@mulmoclaude/core 3.5.0 → 3.7.0

package/dist/collection/firestore.js

@@ -0,0 +1,50 @@
+import { collection, doc, getDoc, getDocs, orderBy, query, runTransaction, setDoc } from "firebase/firestore";
+//#region src/collection/server/firestoreDocs.ts
+/** The real implementation over the modular SDK.
+*
+*  THE RECORD IS THE DOCUMENT. Its fields are written at the top level, not
+*  nested under a `data` key. This is not a matter of taste: the deployed
+*  security rules read `request.resource.data.<field>` and
+*  `resource.data[submit.emailField]` — a wrapper would put every field one
+*  level down, so the required-field checks, the status state machine and the
+*  "your own row" predicate would all read absent values and fail closed. A
+*  shared record's shape is part of the authorization contract.
+*
+*  `orderBy("__name__")` orders by DOCUMENT ID. Ordering by a record field
+*  would silently EXCLUDE documents missing that field (the trap
+*  `remote-host/server/hostRunner.ts:158-169` documents), turning a read into a
+*  partial one; the document id is always present and gives the stable order
+*  the store contract requires. */
+function createFirestoreDocs(database) {
+	return {
+		list: async (collectionPath) => {
+			return (await getDocs(query(collection(database, collectionPath), orderBy("__name__")))).docs.map((entry) => ({
+				id: entry.id,
+				data: entry.data()
+			}));
+		},
+		get: async (collectionPath, docId) => {
+			const snapshot = await getDoc(doc(database, collectionPath, docId));
+			return snapshot.exists() ? snapshot.data() : null;
+		},
+		set: async (collectionPath, docId, data) => {
+			await setDoc(doc(database, collectionPath, docId), data);
+		},
+		create: (collectionPath, docId, data) => runTransaction(database, async (transaction) => {
+			const ref = doc(database, collectionPath, docId);
+			if ((await transaction.get(ref)).exists()) return false;
+			transaction.set(ref, data);
+			return true;
+		}),
+		delete: (collectionPath, docId) => runTransaction(database, async (transaction) => {
+			const ref = doc(database, collectionPath, docId);
+			if (!(await transaction.get(ref)).exists()) return false;
+			transaction.delete(ref);
+			return true;
+		})
+	};
+}
+//#endregion
+export { createFirestoreDocs };
+
+//# sourceMappingURL=firestore.js.map

package/dist/collection/firestore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"firestore.js","names":[],"sources":["../../src/collection/server/firestoreDocs.ts"],"sourcesContent":["// The seam between the firestore store and the Firestore SDK.\n//\n// The modular SDK is function-based (`getDocs(query(collection(db, …)))`), so a\n// store that imported those functions directly could not be tested without a\n// real backend — a fake `db` would still be handed to the real functions.\n// Narrowing to this interface makes the backend swappable: core ships\n// `createFirestoreDocs` over the real SDK, and the tests inject an in-memory\n// fake that satisfies the same shape. That is what lets this repository's tests\n// run with no API key and no network.\n//\n// Deliberately minimal and id-keyed: no query builder, no field ordering, no\n// cursors. Everything the store needs is \"the documents of one collection path,\n// ordered by document id\" — see the store header for why field ordering is\n// avoided entirely.\n//\n// The collection path is an ARGUMENT, not something this module composes. It\n// owns the SDK calls; `firestoreStore` owns where the documents live.