@ketvietlab/ketjs 0.1.2 → 0.1.5

package/dist/index.d.ts

@@ -1,26 +1,28 @@
 export { defineModule, defineTheme } from './kernel/define.ts';
-export { defineApp, defineWorkspace, composeWorkspace, explainWorkspace } from './kernel/workspace.ts';
+export { defineDeployment, defineWorkspace, composeWorkspace, explainWorkspace } from './kernel/workspace.ts';
 export { resolveWorkspace } from './kernel/modules.ts';
-export type { ModuleRef, ModulePath, AppDeclaration, AppSpec, WorkspaceDeclaration, } from './kernel/workspace.ts';
+export type { ModuleRef, ModulePath, DeploymentDeclaration, DeploymentSpec, NavigationSpec, WorkspaceDeclaration, } from './kernel/workspace.ts';
 export type { ModuleSource, ResolvedModuleInfo, ResolvedWorkspace, ResolveWorkspaceOptions, } from './kernel/modules.ts';
-export type { ContentTypeDef, TaxonomyDef, ComposedContentType, ComposedTaxonomy, } from './types.ts';
+export type { ContentTypeDef, TaxonomyDef, ComposedContentType, ComposedTaxonomy, RouteEntry, HttpRouteContract, JsonSchema, Manifest, ModulePermissionsDef, PermissionBundleDef, PermissionCatalogue, PermissionExemptionDef, PermissionExemptionReason, PermissionFunctionDef, PermissionLabels, PermissionPosture, PermissionRisk, RoleTemplateDef, CompiledPermissionBundle, CompiledRoleTemplate, } from './types.ts';
 export { compose } from './kernel/compose.ts';
-export { validateLayout, formatLayoutErrors } from './kernel/layout.ts';
-export { createAppRegistry, restrictManifest } from './kernel/apps.ts';
-export { buildMenu, activeApp } from './kernel/menu.ts';
+export { compilePermissionBundles, permissionDigest } from './kernel/permissions.ts';
+export type { CompilePermissionOptions } from './kernel/permissions.ts';
+export { validateLayout, formatLayoutErrors, withPlacementIds, placementIdErrors, diffPlacements, isPlacementId, walkPlacements, countPlacements, MAX_LAYOUT_DEPTH, MAX_LAYOUT_NODES, } from './kernel/layout.ts';
+export { buildMenu, activeMenuRoot } from './kernel/menu.ts';
 export type { MenuNode, MenuOptions } from './kernel/menu.ts';
-export { translator, missingMessages, formatMissing, PSEUDO_LOCALE } from './kernel/i18n.ts';
+export { translator, missingMessages, formatMissing, dateTimeFormatter, PSEUDO_LOCALE, } from './kernel/i18n.ts';
 export type { Translator, Message, Catalog, Messages } from './kernel/i18n.ts';
-export type { AppRegistry, AppInfo, AppState } from './kernel/apps.ts';
-export type { Placement, LayoutError } from './kernel/layout.ts';
+export type { Placement, LayoutError, IdentifiedPlacement, PlacementChange } from './kernel/layout.ts';
 export { diffManifests, formatDiff } from './kernel/diff.ts';
 export { KetError, Diagnostics } from './kernel/errors.ts';
 export { isDateText } from './kernel/types.ts';
 export { defineFn, callFn, registerFunctions, _resetIdempotency } from './server/fn.ts';
+export { enforcePolicy } from './server/policy.ts';
+export type { PolicyDecision, PolicyDenialEvidence } from './server/policy.ts';
 export { project } from './server/project.ts';
-export { createKetServer } from './server/http.ts';
-export { bootApp, serveApp } from './server/boot.ts';
-export type { ServeSpec, ServeContext, SessionResolveContext, PagesSpec, BootedApp, BootAppOptions, Route, } from './server/boot.ts';
+export { createKetServer, statusForError, wantsHtml } from './server/http.ts';
+export { bootDeployment, serveDeployment } from './server/boot.ts';
+export type { ServeSpec, ServeContext, ClientCompatibilityPolicy, SessionResolveContext, RequestIdentity, RequestIdentityResolveContext, PagesSpec, BootedDeployment, BootDeploymentOptions, Route, } from './server/boot.ts';
 export { bootRuntime } from './server/runtime.ts';
 export type { BootedRuntime } from './server/runtime.ts';
 export { bootWorker, serveWorker } from './server/worker.ts';
@@ -30,49 +32,68 @@ export type { RouteParams } from './kernel/routes.ts';
 export { page, fragment, navigablePage, isNavigationRequest, NAVIGATION_HEADER, NAVIGATION_VERSION, NAVIGATION_TYPE, json, text, bytes, streamed, raw, document, withHeaders, } from './server/respond.ts';
 export type { Html, ResponseBody, RouteResult } from './server/respond.ts';
 export { readConfig, sqliteStore } from './server/config.ts';
-export type { RuntimeConfig, OpenStore } from './server/config.ts';
-export { storageFromConfig, localStorage, s3Storage, namespacedStorage, effectStorage, } from './server/storage/index.ts';
+export type { RuntimeConfig, OpenStore, PublicStorageConfig } from './server/config.ts';
+export { storageFromConfig, localStorage, s3Storage, namespacedStorage, effectStorage, withPublicStorage, } from './server/storage/index.ts';
 export { signRequest, presignUrl, sha256 } from './server/storage/index.ts';
 export type { Storage, Stored, OpenStorage, S3StorageOptions, StorageEffect } from './server/storage/index.ts';
 export type { SigV4Credentials } from './server/storage/index.ts';
 export { effectTransport, memoryTransport, unavailableTransport, validateOutboundMessage, } from './server/transport/index.ts';
 export type { MemoryTransport, OpenTransport, OutboundMessage, OutboundTransport, TransportAddress, TransportEffect, TransportReceipt, } from './server/transport/index.ts';
+export { bufferedLog, consoleLog, CORE_EVENTS, createLogger, describeError, fileLog, isolatedLog, leveledLog, logFromConfig, memoryLog, MODULE_EVENT, multiLog, nullLog, prettyLog, redactLog, traceOf, } from './server/log/index.ts';
+export type { ConsoleLogOptions, CoreEvent, FileLogOptions, LogContext, LogDriver, LogEntry, LogError, LogFields, LogLevel, LogProcess, LogRecord, Logger, MemoryLog, OpenLog, } from './server/log/index.ts';
+export { classificationInventory, formatClassification } from './kernel/classification.ts';
+export { MIN_EVERY_MS, parseEvery, tickAt, ticksBetween, validateSchedule } from './kernel/schedule.ts';
+export { claimDue } from './server/schedule.ts';
+export { claimRateSlot, pruneRateSlots } from './server/ratelimit.ts';
+export { auditHash, auditId } from './kernel/audit.ts';
+export { nextSequenceNumber, peekSequenceNumber, sequenceKey } from './server/sequence.ts';
+export type { SequenceOptions } from './server/sequence.ts';
+export type { RatePolicy, RateVerdict } from './server/ratelimit.ts';
+export type { ScheduleClaim } from './server/schedule.ts';
+export type { ClassificationInventory, ClassifiedField } from './kernel/classification.ts';
 export { multipart } from './server/multipart.ts';
 export type { MultipartPart, MultipartOptions } from './server/multipart.ts';
-export { createStreams, memoryStreamStore, dbStreamStore } from './server/stream.ts';
+export { createStreams, memoryStreamStore, dbStreamStore, streamsOf } from './server/stream.ts';
 export { createSessions, memorySessionStore, dbSessionStore, parseCookies, SESSION_COOKIE, } from './server/session.ts';
 export type { Sessions, SessionOptions, SessionContext, SessionStore, SessionRecord, } from './server/session.ts';
 export type { StreamStore, Writer } from './server/stream.ts';
 export { createQueue, queueFor, JOB_CHANNEL } from './server/queue.ts';
 export type { DurableJob, JobState, Queue, QueueListOptions } from './server/queue.ts';
 export { createIdempotency } from './server/idem.ts';
+export { FormValidationError, assertForm, invalidForm, issuesFromFieldErrors, } from './server/form.ts';
+export { compileReportTemplate, interFontUrl, parseImage, parseReportMarkup, parseTrueType, renderPdf, renderReportHtml, } from './pdf/index.ts';
+export type { PdfImage, PdfRenderOptions, ReportDocument, ReportElement, ReportNode, ReportTag, TrueTypeFont, } from './pdf/index.ts';
 export { sqliteAdapter } from './data/sqlite.ts';
 export { assertAdapter, ADAPTER_METHODS } from './data/adapter.ts';
 export { createAdapterPool } from './data/pool.ts';
 export type { AdapterPool, PoolOptions } from './data/pool.ts';
-export { migrateOne, migrateFleet, formatFleet } from './data/fleet.ts';
-export type { MigrationResult } from './data/fleet.ts';
+export { migrateOne, confirmManualMigration, verifyPhysicalSchema, migrateFleet, formatFleet, ManualMigrationConfirmationError, } from './data/fleet.ts';
+export type { MigrationResult, PhysicalSchemaVerification } from './data/fleet.ts';
+export { physicalSchemaIssues } from './data/physical.ts';
 export { from, deleteFrom, table, asc, desc, Query } from './data/query.ts';
 export type { Dialect, Sql, Table, Order, GroupSpec, AggregateSpec, GroupOrder, GroupRow, } from './data/query.ts';
-export { dateBucket, isTimezone, assertTimezone, localDateTimeToUtc, localDayRange } from './data/time.ts';
