@jini-ai/cms 0.1.0

package/dist/settings/dictionaries/settings-dialog.ur.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-dialog.ur.js","sourceRoot":"","sources":["../../../src/settings/dictionaries/settings-dialog.ur.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAEhF,MAAM,CAAC,MAAM,kBAAkB,GAA2B;IACxD,2BAA2B,EAAE,8BAA8B;IAC3D,cAAc,EAAE,QAAQ;IACxB,4DAA4D,EAAE,kDAAkD;IAChH,eAAe,EAAE,SAAS;IAC1B,yEAAyE,EAAE,wFAAwF;IACnK,SAAS,EAAE,SAAS;IACpB,mBAAmB,EAAE,sBAAsB;IAC3C,uEAAuE,EAAE,qEAAqE;IAC9I,8EAA8E,EAAE,wEAAwE;IACxJ,YAAY,EAAE,UAAU;IACxB,gFAAgF,EAAE,kGAAkG;IACpL,kDAAkD,EAAE,6CAA6C;IACjG,6CAA6C,EAAE,gDAAgD;IAC/F,QAAQ,EAAE,QAAQ;IAClB,2CAA2C,EAAE,yDAAyD;IACtG,cAAc,EAAE,WAAW;IAC3B,uCAAuC,EAAE,qCAAqC;IAC9E,QAAQ,EAAE,SAAS;IACnB,mDAAmD,EAAE,kEAAkE;IACvH,8BAA8B,EAAE,2BAA2B;IAC3D,SAAS,EAAE,MAAM;IACjB,gBAAgB,EAAE,0BAA0B;IAC5C,wCAAwC,EAAE,4DAA4D;IACtG,mBAAmB,EAAE,6BAA6B;CACnD,CAAC"}

package/dist/settings/dictionaries/settings-dialog.zh-CN.d.ts

@@ -0,0 +1,3 @@
+/** @file zh-CN translation of the settings-dialog chrome keys (see `index.ts`). */
+export declare const SETTINGS_DIALOG_ZH_CN: Record<string, string>;
+//# sourceMappingURL=settings-dialog.zh-CN.d.ts.map

package/dist/settings/dictionaries/settings-dialog.zh-CN.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-dialog.zh-CN.d.ts","sourceRoot":"","sources":["../../../src/settings/dictionaries/settings-dialog.zh-CN.ts"],"names":[],"mappings":"AAAA,mFAAmF;AAEnF,eAAO,MAAM,qBAAqB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAyBxD,CAAC"}

package/dist/settings/dictionaries/settings-dialog.zh-CN.js

@@ -0,0 +1,28 @@
+/** @file zh-CN translation of the settings-dialog chrome keys (see `index.ts`). */
+export const SETTINGS_DIALOG_ZH_CN = {
+    "Choose Local CLI or BYOK.": "选择本地 CLI 或 BYOK。",
+    "Instructions": "指令",
+    "Applied to every assistant conversation in this workspace.": "应用于此工作区中的每一次助手对话。",
+    "Notifications": "通知",
+    "How you're told a task finished. Saved per operator, not per workspace.": "任务完成时如何通知你。按操作者保存，而非按工作区保存。",
+    "Privacy": "隐私",
+    "Dialog appearance": "对话框外观",
+    "Theme and accent color for this settings surface. Saved per operator.": "此设置界面的主题和强调色，按操作者保存。",
+    "Admin interface language. Applies to this settings panel's tab content only.": "管理界面语言，仅适用于此设置面板的标签页内容。",
+    "MCP server": "MCP 服务器",
+    "Connect an MCP client. Showing sample output — not yet wired to a live server.": "连接一个 MCP 客户端。当前显示的是示例输出——尚未接入实际服务器。",
+    "API keys for image, video, and audio generation.": "用于生成图像、视频和音频的 API 密钥。",
+    "Third-party accounts and APIs via Composio.": "通过 Composio 接入的第三方账户和 API。",
+    "Memory": "记忆",
+    "Saved facts and context for future chats.": "为后续对话保存的事实和上下文。",
+    "External MCP": "外部 MCP",
+    "Add MCP tools from external services.": "从外部服务添加 MCP 工具。",
+    "Skills": "技能",
+    "Custom skills your assistant can invoke mid-task.": "你的助手可以在任务执行过程中调用的自定义技能。",
+    "Version and runtime details.": "版本和运行时详细信息。",
+    "Version": "版本",
+    "Open as dialog": "以对话框方式打开",
+    "No MCP config store to connect to yet.": "目前还没有可连接的 MCP 配置存储。",
+    "All changes saved": "所有更改均已保存",
+};
+//# sourceMappingURL=settings-dialog.zh-CN.js.map

package/dist/settings/dictionaries/settings-dialog.zh-CN.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-dialog.zh-CN.js","sourceRoot":"","sources":["../../../src/settings/dictionaries/settings-dialog.zh-CN.ts"],"names":[],"mappings":"AAAA,mFAAmF;AAEnF,MAAM,CAAC,MAAM,qBAAqB,GAA2B;IAC3D,2BAA2B,EAAE,kBAAkB;IAC/C,cAAc,EAAE,IAAI;IACpB,4DAA4D,EAAE,mBAAmB;IACjF,eAAe,EAAE,IAAI;IACrB,yEAAyE,EAAE,6BAA6B;IACxG,SAAS,EAAE,IAAI;IACf,mBAAmB,EAAE,OAAO;IAC5B,uEAAuE,EAAE,sBAAsB;IAC/F,8EAA8E,EAAE,yBAAyB;IACzG,YAAY,EAAE,SAAS;IACvB,gFAAgF,EAAE,qCAAqC;IACvH,kDAAkD,EAAE,uBAAuB;IAC3E,6CAA6C,EAAE,4BAA4B;IAC3E,QAAQ,EAAE,IAAI;IACd,2CAA2C,EAAE,iBAAiB;IAC9D,cAAc,EAAE,QAAQ;IACxB,uCAAuC,EAAE,iBAAiB;IAC1D,QAAQ,EAAE,IAAI;IACd,mDAAmD,EAAE,yBAAyB;IAC9E,8BAA8B,EAAE,aAAa;IAC7C,SAAS,EAAE,IAAI;IACf,gBAAgB,EAAE,UAAU;IAC5B,wCAAwC,EAAE,qBAAqB;IAC/D,mBAAmB,EAAE,UAAU;CAChC,CAAC"}

package/dist/settings/dictionaries/settings-dialog.zh-TW.d.ts

@@ -0,0 +1,3 @@
+/** @file zh-TW translation of the settings-dialog chrome keys (see `index.ts`). */
+export declare const SETTINGS_DIALOG_ZH_TW: Record<string, string>;
+//# sourceMappingURL=settings-dialog.zh-TW.d.ts.map