\n\nimport {\n  collection as firestoreCollection,\n  doc,\n  getDoc,\n  getDocs,\n  orderBy,\n  query as firestoreQuery,\n  runTransaction,\n  setDoc,\n  type Firestore,\n} from \"firebase/firestore\";\n\n/** One stored record document. `data` is the document's own fields — the\n *  record itself, not a wrapper around it; see `set` below. The store\n *  validates its shape, because a document written by hand could be\n *  anything. */\nexport interface FirestoreDoc {\n  id: string;\n  data: unknown;\n}\n\nexport interface FirestoreDocs {\n  /** Every document under `collectionPath`, ordered by document id. */\n  list: (collectionPath: string) => Promise<FirestoreDoc[]>;\n  /** One document's fields, or null when it doesn't exist. */\n  get: (collectionPath: string, docId: string) => Promise<unknown | null>;\n  /** Create or replace. */\n  set: (collectionPath: string, docId: string, data: Record<string, unknown>) => Promise<void>;\n  /** Create only. Returns false when the id already exists — atomic, so two\n   *  concurrent creates can't both observe \"missing\". */\n  create: (collectionPath: string, docId: string, data: Record<string, unknown>) => Promise<boolean>;\n  /** Delete. Returns false when the id didn't exist, so a caller can tell a\n   *  real delete from a typo'd id. */\n  delete: (collectionPath: string, docId: string) => Promise<boolean>;\n}\n\n/** The real implementation over the modular SDK.\n *\n *  THE RECORD IS THE DOCUMENT. Its fields are written at the top level, not\n *  nested under a `data` key. This is not a matter of taste: the deployed\n *  security rules read `request.resource.data.<field>` and\n *  `resource.data[submit.emailField]` — a wrapper would put every field one\n *  level down, so the required-field checks, the status state machine and the\n *  \"your own row\" predicate would all read absent values and fail closed. A\n *  shared record's shape is part of the authorization contract.\n *\n *  `orderBy(\"__name__\")` orders by DOCUMENT ID. Ordering by a record field\n *  would silently EXCLUDE documents missing that field (the trap\n *  `remote-host/server/hostRunner.ts:158-169` documents), turning a read into a\n *  partial one; the document id is always present and gives the stable order\n *  the store contract requires. */\nexport function createFirestoreDocs(database: Firestore): FirestoreDocs {\n  return {\n    list: async (collectionPath) => {\n      const snapshot = await getDocs(firestoreQuery(firestoreCollection(database, collectionPath), orderBy(\"__name__\")));\n      return snapshot.docs.map((entry) => ({ id: entry.id, data: entry.data() }));\n    },\n    get: async (collectionPath, docId) => {\n      const snapshot = await getDoc(doc(database, collectionPath, docId));\n      return snapshot.exists() ? snapshot.data() : null;\n    },\n    set: async (collectionPath, docId, data) => {\n      await setDoc(doc(database, collectionPath, docId), data);\n    },\n    create: (collectionPath, docId, data) =>\n      runTransaction(database, async (transaction) => {\n        const ref = doc(database, collectionPath, docId);\n        const existing = await transaction.get(ref);\n        if (existing.exists()) return false;\n        transaction.set(ref, data);\n        return true;\n      }),\n    // Firestore's deleteDoc succeeds on a missing document, so an existence\n    // check is what makes \"deleted\" distinguishable from \"there was nothing\".\n    // It runs INSIDE the transaction (like `create`): a plain get-then-delete\n    // would report `true` for a document a concurrent client had already\n    // removed, i.e. claim a delete this call never performed.\n    delete: (collectionPath, docId) =>\n      runTransaction(database, async (transaction) => {\n        const ref = doc(database, collectionPath, docId);\n        const existing = await transaction.get(ref);\n        if (!existing.exists()) return false;\n        transaction.delete(ref);\n        return true;\n      }),\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAqEA,SAAgB,oBAAoB,UAAoC;CACtE,OAAO;EACL,MAAM,OAAO,mBAAmB;GAE9B,QAAO,MADgB,QAAQ,MAAe,WAAoB,UAAU,cAAc,GAAG,QAAQ,UAAU,CAAC,CAAC,EAAA,CACjG,KAAK,KAAK,WAAW;IAAE,IAAI,MAAM;IAAI,MAAM,MAAM,KAAK;GAAE,EAAE;EAC5E;EACA,KAAK,OAAO,gBAAgB,UAAU;GACpC,MAAM,WAAW,MAAM,OAAO,IAAI,UAAU,gBAAgB,KAAK,CAAC;GAClE,OAAO,SAAS,OAAO,IAAI,SAAS,KAAK,IAAI;EAC/C;EACA,KAAK,OAAO,gBAAgB,OAAO,SAAS;GAC1C,MAAM,OAAO,IAAI,UAAU,gBAAgB,KAAK,GAAG,IAAI;EACzD;EACA,SAAS,gBAAgB,OAAO,SAC9B,eAAe,UAAU,OAAO,gBAAgB;GAC9C,MAAM,MAAM,IAAI,UAAU,gBAAgB,KAAK;GAE/C,KAAI,MADmB,YAAY,IAAI,GAAG,EAAA,CAC7B,OAAO,GAAG,OAAO;GAC9B,YAAY,IAAI,KAAK,IAAI;GACzB,OAAO;EACT,CAAC;EAMH,SAAS,gBAAgB,UACvB,eAAe,UAAU,OAAO,gBAAgB;GAC9C,MAAM,MAAM,IAAI,UAAU,gBAAgB,KAAK;GAE/C,IAAI,EAAC,MADkB,YAAY,IAAI,GAAG,EAAA,CAC5B,OAAO,GAAG,OAAO;GAC/B,YAAY,OAAO,GAAG;GACtB,OAAO;EACT,CAAC;CACL;AACF"}

