@mulmoclaude/core 3.12.0 → 3.14.0

package/dist/collection/registry/server/index.cjs

@@ -5,7 +5,7 @@ const require_root = require("../../../root-rPH6FGDT.cjs");
 const require_relPath = require("../../../relPath-CTAjGdCL.cjs");
 const require_utils_fetch = require("../../../utils/fetch.cjs");
 const require_discovery = require("../../../discovery-BsXiDZBR.cjs");
-const require_server = require("../../../server-BIKy55wo.cjs");
+const require_server = require("../../../server-DknYbXBo.cjs");
 const require_templatePath = require("../../../templatePath-27vUZowm.cjs");
 const require_skill_bridge_index = require("../../../skill-bridge/index.cjs");
 const require_types = require("../../../types-CNqkLT4M.cjs");

package/dist/collection/registry/server/index.js

@@ -3,7 +3,7 @@ import { n as writeFileAtomic } from "../../../root-BMroU_mB.js";
 import { n as toPosixRelPath } from "../../../relPath-DW8MC8VO.js";
 import { fetchWithTimeout } from "../../../utils/fetch.js";
 import { $ as collectionsRegistriesConfigPath, G as safeRecordId, ct as projectSkillsDir, mt as skillsStagingDir, nt as getWorkspaceRoot, ot as log, r as loadCollection, s as CollectionSchemaZ, t as acceptParsedSchema } from "../../../discovery-B9zdNkgW.js";
-import { g as ONE_SECOND_MS } from "../../../server-DkT40KgR.js";
+import { g as ONE_SECOND_MS } from "../../../server-CQSF5fHe.js";
 import { t as isSafeActionTemplatePath } from "../../../templatePath-k_WNbL_Q.js";
 import { claudeSkillDir, dataSkillDir, mirrorSkillWrite } from "../../../skill-bridge/index.js";
 import { n as parseRegistryIndex, r as isRecord, t as OFFICIAL_REGISTRY_NAME } from "../../../types-BKVZrtyc.js";

package/dist/collection/server/appViews.d.ts

@@ -0,0 +1,97 @@
+import { AuthoredApp } from './publishManifest';
+/** The audiences a view may be written for. A CLOSED set: each one names a
+ *  tier with a rule behind it, so an unknown value has nowhere to be
+ *  published to and is refused before it gets there. */
+export declare const VIEW_AUDIENCES: readonly ["public", "member", "participant"];
+export type ViewAudience = (typeof VIEW_AUDIENCES)[number];
+/** Where each audience's documents live under `apps/{aid}`. `public` is not
+ *  here: it keeps `config/public` + `config/view`, which are already published
+ *  and already read by a deployed runtime. */
+export declare const VIEW_TIER: Readonly<Record<Exclude<ViewAudience, "public">, "member" | "roster">>;
+/** The id `public.view` normalizes to. Fixed rather than derived, so two
+ *  implementations of the same normalization cannot pick different ones. */
+export declare const PUBLIC_VIEW_ID = "public";
+/** `config` is the projection's own document in every tier (`live:config`),
+ *  so a view may not be called that — the two would be the same document. */
+export declare const RESERVED_VIEW_IDS: readonly string[];
+/** What an id may be.
+ *
+ *  Narrow on purpose: this value is written by the author, and it becomes a
+ *  Firestore document id under a `live:` / `staged:` prefix. Excluding `:`
+ *  keeps the prefix and the id from running together; excluding `/`, `.` and
+ *  `__…__` keeps it a legal document id that addresses the path it says. */
+export declare const VIEW_ID_PATTERN: RegExp;
+/** A view as the author wrote it, once normalized: one shape, whichever of
+ *  the two declarations it came from. `where` is the path it was written at,
+ *  carried only so a refusal names the key the author can go and edit. */
+export interface NormalizedView {
+    id: string;
+    audience: ViewAudience;
+    path: string;
+    collections: string[];
+    where: string;
+}
+export type NormalizedViewsResult = {
+    ok: true;
+    views: NormalizedView[];
+} | {
+    ok: false;
+    problems: string[];
+};
+/** The one shape everything downstream reads.
+ *
+ *  Every caller — the publish gate, the projection, the host that writes the
+ *  documents — goes through this, so "which declaration was used" is decided
+ *  exactly once. */
+export declare function normalizeViews(app: AuthoredApp): NormalizedViewsResult;
+/** How one audience reaches one collection's records.
+ *
+ *  The parent page builds the query from this; the view never touches
+ *  Firestore. `own` is not a filter the rules apply for the reader — an
+ *  unscoped `list` on an own-row collection is DENIED, not narrowed — so the
+ *  scope has to travel with the declaration or the page fails. */
+export interface ProjectedViewCollection {
+    cid: string;
+    scope: "all" | "own";
+    /** `scope: "own"` — the field carrying the reader's verified address. */
+    emailField?: string;
+    /** `scope: "own"` — the row is the document whose id is the reader's uid. */
+    ownDocId?: "auth.uid";
+}
+/** How a participant reaches `cid`, or null if they cannot.
+ *
+ *  Mirrors the rules' read branches for someone holding no role:
+ *  `partRead` (the whole collection) and `ownRow` (their own record, found
+ *  by the submit declaration's `emailField` or by a uid-derived id).
+ *
+ *  `participantRead` is a PARAMETER rather than read off the manifest, and
+ *  that is the whole point of the signature. Publish does not promote the
+ *  manifest's value: `projectPublish` overwrites `participantRead` with what
+ *  the STAGED schemas carry, so a cid added since the last deploy is in the
+ *  manifest and not in the rules. Deriving the scope from the manifest would
+ *  publish `scope: "all"` for a collection the promoted rules then deny —
+ *  and removing one gives the mirror-image false refusal. The caller passes
+ *  the set that will actually be in force. */
+export declare function participantScope(app: AuthoredApp, cid: string, participantRead: readonly string[]): ProjectedViewCollection | null;
+/** The declaration as one non-public audience may see it — the document
+ *  published at `apps/{aid}/{tier}/live:config`, and deployed at
+ *  `staged:config`.
+ *
+ *  The roster is NOT here, and neither is anything about another member: this
+ *  is read by everyone the tier admits, which for `roster` includes every
+ *  participant. */
+export interface AppViewConfigDoc extends Record<string, unknown> {
+    name?: string;
+    views: {
+        id: string;
+        collections: ProjectedViewCollection[];
+    }[];
+    /** The submit declarations for the collections these views draw, so the page
+     *  can show what may be sent rather than discovering it from a denial. */
+    submit: Record<string, Record<string, unknown>>;
+    publishedAt: number;
+}
+/** The document ids one tier uses. `live:` and `staged:` are the only two
+ *  prefixes, so a single `match` covers the projection and every view. */
+export declare const viewDocId: (stage: "live" | "staged", viewId: string) => string;
+export declare const VIEW_CONFIG_ID = "config";

