@haverstack/core 0.41.0 → 0.43.0

package/dist/{changes.js → stack/changes.js}

@@ -13,16 +13,19 @@
  * property of one function here, not a convention every emission site has
  * to remember. See docs/spec/events.md.
  */
-import { StackBadRequestError } from './errors.js';
-import { bumpsVersion, feedAssociationDelta } from './record-changes.js';
-/** The `baseId@version` split, as grants and query filters read it. */
-const baseIdOf = (typeId) => typeId.split('@')[0];
+import { StackBadRequestError } from '../errors.js';
+import { baseIdOf } from '../schema.js';
+import { bumpsVersion } from '../record-changes.js';
+import { feedAssociationDelta } from '../associations/identity.js';
 /**
- * Whether an emission matches a subscription's filter. Reads the record
- * for the fields the envelope deliberately omits, so `createdBy` filters on
- * the author and `purged` frames stay filterable without carrying either.
+ * Whether an emission matches a subscription's filter, every key of it.
+ * Reads the record for the fields the envelope deliberately omits, so
+ * `createdBy` filters on the author and `purged` frames stay filterable
+ * without carrying either.
  */
 export function matchesFilter(emitted, filter) {
+    if (!passesUnlistedBoundary(emitted, filter?.includeUnlisted))
+        return false;
     if (!filter)
         return true;
     const { change, record } = emitted;
@@ -67,13 +70,11 @@ export function matchesFilter(emitted, filter) {
 const asArray = (value) => (Array.isArray(value) ? value : [value]);
 /**
  * Whether an emission passes the unlisted-enumeration boundary for one
- * subscription. The `unlist` transition is the one exception to the
- * default exclusion: without it a subscriber who already knows the record
- * would never be told to drop it. Every other transition falls out of
- * checking the record's current state.
- * See docs/spec/events.md § The unlisted transition.
+ * subscription. `unlist` is the one exception to the default exclusion:
+ * without it a subscriber who already holds the record would never be told
+ * to drop it. See docs/spec/events.md § The unlisted transition.
  */
-export function passesUnlistedBoundary(emitted, includeUnlisted) {
+function passesUnlistedBoundary(emitted, includeUnlisted) {
     if (includeUnlisted)
         return true;
     if (emitted.change.ops.includes('unlist'))
@@ -82,14 +83,9 @@ export function passesUnlistedBoundary(emitted, includeUnlisted) {
 }
 /**
  * The frame a subscriber receives. A `purged` frame never carries the
- * record, whatever was asked for: purge is the erasure primitive,
- * and a frame that shipped the body — or the author — of a record the
- * stack has just destroyed would hand every subscriber a permanent copy of
- * the thing being erased. See docs/spec/events.md § Purged records carry
- * nothing.
- *
- * The record rides by reference, shared across every frame projected from
- * one emission: handlers are contractually read-only over it.
+ * record, whatever was asked for — see docs/spec/events.md § Purged records
+ * carry nothing. The record rides by reference, shared across every frame
+ * from one emission: handlers are contractually read-only over it.
  */
 export function emitted(emission, includeRecords) {
     const { change, record } = emission;
@@ -154,16 +150,10 @@ function reportError(err, opts) {
     });
 }
 /**
- * Delivery for frames that originate elsewhere. A relayed frame arrives
- * already projected and already scoped by the authority that opened the
- * feed, so nothing here filters it again: the emitter that produced it saw
- * the record, and this one never will — a purge in particular leaves
- * nothing to decide with. See docs/spec/events.md § Where events come from.
- *
- * It is delivered to one subscriber rather than through the emitter,
- * because a relay is opened per subscription and carries that
- * subscription's filter. Handing it to the registry would give every other
- * subscriber a copy of a stream it did not ask for.
+ * Delivery for frames that originate elsewhere, already projected and
+ * scoped by the authority that opened the feed, so nothing here filters
+ * them again. One subscriber's, not the registry's: a relay carries its own
+ * subscription's filter. See docs/spec/events.md § Where events come from.
  */
 export class RelayDelivery {
     handler;
@@ -195,22 +185,14 @@ class UnscopedSubscription extends Subscription {
     accept(emission) {
         if (!matchesFilter(emission, this.opts.filter))
             return;
-        if (!passesUnlistedBoundary(emission, this.opts.includeUnlisted))
-            return;
         this.deliver(emission);
