@odla-ai/brand 0.5.0 → 0.7.0

package/dist/index.d.cts

@@ -627,6 +627,33 @@ declare function assertAssetContentType(value: unknown, kind?: string): string;
  */
 declare function assertAnalysis(value: unknown): AssetAnalysis;
 
+/**
+ * A stored row in the shape it was WRITTEN, ready to verify.
+ *
+ * The engine stores a `date` as the epoch ms it was given and hands a reader
+ * ISO-8601 text back. Brand digests rows that CONTAIN dates — a proposal's
+ * `reviewDigest` covers its `createdAt`, and an approval receipt's
+ * `receiptDigest` covers its own — so a row read straight out of the store can
+ * never match the digest stored beside it. Two production symptoms, both 409:
+ * resolving any proposal ("proposal changed since review") and reading a book's
+ * tokens after approval.
+ *
+ * Normalising at the READ is the fix, not tolerating both shapes in the
+ * verifier. Tolerance would repair a `safeTime` check and leave the digest
+ * failing, because the digest was taken over the number and nothing can change
+ * that after the fact.
+ *
+ * Anything that is not date-shaped text passes through untouched, so a row that
+ * never round-tripped verifies exactly as before. `json` attrs are left alone:
+ * their contents round-trip as written, which is why an `authorityConsumption`
+ * and the `createdAt` beside it disagreed at all.
+ */
+declare function rowAsWritten<T>(ns: string, row: T): T;
+/** A stored approval receipt in the shape it was written. */
+declare function receiptAsWritten<T>(row: T): T;
+/** A stored proposal in the shape it was written, so `reviewDigest` matches. */
+declare function proposalAsWritten<T>(row: T): T;
+
 /** Stay materially below the server's whole-guards parser budget. */
 declare function isBoundedBrandJson(root: unknown, limits?: {
     maxDepth?: number;
@@ -1874,4 +1901,4 @@ interface CreateBrandIntegrationOptions {
  */
 declare function createBrandIntegration(options?: CreateBrandIntegrationOptions): BrandIntegrationDescriptor;
 