+export { dateBucket, isTimezone, assertTimezone, localDateTimeToUtc, localDayRange, GROUP_INTERVALS, isGroupInterval, assertGroupInterval, } from './data/time.ts';
 export type { GroupInterval } from './data/time.ts';
-export { eq, ne, gt, lt, gte, lte, numericCompare, like, ilike, inArray, isNull, isNotNull, bucketEq, and, or, not, } from './data/expr.ts';
+export { eq, ne, gt, lt, gte, lte, numericCompare, like, likeLiteral, ilike, inArray, isNull, isNotNull, bucketEq, and, or, not, } from './data/expr.ts';
 export type { Col, Expr } from './data/expr.ts';
 export { defineListSearch, parseListState, encodeListState, validateListState, compileListFilter, } from './data/list-search.ts';
 export type { ListFieldType, FilterOperator, FilterRule, FilterGroup, FilterNode, SearchFieldSpec, FilterFieldSpec, GroupFieldSpec, SortFieldSpec, PresetFilterSpec, ListSearchSpec, ListGroup, ListSort, ListState, ParsedListState, ListSearchLimits, } from './data/list-search.ts';
 export { changeset, Changeset } from './data/changeset.ts';
 export type { FieldError, Validator } from './data/changeset.ts';
-export { schemaFromManifest, planMigration, renderSql, tableNameFor, DestructiveMigrationError, } from './data/migrate.ts';
-export { renderToString, hydrateRoot, mount, mountHydrated, renderIsland, hydrateIslands, createIslandManager, ISLAND_TAG, } from '@ketvietlab/ketjs-view';
+export { schemaFromManifest, planMigration, renderSql, tableNameFor, DestructiveMigrationError, ManualMigrationRequiredError, } from './data/migrate.ts';
+export type { Schema, MigrationOp } from './data/migrate.ts';
+export { signal, computed, effect, batch, html, each, when, isResult, isEach, createRoot, hydrateRoot, EVENT_PREFIX, mount, mountHydrated, countingHost, domHost, escapeHtml, renderToString, HydrationMismatch, HOLE_MARKER, HOLE_OPEN, trustedMarkup, isMarkup, renderIsland, hydrateIslands, createIslandManager, IslandError, ISLAND_TAG, validationIssue, fieldErrorsOf, formErrorsOf, validationProblem, valuesFromFormData, defineFormSchema, validateForm, createForm, } from '@ketvietlab/ketjs-view';
+export type { Signal, Computed, TemplateResult, EachResult, Renderable, Root, Mounted, Host, HostNode, Markup, IslandView, IslandController, IslandFactory, IslandDefinition, IslandRegistry, IslandProps, HydratedIsland, IslandElement, IslandManager, FormValues, FormFieldType, ValidationIssue, ValidationIssueInput, ValidationVerdict, FormFieldRule, FormSchema, FormValidationResult, FormValidationProblem, ReadonlySignal, FormController, JSXChild, JSXComponent, IntrinsicProps, } from '@ketvietlab/ketjs-view';
 export { createTheme } from './theme/render.ts';
-export { reachOf, functionsOf, formatReach, formatInventory } from './agent/permissions.ts';
-export type { Reach, GrantedFn, ModelReach } from './agent/permissions.ts';
+export { reachOf, functionsOf, formatReach, formatInventory, permissionInventory, } from './agent/permissions.ts';
+export type { Reach, GrantedFn, ModelReach, PermissionInventory, PermissionModuleInventory, PermissionFunctionInventory, } from './agent/permissions.ts';
 export { compileKtl } from './theme/ktl/compile.ts';
 export { loadTemplates } from './theme/templates.ts';
 export { createJoints } from './theme/joints.ts';
 export type { Joints } from './theme/joints.ts';
 export { makeDrop, makeDrops, sealScope } from './theme/viewmodel.ts';
-export { tokensToCss, scopedCss } from './theme/tokens.ts';
+export type { Drop } from './theme/viewmodel.ts';
+export { tokensToCss, scopedCss, partitionTokens, isTokenValue, LAYER_ORDER } from './theme/tokens.ts';
 export { agentTools, agentDescriptor, compositionSchema } from './agent/capabilities.ts';
 export { generateDts } from './codegen/dts.ts';
 export type * from './types.ts';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../packages/ketjs/src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAC9D,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AACtG,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AACtD,YAAY,EACV,SAAS,EACT,UAAU,EACV,cAAc,EACd,OAAO,EACP,oBAAoB,GACrB,MAAM,uBAAuB,CAAA;AAC9B,YAAY,EACV,YAAY,EACZ,kBAAkB,EAClB,iBAAiB,EACjB,uBAAuB,GACxB,MAAM,qBAAqB,CAAA;AAC5B,YAAY,EACV,cAAc,EACd,WAAW,EACX,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,YAAY,CAAA;AACnB,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAC7C,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AACvE,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAA;AACtE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AACvD,YAAY,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAC7D,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAC5F,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAC9E,YAAY,EAAE,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AACtE,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAChE,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAC5D,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAE9C,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AACvF,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AAClD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AACpD,YAAY,EACV,SAAS,EACT,YAAY,EACZ,qBAAqB,EACrB,SAAS,EACT,SAAS,EACT,cAAc,EACd,KAAK,GACN,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAA;AACjD,YAAY,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACxD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAC5D,YAAY,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AACjE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAA;AAC1D,YAAY,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AACrD,OAAO,EACL,IAAI,EACJ,QAAQ,EACR,aAAa,EACb,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,EAClB,eAAe,EACf,IAAI,EACJ,IAAI,EACJ,KAAK,EACL,QAAQ,EACR,GAAG,EACH,QAAQ,EACR,WAAW,GACZ,MAAM,qBAAqB,CAAA;AAC5B,YAAY,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAA;AAC1E,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAC5D,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAClE,OAAO,EACL,iBAAiB,EACjB,YAAY,EACZ,SAAS,EACT,iBAAiB,EACjB,aAAa,GACd,MAAM,2BAA2B,CAAA;AAClC,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAA;AAC3E,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAA;AAC9G,YAAY,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAA;AACjE,OAAO,EACL,eAAe,EACf,eAAe,EACf,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,6BAA6B,CAAA;AACpC,YAAY,EACV,eAAe,EACf,aAAa,EACb,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EAChB,eAAe,EACf,gBAAgB,GACjB,MAAM,6BAA6B,CAAA;AACpC,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAA;AACjD,YAAY,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAC5E,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AACpF,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,cAAc,EACd,YAAY,EACZ,cAAc,GACf,MAAM,qBAAqB,CAAA;AAC5B,YAAY,EACV,QAAQ,EACR,cAAc,EACd,cAAc,EACd,YAAY,EACZ,aAAa,GACd,MAAM,qBAAqB,CAAA;AAC5B,YAAY,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAA;AAC7D,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AACtE,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAA;AACtF,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AAEpD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAChD,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AAClE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAClD,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AAC9D,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AACvE,YAAY,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AACtD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAA;AAC3E,YAAY,EACV,OAAO,EACP,GAAG,EACH,KAAK,EACL,KAAK,EACL,SAAS,EACT,aAAa,EACb,UAAU,EACV,QAAQ,GACT,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,cAAc,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAC1G,YAAY,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AACnD,OAAO,EACL,EAAE,EACF,EAAE,EACF,EAAE,EACF,EAAE,EACF,GAAG,EACH,GAAG,EACH,cAAc,EACd,IAAI,EACJ,KAAK,EACL,OAAO,EACP,MAAM,EACN,SAAS,EACT,QAAQ,EACR,GAAG,EACH,EAAE,EACF,GAAG,GACJ,MAAM,gBAAgB,CAAA;AACvB,YAAY,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAA;AAC/C,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,uBAAuB,CAAA;AAC9B,YAAY,EACV,aAAa,EACb,cAAc,EACd,UAAU,EACV,WAAW,EACX,UAAU,EACV,eAAe,EACf,eAAe,EACf,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,cAAc,EACd,SAAS,EACT,QAAQ,EACR,SAAS,EACT,eAAe,EACf,gBAAgB,GACjB,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAC1D,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAChE,OAAO,EACL,kBAAkB,EAClB,aAAa,EACb,SAAS,EACT,YAAY,EACZ,yBAAyB,GAC1B,MAAM,mBAAmB,CAAA;AAI1B,OAAO,EACL,cAAc,EACd,WAAW,EACX,KAAK,EACL,aAAa,EACb,YAAY,EACZ,cAAc,EACd,mBAAmB,EACnB,UAAU,GACX,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAC/C,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAC3F