@songsid/agend 2.2.0-beta.9 → 2.3.0-beta.1

package/dist/web-effect-profiles.d.ts

@@ -0,0 +1,118 @@
+import { z } from "zod";
+export declare const EFFECT_PROFILE_LIMIT = 20;
+export declare const EFFECT_PROFILE_IDS = 512;
+export declare const EFFECT_PROFILE_FILE_BYTES: number;
+declare const inputSchema: z.ZodObject<{
+    v: z.ZodLiteral<1>;
+    device: z.ZodEnum<{
+        standard: "standard";
+        constrained: "constrained";
+    }>;
+    verdict: z.ZodEnum<{
+        paused: "paused";
+        off: "off";
+        ok: "ok";
+        degraded: "degraded";
+    }>;
+    reason: z.ZodNullable<z.ZodEnum<{
+        hidden: "hidden";
+        clock_unavailable: "clock_unavailable";
+        host_budget: "host_budget";
+        gates_unknown: "gates_unknown";
+        reduced_motion: "reduced_motion";
+        save_data: "save_data";
+        viewer_off: "viewer_off";
+    }>>;
+    samples: z.ZodNumber;
+    fps_p50: z.ZodNumber;
+    fps_p10: z.ZodNumber;
+    fps_floor: z.ZodNumber;
+    long_task_p95: z.ZodNullable<z.ZodNumber>;
+    long_task_samples: z.ZodNumber;
+    attributed_long_task_p95: z.ZodNullable<z.ZodNumber>;
+    attributed_samples: z.ZodNumber;
+    attribution: z.ZodEnum<{
+        unknown: "unknown";
+        observed: "observed";
+    }>;
+    load_ms: z.ZodNullable<z.ZodNumber>;
+}, z.core.$strict>;
+declare const storedSchema: z.ZodObject<{
+    at: z.ZodNumber;
+    source: z.ZodLiteral<"reported_host">;
+    v: z.ZodLiteral<1>;
+    device: z.ZodEnum<{
+        standard: "standard";
+        constrained: "constrained";
+    }>;
+    verdict: z.ZodEnum<{
+        paused: "paused";
+        off: "off";
+        ok: "ok";
+        degraded: "degraded";
+    }>;
+    reason: z.ZodNullable<z.ZodEnum<{
+        hidden: "hidden";
+        clock_unavailable: "clock_unavailable";
+        host_budget: "host_budget";
+        gates_unknown: "gates_unknown";
+        reduced_motion: "reduced_motion";
+        save_data: "save_data";
+        viewer_off: "viewer_off";
+    }>>;
+    samples: z.ZodNumber;
+    fps_p50: z.ZodNumber;
+    fps_p10: z.ZodNumber;
+    fps_floor: z.ZodNumber;
+    long_task_p95: z.ZodNullable<z.ZodNumber>;
+    long_task_samples: z.ZodNumber;
+    attributed_long_task_p95: z.ZodNullable<z.ZodNumber>;
+    attributed_samples: z.ZodNumber;
+    attribution: z.ZodEnum<{
+        unknown: "unknown";
+        observed: "observed";
+    }>;
+    load_ms: z.ZodNullable<z.ZodNumber>;
+}, z.core.$strict>;
+export type EffectProfileInput = z.infer<typeof inputSchema>;
+export type StoredEffectProfile = z.infer<typeof storedSchema>;
+export interface EffectProfileSummary {
+    status: "unmeasured" | "reported";
+    records: StoredEffectProfile[];
+}
+export declare function checkEffectProfile(input: unknown): {
+    ok: true;
+    profile: EffectProfileInput;
+} | {
+    ok: false;
+    error: "profile_args";
+};
+type Failure = {
+    ok: false;
+    error: "profile_args" | "profiles_unreadable" | "profiles_write_failed" | "profiles_bound" | "profile_clock" | "profiles_busy";
+};
+/** Lazy, single-fleet-owner store. No constructor I/O, HTTP ingress, profile writer tool or frame mount. */
+export declare class WebEffectProfiles {
+    private readonly opts;
+    readonly path: string;
+    private readonly dataDir;
+    constructor(dataDir: string, opts?: {
+        now?: () => number;
+    });
+    private load;
+    read(id: string): {
+        ok: true;
+        status: "unmeasured" | "reported";
+        records: StoredEffectProfile[];
+    } | Failure;
+    /** One bounded parse for a library listing; callers still project only their authorized ids. */
+    readSummaries(): {
+        ok: true;
+        summaries: Record<string, EffectProfileSummary>;
+    } | Failure;
+    record(id: string, input: unknown): {
+        ok: true;
+        profile: StoredEffectProfile;
+    } | Failure;
+}
+export {};

package/dist/web-effect-profiles.js

@@ -0,0 +1,180 @@
+/** #1629: bounded reported host observations. This store grants no effect or admission authority. */
+import { constants, openSync, fstatSync, readSync, closeSync, mkdirSync } from "node:fs";
