@owlmeans/viable-common 0.0.42 → 0.0.44

package/src/convert/consts.ts

@@ -14,7 +14,6 @@
  * things at each hop.
  */
 
-import type { StoryKind } from '../ba/consts.js'
 import { HISTORY_FILE, METADATA_DIRS } from '../metadata/consts.js'
 
 /**
@@ -359,15 +358,6 @@ export enum EstimateSlice {
   Fixed = 'fixed',
 }
 
-/**
- * What KIND of story a conversion produced.
- *
- * The analysis half of a conversion produces exactly the two kinds an ordinary initialization
- * does; a conversion adds one more — a `coverage` story, written so an area the origin serves but
- * the flow never reaches still has something in it.
- */
-export type ConversionStoryKind = StoryKind | 'coverage'
-
 /**
  * Where the origin's own sources live inside the target's volume.
  *
@@ -454,10 +444,6 @@ export const CONVERSION_SEED_DIR = `${CONVERSION_DIR}/seed`
 /** The carried seed data itself, beside its description. */
 export const CONVERSION_SEED_DATA_DIR = `${CONVERSION_SEED_DIR}/data`
 
-export const conversionStoryDoc = (code: string): string => `${CONVERSION_STORY_DIR}/${code}.md`
-export const conversionSeedDoc = (name: string): string => `${CONVERSION_SEED_DIR}/${name}.md`
-export const conversionSeedData = (name: string, ext: string): string =>
-  `${CONVERSION_SEED_DATA_DIR}/${name}.${ext}`
 
 /**
  * The two agent-memory nodes a conversion writes into the TARGET's own harness.

package/src/convert/helpers.ts

@@ -4,6 +4,7 @@ import {
   SIZE_CLASS_BOUNDS
 } from './consts.js'
 import type { OriginCard, StoryProof } from './types.js'
+import { BINARY_EXTENSIONS, BULK_HINTS, DATA_AMBIGUOUS_EXT, DATA_OVERRIDABLE, EXT_CLASS, GENERATED_SEGMENTS, LOCK_NAMES, MANIFEST_NAMES, SEED_HINTS, TEST_SEGMENTS, TEXT_EXTENSIONS } from './consts.local.js'
 
 /**
  * Pure, deterministic derivations over the conversion vocabulary.
@@ -24,99 +25,11 @@ export const sizeClassOf = (bytes: number): SizeClass => {
   return SizeClass.Huge
 }
 
