@mulmoclaude/core 3.7.0 → 3.10.0

package/dist/collection/server/index.cjs

@@ -1,115 +1,123 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_root = require("../../root-rPH6FGDT.cjs");
-const require_calendarGrid = require("../../calendarGrid-DGILaVxI.cjs");
-const require_store = require("../../store-5_P_NsGa.cjs");
-const require_server = require("../../server-CWZyg8fn.cjs");
+const require_itemId = require("../../itemId-Dzrr3vs5.cjs");
+const require_discovery = require("../../discovery-BsXiDZBR.cjs");
+const require_server = require("../../server-CgkkWWBd.cjs");
 const require_templatePath = require("../../templatePath-27vUZowm.cjs");
 exports.APPS_COLLECTION = require_server.APPS_COLLECTION;
-exports.APP_MANIFEST_FILE = require_store.APP_MANIFEST_FILE;
+exports.APP_MANIFEST_FILE = require_discovery.APP_MANIFEST_FILE;
 exports.APP_ROLES = require_server.APP_ROLES;
+exports.APP_SLUGS_COLLECTION = require_server.APP_SLUGS_COLLECTION;
 exports.AuthoredAppZ = require_server.AuthoredAppZ;
-exports.BackendUnavailableError = require_store.BackendUnavailableError;
-exports.COLLECTION_ROOT_REQUIRED = require_store.COLLECTION_ROOT_REQUIRED;
-exports.COMPUTED_TYPES = require_calendarGrid.COMPUTED_TYPES;
-exports.CollectionQueryZ = require_store.CollectionQueryZ;
-exports.CollectionSchemaZ = require_store.CollectionSchemaZ;
-exports.DEFAULT_QUERY_ROWS = require_store.DEFAULT_QUERY_ROWS;
-exports.MAX_CSV_ROWS = require_store.MAX_CSV_ROWS;
-exports.MAX_QUERY_ROWS = require_store.MAX_QUERY_ROWS;
+exports.BackendUnavailableError = require_discovery.BackendUnavailableError;
+exports.COLLECTION_ROOT_REQUIRED = require_discovery.COLLECTION_ROOT_REQUIRED;
+exports.COMPUTED_TYPES = require_itemId.COMPUTED_TYPES;
+exports.CollectionQueryZ = require_discovery.CollectionQueryZ;
+exports.CollectionSchemaZ = require_discovery.CollectionSchemaZ;
+exports.DEFAULT_QUERY_ROWS = require_discovery.DEFAULT_QUERY_ROWS;
+exports.MAX_CSV_ROWS = require_discovery.MAX_CSV_ROWS;
+exports.MAX_QUERY_ROWS = require_discovery.MAX_QUERY_ROWS;
 exports.MAX_RECORD_ISSUES = require_server.MAX_RECORD_ISSUES;
 exports.MAX_SCHEMA_ISSUES = require_server.MAX_SCHEMA_ISSUES;
 exports.MAX_UNSELECTIVE_ITEMS = require_server.MAX_UNSELECTIVE_ITEMS;
 exports.PUBLIC_CONFIG_DOC = require_server.PUBLIC_CONFIG_DOC;
-exports.SCHEMA_FILE = require_store.SCHEMA_FILE;
+exports.SCHEMA_FILE = require_discovery.SCHEMA_FILE;
 exports.STORE_UNREADABLE = require_server.STORE_UNREADABLE;
-exports.acceptParsedSchema = require_store.acceptParsedSchema;
+exports.acceptParsedSchema = require_discovery.acceptParsedSchema;
 exports.advanceTriggerDate = require_server.advanceTriggerDate;
 exports.appConfigPath = require_server.appConfigPath;
-exports.appManifestReason = require_store.appManifestReason;
+exports.appManifestReason = require_discovery.appManifestReason;
 exports.appSchemasPath = require_server.appSchemasPath;
+exports.appSlugDoc = require_server.appSlugDoc;
+exports.appStagingPath = require_server.appStagingPath;
 exports.applyMutateAction = require_server.applyMutateAction;
 exports.bindsSubmitterIdentity = require_server.bindsSubmitterIdentity;
 exports.buildActionSeedPrompt = require_server.buildActionSeedPrompt;
 exports.buildCollectionActionSeedPrompt = require_server.buildCollectionActionSeedPrompt;
 exports.buildWorkspaceOntology = require_server.buildWorkspaceOntology;
 exports.canonicalRoot = require_root.canonicalRoot;
-exports.collectionChangeKey = require_store.collectionChangeKey;
-exports.collectionChangePayload = require_store.collectionChangePayload;
-exports.collectionWritable = require_store.collectionWritable;
-exports.compileCsvQuery = require_store.compileCsvQuery;
-exports.compileJsonlQuery = require_store.compileJsonlQuery;
+exports.collectionChangeKey = require_discovery.collectionChangeKey;
+exports.collectionChangePayload = require_discovery.collectionChangePayload;
+exports.collectionWritable = require_discovery.collectionWritable;
+exports.compileCsvQuery = require_discovery.compileCsvQuery;
+exports.compileJsonlQuery = require_discovery.compileJsonlQuery;
 exports.compileRecordZ = require_server.compileRecordZ;
 exports.computeCollectionIcon = require_server.computeCollectionIcon;
 exports.computeSuccessor = require_server.computeSuccessor;
-exports.configureCollectionHost = require_store.configureCollectionHost;