+import { join, resolve } from "node:path";
+import { z } from "zod";
+import { atomicWriteFileSync } from "./atomic-write.js";
+export const EFFECT_PROFILE_LIMIT = 20;
+export const EFFECT_PROFILE_IDS = 512;
+export const EFFECT_PROFILE_FILE_BYTES = 8 * 1024 * 1024;
+const ID = /^[a-f0-9]{32}$/;
+const writes = new Set();
+const device = z.enum(["standard", "constrained"]);
+const integer = z.number().int().min(0).max(Number.MAX_SAFE_INTEGER);
+const fps = z.number().finite().min(0).max(1000);
+const task = z.number().finite().min(0).max(256000).nullable();
+const shape = {
+    v: z.literal(1), device,
+    verdict: z.enum(["ok", "degraded", "paused", "off"]),
+    reason: z.enum(["host_budget", "clock_unavailable", "gates_unknown", "hidden", "reduced_motion", "save_data", "viewer_off"]).nullable(),
+    samples: z.number().int().min(1).max(120),
+    fps_p50: fps, fps_p10: fps, fps_floor: fps.positive(),
+    long_task_p95: task, long_task_samples: z.number().int().min(0).max(120),
+    attributed_long_task_p95: task, attributed_samples: z.number().int().min(0).max(120),
+    attribution: z.enum(["unknown", "observed"]), load_ms: z.number().finite().min(0).max(600000).nullable(),
+};
+function coherent(p) {
+    return p.fps_p10 <= p.fps_p50 && p.long_task_samples <= p.samples && p.attributed_samples <= p.long_task_samples
+        && (p.long_task_samples === 0) === (p.long_task_p95 === null)
+        && (p.attributed_samples === 0) === (p.attributed_long_task_p95 === null)
+        && (p.attributed_samples === 0 ? p.attribution === "unknown" : p.attribution === "observed");
+}
+const inputSchema = z.object(shape).strict().refine(coherent);
+const storedSchema = z.object({ ...shape, at: integer, source: z.literal("reported_host") }).strict().refine(coherent);
+export function checkEffectProfile(input) {
+    try {
+        if (!plain(input))
+            return { ok: false, error: "profile_args" };
+        const p = inputSchema.safeParse(input);
+        return p.success ? { ok: true, profile: p.data } : { ok: false, error: "profile_args" };
+    }
+    catch {
+        return { ok: false, error: "profile_args" };
+    }
+}
+const fail = (error) => ({ ok: false, error });
+const plain = (x) => !!x && typeof x === "object" && Object.getPrototypeOf(x) === Object.prototype;
+/** One regular fd, bounded before allocation and again after read; no path supplied by a web request. */
+function readIndex(path) {
+    const fd = openSync(path, constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0) | (constants.O_NONBLOCK ?? 0));
+    try {
+        const stat = fstatSync(fd);
+        if (!stat.isFile() || stat.size > EFFECT_PROFILE_FILE_BYTES)
+            throw Error("profile file bound");
+        const bytes = Buffer.alloc(stat.size + 1);
+        let at = 0;
+        while (at < bytes.length) {
+            const n = readSync(fd, bytes, at, bytes.length - at, null);
+            if (!n)
+                break;
+            at += n;
+        }
+        if (at !== stat.size || fstatSync(fd).size !== stat.size)
+            throw Error("profile file changed");
+        return bytes.subarray(0, at);
+    }
+    finally {
+        closeSync(fd);
+    }
+}
+/** Lazy, single-fleet-owner store. No constructor I/O, HTTP ingress, profile writer tool or frame mount. */
+export class WebEffectProfiles {
+    opts;
+    path;
+    dataDir;
+    constructor(dataDir, opts = {}) {
+        this.opts = opts;
+        this.dataDir = resolve(dataDir);
+        this.path = join(this.dataDir, "web-effect-profiles.json");
+    }
+    load() {
+        let bytes;
+        try {
+            bytes = readIndex(this.path);
+        }
+        catch (e) {
+            return e.code === "ENOENT" ? { rev: 0, entries: new Map() } : fail("profiles_unreadable");
+        }
+        try {
+            const text = new TextDecoder("utf-8", { fatal: true }).decode(bytes), doc = JSON.parse(text);
+            if (!plain(doc) || Object.keys(doc).sort().join(",") !== "entries,rev,version" || doc.version !== 1 || !Number.isSafeInteger(doc.rev) || doc.rev < 0 || !plain(doc.entries))
