@mostra/protocol 0.0.0-stage → 0.1.0

package/dist/diagnostics/codes/home.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"home.js","names":[],"sources":["../../../src/diagnostics/codes/home.ts"],"sourcesContent":["/**\n * Diagnostic codes of the HOME area: the Mostra home, its ledger and the instance that owns it\n * (DATA_MODEL §1, §6; FAILURE_MODEL §2, §3).\n */\nimport type { AreaCatalog } from \"../spec.ts\";\n\n/** The codes of the HOME area, in the order they were added. */\nexport const homeDiagnosticCodes = [\n  \"MOSTRA_HOME_LOCKED\",\n  \"MOSTRA_HOME_NOT_OWNED\",\n  \"MOSTRA_HOME_SOCKET_TOO_LONG\",\n  \"MOSTRA_HOME_TOO_NEW\",\n  \"MOSTRA_HOME_LEDGER_UNREADABLE\",\n  \"MOSTRA_HOME_DISK_FULL\",\n  \"MOSTRA_HOME_GONE\",\n  \"MOSTRA_HOME_MISMATCH\",\n  \"MOSTRA_HOME_INTEGRITY\",\n  \"MOSTRA_HOME_NOT_ALWAYS_ON\",\n  \"MOSTRA_HOME_GC_INCOMPLETE\",\n  // gen:codes\n] as const;\n\n/** The codes of the HOME area. */\nexport type HomeDiagnosticCode = (typeof homeDiagnosticCodes)[number];\n\n/** The HOME area's catalog entries. */\nexport const homeDiagnostics: AreaCatalog<HomeDiagnosticCode> = {\n  MOSTRA_HOME_LOCKED: {\n    severity: \"error\",\n    phase: \"host\",\n    title: \"Home in use by another instance\",\n    hint: \"Use the instance that already owns this home, or stop it (`mostra daemon stop`, or end the process named in the message) and start again.\",\n    docs: {\n      explanation:\n        \"One Mostra instance owns a home at a time. It holds an exclusive lock on the home's ledger, and the operating system releases that lock when the process exits. Mostra reports this code in two cases: `mostra host` was started for a home another instance already owns, or a starter found the owner but couldn't reach its control socket. The message names the owner's process ID.\",\n      fix: \"To share the running instance, attach to it: start the client with the same home (`MOSTRA_HOME` or `--home`) instead of starting a second instance. To replace it, stop it with `mostra daemon stop`, or end the process named in the message, and start again. A host that needs its own instance gives it its own home.\",\n    },\n  },\n  MOSTRA_HOME_NOT_OWNED: {\n    severity: \"error\",\n    phase: \"host\",\n    title: \"Directory not owned by you\",\n    hint: \"Choose a home you own with `--home` or `MOSTRA_HOME`, or give the directory named in the message back to your user with `chown`.\",\n    docs: {\n      explanation:\n        \"Mostra keeps secrets, answers and its ledger in the home, and its control socket in a runtime directory, so it uses only directories that belong to the user running it. It reports this code when the home or the runtime directory is owned by another user, or when the path exists but isn't a directory. Mostra changes nothing in that case.\",\n      fix: \"Point Mostra at a directory you own: `--home <dir>` or `MOSTRA_HOME` for the home, `MOSTRA_RUNTIME_DIR` for the runtime directory. If the directory should be yours, change its owner with `chown`. Mostra tightens a directory you own to mode 0700 by itself.\",\n    },\n  },\n  MOSTRA_HOME_SOCKET_TOO_LONG: {\n    severity: \"error\",\n    phase: \"host\",\n    title: \"Control socket path too long\",\n    hint: \"Set `MOSTRA_RUNTIME_DIR` to a short directory you own, for example `/tmp/mostra-$USER`, and start again.\",\n    docs: {\n      explanation:\n        \"Clients reach an instance through a Unix socket in a per-user runtime directory. The operating system limits a socket path to 103 bytes on macOS and 107 on Linux, and the path Mostra computed is longer, usually because the home directory's path is long. Mostra stops instead of using a different place that clients couldn't find.\",\n      fix: \"Set `MOSTRA_RUNTIME_DIR` to a short directory you own, such as `/tmp/mostra-$USER`, in the environment of every Mostra client and host that uses this home. Mostra creates it with mode 0700 and re-creates its socket if a temporary-file cleanup removes it.\",\n    },\n  },\n  MOSTRA_HOME_TOO_NEW: {\n    severity: \"error\",\n    phase: \"host\",\n    title: \"Home written by a newer Mostra\",\n    hint: \"Run a Mostra release at least as new as the one named in the message, or use another home with `--home`.\",\n    docs: {\n      explanation:\n        \"A newer Mostra migrated this home's ledger to a schema version this runtime doesn't know. Reading it could misinterpret or lose data, so this runtime refuses to open it. The message names the schema version and the release that wrote it.\",\n      fix: \"Upgrade the runtime (or the host or CLI that bundles it) to at least the release named in the message. Mostra never migrates a ledger backwards; to keep an older release, give it a separate home with `--home` or `MOSTRA_HOME`.\",\n    },\n  },\n  MOSTRA_HOME_LEDGER_UNREADABLE: {\n    severity: \"error\",\n    phase: \"host\",\n    title: \"Ledger can't be read\",\n    hint: \"Restore the ledger from the latest `ledger.sqlite.bak-*` backup in the home's `store/` directory, or move the damaged file aside.\",\n    docs: {\n      explanation:\n        \"The ledger (`store/ledger.sqlite` in the home) holds drafts, submissions, events and the rest of the home's interaction data. Mostra reports this code when the file can't be opened, isn't a SQLite database, isn't a Mostra ledger, or fails SQLite's integrity check. Mostra never replaces an existing ledger with an empty one.\",\n      fix: \"Stop every Mostra process for this home. Copy `store/ledger.sqlite` somewhere safe, then restore the newest `store/ledger.sqlite.bak-<from>-<to>` in its place, or move the damaged file aside to start an empty ledger. Versions, sources and blobs in the home are untouched either way.\",\n    },\n  },\n  MOSTRA_HOME_DISK_FULL: {\n    severity: \"error\",\n    phase: \"host\",\n    title: \"Disk full\",\n    hint: \"Free space on the disk that holds the Mostra home, then retry.\",\n    docs: {\n      explanation:\n        \"A ledger write failed because the disk holding the home is full. The transaction was rolled back, so nothing partial was saved and nothing that was acknowledged earlier is lost. Viewers keep unsaved edits in their browser until a retry succeeds.\",\n      fix: \"Free space on that disk (`mostra gc` removes unreferenced versions; build caches can be deleted), then retry the operation. Retries with the same request or mutation ID are safe.\",\n    },\n  },\n  MOSTRA_HOME_GONE: {\n    severity: \"error\",\n    phase: \"host\",\n    title: \"Home directory removed\",\n    hint: \"Restore or recreate the home directory, then start Mostra again.\",\n    docs: {\n      explanation:\n        \"The instance's home directory disappeared or was replaced while the instance was running. Writing anywhere else could split the home's data, so the instance stops accepting requests, stops its child processes and exits.\",\n      fix: \"Put the home back (or choose a new one with `--home` or `MOSTRA_HOME`) and start Mostra again. Clients reconnect and retry their requests by ID.\",\n    },\n  },\n  MOSTRA_HOME_MISMATCH: {\n    severity: \"error\",\n    phase: \"host\",\n    title: \"Instance serves a different home\",\n    hint: \"Connect to the instance for the home you expect, or start it with `--home` set to that home.\",\n    docs: {\n      explanation:\n        \"A client sent `home.path` in `mostra/initialize`, and it names a different home from the one the instance locked at start-up. The home is chosen when the instance starts (`--home`, then `MOSTRA_HOME`, then the platform default), so `home.path` is a check: it stops a client from writing to a home it didn't mean.\",\n      fix: \"Start the instance with `--home` set to the home the client expects, or connect to the socket of the instance that serves it. Leave `home.path` out to accept whichever home the instance serves.\",\n    },\n  },\n  MOSTRA_HOME_INTEGRITY: {\n    severity: \"error\",\n    phase: \"host\",\n    title: \"Stored version or file damaged\",\n    hint: \"Publish the version's source again to rebuild a damaged version in place, and run `mostra doctor` for other damaged objects.\",\n    docs: {\n      explanation:\n        \"Mostra checks stored versions, source snapshots and blobs against their recorded content digests before using them. This code means a stored object is missing or its content changed after it was written, for example after a disk error or a manual edit inside the home. The message names the object.\",\n      fix: \"Leave files inside the home unchanged. To repair a version, publish the same source again: Mostra rebuilds the version's directory and puts it back under the same version ID, and the artifact keeps its version number. If the source has changed since, the publish makes a new version and the damaged one stays as it is; its source snapshot in the home holds the original files. `mostra doctor` lists other damaged objects.\",\n    },\n  },\n  MOSTRA_HOME_NOT_ALWAYS_ON: {\n    severity: \"warning\",\n    phase: \"host\",\n    title: \"Long-lived artifacts without an always-on daemon\",\n    hint: \"Run `mostra daemon install` so the home's daemon runs as a login service and these artifacts answer at any hour.\",\n    docs: {\n      explanation:\n        \"The home has artifacts with submission policy `none`, which are meant to stay open (dashboards, task managers, D63), but no login service runs its daemon. Without one, the daemon exits after 30 idle minutes and their links stop answering until a command starts it again.\",\n      fix: \"Run `mostra daemon install`. It registers a launchd or systemd user service that keeps the home's daemon running; `mostra daemon uninstall` removes it.\",\n    },\n  },\n  MOSTRA_HOME_GC_INCOMPLETE: {\n    severity: \"warning\",\n    phase: \"host\",\n    title: \"gc didn't finish a step\",\n    hint: \"Run `mostra gc` again: what this run removed is in its result, and the next run picks up what it left.\",\n    docs: {\n      explanation:\n        \"`mostra gc` removes what nothing references in steps: version files, source snapshots, lock layouts, the package store, verify's caches and, when asked, events. One step failed (the message names it and why), so it left that step's files in place. Everything an earlier step removed is listed in the result, and the versions it collected stay collected. The home is consistent: what gc left is still recorded as there.\",\n      fix: \"Run `mostra gc` again; a failure that repeats names its cause in the message (for example, a file the user can't remove).\",\n    },\n  },\n  // gen:entries\n};\n"],"mappings":";;AAOA,MAAa,sBAAsB;CACjC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AAEF;;AAMA,MAAa,kBAAmD;CAC9D,oBAAoB;EAClB,UAAU;EACV,OAAO;EACP,OAAO;EACP,MAAM;EACN,MAAM;GACJ,aACE;GACF,KAAK;EACP;CACF;CACA,uBAAuB;EACrB,UAAU;EACV,OAAO;EACP,OAAO;EACP,MAAM;EACN,MAAM;GACJ,aACE;GACF,KAAK;EACP;CACF;CACA,6BAA6B;EAC3B,UAAU;EACV,OAAO;EACP,OAAO;EACP,MAAM;EACN,MAAM;GACJ,aACE;GACF,KAAK;EACP;CACF;CACA,qBAAqB;EACnB,UAAU;EACV,OAAO;EACP,OAAO;EACP,MAAM;EACN,MAAM;GACJ,aACE;GACF,KAAK;EACP;CACF;CACA,+BAA+B;EAC7B,UAAU;EACV,OAAO;EACP,OAAO;EACP,MAAM;EACN,MAAM;GACJ,aACE;GACF,KAAK;EACP;CACF;CACA,uBAAuB;EACrB,UAAU;EACV,OAAO;EACP,OAAO;EACP,MAAM;EACN,MAAM;GACJ,aACE;GACF,KAAK;EACP;CACF;CACA,kBAAkB;EAChB,UAAU;EACV,OAAO;EACP,OAAO;EACP,MAAM;EACN,MAAM;GACJ,aACE;GACF,KAAK;EACP;CACF;CACA,sBAAsB;EACpB,UAAU;EACV,OAAO;EACP,OAAO;EACP,MAAM;EACN,MAAM;GACJ,aACE;GACF,KAAK;EACP;CACF;CACA,uBAAuB;EACrB,UAAU;EACV,OAAO;EACP,OAAO;EACP,MAAM;EACN,MAAM;GACJ,aACE;GACF,KAAK;EACP;CACF;CACA,2BAA2B;EACzB,UAAU;EACV,OAAO;EACP,OAAO;EACP,MAAM;EACN,MAAM;GACJ,aACE;GACF,KAAK;EACP;CACF;CACA,2BAA2B;EACzB,UAAU;EACV,OAAO;EACP,OAAO;EACP,MAAM;EACN,MAAM;GACJ,aACE;GACF,KAAK;EACP;CACF;AAEF"}