package/dist/collection/server/index.cjs

@@ -2,7 +2,7 @@ Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_root = require("../../root-rPH6FGDT.cjs");
 const require_itemId = require("../../itemId-Dzrr3vs5.cjs");
 const require_discovery = require("../../discovery-BsXiDZBR.cjs");
-const require_server = require("../../server-BIKy55wo.cjs");
+const require_server = require("../../server-DknYbXBo.cjs");
 const require_templatePath = require("../../templatePath-27vUZowm.cjs");
 exports.APPS_COLLECTION = require_server.APPS_COLLECTION;
 exports.APP_MANIFEST_FILE = require_discovery.APP_MANIFEST_FILE;
@@ -21,8 +21,14 @@ exports.MAX_RECORD_ISSUES = require_server.MAX_RECORD_ISSUES;
 exports.MAX_SCHEMA_ISSUES = require_server.MAX_SCHEMA_ISSUES;
 exports.MAX_UNSELECTIVE_ITEMS = require_server.MAX_UNSELECTIVE_ITEMS;
 exports.PUBLIC_CONFIG_DOC = require_server.PUBLIC_CONFIG_DOC;
+exports.PUBLIC_VIEW_ID = require_server.PUBLIC_VIEW_ID;
+exports.RESERVED_VIEW_IDS = require_server.RESERVED_VIEW_IDS;
 exports.SCHEMA_FILE = require_discovery.SCHEMA_FILE;
 exports.STORE_UNREADABLE = require_server.STORE_UNREADABLE;
+exports.VIEW_AUDIENCES = require_server.VIEW_AUDIENCES;
+exports.VIEW_CONFIG_ID = require_server.VIEW_CONFIG_ID;
+exports.VIEW_ID_PATTERN = require_server.VIEW_ID_PATTERN;
+exports.VIEW_TIER = require_server.VIEW_TIER;
 exports.acceptParsedSchema = require_discovery.acceptParsedSchema;
 exports.advanceTriggerDate = require_server.advanceTriggerDate;
 exports.appConfigPath = require_server.appConfigPath;
@@ -30,6 +36,7 @@ exports.appManifestReason = require_discovery.appManifestReason;
 exports.appSchemasPath = require_server.appSchemasPath;
 exports.appSlugDoc = require_server.appSlugDoc;
 exports.appStagingPath = require_server.appStagingPath;
+exports.appViewTierPath = require_server.appViewTierPath;
 exports.applyMutateAction = require_server.applyMutateAction;
 exports.bindsSubmitterIdentity = require_server.bindsSubmitterIdentity;
 exports.buildActionSeedPrompt = require_server.buildActionSeedPrompt;
@@ -79,12 +86,15 @@ exports.log = require_discovery.log;
 exports.makeManageCollectionTool = require_server.makeManageCollectionTool;
 exports.maybeSpawnSuccessor = require_server.maybeSpawnSuccessor;
 exports.normalizeCsvValue = require_discovery.normalizeCsvValue;
+exports.normalizeViews = require_server.normalizeViews;
 exports.pageFromFullRead = require_discovery.pageFromFullRead;
 exports.parseAppManifest = require_discovery.parseAppManifest;
 exports.parseAuthoredApp = require_server.parseAuthoredApp;
 exports.parseCivil = require_server.parseCivil;
+exports.participantScope = require_server.participantScope;
 exports.peekWorkspaceRoot = require_discovery.peekWorkspaceRoot;
 exports.projectApp = require_server.projectApp;
+exports.projectAppViews = require_server.projectAppViews;
 exports.projectDeploy = require_server.projectDeploy;
 exports.projectItemFields = require_discovery.projectItemFields;
 exports.projectPublish = require_server.projectPublish;
@@ -121,4 +131,6 @@ exports.toDetail = require_discovery.toDetail;
 exports.toSummary = require_discovery.toSummary;
 exports.validateCollectionRecords = require_server.validateCollectionRecords;
 exports.validateRecordObject = require_server.validateRecordObject;
+exports.viewConfigDocId = require_server.viewConfigDocId;
+exports.viewDocId = require_server.viewDocId;
 exports.writeItem = require_discovery.writeItem;

