@mdbase-dev/sdk 0.0.0-stage → 0.1.0-beta.153

package/dist/application/session-hint.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Page-side hint of the last paired session: the signed-in view and the
+ * approved collections, from this browser. Presentation only, never authority:
+ * the native session decides what opens. It lets a returning app show its
+ * collection list at once while the session starts (P4), and lets a second
+ * tab of the app say "open in another tab" instead of offering Sign in.
+ * Signing out removes it.
+ */
+import type { AppInstallationCollection, AppInstallationSignInView } from "../app-host/installation-sign-in.js";
+import type { AppWebSignInSnapshot } from "../app-host/web-sign-in-session.js";
+export interface ApplicationSessionHint {
+    readonly signIn: AppInstallationSignInView;
+    readonly collections: readonly AppInstallationCollection[];
+}
+export interface ApplicationSessionHintStore {
+    read(): ApplicationSessionHint | null;
+    /** Record a settled paired snapshot; a signed-out one clears the hint. */
+    observe(snapshot: AppWebSignInSnapshot): void;
+    clear(): void;
+}
+export declare function applicationSessionHint(namespace: string, cpOrigin: string): ApplicationSessionHintStore;

package/dist/application/session-hint.js

@@ -0,0 +1,87 @@
+const ROLES = new Set(["owner", "editor", "viewer"]);
+const text = (v, max = 512) => typeof v === "string" && v.length > 0 && v.length <= max;
+const SETTLED = new Set(["unselected", "opening", "setup_required", "ready"]);
+function collection(v) {
+    const c = v;
+    if (!c || typeof c !== "object" || !text(c.collectionId, 64) || typeof c.displayName !== "string" || c.displayName.length > 512 || !ROLES.has(c.role))
+        return null;
+    return Object.freeze({ collectionId: c.collectionId, displayName: c.displayName, role: c.role });
+}
+function view(v) {
+    const s = v;
+    if (!s || typeof s !== "object" || s.state !== "paired" || !text(s.requestId, 64) || !text(s.installationId, 64) || !text(s.deviceId, 64)
+        || !text(s.appId, 64) || (s.kind !== "app-runtime" && s.kind !== "mobile") || !text(s.verificationUri, 2048) || !text(s.accountId, 64)
+        || !Array.isArray(s.collectionIds) || s.collectionIds.length > 1024 || !s.collectionIds.every(id => text(id, 64)))
+        return null;
+    return Object.freeze({
+        requestId: s.requestId, installationId: s.installationId, deviceId: s.deviceId, appId: s.appId, kind: s.kind,
+        verificationUri: s.verificationUri, state: "paired", accountId: s.accountId,
+        ...(typeof s.accountEmail === "string" && s.accountEmail.length <= 320 ? { accountEmail: s.accountEmail } : {}),
+        collectionIds: Object.freeze([...s.collectionIds]), createCollections: s.createCollections === true, requestedCreateCollections: s.requestedCreateCollections === true,
+    });
+}
+export function applicationSessionHint(namespace, cpOrigin) {
+    const key = `mdbase.${namespace}.session-hint.v1.${encodeURIComponent(cpOrigin)}`;
+    let cached = null, written = null;
+    const storage = () => { try {
+        return globalThis.localStorage ?? null;
+    }
+    catch {
+        return null;
+    } };
+    const read = () => {
+        let raw = null;
+        try {
+            raw = storage()?.getItem(key) ?? null;
+        }
+        catch {
+            return null;
+        }
+        if (cached && cached.raw === raw)
+            return cached.value;
+        let value = null;
+        try {
+            const parsed = raw ? JSON.parse(raw) : null;
+            const signIn = parsed?.v === 1 ? view(parsed.signIn) : null;
+            const list = Array.isArray(parsed?.collections) && parsed.collections.length <= 1024 ? parsed.collections.map(collection) : null;
+            if (signIn && list && list.every(c => c !== null))
+                value = Object.freeze({ signIn, collections: Object.freeze(list) });
+        }
+        catch {
+            value = null;
+        }
+        cached = { raw, value };
+        return value;
+    };
+    const clear = () => { written = null; try {
+        storage()?.removeItem(key);
+    }
+    catch { /* optional */ } };
+    return Object.freeze({
+        read,
+        clear,
+        observe(snapshot) {
+            if (snapshot.status === "signed_out" && snapshot.signIn === null) {
+                if (written !== "") {
+                    clear();
+                    written = "";
+                }
+                return;
+            }
+            if (!SETTLED.has(snapshot.status) || snapshot.signIn?.state !== "paired")
+                return;
+            const signIn = view(snapshot.signIn), collections = snapshot.collections.map(collection);
+            if (!signIn || !collections.every(c => c !== null))
+                return;
+            const raw = JSON.stringify({ v: 1, signIn, collections });
+            if (raw === written)
+                return;
+            written = raw;
+            try {
+                storage()?.setItem(key, raw);
+            }
+            catch { /* optional */ }
+        },
+    });
+}
+//# sourceMappingURL=session-hint.js.map

