@intelligo-dev/core 1.0.0-beta.3 → 1.0.0-beta.6

package/dist/identity/service.js

@@ -4,8 +4,8 @@
  * Privacy-facing reads and mutations over the user identity graph:
  * fact listing/deletion, a full-identity data export, and the
  * memory-audit trail that records every mutation to a user's facts,
- * memories, and synthesized profile snapshot. Ported from Ignite's
- * `actions/identity.ts` (ADR-0008/ADR-0009 precedent — see
+ * memories, and synthesized profile snapshot. Ported from the first
+ * product's `actions/identity.ts` (ADR-0008/ADR-0009 precedent — see
  * `../documents/service.ts` and `../conversations/service.ts` for the
  * same move): the tables (`user_facts`, `user_memories`,
  * `user_profile_snapshots`, `user_memory_audit`) always lived in
@@ -16,11 +16,11 @@
  *
  * What did NOT come with it (stays product/agents-side):
  *   - `updateMyFactImportance` and the `synthesizeProfile()` re-trigger
- *     Ignite's `deleteMyFact` ran after deleting — synthesis is
- *     `@intelligo-dev/agents`' concern (deprecated, dissolving under
- *     ADR-0008), and this package cannot depend on it. `deleteFact`
- *     below does not touch the cached snapshot; a caller that also
- *     owns a synthesis engine re-triggers it after calling this.
+ *     the product's `deleteMyFact` ran after deleting — synthesis is
+ *     the product's AI code (ADR-0003), and this package cannot depend
+ *     on it. `deleteFact` below does not touch the cached snapshot; a
+ *     caller that also owns a synthesis engine re-triggers it after
+ *     calling this.
  *
  * Callers pass a resolved actor (workspaceId, userId) rather than this
  * module resolving one itself — `@intelligo-dev/core` cannot depend on
@@ -132,7 +132,7 @@ export async function deleteFact(actor, factId) {
  * Aggregate the actor's full identity graph — facts, memories, latest
  * profile snapshot, and full audit trail — for a data-export flow.
  * Records its own audit row (action "export"): the export operation
- * audits itself, same as the ported Ignite implementation.
+ * audits itself, same as the implementation it was ported from.
  */
 export async function exportIdentity(actor) {
     // Recorded before the reads so the export's own audit row is part of

package/dist/index.d.ts

@@ -1,3 +1,2 @@
-export declare const version = "0.0.0";
 export * from "./db/index.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,OAAO,UAAU,CAAC;AAG/B,cAAc,MAAM,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAOA,cAAc,MAAM,CAAC"}

package/dist/index.js

@@ -1,4 +1,8 @@
-export const version = "0.0.0";
+// There was an `export const version = "0.0.0"` here, on a package
+// published as 1.0.0-beta.3, read by nothing. A version constant that
+// has to be kept in step with the manifest by hand will not be; the
+// manifest is the one place that cannot drift, and consumers who need
+// it can read it from there.
 // Re-export database client
 export * from "./db/index.js";
 // Email module -- use subpath import: @intelligo-dev/core/email

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,OAAO,GAAG,OAAO,CAAC;AAE/B,4BAA4B;AAC5B,cAAc,MAAM,CAAC;AAErB,gEAAgE;AAChE,gFAAgF;AAChF,gFAAgF;AAChF,wEAAwE;AACxE,sEAAsE;AACtE,2DAA2D;AAC3D,qDAAqD"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,mEAAmE;AACnE,sEAAsE;AACtE,oEAAoE;AACpE,sEAAsE;AACtE,6BAA6B;AAE7B,4BAA4B;AAC5B,cAAc,MAAM,CAAC;AAErB,gEAAgE;AAChE,gFAAgF;AAChF,gFAAgF;AAChF,wEAAwE;AACxE,sEAAsE;AACtE,2DAA2D;AAC3D,qDAAqD"}