package/dist/diagnostics/codes/host.d.ts

@@ -0,0 +1,8 @@
+import "../spec.js";
+//#region src/diagnostics/codes/host.d.ts
+/** The codes of the HOST area, in the order they were added. */
+export declare const hostDiagnosticCodes: readonly ["MOSTRA_HOST_REVISION_UNSUPPORTED", "MOSTRA_HOST_MALFORMED", "MOSTRA_HOST_METHOD_UNKNOWN", "MOSTRA_HOST_INVALID_PARAMS", "MOSTRA_HOST_INTERNAL_ERROR", "MOSTRA_HOST_INITIALIZE_ORDER", "MOSTRA_HOST_PORT_UNSUPPORTED", "MOSTRA_HOST_CONNECTION_CLOSED", "MOSTRA_HOST_TIMEOUT", "MOSTRA_HOST_SHUTDOWN_REFUSED", "MOSTRA_HOST_REQUEST_ID_REUSED", "MOSTRA_HOST_CURSOR_COMPACTED", "MOSTRA_HOST_SUBSCRIPTION_UNKNOWN", "MOSTRA_HOST_NOTIFICATION_UNSUPPORTED", "MOSTRA_HOST_MESSAGE_TOO_LARGE"];
+/** The codes of the HOST area. */
+export type HostDiagnosticCode = (typeof hostDiagnosticCodes)[number];
+//#endregion
+//# sourceMappingURL=host.d.ts.map

package/dist/diagnostics/codes/host.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"host.d.ts","names":[],"sources":["../../../src/diagnostics/codes/host.ts"],"mappings":";;;qBAMa;;YAoBD,6BAA6B"}

package/dist/diagnostics/codes/host.js

@@ -0,0 +1,176 @@
+//#region src/diagnostics/codes/host.ts
+/** The codes of the HOST area, in the order they were added. */
+const hostDiagnosticCodes = [
+	"MOSTRA_HOST_REVISION_UNSUPPORTED",
+	"MOSTRA_HOST_MALFORMED",
+	"MOSTRA_HOST_METHOD_UNKNOWN",
+	"MOSTRA_HOST_INVALID_PARAMS",
+	"MOSTRA_HOST_INTERNAL_ERROR",
+	"MOSTRA_HOST_INITIALIZE_ORDER",
+	"MOSTRA_HOST_PORT_UNSUPPORTED",
+	"MOSTRA_HOST_CONNECTION_CLOSED",
+	"MOSTRA_HOST_TIMEOUT",
+	"MOSTRA_HOST_SHUTDOWN_REFUSED",
+	"MOSTRA_HOST_REQUEST_ID_REUSED",
+	"MOSTRA_HOST_CURSOR_COMPACTED",
+	"MOSTRA_HOST_SUBSCRIPTION_UNKNOWN",
+	"MOSTRA_HOST_NOTIFICATION_UNSUPPORTED",
+	"MOSTRA_HOST_MESSAGE_TOO_LARGE"
+];
+/** The HOST area's catalog entries. */
+const hostDiagnostics = {
+	MOSTRA_HOST_REVISION_UNSUPPORTED: {
+		severity: "error",
+		phase: "host",
+		title: "No common host protocol revision",
+		hint: "Run the client and the instance from the same Mostra release, for example with `mostra daemon restart`.",
+		docs: {
+			explanation: "A client and a Mostra instance agree on a host protocol revision when they connect (`mostra/initialize`). The client offers the revisions it speaks, and the instance picks the newest one it also supports. This code means the two lists have nothing in common, usually because the client and the running daemon come from Mostra releases far apart.",
+			fix: "Restart the daemon so it runs the same release as the client: `mostra daemon restart`. Durable state survives the restart, and open views reconnect. A host that embeds Mostra updates its pinned Mostra runtime or its host library until both support a common revision."
+		}
+	},
+	MOSTRA_HOST_MALFORMED: {
+		severity: "error",
+		phase: "host",
+		title: "Malformed protocol message",
+		hint: "Send each message as one line of JSON holding a single JSON-RPC 2.0 request or notification.",
+		docs: {
+			explanation: "Every message on a Mostra connection is one line of JSON with one JSON-RPC 2.0 object. This code means a line wasn't valid JSON, wasn't a JSON-RPC 2.0 request or response, or was a batch (a JSON array), which revision `2026-10-10` doesn't accept. A client also reports it when a response doesn't match the method's result schema.",
+			fix: "Encode one request per line with `\"jsonrpc\": \"2.0\"`, a `method`, an `id` for requests, and `params` as an object. Send several requests as separate lines instead of a batch."
+		}
+	},
+	MOSTRA_HOST_METHOD_UNKNOWN: {
+		severity: "error",
+		phase: "host",
+		title: "Unknown protocol method",
+		hint: "Call only the methods listed in `capabilities.methods` of the `mostra/initialize` result.",
+		docs: {
+			explanation: "The instance doesn't serve the method that was called. Either the name is misspelled, or the client is newer than the instance and calls a method the instance's release doesn't have.",
+			fix: "Check the method name against INTERFACES §6, and against `capabilities.methods` in the `mostra/initialize` result, which lists every method this instance serves. Upgrade the instance if the client needs a newer method."
+		}
+	},
+	MOSTRA_HOST_INVALID_PARAMS: {
+		severity: "error",
+		phase: "host",
+		title: "Invalid method params",
+		hint: "Fix the params named in the message so they match the method's schema.",
+		docs: {
+			explanation: "The request's `params` don't match the method's published schema: a required field is missing, a value has the wrong type, or a value is outside its allowed range. The message names the first problem found.",
+			fix: "Compare the request with the method's schema in `@mostra/protocol` (or the published JSON Schema) and correct the field named in the message."
+		}
+	},
+	MOSTRA_HOST_INTERNAL_ERROR: {
+		severity: "error",
+		phase: "host",
+		title: "Unexpected failure in the instance",
+		hint: "Retry the request with the same request ID; if it fails again, report it with the instance's log.",
+		docs: {
+			explanation: "The instance failed while handling the request, for a reason that isn't one of its known conditions. Durable state is unaffected: a request is acknowledged only after its ledger transaction commits. The details are in the instance's log (`logs/supervisor.log` in the home), not in the response.",
+			fix: "Retry the request with the same request ID; retries are idempotent. If the failure repeats, report it with the relevant lines of `logs/supervisor.log`."
+		}
+	},
+	MOSTRA_HOST_INITIALIZE_ORDER: {
+		severity: "error",
+		phase: "host",
+		title: "Initialize first, and only once",
+		hint: "Send `mostra/initialize` as the first request on the connection, and only once.",
+		docs: {
+			explanation: "Every connection starts with `mostra/initialize`, which agrees the protocol revision and registers the client's ports. The instance received another request before it, or a second `mostra/initialize` on the same connection.",
+			fix: "Send `mostra/initialize` first and wait for its result before any other request. To renegotiate, open a new connection."
+		}
+	},
+	MOSTRA_HOST_PORT_UNSUPPORTED: {
+		severity: "warning",
+		phase: "host",
+		title: "Port not supported by this instance",
+		hint: "Leave the port out of `mostra/initialize`, or run a Mostra release that lists it in `capabilities.ports`.",
+		docs: {
+			explanation: "The client registered a port this instance doesn't call, so registering it has no effect. The port may be reserved for a later release (such as `ai`), or the client may be newer than the instance. The session continues without the port, and Mostra uses its standalone behavior instead.",
+			fix: "Register only the ports listed in `capabilities.ports` of the `mostra/initialize` result. If the host needs the port, upgrade the instance to a release that supports it."
+		}
+	},
+	MOSTRA_HOST_CONNECTION_CLOSED: {
+		severity: "error",
+		phase: "host",
+		title: "Connection closed",
+		hint: "Reconnect, then retry the request with the same request ID.",
+		docs: {
+			explanation: "The connection to the other side closed before a response arrived, for example because the instance exited or restarted. The request may or may not have taken effect.",
+			fix: "Reconnect and send `mostra/initialize` again, then retry the request with the same request ID. Mutating methods are idempotent by request ID, so a retry never applies twice."
+		}
+	},
+	MOSTRA_HOST_TIMEOUT: {
+		severity: "error",
+		phase: "host",
+		title: "Request timed out",
+		hint: "Retry the request with the same request ID, or allow it more time.",
+		docs: {
+			explanation: "No response arrived within the time the caller allowed. The other side may still be working on the request, and it may still take effect.",
+			fix: "Retry with the same request ID, which returns the recorded result if the first attempt completed. Allow a longer timeout for slow operations."
+		}
+	},
+	MOSTRA_HOST_SHUTDOWN_REFUSED: {
+		severity: "error",
+		phase: "host",
+		title: "Only the spawning host can stop this instance",
+		hint: "Ask the host that started this instance to stop it, or end the connection you opened instead.",
+		docs: {
+			explanation: "An instance started by a host over stdio (`mostra host`) lives as long as that host's connection, so only the host may stop it with `mostra/shutdown`. A client that attached through the home's socket asked it to stop. A daemon (`mostra daemon`) accepts `mostra/shutdown` from every attached client (D87).",
+			fix: "Close your own connection when you are done. To stop the instance, stop the host that spawned it, or have the host send `mostra/shutdown` or close its stdio."
+		}
+	},
+	MOSTRA_HOST_REQUEST_ID_REUSED: {
+		severity: "error",
+		phase: "host",
+		title: "A requestId was reused with other parameters",
+		hint: "Send a new `requestId` for a new request; repeat the exact parameters only to retry one.",
+		docs: {
+			explanation: "A mutating method recorded its result under this `requestId` for different parameters. Replaying that result would answer a request nobody made (a link for another artifact or with other scopes, another source's publish), so the instance refuses (H-03). Retries with the same parameters still return the recorded result.",
+			fix: "Generate a fresh `requestId` for every new request, and reuse one only to retry the same request after a timeout or a lost connection."
+		}
+	},
+	MOSTRA_HOST_CURSOR_COMPACTED: {
+		severity: "error",
+		phase: "host",
+		title: "Events compacted",
+		hint: "Read from the cursor in the message to receive the compaction summary, then continue from there.",
+		docs: {
+			explanation: "Events before a cursor were compacted on request (`mostra gc --compact-events`, DATA_MODEL §4): an artifact's old events were replaced by one `artifact.compacted` event that summarizes them. A reader asking for events after an earlier cursor would miss some, and Mostra never leaves a silent gap.",
+			fix: "Read again with `after` set to the cursor the message names: the next event is the `artifact.compacted` summary. Rebuild what you track from it and continue as usual."
+		}
+	},
+	MOSTRA_HOST_SUBSCRIPTION_UNKNOWN: {
+		severity: "error",
+		phase: "host",
+		title: "Unknown subscription",
+		hint: "Subscribe again with `events/subscribe`, then use the ID it returns.",
+		docs: {
+			explanation: "The subscription ID belongs to no subscription on this connection: it was never created here, was ended with `events/unsubscribe`, or belonged to a connection that closed. Subscriptions live as long as their connection; a named subscriber's acknowledged cursor outlives it.",
+			fix: "Call `events/subscribe` again on this connection. With the same `name`, delivery resumes after the last acknowledged cursor."
+		}
+	},
+	MOSTRA_HOST_NOTIFICATION_UNSUPPORTED: {
+		severity: "error",
+		phase: "host",
+		title: "Notification not accepted",
+		hint: "List the notification in `capabilities.notifications` when you initialize.",
+		docs: {
+			explanation: "Mostra sends a client only the notifications it listed in `mostra/initialize` (D84). This method would send one the client didn't list, such as `events/notify` for `events/subscribe`.",
+			fix: "Reconnect and initialize with `capabilities: { notifications: [\"events/notify\"] }`, or poll with `events/read` instead."
+		}
+	},
+	MOSTRA_HOST_MESSAGE_TOO_LARGE: {
+		severity: "error",
+		phase: "host",
+		title: "Message too large for the protocol",
+		hint: "Ask for less at once: a specific submission, fewer events, or smaller values.",
+		docs: {
+			explanation: "One host-protocol message is one line of JSON, and a line holds at most 64 Mi characters (`MAX_LINE_LENGTH`), so neither side buffers without bound. Mostra checks every message before it writes it: an answer that would be longer is replaced by this error, and a delivery whose envelope would be longer is recorded as undeliverable instead of being sent and retried forever.",
+			fix: "Read less per request (`events/read` with a smaller `limit`, `results/get` for one submission), and keep artifacts' values within the field and document limits."
+		}
+	}
+};
+//#endregion
+export { hostDiagnosticCodes, hostDiagnostics };
+
+//# sourceMappingURL=host.js.map