package/dist/collection/server/index.d.ts

@@ -3,8 +3,9 @@ export type { FirestoreDoc, FirestoreDocs } from './firestoreDocs';
 export { sharedItemsPath } from './firestoreStore';
 export { loadAppManifest, parseAppManifest, appManifestReason, APP_MANIFEST_FILE, type AppManifest, type AppManifestResult } from './appManifest';
 export { AuthoredAppZ, parseAuthoredApp, APP_ROLES, type AuthoredApp, type AuthoredCollectionConfig, type AuthoredMail, type AuthoredSubmit, } from './publishManifest';
-export { projectApp, projectDeploy, projectPublish, stagedRuleConfig, promoteSchema, appStagingPath, APP_SLUGS_COLLECTION, appSlugDoc, type AppSlugDoc, type DeployedApp, type PublishedFace, APPS_COLLECTION, PUBLIC_CONFIG_DOC, appConfigPath, appSchemasPath, type PublishStamp, type PublishedApp, type PublishedConfigDoc, type PublishedSchemaDoc, type StagedSchemaDoc, } from './publishProject';
+export { projectApp, projectAppViews, appViewTierPath, viewConfigDocId, type AppViewTier, projectDeploy, projectPublish, stagedRuleConfig, promoteSchema, appStagingPath, APP_SLUGS_COLLECTION, appSlugDoc, type AppSlugDoc, type DeployedApp, type PublishedFace, APPS_COLLECTION, PUBLIC_CONFIG_DOC, appConfigPath, appSchemasPath, type PublishStamp, type PublishedApp, type PublishedConfigDoc, type PublishedSchemaDoc, type StagedSchemaDoc, } from './publishProject';
 export { publishProblems, promotedRoleProblems, bindsSubmitterIdentity, type PublishableCollection } from './publishChecks';
+export { normalizeViews, participantScope, viewDocId, PUBLIC_VIEW_ID, RESERVED_VIEW_IDS, VIEW_AUDIENCES, VIEW_CONFIG_ID, VIEW_ID_PATTERN, VIEW_TIER, type AppViewConfigDoc, type NormalizedView, type NormalizedViewsResult, type ProjectedViewCollection, type ViewAudience, } from './appViews';
 export type { LoadedCollection } from './discoveredCollection';
 export * from './paths';
 export * from './templatePath';