+                return fail("profiles_unreadable");
+            const entries = new Map();
+            for (const [id, value] of Object.entries(doc.entries)) {
+                if (!ID.test(id) || entries.size >= EFFECT_PROFILE_IDS || !plain(value) || Object.keys(value).sort().join(",") !== "constrained,standard")
+                    return fail("profiles_unreadable");
+                const buckets = { standard: [], constrained: [] };
+                for (const cls of ["standard", "constrained"]) {
+                    if (!Array.isArray(value[cls]) || value[cls].length > EFFECT_PROFILE_LIMIT)
+                        return fail("profiles_unreadable");
+                    let previous = -1;
+                    for (const item of value[cls]) {
+                        const p = storedSchema.safeParse(item);
+                        if (!p.success || p.data.device !== cls || p.data.at < previous)
+                            return fail("profiles_unreadable");
+                        previous = p.data.at;
+                        buckets[cls].push(p.data);
+                    }
+                }
+                entries.set(id, buckets);
+            }
+            return { rev: doc.rev, entries };
+        }
+        catch {
+            return fail("profiles_unreadable");
+        }
+    }
+    read(id) {
+        if (typeof id !== "string" || !ID.test(id))
+            return fail("profile_args");
+        const state = this.load();
+        if ("ok" in state)
+            return state;
+        const entry = state.entries.get(id), records = entry ? [...entry.standard, ...entry.constrained].sort((a, b) => a.at - b.at) : [];
+        return { ok: true, status: records.length ? "reported" : "unmeasured", records };
+    }
+    /** One bounded parse for a library listing; callers still project only their authorized ids. */
+    readSummaries() {
+        const state = this.load();
+        if ("ok" in state)
+            return state;
+        return { ok: true, summaries: Object.fromEntries([...state.entries].map(([id, buckets]) => {
+                const records = [buckets.standard.at(-1), buckets.constrained.at(-1)].filter((p) => p !== undefined);
+                return [id, { status: records.length ? "reported" : "unmeasured", records }];
+            })) };
+    }
+    record(id, input) {
+        if (writes.has(this.path))
+            return fail("profiles_busy");
+        writes.add(this.path);
+        try {
+            if (typeof id !== "string" || !ID.test(id))
+                return fail("profile_args");
+            const checked = checkEffectProfile(input);
+            if (!checked.ok)
+                return checked;
+            const state = this.load();
+            if ("ok" in state)
+                return state;
+            let now;
+            try {
+                now = (this.opts.now ?? Date.now)();
+            }
+            catch {
+                return fail("profile_clock");
+            }
+            if (!Number.isSafeInteger(now) || now < 0)
+                return fail("profile_clock");
+            if (state.rev === Number.MAX_SAFE_INTEGER || !state.entries.has(id) && state.entries.size >= EFFECT_PROFILE_IDS)
+                return fail("profiles_bound");
+            const buckets = state.entries.get(id) ?? { standard: [], constrained: [] }, cls = checked.profile.device;
+            const at = Math.max(now, buckets[cls].at(-1)?.at ?? 0), profile = { ...checked.profile, source: "reported_host", at };
+            buckets[cls] = [...buckets[cls], profile].slice(-EFFECT_PROFILE_LIMIT);
+            state.entries.set(id, buckets);
+            const text = JSON.stringify({ version: 1, rev: state.rev + 1, entries: Object.fromEntries(state.entries) });
+            if (Buffer.byteLength(text, "utf8") > EFFECT_PROFILE_FILE_BYTES)
+                return fail("profiles_bound");
+            try {
+                mkdirSync(this.dataDir, { recursive: true });
+                atomicWriteFileSync(this.path, text, { mode: 0o600 });
+            }
+            catch {
+                return fail("profiles_write_failed");
+            }