package/dist/money.d.ts

@@ -0,0 +1,112 @@
+/**
+ * Money, in one unit, with the currency attached.
+ *
+ * The framework used to denominate every amount in one deployment's
+ * currency: `balance_mnt`, `chargedMnt`, `estimatedMnt`, a
+ * `DEFAULT_USD_TO_MNT_RATE` constant, and a `formatPrice` that returned
+ * a tugrik glyph — in the public port types of a package meant to
+ * underpin products that do not sell in tugrik. This module is the
+ * replacement. It imports nothing, and must keep importing nothing:
+ * `@intelligo-dev/executions/pricing` is a deliberate zero-import leaf
+ * that client bundles reach, and it needs these types without dragging
+ * the rest of core behind them. `core/registry` holds the same line for
+ * the same reason.
+ *
+ * Two decisions worth stating, because both look arbitrary and neither
+ * is.
+ *
+ * **Micros, not minor units.** A typical chat turn on a cheap model
+ * costs about $0.0019 of provider time, which is 0.74 cents once the
+ * margin is applied. Rounding that to whole cents overcharges by more
+ * than a third on every request. Six decimal places was in fact what
+ * the old `× 3450` tugrik scaling bought — this keeps the precision and
+ * drops the pretence that the number is a currency.
+ *
+ * **Currency on the amount, not in a global.** The bug this is built
+ * against was a credit pack whose grant was authored in tokens and
+ * spent as ledger units: 100,000 of one unit sold for $1.01 of another.
+ * Nothing in the type system objected, because the number was a
+ * `number`. Here the currency travels with the amount and `add` refuses
+ * to mix two.
+ */
+declare const isoTag: unique symbol;
+declare const microsTag: unique symbol;
+/** An ISO-4217 alphabetic code, upper-cased and validated. */
+export type CurrencyCode = string & {
+    readonly [isoTag]: true;
+};
+/** An integer number of millionths of one major currency unit. */
+export type Micros = number & {
+    readonly [microsTag]: true;
+};
+/** An amount and the currency it is denominated in. */
+export type Money = {
+    readonly amount: Micros;
+    readonly currency: CurrencyCode;
+};
+/** Thrown for every misuse in this module, so callers can catch one type. */
+export declare class MoneyError extends Error {
+    readonly code: string;
+    constructor(code: string, message: string);
+}
+/**
+ * Validate and normalise an ISO-4217 code.
+ *
+ * Shape only — a real registry would go stale, and a deployment
+ * selling in a code this file has never heard of should not be blocked
+ * by a list. `minorExponent` is where an unknown code takes its
+ * conservative default.
+ */
+export declare function currency(code: string): CurrencyCode;
+/**
+ * An integer count of micros.
+ *
+ * The upper bound is `Number.MAX_SAFE_INTEGER`, which at six decimal
+ * places is about 9 billion major units — far above any real balance,
+ * and low enough to catch a value that arrived in the wrong unit.
+ */
+export declare function micros(value: number): Micros;
+export declare function money(amount: number, code: string | CurrencyCode): Money;
+/** How many decimal places this currency's minor unit has. */
+export declare function minorExponent(code: CurrencyCode): 0 | 2 | 3;
+/** `12.34` USD → `12_340_000` micros. */
+export declare function fromMajor(value: number, code: string | CurrencyCode): Money;
+/** `1234` cents → `12_340_000` micros. */
+export declare function fromMinor(value: number, code: string | CurrencyCode): Money;
+/**
+ * The integer a payment provider wants: whole units for a zero-decimal
+ * currency, hundredths for most, thousandths for a few.
+ *
+ * Rounds up. A fraction of a minor unit is money the deployment has
+ * already spent, and rounding it away means eating the difference on
+ * every transaction.
+ */
+export declare function toMinor(value: Money): number;
+/** The amount as a plain decimal number, for display and for charts. */
+export declare function toMajor(value: Money): number;
+export declare const zero: (code: string | CurrencyCode) => Money;
+export declare function add(a: Money, b: Money): Money;
+export declare function subtract(a: Money, b: Money): Money;
+/** Scale by a plain factor — a margin multiplier, a percentage, a count. */
+export declare function multiply(value: Money, factor: number): Money;
+export declare function compare(a: Money, b: Money): number;
+export declare const isZero: (value: Money) => boolean;
+export declare const isNegative: (value: Money) => boolean;
+/**
+ * Convert at an explicit rate, expressed in micros so the rate itself
+ * carries no float error: `3_450_000_000` is 3450.0.
+ *
+ * There is no ambient rate and no default. A framework that guesses an
+ * exchange rate is inventing money.
+ */
+export declare function convert(value: Money, to: string | CurrencyCode, rateMicros: number): Money;
+/**
+ * Format for a human, in their locale.
+ *
+ * `Intl` owns the symbol, its position, the grouping separator and the
+ * decimal separator — none of which belong in framework source. This
+ * is the function that replaces a `₮${n.toLocaleString()}` template.
+ */
+export declare function formatMoney(value: Money, locale: string, options?: Intl.NumberFormatOptions): string;
+export {};
+//# sourceMappingURL=money.d.ts.map

