@odla-ai/brand 0.5.0 → 0.7.0

package/dist/index.cjs

@@ -153,11 +153,13 @@ __export(src_exports, {
   parseDesignBundle: () => parseDesignBundle,
   parseHex: () => parseHex,
   pickTextOn: () => pickTextOn,
+  proposalAsWritten: () => proposalAsWritten,
   proposalReviewSnapshot: () => proposalReviewSnapshot,
   proposePaletteOps: () => proposePaletteOps,
   proposeSectionOps: () => proposeSectionOps,
   readDesignManifest: () => readDesignManifest,
   readTools: () => readTools,
+  receiptAsWritten: () => receiptAsWritten,
   recordAnalysisOps: () => recordAnalysisOps,
   rejectProposalOps: () => rejectProposalOps,
   relativeLuminance: () => relativeLuminance,
@@ -167,6 +169,7 @@ __export(src_exports, {
   rgbToHsl: () => rgbToHsl,
   rgbToOklab: () => rgbToOklab,
   rotateHue: () => rotateHue,
+  rowAsWritten: () => rowAsWritten,
   safeFileName: () => safeFileName,
   scanCustomProperties: () => scanCustomProperties,
   sectionKey: () => sectionKey,
@@ -286,24 +289,6 @@ var BrandReviewStateChangedError = class extends BrandConflictError {
   }
 };
 
-// src/deps.ts
-async function defaultFetchBytes(url) {
-  const res = await fetch(url);
-  if (!res.ok) throw new Error(`asset fetch failed: ${res.status} for ${url}`);
-  return {
-    bytes: new Uint8Array(await res.arrayBuffer()),
-    contentType: res.headers.get("content-type") ?? "application/octet-stream"
-  };
-}
-function resolveDeps(deps) {
-  return {
-    db: deps.db,
-    now: deps.now ?? Date.now,
-    newId: deps.newId ?? (() => crypto.randomUUID()),
-    fetchBytes: deps.fetchBytes ?? defaultFetchBytes
-  };
-}
-
 // src/schema.ts
 var a = (type, o = {}) => ({
   type,
@@ -490,6 +475,70 @@ var BRAND_SCHEMA = {
   }
 };
 
+// src/read-shape.ts
+var record = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+var DATE_FIELDS = /* @__PURE__ */ new Map();
+for (const [ns, entity] of Object.entries(BRAND_SCHEMA.entities))
+  DATE_FIELDS.set(
+    ns,
+    new Set(
+      Object.entries(entity.attrs).filter(([, attr]) => attr.type === "date").map(([label]) => label)
+    )
+  );
+function rowAsWritten(ns, row) {
+  const dates = DATE_FIELDS.get(ns);
+  if (!dates?.size || !record(row)) return row;
+  let changed = false;
+  const out = { ...row };
+  for (const field of dates) {
+    const value = out[field];
+    if (typeof value !== "string") continue;
+    const parsed = Date.parse(value);
+    if (!Number.isSafeInteger(parsed) || parsed < 0) continue;
+    out[field] = parsed;
+    changed = true;
+  }
+  return changed ? out : row;
+}
+function receiptAsWritten(row) {
+  return rowAsWritten(BRAND_NS.approvalReceipt, row);
+}
+function proposalAsWritten(row) {
+  return rowAsWritten(BRAND_NS.proposal, row);
+}
+function resultAsWritten(result) {
+  const out = { ...result };
+  for (const [ns, rows] of Object.entries(out)) {
+    if (Array.isArray(rows)) out[ns] = rows.map((row) => rowAsWritten(ns, row));
+  }
+  return out;
+}
+
+// src/deps.ts
+async function defaultFetchBytes(url) {
+  const res = await fetch(url);
+  if (!res.ok) throw new Error(`asset fetch failed: ${res.status} for ${url}`);
+  return {
+    bytes: new Uint8Array(await res.arrayBuffer()),
+    contentType: res.headers.get("content-type") ?? "application/octet-stream"
+  };
+}
+function readingAsWritten(db) {
+  return {
+    query: async (q) => resultAsWritten(await db.query(q)),
+    transact: (ops, opts) => db.transact(ops, opts),
+    storage: db.storage
+  };
+}
+function resolveDeps(deps) {
+  return {
+    db: readingAsWritten(deps.db),
+    now: deps.now ?? Date.now,
+    newId: deps.newId ?? (() => crypto.randomUUID()),
+    fetchBytes: deps.fetchBytes ?? defaultFetchBytes