+            return { ok: true, profile: JSON.parse(JSON.stringify(profile)) };
+        }
+        finally {
+            writes.delete(this.path);
+        }
+    }
+}
+//# sourceMappingURL=web-effect-profiles.js.map

package/dist/web-effect-profiles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-effect-profiles.js","sourceRoot":"","sources":["../src/web-effect-profiles.ts"],"names":[],"mappings":"AAAA,qGAAqG;AACrG,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACzF,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAExD,MAAM,CAAC,MAAM,oBAAoB,GAAG,EAAE,CAAC;AACvC,MAAM,CAAC,MAAM,kBAAkB,GAAG,GAAG,CAAC;AACtC,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AACzD,MAAM,EAAE,GAAG,gBAAgB,CAAC;AAC5B,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;AACjC,MAAM,MAAM,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC,CAAC;AACnD,MAAM,OAAO,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC;AACrE,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACjD,MAAM,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,CAAC;AAC/D,MAAM,KAAK,GAAG;IACZ,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM;IACvB,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC;IACpD,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,aAAa,EAAE,mBAAmB,EAAE,eAAe,EAAE,QAAQ,EAAE,gBAAgB,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC,QAAQ,EAAE;IACvI,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACzC,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,CAAC,QAAQ,EAAE;IACrD,aAAa,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACxE,wBAAwB,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IACpF,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE;CACzG,CAAC;AACF,SAAS,QAAQ,CAAC,CAAqC;IACrD,OAAO,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,iBAAiB,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,kBAAkB,IAAI,CAAC,CAAC,iBAAiB;WAC3G,CAAC,CAAC,CAAC,iBAAiB,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,KAAK,IAAI,CAAC;WAC1D,CAAC,CAAC,CAAC,kBAAkB,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,wBAAwB,KAAK,IAAI,CAAC;WACtE,CAAC,CAAC,CAAC,kBAAkB,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,KAAK,UAAU,CAAC,CAAC;AACjG,CAAC;AACD,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AAC9D,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AAIvH,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,IAAI,CAAC;QAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;QAAC,MAAM,CAAC,GAAG,WAAW,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;IAAC,CAAC;IACxM,MAAM,CAAC;QAAC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;IAAC,CAAC;AACxD,CAAC;AAID,MAAM,IAAI,GAAG,CAAC,KAAuB,EAAW,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;AAC1E,MAAM,KAAK,GAAG,CAAC,CAAU,EAAgC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,MAAM,CAAC,SAAS,CAAC;AAE1I,yGAAyG;AACzG,SAAS,SAAS,CAAC,IAAY;IAC7B,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,UAAU,IAAI,CAAC,CAAC,CAAC,CAAC;IAC1G,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;QAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,yBAAyB;YAAE,MAAM,KAAK,CAAC,oBAAoB,CAAC,CAAC;QAC3H,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;QAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACtD,OAAO,EAAE,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YAAC,MAAM,CAAC,GAAG,QAAQ,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,CAAC,MAAM,GAAG,EAAE,EAAE,IAAI,CAAC,CAAC;YAAC,IAAI,CAAC,CAAC;gBAAE,MAAM;YAAC,EAAE,IAAI,CAAC,CAAC;QAAC,CAAC;QACjH,IAAI,EAAE,KAAK,IAAI,CAAC,IAAI,IAAI,SAAS,CAAC,EAAE,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI;YAAE,MAAM,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAC9F,OAAO,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC/B,CAAC;YAAS,CAAC;QAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;AAC9B,CAAC;AAED,4GAA4G;AAC5G,MAAM,OAAO,iBAAiB;IAGkB;IAFrC,IAAI,CAAS;IACL,OAAO,CAAS;IACjC,YAAY,OAAe,EAAmB,OAA+B,EAAE;QAAjC,SAAI,GAAJ,IAAI,CAA6B;QAAI,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,0BAA0B,CAAC,CAAC;IAAC,CAAC;IACzK,IAAI;QACV,IAAI,KAAa,CAAC;QAClB,IAAI,CAAC;YAAC,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;QACrC,OAAO,CAAC,EAAE,CAAC;YAAC,OAAQ,CAA2B,