@owlmeans/viable-common 0.0.4

package/build/topology/types.d.ts

@@ -0,0 +1,83 @@
+import type { ProjectArea } from '../areas/consts.js';
+import type { SubProject } from '../slot/consts.js';
+/**
+ * How a target's workspace packages are ARRANGED — which of them exist, what role each plays and
+ * which compile against which.
+ *
+ * The layout tables this replaces ({@link LAYOUTS}, {@link ROLE_DIRS}) were two hand-written
+ * records keyed by a closed `TargetLayout` enum, so "the target has five packages named
+ * common/backend/api/web/worker" was not a fact ABOUT a project but a constant of the platform.
+ * Everything the pipeline could ever generate had to fit those five names.
+ *
+ * A topology is that same information as DATA: a project carries one, the two shipped layouts are
+ * just the two the platform writes by default, and the tables are derived from them rather than
+ * spelled beside them. That is what lets a target grow a second web application, a library package
+ * nobody planned, or the package a GitHub pull brought in.
+ *
+ * It is deliberately a DESCRIPTION and never a plan. Nothing here says a directory exists — a
+ * caller that acts on a package still checks the disk, exactly as `workerPath` always has.
+ */
+export interface TargetPackageDescriptor {
+    /**
+     * The package's directory name under {@link TopologyDescriptor.dir}, and the tail of its npm
+     * name (`<slug>-<name>`). Unique within a topology.
+     */
+    name: string;
+    /**
+     * What this package IS, in the role vocabulary the wire already speaks.
+     *
+     * A list rather than a single value because one package may answer to more than one role in a
+     * smaller arrangement — a target that serves its browser app from the same process that serves
+     * its API is one package holding both `Api` and `Web`. The default topology gives every package
+     * exactly one role.
+     */
+    roles: SubProject[];
+    /**
+     * `library` builds with `tsc -b` and is consumed through its `build/` output at RUN time;
+     * `bundle` bundles itself and keeps every dependency external.
+     *
+     * The distinction is load-bearing rather than descriptive: a bundle resolves its libraries from
+     * `node_modules` when the process starts, so a library that nothing built makes the bundle exit
+     * with a message naming a missing dependency rather than a missing build.
+     */
+    kind: TargetPackageKind;
+    /** Sibling package NAMES this one compiles against. The build order is this graph, sorted. */
+    dependsOn: string[];
+    /**
+     * For a package holding the `Web` role: which audiences it serves.
+     *
+     * Absent means all four. A topology that splits the areas across two browser applications is
+     * the reason this exists; nothing generates one yet.
+     */
+    areas?: ProjectArea[];
+    /** For a package holding the `Worker` role: which queues this process consumes. */
+    queues?: string[];
+}
+export type TargetPackageKind = 'library' | 'bundle';
+/**
+ * One arrangement, named.
+ *
+ * `id` is what a project records; it is compared, never parsed.
+ */
+export interface TopologyDescriptor {
+    id: string;
+    /** The directory holding the workspace packages — `sources`, or `packages` for a legacy tree. */
+    dir: string;
+    packages: TargetPackageDescriptor[];
+}
+/**
+ * A topology read back from a project, with the resolutions every consumer would otherwise redo.
+ *
+ * `build` and `libraries` are DERIVED — a topological sort of `dependsOn` — rather than declared,
+ * because the two lists disagreeing with the graph is a whole class of outage (a library built
+ * after the bundle that imports it) that nobody can see by reading either one.
+ */
+export interface ResolvedTopology extends TopologyDescriptor {
+    /** Every package, in dependency order. */
+    build: string[];
+    /** The `library`-kind packages, in dependency order. */
+    libraries: string[];
+    /** Role → the packages holding it, in topology order. */
+    byRole: Partial<Record<SubProject, TargetPackageDescriptor[]>>;
+}
+//# sourceMappingURL=types.d.ts.map

