@mulmoclaude/core 4.1.1 → 4.2.0

package/dist/collection/core/calendarGrid.d.ts

@@ -43,8 +43,8 @@ export declare function parseIsoDateTime(value: unknown): {
     ymd: Ymd;
     minutes: number;
 } | null;
-/** Civil date from either a `YYYY-MM-DD` or a `YYYY-MM-DDTHH:MM` value, so the
- *  month grid buckets date-only and datetime anchors alike. */
+/** Civil date from a `YYYY-MM-DD`, a `YYYY-MM-DDTHH:MM`, or a server-stamped
+ *  instant, so the month grid buckets all three alike. */
 export declare function dateOf(value: unknown): Ymd | null;
 /** Parse a free-form time-string field into start/end minutes-of-day.
  *  Handles the common shapes in user data:

package/dist/collection/core/serverTime.d.ts

@@ -0,0 +1,93 @@
+/** What a Firestore `Timestamp` looks like once it is only data. Duck-typed on
+ *  purpose: this module is pure and imports no SDK, because it runs where the
+ *  class is already gone — a page's payload, a JSON body, a test. */
+export interface ServerTimeParts {
+    seconds: number;
+    nanoseconds: number;
+}
+/** Is this the canonical form, and a real instant?
+ *
+ *  The shape check alone is not enough, and the gap is not theoretical: with it,
+ *  `2026-02-30T00:00:00.000000000Z` passes, the record lint reports nothing, and
+ *  `Date.parse` then normalises it to March 2 — so a write/read round trip
+ *  silently moves the value. The round trip below is the check: a string is
+ *  canonical only when re-formatting what it parses to gives it back. */
+export declare const isCanonicalServerTime: (value: unknown) => value is string;
+/** The canonical string for a (seconds, nanoseconds) pair, or null when the
+ *  pair is not a real instant.
+ *
+ *  Built from the SECONDS through `Date` and the nanoseconds as text, never by
+ *  turning nanoseconds into a float — `605987654 / 1e9` cannot be represented
+ *  exactly, and a rounding error here is a rank in the wrong place. */
+export declare function serverTimeOf(parts: ServerTimeParts): string | null;
+/** A stored server time in any of the shapes it reaches us in, as the
+ *  canonical string — or null when the value is not one at all.
+ *
+ *  The three shapes are the three trips a `Timestamp` can make: still an SDK
+ *  instance (a host reading Firestore directly), structured-cloned (a page's
+ *  payload), or JSON (`Timestamp.toJSON`, which tags itself). All three carry
+ *  `seconds` and `nanoseconds`; the tag is not required, because the clone
+ *  drops it. */
+export declare function decodeServerTime(value: unknown): string | null;
+/** The inverse: the parts a canonical string stands for, or null for anything
+ *  else.
+ *
+ *  This is what closes the write-back hole. A record is read (decoded), edited,
+ *  and written back WHOLE — `putItems`' upsert replaces the document — so
+ *  without an encode the stamp would go back as a string. The rules freeze that
+ *  field by comparing `diff().affectedKeys()`, so the write is refused and the
+ *  record can never be updated again. Dropping the field instead does not help:
+ *  a removed key is an affected key too.
+ *
+ *  Deliberately narrow. Only the EXACT canonical form is encoded, and that form
+ *  is only ever produced by `decodeServerTime` — a human or an agent authoring
+ *  a `datetime` writes the civil shape, which passes through as the string it
+ *  is. So the codec is closed over its own output and cannot re-type somebody
+ *  else's data. */
+export declare function encodeServerTime(value: unknown): ServerTimeParts | null;
+/** Epoch milliseconds for a canonical instant, for the places that can only
+ *  hold a number (a sort key, a civil placement). LOSSY below the millisecond
+ *  and knowingly so: whoever needs the full order compares the strings. */
+export declare function serverTimeMillis(value: unknown): number | null;
+/** The only part of a schema this codec reads.
+ *
+ *  Structural rather than `CollectionSchema`, because the OTHER host has its own
+ *  type for the same document (mulmoserver reads these records without going
+ *  through this package's store) and neither side should have to adopt the
+ *  other's declaration to call one function. */
+export interface DeclaredFields {
+    fields: Record<string, {
+        type: string;
+    } | undefined>;
+}
+/** Every stored instant in a `datetime` field, as its canonical string; every
+ *  other value untouched. One level deep, which is where a stamped field
+ *  lives — the rules stamp a top-level key and nothing writes a server time
+ *  into a table row. */
+export declare function decodeRecordTimes(record: Record<string, unknown>, schema: DeclaredFields): Record<string, unknown>;
+/** The write half, and it encodes ONLY what was stored as an instant.
+ *
+ *  `previous` is the document as Firestore holds it right now. That is the only
+ *  honest source of provenance here: a decoded stamp is a plain string by the
+ *  time it comes back, indistinguishable from one an author typed or an import
+ *  produced, and no amount of looking at the string can tell them apart. The
+ *  declaration that pins the field lives in `app.json` under
+ *  `public.submit.<cid>`, which this package reads only for `aid`
+ *  (`../server/appManifest`, "SCOPE") — so the stored value is what is left, and
+ *  it answers exactly the right question: was this field an instant before?
+ *
+ *  What that buys, concretely: the frozen stamp goes back unchanged, so a
+ *  whole-record write survives the rules; and a `datetime` field holding a
+ *  canonical-looking string that was NEVER an instant — imported data, a value
+ *  somebody typed — stays the string it is. The format alone would have
+ *  re-typed it.
+ *
+ *  `previous` is null for a create, where nothing was stored and nothing can
+ *  therefore be preserved. That is correct rather than a gap: the rules require
+ *  a created stamp to equal `request.time`, which no client can construct, so a
+ *  create through this store never carries a valid one.
+ *
+ *  `toStored` builds whatever the backend wants for an instant — a Firestore
+ *  `Timestamp` — and is injected so this module stays free of the SDK: it also
+ *  runs in a browser, where importing that would be a bundle. */
+export declare function encodeRecordTimes(record: Record<string, unknown>, previous: Record<string, unknown> | null, toStored: (parts: ServerTimeParts) => unknown): Record<string, unknown>;