,YAAY,EAAE,KAAK,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AAC1E,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAChD,YAAY,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAC/C,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAA;AACrE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAA;AAE1D,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAA;AACxF,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAE9C,mBAAmB,YAAY,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../packages/ketjs/src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAC9D,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAC7G,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AACtD,YAAY,EACV,SAAS,EACT,UAAU,EACV,qBAAqB,EACrB,cAAc,EACd,cAAc,EACd,oBAAoB,GACrB,MAAM,uBAAuB,CAAA;AAC9B,YAAY,EACV,YAAY,EACZ,kBAAkB,EAClB,iBAAiB,EACjB,uBAAuB,GACxB,MAAM,qBAAqB,CAAA;AAC5B,YAAY,EACV,cAAc,EACd,WAAW,EACX,mBAAmB,EACnB,gBAAgB,EAChB,UAAU,EACV,iBAAiB,EACjB,UAAU,EACV,QAAQ,EACR,oBAAoB,EACpB,mBAAmB,EACnB,mBAAmB,EACnB,sBAAsB,EACtB,yBAAyB,EACzB,qBAAqB,EACrB,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,EACd,eAAe,EACf,wBAAwB,EACxB,oBAAoB,GACrB,MAAM,YAAY,CAAA;AACnB,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAC7C,OAAO,EAAE,wBAAwB,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AACpF,YAAY,EAAE,wBAAwB,EAAE,MAAM,yBAAyB,CAAA;AACvE,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,EACd,aAAa,EACb,cAAc,EACd,eAAe,EACf,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAC5D,YAAY,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAC7D,OAAO,EACL,UAAU,EACV,eAAe,EACf,aAAa,EACb,iBAAiB,EACjB,aAAa,GACd,MAAM,kBAAkB,CAAA;AACzB,YAAY,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAC9E,YAAY,EAAE,SAAS,EAAE,WAAW,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACtG,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAC5D,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAE9C,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AACvF,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAClD,YAAY,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AAC9E,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAC7C,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC7E,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AAClE,YAAY,EACV,SAAS,EACT,YAAY,EACZ,yBAAyB,EACzB,qBAAqB,EACrB,eAAe,EACf,6BAA6B,EAC7B,SAAS,EACT,gBAAgB,EAChB,qBAAqB,EACrB,KAAK,GACN,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAA;AACjD,YAAY,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACxD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAC5D,YAAY,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AACjE,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAA;AAC1D,YAAY,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AACrD,OAAO,EACL,IAAI,EACJ,QAAQ,EACR,aAAa,EACb,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,EAClB,eAAe,EACf,IAAI,EACJ,IAAI,EACJ,KAAK,EACL,QAAQ,EACR,GAAG,EACH,QAAQ,EACR,WAAW,GACZ,MAAM,qBAAqB,CAAA;AAC5B,YAAY,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAA;AAC1E,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAC5D,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;AACvF,OAAO,EACL,iBAAiB,EACjB,YAAY,EACZ,SAAS,EACT,iBAAiB,EACjB,aAAa,EACb,iBAAiB,GAClB,MAAM,2BAA2B,CAAA;AAClC,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAA;AAC3E,YAAY,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAA;AAC9G,YAAY,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAA;AACjE,OAAO,EACL,eAAe,EACf,eAAe,EACf,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,6BAA6B,CAAA;AACpC,YAAY,EACV,eAAe,EACf,aAAa,EACb,eAAe,EACf,iBAAiB,EACjB,gBAAgB,EAChB,eAAe,EACf,gBAAgB,GACjB,MAAM,6BAA6B,CAAA;AACpC,OAAO,EACL,WAAW,EACX,UAAU,EACV,WAAW,EACX,YAAY,EACZ,aAAa,EACb,OAAO,EACP,WAAW,EACX,UAAU,EACV,aAAa,EACb,SAAS,EACT,YAAY,EACZ,QAAQ,EACR,OAAO,EACP,SAAS,EACT,SAAS,EACT,OAAO,GACR,MAAM,uBAAuB,CAAA;AAC9B,YAAY,EACV,iBAAiB,EACjB,SAAS,EACT,cAAc,EACd,UAAU,EACV,SAAS,EACT,QAAQ,EACR,QAAQ,EACR,SAAS,EACT,QAAQ,EACR,UAAU,EACV,SAAS,EACT,MAAM,EACN,SAAS,EACT,OAAO,GACR,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAA;AAC1F,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AACvG,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAA;AAC/C,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AACrE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAA;AACtD,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AAC1F,YAAY,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAC3D,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAA;AACpE,YAAY,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AACzD,YAAY,EAAE,uBAAuB,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAA;AAC1F,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAA;AACjD,YAAY,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAC5E,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAC/F,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,cAAc,EACd,YAAY,EACZ,cAAc,GACf,MAAM,qBAAqB,CAAA;AAC5B,YAAY,EACV,QAAQ,EACR,cAAc,EACd,cAAc,EACd,YAAY,EACZ,aAAa,GACd,MAAM,qBAAqB,CAAA;AAC5B,YAAY,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAA;AAC7D,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AACtE,YAAY,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAA;AACtF,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AACpD,OAAO,EACL,mBAAmB,EACnB,UAAU,EACV,WAAW,EACX,qBAAqB,GACtB,MAAM,kBAAkB,CAAA;AAEzB,OAAO,EACL,qBAAqB,EACrB,YAAY,EACZ,UAAU,EACV,iBAAiB,EACjB,aAAa,EACb,SAAS,EACT,gBAAgB,GACjB,MAAM,gBAAgB,CAAA;AACvB,YAAY,EACV,QAAQ,EACR,gBAAgB,EAChB,cAAc,EACd,aAAa,EACb,UAAU,EACV,SAAS,EACT,YAAY,GACb,MAAM,gBAAgB,CAAA;AAEvB,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAChD,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AAClE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAClD,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AAC9D,OAAO,EACL,UAAU,EACV,sBAAsB,EACtB,oBAAoB,EACpB,YAAY,EACZ,WAAW,EACX,gCAAgC,GACjC,MAAM,iBAAiB,CAAA;AACxB,YAAY,EAAE,eAAe,EAAE,0BAA0B,EAAE,MAAM,iBAAiB,CAAA;AAClF,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AACzD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAA;AAC3E,YAAY,EACV,OAAO,EACP,GAAG,EACH,KAAK,EACL,KAAK,EACL,SAAS,EACT,aAAa,EACb,UAAU,EACV,QAAQ,GACT,MAAM,iBAAiB,CAAA;AACxB,OAAO,EACL,UAAU,EACV,UAAU,EACV,cAAc,EACd,kBAAkB,EAClB,aAAa,EACb,eAAe,EACf,eAAe,EACf,mBAAmB,GACpB,MAAM,gBAAgB,CAAA;AACvB,YAAY,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AACnD,OAAO,EACL,EAAE,EACF,EAAE,EACF,EAAE,EACF,EAAE,EACF,GAAG,EACH,GAAG,EACH,cAAc,EACd,IAAI,EACJ,WAAW,EACX,KAAK,EACL,OAAO,EACP,MAAM,EACN,SAAS,EACT,QAAQ,EACR,GAAG,EACH,EAAE,EACF,GAAG,GACJ,MAAM,gBAAgB,CAAA;AACvB,YAAY,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,gBAAgB,CAAA;AAC/C,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,uBAAuB,CAAA;AAC9B,YAAY,EACV,aAAa,EACb,cAAc,EACd,UAAU,EACV,WAAW,EACX,UAAU,EACV,eAAe,EACf,eAAe,EACf,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,cAAc,EACd,SAAS,EACT,QAAQ,EACR,SAAS,EACT,eAAe,EACf,gBAAgB,GACjB,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAC1D,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAChE,OAAO,EACL,kBAAkB,EAClB,aAAa,EACb,SAAS,EACT,YAAY,EACZ,yBAAyB,EACzB,4BAA4B,GAC7B,MAAM,mBAAmB,CAAA;AAC1B,YAAY,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAS5D,OAAO,EACL,MAAM,EACN,QAAQ,EACR,MAAM,EACN,KAAK,EACL,IAAI,EACJ,IAAI,EACJ,IAAI,EACJ,QAAQ,EACR,MAAM,EACN,UAAU,EACV,WAAW,EACX,YAAY,EACZ,KAAK,EACL,aAAa,EACb,YAAY,EACZ,OAAO,EACP,UAAU,EACV,cAAc,EACd,iBAAiB,EACjB,WAAW,EACX,SAAS,EACT,aAAa,EACb,QAAQ,EACR,YAAY,EACZ,cAAc,EACd,mBAAmB,EACnB,WAAW,EACX,UAAU,EACV,eAAe,EACf,aAAa,EACb,YAAY,EACZ,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,EAChB,YAAY,EACZ,UAAU,GACX,MAAM,wBAAwB,CAAA;AAC/B,YAAY,EACV,MAAM,EACN,QAAQ,EACR,cAAc,EACd,UAAU,EACV,UAAU,EACV,IAAI,EACJ,OAAO,EACP,IAAI,EACJ,QAAQ,EACR,MAAM,EACN,UAAU,EACV,gBAAgB,EAChB,aAAa,EACb,gBAAgB,EAChB,cAAc,EACd,WAAW,EACX,cAAc,EACd,aAAa,EACb,aAAa,EACb,UAAU,EACV,aAAa,EACb,eAAe,EACf,oBAAoB,EACpB,iBAAiB,EACjB,aAAa,EACb,UAAU,EACV,oBAAoB,EACpB,qBAAqB,EACrB,cAAc,EACd,cAAc,EACd,QAAQ,EACR,YAAY,EACZ,cAAc,GACf,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAC/C,OAAO,EACL,OAAO,EACP,WAAW,EACX,WAAW,EACX,eAAe,EACf,mBAAmB,GACpB,MAAM,wBAAwB,CAAA;AAC/B,YAAY,EACV,KAAK,EACL,SAAS,EACT,UAAU,EACV,mBAAmB,EACnB,yBAAyB,EACzB,2BAA2B,GAC5B,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAChD,YAAY,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAC/C,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAA;AACrE,YAAY,EAAE,IAAI,EAAE,MAAM,sBAAsB,CAAA;AAChD,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,eAAe,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAEtG,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAA;AACxF,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA;AAE9C,mBAAmB,YAAY,CAAA"}

