@sigrun/shared 0.4.2 → 0.5.0

package/CHANGELOG.md

@@ -5,8 +5,9 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
-## [Unreleased]
+## [0.5.0] - 2026-11-02
 
+Version-companion release for sigrun 0.5.0 (no shared changes).
 ## [0.4.2] - 2026-10-31
 
 ### Fixed
@@ -60,3 +61,4 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
   conversation/turn shaping, the channel wire types, session-meta,
   commands, interactions, ambient records, access, settings, views,
   view-delta, and jobs — the surfaces the webui, TUI, and server share.
+

package/dist/access.d.ts

@@ -9,6 +9,8 @@
  *
  * The rules, in order (first match wins):
  *
+ * 0. internal resource → none (curator P5: a conversation created for
+ *    curator work is invisible to EVERY caller — the superuser included);
  * 1. superuser → write;
  * 2. ownerless resource → household write (everyone);
  * 3. user === owner → write;
@@ -48,6 +50,7 @@ export interface AccessPrincipal {
 export declare function accessOf(p: AccessPrincipal, r: {
     readonly owner?: string;
     readonly sharing?: Sharing;
+    readonly internal?: true;
 }): Access;
 /**
  * Type guard for the wire value: every scope shape checked strictly

package/dist/access.js

@@ -9,6 +9,8 @@
  *
  * The rules, in order (first match wins):
  *
+ * 0. internal resource → none (curator P5: a conversation created for
+ *    curator work is invisible to EVERY caller — the superuser included);
  * 1. superuser → write;
  * 2. ownerless resource → household write (everyone);
  * 3. user === owner → write;
@@ -26,6 +28,12 @@
  * module doc; the first matching rule wins.
  */
 export function accessOf(p, r) {
+    // 0. Internal (curator P5): invisible to everyone, the superuser
+    // included — BEFORE any other rule can widen access. The marker is
+    // server-owned (written once in the creating commit), so no caller,
+    // share, or role can ever open an internal resource.
+    if (r.internal === true)
+        return "none";
     // 1. The superuser always writes.
     if (p.superuser === true)
         return "write";

package/dist/session-meta.d.ts

@@ -25,10 +25,10 @@ export type { Sharing } from "./access.js";
  * `invalid_field`.
  *
  * Server-owned fields (`autoName`, `autoNameAttempts`,
- * `lastActivityAt`, `jobId`, `deliver`) are written by host code only
- * (activity.ts, the A2 auto-namer, fire.ts's job stamp); they are NOT
- * patch surface — the strict validator keeps rejecting them as
- * `invalid_field`.
+ * `lastActivityAt`, `jobId`, `deliver`, `internal`) are written by host
+ * code only (activity.ts, the A2 auto-namer, fire.ts's job stamp, the
+ * curator's creating commit); they are NOT patch surface — the strict
+ * validator keeps rejecting them as `invalid_field`.
  */
 /** The per-conversation session metadata (spec §5). */
 export type SessionMeta = {
@@ -85,6 +85,17 @@ export type SessionMeta = {
      * strict validator rejects the key as `invalid_field`.
      */
     deliver?: string[];
+    /**
+     * Server-owned internal-run marker (curator P5, spec §6.1): true on a
+     * conversation created for curator work — hidden from every list and
+     * view, 404 on every `:id` route for every caller (superuser
+     * included), never named, never notified, never idle-clocked, and
+     * absent from every event surface. Written ONCE by the curator's
+     * creating commit (`markInternal`); the flag never changes after
+     * creation. Never patchable — the strict validator rejects the key
+     * as `invalid_field`.
+     */
+    internal?: true;
     /**
      * The §5.9 per-resource sharing state; absent = private (owner and
      * superuser only). Patchable by the OWNER or a superuser (403

package/dist/settings.d.ts

@@ -303,11 +303,11 @@ export interface NotificationsSettings {
     readonly runSettled?: "unwatched" | "cron" | "always" | "never";
 }
 /**
- * The built-in extensions toggles: codemode, MCP, tool search and OAuth
- * ship WITH core. Each key defaults to `true`; `false`
- * removes the built-in entirely (absent from `/v1/extensions`, its config
- * ignored with one log line). RESTART-REQUIRED: the built-in set resolves
- * at boot, like `extensions`.
+ * The built-in extensions toggles: codemode, MCP, tool search, the
+ * gateway, OAuth and the curator ship WITH core. Each key defaults to
+ * `true`; `false` removes the built-in entirely (absent from
+ * `/v1/extensions`, its config ignored with one log line).
+ * RESTART-REQUIRED: the built-in set resolves at boot, like `extensions`.
  */
 export interface BuiltinExtensionsSettings {
     readonly codemode?: boolean;
@@ -317,6 +317,8 @@ export interface BuiltinExtensionsSettings {
     readonly gateway?: boolean;
     /** OAuth login providers (multi-user M3b), default true. */
     readonly oauth?: boolean;
+    /** Curator (Task B1): the per-user curation loops, default true. */
+    readonly curator?: boolean;
 }
 /**
  * The persisted shape: HarnessSettings pass-throughs + sigrun fields.

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@sigrun/shared",
-	"version": "0.4.2",
+	"version": "0.5.0",
 	"description": "sigrun shared leaf package \u2014 theme tokens, turn/conversation shaping, and the channel wire types (pure leaf, zero dependencies)",
 	"type": "module",
 	"exports": {