package/build/topology/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/topology/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAA;AACrD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAA;AAEnD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,uBAAuB;IACtC;;;OAGG;IACH,IAAI,EAAE,MAAM,CAAA;IACZ;;;;;;;OAOG;IACH,KAAK,EAAE,UAAU,EAAE,CAAA;IACnB;;;;;;;OAOG;IACH,IAAI,EAAE,iBAAiB,CAAA;IACvB,8FAA8F;IAC9F,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB;;;;;OAKG;IACH,KAAK,CAAC,EAAE,WAAW,EAAE,CAAA;IACrB,mFAAmF;IACnF,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;CAClB;AAED,MAAM,MAAM,iBAAiB,GAAG,SAAS,GAAG,QAAQ,CAAA;AAEpD;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAA;IACV,iGAAiG;IACjG,GAAG,EAAE,MAAM,CAAA;IACX,QAAQ,EAAE,uBAAuB,EAAE,CAAA;CACpC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,gBAAiB,SAAQ,kBAAkB;IAC1D,0CAA0C;IAC1C,KAAK,EAAE,MAAM,EAAE,CAAA;IACf,wDAAwD;IACxD,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,yDAAyD;IACzD,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,uBAAuB,EAAE,CAAC,CAAC,CAAA;CAC/D"}

package/build/topology/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/build/topology/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/topology/types.ts"],"names":[],"mappings":""}

package/build/types.d.ts

@@ -0,0 +1,88 @@
+export interface SlotMetadata extends SlotConstMetadata, SlotSecretMetadata, SlotListMetadata, CustomSecretMetadata {
+}
+export interface SlotConstMetadata {
+    projectName: string;
+    oidcClientId: string;
+    oidcRealm: string;
+    /**
+     * Fully-qualified PUBLIC OIDC issuer URL the integrated viable IAM serves this client from
+     * (`{host}/oidc`). Populated when the production IAM client is provisioned; the canonical
+     * single value a standalone self-hosted deployment of the exported target uses. Empty until
+     * provisioned.
+     */
+    oidcIssuerUrl: string;
+    /**
+     * What the project's owner says about themselves, delivered to the generated application.
+     *
+     * Scalars rather than an object because metadata is scalar — the store is one row per key, and
+     * a nested value would have to be serialized at the boundary anyway.
+     *
+     * `brandingCredit` is the EFFECTIVE value, not the owner's intent: `''` hides the platform
+     * credit and anything else shows it. Absent means shown, so a push that never happened, or one
+     * that lost the value, keeps the credit rather than silently giving away a paid capability.
+     */
+    brandingCopyright: string;
+    brandingOrganization: string;
+    brandingTermsUrl: string;
+    brandingPrivacyUrl: string;
+    brandingCredit: string;
+    brandingHideCreditIntent: string;
+}
+export interface SlotSecretMetadata {
+    oidcClientSecret: string;
+    /**
+     * The application role's password — the one database credential the generated app legitimately
+     * holds, and the one it already carries inside `DATABASE_URL`.
+     *
+     * The sidecar's SUPERUSER password is deliberately absent from this interface. Everything in
+     * `SlotMetadata` is pushed into the slot as `sandbox-meta.json`, which is a world-readable file
+     * in the untrusted application's own directory; the admin credential is kept platform-side and
+     * reaches the pod only as a Kubernetes Secret mounted into the Postgres container.
+     */
+    dbAppPassword?: string;
+    /**
+     * Password of the queue store's `app` ACL user — the whole of what the slot is given for its
+     * Valkey sidecar, and what it already carries inside `VALKEY_URL`.
+     *
+     * The store's `ops` user is deliberately absent for the same reason the Postgres superuser is:
+     * it holds the administrative surface, and everything in `SlotMetadata` lands in the untrusted
+     * application's own directory. Its password lives only in the ACL Secret.
+     */
+    valkeyPassword?: string;
+}
+export interface SlotListMetadata {
+    permissions: string[];
+    backendEnvVars: string[];
+    frontendEnvVars: string[];
+    /**
+     * Owner-registered allowed OIDC redirect URIs for the production (standalone) client.
+     * Each entry is a full callback URL of a self-hosted deployment of the exported target
+     * project. Combined with the production hosts (generated + custom domain) when the
+     * production IAM client is (re)provisioned.
+     */
+    oidcRedirectUris: string[];
+    /**
+     * Origins the target's own API accepts browser requests from.
+     *
+     * The redirect URIs say where a login may RETURN to; these say who may call the API afterwards.
+     * They are separate lists because they answer different questions and are wrong in different
+     * ways: an unregistered redirect URI is a login that cannot complete, an unlisted origin is an
+     * app that loads and then fails every request it makes.
+     *
+     * Set by the owner for a deployment the platform does not host — a target published on their own
+     * domain, or run on a developer's machine on a port the platform never chose. The platform's own
+     * hosts are always accepted and are never in this list.
+     */
+    allowedOrigins: string[];
+}
+export interface CustomSecretMetadata {
+    backendSecrets: Record<string, string>;
+    frontendSecrets: Record<string, string>;
+}
+export interface NonSecretScalarSlotMetadata extends SlotConstMetadata {
+}
+export interface ScalarSlotMetadata extends SlotConstMetadata, SlotSecretMetadata {
+}
+export interface ConfigSlotMetadata extends SlotConstMetadata, SlotListMetadata {
+}
+//# sourceMappingURL=types.d.ts.map