package/dist/index.js

@@ -1,51 +1,67 @@
 export { defineModule, defineTheme } from './kernel/define.js';
-export { defineApp, defineWorkspace, composeWorkspace, explainWorkspace } from './kernel/workspace.js';
+export { defineDeployment, defineWorkspace, composeWorkspace, explainWorkspace } from './kernel/workspace.js';
 export { resolveWorkspace } from './kernel/modules.js';
 export { compose } from './kernel/compose.js';
-export { validateLayout, formatLayoutErrors } from './kernel/layout.js';
-export { createAppRegistry, restrictManifest } from './kernel/apps.js';
-export { buildMenu, activeApp } from './kernel/menu.js';
-export { translator, missingMessages, formatMissing, PSEUDO_LOCALE } from './kernel/i18n.js';
+export { compilePermissionBundles, permissionDigest } from './kernel/permissions.js';
+export { validateLayout, formatLayoutErrors, withPlacementIds, placementIdErrors, diffPlacements, isPlacementId, walkPlacements, countPlacements, MAX_LAYOUT_DEPTH, MAX_LAYOUT_NODES, } from './kernel/layout.js';
+export { buildMenu, activeMenuRoot } from './kernel/menu.js';
+export { translator, missingMessages, formatMissing, dateTimeFormatter, PSEUDO_LOCALE, } from './kernel/i18n.js';
 export { diffManifests, formatDiff } from './kernel/diff.js';
 export { KetError, Diagnostics } from './kernel/errors.js';
 export { isDateText } from './kernel/types.js';
 export { defineFn, callFn, registerFunctions, _resetIdempotency } from './server/fn.js';
+export { enforcePolicy } from './server/policy.js';
 export { project } from './server/project.js';
-export { createKetServer } from './server/http.js';
-export { bootApp, serveApp } from './server/boot.js';
+export { createKetServer, statusForError, wantsHtml } from './server/http.js';
+export { bootDeployment, serveDeployment } from './server/boot.js';
 export { bootRuntime } from './server/runtime.js';
 export { bootWorker, serveWorker } from './server/worker.js';
 export { defineJob, registerJobs } from './server/jobs.js';
 export { page, fragment, navigablePage, isNavigationRequest, NAVIGATION_HEADER, NAVIGATION_VERSION, NAVIGATION_TYPE, json, text, bytes, streamed, raw, document, withHeaders, } from './server/respond.js';
 export { readConfig, sqliteStore } from './server/config.js';
-export { storageFromConfig, localStorage, s3Storage, namespacedStorage, effectStorage, } from './server/storage/index.js';
+export { storageFromConfig, localStorage, s3Storage, namespacedStorage, effectStorage, withPublicStorage, } from './server/storage/index.js';
 export { signRequest, presignUrl, sha256 } from './server/storage/index.js';
 export { effectTransport, memoryTransport, unavailableTransport, validateOutboundMessage, } from './server/transport/index.js';
+export { bufferedLog, consoleLog, CORE_EVENTS, createLogger, describeError, fileLog, isolatedLog, leveledLog, logFromConfig, memoryLog, MODULE_EVENT, multiLog, nullLog, prettyLog, redactLog, traceOf, } from './server/log/index.js';
+export { classificationInventory, formatClassification } from './kernel/classification.js';
+export { MIN_EVERY_MS, parseEvery, tickAt, ticksBetween, validateSchedule } from './kernel/schedule.js';
+export { claimDue } from './server/schedule.js';
+export { claimRateSlot, pruneRateSlots } from './server/ratelimit.js';
+export { auditHash, auditId } from './kernel/audit.js';
+export { nextSequenceNumber, peekSequenceNumber, sequenceKey } from './server/sequence.js';
 export { multipart } from './server/multipart.js';
-export { createStreams, memoryStreamStore, dbStreamStore } from './server/stream.js';
+export { createStreams, memoryStreamStore, dbStreamStore, streamsOf } from './server/stream.js';
 export { createSessions, memorySessionStore, dbSessionStore, parseCookies, SESSION_COOKIE, } from './server/session.js';
 export { createQueue, queueFor, JOB_CHANNEL } from './server/queue.js';
 export { createIdempotency } from './server/idem.js';
+export { FormValidationError, assertForm, invalidForm, issuesFromFieldErrors, } from './server/form.js';
+export { compileReportTemplate, interFontUrl, parseImage, parseReportMarkup, parseTrueType, renderPdf, renderReportHtml, } from './pdf/index.js';
 export { sqliteAdapter } from './data/sqlite.js';
 export { assertAdapter, ADAPTER_METHODS } from './data/adapter.js';
 export { createAdapterPool } from './data/pool.js';
-export { migrateOne, migrateFleet, formatFleet } from './data/fleet.js';
+export { migrateOne, confirmManualMigration, verifyPhysicalSchema, migrateFleet, formatFleet, ManualMigrationConfirmationError, } from './data/fleet.js';
+export { physicalSchemaIssues } from './data/physical.js';
 export { from, deleteFrom, table, asc, desc, Query } from './data/query.js';
-export { dateBucket, isTimezone, assertTimezone, localDateTimeToUtc, localDayRange } from './data/time.js';
-export { eq, ne, gt, lt, gte, lte, numericCompare, like, ilike, inArray, isNull, isNotNull, bucketEq, and, or, not, } from './data/expr.js';
+export { dateBucket, isTimezone, assertTimezone, localDateTimeToUtc, localDayRange, GROUP_INTERVALS, isGroupInterval, assertGroupInterval, } from './data/time.js';
+export { eq, ne, gt, lt, gte, lte, numericCompare, like, likeLiteral, ilike, inArray, isNull, isNotNull, bucketEq, and, or, not, } from './data/expr.js';
 export { defineListSearch, parseListState, encodeListState, validateListState, compileListFilter, } from './data/list-search.js';
 export { changeset, Changeset } from './data/changeset.js';
-export { schemaFromManifest, planMigration, renderSql, tableNameFor, DestructiveMigrationError, } from './data/migrate.js';
-// Re-exported for convenience; the view layer is its own package and can be
-// installed alone by a client that never touches the server half.
-export { renderToString, hydrateRoot, mount, mountHydrated, renderIsland, hydrateIslands, createIslandManager, ISLAND_TAG, } from '@ketvietlab/ketjs-view';
+export { schemaFromManifest, planMigration, renderSql, tableNameFor, DestructiveMigrationError, ManualMigrationRequiredError, } from './data/migrate.js';
+// Re-exported whole; the view layer is its own package and can be installed alone
+// by a client that never touches the server half, but an app that has both should
+// not have to know which half a name lives in.
+//
+// It used to be eight names picked by hand, and the set was not usable on its own:
+// `mount` was there while `domHost` — the host every call to it needs — was not, so
+// "convenience" meant importing from both packages anyway and guessing which.
+export { signal, computed, effect, batch, html, each, when, isResult, isEach, createRoot, hydrateRoot, EVENT_PREFIX, mount, mountHydrated, countingHost, domHost, escapeHtml, renderToString, HydrationMismatch, HOLE_MARKER, HOLE_OPEN, trustedMarkup, isMarkup, renderIsland, hydrateIslands, createIslandManager, IslandError, ISLAND_TAG, validationIssue, fieldErrorsOf, formErrorsOf, validationProblem, valuesFromFormData, defineFormSchema, validateForm, createForm, } from '@ketvietlab/ketjs-view';
 export { createTheme } from './theme/render.js';
-export { reachOf, functionsOf, formatReach, formatInventory } from './agent/permissions.js';
+export { reachOf, functionsOf, formatReach, formatInventory, permissionInventory, } from './agent/permissions.js';
 export { compileKtl } from './theme/ktl/compile.js';
 export { loadTemplates } from './theme/templates.js';
 export { createJoints } from './theme/joints.js';
 export { makeDrop, makeDrops, sealScope } from './theme/viewmodel.js';
-export { tokensToCss, scopedCss } from './theme/tokens.js';
+export { tokensToCss, scopedCss, partitionTokens, isTokenValue, LAYER_ORDER } from './theme/tokens.js';
 export { agentTools, agentDescriptor, compositionSchema } from './agent/capabilities.js';