package/dist/collection/index.cjs

@@ -1,7 +1,7 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_dist = require("../dist-CsgSfWwR.cjs");
-const require_itemId = require("../itemId-Dzrr3vs5.cjs");
-const require_promptSafety = require("../promptSafety-CuczAN9d.cjs");
+const require_itemId = require("../itemId-CEQdK01z.cjs");
+const require_promptSafety = require("../promptSafety-C0BWDsfT.cjs");
 const require_project = require("../project-C1ep9pvo.cjs");
 //#region src/collection/core/presentCollection.ts
 var TOOL_NAME = "presentCollection";
@@ -669,12 +669,16 @@ exports.completionCoveredByFieldChip = require_promptSafety.completionCoveredByF
 exports.dateOf = require_itemId.dateOf;
 exports.dateSortValue = dateSortValue;
 exports.daySlice = require_itemId.daySlice;
+exports.decodeRecordTimes = require_itemId.decodeRecordTimes;
+exports.decodeServerTime = require_itemId.decodeServerTime;
 exports.defangForPrompt = require_promptSafety.defangForPrompt;
 exports.deriveAll = require_promptSafety.deriveAll;
 exports.derivedSortValue = derivedSortValue;
 exports.draftToRecord = draftToRecord;
 exports.embedTargetId = require_itemId.embedTargetId;
 exports.emptyRow = emptyRow;
+exports.encodeRecordTimes = require_itemId.encodeRecordTimes;
+exports.encodeServerTime = require_itemId.encodeServerTime;
 exports.enumColorClasses = enumColorClasses;
 exports.enumSortValue = enumSortValue;
 exports.enumValueIndex = enumValueIndex;
@@ -690,6 +694,7 @@ exports.firstMissingRequiredField = firstMissingRequiredField;
 exports.firstUnknownDefault = require_promptSafety.firstUnknownDefault;
 exports.flagFieldValue = require_promptSafety.flagFieldValue;
 exports.generateUniqueId = require_itemId.generateUniqueId;
+exports.isCanonicalServerTime = require_itemId.isCanonicalServerTime;
 exports.isFieldDrivenEvery = require_itemId.isFieldDrivenEvery;
 exports.isLocalCollectionKey = require_itemId.isLocalCollectionKey;
 exports.isReadOnlySchema = require_itemId.isReadOnlySchema;
@@ -729,6 +734,8 @@ exports.sameCollectionKey = require_itemId.sameCollectionKey;
 exports.scalarSortValue = scalarSortValue;
 exports.schemaDefaults = require_promptSafety.schemaDefaults;
 exports.selectDynamicRecord = require_promptSafety.selectDynamicRecord;
+exports.serverTimeMillis = require_itemId.serverTimeMillis;
+exports.serverTimeOf = require_itemId.serverTimeOf;
 exports.sharedCollectionKey = require_itemId.sharedCollectionKey;
 exports.shortHexId = require_itemId.shortHexId;
 exports.skillCommandSeed = skillCommandSeed;

package/dist/collection/index.d.ts

@@ -11,6 +11,7 @@ export * from './core/enumColors';
 export * from './core/draft';
 export * from './core/actionVisible';
 export * from './core/backlinks';
+export * from './core/serverTime';
 export * from './core/linkTargets';
 export * from './core/where';
 export * from './core/completion';