-exports.csvRowToItem = require_store.csvRowToItem;
+exports.configureCollectionHost = require_discovery.configureCollectionHost;
+exports.csvRowToItem = require_discovery.csvRowToItem;
 exports.daysInMonth = require_server.daysInMonth;
-exports.decodeCsvRecordId = require_store.decodeCsvRecordId;
-exports.dedupeByRecordId = require_store.dedupeByRecordId;
+exports.decodeCsvRecordId = require_discovery.decodeCsvRecordId;
+exports.dedupeByRecordId = require_discovery.dedupeByRecordId;
 exports.deleteCollection = require_server.deleteCollection;
 exports.deleteCollectionRefusalMessage = require_server.deleteCollectionRefusalMessage;
 exports.deleteCustomView = require_server.deleteCustomView;
-exports.deleteItem = require_store.deleteItem;
-exports.discoverCollections = require_store.discoverCollections;
-exports.encodeCsvRecordId = require_store.encodeCsvRecordId;
+exports.deleteItem = require_discovery.deleteItem;
+exports.discoverCollections = require_discovery.discoverCollections;
+exports.encodeCsvRecordId = require_discovery.encodeCsvRecordId;
 exports.enrichItems = require_server.enrichItems;
-exports.firestoreHandle = require_store.firestoreHandle;
+exports.firestoreHandle = require_discovery.firestoreHandle;
 exports.firstMutateParamProblem = require_server.firstMutateParamProblem;
 exports.formatCivil = require_server.formatCivil;
-exports.generateItemId = require_store.generateItemId;
-exports.getWorkspaceRoot = require_store.getWorkspaceRoot;
-exports.isBackendUnavailable = require_store.isBackendUnavailable;
-exports.isContainedInRoot = require_store.isContainedInRoot;
-exports.isRegularFile = require_store.isRegularFile;
+exports.generateItemId = require_discovery.generateItemId;
+exports.getWorkspaceRoot = require_discovery.getWorkspaceRoot;
+exports.hostSupportsSharedCollections = require_discovery.hostSupportsSharedCollections;
+exports.isBackendUnavailable = require_discovery.isBackendUnavailable;
+exports.isContainedInRoot = require_discovery.isContainedInRoot;
+exports.isRegularFile = require_discovery.isRegularFile;
 exports.isSafeActionTemplatePath = require_templatePath.isSafeActionTemplatePath;
 exports.isSafeCustomViewI18nPath = require_templatePath.isSafeCustomViewI18nPath;
 exports.isSafeCustomViewPath = require_templatePath.isSafeCustomViewPath;
 exports.isSafeTemplatePath = require_templatePath.isSafeTemplatePath;
 exports.isTriggerDue = require_server.isTriggerDue;
-exports.itemFilePath = require_store.itemFilePath;
-exports.listItems = require_store.listItems;
-exports.loadAppManifest = require_store.loadAppManifest;
-exports.loadCollection = require_store.loadCollection;
-exports.localCollectionKey = require_store.localCollectionKey;
-exports.log = require_store.log;
+exports.itemFilePath = require_discovery.itemFilePath;
+exports.listItems = require_discovery.listItems;
+exports.loadAppManifest = require_discovery.loadAppManifest;
+exports.loadCollection = require_discovery.loadCollection;
+exports.localCollectionKey = require_discovery.localCollectionKey;
+exports.log = require_discovery.log;
 exports.makeManageCollectionTool = require_server.makeManageCollectionTool;
 exports.maybeSpawnSuccessor = require_server.maybeSpawnSuccessor;
-exports.normalizeCsvValue = require_store.normalizeCsvValue;
-exports.pageFromFullRead = require_store.pageFromFullRead;
-exports.parseAppManifest = require_store.parseAppManifest;
+exports.normalizeCsvValue = require_discovery.normalizeCsvValue;
+exports.pageFromFullRead = require_discovery.pageFromFullRead;
+exports.parseAppManifest = require_discovery.parseAppManifest;
 exports.parseAuthoredApp = require_server.parseAuthoredApp;
 exports.parseCivil = require_server.parseCivil;
-exports.peekWorkspaceRoot = require_store.peekWorkspaceRoot;
+exports.peekWorkspaceRoot = require_discovery.peekWorkspaceRoot;
 exports.projectApp = require_server.projectApp;
-exports.projectItemFields = require_store.projectItemFields;
+exports.projectDeploy = require_server.projectDeploy;
+exports.projectItemFields = require_discovery.projectItemFields;
+exports.projectPublish = require_server.projectPublish;
+exports.promoteSchema = require_server.promoteSchema;
 exports.promptPathsFor = require_server.promptPathsFor;
-exports.publishApp = require_server.publishApp;