     }
 }
 /**
- * One change, held between the two halves it is written in.
- *
- * A change lands twice: the durable half travels into the adapter's
- * transaction ahead of the write, and the live half is built from the
- * record that write produced. Naming the change once — its ops, its kind,
- * its actor, what it moved — is what makes "the entry set is the event
- * set" true by construction rather than by convention. No verb can journal
- * one thing and announce another, and a verb that writes only one half has
- * to say so where it does it. See docs/spec/journal.md § The entry set is
- * the event set.
+ * One change, held between the journal entry that travels into the
+ * adapter's write and the event built from the record it produced. Naming
+ * it once is what keeps a verb from journaling one thing and announcing
+ * another. See docs/spec/journal.md § The entry set is the event set.
  */
 export class PendingChange {
     moved;
@@ -226,13 +208,10 @@ export class PendingChange {
         this.kind = resolveKind(list);
     }
     /**
-     * The durable half, handed to the adapter as `journal` so that it lands
-     * in the same write as the mutation it describes.
-     *
-     * Absent for a purge, which destroys the log an entry would be appended
-     * to. The rule lives here rather than at each call site that would
-     * otherwise have to remember it. See docs/spec/journal.md § A purge
-     * destroys the journal.
+     * The durable half, handed to the adapter as `journal` so it lands in the
+     * same write as the mutation it describes. Absent for a purge, which
+     * destroys the log it would be appended to — see docs/spec/journal.md
+     * § A purge destroys the journal.
      */
     get journal() {
         if (this.kind === 'purged')
@@ -247,15 +226,10 @@ export class PendingChange {
         };
     }
     /**
-     * The live half, built from the record the write produced — for a purge,
-     * from the record as it stood immediately before destruction.
-     *
-     * The actor is read off the record for every version-bumping op, so it
-     * agrees with what was persisted by construction. A no-bump op stamps
-     * nothing, so the requester travels here instead — reading the record
-     * would report whoever's last version-bumping write this is. A purged
-     * frame drops `parentId` and the create-time `appId` too: it says a
-     * record of some type was destroyed and nothing about whose it was.
+     * The live half, built from the record the write produced (for a purge,
+     * as it stood before destruction). A version-bumping op's actor is read
+     * off that record; a no-bump op stamps none, so the requester travels
+     * here instead. See docs/spec/events.md § Attribution.
      */
     emission(record, at) {
         if (this.kind === 'purged') {
@@ -351,12 +325,10 @@ export class ChangeEmitter {
     }
 }
 /**
- * The kind a set of ops resolves to: the most conservative entry wins.
- * `unlist` beats everything a change set can carry beside it, because a
- * subscriber holding the record still has to drop it — announcing an edit
- * bundled with an unlist as an upsert would leave a stale copy behind.
- * Nothing else competes: `created` and `purged` name whole-record
- * transitions that are always emitted alone.
+ * The kind a set of ops resolves to: the most conservative wins. `unlist`
+ * beats anything beside it, since announcing an edit bundled with an
+ * unlist as an upsert would leave subscribers holding a stale copy.
+ * `created` and `purged` are always emitted alone.
  */
 function resolveKind(ops) {
     if (ops.includes('unlist'))
@@ -389,15 +361,9 @@ export const CHANGE_KINDS = {
  */
 const CURSOR_FORMAT = /^[A-Za-z0-9_-]+$/;
 /**
- * `since` only means something where a relay exists: a stack with no
- * third party whose writes could have been missed has no cursor it could
- * ever have minted. Silently starting from the present would let the
- * caller believe it resumed when it did not, so a stack that cannot honor
- * `since` refuses it rather than ignoring it.
- *
- * Its shape is checked here rather than left to the adapter, so a malformed
- * cursor is the same error whoever is underneath. The value stays opaque:
- * this asks whether it is framable, never what it means.
+ * Refuse a `since` this stack cannot honor rather than silently starting
+ * from the present, and a malformed one here rather than in the adapter, so
+ * it is the same error whoever is underneath. The value stays opaque.
  * See docs/spec/events.md § Subscribing.
  */
 export function assertSinceUsable(since, relaysChanges) {