package/dist/collection/index.js

@@ -1,6 +1,6 @@
 import { t as errorMessage } from "../dist-D8zokgGo.js";
-import { A as isSafeSlug, B as fieldText, C as parseCollectionKeyId, D as SAFE_SLUG_PATTERN, E as SAFE_RECORD_ID_PATTERN, F as INGEST_KINDS, I as embedTargetId, L as isFieldDrivenEvery, M as AGENT_INGEST_KIND, N as COMPUTED_TYPES, O as generateUniqueId, P as FEED_SCHEDULES, R as isReadOnlySchema, S as localCollectionKeyOf, T as sharedCollectionKey, V as fieldTextOrNull, _ as collectionKeyId, a as bucketRecords, b as isSharedCollectionKey, c as dateOf, d as parseIsoDate, f as parseIsoDateTime, g as ymdKey, h as spanCoversDay, i as assignLanes, j as nextUniqueItemId, k as isSafeRecordId, l as daySlice, m as recordSpan, n as shortHexId, o as buildMonthGrid, p as parseTimeRange, r as MINUTES_PER_DAY, s as compareYmd, t as newItemId, u as monthAnchorDate, v as collectionKeyName, w as sameCollectionKey, x as isValidCollectionName, y as isLocalCollectionKey, z as storageKindFor } from "../itemId-DfTm08jm.js";
-import { C as actionVisible, D as fieldDefaultValue, E as whenMatches, O as firstUnknownDefault, S as viaMatches, T as fieldVisible, _ as uniqueRefTargets, a as evaluateDerived, b as projectBacklinkRow, c as selectDynamicRecord, d as flagFieldValue, f as itemIsDone, g as uniqueEmbedTargets, h as uniqueBacklinkSources, k as schemaDefaults, l as chipMatches, m as matchesWhere, n as deriveAll, o as firstDateField, p as toggleChecked, r as resolveRowRefs, s as resolveIcon, t as defangForPrompt, u as completionCoveredByFieldChip, v as backlinkRows, w as agentActionRunKey, x as rollupValue, y as coerceNumeric } from "../promptSafety-CJ-sC1pX.js";
+import { A as parseCollectionKeyId, B as COMPUTED_TYPES, C as serverTimeOf, D as isSharedCollectionKey, E as isLocalCollectionKey, F as generateUniqueId, G as isReadOnlySchema, H as INGEST_KINDS, I as isSafeRecordId, J as fieldTextOrNull, K as storageKindFor, L as isSafeSlug, M as sharedCollectionKey, N as SAFE_RECORD_ID_PATTERN, O as isValidCollectionName, P as SAFE_SLUG_PATTERN, R as nextUniqueItemId, S as serverTimeMillis, T as collectionKeyName, U as embedTargetId, V as FEED_SCHEDULES, W as isFieldDrivenEvery, _ as decodeRecordTimes, a as bucketRecords, b as encodeServerTime, c as dateOf, d as parseIsoDate, f as parseIsoDateTime, g as ymdKey, h as spanCoversDay, i as assignLanes, j as sameCollectionKey, k as localCollectionKeyOf, l as daySlice, m as recordSpan, n as shortHexId, o as buildMonthGrid, p as parseTimeRange, q as fieldText, r as MINUTES_PER_DAY, s as compareYmd, t as newItemId, u as monthAnchorDate, v as decodeServerTime, w as collectionKeyId, x as isCanonicalServerTime, y as encodeRecordTimes, z as AGENT_INGEST_KIND } from "../itemId-BY2YPBkT.js";
+import { C as actionVisible, D as fieldDefaultValue, E as whenMatches, O as firstUnknownDefault, S as viaMatches, T as fieldVisible, _ as uniqueRefTargets, a as evaluateDerived, b as projectBacklinkRow, c as selectDynamicRecord, d as flagFieldValue, f as itemIsDone, g as uniqueEmbedTargets, h as uniqueBacklinkSources, k as schemaDefaults, l as chipMatches, m as matchesWhere, n as deriveAll, o as firstDateField, p as toggleChecked, r as resolveRowRefs, s as resolveIcon, t as defangForPrompt, u as completionCoveredByFieldChip, v as backlinkRows, w as agentActionRunKey, x as rollupValue, y as coerceNumeric } from "../promptSafety-Bp780ezk.js";
 import { n as projectRecordFields, t as mergeIntoExisting } from "../project-B0j_Vf_Q.js";
 //#region src/collection/core/presentCollection.ts
 var TOOL_NAME = "presentCollection";
@@ -634,6 +634,6 @@ var buildOntologyGraph = (entries) => {
 	};
 };
 //#endregion
-export { AGENT_INGEST_KIND, COMPUTED_TYPES, ENUM_ALERT, ENUM_NEUTRAL, ENUM_NUDGE, FEED_SCHEDULES, INGEST_KINDS, MINUTES_PER_DAY, SAFE_RECORD_ID_PATTERN, SAFE_SLUG_PATTERN, TOOL_DEFINITION, TOOL_NAME, actionVisible, agentActionRunKey, assignLanes, backlinkRows, boolSortValue, bucketRecords, buildMonthGrid, buildOntologyGraph, buildUpdatedRecord, cellKey, chipMatches, coerceInlineValue, coerceNumeric, collectionCardKey, collectionKeyId, collectionKeyName, compareSortValues, compareYmd, completionCoveredByFieldChip, dateOf, dateSortValue, daySlice, defangForPrompt, deriveAll, derivedSortValue, draftToRecord, embedTargetId, emptyRow, enumColorClasses, enumSortValue, enumValueIndex, errorMessage, evaluateDerived, executePresentCollection, fieldDefaultValue, fieldText, fieldTextOrNull, fieldVisible, firstDateField, firstMissingRequiredField, firstUnknownDefault, flagFieldValue, generateUniqueId, isFieldDrivenEvery, isLocalCollectionKey, isReadOnlySchema, isSafeRecordId, isSafeSlug, isSharedCollectionKey, isSortableField, isValidCollectionName, itemIdOf, itemIsDone, itemLabelOf, itemMatchesQuery, labelFieldFor, localCollectionKeyOf, matchesWhere, mergeIntoExisting, monthAnchorDate, newItemId, nextSortDirection, nextUniqueItemId, numericSortValue, parseCollectionKeyId, parseIsoDate, parseIsoDateTime, parseTimeRange, projectBacklinkRow, projectRecordFields, recordSpan, resolveEnumColor, resolveIcon, resolveRowRefs, rollupValue, rowFromItem, rowIdOf, sameCollectionCard, sameCollectionKey, scalarSortValue, schemaDefaults, selectDynamicRecord, sharedCollectionKey, shortHexId, skillCommandSeed, snapshotEmptyEnums, sortItems, sortValueOf, spanCoversDay, storageKindFor, stringSortValue, toPresentCollectionData, toggleChecked, uniqueBacklinkSources, uniqueEmbedTargets, uniqueRefTargets, viaMatches, whenMatches, withCardScope, ymdKey };
+export { AGENT_INGEST_KIND, COMPUTED_TYPES, ENUM_ALERT, ENUM_NEUTRAL, ENUM_NUDGE, FEED_SCHEDULES, INGEST_KINDS, MINUTES_PER_DAY, SAFE_RECORD_ID_PATTERN, SAFE_SLUG_PATTERN, TOOL_DEFINITION, TOOL_NAME, actionVisible, agentActionRunKey, assignLanes, backlinkRows, boolSortValue, bucketRecords, buildMonthGrid, buildOntologyGraph, buildUpdatedRecord, cellKey, chipMatches, coerceInlineValue, coerceNumeric, collectionCardKey, collectionKeyId, collectionKeyName, compareSortValues, compareYmd, completionCoveredByFieldChip, dateOf, dateSortValue, daySlice, decodeRecordTimes, decodeServerTime, defangForPrompt, deriveAll, derivedSortValue, draftToRecord, embedTargetId, emptyRow, encodeRecordTimes, encodeServerTime, enumColorClasses, enumSortValue, enumValueIndex, errorMessage, evaluateDerived, executePresentCollection, fieldDefaultValue, fieldText, fieldTextOrNull, fieldVisible, firstDateField, firstMissingRequiredField, firstUnknownDefault, flagFieldValue, generateUniqueId, isCanonicalServerTime, isFieldDrivenEvery, isLocalCollectionKey, isReadOnlySchema, isSafeRecordId, isSafeSlug, isSharedCollectionKey, isSortableField, isValidCollectionName, itemIdOf, itemIsDone, itemLabelOf, itemMatchesQuery, labelFieldFor, localCollectionKeyOf, matchesWhere, mergeIntoExisting, monthAnchorDate, newItemId, nextSortDirection, nextUniqueItemId, numericSortValue, parseCollectionKeyId, parseIsoDate, parseIsoDateTime, parseTimeRange, projectBacklinkRow, projectRecordFields, recordSpan, resolveEnumColor, resolveIcon, resolveRowRefs, rollupValue, rowFromItem, rowIdOf, sameCollectionCard, sameCollectionKey, scalarSortValue, schemaDefaults, selectDynamicRecord, serverTimeMillis, serverTimeOf, sharedCollectionKey, shortHexId, skillCommandSeed, snapshotEmptyEnums, sortItems, sortValueOf, spanCoversDay, storageKindFor, stringSortValue, toPresentCollectionData, toggleChecked, uniqueBacklinkSources, uniqueEmbedTargets, uniqueRefTargets, viaMatches, whenMatches, withCardScope, ymdKey };
 
