@mossbear/protocol 0.1.0-alpha.26

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Mossbear
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,7 @@
+# @mossbear/protocol
+
+Shared types and Valibot wire schemas for [Mossbear](https://app.mossbear.io) — the contract between the [`mossbear` CLI](https://www.npmjs.com/package/mossbear) and the Mossbear dashboard (action-sync payloads, raw guide-file payloads, context-bundle payloads).
+
+You normally don't install this directly; it ships as a dependency of `mossbear`.
+
+Source: https://github.com/auden-to/auden (`packages/protocol`)

package/dist/bundleSlug.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Bundle slug derivation — shared because every client that can create a bundle
+ * must produce a slug the server's `BundleSlugSchema` accepts, and there is one
+ * such rule. The dashboard's create row and the MCP `create_bundle` tool both
+ * call this; the server's unique index stays the authority on collisions.
+ */
+/**
+ * The per-user bundle every imported guide is enrolled in
+ * (`unified-item-sync-plan.md` → Slice 0). Delivery is about to become
+ * bundle-members-only, and an imported guide starts with zero memberships, so
+ * without a default every existing guide would stop reaching every repo.
+ *
+ * **Well-known, and as of `inbox-as-view` slice 5 there is no other kind.** No
+ * slug is reserved any more: `inbox` was the last one, held open only while
+ * slice 3b's `unfiled` carve-out keyed on it, and both are gone. This bundle
+ * needs no lifecycle of its own either — it is an ordinary user bundle that
+ * happens to be pre-populated, and a user who renames it, prunes it or
+ * unsubscribes from it is expressing a real preference rather than corrupting
+ * an invariant.
+ *
+ * The consequence of not reserving it: a user who already owns a bundle at this
+ * slug has it adopted as their default rather than getting a second one at
+ * `my-guides-2`. That is the better outcome — a bundle the user already calls
+ * "my guides" is the bundle their guides belong in.
+ *
+ * Shared because both sides need it: the server materializes it, and the CLI
+ * discovers it by slug in the bundle listing to learn its **id**, which is what
+ * a committed subscription stores (plan → "A subscription names a bundle id,
+ * not a slug").
+ */
+export declare const DEFAULT_GUIDES_SLUG = "my-guides";
+/** Display name minted alongside {@link DEFAULT_GUIDES_SLUG}. */
+export declare const DEFAULT_GUIDES_NAME = "My guides";
+/**
+ * Derive a URL-safe bundle slug from a user-typed name, suffixing `-2`, `-3`…
+ * until it stops colliding with `taken`. No slug is reserved — `inbox-as-view`
+ * slice 5 retired the last one along with the carve-out that needed it — so
+ * `taken` is the whole rule. The server's unique index is still the authority;
+ * this only picks a candidate the common case won't bounce.
+ */
+export declare function deriveBundleSlug(name: string, taken: ReadonlySet<string>): string;
+//# sourceMappingURL=bundleSlug.d.ts.map

package/dist/bundleSlug.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundleSlug.d.ts","sourceRoot":"","sources":["../src/bundleSlug.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,eAAO,MAAM,mBAAmB,cAAc,CAAA;AAE9C,iEAAiE;AACjE,eAAO,MAAM,mBAAmB,cAAc,CAAA;AAmB9C;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,MAAM,CAUjF"}