package/dist/settings/dictionaries/settings-dialog.zh-TW.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-dialog.zh-TW.d.ts","sourceRoot":"","sources":["../../../src/settings/dictionaries/settings-dialog.zh-TW.ts"],"names":[],"mappings":"AAAA,mFAAmF;AAEnF,eAAO,MAAM,qBAAqB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAyBxD,CAAC"}

package/dist/settings/dictionaries/settings-dialog.zh-TW.js

@@ -0,0 +1,28 @@
+/** @file zh-TW translation of the settings-dialog chrome keys (see `index.ts`). */
+export const SETTINGS_DIALOG_ZH_TW = {
+    "Choose Local CLI or BYOK.": "選擇本機 CLI 或 BYOK。",
+    "Instructions": "指令",
+    "Applied to every assistant conversation in this workspace.": "套用於此工作區中的每一次助理對話。",
+    "Notifications": "通知",
+    "How you're told a task finished. Saved per operator, not per workspace.": "工作完成時如何通知你。依操作者儲存，而非依工作區儲存。",
+    "Privacy": "隱私",
+    "Dialog appearance": "對話方塊外觀",
+    "Theme and accent color for this settings surface. Saved per operator.": "此設定介面的主題與強調色，依操作者儲存。",
+    "Admin interface language. Applies to this settings panel's tab content only.": "管理介面語言，僅適用於此設定面板的分頁內容。",
+    "MCP server": "MCP 伺服器",
+    "Connect an MCP client. Showing sample output — not yet wired to a live server.": "連接一個 MCP 用戶端。目前顯示的是範例輸出——尚未接上實際伺服器。",
+    "API keys for image, video, and audio generation.": "用於產生圖片、影片與音訊的 API 金鑰。",
+    "Third-party accounts and APIs via Composio.": "透過 Composio 串接的第三方帳戶與 API。",
+    "Memory": "記憶",
+    "Saved facts and context for future chats.": "為日後對話保存的事實與脈絡資訊。",
+    "External MCP": "外部 MCP",
+    "Add MCP tools from external services.": "從外部服務新增 MCP 工具。",
+    "Skills": "技能",
+    "Custom skills your assistant can invoke mid-task.": "你的助理可以在工作進行中呼叫的自訂技能。",
+    "Version and runtime details.": "版本與執行環境詳細資料。",
+    "Version": "版本",
+    "Open as dialog": "以對話方塊開啟",
+    "No MCP config store to connect to yet.": "目前還沒有可連接的 MCP 設定儲存區。",
+    "All changes saved": "所有變更皆已儲存",
+};
+//# sourceMappingURL=settings-dialog.zh-TW.js.map

package/dist/settings/dictionaries/settings-dialog.zh-TW.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-dialog.zh-TW.js","sourceRoot":"","sources":["../../../src/settings/dictionaries/settings-dialog.zh-TW.ts"],"names":[],"mappings":"AAAA,mFAAmF;AAEnF,MAAM,CAAC,MAAM,qBAAqB,GAA2B;IAC3D,2BAA2B,EAAE,kBAAkB;IAC/C,cAAc,EAAE,IAAI;IACpB,4DAA4D,EAAE,mBAAmB;IACjF,eAAe,EAAE,IAAI;IACrB,yEAAyE,EAAE,6BAA6B;IACxG,SAAS,EAAE,IAAI;IACf,mBAAmB,EAAE,QAAQ;IAC7B,uEAAuE,EAAE,sBAAsB;IAC/F,8EAA8E,EAAE,wBAAwB;IACxG,YAAY,EAAE,SAAS;IACvB,gFAAgF,EAAE,qCAAqC;IACvH,kDAAkD,EAAE,uBAAuB;IAC3E,6CAA6C,EAAE,4BAA4B;IAC3E,QAAQ,EAAE,IAAI;IACd,2CAA2C,EAAE,kBAAkB;IAC/D,cAAc,EAAE,QAAQ;IACxB,uCAAuC,EAAE,iBAAiB;IAC1D,QAAQ,EAAE,IAAI;IACd,mDAAmD,EAAE,sBAAsB;IAC3E,8BAA8B,EAAE,cAAc;IAC9C,SAAS,EAAE,IAAI;IACf,gBAAgB,EAAE,SAAS;IAC3B,wCAAwC,EAAE,sBAAsB;IAChE,mBAAmB,EAAE,UAAU;CAChC,CAAC"}