 //# sourceMappingURL=index.js.map

package/dist/collection/registry/server/index.cjs

@@ -4,9 +4,9 @@ const require_dist = require("../../../dist-CsgSfWwR.cjs");
 const require_root = require("../../../root-rPH6FGDT.cjs");
 const require_relPath = require("../../../relPath-CTAjGdCL.cjs");
 const require_utils_fetch = require("../../../utils/fetch.cjs");
-const require_discovery = require("../../../discovery-B9EESjHP.cjs");
+const require_discovery = require("../../../discovery-Dl9nRa-m.cjs");
 const require_templatePath = require("../../../templatePath-27vUZowm.cjs");
-const require_server = require("../../../server-meS6kjBN.cjs");
+const require_server = require("../../../server-DZkN0GGh.cjs");
 const require_skill_bridge_index = require("../../../skill-bridge/index.cjs");
 const require_types = require("../../../types-CNqkLT4M.cjs");
 let node_fs = require("node:fs");

package/dist/collection/registry/server/index.js

@@ -2,9 +2,9 @@ import { l as isUnknownArray, t as errorMessage } from "../../../dist-D8zokgGo.j
 import { n as writeFileAtomic } from "../../../root-BMroU_mB.js";
 import { n as toPosixRelPath } from "../../../relPath-DW8MC8VO.js";
 import { fetchWithTimeout } from "../../../utils/fetch.js";
-import { $ as collectionsRegistriesConfigPath, G as safeRecordId, ct as projectSkillsDir, mt as skillsStagingDir, nt as getWorkspaceRoot, ot as log, r as loadCollection, s as CollectionSchemaZ, t as acceptParsedSchema } from "../../../discovery-D88x2DmW.js";
+import { $ as collectionsRegistriesConfigPath, G as safeRecordId, ct as projectSkillsDir, mt as skillsStagingDir, nt as getWorkspaceRoot, ot as log, r as loadCollection, s as CollectionSchemaZ, t as acceptParsedSchema } from "../../../discovery-P64fgtuD.js";
 import { t as isSafeActionTemplatePath } from "../../../templatePath-k_WNbL_Q.js";
-import { v as ONE_SECOND_MS } from "../../../server-L12n8We3.js";
+import { v as ONE_SECOND_MS } from "../../../server-C-Ngd3g2.js";
 import { claudeSkillDir, dataSkillDir, mirrorSkillWrite } from "../../../skill-bridge/index.js";
 import { n as parseRegistryIndex, r as isRecord, t as OFFICIAL_REGISTRY_NAME } from "../../../types-BKVZrtyc.js";
 import { readFileSync } from "node:fs";