package/dist/money.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"money.d.ts","sourceRoot":"","sources":["../src/money.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,OAAO,CAAC,MAAM,MAAM,EAAE,OAAO,MAAM,CAAC;AACpC,OAAO,CAAC,MAAM,SAAS,EAAE,OAAO,MAAM,CAAC;AAEvC,8DAA8D;AAC9D,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG;IAAE,QAAQ,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,CAAA;CAAE,CAAC;AAEhE,kEAAkE;AAClE,MAAM,MAAM,MAAM,GAAG,MAAM,GAAG;IAAE,QAAQ,CAAC,CAAC,SAAS,CAAC,EAAE,IAAI,CAAA;CAAE,CAAC;AAE7D,uDAAuD;AACvD,MAAM,MAAM,KAAK,GAAG;IAClB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;CACjC,CAAC;AAEF,6EAA6E;AAC7E,qBAAa,UAAW,SAAQ,KAAK;IACnC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;gBACV,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAK1C;AAyCD;;;;;;;GAOG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,YAAY,CASnD;AAED;;;;;;GAMG;AACH,wBAAgB,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAc5C;AAED,wBAAgB,KAAK,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,YAAY,GAAG,KAAK,CAExE;AAED,8DAA8D;AAC9D,wBAAgB,aAAa,CAAC,IAAI,EAAE,YAAY,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAE3D;AAED,yCAAyC;AACzC,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,YAAY,GAAG,KAAK,CAK3E;AAED,0CAA0C;AAC1C,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,YAAY,GAAG,KAAK,CAI3E;AAED;;;;;;;GAOG;AACH,wBAAgB,OAAO,CAAC,KAAK,EAAE,KAAK,GAAG,MAAM,CAG5C;AAED,wEAAwE;AACxE,wBAAgB,OAAO,CAAC,KAAK,EAAE,KAAK,GAAG,MAAM,CAE5C;AAED,eAAO,MAAM,IAAI,GAAI,MAAM,MAAM,GAAG,YAAY,KAAG,KAGjD,CAAC;AAWH,wBAAgB,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,GAAG,KAAK,CAG7C;AAED,wBAAgB,QAAQ,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,GAAG,KAAK,CAGlD;AAED,4EAA4E;AAC5E,wBAAgB,QAAQ,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,GAAG,KAAK,CAQ5D;AAED,wBAAgB,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,GAAG,MAAM,CAGlD;AAED,eAAO,MAAM,MAAM,GAAI,OAAO,KAAK,KAAG,OAA6B,CAAC;AACpE,eAAO,MAAM,UAAU,GAAI,OAAO,KAAK,KAAG,OAA2B,CAAC;AAEtE;;;;;;GAMG;AACH,wBAAgB,OAAO,CACrB,KAAK,EAAE,KAAK,EACZ,EAAE,EAAE,MAAM,GAAG,YAAY,EACzB,UAAU,EAAE,MAAM,GACjB,KAAK,CAqBP;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CACzB,KAAK,EAAE,KAAK,EACZ,MAAM,EAAE,MAAM,EACd,OAAO,GAAE,IAAI,CAAC,mBAAwB,GACrC,MAAM,CASR"}