package/dist/settings/ensure-definitions.d.ts

@@ -0,0 +1,88 @@
+import type { ClockPort, IdGeneratorPort, JsonValue, UUID } from "../core/ports.js";
+import type { PrincipalRepoPort } from "../identity/index.js";
+import type { SettingsRepoPort } from "./ports.js";
+import { type SettingValueSchema } from "./types.js";
+/**
+ * @file The one boot-time "register these definitions if they aren't already,
+ * and keep their defaults honest if they are" loop, shared by every registrar
+ * that backs a settings-dialog tab.
+ *
+ * This exists because the loop is genuinely identical everywhere it appears —
+ * the first host to use this library had one hand-written copy per tab before
+ * this helper existed, and each additional tab would have added another. A
+ * host's per-tab modules keep what actually differs (the namespace, the key
+ * list, each key's schema and default) and hand it to
+ * `ensureSettingDefinitions` as data.
+ *
+ * Note what is NOT abstracted here: a host may have domain-owned settings
+ * modules (comments, SEO, a public-assistant surface) with their own similar
+ * loop, deliberately left alone. Those are typically `ownerKind: "site"` and
+ * pair their registration with bespoke get/set services and their own
+ * permissions; the generic settings-dialog tabs this helper serves are
+ * `ownerKind: "core"` and read/write through the generic settings ledger
+ * routes with no bespoke service at all. Folding both shapes into one helper
+ * would mean parameterising the differences that matter.
+ */
+/** One key's registration data — everything `registerDefinitions` needs that
+ *  varies per key. */
+export interface SettingDefinitionSpec {
+    key: string;
+    schema: SettingValueSchema;
+    /**
+     * Every non-secret definition needs a NON-NULL default.
+     * `validateDefinitionInput` (`settings.ts`) rejects a null `default_json` for
+     * every non-secret definition, full stop — there is no nullable-schema
+     * carve-out in the actual check, regardless of what a nullable schema might
+     * suggest. A field that is nullable in spirit needs a sentinel instead (a
+     * distinguished non-null value the host's own code treats as "unset"). See
+     * `docs/decisions/settings-json-schema-variant.md` for why this diverges
+     * from this ledger's own originating design notes.
+     *
+     * Typed `Exclude<…, null>` rather than a bare primitive union: `DefinitionInput`
+     * already accepts any `JsonValue`, and a `{ type: "json" }` definition needs an
+     * array/object default. Excluding `null` at the type level keeps the non-null
+     * rule above a compile error rather than a boot-time throw.
+     */
+    defaultValue: Exclude<JsonValue, null>;
+    /**
+     * Bitmask over `SCOPE_BIT`. Defaults to `workspace`, which is what most
+     * settings-dialog tabs want: one operator's choice shouldn't silently
+     * become every workspace's. Pass `SCOPE_BIT.user` (or a mask including it)
+     * for a genuinely per-operator preference.
+     */
+    scopes?: number;
+}
+export interface EnsureSettingDefinitionsDeps {
+    settingsRepo: SettingsRepoPort;
+    clock: ClockPort;
+    ids: IdGeneratorPort;
+    principals: PrincipalRepoPort;
+}
+export interface EnsureSettingDefinitionsInput {
+    namespace: string;
+    definitions: readonly SettingDefinitionSpec[];
+    /** The trusted boot-time actor these writes are attributed to (mirrors a
+     *  host's other boot-time registrars' identical convention). */
+    systemPrincipalId: UUID;
+}
+/**
+ * Idempotently registers every definition in `input.definitions` under
+ * `input.namespace`, and reconciles the stored default of any that already
+ * exist to the default source declares. Safe to call on every boot.
+ *
+ * The reconcile half matters as much as the register half: registration is
+ * once-only, so without it a `defaultValue` edited in source never reaches an
+ * install that has booted before. Code owns `core` defaults; the stored row
+ * does not get to outvote it.
+ *
+ * All definitions registered here are `ownerKind: "core"` — a settings-dialog
+ * tab configures a platform-level capability, not per-site content. Per the
+ * namespace-fence CHECK, `owner_kind='core'` requires `workspaceId: null` at
+ * the DEFINITION level regardless of which workspace is booting, while the
+ * `scopes` bitmask still lets each workspace (or user) hold its own VALUE row.
+ *
+ * @complexity O(n) in the number of definitions — each is one
+ * skip-if-registered lookup plus at most one `registerDefinitions` call.
+ */
+export declare function ensureSettingDefinitions(deps: EnsureSettingDefinitionsDeps, input: EnsureSettingDefinitionsInput): Promise<void>;
+//# sourceMappingURL=ensure-definitions.d.ts.map

package/dist/settings/ensure-definitions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ensure-definitions.d.ts","sourceRoot":"","sources":["../../src/settings/ensure-definitions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACpF,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEnD,OAAO,EAAa,KAAK,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAGhE;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH;sBACsB;AACtB,MAAM,WAAW,qBAAqB;IACpC,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,kBAAkB,CAAC;IAC3B;;;;;;;;;;;;;;OAcG;IACH,YAAY,EAAE,OAAO,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACvC;;;;;OAKG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,4BAA4B;IAC3C,YAAY,EAAE,gBAAgB,CAAC;IAC/B,KAAK,EAAE,SAAS,CAAC;IACjB,GAAG,EAAE,eAAe,CAAC;IACrB,UAAU,EAAE,iBAAiB,CAAC;CAC/B;AAED,MAAM,WAAW,6BAA6B;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,SAAS,qBAAqB,EAAE,CAAC;IAC9C;oEACgE;IAChE,iBAAiB,EAAE,IAAI,CAAC;CACzB;AAMD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,wBAAwB,CAC5C,IAAI,EAAE,4BAA4B,EAClC,KAAK,EAAE,6BAA6B,GACnC,OAAO,CAAC,IAAI,CAAC,CAqEf"}

package/dist/settings/ensure-definitions.js

@@ -0,0 +1,91 @@
+import { resolveDefinitionRaw } from "./settings.js";
+import { SCOPE_BIT } from "./types.js";
+import { reconcileDefinitionDefault, registerDefinitions } from "./write-service.js";
+/** Boot-time infra work is trusted by construction — mirrors every other
+ *  `ensure*SettingDefinitions`'s identical shim. */
+const alwaysAllowBoot = async () => ({ allowed: true, reason: "system_boot" });
+/**
+ * Idempotently registers every definition in `input.definitions` under
+ * `input.namespace`, and reconciles the stored default of any that already
+ * exist to the default source declares. Safe to call on every boot.
+ *
+ * The reconcile half matters as much as the register half: registration is
+ * once-only, so without it a `defaultValue` edited in source never reaches an
+ * install that has booted before. Code owns `core` defaults; the stored row
+ * does not get to outvote it.
+ *
+ * All definitions registered here are `ownerKind: "core"` — a settings-dialog
+ * tab configures a platform-level capability, not per-site content. Per the
+ * namespace-fence CHECK, `owner_kind='core'` requires `workspaceId: null` at
+ * the DEFINITION level regardless of which workspace is booting, while the
+ * `scopes` bitmask still lets each workspace (or user) hold its own VALUE row.
+ *
+ * @complexity O(n) in the number of definitions — each is one
+ * skip-if-registered lookup plus at most one `registerDefinitions` call.
+ */
+export async function ensureSettingDefinitions(deps, input) {
+    const writeDeps = {
+        repo: deps.settingsRepo,
+        clock: deps.clock,
+        ids: deps.ids,
+        authorize: alwaysAllowBoot,
+        principals: deps.principals,
+    };
+    for (const def of input.definitions) {
+        const existing = await resolveDefinitionRaw({ repo: deps.settingsRepo }, { namespace: input.namespace, key: def.key, workspaceId: null });
+        if (existing) {
+            // Registration is once-only, but the DEFAULT is not. Without this, a
+            // `defaultValue` changed in source is unreachable in any install that
+            // has already booted — the stored `default_json` from first boot keeps
+            // winning, for every settings-dialog tab. See `reconcileDefinitionDefault`
+            // for the bug this closes.
+            //
+            // Three slots are deliberately left alone rather than reconciled:
+            // a non-`active` row (deprecated/tombstoned) is not ours to rewrite; a
+            // non-`core` row is operator-owned; and a row whose identity differs
+            // from the slot we asked for means `resolveDefinitionRaw` followed an
+            // alias, so rewriting it would silently change a DIFFERENT definition's
+            // default. `reconcileDefinitionDefault` would throw on the first two —
+            // this skips them quietly because boot must not fail on them.
+            const isSameSlot = existing.namespace === input.namespace && existing.key === def.key;
+            if (existing.status === "active" && existing.ownerKind === "core" && isSameSlot) {
+                await reconcileDefinitionDefault({
+                    deps: writeDeps,
+                    input: {
+                        namespace: input.namespace,
+                        key: def.key,
+                        workspaceId: null,
+                        defaultValue: def.defaultValue,
+                        callerPrincipalId: input.systemPrincipalId,
+                        authWorkspaceId: input.systemPrincipalId,
+                    },
+                });
+            }
+            continue;
+        }
+        await registerDefinitions({
+            deps: writeDeps,
+            input: {
+                callerPrincipalId: input.systemPrincipalId,
+                // Platform (core) definitions aren't scoped to any one workspace, but
+                // `registerDefinitions`'s authorization check still needs a workspace
+                // context to authorize against — the seeded workspace mirrors every
+                // other boot-time registrar's identical `authWorkspaceId` shape.
+                authWorkspaceId: input.systemPrincipalId,
+                definitions: [
+                    {
+                        namespace: input.namespace,
+                        key: def.key,
+                        ownerKind: "core",
+                        workspaceId: null,
+                        schema: def.schema,
+                        defaultValue: def.defaultValue,
+                        scopes: def.scopes ?? SCOPE_BIT.workspace,
+                        secret: false,
+                    },
+                ],
+            },
+        });
+    }
+}
+//# sourceMappingURL=ensure-definitions.js.map