package/dist/collection/server/index.cjs

@@ -1,9 +1,9 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_root = require("../../root-rPH6FGDT.cjs");
-const require_itemId = require("../../itemId-Dzrr3vs5.cjs");
-const require_discovery = require("../../discovery-B9EESjHP.cjs");
+const require_itemId = require("../../itemId-CEQdK01z.cjs");
+const require_discovery = require("../../discovery-Dl9nRa-m.cjs");
 const require_templatePath = require("../../templatePath-27vUZowm.cjs");
-const require_server = require("../../server-meS6kjBN.cjs");
+const require_server = require("../../server-DZkN0GGh.cjs");
 exports.APP_MANIFEST_FILE = require_discovery.APP_MANIFEST_FILE;
 exports.BackendUnavailableError = require_discovery.BackendUnavailableError;
 exports.COLLECTION_ROOT_REQUIRED = require_discovery.COLLECTION_ROOT_REQUIRED;

package/dist/collection/server/index.js

@@ -1,6 +1,6 @@
 import { t as canonicalRoot } from "../../root-BMroU_mB.js";
-import { N as COMPUTED_TYPES } from "../../itemId-DfTm08jm.js";
-import { A as readItem, B as SCHEMA_FILE, C as CollectionQueryZ, D as generateItemId, E as deleteItem, F as loadAppManifest, G as safeRecordId, H as itemFilePath, I as parseAppManifest, J as isBackendUnavailable, K as safeSlugName, L as sharedItemsPath, M as writeItem, N as APP_MANIFEST_FILE, O as isRegularFile, P as appManifestReason, Q as collectionChangePayload, R as pageFromFullRead, S as compileJsonlQuery, T as MAX_QUERY_ROWS, U as resolveDataDir, V as isContainedInRoot, W as resolveTemplatePath, Y as COLLECTION_ROOT_REQUIRED, Z as collectionChangeKey, _ as dedupeByRecordId, a as toDetail, at as localCollectionKey, d as storeFor, dt as setFirestoreAccessor, et as configureCollectionHost, ft as setSharedCollectionsSupport, g as decodeCsvRecordId, h as csvRowToItem, i as resolvePrimaryField, j as resolveCreateItemId, k as listItems, l as collectionWritable, lt as publishCollectionChange, n as discoverCollections, nt as getWorkspaceRoot, o as toSummary, ot as log, p as MAX_CSV_ROWS, pt as sharedCollectionChangePayload, q as BackendUnavailableError, r as loadCollection, rt as hostSupportsSharedCollections, s as CollectionSchemaZ, st as peekWorkspaceRoot, t as acceptParsedSchema, tt as firestoreHandle, u as readOnlyRefusal, ut as setCollectionChangePublisher, v as encodeCsvRecordId, w as DEFAULT_QUERY_ROWS, x as compileCsvQuery, y as normalizeCsvValue, z as projectItemFields } from "../../discovery-D88x2DmW.js";
+import { B as COMPUTED_TYPES } from "../../itemId-BY2YPBkT.js";
+import { A as readItem, B as SCHEMA_FILE, C as CollectionQueryZ, D as generateItemId, E as deleteItem, F as loadAppManifest, G as safeRecordId, H as itemFilePath, I as parseAppManifest, J as isBackendUnavailable, K as safeSlugName, L as sharedItemsPath, M as writeItem, N as APP_MANIFEST_FILE, O as isRegularFile, P as appManifestReason, Q as collectionChangePayload, R as pageFromFullRead, S as compileJsonlQuery, T as MAX_QUERY_ROWS, U as resolveDataDir, V as isContainedInRoot, W as resolveTemplatePath, Y as COLLECTION_ROOT_REQUIRED, Z as collectionChangeKey, _ as dedupeByRecordId, a as toDetail, at as localCollectionKey, d as storeFor, dt as setFirestoreAccessor, et as configureCollectionHost, ft as setSharedCollectionsSupport, g as decodeCsvRecordId, h as csvRowToItem, i as resolvePrimaryField, j as resolveCreateItemId, k as listItems, l as collectionWritable, lt as publishCollectionChange, n as discoverCollections, nt as getWorkspaceRoot, o as toSummary, ot as log, p as MAX_CSV_ROWS, pt as sharedCollectionChangePayload, q as BackendUnavailableError, r as loadCollection, rt as hostSupportsSharedCollections, s as CollectionSchemaZ, st as peekWorkspaceRoot, t as acceptParsedSchema, tt as firestoreHandle, u as readOnlyRefusal, ut as setCollectionChangePublisher, v as encodeCsvRecordId, w as DEFAULT_QUERY_ROWS, x as compileCsvQuery, y as normalizeCsvValue, z as projectItemFields } from "../../discovery-P64fgtuD.js";