-exports.publishCollectionChange = require_store.publishCollectionChange;
+exports.publishCollectionChange = require_discovery.publishCollectionChange;
 exports.publishProblems = require_server.publishProblems;
 exports.readCustomViewHtml = require_server.readCustomViewHtml;
 exports.readCustomViewI18n = require_server.readCustomViewI18n;
-exports.readItem = require_store.readItem;
-exports.readOnlyRefusal = require_store.readOnlyRefusal;
+exports.readItem = require_discovery.readItem;
+exports.readOnlyRefusal = require_discovery.readOnlyRefusal;
 exports.readSkillTemplate = require_server.readSkillTemplate;
 exports.recordFieldProblem = require_server.recordFieldProblem;
-exports.resolveCreateItemId = require_store.resolveCreateItemId;
-exports.resolveDataDir = require_store.resolveDataDir;
+exports.resolveCreateItemId = require_discovery.resolveCreateItemId;
+exports.resolveDataDir = require_discovery.resolveDataDir;
 exports.resolveEvery = require_server.resolveEvery;
-exports.resolvePrimaryField = require_store.resolvePrimaryField;
-exports.resolveTemplatePath = require_store.resolveTemplatePath;
+exports.resolvePrimaryField = require_discovery.resolvePrimaryField;
+exports.resolveTemplatePath = require_discovery.resolveTemplatePath;
 exports.runCollectionQuery = require_server.runCollectionQuery;
 exports.runQueryOverRows = require_server.runQueryOverRows;
-exports.safeRecordId = require_store.safeRecordId;
-exports.safeSlugName = require_store.safeSlugName;
+exports.safeRecordId = require_discovery.safeRecordId;
+exports.safeSlugName = require_discovery.safeSlugName;
 exports.schemaRelations = require_server.schemaRelations;
-exports.setCollectionChangePublisher = require_store.setCollectionChangePublisher;
-exports.setFirestoreAccessor = require_store.setFirestoreAccessor;
-exports.sharedCollectionChangePayload = require_store.sharedCollectionChangePayload;
-exports.sharedItemsPath = require_store.sharedItemsPath;
-exports.storeFor = require_store.storeFor;
+exports.setCollectionChangePublisher = require_discovery.setCollectionChangePublisher;
+exports.setFirestoreAccessor = require_discovery.setFirestoreAccessor;
+exports.setSharedCollectionsSupport = require_discovery.setSharedCollectionsSupport;
+exports.sharedCollectionChangePayload = require_discovery.sharedCollectionChangePayload;
+exports.sharedItemsPath = require_discovery.sharedItemsPath;
+exports.stagedRuleConfig = require_server.stagedRuleConfig;
+exports.storeFor = require_discovery.storeFor;
 exports.successorId = require_server.successorId;
-exports.toDetail = require_store.toDetail;
-exports.toSummary = require_store.toSummary;
+exports.toDetail = require_discovery.toDetail;
+exports.toSummary = require_discovery.toSummary;
 exports.validateCollectionRecords = require_server.validateCollectionRecords;
 exports.validateRecordObject = require_server.validateRecordObject;
-exports.writeItem = require_store.writeItem;
+exports.writeItem = require_discovery.writeItem;

package/dist/collection/server/index.d.ts

@@ -1,11 +1,10 @@
-export { configureCollectionHost, canonicalRoot, getWorkspaceRoot, peekWorkspaceRoot, COLLECTION_ROOT_REQUIRED, log, setCollectionChangePublisher, publishCollectionChange, collectionChangePayload, sharedCollectionChangePayload, collectionChangeKey, localCollectionKey, type CollectionHost, type CollectionLogger, type CollectionChangePayload, firestoreHandle, setFirestoreAccessor, type FirestoreHandle, type LocalCollectionChange, type SharedCollectionChange, } from './host';
+export { configureCollectionHost, canonicalRoot, getWorkspaceRoot, peekWorkspaceRoot, COLLECTION_ROOT_REQUIRED, log, setCollectionChangePublisher, publishCollectionChange, collectionChangePayload, sharedCollectionChangePayload, collectionChangeKey, localCollectionKey, type CollectionHost, type CollectionLogger, type CollectionChangePayload, firestoreHandle, setFirestoreAccessor, hostSupportsSharedCollections, setSharedCollectionsSupport, type FirestoreHandle, type LocalCollectionChange, type SharedCollectionChange, } from './host';
 export type { FirestoreDoc, FirestoreDocs } from './firestoreDocs';
 export { sharedItemsPath } from './firestoreStore';
 export { loadAppManifest, parseAppManifest, appManifestReason, APP_MANIFEST_FILE, type AppManifest, type AppManifestResult } from './appManifest';