package/dist/stack/changes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"changes.js","sourceRoot":"","sources":["../../src/stack/changes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAcH,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAgCnE;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,OAAsB,EAAE,MAAqB;IACzE,IAAI,CAAC,sBAAsB,CAAC,OAAO,EAAE,MAAM,EAAE,eAAe,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5E,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC;IAEnC,IAAI,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAEtE,wEAAwE;IACxE,yEAAyE;IACzE,MAAM,OAAO,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAChC,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS;QAAE,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;IAE/E,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IAC7D,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IACvE,CAAC;IAED,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,IAAI,CAAC;QACzC,mEAAmE;QACnE,oEAAoE;QACpE,qEAAqE;QACrE,sEAAsE;QACtE,iEAAiE;QACjE,MAAM,MAAM,GAAG,OAAO,CAAC,gBAAgB,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC;QAC5F,IAAI,QAAQ,KAAK,MAAM,CAAC,QAAQ,IAAI,MAAM,KAAK,MAAM,CAAC,QAAQ;YAAE,OAAO,KAAK,CAAC;IAC/E,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,CAAC,WAAW,EAAE,aAAa,CAAU,EAAE,CAAC;QAC1D,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,MAAM,KAAK,SAAS;YAAE,SAAS;QACnC,MAAM,EAAE,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,EAAE,KAAK,SAAS,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;YAAE,OAAO,KAAK,CAAC;IACtE,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,OAAO,GAAG,CAAI,KAAc,EAAO,EAAE,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;AAErF;;;;;GAKG;AACH,SAAS,sBAAsB,CAAC,OAAsB,EAAE,eAAyB;IAC/E,IAAI,eAAe;QAAE,OAAO,IAAI,CAAC;IACjC,IAAI,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACvD,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC;AACpC,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,OAAO,CAAC,QAAuB,EAAE,cAAuB;IACtE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC;IACpC,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,cAAc;QAAE,OAAO,EAAE,GAAG,MAAM,EAAE,CAAC;IACtE,OAAO,EAAE,GAAG,MAAM,EAAE,MAAM,EAAE,CAAC;AAC/B,CAAC;AAED;;;;;GAKG;AACH,MAAM,OAAgB,YAAY;IAIX;IACA;IAJb,MAAM,GAAG,KAAK,CAAC;IAEvB,YACqB,OAAuC,EACvC,IAAsB;QADtB,YAAO,GAAP,OAAO,CAAgC;QACvC,SAAI,GAAJ,IAAI,CAAkB;IACxC,CAAC;IAKJ,IAAI,QAAQ;QACV,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,KAAK;QACH,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;IACrB,CAAC;IAED,6EAA6E;IACnE,OAAO,CAAC,QAAuB;QACvC,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,IAAI,CAAC;YACH,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,cAAc,KAAK,IAAI,CAAC,CAAC,CAAC;QACrE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;QACxB,CAAC;IACH,CAAC;IAES,WAAW,CAAC,GAAY;QAChC,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;CACF;AAED;;;;;;GAMG;AACH,SAAS,WAAW,CAAC,GAAY,EAAE,IAAsB;IACvD,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACpB,CAAC;QAAC,MAAM,CAAC;YACP,wDAAwD;QAC1D,CAAC;QACD,OAAO;IACT,CAAC;IACD,cAAc,CAAC,GAAG,EAAE;QAClB,MAAM,GAAG,CAAC;IACZ,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,OAAO,aAAa;IAIL;IACA;IAJX,MAAM,GAAG,KAAK,CAAC;IAEvB,YACmB,OAAuC,EACvC,IAAsB;QADtB,YAAO,GAAP,OAAO,CAAgC;QACvC,SAAI,GAAJ,IAAI,CAAkB;IACtC,CAAC;IAEJ,OAAO,CAAC,MAAoB;QAC1B,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO;QACxB,IAAI,CAAC;YACH,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,WAAW,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC;IAED,KAAK;QACH,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;IACrB,CAAC;CACF;AAED;;;GAGG;AACH,MAAM,oBAAqB,SAAQ,YAAY;IAC7C,MAAM,CAAC,QAAuB;QAC5B,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,OAAO;QACvD,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACzB,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,aAAa;IAML;IALV,GAAG,CAAa;IAChB,IAAI,CAAa;IAE1B,YACE,GAA0B,EACT,QAqBb,EAAE;QArBW,UAAK,GAAL,KAAK,CAqBhB;QAEN,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAC9C,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC;QACD,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC;QAChB,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAChC,CAAC;IAED;;;;;OAKG;IACH,IAAI,OAAO;QACT,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAC7C,MAAM,EAAE,KAAK,EAAE,gBAAgB,EAAE,YAAY,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC;QAC7D,OAAO;YACL,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,GAAG,CAAC,KAAK,IAAI,EAAE,KAAK,EAAE,CAAC;YACvB,GAAG,CAAC,gBAAgB,KAAK,SAAS,IAAI,EAAE,gBAAgB,EAAE,CAAC;YAC3D,GAAG,CAAC,YAAY,EAAE,MAAM,IAAI,EAAE,YAAY,EAAE,CAAC;SAC9C,CAAC;IACJ,CAAC;IAED;;;;;OAKG;IACH,QAAQ,CAAC,MAAmB,EAAE,EAAS;QACrC,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC3B,OAAO;gBACL,MAAM;gBACN,MAAM,EAAE;oBACN,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,GAAG,EAAE,IAAI,CAAC,GAAG;oBACb,QAAQ,EAAE,MAAM,CAAC,EAAE;oBACnB,MAAM,EAAE,MAAM,CAAC,MAAM;oBACrB,OAAO,EAAE,MAAM,CAAC,OAAO;oBACvB,SAAS,EAAE,EAAE,IAAI,IAAI,IAAI,EAAE;oBAC3B,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;iBACrD;aACF,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;QACrF,OAAO;YACL,MAAM;YACN,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,KAAK,SAAS,IAAI;gBAC/C,gBAAgB,EAAE,IAAI,CAAC,KAAK,CAAC,gBAAgB;aAC9C,CAAC;YACF,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,KAAK,SAAS;gBACzC,IAAI,CAAC,KAAK,CAAC,cAAc,KAAK,MAAM,CAAC,MAAM,IAAI;gBAC7C,cAAc,EAAE,IAAI,CAAC,KAAK,CAAC,cAAc;aAC1C,CAAC;YACJ,MAAM,EAAE;gBACN,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,GAAG,EAAE,IAAI,CAAC,GAAG;gBACb,QAAQ,EAAE,MAAM,CAAC,EAAE;gBACnB,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,GAAG,CAAC,MAAM,CAAC,QAAQ,KAAK,SAAS,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACnE,GAAG,CAAC,KAAK,IAAI,EAAE,KAAK,EAAE,CAAC;gBACvB,GAAG,IAAI,CAAC,iBAAiB,EAAE;aAC5B;SACF,CAAC;IACJ,CAAC;IAED,gEAAgE;IACxD,iBAAiB;QACvB,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;QAC/E,OAAO;YACL,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,iBAAiB,EAAE,KAAK,EAAE,CAAC;YACjD,GAAG,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,CAAC;SACxD,CAAC;IACJ,CAAC;CACF;AAED;;;;;GAKG;AACH,SAAS,OAAO,CAAC,MAAmB,EAAE,IAAgB;IACpD,IAAI,CAAC,MAAM,CAAC,SAAS;QAAE,OAAO,SAAS,CAAC;IACxC,OAAO;QACL,GAAG,MAAM,CAAC,SAAS;QACnB,GAAG,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;KACjF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,aAAa;IACP,aAAa,GAAG,IAAI,GAAG,EAAgB,CAAC;IAEzD,IAAI,CAAC,QAAuB;QAC1B,sEAAsE;QACtE,sEAAsE;QACtE,KAAK,MAAM,YAAY,IAAI,CAAC,GAAG,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;YACnD,IAAI,CAAC,YAAY,CAAC,QAAQ;gBAAE,YAAY,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC5D,CAAC;IACH,CAAC;IAED,GAAG,CAAC,YAA0B;QAC5B,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QACrC,OAAO,GAAG,EAAE;YACV,YAAY,CAAC,KAAK,EAAE,CAAC;YACrB,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAC1C,CAAC,CAAC;IACJ,CAAC;IAED,SAAS,CAAC,OAAuC,EAAE,IAAsB;QACvE,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,oBAAoB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;IAC3D,CAAC;IAED,sEAAsE;IACtE,QAAQ;QACN,KAAK,MAAM,YAAY,IAAI,IAAI,CAAC,aAAa;YAAE,YAAY,CAAC,KAAK,EAAE,CAAC;QACpE,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;IAC7B,CAAC;CACF;AAED;;;;;GAKG;AACH,SAAS,WAAW,CAAC,GAAe;IAClC,IAAI,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAC;IAC7C,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,YAAY,CAAC,GAAG,CAAC,CAAC,CAAE,CAAC,CAAC;IACnD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,4EAA4E;AAC5E,MAAM,CAAC,MAAM,YAAY,GAAiC;IACxD,MAAM,EAAE,SAAS;IACjB,KAAK,EAAE,SAAS;IAChB,SAAS,EAAE,SAAS;IACpB,UAAU,EAAE,SAAS;IACrB,OAAO,EAAE,SAAS;IAClB,OAAO,EAAE,SAAS;IAClB,OAAO,EAAE,SAAS;IAClB,QAAQ,EAAE,SAAS;IACnB,MAAM,EAAE,SAAS;IACjB,KAAK,EAAE,QAAQ;IACf,IAAI,EAAE,SAAS;IACf,MAAM,EAAE,SAAS;IACjB,QAAQ,EAAE,SAAS;CACpB,CAAC;AAEF;;;;;GAKG;AACH,MAAM,aAAa,GAAG,kBAAkB,CAAC;AAEzC;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAyB,EAAE,aAAsB;IACjF,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO;IAChC,IAAI,CAAC,aAAa,EAAE,CAAC;QACnB,MAAM,IAAI,oBAAoB,CAC5B,yFAAyF;YACvF,sFAAsF;YACtF,wEAAwE,CAC3E,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,oBAAoB,CAC5B,6CAA6C,KAAK,sCAAsC;YACtF,sFAAsF;YACtF,gEAAgE,CACnE,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/stack/client.d.ts

