@happyvertical/smrt-reports 0.55.24 → 0.56.1

package/dist/manifest.json

@@ -2,7 +2,7 @@
   "version": "1.0.0",
   "timestamp": 0,
   "packageName": "@happyvertical/smrt-reports",
-  "packageVersion": "0.55.24",
+  "packageVersion": "0.56.1",
   "objects": {
     "@happyvertical/smrt-reports:SmrtReport": {
       "name": "smrtreport",
@@ -189,6 +189,31 @@
         }
       },
       "methods": {
+        "run": {
+          "name": "run",
+          "async": true,
+          "parameters": [],
+          "returnType": "Promise<RuntimeReportResult>",
+          "isStatic": false,
+          "isPublic": true
+        },
+        "archive": {
+          "name": "archive",
+          "async": true,
+          "parameters": [
+            {
+              "name": "options",
+              "type": "object",
+              "optional": false,
+              "memberTypes": [
+                "boolean"
+              ]
+            }
+          ],
+          "returnType": "Promise<object>",
+          "isStatic": false,
+          "isPublic": true
+        },
         "getSpec": {
           "name": "getSpec",
           "async": false,
@@ -214,23 +239,69 @@
       },
       "decoratorConfig": {
         "tableName": "runtime_reports",
+        "indexes": [
+          {
+            "name": "idx_runtime_reports_confirm",
+            "columns": [
+              "tenantId",
+              "createdByUserId",
+              "specHash",
+              "status"
+            ]
+          }
+        ],
+        "operationPermissions": {
+          "run": {
+            "action": "read"
+          },
+          "archive": {
+            "action": "create",
+            "databaseActions": [
+              "SELECT",
+              "UPDATE"
+            ]
+          }
+        },
         "api": {
           "include": [
             "list",
             "get",
-            "create"
-          ]
+            "create",
+            "run",
+            "archive"
+          ],
+          "principalContext": true,
+          "routes": {
+            "run": {
+              "method": "POST",
+              "scope": "item",
+              "effect": "read",
+              "idempotent": true,
+              "openWorld": false
+            },
+            "archive": {
+              "method": "POST",
+              "scope": "item",
+              "effect": "write",
+              "idempotent": true,
+              "openWorld": false
+            }
+          }
         },
         "mcp": {
           "include": [
             "list",
-            "get"
+            "get",
+            "run",
+            "archive"
           ]
         },
         "cli": {
           "include": [
             "list",
-            "get"
+            "get",
+            "run",
+            "archive"
           ]
         },
         "tenantScoped": {
@@ -339,6 +410,15 @@
             ],
             "unique": true
           },
+          {
+            "name": "idx_runtime_reports_confirm",
+            "columns": [
+              "tenant_id",
+              "created_by_user_id",
+              "spec_hash",
+              "status"
+            ]
+          },
           {
             "name": "runtime_reports_tenant_id_created_at_idx",
             "columns": [
@@ -448,6 +528,15 @@
             ],
             "unique": true
           },
+          {
+            "name": "idx_runtime_reports_confirm",
+            "columns": [
+              "tenant_id",
+              "created_by_user_id",
+              "spec_hash",
+              "status"
+            ]
+          },
           {
             "name": "runtime_reports_tenant_id_created_at_idx",
             "columns": [
@@ -2620,6 +2709,86 @@
           "Needs a server because its package does not build for a browser: node:crypto/events; @happyvertical/sql root: the sync query builders it needs (validateColumnName, buildWhere, buildAggregate, bucketExpr, tableExists) have no browser-safe SDK entry; and its package depends on @happyvertical/smrt-jobs, @happyvertical/smrt-tenancy, which do not build for a browser (#3615, #3624, #3625, #3627)."
         ]
       }
+    },
+    {
+      "id": "reports.runtime",
+      "className": "RuntimeReportsRecipe",
+      "label": "Reports",
+      "summary": "Ask for a report, approve it, and share its live totals with your team.",
+      "synonyms": [],
+      "models": [
+        "@happyvertical/smrt-reports:RuntimeReport"
+      ],
+      "nav": [
+        {
+          "label": "Reports",
+          "model": "@happyvertical/smrt-reports:RuntimeReport",
+          "icon": "fileText"
+        }
+      ],
+      "requires": [],
+      "help": {
+        "markdown": "# Reports\n\nAsk the assistant for a total, comparison, or trend. Review the proposed report\nand approve it to save it. Your saved reports are shared with your team; each\nperson sees results using their own access to the underlying information.\n\nReports run fresh when opened. You can archive a report to hide it from the\nactive list and restore it later. Creating and restoring reports needs report\nwriting access. Reports need a connected server and are unavailable in offline\npreviews. Scheduling, renaming, and exporting reports are not available yet.\n",
+        "fieldRefs": []
+      },
+      "surfaces": [
+        {
+          "kind": "route",
+          "path": "/reports",
+          "export": "@happyvertical/smrt-reports/svelte#RuntimeReportsRoute",
+          "label": "Reports"
+        },
+        {
+          "kind": "route",
+          "path": "/reports/:id",
+          "export": "@happyvertical/smrt-reports/svelte#RuntimeReportDetailRoute",
+          "label": "Report detail"
+        },
+        {
+          "kind": "widget",
+          "type": "runtime-report-chart",
+          "export": "@happyvertical/smrt-reports/svelte#RuntimeReportChartWidget",
+          "label": "Report chart",
+          "description": "Chart a measure from a saved report.",
+          "icon": "chart",
+          "optionsEditor": "@happyvertical/smrt-reports/svelte#RuntimeReportWidgetOptions",
+          "options": [
+            {
+              "key": "reportId",
+              "type": "text",
+              "label": "Report",
+              "required": true
+            },
+            {
+              "key": "measure",
+              "type": "identifier",
+              "label": "Measure",
+              "required": true
+            },
+            {
+              "key": "dimension",
+              "type": "identifier",
+              "label": "Dimension"
+            }
+          ],
+          "data": {
+            "load": "@happyvertical/smrt-reports#loadRuntimeReportChart",
+            "models": [
+              "@happyvertical/smrt-reports:RuntimeReport"
+            ]
+          },
+          "defaultSpan": 2,
+          "maxSpan": 4
+        }
+      ],
+      "runtime": "server",
+      "demo": {
+        "mode": "server",
+        "reasons": [
+          "The recipe declares runtime \"server\".",
+          "Needs a server because its package does not build for a browser: node:crypto/events; @happyvertical/sql root: the sync query builders it needs (validateColumnName, buildWhere, buildAggregate, bucketExpr, tableExists) have no browser-safe SDK entry; and its package depends on @happyvertical/smrt-jobs, @happyvertical/smrt-tenancy, which do not build for a browser (#3615, #3624, #3625, #3627)."
+        ]
+      }
     }
   ],
   "smrtDependencies": [

