@mulmoclaude/core 0.23.1 → 0.24.0

package/dist/{server-D2ibbixF.js → server-BpEo0FOd.js}

@@ -1,4 +1,4 @@
-import { B as isFieldDrivenEvery, C as backlinkRows, D as actionVisible, E as rollupValue, F as AGENT_INGEST_KIND, I as COMPUTED_TYPES, L as FEED_SCHEDULES, M as SAFE_SLUG_PATTERN, N as isSafeRecordId, P as isSafeSlug, R as INGEST_KINDS, T as projectBacklinkRow, V as isReadOnlySchema, b as resolveIcon, d as parseIsoDateTime, g as deriveAll, j as SAFE_RECORD_ID_PATTERN, t as defangForPrompt, u as parseIsoDate, w as coerceNumeric, x as selectDynamicRecord, y as firstDateField, z as embedTargetId } from "./promptSafety-rDWA9_JS.js";
+import { B as embedTargetId, D as rollupValue, E as projectBacklinkRow, F as isSafeSlug, H as isReadOnlySchema, I as AGENT_INGEST_KIND, L as COMPUTED_TYPES, M as SAFE_RECORD_ID_PATTERN, N as SAFE_SLUG_PATTERN, O as actionVisible, P as isSafeRecordId, R as FEED_SCHEDULES, S as itemIsDone, T as coerceNumeric, V as isFieldDrivenEvery, b as resolveIcon, d as parseIsoDateTime, g as deriveAll, t as defangForPrompt, u as parseIsoDate, w as backlinkRows, x as selectDynamicRecord, y as firstDateField, z as INGEST_KINDS } from "./promptSafety-BLUcImzd.js";
 import { isSafeActionTemplatePath, isSafeCustomViewI18nPath, isSafeCustomViewPath } from "./collection/paths.js";
 import { dataSkillDir, mirrorSkillWrite } from "./skill-bridge/index.js";
 import path from "node:path";
@@ -1502,6 +1502,32 @@ var WhenZ = z.object({
 	field: z.string().trim().min(1),
 	in: z.array(z.string().trim().min(1)).min(1)
 });
+var ValueRefZ = z.object({
+	record: z.string().trim().min(1).optional(),
+	field: z.string().trim().min(1)
+});
+var WhereCondZ = z.object({
+	field: z.string().trim().min(1),
+	op: z.enum([
+		"eq",
+		"ne",
+		"in",
+		"gt",
+		"gte",
+		"lt",
+		"lte",
+		"contains"
+	]),
+	value: z.union([z.string(), z.array(z.string())]).optional(),
+	valueFrom: ValueRefZ.optional()
+}).refine((cond) => cond.value !== void 0 !== (cond.valueFrom !== void 0), {
+	message: "a where condition must declare exactly one of `value` (a literal) or `valueFrom` (a reference to another record's field), never both or neither",
+	path: ["value"]
+}).refine((cond) => cond.value === void 0 || cond.op === "in" === Array.isArray(cond.value), {
+	message: "`in` requires an array `value` (the allowed set); every other op requires a single string `value`",
+	path: ["value"]
+});
+var WhereZ = z.array(WhereCondZ);
 var fieldBase = {
 	label: z.string().min(1),
 	primary: z.boolean().optional(),
@@ -1712,6 +1738,30 @@ var ToggleFieldZ = z.object({
 	onValue: z.string().trim().min(1),
 	offValue: z.string().trim().min(1)
 });
+/** A computed boolean: the record matched against a `where` predicate
+*  (the same AND-of-conditions shape `dynamicIcon` uses; evaluated by
+*  `./where`'s `matchesWhere`). Generic state summaries — isDone,
+*  isPassed, isQualified — become declared fields, so every
+*  field-driven mechanism (table cells, detail view, completion via
+*  `completionField`) picks them up without special cases. Never
+*  stored; computed by `deriveAll` on both server and client in the
+*  same saturation loop as `derived`, so a flag may read derived /
+*  rollup values — and other flags (`matchesWhere` stringifies, so
+*  `eq "true"` composes). Deliberately a STRUCTURED field, not formula
+*  syntax — the derived evaluator's no-string-literals boundary stays
+*  untouched (same reasoning as `rollup`). Cross-record
+*  `valueFrom.record` is rejected here: per-record evaluation has no
+*  `recordsById`, so it could only ever silently never-match.