@@ -0,0 +1,247 @@
+/**
+ * StackClient and the option types around it
+ * -------------------------------------------------------
+ * The app-facing record API that both `Stack` and `ScopedStack` implement,
+ * with the option and result shapes its verbs take. Shapes only: the
+ * behaviour behind them lives in stack.ts and scoped-stack.ts.
+ */
+import type { Actor, AppId, AssociationEdit, AttachmentContent, AuthorityAssociation, DataAssociation, EntityId, FileId, IfVersionOptions, JournalQuery, PutAttachmentOptions, QueryResult, RecordChange, RecordId, RecordJournalEntry, RecordVersion, StackCapabilities, StackQuery, StackRecord, SubscribeOptions, TypeId, Unsubscribe, VersionsQuery } from '../types/index.js';
+import type { ContentOf, Migration, ReadonlyTypeSchema, TypeHandle } from '../type-handle.js';
+import type { Collection } from '../collection.js';
+export type CreateRecordOptions = {
+    /**
+     * Client-minted record ID. Must be 12 lowercase Crockford base-32
+     * characters and may not use the reserved `_` prefix. Omit to let the
+     * library generate one. See Stack.create() and ScopedStack.create()
+     * for the validation each applies.
+     */
+    id?: RecordId;
+    parentId?: RecordId;
+    /**
+     * The author. ScopedStack sets this from its own identities; callers of
+     * plain Stack supply it only when reconstructing an attributed write.
+     * See StackRecord.createdBy.
+     */
+    createdBy?: Actor;
+    /** Reverse-DNS identifier of the writing software — see AppId. */
+    appId?: AppId;
+    permissions?: AuthorityAssociation[];
+    associations?: DataAssociation[];
+    /**
+     * Create the record already unlisted, so the create event itself is
+     * withheld from the feed — there is no window where the record exists
+     * and is listed before a mutation catches up. See
+     * docs/spec/unlisted.md.
+     */
+    unlisted?: boolean;
+};
+/**
+ * CreateRecordOptions plus createdAt/updatedAt, for backdating on import.
+ * ScopedStack.create() takes them only from the owner acting alone: anyone
+ * else could forge a sort position with them, as with a raw `id`.
+ * See docs/spec/data-model.md § Backdating on import.
+ */
+export type BackdatableCreateRecordOptions = CreateRecordOptions & {
+    /**
+     * The record's creation time. When `id` is also supplied, its embedded
+     * timestamp must agree with this within `idTimestampSkewMs` (default 24h;
+     * see StackOptions.idTimestampSkewMs) or the create throws
+     * StackValidationError. Omit `id` to have it derived from this timestamp
+     * instead. Defaults to now.
+     */
+    createdAt?: Date;
+    /**
+     * The record's last-modified time. Defaults to `createdAt` (or now, if
+     * `createdAt` is omitted too) — never to the actual current time — so a
+     * plain import doesn't fabricate a fake edit. Must not precede
+     * `createdAt`.
+     */
+    updatedAt?: Date;
+};
+export type StackOptions = {
+    /**
+     * Ensures the owner's own `_entity` profile record exists, creating it on
+     * first run. Idempotent — safe to pass on every open. See
+     * docs/spec/identity.md § Entity.
+     */
+    ownerProfile?: {
+        name: string;
+        handle?: string;
+    };
+    /**
+     * Clock-skew tolerance (ms) between a client-supplied `id`'s timestamp
+     * and the current time (a live scoped create) or an explicit `createdAt`
+     * (a backdated one). Default: 24 hours; null disables both checks.
+     * See docs/spec/data-model.md § Record IDs.
+     */
+    idTimestampSkewMs?: number | null;
+    /**
+     * Every migration this app knows, built with `migration()`. The chain is
+     * complete before the first read, and one that cannot be walked — two
+     * steps from one TypeId, or a cycle — is refused here. See
+     * docs/spec/data-model.md § Type migrations.
+     */
+    migrations?: readonly Migration[];
+};
+export type CollectAttachmentGarbageOptions = {
+    /**
+     * How recent an unreferenced file must be to survive collection, covering
+     * the upload-then-associate window. Default: 24 hours. Pass 0 to collect
+     * anything unreferenced right now.
+     */
+    graceMs?: number;
+    /** Compute what would be deleted without deleting anything. Default: false. */
+    dryRun?: boolean;
+};
+export type CollectAttachmentGarbageResult = {
+    /** The files collected — or, on a dry run, the ones that would be. */
+    deletedFileIds: FileId[];
+    reclaimedBytes: number;
+};
+export type GetRecordOptions = {
+    /**
+     * Records are returned exactly as stored by default. Pass "latest" to
+     * apply the registered migration chain in memory — never written back.
+     * See docs/spec/data-model.md § Type migrations.
+     */
+    presentAt?: 'stored' | 'latest';
+    /**
+     * Soft-deleted records are hidden by default, as query() hides them: a
+     * tombstone reads as `null`. Pass true to read it back.
+     * See docs/spec/versioning.md § Deletion.
+     */
+    includeDeleted?: boolean;
+};
+export type DeleteRecordOptions = IfVersionOptions & {
+    /** If true, permanently remove the record and all its history. Default: false */
+    purge?: boolean;
+};
+/**
+ * What a delete reports back. The record is captured inside the same
+ * atomic write as the delete, never read beforehand. `referencedFileIds`
+ * is information, not action: a purge never touches the blob store. See
+ * docs/spec/attachments.md § A purge strands the bytes it referenced.
+ */
+export type DeleteResult = {
+    /**
+     * The record as a soft delete left it — under ScopedStack, presented as
+     * its tombstone — or as it stood immediately before destruction for a
+     * purge, and `null` when there was nothing at `id` to purge.
+     * See docs/spec/versioning.md § The tombstone is literal.
+     */
+    record: StackRecord | null;
+    /**
+     * The files the purged record referenced — its attachment associations
+     * and its `file-ref` content fields, deduplicated. The purge removes the