package/dist/settings/ensure-definitions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ensure-definitions.js","sourceRoot":"","sources":["../../src/settings/ensure-definitions.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,oBAAoB,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,SAAS,EAA2B,MAAM,YAAY,CAAC;AAChE,OAAO,EAAE,0BAA0B,EAAE,mBAAmB,EAAoB,MAAM,oBAAoB,CAAC;AAqEvG;oDACoD;AACpD,MAAM,eAAe,GAAgB,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC;AAE5F;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,IAAkC,EAClC,KAAoC;IAEpC,MAAM,SAAS,GAAG;QAChB,IAAI,EAAE,IAAI,CAAC,YAAY;QACvB,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,SAAS,EAAE,eAAe;QAC1B,UAAU,EAAE,IAAI,CAAC,UAAU;KAC5B,CAAC;IAEF,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,WAAW,EAAE,CAAC;QACpC,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CACzC,EAAE,IAAI,EAAE,IAAI,CAAC,YAAY,EAAE,EAC3B,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,CAChE,CAAC;QACF,IAAI,QAAQ,EAAE,CAAC;YACb,qEAAqE;YACrE,sEAAsE;YACtE,uEAAuE;YACvE,2EAA2E;YAC3E,2BAA2B;YAC3B,EAAE;YACF,kEAAkE;YAClE,uEAAuE;YACvE,qEAAqE;YACrE,sEAAsE;YACtE,wEAAwE;YACxE,uEAAuE;YACvE,8DAA8D;YAC9D,MAAM,UAAU,GAAG,QAAQ,CAAC,SAAS,KAAK,KAAK,CAAC,SAAS,IAAI,QAAQ,CAAC,GAAG,KAAK,GAAG,CAAC,GAAG,CAAC;YACtF,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,IAAI,QAAQ,CAAC,SAAS,KAAK,MAAM,IAAI,UAAU,EAAE,CAAC;gBAChF,MAAM,0BAA0B,CAAC;oBAC/B,IAAI,EAAE,SAAS;oBACf,KAAK,EAAE;wBACL,SAAS,EAAE,KAAK,CAAC,SAAS;wBAC1B,GAAG,EAAE,GAAG,CAAC,GAAG;wBACZ,WAAW,EAAE,IAAI;wBACjB,YAAY,EAAE,GAAG,CAAC,YAAY;wBAC9B,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;wBAC1C,eAAe,EAAE,KAAK,CAAC,iBAAiB;qBACzC;iBACF,CAAC,CAAC;YACL,CAAC;YACD,SAAS;QACX,CAAC;QAED,MAAM,mBAAmB,CAAC;YACxB,IAAI,EAAE,SAAS;YACf,KAAK,EAAE;gBACL,iBAAiB,EAAE,KAAK,CAAC,iBAAiB;gBAC1C,sEAAsE;gBACtE,sEAAsE;gBACtE,oEAAoE;gBACpE,iEAAiE;gBACjE,eAAe,EAAE,KAAK,CAAC,iBAAiB;gBACxC,WAAW,EAAE;oBACX;wBACE,SAAS,EAAE,KAAK,CAAC,SAAS;wBAC1B,GAAG,EAAE,GAAG,CAAC,GAAG;wBACZ,SAAS,EAAE,MAAM;wBACjB,WAAW,EAAE,IAAI;wBACjB,MAAM,EAAE,GAAG,CAAC,MAAM;wBAClB,YAAY,EAAE,GAAG,CAAC,YAAY;wBAC9B,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,SAAS,CAAC,SAAS;wBACzC,MAAM,EAAE,KAAK;qBACd;iBACF;aACF;SACF,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/dist/settings/errors.d.ts

@@ -0,0 +1,36 @@
+/**
+ * @file Typed domain errors for `settings`.
+ *
+ * Purpose:
+ * One class per error this module originates, mirroring the
+ * `PresentationSettingsNotFoundError`/`PresentationSettingsValidationError`
+ * convention a host's own presentation-settings module may use. Route
+ * handlers map these 1:1 to HTTP codes.
+ */
+export declare class DefinitionInvalidError extends Error {
+}
+export declare class ScopeNotAllowedError extends Error {
+}
+export declare class SecretNotSupportedError extends Error {
+}
+export declare class ValueValidationFailedError extends Error {
+}
+export declare class RenameRetypeConflictError extends Error {
+}
+export declare class AliasDepthExceededError extends Error {
+}
+export declare class DefinitionTombstonedError extends Error {
+}
+export declare class DefinitionNotFoundError extends Error {
+}
+export declare class PurgeRequiredError extends Error {
+}
+export declare class ForbiddenError extends Error {
+}
+/** REQ-13: the target `principalId` does not resolve to an active principal in the request's workspace (INV-09). */
+export declare class PrincipalNotFoundError extends Error {
+    readonly principalId: string;
+    readonly workspaceId: string;
+    constructor(message: string, principalId: string, workspaceId: string);
+}
+//# sourceMappingURL=errors.d.ts.map