-export { ASSET_CONTENT_TYPES, type AcceptProposalInput, AssetAnalysis, AssetKind, type AttrType, type AudienceChildren, BRAND_AGENT_PROFILE, BRAND_DISCUSSION_REFERENCE_KINDS, BRAND_INSTRUCTIONS, BRAND_RULES, BRAND_SCHEMA, BookStatus, type BrandActor, type BrandAgentBridge, type BrandAgentProfile, type BrandApprovalReceipt, type BrandAsset, type BrandAttrs, type BrandBook, type BrandBotTriggerOpts, type BrandCapabilityAuthority, BrandConflictError, type BrandDb, type BrandDecisionBinding, type BrandDeps, type BrandDiscussionReference, type BrandDiscussionReferenceKind, type BrandDiscussionReferenceTarget, type BrandDiscussionSwatch, type BrandDispatchBody, type BrandDispatchDeps, type BrandEntityRef, type BrandFetchedBytes, type BrandFileRecord, BrandForbiddenError, BrandGoneError, type BrandHumanAuthorityConsumption, BrandInputError, type BrandIntegrationDescriptor, type BrandIntegrationProbe, type BrandLookup, BrandNotFoundError, type BrandOp, type BrandPalette, type BrandPrincipalProjection, type BrandProposal, type BrandProposalProvenance, type BrandProposalReviewSnapshot, type BrandResult, BrandReviewStateChangedError, type BrandRouteCtx, type BrandRouteOpts, type BrandRow, type BrandRule, type BrandRules, type BrandScalar, type BrandSection, type BrandSkillOpts, type BrandSkillSelf, type BrandSourceAssetSnapshot, type BrandStorage, BrandTokensSnapshot, type BrandToolCtx, type BrandTransactGuard, type BrandTransactOptions, type BrandTrigger, type BrandUploadBody, type BrandVisionCapabilities, type BrandVisionSpec, CHART_DELTA_MIN, CHAT_MESSAGE_NS, CSS_NAMED_COLORS, type ContrastKind, type CreateAssetInput, type CreateBookInput, type CreateBrandIntegrationOptions, type CreateBrandPersonaOpts, DEFAULT_BRAND_SYSTEM, DESIGN_CONTENT_TYPES, type DeriveChartOptions, type DerivePaletteOptions, type DesignAssetGroup, type DesignBundle, type DesignBundleAsset, type DesignColorUse, type DesignDecompilation, type DesignDigest, type DesignManifestEntry, type DesignOutlineEntry, type DesignProp, type DesignTokenSets, type DesignTokenSkip, type Hsl, type IntegrationProvision, type IntegrationSecret, type IntegrationSetting, type LightnessDirection, MAX_COLORS, MAX_EXTERNALS, MAX_FONTS, MAX_HEADING_CHARS, MAX_OUTLINE_ENTRIES, MAX_PROPS, MAX_SWATCHES, MAX_THUMBNAIL_CHARS, MAX_VIEW_BYTES, type NamedColor, type NearestNamedColor, type Oklab, type Oklch, PICK_TEXT_DEFAULT_CANDIDATES, PaletteSource, PaletteStatus, ProposalKind, ProposalStatus, type ProposePaletteInput, type ProposeSectionInput, RAMP_L_MAX, RAMP_L_MIN, type RejectProposalInput, type ResolvedBrandDeps, type Rgb, type ScannedDeclaration, SectionKind, SectionStatus, type SerializedAttr, type SerializedEntity, type SerializedLink, type SerializedLinkEnd, type SerializedSchema, Swatch, SwatchRole, type UpsertSectionInput, acceptProposalOps, adjustLightnessUntil, analogous, assertAnalysis, assertAssetContentType, assertHex, assertSectionContent, assertSwatches, assetTools, attachedBrandAssetIds, audienceFanoutOps, base64ByteLength, base64FromBytes, beginAssetDeleteOps, bookForChannel, bookTools, brandAuthorityRef, brandBotTrigger, brandDiscussionReferenceHref, brandDiscussionReferenceId, brandInputFor, brandIntegration, brandJsonDigest, brandRules, brandSkill, canonicalBrandJson, capString, capStringArray, clamp01, clampToGamut, collapseWhitespace, complementary, contrastRatio, contrastReport, createAssetOps, createBookOps, createBrandIntegration, createBrandPersona, createBrandRoutes, cssColorToHex, decodeEntities, deltaEOK, deltaEOKLab, deriveChartColors, derivePalette, digestDesignBundle, digestDesignHtml, dispatchBrandTurn, extractColors, extractDesignTokens, extractFonts, extractOutline, extractProps, extractThumbnailSvg, extractTitle, finishAssetDeleteOps, formatBrandDiscussionReference, groupAssets, hexToOklch, hslToRgb, htmlToText, inSrgbGamut, isBoundedBrandJson, isBrandHumanAuthorityConsumption, isDesignBundle, linearToSrgb, meetsAA, meetsAAA, monochrome, nearestNamedColor, normalizeHex, oklabToOklch, oklabToRgb, oklchToHex, oklchToOklab, paletteTools, parseBrandDiscussionReference, parseBrandDispatch, parseDesignBundle, parseHex, pickTextOn, proposalReviewSnapshot, proposePaletteOps, proposeSectionOps, readDesignManifest, readTools, recordAnalysisOps, rejectProposalOps, relativeLuminance, resolveDeps, resolveVarRefs, rgbToHsl, rgbToOklab, rotateHue, safeFileName, scanCustomProperties, sectionKey, splitComplementary, srgbToLinear, stripCssComments, styleSheetText, supportsBrandVision, swatchesFromDesignTokens, tetradic, tintShadeRamp, toHex, triadic, updateBookOps, upsertSectionOps, verifyBrandApprovalReceipt };
+export { ASSET_CONTENT_TYPES, type AcceptProposalInput, AssetAnalysis, AssetKind, type AttrType, type AudienceChildren, BRAND_AGENT_PROFILE, BRAND_DISCUSSION_REFERENCE_KINDS, BRAND_INSTRUCTIONS, BRAND_RULES, BRAND_SCHEMA, BookStatus, type BrandActor, type BrandAgentBridge, type BrandAgentProfile, type BrandApprovalReceipt, type BrandAsset, type BrandAttrs, type BrandBook, type BrandBotTriggerOpts, type BrandCapabilityAuthority, BrandConflictError, type BrandDb, type BrandDecisionBinding, type BrandDeps, type BrandDiscussionReference, type BrandDiscussionReferenceKind, type BrandDiscussionReferenceTarget, type BrandDiscussionSwatch, type BrandDispatchBody, type BrandDispatchDeps, type BrandEntityRef, type BrandFetchedBytes, type BrandFileRecord, BrandForbiddenError, BrandGoneError, type BrandHumanAuthorityConsumption, BrandInputError, type BrandIntegrationDescriptor, type BrandIntegrationProbe, type BrandLookup, BrandNotFoundError, type BrandOp, type BrandPalette, type BrandPrincipalProjection, type BrandProposal, type BrandProposalProvenance, type BrandProposalReviewSnapshot, type BrandResult, BrandReviewStateChangedError, type BrandRouteCtx, type BrandRouteOpts, type BrandRow, type BrandRule, type BrandRules, type BrandScalar, type BrandSection, type BrandSkillOpts, type BrandSkillSelf, type BrandSourceAssetSnapshot, type BrandStorage, BrandTokensSnapshot, type BrandToolCtx, type BrandTransactGuard, type BrandTransactOptions, type BrandTrigger, type BrandUploadBody, type BrandVisionCapabilities, type BrandVisionSpec, CHART_DELTA_MIN, CHAT_MESSAGE_NS, CSS_NAMED_COLORS, type ContrastKind, type CreateAssetInput, type CreateBookInput, type CreateBrandIntegrationOptions, type CreateBrandPersonaOpts, DEFAULT_BRAND_SYSTEM, DESIGN_CONTENT_TYPES, type DeriveChartOptions, type DerivePaletteOptions, type DesignAssetGroup, type DesignBundle, type DesignBundleAsset, type DesignColorUse, type DesignDecompilation, type DesignDigest, type DesignManifestEntry, type DesignOutlineEntry, type DesignProp, type DesignTokenSets, type DesignTokenSkip, type Hsl, type IntegrationProvision, type IntegrationSecret, type IntegrationSetting, type LightnessDirection, MAX_COLORS, MAX_EXTERNALS, MAX_FONTS, MAX_HEADING_CHARS, MAX_OUTLINE_ENTRIES, MAX_PROPS, MAX_SWATCHES, MAX_THUMBNAIL_CHARS, MAX_VIEW_BYTES, type NamedColor, type NearestNamedColor, type Oklab, type Oklch, PICK_TEXT_DEFAULT_CANDIDATES, PaletteSource, PaletteStatus, ProposalKind, ProposalStatus, type ProposePaletteInput, type ProposeSectionInput, RAMP_L_MAX, RAMP_L_MIN, type RejectProposalInput, type ResolvedBrandDeps, type Rgb, type ScannedDeclaration, SectionKind, SectionStatus, type SerializedAttr, type SerializedEntity, type SerializedLink, type SerializedLinkEnd, type SerializedSchema, Swatch, SwatchRole, type UpsertSectionInput, acceptProposalOps, adjustLightnessUntil, analogous, assertAnalysis, assertAssetContentType, assertHex, assertSectionContent, assertSwatches, assetTools, attachedBrandAssetIds, audienceFanoutOps, base64ByteLength, base64FromBytes, beginAssetDeleteOps, bookForChannel, bookTools, brandAuthorityRef, brandBotTrigger, brandDiscussionReferenceHref, brandDiscussionReferenceId, brandInputFor, brandIntegration, brandJsonDigest, brandRules, brandSkill, canonicalBrandJson, capString, capStringArray, clamp01, clampToGamut, collapseWhitespace, complementary, contrastRatio, contrastReport, createAssetOps, createBookOps, createBrandIntegration, createBrandPersona, createBrandRoutes, cssColorToHex, decodeEntities, deltaEOK, deltaEOKLab, deriveChartColors, derivePalette, digestDesignBundle, digestDesignHtml, dispatchBrandTurn, extractColors, extractDesignTokens, extractFonts, extractOutline, extractProps, extractThumbnailSvg, extractTitle, finishAssetDeleteOps, formatBrandDiscussionReference, groupAssets, hexToOklch, hslToRgb, htmlToText, inSrgbGamut, isBoundedBrandJson, isBrandHumanAuthorityConsumption, isDesignBundle, linearToSrgb, meetsAA, meetsAAA, monochrome, nearestNamedColor, normalizeHex, oklabToOklch, oklabToRgb, oklchToHex, oklchToOklab, paletteTools, parseBrandDiscussionReference, parseBrandDispatch, parseDesignBundle, parseHex, pickTextOn, proposalAsWritten, proposalReviewSnapshot, proposePaletteOps, proposeSectionOps, readDesignManifest, readTools, receiptAsWritten, recordAnalysisOps, rejectProposalOps, relativeLuminance, resolveDeps, resolveVarRefs, rgbToHsl, rgbToOklab, rotateHue, rowAsWritten, safeFileName, scanCustomProperties, sectionKey, splitComplementary, srgbToLinear, stripCssComments, styleSheetText, supportsBrandVision, swatchesFromDesignTokens, tetradic, tintShadeRamp, toHex, triadic, updateBookOps, upsertSectionOps, verifyBrandApprovalReceipt };

package/dist/index.d.ts

@@ -627,6 +627,33 @@ declare function assertAssetContentType(value: unknown, kind?: string): string;
  */
 declare function assertAnalysis(value: unknown): AssetAnalysis;
 