+  };
+}
+
 // src/rules.ts
 var CURRENT_BOOK_MEMBER = "ref('book.memberIds').exists(members, auth.id in members)";
 var BRAND_RULES = {
@@ -691,7 +740,7 @@ function assertAnalysis(value) {
 }
 
 // src/review-json.ts
-var record = (value) => typeof value === "object" && value !== null && !Array.isArray(value) && (Object.getPrototypeOf(value) === Object.prototype || Object.getPrototypeOf(value) === null);
+var record2 = (value) => typeof value === "object" && value !== null && !Array.isArray(value) && (Object.getPrototypeOf(value) === Object.prototype || Object.getPrototypeOf(value) === null);
 function isBoundedBrandJson(root, limits = {}) {
   const maxDepth = limits.maxDepth ?? 12;
   const maxNodes = limits.maxNodes ?? 2048;
@@ -715,7 +764,7 @@ function isBoundedBrandJson(root, limits = {}) {
     if (Array.isArray(value)) {
       for (const child of value)
         stack.push({ value: child, depth: depth + 1 });
-    } else if (record(value)) {
+    } else if (record2(value)) {
       for (const child of Object.values(value))
         stack.push({ value: child, depth: depth + 1 });
     } else {
@@ -752,7 +801,7 @@ async function brandJsonDigest(value) {
 
 // src/review.ts
 var DIGEST = /^sha256:[0-9a-f]{64}$/;
-var record2 = (value) => typeof value === "object" && value !== null && !Array.isArray(value) && (Object.getPrototypeOf(value) === Object.prototype || Object.getPrototypeOf(value) === null);
+var record3 = (value) => typeof value === "object" && value !== null && !Array.isArray(value) && (Object.getPrototypeOf(value) === Object.prototype || Object.getPrototypeOf(value) === null);
 var exactKeys = (value, required, optional = []) => {
   const allowed = /* @__PURE__ */ new Set([...required, ...optional]);
   return required.every((key) => Object.hasOwn(value, key)) && Object.keys(value).every((key) => allowed.has(key));
@@ -777,15 +826,15 @@ var SNAPSHOT_REQUIRED = [
   "createdAt"
 ];
 function validSnapshotShape(value) {
-  if (!record2(value) || !exactKeys(value, SNAPSHOT_REQUIRED)) return false;
+  if (!record3(value) || !exactKeys(value, SNAPSHOT_REQUIRED)) return false;
   const provenance = value.provenance;
-  return boundedString(value.id) && boundedString(value.bookId) && typeof value.kind === "string" && PROPOSAL_KINDS.includes(value.kind) && value.status === "open" && record2(value.payload) && boundedString(value.rationale, 2e3) && record2(provenance) && exactKeys(provenance, [
+  return boundedString(value.id) && boundedString(value.bookId) && typeof value.kind === "string" && PROPOSAL_KINDS.includes(value.kind) && value.status === "open" && record3(value.payload) && boundedString(value.rationale, 2e3) && record3(provenance) && exactKeys(provenance, [
     "sourceAssetId",
     "sourceAsset",
     "messageId",
     "turnId",
     "taintLabels"
-  ]) && (provenance.sourceAssetId === null || boundedString(provenance.sourceAssetId)) && (provenance.sourceAsset === null || record2(provenance.sourceAsset) && exactKeys(provenance.sourceAsset, [
+  ]) && (provenance.sourceAssetId === null || boundedString(provenance.sourceAssetId)) && (provenance.sourceAsset === null || record3(provenance.sourceAsset) && exactKeys(provenance.sourceAsset, [
     "assetId",
     "contentDigest",
     "objectEtag",
@@ -818,8 +867,8 @@ var CONSUMPTION_REQUIRED = [
   "consumedAt"
 ];
 function isBrandHumanAuthorityConsumption(value) {
-  if (!record2(value) || !exactKeys(value, CONSUMPTION_REQUIRED)) return false;