package/dist/settings/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/settings/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,qBAAa,sBAAuB,SAAQ,KAAK;CAAG;AACpD,qBAAa,oBAAqB,SAAQ,KAAK;CAAG;AAClD,qBAAa,uBAAwB,SAAQ,KAAK;CAAG;AACrD,qBAAa,0BAA2B,SAAQ,KAAK;CAAG;AACxD,qBAAa,yBAA0B,SAAQ,KAAK;CAAG;AACvD,qBAAa,uBAAwB,SAAQ,KAAK;CAAG;AACrD,qBAAa,yBAA0B,SAAQ,KAAK;CAAG;AACvD,qBAAa,uBAAwB,SAAQ,KAAK;CAAG;AACrD,qBAAa,kBAAmB,SAAQ,KAAK;CAAG;AAChD,qBAAa,cAAe,SAAQ,KAAK;CAAG;AAE5C,oHAAoH;AACpH,qBAAa,sBAAuB,SAAQ,KAAK;aAG7B,WAAW,EAAE,MAAM;aACnB,WAAW,EAAE,MAAM;gBAFnC,OAAO,EAAE,MAAM,EACC,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM;CAItC"}

package/dist/settings/errors.js

@@ -0,0 +1,40 @@
+/**
+ * @file Typed domain errors for `settings`.
+ *
+ * Purpose:
+ * One class per error this module originates, mirroring the
+ * `PresentationSettingsNotFoundError`/`PresentationSettingsValidationError`
+ * convention a host's own presentation-settings module may use. Route
+ * handlers map these 1:1 to HTTP codes.
+ */
+export class DefinitionInvalidError extends Error {
+}
+export class ScopeNotAllowedError extends Error {
+}
+export class SecretNotSupportedError extends Error {
+}
+export class ValueValidationFailedError extends Error {
+}
+export class RenameRetypeConflictError extends Error {
+}
+export class AliasDepthExceededError extends Error {
+}
+export class DefinitionTombstonedError extends Error {
+}
+export class DefinitionNotFoundError extends Error {
+}
+export class PurgeRequiredError extends Error {
+}
+export class ForbiddenError extends Error {
+}
+/** REQ-13: the target `principalId` does not resolve to an active principal in the request's workspace (INV-09). */
+export class PrincipalNotFoundError extends Error {
+    principalId;
+    workspaceId;
+    constructor(message, principalId, workspaceId) {
+        super(message);
+        this.principalId = principalId;
+        this.workspaceId = workspaceId;
+    }
+}
+//# sourceMappingURL=errors.js.map

package/dist/settings/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/settings/errors.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,MAAM,OAAO,sBAAuB,SAAQ,KAAK;CAAG;AACpD,MAAM,OAAO,oBAAqB,SAAQ,KAAK;CAAG;AAClD,MAAM,OAAO,uBAAwB,SAAQ,KAAK;CAAG;AACrD,MAAM,OAAO,0BAA2B,SAAQ,KAAK;CAAG;AACxD,MAAM,OAAO,yBAA0B,SAAQ,KAAK;CAAG;AACvD,MAAM,OAAO,uBAAwB,SAAQ,KAAK;CAAG;AACrD,MAAM,OAAO,yBAA0B,SAAQ,KAAK;CAAG;AACvD,MAAM,OAAO,uBAAwB,SAAQ,KAAK;CAAG;AACrD,MAAM,OAAO,kBAAmB,SAAQ,KAAK;CAAG;AAChD,MAAM,OAAO,cAAe,SAAQ,KAAK;CAAG;AAE5C,oHAAoH;AACpH,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAG7B;IACA;IAHlB,YACE,OAAe,EACC,WAAmB,EACnB,WAAmB;QAEnC,KAAK,CAAC,OAAO,CAAC,CAAC;QAHC,gBAAW,GAAX,WAAW,CAAQ;QACnB,gBAAW,GAAX,WAAW,CAAQ;IAGrC,CAAC;CACF"}