package/dist/money.js

@@ -0,0 +1,217 @@
+/**
+ * Money, in one unit, with the currency attached.
+ *
+ * The framework used to denominate every amount in one deployment's
+ * currency: `balance_mnt`, `chargedMnt`, `estimatedMnt`, a
+ * `DEFAULT_USD_TO_MNT_RATE` constant, and a `formatPrice` that returned
+ * a tugrik glyph — in the public port types of a package meant to
+ * underpin products that do not sell in tugrik. This module is the
+ * replacement. It imports nothing, and must keep importing nothing:
+ * `@intelligo-dev/executions/pricing` is a deliberate zero-import leaf
+ * that client bundles reach, and it needs these types without dragging
+ * the rest of core behind them. `core/registry` holds the same line for
+ * the same reason.
+ *
+ * Two decisions worth stating, because both look arbitrary and neither
+ * is.
+ *
+ * **Micros, not minor units.** A typical chat turn on a cheap model
+ * costs about $0.0019 of provider time, which is 0.74 cents once the
+ * margin is applied. Rounding that to whole cents overcharges by more
+ * than a third on every request. Six decimal places was in fact what
+ * the old `× 3450` tugrik scaling bought — this keeps the precision and
+ * drops the pretence that the number is a currency.
+ *
+ * **Currency on the amount, not in a global.** The bug this is built
+ * against was a credit pack whose grant was authored in tokens and
+ * spent as ledger units: 100,000 of one unit sold for $1.01 of another.
+ * Nothing in the type system objected, because the number was a
+ * `number`. Here the currency travels with the amount and `add` refuses
+ * to mix two.
+ */
+/** Thrown for every misuse in this module, so callers can catch one type. */
+export class MoneyError extends Error {
+    constructor(code, message) {
+        super(message);
+        this.code = code;
+        this.name = "MoneyError";
+    }
+}
+const MICROS_PER_UNIT = 1000000;
+/**
+ * Currencies whose minor unit is not the usual hundredth.
+ *
+ * Only the exceptions are listed; everything else is 2. Getting this
+ * wrong is not cosmetic — it is the difference between charging ¥1,000
+ * and ¥100,000, because Stripe takes zero-decimal currencies in whole
+ * units and every other one in hundredths.
+ */
+const MINOR_EXPONENT = {
+    BIF: 0,
+    CLP: 0,
+    DJF: 0,
+    GNF: 0,
+    ISK: 0,
+    JPY: 0,
+    KMF: 0,
+    KRW: 0,
+    MGA: 0,
+    MNT: 0,
+    PYG: 0,
+    RWF: 0,
+    UGX: 0,
+    UYI: 0,
+    VND: 0,
+    VUV: 0,
+    XAF: 0,
+    XOF: 0,
+    XPF: 0,
+    BHD: 3,
+    IQD: 3,
+    JOD: 3,
+    KWD: 3,
+    LYD: 3,
+    OMR: 3,
+    TND: 3,
+};
+/**
+ * Validate and normalise an ISO-4217 code.
+ *
+ * Shape only — a real registry would go stale, and a deployment
+ * selling in a code this file has never heard of should not be blocked
+ * by a list. `minorExponent` is where an unknown code takes its
+ * conservative default.
+ */
+export function currency(code) {
+    const upper = code.toUpperCase();
+    if (!/^[A-Z]{3}$/.test(upper)) {
+        throw new MoneyError("invalid_currency", `"${code}" is not an ISO-4217 alphabetic code (three letters).`);
+    }
+    return upper;
+}
+/**
+ * An integer count of micros.
+ *
+ * The upper bound is `Number.MAX_SAFE_INTEGER`, which at six decimal
+ * places is about 9 billion major units — far above any real balance,
+ * and low enough to catch a value that arrived in the wrong unit.
+ */
+export function micros(value) {
+    if (!Number.isInteger(value)) {
+        throw new MoneyError("not_an_integer", `Micros must be a whole number; received ${value}. Convert with fromMajor/fromMinor rather than multiplying by hand.`);
+    }
+    if (!Number.isSafeInteger(value)) {
+        throw new MoneyError("out_of_range", `${value} micros exceeds the safe integer range.`);
+    }
+    return value;
+}
+export function money(amount, code) {
+    return { amount: micros(amount), currency: currency(code) };
+}
+/** How many decimal places this currency's minor unit has. */
+export function minorExponent(code) {
+    return MINOR_EXPONENT[code] ?? 2;
+}
+/** `12.34` USD → `12_340_000` micros. */
+export function fromMajor(value, code) {
+    return {
+        amount: micros(Math.round(value * MICROS_PER_UNIT)),
+        currency: currency(code),
+    };
+}
+/** `1234` cents → `12_340_000` micros. */
+export function fromMinor(value, code) {
+    const c = currency(code);
+    const scale = MICROS_PER_UNIT / 10 ** minorExponent(c);
+    return { amount: micros(Math.round(value * scale)), currency: c };
+}
+/**
+ * The integer a payment provider wants: whole units for a zero-decimal
+ * currency, hundredths for most, thousandths for a few.
+ *
+ * Rounds up. A fraction of a minor unit is money the deployment has
+ * already spent, and rounding it away means eating the difference on
+ * every transaction.
+ */
+export function toMinor(value) {
+    const scale = MICROS_PER_UNIT / 10 ** minorExponent(value.currency);
+    return Math.ceil(value.amount / scale);
+}
+/** The amount as a plain decimal number, for display and for charts. */
+export function toMajor(value) {
+    return value.amount / MICROS_PER_UNIT;
+}
+export const zero = (code) => ({
+    amount: 0,
+    currency: currency(code),
+});
+function sameCurrency(a, b, op) {
+    if (a.currency !== b.currency) {
+        throw new MoneyError("currency_mismatch", `Cannot ${op} ${a.currency} and ${b.currency}. Convert one first — an exchange rate is a decision, not a coercion.`);
+    }
+}
+export function add(a, b) {
+    sameCurrency(a, b, "add");
+    return { amount: micros(a.amount + b.amount), currency: a.currency };
+}
+export function subtract(a, b) {
+    sameCurrency(a, b, "subtract");
+    return { amount: micros(a.amount - b.amount), currency: a.currency };
+}
+/** Scale by a plain factor — a margin multiplier, a percentage, a count. */
+export function multiply(value, factor) {
+    if (!Number.isFinite(factor)) {
+        throw new MoneyError("invalid_factor", `Factor must be finite.`);
+    }
+    return {
+        amount: micros(Math.ceil(value.amount * factor)),
+        currency: value.currency,
+    };
+}
+export function compare(a, b) {
+    sameCurrency(a, b, "compare");
+    return a.amount === b.amount ? 0 : a.amount < b.amount ? -1 : 1;
+}
+export const isZero = (value) => value.amount === 0;
+export const isNegative = (value) => value.amount < 0;
+/**
+ * Convert at an explicit rate, expressed in micros so the rate itself
+ * carries no float error: `3_450_000_000` is 3450.0.
+ *
+ * There is no ambient rate and no default. A framework that guesses an
+ * exchange rate is inventing money.
+ */
+export function convert(value, to, rateMicros) {
+    const target = currency(to);
+    if (!Number.isInteger(rateMicros) || rateMicros <= 0) {
+        throw new MoneyError("invalid_rate", `Rate must be a positive integer number of micros; received ${rateMicros}.`);
+    }
+    if (target === value.currency) {
+        if (rateMicros !== MICROS_PER_UNIT) {
+            throw new MoneyError("invalid_rate", `Converting ${value.currency} to itself at ${rateMicros / MICROS_PER_UNIT} is not a conversion.`);
+        }
+        return value;
+    }
+    return {
+        amount: micros(Math.ceil((value.amount * rateMicros) / MICROS_PER_UNIT)),
+        currency: target,
+    };
+}
+/**
+ * Format for a human, in their locale.
+ *
+ * `Intl` owns the symbol, its position, the grouping separator and the
+ * decimal separator — none of which belong in framework source. This
+ * is the function that replaces a `₮${n.toLocaleString()}` template.
+ */
+export function formatMoney(value, locale, options = {}) {
+    const digits = minorExponent(value.currency);
+    return new Intl.NumberFormat(locale, {
+        style: "currency",
+        currency: value.currency,
+        minimumFractionDigits: digits,
+        maximumFractionDigits: digits,
+        ...options,
+    }).format(toMajor(value));
+}
+//# sourceMappingURL=money.js.map