+*  `where` condition fields are validated to exist by a schema-level
+*  refine below (a field can't see its siblings). */
+var FlagFieldZ = z.object({
+	type: z.literal("flag"),
+	...fieldBase,
+	where: WhereZ.min(1)
+}).refine((spec) => spec.where.every((cond) => cond.valueFrom?.record === void 0), {
+	message: "a flag's `where` cannot use `valueFrom.record` (cross-record references are unresolvable in per-record evaluation); use a literal `value` or a same-record `valueFrom` (field-to-field)",
+	path: ["where"]
+});
 var FieldSpecZ = z.discriminatedUnion("type", [
 	ScalarFieldZ,
 	RefFieldZ,
@@ -1722,7 +1772,8 @@ var FieldSpecZ = z.discriminatedUnion("type", [
 	EmbedFieldZ,
 	BacklinksFieldZ,
 	RollupFieldZ,
-	ToggleFieldZ
+	ToggleFieldZ,
+	FlagFieldZ
 ]);
 var actionBase = {
 	id: z.string().trim().min(1),
@@ -1871,32 +1922,6 @@ var AgentIngestZ = z.object({
 *  discovered from `<workspace>/feeds/` are REQUIRED to carry it (gated by
 *  `acceptParsedSchema`). */
 var IngestZ = z.discriminatedUnion("kind", [DeclarativeIngestZ, AgentIngestZ]);
-var ValueRefZ = z.object({
-	record: z.string().trim().min(1).optional(),
-	field: z.string().trim().min(1)
-});
-var WhereCondZ = z.object({
-	field: z.string().trim().min(1),
-	op: z.enum([
-		"eq",
-		"ne",
-		"in",
-		"gt",
-		"gte",
-		"lt",
-		"lte",
-		"contains"
-	]),
-	value: z.union([z.string(), z.array(z.string())]).optional(),
-	valueFrom: ValueRefZ.optional()
-}).refine((cond) => cond.value !== void 0 !== (cond.valueFrom !== void 0), {
-	message: "a where condition must declare exactly one of `value` (a literal) or `valueFrom` (a reference to another record's field), never both or neither",
-	path: ["value"]
-}).refine((cond) => cond.value === void 0 || cond.op === "in" === Array.isArray(cond.value), {
-	message: "`in` requires an array `value` (the allowed set); every other op requires a single string `value`",
-	path: ["value"]
-});
-var WhereZ = z.array(WhereCondZ);
 var DynamicIconSourceZ = z.object({
 	collection: z.string().trim().min(1),
 	from: z.enum([
@@ -1991,12 +2016,12 @@ function fieldDrivenFromFieldCarried(schema) {
 *  workspace-relative and containment-checked exactly like `dataPath`. The
 *  row-id column is the schema's existing `primaryKey` — there is
 *  deliberately no second key concept here.