package/dist/diagnostics/codes/host.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"host.js","names":[],"sources":["../../../src/diagnostics/codes/host.ts"],"sourcesContent":["/**\n * Diagnostic codes of the HOST area: the host protocol between clients and an instance.\n */\nimport type { AreaCatalog } from \"../spec.ts\";\n\n/** The codes of the HOST area, in the order they were added. */\nexport const hostDiagnosticCodes = [\n  \"MOSTRA_HOST_REVISION_UNSUPPORTED\",\n  \"MOSTRA_HOST_MALFORMED\",\n  \"MOSTRA_HOST_METHOD_UNKNOWN\",\n  \"MOSTRA_HOST_INVALID_PARAMS\",\n  \"MOSTRA_HOST_INTERNAL_ERROR\",\n  \"MOSTRA_HOST_INITIALIZE_ORDER\",\n  \"MOSTRA_HOST_PORT_UNSUPPORTED\",\n  \"MOSTRA_HOST_CONNECTION_CLOSED\",\n  \"MOSTRA_HOST_TIMEOUT\",\n  \"MOSTRA_HOST_SHUTDOWN_REFUSED\",\n  \"MOSTRA_HOST_REQUEST_ID_REUSED\",\n  \"MOSTRA_HOST_CURSOR_COMPACTED\",\n  \"MOSTRA_HOST_SUBSCRIPTION_UNKNOWN\",\n  \"MOSTRA_HOST_NOTIFICATION_UNSUPPORTED\",\n  \"MOSTRA_HOST_MESSAGE_TOO_LARGE\",\n  // gen:codes\n] as const;\n\n/** The codes of the HOST area. */\nexport type HostDiagnosticCode = (typeof hostDiagnosticCodes)[number];\n\n/** The HOST area's catalog entries. */\nexport const hostDiagnostics: AreaCatalog<HostDiagnosticCode> = {\n  MOSTRA_HOST_REVISION_UNSUPPORTED: {\n    severity: \"error\",\n    phase: \"host\",\n    title: \"No common host protocol revision\",\n    hint: \"Run the client and the instance from the same Mostra release, for example with `mostra daemon restart`.\",\n    docs: {\n      explanation:\n        \"A client and a Mostra instance agree on a host protocol revision when they connect (`mostra/initialize`). The client offers the revisions it speaks, and the instance picks the newest one it also supports. This code means the two lists have nothing in common, usually because the client and the running daemon come from Mostra releases far apart.\",\n      fix: \"Restart the daemon so it runs the same release as the client: `mostra daemon restart`. Durable state survives the restart, and open views reconnect. A host that embeds Mostra updates its pinned Mostra runtime or its host library until both support a common revision.\",\n    },\n  },\n  MOSTRA_HOST_MALFORMED: {\n    severity: \"error\",\n    phase: \"host\",\n    title: \"Malformed protocol message\",\n    hint: \"Send each message as one line of JSON holding a single JSON-RPC 2.0 request or notification.\",\n    docs: {\n      explanation:\n        \"Every message on a Mostra connection is one line of JSON with one JSON-RPC 2.0 object. This code means a line wasn't valid JSON, wasn't a JSON-RPC 2.0 request or response, or was a batch (a JSON array), which revision `2026-10-10` doesn't accept. A client also reports it when a response doesn't match the method's result schema.\",\n      fix: 'Encode one request per line with `\"jsonrpc\": \"2.0\"`, a `method`, an `id` for requests, and `params` as an object. Send several requests as separate lines instead of a batch.',\n    },\n  },\n  MOSTRA_HOST_METHOD_UNKNOWN: {\n    severity: \"error\",\n    phase: \"host\",\n    title: \"Unknown protocol method\",\n    hint: \"Call only the methods listed in `capabilities.methods` of the `mostra/initialize` result.\",\n    docs: {\n      explanation:\n        \"The instance doesn't serve the method that was called. Either the name is misspelled, or the client is newer than the instance and calls a method the instance's release doesn't have.\",\n      fix: \"Check the method name against INTERFACES \\u00a76, and against `capabilities.methods` in the `mostra/initialize` result, which lists every method this instance serves. Upgrade the instance if the client needs a newer method.\",\n    },\n  },\n  MOSTRA_HOST_INVALID_PARAMS: {\n    severity: \"error\",\n    phase: \"host\",\n    title: \"Invalid method params\",\n    hint: \"Fix the params named in the message so they match the method's schema.\",\n    docs: {\n      explanation:\n        \"The request's `params` don't match the method's published schema: a required field is missing, a value has the wrong type, or a value is outside its allowed range. The message names the first problem found.\",\n      fix: \"Compare the request with the method's schema in `@mostra/protocol` (or the published JSON Schema) and correct the field named in the message.\",\n    },\n  },\n  MOSTRA_HOST_INTERNAL_ERROR: {\n    severity: \"error\",\n    phase: \"host\",\n    title: \"Unexpected failure in the instance\",\n    hint: \"Retry the request with the same request ID; if it fails again, report it with the instance's log.\",\n    docs: {\n      explanation:\n        \"The instance failed while handling the request, for a reason that isn't one of its known conditions. Durable state is unaffected: a request is acknowledged only after its ledger transaction commits. The details are in the instance's log (`logs/supervisor.log` in the home), not in the response.\",\n      fix: \"Retry the request with the same request ID; retries are idempotent. If the failure repeats, report it with the relevant lines of `logs/supervisor.log`.\",\n    },\n  },\n  MOSTRA_HOST_INITIALIZE_ORDER: {\n    severity: \"error\",\n    phase: \"host\",\n    title: \"Initialize first, and only once\",\n    hint: \"Send `mostra/initialize` as the first request on the connection, and only once.\",\n    docs: {\n      explanation:\n        \"Every connection starts with `mostra/initialize`, which agrees the protocol revision and registers the client's ports. The instance received another request before it, or a second `mostra/initialize` on the same connection.\",\n      fix: \"Send `mostra/initialize` first and wait for its result before any other request. To renegotiate, open a new connection.\",\n    },\n  },\n  MOSTRA_HOST_PORT_UNSUPPORTED: {\n    severity: \"warning\",\n    phase: \"host\",\n    title: \"Port not supported by this instance\",\n    hint: \"Leave the port out of `mostra/initialize`, or run a Mostra release that lists it in `capabilities.ports`.\",\n    docs: {\n      explanation:\n        \"The client registered a port this instance doesn't call, so registering it has no effect. The port may be reserved for a later release (such as `ai`), or the client may be newer than the instance. The session continues without the port, and Mostra uses its standalone behavior instead.\",\n      fix: \"Register only the ports listed in `capabilities.ports` of the `mostra/initialize` result. If the host needs the port, upgrade the instance to a release that supports it.\",\n    },\n  },\n  MOSTRA_HOST_CONNECTION_CLOSED: {\n    severity: \"error\",\n    phase: \"host\",\n    title: \"Connection closed\",\n    hint: \"Reconnect, then retry the request with the same request ID.\",\n    docs: {\n      explanation:\n        \"The connection to the other side closed before a response arrived, for example because the instance exited or restarted. The request may or may not have taken effect.\",\n      fix: \"Reconnect and send `mostra/initialize` again, then retry the request with the same request ID. Mutating methods are idempotent by request ID, so a retry never applies twice.\",\n    },\n  },\n  MOSTRA_HOST_TIMEOUT: {\n    severity: \"error\",\n    phase: \"host\",\n    title: \"Request timed out\",\n    hint: \"Retry the request with the same request ID, or allow it more time.\",\n    docs: {\n      explanation:\n        \"No response arrived within the time the caller allowed. The other side may still be working on the request, and it may still take effect.\",\n      fix: \"Retry with the same request ID, which returns the recorded result if the first attempt completed. Allow a longer timeout for slow operations.\",\n    },\n  },\n  MOSTRA_HOST_SHUTDOWN_REFUSED: {\n    severity: \"error\",\n    phase: \"host\",\n    title: \"Only the spawning host can stop this instance\",\n    hint: \"Ask the host that started this instance to stop it, or end the connection you opened instead.\",\n    docs: {\n      explanation:\n        \"An instance started by a host over stdio (`mostra host`) lives as long as that host's connection, so only the host may stop it with `mostra/shutdown`. A client that attached through the home's socket asked it to stop. A daemon (`mostra daemon`) accepts `mostra/shutdown` from every attached client (D87).\",\n      fix: \"Close your own connection when you are done. To stop the instance, stop the host that spawned it, or have the host send `mostra/shutdown` or close its stdio.\",\n    },\n  },\n  MOSTRA_HOST_REQUEST_ID_REUSED: {\n    severity: \"error\",\n    phase: \"host\",\n    title: \"A requestId was reused with other parameters\",\n    hint: \"Send a new `requestId` for a new request; repeat the exact parameters only to retry one.\",\n    docs: {\n      explanation:\n        \"A mutating method recorded its result under this `requestId` for different parameters. Replaying that result would answer a request nobody made (a link for another artifact or with other scopes, another source's publish), so the instance refuses (H-03). Retries with the same parameters still return the recorded result.\",\n      fix: \"Generate a fresh `requestId` for every new request, and reuse one only to retry the same request after a timeout or a lost connection.\",\n    },\n  },\n  MOSTRA_HOST_CURSOR_COMPACTED: {\n    severity: \"error\",\n    phase: \"host\",\n    title: \"Events compacted\",\n    hint: \"Read from the cursor in the message to receive the compaction summary, then continue from there.\",\n    docs: {\n      explanation:\n        \"Events before a cursor were compacted on request (`mostra gc --compact-events`, DATA_MODEL §4): an artifact's old events were replaced by one `artifact.compacted` event that summarizes them. A reader asking for events after an earlier cursor would miss some, and Mostra never leaves a silent gap.\",\n      fix: \"Read again with `after` set to the cursor the message names: the next event is the `artifact.compacted` summary. Rebuild what you track from it and continue as usual.\",\n    },\n  },\n  MOSTRA_HOST_SUBSCRIPTION_UNKNOWN: {\n    severity: \"error\",\n    phase: \"host\",\n    title: \"Unknown subscription\",\n    hint: \"Subscribe again with `events/subscribe`, then use the ID it returns.\",\n    docs: {\n      explanation:\n        \"The subscription ID belongs to no subscription on this connection: it was never created here, was ended with `events/unsubscribe`, or belonged to a connection that closed. Subscriptions live as long as their connection; a named subscriber's acknowledged cursor outlives it.\",\n      fix: \"Call `events/subscribe` again on this connection. With the same `name`, delivery resumes after the last acknowledged cursor.\",\n    },\n  },\n  MOSTRA_HOST_NOTIFICATION_UNSUPPORTED: {\n    severity: \"error\",\n    phase: \"host\",\n    title: \"Notification not accepted\",\n    hint: \"List the notification in `capabilities.notifications` when you initialize.\",\n    docs: {\n      explanation:\n        \"Mostra sends a client only the notifications it listed in `mostra/initialize` (D84). This method would send one the client didn't list, such as `events/notify` for `events/subscribe`.\",\n      fix: 'Reconnect and initialize with `capabilities: { notifications: [\"events/notify\"] }`, or poll with `events/read` instead.',\n    },\n  },\n  MOSTRA_HOST_MESSAGE_TOO_LARGE: {\n    severity: \"error\",\n    phase: \"host\",\n    title: \"Message too large for the protocol\",\n    hint: \"Ask for less at once: a specific submission, fewer events, or smaller values.\",\n    docs: {\n      explanation:\n        \"One host-protocol message is one line of JSON, and a line holds at most 64 Mi characters (`MAX_LINE_LENGTH`), so neither side buffers without bound. Mostra checks every message before it writes it: an answer that would be longer is replaced by this error, and a delivery whose envelope would be longer is recorded as undeliverable instead of being sent and retried forever.\",\n      fix: \"Read less per request (`events/read` with a smaller `limit`, `results/get` for one submission), and keep artifacts' values within the field and document limits.\",\n    },\n  },\n  // gen:entries\n};\n"],"mappings":";;AAMA,MAAa,sBAAsB;CACjC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AAEF;;AAMA,MAAa,kBAAmD;CAC9D,kCAAkC;EAChC,UAAU;EACV,OAAO;EACP,OAAO;EACP,MAAM;EACN,MAAM;GACJ,aACE;GACF,KAAK;EACP;CACF;CACA,uBAAuB;EACrB,UAAU;EACV,OAAO;EACP,OAAO;EACP,MAAM;EACN,MAAM;GACJ,aACE;GACF,KAAK;EACP;CACF;CACA,4BAA4B;EAC1B,UAAU;EACV,OAAO;EACP,OAAO;EACP,MAAM;EACN,MAAM;GACJ,aACE;GACF,KAAK;EACP;CACF;CACA,4BAA4B;EAC1B,UAAU;EACV,OAAO;EACP,OAAO;EACP,MAAM;EACN,MAAM;GACJ,aACE;GACF,KAAK;EACP;CACF;CACA,4BAA4B;EAC1B,UAAU;EACV,OAAO;EACP,OAAO;EACP,MAAM;EACN,MAAM;GACJ,aACE;GACF,KAAK;EACP;CACF;CACA,8BAA8B;EAC5B,UAAU;EACV,OAAO;EACP,OAAO;EACP,MAAM;EACN,MAAM;GACJ,aACE;GACF,KAAK;EACP;CACF;CACA,8BAA8B;EAC5B,UAAU;EACV,OAAO;EACP,OAAO;EACP,MAAM;EACN,MAAM;GACJ,aACE;GACF,KAAK;EACP;CACF;CACA,+BAA+B;EAC7B,UAAU;EACV,OAAO;EACP,OAAO;EACP,MAAM;EACN,MAAM;GACJ,aACE;GACF,KAAK;EACP;CACF;CACA,qBAAqB;EACnB,UAAU;EACV,OAAO;EACP,OAAO;EACP,MAAM;EACN,MAAM;GACJ,aACE;GACF,KAAK;EACP;CACF;CACA,8BAA8B;EAC5B,UAAU;EACV,OAAO;EACP,OAAO;EACP,MAAM;EACN,MAAM;GACJ,aACE;GACF,KAAK;EACP;CACF;CACA,+BAA+B;EAC7B,UAAU;EACV,OAAO;EACP,OAAO;EACP,MAAM;EACN,MAAM;GACJ,aACE;GACF,KAAK;EACP;CACF;CACA,8BAA8B;EAC5B,UAAU;EACV,OAAO;EACP,OAAO;EACP,MAAM;EACN,MAAM;GACJ,aACE;GACF,KAAK;EACP;CACF;CACA,kCAAkC;EAChC,UAAU;EACV,OAAO;EACP,OAAO;EACP,MAAM;EACN,MAAM;GACJ,aACE;GACF,KAAK;EACP;CACF;CACA,sCAAsC;EACpC,UAAU;EACV,OAAO;EACP,OAAO;EACP,MAAM;EACN,MAAM;GACJ,aACE;GACF,KAAK;EACP;CACF;CACA,+BAA+B;EAC7B,UAAU;EACV,OAAO;EACP,OAAO;EACP,MAAM;EACN,MAAM;GACJ,aACE;GACF,KAAK;EACP;CACF;AAEF"}