 export { AuthoredAppZ, parseAuthoredApp, APP_ROLES, type AuthoredApp, type AuthoredCollectionConfig, type AuthoredMail, type AuthoredSubmit, } from './publishManifest';
-export { projectApp, APPS_COLLECTION, PUBLIC_CONFIG_DOC, appConfigPath, appSchemasPath, type PublishStamp, type PublishedApp, type PublishedConfigDoc, type PublishedSchemaDoc, } from './publishProject';
+export { projectApp, projectDeploy, projectPublish, stagedRuleConfig, promoteSchema, appStagingPath, APP_SLUGS_COLLECTION, appSlugDoc, type AppSlugDoc, type DeployedApp, type PublishedFace, APPS_COLLECTION, PUBLIC_CONFIG_DOC, appConfigPath, appSchemasPath, type PublishStamp, type PublishedApp, type PublishedConfigDoc, type PublishedSchemaDoc, type StagedSchemaDoc, } from './publishProject';
 export { publishProblems, bindsSubmitterIdentity, type PublishableCollection } from './publishChecks';
-export { publishApp, type PublishOptions, type PublishResult } from './publish';
 export type { LoadedCollection } from './discoveredCollection';
 export * from './paths';
 export * from './templatePath';

package/dist/collection/server/index.js

@@ -1,6 +1,6 @@
 import { t as canonicalRoot } from "../../root-BMroU_mB.js";
-import { j as COMPUTED_TYPES } from "../../calendarGrid-CQ8MVSRb.js";
-import { A as toSummary, B as SCHEMA_FILE, C as resolveCreateItemId, D as loadCollection, E as discoverCollections, F as loadAppManifest, G as safeRecordId, H as itemFilePath, I as parseAppManifest, J as isBackendUnavailable, K as safeSlugName, L as sharedItemsPath, N as APP_MANIFEST_FILE, O as resolvePrimaryField, P as appManifestReason, Q as collectionChangePayload, R as pageFromFullRead, S as readItem, T as acceptParsedSchema, U as resolveDataDir, V as isContainedInRoot, W as resolveTemplatePath, Y as COLLECTION_ROOT_REQUIRED, Z as collectionChangeKey, _ as MAX_QUERY_ROWS, a as MAX_CSV_ROWS, at as log, b as isRegularFile, c as decodeCsvRecordId, ct as publishCollectionChange, d as normalizeCsvValue, dt as sharedCollectionChangePayload, et as configureCollectionHost, g as DEFAULT_QUERY_ROWS, h as CollectionQueryZ, it as localCollectionKey, j as CollectionSchemaZ, k as toDetail, l as dedupeByRecordId, lt as setCollectionChangePublisher, m as compileJsonlQuery, n as readOnlyRefusal, nt as getWorkspaceRoot, ot as peekWorkspaceRoot, p as compileCsvQuery, q as BackendUnavailableError, r as storeFor, s as csvRowToItem, t as collectionWritable, tt as firestoreHandle, u as encodeCsvRecordId, ut as setFirestoreAccessor, v as deleteItem, w as writeItem, x as listItems, y as generateItemId, z as projectItemFields } from "../../store-_61sO8K8.js";
-import { A as readSkillTemplate, B as APPS_COLLECTION, C as enrichItems, D as promptPathsFor, E as buildCollectionActionSeedPrompt, F as validateRecordObject, G as APP_ROLES, H as appConfigPath, I as compileRecordZ, K as AuthoredAppZ, L as recordFieldProblem, M as MAX_RECORD_ISSUES, N as STORE_UNREADABLE, O as readCustomViewHtml, P as validateCollectionRecords, R as bindsSubmitterIdentity, S as runCollectionQuery, T as buildActionSeedPrompt, U as appSchemasPath, V as PUBLIC_CONFIG_DOC, W as projectApp, _ as computeCollectionIcon, a as deleteCollection, b as applyMutateAction, c as computeSuccessor, d as isTriggerDue, f as maybeSpawnSuccessor, h as successorId, i as deleteCustomView, j as publishApp, k as readCustomViewI18n, l as daysInMonth, m as resolveEvery, n as MAX_UNSELECTIVE_ITEMS, o as deleteCollectionRefusalMessage, p as parseCivil, q as parseAuthoredApp, r as makeManageCollectionTool, s as advanceTriggerDate, t as MAX_SCHEMA_ISSUES, u as formatCivil, v as buildWorkspaceOntology, w as runQueryOverRows, x as firstMutateParamProblem, y as schemaRelations, z as publishProblems } from "../../server-B48Jyxcj.js";
+import { N as COMPUTED_TYPES } from "../../itemId-DfTm08jm.js";