package/dist/settings/index.d.ts

@@ -0,0 +1,37 @@
+/**
+ * @file Public surface (barrel) for the `settings` library.
+ *
+ * A module's public contract is its `index.ts` — deep imports from outside
+ * this directory should go through here.
+ *
+ * A host's `repo.sqlite.ts` adapter and any one-time brownfield migration of a
+ * host's own legacy pre-ledger settings table are NOT part of this package —
+ * a fresh host has no legacy data to migrate, and a SQLite adapter names a
+ * host's own database schema. Both stay host-side, composed against the
+ * `SettingsRepoPort` this barrel exports.
+ */
+export { SCOPE_BIT, type SettingScope, type SettingOwnerKind, type DefinitionStatus, type ValueState, type RevisionEntityKind, type RevisionOp, type SettingValueSchema, type SettingDefinitionRecord, type SettingValueRecord, type SettingRevisionRecord, type SettingScopeContext, } from "./types.js";
+export { DefinitionInvalidError, ScopeNotAllowedError, SecretNotSupportedError, ValueValidationFailedError, RenameRetypeConflictError, AliasDepthExceededError, DefinitionTombstonedError, DefinitionNotFoundError, PurgeRequiredError, ForbiddenError, PrincipalNotFoundError, } from "./errors.js";
+export type { SettingsRepoPort } from "./ports.js";
+export { InMemorySettingsRepo } from "./repo.memory.js";
+export { type DefinitionInput, validateDefinitionInput, validateValueAgainstSchema, registerCoercer, invalidateDefinitionNamespaceCache, invalidateWorkspaceSettingsCache, resolveDefinitionRaw, resolveDefinition, type ResolvedSetting, getEffective, } from "./settings.js";
+export { type AuthorizeFn, type SettingsWriteServiceDeps, deriveRequiredPermission, type RegisterDefinitionsRequired, registerDefinitions, type SetValueRequired, set, type ClearValueRequired, clear, type ResetNamespaceRequired, resetNamespace, type RenameDefinitionRequired, renameDefinition, type RetypeDefinitionRequired, retypeDefinition, type ReconcileDefinitionDefaultRequired, reconcileDefinitionDefault, type DeprecateDefinitionRequired, deprecateDefinition, type TombstoneDefinitionRequired, tombstoneDefinition, } from "./write-service.js";
+export { type PurgeServiceDeps, type PurgeTenantSettingsRequired, purgeTenantSettings, } from "./purge-service.js";
+export { type ChangeFeedViewer, isRevisionVisibleTo, type ChangeFeedBatch, collectChangedNamespaces, } from "./change-feed.js";
+export { type DefinitionOpRequestItem, type DefinitionOpContext, type DefinitionOpHandler, NON_REGISTER_DEFINITION_OP_NAMES, type NonRegisterDefinitionOp, parseNonRegisterDefinitionOp, NON_REGISTER_DEFINITION_OPS, } from "./definitions-dispatch.js";
+export { type SettingDefinitionSpec, type EnsureSettingDefinitionsDeps, type EnsureSettingDefinitionsInput, ensureSettingDefinitions, } from "./ensure-definitions.js";
+export { INSTRUCTIONS_NAMESPACE, NOTIFICATIONS_NAMESPACE, PRIVACY_NAMESPACE, APPEARANCE_NAMESPACE, LANGUAGE_NAMESPACE, type EnsureSettingsUiTabDefinitionsInput, ensureSettingsUiTabDefinitions, } from "./ui-tab-definitions.js";
+export { type AgentWritablePreference, AGENT_PREFERENCE_WRITE_SCOPE, AGENT_WRITABLE_PREFERENCES, AGENT_WRITABLE_PREFERENCE_IDS, resolveAgentWritablePreference, AGENT_PREFERENCE_REQUIRED_SCOPE_BIT, } from "./agent-writable-preferences.js";
+/** The agent-tool catalog for this domain. */
+export { getSettingsAgentToolCatalog, type AgentToolDefinition as SettingsAgentToolDefinition, type AgentToolSideEffect as SettingsAgentToolSideEffect, } from "./agent-tools.js";
+/**
+ * The agent-tool wiring for this domain.
+ *
+ * `SettingsToolDeps` is declared structurally rather than derived from any host's request-scoped
+ * dependency bag, which is what lets a host satisfy it by passing whatever object it already has —
+ * the shape is the contract, so no host type needs to be named here.
+ */
+export { buildSettingsRegistrations, settingsDerivedRisk, type SettingsToolDeps, } from "./tool-registrations.js";
+/** The settings-dialog chrome copy (24 generic tab labels/subtitles), shared across every host. */
+export { SETTINGS_DIALOG_DICTIONARIES, translateSettingsDialog } from "./dictionaries/index.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/settings/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/settings/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EACL,SAAS,EACT,KAAK,YAAY,EACjB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,UAAU,EACf,KAAK,kBAAkB,EACvB,KAAK,UAAU,EACf,KAAK,kBAAkB,EACvB,KAAK,uBAAuB,EAC5B,KAAK,kBAAkB,EACvB,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,GACzB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,sBAAsB,EACtB,oBAAoB,EACpB,uBAAuB,EACvB,0BAA0B,EAC1B,yBAAyB,EACzB,uBAAuB,EACvB,yBAAyB,EACzB,uBAAuB,EACvB,kBAAkB,EAClB,cAAc,EACd,sBAAsB,GACvB,MAAM,aAAa,CAAC;AAErB,YAAY,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAEnD,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAExD,OAAO,EACL,KAAK,eAAe,EACpB,uBAAuB,EACvB,0BAA0B,EAC1B,eAAe,EACf,kCAAkC,EAClC,gCAAgC,EAChC,oBAAoB,EACpB,iBAAiB,EACjB,KAAK,eAAe,EACpB,YAAY,GACb,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,KAAK,WAAW,EAChB,KAAK,wBAAwB,EAC7B,wBAAwB,EACxB,KAAK,2BAA2B,EAChC,mBAAmB,EACnB,KAAK,gBAAgB,EACrB,GAAG,EACH,KAAK,kBAAkB,EACvB,KAAK,EACL,KAAK,sBAAsB,EAC3B,cAAc,EACd,KAAK,wBAAwB,EAC7B,gBAAgB,EAChB,KAAK,wBAAwB,EAC7B,gBAAgB,EAChB,KAAK,kCAAkC,EACvC,0BAA0B,EAC1B,KAAK,2BAA2B,EAChC,mBAAmB,EACnB,KAAK,2BAA2B,EAChC,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,KAAK,gBAAgB,EACrB,KAAK,2BAA2B,EAChC,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EACL,KAAK,gBAAgB,EACrB,mBAAmB,EACnB,KAAK,eAAe,EACpB,wBAAwB,GACzB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EACL,KAAK,uBAAuB,EAC5B,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,gCAAgC,EAChC,KAAK,uBAAuB,EAC5B,4BAA4B,EAC5B,2BAA2B,GAC5B,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EACL,KAAK,qBAAqB,EAC1B,KAAK,4BAA4B,EACjC,KAAK,6BAA6B,EAClC,wBAAwB,GACzB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,iBAAiB,EACjB,oBAAoB,EACpB,kBAAkB,EAClB,KAAK,mCAAmC,EACxC,8BAA8B,GAC/B,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,KAAK,uBAAuB,EAC5B,4BAA4B,EAC5B,0BAA0B,EAC1B,6BAA6B,EAC7B,8BAA8B,EAC9B,mCAAmC,GACpC,MAAM,iCAAiC,CAAC;AAEzC,8CAA8C;AAC9C,OAAO,EACL,2BAA2B,EAC3B,KAAK,mBAAmB,IAAI,2BAA2B,EACvD,KAAK,mBAAmB,IAAI,2BAA2B,GACxD,MAAM,kBAAkB,CAAC;AAE1B;;;;;;GAMG;AACH,OAAO,EACL,0BAA0B,EAC1B,mBAAmB,EACnB,KAAK,gBAAgB,GACtB,MAAM,yBAAyB,CAAC;AAEjC,mGAAmG;AACnG,OAAO,EAAE,4BAA4B,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC"}

package/dist/settings/index.js

@@ -0,0 +1,36 @@
+/**
+ * @file Public surface (barrel) for the `settings` library.
+ *
+ * A module's public contract is its `index.ts` — deep imports from outside
+ * this directory should go through here.
+ *
+ * A host's `repo.sqlite.ts` adapter and any one-time brownfield migration of a
+ * host's own legacy pre-ledger settings table are NOT part of this package —
+ * a fresh host has no legacy data to migrate, and a SQLite adapter names a
+ * host's own database schema. Both stay host-side, composed against the
+ * `SettingsRepoPort` this barrel exports.
+ */
+export { SCOPE_BIT, } from "./types.js";
+export { DefinitionInvalidError, ScopeNotAllowedError, SecretNotSupportedError, ValueValidationFailedError, RenameRetypeConflictError, AliasDepthExceededError, DefinitionTombstonedError, DefinitionNotFoundError, PurgeRequiredError, ForbiddenError, PrincipalNotFoundError, } from "./errors.js";
+export { InMemorySettingsRepo } from "./repo.memory.js";
+export { validateDefinitionInput, validateValueAgainstSchema, registerCoercer, invalidateDefinitionNamespaceCache, invalidateWorkspaceSettingsCache, resolveDefinitionRaw, resolveDefinition, getEffective, } from "./settings.js";
+export { deriveRequiredPermission, registerDefinitions, set, clear, resetNamespace, renameDefinition, retypeDefinition, reconcileDefinitionDefault, deprecateDefinition, tombstoneDefinition, } from "./write-service.js";
+export { purgeTenantSettings, } from "./purge-service.js";
+export { isRevisionVisibleTo, collectChangedNamespaces, } from "./change-feed.js";
+export { NON_REGISTER_DEFINITION_OP_NAMES, parseNonRegisterDefinitionOp, NON_REGISTER_DEFINITION_OPS, } from "./definitions-dispatch.js";
+export { ensureSettingDefinitions, } from "./ensure-definitions.js";
+export { INSTRUCTIONS_NAMESPACE, NOTIFICATIONS_NAMESPACE, PRIVACY_NAMESPACE, APPEARANCE_NAMESPACE, LANGUAGE_NAMESPACE, ensureSettingsUiTabDefinitions, } from "./ui-tab-definitions.js";
+export { AGENT_PREFERENCE_WRITE_SCOPE, AGENT_WRITABLE_PREFERENCES, AGENT_WRITABLE_PREFERENCE_IDS, resolveAgentWritablePreference, AGENT_PREFERENCE_REQUIRED_SCOPE_BIT, } from "./agent-writable-preferences.js";
+/** The agent-tool catalog for this domain. */
+export { getSettingsAgentToolCatalog, } from "./agent-tools.js";
+/**
+ * The agent-tool wiring for this domain.
+ *
+ * `SettingsToolDeps` is declared structurally rather than derived from any host's request-scoped
+ * dependency bag, which is what lets a host satisfy it by passing whatever object it already has —
+ * the shape is the contract, so no host type needs to be named here.
+ */
+export { buildSettingsRegistrations, settingsDerivedRisk, } from "./tool-registrations.js";
+/** The settings-dialog chrome copy (24 generic tab labels/subtitles), shared across every host. */
+export { SETTINGS_DIALOG_DICTIONARIES, translateSettingsDialog } from "./dictionaries/index.js";
+//# sourceMappingURL=index.js.map