package/dist/application/session-hint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-hint.js","sourceRoot":"","sources":["../../src/application/session-hint.ts"],"names":[],"mappings":"AAsBA,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;AACrD,MAAM,IAAI,GAAG,CAAC,CAAU,EAAE,GAAG,GAAG,GAAG,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC;AAC9G,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,SAAS,EAAE,gBAAgB,EAAE,OAAO,CAAC,CAAC,CAAC;AAE9E,SAAS,UAAU,CAAC,CAAU;IAC5B,MAAM,CAAC,GAAG,CAA8B,CAAC;IACzC,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,CAAC,WAAW,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnK,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;AACnG,CAAC;AACD,SAAS,IAAI,CAAC,CAAU;IACtB,MAAM,CAAC,GAAG,CAA8B,CAAC;IACzC,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,cAAc,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;WACpI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,aAAa,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC;WACnI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,aAAa,CAAC,MAAM,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACjI,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,cAAc,EAAE,CAAC,CAAC,cAAc,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI;QAC5G,eAAe,EAAE,CAAC,CAAC,eAAe,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS;QAC3E,GAAG,CAAC,OAAO,CAAC,CAAC,YAAY,KAAK,QAAQ,IAAI,CAAC,CAAC,YAAY,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/G,aAAa,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,iBAAiB,KAAK,IAAI,EAAE,0BAA0B,EAAE,CAAC,CAAC,0BAA0B,KAAK,IAAI;KACvK,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,SAAiB,EAAE,QAAgB;IACxE,MAAM,GAAG,GAAG,UAAU,SAAS,oBAAoB,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;IAClF,IAAI,MAAM,GAAwE,IAAI,EAAE,OAAO,GAAkB,IAAI,CAAC;IACtH,MAAM,OAAO,GAAG,GAAG,EAAE,GAAG,IAAI,CAAC;QAAC,OAAO,UAAU,CAAC,YAAY,IAAI,IAAI,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC,CAAC,CAAC,CAAC;IACjG,MAAM,IAAI,GAAG,GAAkC,EAAE;QAC/C,IAAI,GAAG,GAAkB,IAAI,CAAC;QAC9B,IAAI,CAAC;YAAC,GAAG,GAAG,OAAO,EAAE,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QACrE,IAAI,MAAM,IAAI,MAAM,CAAC,GAAG,KAAK,GAAG;YAAE,OAAO,MAAM,CAAC,KAAK,CAAC;QACtD,IAAI,KAAK,GAAkC,IAAI,CAAC;QAChD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAA6D,CAAC,CAAC,CAAC,IAAI,CAAC;YACxG,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAC5D,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,CAAC,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YACjI,IAAI,MAAM,IAAI,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC;gBAAE,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,IAAmC,CAAC,EAAE,CAAC,CAAC;QACxJ,CAAC;QAAC,MAAM,CAAC;YAAC,KAAK,GAAG,IAAI,CAAC;QAAC,CAAC;QACzB,MAAM,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;QACxB,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IACF,MAAM,KAAK,GAAG,GAAG,EAAE,GAAG,OAAO,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC;QAAC,OAAO,EAAE,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC;IACrG,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI;QACJ,KAAK;QACL,OAAO,CAAC,QAA8B;YACpC,IAAI,QAAQ,CAAC,MAAM,KAAK,YAAY,IAAI,QAAQ,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;gBAAC,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;oBAAC,KAAK,EAAE,CAAC;oBAAC,OAAO,GAAG,EAAE,CAAC;gBAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YAC5H,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,EAAE,KAAK,KAAK,QAAQ;gBAAE,OAAO;YACjF,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACzF,IAAI,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC;gBAAE,OAAO;YAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,CAAC;YAC1D,IAAI,GAAG,KAAK,OAAO;gBAAE,OAAO;YAC5B,OAAO,GAAG,GAAG,CAAC;YACd,IAAI,CAAC;gBAAC,OAAO,EAAE,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,cAAc,CAAC,CAAC;QAChE,CAAC;KACF,CAAC,CAAC;AACL,CAAC"}