+import { A as readItem, B as SCHEMA_FILE, C as CollectionQueryZ, D as generateItemId, E as deleteItem, F as loadAppManifest, G as safeRecordId, H as itemFilePath, I as parseAppManifest, J as isBackendUnavailable, K as safeSlugName, L as sharedItemsPath, M as writeItem, N as APP_MANIFEST_FILE, O as isRegularFile, P as appManifestReason, Q as collectionChangePayload, R as pageFromFullRead, S as compileJsonlQuery, T as MAX_QUERY_ROWS, U as resolveDataDir, V as isContainedInRoot, W as resolveTemplatePath, Y as COLLECTION_ROOT_REQUIRED, Z as collectionChangeKey, _ as dedupeByRecordId, a as toDetail, at as localCollectionKey, d as storeFor, dt as setFirestoreAccessor, et as configureCollectionHost, ft as setSharedCollectionsSupport, g as decodeCsvRecordId, h as csvRowToItem, i as resolvePrimaryField, j as resolveCreateItemId, k as listItems, l as collectionWritable, lt as publishCollectionChange, n as discoverCollections, nt as getWorkspaceRoot, o as toSummary, ot as log, p as MAX_CSV_ROWS, pt as sharedCollectionChangePayload, q as BackendUnavailableError, r as loadCollection, rt as hostSupportsSharedCollections, s as CollectionSchemaZ, st as peekWorkspaceRoot, t as acceptParsedSchema, tt as firestoreHandle, u as readOnlyRefusal, ut as setCollectionChangePublisher, v as encodeCsvRecordId, w as DEFAULT_QUERY_ROWS, x as compileCsvQuery, y as normalizeCsvValue, z as projectItemFields } from "../../discovery-B9zdNkgW.js";
+import { $ as parseAuthoredApp, A as runQueryOverRows, B as APP_SLUGS_COLLECTION, C as STORE_UNREADABLE, D as recordFieldProblem, E as compileRecordZ, F as readCustomViewI18n, G as appStagingPath, H as appConfigPath, I as readSkillTemplate, J as projectPublish, K as projectApp, L as bindsSubmitterIdentity, M as buildCollectionActionSeedPrompt, N as promptPathsFor, O as runCollectionQuery, P as readCustomViewHtml, Q as AuthoredAppZ, R as publishProblems, S as MAX_RECORD_ISSUES, T as validateRecordObject, U as appSchemasPath, V as PUBLIC_CONFIG_DOC, W as appSlugDoc, X as stagedRuleConfig, Y as promoteSchema, Z as APP_ROLES, _ as computeCollectionIcon, a as deleteCollection, b as applyMutateAction, c as computeSuccessor, d as isTriggerDue, f as maybeSpawnSuccessor, h as successorId, i as deleteCustomView, j as buildActionSeedPrompt, k as enrichItems, l as daysInMonth, m as resolveEvery, n as MAX_UNSELECTIVE_ITEMS, o as deleteCollectionRefusalMessage, p as parseCivil, q as projectDeploy, r as makeManageCollectionTool, s as advanceTriggerDate, t as MAX_SCHEMA_ISSUES, u as formatCivil, v as buildWorkspaceOntology, w as validateCollectionRecords, x as firstMutateParamProblem, y as schemaRelations, z as APPS_COLLECTION } from "../../server-BNe8XMtu.js";
 import { i as isSafeTemplatePath, n as isSafeCustomViewI18nPath, r as isSafeCustomViewPath, t as isSafeActionTemplatePath } from "../../templatePath-k_WNbL_Q.js";
-export { APPS_COLLECTION, APP_MANIFEST_FILE, APP_ROLES, AuthoredAppZ, BackendUnavailableError, COLLECTION_ROOT_REQUIRED, COMPUTED_TYPES, CollectionQueryZ, CollectionSchemaZ, DEFAULT_QUERY_ROWS, MAX_CSV_ROWS, MAX_QUERY_ROWS, MAX_RECORD_ISSUES, MAX_SCHEMA_ISSUES, MAX_UNSELECTIVE_ITEMS, PUBLIC_CONFIG_DOC, SCHEMA_FILE, STORE_UNREADABLE, acceptParsedSchema, advanceTriggerDate, appConfigPath, appManifestReason, appSchemasPath, applyMutateAction, bindsSubmitterIdentity, buildActionSeedPrompt, buildCollectionActionSeedPrompt, buildWorkspaceOntology, canonicalRoot, collectionChangeKey, collectionChangePayload, collectionWritable, compileCsvQuery, compileJsonlQuery, compileRecordZ, computeCollectionIcon, computeSuccessor, configureCollectionHost, csvRowToItem, daysInMonth, decodeCsvRecordId, dedupeByRecordId, deleteCollection, deleteCollectionRefusalMessage, deleteCustomView, deleteItem, discoverCollections, encodeCsvRecordId, enrichItems, firestoreHandle, firstMutateParamProblem, formatCivil, generateItemId, getWorkspaceRoot, isBackendUnavailable, isContainedInRoot, isRegularFile, isSafeActionTemplatePath, isSafeCustomViewI18nPath, isSafeCustomViewPath, isSafeTemplatePath, isTriggerDue, itemFilePath, listItems, loadAppManifest, loadCollection, localCollectionKey, log, makeManageCollectionTool, maybeSpawnSuccessor, normalizeCsvValue, pageFromFullRead, parseAppManifest, parseAuthoredApp, parseCivil, peekWorkspaceRoot, projectApp, projectItemFields, promptPathsFor, publishApp, publishCollectionChange, publishProblems, readCustomViewHtml, readCustomViewI18n, readItem, readOnlyRefusal, readSkillTemplate, recordFieldProblem, resolveCreateItemId, resolveDataDir, resolveEvery, resolvePrimaryField, resolveTemplatePath, runCollectionQuery, runQueryOverRows, safeRecordId, safeSlugName, schemaRelations, setCollectionChangePublisher, setFirestoreAccessor, sharedCollectionChangePayload, sharedItemsPath, storeFor, successorId, toDetail, toSummary, validateCollectionRecords, validateRecordObject, writeItem };