-  return boundedString(value.id) && boundedString(value.grantId) && Number.isSafeInteger(value.grantVersion) && value.grantVersion > 0 && Number.isSafeInteger(value.useNumber) && value.useNumber > 0 && boundedString(value.actorPrincipalId) && value.actorKind === "human" && boundedString(value.credentialId) && value.credentialKind === "clerk" && boundedString(value.appId) && typeof value.appIncarnation === "string" && /^[a-f0-9]{32}$/.test(value.appIncarnation) && value.capability === "brand.proposal.resolve" && value.projectCapability === "brand.approve" && value.effect === "internal" && typeof value.actionDigest === "string" && DIGEST.test(value.actionDigest) && typeof value.resourceDigest === "string" && DIGEST.test(value.resourceDigest) && record2(value.constraintEvidence) && boundedString(value.consumptionIdempotencyKey) && typeof value.requestDigest === "string" && DIGEST.test(value.requestDigest) && safeTime(value.consumedAt);
+  if (!record3(value) || !exactKeys(value, CONSUMPTION_REQUIRED)) return false;
+  return boundedString(value.id) && boundedString(value.grantId) && Number.isSafeInteger(value.grantVersion) && value.grantVersion > 0 && Number.isSafeInteger(value.useNumber) && value.useNumber > 0 && boundedString(value.actorPrincipalId) && value.actorKind === "human" && boundedString(value.credentialId) && value.credentialKind === "clerk" && boundedString(value.appId) && typeof value.appIncarnation === "string" && /^[a-f0-9]{32}$/.test(value.appIncarnation) && value.capability === "brand.proposal.resolve" && value.projectCapability === "brand.approve" && value.effect === "internal" && typeof value.actionDigest === "string" && DIGEST.test(value.actionDigest) && typeof value.resourceDigest === "string" && DIGEST.test(value.resourceDigest) && record3(value.constraintEvidence) && boundedString(value.consumptionIdempotencyKey) && typeof value.requestDigest === "string" && DIGEST.test(value.requestDigest) && safeTime(value.consumedAt);
 }
 var RECEIPT_REQUIRED = [
   "version",
@@ -845,10 +894,10 @@ async function verifyBrandApprovalReceipt(receipt2) {
   try {
     if (!isBoundedBrandJson(receipt2, { maxDepth: 14, maxNodes: 2500, maxBytes: 48 * 1024 }))
       return false;
-    if (!record2(receipt2) || !exactKeys(receipt2, RECEIPT_REQUIRED, ["paletteId", "resolutionNote"]))
+    if (!record3(receipt2) || !exactKeys(receipt2, RECEIPT_REQUIRED, ["paletteId", "resolutionNote"]))
       return false;
     const binding = receipt2.decisionBinding;
-    if (receipt2.version !== 1 || !boundedString(receipt2.id) || !boundedString(receipt2.mutationKey) || !boundedString(receipt2.bookId) || !boundedString(receipt2.proposalId) || receipt2.resolution !== "accepted" && receipt2.resolution !== "rejected" || !validSnapshotShape(receipt2.reviewedProposal) || typeof receipt2.actionDigest !== "string" || !DIGEST.test(receipt2.actionDigest) || !record2(binding) || !exactKeys(binding, [
+    if (receipt2.version !== 1 || !boundedString(receipt2.id) || !boundedString(receipt2.mutationKey) || !boundedString(receipt2.bookId) || !boundedString(receipt2.proposalId) || receipt2.resolution !== "accepted" && receipt2.resolution !== "rejected" || !validSnapshotShape(receipt2.reviewedProposal) || typeof receipt2.actionDigest !== "string" || !DIGEST.test(receipt2.actionDigest) || !record3(binding) || !exactKeys(binding, [
       "version",
       "bookVersion",
       "activationRevision",
@@ -3568,7 +3617,7 @@ async function linkedAsset(ctx, book, assetId, allowDeleting = false) {
       book: {}
     }
   });
-  const row = (result[BRAND_NS.asset] ?? [])[0];
+  const row = rowAsWritten(BRAND_NS.asset, (result[BRAND_NS.asset] ?? [])[0]);
   const links = row?.book;