package/dist/materialized-host.d.ts

@@ -0,0 +1,72 @@
+import type { ReportAdapterDescriptor, ReportDataQueryResult } from './adapter.js';
+/** Verified request context supplied by an application route, never the browser. */
+export interface MaterializedReportHostContext {
+    userId: string;
+    tenantId: string;
+    permissions: readonly string[];
+}
+/** The only browser-controlled selections accepted by a materialized-report host. */
+export interface MaterializedReportCellRequest {
+    id: string;
+    columnId: string;
+}
+/** A host-normalized monetary value; values stay in integer minor units. */
+export interface MaterializedReportDrilldownValues {
+    valueMinor?: number | null;
+    taxableMinor?: number | null;
+    taxMinor?: number | null;
+}
+/** One user-visible record contributing to a materialized report cell. */
+export interface MaterializedReportDrilldownContributor {
+    id: string;
+    source: string;
+    identity: string;
+    date?: string | null;
+    party?: string | null;
+    values: MaterializedReportDrilldownValues;
+}
+/** A host-declared warning that keeps incomplete or divergent evidence visible. */
+export interface MaterializedReportDrilldownWarning {
+    code: string;
+    kind: 'incomplete' | 'drift';
+    message: string;
+}
+/**
+ * Domain-neutral presentation returned by a materialized-report host.
+ *
+ * The route serializes this value unchanged. Hosts normalize their own source
+ * facts here so generic browser surfaces neither import nor infer report domains.
+ */
+export interface MaterializedReportDrilldownPresentation {
+    version: 1;
+    selectedMeasure: {
+        id: string;
+        label: string;
+    };
+    currency: string;
+    contributors: readonly MaterializedReportDrilldownContributor[];
+    complete: boolean;
+    warnings: readonly MaterializedReportDrilldownWarning[];
+}
+/**
+ * Application-owned bridge for one declared materialized report.
+ *
+ * Registrations are server-only and bind tenant/principal from the route
+ * context. Hosts must re-read the selected row before resolving a cell.
+ */
+export interface MaterializedReportHost<Drilldown = unknown> {
+    id: string;
+    /** Registered collection and model used by the route's normal read gate. */
+    collection: string;
+    className: string;
+    /** The report host fails closed unless this published permission is present. */
+    readPermission: string;
+    /** Closed visible columns that may request a source drilldown. */
+    drilldownColumnIds: readonly string[];
+    descriptor(context: MaterializedReportHostContext): Promise<ReportAdapterDescriptor>;
+    query(context: MaterializedReportHostContext, request: unknown): Promise<ReportDataQueryResult>;
+    drilldown(context: MaterializedReportHostContext, request: MaterializedReportCellRequest): Promise<Drilldown>;
+}
+export declare function assertMaterializedReportRead(host: MaterializedReportHost, context: MaterializedReportHostContext): void;
+export declare function findMaterializedReportHost(hosts: readonly MaterializedReportHost[], id: string): MaterializedReportHost | undefined;
+//# sourceMappingURL=materialized-host.d.ts.map