package/dist/collection/server/index.js

@@ -1,6 +1,6 @@
 import { t as canonicalRoot } from "../../root-BMroU_mB.js";
 import { N as COMPUTED_TYPES } from "../../itemId-DfTm08jm.js";
 import { A as readItem, B as SCHEMA_FILE, C as CollectionQueryZ, D as generateItemId, E as deleteItem, F as loadAppManifest, G as safeRecordId, H as itemFilePath, I as parseAppManifest, J as isBackendUnavailable, K as safeSlugName, L as sharedItemsPath, M as writeItem, N as APP_MANIFEST_FILE, O as isRegularFile, P as appManifestReason, Q as collectionChangePayload, R as pageFromFullRead, S as compileJsonlQuery, T as MAX_QUERY_ROWS, U as resolveDataDir, V as isContainedInRoot, W as resolveTemplatePath, Y as COLLECTION_ROOT_REQUIRED, Z as collectionChangeKey, _ as dedupeByRecordId, a as toDetail, at as localCollectionKey, d as storeFor, dt as setFirestoreAccessor, et as configureCollectionHost, ft as setSharedCollectionsSupport, g as decodeCsvRecordId, h as csvRowToItem, i as resolvePrimaryField, j as resolveCreateItemId, k as listItems, l as collectionWritable, lt as publishCollectionChange, n as discoverCollections, nt as getWorkspaceRoot, o as toSummary, ot as log, p as MAX_CSV_ROWS, pt as sharedCollectionChangePayload, q as BackendUnavailableError, r as loadCollection, rt as hostSupportsSharedCollections, s as CollectionSchemaZ, st as peekWorkspaceRoot, t as acceptParsedSchema, tt as firestoreHandle, u as readOnlyRefusal, ut as setCollectionChangePublisher, v as encodeCsvRecordId, w as DEFAULT_QUERY_ROWS, x as compileCsvQuery, y as normalizeCsvValue, z as projectItemFields } from "../../discovery-B9zdNkgW.js";
-import { $ as AuthoredAppZ, A as runQueryOverRows, B as APPS_COLLECTION, C as STORE_UNREADABLE, D as recordFieldProblem, E as compileRecordZ, F as readCustomViewI18n, G as appSlugDoc, H as PUBLIC_CONFIG_DOC, I as readSkillTemplate, J as projectDeploy, K as appStagingPath, L as bindsSubmitterIdentity, M as buildCollectionActionSeedPrompt, N as promptPathsFor, O as runCollectionQuery, P as readCustomViewHtml, Q as APP_ROLES, R as promotedRoleProblems, S as MAX_RECORD_ISSUES, T as validateRecordObject, U as appConfigPath, V as APP_SLUGS_COLLECTION, W as appSchemasPath, X as promoteSchema, Y as projectPublish, Z as stagedRuleConfig, _ as computeCollectionIcon, a as deleteCollection, b as applyMutateAction, c as computeSuccessor, d as isTriggerDue, et as parseAuthoredApp, f as maybeSpawnSuccessor, h as successorId, i as deleteCustomView, j as buildActionSeedPrompt, k as enrichItems, l as daysInMonth, m as resolveEvery, n as MAX_UNSELECTIVE_ITEMS, o as deleteCollectionRefusalMessage, p as parseCivil, q as projectApp, r as makeManageCollectionTool, s as advanceTriggerDate, t as MAX_SCHEMA_ISSUES, u as formatCivil, v as buildWorkspaceOntology, w as validateCollectionRecords, x as firstMutateParamProblem, y as schemaRelations, z as publishProblems } from "../../server-DkT40KgR.js";
+import { $ as stagedRuleConfig, A as runQueryOverRows, B as APPS_COLLECTION, C as STORE_UNREADABLE, D as recordFieldProblem, E as compileRecordZ, F as readCustomViewI18n, G as appSlugDoc, H as PUBLIC_CONFIG_DOC, I as readSkillTemplate, J as projectApp, K as appStagingPath, L as bindsSubmitterIdentity, M as buildCollectionActionSeedPrompt, N as promptPathsFor, O as runCollectionQuery, P as readCustomViewHtml, Q as promoteSchema, R as promotedRoleProblems, S as MAX_RECORD_ISSUES, T as validateRecordObject, U as appConfigPath, V as APP_SLUGS_COLLECTION, W as appSchemasPath, X as projectDeploy, Y as projectAppViews, Z as projectPublish, _ as computeCollectionIcon, a as deleteCollection, at as RESERVED_VIEW_IDS, b as applyMutateAction, c as computeSuccessor, ct as VIEW_ID_PATTERN, d as isTriggerDue, dt as participantScope, et as viewConfigDocId, f as maybeSpawnSuccessor, ft as viewDocId, h as successorId, i as deleteCustomView, it as PUBLIC_VIEW_ID, j as buildActionSeedPrompt, k as enrichItems, l as daysInMonth, lt as VIEW_TIER, m as resolveEvery, n as MAX_UNSELECTIVE_ITEMS, nt as AuthoredAppZ, o as deleteCollectionRefusalMessage, ot as VIEW_AUDIENCES, p as parseCivil, q as appViewTierPath, r as makeManageCollectionTool, rt as parseAuthoredApp, s as advanceTriggerDate, st as VIEW_CONFIG_ID, t as MAX_SCHEMA_ISSUES, tt as APP_ROLES, u as formatCivil, ut as normalizeViews, v as buildWorkspaceOntology, w as validateCollectionRecords, x as firstMutateParamProblem, y as schemaRelations, z as publishProblems } from "../../server-CQSF5fHe.js";
 import { i as isSafeTemplatePath, n as isSafeCustomViewI18nPath, r as isSafeCustomViewPath, t as isSafeActionTemplatePath } from "../../templatePath-k_WNbL_Q.js";