+/**
+ * A stored row in the shape it was WRITTEN, ready to verify.
+ *
+ * The engine stores a `date` as the epoch ms it was given and hands a reader
+ * ISO-8601 text back. Brand digests rows that CONTAIN dates — a proposal's
+ * `reviewDigest` covers its `createdAt`, and an approval receipt's
+ * `receiptDigest` covers its own — so a row read straight out of the store can
+ * never match the digest stored beside it. Two production symptoms, both 409:
+ * resolving any proposal ("proposal changed since review") and reading a book's
+ * tokens after approval.
+ *
+ * Normalising at the READ is the fix, not tolerating both shapes in the
+ * verifier. Tolerance would repair a `safeTime` check and leave the digest
+ * failing, because the digest was taken over the number and nothing can change
+ * that after the fact.
+ *
+ * Anything that is not date-shaped text passes through untouched, so a row that
+ * never round-tripped verifies exactly as before. `json` attrs are left alone:
+ * their contents round-trip as written, which is why an `authorityConsumption`
+ * and the `createdAt` beside it disagreed at all.
+ */
+declare function rowAsWritten<T>(ns: string, row: T): T;
+/** A stored approval receipt in the shape it was written. */
+declare function receiptAsWritten<T>(row: T): T;
+/** A stored proposal in the shape it was written, so `reviewDigest` matches. */
+declare function proposalAsWritten<T>(row: T): T;
+
 /** Stay materially below the server's whole-guards parser budget. */
 declare function isBoundedBrandJson(root: unknown, limits?: {
     maxDepth?: number;
@@ -1874,4 +1901,4 @@ interface CreateBrandIntegrationOptions {
  */
 declare function createBrandIntegration(options?: CreateBrandIntegrationOptions): BrandIntegrationDescriptor;
 