 export { generateDts } from './codegen/dts.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../packages/ketjs/src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAC9D,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AACtG,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AAoBtD,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAC7C,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA;AACvE,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAA;AACtE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAEvD,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAI5F,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAC5D,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAE9C,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AACvF,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAC7C,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AAClD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AAUpD,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAA;AAEjD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAE5D,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAA;AAE1D,OAAO,EACL,IAAI,EACJ,QAAQ,EACR,aAAa,EACb,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,EAClB,eAAe,EACf,IAAI,EACJ,IAAI,EACJ,KAAK,EACL,QAAQ,EACR,GAAG,EACH,QAAQ,EACR,WAAW,GACZ,MAAM,qBAAqB,CAAA;AAE5B,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAE5D,OAAO,EACL,iBAAiB,EACjB,YAAY,EACZ,SAAS,EACT,iBAAiB,EACjB,aAAa,GACd,MAAM,2BAA2B,CAAA;AAClC,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAA;AAG3E,OAAO,EACL,eAAe,EACf,eAAe,EACf,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,6BAA6B,CAAA;AAUpC,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAA;AAEjD,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AACpF,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,cAAc,EACd,YAAY,EACZ,cAAc,GACf,MAAM,qBAAqB,CAAA;AAS5B,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAEtE,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AAEpD,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAChD,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AAClE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAElD,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAEvE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAA;AAW3E,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,cAAc,EAAE,kBAAkB,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAE1G,OAAO,EACL,EAAE,EACF,EAAE,EACF,EAAE,EACF,EAAE,EACF,GAAG,EACH,GAAG,EACH,cAAc,EACd,IAAI,EACJ,KAAK,EACL,OAAO,EACP,MAAM,EACN,SAAS,EACT,QAAQ,EACR,GAAG,EACH,EAAE,EACF,GAAG,GACJ,MAAM,gBAAgB,CAAA;AAEvB,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,uBAAuB,CAAA;AAmB9B,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAE1D,OAAO,EACL,kBAAkB,EAClB,aAAa,EACb,SAAS,EACT,YAAY,EACZ,yBAAyB,GAC1B,MAAM,mBAAmB,CAAA;AAE1B,4EAA4E;AAC5E,kEAAkE;AAClE,OAAO,EACL,cAAc,EACd,WAAW,EACX,KAAK,EACL,aAAa,EACb,YAAY,EACZ,cAAc,EACd,mBAAmB,EACnB,UAAU,GACX,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAC/C,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAE3F,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAEhD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAA;AACrE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAA;AAE1D,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAA;AACxF,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../packages/ketjs/src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAC9D,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAC7G,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAA;AAqCtD,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAC7C,OAAO,EAAE,wBAAwB,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAEpF,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,cAAc,EACd,aAAa,EACb,cAAc,EACd,eAAe,EACf,gBAAgB,EAChB,gBAAgB,GACjB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAA;AAE5D,OAAO,EACL,UAAU,EACV,eAAe,EACf,aAAa,EACb,iBAAiB,EACjB,aAAa,GACd,MAAM,kBAAkB,CAAA;AAGzB,OAAO,EAAE,aAAa,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAC5D,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAE9C,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AACvF,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAElD,OAAO,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAC7C,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAA;AAC7E,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AAalE,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAA;AAEjD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAE5D,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAA;AAE1D,OAAO,EACL,IAAI,EACJ,QAAQ,EACR,aAAa,EACb,mBAAmB,EACnB,iBAAiB,EACjB,kBAAkB,EAClB,eAAe,EACf,IAAI,EACJ,IAAI,EACJ,KAAK,EACL,QAAQ,EACR,GAAG,EACH,QAAQ,EACR,WAAW,GACZ,MAAM,qBAAqB,CAAA;AAE5B,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AAE5D,OAAO,EACL,iBAAiB,EACjB,YAAY,EACZ,SAAS,EACT,iBAAiB,EACjB,aAAa,EACb,iBAAiB,GAClB,MAAM,2BAA2B,CAAA;AAClC,OAAO,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,2BAA2B,CAAA;AAG3E,OAAO,EACL,eAAe,EACf,eAAe,EACf,oBAAoB,EACpB,uBAAuB,GACxB,MAAM,6BAA6B,CAAA;AAUpC,OAAO,EACL,WAAW,EACX,UAAU,EACV,WAAW,EACX,YAAY,EACZ,aAAa,EACb,OAAO,EACP,WAAW,EACX,UAAU,EACV,aAAa,EACb,SAAS,EACT,YAAY,EACZ,QAAQ,EACR,OAAO,EACP,SAAS,EACT,SAAS,EACT,OAAO,GACR,MAAM,uBAAuB,CAAA;AAiB9B,OAAO,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAA;AAC1F,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AACvG,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAA;AAC/C,OAAO,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AACrE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAA;AACtD,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAA;AAK1F,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAA;AAEjD,OAAO,EAAE,aAAa,EAAE,iBAAiB,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAA;AAC/F,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,cAAc,EACd,YAAY,EACZ,cAAc,GACf,MAAM,qBAAqB,CAAA;AAS5B,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAEtE,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AACpD,OAAO,EACL,mBAAmB,EACnB,UAAU,EACV,WAAW,EACX,qBAAqB,GACtB,MAAM,kBAAkB,CAAA;AAEzB,OAAO,EACL,qBAAqB,EACrB,YAAY,EACZ,UAAU,EACV,iBAAiB,EACjB,aAAa,EACb,SAAS,EACT,gBAAgB,GACjB,MAAM,gBAAgB,CAAA;AAWvB,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAChD,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AAClE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAElD,OAAO,EACL,UAAU,EACV,sBAAsB,EACtB,oBAAoB,EACpB,YAAY,EACZ,WAAW,EACX,gCAAgC,GACjC,MAAM,iBAAiB,CAAA;AAExB,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AACzD,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,iBAAiB,CAAA;AAW3E,OAAO,EACL,UAAU,EACV,UAAU,EACV,cAAc,EACd,kBAAkB,EAClB,aAAa,EACb,eAAe,EACf,eAAe,EACf,mBAAmB,GACpB,MAAM,gBAAgB,CAAA;AAEvB,OAAO,EACL,EAAE,EACF,EAAE,EACF,EAAE,EACF,EAAE,EACF,GAAG,EACH,GAAG,EACH,cAAc,EACd,IAAI,EACJ,WAAW,EACX,KAAK,EACL,OAAO,EACP,MAAM,EACN,SAAS,EACT,QAAQ,EACR,GAAG,EACH,EAAE,EACF,GAAG,GACJ,MAAM,gBAAgB,CAAA;AAEvB,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,uBAAuB,CAAA;AAmB9B,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAA;AAE1D,OAAO,EACL,kBAAkB,EAClB,aAAa,EACb,SAAS,EACT,YAAY,EACZ,yBAAyB,EACzB,4BAA4B,GAC7B,MAAM,mBAAmB,CAAA;AAG1B,kFAAkF;AAClF,kFAAkF;AAClF,+CAA+C;AAC/C,EAAE;AACF,mFAAmF;AACnF,oFAAoF;AACpF,8EAA8E;AAC9E,OAAO,EACL,MAAM,EACN,QAAQ,EACR,MAAM,EACN,KAAK,EACL,IAAI,EACJ,IAAI,EACJ,IAAI,EACJ,QAAQ,EACR,MAAM,EACN,UAAU,EACV,WAAW,EACX,YAAY,EACZ,KAAK,EACL,aAAa,EACb,YAAY,EACZ,OAAO,EACP,UAAU,EACV,cAAc,EACd,iBAAiB,EACjB,WAAW,EACX,SAAS,EACT,aAAa,EACb,QAAQ,EACR,YAAY,EACZ,cAAc,EACd,mBAAmB,EACnB,WAAW,EACX,UAAU,EACV,eAAe,EACf,aAAa,EACb,YAAY,EACZ,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,EAChB,YAAY,EACZ,UAAU,GACX,MAAM,wBAAwB,CAAA;AAoC/B,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAC/C,OAAO,EACL,OAAO,EACP,WAAW,EACX,WAAW,EACX,eAAe,EACf,mBAAmB,GACpB,MAAM,wBAAwB,CAAA;AAS/B,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAA;AACnD,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAA;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAEhD,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAA;AAErE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,eAAe,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAEtG,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAA;AACxF,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAA"}