+export { APPS_COLLECTION, APP_MANIFEST_FILE, APP_ROLES, APP_SLUGS_COLLECTION, AuthoredAppZ, BackendUnavailableError, COLLECTION_ROOT_REQUIRED, COMPUTED_TYPES, CollectionQueryZ, CollectionSchemaZ, DEFAULT_QUERY_ROWS, MAX_CSV_ROWS, MAX_QUERY_ROWS, MAX_RECORD_ISSUES, MAX_SCHEMA_ISSUES, MAX_UNSELECTIVE_ITEMS, PUBLIC_CONFIG_DOC, SCHEMA_FILE, STORE_UNREADABLE, acceptParsedSchema, advanceTriggerDate, appConfigPath, appManifestReason, appSchemasPath, appSlugDoc, appStagingPath, applyMutateAction, bindsSubmitterIdentity, buildActionSeedPrompt, buildCollectionActionSeedPrompt, buildWorkspaceOntology, canonicalRoot, collectionChangeKey, collectionChangePayload, collectionWritable, compileCsvQuery, compileJsonlQuery, compileRecordZ, computeCollectionIcon, computeSuccessor, configureCollectionHost, csvRowToItem, daysInMonth, decodeCsvRecordId, dedupeByRecordId, deleteCollection, deleteCollectionRefusalMessage, deleteCustomView, deleteItem, discoverCollections, encodeCsvRecordId, enrichItems, firestoreHandle, firstMutateParamProblem, formatCivil, generateItemId, getWorkspaceRoot, hostSupportsSharedCollections, isBackendUnavailable, isContainedInRoot, isRegularFile, isSafeActionTemplatePath, isSafeCustomViewI18nPath, isSafeCustomViewPath, isSafeTemplatePath, isTriggerDue, itemFilePath, listItems, loadAppManifest, loadCollection, localCollectionKey, log, makeManageCollectionTool, maybeSpawnSuccessor, normalizeCsvValue, pageFromFullRead, parseAppManifest, parseAuthoredApp, parseCivil, peekWorkspaceRoot, projectApp, projectDeploy, projectItemFields, projectPublish, promoteSchema, promptPathsFor, publishCollectionChange, publishProblems, readCustomViewHtml, readCustomViewI18n, readItem, readOnlyRefusal, readSkillTemplate, recordFieldProblem, resolveCreateItemId, resolveDataDir, resolveEvery, resolvePrimaryField, resolveTemplatePath, runCollectionQuery, runQueryOverRows, safeRecordId, safeSlugName, schemaRelations, setCollectionChangePublisher, setFirestoreAccessor, setSharedCollectionsSupport, sharedCollectionChangePayload, sharedItemsPath, stagedRuleConfig, storeFor, successorId, toDetail, toSummary, validateCollectionRecords, validateRecordObject, writeItem };

package/dist/collection/server/io.d.ts

@@ -82,9 +82,11 @@ export type DeleteItemResult = {
     itemId: string;
 };
 export declare function deleteItem(dataDir: string, itemId: string, opts?: IoOptions): Promise<DeleteItemResult>;
-/** Generate a short random hex id. Used by POST when the form doesn't
- *  carry a primary-key value (UI shortcut — Claude normally derives a
- *  semantic id from the record's name). */
+/** Generate a record id. Used by POST when the form doesn't carry a
+ *  primary-key value (UI shortcut — Claude normally derives a semantic
+ *  id from the record's name). Delegates to the isomorphic generator, so
+ *  the id the UI pre-fills and the id a blank-id POST mints stay the
+ *  same thing rather than two implementations that have to agree. */
 export declare function generateItemId(): string;
 /** The item id a CREATE should use for `schema`, or null when the
  *  caller should generate one. A singleton collection pins every

package/dist/collection/server/manageTool.d.ts

@@ -91,10 +91,6 @@ export declare function makeManageCollectionTool(deps?: ManageCollectionDeps): {
                     type: string;
                     description: string;
                 };
-                confirm: {
-                    type: string;
-                    description: string;
-                };
                 topic: {
                     type: string;
                     description: string;

package/dist/collection/server/publishProject.d.ts

@@ -1,5 +1,5 @@
 import { CollectionSchema } from '../core/schema';
-import { AuthoredApp } from './publishManifest';
+import { AuthoredApp, AuthoredCollectionConfig } from './publishManifest';
 /** Who and when. Threaded in rather than read from a clock inside the
  *  projection so the projection stays pure and the tests can assert on an
  *  exact document. */
@@ -16,6 +16,14 @@ export interface PublishStamp {
      *  resolve one. Absent is a normal state (a dirty tree, a repository
      *  without git), and absent is more honest than a fabricated value. */
     commit?: string | undefined;
+    /** Was the working tree modified when the commit was read?