-export { ASSET_CONTENT_TYPES, type AcceptProposalInput, AssetAnalysis, AssetKind, type AttrType, type AudienceChildren, BRAND_AGENT_PROFILE, BRAND_DISCUSSION_REFERENCE_KINDS, BRAND_INSTRUCTIONS, BRAND_RULES, BRAND_SCHEMA, BookStatus, type BrandActor, type BrandAgentBridge, type BrandAgentProfile, type BrandApprovalReceipt, type BrandAsset, type BrandAttrs, type BrandBook, type BrandBotTriggerOpts, type BrandCapabilityAuthority, BrandConflictError, type BrandDb, type BrandDecisionBinding, type BrandDeps, type BrandDiscussionReference, type BrandDiscussionReferenceKind, type BrandDiscussionReferenceTarget, type BrandDiscussionSwatch, type BrandDispatchBody, type BrandDispatchDeps, type BrandEntityRef, type BrandFetchedBytes, type BrandFileRecord, BrandForbiddenError, BrandGoneError, type BrandHumanAuthorityConsumption, BrandInputError, type BrandIntegrationDescriptor, type BrandIntegrationProbe, type BrandLookup, BrandNotFoundError, type BrandOp, type BrandPalette, type BrandPrincipalProjection, type BrandProposal, type BrandProposalProvenance, type BrandProposalReviewSnapshot, type BrandResult, BrandReviewStateChangedError, type BrandRouteCtx, type BrandRouteOpts, type BrandRow, type BrandRule, type BrandRules, type BrandScalar, type BrandSection, type BrandSkillOpts, type BrandSkillSelf, type BrandSourceAssetSnapshot, type BrandStorage, BrandTokensSnapshot, type BrandToolCtx, type BrandTransactGuard, type BrandTransactOptions, type BrandTrigger, type BrandUploadBody, type BrandVisionCapabilities, type BrandVisionSpec, CHART_DELTA_MIN, CHAT_MESSAGE_NS, CSS_NAMED_COLORS, type ContrastKind, type CreateAssetInput, type CreateBookInput, type CreateBrandIntegrationOptions, type CreateBrandPersonaOpts, DEFAULT_BRAND_SYSTEM, DESIGN_CONTENT_TYPES, type DeriveChartOptions, type DerivePaletteOptions, type DesignAssetGroup, type DesignBundle, type DesignBundleAsset, type DesignColorUse, type DesignDecompilation, type DesignDigest, type DesignManifestEntry, type DesignOutlineEntry, type DesignProp, type DesignTokenSets, type DesignTokenSkip, type Hsl, type IntegrationProvision, type IntegrationSecret, type IntegrationSetting, type LightnessDirection, MAX_COLORS, MAX_EXTERNALS, MAX_FONTS, MAX_HEADING_CHARS, MAX_OUTLINE_ENTRIES, MAX_PROPS, MAX_SWATCHES, MAX_THUMBNAIL_CHARS, MAX_VIEW_BYTES, type NamedColor, type NearestNamedColor, type Oklab, type Oklch, PICK_TEXT_DEFAULT_CANDIDATES, PaletteSource, PaletteStatus, ProposalKind, ProposalStatus, type ProposePaletteInput, type ProposeSectionInput, RAMP_L_MAX, RAMP_L_MIN, type RejectProposalInput, type ResolvedBrandDeps, type Rgb, type ScannedDeclaration, SectionKind, SectionStatus, type SerializedAttr, type SerializedEntity, type SerializedLink, type SerializedLinkEnd, type SerializedSchema, Swatch, SwatchRole, type UpsertSectionInput, acceptProposalOps, adjustLightnessUntil, analogous, assertAnalysis, assertAssetContentType, assertHex, assertSectionContent, assertSwatches, assetTools, attachedBrandAssetIds, audienceFanoutOps, base64ByteLength, base64FromBytes, beginAssetDeleteOps, bookForChannel, bookTools, brandAuthorityRef, brandBotTrigger, brandDiscussionReferenceHref, brandDiscussionReferenceId, brandInputFor, brandIntegration, brandJsonDigest, brandRules, brandSkill, canonicalBrandJson, capString, capStringArray, clamp01, clampToGamut, collapseWhitespace, complementary, contrastRatio, contrastReport, createAssetOps, createBookOps, createBrandIntegration, createBrandPersona, createBrandRoutes, cssColorToHex, decodeEntities, deltaEOK, deltaEOKLab, deriveChartColors, derivePalette, digestDesignBundle, digestDesignHtml, dispatchBrandTurn, extractColors, extractDesignTokens, extractFonts, extractOutline, extractProps, extractThumbnailSvg, extractTitle, finishAssetDeleteOps, formatBrandDiscussionReference, groupAssets, hexToOklch, hslToRgb, htmlToText, inSrgbGamut, isBoundedBrandJson, isBrandHumanAuthorityConsumption, isDesignBundle, linearToSrgb, meetsAA, meetsAAA, monochrome, nearestNamedColor, normalizeHex, oklabToOklch, oklabToRgb, oklchToHex, oklchToOklab, paletteTools, parseBrandDiscussionReference, parseBrandDispatch, parseDesignBundle, parseHex, pickTextOn, proposalReviewSnapshot, proposePaletteOps, proposeSectionOps, readDesignManifest, readTools, recordAnalysisOps, rejectProposalOps, relativeLuminance, resolveDeps, resolveVarRefs, rgbToHsl, rgbToOklab, rotateHue, safeFileName, scanCustomProperties, sectionKey, splitComplementary, srgbToLinear, stripCssComments, styleSheetText, supportsBrandVision, swatchesFromDesignTokens, tetradic, tintShadeRamp, toHex, triadic, updateBookOps, upsertSectionOps, verifyBrandApprovalReceipt };
+export { ASSET_CONTENT_TYPES, type AcceptProposalInput, AssetAnalysis, AssetKind, type AttrType, type AudienceChildren, BRAND_AGENT_PROFILE, BRAND_DISCUSSION_REFERENCE_KINDS, BRAND_INSTRUCTIONS, BRAND_RULES, BRAND_SCHEMA, BookStatus, type BrandActor, type BrandAgentBridge, type BrandAgentProfile, type BrandApprovalReceipt, type BrandAsset, type BrandAttrs, type BrandBook, type BrandBotTriggerOpts, type BrandCapabilityAuthority, BrandConflictError, type BrandDb, type BrandDecisionBinding, type BrandDeps, type BrandDiscussionReference, type BrandDiscussionReferenceKind, type BrandDiscussionReferenceTarget, type BrandDiscussionSwatch, type BrandDispatchBody, type BrandDispatchDeps, type BrandEntityRef, type BrandFetchedBytes, type BrandFileRecord, BrandForbiddenError, BrandGoneError, type BrandHumanAuthorityConsumption, BrandInputError, type BrandIntegrationDescriptor, type BrandIntegrationProbe, type BrandLookup, BrandNotFoundError, type BrandOp, type BrandPalette, type BrandPrincipalProjection, type BrandProposal, type BrandProposalProvenance, type BrandProposalReviewSnapshot, type BrandResult, BrandReviewStateChangedError, type BrandRouteCtx, type BrandRouteOpts, type BrandRow, type BrandRule, type BrandRules, type BrandScalar, type BrandSection, type BrandSkillOpts, type BrandSkillSelf, type BrandSourceAssetSnapshot, type BrandStorage, BrandTokensSnapshot, type BrandToolCtx, type BrandTransactGuard, type BrandTransactOptions, type BrandTrigger, type BrandUploadBody, type BrandVisionCapabilities, type BrandVisionSpec, CHART_DELTA_MIN, CHAT_MESSAGE_NS, CSS_NAMED_COLORS, type ContrastKind, type CreateAssetInput, type CreateBookInput, type CreateBrandIntegrationOptions, type CreateBrandPersonaOpts, DEFAULT_BRAND_SYSTEM, DESIGN_CONTENT_TYPES, type DeriveChartOptions, type DerivePaletteOptions, type DesignAssetGroup, type DesignBundle, type DesignBundleAsset, type DesignColorUse, type DesignDecompilation, type DesignDigest, type DesignManifestEntry, type DesignOutlineEntry, type DesignProp, type DesignTokenSets, type DesignTokenSkip, type Hsl, type IntegrationProvision, type IntegrationSecret, type IntegrationSetting, type LightnessDirection, MAX_COLORS, MAX_EXTERNALS, MAX_FONTS, MAX_HEADING_CHARS, MAX_OUTLINE_ENTRIES, MAX_PROPS, MAX_SWATCHES, MAX_THUMBNAIL_CHARS, MAX_VIEW_BYTES, type NamedColor, type NearestNamedColor, type Oklab, type Oklch, PICK_TEXT_DEFAULT_CANDIDATES, PaletteSource, PaletteStatus, ProposalKind, ProposalStatus, type ProposePaletteInput, type ProposeSectionInput, RAMP_L_MAX, RAMP_L_MIN, type RejectProposalInput, type ResolvedBrandDeps, type Rgb, type ScannedDeclaration, SectionKind, SectionStatus, type SerializedAttr, type SerializedEntity, type SerializedLink, type SerializedLinkEnd, type SerializedSchema, Swatch, SwatchRole, type UpsertSectionInput, acceptProposalOps, adjustLightnessUntil, analogous, assertAnalysis, assertAssetContentType, assertHex, assertSectionContent, assertSwatches, assetTools, attachedBrandAssetIds, audienceFanoutOps, base64ByteLength, base64FromBytes, beginAssetDeleteOps, bookForChannel, bookTools, brandAuthorityRef, brandBotTrigger, brandDiscussionReferenceHref, brandDiscussionReferenceId, brandInputFor, brandIntegration, brandJsonDigest, brandRules, brandSkill, canonicalBrandJson, capString, capStringArray, clamp01, clampToGamut, collapseWhitespace, complementary, contrastRatio, contrastReport, createAssetOps, createBookOps, createBrandIntegration, createBrandPersona, createBrandRoutes, cssColorToHex, decodeEntities, deltaEOK, deltaEOKLab, deriveChartColors, derivePalette, digestDesignBundle, digestDesignHtml, dispatchBrandTurn, extractColors, extractDesignTokens, extractFonts, extractOutline, extractProps, extractThumbnailSvg, extractTitle, finishAssetDeleteOps, formatBrandDiscussionReference, groupAssets, hexToOklch, hslToRgb, htmlToText, inSrgbGamut, isBoundedBrandJson, isBrandHumanAuthorityConsumption, isDesignBundle, linearToSrgb, meetsAA, meetsAAA, monochrome, nearestNamedColor, normalizeHex, oklabToOklch, oklabToRgb, oklchToHex, oklchToOklab, paletteTools, parseBrandDiscussionReference, parseBrandDispatch, parseDesignBundle, parseHex, pickTextOn, proposalAsWritten, proposalReviewSnapshot, proposePaletteOps, proposeSectionOps, readDesignManifest, readTools, receiptAsWritten, recordAnalysisOps, rejectProposalOps, relativeLuminance, resolveDeps, resolveVarRefs, rgbToHsl, rgbToOklab, rotateHue, rowAsWritten, safeFileName, scanCustomProperties, sectionKey, splitComplementary, srgbToLinear, stripCssComments, styleSheetText, supportsBrandVision, swatchesFromDesignTokens, tetradic, tintShadeRamp, toHex, triadic, updateBookOps, upsertSectionOps, verifyBrandApprovalReceipt };

package/dist/index.js

@@ -154,24 +154,6 @@ var BrandReviewStateChangedError = class extends BrandConflictError {
   }
 };
 