package/build/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AACA,MAAM,WAAW,YAAa,SAC5B,iBAAiB,EACjB,kBAAkB,EAClB,gBAAgB,EAChB,oBAAoB;CACrB;AAED,MAAM,WAAW,iBAAiB;IAChC,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;IACpB,SAAS,EAAE,MAAM,CAAA;IACjB;;;;;OAKG;IACH,aAAa,EAAE,MAAM,CAAA;IACrB;;;;;;;;;OASG;IACH,iBAAiB,EAAE,MAAM,CAAA;IACzB,oBAAoB,EAAE,MAAM,CAAA;IAC5B,gBAAgB,EAAE,MAAM,CAAA;IACxB,kBAAkB,EAAE,MAAM,CAAA;IAC1B,cAAc,EAAE,MAAM,CAAA;IACtB,wBAAwB,EAAE,MAAM,CAAA;CACjC;AAED,MAAM,WAAW,kBAAkB;IACjC,gBAAgB,EAAE,MAAM,CAAA;IACxB;;;;;;;;OAQG;IACH,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,MAAM,EAAE,CAAA;IACrB,cAAc,EAAE,MAAM,EAAE,CAAA;IACxB,eAAe,EAAE,MAAM,EAAE,CAAA;IACzB;;;;;OAKG;IACH,gBAAgB,EAAE,MAAM,EAAE,CAAA;IAC1B;;;;;;;;;;;OAWG;IACH,cAAc,EAAE,MAAM,EAAE,CAAA;CACzB;AAED,MAAM,WAAW,oBAAoB;IACnC,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACtC,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CACxC;AAED,MAAM,WAAW,2BAA4B,SAC3C,iBAAiB;CAClB;AAED,MAAM,WAAW,kBAAmB,SAClC,iBAAiB,EACjB,kBAAkB;CACnB;AAED,MAAM,WAAW,kBAAmB,SAClC,iBAAiB,EACjB,gBAAgB;CACjB"}

package/build/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/build/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":""}

package/build/ux/consts.d.ts

@@ -0,0 +1,5 @@
+export declare enum UXTransitionType {
+    Screen = "screen",
+    Component = "component"
+}
+//# sourceMappingURL=consts.d.ts.map

package/build/ux/consts.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"consts.d.ts","sourceRoot":"","sources":["../../src/ux/consts.ts"],"names":[],"mappings":"AACA,oBAAY,gBAAgB;IAC1B,MAAM,WAAW;IACjB,SAAS,cAAc;CACxB"}

package/build/ux/consts.js

@@ -0,0 +1,6 @@
+export var UXTransitionType;
+(function (UXTransitionType) {
+    UXTransitionType["Screen"] = "screen";
+    UXTransitionType["Component"] = "component";
+})(UXTransitionType || (UXTransitionType = {}));
+//# sourceMappingURL=consts.js.map