-export { APPS_COLLECTION, APP_MANIFEST_FILE, APP_ROLES, APP_SLUGS_COLLECTION, AuthoredAppZ, BackendUnavailableError, COLLECTION_ROOT_REQUIRED, COMPUTED_TYPES, CollectionQueryZ, CollectionSchemaZ, DEFAULT_QUERY_ROWS, MAX_CSV_ROWS, MAX_QUERY_ROWS, MAX_RECORD_ISSUES, MAX_SCHEMA_ISSUES, MAX_UNSELECTIVE_ITEMS, PUBLIC_CONFIG_DOC, SCHEMA_FILE, STORE_UNREADABLE, acceptParsedSchema, advanceTriggerDate, appConfigPath, appManifestReason, appSchemasPath, appSlugDoc, appStagingPath, applyMutateAction, bindsSubmitterIdentity, buildActionSeedPrompt, buildCollectionActionSeedPrompt, buildWorkspaceOntology, canonicalRoot, collectionChangeKey, collectionChangePayload, collectionWritable, compileCsvQuery, compileJsonlQuery, compileRecordZ, computeCollectionIcon, computeSuccessor, configureCollectionHost, csvRowToItem, daysInMonth, decodeCsvRecordId, dedupeByRecordId, deleteCollection, deleteCollectionRefusalMessage, deleteCustomView, deleteItem, discoverCollections, encodeCsvRecordId, enrichItems, firestoreHandle, firstMutateParamProblem, formatCivil, generateItemId, getWorkspaceRoot, hostSupportsSharedCollections, isBackendUnavailable, isContainedInRoot, isRegularFile, isSafeActionTemplatePath, isSafeCustomViewI18nPath, isSafeCustomViewPath, isSafeTemplatePath, isTriggerDue, itemFilePath, listItems, loadAppManifest, loadCollection, localCollectionKey, log, makeManageCollectionTool, maybeSpawnSuccessor, normalizeCsvValue, pageFromFullRead, parseAppManifest, parseAuthoredApp, parseCivil, peekWorkspaceRoot, projectApp, projectDeploy, projectItemFields, projectPublish, promoteSchema, promotedRoleProblems, promptPathsFor, publishCollectionChange, publishProblems, readCustomViewHtml, readCustomViewI18n, readItem, readOnlyRefusal, readSkillTemplate, recordFieldProblem, resolveCreateItemId, resolveDataDir, resolveEvery, resolvePrimaryField, resolveTemplatePath, runCollectionQuery, runQueryOverRows, safeRecordId, safeSlugName, schemaRelations, setCollectionChangePublisher, setFirestoreAccessor, setSharedCollectionsSupport, sharedCollectionChangePayload, sharedItemsPath, stagedRuleConfig, storeFor, successorId, toDetail, toSummary, validateCollectionRecords, validateRecordObject, writeItem };
+export { APPS_COLLECTION, APP_MANIFEST_FILE, APP_ROLES, APP_SLUGS_COLLECTION, AuthoredAppZ, BackendUnavailableError, COLLECTION_ROOT_REQUIRED, COMPUTED_TYPES, CollectionQueryZ, CollectionSchemaZ, DEFAULT_QUERY_ROWS, MAX_CSV_ROWS, MAX_QUERY_ROWS, MAX_RECORD_ISSUES, MAX_SCHEMA_ISSUES, MAX_UNSELECTIVE_ITEMS, PUBLIC_CONFIG_DOC, PUBLIC_VIEW_ID, RESERVED_VIEW_IDS, SCHEMA_FILE, STORE_UNREADABLE, VIEW_AUDIENCES, VIEW_CONFIG_ID, VIEW_ID_PATTERN, VIEW_TIER, acceptParsedSchema, advanceTriggerDate, appConfigPath, appManifestReason, appSchemasPath, appSlugDoc, appStagingPath, appViewTierPath, applyMutateAction, bindsSubmitterIdentity, buildActionSeedPrompt, buildCollectionActionSeedPrompt, buildWorkspaceOntology, canonicalRoot, collectionChangeKey, collectionChangePayload, collectionWritable, compileCsvQuery, compileJsonlQuery, compileRecordZ, computeCollectionIcon, computeSuccessor, configureCollectionHost, csvRowToItem, daysInMonth, decodeCsvRecordId, dedupeByRecordId, deleteCollection, deleteCollectionRefusalMessage, deleteCustomView, deleteItem, discoverCollections, encodeCsvRecordId, enrichItems, firestoreHandle, firstMutateParamProblem, formatCivil, generateItemId, getWorkspaceRoot, hostSupportsSharedCollections, isBackendUnavailable, isContainedInRoot, isRegularFile, isSafeActionTemplatePath, isSafeCustomViewI18nPath, isSafeCustomViewPath, isSafeTemplatePath, isTriggerDue, itemFilePath, listItems, loadAppManifest, loadCollection, localCollectionKey, log, makeManageCollectionTool, maybeSpawnSuccessor, normalizeCsvValue, normalizeViews, pageFromFullRead, parseAppManifest, parseAuthoredApp, parseCivil, participantScope, peekWorkspaceRoot, projectApp, projectAppViews, projectDeploy, projectItemFields, projectPublish, promoteSchema, promotedRoleProblems, promptPathsFor, publishCollectionChange, publishProblems, readCustomViewHtml, readCustomViewI18n, readItem, readOnlyRefusal, readSkillTemplate, recordFieldProblem, resolveCreateItemId, resolveDataDir, resolveEvery, resolvePrimaryField, resolveTemplatePath, runCollectionQuery, runQueryOverRows, safeRecordId, safeSlugName, schemaRelations, setCollectionChangePublisher, setFirestoreAccessor, setSharedCollectionsSupport, sharedCollectionChangePayload, sharedItemsPath, stagedRuleConfig, storeFor, successorId, toDetail, toSummary, validateCollectionRecords, validateRecordObject, viewConfigDocId, viewDocId, writeItem };