package/dist/diagnostics/codes/hygiene.d.ts

@@ -0,0 +1,8 @@
+import "../spec.js";
+//#region src/diagnostics/codes/hygiene.d.ts
+/** The codes of the HYGIENE area, in the order they were added. */
+export declare const hygieneDiagnosticCodes: readonly ["MOSTRA_HYGIENE_HOST_REFUSED", "MOSTRA_HYGIENE_ORIGIN_REFUSED", "MOSTRA_HYGIENE_CSRF_MISSING", "MOSTRA_HYGIENE_CONTENT_TYPE", "MOSTRA_HYGIENE_REQUEST_MALFORMED", "MOSTRA_HYGIENE_SESSION_MISSING", "MOSTRA_HYGIENE_TOKEN_INVALID", "MOSTRA_HYGIENE_TOKEN_REVOKED", "MOSTRA_HYGIENE_SCOPE_DENIED", "MOSTRA_HYGIENE_RATE_LIMITED", "MOSTRA_HYGIENE_NOT_SERVED", "MOSTRA_HYGIENE_SESSION_CONFLICT", "MOSTRA_HYGIENE_HEADERS_TOO_LARGE"];
+/** The codes of the HYGIENE area. */
+export type HygieneDiagnosticCode = (typeof hygieneDiagnosticCodes)[number];
+//#endregion
+//# sourceMappingURL=hygiene.d.ts.map

package/dist/diagnostics/codes/hygiene.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hygiene.d.ts","names":[],"sources":["../../../src/diagnostics/codes/hygiene.ts"],"mappings":";;;qBAQa;;YAkBD,gCAAgC"}

