@taskless-app/shared 0.1.0

package/dist/finishChip.js

@@ -0,0 +1,95 @@
+// PRJ-7 Фаза 2 (F2-1): computeFinishChip — единая логика для чипа задачи во
+// всех списках (TaskCard / TaskTable / EntityRowList / Inbox / Today).
+// Dominant signal:
+//   1. pinnedUntil > now → 📌 pin (assignee'ское personal trump)
+//   2. task.deadline → 🗓 standalone deadline
+//   3. иначе → null (chip не рендерим)
+//
+// Возвращает self-contained data structure — UI рендерит как угодно. tone
+// определяет цвет/intensity:
+//   "neutral" — нормальный (нейтральный pin)
+//   "urgent"  — ≤2 дня до события или активный pin
+//   "overdue" — дата прошла
+//
+// Импортится фронтом и api (формат ленты, агента).
+function toDate(v) {
+    return typeof v === "string" ? new Date(v) : v;
+}
+function pluralizeDays(n) {
+    const abs = Math.abs(n);
+    const last = abs % 10;
+    const tens = Math.floor(abs / 10) % 10;
+    if (tens === 1)
+        return "дней";
+    if (last === 1)
+        return "день";
+    if (last >= 2 && last <= 4)
+        return "дня";
+    return "дней";
+}
+function diffDays(target, now) {
+    // Date-based diff в локальном TZ юзера. UX'но правильнее: дедлайн
+    // «завтра 00:00» = «завтра» даже если до него 4 часа. Тесты должны
+    // фиксировать TZ через vitest config (process.env.TZ).
+    const a = new Date(target.getFullYear(), target.getMonth(), target.getDate()).getTime();
+    const b = new Date(now.getFullYear(), now.getMonth(), now.getDate()).getTime();
+    return Math.round((a - b) / (24 * 3600 * 1000));
+}
+function relativeLabel(target, now) {
+    const days = diffDays(target, now);
+    if (days < 0) {
+        const abs = Math.abs(days);
+        return { text: `просрочено ${abs}${abs === 1 ? "д" : "д"}`, tone: "overdue" };
+    }
+    if (days === 0)
+        return { text: "сегодня", tone: "urgent" };
+    if (days === 1)
+        return { text: "завтра", tone: "urgent" };
+    if (days <= 7)
+        return { text: `через ${days}д`, tone: "urgent" };
+    return { text: `через ${days}д`, tone: "neutral" };
+}
+function fullTooltip(prefix, target, now) {
+    const days = diffDays(target, now);
+    const dateStr = target.toLocaleDateString("ru-RU", { day: "numeric", month: "long" });
+    if (days < 0) {
+        const abs = Math.abs(days);
+        return `${prefix} ${dateStr} — просрочено ${abs} ${pluralizeDays(abs)}`;
+    }
+    if (days === 0)
+        return `${prefix} ${dateStr} — сегодня`;
+    if (days === 1)
+        return `${prefix} ${dateStr} — завтра`;
+    return `${prefix} ${dateStr} — через ${days} ${pluralizeDays(days)}`;
+}
+export function computeFinishChip(task, now = new Date()) {
+    // 1. pinnedUntil → assignee'ское personal trump.
+    if (task.pinnedUntil) {
+        const pinDate = toDate(task.pinnedUntil);
+        if (pinDate.getTime() > now.getTime()) {
+            const rel = relativeLabel(pinDate, now);
+            // Pin всегда urgent tone — даже если до конца недели, это сознательный
+            // фокус assignee. Если pin далеко в будущем — neutral, чтобы не кричал.
+            const tone = diffDays(pinDate, now) > 7 ? "neutral" : "urgent";
+            return {
+                icon: "pin",
+                label: rel.text === "сегодня" ? "до конца дня" : rel.text,
+                tone,
+                tooltip: `📌 Закреплено ${fullTooltip("до", pinDate, now)}`,
+            };
+        }
+    }
+    // 2. standalone task.deadline.
+    if (task.deadline) {
+        const dl = toDate(task.deadline);
+        const rel = relativeLabel(dl, now);
+        return {
+            icon: "deadline",
+            label: rel.text,
+            tone: rel.tone,
+            tooltip: fullTooltip("🗓 Дедлайн", dl, now),
+        };
+    }
+    return null;
+}
+//# sourceMappingURL=finishChip.js.map