package/build/ux/consts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"consts.js","sourceRoot":"","sources":["../../src/ux/consts.ts"],"names":[],"mappings":"AACA,MAAM,CAAN,IAAY,gBAGX;AAHD,WAAY,gBAAgB;IAC1B,qCAAiB,CAAA;IACjB,2CAAuB,CAAA;AACzB,CAAC,EAHW,gBAAgB,KAAhB,gBAAgB,QAG3B"}

package/build/ux/index.d.ts

@@ -0,0 +1,4 @@
+export * from './schemas.js';
+export * from './consts.js';
+export type * from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/build/ux/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/ux/index.ts"],"names":[],"mappings":"AACA,cAAc,cAAc,CAAA;AAC5B,cAAc,aAAa,CAAA;AAC3B,mBAAmB,YAAY,CAAA"}

package/build/ux/index.js

@@ -0,0 +1,3 @@
+export * from './schemas.js';
+export * from './consts.js';
+//# sourceMappingURL=index.js.map

package/build/ux/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/ux/index.ts"],"names":[],"mappings":"AACA,cAAc,cAAc,CAAA;AAC5B,cAAc,aAAa,CAAA"}

package/build/ux/schemas.d.ts

@@ -0,0 +1,8 @@
+import type { JSONSchemaType } from "ajv";
+import type { UXScreenList, UXComponentList, UXScreenToComponent, UXTransition, UXTransitionList } from "./types.js";
+export declare const UXScreenListSchema: JSONSchemaType<UXScreenList>;
+export declare const UXComponentListSchema: JSONSchemaType<UXComponentList>;
+export declare const UXScreenToComponentSchema: JSONSchemaType<UXScreenToComponent>;
+export declare const UXTransitionSchema: JSONSchemaType<UXTransition>;
+export declare const UXTransitionListSchema: JSONSchemaType<UXTransitionList>;
+//# sourceMappingURL=schemas.d.ts.map

package/build/ux/schemas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../../src/ux/schemas.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,KAAK,CAAA;AACzC,OAAO,KAAK,EAAE,YAAY,EAAE,eAAe,EAAE,mBAAmB,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAA;AAGpH,eAAO,MAAM,kBAAkB,EAAE,cAAc,CAAC,YAAY,CAgB3D,CAAA;AAED,eAAO,MAAM,qBAAqB,EAAE,cAAc,CAAC,eAAe,CAgBjE,CAAA;AAED,eAAO,MAAM,yBAAyB,EAAE,cAAc,CAAC,mBAAmB,CAUzE,CAAA;AAED,eAAO,MAAM,kBAAkB,EAAE,cAAc,CAAC,YAAY,CA6B3D,CAAA;AAED,eAAO,MAAM,sBAAsB,EAAE,cAAc,CAAC,gBAAgB,CAanE,CAAA"}

package/build/ux/schemas.js

@@ -0,0 +1,91 @@
+import { UXTransitionType } from "./consts.js";
+export const UXScreenListSchema = {
+    type: "object",
+    title: "UXScreenList",
+    description: "Object with screen list",
+    properties: {
+        screens: {
+            type: "array",
+            items: {
+                type: "string",
+                description: "Technical screen name, no spaces, kebab-case notation with slashes allowed"
+            },
+            description: "List of screens"
+        },
+    },
+    required: ["screens"],
+    additionalProperties: false,
+};
+export const UXComponentListSchema = {
+    type: "object",
+    title: "UXComponentList",
+    description: "Object with component list",
+    properties: {
+        components: {
+            type: "array",
+            items: {
+                type: "string",
+                description: "Technical component name, no spaces, kebab-case notation with slashes allowed"
+            },
+            description: "List of components"
+        },
+    },
+    required: ["components"],
+    additionalProperties: false,
+};
+export const UXScreenToComponentSchema = {
+    type: "object",
+    properties: {},
+    additionalProperties: {
+        type: "array",
+        items: {
+            type: "string",
+        },
+    },
+    required: []
+};
+export const UXTransitionSchema = {
+    type: "object",
+    title: "UXTransition",
+    description: "Transition between screens or components during interaction",
+    properties: {
+        from: {
+            type: "string",
+            description: "Initial screen or component"
+        },
+        to: {
+            type: "string",
+            description: "Final screen or component"
+        },
+        initiator: {
+            type: "string",
+            description: "Component that initiated the transition"
+        },
+        action: {
+            type: "string",
+            description: "Action that triggered the transition"
+        },
+        type: {
+            type: "string",
+            enum: Object.values(UXTransitionType),
+            description: "Transition happens between (type level of transition)"
+        }
+    },
+    required: ["from", "to", "initiator", "action", "type"],
+    additionalProperties: false,
+};
+export const UXTransitionListSchema = {
+    type: "object",
+    title: "UXTransitionList",
+    description: "Object with transition list",
+    properties: {
+        transitions: {
+            type: "array",
+            items: UXTransitionSchema,
+            description: "Transitions"
+        },
+    },
+    required: ["transitions"],
+    additionalProperties: false,
+};
+//# sourceMappingURL=schemas.js.map