package/dist/materialized-host.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"materialized-host.d.ts","sourceRoot":"","sources":["../src/materialized-host.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,uBAAuB,EACvB,qBAAqB,EACtB,MAAM,cAAc,CAAC;AAEtB,oFAAoF;AACpF,MAAM,WAAW,6BAA6B;IAC5C,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;CAChC;AAED,qFAAqF;AACrF,MAAM,WAAW,6BAA6B;IAC5C,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,4EAA4E;AAC5E,MAAM,WAAW,iCAAiC;IAChD,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED,0EAA0E;AAC1E,MAAM,WAAW,sCAAsC;IACrD,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,iCAAiC,CAAC;CAC3C;AAED,mFAAmF;AACnF,MAAM,WAAW,kCAAkC;IACjD,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,YAAY,GAAG,OAAO,CAAC;IAC7B,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;GAKG;AACH,MAAM,WAAW,uCAAuC;IACtD,OAAO,EAAE,CAAC,CAAC;IACX,eAAe,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/C,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,SAAS,sCAAsC,EAAE,CAAC;IAChE,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,SAAS,kCAAkC,EAAE,CAAC;CACzD;AAED;;;;;GAKG;AACH,MAAM,WAAW,sBAAsB,CAAC,SAAS,GAAG,OAAO;IACzD,EAAE,EAAE,MAAM,CAAC;IACX,4EAA4E;IAC5E,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,gFAAgF;IAChF,cAAc,EAAE,MAAM,CAAC;IACvB,kEAAkE;IAClE,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,UAAU,CACR,OAAO,EAAE,6BAA6B,GACrC,OAAO,CAAC,uBAAuB,CAAC,CAAC;IACpC,KAAK,CACH,OAAO,EAAE,6BAA6B,EACtC,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,qBAAqB,CAAC,CAAC;IAClC,SAAS,CACP,OAAO,EAAE,6BAA6B,EACtC,OAAO,EAAE,6BAA6B,GACrC,OAAO,CAAC,SAAS,CAAC,CAAC;CACvB;AAED,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,sBAAsB,EAC5B,OAAO,EAAE,6BAA6B,GACrC,IAAI,CAQN;AAED,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,SAAS,sBAAsB,EAAE,EACxC,EAAE,EAAE,MAAM,GACT,sBAAsB,GAAG,SAAS,CAEpC"}

package/dist/playground.d.ts

@@ -0,0 +1,2 @@
+export { default } from './svelte/playground.js';
+//# sourceMappingURL=playground.d.ts.map

package/dist/playground.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"playground.d.ts","sourceRoot":"","sources":["../src/playground.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC"}

package/dist/playground.js

@@ -0,0 +1,154 @@
+//#region src/svelte/preview-data.ts
+var spec = {
+	version: 1,
+	title: "Sales by region",
+	source: "sales",
+	dimensions: [{
+		field: "region",
+		as: "region"
+	}],
+	measures: [{
+		fn: "sum",
+		field: "amount",
+		as: "total"
+	}],
+	filters: [],
+	having: [],
+	sort: [],
+	limit: 100,
+	chart: {
+		type: "bar",
+		x: "region",
+		y: ["total"]
+	}
+};
+var result = {
+	version: 1,
+	specHash: "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa",
+	title: spec.title,
+	columns: [{
+		id: "region",
+		label: "Region",
+		role: "dimension",
+		type: "string"
+	}, {
+		id: "total",
+		label: "Total",
+		role: "measure",
+		type: "integer",
+		format: "money"
+	}],
+	rows: [{
+		region: "West",
+		total: 12345
+	}],
+	rowCount: 1,
+	truncated: false,
+	ranAt: "2026-10-13T12:00:00Z",
+	chart: spec.chart
+};
+var saved = {
+	id: "report-1",
+	title: spec.title,
+	sourceId: "sales",
+	createdByUserId: "alice",
+	status: "active",
+	spec,
+	canArchive: true
+};
+var proposal = {
+	status: "awaiting_confirmation",
+	specHash: result.specHash,
+	spec,
+	preview: result,
+	sourceLabel: "Sales",
+	confirmPath: "/api/_reports/runtime/confirm"
+};
+function client(overrides = {}) {
+	return {
+		list: async () => [saved],
+		get: async () => saved,
+		run: async () => result,
+		archive: async () => {},
+		confirm: async () => saved,
+		...overrides
+	};
+}
+//#endregion
+//#region src/svelte/playground.ts
+var playground_default = {
+	packageName: "@happyvertical/smrt-reports",
+	displayName: "Reports",
+	description: "Saved runtime reports and live results.",
+	entries: [
+		{
+			id: "saved-reports",
+			title: "Saved reports",
+			description: "Shared reports, author filter, and archive controls.",
+			loadComponent: () => import("./svelte/SavedReports.svelte").then((m) => m.default),
+			props: { client: client() },
+			order: 1
+		},
+		{
+			id: "report-detail",
+			title: "Report detail",
+			description: "Money values with chart and table views.",
+			loadComponent: () => import("./svelte/ReportDetail.svelte").then((m) => m.default),
+			props: {
+				id: saved.id,
+				client: client(),
+				locale: "en-US"
+			},
+			order: 2
+		},
+		{
+			id: "report-confirmation",
+			title: "Report confirmation",
+			description: "Review a bounded proposal before saving.",
+			loadComponent: () => import("./svelte/ReportConfirmation.svelte").then((m) => m.default),
+			props: {
+				proposal,
+				confirm: async () => saved
+			},
+			order: 3
+		},
+		{
+			id: "report-picker",
+			title: "Report picker",
+			description: "Choose a saved report and its measure.",
+			loadComponent: () => import("./svelte/ReportPicker.svelte").then((m) => m.default),
+			props: {
+				client: client(),
+				reportId: saved.id,
+				measure: "total",
+				dimension: "region",
+				onchange: () => {}
+			},
+			order: 4
+		},
+		{
+			id: "reports-unavailable",
+			title: "Reports unavailable",
+			description: "Static hosts do not make server requests.",
+			loadComponent: () => import("./svelte/RuntimeReportsRoute.svelte").then((m) => m.default),
+			props: { serverAvailable: false },
+			order: 5
+		},
+		{
+			id: "report-empty",
+			title: "Empty report",
+			description: "A valid report with no matching rows.",
+			loadComponent: () => import("./svelte/ReportResult.svelte").then((m) => m.default),
+			props: { result: {
+				...result,
+				rows: [],
+				rowCount: 0
+			} },
+			order: 6
+		}
+	]
+};
+//#endregion
+export { playground_default as default };
+
+//# sourceMappingURL=playground.js.map