package/dist/finishChip.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"finishChip.js","sourceRoot":"","sources":["../src/finishChip.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,uEAAuE;AACvE,mBAAmB;AACnB,iEAAiE;AACjE,8CAA8C;AAC9C,uCAAuC;AACvC,EAAE;AACF,0EAA0E;AAC1E,6BAA6B;AAC7B,6CAA6C;AAC7C,mDAAmD;AACnD,4BAA4B;AAC5B,EAAE;AACF,mDAAmD;AAqBnD,SAAS,MAAM,CAAC,CAAgB;IAC9B,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,SAAS,aAAa,CAAC,CAAS;IAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACxB,MAAM,IAAI,GAAG,GAAG,GAAG,EAAE,CAAC;IACtB,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,EAAE,CAAC,GAAG,EAAE,CAAC;IACvC,IAAI,IAAI,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IAC9B,IAAI,IAAI,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IAC9B,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACzC,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,QAAQ,CAAC,MAAY,EAAE,GAAS;IACvC,kEAAkE;IAClE,mEAAmE;IACnE,uDAAuD;IACvD,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IACxF,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IAC/E,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC;AAClD,CAAC;AAED,SAAS,aAAa,CAAC,MAAY,EAAE,GAAS;IAC5C,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACnC,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3B,OAAO,EAAE,IAAI,EAAE,cAAc,GAAG,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAChF,CAAC;IACD,IAAI,IAAI,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC3D,IAAI,IAAI,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IAC1D,IAAI,IAAI,IAAI,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,IAAI,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IACjE,OAAO,EAAE,IAAI,EAAE,SAAS,IAAI,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AACrD,CAAC;AAED,SAAS,WAAW,CAAC,MAAc,EAAE,MAAY,EAAE,GAAS;IAC1D,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,MAAM,CAAC,kBAAkB,CAAC,OAAO,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IACtF,IAAI,IAAI,GAAG,CAAC,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC3B,OAAO,GAAG,MAAM,IAAI,OAAO,iBAAiB,GAAG,IAAI,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;IAC1E,CAAC;IACD,IAAI,IAAI,KAAK,CAAC;QAAE,OAAO,GAAG,MAAM,IAAI,OAAO,YAAY,CAAC;IACxD,IAAI,IAAI,KAAK,CAAC;QAAE,OAAO,GAAG,MAAM,IAAI,OAAO,WAAW,CAAC;IACvD,OAAO,GAAG,MAAM,IAAI,OAAO,YAAY,IAAI,IAAI,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,IAAe,EACf,MAAY,IAAI,IAAI,EAAE;IAEtB,iDAAiD;IACjD,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;QACrB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACzC,IAAI,OAAO,CAAC,OAAO,EAAE,GAAG,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC;YACtC,MAAM,GAAG,GAAG,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;YACxC,uEAAuE;YACvE,wEAAwE;YACxE,MAAM,IAAI,GAAmB,QAAQ,CAAC,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC;YAC/E,OAAO;gBACL,IAAI,EAAE,KAAK;gBACX,KAAK,EAAE,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI;gBACzD,IAAI;gBACJ,OAAO,EAAE,iBAAiB,WAAW,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE;aAC5D,CAAC;QACJ,CAAC;IACH,CAAC;IAED,+BAA+B;IAC/B,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;QAClB,MAAM,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACjC,MAAM,GAAG,GAAG,aAAa,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;QACnC,OAAO;YACL,IAAI,EAAE,UAAU;YAChB,KAAK,EAAE,GAAG,CAAC,IAAI;YACf,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,OAAO,EAAE,WAAW,CAAC,YAAY,EAAE,EAAE,EAAE,GAAG,CAAC;SAC5C,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/gender.d.ts