package/dist/application/setup.d.ts

@@ -0,0 +1,105 @@
+/** Reviewable collection setup: one plan for one review screen, then one
+ * guarded all-or-nothing apply. Native Core plans; the SDK only words it. */
+import type { AppResourceAssessment, AppResourceReview } from "../app-host/collection-control.js";
+import type { MdbaseApplicationReadinessSnapshot, MdbaseApplicationRequestOptions, MdbaseApplicationSnapshot } from "./entry.js";
+import { type MdbaseVersionRelation } from "../semver.js";
+import type { NewerPacks } from "./configuration.js";
+/** A starter record created once, in the same mutation as the first setup. */
+export interface MdbaseSetupRecord {
+    /** Collection path, e.g. `Welcome.md`. An occupied path is left alone. */
+    readonly path: string;
+    /** The complete Markdown document, frontmatter included. */
+    readonly document: string;
+}
+export interface MdbaseSetupPlanOptions extends MdbaseApplicationRequestOptions {
+    /** Reviewed adoptions from an earlier plan's `adoptable`: target → digest. */
+    readonly adopt?: Readonly<Record<string, string>>;
+    /** Starter records, created only if setup runs and their path is free.
+     * Verified afterwards by identity, path and confirmation, not exact bytes. */
+    readonly records?: readonly MdbaseSetupRecord[];
+}
+export type MdbaseSetupChangeKind = "create" | "update" | "delete" | "adopt" | "setting" | "record";
+/** One line of the review screen. `message` is written to be shown as is. */
+export interface MdbaseSetupChange {
+    readonly kind: MdbaseSetupChangeKind;
+    /** Collection path, or the setting's name for `setting`. */
+    readonly target: string;
+    readonly message: string;
+}
+export interface MdbaseSetupConflict {
+    readonly target: string;
+    readonly message: string;
+    /** Present when using the app's version resolves it: pass via `adopt`. */
+    readonly adoptable?: {
+        readonly digest: string;
+    };
+}
+/** Why setup can't run. `installed_newer`: a newer major version of this app's
+ * types is installed; ask the person to update the app (describeError action
+ * `update_app`). `setup_unresolved`: the collection still lacks what the app
+ * needs and setup has nothing it may write to fix it (a note type it set up
+ * was removed); the person changes the collection, then plans again.
+ * `setup_downgrade` is the former name and is no longer produced. */
+export type MdbaseSetupRefusalCode = "setup_forbidden" | "setup_conflict" | "setup_unresolved" | "installed_newer" | "setup_downgrade" | "setup_records_forbidden";
+/** One type pack in a plan. `relation` compares the installed version with the
+ * app's: `installed_newer` packs (same major) are kept as installed and the app
+ * reads and writes them, keeping fields it does not know. */
+export interface MdbaseSetupPack {
+    readonly id: string;
+    readonly version: string;
+    readonly status: AppResourceReview["packs"][number]["status"];
+    readonly installedVersion?: string;
+    readonly relation?: MdbaseVersionRelation;
+}
+export interface MdbaseSetupPlan {
+    /** `current`: nothing to do. `setup`: changes to apply. `conflict`: blocked. */
+    readonly status: "current" | "setup" | "conflict";
+    readonly canApply: boolean;
+    /** Binds the reviewed collection state and decisions. */
+    readonly digest: string;
+    /** One plain sentence for the top of the review screen. */
+    readonly summary: string;
+    readonly changes: readonly MdbaseSetupChange[];
+    readonly conflicts: readonly MdbaseSetupConflict[];
+    /** Conflicts that using the app's version would resolve: pass as `adopt` and plan again. */
+    readonly adoptable: Readonly<Record<string, string>>;
+    readonly packs: readonly MdbaseSetupPack[];
+    /** The definition documents setup would write, for a details view. */
+    readonly staged: readonly {
+        readonly path: string;
+        readonly document: string;
+    }[];
+    /** Starter records: `create` is written with the setup, `skip` already exists. */
+    readonly records: readonly {
+        readonly path: string;
+        readonly action: "create" | "skip";
+    }[];
+    readonly refusal?: {
+        readonly code: MdbaseSetupRefusalCode;
+        readonly message: string;
+    };
+}
+export interface MdbaseApplicationSetup {
+    /** Plan setup of the open collection. Changes no collection data (it may
+     * settle the local journal of an earlier apply); call again after any decision. */
+    plan(options?: MdbaseSetupPlanOptions): Promise<MdbaseSetupPlan>;
+    /** Apply a plan from `plan` unchanged, as one guarded mutation. Refuses
+     * `setup_changed` if the collection changed since it was reviewed. */
+    apply(plan: MdbaseSetupPlan, options?: MdbaseApplicationRequestOptions): Promise<MdbaseApplicationSnapshot>;
+}
+export declare function setupRecords(records: unknown): readonly MdbaseSetupRecord[];
+/** A plan with nothing to write cannot open a collection whose required
+ * contracts native readiness still finds missing or unimplemented (for example
+ * the app's seeded type was deleted). Say so instead of "nothing to do". */
+export declare function unresolvedSetup(plan: MdbaseSetupPlan, readiness: MdbaseApplicationReadinessSnapshot): MdbaseSetupPlan;
+/** Word native Core's review for a first-run user. No raw codes in messages. */
+export declare function setupPlan(assessed: AppResourceAssessment, input: {
+    readonly canManage: boolean;
+    readonly canCreateRecords: boolean;
+    readonly records: readonly {
+        readonly path: string;
+        readonly free: boolean;
+    }[];
+    /** Packs installed at a newer version (see configuration `newerPacks`). */
+    readonly newer?: NewerPacks;
+}): MdbaseSetupPlan;

