE,MAAM,GAAG;YAAE,OAAO,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAC;QACrD,QAAQ,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE;YAAE,OAAO,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI,CAAC;KAC3D,CAAC;IACF,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,iDAAiD;IACjD,QAAQ,CAAC,IAAI,CAAC,EAAE,aAAa,CAAC;IAC9B;;;;OAIG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,+EAA+E;IAC/E,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;IACnD;;;;;OAKG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB;;;;OAIG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;CAClD;AAQD,MAAM,WAAW,WAAW,CAAC,CAAC,SAAS,SAAS;IAC9C,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;IACzB,6EAA6E;IAC7E,QAAQ,CAAC,QAAQ,EAAE,SAAS,SAAS,EAAE,CAAC;IACxC,4EAA4E;IAC5E,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,6EAA6E;IAC7E,KAAK,IAAI,IAAI,CAAC;CACf;AAED,wBAAsB,SAAS,CAAC,CAAC,SAAS,SAAS,EACjD,OAAO,EAAE,gBAAgB,CAAC,CAAC,CAAC,GAC3B,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CA2GzB"}

package/dist/open-store.js

@@ -0,0 +1,103 @@
+import { Store, } from "@graview/core";
+import { migrateSnapshot } from "./migrations.js";
+export async function openStore(options) {
+    const { app, adapter } = options;
+    const scope = options.scope ?? app.name;
+    if (options.fresh)
+        await adapter.delete(scope);
+    const stored = (await adapter.load(scope));
+    const persisted = (await adapter.loadLog?.(scope)) ?? [];
+    let seq = persisted.length;
+    const meta = adapter.loadMeta?.(scope) ?? null;
+    const target = app.version ?? 1;
+    /*
+     * THE LOG OUTRANKS THE META. A crash between writing the migrated
+     * snapshot and stamping the version leaves new-shaped data under an old
+     * stamp — and re-running a migration over already-migrated data is the
+     * exact corruption migrations exist to prevent. The migration ops are in
+     * the log before anything else is written, so the log knows the truth.
+     */
+    const migratedTo = persisted
+        .filter((op) => op.author.kind === "system" && op.author.id === "ship:migration")
+        .map((op) => Number(op.intent.match(/migration \d+→(\d+):/)?.[1] ?? 0))
+        .reduce((highest, version) => Math.max(highest, version), 0);
+    const storedVersion = stored === null
+        ? target
+        : Math.max(meta?.version ?? options.assumeVersion ?? target, migratedTo);
+    let snapshot = stored ?? options.seed ?? { nodes: [], edges: [] };
+    let migrated = [];
+    if (storedVersion < target) {
+        const run = migrateSnapshot(app, snapshot, storedVersion);
+        snapshot = run.snapshot;
+        migrated = run.ops.map((op) => ({ ...op, seq: seq++ }));
+        await adapter.appendOps?.(scope, migrated);
+    }
+    /*
+     * The store REOPENS WITH ITS HISTORY. The snapshot is the graph; the
+     * persisted log (plus the migration run just appended) is how it got
+     * there — and it is handed to the store as the live log rather than
+     * folded, because the seed was never an operation. What was done in an
+     * earlier session is therefore still attributed, still in the activity,
+     * and still undoable, which is what "persistence is the op log" means.
+     */
+    const history = [...persisted, ...migrated];
+    /*
+     * Ids that cannot collide with an earlier session's. The store's default
+     * counter restarts at op1 every open, and an undo names its target BY ID —
+     * a second "op1" would make the log ambiguous about what was taken back.
+     * A supplied `ids` still wins.
+     */
+    const taken = new Set(history.map((op) => op.id));
+    let n = history.length;
+    const ids = () => {
+        let id = `op${++n}`;
+        while (taken.has(id))
+            id = `op${++n}`;
+        taken.add(id);
+        return id;
+    };
+    const store = new Store({
+        schema: app.schema,
+        mutations: app.mutations ?? [],
+        invariants: app.invariants ?? [],
+        ...(app.modules ? { modules: app.modules } : {}),
+        ...(app.policy ? { policy: app.policy } : {}),
+        /* The allowlist travels with the declaration, so a deployment enforces
+           what the app said an agent was for without being asked to. */
+        ...(app.intelligence ? { intelligence: app.intelligence } : {}),
+        snapshot,
+        log: history,
+        ids,
+        // A stored history is read back later, so its timestamps are real ones.
+        now: () => new Date().toISOString(),
+        ...(options.storeOptions ?? {}),
+    });
+    /*
+     * Write at open only when opening CHANGED something — a fresh scope or a
+     * migration run. Re-saving an untouched store rewrites the snapshot
+     * through the current schema's parse, which silently strips any field a
+     * rolled-back declaration does not know — data loss with no prior copy.
+     */
+    if (stored === null || migrated.length > 0) {
+        await adapter.save(scope, store.snapshot());
+    }
+    adapter.saveMeta?.(scope, { version: target });
+    /*
+     * Writes are SERIALISED: a second diff's ops never land before the
+     * first's snapshot, and a failure is reported rather than swallowed —
+     * an app that thinks it persisted and did not is the worst quiet state.
+     */
+    const report = options.onPersistError ?? ((error) => console.error("graview ship: persistence failed", error));
+    let writing = Promise.resolve();
+    const unsubscribe = store.subscribe((_diff, ops) => {
+        const stamped = ops.map((op) => ({ ...op, seq: seq++ }));
+        writing = writing
+            .then(async () => {
+            await adapter.appendOps?.(scope, stamped);
+            await adapter.save(scope, store.snapshot());
+        })
+            .catch(report);
+    });
+    return { store, migrated, flush: () => writing, close: unsubscribe };
+}
+//# sourceMappingURL=open-store.js.map