package/dist/collection/server/publishManifest.d.ts

@@ -36,6 +36,7 @@ declare const CollectionConfigZ: z.ZodObject<{
     immutable: z.ZodOptional<z.ZodBoolean>;
     submitOnly: z.ZodOptional<z.ZodBoolean>;
     assigneeField: z.ZodOptional<z.ZodString>;
+    mirrorOf: z.ZodOptional<z.ZodString>;
     peerVisibility: z.ZodOptional<z.ZodEnum<{
         public: "public";
         hidden: "hidden";
@@ -65,11 +66,20 @@ declare const SubmitZ: z.ZodObject<{
     createFields: z.ZodArray<z.ZodString>;
     initialStatus: z.ZodOptional<z.ZodString>;
     idFrom: z.ZodOptional<z.ZodEnum<{
+        field: "field";
         auto: "auto";
         "auth.uid": "auth.uid";
         "auth.uid+field": "auth.uid+field";
     }>>;
     idField: z.ZodOptional<z.ZodString>;
+    idIn: z.ZodOptional<z.ZodObject<{
+        collection: z.ZodString;
+        where: z.ZodOptional<z.ZodObject<{
+            field: z.ZodString;
+            equals: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+    mirror: z.ZodOptional<z.ZodString>;
     validate: z.ZodOptional<z.ZodObject<{
         required: z.ZodOptional<z.ZodArray<z.ZodString>>;
         keyFields: z.ZodOptional<z.ZodArray<z.ZodObject<{
@@ -85,6 +95,11 @@ declare const SubmitZ: z.ZodObject<{
             collection: z.ZodString;
             field: z.ZodString;
         }, z.core.$strict>>;
+        untilField: z.ZodOptional<z.ZodObject<{
+            ref: z.ZodString;
+            collection: z.ZodString;
+            field: z.ZodString;
+        }, z.core.$strict>>;
     }, z.core.$strict>>;
     stampField: z.ZodOptional<z.ZodString>;
     selfUpdate: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodString>>>;
@@ -111,10 +126,10 @@ export declare const AuthoredAppZ: z.ZodObject<{
     aidEnv: z.ZodOptional<z.ZodString>;
     owner: z.ZodOptional<z.ZodString>;
     members: z.ZodRecord<z.ZodString, z.ZodRecord<z.ZodUnion<readonly [z.ZodLiteral<"*">, z.ZodString]>, z.ZodEnum<{
+        participant: "participant";
         owner: "owner";
         editor: "editor";
         viewer: "viewer";
-        participant: "participant";
         assignee: "assignee";
     }>>>;
     collections: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
@@ -123,6 +138,7 @@ export declare const AuthoredAppZ: z.ZodObject<{
         immutable: z.ZodOptional<z.ZodBoolean>;
         submitOnly: z.ZodOptional<z.ZodBoolean>;
         assigneeField: z.ZodOptional<z.ZodString>;
+        mirrorOf: z.ZodOptional<z.ZodString>;
         peerVisibility: z.ZodOptional<z.ZodEnum<{
             public: "public";
             hidden: "hidden";
@@ -146,6 +162,10 @@ export declare const AuthoredAppZ: z.ZodObject<{
     public: z.ZodOptional<z.ZodObject<{
         enabled: z.ZodOptional<z.ZodBoolean>;
         read: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        view: z.ZodOptional<z.ZodObject<{
+            path: z.ZodString;
+            collections: z.ZodArray<z.ZodString>;
+        }, z.core.$strict>>;
         submit: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodObject<{
             auth: z.ZodEnum<{
                 none: "none";
@@ -156,11 +176,20 @@ export declare const AuthoredAppZ: z.ZodObject<{
             createFields: z.ZodArray<z.ZodString>;
             initialStatus: z.ZodOptional<z.ZodString>;
             idFrom: z.ZodOptional<z.ZodEnum<{
+                field: "field";
                 auto: "auto";
                 "auth.uid": "auth.uid";
                 "auth.uid+field": "auth.uid+field";
             }>>;
             idField: z.ZodOptional<z.ZodString>;
+            idIn: z.ZodOptional<z.ZodObject<{
+                collection: z.ZodString;
+                where: z.ZodOptional<z.ZodObject<{
+                    field: z.ZodString;
+                    equals: z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>;
+                }, z.core.$strict>>;
+            }, z.core.$strict>>;
+            mirror: z.ZodOptional<z.ZodString>;
             validate: z.ZodOptional<z.ZodObject<{
                 required: z.ZodOptional<z.ZodArray<z.ZodString>>;
                 keyFields: z.ZodOptional<z.ZodArray<z.ZodObject<{
@@ -176,6 +205,11 @@ export declare const AuthoredAppZ: z.ZodObject<{
                     collection: z.ZodString;
                     field: z.ZodString;
                 }, z.core.$strict>>;
+                untilField: z.ZodOptional<z.ZodObject<{
+                    ref: z.ZodString;
+                    collection: z.ZodString;
+                    field: z.ZodString;
+                }, z.core.$strict>>;
             }, z.core.$strict>>;
             stampField: z.ZodOptional<z.ZodString>;
             selfUpdate: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodArray<z.ZodString>>>;
@@ -188,6 +222,16 @@ export declare const AuthoredAppZ: z.ZodObject<{
             }, z.core.$strict>>;
         }, z.core.$strict>>>;
     }, z.core.$strict>>;
+    views: z.ZodOptional<z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        audience: z.ZodEnum<{
+            public: "public";
+            member: "member";
+            participant: "participant";
+        }>;
+        path: z.ZodString;
+        collections: z.ZodArray<z.ZodString>;
+    }, z.core.$strict>>>;
 }, z.core.$strict>;
 export type AuthoredApp = z.infer<typeof AuthoredAppZ>;
 export type AuthoredCollectionConfig = z.infer<typeof CollectionConfigZ>;