package/dist/settings/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/settings/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EACL,SAAS,GAYV,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,sBAAsB,EACtB,oBAAoB,EACpB,uBAAuB,EACvB,0BAA0B,EAC1B,yBAAyB,EACzB,uBAAuB,EACvB,yBAAyB,EACzB,uBAAuB,EACvB,kBAAkB,EAClB,cAAc,EACd,sBAAsB,GACvB,MAAM,aAAa,CAAC;AAIrB,OAAO,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAC;AAExD,OAAO,EAEL,uBAAuB,EACvB,0BAA0B,EAC1B,eAAe,EACf,kCAAkC,EAClC,gCAAgC,EAChC,oBAAoB,EACpB,iBAAiB,EAEjB,YAAY,GACb,MAAM,eAAe,CAAC;AAEvB,OAAO,EAGL,wBAAwB,EAExB,mBAAmB,EAEnB,GAAG,EAEH,KAAK,EAEL,cAAc,EAEd,gBAAgB,EAEhB,gBAAgB,EAEhB,0BAA0B,EAE1B,mBAAmB,EAEnB,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAGL,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAEL,mBAAmB,EAEnB,wBAAwB,GACzB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAIL,gCAAgC,EAEhC,4BAA4B,EAC5B,2BAA2B,GAC5B,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAIL,wBAAwB,GACzB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,iBAAiB,EACjB,oBAAoB,EACpB,kBAAkB,EAElB,8BAA8B,GAC/B,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAEL,4BAA4B,EAC5B,0BAA0B,EAC1B,6BAA6B,EAC7B,8BAA8B,EAC9B,mCAAmC,GACpC,MAAM,iCAAiC,CAAC;AAEzC,8CAA8C;AAC9C,OAAO,EACL,2BAA2B,GAG5B,MAAM,kBAAkB,CAAC;AAE1B;;;;;;GAMG;AACH,OAAO,EACL,0BAA0B,EAC1B,mBAAmB,GAEpB,MAAM,yBAAyB,CAAC;AAEjC,mGAAmG;AACnG,OAAO,EAAE,4BAA4B,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC"}

package/dist/settings/ports.d.ts

@@ -0,0 +1,117 @@
+import type { UUID } from "../core/ports.js";
+import type { SettingDefinitionRecord, SettingRevisionRecord, SettingValueRecord } from "./types.js";
+/**
+ * @file Port contract for the `settings` library.
+ *
+ * Purpose:
+ * Dependency-inversion seam (port/adapter rule-of-two) for the 5 settings tables.
+ * Deliberately does NOT declare a principal-lookup method — REQ-13's
+ * target-principal check reuses `identity.PrincipalRepoPort.findById`
+ * directly (reuse, not a new port).
+ *
+ * `transaction` gives `write-service.ts`/`purge-service.ts` the same-tx
+ * guarantee INV-01/INV-06 depend on (value/definition row + its revision row
+ * must commit together, or not at all).
+ *
+ * Interfaces and types only — no feature logic.
+ */
+export interface SettingsRepoPort {
+    findActiveDefinition(required: {
+        namespace: string;
+        key: string;
+        workspaceId: UUID | null;
+    }): Promise<SettingDefinitionRecord | null>;
+    findDefinitionBySettingId(required: {
+        settingId: UUID;
+        version?: number;
+    }): Promise<SettingDefinitionRecord | null>;
+    listActiveDefinitions(required: {
+        workspaceId: UUID | null;
+    }): Promise<SettingDefinitionRecord[]>;
+    saveDefinition(record: SettingDefinitionRecord): Promise<void>;
+    getGlobalValue(settingId: UUID): Promise<SettingValueRecord | null>;
+    getWorkspaceValue(required: {
+        workspaceId: UUID;
+        settingId: UUID;
+    }): Promise<SettingValueRecord | null>;
+    getUserValue(required: {
+        workspaceId: UUID;
+        principalId: UUID;
+        settingId: UUID;
+    }): Promise<SettingValueRecord | null>;
+    saveGlobalValue(record: SettingValueRecord): Promise<void>;
+    saveWorkspaceValue(record: SettingValueRecord): Promise<void>;
+    saveUserValue(record: SettingValueRecord): Promise<void>;
+    listWorkspaceValues(required: {
+        workspaceId: UUID;
+    }): Promise<SettingValueRecord[]>;
+    listUserValues(required: {
+        workspaceId: UUID;
+        principalId: UUID;
+    }): Promise<SettingValueRecord[]>;
+    /**
+     * Every `setting_values_user` row for a workspace, across ALL principals
+     * (not just one) — needed by `purge-service.ts`'s full-tenant teardown path,
+     * which must clear the FK-blocking `setting_values_user` rows
+     * for every principal in the workspace, not just one caller-known id.
+     */
+    listUserValuesByWorkspace(required: {
+        workspaceId: UUID;
+    }): Promise<SettingValueRecord[]>;
+    deleteWorkspaceValue(required: {
+        workspaceId: UUID;
+        settingId: UUID;
+    }): Promise<void>;
+    deleteUserValue(required: {
+        workspaceId: UUID;
+        principalId: UUID;
+        settingId: UUID;
+    }): Promise<void>;
+    /** Appends a revision and returns its assigned `seq` (used to stamp the paired value row). */
+    appendRevision(record: Omit<SettingRevisionRecord, "seq">): Promise<number>;
+    listRevisions(required: {
+        settingId: UUID;
+    }): Promise<SettingRevisionRecord[]>;
+    /**
+     * Revisions with `seq` strictly greater than `sinceSeq`, oldest first, capped at `limit`, and
+     * restricted to those `workspaceId` could possibly care about.
+     *
+     * Exists for change detection across PROCESSES. `seq` is a monotonic autoincrement in the shared
+     * database, so a poller in one process observes writes made by another process (e.g. an agent
+     * daemon) — a separate OS process with its own connection — without any IPC between them.
+     *
+     * `limit` bounds a client that reconnects after a long absence: it drains in pages rather than
+     * loading an unbounded backlog into memory.
+     *
+     * **`workspaceId` is a page-sizing predicate, not the disclosure boundary.** The ledger is global
+     * — one store holds every workspace's revisions — so without it a `limit`-sized page is filled by
+     * whichever tenant writes fastest, and a quiet workspace's own change waits behind a busy
+     * neighbour's backlog. That is an observable cross-tenant timing channel and, at sustained write
+     * rates above `limit` per poll interval, a feed that never catches up at all. Implementations must
+     * match rows whose `workspaceId` is either `null` (platform definitions and `global`-scope values,
+     * which every workspace resolves through) or equal to the argument — deliberately a SUPERSET of
+     * what `change-feed.ts#isRevisionVisibleTo` permits, which stays the sole authority on disclosure.
+     */
+    listRevisionsSince(required: {
+        sinceSeq: number;
+        limit: number;
+        workspaceId: UUID;
+    }): Promise<SettingRevisionRecord[]>;
+    /** The newest assigned `seq`, or 0 when the ledger is empty — a subscriber's starting cursor. */
+    maxRevisionSeq(): Promise<number>;
+    /**
+     * Runs `fn` with the guarantee that all repo calls inside it commit or roll
+     * back together. Every adapter must honour this — it is what makes a
+     * composite write like `resetNamespace` all-or-nothing, and the contract
+     * suite asserts it against all of them rather than only the durable one.
+     *
+     * **Not reentrant.** Calling this while another `transaction` on the same
+     * repo is open must fail loudly, never silently join. An adapter cannot tell
+     * a genuine nested call from an unrelated concurrent one, and joining a
+     * stranger's transaction makes it inherit that transaction's rollback. A
+     * caller that needs several writes to commit together opens ONE transaction
+     * and passes `skipTransaction` to the inner writes.
+     */
+    transaction<T>(fn: () => Promise<T>): Promise<T>;
+}
+//# sourceMappingURL=ports.d.ts.map