package/dist/bundleSlug.js

@@ -0,0 +1,68 @@
+/**
+ * Bundle slug derivation — shared because every client that can create a bundle
+ * must produce a slug the server's `BundleSlugSchema` accepts, and there is one
+ * such rule. The dashboard's create row and the MCP `create_bundle` tool both
+ * call this; the server's unique index stays the authority on collisions.
+ */
+/**
+ * The per-user bundle every imported guide is enrolled in
+ * (`unified-item-sync-plan.md` → Slice 0). Delivery is about to become
+ * bundle-members-only, and an imported guide starts with zero memberships, so
+ * without a default every existing guide would stop reaching every repo.
+ *
+ * **Well-known, and as of `inbox-as-view` slice 5 there is no other kind.** No
+ * slug is reserved any more: `inbox` was the last one, held open only while
+ * slice 3b's `unfiled` carve-out keyed on it, and both are gone. This bundle
+ * needs no lifecycle of its own either — it is an ordinary user bundle that
+ * happens to be pre-populated, and a user who renames it, prunes it or
+ * unsubscribes from it is expressing a real preference rather than corrupting
+ * an invariant.
+ *
+ * The consequence of not reserving it: a user who already owns a bundle at this
+ * slug has it adopted as their default rather than getting a second one at
+ * `my-guides-2`. That is the better outcome — a bundle the user already calls
+ * "my guides" is the bundle their guides belong in.
+ *
+ * Shared because both sides need it: the server materializes it, and the CLI
+ * discovers it by slug in the bundle listing to learn its **id**, which is what
+ * a committed subscription stores (plan → "A subscription names a bundle id,
+ * not a slug").
+ */
+export const DEFAULT_GUIDES_SLUG = 'my-guides';
+/** Display name minted alongside {@link DEFAULT_GUIDES_SLUG}. */
+export const DEFAULT_GUIDES_NAME = 'My guides';
+/**
+ * Matches `BundleSlugSchema`: lowercase alphanumerics + hyphens, starting
+ * alphanumeric, max 64 chars (`schemas.ts`).
+ */
+const MAX_SLUG_LENGTH = 64;
+function normalize(name) {
+    return name
+        .normalize('NFKD')
+        .replace(/[̀-ͯ]/g, '')
+        .toLowerCase()
+        .replace(/[^a-z0-9]+/g, '-')
+        .replace(/^-+|-+$/g, '')
+        .slice(0, MAX_SLUG_LENGTH)
+        .replace(/-+$/g, '');
+}
+/**
+ * Derive a URL-safe bundle slug from a user-typed name, suffixing `-2`, `-3`…
+ * until it stops colliding with `taken`. No slug is reserved — `inbox-as-view`
+ * slice 5 retired the last one along with the carve-out that needed it — so
+ * `taken` is the whole rule. The server's unique index is still the authority;
+ * this only picks a candidate the common case won't bounce.
+ */
+export function deriveBundleSlug(name, taken) {
+    const base = normalize(name) || 'bundle';
+    const isFree = (slug) => !taken.has(slug);
+    if (isFree(base))
+        return base;
+    for (let n = 2;; n++) {
+        const suffix = `-${n}`;
+        const candidate = base.slice(0, MAX_SLUG_LENGTH - suffix.length) + suffix;
+        if (isFree(candidate))
+            return candidate;
+    }
+}
+//# sourceMappingURL=bundleSlug.js.map

package/dist/bundleSlug.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundleSlug.js","sourceRoot":"","sources":["../src/bundleSlug.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,WAAW,CAAA;AAE9C,iEAAiE;AACjE,MAAM,CAAC,MAAM,mBAAmB,GAAG,WAAW,CAAA;AAE9C;;;GAGG;AACH,MAAM,eAAe,GAAG,EAAE,CAAA;AAE1B,SAAS,SAAS,CAAC,IAAY;IAC7B,OAAO,IAAI;SACR,SAAS,CAAC,MAAM,CAAC;SACjB,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC;SACrB,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;SACvB,KAAK,CAAC,CAAC,EAAE,eAAe,CAAC;SACzB,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;AACxB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,KAA0B;IACvE,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAA;IACxC,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAEjD,IAAI,MAAM,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IAC7B,KAAK,IAAI,CAAC,GAAG,CAAC,GAAI,CAAC,EAAE,EAAE,CAAC;QACtB,MAAM,MAAM,GAAG,IAAI,CAAC,EAAE,CAAA;QACtB,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,MAAM,CAAA;QACzE,IAAI,MAAM,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAA;IACzC,CAAC;AACH,CAAC"}

package/dist/bundleSlug.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=bundleSlug.test.d.ts.map

package/dist/bundleSlug.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundleSlug.test.d.ts","sourceRoot":"","sources":["../src/bundleSlug.test.ts"],"names":[],"mappings":""}