-// src/deps.ts
-async function defaultFetchBytes(url) {
-  const res = await fetch(url);
-  if (!res.ok) throw new Error(`asset fetch failed: ${res.status} for ${url}`);
-  return {
-    bytes: new Uint8Array(await res.arrayBuffer()),
-    contentType: res.headers.get("content-type") ?? "application/octet-stream"
-  };
-}
-function resolveDeps(deps) {
-  return {
-    db: deps.db,
-    now: deps.now ?? Date.now,
-    newId: deps.newId ?? (() => crypto.randomUUID()),
-    fetchBytes: deps.fetchBytes ?? defaultFetchBytes
-  };
-}
-
 // src/schema.ts
 var a = (type, o = {}) => ({
   type,
@@ -358,6 +340,70 @@ var BRAND_SCHEMA = {
   }
 };
 
+// src/read-shape.ts
+var record = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+var DATE_FIELDS = /* @__PURE__ */ new Map();
+for (const [ns, entity] of Object.entries(BRAND_SCHEMA.entities))
+  DATE_FIELDS.set(
+    ns,
+    new Set(
+      Object.entries(entity.attrs).filter(([, attr]) => attr.type === "date").map(([label]) => label)
+    )
+  );
+function rowAsWritten(ns, row) {
+  const dates = DATE_FIELDS.get(ns);
+  if (!dates?.size || !record(row)) return row;
+  let changed = false;
+  const out = { ...row };
+  for (const field of dates) {
+    const value = out[field];
+    if (typeof value !== "string") continue;
+    const parsed = Date.parse(value);
+    if (!Number.isSafeInteger(parsed) || parsed < 0) continue;
+    out[field] = parsed;
+    changed = true;
+  }
+  return changed ? out : row;
+}
+function receiptAsWritten(row) {
+  return rowAsWritten(BRAND_NS.approvalReceipt, row);
+}
+function proposalAsWritten(row) {
+  return rowAsWritten(BRAND_NS.proposal, row);
+}
+function resultAsWritten(result) {
+  const out = { ...result };
+  for (const [ns, rows] of Object.entries(out)) {
+    if (Array.isArray(rows)) out[ns] = rows.map((row) => rowAsWritten(ns, row));
+  }
+  return out;
+}
+
+// src/deps.ts
+async function defaultFetchBytes(url) {
+  const res = await fetch(url);
+  if (!res.ok) throw new Error(`asset fetch failed: ${res.status} for ${url}`);
+  return {
+    bytes: new Uint8Array(await res.arrayBuffer()),
+    contentType: res.headers.get("content-type") ?? "application/octet-stream"
+  };
+}
+function readingAsWritten(db) {
+  return {
+    query: async (q) => resultAsWritten(await db.query(q)),
+    transact: (ops, opts) => db.transact(ops, opts),
+    storage: db.storage
+  };
+}
+function resolveDeps(deps) {
+  return {
+    db: readingAsWritten(deps.db),
+    now: deps.now ?? Date.now,
+    newId: deps.newId ?? (() => crypto.randomUUID()),
+    fetchBytes: deps.fetchBytes ?? defaultFetchBytes
+  };
+}
+
 // src/rules.ts
 var CURRENT_BOOK_MEMBER = "ref('book.memberIds').exists(members, auth.id in members)";
 var BRAND_RULES = {
@@ -559,7 +605,7 @@ function assertAnalysis(value) {
 }
 
 // src/review-json.ts
-var record = (value) => typeof value === "object" && value !== null && !Array.isArray(value) && (Object.getPrototypeOf(value) === Object.prototype || Object.getPrototypeOf(value) === null);
+var record2 = (value) => typeof value === "object" && value !== null && !Array.isArray(value) && (Object.getPrototypeOf(value) === Object.prototype || Object.getPrototypeOf(value) === null);
 function isBoundedBrandJson(root, limits = {}) {
   const maxDepth = limits.maxDepth ?? 12;
   const maxNodes = limits.maxNodes ?? 2048;
@@ -583,7 +629,7 @@ function isBoundedBrandJson(root, limits = {}) {
     if (Array.isArray(value)) {
       for (const child of value)
         stack.push({ value: child, depth: depth + 1 });
-    } else if (record(value)) {
+    } else if (record2(value)) {
       for (const child of Object.values(value))
         stack.push({ value: child, depth: depth + 1 });
     } else {
@@ -620,7 +666,7 @@ async function brandJsonDigest(value) {
 