package/dist/playground.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"playground.js","names":[],"sources":["../src/svelte/preview-data.ts","../src/svelte/playground.ts"],"sourcesContent":["import type {\n  RuntimeReportProposal,\n  RuntimeReportResult,\n  RuntimeReportSpec,\n  RuntimeReportsClient,\n  SavedRuntimeReport,\n} from './types.js';\n\nexport const spec: RuntimeReportSpec = {\n  version: 1,\n  title: 'Sales by region',\n  source: 'sales',\n  dimensions: [{ field: 'region', as: 'region' }],\n  measures: [{ fn: 'sum', field: 'amount', as: 'total' }],\n  filters: [],\n  having: [],\n  sort: [],\n  limit: 100,\n  chart: { type: 'bar', x: 'region', y: ['total'] },\n};\nexport const result: RuntimeReportResult = {\n  version: 1,\n  specHash: 'aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa',\n  title: spec.title,\n  columns: [\n    { id: 'region', label: 'Region', role: 'dimension', type: 'string' },\n    {\n      id: 'total',\n      label: 'Total',\n      role: 'measure',\n      type: 'integer',\n      format: 'money',\n    },\n  ],\n  rows: [{ region: 'West', total: 12345 }],\n  rowCount: 1,\n  truncated: false,\n  ranAt: '2026-10-13T12:00:00Z',\n  chart: spec.chart,\n};\nexport const saved: SavedRuntimeReport = {\n  id: 'report-1',\n  title: spec.title,\n  sourceId: 'sales',\n  createdByUserId: 'alice',\n  status: 'active',\n  spec,\n  canArchive: true,\n};\nexport const proposal: RuntimeReportProposal = {\n  status: 'awaiting_confirmation',\n  specHash: result.specHash,\n  spec,\n  preview: result,\n  sourceLabel: 'Sales',\n  confirmPath: '/api/_reports/runtime/confirm',\n};\nexport function client(\n  overrides: Partial<RuntimeReportsClient> = {},\n): RuntimeReportsClient {\n  return {\n    list: async () => [saved],\n    get: async () => saved,\n    run: async () => result,\n    archive: async () => {},\n    confirm: async () => saved,\n    ...overrides,\n  };\n}\n","import { client, proposal, result, saved } from './preview-data.js';\n\nexport default {\n  packageName: '@happyvertical/smrt-reports',\n  displayName: 'Reports',\n  description: 'Saved runtime reports and live results.',\n  entries: [\n    {\n      id: 'saved-reports',\n      title: 'Saved reports',\n      description: 'Shared reports, author filter, and archive controls.',\n      loadComponent: () =>\n        import('./SavedReports.svelte').then((m) => m.default),\n      props: { client: client() },\n      order: 1,\n    },\n    {\n      id: 'report-detail',\n      title: 'Report detail',\n      description: 'Money values with chart and table views.',\n      loadComponent: () =>\n        import('./ReportDetail.svelte').then((m) => m.default),\n      props: { id: saved.id, client: client(), locale: 'en-US' },\n      order: 2,\n    },\n    {\n      id: 'report-confirmation',\n      title: 'Report confirmation',\n      description: 'Review a bounded proposal before saving.',\n      loadComponent: () =>\n        import('./ReportConfirmation.svelte').then((m) => m.default),\n      props: { proposal, confirm: async () => saved },\n      order: 3,\n    },\n    {\n      id: 'report-picker',\n      title: 'Report picker',\n      description: 'Choose a saved report and its measure.',\n      loadComponent: () =>\n        import('./ReportPicker.svelte').then((m) => m.default),\n      props: {\n        client: client(),\n        reportId: saved.id,\n        measure: 'total',\n        dimension: 'region',\n        onchange: () => {},\n      },\n      order: 4,\n    },\n    {\n      id: 'reports-unavailable',\n      title: 'Reports unavailable',\n      description: 'Static hosts do not make server requests.',\n      loadComponent: () =>\n        import('./RuntimeReportsRoute.svelte').then((m) => m.default),\n      props: { serverAvailable: false },\n      order: 5,\n    },\n    {\n      id: 'report-empty',\n      title: 'Empty report',\n      description: 'A valid report with no matching rows.',\n      loadComponent: () =>\n        import('./ReportResult.svelte').then((m) => m.default),\n      props: { result: { ...result, rows: [], rowCount: 0 } },\n      order: 6,\n    },\n  ],\n};\n"],"mappings":";AAQO,IAAM,OAA0B;CACrC,SAAS;CACT,OAAO;CACP,QAAQ;CACR,YAAY,CAAC;EAAE,OAAO;EAAU,IAAI;CAAS,CAAC;CAC9C,UAAU,CAAC;EAAE,IAAI;EAAO,OAAO;EAAU,IAAI;CAAQ,CAAC;CACtD,SAAS,CAAC;CACV,QAAQ,CAAC;CACT,MAAM,CAAC;CACP,OAAO;CACP,OAAO;EAAE,MAAM;EAAO,GAAG;EAAU,GAAG,CAAC,OAAO;CAAE;AAClD;AACO,IAAM,SAA8B;CACzC,SAAS;CACT,UAAU;CACV,OAAO,KAAK;CACZ,SAAS,CACP;EAAE,IAAI;EAAU,OAAO;EAAU,MAAM;EAAa,MAAM;CAAS,GACnE;EACE,IAAI;EACJ,OAAO;EACP,MAAM;EACN,MAAM;EACN,QAAQ;CACV,CACF;CACA,MAAM,CAAC;EAAE,QAAQ;EAAQ,OAAO;CAAM,CAAC;CACvC,UAAU;CACV,WAAW;CACX,OAAO;CACP,OAAO,KAAK;AACd;AACO,IAAM,QAA4B;CACvC,IAAI;CACJ,OAAO,KAAK;CACZ,UAAU;CACV,iBAAiB;CACjB,QAAQ;CACR;CACA,YAAY;AACd;AACO,IAAM,WAAkC;CAC7C,QAAQ;CACR,UAAU,OAAO;CACjB;CACA,SAAS;CACT,aAAa;CACb,aAAa;AACf;AACO,SAAS,OACd,YAA2C,CAAC,GACtB;CACtB,OAAO;EACL,MAAM,YAAY,CAAC,KAAK;EACxB,KAAK,YAAY;EACjB,KAAK,YAAY;EACjB,SAAS,YAAY,CAAC;EACtB,SAAS,YAAY;EACrB,GAAG;CACL;AACF;;;AClEA,IAAA,qBAAe;CACb,aAAa;CACb,aAAa;CACb,aAAa;CACb,SAAS;EACP;GACE,IAAI;GACJ,OAAO;GACP,aAAa;GACb,qBACE,OAAO,+BAAuB,CAAE,MAAM,MAAM,EAAE,OAAO;GACvD,OAAO,EAAE,QAAQ,OAAO,EAAE;GAC1B,OAAO;EACT;EACA;GACE,IAAI;GACJ,OAAO;GACP,aAAa;GACb,qBACE,OAAO,+BAAuB,CAAE,MAAM,MAAM,EAAE,OAAO;GACvD,OAAO;IAAE,IAAI,MAAM;IAAI,QAAQ,OAAO;IAAG,QAAQ;GAAQ;GACzD,OAAO;EACT;EACA;GACE,IAAI;GACJ,OAAO;GACP,aAAa;GACb,qBACE,OAAO,qCAA6B,CAAE,MAAM,MAAM,EAAE,OAAO;GAC7D,OAAO;IAAE;IAAU,SAAS,YAAY;GAAM;GAC9C,OAAO;EACT;EACA;GACE,IAAI;GACJ,OAAO;GACP,aAAa;GACb,qBACE,OAAO,+BAAuB,CAAE,MAAM,MAAM,EAAE,OAAO;GACvD,OAAO;IACL,QAAQ,OAAO;IACf,UAAU,MAAM;IAChB,SAAS;IACT,WAAW;IACX,gBAAgB,CAAC;GACnB;GACA,OAAO;EACT;EACA;GACE,IAAI;GACJ,OAAO;GACP,aAAa;GACb,qBACE,OAAO,sCAA8B,CAAE,MAAM,MAAM,EAAE,OAAO;GAC9D,OAAO,EAAE,iBAAiB,MAAM;GAChC,OAAO;EACT;EACA;GACE,IAAI;GACJ,OAAO;GACP,aAAa;GACb,qBACE,OAAO,+BAAuB,CAAE,MAAM,MAAM,EAAE,OAAO;GACvD,OAAO,EAAE,QAAQ;IAAE,GAAG;IAAQ,MAAM,CAAC;IAAG,UAAU;GAAE,EAAE;GACtD,OAAO;EACT;CACF;AACF"}