-/**
- * Extension → class, for the extensions that decide a file on their own.
- *
- * Deliberately not exhaustive: a path rule below overrides it wherever the location says more than
- * the tail does (a `.ts` under `tests/` is a test, a `.json` under `seed/` is data).
- */
-const EXT_CLASS: Record<string, FileClass> = {
-  ts: FileClass.Source, tsx: FileClass.Source, js: FileClass.Source, jsx: FileClass.Source,
-  mjs: FileClass.Source, cjs: FileClass.Source, mts: FileClass.Source, cts: FileClass.Source,
-  vue: FileClass.Source, svelte: FileClass.Source, java: FileClass.Source, kt: FileClass.Source,
-  kts: FileClass.Source, go: FileClass.Source, py: FileClass.Source, rb: FileClass.Source,
-  php: FileClass.Source, cs: FileClass.Source, ex: FileClass.Source, exs: FileClass.Source,
-  rs: FileClass.Source, sql: FileClass.Source, sh: FileClass.Source,
-
-  css: FileClass.Style, scss: FileClass.Style, sass: FileClass.Style, less: FileClass.Style,
-  styl: FileClass.Style,
-
-  md: FileClass.Doc, mdx: FileClass.Doc, rst: FileClass.Doc, adoc: FileClass.Doc,
-  txt: FileClass.Doc,
-
-  json: FileClass.Config, yaml: FileClass.Config, yml: FileClass.Config, toml: FileClass.Config,
-  ini: FileClass.Config, env: FileClass.Config, properties: FileClass.Config,
-  xml: FileClass.Config, conf: FileClass.Config,
-
-  html: FileClass.Template, htm: FileClass.Template, hbs: FileClass.Template,
-  ejs: FileClass.Template, pug: FileClass.Template, twig: FileClass.Template,
-  erb: FileClass.Template, jinja: FileClass.Template, j2: FileClass.Template,
-
-  csv: FileClass.Data, tsv: FileClass.Data, ndjson: FileClass.Data, jsonl: FileClass.Data,
-  parquet: FileClass.Data, dump: FileClass.Data,
-
-  png: FileClass.Binary, jpg: FileClass.Binary, jpeg: FileClass.Binary, gif: FileClass.Binary,
-  webp: FileClass.Binary, ico: FileClass.Binary, pdf: FileClass.Binary, zip: FileClass.Binary,
-  gz: FileClass.Binary, tar: FileClass.Binary, woff: FileClass.Binary, woff2: FileClass.Binary,
-  ttf: FileClass.Binary, otf: FileClass.Binary, mp4: FileClass.Binary, mp3: FileClass.Binary,
-  wasm: FileClass.Binary, jar: FileClass.Binary, so: FileClass.Binary, dll: FileClass.Binary,
-}
-
-/** Exact basenames that are a package manifest whatever their extension says. */
-const MANIFEST_NAMES = [
-  'package.json', 'deno.json', 'pom.xml', 'build.gradle', 'build.gradle.kts',
-  'settings.gradle', 'settings.gradle.kts', 'go.mod', 'cargo.toml', 'pyproject.toml',
-  'requirements.txt', 'pipfile', 'composer.json', 'gemfile', 'mix.exs',
-]
-
-/** Exact basenames that are a lockfile — never read, never counted as source. */
-const LOCK_NAMES = [
-  'bun.lock', 'bun.lockb', 'package-lock.json', 'yarn.lock', 'pnpm-lock.yaml', 'go.sum',
-  'cargo.lock', 'composer.lock', 'gemfile.lock', 'poetry.lock', 'pipfile.lock', 'mix.lock',
-]
-
-/**
- * Path segments whose contents are produced by a build and say nothing about the application.
- *
- * `bin` is deliberately absent though `obj` is here: it is .NET/Java output in two of the nine
- * ecosystems the converter reads and a real entrypoint directory in the rest (`bin/cli.ts`,
- * `bin/console`, `bin/rails`), and this function is handed one path with no tree around it to
- * tell the two apart. Dropping those entrypoints out of every source listing is the worse error.
- */
-const GENERATED_SEGMENTS = [
-  'node_modules', 'dist', 'build', 'out', 'target', 'vendor', '.next', '.nuxt', '.svelte-kit',
-  '.turbo', '.gradle', '__pycache__', 'coverage', '.venv', 'obj',
-]
-
-/** Path segments that make a file a test wherever its extension would have said otherwise. */
-const TEST_SEGMENTS = ['test', 'tests', '__tests__', 'spec', 'specs', 'e2e']
-
 const segmentsOf = (path: string): string[] => path.split('/').filter(part => part !== '')
 
 const hasSegment = (path: string, of: string[]): boolean =>
   segmentsOf(path).some(part => of.includes(part.toLowerCase()))
 
-/**
- * The classes a seed or dump LOCATION is allowed to override.
- *
- * A seed directory says what a file holds, not what language it is written in — so it reclassifies
- * a payload and never a program. `seed/users.json` is data; `src/seedUsers.ts` is the code that
- * loads it, and `src/exportReport.ts` is a screen, and pushing either into the data budget takes
- * real source out of the census's reach.
- */
-const DATA_OVERRIDABLE: FileClass[] = [
-  FileClass.Data, FileClass.Config, FileClass.Binary, FileClass.Unknown,
-]
-
-/**
- * The extensions that are as often a dump as they are a program.
- *
- * A `.sql` under `migrations/` is schema somebody wrote and a coder has to reproduce; the same
- * tail under `dumps/` is an export nothing should read into a prompt. The location is the only
- * thing that separates them, so it outranks the tail for these and for no other language.
- */
-const DATA_AMBIGUOUS_EXT = ['sql']
-
 /**
  * What one file of the origin is.
  *
@@ -150,31 +63,6 @@ export const fileClassOf = (path: string, ext: string): FileClass => {
   return byExt
 }
 