package/dist/collection/server/publishProject.d.ts

@@ -1,4 +1,5 @@
 import { CollectionSchema } from '../core/schema';
+import { AppViewConfigDoc, NormalizedView, ViewAudience } from './appViews';
 import { AuthoredApp, AuthoredCollectionConfig } from './publishManifest';
 /** Who and when. Threaded in rather than read from a clock inside the
  *  projection so the projection stays pure and the tests can assert on an
@@ -80,6 +81,22 @@ export interface PublishedConfigDoc extends Record<string, unknown> {
     enabled: boolean;
     read: string[];
     submit: Record<string, Record<string, unknown>>;
+    /** That the app HAS a published view, and which datasets it asked for.
+     *
+     *  This is the only place the public page can learn it: the rules' app
+     *  document is reader-only and deliberately carries no view, and the HTML
+     *  itself lands in a SEPARATE document (`config/view`) because a 1 MiB limit
+     *  applies per document. Omitted here, the page has the HTML and no idea
+     *  what to send it — the feature does not work at all.
+     *
+     *  The authored PATH is deliberately not published. It names a file in the
+     *  author's repository, which the browser cannot use and which nobody should
+     *  be handed on a world-readable document; what the page needs is the
+     *  dataset list, and `publishedAt` beside it is what pins this declaration
+     *  to the HTML published in the same run. */
+    view?: {
+        collections: string[];
+    };
     publishedAt: number;
 }
 /** Everything one publish writes. Separate documents because they live at
@@ -253,3 +270,35 @@ export declare const appSlugDoc: (aid: string, published: boolean) => AppSlugDoc
 export declare const appStagingPath: (aid: string) => string;
 /** The public-config documents' parent path. */
 export declare const appConfigPath: (aid: string) => string;
+/** Where one audience's pages live. `member` is read by anyone holding a role;
+ *  `roster` by anyone on the roster, participants included. */
+export declare const appViewTierPath: (aid: string, tier: "member" | "roster") => string;
+/** One audience's tier, as publish (or deploy) must write it.
+ *
+ *  Both tiers are returned even when empty, deliberately. An app that WITHDREW
+ *  its member pages produces an empty tier, and a host that only ever saw the
+ *  tiers with something in them would leave the previous pages live — the
+ *  failure `config/view` already had, where a declaration was withdrawn and
+ *  the world went on reading the page. */
+export interface AppViewTier {
+    tier: "member" | "roster";
+    audience: Exclude<ViewAudience, "public">;
+    /** The projection document, for `{tier}/live:config` or `{tier}/staged:config`.
+     *  Meaningless when `views` is empty — the host deletes the tier instead. */
+    config: AppViewConfigDoc;
+    /** The views to publish, in declaration order. The host reads each `path`
+     *  and writes it to `{tier}/live:{id}`. */
+    views: NormalizedView[];
+}
+/** Project the declaration into the per-audience documents.
+ *
+ *  Pure, like `projectApp`: the HTML is not here (the host reads the files),
+ *  and neither is the clock. What is here is the answer to "what may this
+ *  audience read, and how" — computed once, so the page never has to guess and
+ *  never has to discover it from a denial. */
+export declare function projectAppViews(authored: AuthoredApp, stamp: PublishStamp, promoted?: {
+    participantRead?: readonly string[];
+}): AppViewTier[];
+/** The document a tier's projection is published at. Beside the views
+ *  themselves, under one `match` — see `firestore.rules`. */
+export declare const viewConfigDocId: (stage: "live" | "staged") => string;