 // src/review.ts
 var DIGEST = /^sha256:[0-9a-f]{64}$/;
-var record2 = (value) => typeof value === "object" && value !== null && !Array.isArray(value) && (Object.getPrototypeOf(value) === Object.prototype || Object.getPrototypeOf(value) === null);
+var record3 = (value) => typeof value === "object" && value !== null && !Array.isArray(value) && (Object.getPrototypeOf(value) === Object.prototype || Object.getPrototypeOf(value) === null);
 var exactKeys = (value, required, optional = []) => {
   const allowed = /* @__PURE__ */ new Set([...required, ...optional]);
   return required.every((key) => Object.hasOwn(value, key)) && Object.keys(value).every((key) => allowed.has(key));
@@ -645,15 +691,15 @@ var SNAPSHOT_REQUIRED = [
   "createdAt"
 ];
 function validSnapshotShape(value) {
-  if (!record2(value) || !exactKeys(value, SNAPSHOT_REQUIRED)) return false;
+  if (!record3(value) || !exactKeys(value, SNAPSHOT_REQUIRED)) return false;
   const provenance = value.provenance;
-  return boundedString(value.id) && boundedString(value.bookId) && typeof value.kind === "string" && PROPOSAL_KINDS.includes(value.kind) && value.status === "open" && record2(value.payload) && boundedString(value.rationale, 2e3) && record2(provenance) && exactKeys(provenance, [
+  return boundedString(value.id) && boundedString(value.bookId) && typeof value.kind === "string" && PROPOSAL_KINDS.includes(value.kind) && value.status === "open" && record3(value.payload) && boundedString(value.rationale, 2e3) && record3(provenance) && exactKeys(provenance, [
     "sourceAssetId",
     "sourceAsset",
     "messageId",
     "turnId",
     "taintLabels"
-  ]) && (provenance.sourceAssetId === null || boundedString(provenance.sourceAssetId)) && (provenance.sourceAsset === null || record2(provenance.sourceAsset) && exactKeys(provenance.sourceAsset, [
+  ]) && (provenance.sourceAssetId === null || boundedString(provenance.sourceAssetId)) && (provenance.sourceAsset === null || record3(provenance.sourceAsset) && exactKeys(provenance.sourceAsset, [
     "assetId",
     "contentDigest",
     "objectEtag",
@@ -686,8 +732,8 @@ var CONSUMPTION_REQUIRED = [
   "consumedAt"
 ];
 function isBrandHumanAuthorityConsumption(value) {
-  if (!record2(value) || !exactKeys(value, CONSUMPTION_REQUIRED)) return false;
-  return boundedString(value.id) && boundedString(value.grantId) && Number.isSafeInteger(value.grantVersion) && value.grantVersion > 0 && Number.isSafeInteger(value.useNumber) && value.useNumber > 0 && boundedString(value.actorPrincipalId) && value.actorKind === "human" && boundedString(value.credentialId) && value.credentialKind === "clerk" && boundedString(value.appId) && typeof value.appIncarnation === "string" && /^[a-f0-9]{32}$/.test(value.appIncarnation) && value.capability === "brand.proposal.resolve" && value.projectCapability === "brand.approve" && value.effect === "internal" && typeof value.actionDigest === "string" && DIGEST.test(value.actionDigest) && typeof value.resourceDigest === "string" && DIGEST.test(value.resourceDigest) && record2(value.constraintEvidence) && boundedString(value.consumptionIdempotencyKey) && typeof value.requestDigest === "string" && DIGEST.test(value.requestDigest) && safeTime(value.consumedAt);
+  if (!record3(value) || !exactKeys(value, CONSUMPTION_REQUIRED)) return false;
+  return boundedString(value.id) && boundedString(value.grantId) && Number.isSafeInteger(value.grantVersion) && value.grantVersion > 0 && Number.isSafeInteger(value.useNumber) && value.useNumber > 0 && boundedString(value.actorPrincipalId) && value.actorKind === "human" && boundedString(value.credentialId) && value.credentialKind === "clerk" && boundedString(value.appId) && typeof value.appIncarnation === "string" && /^[a-f0-9]{32}$/.test(value.appIncarnation) && value.capability === "brand.proposal.resolve" && value.projectCapability === "brand.approve" && value.effect === "internal" && typeof value.actionDigest === "string" && DIGEST.test(value.actionDigest) && typeof value.resourceDigest === "string" && DIGEST.test(value.resourceDigest) && record3(value.constraintEvidence) && boundedString(value.consumptionIdempotencyKey) && typeof value.requestDigest === "string" && DIGEST.test(value.requestDigest) && safeTime(value.consumedAt);
 }
 var RECEIPT_REQUIRED = [
   "version",
@@ -713,10 +759,10 @@ async function verifyBrandApprovalReceipt(receipt2) {
   try {
     if (!isBoundedBrandJson(receipt2, { maxDepth: 14, maxNodes: 2500, maxBytes: 48 * 1024 }))
       return false;
-    if (!record2(receipt2) || !exactKeys(receipt2, RECEIPT_REQUIRED, ["paletteId", "resolutionNote"]))
+    if (!record3(receipt2) || !exactKeys(receipt2, RECEIPT_REQUIRED, ["paletteId", "resolutionNote"]))
       return false;
     const binding = receipt2.decisionBinding;
-    if (receipt2.version !== 1 || !boundedString(receipt2.id) || !boundedString(receipt2.mutationKey) || !boundedString(receipt2.bookId) || !boundedString(receipt2.proposalId) || receipt2.resolution !== "accepted" && receipt2.resolution !== "rejected" || !validSnapshotShape(receipt2.reviewedProposal) || typeof receipt2.actionDigest !== "string" || !DIGEST.test(receipt2.actionDigest) || !record2(binding) || !exactKeys(binding, [
+    if (receipt2.version !== 1 || !boundedString(receipt2.id) || !boundedString(receipt2.mutationKey) || !boundedString(receipt2.bookId) || !boundedString(receipt2.proposalId) || receipt2.resolution !== "accepted" && receipt2.resolution !== "rejected" || !validSnapshotShape(receipt2.reviewedProposal) || typeof receipt2.actionDigest !== "string" || !DIGEST.test(receipt2.actionDigest) || !record3(binding) || !exactKeys(binding, [
       "version",
       "bookVersion",
       "activationRevision",
@@ -2481,7 +2527,7 @@ async function linkedAsset(ctx, book, assetId, allowDeleting = false) {
       book: {}
     }
   });
-  const row = (result[BRAND_NS.asset] ?? [])[0];
+  const row = rowAsWritten(BRAND_NS.asset, (result[BRAND_NS.asset] ?? [])[0]);
   const links = row?.book;
   if (!row || row.bookId !== book.id || !Array.isArray(links) || links.length !== 1 || links[0]?.id !== book.id || row.status !== "live" && !(allowDeleting && row.status === "deleting")) throw new BrandNotFoundError(`asset ${assetId}`);
   return row;
@@ -2555,7 +2601,7 @@ async function loadBook(db, bookId) {
   const res = await db.query({ [BRAND_NS.book]: { $: { where: { id: bookId } } } });
   const row = (res[BRAND_NS.book] ?? [])[0];
   if (!row) throw new BrandNotFoundError(`brand book ${bookId}`);
-  return row;
+  return rowAsWritten(BRAND_NS.book, row);
 }
 async function loadMemberBook(db, bookId, actorId) {
   const book = await loadBook(db, bookId);
@@ -2610,14 +2656,14 @@ async function uploadAsset(ctx, req, bookId) {
     "internal",
     book.id
   );
-  const record6 = await ctx.db.storage.upload(
+  const record7 = await ctx.db.storage.upload(
     path,
     file,
     contentType,
     { private: true }
   );
-  if (record6.path !== path) {
-    await ctx.db.storage.delete(record6.path);
+  if (record7.path !== path) {
+    await ctx.db.storage.delete(record7.path);
     throw new BrandConflictError(
       "private storage returned an unexpected asset path"
     );
@@ -2636,11 +2682,11 @@ async function uploadAsset(ctx, req, bookId) {
       id,
       bookId: book.id,
       kind,
-      path: record6.path,
-      storageObjectId: record6.id,
+      path: record7.path,
+      storageObjectId: record7.id,
       contentDigest: await contentDigest(file),
       contentType,
-      size: record6.size,
+      size: record7.size,
       uploadedBy: ctx.actor.id,
       uploadedAuthorityRef: authority.authorityRef,
       audience: book.memberIds,
@@ -2667,7 +2713,7 @@ async function uploadAsset(ctx, req, bookId) {
       asPrincipalKind: "human"
     });
   } catch (error) {
-    await ctx.db.storage.delete(record6.path);
+    await ctx.db.storage.delete(record7.path);
     throw error;
   }
   return json(await linkedAsset(ctx, book, id), 201);
@@ -2782,7 +2828,7 @@ async function handleAssetItem(ctx, req, bookId, assetId) {
 async function handleBooksRoot(ctx, req) {
   if (req.method === "GET") {
     const res = await ctx.db.query({ [BRAND_NS.book]: { $: { order: { createdAt: "asc" } } } });
-    const books = (res[BRAND_NS.book] ?? []).filter(
+    const books = (res[BRAND_NS.book] ?? []).map((b) => rowAsWritten(BRAND_NS.book, b)).filter(
       (b) => isMember(b, ctx.actor.id)
     );
     return json({ books });
@@ -2947,7 +2993,7 @@ var SNAPSHOT_KEYS = [
   "reviewDigest",
   "status"
 ];
-var record3 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+var record4 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 function parseProposalResolutionRequest(body, bookId, proposalId) {
   const allowed = /* @__PURE__ */ new Set([
     "mutationId",
@@ -2991,13 +3037,13 @@ function proposalReviewSnapshot(proposal) {
 function parseReviewedProposal(value, bookId, proposalId) {
   if (!isBoundedBrandJson(value, { maxDepth: 12, maxNodes: 1500, maxBytes: 32 * 1024 }))
     throw new BrandInputError('"reviewedProposal" is too deeply nested, complex, or large');
-  if (!record3(value)) throw new BrandInputError('"reviewedProposal" must be an object');
+  if (!record4(value)) throw new BrandInputError('"reviewedProposal" must be an object');
   const keys = Object.keys(value).sort();
   if (keys.length !== SNAPSHOT_KEYS.length || !SNAPSHOT_KEYS.every((key, index) => key === keys[index])) throw new BrandInputError('"reviewedProposal" has an invalid shape');
   if (value.id !== proposalId || value.bookId !== bookId || value.status !== "open")
     throw new BrandInputError('"reviewedProposal" must identify this open proposal');
-  if (typeof value.kind !== "string" || !PROPOSAL_KINDS.includes(value.kind) || !record3(value.payload) || typeof value.rationale !== "string" || !Array.isArray(value.audience) || value.audience.length < 1 || value.audience.length > 100 || value.audience.some((id) => typeof id !== "string" || id.length < 1 || id.length > 200) || new Set(value.audience).size !== value.audience.length || typeof value.createdBy !== "string" || value.createdBy.length < 1 || value.createdBy.length > 200 || typeof value.createdAuthorityRef !== "string" || value.createdAuthorityRef.length < 1 || value.createdAuthorityRef.length > 200 || !Number.isSafeInteger(value.createdAt) || value.createdAt < 0 || typeof value.reviewDigest !== "string" || !/^sha256:[0-9a-f]{64}$/.test(value.reviewDigest)) throw new BrandInputError('"reviewedProposal" has invalid fields');
-  if (!record3(value.provenance) || Object.keys(value.provenance).sort().join(",") !== "messageId,sourceAsset,sourceAssetId,taintLabels,turnId" || value.provenance.sourceAssetId !== null && (typeof value.provenance.sourceAssetId !== "string" || value.provenance.sourceAssetId.length < 1 || value.provenance.sourceAssetId.length > 200) || value.provenance.sourceAsset !== null && (!record3(value.provenance.sourceAsset) || Object.keys(value.provenance.sourceAsset).sort().join(",") !== "analysisDigest,analysisRevision,assetId,contentDigest,contentType,objectEtag,objectSize,pathDigest" || typeof value.provenance.sourceAsset.assetId !== "string" || value.provenance.sourceAsset.assetId.length < 1 || value.provenance.sourceAsset.assetId.length > 200 || typeof value.provenance.sourceAsset.objectEtag !== "string" || value.provenance.sourceAsset.objectEtag.length < 1 || value.provenance.sourceAsset.objectEtag.length > 200 || !Number.isSafeInteger(value.provenance.sourceAsset.objectSize) || value.provenance.sourceAsset.objectSize < 1 || typeof value.provenance.sourceAsset.pathDigest !== "string" || !/^sha256:[0-9a-f]{64}$/.test(value.provenance.sourceAsset.pathDigest) || value.provenance.sourceAsset.contentType !== null && (typeof value.provenance.sourceAsset.contentType !== "string" || value.provenance.sourceAsset.contentType.length < 1 || value.provenance.sourceAsset.contentType.length > 160) || typeof value.provenance.sourceAsset.contentDigest !== "string" || !/^sha256:[0-9a-f]{64}$/.test(value.provenance.sourceAsset.contentDigest) || value.provenance.sourceAsset.analysisRevision !== null && (!Number.isSafeInteger(value.provenance.sourceAsset.analysisRevision) || value.provenance.sourceAsset.analysisRevision < 0) || value.provenance.sourceAsset.analysisDigest !== null && (typeof value.provenance.sourceAsset.analysisDigest !== "string" || !/^sha256:[0-9a-f]{64}$/.test(
+  if (typeof value.kind !== "string" || !PROPOSAL_KINDS.includes(value.kind) || !record4(value.payload) || typeof value.rationale !== "string" || !Array.isArray(value.audience) || value.audience.length < 1 || value.audience.length > 100 || value.audience.some((id) => typeof id !== "string" || id.length < 1 || id.length > 200) || new Set(value.audience).size !== value.audience.length || typeof value.createdBy !== "string" || value.createdBy.length < 1 || value.createdBy.length > 200 || typeof value.createdAuthorityRef !== "string" || value.createdAuthorityRef.length < 1 || value.createdAuthorityRef.length > 200 || !Number.isSafeInteger(value.createdAt) || value.createdAt < 0 || typeof value.reviewDigest !== "string" || !/^sha256:[0-9a-f]{64}$/.test(value.reviewDigest)) throw new BrandInputError('"reviewedProposal" has invalid fields');
+  if (!record4(value.provenance) || Object.keys(value.provenance).sort().join(",") !== "messageId,sourceAsset,sourceAssetId,taintLabels,turnId" || value.provenance.sourceAssetId !== null && (typeof value.provenance.sourceAssetId !== "string" || value.provenance.sourceAssetId.length < 1 || value.provenance.sourceAssetId.length > 200) || value.provenance.sourceAsset !== null && (!record4(value.provenance.sourceAsset) || Object.keys(value.provenance.sourceAsset).sort().join(",") !== "analysisDigest,analysisRevision,assetId,contentDigest,contentType,objectEtag,objectSize,pathDigest" || typeof value.provenance.sourceAsset.assetId !== "string" || value.provenance.sourceAsset.assetId.length < 1 || value.provenance.sourceAsset.assetId.length > 200 || typeof value.provenance.sourceAsset.objectEtag !== "string" || value.provenance.sourceAsset.objectEtag.length < 1 || value.provenance.sourceAsset.objectEtag.length > 200 || !Number.isSafeInteger(value.provenance.sourceAsset.objectSize) || value.provenance.sourceAsset.objectSize < 1 || typeof value.provenance.sourceAsset.pathDigest !== "string" || !/^sha256:[0-9a-f]{64}$/.test(value.provenance.sourceAsset.pathDigest) || value.provenance.sourceAsset.contentType !== null && (typeof value.provenance.sourceAsset.contentType !== "string" || value.provenance.sourceAsset.contentType.length < 1 || value.provenance.sourceAsset.contentType.length > 160) || typeof value.provenance.sourceAsset.contentDigest !== "string" || !/^sha256:[0-9a-f]{64}$/.test(value.provenance.sourceAsset.contentDigest) || value.provenance.sourceAsset.analysisRevision !== null && (!Number.isSafeInteger(value.provenance.sourceAsset.analysisRevision) || value.provenance.sourceAsset.analysisRevision < 0) || value.provenance.sourceAsset.analysisDigest !== null && (typeof value.provenance.sourceAsset.analysisDigest !== "string" || !/^sha256:[0-9a-f]{64}$/.test(
     value.provenance.sourceAsset.analysisDigest
   )) || value.provenance.sourceAsset.assetId !== value.provenance.sourceAssetId) || value.provenance.sourceAssetId === null !== (value.provenance.sourceAsset === null) || value.provenance.messageId !== null && (typeof value.provenance.messageId !== "string" || value.provenance.messageId.length < 1 || value.provenance.messageId.length > 200) || value.provenance.turnId !== null && (typeof value.provenance.turnId !== "string" || value.provenance.turnId.length < 1 || value.provenance.turnId.length > 200) || !Array.isArray(value.provenance.taintLabels) || value.provenance.taintLabels.length > 16 || value.provenance.taintLabels.some((label) => typeof label !== "string" || label.length < 1 || label.length > 120) || new Set(value.provenance.taintLabels).size !== value.provenance.taintLabels.length) throw new BrandInputError('"reviewedProposal.provenance" is invalid');
   return value;
@@ -3170,7 +3216,7 @@ async function proposalReceiptByMutation(ctx, mutationKey) {
   const row = (result[BRAND_NS.approvalReceipt] ?? [])[0];
   if (!row || !Array.isArray(row.book) || row.book.length !== 1 || row.book[0]?.id !== row.bookId) return void 0;
   const { book: _book, ...receipt2 } = row;
-  return receipt2;
+  return receiptAsWritten(receipt2);
 }
 async function consumeProposalAuthority(ctx, req, bookId, proposalId, actionDigest, mutationKey) {
   const authority = await ctx.consumeHumanExact({
@@ -3204,7 +3250,8 @@ async function receipt(ctx, id, actionDigest, expected) {
   });
   const row = (result[BRAND_NS.approvalReceipt] ?? [])[0];
   if (!row || row.actionDigest !== actionDigest || row.resolution !== "accepted" || row.bookId !== expected.bookId || row.reviewedProposal.bookId !== expected.bookId || row.reviewedProposal.kind !== expected.kind || !Array.isArray(row.book) || row.book.length !== 1 || row.book[0]?.id !== expected.bookId || expected.paletteId !== void 0 && row.paletteId !== expected.paletteId || expected.proposalId !== void 0 && row.proposalId !== expected.proposalId || expected.content !== void 0 && canonicalBrandJson(row.reviewedProposal.payload.content) !== canonicalBrandJson(expected.content)) throw new BrandConflictError(`approval receipt ${id} is invalid`);
-  const { book: _book, ...unhydrated } = row;
+  const { book: _book, ...stored } = row;
+  const unhydrated = receiptAsWritten(stored);
   if (!await verifyBrandApprovalReceipt(unhydrated))
     throw new BrandConflictError(`approval receipt ${id} is invalid`);
   return unhydrated;
@@ -3442,9 +3489,9 @@ async function proposalDecisionState(ctx, req, book, proposal, resolution, recei
 }
 