package/dist/recipes.d.ts

@@ -13,6 +13,7 @@
  * @packageDocumentation
  */
 import { SmrtRecipe } from '@happyvertical/smrt-core';
+import { RuntimeReport } from './runtime-report.js';
 import { SmrtPrincipalReportRefreshTask } from './scheduler.js';
 import { SmrtReportLock, SmrtReportRun, SmrtReportSchedule, SmrtReportWatermark } from './state.js';
 /** Reports: totals and trends kept ready to read, refreshed on a schedule. */
@@ -25,4 +26,58 @@ export declare class MaterializedReportsRecipe extends SmrtRecipe {
     static models: (typeof SmrtReportRun | typeof SmrtReportWatermark | typeof SmrtReportLock | typeof SmrtReportSchedule | typeof SmrtPrincipalReportRefreshTask)[];
     static runtime: "server";
 }
+/** Tenant-shared reports proposed by the assistant and approved by a person. */
+export declare class RuntimeReportsRecipe extends SmrtRecipe {
+    static id: string;
+    static label: string;
+    static summary: string;
+    static help: string;
+    static models: (typeof RuntimeReport)[];
+    static nav: {
+        label: string;
+        model: typeof RuntimeReport;
+        icon: string;
+    }[];
+    static surfaces: readonly [{
+        readonly kind: "route";
+        readonly path: "/reports";
+        readonly export: "@happyvertical/smrt-reports/svelte#RuntimeReportsRoute";
+        readonly label: "Reports";
+    }, {
+        readonly kind: "route";
+        readonly path: "/reports/:id";
+        readonly export: "@happyvertical/smrt-reports/svelte#RuntimeReportDetailRoute";
+        readonly label: "Report detail";
+    }, {
+        readonly kind: "widget";
+        readonly type: "runtime-report-chart";
+        readonly export: "@happyvertical/smrt-reports/svelte#RuntimeReportChartWidget";
+        readonly label: "Report chart";
+        readonly description: "Chart a measure from a saved report.";
+        readonly icon: "chart";
+        readonly optionsEditor: "@happyvertical/smrt-reports/svelte#RuntimeReportWidgetOptions";
+        readonly options: readonly [{
+            readonly key: "reportId";
+            readonly type: "text";
+            readonly label: "Report";
+            readonly required: true;
+        }, {
+            readonly key: "measure";
+            readonly type: "identifier";
+            readonly label: "Measure";
+            readonly required: true;
+        }, {
+            readonly key: "dimension";
+            readonly type: "identifier";
+            readonly label: "Dimension";
+        }];
+        readonly data: {
+            readonly load: "@happyvertical/smrt-reports#loadRuntimeReportChart";
+            readonly models: readonly ["@happyvertical/smrt-reports:RuntimeReport"];
+        };
+        readonly defaultSpan: 2;
+        readonly maxSpan: 4;
+    }];
+    static runtime: "server";
+}
 //# sourceMappingURL=recipes.d.ts.map