package/dist/collection-watchers/index.cjs

@@ -4,7 +4,7 @@ const require_itemId = require("../itemId-Dzrr3vs5.cjs");
 const require_promptSafety = require("../promptSafety-CWqYq-NS.cjs");
 require("../collection/index.cjs");
 const require_discovery = require("../discovery-BsXiDZBR.cjs");
-const require_server = require("../server-BIKy55wo.cjs");
+const require_server = require("../server-DknYbXBo.cjs");
 const require_notifier = require("../notifier-DZJj0sOh.cjs");
 let node_fs_promises = require("node:fs/promises");
 //#region src/collection-watchers/config.ts

package/dist/collection-watchers/index.js

@@ -3,7 +3,7 @@ import { B as fieldText, x as isValidCollectionName } from "../itemId-DfTm08jm.j
 import { E as whenMatches, f as itemIsDone } from "../promptSafety-CSdyp7RF.js";
 import "../collection/index.js";
 import { H as itemFilePath, Q as collectionChangePayload, d as storeFor, lt as publishCollectionChange, n as discoverCollections, pt as sharedCollectionChangePayload, r as loadCollection, st as peekWorkspaceRoot, tt as firestoreHandle } from "../discovery-B9zdNkgW.js";
-import { d as isTriggerDue, f as maybeSpawnSuccessor } from "../server-DkT40KgR.js";
+import { d as isTriggerDue, f as maybeSpawnSuccessor } from "../server-CQSF5fHe.js";
 import { d as publish, m as updateForPlugin, n as clear, s as listAll } from "../notifier-DhnwR82U.js";
 import { access } from "node:fs/promises";
 //#region src/collection-watchers/config.ts

package/dist/feeds/server/index.cjs

@@ -5,7 +5,7 @@ const require_root = require("../../root-rPH6FGDT.cjs");
 const require_itemId = require("../../itemId-Dzrr3vs5.cjs");
 const require_project = require("../../project-C1ep9pvo.cjs");
 const require_discovery = require("../../discovery-BsXiDZBR.cjs");
-const require_server = require("../../server-BIKy55wo.cjs");
+const require_server = require("../../server-DknYbXBo.cjs");
 const require_feeds_paths = require("../paths.cjs");
 const require_ingestTypes = require("../../ingestTypes-B4XfrUoq.cjs");
 const require_notifier = require("../../notifier-DZJj0sOh.cjs");

package/dist/feeds/server/index.js

@@ -3,7 +3,7 @@ import { t as canonicalRoot } from "../../root-BMroU_mB.js";
 import { F as INGEST_KINDS, P as FEED_SCHEDULES } from "../../itemId-DfTm08jm.js";
 import { t as mergeIntoExisting } from "../../project-B0j_Vf_Q.js";
 import { K as safeSlugName, U as resolveDataDir, _t as createHostSlot, d as storeFor, gt as createForwardingLogger, k as listItems, n as discoverCollections } from "../../discovery-B9zdNkgW.js";
-import { I as readSkillTemplate, M as buildCollectionActionSeedPrompt, N as promptPathsFor } from "../../server-DkT40KgR.js";
+import { I as readSkillTemplate, M as buildCollectionActionSeedPrompt, N as promptPathsFor } from "../../server-CQSF5fHe.js";
 import { FEEDS_DIR, feedDir, feedStatePath, feedsRoot, ingestStateDir, ingestStatePath } from "../paths.js";
 import { n as DEFAULT_FEED_MAX_ITEMS, r as isFeedSchedule, t as AGENT_INGEST_KIND } from "../../ingestTypes-B312BwXg.js";
 import { d as publish, n as clear } from "../../notifier-DhnwR82U.js";