 import { i as isSafeTemplatePath, n as isSafeCustomViewI18nPath, r as isSafeCustomViewPath, t as isSafeActionTemplatePath } from "../../templatePath-k_WNbL_Q.js";
-import { A as runCollectionQuery, C as firstMutateParamProblem, D as validateRecordObject, E as validateCollectionRecords, F as promptPathsFor, I as readCustomViewHtml, L as readCustomViewI18n, M as runQueryOverRows, N as buildActionSeedPrompt, O as compileRecordZ, P as buildCollectionActionSeedPrompt, R as readSkillTemplate, S as applyMutateAction, T as STORE_UNREADABLE, _ as successorId, a as makeManageCollectionTool, b as buildWorkspaceOntology, c as deleteCollectionRefusalMessage, d as daysInMonth, f as formatCivil, g as resolveEvery, h as parseCivil, i as MAX_UNSELECTIVE_ITEMS, j as enrichItems, k as recordFieldProblem, l as advanceTriggerDate, m as maybeSpawnSuccessor, n as MAX_PUT_ITEMS, o as deleteCustomView, p as isTriggerDue, r as MAX_SCHEMA_ISSUES, s as deleteCollection, t as MAX_ITEMS_FILE_BYTES, u as computeSuccessor, w as MAX_RECORD_ISSUES, x as schemaRelations, y as computeCollectionIcon } from "../../server-L12n8We3.js";
+import { A as runCollectionQuery, C as firstMutateParamProblem, D as validateRecordObject, E as validateCollectionRecords, F as promptPathsFor, I as readCustomViewHtml, L as readCustomViewI18n, M as runQueryOverRows, N as buildActionSeedPrompt, O as compileRecordZ, P as buildCollectionActionSeedPrompt, R as readSkillTemplate, S as applyMutateAction, T as STORE_UNREADABLE, _ as successorId, a as makeManageCollectionTool, b as buildWorkspaceOntology, c as deleteCollectionRefusalMessage, d as daysInMonth, f as formatCivil, g as resolveEvery, h as parseCivil, i as MAX_UNSELECTIVE_ITEMS, j as enrichItems, k as recordFieldProblem, l as advanceTriggerDate, m as maybeSpawnSuccessor, n as MAX_PUT_ITEMS, o as deleteCustomView, p as isTriggerDue, r as MAX_SCHEMA_ISSUES, s as deleteCollection, t as MAX_ITEMS_FILE_BYTES, u as computeSuccessor, w as MAX_RECORD_ISSUES, x as schemaRelations, y as computeCollectionIcon } from "../../server-C-Ngd3g2.js";
 export { APP_MANIFEST_FILE, BackendUnavailableError, COLLECTION_ROOT_REQUIRED, COMPUTED_TYPES, CollectionQueryZ, CollectionSchemaZ, DEFAULT_QUERY_ROWS, MAX_CSV_ROWS, MAX_ITEMS_FILE_BYTES, MAX_PUT_ITEMS, MAX_QUERY_ROWS, MAX_RECORD_ISSUES, MAX_SCHEMA_ISSUES, MAX_UNSELECTIVE_ITEMS, SCHEMA_FILE, STORE_UNREADABLE, acceptParsedSchema, advanceTriggerDate, appManifestReason, applyMutateAction, buildActionSeedPrompt, buildCollectionActionSeedPrompt, buildWorkspaceOntology, canonicalRoot, collectionChangeKey, collectionChangePayload, collectionWritable, compileCsvQuery, compileJsonlQuery, compileRecordZ, computeCollectionIcon, computeSuccessor, configureCollectionHost, csvRowToItem, daysInMonth, decodeCsvRecordId, dedupeByRecordId, deleteCollection, deleteCollectionRefusalMessage, deleteCustomView, deleteItem, discoverCollections, encodeCsvRecordId, enrichItems, firestoreHandle, firstMutateParamProblem, formatCivil, generateItemId, getWorkspaceRoot, hostSupportsSharedCollections, isBackendUnavailable, isContainedInRoot, isRegularFile, isSafeActionTemplatePath, isSafeCustomViewI18nPath, isSafeCustomViewPath, isSafeTemplatePath, isTriggerDue, itemFilePath, listItems, loadAppManifest, loadCollection, localCollectionKey, log, makeManageCollectionTool, maybeSpawnSuccessor, normalizeCsvValue, pageFromFullRead, parseAppManifest, parseCivil, peekWorkspaceRoot, projectItemFields, promptPathsFor, publishCollectionChange, readCustomViewHtml, readCustomViewI18n, readItem, readOnlyRefusal, readSkillTemplate, recordFieldProblem, resolveCreateItemId, resolveDataDir, resolveEvery, resolvePrimaryField, resolveTemplatePath, runCollectionQuery, runQueryOverRows, safeRecordId, safeSlugName, schemaRelations, setCollectionChangePublisher, setFirestoreAccessor, setSharedCollectionsSupport, sharedCollectionChangePayload, sharedItemsPath, storeFor, successorId, toDetail, toSummary, validateCollectionRecords, validateRecordObject, writeItem };