package/dist/recipes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"recipes.d.ts","sourceRoot":"","sources":["../src/recipes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EACL,8BAA8B,EAE/B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,cAAc,EACd,aAAa,EACb,kBAAkB,EAClB,mBAAmB,EACpB,MAAM,YAAY,CAAC;AAEpB,8EAA8E;AAC9E,qBAAa,yBAA0B,SAAQ,UAAU;IACvD,MAAM,CAAC,EAAE,SAA0B;IACnC,MAAM,CAAC,IAAI,SAA8B;IACzC,MAAM,CAAC,KAAK,SAAa;IACzB,MAAM,CAAC,OAAO,SAC+E;IAC7F,MAAM,CAAC,QAAQ,WAQb;IAIF,MAAM,CAAC,MAAM,oJAOX;IAGF,MAAM,CAAC,OAAO,EAAG,QAAQ,CAAU;CACpC"}
+{"version":3,"file":"recipes.d.ts","sourceRoot":"","sources":["../src/recipes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAC;AACtD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EACL,8BAA8B,EAE/B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,cAAc,EACd,aAAa,EACb,kBAAkB,EAClB,mBAAmB,EACpB,MAAM,YAAY,CAAC;AAEpB,8EAA8E;AAC9E,qBAAa,yBAA0B,SAAQ,UAAU;IACvD,MAAM,CAAC,EAAE,SAA0B;IACnC,MAAM,CAAC,IAAI,SAA8B;IACzC,MAAM,CAAC,KAAK,SAAa;IACzB,MAAM,CAAC,OAAO,SAC+E;IAC7F,MAAM,CAAC,QAAQ,WAQb;IAIF,MAAM,CAAC,MAAM,oJAOX;IAGF,MAAM,CAAC,OAAO,EAAG,QAAQ,CAAU;CACpC;AAED,gFAAgF;AAChF,qBAAa,oBAAqB,SAAQ,UAAU;IAClD,MAAM,CAAC,EAAE,SAAqB;IAC9B,MAAM,CAAC,KAAK,SAAa;IACzB,MAAM,CAAC,OAAO,SAC8D;IAC5E,MAAM,CAAC,IAAI,SAAyB;IACpC,MAAM,CAAC,MAAM,2BAAmB;IAChC,MAAM,CAAC,GAAG;;;;QAAkE;IAC5E,MAAM,CAAC,QAAQ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAuCJ;IACX,MAAM,CAAC,OAAO,EAAG,QAAQ,CAAU;CACpC"}

package/dist/runtime-report.d.ts

@@ -41,6 +41,15 @@ export declare class RuntimeReport extends SmrtObject {
     /** Principal that saved the report (an id string; not a foreign key). */
     createdByUserId: string;
     constructor(options?: SmrtObjectOptions);
+    /** Run fresh totals using the authenticated viewer's current permissions. */
+    run(): Promise<RuntimeReportResult>;
+    /** Archive or restore this definition; no report content can be changed. */
+    archive(options: {
+        archived: boolean;
+    }): Promise<{
+        id: string;
+        status: RuntimeReportStatus;
+    }>;
     /** Re-parse the stored JSON; never trust the column without validation. */
     getSpec(): RuntimeReportSpec;
     setSpec(spec: RuntimeReportSpec): void;