+     *
+     *  Recorded as `publishedDirty` on the app document, because a commit that
+     *  does not describe what was published is worse than no commit: it looks
+     *  auditable. Publish-owned like the rest of the `published*` family — a
+     *  deploy must not drop the marker, and a later CLEAN publish must clear it
+     *  rather than inherit it forever. */
+    dirty?: boolean | undefined;
 }
 /** One collection's published schema document (`apps/{aid}/collections/{cid}`).
  *
@@ -31,6 +39,34 @@ export interface PublishedSchemaDoc extends Record<string, unknown> {
     publishedBy: string;
     publishedCommit?: string;
 }
+/** A STAGED schema document (`apps/{aid}/staging/{cid}`) — what deploy writes
+ *  and what `/staging/{aid}` renders from.
+ *
+ *  Its provenance keys are `deployed*`, not `published*`. The two are different
+ *  questions with different answers at almost every moment: `published*` says
+ *  which revision the PUBLIC is looking at, and a deploy must not move it —
+ *  otherwise staging a draft rewrites the recorded public revision (and, with
+ *  `previousPublished`, the thing a rollback would restore) before anyone has
+ *  published anything. */
+export interface StagedSchemaDoc extends Record<string, unknown> {
+    publishedSchema: CollectionSchema;
+    /** This collection's RULE-FACING configuration (`transitions`, `immutable`,
+     *  `submitOnly`, `peerVisibility`, …) — staged with the schema, not written
+     *  straight onto the app document.
+     *
+     *  It has to be staged for the same reason the `public` block is: the rules
+     *  read `apps/{aid}.collections[cid]` when they authorize a PUBLIC write, so
+     *  a deploy that landed it would change what anonymous visitors may do
+     *  before anyone published. The cost is that `/staging/{aid}` exercises the
+     *  new schema against the CURRENTLY PUBLISHED rule configuration; that is
+     *  the safe direction to be wrong in. */
+    config?: AuthoredCollectionConfig;
+    /** Whether this cid is in `participantRead` — same reason, same treatment. */
+    participantRead?: boolean;
+    deployedAt: number;
+    deployedBy: string;
+    deployedCommit?: string;
+}
 /** The public settings document (`apps/{aid}/config/public`).
  *
  *  `allow read: if true` — this is the one document an anonymous visitor can
@@ -77,10 +113,143 @@ export declare function projectApp(authored: AuthoredApp, schemas: {
     cid: string;
     schema: CollectionSchema;
 }[], stamp: PublishStamp, existing: Record<string, unknown> | null): PublishedApp;
+/** Everything `deploy` writes — the host's staging half of the split (the
+ *  design's D10).
+ *
+ *  Two things are deliberately ABSENT from the app document here:
+ *
+ *  - **`public`**. That block is what the rules read to authorize anonymous
+ *    access (`publicOn` / `subOpen` read `apps/{aid}.public`, never the
+ *    world-readable `config/public`), so writing it on deploy would open the
+ *    app the moment someone deployed to test. It belongs to `publish`.
+ *  - **the published schemas**. They go to `staging/{cid}`, which only the
+ *    roster can read, so a deploy against a LIVE app does not swap the view
+ *    its visitors are looking at.
+ *
+ *  A host writing this must MERGE the app document rather than replace it:
+ *  a replace would drop a `public` block a previous publish put there and
+ *  silently unpublish the app. */
+export interface DeployedApp {
+    /** The COMPLETE app document. **Write it with `set`, replacing — never with
+     *  `{ merge: true }`.**
+     *
+     *  A merge cannot DELETE, and every deletion here is a permission change:
+     *  removing `members.<email>` revokes access, and a merge would leave the
+     *  entry live. Worse, the rules require `memberEmails` to equal the keys of
+     *  `members` (`membersConsistent()`), so a merged member-removal is rejected
+     *  outright — a deploy that silently does nothing would be the good case.
+     *
+     *  Everything publish owns is carried through from `existing` verbatim, so
+     *  replacing does not unpublish a live app. */
+    app: Record<string, unknown>;
+    /** The staged schema documents, for `apps/{aid}/staging/{cid}`. */
+    staging: {
+        cid: string;
+        doc: StagedSchemaDoc;
+    }[];
+}
+export declare function projectDeploy(authored: AuthoredApp, schemas: {
+    cid: string;
+    schema: CollectionSchema;
+}[], stamp: PublishStamp, existing: Record<string, unknown> | null): DeployedApp;
+/** Everything `publish` writes that is NOT a promotion — the public face.
+ *
+ *  The schemas are absent on purpose: publish PROMOTES the documents deploy
+ *  staged (copy `staging/{cid}` → `collections/{cid}`, re-stamped with
+ *  {@link promoteSchema}) rather than re-projecting them from git. What the
+ *  roster tested is then exactly what ships; re-projecting would publish
+ *  whatever the working tree says at publish time, which nobody has looked at
+ *  through `/staging/{aid}`.