package/dist/diagnostics/codes/hygiene.js

@@ -0,0 +1,154 @@
+//#region src/diagnostics/codes/hygiene.ts
+/** The codes of the HYGIENE area, in the order they were added. */
+const hygieneDiagnosticCodes = [
+	"MOSTRA_HYGIENE_HOST_REFUSED",
+	"MOSTRA_HYGIENE_ORIGIN_REFUSED",
+	"MOSTRA_HYGIENE_CSRF_MISSING",
+	"MOSTRA_HYGIENE_CONTENT_TYPE",
+	"MOSTRA_HYGIENE_REQUEST_MALFORMED",
+	"MOSTRA_HYGIENE_SESSION_MISSING",
+	"MOSTRA_HYGIENE_TOKEN_INVALID",
+	"MOSTRA_HYGIENE_TOKEN_REVOKED",
+	"MOSTRA_HYGIENE_SCOPE_DENIED",
+	"MOSTRA_HYGIENE_RATE_LIMITED",
+	"MOSTRA_HYGIENE_NOT_SERVED",
+	"MOSTRA_HYGIENE_SESSION_CONFLICT",
+	"MOSTRA_HYGIENE_HEADERS_TOO_LARGE"
+];
+/** The HYGIENE area's catalog entries. */
+const hygieneDiagnostics = {
+	MOSTRA_HYGIENE_HOST_REFUSED: {
+		severity: "error",
+		phase: "hygiene",
+		title: "Host not served",
+		hint: "Open the artifact through the exact link Mostra gave you.",
+		docs: {
+			explanation: "The request's `Host` header named a host this gateway doesn't serve. Each gateway listener accepts exactly the host and port its capability URLs use, so a page that rebinds its own DNS name to the loopback address can't reach an artifact (DNS rebinding). The gateway answers 421.",
+			fix: "Use the URL from `view/url` or the publish receipt as it is, without replacing `127.0.0.1` by `localhost` or another name. A gateway started with `--bind` and `--url-host` accepts the URL host it was given."
+		}
+	},
+	MOSTRA_HYGIENE_ORIGIN_REFUSED: {
+		severity: "error",
+		phase: "hygiene",
+		title: "Origin refused",
+		hint: "Send the request from the page's own origin.",
+		docs: {
+			explanation: "A request that changes state, opens a stream or upgrades to a WebSocket must carry an `Origin` header equal to the origin it is sent to. The gateway compares the strings exactly and answers 403 otherwise, so another website, or another artifact on a different port, can't drive this one.",
+			fix: "Call the gateway from the page it serves: the shell from the shell, the artifact from its own frame. Tools outside a browser send the listener's own origin."
+		}
+	},
+	MOSTRA_HYGIENE_CSRF_MISSING: {
+		severity: "error",
+		phase: "hygiene",
+		title: "CSRF token missing or wrong",
+		hint: "Send the session's CSRF token from `GET /_mostra/session` in the `X-Mostra-CSRF` header.",
+		docs: {
+			explanation: "Every request that changes state through a session carries the session's CSRF token in the `X-Mostra-CSRF` header. The token comes only from the session endpoint of the same origin, which no other page can read. A missing or different token is answered with 403.",
+			fix: "Read `csrf` from `GET /_mostra/session` (on the shell, `GET /a/<artifactId>/_mostra/session`) and send it with every POST. Mostra's client runtime and shell do this for you."
+		}
+	},
+	MOSTRA_HYGIENE_CONTENT_TYPE: {
+		severity: "error",
+		phase: "hygiene",
+		title: "JSON content type required",
+		hint: "Send the body as JSON with `Content-Type: application/json`.",
+		docs: {
+			explanation: "Requests that change state must have a JSON body. A form or plain-text body is something any website can send without asking the browser first, so the gateway refuses it with 415.",
+			fix: "Send `Content-Type: application/json` and a JSON body."
+		}
+	},
+	MOSTRA_HYGIENE_REQUEST_MALFORMED: {
+		severity: "error",
+		phase: "hygiene",
+		title: "Malformed request",
+		hint: "Send one well-formed HTTP request with a path that starts with `/`.",
+		docs: {
+			explanation: "The gateway refused a request it can't interpret safely: a repeated `Host` or `Origin` header, a request target that isn't a path, an encoded `/` or `..` that would leave the served tree, a body that isn't valid JSON, or a header with control characters. It answers 400 rather than guess.",
+			fix: "Send a single request with one `Host` header and a plain path. Browsers always do; this usually means a hand-written client or a probe."
+		}
+	},
+	MOSTRA_HYGIENE_SESSION_MISSING: {
+		severity: "error",
+		phase: "hygiene",
+		title: "No session",
+		hint: "Open the artifact's capability link again to start a session.",
+		docs: {
+			explanation: "The request carried no valid session for this origin. Sessions start when a capability link is opened: the shell exchanges the link's token for a session cookie, and gives the artifact frame a single-use ticket for its own. A session issued for another origin never counts, because every port of the host shares the browser's cookies. The gateway answers 401.",
+			fix: "Open the full capability link, including the part after `#`. A bookmark of the page without it works while the browser keeps the session cookie (400 days)."
+		}
+	},
+	MOSTRA_HYGIENE_TOKEN_INVALID: {
+		severity: "error",
+		phase: "hygiene",
+		title: "Unknown capability token",
+		hint: "Use the complete capability link Mostra gave you, or mint a new one with `view/url`.",
+		docs: {
+			explanation: "The capability token or frame ticket matched nothing in this home: it was mistyped, cut short, belongs to another home or artifact, or the ticket was already used or expired (tickets last 60 seconds and work once). Over the host protocol, the token ID named in `view/revoke` or `view/rotate` doesn't exist. The gateway answers 401, and failed attempts count towards the rate limit.",
+			fix: "Copy the whole link again. An agent or host mints a fresh one with `view/url`; the shell gets a new frame ticket by reloading."
+		}
+	},
+	MOSTRA_HYGIENE_TOKEN_REVOKED: {
+		severity: "error",
+		phase: "hygiene",
+		title: "Link revoked or expired",
+		hint: "Ask for a new link: `view/url` mints one, or `view/rotate` replaces this one.",
+		docs: {
+			explanation: "The capability link was revoked (`view/revoke`), replaced (`view/rotate`), or reached the end of its `ttl`. Every session started from it ends too. The gateway answers 410. Local links have no expiry unless one was asked for.",
+			fix: "Get a new link from whoever shared this one. An agent mints it with `view/url`, or rotates the old one with `view/rotate`, and shares the new URL."
+		}
+	},
+	MOSTRA_HYGIENE_SCOPE_DENIED: {
+		severity: "error",
+		phase: "hygiene",
+		title: "Not allowed by this link",
+		hint: "Open a link minted with this scope (`view/url` with `scopes`).",
+		docs: {
+			explanation: "The session's link doesn't carry the scope this request needs: `draft` to save answers, `submit` to submit, `review` to comment, and `action:*`, `action:<export>` or `action:<module path>#<export>` to run a server function. A view-and-comment link, for example, can't submit or run an action. The gateway answers 403.",
+			fix: "Mint a link with the scopes the viewer needs, such as `view/url` with `scopes: [\"view\", \"draft\", \"submit\"]`. Without `scopes`, a link carries every scope."
+		}
+	},
+	MOSTRA_HYGIENE_RATE_LIMITED: {
+		severity: "error",
+		phase: "hygiene",
+		title: "Too many failed attempts",
+		hint: "Wait for the time in `Retry-After`, then open the link again.",
+		docs: {
+			explanation: "More than 30 capability tokens failed for this artifact within a minute, so the gateway refuses every token for it, valid ones included, until the minute has passed. A guess can't succeed while the limit holds, and only this artifact's links wait. The gateway answers 429 with `Retry-After`.",
+			fix: "Wait, then open the link again. Repeated failures usually come from a mistyped link or a script retrying an old one."
+		}
+	},
+	MOSTRA_HYGIENE_NOT_SERVED: {
+		severity: "error",
+		phase: "hygiene",
+		title: "Nothing served here",
+		hint: "Request a published version's files or a documented `/_mostra/` path.",
+		docs: {
+			explanation: "The gateway serves only published versions' client files and the browser-protocol paths under `/_mostra/`. Everything else in the home, such as sources, server bundles, staging and unpublished builds, has no URL. A path or method nothing answers gets 404 or 405.",
+			fix: "Check the path. Server code runs through the browser protocol, never as a file, and an artifact becomes viewable only once it is published."
+		}
+	},
+	MOSTRA_HYGIENE_SESSION_CONFLICT: {
+		severity: "warning",
+		phase: "hygiene",
+		title: "Another link is already open for this artifact",
+		hint: "Choose which link to keep; send `replace: true` to use the new one.",
+		docs: {
+			explanation: "This browser already has a live session for the artifact from a different link. Opening a link never silently replaces it, because a page elsewhere could send the viewer to its own, narrower link and take over their tabs (D98). The shell shows both links' access and lets the viewer choose; the answer is 409 with `current` and `offered`.",
+			fix: "In the shell, choose the link to keep. A client exchanging tokens itself sends `replace: true` to replace the session."
+		}
+	},
+	MOSTRA_HYGIENE_HEADERS_TOO_LARGE: {
+		severity: "error",
+		phase: "hygiene",
+		title: "The request's headers are too large",
+		hint: "Open the link again: this page cleared the cookies that made the request too large.",
+		docs: {
+			explanation: "The request's headers passed the gateway's limit of 1 MiB, more than any browser sends for one host's cookies. Every port of the loopback host shares one cookie jar, so a page on any of them can fill it. The gateway answers 431 with `Clear-Site-Data: \"cookies\"`, which empties the host's cookies, so the next request works. Mostra's sessions go with them and come back when a link is opened again.",
+			fix: "Open the artifact's link again. If it keeps happening, find the page that sets the cookies: it runs on this host."
+		}
+	}
+};
+//#endregion
+export { hygieneDiagnosticCodes, hygieneDiagnostics };
+
+//# sourceMappingURL=hygiene.js.map