-/**
- * Extensions whose tail already answers the binary question, either way.
- *
- * Deliberately two lists and not one with a default: an extension the census has never seen must
- * be READ rather than guessed at, because a repository nobody here wrote carries tails nobody
- * here chose. Nothing in either list is a guess about content — a `.ts` holding a NUL byte is a
- * corrupt file, and a `.png` that is not binary is not a `.png`.
- */
-const TEXT_EXTENSIONS: readonly string[] = [
-  '.ts', '.tsx', '.js', '.jsx', '.mjs', '.cjs', '.mts', '.cts', '.json', '.jsonc',
-  '.md', '.mdx', '.txt', '.css', '.scss', '.sass', '.less', '.html', '.htm', '.xml', '.svg',
-  '.yml', '.yaml', '.toml', '.ini', '.env', '.sh', '.bash', '.zsh', '.sql', '.graphql', '.gql',
-  '.py', '.rb', '.go', '.rs', '.java', '.kt', '.php', '.cs', '.c', '.h', '.cpp', '.hpp', '.swift',
-  '.vue', '.svelte', '.astro', '.lock', '.csv',
-]
-
-const BINARY_EXTENSIONS: readonly string[] = [
-  '.png', '.jpg', '.jpeg', '.gif', '.webp', '.avif', '.bmp', '.ico', '.icns', '.tiff',
-  '.mp3', '.mp4', '.wav', '.ogg', '.webm', '.mov', '.avi',
-  '.woff', '.woff2', '.ttf', '.otf', '.eot',
-  '.pdf', '.zip', '.gz', '.tgz', '.bz2', '.xz', '.7z', '.rar', '.tar',
-  '.wasm', '.node', '.so', '.dylib', '.dll', '.exe', '.bin', '.class', '.jar',
-  '.db', '.sqlite', '.sqlite3',
-]
-
 /**
  * The binary verdict a path already carries, or `null` for a file that has to be probed.
  *
@@ -228,12 +116,6 @@ export const entropyClassOf = (head: string): EntropyClass => {
   return EntropyClass.Text
 }
 
-/** Path segments and name fragments that mark bulk data — an export, not the app's own data. */
-const BULK_HINTS = ['dump', 'dumps', 'export', 'exports', 'backup', 'backups', 'snapshot', 'archive']
-
-/** Path segments that mark seed data — what the application needs in order to make sense. */
-const SEED_HINTS = ['seed', 'seeds', 'fixture', 'fixtures', 'sample', 'samples', 'demo-data']
-
 const matchesHint = (path: string, hints: string[]): boolean => {
   const lower = path.toLowerCase()
   if (hasSegment(lower, hints)) return true

package/src/convert/index.ts

@@ -1,4 +1,5 @@
 export * from './consts.js'
+export * from './utils.js'
 export * from './schemas.js'
 export * from './helpers.js'
 export type * from './types.js'

package/src/convert/types.ts

@@ -2,11 +2,8 @@ import type { ProjectArea } from '../areas/consts.js'
 import type { ConnectLlm } from '../connect/consts.js'
 import type { ModelRole } from '../execution/consts.js'
 import type { TargetLayout } from '../integrity/consts.js'
-import type {
-  ArchitectureCase, ConversionStage, ConversionStoryKind, ConvertibilityReason,
-  ConvertibilityVerdict, DumpKind, EntropyClass, EstimateSlice, FileClass, OriginKind, OriginShape,
-  OriginState, PurposeEvidenceSource, SizeClass, StackFamily, StackId, TaxonomyKind, WorkspaceKind
-} from './consts.js'
+import type { ArchitectureCase, ConversionStage, ConvertibilityReason, ConvertibilityVerdict, DumpKind, EntropyClass, EstimateSlice, FileClass, OriginKind, OriginShape, OriginState, PurposeEvidenceSource, SizeClass, StackFamily, StackId, TaxonomyKind, WorkspaceKind } from './consts.js'
+import type { StoryKind } from '../ba/consts.js'
 
 // --- inventory ------------------------------------------------------------------------------
 
@@ -742,3 +739,12 @@ export interface ConversionMemoryMeta {
   purged: boolean
   updatedAt: string
 }
+
+/**
+ * What KIND of story a conversion produced.
+ *
+ * The analysis half of a conversion produces exactly the two kinds an ordinary initialization
+ * does; a conversion adds one more — a `coverage` story, written so an area the origin serves but
+ * the flow never reaches still has something in it.
+ */
+export type ConversionStoryKind = StoryKind | 'coverage'

package/src/convert/utils.ts

@@ -0,0 +1,8 @@
+import { CONVERSION_SEED_DATA_DIR, CONVERSION_SEED_DIR, CONVERSION_STORY_DIR } from './consts.js'
+
+export const conversionStoryDoc = (code: string): string => `${CONVERSION_STORY_DIR}/${code}.md`
+
+export const conversionSeedDoc = (name: string): string => `${CONVERSION_SEED_DIR}/${name}.md`
+
+export const conversionSeedData = (name: string, ext: string): string =>
+  `${CONVERSION_SEED_DATA_DIR}/${name}.${ext}`

package/src/design/consts.ts

@@ -6,6 +6,8 @@
  * the fields it is missing were absent because they had not been designed and which because the
  * shape did not have them yet. Those are different questions with different answers.
  */
+import type { StoryDesignRuntime } from './types.js'
+
 export const STORY_DESIGN_VERSION = 1
 