package/dist/application/setup.js

@@ -0,0 +1,137 @@
+import { versionRelation } from "../semver.js";
+const MAX_RECORDS = 32, MAX_RECORD_BYTES = 256 * 1024;
+const name = (target) => (target.split("/").pop() ?? target).replace(/\.(md|ya?ml|json)$/i, "");
+/** Explain the purpose, not an internal identifier. Exact paths and documents
+ * remain in the plan for inspection; they are not names an owner chose. */
+function definition(kind) {
+    const bare = kind === "contract" ? "shared format for this app's notes"
+        : kind === "type" ? "note type for this app"
+            : kind === "schema" ? "set of checks for this app's note properties"
+                : "setup item this app needs";
+    return { the: `the ${bare}`, bare };
+}
+const plural = (n, one, many = `${one}s`) => `${n} ${n === 1 ? one : many}`;
+const setting = (path) => (path.split("/").filter(Boolean).pop() ?? path).replace(/[_-]+/g, " ");
+export function setupRecords(records) {
+    if (records === undefined)
+        return Object.freeze([]);
+    if (!Array.isArray(records) || records.length > MAX_RECORDS)
+        throw new TypeError("setup records: at most 32 { path, document } entries");
+    const seen = new Set(), utf8 = new TextEncoder();
+    let bytes = 0;
+    return Object.freeze(records.map(r => {
+        const path = r?.path, document = r?.document;
+        if (typeof path !== "string" || !/\.md$/i.test(path) || path.length > 1024 || path.startsWith("/") || path.split("/").some(s => !s || s === "." || s === "..")
+            || seen.has(path.toLowerCase()) || typeof document !== "string" || !document.length
+            || (bytes += utf8.encode(document).length + utf8.encode(path).length) > MAX_RECORD_BYTES)
+            throw new TypeError("setup records: each needs a unique relative .md path and a document (256 KiB in total)");
+        seen.add(path.toLowerCase());
+        return Object.freeze({ path, document });
+    }));
+}
+const UNRESOLVED = "This collection is missing something this app needs, and setup can't add it. A note type this app set up may have been changed or removed. Restore it, then try again.";
+/** A plan with nothing to write cannot open a collection whose required
+ * contracts native readiness still finds missing or unimplemented (for example
+ * the app's seeded type was deleted). Say so instead of "nothing to do". */
+export function unresolvedSetup(plan, readiness) {
+    if (plan.status !== "current" || plan.refusal || readiness.facets.contracts.assessment?.status !== "setup_required")
+        return plan;
+    return Object.freeze({ ...plan, status: "conflict", summary: UNRESOLVED,
+        refusal: Object.freeze({ code: "setup_unresolved", message: UNRESOLVED }) });
+}
+/** Word native Core's review for a first-run user. No raw codes in messages. */
+export function setupPlan(assessed, input) {
+    const review = assessed.review;
+    let status = assessed.status === "current" ? "current" : assessed.status === "conflict" ? "conflict" : "setup";
+    const changes = [], conflicts = [], adoptable = {};
+    const replaced = new Set(review.staged.map(s => s.path));
+    for (const pack of review.packs)
+        for (const r of pack.resources) {
+            const thing = definition(r.kind), The = `T${thing.the.slice(1)}`;
+            const why = r.kind === "contract" ? ", so other apps can work with them" : "";
+            switch (r.action) {
+                case "create":
+                    changes.push({ kind: "create", target: r.target, message: `Add ${thing.the}${why}.` });
+                    break;
+                case "update":
+                    changes.push({ kind: "update", target: r.target, message: `Update ${thing.the}.` });
+                    break;
+                case "delete":
+                    changes.push({ kind: "delete", target: r.target, message: `Remove ${thing.the}, which this app no longer uses.` });
+                    break;
+                // Unreviewed, Core plans adopt only for byte-identical bytes: nothing is
+                // written. A reviewed replacement is an adopt row whose document is staged.
+                case "adopt":
+                    changes.push({ kind: "adopt", target: r.target, message: replaced.has(r.target)
+                            ? `Replace ${thing.the} with this app's version. Yours isn't kept.`
+                            : `Use your existing ${thing.bare}, which already matches this app's.` });
+                    break;
+                // Core keeps a seed that no published version upgrades (`reason` says
+                // so); the app's version is then never written unless the person chooses
+                // it, so a required contract could stay unimplemented while the pack
+                // reads current. Like a conflicting seed, it is replaced only by choice.
+                case "preserve":
+                case "conflict": {