package/dist/money.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"money.js","sourceRoot":"","sources":["../src/money.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAiBH,6EAA6E;AAC7E,MAAM,OAAO,UAAW,SAAQ,KAAK;IAEnC,YAAY,IAAY,EAAE,OAAe;QACvC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,YAAY,CAAC;IAC3B,CAAC;CACF;AAED,MAAM,eAAe,GAAG,OAAS,CAAC;AAElC;;;;;;;GAOG;AACH,MAAM,cAAc,GAAwC;IAC1D,GAAG,EAAE,CAAC;IACN,GAAG,EAAE,CAAC;IACN,GAAG,EAAE,CAAC;IACN,GAAG,EAAE,CAAC;IACN,GAAG,EAAE,CAAC;IACN,GAAG,EAAE,CAAC;IACN,GAAG,EAAE,CAAC;IACN,GAAG,EAAE,CAAC;IACN,GAAG,EAAE,CAAC;IACN,GAAG,EAAE,CAAC;IACN,GAAG,EAAE,CAAC;IACN,GAAG,EAAE,CAAC;IACN,GAAG,EAAE,CAAC;IACN,GAAG,EAAE,CAAC;IACN,GAAG,EAAE,CAAC;IACN,GAAG,EAAE,CAAC;IACN,GAAG,EAAE,CAAC;IACN,GAAG,EAAE,CAAC;IACN,GAAG,EAAE,CAAC;IACN,GAAG,EAAE,CAAC;IACN,GAAG,EAAE,CAAC;IACN,GAAG,EAAE,CAAC;IACN,GAAG,EAAE,CAAC;IACN,GAAG,EAAE,CAAC;IACN,GAAG,EAAE,CAAC;IACN,GAAG,EAAE,CAAC;CACP,CAAC;AAEF;;;;;;;GAOG;AACH,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACjC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,UAAU,CAClB,kBAAkB,EAClB,IAAI,IAAI,uDAAuD,CAChE,CAAC;IACJ,CAAC;IACD,OAAO,KAAqB,CAAC;AAC/B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,MAAM,CAAC,KAAa;IAClC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,UAAU,CAClB,gBAAgB,EAChB,2CAA2C,KAAK,qEAAqE,CACtH,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,UAAU,CAClB,cAAc,EACd,GAAG,KAAK,yCAAyC,CAClD,CAAC;IACJ,CAAC;IACD,OAAO,KAAe,CAAC;AACzB,CAAC;AAED,MAAM,UAAU,KAAK,CAAC,MAAc,EAAE,IAA2B;IAC/D,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;AAC9D,CAAC;AAED,8DAA8D;AAC9D,MAAM,UAAU,aAAa,CAAC,IAAkB;IAC9C,OAAO,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACnC,CAAC;AAED,yCAAyC;AACzC,MAAM,UAAU,SAAS,CAAC,KAAa,EAAE,IAA2B;IAClE,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,eAAe,CAAC,CAAC;QACnD,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC;KACzB,CAAC;AACJ,CAAC;AAED,0CAA0C;AAC1C,MAAM,UAAU,SAAS,CAAC,KAAa,EAAE,IAA2B;IAClE,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IACzB,MAAM,KAAK,GAAG,eAAe,GAAG,EAAE,IAAI,aAAa,CAAC,CAAC,CAAC,CAAC;IACvD,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;AACpE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,OAAO,CAAC,KAAY;IAClC,MAAM,KAAK,GAAG,eAAe,GAAG,EAAE,IAAI,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACpE,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,KAAK,CAAC,CAAC;AACzC,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,OAAO,CAAC,KAAY;IAClC,OAAO,KAAK,CAAC,MAAM,GAAG,eAAe,CAAC;AACxC,CAAC;AAED,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,IAA2B,EAAS,EAAE,CAAC,CAAC;IAC3D,MAAM,EAAE,CAAW;IACnB,QAAQ,EAAE,QAAQ,CAAC,IAAI,CAAC;CACzB,CAAC,CAAC;AAEH,SAAS,YAAY,CAAC,CAAQ,EAAE,CAAQ,EAAE,EAAU;IAClD,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,UAAU,CAClB,mBAAmB,EACnB,UAAU,EAAE,IAAI,CAAC,CAAC,QAAQ,QAAQ,CAAC,CAAC,QAAQ,uEAAuE,CACpH,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,CAAQ,EAAE,CAAQ;IACpC,YAAY,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC;IAC1B,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,CAAQ,EAAE,CAAQ;IACzC,YAAY,CAAC,CAAC,EAAE,CAAC,EAAE,UAAU,CAAC,CAAC;IAC/B,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;AACvE,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,QAAQ,CAAC,KAAY,EAAE,MAAc;IACnD,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,UAAU,CAAC,gBAAgB,EAAE,wBAAwB,CAAC,CAAC;IACnE,CAAC;IACD,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,CAAC;QAChD,QAAQ,EAAE,KAAK,CAAC,QAAQ;KACzB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,CAAQ,EAAE,CAAQ;IACxC,YAAY,CAAC,CAAC,EAAE,CAAC,EAAE,SAAS,CAAC,CAAC;IAC9B,OAAO,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,KAAY,EAAW,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC;AACpE,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,KAAY,EAAW,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;AAEtE;;;;;;GAMG;AACH,MAAM,UAAU,OAAO,CACrB,KAAY,EACZ,EAAyB,EACzB,UAAkB;IAElB,MAAM,MAAM,GAAG,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC5B,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,UAAU,IAAI,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,UAAU,CAClB,cAAc,EACd,8DAA8D,UAAU,GAAG,CAC5E,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,KAAK,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC9B,IAAI,UAAU,KAAK,eAAe,EAAE,CAAC;YACnC,MAAM,IAAI,UAAU,CAClB,cAAc,EACd,cAAc,KAAK,CAAC,QAAQ,iBAAiB,UAAU,GAAG,eAAe,uBAAuB,CACjG,CAAC;QACJ,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,UAAU,CAAC,GAAG,eAAe,CAAC,CAAC;QACxE,QAAQ,EAAE,MAAM;KACjB,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CACzB,KAAY,EACZ,MAAc,EACd,UAAoC,EAAE;IAEtC,MAAM,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAC7C,OAAO,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE;QACnC,KAAK,EAAE,UAAU;QACjB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,qBAAqB,EAAE,MAAM;QAC7B,qBAAqB,EAAE,MAAM;QAC7B,GAAG,OAAO;KACX,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;AAC5B,CAAC"}