package/dist/diagnostics/codes/hygiene.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hygiene.js","names":[],"sources":["../../../src/diagnostics/codes/hygiene.ts"],"sourcesContent":["/**\n * Diagnostic codes of the HYGIENE area: requests the gateway refuses because they don't come from\n * the holder of an artifact's capability URL (D06, HY-01). None of them limits what an artifact\n * or an agent may do; each keeps strangers out.\n */\nimport type { AreaCatalog } from \"../spec.ts\";\n\n/** The codes of the HYGIENE area, in the order they were added. */\nexport const hygieneDiagnosticCodes = [\n  \"MOSTRA_HYGIENE_HOST_REFUSED\",\n  \"MOSTRA_HYGIENE_ORIGIN_REFUSED\",\n  \"MOSTRA_HYGIENE_CSRF_MISSING\",\n  \"MOSTRA_HYGIENE_CONTENT_TYPE\",\n  \"MOSTRA_HYGIENE_REQUEST_MALFORMED\",\n  \"MOSTRA_HYGIENE_SESSION_MISSING\",\n  \"MOSTRA_HYGIENE_TOKEN_INVALID\",\n  \"MOSTRA_HYGIENE_TOKEN_REVOKED\",\n  \"MOSTRA_HYGIENE_SCOPE_DENIED\",\n  \"MOSTRA_HYGIENE_RATE_LIMITED\",\n  \"MOSTRA_HYGIENE_NOT_SERVED\",\n  \"MOSTRA_HYGIENE_SESSION_CONFLICT\",\n  \"MOSTRA_HYGIENE_HEADERS_TOO_LARGE\",\n  // gen:codes\n] as const;\n\n/** The codes of the HYGIENE area. */\nexport type HygieneDiagnosticCode = (typeof hygieneDiagnosticCodes)[number];\n\n/** The HYGIENE area's catalog entries. */\nexport const hygieneDiagnostics: AreaCatalog<HygieneDiagnosticCode> = {\n  MOSTRA_HYGIENE_HOST_REFUSED: {\n    severity: \"error\",\n    phase: \"hygiene\",\n    title: \"Host not served\",\n    hint: \"Open the artifact through the exact link Mostra gave you.\",\n    docs: {\n      explanation:\n        \"The request's `Host` header named a host this gateway doesn't serve. Each gateway listener accepts exactly the host and port its capability URLs use, so a page that rebinds its own DNS name to the loopback address can't reach an artifact (DNS rebinding). The gateway answers 421.\",\n      fix: \"Use the URL from `view/url` or the publish receipt as it is, without replacing `127.0.0.1` by `localhost` or another name. A gateway started with `--bind` and `--url-host` accepts the URL host it was given.\",\n    },\n  },\n  MOSTRA_HYGIENE_ORIGIN_REFUSED: {\n    severity: \"error\",\n    phase: \"hygiene\",\n    title: \"Origin refused\",\n    hint: \"Send the request from the page's own origin.\",\n    docs: {\n      explanation:\n        \"A request that changes state, opens a stream or upgrades to a WebSocket must carry an `Origin` header equal to the origin it is sent to. The gateway compares the strings exactly and answers 403 otherwise, so another website, or another artifact on a different port, can't drive this one.\",\n      fix: \"Call the gateway from the page it serves: the shell from the shell, the artifact from its own frame. Tools outside a browser send the listener's own origin.\",\n    },\n  },\n  MOSTRA_HYGIENE_CSRF_MISSING: {\n    severity: \"error\",\n    phase: \"hygiene\",\n    title: \"CSRF token missing or wrong\",\n    hint: \"Send the session's CSRF token from `GET /_mostra/session` in the `X-Mostra-CSRF` header.\",\n    docs: {\n      explanation:\n        \"Every request that changes state through a session carries the session's CSRF token in the `X-Mostra-CSRF` header. The token comes only from the session endpoint of the same origin, which no other page can read. A missing or different token is answered with 403.\",\n      fix: \"Read `csrf` from `GET /_mostra/session` (on the shell, `GET /a/<artifactId>/_mostra/session`) and send it with every POST. Mostra's client runtime and shell do this for you.\",\n    },\n  },\n  MOSTRA_HYGIENE_CONTENT_TYPE: {\n    severity: \"error\",\n    phase: \"hygiene\",\n    title: \"JSON content type required\",\n    hint: \"Send the body as JSON with `Content-Type: application/json`.\",\n    docs: {\n      explanation:\n        \"Requests that change state must have a JSON body. A form or plain-text body is something any website can send without asking the browser first, so the gateway refuses it with 415.\",\n      fix: \"Send `Content-Type: application/json` and a JSON body.\",\n    },\n  },\n  MOSTRA_HYGIENE_REQUEST_MALFORMED: {\n    severity: \"error\",\n    phase: \"hygiene\",\n    title: \"Malformed request\",\n    hint: \"Send one well-formed HTTP request with a path that starts with `/`.\",\n    docs: {\n      explanation:\n        \"The gateway refused a request it can't interpret safely: a repeated `Host` or `Origin` header, a request target that isn't a path, an encoded `/` or `..` that would leave the served tree, a body that isn't valid JSON, or a header with control characters. It answers 400 rather than guess.\",\n      fix: \"Send a single request with one `Host` header and a plain path. Browsers always do; this usually means a hand-written client or a probe.\",\n    },\n  },\n  MOSTRA_HYGIENE_SESSION_MISSING: {\n    severity: \"error\",\n    phase: \"hygiene\",\n    title: \"No session\",\n    hint: \"Open the artifact's capability link again to start a session.\",\n    docs: {\n      explanation:\n        \"The request carried no valid session for this origin. Sessions start when a capability link is opened: the shell exchanges the link's token for a session cookie, and gives the artifact frame a single-use ticket for its own. A session issued for another origin never counts, because every port of the host shares the browser's cookies. The gateway answers 401.\",\n      fix: \"Open the full capability link, including the part after `#`. A bookmark of the page without it works while the browser keeps the session cookie (400 days).\",\n    },\n  },\n  MOSTRA_HYGIENE_TOKEN_INVALID: {\n    severity: \"error\",\n    phase: \"hygiene\",\n    title: \"Unknown capability token\",\n    hint: \"Use the complete capability link Mostra gave you, or mint a new one with `view/url`.\",\n    docs: {\n      explanation:\n        \"The capability token or frame ticket matched nothing in this home: it was mistyped, cut short, belongs to another home or artifact, or the ticket was already used or expired (tickets last 60 seconds and work once). Over the host protocol, the token ID named in `view/revoke` or `view/rotate` doesn't exist. The gateway answers 401, and failed attempts count towards the rate limit.\",\n      fix: \"Copy the whole link again. An agent or host mints a fresh one with `view/url`; the shell gets a new frame ticket by reloading.\",\n    },\n  },\n  MOSTRA_HYGIENE_TOKEN_REVOKED: {\n    severity: \"error\",\n    phase: \"hygiene\",\n    title: \"Link revoked or expired\",\n    hint: \"Ask for a new link: `view/url` mints one, or `view/rotate` replaces this one.\",\n    docs: {\n      explanation:\n        \"The capability link was revoked (`view/revoke`), replaced (`view/rotate`), or reached the end of its `ttl`. Every session started from it ends too. The gateway answers 410. Local links have no expiry unless one was asked for.\",\n      fix: \"Get a new link from whoever shared this one. An agent mints it with `view/url`, or rotates the old one with `view/rotate`, and shares the new URL.\",\n    },\n  },\n  MOSTRA_HYGIENE_SCOPE_DENIED: {\n    severity: \"error\",\n    phase: \"hygiene\",\n    title: \"Not allowed by this link\",\n    hint: \"Open a link minted with this scope (`view/url` with `scopes`).\",\n    docs: {\n      explanation:\n        \"The session's link doesn't carry the scope this request needs: `draft` to save answers, `submit` to submit, `review` to comment, and `action:*`, `action:<export>` or `action:<module path>#<export>` to run a server function. A view-and-comment link, for example, can't submit or run an action. The gateway answers 403.\",\n      fix: 'Mint a link with the scopes the viewer needs, such as `view/url` with `scopes: [\"view\", \"draft\", \"submit\"]`. Without `scopes`, a link carries every scope.',\n    },\n  },\n  MOSTRA_HYGIENE_RATE_LIMITED: {\n    severity: \"error\",\n    phase: \"hygiene\",\n    title: \"Too many failed attempts\",\n    hint: \"Wait for the time in `Retry-After`, then open the link again.\",\n    docs: {\n      explanation:\n        \"More than 30 capability tokens failed for this artifact within a minute, so the gateway refuses every token for it, valid ones included, until the minute has passed. A guess can't succeed while the limit holds, and only this artifact's links wait. The gateway answers 429 with `Retry-After`.\",\n      fix: \"Wait, then open the link again. Repeated failures usually come from a mistyped link or a script retrying an old one.\",\n    },\n  },\n  MOSTRA_HYGIENE_NOT_SERVED: {\n    severity: \"error\",\n    phase: \"hygiene\",\n    title: \"Nothing served here\",\n    hint: \"Request a published version's files or a documented `/_mostra/` path.\",\n    docs: {\n      explanation:\n        \"The gateway serves only published versions' client files and the browser-protocol paths under `/_mostra/`. Everything else in the home, such as sources, server bundles, staging and unpublished builds, has no URL. A path or method nothing answers gets 404 or 405.\",\n      fix: \"Check the path. Server code runs through the browser protocol, never as a file, and an artifact becomes viewable only once it is published.\",\n    },\n  },\n  MOSTRA_HYGIENE_SESSION_CONFLICT: {\n    severity: \"warning\",\n    phase: \"hygiene\",\n    title: \"Another link is already open for this artifact\",\n    hint: \"Choose which link to keep; send `replace: true` to use the new one.\",\n    docs: {\n      explanation:\n        \"This browser already has a live session for the artifact from a different link. Opening a link never silently replaces it, because a page elsewhere could send the viewer to its own, narrower link and take over their tabs (D98). The shell shows both links' access and lets the viewer choose; the answer is 409 with `current` and `offered`.\",\n      fix: \"In the shell, choose the link to keep. A client exchanging tokens itself sends `replace: true` to replace the session.\",\n    },\n  },\n  MOSTRA_HYGIENE_HEADERS_TOO_LARGE: {\n    severity: \"error\",\n    phase: \"hygiene\",\n    title: \"The request's headers are too large\",\n    hint: \"Open the link again: this page cleared the cookies that made the request too large.\",\n    docs: {\n      explanation:\n        \"The request's headers passed the gateway's limit of 1 MiB, more than any browser sends for one host's cookies. Every port of the loopback host shares one cookie jar, so a page on any of them can fill it. The gateway answers 431 with `Clear-Site-Data: \\\"cookies\\\"`, which empties the host's cookies, so the next request works. Mostra's sessions go with them and come back when a link is opened again.\",\n      fix: \"Open the artifact's link again. If it keeps happening, find the page that sets the cookies: it runs on this host.\",\n    },\n  },\n  // gen:entries\n};\n"],"mappings":";;AAQA,MAAa,yBAAyB;CACpC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AAEF;;AAMA,MAAa,qBAAyD;CACpE,6BAA6B;EAC3B,UAAU;EACV,OAAO;EACP,OAAO;EACP,MAAM;EACN,MAAM;GACJ,aACE;GACF,KAAK;EACP;CACF;CACA,+BAA+B;EAC7B,UAAU;EACV,OAAO;EACP,OAAO;EACP,MAAM;EACN,MAAM;GACJ,aACE;GACF,KAAK;EACP;CACF;CACA,6BAA6B;EAC3B,UAAU;EACV,OAAO;EACP,OAAO;EACP,MAAM;EACN,MAAM;GACJ,aACE;GACF,KAAK;EACP;CACF;CACA,6BAA6B;EAC3B,UAAU;EACV,OAAO;EACP,OAAO;EACP,MAAM;EACN,MAAM;GACJ,aACE;GACF,KAAK;EACP;CACF;CACA,kCAAkC;EAChC,UAAU;EACV,OAAO;EACP,OAAO;EACP,MAAM;EACN,MAAM;GACJ,aACE;GACF,KAAK;EACP;CACF;CACA,gCAAgC;EAC9B,UAAU;EACV,OAAO;EACP,OAAO;EACP,MAAM;EACN,MAAM;GACJ,aACE;GACF,KAAK;EACP;CACF;CACA,8BAA8B;EAC5B,UAAU;EACV,OAAO;EACP,OAAO;EACP,MAAM;EACN,MAAM;GACJ,aACE;GACF,KAAK;EACP;CACF;CACA,8BAA8B;EAC5B,UAAU;EACV,OAAO;EACP,OAAO;EACP,MAAM;EACN,MAAM;GACJ,aACE;GACF,KAAK;EACP;CACF;CACA,6BAA6B;EAC3B,UAAU;EACV,OAAO;EACP,OAAO;EACP,MAAM;EACN,MAAM;GACJ,aACE;GACF,KAAK;EACP;CACF;CACA,6BAA6B;EAC3B,UAAU;EACV,OAAO;EACP,OAAO;EACP,MAAM;EACN,MAAM;GACJ,aACE;GACF,KAAK;EACP;CACF;CACA,2BAA2B;EACzB,UAAU;EACV,OAAO;EACP,OAAO;EACP,MAAM;EACN,MAAM;GACJ,aACE;GACF,KAAK;EACP;CACF;CACA,iCAAiC;EAC/B,UAAU;EACV,OAAO;EACP,OAAO;EACP,MAAM;EACN,MAAM;GACJ,aACE;GACF,KAAK;EACP;CACF;CACA,kCAAkC;EAChC,UAAU;EACV,OAAO;EACP,OAAO;EACP,MAAM;EACN,MAAM;GACJ,aACE;GACF,KAAK;EACP;CACF;AAEF"}