 /** How far a design may drift from the project it was written against before it is stale. */
@@ -21,3 +23,49 @@ export enum DesignStaleness {
   /** The generated tree moved under it. Re-run the stages that read the tree. */
   Tree = 'tree',
 }
+
+/** Who acts in a story. */
+export enum StoryActor {
+  /** A person, in one of the four areas. Every story until something says otherwise. */
+  Human = 'human',
+  /**
+   * The application's own LLM agent.
+   *
+   * An EPHEMERAL role: it holds no permissions and has no area of its own, because there is nobody
+   * to sign in as it. A story belongs to it when the work is the agent's — the human half is a
+   * separate, paired story that starts the work and watches it.
+   */
+  Agent = 'agent',
+  /** A queue consumer. Ephemeral in exactly the same sense. */
+  Worker = 'worker',
+}
+
+/** The ephemeral actors — those a permission may never be granted to. */
+export const EPHEMERAL_ACTORS: StoryActor[] = [StoryActor.Agent, StoryActor.Worker]
+
+/**
+ * The three shapes that can perform work with a model, cheapest first.
+ *
+ * They are not interchangeable and the difference is who decides the order. A CALL is one prompt
+ * and one answer; a PIPELINE runs steps this application named in advance; an AGENT is handed
+ * tools and works out its own path. Each step up buys capability with latency, money and a
+ * failure mode, so the right answer is the simplest shape that does the job — and for most work
+ * that asks for a model at all, it is a call.
+ */
+export enum StoryAgentKind {
+  /** One prompt, one answer, optionally schema-shaped. The default. */
+  Call = 'call',
+  /** Ordered steps decided by the application, not by the model. */
+  Pipeline = 'pipeline',
+  /** The model chooses its own path through the tools it was given. */
+  Agent = 'agent',
+}
+
+/** What a design carries when nobody has asked the question — and when the answer was "no". */
+export const NO_RUNTIME: StoryDesignRuntime = {
+  actor: StoryActor.Human,
+  worker: false,
+  jobs: [],
+  agents: [],
+  kv: false,
+}

package/src/design/runtime.ts

@@ -14,125 +14,12 @@
  * emits exactly the tree it emitted before any of this existed.
  */
 
-/** Who acts in a story. */
-export enum StoryActor {
-  /** A person, in one of the four areas. Every story until something says otherwise. */
-  Human = 'human',
-  /**
-   * The application's own LLM agent.
-   *
-   * An EPHEMERAL role: it holds no permissions and has no area of its own, because there is nobody
-   * to sign in as it. A story belongs to it when the work is the agent's — the human half is a
-   * separate, paired story that starts the work and watches it.
-   */
-  Agent = 'agent',
-  /** A queue consumer. Ephemeral in exactly the same sense. */
-  Worker = 'worker',
-}
-
-/** The ephemeral actors — those a permission may never be granted to. */
-export const EPHEMERAL_ACTORS: StoryActor[] = [StoryActor.Agent, StoryActor.Worker]
+import { EPHEMERAL_ACTORS, NO_RUNTIME, StoryActor } from './consts.js'
+import type { StoryDesignRuntime } from './types.js'
 
 export const isEphemeralActor = (actor?: StoryActor): boolean =>
   actor != null && EPHEMERAL_ACTORS.includes(actor)
 