-*  See plans/feat-collection-csv-duckdb-source.md. */
+*  See plans/done/feat-collection-csv-duckdb-source.md. */
 var DataSourceZ = z.object({
 	type: z.literal("csv"),
 	path: z.string().min(1)
 });
-var CollectionSchemaZ = z.object({
+var BareCollectionSchemaZ = z.object({
 	title: z.string().min(1),
 	icon: z.string().min(1),
 	dataPath: z.string().min(1).optional(),
@@ -2056,8 +2081,11 @@ var CollectionSchemaZ = z.object({
 }).refine((schema) => collectCurrencyFieldRefs(schema.fields).every((name) => CODE_FIELD_TYPES.has(schema.fields[name]?.type ?? "")), {
 	message: "a money field's `currencyField` must name a top-level `string`, `text`, or `enum` field that holds the currency code",
 	path: ["fields"]
-}).refine((schema) => schema.completionField === void 0 === (schema.completionDoneValues === void 0), {
-	message: "schema `completionField` and `completionDoneValues` must be declared together (both set, or both omitted)",
+}).refine((schema) => {
+	if (schema.completionField !== void 0 && schema.fields[schema.completionField]?.type === "flag") return schema.completionDoneValues === void 0;
+	return schema.completionField === void 0 === (schema.completionDoneValues === void 0);
+}, {
+	message: "schema `completionField` and `completionDoneValues` must be declared together (both set, or both omitted) — unless `completionField` names a `flag` field, in which case `completionDoneValues` must be omitted (done ⇔ the flag matches)",
 	path: ["completionField"]
 }).refine((schema) => schema.completionField === void 0 || schema.fields[schema.completionField] !== void 0, {
 	message: "schema `completionField` must name a top-level field declared in `fields`",
@@ -2068,6 +2096,22 @@ var CollectionSchemaZ = z.object({
 }).refine((schema) => Object.values(schema.fields).every((field) => field.when === void 0 || schema.fields[field.when.field] !== void 0), {
 	message: "a field's `when.field` must name a top-level field declared in `fields`",
 	path: ["fields"]
+}).refine((schema) => Object.values(schema.fields).every((field) => field.type !== "flag" || field.where.every((cond) => schema.fields[cond.field] !== void 0 && (cond.valueFrom === void 0 || schema.fields[cond.valueFrom.field] !== void 0))), {
+	message: "a flag field's `where` conditions must name top-level fields declared in `fields` (both `field` and a same-record `valueFrom.field`)",
+	path: ["fields"]
+}).refine((schema) => {
+	const spec = schema.completionField === void 0 ? void 0 : schema.fields[schema.completionField];
+	if (spec?.type !== "flag") return true;
+	return spec.where.every((cond) => [cond.field, ...cond.valueFrom ? [cond.valueFrom.field] : []].every((name) => {
+		const target = schema.fields[name];
+		return target !== void 0 && !COMPUTED_TYPES.has(target.type);
+	}));
+}, {
+	message: "a `flag` named by `completionField` may only reference STORED fields in its `where` — completion is evaluated against the raw record (before deriveAll), where computed values (derived/rollup/toggle/flag/embed/backlinks) are absent",
+	path: ["completionField"]
+}).refine((schema) => schema.spawn === void 0 || schema.spawn.when !== void 0 || schema.fields[schema.completionField ?? ""]?.type !== "flag", {
+	message: "a schema whose `completionField` names a `flag` field must declare an explicit `spawn.when` (the spawn-inert check cannot statically evaluate a flag's `where`)",
+	path: ["spawn"]
 }).refine((schema) => Object.values(schema.fields).every((field) => {
 	if (field.type !== "embed" || field.idField === void 0) return true;
 	const target = schema.fields[field.idField];
@@ -2142,6 +2186,46 @@ var CollectionSchemaZ = z.object({
 	message: "schema `views` must have unique `id`s",
 	path: ["views"]
 });
+var PROTOTYPE_KEYS = [
+	"__proto__",
+	"constructor",
+	"prototype"
+];
+/** The first own prototype-sensitive key of `value`, or null. */
+function ownPrototypeKey(value) {
+	if (value === null || typeof value !== "object") return null;
+	for (const key of PROTOTYPE_KEYS) if (Object.hasOwn(value, key)) return key;
+	return null;
+}
+/** Dotted path of the first prototype-sensitive field name in the raw
+*  schema input — top-level `fields`, each table field's `of`, and each
+*  action's `params` (the three records that DEFINE names) — or null. */