package/dist/kernel/audit.d.ts

@@ -0,0 +1,27 @@
+/**
+ * A digest that stands for an identity without carrying it.
+ *
+ * Namespaced by the owning module for two reasons: two modules hashing the same
+ * customer id produce different digests, so one timeline cannot be joined to
+ * another by accident; and a digest from one module cannot be tested against a
+ * guess made in the context of another.
+ *
+ * This is pseudonymisation, not secrecy. A low-entropy value — an order number, a
+ * short code — remains guessable by anyone who can run the same hash, so it keeps
+ * a value out of a row rather than out of reach. Where the row leaves the tenant,
+ * hash something with entropy or key it.
+ */
+export declare function auditHash(namespace: string, kind: string, value: unknown): string | null;
+/**
+ * An identity derived from the command, so a retry lands on the row it already wrote.
+ *
+ * A command that is retried must not produce a second event, and the only way to
+ * know it is the same command is to derive the id from the same parts. Combined
+ * with `insertIfAbsent` on an append-only model, a replay becomes a no-op rather
+ * than a duplicate — which is what both existing timelines do by hand.
+ *
+ * Parts are joined with a separator they cannot contain, so ["a", "b:c"] and
+ * ["a:b", "c"] are different commands rather than the same one.
+ */
+export declare function auditId(namespace: string, parts: readonly string[]): string;
+//# sourceMappingURL=audit.d.ts.map