package/dist/prompt.d.ts

@@ -0,0 +1,46 @@
+/**
+ * Prompt-injection sanitisation for user-authored text that reaches a
+ * system prompt.
+ *
+ * A stored conversation summary, a profile field a student typed, a
+ * tool result quoting a web page — each is text the model will read as
+ * instructions if it is concatenated into the system prompt as-is.
+ * This strips role markers, override phrases and obfuscated separators
+ * before that concatenation, and reports which patterns it saw so a
+ * transport can log the attempt.
+ *
+ * Dependency-free on purpose: it is reached from the chat transport's
+ * `prepareMessages` seam, from tools, and from any package that
+ * assembles a prompt, none of which should pull anything else in for
+ * it. ADR-0008 routed it here from the product's runtime package.
+ *
+ * Returns an empty string when more than half of the original was
+ * injection patterns: that is a hostile payload, and feeding the
+ * remaining fragments to the model is worse than dropping it.
+ */
+export type InjectionPattern = {
+    name: string;
+    pattern: RegExp;
+};
+/**
+ * What is stripped. Exported so a product can extend the list for its
+ * own model or language without re-implementing the sweep.
+ */
+export declare const INJECTION_PATTERNS: readonly InjectionPattern[];
+export type InjectionReport = {
+    isInjection: boolean;
+    /** Names of the patterns that matched, for a log line. */
+    patterns: string[];
+};
+/**
+ * Which patterns the text carries, without changing it. Zero-width
+ * characters are both removed and replaced by spaces before matching,
+ * so neither obfuscation hides a marker.
+ */
+export declare function detectPromptInjection(text: string, patterns?: readonly InjectionPattern[]): InjectionReport;
+/**
+ * The text with every pattern replaced by a space and whitespace
+ * collapsed — or an empty string when the text was mostly patterns.
+ */
+export declare function sanitizeForSystemPrompt(text: string, patterns?: readonly InjectionPattern[]): string;
+//# sourceMappingURL=prompt.d.ts.map

package/dist/prompt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt.d.ts","sourceRoot":"","sources":["../src/prompt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAYH,MAAM,MAAM,gBAAgB,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjE;;;GAGG;AACH,eAAO,MAAM,kBAAkB,EAAE,SAAS,gBAAgB,EAuCzD,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,WAAW,EAAE,OAAO,CAAC;IACrB,0DAA0D;IAC1D,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,MAAM,EACZ,QAAQ,GAAE,SAAS,gBAAgB,EAAuB,GACzD,eAAe,CAajB;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,MAAM,EACZ,QAAQ,GAAE,SAAS,gBAAgB,EAAuB,GACzD,MAAM,CAsBR"}