package/dist/open-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"open-store.js","sourceRoot":"","sources":["../src/open-store.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,GAMN,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AA6DlD,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,OAA4B;IAE5B,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IACjC,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,GAAG,CAAC,IAAI,CAAC;IAExC,IAAI,OAAO,CAAC,KAAK;QAAE,MAAM,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/C,MAAM,MAAM,GAAG,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAyB,CAAC;IACnE,MAAM,SAAS,GAAG,CAAC,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC;IACzD,IAAI,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC;IAE3B,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC;IAC/C,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,IAAI,CAAC,CAAC;IAChC;;;;;;OAMG;IACH,MAAM,UAAU,GAAG,SAAS;SACzB,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE,KAAK,gBAAgB,CAAC;SAChF,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;SACtE,MAAM,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC;IAC/D,MAAM,aAAa,GACjB,MAAM,KAAK,IAAI;QACb,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,IAAI,OAAO,CAAC,aAAa,IAAI,MAAM,EAAE,UAAU,CAAC,CAAC;IAE7E,IAAI,QAAQ,GAAkB,MAAM,IAAI,OAAO,CAAC,IAAI,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;IACjF,IAAI,QAAQ,GAAyB,EAAE,CAAC;IACxC,IAAI,aAAa,GAAG,MAAM,EAAE,CAAC;QAC3B,MAAM,GAAG,GAAG,eAAe,CAAC,GAAG,EAAE,QAAQ,EAAE,aAAa,CAAC,CAAC;QAC1D,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;QACxB,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;QACxD,MAAM,OAAO,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC7C,CAAC;IAED;;;;;;;OAOG;IACH,MAAM,OAAO,GAAgB,CAAC,GAAG,SAAS,EAAE,GAAG,QAAQ,CAAC,CAAC;IAEzD;;;;;OAKG;IACH,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IAClD,IAAI,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC;IACvB,MAAM,GAAG,GAAG,GAAG,EAAE;QACf,IAAI,EAAE,GAAG,KAAK,EAAE,CAAC,EAAE,CAAC;QACpB,OAAO,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,EAAE,GAAG,KAAK,EAAE,CAAC,EAAE,CAAC;QACtC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACd,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,IAAI,KAAK,CAAI;QACzB,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,EAAE;QAC9B,UAAU,EAAE,GAAG,CAAC,UAAU,IAAI,EAAE;QAChC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChD,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC7C;wEACgE;QAChE,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,QAAQ;QACR,GAAG,EAAE,OAAO;QACZ,GAAG;QACH,wEAAwE;QACxE,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACnC,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC;KAChC,CAAC,CAAC;IAEH;;;;;OAKG;IACH,IAAI,MAAM,KAAK,IAAI,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3C,MAAM,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC;IAE/C;;;;OAIG;IACH,MAAM,MAAM,GAAG,OAAO,CAAC,cAAc,IAAI,CAAC,CAAC,KAAc,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,kCAAkC,EAAE,KAAK,CAAC,CAAC,CAAC;IACxH,IAAI,OAAO,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAC;IAC/C,MAAM,WAAW,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACjD,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;QACzD,OAAO,GAAG,OAAO;aACd,IAAI,CAAC,KAAK,IAAI,EAAE;YACf,MAAM,OAAO,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;YAC1C,MAAM,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC9C,CAAC,CAAC;aACD,KAAK,CAAC,MAAM,CAAC,CAAC;IACnB,CAAC,CAAC,CAAC;IAEH,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC;AACvE,CAAC"}