@mulmoclaude/core 3.10.0 → 3.11.0

package/dist/{server-BNe8XMtu.js → server-zcM1ViCE.js}

@@ -122,6 +122,34 @@ var PublicZ = z.object({
 	read: z.array(NameZ).optional(),
 	submit: z.record(NameZ, SubmitZ).optional()
 }).strict();
+/** The URL name an app is handed out under: `https://<host>/{slug}`.
+*
+*  A SEPARATE name from the `aid`, and that separation is the point (design
+*  D2b). `apps/{aid}` is a shelf every user of the deployment shares and the
+*  rules' `allow create` asks only that you name yourself owner — so a
+*  memorable aid is first-come-first-served, cannot be checked for
+*  availability, and frees up again when an app is deleted. The aid is
+*  therefore a UUID, and the thing people can fight over is moved to the name
+*  that costs nothing to change.
+*
+*  Declared here rather than kept beside `app.json` because a RESERVATION has
+*  to travel with the repository: `appSlugs/{slug}` is unreadable until the app
+*  is published (`allow read: if resource.data.published == true`), so nothing
+*  can recover which slug an app holds by asking Firestore. A second file to
+*  keep in step with the declaration is the alternative, and it is the kind of
+*  pair that goes out of step silently.
+*
+*  The shape is stricter than `NameZ` on purpose: it is BOTH a URL path
+*  segment people read aloud and a Firestore document id. Lowercase
+*  alphanumerics separated by single hyphens covers both without a case rule
+*  that would make two slugs collide in one place and not the other.
+*
+*  Which slug an app ended up with is the HOST's business — a wanted slug can
+*  be taken, and the host writes the one it reserved back here. Nothing in this
+*  package reads the key; it is declared so that writing it back does not make
+*  the file unparseable. */
+var SLUG_SHAPE = "must be lowercase letters, digits and single hyphens, and must not start or end with one (e.g. sakura-hair)";
+var SlugZ = z.string().trim().max(64).regex(/^[a-z0-9][a-z0-9-]*[a-z0-9]$|^[a-z0-9]$/, SLUG_SHAPE).refine((slug) => !slug.includes("--"), SLUG_SHAPE);
 /** The whole authored declaration.
 *
 *  `owner` is accepted but is NOT the published value — publish stamps the
@@ -133,6 +161,8 @@ var PublicZ = z.object({
 var AuthoredAppZ = z.object({
 	aid: NameZ,
 	name: z.string().trim().min(1).optional(),
+	/** The wanted (or reserved) URL name — see {@link SlugZ}. */
+	slug: SlugZ.optional(),
 	/** Per-worktree app id (design D6, implementation order 7). Accepted so a
 	*  repository already carrying it parses; nothing reads it yet. */
 	aidEnv: z.string().trim().min(1).optional(),
@@ -2740,4 +2770,4 @@ function makeManageCollectionTool(deps = {}) {
 //#endregion
 export { parseAuthoredApp as $, runQueryOverRows as A, APP_SLUGS_COLLECTION as B, STORE_UNREADABLE as C, recordFieldProblem as D, compileRecordZ as E, readCustomViewI18n as F, appStagingPath as G, appConfigPath as H, readSkillTemplate as I, projectPublish as J, projectApp as K, bindsSubmitterIdentity as L, buildCollectionActionSeedPrompt as M, promptPathsFor as N, runCollectionQuery as O, readCustomViewHtml as P, AuthoredAppZ as Q, publishProblems as R, MAX_RECORD_ISSUES as S, validateRecordObject as T, appSchemasPath as U, PUBLIC_CONFIG_DOC as V, appSlugDoc as W, stagedRuleConfig as X, promoteSchema as Y, APP_ROLES as Z, computeCollectionIcon as _, deleteCollection as a, applyMutateAction as b, computeSuccessor as c, isTriggerDue as d, maybeSpawnSuccessor as f, ONE_SECOND_MS as g, successorId as h, deleteCustomView as i, buildActionSeedPrompt as j, enrichItems as k, daysInMonth as l, resolveEvery as m, MAX_UNSELECTIVE_ITEMS as n, deleteCollectionRefusalMessage as o, parseCivil as p, projectDeploy as q, makeManageCollectionTool as r, advanceTriggerDate as s, MAX_SCHEMA_ISSUES as t, formatCivil as u, buildWorkspaceOntology as v, validateCollectionRecords as w, firstMutateParamProblem as x, schemaRelations as y, APPS_COLLECTION as z };
 
-//# sourceMappingURL=server-BNe8XMtu.js.map
+//# sourceMappingURL=server-zcM1ViCE.js.map