package/dist/collection-watchers/index.cjs

@@ -1,10 +1,10 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_root = require("../root-rPH6FGDT.cjs");
-const require_itemId = require("../itemId-Dzrr3vs5.cjs");
-const require_promptSafety = require("../promptSafety-CuczAN9d.cjs");
+const require_itemId = require("../itemId-CEQdK01z.cjs");
+const require_promptSafety = require("../promptSafety-C0BWDsfT.cjs");
 require("../collection/index.cjs");
-const require_discovery = require("../discovery-B9EESjHP.cjs");
-const require_server = require("../server-meS6kjBN.cjs");
+const require_discovery = require("../discovery-Dl9nRa-m.cjs");
+const require_server = require("../server-DZkN0GGh.cjs");
 const require_notifier = require("../notifier-DZJj0sOh.cjs");
 let node_fs_promises = require("node:fs/promises");
 //#region src/collection-watchers/config.ts

package/dist/collection-watchers/index.js

@@ -1,9 +1,9 @@
 import { t as canonicalRoot } from "../root-BMroU_mB.js";
-import { B as fieldText, x as isValidCollectionName } from "../itemId-DfTm08jm.js";
-import { E as whenMatches, f as itemIsDone } from "../promptSafety-CJ-sC1pX.js";
+import { O as isValidCollectionName, q as fieldText } from "../itemId-BY2YPBkT.js";
+import { E as whenMatches, f as itemIsDone } from "../promptSafety-Bp780ezk.js";
 import "../collection/index.js";
-import { H as itemFilePath, Q as collectionChangePayload, d as storeFor, lt as publishCollectionChange, n as discoverCollections, pt as sharedCollectionChangePayload, r as loadCollection, st as peekWorkspaceRoot, tt as firestoreHandle } from "../discovery-D88x2DmW.js";
-import { m as maybeSpawnSuccessor, p as isTriggerDue } from "../server-L12n8We3.js";
+import { H as itemFilePath, Q as collectionChangePayload, d as storeFor, lt as publishCollectionChange, n as discoverCollections, pt as sharedCollectionChangePayload, r as loadCollection, st as peekWorkspaceRoot, tt as firestoreHandle } from "../discovery-P64fgtuD.js";
+import { m as maybeSpawnSuccessor, p as isTriggerDue } from "../server-C-Ngd3g2.js";
 import { d as publish, m as updateForPlugin, n as clear, s as listAll } from "../notifier-DhnwR82U.js";
 import { access } from "node:fs/promises";
 //#region src/collection-watchers/config.ts