package/dist/prompt.js

@@ -0,0 +1,116 @@
+/**
+ * Prompt-injection sanitisation for user-authored text that reaches a
+ * system prompt.
+ *
+ * A stored conversation summary, a profile field a student typed, a
+ * tool result quoting a web page — each is text the model will read as
+ * instructions if it is concatenated into the system prompt as-is.
+ * This strips role markers, override phrases and obfuscated separators
+ * before that concatenation, and reports which patterns it saw so a
+ * transport can log the attempt.
+ *
+ * Dependency-free on purpose: it is reached from the chat transport's
+ * `prepareMessages` seam, from tools, and from any package that
+ * assembles a prompt, none of which should pull anything else in for
+ * it. ADR-0008 routed it here from the product's runtime package.
+ *
+ * Returns an empty string when more than half of the original was
+ * injection patterns: that is a hostile payload, and feeding the
+ * remaining fragments to the model is worse than dropping it.
+ */
+const ZERO_WIDTH_CHARS = /[\u200B\u200C\u200D\u200E\u200F\uFEFF\u00AD\u2060\u2061\u2062\u2063\u2064]/g;
+function normalizeText(text) {
+    return {
+        withSpaces: text.replace(ZERO_WIDTH_CHARS, " ").normalize("NFKC"),
+        stripped: text.replace(ZERO_WIDTH_CHARS, "").normalize("NFKC"),
+    };
+}
+/**
+ * What is stripped. Exported so a product can extend the list for its
+ * own model or language without re-implementing the sweep.
+ */
+export const INJECTION_PATTERNS = [
+    { name: "[SYSTEM]", pattern: /\[SYSTEM\]/gi },
+    { name: "<<SYS>>", pattern: /<<SYS>>/gi },
+    { name: "<|system|>", pattern: /<\|system\|>/gi },
+    { name: "<|im_start|>", pattern: /<\|im_start\|>/gi },
+    { name: "<|im_end|>", pattern: /<\|im_end\|>/gi },
+    { name: "system: prefix", pattern: /^(SYSTEM|System|system)\s*:\s*/gm },
+    {
+        name: "ignore previous instructions",
+        pattern: /ignore\s+(?:all\s+)?previous\s+instructions?/gi,
+    },
+    { name: "disregard above", pattern: /disregard\s+(?:everything\s+)?above/gi },
+    { name: "forget everything", pattern: /forget\s+(?:all|everything)/gi },
+    {
+        name: "override instructions",
+        pattern: /override\s+(?:your\s+)?instructions?/gi,
+    },
+    {
+        name: "new instructions",
+        pattern: /(?:your\s+)?new\s+instructions?\s+(?:are|follow)/gi,
+    },
+    { name: "you are now", pattern: /you\s+are\s+now\s+/gi },
+    { name: "act as", pattern: /\bact\s+as\s+(?:a\s+|an\s+)?/gi },
+    { name: "pretend to be", pattern: /pretend\s+to\s+be\s+/gi },
+    { name: "roleplay as", pattern: /roleplay\s+as\s+/gi },
+    { name: "play the role", pattern: /play\s+(?:the\s+)?role\s+of\s+/gi },
+    { name: "separator ---", pattern: /\n{0,2}-{3,}\n{0,2}/g },
+    { name: "separator ===", pattern: /\n{0,2}={3,}\n{0,2}/g },
+    { name: "separator ###", pattern: /\n{0,2}#{3,}\n{0,2}/g },
+    { name: "script tag", pattern: /<script[\s>]/gi },
+    { name: "base64 data", pattern: /data:[^;]+;base64,/gi },
+    {
+        name: "do not follow",
+        pattern: /do\s+not\s+follow\s+(?:your\s+)?(?:previous\s+)?instructions?/gi,
+    },
+    {
+        name: "new system prompt",
+        pattern: /(?:new|updated?)\s+system\s+prompt/gi,
+    },
+];
+/**
+ * Which patterns the text carries, without changing it. Zero-width
+ * characters are both removed and replaced by spaces before matching,
+ * so neither obfuscation hides a marker.
+ */
+export function detectPromptInjection(text, patterns = INJECTION_PATTERNS) {
+    if (!text || text.trim().length === 0) {
+        return { isInjection: false, patterns: [] };
+    }
+    const { withSpaces, stripped } = normalizeText(text);
+    const matched = [];
+    for (const { name, pattern } of patterns) {
+        // Fresh instances: a global RegExp carries lastIndex between tests.
+        const a = new RegExp(pattern.source, pattern.flags);
+        const b = new RegExp(pattern.source, pattern.flags);
+        if (a.test(withSpaces) || b.test(stripped))
+            matched.push(name);
+    }
+    return { isInjection: matched.length > 0, patterns: matched };
+}
+/**
+ * The text with every pattern replaced by a space and whitespace
+ * collapsed — or an empty string when the text was mostly patterns.
+ */
+export function sanitizeForSystemPrompt(text, patterns = INJECTION_PATTERNS) {
+    if (!text || text.trim().length === 0)
+        return text;
+    const originalLength = text.length;
+    let sanitized = normalizeText(text).withSpaces;
+    for (const { pattern } of patterns) {
+        sanitized = sanitized.replace(new RegExp(pattern.source, pattern.flags), " ");
+    }
+    sanitized = sanitized
+        // A pattern replaced between two newlines leaves a whitespace-only
+        // line behind; drop those before collapsing blank lines.
+        .replace(/\n[ \t]+\n/g, "\n\n")
+        .replace(/\n{3,}/g, "\n\n")
+        .replace(/ {2,}/g, " ")
+        .trim();
+    const removed = originalLength - sanitized.length;
+    if (removed / originalLength > 0.5)
+        return "";
+    return sanitized;
+}
+//# sourceMappingURL=prompt.js.map