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC;QAAC,CAAC;QACnI,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACtG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,qBAAqB,IAAI,GAAG,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,IAAK,GAAG,CAAC,GAAc,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC;gBAAE,OAAO,IAAI,CAAC,qBAAqB,CAAC,CAAC;YAC5N,MAAM,OAAO,GAAG,IAAI,GAAG,EAAmB,CAAC;YAC3C,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;gBACtD,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,OAAO,CAAC,IAAI,IAAI,kBAAkB,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,sBAAsB;oBAAE,OAAO,IAAI,CAAC,qBAAqB,CAAC,CAAC;gBAC9K,MAAM,OAAO,GAAY,EAAE,QAAQ,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;gBAC3D,KAAK,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,aAAa,CAAU,EAAE,CAAC;oBACvD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,oBAAoB;wBAAE,OAAO,IAAI,CAAC,qBAAqB,CAAC,CAAC;oBAC/G,IAAI,QAAQ,GAAG,CAAC,CAAC,CAAC;oBAClB,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;wBAC9B,MAAM,CAAC,GAAG,YAAY,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;wBACvC,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,QAAQ;4BAAE,OAAO,IAAI,CAAC,qBAAqB,CAAC,CAAC;wBACpG,QAAQ,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;wBAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;oBAClD,CAAC;gBACH,CAAC;gBACD,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YAC3B,CAAC;YACD,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,GAAa,EAAE,OAAO,EAAE,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,IAAI,CAAC,qBAAqB,CAAC,CAAC;QAAC,CAAC;IACjD,CAAC;IACD,IAAI,CAAC,EAAU;QACb,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,OAAO,IAAI,CAAC,cAAc,CAAC,CAAC;QACxE,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAAC,IAAI,IAAI,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;QAC3D,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,QAAQ,EAAE,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAClI,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,EAAE,OAAO,EAAE,CAAC;IACnF,CAAC;IACD,gGAAgG;IAChG,aAAa;QACX,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAAC,IAAI,IAAI,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;QAC3D,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,OAAO,CAAC,EAAE,EAAE;gBACxF,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAA4B,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;gBAC/H,OAAO,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC;YAC/E,CAAC,CAAC,CAAC,EAAE,CAAC;IACR,CAAC;IACD,MAAM,CAAC,EAAU,EAAE,KAAc;QAC/B,IAAI,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC,eAAe,CAAC,CAAC;QACxD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,IAAI,CAAC;YACH,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;gBAAE,OAAO,IAAI,CAAC,cAAc,CAAC,CAAC;YACxE,MAAM,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;YAAC,IAAI,CAAC,OAAO,CAAC,EAAE;gBAAE,OAAO,OAAO,CAAC;YAC3E,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YAAC,IAAI,IAAI,IAAI,KAAK;gBAAE,OAAO,KAAK,CAAC;YAC3D,IAAI,GAAW,CAAC;YAAC,IAAI,CAAC;gBAAC,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,OAAO,IAAI,CAAC,eAAe,CAAC,CAAC;YAAC,CAAC;YACrG,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC;gBAAE,OAAO,IAAI,CAAC,eAAe,CAAC,CAAC;YACxE,IAAI,KAAK,CAAC,GAAG,KAAK,MAAM,CAAC,gBAAgB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,IAAI,kBAAkB;gBAAE,OAAO,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAC/I,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;YACzG,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,EAAE,OAAO,GAAwB,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,EAAE,EAAE,CAAC;YAC3I,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,oBAAoB,CAAC,CAAC;YAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YACvG,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,GAAG,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YAC5G,IAAI,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,GAAG,yBAAyB;gBAAE,OAAO,IAAI,CAAC,gBAAgB,CAAC,CAAC;YAC/F,IAAI,CAAC;gBAAC,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;gBAAC,mBAAmB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAAC,CAAC;YAC5G,MAAM,CAAC;gBAAC,OAAO,IAAI,CAAC,uBAAuB,CAAC,CAAC;YAAC,CAAC;YAC/C,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAwB,EAAE,CAAC;QAC3F,CAAC;gBAAS,CAAC;YAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAAC,CAAC;IACzC,CAAC;CACF"}