package/build/ux/schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../../src/ux/schemas.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAE9C,MAAM,CAAC,MAAM,kBAAkB,GAAiC;IAC9D,IAAI,EAAE,QAAQ;IACd,KAAK,EAAE,cAAc;IACrB,WAAW,EAAE,yBAAyB;IACtC,UAAU,EAAE;QACV,OAAO,EAAE;YACP,IAAI,EAAE,OAAO;YACb,KAAK,EAAE;gBACL,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,4EAA4E;aAC1F;YACD,WAAW,EAAE,iBAAiB;SAC/B;KACF;IACD,QAAQ,EAAE,CAAC,SAAS,CAAC;IACrB,oBAAoB,EAAE,KAAK;CAC5B,CAAA;AAED,MAAM,CAAC,MAAM,qBAAqB,GAAoC;IACpE,IAAI,EAAE,QAAQ;IACd,KAAK,EAAE,iBAAiB;IACxB,WAAW,EAAE,4BAA4B;IACzC,UAAU,EAAE;QACV,UAAU,EAAE;YACV,IAAI,EAAE,OAAO;YACb,KAAK,EAAE;gBACL,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,+EAA+E;aAC7F;YACD,WAAW,EAAE,oBAAoB;SAClC;KACF;IACD,QAAQ,EAAE,CAAC,YAAY,CAAC;IACxB,oBAAoB,EAAE,KAAK;CAC5B,CAAA;AAED,MAAM,CAAC,MAAM,yBAAyB,GAAwC;IAC5E,IAAI,EAAE,QAAQ;IACd,UAAU,EAAE,EAAE;IACd,oBAAoB,EAAE;QACpB,IAAI,EAAE,OAAO;QACb,KAAK,EAAE;YACL,IAAI,EAAE,QAAQ;SACf;KACF;IACD,QAAQ,EAAE,EAAE;CACb,CAAA;AAED,MAAM,CAAC,MAAM,kBAAkB,GAAiC;IAC9D,IAAI,EAAE,QAAQ;IACd,KAAK,EAAE,cAAc;IACrB,WAAW,EAAE,6DAA6D;IAC1E,UAAU,EAAE;QACV,IAAI,EAAE;YACJ,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,6BAA6B;SAC3C;QACD,EAAE,EAAE;YACF,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,2BAA2B;SACzC;QACD,SAAS,EAAE;YACT,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,yCAAyC;SACvD;QACD,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,sCAAsC;SACpD;QACD,IAAI,EAAE;YACJ,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC;YACrC,WAAW,EAAE,uDAAuD;SACrE;KACF;IACD,QAAQ,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,CAAC;IACvD,oBAAoB,EAAE,KAAK;CAC5B,CAAA;AAED,MAAM,CAAC,MAAM,sBAAsB,GAAqC;IACtE,IAAI,EAAE,QAAQ;IACd,KAAK,EAAE,kBAAkB;IACzB,WAAW,EAAE,6BAA6B;IAC1C,UAAU,EAAE;QACV,WAAW,EAAE;YACX,IAAI,EAAE,OAAO;YACb,KAAK,EAAE,kBAAkB;YACzB,WAAW,EAAE,aAAa;SAC3B;KACF;IACD,QAAQ,EAAE,CAAC,aAAa,CAAC;IACzB,oBAAoB,EAAE,KAAK;CAC5B,CAAA"}