package/dist/settings/ports.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ports.d.ts","sourceRoot":"","sources":["../../src/settings/ports.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,KAAK,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAErG;;;;;;;;;;;;;;GAcG;AACH,MAAM,WAAW,gBAAgB;IAC/B,oBAAoB,CAAC,QAAQ,EAAE;QAC7B,SAAS,EAAE,MAAM,CAAC;QAClB,GAAG,EAAE,MAAM,CAAC;QACZ,WAAW,EAAE,IAAI,GAAG,IAAI,CAAC;KAC1B,GAAG,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAAC;IAC5C,yBAAyB,CAAC,QAAQ,EAAE;QAClC,SAAS,EAAE,IAAI,CAAC;QAChB,OAAO,CAAC,EAAE,MAAM,CAAC;KAClB,GAAG,OAAO,CAAC,uBAAuB,GAAG,IAAI,CAAC,CAAC;IAC5C,qBAAqB,CAAC,QAAQ,EAAE;QAAE,WAAW,EAAE,IAAI,GAAG,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,uBAAuB,EAAE,CAAC,CAAC;IAClG,cAAc,CAAC,MAAM,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAE/D,cAAc,CAAC,SAAS,EAAE,IAAI,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC;IACpE,iBAAiB,CAAC,QAAQ,EAAE;QAAE,WAAW,EAAE,IAAI,CAAC;QAAC,SAAS,EAAE,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC;IACxG,YAAY,CAAC,QAAQ,EAAE;QACrB,WAAW,EAAE,IAAI,CAAC;QAClB,WAAW,EAAE,IAAI,CAAC;QAClB,SAAS,EAAE,IAAI,CAAC;KACjB,GAAG,OAAO,CAAC,kBAAkB,GAAG,IAAI,CAAC,CAAC;IACvC,eAAe,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3D,kBAAkB,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC9D,aAAa,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEzD,mBAAmB,CAAC,QAAQ,EAAE;QAAE,WAAW,EAAE,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC;IACpF,cAAc,CAAC,QAAQ,EAAE;QAAE,WAAW,EAAE,IAAI,CAAC;QAAC,WAAW,EAAE,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC;IAClG;;;;;OAKG;IACH,yBAAyB,CAAC,QAAQ,EAAE;QAAE,WAAW,EAAE,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAAC;IAC1F,oBAAoB,CAAC,QAAQ,EAAE;QAAE,WAAW,EAAE,IAAI,CAAC;QAAC,SAAS,EAAE,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtF,eAAe,CAAC,QAAQ,EAAE;QAAE,WAAW,EAAE,IAAI,CAAC;QAAC,WAAW,EAAE,IAAI,CAAC;QAAC,SAAS,EAAE,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEpG,8FAA8F;IAC9F,cAAc,CAAC,MAAM,EAAE,IAAI,CAAC,qBAAqB,EAAE,KAAK,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5E,aAAa,CAAC,QAAQ,EAAE;QAAE,SAAS,EAAE,IAAI,CAAA;KAAE,GAAG,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAAC;IAC/E;;;;;;;;;;;;;;;;;;;OAmBG;IACH,kBAAkB,CAAC,QAAQ,EAAE;QAC3B,QAAQ,EAAE,MAAM,CAAC;QACjB,KAAK,EAAE,MAAM,CAAC;QACd,WAAW,EAAE,IAAI,CAAC;KACnB,GAAG,OAAO,CAAC,qBAAqB,EAAE,CAAC,CAAC;IACrC,iGAAiG;IACjG,cAAc,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;IAElC;;;;;;;;;;;;OAYG;IACH,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC;CAClD"}

package/dist/settings/ports.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=ports.js.map

package/dist/settings/ports.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ports.js","sourceRoot":"","sources":["../../src/settings/ports.ts"],"names":[],"mappings":""}