+ *
+ *  WRITE `public` LAST. It is the only one of the three that grants anything,
+ *  so a partial failure with it last leaves the app private (fail closed).
+ *  See the design note's publish ordering. */
+export interface PublishedFace {
+    /** The COMPLETE app document **without `public`** — write it with `set`,
+     *  replacing.
+     *
+     *  Replacing (not merging) is what lets a key DISAPPEAR: withdrawing a
+     *  collection's rule configuration, or taking `public` out of `app.json`,
+     *  has to actually remove the field. Everything deploy owns is carried
+     *  through from `existing`, so publishing does not revert an invitation.
+     *
+     *  `public` is absent HERE on purpose — see {@link PublishedFace.public}. */
+    app: Record<string, unknown>;
+    /** `apps/{aid}/config/public` — the world-readable projection. */
+    config: PublishedConfigDoc;
+    /** The `public` block, to be written **LAST, as its own update** — or, when
+     *  `undefined`, DELETED from the app document (that is how an app becomes
+     *  private again).
+     *
+     *  Separate from {@link PublishedFace.app} because it is the only one of
+     *  publish's writes that GRANTS anything: the rules authorize anonymous
+     *  reads and submissions from `apps/{aid}.public`. Writing it inside the
+     *  replacement document would open the app before the promoted schemas and
+     *  the world-readable config exist, so a failure part-way would leave
+     *  anonymous access live against a half-published surface. Written last, the
+     *  same failure leaves the app private — which is the direction to fail in.
+     *
+     *  A re-publish therefore passes through a moment with no `public` block.
+     *  That is a brief denial for visitors, not a brief exposure. */
+    public: Record<string, unknown> | undefined;
+}
+/** The rule-facing configuration to promote, read from the STAGED documents
+ *  rather than from the manifest as it reads right now.
+ *
+ *  Otherwise: deploy revision A, edit `app.json` to revision B, publish — and
+ *  the promoted schema is A's while the authorization behaviour is B's, a
+ *  combination nobody exercised through `/staging/{aid}`.
+ *
+ *  (`public` is deliberately NOT part of this: it is not staged, because it is
+ *  the decision being made AT publish rather than something under test.) */
+export declare function stagedRuleConfig(staged: {
+    cid: string;
+    doc: StagedSchemaDoc;
+}[]): {
+    collections: Record<string, AuthoredCollectionConfig> | undefined;
+    participantRead: string[] | undefined;
+};
+export declare function projectPublish(authored: AuthoredApp, staged: {
+    cid: string;
+    doc: StagedSchemaDoc;
+}[], stamp: PublishStamp, existing: Record<string, unknown> | null): PublishedFace;
+/** Re-stamp a staged schema document as it is promoted to `collections/{cid}`.
+ *
+ *  The stamp answers "which version is PUBLIC right now, and who made it so",
+ *  so it is written by the operation that changes the answer — publish — not
+ *  carried over from the deploy that staged it. */
+export declare function promoteSchema(staged: StagedSchemaDoc, stamp: PublishStamp): PublishedSchemaDoc;
 /** The app documents' parent path — the `FirestoreDocs` seam takes a
  *  collection path plus a document id, and the app document's id is the aid. */
 export declare const APPS_COLLECTION = "apps";
-/** The collection (schema) documents' parent path. */
+/** The collection (schema) documents' parent path — what the PUBLIC page
+ *  reads, written only by publish (promotion). */
 export declare const appSchemasPath: (aid: string) => string;
+/** The URL-slug reservations — `appSlugs/{slug}` → `{ aid, published }`.
+ *
+ *  A TOP-LEVEL collection, not a field on the app: the public page resolves a
+ *  slug to an aid BEFORE it can read anything under `apps/{aid}`, and a slug
+ *  has to be claimable atomically (create-if-absent) so two apps cannot hold
+ *  the same URL.
+ *
+ *  `published` is what makes the reservation invisible until publish. The slug
+ *  is human-readable, so a readable reservation would let anyone guess the URL
+ *  and get the aid — and the aid is the `/staging/{aid}` entrance. The rule is
+ *  `allow read: if resource.data.published == true`, which needs no `get()` and
+ *  so costs nothing against the rules' expression budget. */
+export declare const APP_SLUGS_COLLECTION = "appSlugs";
+/** The reservation document. Written by deploy as `{ aid, published: false }`
+ *  and flipped by publish — never re-pointed at another aid, which the rules
+ *  enforce on update. */
+export interface AppSlugDoc extends Record<string, unknown> {
+    aid: string;
+    published: boolean;
+}
+export declare const appSlugDoc: (aid: string, published: boolean) => AppSlugDoc;
+/** The staged schema documents' parent path — what `/staging/{aid}` reads,
+ *  written by deploy. A separate DOCUMENT rather than a field beside
+ *  `publishedSchema`, because the rules cannot hide a field: anything inside a
+ *  document the public page may read is public. */
+export declare const appStagingPath: (aid: string) => string;
 /** The public-config documents' parent path. */
 export declare const appConfigPath: (aid: string) => string;