+     * only rows naming them, so this is the caller's one chance to hold the
+     * argument `deleteAttachment()` takes. Empty on a soft delete, which
+     * strands nothing: a tombstone's references stand.
+     */
+    referencedFileIds: FileId[];
+};
+/** Options for Stack.migrateAll(). */
+export type MigrateAllOptions = {
+    /**
+     * `'all'` (the default) sweeps every record of the family, deleted and
+     * unlisted included. `'listed'` sweeps only what a non-owner can
+     * enumerate and read whole. See docs/spec/apps.md § Migrating an
+     * installed app's types.
+     */
+    sweep?: 'all' | 'listed';
+};
+/** The argument to Stack.defineType(). */
+export type DefineTypeOptions = {
+    id: TypeId;
+    name: string;
+    /** A handle's `schema` is accepted as written, readonly members and all. */
+    schema: ReadonlyTypeSchema;
+    migratesFrom?: TypeId;
+};
+/**
+ * The app-facing record API, implemented by both Stack and ScopedStack.
+ * Accept this type in plugin or extension code to remain adapter-agnostic
+ * and work equally well with a full Stack or a permission-scoped view.
+ */
+export interface StackClient {
+    readonly capabilities: StackCapabilities;
+    /**
+     * Typed access to `handle`'s whole family, every record migrated in
+     * memory to the handle's version. Throws `StackMigrationError` when the
+     * handle's `migratesFrom` has no migration passed to `Stack.open()`.
+     * See docs/spec/data-model.md § Type handles.
+     */
+    collection<S extends ReadonlyTypeSchema>(handle: TypeHandle<S>): Collection<ContentOf<S>>;
+    create<T extends Record<string, unknown> = Record<string, unknown>>(typeId: TypeId, content: T, opts?: CreateRecordOptions): Promise<StackRecord & {
+        content: T;
+    }>;
+    get(id: RecordId, opts?: GetRecordOptions): Promise<StackRecord | null>;
+    query(query?: StackQuery): Promise<QueryResult>;
+    /**
+     * Resolve a DID to its `_entity` card — family-wide and soft-deleted
+     * inclusive, per docs/spec/identity.md § DID bindings. No caching.
+     *
+     * Under `ScopedStack`, `null` covers missing, unreadable, and (unless the
+     * owner is acting alone) unlisted — never evidence the card is absent.
+     */
+    getEntityByDid(did: EntityId): Promise<StackRecord | null>;
+    /** getEntityByDid() for the one DID every stack reserves: its own owner. */
+    getOwnerEntity(): Promise<StackRecord | null>;
+    /**
+     * Merge a patch into a record's content, one level deep (`null` removes a
+     * key). The only content edit, and the one write besides the lifecycle
+     * verbs that bumps `version`. See docs/spec/data-model.md § Mutations.
+     */
+    patchContent(id: RecordId, patch: Record<string, unknown | null>, opts?: IfVersionOptions): Promise<StackRecord>;
+    /**
+     * Move a record under `parentId`, or to the root with `null`. See
+     * docs/spec/data-model.md § Reparenting.
+     */
+    setParent(id: RecordId, parentId: RecordId | null, opts?: IfVersionOptions): Promise<StackRecord>;
+    /** Withhold a record from enumeration, or restore it. See docs/spec/unlisted.md. */
+    setUnlisted(id: RecordId, unlisted: boolean, opts?: IfVersionOptions): Promise<StackRecord>;
+    /**
+     * Apply adds and removes to a record's data associations as one write,
+     * changing only what the list names. An add naming an attachment the
+     * record already holds re-points it. See docs/spec/data-model.md § Mutations.
+     */
+    editAssociations(id: RecordId, edits: AssociationEdit[], opts?: IfVersionOptions): Promise<StackRecord>;
+    /** Make a record's data associations exactly `associations`. */
+    setAssociations(id: RecordId, associations: DataAssociation[], opts?: IfVersionOptions): Promise<StackRecord>;
+    /**
+     * editAssociations() for who reaches a record, so a downgrade (remove
+     * `write`, keep `read`) is one change. `write` never implies `read`:
+     * grant both. See docs/spec/access-control.md § Record-level permissions.
+     */
+    editAccess(id: RecordId, edits: AssociationEdit[], opts?: IfVersionOptions): Promise<StackRecord>;
+    /** Make who reaches a record exactly `permissions`; `[]` is private. */
+    setAccess(id: RecordId, permissions: AuthorityAssociation[], opts?: IfVersionOptions): Promise<StackRecord>;
+    /**
+     * Soft-delete a record, or purge it with its history, reporting the
+     * record it acted on. See docs/spec/versioning.md § Deletion.
+     */
+    delete(id: RecordId, opts?: DeleteRecordOptions): Promise<DeleteResult>;
+    undelete(id: RecordId, opts?: IfVersionOptions): Promise<StackRecord>;
+    getVersions(id: RecordId, query?: VersionsQuery): Promise<RecordVersion[]>;
+    getVersion(id: RecordId, version: number): Promise<RecordVersion | null>;
+    restoreVersion(id: RecordId, version: number, opts?: IfVersionOptions): Promise<StackRecord>;
+    /**
+     * A record's change journal, oldest first, gated like getVersions().
+     * Required of every adapter, so an empty log always means "nothing
+     * changed". See docs/spec/journal.md § Reading it.
+     */
+    getJournal(id: RecordId, query?: JournalQuery): Promise<RecordJournalEntry[]>;
+    /**
+     * Commit a per-record migration: `typeId` and `content` together,
+     * validated against `toTypeId`'s schema — the only way a record's typeId
+     * changes after creation. See docs/spec/wire-format.md § Migration commit.
+     */
+    commitMigration(id: RecordId, toTypeId: TypeId, content: Record<string, unknown>, opts?: IfVersionOptions): Promise<StackRecord>;
+    getAttachment(fileId: FileId): Promise<Uint8Array>;
+    putAttachment(data: Uint8Array, opts: PutAttachmentOptions): Promise<StackRecord & {
+        content: AttachmentContent;
+    }>;
+    deleteAttachment(fileId: FileId): Promise<void>;
+    collectAttachmentGarbage(opts?: CollectAttachmentGarbageOptions): Promise<CollectAttachmentGarbageResult>;
+    subscribe(handler: (change: RecordChange) => void, opts?: SubscribeOptions): Promise<Unsubscribe>;
+}
+//# sourceMappingURL=client.d.ts.map