package/dist/collection/registry/server/index.cjs

@@ -4,9 +4,9 @@ const require_dist = require("../../../dist-CsgSfWwR.cjs");
 const require_root = require("../../../root-rPH6FGDT.cjs");
 const require_relPath = require("../../../relPath-CTAjGdCL.cjs");
 const require_utils_fetch = require("../../../utils/fetch.cjs");
-const require_discovery = require("../../../discovery-Ck4AqikY.cjs");
+const require_store = require("../../../store-5_P_NsGa.cjs");
+const require_server = require("../../../server-CWZyg8fn.cjs");
 const require_templatePath = require("../../../templatePath-27vUZowm.cjs");
-const require_server = require("../../../server-5EMj3naj.cjs");
 const require_skill_bridge_index = require("../../../skill-bridge/index.cjs");
 const require_types = require("../../../types-CNqkLT4M.cjs");
 let node_fs = require("node:fs");
@@ -49,7 +49,7 @@ function parseEntry(value, index) {
 *  workspace file and delegates here. */
 function parseRegistriesConfig(raw) {
 	if (!Array.isArray(raw)) {
-		require_discovery.log.warn("collections-registry", "registries config is not an array — ignoring");
+		require_store.log.warn("collections-registry", "registries config is not an array — ignoring");
 		return [];
 	}
 	const seen = /* @__PURE__ */ new Set();
@@ -57,11 +57,11 @@ function parseRegistriesConfig(raw) {
 	for (let i = 0; i < raw.length; i++) {
 		const parsed = parseEntry(raw[i], i);
 		if (typeof parsed === "string") {
-			require_discovery.log.warn("collections-registry", "registry config entry rejected", { reason: parsed });
+			require_store.log.warn("collections-registry", "registry config entry rejected", { reason: parsed });
 			continue;
 		}
 		if (seen.has(parsed.name)) {
-			require_discovery.log.warn("collections-registry", "registry config duplicate name dropped", { name: parsed.name });
+			require_store.log.warn("collections-registry", "registry config duplicate name dropped", { name: parsed.name });
 			continue;
 		}
 		seen.add(parsed.name);
@@ -82,13 +82,13 @@ function readConfigTextOrNull(filePath) {
 *  it is serving. Missing file ⇒ empty list. Malformed JSON or rejected entries
 *  log but never throw. */
 function loadRegistriesConfig(opts = {}) {
-	const text = readConfigTextOrNull(require_discovery.collectionsRegistriesConfigPath(opts.workspaceRoot ?? require_discovery.getWorkspaceRoot()));
+	const text = readConfigTextOrNull(require_store.collectionsRegistriesConfigPath(opts.workspaceRoot ?? require_store.getWorkspaceRoot()));
 	if (text === null) return [];
 	let parsed;
 	try {
 		parsed = JSON.parse(text);
 	} catch (err) {
-		require_discovery.log.warn("collections-registry", "registries config is not valid JSON — ignoring", { error: err instanceof Error ? err.message : String(err) });
+		require_store.log.warn("collections-registry", "registries config is not valid JSON — ignoring", { error: err instanceof Error ? err.message : String(err) });
 		return [];
 	}
 	return parseRegistriesConfig(parsed);
@@ -130,7 +130,7 @@ async function loadFromNetwork(descriptor) {
 			headers: { accept: "application/json" }
 		});
 	} catch (err) {
-		require_discovery.log.warn("collections-registry", "index fetch failed", {
+		require_store.log.warn("collections-registry", "index fetch failed", {
 			registry: descriptor.name,
 			url: descriptor.indexUrl,
 			error: require_dist.errorMessage(err)
@@ -149,7 +149,7 @@ async function loadFromNetwork(descriptor) {
 	const json = await res.json().catch(() => null);
 	const parsed = require_types.parseRegistryIndex(json, descriptor.name);
 	if (!parsed.ok) {
-		require_discovery.log.warn("collections-registry", "index invalid", {
+		require_store.log.warn("collections-registry", "index invalid", {