   if (!row || row.bookId !== book.id || !Array.isArray(links) || links.length !== 1 || links[0]?.id !== book.id || row.status !== "live" && !(allowDeleting && row.status === "deleting")) throw new BrandNotFoundError(`asset ${assetId}`);
   return row;
@@ -3642,7 +3691,7 @@ async function loadBook(db, bookId) {
   const res = await db.query({ [BRAND_NS.book]: { $: { where: { id: bookId } } } });
   const row = (res[BRAND_NS.book] ?? [])[0];
   if (!row) throw new BrandNotFoundError(`brand book ${bookId}`);
-  return row;
+  return rowAsWritten(BRAND_NS.book, row);
 }
 async function loadMemberBook(db, bookId, actorId) {
   const book = await loadBook(db, bookId);
@@ -3697,14 +3746,14 @@ async function uploadAsset(ctx, req, bookId) {
     "internal",
     book.id
   );
-  const record6 = await ctx.db.storage.upload(
+  const record7 = await ctx.db.storage.upload(
     path,
     file,
     contentType,
     { private: true }
   );
-  if (record6.path !== path) {
-    await ctx.db.storage.delete(record6.path);
+  if (record7.path !== path) {
+    await ctx.db.storage.delete(record7.path);
     throw new BrandConflictError(
       "private storage returned an unexpected asset path"
     );
@@ -3723,11 +3772,11 @@ async function uploadAsset(ctx, req, bookId) {
       id,
       bookId: book.id,
       kind,
-      path: record6.path,
-      storageObjectId: record6.id,
+      path: record7.path,
+      storageObjectId: record7.id,
       contentDigest: await contentDigest(file),
       contentType,
-      size: record6.size,
+      size: record7.size,
       uploadedBy: ctx.actor.id,
       uploadedAuthorityRef: authority.authorityRef,
       audience: book.memberIds,
@@ -3754,7 +3803,7 @@ async function uploadAsset(ctx, req, bookId) {
       asPrincipalKind: "human"
     });
   } catch (error) {
-    await ctx.db.storage.delete(record6.path);
+    await ctx.db.storage.delete(record7.path);
     throw error;
   }
   return json(await linkedAsset(ctx, book, id), 201);
@@ -3869,7 +3918,7 @@ async function handleAssetItem(ctx, req, bookId, assetId) {
 async function handleBooksRoot(ctx, req) {
   if (req.method === "GET") {
     const res = await ctx.db.query({ [BRAND_NS.book]: { $: { order: { createdAt: "asc" } } } });
-    const books = (res[BRAND_NS.book] ?? []).filter(
+    const books = (res[BRAND_NS.book] ?? []).map((b) => rowAsWritten(BRAND_NS.book, b)).filter(
       (b) => isMember(b, ctx.actor.id)
     );
     return json({ books });
@@ -4034,7 +4083,7 @@ var SNAPSHOT_KEYS = [
   "reviewDigest",
   "status"
 ];
-var record3 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+var record4 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 function parseProposalResolutionRequest(body, bookId, proposalId) {
   const allowed = /* @__PURE__ */ new Set([
     "mutationId",
@@ -4078,13 +4127,13 @@ function proposalReviewSnapshot(proposal) {
 function parseReviewedProposal(value, bookId, proposalId) {
   if (!isBoundedBrandJson(value, { maxDepth: 12, maxNodes: 1500, maxBytes: 32 * 1024 }))
     throw new BrandInputError('"reviewedProposal" is too deeply nested, complex, or large');
-  if (!record3(value)) throw new BrandInputError('"reviewedProposal" must be an object');
+  if (!record4(value)) throw new BrandInputError('"reviewedProposal" must be an object');
   const keys = Object.keys(value).sort();
   if (keys.length !== SNAPSHOT_KEYS.length || !SNAPSHOT_KEYS.every((key, index) => key === keys[index])) throw new BrandInputError('"reviewedProposal" has an invalid shape');
   if (value.id !== proposalId || value.bookId !== bookId || value.status !== "open")
     throw new BrandInputError('"reviewedProposal" must identify this open proposal');