package/dist/stack/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/stack/client.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EACV,KAAK,EACL,KAAK,EACL,eAAe,EACf,iBAAiB,EACjB,oBAAoB,EACpB,eAAe,EACf,QAAQ,EACR,MAAM,EACN,gBAAgB,EAChB,YAAY,EACZ,oBAAoB,EACpB,WAAW,EACX,YAAY,EACZ,QAAQ,EACR,kBAAkB,EAClB,aAAa,EACb,iBAAiB,EACjB,UAAU,EACV,WAAW,EACX,gBAAgB,EAChB,MAAM,EACN,WAAW,EACX,aAAa,EACd,MAAM,mBAAmB,CAAC;AAC3B,OAAO,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,kBAAkB,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC9F,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEnD,MAAM,MAAM,mBAAmB,GAAG;IAChC;;;;;OAKG;IACH,EAAE,CAAC,EAAE,QAAQ,CAAC;IACd,QAAQ,CAAC,EAAE,QAAQ,CAAC;IACpB;;;;OAIG;IACH,SAAS,CAAC,EAAE,KAAK,CAAC;IAClB,kEAAkE;IAClE,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,WAAW,CAAC,EAAE,oBAAoB,EAAE,CAAC;IACrC,YAAY,CAAC,EAAE,eAAe,EAAE,CAAC;IACjC;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB,CAAC;AACF;;;;;GAKG;AACH,MAAM,MAAM,8BAA8B,GAAG,mBAAmB,GAAG;IACjE;;;;;;OAMG;IACH,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,IAAI,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB;;;;OAIG;IACH,YAAY,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACjD;;;;;OAKG;IACH,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC;;;;;OAKG;IACH,UAAU,CAAC,EAAE,SAAS,SAAS,EAAE,CAAC;CACnC,CAAC;AAEF,MAAM,MAAM,+BAA+B,GAAG;IAC5C;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,+EAA+E;IAC/E,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB,CAAC;AAEF,MAAM,MAAM,8BAA8B,GAAG;IAC3C,sEAAsE;IACtE,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,cAAc,EAAE,MAAM,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B;;;;OAIG;IACH,SAAS,CAAC,EAAE,QAAQ,GAAG,QAAQ,CAAC;IAChC;;;;OAIG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,mBAAmB,GAAG,gBAAgB,GAAG;IACnD,iFAAiF;IACjF,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,YAAY,GAAG;IACzB;;;;;OAKG;IACH,MAAM,EAAE,WAAW,GAAG,IAAI,CAAC;IAC3B;;;;;;OAMG;IACH,iBAAiB,EAAE,MAAM,EAAE,CAAC;CAC7B,CAAC;AAEF,sCAAsC;AACtC,MAAM,MAAM,iBAAiB,GAAG;IAC9B;;;;;OAKG;IACH,KAAK,CAAC,EAAE,KAAK,GAAG,QAAQ,CAAC;CAC1B,CAAC;AAEF,0CAA0C;AAC1C,MAAM,MAAM,iBAAiB,GAAG;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,4EAA4E;IAC5E,MAAM,EAAE,kBAAkB,CAAC;IAC3B,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAMF;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,YAAY,EAAE,iBAAiB,CAAC;IACzC;;;;;OAKG;IACH,UAAU,CAAC,CAAC,SAAS,kBAAkB,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1F,MAAM,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChE,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,CAAC,EACV,IAAI,CAAC,EAAE,mBAAmB,GACzB,OAAO,CAAC,WAAW,GAAG;QAAE,OAAO,EAAE,CAAC,CAAA;KAAE,CAAC,CAAC;IACzC,GAAG,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IACxE,KAAK,CAAC,KAAK,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAChD;;;;;;OAMG;IACH,cAAc,CAAC,GAAG,EAAE,QAAQ,GAAG,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IAC3D,4EAA4E;IAC5E,cAAc,IAAI,OAAO,CAAC,WAAW,GAAG,IAAI,CAAC,CAAC;IAC9C;;;;OAIG;IACH,YAAY,CACV,EAAE,EAAE,QAAQ,EACZ,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI,CAAC,EACrC,IAAI,CAAC,EAAE,gBAAgB,GACtB,OAAO,CAAC,WAAW,CAAC,CAAC;IACxB;;;OAGG;IACH,SAAS,CAAC,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,GAAG,IAAI,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAClG,oFAAoF;IACpF,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAC5F;;;;OAIG;IACH,gBAAgB,CACd,EAAE,EAAE,QAAQ,EACZ,KAAK,EAAE,eAAe,EAAE,EACxB,IAAI,CAAC,EAAE,gBAAgB,GACtB,OAAO,CAAC,WAAW,CAAC,CAAC;IACxB,gEAAgE;IAChE,eAAe,CACb,EAAE,EAAE,QAAQ,EACZ,YAAY,EAAE,eAAe,EAAE,EAC/B,IAAI,CAAC,EAAE,gBAAgB,GACtB,OAAO,CAAC,WAAW,CAAC,CAAC;IACxB;;;;OAIG;IACH,UAAU,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,eAAe,EAAE,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAClG,wEAAwE;IACxE,SAAS,CACP,EAAE,EAAE,QAAQ,EACZ,WAAW,EAAE,oBAAoB,EAAE,EACnC,IAAI,CAAC,EAAE,gBAAgB,GACtB,OAAO,CAAC,WAAW,CAAC,CAAC;IACxB;;;OAGG;IACH,MAAM,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,mBAAmB,GAAG,OAAO,CAAC,YAAY,CAAC,CAAC;IACxE,QAAQ,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACtE,WAAW,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,aAAa,EAAE,CAAC,CAAC;IAC3E,UAAU,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAAC;IACzE,cAAc,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAC7F;;;;OAIG;IACH,UAAU,CAAC,EAAE,EAAE,QAAQ,EAAE,KAAK,CAAC,EAAE,YAAY,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC;IAC9E;;;;OAIG;IACH,eAAe,CACb,EAAE,EAAE,QAAQ,EACZ,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAChC,IAAI,CAAC,EAAE,gBAAgB,GACtB,OAAO,CAAC,WAAW,CAAC,CAAC;IACxB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACnD,aAAa,CACX,IAAI,EAAE,UAAU,EAChB,IAAI,EAAE,oBAAoB,GACzB,OAAO,CAAC,WAAW,GAAG;QAAE,OAAO,EAAE,iBAAiB,CAAA;KAAE,CAAC,CAAC;IACzD,gBAAgB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChD,wBAAwB,CACtB,IAAI,CAAC,EAAE,+BAA+B,GACrC,OAAO,CAAC,8BAA8B,CAAC,CAAC;IAC3C,SAAS,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,YAAY,KAAK,IAAI,EAAE,IAAI,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;CACnG"}