 			registry: descriptor.name,
 			url: descriptor.indexUrl,
 			error: parsed.error
@@ -541,9 +541,9 @@ async function findMatchingInstall(skillsDir, registry, entry) {
 *  tree that reads and deletes now deliberately ignore. Update would not find
 *  the provenance, and delete would leave the install behind. */
 function importInstall(workspaceRoot) {
-	const staging = require_discovery.skillsStagingDir(workspaceRoot);
+	const staging = require_store.skillsStagingDir(workspaceRoot);
 	return staging === null ? {
-		skillsDir: require_discovery.projectSkillsDir(workspaceRoot),
+		skillsDir: require_store.projectSkillsDir(workspaceRoot),
 		mirrors: false
 	} : {
 		skillsDir: staging,
@@ -580,14 +580,14 @@ function validateAndNormalize(bundle, localSlug, workspaceRoot) {
 	} catch {
 		return { error: "schema.json is not valid JSON" };
 	}
-	const parsed = require_discovery.CollectionSchemaZ.safeParse(parsedJson);
+	const parsed = require_store.CollectionSchemaZ.safeParse(parsedJson);
 	if (!parsed.success) return { error: `schema.json failed validation: ${parsed.error.issues[0]?.message ?? "invalid"}` };
 	if (parsed.data.dataSource !== void 0) return { error: "schema.json declares `dataSource` — external-data collections are machine-local and cannot be imported from a registry" };
 	const schema = {
 		...parsed.data,
 		dataPath: normalizedDataPath(localSlug)
 	};
-	const acceptance = require_discovery.acceptParsedSchema(schema, {
+	const acceptance = require_store.acceptParsedSchema(schema, {
 		source: "project",
 		workspaceRoot,
 		slug: localSlug
@@ -618,8 +618,8 @@ async function materializeSeed(dataDir, bundle) {
 	let written = 0;
 	for (const [rel, content] of seedEntries) {
 		const fileName = rel.slice(11);
-		if (fileName.includes("/") || require_discovery.safeRecordId(fileName.replace(/\.json$/, "")) === null) {
-			require_discovery.log.warn("collections-registry", "skipped unsafe seed record", { rel });
+		if (fileName.includes("/") || require_store.safeRecordId(fileName.replace(/\.json$/, "")) === null) {
+			require_store.log.warn("collections-registry", "skipped unsafe seed record", { rel });
 			continue;
 		}
 		await (0, node_fs_promises.writeFile)(node_path.default.join(dataDir, fileName), content, "utf-8");
@@ -730,7 +730,7 @@ async function writeImportedCollection(params) {
 	try {
 		if (importInstall(workspaceRoot).mirrors) await mirrorToClaudeSkills(workspaceRoot, localSlug, bundle);
 	} catch (err) {
-		require_discovery.log.warn("collections-registry", "mirror to .claude/skills/ failed (data/skills write succeeded; prior mirror left intact)", {
+		require_store.log.warn("collections-registry", "mirror to .claude/skills/ failed (data/skills write succeeded; prior mirror left intact)", {
 			localSlug,
 			error: require_dist.errorMessage(err)
 		});
@@ -778,7 +778,7 @@ async function performImport(author, slug, workspaceRoot, registry = null) {
 			nowIso: (/* @__PURE__ */ new Date()).toISOString()
 		});
 	} catch (err) {
-		require_discovery.log.warn("collections-registry", "import write failed", {
+		require_store.log.warn("collections-registry", "import write failed", {
 			author,
 			slug,
 			registry: entry.registryName,
@@ -923,7 +923,7 @@ async function writeCollectionExport(params) {
 		...seed.count > 0 ? { dataConsent: true } : {}
 	};
 	await (0, node_fs_promises.writeFile)(node_path.default.join(outDir, "meta.json"), `${JSON.stringify(metaOut, null, 2)}\n`, "utf-8");
-	require_discovery.log.info("collections-registry", "exported collection", {
+	require_store.log.info("collections-registry", "exported collection", {
 		slug: meta.slug,
 		author: meta.author,
 		seedCount: seed.count
@@ -1019,7 +1019,7 @@ async function readJsonObject(file) {
 	}
 }
 async function performExport(slug, opts, workspaceRoot) {
-	const collection = await require_discovery.loadCollection(slug);
+	const collection = await require_store.loadCollection(slug);
 	if (!collection) return {
 		ok: false,
 		status: STATUS_NOT_FOUND,