package/dist/runtime-report.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runtime-report.d.ts","sourceRoot":"","sources":["../src/runtime-report.ts"],"names":[],"mappings":"AAAA,OAAO,wBAAwB,CAAC;AAEhC;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAEL,cAAc,EACd,UAAU,EACV,KAAK,iBAAiB,EAEvB,MAAM,0BAA0B,CAAC;AAMlC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EACL,KAAK,qBAAqB,EAE1B,KAAK,2BAA2B,EAChC,KAAK,mBAAmB,EAEzB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAGL,KAAK,iBAAiB,EAGvB,MAAM,mBAAmB,CAAC;AAE3B,MAAM,MAAM,mBAAmB,GAAG,QAAQ,GAAG,UAAU,CAAC;AAYxD,qBAea,aAAc,SAAQ,UAAU;IAE3C,QAAQ,EAAE,MAAM,CAAM;IAGtB,KAAK,EAAE,MAAM,CAAM;IAGnB,WAAW,EAAE,MAAM,CAAM;IAEzB,2EAA2E;IAE3E,QAAQ,EAAE,MAAM,CAAM;IAEtB,iEAAiE;IAEjE,IAAI,EAAE,MAAM,CAAM;IAElB,wEAAwE;IAExE,QAAQ,EAAE,MAAM,CAAM;IAGtB,MAAM,EAAE,mBAAmB,CAAY;IAEvC,yEAAyE;IAEzE,eAAe,EAAE,MAAM,CAAM;gBAEjB,OAAO,GAAE,iBAAsB;IAM3C,2EAA2E;IAC3E,OAAO,IAAI,iBAAiB;IAY5B,OAAO,CAAC,IAAI,EAAE,iBAAiB,GAAG,IAAI;cASb,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC;IAa5D;;;;;;OAMG;YACW,oBAAoB;CAgCnC;AAED,qBAAa,uBAAwB,SAAQ,cAAc,CAAC,aAAa,CAAC;IACxE,MAAM,CAAC,QAAQ,CAAC,UAAU,uBAAiB;CAC5C;AAED,MAAM,WAAW,yBAAyB;IACxC,EAAE,EAAE,iBAAiB,CAAC;CACvB;AAED,MAAM,WAAW,wBAAyB,SAAQ,yBAAyB;IACzE,yEAAyE;IACzE,QAAQ,EAAE,qBAAqB,CAAC;IAChC;;;;OAIG;IACH,iBAAiB,EAAE,MAAM,CAAC;IAC1B,eAAe,EAAE,MAAM,CAAC;IACxB,sEAAsE;IACtE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAUD,yEAAyE;AACzE,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,wBAAwB,GAChC,OAAO,CAAC,aAAa,CAAC,CAuCxB;AAED,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,yBAAyB,GAAG;IACnC,GAAG,EAAE,MAAM,CAAC;IACZ;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GACA,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAO/B;AAED,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,yBAAyB,GAAG;IACnC,MAAM,CAAC,EAAE,mBAAmB,CAAC;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,yEAAyE;IACzE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oFAAoF;IACpF,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,0EAA0E;IAC1E,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GACA,OAAO,CAAC,aAAa,EAAE,CAAC,CAc1B;AAED,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,yBAAyB,GAAG;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,GACnD,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAM/B;AAED;;;;GAIG;AACH,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,yBAAyB,GAAG;IACnC,MAAM,EAAE,aAAa,CAAC;IACtB,OAAO,EAAE,2BAA2B,CAAC;IACrC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,GACA,OAAO,CAAC,mBAAmB,CAAC,CAgB9B"}
+{"version":3,"file":"runtime-report.d.ts","sourceRoot":"","sources":["../src/runtime-report.ts"],"names":[],"mappings":"AAAA,OAAO,wBAAwB,CAAC;AAEhC;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAEL,cAAc,EACd,UAAU,EACV,KAAK,iBAAiB,EAEvB,MAAM,0BAA0B,CAAC;AAMlC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EACL,KAAK,qBAAqB,EAE1B,KAAK,2BAA2B,EAChC,KAAK,mBAAmB,EAEzB,MAAM,uBAAuB,CAAC;AAM/B,OAAO,EAGL,KAAK,iBAAiB,EAGvB,MAAM,mBAAmB,CAAC;AAE3B,MAAM,MAAM,mBAAmB,GAAG,QAAQ,GAAG,UAAU,CAAC;AAYxD,qBAuCa,aAAc,SAAQ,UAAU;IAE3C,QAAQ,EAAE,MAAM,CAAM;IAGtB,KAAK,EAAE,MAAM,CAAM;IAGnB,WAAW,EAAE,MAAM,CAAM;IAEzB,2EAA2E;IAE3E,QAAQ,EAAE,MAAM,CAAM;IAEtB,iEAAiE;IAEjE,IAAI,EAAE,MAAM,CAAM;IAElB,wEAAwE;IAExE,QAAQ,EAAE,MAAM,CAAM;IAGtB,MAAM,EAAE,mBAAmB,CAAY;IAEvC,yEAAyE;IAEzE,eAAe,EAAE,MAAM,CAAM;gBAEjB,OAAO,GAAE,iBAAsB;IAM3C,6EAA6E;IACvE,GAAG,IAAI,OAAO,CAAC,mBAAmB,CAAC;IAOzC,4EAA4E;IACtE,OAAO,CAAC,OAAO,EAAE;QACrB,QAAQ,EAAE,OAAO,CAAC;KACnB,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,mBAAmB,CAAA;KAAE,CAAC;IAQxD,2EAA2E;IAC3E,OAAO,IAAI,iBAAiB;IAY5B,OAAO,CAAC,IAAI,EAAE,iBAAiB,GAAG,IAAI;cASb,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC;IAa5D;;;;;;OAMG;YACW,oBAAoB;CAgCnC;AAED,qBAAa,uBAAwB,SAAQ,cAAc,CAAC,aAAa,CAAC;IACxE,MAAM,CAAC,QAAQ,CAAC,UAAU,uBAAiB;CAC5C;AAED,MAAM,WAAW,yBAAyB;IACxC,EAAE,EAAE,iBAAiB,CAAC;CACvB;AAED,MAAM,WAAW,wBAAyB,SAAQ,yBAAyB;IACzE,yEAAyE;IACzE,QAAQ,EAAE,qBAAqB,CAAC;IAChC;;;;OAIG;IACH,iBAAiB,EAAE,MAAM,CAAC;IAC1B,eAAe,EAAE,MAAM,CAAC;IACxB,sEAAsE;IACtE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAUD,yEAAyE;AACzE,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,wBAAwB,GAChC,OAAO,CAAC,aAAa,CAAC,CAuCxB;AAED,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,yBAAyB,GAAG;IACnC,GAAG,EAAE,MAAM,CAAC;IACZ;;;;OAIG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GACA,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAO/B;AAED,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,yBAAyB,GAAG;IACnC,MAAM,CAAC,EAAE,mBAAmB,CAAC;IAC7B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,yEAAyE;IACzE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,oFAAoF;IACpF,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,0EAA0E;IAC1E,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GACA,OAAO,CAAC,aAAa,EAAE,CAAC,CAc1B;AAED,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,yBAAyB,GAAG;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,GACnD,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAM/B;AAED;;;;GAIG;AACH,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,yBAAyB,GAAG;IACnC,MAAM,EAAE,aAAa,CAAC;IACtB,OAAO,EAAE,2BAA2B,CAAC;IACrC,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,GACA,OAAO,CAAC,mBAAmB,CAAC,CAgB9B"}

