@odla-ai/brand 0.8.1 → 0.8.3

package/dist/index.d.cts

@@ -650,7 +650,15 @@ declare function assertAnalysis(value: unknown): AssetAnalysis;
  * and the `createdAt` beside it disagreed at all.
  */
 declare function rowAsWritten<T>(ns: string, row: T): T;
-/** A stored approval receipt in the shape it was written. */
+/** A stored approval receipt in the shape it was written.
+ *
+ * The store adds `$createdAt`, `$createdBy`, `$updatedAt`, and `$updatedBy` to
+ * every row after Brand has computed the immutable receipt digest. Those
+ * provenance attrs are trustworthy store metadata, but they are not part of
+ * the receipt that was signed and must not be fed to its exact-shape verifier
+ * or digest. Strip every reserved `$` attr here so both dependency reads and
+ * mutation-id replays verify the same bytes Brand originally wrote.
+ */
 declare function receiptAsWritten<T>(row: T): T;
 /** A stored proposal in the shape it was written, so `reviewDigest` matches. */
 declare function proposalAsWritten<T>(row: T): T;

package/dist/index.d.ts

@@ -650,7 +650,15 @@ declare function assertAnalysis(value: unknown): AssetAnalysis;
  * and the `createdAt` beside it disagreed at all.
  */
 declare function rowAsWritten<T>(ns: string, row: T): T;
-/** A stored approval receipt in the shape it was written. */
+/** A stored approval receipt in the shape it was written.
+ *
+ * The store adds `$createdAt`, `$createdBy`, `$updatedAt`, and `$updatedBy` to
+ * every row after Brand has computed the immutable receipt digest. Those
+ * provenance attrs are trustworthy store metadata, but they are not part of
+ * the receipt that was signed and must not be fed to its exact-shape verifier
+ * or digest. Strip every reserved `$` attr here so both dependency reads and
+ * mutation-id replays verify the same bytes Brand originally wrote.
+ */
 declare function receiptAsWritten<T>(row: T): T;
 /** A stored proposal in the shape it was written, so `reviewDigest` matches. */
 declare function proposalAsWritten<T>(row: T): T;

package/dist/index.js

@@ -366,7 +366,13 @@ function rowAsWritten(ns, row) {
   return changed ? out : row;
 }
 function receiptAsWritten(row) {
-  return rowAsWritten(BRAND_NS.approvalReceipt, row);
+  const normalized = rowAsWritten(BRAND_NS.approvalReceipt, row);
+  if (!record(normalized)) return normalized;
+  const systemAttrs = Object.keys(normalized).filter((key) => key.startsWith("$"));
+  if (systemAttrs.length === 0) return normalized;
+  const out = { ...normalized };
+  for (const key of systemAttrs) delete out[key];
+  return out;
 }
 function proposalAsWritten(row) {
   return rowAsWritten(BRAND_NS.proposal, row);
@@ -3291,7 +3297,10 @@ async function activePalette(ctx, book) {
       book: {}
     }
   });
-  const palette = (result[BRAND_NS.palette] ?? [])[0];
+  const palette = rowAsWritten(
+    BRAND_NS.palette,
+    (result[BRAND_NS.palette] ?? [])[0]
+  );
   if (!palette || palette.bookId !== book.id || palette.status !== "active" || !palette.proposalId || !palette.approvalReceiptId || !palette.approvalActionDigest || !hasExactOneLink(palette.book, book.id)) throw new BrandConflictError(
     "active palette is missing valid approval provenance"
   );
@@ -3339,7 +3348,10 @@ async function approvedTypography(ctx, book) {
       book: {}
     }
   });
-  const section = (result[BRAND_NS.section] ?? [])[0];
+  const section = rowAsWritten(
+    BRAND_NS.section,
+    (result[BRAND_NS.section] ?? [])[0]
+  );
   if (!section || section.status !== "approved") return {};
   if (section.bookId !== book.id || section.kind !== "typography" || !section.approvalReceiptId || !section.approvalActionDigest || !hasExactOneLink(section.book, book.id)) throw new BrandConflictError(
     "approved typography is missing valid approval provenance"