+function prototypeFieldKeyPath(input) {
+	if (input === null || typeof input !== "object") return null;
+	const schema = input;
+	const bad = ownPrototypeKey(schema.fields);
+	if (bad !== null) return `fields.${bad}`;
+	for (const [key, spec] of Object.entries(schema.fields ?? {})) {
+		const badSub = ownPrototypeKey(spec?.of);
+		if (badSub !== null) return `fields.${key}.of.${badSub}`;
+	}
+	for (const [listName, list] of [["actions", schema.actions], ["collectionActions", schema.collectionActions]]) for (const action of Array.isArray(list) ? list : []) {
+		const badParam = ownPrototypeKey(action?.params);
+		if (badParam !== null) return `${listName}.params.${badParam}`;
+	}
+	return null;
+}
+var CollectionSchemaZ = z.preprocess((input, ctx) => {
+	const bad = prototypeFieldKeyPath(input);
+	if (bad !== null) {
+		ctx.addIssue({
+			code: "custom",
+			message: `'${bad}': field names must not be prototype-sensitive keys (\`__proto__\`, \`constructor\`, \`prototype\`)`
+		});
+		return z.NEVER;
+	}
+	return input;
+}, BareCollectionSchemaZ);
 //#endregion
 //#region src/collection/server/discovery.ts
 function applyFeedSchemaDefaults(parsed, slug) {
@@ -2702,17 +2786,15 @@ function successorId(sourceId, next) {
 }
 /** True iff `item` satisfies the spawn predicate. With an explicit
 *  `when`, matches `String(item[when.field]) ∈ when.in`. Without one,
-*  defaults to the completion-done condition. Self-contained (no import
-*  from notifications.ts) to keep the module graph acyclic. */
+*  defaults to the completion-done condition — the shared, flag-aware
+*  `itemIsDone` (core/completion; downhill import, so the module graph
+*  stays acyclic). */
 function matchesWhen(when, schema, item) {
 	if (when) {
 		const raw = item[when.field];
 		return raw !== void 0 && raw !== null && when.in.includes(String(raw));
 	}
-	const { completionField, completionDoneValues } = schema;
-	if (!completionField || !completionDoneValues) return false;
-	const raw = item[completionField];
-	return raw !== void 0 && raw !== null && completionDoneValues.includes(String(raw));
+	return itemIsDone(schema, item);
 }
 /** Resolve the literal `every` that applies to `sourceItem`. Literal-arm
 *  `spawn.every` passes through unchanged. Field-driven `spawn.every` reads
@@ -3507,4 +3589,4 @@ function makeManageCollectionTool(deps = {}) {
 //#endregion
 export { isRegularFile as $, validateCollectionRecords as A, decodeCsvRecordId as B, discoverCollections as C, CollectionSchemaZ as D, toSummary as E, collectionWritable as F, compileJsonlQuery as G, encodeCsvRecordId as H, readOnlyRefusal as I, MAX_QUERY_ROWS as J, CollectionQueryZ as K, storeFor as L, compileRecordZ as M, recordFieldProblem as N, applyMutateAction as O, runQueryOverRows as P, generateItemId as Q, MAX_CSV_ROWS as R, acceptParsedSchema as S, setCollectionChangePublisher as St, toDetail as T, normalizeCsvValue as U, dedupeByRecordId as V, compileCsvQuery as W, buildCollectionActionSeedPrompt as X, buildActionSeedPrompt as Y, deleteItem as Z, errorMessage as _, collectionsRegistriesConfigPath as _t, deleteCollection as a, readSkillTemplate as at, buildWorkspaceOntology as b, log as bt, computeSuccessor as c, writeFileAtomic as ct, isTriggerDue as d, isContainedInWorkspace as dt, listItems as et, maybeSpawnSuccessor as f, itemFilePath as ft, ONE_SECOND_MS as g, safeSlugName as gt, successorId as h, safeRecordId as ht, deleteCustomView as i, readItem as it, validateRecordObject as j, firstMutateParamProblem as k, daysInMonth as l, SCHEMA_FILE$1 as lt, resolveEvery as m, resolveTemplatePath as mt, MAX_UNSELECTIVE_ITEMS as n, readCustomViewHtml as nt, deleteCollectionRefusalMessage as o, resolveCreateItemId as ot, parseCivil as p, resolveDataDir as pt, DEFAULT_QUERY_ROWS as q, makeManageCollectionTool as r, readCustomViewI18n as rt, advanceTriggerDate as s, writeItem as st, MAX_SCHEMA_ISSUES as t, promptPathsFor as tt, formatCivil as u, isContainedInRoot as ut, computeCollectionIcon as v, configureCollectionHost as vt, loadCollection as w, schemaRelations as x, publishCollectionChange as xt, enrichItems as y, getWorkspaceRoot as yt, csvRowToItem as z };
 
-//# sourceMappingURL=server-D2ibbixF.js.map
+//# sourceMappingURL=server-BpEo0FOd.js.map