 // src/routes/proposals.ts
-var record4 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+var record5 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 var sameStrings2 = (left, right) => left.length === right.length && left.every((value, index) => value === right[index]);
-var guardFailure2 = (error) => record4(error) && error.code === "transact_guard_failed";
+var guardFailure2 = (error) => record5(error) && error.code === "transact_guard_failed";
 async function handleProposalResolution(ctx, req, bookId, proposalId) {
   if (req.method !== "POST") return methodNotAllowed();
   const book = await loadMemberBook(ctx.db, bookId, ctx.actor.id);
@@ -3491,7 +3538,7 @@ async function handleProposalResolution(ctx, req, bookId, proposalId) {
       book: {}
     }
   });
-  const proposal = (result[BRAND_NS.proposal] ?? [])[0];
+  const proposal = proposalAsWritten((result[BRAND_NS.proposal] ?? [])[0]);
   if (!proposal || proposal.bookId !== book.id || !Array.isArray(proposal.book) || proposal.book.length !== 1 || proposal.book[0]?.id !== book.id) throw new BrandNotFoundError(`proposal ${proposalId}`);
   const current = proposalReviewSnapshot(proposal);
   const { reviewDigest, ...unsignedReview } = current;
@@ -3624,7 +3671,7 @@ async function handleProposalResolution(ctx, req, bookId, proposalId) {
 }
 