package/dist/diagnostics/codes/index.d.ts

@@ -0,0 +1,51 @@
+import { Diagnostic } from "../diagnostic.js";
+import { DiagnosticDetails, DiagnosticSpec } from "../spec.js";
+import { A11yDiagnosticCode, a11yDiagnosticCodes } from "./a11y.js";
+import { ActionDiagnosticCode, actionDiagnosticCodes } from "./action.js";
+import { ArtifactDiagnosticCode, artifactDiagnosticCodes } from "./artifact.js";
+import { BuildDiagnosticCode, buildDiagnosticCodes } from "./build.js";
+import { CliDiagnosticCode, cliDiagnosticCodes } from "./cli.js";
+import { ConsoleDiagnosticCode, consoleDiagnosticCodes } from "./console.js";
+import { DepDiagnosticCode, depDiagnosticCodes } from "./dep.js";
+import { EnvDiagnosticCode, envDiagnosticCodes } from "./env.js";
+import { FieldDiagnosticCode, fieldDiagnosticCodes } from "./field.js";
+import { HomeDiagnosticCode, homeDiagnosticCodes } from "./home.js";
+import { HostDiagnosticCode, hostDiagnosticCodes } from "./host.js";
+import { HygieneDiagnosticCode, hygieneDiagnosticCodes } from "./hygiene.js";
+import { LiveDiagnosticCode, liveDiagnosticCodes } from "./live.js";
+import { ManifestDiagnosticCode, manifestDiagnosticCodes } from "./manifest.js";
+import { NetworkDiagnosticCode, networkDiagnosticCodes } from "./network.js";
+import { PlatformDiagnosticCode, platformDiagnosticCodes } from "./platform.js";
+import { PublishDiagnosticCode, publishDiagnosticCodes } from "./publish.js";
+import { RegressionDiagnosticCode, regressionDiagnosticCodes } from "./regression.js";
+import { RuntimeDiagnosticCode, runtimeDiagnosticCodes } from "./runtime.js";
+import { SecretDiagnosticCode, secretDiagnosticCodes } from "./secret.js";
+import { SmokeDiagnosticCode, smokeDiagnosticCodes } from "./smoke.js";
+import { SubmitDiagnosticCode, submitDiagnosticCodes } from "./submit.js";
+import { TargetDiagnosticCode, targetDiagnosticCodes } from "./target.js";
+import { TypeDiagnosticCode, typeDiagnosticCodes } from "./type.js";
+import { VerifyDiagnosticCode, verifyDiagnosticCodes } from "./verify.js";
+//#region src/diagnostics/codes/index.d.ts
+/** Every code in the catalog. Codes are semver surface and are never removed (AX-03). */
+export type KnownDiagnosticCode = CliDiagnosticCode | RegressionDiagnosticCode | SmokeDiagnosticCode | A11yDiagnosticCode | NetworkDiagnosticCode | ConsoleDiagnosticCode | TypeDiagnosticCode | VerifyDiagnosticCode | LiveDiagnosticCode | SecretDiagnosticCode | RuntimeDiagnosticCode | FieldDiagnosticCode | SubmitDiagnosticCode | HygieneDiagnosticCode | DepDiagnosticCode | EnvDiagnosticCode | TargetDiagnosticCode | ArtifactDiagnosticCode | PublishDiagnosticCode | ActionDiagnosticCode | BuildDiagnosticCode | ManifestDiagnosticCode | HomeDiagnosticCode | PlatformDiagnosticCode | HostDiagnosticCode;
+/** Every cataloged code with its severity, phase, title, default hint and docs text. */
+export declare const diagnosticCatalog: Readonly<Record<KnownDiagnosticCode, DiagnosticSpec>>;
+/** Options for {@link createDiagnostic}. */
+export interface CreateDiagnosticOptions {
+  /** The docs site base URL. Defaults to `DEFAULT_DOCS_BASE`. */
+  readonly docsBase?: string;
+}
+/**
+ * Creates the diagnostic for one occurrence of a cataloged code. Severity, phase, the default hint
+ * and the docs link come from the catalog.
+ *
+ * ```ts
+ * createDiagnostic("MOSTRA_HOST_REVISION_UNSUPPORTED", {
+ *   message: "The client offered 2026-01-01; this instance supports 2026-10-10.",
+ * });
+ * ```
+ */
+export declare function createDiagnostic(code: KnownDiagnosticCode, details: DiagnosticDetails, options?: CreateDiagnosticOptions): Diagnostic;
+//#endregion
+export { type A11yDiagnosticCode, type ActionDiagnosticCode, type ArtifactDiagnosticCode, type BuildDiagnosticCode, type CliDiagnosticCode, type ConsoleDiagnosticCode, type DepDiagnosticCode, type EnvDiagnosticCode, type FieldDiagnosticCode, type HomeDiagnosticCode, type HostDiagnosticCode, type HygieneDiagnosticCode, type LiveDiagnosticCode, type ManifestDiagnosticCode, type NetworkDiagnosticCode, type PlatformDiagnosticCode, type PublishDiagnosticCode, type RegressionDiagnosticCode, type RuntimeDiagnosticCode, type SecretDiagnosticCode, type SmokeDiagnosticCode, type SubmitDiagnosticCode, type TargetDiagnosticCode, type TypeDiagnosticCode, type VerifyDiagnosticCode, a11yDiagnosticCodes, actionDiagnosticCodes, artifactDiagnosticCodes, buildDiagnosticCodes, cliDiagnosticCodes, consoleDiagnosticCodes, depDiagnosticCodes, envDiagnosticCodes, fieldDiagnosticCodes, homeDiagnosticCodes, hostDiagnosticCodes, hygieneDiagnosticCodes, liveDiagnosticCodes, manifestDiagnosticCodes, networkDiagnosticCodes, platformDiagnosticCodes, publishDiagnosticCodes, regressionDiagnosticCodes, runtimeDiagnosticCodes, secretDiagnosticCodes, smokeDiagnosticCodes, submitDiagnosticCodes, targetDiagnosticCodes, typeDiagnosticCodes, verifyDiagnosticCodes };
+//# sourceMappingURL=index.d.ts.map

package/dist/diagnostics/codes/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","names":[],"sources":["../../../src/diagnostics/codes/index.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;YA6DY,sBAER,oBACA,2BACA,sBACA,qBACA,wBACA,wBACA,qBACA,uBACA,qBACA,uBACA,wBACA,sBACA,uBACA,wBACA,oBACA,oBACA,uBACA,yBACA,wBACA,uBACA,sBACA,yBACA,qBACA,yBACA;;qBAGS,mBAAmB,SAAS,OAAO,qBAAqB;;iBA8BpD;;WAEN;;;;;;;;;;;;wBAaK,iBACd,MAAM,qBACN,SAAS,mBACT,UAAS,0BACR"}

package/dist/diagnostics/codes/index.js

@@ -0,0 +1,72 @@
+import { hostDiagnosticCodes, hostDiagnostics } from "./host.js";
+import { buildDiagnostic } from "../spec.js";
+import { a11yDiagnosticCodes, a11yDiagnostics } from "./a11y.js";
+import { actionDiagnosticCodes, actionDiagnostics } from "./action.js";
+import { artifactDiagnosticCodes, artifactDiagnostics } from "./artifact.js";
+import { buildDiagnosticCodes, buildDiagnostics } from "./build.js";
+import { cliDiagnosticCodes, cliDiagnostics } from "./cli.js";
+import { consoleDiagnosticCodes, consoleDiagnostics } from "./console.js";
+import { depDiagnosticCodes, depDiagnostics } from "./dep.js";
+import { envDiagnosticCodes, envDiagnostics } from "./env.js";
+import { fieldDiagnosticCodes, fieldDiagnostics } from "./field.js";
+import { homeDiagnosticCodes, homeDiagnostics } from "./home.js";
+import { hygieneDiagnosticCodes, hygieneDiagnostics } from "./hygiene.js";
+import { liveDiagnosticCodes, liveDiagnostics } from "./live.js";
+import { manifestDiagnosticCodes, manifestDiagnostics } from "./manifest.js";
+import { networkDiagnosticCodes, networkDiagnostics } from "./network.js";
+import { platformDiagnosticCodes, platformDiagnostics } from "./platform.js";
+import { publishDiagnosticCodes, publishDiagnostics } from "./publish.js";
+import { regressionDiagnosticCodes, regressionDiagnostics } from "./regression.js";
+import { runtimeDiagnosticCodes, runtimeDiagnostics } from "./runtime.js";
+import { secretDiagnosticCodes, secretDiagnostics } from "./secret.js";
+import { smokeDiagnosticCodes, smokeDiagnostics } from "./smoke.js";
+import { submitDiagnosticCodes, submitDiagnostics } from "./submit.js";
+import { targetDiagnosticCodes, targetDiagnostics } from "./target.js";
+import { typeDiagnosticCodes, typeDiagnostics } from "./type.js";
+import { verifyDiagnosticCodes, verifyDiagnostics } from "./verify.js";
+//#region src/diagnostics/codes/index.ts
+/** Every cataloged code with its severity, phase, title, default hint and docs text. */
+const diagnosticCatalog = {
+	...cliDiagnostics,
+	...regressionDiagnostics,
+	...smokeDiagnostics,
+	...a11yDiagnostics,
+	...networkDiagnostics,
+	...consoleDiagnostics,
+	...typeDiagnostics,
+	...verifyDiagnostics,
+	...liveDiagnostics,
+	...secretDiagnostics,
+	...runtimeDiagnostics,
+	...fieldDiagnostics,
+	...submitDiagnostics,
+	...hygieneDiagnostics,
+	...depDiagnostics,
+	...envDiagnostics,
+	...targetDiagnostics,
+	...artifactDiagnostics,
+	...publishDiagnostics,
+	...actionDiagnostics,
+	...buildDiagnostics,
+	...manifestDiagnostics,
+	...homeDiagnostics,
+	...platformDiagnostics,
+	...hostDiagnostics
+};
+/**
+* Creates the diagnostic for one occurrence of a cataloged code. Severity, phase, the default hint
+* and the docs link come from the catalog.
+*
+* ```ts
+* createDiagnostic("MOSTRA_HOST_REVISION_UNSUPPORTED", {
+*   message: "The client offered 2026-01-01; this instance supports 2026-10-10.",
+* });
+* ```
+*/
+function createDiagnostic(code, details, options = {}) {
+	return buildDiagnostic(code, diagnosticCatalog[code], details, options.docsBase);
+}
+//#endregion
+export { a11yDiagnosticCodes, actionDiagnosticCodes, artifactDiagnosticCodes, buildDiagnosticCodes, cliDiagnosticCodes, consoleDiagnosticCodes, createDiagnostic, depDiagnosticCodes, diagnosticCatalog, envDiagnosticCodes, fieldDiagnosticCodes, homeDiagnosticCodes, hostDiagnosticCodes, hygieneDiagnosticCodes, liveDiagnosticCodes, manifestDiagnosticCodes, networkDiagnosticCodes, platformDiagnosticCodes, publishDiagnosticCodes, regressionDiagnosticCodes, runtimeDiagnosticCodes, secretDiagnosticCodes, smokeDiagnosticCodes, submitDiagnosticCodes, targetDiagnosticCodes, typeDiagnosticCodes, verifyDiagnosticCodes };
+
+//# sourceMappingURL=index.js.map