-/** One queued unit of work. */
-export interface StoryDesignJob {
-  /** The queue it is enqueued onto. */
-  queue: string
-  /** The job name, which becomes the backend-only `job:<name>` protocol alias. */
-  name: string
-  /** The processor module, relative to the worker package's `src`. */
-  path: string
-  /** What it does, in one sentence, for the coder that writes the processor. */
-  purpose: string
-  /**
-   * Why it may not run on the request path.
-   *
-   * Recorded because it is the thing a later run has to be able to disagree with. "It might be
-   * slow" is not a reason; "it calls a model" and "it walks every row of a table the user owns"
-   * are.
-   */
-  reason: string
-  /**
-   * Whether running it twice is safe, and how it was made so.
-   *
-   * A worker can die mid-job; the lock expires and the step re-runs. There is no way to make that
-   * automatic, so the answer is written down where the processor's author has to read it.
-   */
-  idempotency: string
-}
-
-/** An LLM agent or pipeline generated INTO the target. */
-export interface StoryDesignAgent {
-  /** Its alias in the target's own agent registry. */
-  alias: string
-  /** The module, relative to the shared backend package's `src`. */
-  path: string
-  /** What it is for. */
-  purpose: string
-  /** Which of the three shapes this is — a call, a pipeline, or a tool-using agent. */
-  kind: StoryAgentKind
-  /** The job that runs it — an agent is never invoked on the request path. */
-  job?: string
-}
-
-/**
- * The three shapes that can perform work with a model, cheapest first.
- *
- * They are not interchangeable and the difference is who decides the order. A CALL is one prompt
- * and one answer; a PIPELINE runs steps this application named in advance; an AGENT is handed
- * tools and works out its own path. Each step up buys capability with latency, money and a
- * failure mode, so the right answer is the simplest shape that does the job — and for most work
- * that asks for a model at all, it is a call.
- */
-export enum StoryAgentKind {
-  /** One prompt, one answer, optionally schema-shaped. The default. */
-  Call = 'call',
-  /** Ordered steps decided by the application, not by the model. */
-  Pipeline = 'pipeline',
-  /** The model chooses its own path through the tools it was given. */
-  Agent = 'agent',
-}
-
-/**
- * The gate, as the design stage recorded it.
- *
- * Absent on a design written before this existed, and read as "none of it" everywhere — which is
- * both the safe answer and the true one for every story developed until now.
- */
-export interface StoryDesignRuntime {
-  actor: StoryActor
-  /** Whether this story puts work on the queue at all. */
-  worker: boolean
-  jobs: StoryDesignJob[]
-  agents: StoryDesignAgent[]
-  /**
-   * Whether this story's data belongs in the key/value store rather than in Postgres.
-   *
-   * Postgres is the default and being wrong with it is cheap. This is true only for data with an
-   * expiry, a lock, a counter or a fan-out, and a bounded, namespaced key set.
-   */
-  kv: boolean
-  /**
-   * Which HUMAN story shows the progress of this story's queued work.
-   *
-   * An ephemeral actor cannot report to anybody: there is no screen it owns and no session it runs
-   * in. A story that enqueues work therefore names the story whose screen carries the job feed, and
-   * the permission to enqueue and to watch is granted to that area's role.
-   */
-  feedback?: string
-}
-
-/** What a design carries when nobody has asked the question — and when the answer was "no". */
-export const NO_RUNTIME: StoryDesignRuntime = {
-  actor: StoryActor.Human,
-  worker: false,
-  jobs: [],
-  agents: [],
-  kv: false,
-}
-
 /** Read the gate off a design, total over a design that predates it. */
 export const runtimeOf = (design?: { runtime?: StoryDesignRuntime }): StoryDesignRuntime =>
   design?.runtime ?? NO_RUNTIME

package/src/design/schemas.ts

@@ -1,9 +1,8 @@
 import type { JSONSchemaType } from 'ajv'
 
 import { ProjectArea } from '../areas/consts.js'
-import { StoryActor, StoryAgentKind } from './runtime.js'
-import type { StoryDesignAgent, StoryDesignJob } from './runtime.js'
-import type { StoryDesign } from './types.js'
+import { StoryActor, StoryAgentKind } from './consts.js'
+import type { StoryDesign, RuntimeDecision } from './types.js'
 
 /**
  * The design shape, validated where the shape is DEFINED.
@@ -375,10 +374,3 @@ export const RuntimeDecisionSchema = {
   // is that they are usually empty.
 } as unknown as JSONSchemaType<RuntimeDecision>
 
-/** What the gate answers with — the model's half of {@link StoryDesignRuntime}. */
-export interface RuntimeDecision {
-  kv: boolean
-  feedback: string
-  jobs: StoryDesignJob[]
-  agents: StoryDesignAgent[]
-}

package/src/design/types.ts

@@ -1,8 +1,10 @@
 import type { ProjectArea } from '../areas/consts.js'
-import type { StoryDesignRuntime } from './runtime.js'
+
 import type { AccessList } from '../dev/types.js'
 import type { UXTransition } from '../ux/types.js'
 