+                    if (r.action === "preserve" && r.reason === undefined)
+                        break;
+                    const seed = r.mode === "seed";
+                    const canAdopt = r.currentDigest !== undefined && (seed || !r.installed);
+                    if (canAdopt)
+                        adoptable[r.target] = r.currentDigest;
+                    conflicts.push({ target: r.target, ...(canAdopt ? { adoptable: { digest: r.currentDigest } } : {}),
+                        message: canAdopt && seed ? `Your ${thing.bare} has changes that can't be combined with the version this app needs. You can replace it with this app's version.`
+                            : canAdopt ? `This collection already has a ${thing.bare} that differs from the one this app needs. You can replace it with this app's version.`
+                                : r.installed ? `${The} was changed after this app set it up, so it can't be updated automatically.`
+                                    : `${The} can't be set up automatically.` });
+                    break;
+                }
+                default: break;
+            }
+        }
+    for (const c of review.configuration) {
+        const label = setting(c.path);
+        if (c.action === "add")
+            changes.push({ kind: "setting", target: label,
+                message: label === "include"
+                    ? "Include this app's files when reading the collection."
+                    : label === "record extensions" && typeof c.value === "string"
+                        ? `Read .${c.value.replace(/^\./, "")} files as notes in this collection.`
+                        : "Adjust a collection setting this app needs." });
+        else
+            conflicts.push({ target: label, message: "A collection setting differs from what this app needs, so it can't be changed automatically." });
+    }
+    const records = status === "current" ? [] : input.records.map(r => Object.freeze({ path: r.path, action: r.free ? "create" : "skip" }));
+    for (const r of records)
+        if (r.action === "create")
+            changes.push({ kind: "record", target: r.path, message: `Create the starter note "${name(r.path)}".` });
+    // A kept seed blocks even a pack Core reports current: never "nothing to do".
+    if (status === "current" && conflicts.length)
+        status = "conflict";
+    const newerMajor = (input.newer?.major.length ?? 0) > 0 || review.packs.some(p => p.installedVersion && versionRelation(p.installedVersion, p.version) === "installed_newer_major");
+    let refusal;
+    if (status !== "current" && !input.canManage)
+        refusal = { code: "setup_forbidden", message: "This app doesn't have permission to set up this collection." };
+    else if (newerMajor)
+        refusal = { code: "installed_newer", message: "A newer version of this app set up this collection. Update the app to continue." };
+    else if (conflicts.length)
+        refusal = { code: "setup_conflict", message: conflicts.length === Object.keys(adoptable).length
+                ? `${conflicts.length === 1 ? "One item differs" : `${conflicts.length} items differ`} from what this app needs. Choose whether to use this app's version to continue.`
+                : "Some items can't be set up automatically. Resolve them, then try again." };
+    else if (records.some(r => r.action === "create") && !input.canCreateRecords)
+        refusal = { code: "setup_records_forbidden", message: "This app doesn't have permission to create notes in this collection." };
+    const summary = status === "current" ? "Everything this app needs is already set up."
+        : refusal ? refusal.message
+            : `This app will make ${plural(changes.length, "change")} to this collection.${changes.every(c => c.kind === "create" || c.kind === "record" || (c.kind === "adopt" && !replaced.has(c.target))) ? " Nothing already in it is changed." : ""}`;
+    return Object.freeze({
+        status, canApply: status === "setup" && refusal === undefined, digest: assessed.assessmentDigest, summary,
+        changes: Object.freeze(changes.map(c => Object.freeze(c))), conflicts: Object.freeze(conflicts.map(c => Object.freeze(c))),
+        adoptable: Object.freeze(adoptable),
+        packs: Object.freeze([
+            ...review.packs.map(p => Object.freeze({ id: p.id, version: p.version, status: p.status,
+                ...(p.installedVersion ? { installedVersion: p.installedVersion, relation: versionRelation(p.installedVersion, p.version) } : {}) })),
+            ...(input.newer?.kept ?? []).map(p => Object.freeze({ id: p.id, version: p.version, status: "current", installedVersion: p.installedVersion, relation: "installed_newer" })),
+        ]),
+        staged: review.staged, records: Object.freeze(records), ...(refusal ? { refusal: Object.freeze(refusal) } : {}),
+    });
+}
+//# sourceMappingURL=setup.js.map