-  if (typeof value.kind !== "string" || !PROPOSAL_KINDS.includes(value.kind) || !record3(value.payload) || typeof value.rationale !== "string" || !Array.isArray(value.audience) || value.audience.length < 1 || value.audience.length > 100 || value.audience.some((id) => typeof id !== "string" || id.length < 1 || id.length > 200) || new Set(value.audience).size !== value.audience.length || typeof value.createdBy !== "string" || value.createdBy.length < 1 || value.createdBy.length > 200 || typeof value.createdAuthorityRef !== "string" || value.createdAuthorityRef.length < 1 || value.createdAuthorityRef.length > 200 || !Number.isSafeInteger(value.createdAt) || value.createdAt < 0 || typeof value.reviewDigest !== "string" || !/^sha256:[0-9a-f]{64}$/.test(value.reviewDigest)) throw new BrandInputError('"reviewedProposal" has invalid fields');
-  if (!record3(value.provenance) || Object.keys(value.provenance).sort().join(",") !== "messageId,sourceAsset,sourceAssetId,taintLabels,turnId" || value.provenance.sourceAssetId !== null && (typeof value.provenance.sourceAssetId !== "string" || value.provenance.sourceAssetId.length < 1 || value.provenance.sourceAssetId.length > 200) || value.provenance.sourceAsset !== null && (!record3(value.provenance.sourceAsset) || Object.keys(value.provenance.sourceAsset).sort().join(",") !== "analysisDigest,analysisRevision,assetId,contentDigest,contentType,objectEtag,objectSize,pathDigest" || typeof value.provenance.sourceAsset.assetId !== "string" || value.provenance.sourceAsset.assetId.length < 1 || value.provenance.sourceAsset.assetId.length > 200 || typeof value.provenance.sourceAsset.objectEtag !== "string" || value.provenance.sourceAsset.objectEtag.length < 1 || value.provenance.sourceAsset.objectEtag.length > 200 || !Number.isSafeInteger(value.provenance.sourceAsset.objectSize) || value.provenance.sourceAsset.objectSize < 1 || typeof value.provenance.sourceAsset.pathDigest !== "string" || !/^sha256:[0-9a-f]{64}$/.test(value.provenance.sourceAsset.pathDigest) || value.provenance.sourceAsset.contentType !== null && (typeof value.provenance.sourceAsset.contentType !== "string" || value.provenance.sourceAsset.contentType.length < 1 || value.provenance.sourceAsset.contentType.length > 160) || typeof value.provenance.sourceAsset.contentDigest !== "string" || !/^sha256:[0-9a-f]{64}$/.test(value.provenance.sourceAsset.contentDigest) || value.provenance.sourceAsset.analysisRevision !== null && (!Number.isSafeInteger(value.provenance.sourceAsset.analysisRevision) || value.provenance.sourceAsset.analysisRevision < 0) || value.provenance.sourceAsset.analysisDigest !== null && (typeof value.provenance.sourceAsset.analysisDigest !== "string" || !/^sha256:[0-9a-f]{64}$/.test(
+  if (typeof value.kind !== "string" || !PROPOSAL_KINDS.includes(value.kind) || !record4(value.payload) || typeof value.rationale !== "string" || !Array.isArray(value.audience) || value.audience.length < 1 || value.audience.length > 100 || value.audience.some((id) => typeof id !== "string" || id.length < 1 || id.length > 200) || new Set(value.audience).size !== value.audience.length || typeof value.createdBy !== "string" || value.createdBy.length < 1 || value.createdBy.length > 200 || typeof value.createdAuthorityRef !== "string" || value.createdAuthorityRef.length < 1 || value.createdAuthorityRef.length > 200 || !Number.isSafeInteger(value.createdAt) || value.createdAt < 0 || typeof value.reviewDigest !== "string" || !/^sha256:[0-9a-f]{64}$/.test(value.reviewDigest)) throw new BrandInputError('"reviewedProposal" has invalid fields');