package/dist/stack/client.js

@@ -0,0 +1,9 @@
+/**
+ * StackClient and the option types around it
+ * -------------------------------------------------------
+ * The app-facing record API that both `Stack` and `ScopedStack` implement,
+ * with the option and result shapes its verbs take. Shapes only: the
+ * behaviour behind them lives in stack.ts and scoped-stack.ts.
+ */
+export {};
+//# sourceMappingURL=client.js.map

package/dist/stack/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/stack/client.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG"}

package/dist/stack/identity-bindings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-bindings.d.ts","sourceRoot":"","sources":["../../src/stack/identity-bindings.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AA4BH,eAAO,MAAM,eAAe,GAAI,QAAQ,MAAM,KAAG,SAAS,CAAC,KAAK,GAAG,OAAO,CAAC,EACzC,CAAC;AAEnC,eAAO,MAAM,qBAAqB,GAAI,QAAQ,MAAM,KAAG,SAAS,CAAC,KAAK,GAAG,OAAO,CAAC,EACxC,CAAC"}

package/dist/{identity-bindings.js → stack/identity-bindings.js}

@@ -8,7 +8,7 @@
  *
  * See docs/spec/identity.md § DID bindings.
  */
-import { SYSTEM_TYPES } from './types.js';
+import { SYSTEM_TYPES } from '../types/index.js';
 /**
  * Content fields that are lookup keys rather than display values: a card
  * claims one, and something later resolves through it. Every one of them is
@@ -20,19 +20,10 @@ const BINDING_FIELDS = new Map([
     [SYSTEM_TYPES.INSTALL, ['appId']],
 ]);
 /**
- * The subset that is additionally unique per stack: the fields something
- * resolves *by*. An Actor's `principalId` finds its card by `_app.did` and
- * its `subjectId` by `_entity.did`, so a second card claiming either leaves
- * that lookup without a single answer — and ambiguity is all an
- * impersonating card needs.
- *
- * `_app.appId` is deliberately absent. Nothing resolves a card by it — the
- * cross-check reaches the card by `did` and only compares `appId` — so
- * uniqueness would buy no disambiguation, while forbidding the second card
- * key rotation is supposed to produce: `appId` is required, so a
- * replacement card for the same software necessarily repeats it. Moving one
- * card onto another's `appId` is what immutability already refuses.
- * See docs/spec/identity.md § DID bindings.
+ * The subset that is additionally unique per stack: the fields an Actor is
+ * resolved *by*, where a second claimant leaves the lookup ambiguous.
+ * `_app.appId` is deliberately absent — nothing resolves by it, and a new
+ * key's card must repeat it. See docs/spec/identity.md § DID bindings.
  */
 const UNIQUE_BINDING_FIELDS = new Map([
     [SYSTEM_TYPES.APP, ['did']],

package/dist/stack/identity-bindings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity-bindings.js","sourceRoot":"","sources":["../../src/stack/identity-bindings.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AAEjD;;;;GAIG;AACH,MAAM,cAAc,GAAsD,IAAI,GAAG,CAAC;IAChF,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,OAAO,CAAU,CAAC;IAC7C,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,KAAK,CAAU,CAAC;IACvC,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,OAAO,CAAU,CAAC;CAC3C,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,qBAAqB,GAAsD,IAAI,GAAG,CAAC;IACvF,CAAC,YAAY,CAAC,GAAG,EAAE,CAAC,KAAK,CAAU,CAAC;IACpC,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,KAAK,CAAU,CAAC;IACvC,mFAAmF;IACnF,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,OAAO,CAAU,CAAC;CAC3C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,MAAc,EAAgC,EAAE,CAC9E,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;AAEnC,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,MAAc,EAAgC,EAAE,CACpF,qBAAqB,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC"}

package/dist/stack/install-app.d.ts

@@ -0,0 +1,22 @@
+/**
+ * App install verbs
+ * -------------------------------------------------------
+ * Planning, applying and withdrawing an app's install over an unscoped
+ * Stack: the bodies of Stack.planInstall(), installApp() and
+ * uninstallApp(), whose doc comments describe the contract. Written
+ * against Stack's public API alone, so every write here passes the same
+ * checks any other caller's would. See docs/spec/apps.md.
+ */
+import type { AppManifest, InstallPlan } from '../install.js';
+import type { AppId, EntityId, InstallContent, StackRecord } from '../types/index.js';
+import type { Stack } from './stack.js';
+export declare function planInstall(stack: Stack, submitted: AppManifest, opts: {
+    did: EntityId;
+}): Promise<InstallPlan>;
+export declare function installApp(stack: Stack, plan: InstallPlan): Promise<StackRecord & {
+    content: InstallContent;
+}>;
+export declare function uninstallApp(stack: Stack, appId: AppId): Promise<StackRecord & {
+    content: InstallContent;
+}>;
+//# sourceMappingURL=install-app.d.ts.map

package/dist/stack/install-app.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"install-app.d.ts","sourceRoot":"","sources":["../../src/stack/install-app.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAkCH,OAAO,KAAK,EAAE,WAAW,EAAkB,WAAW,EAAc,MAAM,eAAe,CAAC;AAC1F,OAAO,KAAK,EAEV,KAAK,EAIL,QAAQ,EAER,cAAc,EAEd,WAAW,EAEZ,MAAM,mBAAmB,CAAC;AAE3B,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AAExC,wBAAsB,WAAW,CAC/B,KAAK,EAAE,KAAK,EACZ,SAAS,EAAE,WAAW,EACtB,IAAI,EAAE;IAAE,GAAG,EAAE,QAAQ,CAAA;CAAE,GACtB,OAAO,CAAC,WAAW,CAAC,CAqEtB;AAED,wBAAsB,UAAU,CAC9B,KAAK,EAAE,KAAK,EACZ,IAAI,EAAE,WAAW,GAChB,OAAO,CAAC,WAAW,GAAG;IAAE,OAAO,EAAE,cAAc,CAAA;CAAE,CAAC,CA+CpD;AAED,wBAAsB,YAAY,CAChC,KAAK,EAAE,KAAK,EACZ,KAAK,EAAE,KAAK,GACX,OAAO,CAAC,WAAW,GAAG;IAAE,OAAO,EAAE,cAAc,CAAA;CAAE,CAAC,CAapD"}