package/dist/application/setup.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setup.js","sourceRoot":"","sources":["../../src/application/setup.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,eAAe,EAA8B,MAAM,cAAc,CAAC;AA4E3E,MAAM,WAAW,GAAG,EAAE,EAAE,gBAAgB,GAAG,GAAG,GAAG,IAAI,CAAC;AACtD,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,IAAI,MAAM,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,EAAE,CAAC,CAAC;AACxG;2EAC2E;AAC3E,SAAS,UAAU,CAAC,IAAY;IAC9B,MAAM,IAAI,GAAG,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,oCAAoC;QACrE,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,wBAAwB;YAC1C,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,8CAA8C;gBAClE,CAAC,CAAC,2BAA2B,CAAC;IACpC,OAAO,EAAE,GAAG,EAAE,OAAO,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC;AACtC,CAAC;AACD,MAAM,MAAM,GAAG,CAAC,CAAS,EAAE,GAAW,EAAE,IAAI,GAAG,GAAG,GAAG,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAC5F,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,IAAI,IAAI,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;AAEzG,MAAM,UAAU,YAAY,CAAC,OAAgB;IAC3C,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACpD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,WAAW;QAAE,MAAM,IAAI,SAAS,CAAC,sDAAsD,CAAC,CAAC;IACzI,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,EAAE,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC;IACzD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE;QACnC,MAAM,IAAI,GAAI,CAAuB,EAAE,IAAI,EAAE,QAAQ,GAAI,CAAuB,EAAE,QAAQ,CAAC;QAC3F,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC;eACzJ,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,MAAM;eAChF,CAAC,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,GAAG,gBAAgB;YACxF,MAAM,IAAI,SAAS,CAAC,wFAAwF,CAAC,CAAC;QAChH,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QAC7B,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC,CAAC;AACN,CAAC;AAED,MAAM,UAAU,GAAG,wKAAwK,CAAC;AAE5L;;4EAE4E;AAC5E,MAAM,UAAU,eAAe,CAAC,IAAqB,EAAE,SAA6C;IAClG,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,OAAO,IAAI,SAAS,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,EAAE,MAAM,KAAK,gBAAgB;QAAE,OAAO,IAAI,CAAC;IACjI,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,UAAmB,EAAE,OAAO,EAAE,UAAU;QAC9E,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,kBAA2B,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC,CAAC;AAC1F,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,SAAS,CAAC,QAA+B,EAAE,KAK1D;IACC,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAO,CAAC;IAChC,IAAI,MAAM,GAAG,QAAQ,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAkB,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,UAAmB,CAAC,CAAC,CAAC,OAAgB,CAAC;IAC1I,MAAM,OAAO,GAAwB,EAAE,EAAE,SAAS,GAA0B,EAAE,EAAE,SAAS,GAA2B,EAAE,CAAC;IACvH,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACzD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,KAAK;QAAE,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YAChE,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,GAAG,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,MAAM,GAAG,GAAG,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,oCAAoC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9E,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC;gBACjB,KAAK,QAAQ;oBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,KAAK,CAAC,GAAG,GAAG,GAAG,GAAG,EAAE,CAAC,CAAC;oBAAC,MAAM;gBAC7G,KAAK,QAAQ;oBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,KAAK,CAAC,GAAG,GAAG,EAAE,CAAC,CAAC;oBAAC,MAAM;gBAC1G,KAAK,QAAQ;oBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,KAAK,CAAC,GAAG,kCAAkC,EAAE,CAAC,CAAC;oBAAC,MAAM;gBACzI,yEAAyE;gBACzE,4EAA4E;gBAC5E,KAAK,OAAO;oBAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;4BAC3F,CAAC,CAAC,WAAW,KAAK,CAAC,GAAG,6CAA6C;4BACnE,CAAC,CAAC,qBAAqB,KAAK,CAAC,IAAI,qCAAqC,EAAE,CAAC,CAAC;oBAAC,MAAM;gBACnF,sEAAsE;gBACtE,yEAAyE;gBACzE,qEAAqE;gBACrE,yEAAyE;gBACzE,KAAK,UAAU,CAAC;gBAChB,KAAK,UAAU,CAAC,CAAC,CAAC;oBAChB,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS;wBAAE,MAAM;oBAC7D,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC;oBAC/B,MAAM,QAAQ,GAAG,CAAC,CAAC,aAAa,KAAK,SAAS,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;oBACzE,IAAI,QAAQ;wBAAE,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,aAAc,CAAC;oBACrD,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,aAAc,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACjG,OAAO,EAAE,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC,IAAI,kHAAkH;4BAC9J,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,iCAAiC,KAAK,CAAC,IAAI,wFAAwF;gCAC9I,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,8EAA8E;oCAClG,CAAC,CAAC,GAAG,GAAG,iCAAiC,EAAE,CAAC,CAAC;oBACrD,MAAM;gBACR,CAAC;gBACD,OAAO,CAAC,CAAC,MAAM;YACjB,CAAC;QACH,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;QACrC,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,CAAC,MAAM,KAAK,KAAK;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK;gBACnE,OAAO,EAAE,KAAK,KAAK,SAAS;oBAC1B,CAAC,CAAC,uDAAuD;oBACzD,CAAC,CAAC,KAAK,KAAK,mBAAmB,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;wBAC5D,CAAC,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,qCAAqC;wBAC1E,CAAC,CAAC,6CAA6C,EAAE,CAAC,CAAC;;YACpD,SAAS,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,8FAA8F,EAAE,CAAC,CAAC;IAClJ,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAiB,CAAC,CAAC,CAAC,MAAe,EAAE,CAAC,CAAC,CAAC;IAC1J,KAAK,MAAM,CAAC,IAAI,OAAO;QAAE,IAAI,CAAC,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,4BAA4B,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5J,8EAA8E;IAC9E,IAAI,MAAM,KAAK,SAAS,IAAI,SAAS,CAAC,MAAM;QAAE,MAAM,GAAG,UAAU,CAAC;IAClE,MAAM,UAAU,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,gBAAgB,IAAI,eAAe,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,uBAAuB,CAAC,CAAC;IACpL,IAAI,OAAmC,CAAC;IACxC,IAAI,MAAM,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,SAAS;QAAE,OAAO,GAAG,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,6DAA6D,EAAE,CAAC;SACvJ,IAAI,UAAU;QAAE,OAAO,GAAG,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,iFAAiF,EAAE,CAAC;SAClJ,IAAI,SAAS,CAAC,MAAM;QAAE,OAAO,GAAG,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,SAAS,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM;gBACxH,CAAC,CAAC,GAAG,SAAS,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,GAAG,SAAS,CAAC,MAAM,eAAe,kFAAkF;gBACvK,CAAC,CAAC,yEAAyE,EAAE,CAAC;SAC3E,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB;QAAE,OAAO,GAAG,EAAE,IAAI,EAAE,yBAAyB,EAAE,OAAO,EAAE,sEAAsE,EAAE,CAAC;IAC7M,MAAM,OAAO,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,8CAA8C;QACnF,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO;YACzB,CAAC,CAAC,sBAAsB,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,uBACtD,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,oCAAoC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACtK,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,OAAO,IAAI,OAAO,KAAK,SAAS,EAAE,MAAM,EAAE,QAAQ,CAAC,gBAAgB,EAAE,OAAO;QACzG,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1H,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;QACnC,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC;YACnB,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM;gBACrF,GAAG,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,CAAC,CAAC,gBAAgB,EAAE,QAAQ,EAAE,eAAe,CAAC,CAAC,CAAC,gBAAgB,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YACvI,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,SAAkB,EAAE,gBAAgB,EAAE,CAAC,CAAC,gBAAgB,EAAE,QAAQ,EAAE,iBAA0B,EAAE,CAAC,CAAC;SAC/L,CAAC;QACF,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChH,CAAC,CAAC;AACL,CAAC"}