package/dist/bundleSlug.test.js

@@ -0,0 +1,43 @@
+import { describe, expect, it } from 'vitest';
+import { deriveBundleSlug } from './bundleSlug.js';
+const none = new Set();
+describe('deriveBundleSlug', () => {
+    it('kebab-cases a plain name', () => {
+        expect(deriveBundleSlug('My Notes', none)).toBe('my-notes');
+    });
+    it('collapses punctuation and whitespace runs into single hyphens', () => {
+        expect(deriveBundleSlug('  Client — Q3 / Planning!  ', none)).toBe('client-q3-planning');
+    });
+    it('strips diacritics', () => {
+        expect(deriveBundleSlug('Café Menü', none)).toBe('cafe-menu');
+    });
+    it('falls back to "bundle" when nothing survives normalization', () => {
+        expect(deriveBundleSlug('***', none)).toBe('bundle');
+        expect(deriveBundleSlug('', none)).toBe('bundle');
+    });
+    it('suffixes -2, -3… on collision with taken slugs', () => {
+        expect(deriveBundleSlug('Notes', new Set(['notes']))).toBe('notes-2');
+        expect(deriveBundleSlug('Notes', new Set(['notes', 'notes-2']))).toBe('notes-3');
+    });
+    // `inbox` was the last reserved slug, held open only while slice 3b's
+    // `unfiled` carve-out keyed on it. Slice 5 retired both, so it derives like
+    // any other name.
+    it('proposes `inbox` like any other name now that no slug is reserved', () => {
+        expect(deriveBundleSlug('Inbox', none)).toBe('inbox');
+    });
+    it('respects the 64-char cap, including when suffixing', () => {
+        const long = 'a'.repeat(80);
+        const base = deriveBundleSlug(long, none);
+        expect(base).toBe('a'.repeat(64));
+        const suffixed = deriveBundleSlug(long, new Set([base]));
+        expect(suffixed.length).toBeLessThanOrEqual(64);
+        expect(suffixed.endsWith('-2')).toBe(true);
+    });
+    it('does not end with a hyphen after truncation', () => {
+        const tricky = `${'a'.repeat(63)}bcd`;
+        const slug = deriveBundleSlug(tricky, none);
+        expect(slug.endsWith('-')).toBe(false);
+        expect(slug.length).toBeLessThanOrEqual(64);
+    });
+});
+//# sourceMappingURL=bundleSlug.test.js.map

package/dist/bundleSlug.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bundleSlug.test.js","sourceRoot":"","sources":["../src/bundleSlug.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAE7C,OAAO,EAAE,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AAElD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;AAE9B,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,0BAA0B,EAAE,GAAG,EAAE;QAClC,MAAM,CAAC,gBAAgB,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IAC7D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,CAAC,gBAAgB,CAAC,6BAA6B,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAChE,oBAAoB,CACrB,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mBAAmB,EAAE,GAAG,EAAE;QAC3B,MAAM,CAAC,gBAAgB,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IAC/D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,CAAC,gBAAgB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACpD,MAAM,CAAC,gBAAgB,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IACnD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,IAAI,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACrE,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IAClF,CAAC,CAAC,CAAA;IAEF,sEAAsE;IACtE,4EAA4E;IAC5E,kBAAkB;IAClB,EAAE,CAAC,mEAAmE,EAAE,GAAG,EAAE;QAC3E,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACvD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QAC3B,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;QACzC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAA;QACjC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;QACxD,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAA;QAC/C,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC5C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6CAA6C,EAAE,GAAG,EAAE;QACrD,MAAM,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,CAAA;QACrC,MAAM,IAAI,GAAG,gBAAgB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;QAC3C,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACtC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAA;IAC7C,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/index.d.ts

@@ -0,0 +1,11 @@
+/**
+ * @mossbear/protocol
+ *
+ * Runtime-validated shared schemas and transport contracts.
+ * This package must remain importable outside the CLI package.
+ */
+export * from './bundleSlug.js';
+export * from './schemas.js';
+export * from './types.js';
+export * from './version.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,iBAAiB,CAAA;AAC/B,cAAc,cAAc,CAAA;AAC5B,cAAc,YAAY,CAAA;AAC1B,cAAc,cAAc,CAAA"}

package/dist/index.js

@@ -0,0 +1,11 @@
+/**
+ * @mossbear/protocol
+ *
+ * Runtime-validated shared schemas and transport contracts.
+ * This package must remain importable outside the CLI package.
+ */
+export * from './bundleSlug.js';
+export * from './schemas.js';
+export * from './types.js';
+export * from './version.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,cAAc,iBAAiB,CAAA;AAC/B,cAAc,cAAc,CAAA;AAC5B,cAAc,YAAY,CAAA;AAC1B,cAAc,cAAc,CAAA"}