package/build/ux/types.d.ts

@@ -0,0 +1,21 @@
+import type { UXTransitionType } from "./consts.js";
+export interface UXScreenList {
+    screens: string[];
+}
+export interface UXComponentList {
+    components: string[];
+}
+export interface UXScreenToComponent {
+    [screen: string]: string[];
+}
+export interface UXTransition {
+    from: string;
+    to: string;
+    initiator: string;
+    action: string;
+    type: UXTransitionType;
+}
+export interface UXTransitionList {
+    transitions: UXTransition[];
+}
+//# sourceMappingURL=types.d.ts.map

package/build/ux/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/ux/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAEnD,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,EAAE,CAAA;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B,UAAU,EAAE,MAAM,EAAE,CAAA;CACrB;AAED,MAAM,WAAW,mBAAmB;IAClC,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,CAAA;CAC3B;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAA;IACZ,EAAE,EAAE,MAAM,CAAA;IACV,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,gBAAgB,CAAA;CACvB;AAED,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,YAAY,EAAE,CAAA;CAC5B"}

package/build/ux/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/build/ux/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/ux/types.ts"],"names":[],"mappings":""}

package/package.json

@@ -0,0 +1,71 @@
+{
+  "name": "@owlmeans/viable-common",
+  "version": "0.0.4",
+  "license": "MIT",
+  "description": "Runtime-free contracts of the OwlMeans Viable platform — the analysis, design and metadata shapes of a generated project, its target-shape manifest, the slot command vocabulary, the connector protocol and the conversion vocabulary.",
+  "type": "module",
+  "scripts": {
+    "build": "tsc -b",
+    "dev": "nodemon -e ts,tsx,json --watch src --exec \"tsc -p ./tsconfig.json\"",
+    "watch": "tsc -b -w --preserveWatchOutput --pretty",
+    "test": "bun test ./tests"
+  },
+  "main": "build/index.js",
+  "module": "build/index.js",
+  "types": "build/index.d.ts",
+  "exports": {
+    ".": {
+      "import": "./build/index.js",
+      "require": "./build/index.js",
+      "default": "./build/index.js",
+      "module": "./build/index.js",
+      "types": "./build/index.d.ts"
+    },
+    "./slot": {
+      "import": "./build/slot/index.js",
+      "require": "./build/slot/index.js",
+      "default": "./build/slot/index.js",
+      "module": "./build/slot/index.js",
+      "types": "./build/slot/index.d.ts"
+    },
+    "./connect": {
+      "import": "./build/connect/index.js",
+      "require": "./build/connect/index.js",
+      "default": "./build/connect/index.js",
+      "module": "./build/connect/index.js",
+      "types": "./build/connect/index.d.ts"
+    },
+    "./convert": {
+      "import": "./build/convert/index.js",
+      "require": "./build/convert/index.js",
+      "default": "./build/convert/index.js",
+      "module": "./build/convert/index.js",
+      "types": "./build/convert/index.d.ts"
+    },
+    "./integrity": {
+      "import": "./build/integrity/index.js",
+      "require": "./build/integrity/index.js",
+      "default": "./build/integrity/index.js",
+      "module": "./build/integrity/index.js",
+      "types": "./build/integrity/index.d.ts"
+    }
+  },
+  "devDependencies": {
+    "@langchain/core": "^1.2.9",
+    "@owlmeans/dep-config": "workspace:*",
+    "ajv": "^8.17.1",
+    "ajv-formats": "^3.0.1",
+    "nodemon": "^3.1.14",
+    "typescript": "^7.0.2"
+  },
+  "dependencies": {
+    "@owlmeans/agent-common": "^0.1.18-rc.17",
+    "@owlmeans/entrypoint": "^0.1.18-rc.12",
+    "@owlmeans/error": "^0.1.18-rc.9",
+    "@owlmeans/llm-common": "^0.1.18-rc.13",
+    "@owlmeans/route": "^0.1.18-rc.10"
+  },
+  "publishConfig": {
+    "access": "public"
+  }
+}