package/dist/application/sign-out.d.ts

@@ -0,0 +1,17 @@
+/** Unconfirmed writes on the open collection: the larger of the write ledger's
+ * pending entries and the replica's status (0 when none is open). */
+export declare function pendingWrites(connection: {
+    readonly records: {
+        readonly status: {
+            readonly pending: number;
+        };
+        readonly ledger?: {
+            getSnapshot(): {
+                readonly pending: readonly unknown[];
+            };
+        };
+    };
+} | null | undefined): number;
+/** The typed refusal while writes are unconfirmed; `{discard: true}` overrides
+ * it. `details` is the number of unconfirmed writes. */
+export declare function signOutPendingWritesError(pending?: number): import("../errors.js").MdbaseError;

package/dist/application/sign-out.js

@@ -0,0 +1,28 @@
+/** UX-011: shared sign-out guard for the entry and the testing fixtures. */
+import { mdbaseError } from "../errors.js";
+/** Unconfirmed writes on the open collection: the larger of the write ledger's
+ * pending entries and the replica's status (0 when none is open). */
+export function pendingWrites(connection) {
+    let status = 0, ledger = 0;
+    try {
+        const pending = connection?.records.status.pending;
+        status = typeof pending === "number" && pending > 0 ? pending : 0;
+    }
+    catch {
+        status = 0;
+    }
+    try {
+        ledger = connection?.records.ledger?.getSnapshot().pending.length ?? 0;
+    }
+    catch {
+        ledger = 0;
+    }
+    return Math.max(status, ledger);
+}
+/** The typed refusal while writes are unconfirmed; `{discard: true}` overrides
+ * it. `details` is the number of unconfirmed writes. */
+export function signOutPendingWritesError(pending = 0) {
+    const what = pending === 1 ? "1 change hasn't" : pending > 1 ? `${pending} changes haven't` : "Some changes haven't";
+    return mdbaseError("conflict", `${what} reached mdbase yet. Wait for them to finish, or sign out anyway and lose them on this device.`, { reason: "sign_out_pending_writes", details: pending });
+}
+//# sourceMappingURL=sign-out.js.map

package/dist/application/sign-out.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign-out.js","sourceRoot":"","sources":["../../src/application/sign-out.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAE3C;qEACqE;AACrE,MAAM,UAAU,aAAa,CAAC,UAAqL;IACjN,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,GAAG,CAAC,CAAC;IAC3B,IAAI,CAAC;QAAC,MAAM,OAAO,GAAG,UAAU,EAAE,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;QAAC,MAAM,GAAG,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,GAAG,CAAC,CAAC;IAAC,CAAC;IACpJ,IAAI,CAAC;QAAC,MAAM,GAAG,UAAU,EAAE,OAAO,CAAC,MAAM,EAAE,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,IAAI,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,GAAG,CAAC,CAAC;IAAC,CAAC;IACrG,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAClC,CAAC;AACD;wDACwD;AACxD,MAAM,UAAU,yBAAyB,CAAC,OAAO,GAAG,CAAC;IACnD,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,kBAAkB,CAAC,CAAC,CAAC,sBAAsB,CAAC;IACrH,OAAO,WAAW,CAAC,UAAU,EAAE,GAAG,IAAI,gGAAgG,EAAE,EAAE,MAAM,EAAE,yBAAyB,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;AACnM,CAAC"}

package/dist/application/storage-scope.d.ts

@@ -0,0 +1,8 @@
+import type { ApplicationDeclarationSnapshot } from "./declaration.js";
+/** Local organization only: same-origin JavaScript remains trusted. Compare
+ * BEFORE registration rebinding so a replacement app ID cannot move old data. */
+export declare function applicationStorageNamespace(declaration: Readonly<ApplicationDeclarationSnapshot>): string | null;
+export declare function storageNamespaceDigest(namespace: string): string;
+/** Bounded owner also leaves room for the existing :scope:<UUID> recovery slot.
+ * Hash the tuple to avoid delimiter collisions and preserve the family binding. */
+export declare function applicationStorageOwner(manifestId: string, namespace: string | null): string;

package/dist/application/storage-scope.js

@@ -0,0 +1,15 @@
+import { sha256 } from "@noble/hashes/sha2.js";
+/** Local organization only: same-origin JavaScript remains trusted. Compare
+ * BEFORE registration rebinding so a replacement app ID cannot move old data. */
+export function applicationStorageNamespace(declaration) {
+    return declaration.storage.applicationNamespace === declaration.id ? null : declaration.storage.applicationNamespace;
+}
+export function storageNamespaceDigest(namespace) {
+    return Array.from(sha256(new TextEncoder().encode(namespace)), byte => byte.toString(16).padStart(2, "0")).join("");
+}
+/** Bounded owner also leaves room for the existing :scope:<UUID> recovery slot.
+ * Hash the tuple to avoid delimiter collisions and preserve the family binding. */
+export function applicationStorageOwner(manifestId, namespace) {
+    return namespace === null ? `bundle:${manifestId}` : `bundle-storage:${storageNamespaceDigest(JSON.stringify([manifestId, namespace]))}`;
+}
+//# sourceMappingURL=storage-scope.js.map