+  if (!record4(value.provenance) || Object.keys(value.provenance).sort().join(",") !== "messageId,sourceAsset,sourceAssetId,taintLabels,turnId" || value.provenance.sourceAssetId !== null && (typeof value.provenance.sourceAssetId !== "string" || value.provenance.sourceAssetId.length < 1 || value.provenance.sourceAssetId.length > 200) || value.provenance.sourceAsset !== null && (!record4(value.provenance.sourceAsset) || Object.keys(value.provenance.sourceAsset).sort().join(",") !== "analysisDigest,analysisRevision,assetId,contentDigest,contentType,objectEtag,objectSize,pathDigest" || typeof value.provenance.sourceAsset.assetId !== "string" || value.provenance.sourceAsset.assetId.length < 1 || value.provenance.sourceAsset.assetId.length > 200 || typeof value.provenance.sourceAsset.objectEtag !== "string" || value.provenance.sourceAsset.objectEtag.length < 1 || value.provenance.sourceAsset.objectEtag.length > 200 || !Number.isSafeInteger(value.provenance.sourceAsset.objectSize) || value.provenance.sourceAsset.objectSize < 1 || typeof value.provenance.sourceAsset.pathDigest !== "string" || !/^sha256:[0-9a-f]{64}$/.test(value.provenance.sourceAsset.pathDigest) || value.provenance.sourceAsset.contentType !== null && (typeof value.provenance.sourceAsset.contentType !== "string" || value.provenance.sourceAsset.contentType.length < 1 || value.provenance.sourceAsset.contentType.length > 160) || typeof value.provenance.sourceAsset.contentDigest !== "string" || !/^sha256:[0-9a-f]{64}$/.test(value.provenance.sourceAsset.contentDigest) || value.provenance.sourceAsset.analysisRevision !== null && (!Number.isSafeInteger(value.provenance.sourceAsset.analysisRevision) || value.provenance.sourceAsset.analysisRevision < 0) || value.provenance.sourceAsset.analysisDigest !== null && (typeof value.provenance.sourceAsset.analysisDigest !== "string" || !/^sha256:[0-9a-f]{64}$/.test(
     value.provenance.sourceAsset.analysisDigest
   )) || value.provenance.sourceAsset.assetId !== value.provenance.sourceAssetId) || value.provenance.sourceAssetId === null !== (value.provenance.sourceAsset === null) || value.provenance.messageId !== null && (typeof value.provenance.messageId !== "string" || value.provenance.messageId.length < 1 || value.provenance.messageId.length > 200) || value.provenance.turnId !== null && (typeof value.provenance.turnId !== "string" || value.provenance.turnId.length < 1 || value.provenance.turnId.length > 200) || !Array.isArray(value.provenance.taintLabels) || value.provenance.taintLabels.length > 16 || value.provenance.taintLabels.some((label) => typeof label !== "string" || label.length < 1 || label.length > 120) || new Set(value.provenance.taintLabels).size !== value.provenance.taintLabels.length) throw new BrandInputError('"reviewedProposal.provenance" is invalid');
   return value;
@@ -4257,7 +4306,7 @@ async function proposalReceiptByMutation(ctx, mutationKey) {
   const row = (result[BRAND_NS.approvalReceipt] ?? [])[0];
   if (!row || !Array.isArray(row.book) || row.book.length !== 1 || row.book[0]?.id !== row.bookId) return void 0;
   const { book: _book, ...receipt2 } = row;
-  return receipt2;
+  return receiptAsWritten(receipt2);
 }
 async function consumeProposalAuthority(ctx, req, bookId, proposalId, actionDigest, mutationKey) {
   const authority = await ctx.consumeHumanExact({
@@ -4291,7 +4340,8 @@ async function receipt(ctx, id, actionDigest, expected) {
   });
   const row = (result[BRAND_NS.approvalReceipt] ?? [])[0];