+import { StoryActor, StoryAgentKind } from './consts.js'
+
 /**
  * One screen, as the design decided it.
  *
@@ -190,3 +192,81 @@ export interface StoryDesignPort {
   /** Write a design as the card's next revision and answer the revision number it received. */
   put: (cardId: string, design: StoryDesign, opts?: StoryDesignPutOptions) => Promise<number>
 }
+
+/** One queued unit of work. */
+export interface StoryDesignJob {
+  /** The queue it is enqueued onto. */
+  queue: string
+  /** The job name, which becomes the backend-only `job:<name>` protocol alias. */
+  name: string
+  /** The processor module, relative to the worker package's `src`. */
+  path: string
+  /** What it does, in one sentence, for the coder that writes the processor. */
+  purpose: string
+  /**
+   * Why it may not run on the request path.
+   *
+   * Recorded because it is the thing a later run has to be able to disagree with. "It might be
+   * slow" is not a reason; "it calls a model" and "it walks every row of a table the user owns"
+   * are.
+   */
+  reason: string
+  /**
+   * Whether running it twice is safe, and how it was made so.
+   *
+   * A worker can die mid-job; the lock expires and the step re-runs. There is no way to make that
+   * automatic, so the answer is written down where the processor's author has to read it.
+   */
+  idempotency: string
+}
+
+/** An LLM agent or pipeline generated INTO the target. */
+export interface StoryDesignAgent {
+  /** Its alias in the target's own agent registry. */
+  alias: string
+  /** The module, relative to the shared backend package's `src`. */
+  path: string
+  /** What it is for. */
+  purpose: string
+  /** Which of the three shapes this is — a call, a pipeline, or a tool-using agent. */
+  kind: StoryAgentKind
+  /** The job that runs it — an agent is never invoked on the request path. */
+  job?: string
+}
+
+/**
+ * The gate, as the design stage recorded it.
+ *
+ * Absent on a design written before this existed, and read as "none of it" everywhere — which is
+ * both the safe answer and the true one for every story developed until now.
+ */
+export interface StoryDesignRuntime {
+  actor: StoryActor
+  /** Whether this story puts work on the queue at all. */
+  worker: boolean
+  jobs: StoryDesignJob[]
+  agents: StoryDesignAgent[]
+  /**
+   * Whether this story's data belongs in the key/value store rather than in Postgres.
+   *
+   * Postgres is the default and being wrong with it is cheap. This is true only for data with an
+   * expiry, a lock, a counter or a fan-out, and a bounded, namespaced key set.
+   */
+  kv: boolean
+  /**
+   * Which HUMAN story shows the progress of this story's queued work.
+   *
+   * An ephemeral actor cannot report to anybody: there is no screen it owns and no session it runs
+   * in. A story that enqueues work therefore names the story whose screen carries the job feed, and
+   * the permission to enqueue and to watch is granted to that area's role.
+   */
+  feedback?: string
+}
+
+/** What the gate answers with — the model's half of {@link StoryDesignRuntime}. */
+export interface RuntimeDecision {
+  kv: boolean
+  feedback: string
+  jobs: StoryDesignJob[]
+  agents: StoryDesignAgent[]
+}

package/src/dev/schemas.ts

@@ -1,6 +1,7 @@
 import type { JSONSchemaType } from "ajv"
 import type { FileBlock, AccessList, AccessBlock, EntrypointRef } from "./types.js"
 import { AccessLevel } from "./consts.js"
+import type { ModelAccessBlock } from './types.local.js'
 
 export const FileBlockSchema: JSONSchemaType<FileBlock> = {
   type: "object",
@@ -80,9 +81,6 @@ export const EntrypointRefListSchema: JSONSchemaType<{entries: EntrypointRef[]}>
   additionalProperties: false
 }
 
-/** The part of an {@link AccessBlock} a model is asked for. */
-type ModelAccessBlock = Omit<AccessBlock, 'defaults' | 'entityScoped'>
-
 const ModelAccessBlockSchema: JSONSchemaType<ModelAccessBlock> = {
   type: "object",
   title: "AccessBlock",

package/src/dev/types.local.ts

@@ -0,0 +1,4 @@
+import type { AccessBlock } from './types.js'
+
+/** The part of an {@link AccessBlock} a model is asked for. */
+export type ModelAccessBlock = Omit<AccessBlock, 'defaults' | 'entityScoped'>

package/src/integrity/consts.local.ts

@@ -0,0 +1,5 @@
+/** Root-level files protected in every layout. */
+export const ROOT_PROTECTED = ['package.json', 'bunfig.toml', 'bun.lock', 'index.js'] as const
+
+/** The harness files, protected in every layout — see {@link TARGET_PROTECTED_FILES}. */
+export const HARNESS_PROTECTED = ['.claude/settings.json', '.agents/scripts/link-skills.sh'] as const