package/dist/{discovery-B9EESjHP.cjs → discovery-Dl9nRa-m.cjs}

@@ -1,7 +1,7 @@
 const require_rolldown_runtime = require("./rolldown-runtime-VH7oDXx4.cjs");
 const require_dist = require("./dist-CsgSfWwR.cjs");
 const require_root = require("./root-rPH6FGDT.cjs");
-const require_itemId = require("./itemId-Dzrr3vs5.cjs");
+const require_itemId = require("./itemId-CEQdK01z.cjs");
 const require_project = require("./project-C1ep9pvo.cjs");
 const require_listen = require("./listen-UZA68Upt.cjs");
 const require_templatePath = require("./templatePath-27vUZowm.cjs");
@@ -10,6 +10,7 @@ let node_path = require("node:path");
 node_path = require_rolldown_runtime.__toESM(node_path, 1);
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
+let firebase_firestore = require("firebase/firestore");
 let node_os = require("node:os");
 let iconv_lite = require("iconv-lite");
 iconv_lite = require_rolldown_runtime.__toESM(iconv_lite, 1);
@@ -476,10 +477,10 @@ async function guarded(key, email, run) {
 *  It also removes the reason a submit path would have had to accept the
 *  primary key as a `createField` at all — a submission that cannot name its
 *  own id is exactly right when the id is the thing being assigned. */
-function toItem(data, docId, primaryKey) {
+function toItem(data, docId, schema) {
 	return require_dist.isRecord(data) ? {
-		...data,
-		[primaryKey]: docId
+		...require_itemId.decodeRecordTimes(data, schema),
+		[schema.primaryKey]: docId
 	} : null;
 }
 /** Record ids are validated with the SAME helper every other backend uses.
@@ -491,26 +492,26 @@ function withSafeId(itemId, onInvalid, run) {
 	if (safeId === null) return onInvalid();
 	return run(safeId, requireHandle());
 }
-async function firestoreList(key, primaryKey) {
+async function firestoreList(key, schema) {
 	const { docs, email } = requireHandle();
-	return (await guarded(key, email, () => docs.list(sharedItemsPath(key)))).map((entry) => toItem(entry.data, entry.id, primaryKey)).filter((item) => item !== null);
+	return (await guarded(key, email, () => docs.list(sharedItemsPath(key)))).map((entry) => toItem(entry.data, entry.id, schema)).filter((item) => item !== null);
 }
 /** Paging is emulated over a full ordered read rather than pushed into
 *  Firestore: `offset` has no server-side form there (the cursor API needs the
 *  preceding document, which a stateless offset/limit call doesn't have), and
 *  `total` needs the full count anyway. Hence `nativePaging: false` — the
 *  capability is honest about the cost. */
-async function firestorePage(key, primaryKey, opts) {
-	const items = await firestoreList(key, primaryKey);
+async function firestorePage(key, schema, opts) {
+	const items = await firestoreList(key, schema);
 	const offset = Math.max(0, opts.offset ?? 0);
 	return {
-		items: projectItemFields(opts.limit === void 0 ? items.slice(offset) : items.slice(offset, offset + Math.max(0, opts.limit)), opts.fields, primaryKey),
+		items: projectItemFields(opts.limit === void 0 ? items.slice(offset) : items.slice(offset, offset + Math.max(0, opts.limit)), opts.fields, schema.primaryKey),
 		total: items.length,
 		truncated: false
 	};
 }
-async function firestoreRead(key, itemId, primaryKey) {
-	return withSafeId(itemId, () => Promise.resolve(null), async (safeId, { docs, email }) => toItem(await guarded(key, email, () => docs.get(sharedItemsPath(key), safeId)), safeId, primaryKey));
+async function firestoreRead(key, itemId, schema) {
+	return withSafeId(itemId, () => Promise.resolve(null), async (safeId, { docs, email }) => toItem(await guarded(key, email, () => docs.get(sharedItemsPath(key), safeId)), safeId, schema));
 }
 /** Publish the "records changed" ping for a shared collection.
 *
@@ -525,18 +526,35 @@ function publishShared(key, ids, operation) {
 		op: operation
 	}, key.aid));
 }
-async function firestoreWrite(key, itemId, item, opts) {
+/** The write half of the decode above, and it is not optional.
+*
+*  A record is read, edited and written back WHOLE — `putItems`' upsert
+*  replaces the document — so a decoded stamp would return to Firestore as a
+*  string. The rules freeze that field by comparing `diff().affectedKeys()`, so
+*  that write is refused and so is every later one: the record becomes
+*  permanently unupdatable. Dropping the key instead does not help, because a
+*  removed key is an affected key too.
+*
+*  Only a `datetime` field carrying the exact canonical form is converted, and
+*  that form is only ever produced by the decode — so the pair is closed over
+*  its own output and cannot re-type a value somebody else wrote. */
+async function firestoreWrite(key, itemId, item, schema, opts) {
 	return withSafeId(itemId, () => Promise.resolve({
 		kind: "invalid-id",
 		itemId
 	}), async (safeId, { docs, email }) => {
 		const collectionPath = sharedItemsPath(key);
+		const asTimestamp = (parts) => new firebase_firestore.Timestamp(parts.seconds, parts.nanoseconds);
 		if (opts.refuseOverwrite) {
-			if (!await guarded(key, email, () => docs.create(collectionPath, safeId, item))) return {
+			if (!await guarded(key, email, () => docs.create(collectionPath, safeId, require_itemId.encodeRecordTimes(item, null, asTimestamp)))) return {
 				kind: "conflict",
 				itemId: safeId
 			};
-		} else await guarded(key, email, () => docs.set(collectionPath, safeId, item));
+		} else {
+			const previous = await guarded(key, email, () => docs.get(collectionPath, safeId));
+			const stored = require_itemId.encodeRecordTimes(item, require_dist.isRecord(previous) ? previous : null, asTimestamp);
+			await guarded(key, email, () => docs.set(collectionPath, safeId, stored));
+		}
 		if (opts.slug) publishShared(key, [safeId], "upsert");
 		return {
 			kind: "ok",
@@ -669,7 +687,7 @@ function armSharedWatch(key, onChange) {
 /** The store factory registered for `storage.type === "firestore"`.
 *  Synchronous and connection-agnostic by contract — see the header. */
 function firestoreStoreFor(collection, opts) {
-	const { primaryKey } = collection.schema;
+	const { schema } = collection;
 	const ioOpts = {
 		...opts,
 		slug: opts.slug ?? collection.slug
@@ -680,10 +698,10 @@ function firestoreStoreFor(collection, opts) {
 			nativeQuery: false,
 			nativePaging: false
 		},
-		list: async () => firestoreList(keyOf(collection), primaryKey),
-		page: async (pageOpts = {}) => firestorePage(keyOf(collection), primaryKey, pageOpts),
-		read: async (itemId) => firestoreRead(keyOf(collection), itemId, primaryKey),
-		write: async (itemId, item, writeOpts = {}) => firestoreWrite(keyOf(collection), itemId, item, {
+		list: async () => firestoreList(keyOf(collection), schema),
+		page: async (pageOpts = {}) => firestorePage(keyOf(collection), schema, pageOpts),
+		read: async (itemId) => firestoreRead(keyOf(collection), itemId, schema),
+		write: async (itemId, item, writeOpts = {}) => firestoreWrite(keyOf(collection), itemId, item, schema, {
 			...ioOpts,
 			refuseOverwrite: writeOpts.refuseOverwrite
 		}),
@@ -3743,4 +3761,4 @@ Object.defineProperty(exports, "writeItem", {
 	}
 });
 
-//# sourceMappingURL=discovery-B9EESjHP.cjs.map
+//# sourceMappingURL=discovery-Dl9nRa-m.cjs.map