package/dist/application/storage-scope.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-scope.js","sourceRoot":"","sources":["../../src/application/storage-scope.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,MAAM,EAAC,MAAM,uBAAuB,CAAC;AAG7C;iFACiF;AACjF,MAAM,UAAU,2BAA2B,CAAC,WAAoD;IAC9F,OAAO,WAAW,CAAC,OAAO,CAAC,oBAAoB,KAAG,WAAW,CAAC,EAAE,CAAA,CAAC,CAAA,IAAI,CAAA,CAAC,CAAA,WAAW,CAAC,OAAO,CAAC,oBAAoB,CAAC;AACjH,CAAC;AACD,MAAM,UAAU,sBAAsB,CAAC,SAAgB;IACrD,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EAAC,IAAI,CAAA,EAAE,CAAA,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAClH,CAAC;AACD;mFACmF;AACnF,MAAM,UAAU,uBAAuB,CAAC,UAAiB,EAAC,SAAqB;IAC7E,OAAO,SAAS,KAAG,IAAI,CAAA,CAAC,CAAA,UAAU,UAAU,EAAE,CAAA,CAAC,CAAA,kBAAkB,sBAAsB,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,UAAU,EAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;AACpI,CAAC"}

package/dist/application/tabs.d.ts

@@ -0,0 +1,98 @@
+/** One session per app per browser. The first tab (the leader) runs the SDK
+ * Worker; every other tab of the same app and build (a follower) attaches to
+ * that Worker through the leader page. Followers get their own operation
+ * channel and their own data, control and timer ports, so reads, writes and
+ * live updates work in every tab, and sign-out, revocation and collection
+ * switches reach all of them through the one session.
+ *
+ * Leadership is a Web Lock. Followers wait for it; when the leader tab closes,
+ * reloads or is parked in the back/forward cache, the next follower takes over
+ * and the others re-attach. BroadcastChannel cannot transfer MessagePorts, so
+ * the leader page tunnels each port as a numbered stream: any port inside a
+ * message becomes a stream marker on one side and a fresh local port on the
+ * other. Each follower holds a presence lock; the leader waits on it, so a tab
+ * that vanishes without a goodbye is detached all the same. No timers. */
+export interface ApplicationTabsScope {
+    readonly cpOrigin: string;
+    readonly appId: string;
+    /** Build identity (the Worker module URL): tabs on different builds never share a Worker. */
+    readonly build: string;
+    readonly storageNamespace?: string;
+}
+export interface ApplicationTabLocks {
+    request(name: string, options: {
+        ifAvailable: true;
+        signal?: undefined;
+    }, callback: (lock: unknown) => Promise<void> | void): Promise<unknown>;
+    request(name: string, options: {
+        signal?: AbortSignal;
+    }, callback: (lock: unknown) => Promise<void> | void): Promise<unknown>;
+}
+export interface ApplicationTabsEnvironment {
+    readonly locks: ApplicationTabLocks;
+    readonly BroadcastChannel: typeof globalThis.BroadcastChannel;
+}
+/** A follower's link to the leader's Worker. */
+export interface ApplicationFollowerLink {
+    readonly port: MessagePort;
+    readonly binding: string;
+    /** Leave the leader (this tab's runtime stopped). */
+    leave(): void;
+}
+export interface ApplicationLeaderWorker {
+    attach(port: MessagePort, binding: string): void;
+    detach(binding: string): void;
+}
+/** This page's membership in its app's tab group. */
+export declare class ApplicationTabs {
+    private readonly env;
+    private readonly lost;
+    private readonly signedInElsewhere;
+    readonly tab: `${string}-${string}-${string}-${string}-${string}`;
+    private readonly base;
+    private channel;
+    private presence;
+    /** Held while this tab leads. */
+    private leading;
+    private hub;
+    private follower;
+    /** The leader is resigning because the session signed out. */
+    private signingOut;
+    /** This leader already told signed-out tabs that its session is signed in. */
+    private announced;
+    private joining;
+    constructor(scope: ApplicationTabsScope, env: ApplicationTabsEnvironment, lost: (signedOut: boolean) => void, signedInElsewhere?: () => void);
+    /** True while this tab runs the Worker for every tab. */
+    get leader(): boolean;
+    private open;
+    private post;
+    /** Hold a lock until the returned release is called. */
+    private hold;
+    /** Lead if no tab of this app leads, else join the leader. */
+    elect(signal: AbortSignal): Promise<{
+        readonly kind: "leader";
+    } | ({
+        readonly kind: "follower";
+    } & ApplicationFollowerLink)>;
+    /** Leader: forward follower tabs onto this tab's Worker. */
+    lead(worker: ApplicationLeaderWorker): void;
+    /** Leader: the shared Worker failed. Every follower's session fails with it,
+     * the same way this tab's does; it is not replaced while this tab holds it. */
+    fault(): void;
+    /** Leader: the session signed out. Followers hear it now, before this tab's
+     * Worker stops and it resigns, so when the leader goes they sign out instead
+     * of starting a new session as the next leader. */
+    signedOut(): void;
+    /** Leader: the session is signed in. Tabs left signed out (every tab signed
+     * out, then this one signed in again) join it rather than staying out. */
+    signedIn(): void;
+    /** Leader: stop leading (the Worker stopped). Followers re-elect. */
+    resign(): void;
+    private leave;
+    /** The leader went away: this tab's runtime restarts (as leader or follower). */
+    private departed;
+    /** Page leaving or entry closing: let go of everything. */
+    release(): void;
+    private received;
+    private drop;
+}