package/dist/diagnostics/codes/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","names":[],"sources":["../../../src/diagnostics/codes/index.ts"],"sourcesContent":["/**\n * The diagnostic catalog, assembled from one source file per area. `pnpm gen diagnostic` keeps\n * the lists below in step with the area files; edit the area files, not these lists.\n */\nimport type { Diagnostic } from \"../diagnostic.ts\";\nimport { buildDiagnostic, type DiagnosticDetails, type DiagnosticSpec } from \"../spec.ts\";\nimport { type A11yDiagnosticCode, a11yDiagnostics } from \"./a11y.ts\";\nimport { type ActionDiagnosticCode, actionDiagnostics } from \"./action.ts\";\nimport { type ArtifactDiagnosticCode, artifactDiagnostics } from \"./artifact.ts\";\nimport { type BuildDiagnosticCode, buildDiagnostics } from \"./build.ts\";\n// gen:area-imports\nimport { type CliDiagnosticCode, cliDiagnostics } from \"./cli.ts\";\nimport { type ConsoleDiagnosticCode, consoleDiagnostics } from \"./console.ts\";\nimport { type DepDiagnosticCode, depDiagnostics } from \"./dep.ts\";\nimport { type EnvDiagnosticCode, envDiagnostics } from \"./env.ts\";\nimport { type FieldDiagnosticCode, fieldDiagnostics } from \"./field.ts\";\nimport { type HomeDiagnosticCode, homeDiagnostics } from \"./home.ts\";\nimport { type HostDiagnosticCode, hostDiagnostics } from \"./host.ts\";\nimport { type HygieneDiagnosticCode, hygieneDiagnostics } from \"./hygiene.ts\";\nimport { type LiveDiagnosticCode, liveDiagnostics } from \"./live.ts\";\nimport { type ManifestDiagnosticCode, manifestDiagnostics } from \"./manifest.ts\";\nimport { type NetworkDiagnosticCode, networkDiagnostics } from \"./network.ts\";\nimport { type PlatformDiagnosticCode, platformDiagnostics } from \"./platform.ts\";\nimport { type PublishDiagnosticCode, publishDiagnostics } from \"./publish.ts\";\nimport { type RegressionDiagnosticCode, regressionDiagnostics } from \"./regression.ts\";\nimport { type RuntimeDiagnosticCode, runtimeDiagnostics } from \"./runtime.ts\";\nimport { type SecretDiagnosticCode, secretDiagnostics } from \"./secret.ts\";\nimport { type SmokeDiagnosticCode, smokeDiagnostics } from \"./smoke.ts\";\nimport { type SubmitDiagnosticCode, submitDiagnostics } from \"./submit.ts\";\nimport { type TargetDiagnosticCode, targetDiagnostics } from \"./target.ts\";\nimport { type TypeDiagnosticCode, typeDiagnostics } from \"./type.ts\";\nimport { type VerifyDiagnosticCode, verifyDiagnostics } from \"./verify.ts\";\n\nexport { type A11yDiagnosticCode, a11yDiagnosticCodes } from \"./a11y.ts\";\nexport { type ActionDiagnosticCode, actionDiagnosticCodes } from \"./action.ts\";\nexport { type ArtifactDiagnosticCode, artifactDiagnosticCodes } from \"./artifact.ts\";\nexport { type BuildDiagnosticCode, buildDiagnosticCodes } from \"./build.ts\";\n// gen:area-exports\nexport { type CliDiagnosticCode, cliDiagnosticCodes } from \"./cli.ts\";\nexport { type ConsoleDiagnosticCode, consoleDiagnosticCodes } from \"./console.ts\";\nexport { type DepDiagnosticCode, depDiagnosticCodes } from \"./dep.ts\";\nexport { type EnvDiagnosticCode, envDiagnosticCodes } from \"./env.ts\";\nexport { type FieldDiagnosticCode, fieldDiagnosticCodes } from \"./field.ts\";\nexport { type HomeDiagnosticCode, homeDiagnosticCodes } from \"./home.ts\";\nexport { type HostDiagnosticCode, hostDiagnosticCodes } from \"./host.ts\";\nexport { type HygieneDiagnosticCode, hygieneDiagnosticCodes } from \"./hygiene.ts\";\nexport { type LiveDiagnosticCode, liveDiagnosticCodes } from \"./live.ts\";\nexport { type ManifestDiagnosticCode, manifestDiagnosticCodes } from \"./manifest.ts\";\nexport { type NetworkDiagnosticCode, networkDiagnosticCodes } from \"./network.ts\";\nexport { type PlatformDiagnosticCode, platformDiagnosticCodes } from \"./platform.ts\";\nexport { type PublishDiagnosticCode, publishDiagnosticCodes } from \"./publish.ts\";\nexport { type RegressionDiagnosticCode, regressionDiagnosticCodes } from \"./regression.ts\";\nexport { type RuntimeDiagnosticCode, runtimeDiagnosticCodes } from \"./runtime.ts\";\nexport { type SecretDiagnosticCode, secretDiagnosticCodes } from \"./secret.ts\";\nexport { type SmokeDiagnosticCode, smokeDiagnosticCodes } from \"./smoke.ts\";\nexport { type SubmitDiagnosticCode, submitDiagnosticCodes } from \"./submit.ts\";\nexport { type TargetDiagnosticCode, targetDiagnosticCodes } from \"./target.ts\";\nexport { type TypeDiagnosticCode, typeDiagnosticCodes } from \"./type.ts\";\nexport { type VerifyDiagnosticCode, verifyDiagnosticCodes } from \"./verify.ts\";\n\n/** Every code in the catalog. Codes are semver surface and are never removed (AX-03). */\nexport type KnownDiagnosticCode =\n  // gen:area-codes\n  | CliDiagnosticCode\n  | RegressionDiagnosticCode\n  | SmokeDiagnosticCode\n  | A11yDiagnosticCode\n  | NetworkDiagnosticCode\n  | ConsoleDiagnosticCode\n  | TypeDiagnosticCode\n  | VerifyDiagnosticCode\n  | LiveDiagnosticCode\n  | SecretDiagnosticCode\n  | RuntimeDiagnosticCode\n  | FieldDiagnosticCode\n  | SubmitDiagnosticCode\n  | HygieneDiagnosticCode\n  | DepDiagnosticCode\n  | EnvDiagnosticCode\n  | TargetDiagnosticCode\n  | ArtifactDiagnosticCode\n  | PublishDiagnosticCode\n  | ActionDiagnosticCode\n  | BuildDiagnosticCode\n  | ManifestDiagnosticCode\n  | HomeDiagnosticCode\n  | PlatformDiagnosticCode\n  | HostDiagnosticCode;\n\n/** Every cataloged code with its severity, phase, title, default hint and docs text. */\nexport const diagnosticCatalog: Readonly<Record<KnownDiagnosticCode, DiagnosticSpec>> = {\n  // gen:area-spreads\n  ...cliDiagnostics,\n  ...regressionDiagnostics,\n  ...smokeDiagnostics,\n  ...a11yDiagnostics,\n  ...networkDiagnostics,\n  ...consoleDiagnostics,\n  ...typeDiagnostics,\n  ...verifyDiagnostics,\n  ...liveDiagnostics,\n  ...secretDiagnostics,\n  ...runtimeDiagnostics,\n  ...fieldDiagnostics,\n  ...submitDiagnostics,\n  ...hygieneDiagnostics,\n  ...depDiagnostics,\n  ...envDiagnostics,\n  ...targetDiagnostics,\n  ...artifactDiagnostics,\n  ...publishDiagnostics,\n  ...actionDiagnostics,\n  ...buildDiagnostics,\n  ...manifestDiagnostics,\n  ...homeDiagnostics,\n  ...platformDiagnostics,\n  ...hostDiagnostics,\n};\n\n/** Options for {@link createDiagnostic}. */\nexport interface CreateDiagnosticOptions {\n  /** The docs site base URL. Defaults to `DEFAULT_DOCS_BASE`. */\n  readonly docsBase?: string;\n}\n\n/**\n * Creates the diagnostic for one occurrence of a cataloged code. Severity, phase, the default hint\n * and the docs link come from the catalog.\n *\n * ```ts\n * createDiagnostic(\"MOSTRA_HOST_REVISION_UNSUPPORTED\", {\n *   message: \"The client offered 2026-01-01; this instance supports 2026-10-10.\",\n * });\n * ```\n */\nexport function createDiagnostic(\n  code: KnownDiagnosticCode,\n  details: DiagnosticDetails,\n  options: CreateDiagnosticOptions = {},\n): Diagnostic {\n  return buildDiagnostic(code, diagnosticCatalog[code], details, options.docsBase);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AA0FA,MAAa,oBAA2E;CAEtF,GAAG;CACH,GAAG;CACH,GAAG;CACH,GAAG;CACH,GAAG;CACH,GAAG;CACH,GAAG;CACH,GAAG;CACH,GAAG;CACH,GAAG;CACH,GAAG;CACH,GAAG;CACH,GAAG;CACH,GAAG;CACH,GAAG;CACH,GAAG;CACH,GAAG;CACH,GAAG;CACH,GAAG;CACH,GAAG;CACH,GAAG;CACH,GAAG;CACH,GAAG;CACH,GAAG;CACH,GAAG;AACL;;;;;;;;;;;AAkBA,SAAgB,iBACd,MACA,SACA,UAAmC,CAAC,GACxB;CACZ,OAAO,gBAAgB,MAAM,kBAAkB,OAAO,SAAS,QAAQ,QAAQ;AACjF"}

package/dist/diagnostics/codes/live.d.ts

@@ -0,0 +1,8 @@
+import "../spec.js";
+//#region src/diagnostics/codes/live.d.ts
+/** The codes of the LIVE area, in the order they were added. */
+export declare const liveDiagnosticCodes: readonly ["MOSTRA_LIVE_TOO_LARGE", "MOSTRA_LIVE_SOURCE_FAILED"];
+/** The codes of the LIVE area. */
+export type LiveDiagnosticCode = (typeof liveDiagnosticCodes)[number];
+//#endregion
+//# sourceMappingURL=live.d.ts.map