@owlmeans/planning 0.1.18-rc.16 → 0.1.18-rc.17

package/README.md

@@ -9,7 +9,7 @@ the executor with `@owlmeans/server-planning` and reads remotely with `@owlmeans
 ## Installation
 
 ```sh
-bun add @owlmeans/planning@^0.1.18-rc.16 ajv ajv-formats
+bun add @owlmeans/planning@^0.1.18-rc.17 ajv ajv-formats
 ```
 
 ## Concepts

package/agent-meta/manifest.json

@@ -1,8 +1,8 @@
 {
   "schemaVersion": 2,
   "package": "@owlmeans/planning",
-  "version": "0.1.18-rc.16",
-  "generatedAt": "2026-10-03T15:33:53.021Z",
+  "version": "0.1.18-rc.17",
+  "generatedAt": "2026-10-04T01:01:54.402Z",
   "canonicalRepo": "https://github.com/owlmeans/common",
   "entries": [
     {

package/agent-meta/skills/planning/SKILL.md

@@ -8,7 +8,7 @@ user-invocable: false
 # @owlmeans/planning
 
 **Layer:** Cross-cutting domain
-**Install:** `"@owlmeans/planning": "^0.1.18-rc.16"` in `dependencies` (`ajv` and `ajv-formats` are peers)
+**Install:** `"@owlmeans/planning": "^0.1.18-rc.17"` in `dependencies` (`ajv` and `ajv-formats` are peers)
 
 The contracts of project planning: record shapes, schemas, refusals, the protocol tree, the pure
 fold and the models. No database, no fastify, no React. The executor, the plugin registry, the
@@ -270,19 +270,21 @@ A client calls `encodeWorkcardQuery(query)` before `call({ query })`; a handler
 
 ## Mounting in a target
 
-A generated target serves this tree as it is — no hand-written card, transition or schema routes:
-
-- **common**: `makePlanningProtocols({ base: { alias: 'api:planning' }, guards: DEFAULT_GUARD,
-  definitions: true })`, beside the `PLANNING` plugin in `sources/common/src/planning.ts`.
-- **api**: `servePlanningEntrypoints(tree, { access })` minus the `commit.events` socket entry; the
-  resolver answers `{ entityId, projects, writes, grants }` (view ids, modify ids, create/admin
-  grants) — `server-planning` → The access resolver.
-- **web**: `appendPlanningClient({ protocols, bind: false })` + `appendPlanningStores`, long poll
-  only — `client-planning` → Mounting in a target.
-- **Kit literals**: card types and flows are LITERAL objects inside `PLANNING.schemas.flows` /
-  `.types`, above the `// owlmeans: add planning flows|types above this line` sentinels (a spread
-  hides them from the library's registration checks); card types and flows `overridable: true`,
-  `fields` open (`additionalProperties: true`), the container project type `scopedCardTypes: true`.
+A generated target serves this tree as it is — no hand-written card, transition, schema or document
+routes; domain rules are `before` plugins. This section is the hub; each package skill has its half.
+
+- **common** declares the one tree the api and the web share: `makePlanningProtocols({ base: {
+  alias: 'api:planning' }, guards: DEFAULT_GUARD, definitions: true })`, in its own module beside
+  the `PLANNING` plugin (`sources/common/src/planning.ts`).
+- **api** — `server-planning` → Mounting in a target (stock handlers, no commit socket, the
+  resolver answering `writes`). **web** — `client-planning` → Mounting in a target. **store** —
+  `planning-postgres`.
+- **Kit literals**: card types and flows are LITERAL objects in `PLANNING.schemas.flows` / `.types`,
+  above the `// owlmeans: add planning flows|types above this line` sentinels — a spread or an
+  imported constant hides them from the library's registration checks. Card types and flows carry
+  `overridable: true` with open `fields` (`additionalProperties: true`); the container project type
+  (always sealed) carries `scopedCardTypes: true`, so the app's people override and extend them as
+  data through `schema.define`.
 
 ## Models
 
@@ -320,7 +322,7 @@ the marker survives a hop where the class is unknown, so match on it there:
 | `WorkcardConflict` | `workcard-conflict:` — stale `expectSeq` | 409 |
 | `SchemaConflict` / `SchemaInUse` | `schema-conflict:` (lost version CAS) / `schema-in-use:` (retiring a flow a live type runs) | 409 |
 | `SchemaSealed` / `SchemaInvalid` | `schema-sealed:` / `schema-invalid:` | 422 |
-| `PlanningForbidden` | `forbidden:<grant>:<target>` — the request's access lacks a grant | 403 |
+| `PlanningForbidden` | `forbidden:<grant>:<target>` — the request's access lacks a grant; `forbidden:writes:<id>` — the card or project is outside its `writes` | 403 |
 | `CommitTimeout` / `CommitFailed` | `commit-timeout:` (still pending, nothing undone) / `commit-failed:` | 500 |
 | `PlanningScopeMismatch` / `PlanningUnsupported` | `scope-mismatch:` / `unsupported:` | 404 / 500 |
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@owlmeans/planning",
-  "version": "0.1.18-rc.16",
+  "version": "0.1.18-rc.17",
   "license": "MIT",
   "description": "Runtime-free project-planning contracts — the workcard super type, projects, specifications, typed relationships, status flows with three intrinsic states, the transition event and its pure fold, the schema registry, the models and the protocol tree.",
   "type": "module",