package/dist/kernel/audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.d.ts","sourceRoot":"","sources":["../../../../../packages/ketjs/src/kernel/audit.ts"],"names":[],"mappings":"AAyBA;;;;;;;;;;;;GAYG;AACH,wBAAgB,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAMxF;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,MAAM,EAAE,GAAG,MAAM,CAY3E"}

package/dist/kernel/audit.js

@@ -0,0 +1,67 @@
+// The two things every audit timeline has to get right, and neither of which is
+// about what an event means.
+//
+// What an event *is* — a subject, an action, which configuration and session it
+// happened in — belongs to the domain, and a framework that modelled it would be
+// modelling somebody's compliance regime. What the framework can own is the part
+// both existing timelines had to invent for themselves: an identity that survives
+// a retry, and a digest that does not carry the value it stands for.
+import { createHash } from 'node:crypto';
+import { KetError } from './errors.js';
+const NAMESPACE = /^[a-z][a-z0-9_]*$/;
+const namespaced = (namespace) => {
+    if (!NAMESPACE.test(namespace)) {
+        throw new KetError({
+            code: 'E_AUDIT_NAMESPACE',
+            message: `"${namespace}" is not an audit namespace`,
+            hint: 'use the owning module name, so two modules cannot collide or test each other values',
+        });
+    }
+    return namespace;
+};
+/**
+ * A digest that stands for an identity without carrying it.
+ *
+ * Namespaced by the owning module for two reasons: two modules hashing the same
+ * customer id produce different digests, so one timeline cannot be joined to
+ * another by accident; and a digest from one module cannot be tested against a
+ * guess made in the context of another.
+ *
+ * This is pseudonymisation, not secrecy. A low-entropy value — an order number, a
+ * short code — remains guessable by anyone who can run the same hash, so it keeps
+ * a value out of a row rather than out of reach. Where the row leaves the tenant,
+ * hash something with entropy or key it.
+ */
+export function auditHash(namespace, kind, value) {
+    const held = String(value ?? '').trim();
+    if (!held)
+        return null;
+    return createHash('sha256')
+        .update(`${namespaced(namespace)}:${kind}\n${held}`)
+        .digest('hex');
+}
+/**
+ * An identity derived from the command, so a retry lands on the row it already wrote.
+ *
+ * A command that is retried must not produce a second event, and the only way to
+ * know it is the same command is to derive the id from the same parts. Combined
+ * with `insertIfAbsent` on an append-only model, a replay becomes a no-op rather
+ * than a duplicate — which is what both existing timelines do by hand.
+ *
+ * Parts are joined with a separator they cannot contain, so ["a", "b:c"] and
+ * ["a:b", "c"] are different commands rather than the same one.
+ */
+export function auditId(namespace, parts) {
+    if (!parts.length) {
+        throw new KetError({
+            code: 'E_AUDIT_ID',
+            message: 'an audit id needs at least one part of the command identity',
+            hint: 'pass what makes this command that command — its key, its subject, its action',
+        });
+    }
+    const canonical = parts.map((part) => String(part ?? '')).join('\n');
+    return createHash('sha256')
+        .update(`${namespaced(namespace)}:event\n${canonical}`)
+        .digest('hex');
+}
+//# sourceMappingURL=audit.js.map

package/dist/kernel/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","sourceRoot":"","sources":["../../../../../../packages/ketjs/src/kernel/audit.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,6BAA6B;AAC7B,EAAE;AACF,gFAAgF;AAChF,iFAAiF;AACjF,iFAAiF;AACjF,kFAAkF;AAClF,qEAAqE;AAErE,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAEtC,MAAM,SAAS,GAAG,mBAAmB,CAAA;AAErC,MAAM,UAAU,GAAG,CAAC,SAAiB,EAAU,EAAE;IAC/C,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,QAAQ,CAAC;YACjB,IAAI,EAAE,mBAAmB;YACzB,OAAO,EAAE,IAAI,SAAS,6BAA6B;YACnD,IAAI,EAAE,qFAAqF;SAC5F,CAAC,CAAA;IACJ,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC,CAAA;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,SAAS,CAAC,SAAiB,EAAE,IAAY,EAAE,KAAc;IACvE,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;IACvC,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAA;IACtB,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,GAAG,UAAU,CAAC,SAAS,CAAC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;SACnD,MAAM,CAAC,KAAK,CAAC,CAAA;AAClB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,OAAO,CAAC,SAAiB,EAAE,KAAwB;IACjE,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAClB,MAAM,IAAI,QAAQ,CAAC;YACjB,IAAI,EAAE,YAAY;YAClB,OAAO,EAAE,6DAA6D;YACtE,IAAI,EAAE,8EAA8E;SACrF,CAAC,CAAA;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACpE,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,GAAG,UAAU,CAAC,SAAS,CAAC,WAAW,SAAS,EAAE,CAAC;SACtD,MAAM,CAAC,KAAK,CAAC,CAAA;AAClB,CAAC"}

package/dist/kernel/classification.d.ts

@@ -0,0 +1,26 @@
+import type { Manifest } from '../types.ts';
+export type ClassifiedField = {
+    model: string;
+    field: string;
+    /** The module that contributed the field, so an owner can be found. */
+    by: string;
+    type: string;
+    personal: boolean;
+    sensitive: boolean;
+};
+export type ClassificationInventory = {
+    personal: ClassifiedField[];
+    sensitive: ClassifiedField[];
+    /** Models where no field carries either flag — the work still to do, not a clean bill. */
+    unclassified: string[];
+    counts: {
+        models: number;
+        fields: number;
+        personal: number;
+        sensitive: number;
+        unclassified: number;
+    };
+};
+export declare function classificationInventory(manifest: Manifest): ClassificationInventory;
+export declare function formatClassification(inventory: ClassificationInventory): string;
+//# sourceMappingURL=classification.d.ts.map

package/dist/kernel/classification.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"classification.d.ts","sourceRoot":"","sources":["../../../../../packages/ketjs/src/kernel/classification.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAE3C,MAAM,MAAM,eAAe,GAAG;IAC5B,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,EAAE,MAAM,CAAA;IACb,uEAAuE;IACvE,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,QAAQ,EAAE,OAAO,CAAA;IACjB,SAAS,EAAE,OAAO,CAAA;CACnB,CAAA;AAED,MAAM,MAAM,uBAAuB,GAAG;IACpC,QAAQ,EAAE,eAAe,EAAE,CAAA;IAC3B,SAAS,EAAE,eAAe,EAAE,CAAA;IAC5B,0FAA0F;IAC1F,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,CAAA;CACtG,CAAA;AAKD,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,QAAQ,GAAG,uBAAuB,CAsCnF;AAKD,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,uBAAuB,GAAG,MAAM,CAmB/E"}