   if (!row || row.actionDigest !== actionDigest || row.resolution !== "accepted" || row.bookId !== expected.bookId || row.reviewedProposal.bookId !== expected.bookId || row.reviewedProposal.kind !== expected.kind || !Array.isArray(row.book) || row.book.length !== 1 || row.book[0]?.id !== expected.bookId || expected.paletteId !== void 0 && row.paletteId !== expected.paletteId || expected.proposalId !== void 0 && row.proposalId !== expected.proposalId || expected.content !== void 0 && canonicalBrandJson(row.reviewedProposal.payload.content) !== canonicalBrandJson(expected.content)) throw new BrandConflictError(`approval receipt ${id} is invalid`);
-  const { book: _book, ...unhydrated } = row;
+  const { book: _book, ...stored } = row;
+  const unhydrated = receiptAsWritten(stored);
   if (!await verifyBrandApprovalReceipt(unhydrated))
     throw new BrandConflictError(`approval receipt ${id} is invalid`);
   return unhydrated;
@@ -4529,9 +4579,9 @@ async function proposalDecisionState(ctx, req, book, proposal, resolution, recei
 }
 
 // src/routes/proposals.ts
-var record4 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+var record5 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 var sameStrings2 = (left, right) => left.length === right.length && left.every((value, index) => value === right[index]);
-var guardFailure2 = (error) => record4(error) && error.code === "transact_guard_failed";
+var guardFailure2 = (error) => record5(error) && error.code === "transact_guard_failed";
 async function handleProposalResolution(ctx, req, bookId, proposalId) {
   if (req.method !== "POST") return methodNotAllowed();
   const book = await loadMemberBook(ctx.db, bookId, ctx.actor.id);
@@ -4578,7 +4628,7 @@ async function handleProposalResolution(ctx, req, bookId, proposalId) {
       book: {}
     }
   });
-  const proposal = (result[BRAND_NS.proposal] ?? [])[0];
+  const proposal = proposalAsWritten((result[BRAND_NS.proposal] ?? [])[0]);
   if (!proposal || proposal.bookId !== book.id || !Array.isArray(proposal.book) || proposal.book.length !== 1 || proposal.book[0]?.id !== book.id) throw new BrandNotFoundError(`proposal ${proposalId}`);
   const current = proposalReviewSnapshot(proposal);
   const { reviewDigest, ...unsignedReview } = current;
@@ -4711,7 +4761,7 @@ async function handleProposalResolution(ctx, req, bookId, proposalId) {
 }
 
 // src/routes/tokens.ts
-var record5 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+var record6 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 var missing = (bookId) => {
   throw new BrandNotFoundError(`compiled tokens for brand book ${bookId}`);
 };
@@ -4724,13 +4774,14 @@ async function acceptedReceipt(db, bookId, receiptId, actionDigest) {
   });
   const receipt2 = (result[BRAND_NS.approvalReceipt] ?? [])[0];
   if (!receipt2 || receipt2.resolution !== "accepted" || receipt2.actionDigest !== actionDigest || !Array.isArray(receipt2.book) || receipt2.book.length !== 1 || receipt2.book[0]?.id !== bookId) return missing(bookId);
-  const { book: _book, ...unhydrated } = receipt2;
+  const { book: _book, ...stored } = receipt2;
+  const unhydrated = receiptAsWritten(stored);
   if (!await verifyBrandApprovalReceipt(unhydrated)) return missing(bookId);
   return unhydrated;
 }
 async function approvedCache(db, book) {
   const cache = book.tokens;
-  if (!cache || !record5(cache.light) || !record5(cache.dark) || !book.activePaletteId || cache.paletteId !== book.activePaletteId || !cache.paletteReceiptId || !cache.paletteActionDigest || !cache.sourceDigest) return missing(book.id);
+  if (!cache || !record6(cache.light) || !record6(cache.dark) || !book.activePaletteId || cache.paletteId !== book.activePaletteId || !cache.paletteReceiptId || !cache.paletteActionDigest || !cache.sourceDigest) return missing(book.id);
   const paletteResult = await db.query({
     [BRAND_NS.palette]: {
       $: { where: { id: cache.paletteId, bookId: book.id } },