package/src/agent/index.ts

@@ -0,0 +1,4 @@
+
+export type * from './types.js'
+export * from './spectator/index.js'
+export * from './memory.js'

package/src/agent/memory.ts

@@ -0,0 +1,16 @@
+/**
+ * The agent-memory contracts, re-exported under viable's own name.
+ *
+ * The platform reaches `@owlmeans/agent-common` through here rather than importing it directly,
+ * for the same reason it reaches the LLM contracts through this package: the platform pins one
+ * version of the agent library, and a direct import would bind it to a second copy of the same
+ * types. Serializable contracts only — the runtime is `@owlmeans/agent`, re-exported by
+ * `@owlmeans/viable`.
+ */
+
+export { AgentRunStatus, conversationFor, truncateAt } from '@owlmeans/agent-common'
+
+export type {
+  ConversationRef, ConversationEvent, ConversationEventInput,
+  MemoryNode, MemoryEvent, MemoryEventInput,
+} from '@owlmeans/agent-common'

package/src/agent/spectator/consts.ts

@@ -0,0 +1,10 @@
+
+/** Viable's concrete instance of the open `kind` field on a spectator entry. */
+export enum SpectatorEntryKind {
+  Coder = 'coder',
+  Fixer = 'fixer',
+  General = 'general'
+}
+
+/** Owned by `@owlmeans/llm-common` — re-exported so consumers need one import only. */
+export { SpectatorContentType } from '@owlmeans/llm-common'

package/src/agent/spectator/index.ts

@@ -0,0 +1,3 @@
+
+export type * from './types.js'
+export * from './consts.js'

package/src/agent/spectator/types.ts

@@ -0,0 +1,14 @@
+import type { SpectatorEntry as LlmSpectatorEntry } from '@owlmeans/llm-common'
+import type { SpectatorEntryKind } from './consts.js'
+import type { PurposeMetadata } from '../types.js'
+
+/**
+ * The spectator record contracts are owned by `@owlmeans/llm-common`; viable narrows
+ * `kind` and `purpose` to its own enums on {@link SpectatorEntry}.
+ */
+export type { SpectatorArgument, SpectatorEntryMessage } from '@owlmeans/llm-common'
+
+export interface SpectatorEntry extends LlmSpectatorEntry {
+  kind: SpectatorEntryKind
+  purpose: PurposeMetadata
+}

package/src/agent/types.ts

@@ -0,0 +1,10 @@
+import type { LlmPurpose } from '@owlmeans/llm-common'
+
+/**
+ * Observability metadata attached to every model call. Extends the generic
+ * `@owlmeans/llm-common` purpose (`type`, `dedication`) with viable's attribution fields.
+ */
+export interface PurposeMetadata extends LlmPurpose {
+  viableAgent?: string
+  viableHelper?: string
+}