package/dist/web-effect-service.d.ts

@@ -0,0 +1,86 @@
+/** #1629: human-session effects and retained-placement runtime reads. No page is mounted here. */
+import { WebEffectLibrary } from "./web-effect-library.js";
+import { ThemeStore } from "./web-theme-store.js";
+import type { WebEffectProfiles } from "./web-effect-profiles.js";
+import type { WebEffectTrials } from "./web-effect-trials.js";
+import { type OwnerEffectKey, type WebPrefsStore } from "./web-prefs.js";
+type Answer = Record<string, unknown>;
+export interface EffectServiceDeps {
+    library: WebEffectLibrary;
+    themes: ThemeStore;
+    profiles: WebEffectProfiles;
+    prefs?: WebPrefsStore;
+    trials?: WebEffectTrials;
+    known(name: string): boolean;
+    changed(): void;
+    monotonic?: () => number;
+}
+/** Host routes provide the authenticated human key. Neither a body nor an agent tool supplies it. */
+export declare class WebEffectService {
+    private readonly deps;
+    private readonly reports;
+    private previous;
+    constructor(deps: EffectServiceDeps);
+    private principal;
+    private validPerson;
+    private readable;
+    list(person: string): Answer;
+    profileSummaries(ids: readonly string[]): Record<string, Answer>;
+    profileSummary(id: string): Answer;
+    profile(person: string, id: string): Answer;
+    upload(person: string, bytes: Uint8Array): Answer;
+    apply(person: string, args: unknown): Answer;
+    remove(person: string, args: unknown): Answer;
+    share(person: string, args: unknown): Answer;
+    delete(person: string, id: string): Answer;
+    /** A selection never acquires a claim or borrows chat retention. Null clears need no library read. */
+    validateOwnerSelection(person: string, key: OwnerEffectKey, id: string): string | null;
+    private ownerCompatible;
+    collectOwnerReplaced(ids: string[]): void;
+    ownerSelections(person: string): Answer;
+    private ownerSelected;
+    /** Personal runtime authorizations always recheck current own/shared ACL. Cursor selection grants no code read. */
+    ownerResource(person: string, id: string, slot: unknown): Answer;
+    ownerImage(person: string, id: string, kind: "poster" | "cursor", slot: unknown): {
+        ok: true;
+        bytes: Uint8Array;
+    } | {
+        ok: false;
+        error: "not_found";
+    };
+    private resourceAnswer;
+    /** Host-only trial routes supply a fresh verified actor, never a JSON body actor. No placement/claim writes. */
+    trialStart(offer: string, instance: string, viewer: unknown): Answer;
+    trialStop(trial: string, viewer: unknown): Answer;
+    trialResource(trial: string, instance: string, viewer: unknown): Answer;
+    trialPoster(trial: string, instance: string, viewer: unknown): {
+        ok: true;
+        bytes: Uint8Array;
+    } | {
+        ok: false;
+    };
+    trialProfile(trial: string, instance: string, viewer: unknown): Answer;
+    /** A runtime resource is not an export grant. An exact currently retained placement is independently required. */
+    private retained;
+    /** Public/local visual projection: current chat placements only, no principal, code, params or claim grant. */
+    posterPlacements(instance: string): Answer;
+    placedPoster(id: string, instance: string): {
+        ok: true;
+        bytes: Uint8Array;
+    } | {
+        ok: false;
+        error: "not_found";
+    };
+    resource(person: string, id: string, instance?: string): Answer;
+    image(person: string, id: string, kind: "poster" | "cursor", instance?: string): {
+        ok: true;
+        bytes: Uint8Array;
+    } | {
+        ok: false;
+        error: "not_found";
+    };
+    placements(person: string, instance: string): Answer;
+    /** Diagnostic writes only: a validated report never changes safety, admission or a placement. */
+    report(person: string, id: string, input: unknown, instance?: string): Answer;
+}
+export {};