package/dist/prompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt.js","sourceRoot":"","sources":["../src/prompt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,MAAM,gBAAgB,GACpB,6EAA6E,CAAC;AAEhF,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO;QACL,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC;QACjE,QAAQ,EAAE,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC;KAC/D,CAAC;AACJ,CAAC;AAID;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAgC;IAC7D,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,cAAc,EAAE;IAC7C,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,WAAW,EAAE;IACzC,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,gBAAgB,EAAE;IACjD,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,kBAAkB,EAAE;IACrD,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,gBAAgB,EAAE;IACjD,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,kCAAkC,EAAE;IACvE;QACE,IAAI,EAAE,8BAA8B;QACpC,OAAO,EAAE,gDAAgD;KAC1D;IACD,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,uCAAuC,EAAE;IAC7E,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,+BAA+B,EAAE;IACvE;QACE,IAAI,EAAE,uBAAuB;QAC7B,OAAO,EAAE,wCAAwC;KAClD;IACD;QACE,IAAI,EAAE,kBAAkB;QACxB,OAAO,EAAE,oDAAoD;KAC9D;IACD,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,sBAAsB,EAAE;IACxD,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,gCAAgC,EAAE;IAC7D,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,wBAAwB,EAAE;IAC5D,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,oBAAoB,EAAE;IACtD,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,kCAAkC,EAAE;IACtE,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,sBAAsB,EAAE;IAC1D,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,sBAAsB,EAAE;IAC1D,EAAE,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,sBAAsB,EAAE;IAC1D,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,gBAAgB,EAAE;IACjD,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,sBAAsB,EAAE;IACxD;QACE,IAAI,EAAE,eAAe;QACrB,OAAO,EAAE,iEAAiE;KAC3E;IACD;QACE,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,sCAAsC;KAChD;CACF,CAAC;AAQF;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CACnC,IAAY,EACZ,WAAwC,kBAAkB;IAE1D,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACtC,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC;IAC9C,CAAC;IACD,MAAM,EAAE,UAAU,EAAE,QAAQ,EAAE,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACrD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,QAAQ,EAAE,CAAC;QACzC,oEAAoE;QACpE,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QACpD,MAAM,CAAC,GAAG,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;QACpD,IAAI,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AAChE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CACrC,IAAY,EACZ,WAAwC,kBAAkB;IAE1D,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEnD,MAAM,cAAc,GAAG,IAAI,CAAC,MAAM,CAAC;IACnC,IAAI,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC;IAC/C,KAAK,MAAM,EAAE,OAAO,EAAE,IAAI,QAAQ,EAAE,CAAC;QACnC,SAAS,GAAG,SAAS,CAAC,OAAO,CAC3B,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,EACzC,GAAG,CACJ,CAAC;IACJ,CAAC;IACD,SAAS,GAAG,SAAS;QACnB,mEAAmE;QACnE,yDAAyD;SACxD,OAAO,CAAC,aAAa,EAAE,MAAM,CAAC;SAC9B,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC;SAC1B,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC;SACtB,IAAI,EAAE,CAAC;IAEV,MAAM,OAAO,GAAG,cAAc,GAAG,SAAS,CAAC,MAAM,CAAC;IAClD,IAAI,OAAO,GAAG,cAAc,GAAG,GAAG;QAAE,OAAO,EAAE,CAAC;IAC9C,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/registry.d.ts

@@ -0,0 +1,61 @@
+/**
+ * Registries that survive a bundler duplicating the module they live in.
+ *
+ * A framework registry is a `Map` at module scope: the composition root
+ * writes to it once at startup and every later reader reads through it.
+ * That holds exactly as long as there is one instance of the module.
+ * Next.js does not guarantee that — its server build splits code into
+ * several bundles, and a package imported from two of them can be
+ * instantiated twice. The composition root then writes to one copy and
+ * a page reads the other.
+ *
+ * The failure is quiet, which is what makes it expensive. The first
+ * product to hit it saw `"No billing product configured"` logged by a
+ * page that rendered perfectly well: quota state came back null,
+ * feature checks fell through to their closed defaults, and nothing
+ * threw. Its workaround was a `server-only` side-effect module that
+ * every server file had to import, plus an architecture test naming the
+ * ten functions that read a registry — ADR-0005 forbids exactly that
+ * kind of import-side-effect registration, so the product had to
+ * violate the rule inside files the framework had shipped it.
+ *
+ * Keying the storage off `Symbol.for()` moves the map out of the module
+ * and into the realm's global symbol registry, which the bundler cannot
+ * duplicate. Every copy of the module then finds the same map, and the
+ * composition root can go back to running once.
+ *
+ * The limit, stated honestly: `globalThis` is per process. Node and
+ * Edge runtimes are separate processes and each still needs the
+ * composition root to run. This fixes duplicate modules, not duplicate
+ * runtimes.
+ */
+/**
+ * A `Map` shared by every copy of the module that asks for the same
+ * key.
+ *
+ * Use it wherever a registry is written by the composition root and
+ * read by request-time code:
+ *
+ *     const plans = createRegistry<PlanMap>("billing/plans");
+ *
+ * `key` is namespaced into the global symbol registry, so it needs to
+ * be unique across the framework — `"<package>/<registry>"` is the
+ * convention. The value type is not checked across copies: two modules
+ * that disagree about `T` for one key is a programming error this
+ * cannot catch, which is why the keys live next to their registries
+ * rather than in a shared list someone could reuse by accident.
+ */
+export declare function createRegistry<T>(key: string): Map<string, T>;
+/**
+ * A single shared value, for the registries that are not maps.
+ *
+ * `defaultProductSlug` is the one that motivated this: a `let` at
+ * module scope has exactly the duplication problem a `Map` does, and
+ * it is the value whose absence produces "No billing product
+ * configured".
+ */
+export declare function createRegistryRef<T>(key: string, initial: T): {
+    get(): T;
+    set(value: T): void;
+};
+//# sourceMappingURL=registry.d.ts.map

package/dist/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../src/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAWH;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,cAAc,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CA2B7D;AAED;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,EACjC,GAAG,EAAE,MAAM,EACX,OAAO,EAAE,CAAC,GACT;IAAE,GAAG,IAAI,CAAC,CAAC;IAAC,GAAG,CAAC,KAAK,EAAE,CAAC,GAAG,IAAI,CAAA;CAAE,CASnC"}