package/dist/kernel/classification.js

@@ -0,0 +1,73 @@
+// What the deployment's data actually is, read off the manifest.
+//
+// An obligation to export or erase somebody's data cannot be met against a schema
+// nobody has classified, and neither can a question as simple as "which columns
+// would leak if this table went out the door". Both are answered here, from the
+// same composed manifest the migration and the agent descriptor read, so the answer
+// cannot drift from what the deployment actually runs.
+//
+// The inventory deliberately reports what is *not* classified as well. An inventory
+// of only the fields somebody remembered to tag is the one thing worse than no
+// inventory: it looks complete.
+const typeOf = (field) => `${field.base === 'ref' ? `ref:${field.target}` : field.base}${field.optional ? '?' : ''}`;
+export function classificationInventory(manifest) {
+    const personal = [];
+    const sensitive = [];
+    const unclassified = [];
+    let fields = 0;
+    for (const [model, def] of Object.entries(manifest.models).sort(([a], [b]) => a.localeCompare(b))) {
+        let classified = false;
+        for (const [field, spec] of Object.entries(def.fields).sort(([a], [b]) => a.localeCompare(b))) {
+            fields += 1;
+            if (!spec.personal && !spec.sensitive)
+                continue;
+            classified = true;
+            const entry = {
+                model,
+                field,
+                by: spec.by,
+                type: typeOf(spec),
+                personal: Boolean(spec.personal),
+                sensitive: Boolean(spec.sensitive),
+            };
+            if (entry.personal)
+                personal.push(entry);
+            if (entry.sensitive)
+                sensitive.push(entry);
+        }
+        if (!classified)
+            unclassified.push(model);
+    }
+    return {
+        personal,
+        sensitive,
+        unclassified,
+        counts: {
+            models: Object.keys(manifest.models).length,
+            fields,
+            personal: personal.length,
+            sensitive: sensitive.length,
+            unclassified: unclassified.length,
+        },
+    };
+}
+const row = (entry, width) => `  ${`${entry.model}.${entry.field}`.padEnd(width)}  ${entry.type.padEnd(18)} by ${entry.by}`;
+export function formatClassification(inventory) {
+    const all = [...inventory.personal, ...inventory.sensitive];
+    const width = Math.max(24, ...all.map((entry) => `${entry.model}.${entry.field}`.length));
+    const lines = [];
+    lines.push(`personal data (${inventory.counts.personal} field(s))`);
+    lines.push(...(inventory.personal.length ? inventory.personal.map((e) => row(e, width)) : ['  none']));
+    lines.push('');
+    lines.push(`sensitive (${inventory.counts.sensitive} field(s)) — never leaves the system`);
+    lines.push(...(inventory.sensitive.length ? inventory.sensitive.map((e) => row(e, width)) : ['  none']));
+    lines.push('');
+    lines.push(`${inventory.counts.unclassified} of ${inventory.counts.models} model(s) classify no field at all`);
+    // Named rather than counted, because the list is the work queue.
+    if (inventory.unclassified.length) {
+        for (const model of inventory.unclassified)
+            lines.push(`  ${model}`);
+    }
+    return lines.join('\n');
+}
+//# sourceMappingURL=classification.js.map

package/dist/kernel/classification.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"classification.js","sourceRoot":"","sources":["../../../../../../packages/ketjs/src/kernel/classification.ts"],"names":[],"mappings":"AAAA,iEAAiE;AACjE,EAAE;AACF,kFAAkF;AAClF,gFAAgF;AAChF,gFAAgF;AAChF,oFAAoF;AACpF,uDAAuD;AACvD,EAAE;AACF,oFAAoF;AACpF,+EAA+E;AAC/E,gCAAgC;AAsBhC,MAAM,MAAM,GAAG,CAAC,KAA2D,EAAU,EAAE,CACrF,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAA;AAE5F,MAAM,UAAU,uBAAuB,CAAC,QAAkB;IACxD,MAAM,QAAQ,GAAsB,EAAE,CAAA;IACtC,MAAM,SAAS,GAAsB,EAAE,CAAA;IACvC,MAAM,YAAY,GAAa,EAAE,CAAA;IACjC,IAAI,MAAM,GAAG,CAAC,CAAA;IAEd,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAClG,IAAI,UAAU,GAAG,KAAK,CAAA;QACtB,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9F,MAAM,IAAI,CAAC,CAAA;YACX,IAAI,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,IAAI,CAAC,SAAS;gBAAE,SAAQ;YAC/C,UAAU,GAAG,IAAI,CAAA;YACjB,MAAM,KAAK,GAAoB;gBAC7B,KAAK;gBACL,KAAK;gBACL,EAAE,EAAE,IAAI,CAAC,EAAE;gBACX,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC;gBAClB,QAAQ,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;gBAChC,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;aACnC,CAAA;YACD,IAAI,KAAK,CAAC,QAAQ;gBAAE,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YACxC,IAAI,KAAK,CAAC,SAAS;gBAAE,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC5C,CAAC;QACD,IAAI,CAAC,UAAU;YAAE,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC3C,CAAC;IAED,OAAO;QACL,QAAQ;QACR,SAAS;QACT,YAAY;QACZ,MAAM,EAAE;YACN,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM;YAC3C,MAAM;YACN,QAAQ,EAAE,QAAQ,CAAC,MAAM;YACzB,SAAS,EAAE,SAAS,CAAC,MAAM;YAC3B,YAAY,EAAE,YAAY,CAAC,MAAM;SAClC;KACF,CAAA;AACH,CAAC;AAED,MAAM,GAAG,GAAG,CAAC,KAAsB,EAAE,KAAa,EAAU,EAAE,CAC5D,KAAK,GAAG,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,OAAO,KAAK,CAAC,EAAE,EAAE,CAAA;AAE/F,MAAM,UAAU,oBAAoB,CAAC,SAAkC;IACrE,MAAM,GAAG,GAAG,CAAC,GAAG,SAAS,CAAC,QAAQ,EAAE,GAAG,SAAS,CAAC,SAAS,CAAC,CAAA;IAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,CAAC,CAAA;IACzF,MAAM,KAAK,GAAa,EAAE,CAAA;IAE1B,KAAK,CAAC,IAAI,CAAC,kBAAkB,SAAS,CAAC,MAAM,CAAC,QAAQ,YAAY,CAAC,CAAA;IACnE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAA;IACtG,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACd,KAAK,CAAC,IAAI,CAAC,cAAc,SAAS,CAAC,MAAM,CAAC,SAAS,sCAAsC,CAAC,CAAA;IAC1F,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAA;IACxG,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACd,KAAK,CAAC,IAAI,CACR,GAAG,SAAS,CAAC,MAAM,CAAC,YAAY,OAAO,SAAS,CAAC,MAAM,CAAC,MAAM,oCAAoC,CACnG,CAAA;IACD,iEAAiE;IACjE,IAAI,SAAS,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC;QAClC,KAAK,MAAM,KAAK,IAAI,SAAS,CAAC,YAAY;YAAE,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,EAAE,CAAC,CAAA;IACtE,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACzB,CAAC"}

package/dist/kernel/compose.d.ts

@@ -1,6 +1,10 @@
-import type { KetModule, Manifest } from '../types.ts';
+import type { KetModule, Manifest, ModulePermissionsDef } from '../types.ts';
+import type { RoleTemplateDef } from '../types.ts';
 export declare function compose(modules: KetModule[], opts?: {
-    appRequires?: string[];
+    requiredRegions?: string[];
     headless?: boolean;
+    requirePermissionCoverage?: boolean;
+    roleTemplates?: Record<string, RoleTemplateDef>;
+    modulePermissionDeclarations?: Record<string, ModulePermissionsDef>;
 }): Manifest;
 //# sourceMappingURL=compose.d.ts.map

package/dist/kernel/compose.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"compose.d.ts","sourceRoot":"","sources":["../../../../../packages/ketjs/src/kernel/compose.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAiB,MAAM,aAAa,CAAA;AAOrE,wBAAgB,OAAO,CACrB,OAAO,EAAE,SAAS,EAAE,EACpB,IAAI,GAAE;IAAE,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAO,GACxD,QAAQ,CA68BV"}
+{"version":3,"file":"compose.d.ts","sourceRoot":"","sources":["../../../../../packages/ketjs/src/kernel/compose.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAiB,oBAAoB,EAAE,MAAM,aAAa,CAAA;AAK3F,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAiDlD,wBAAgB,OAAO,CACrB,OAAO,EAAE,SAAS,EAAE,EACpB,IAAI,GAAE;IACJ,eAAe,CAAC,EAAE,MAAM,EAAE,CAAA;IAC1B,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,yBAAyB,CAAC,EAAE,OAAO,CAAA;IACnC,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAA;IAC/C,4BAA4B,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAA;CAC/D,GACL,QAAQ,CAsqCV"}