package/dist/runtime-server.d.ts

@@ -0,0 +1,77 @@
+import type { DatabaseInterface } from '@happyvertical/sql';
+import { type RuntimeReportCompileContext, type RuntimeReportResult, type RuntimeReportSourceDefinition } from './runtime-compiler.js';
+import { type RuntimeReportSpec } from './runtime-spec.js';
+/** Browser proposal; carries data, never proof or permission to write. */
+export interface RuntimeReportAwaitingConfirmation {
+    status: 'awaiting_confirmation';
+    specHash: string;
+    spec: RuntimeReportSpec;
+    sourceLabel: string;
+    preview: RuntimeReportResult;
+    confirmPath: string;
+}
+/** Trusted session principal and its request-scoped database/transaction. */
+export interface RuntimeReportPrincipal {
+    db: DatabaseInterface;
+    userId: string;
+    tenantId: string;
+    permissions: readonly string[];
+}
+/** A source must declare its permission-catalog slug, never a class name. */
+export interface RuntimeReportServerSource extends RuntimeReportSourceDefinition {
+    collection: string;
+}
+/** Host-owned configuration; never read it from a request body. */
+export interface RuntimeReportServerOptions {
+    sources: readonly RuntimeReportServerSource[];
+    /** Called after a confirmed save (including a successful retry). */
+    audit?: (entry: {
+        action: 'confirm';
+        userId: string;
+        tenantId: string;
+        specHash: string;
+        reportId: string;
+        reused: boolean;
+    }) => unknown;
+}
+/** Public action failure with a stable HTTP status and code. */
+export declare class RuntimeReportHttpError extends Error {
+    readonly status: number;
+    readonly code: string;
+    constructor(status: number, code: string, message: string);
+}
+/** Require an authenticated tenant principal; do not honor system bypass. */
+export declare function assertRuntimeReportPrincipal(context: RuntimeReportPrincipal | null | undefined, permission: string): asserts context is RuntimeReportPrincipal;
+/** Narrow sources before compilation so hidden source ids cannot be probed. */
+export declare function runtimeReportPrincipalCompileContext(options: RuntimeReportServerOptions, principal: RuntimeReportPrincipal): RuntimeReportCompileContext;
+/**
+ * Mount at POST /api/_reports/runtime/confirm. Context must come from the
+ * verified server session, never the JSON body. The same request executor is
+ * used for lookup and save, preserving an enclosing RLS transaction.
+ */
+export declare function createRuntimeReportConfirmHandler(options?: RuntimeReportServerOptions): (request: Request, context: RuntimeReportPrincipal | null | undefined) => Promise<Response>;
+/** Runtime source allow-list configured in packages.reports.runtime.sources. */
+export declare function getRuntimeReportServerOptions(): RuntimeReportServerOptions;
+/** Obtain authority from the authenticated execution scope, never model options. */
+export declare function currentRuntimeReportPrincipal(db: DatabaseInterface): RuntimeReportPrincipal;
+/** Run a saved report as this viewer, without persisting result rows. */
+export declare function runRuntimeReportForPrincipal(ref: string, principal: RuntimeReportPrincipal, options?: RuntimeReportServerOptions): Promise<RuntimeReportResult>;
+/** Change only the saved status under the tenant writer's authority. */
+export declare function archiveRuntimeReportForPrincipal(ref: string, archived: boolean, principal: RuntimeReportPrincipal): Promise<{
+    id: string;
+    status: 'active' | 'archived';
+}>;
+/** Recipe loader; context.reportPrincipal is supplied by the server host. */
+export declare function loadRuntimeReportChart(options: Record<string, unknown>, context: {
+    reportPrincipal?: RuntimeReportPrincipal;
+    currency?: string;
+}): Promise<{
+    points: {
+        label: string;
+        value: number;
+    }[];
+    format: 'integer' | 'decimal' | 'money';
+    currency?: string;
+    href: string;
+}>;
+//# sourceMappingURL=runtime-server.d.ts.map