package/src/areas/consts.ts

@@ -0,0 +1,112 @@
+import { AccessLevel } from '../dev/consts.js'
+
+/**
+ * The audiences a generated application serves.
+ *
+ * Every application has these four and only these four. A product's own roles are not new
+ * areas — they fall into one of these: anyone acting on the product's business process from
+ * the inside is an OPERATOR, anyone consuming the product's value as an end user is a USER.
+ * The set is closed so that navigation, access and preview all key off the same vocabulary;
+ * an application that needs a fifth audience needs a permission, not an area.
+ */
+export enum ProjectArea {
+  /** Unauthenticated. The public face of the application. */
+  Guest = 'guest',
+  /** Signed-in end users — the front office. */
+  User = 'user',
+  /** The owner. Holds {@link ADMIN_PERMISSION} and passes every gate. */
+  Admin = 'admin',
+  /** Staff running the business process — the back office. */
+  Operator = 'operator',
+}
+
+/**
+ * Where each area lives in the URL. One frontend, four prefixes — never four applications.
+ *
+ * The guest area owns `/` because it is the only area an anonymous visitor can reach, so it
+ * has to be what a bare hostname serves.
+ */
+export const AREA_PATHS: Record<ProjectArea, string> = {
+  [ProjectArea.Guest]: '/',
+  [ProjectArea.User]: '/frontoffice',
+  [ProjectArea.Admin]: '/admin',
+  [ProjectArea.Operator]: '/backoffice',
+}
+
+/** Areas in menu/footer order — guest first, then the authenticated ones. */
+export const PROJECT_AREAS: ProjectArea[] = [
+  ProjectArea.Guest, ProjectArea.User, ProjectArea.Admin, ProjectArea.Operator
+]
+
+/**
+ * The prefix of an AREA entrypoint — the parent every screen of that area hangs under.
+ *
+ * An area is addressed like a screen and rendered by the same router, so it has to be
+ * excluded explicitly wherever "the entrypoint of this screen" is being resolved — exactly
+ * as {@link ALIAS_PREFIX_WEB_LAYOUT} was.
+ */
+export const ALIAS_PREFIX_WEB_AREA = 'web:area:'
+
+/**
+ * The owner's marker permission.
+ *
+ * It is a MARKER, not a scope: holding it means passing every gate, because the owner of a
+ * project is not a role inside it. A "limited admin" is therefore not this — it is an
+ * ordinary user holding some of the project's own permissions.
+ *
+ * Spelled as `<resource>--<action>` like every generated permission, on a resource name no
+ * domain entity can take.
+ */
+export const ADMIN_PERMISSION = 'project--admin'
+
+/**
+ * The back office's marker permission.
+ *
+ * The operator area is where an organization's own staff work, and until this existed it was
+ * declared `guard(DEFAULT_GUARD)` alone — any signed-in person, which for a generated application
+ * means any visitor who typed an email address. The per-screen gates story development adds narrow
+ * particular screens; they cannot narrow the area, and a project with nothing developed yet has
+ * none of them at all, so the whole back office stood open by construction.
+ *
+ * It is a MARKER like {@link ADMIN_PERMISSION}, but it is NOT a bypass: it says a person belongs in
+ * the back office, and each screen's own permission still decides what they may do there. That AND
+ * is expressed by the area declaring the marker and the screen declaring its own — never by adding
+ * the marker to a screen's gate, where the OR between gate params would make it sufficient on its
+ * own and the screen's permission would stop meaning anything.
+ *
+ * Granted by the platform to the owning organization's people, exactly as the owner marker is, and
+ * to nobody else by default: a customer of the generated app is not staff.
+ */
+export const OPERATOR_PERMISSION = 'project--operator'
+
+/**
+ * The access an area implies for the screens under it.
+ *
+ * Screens INHERIT this from the area declaration and never restate it. Only the operator
+ * area needs anything per screen — its gate names which permission that particular screen
+ * demands, which is the one thing an area cannot know.
+ */
+export const AREA_ACCESS: Record<ProjectArea, AccessLevel> = {
+  [ProjectArea.Guest]: AccessLevel.Guest,
+  [ProjectArea.User]: AccessLevel.User,
+  [ProjectArea.Admin]: AccessLevel.Admin,
+  [ProjectArea.Operator]: AccessLevel.Permissioned,
+}
+
+/**
+ * The grouping tag a story's area gives the permissions it declares.
+ *
+ * A TAG on the permission definition, never a segment of the permission's name. The gate treats a
+ * name as one opaque string, so putting a tier inside it would buy nothing at request time while
+ * making every existing permission a different permission — orphaning every grant already made
+ * against it, with no way to migrate the grant across.
+ *
+ * Two areas declare nothing. Guest is public and needs no permission. Admin's whole rule is
+ * {@link ADMIN_PERMISSION}, which the platform grants and no story ever registers.
+ */
+export const AREA_TIER: Record<ProjectArea, string | null> = {
+  [ProjectArea.Guest]: null,
+  [ProjectArea.User]: ProjectArea.User,
+  [ProjectArea.Admin]: null,
+  [ProjectArea.Operator]: ProjectArea.Operator,
+}

package/src/areas/index.ts

@@ -0,0 +1,3 @@
+export type * from './types.js'
+
+export * from './consts.js'