 // src/routes/tokens.ts
-var record5 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+var record6 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 var missing = (bookId) => {
   throw new BrandNotFoundError(`compiled tokens for brand book ${bookId}`);
 };
@@ -3637,13 +3684,14 @@ async function acceptedReceipt(db, bookId, receiptId, actionDigest) {
   });
   const receipt2 = (result[BRAND_NS.approvalReceipt] ?? [])[0];
   if (!receipt2 || receipt2.resolution !== "accepted" || receipt2.actionDigest !== actionDigest || !Array.isArray(receipt2.book) || receipt2.book.length !== 1 || receipt2.book[0]?.id !== bookId) return missing(bookId);
-  const { book: _book, ...unhydrated } = receipt2;
+  const { book: _book, ...stored } = receipt2;
+  const unhydrated = receiptAsWritten(stored);
   if (!await verifyBrandApprovalReceipt(unhydrated)) return missing(bookId);
   return unhydrated;
 }
 async function approvedCache(db, book) {
   const cache = book.tokens;
-  if (!cache || !record5(cache.light) || !record5(cache.dark) || !book.activePaletteId || cache.paletteId !== book.activePaletteId || !cache.paletteReceiptId || !cache.paletteActionDigest || !cache.sourceDigest) return missing(book.id);
+  if (!cache || !record6(cache.light) || !record6(cache.dark) || !book.activePaletteId || cache.paletteId !== book.activePaletteId || !cache.paletteReceiptId || !cache.paletteActionDigest || !cache.sourceDigest) return missing(book.id);
   const paletteResult = await db.query({
     [BRAND_NS.palette]: {
       $: { where: { id: cache.paletteId, bookId: book.id } },
@@ -4427,11 +4475,13 @@ export {
   parseDesignBundle,
   parseHex,
   pickTextOn,
+  proposalAsWritten,
   proposalReviewSnapshot,
   proposePaletteOps,
   proposeSectionOps,
   readDesignManifest,
   readTools,
+  receiptAsWritten,
   recordAnalysisOps,
   rejectProposalOps,
   relativeLuminance,
@@ -4441,6 +4491,7 @@ export {
   rgbToHsl,
   rgbToOklab,
   rotateHue,
+  rowAsWritten,
   safeFileName,
   scanCustomProperties,
   sectionKey,