@@ -0,0 +1,6 @@
+export type Gender = "male" | "female";
+export declare const GENDER_OPTIONS: Gender[];
+export declare const GENDER_LABEL: Record<Gender, string>;
+/** Выбирает форму глагола/прилагательного прошедшего времени по полу.
+ *  null/undefined → мужской род (дефолт для незаполненного профиля). */
+export declare function genderPast(g: Gender | null | undefined, masc: string, fem: string): string;

package/dist/gender.js

@@ -0,0 +1,11 @@
+export const GENDER_OPTIONS = ["male", "female"];
+export const GENDER_LABEL = {
+    male: "Мужской",
+    female: "Женский",
+};
+/** Выбирает форму глагола/прилагательного прошедшего времени по полу.
+ *  null/undefined → мужской род (дефолт для незаполненного профиля). */
+export function genderPast(g, masc, fem) {
+    return g === "female" ? fem : masc;
+}
+//# sourceMappingURL=gender.js.map

package/dist/gender.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gender.js","sourceRoot":"","sources":["../src/gender.ts"],"names":[],"mappings":"AAKA,MAAM,CAAC,MAAM,cAAc,GAAa,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AAE3D,MAAM,CAAC,MAAM,YAAY,GAA2B;IAClD,IAAI,EAAE,SAAS;IACf,MAAM,EAAE,SAAS;CAClB,CAAC;AAEF;wEACwE;AACxE,MAAM,UAAU,UAAU,CAAC,CAA4B,EAAE,IAAY,EAAE,GAAW;IAChF,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AACrC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,18 @@
+export * from "./schemas.js";
+export * from "./gender.js";
+export * from "./notifications.js";
+export * from "./userHandle.js";
+export * from "./statusIcons.js";
+export * from "./sortWorkflowStates.js";
+export * from "./domain.js";
+export * from "./finishChip.js";
+export * from "./weight.js";
+export * from "./uiTour.js";
+export * from "./translit.js";
+export * from "./branding.js";
+export * from "./workspaceBrand.js";
+export * from "./labelColors.js";
+export * from "./chatMessageKinds.js";
+export * from "./userHue.js";
+export * from "./releaseSources.js";
+export * from "./designTokens.js";

package/dist/index.js

@@ -0,0 +1,19 @@
+export * from "./schemas.js";
+export * from "./gender.js";
+export * from "./notifications.js";
+export * from "./userHandle.js";
+export * from "./statusIcons.js";
+export * from "./sortWorkflowStates.js";
+export * from "./domain.js";
+export * from "./finishChip.js";
+export * from "./weight.js";
+export * from "./uiTour.js";
+export * from "./translit.js";
+export * from "./branding.js";
+export * from "./workspaceBrand.js";
+export * from "./labelColors.js";
+export * from "./chatMessageKinds.js";
+export * from "./userHue.js";
+export * from "./releaseSources.js";
+export * from "./designTokens.js";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,oBAAoB,CAAC;AACnC,cAAc,iBAAiB,CAAC;AAChC,cAAc,kBAAkB,CAAC;AACjC,cAAc,yBAAyB,CAAC;AACxC,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,eAAe,CAAC;AAC9B,cAAc,eAAe,CAAC;AAC9B,cAAc,qBAAqB,CAAC;AACpC,cAAc,kBAAkB,CAAC;AACjC,cAAc,uBAAuB,CAAC;AACtC,cAAc,cAAc,CAAC;AAC7B,cAAc,qBAAqB,CAAC;AACpC,cAAc,mBAAmB,CAAC"}

package/dist/labelColors.d.ts

@@ -0,0 +1,3 @@
+export declare const LABEL_PALETTE: string[];
+/** Детерминированный hex из палитры по имени лейбла (case-insensitive). */
+export declare function colorForLabelName(name: string): string;

package/dist/labelColors.js

@@ -0,0 +1,33 @@
+// TAS-16 (перенесено из web): палитра + детерминированный цвет лейбла по имени.
+// ЕДИНСТВЕННЫЙ источник палитры: web/src/labels/labelPalette.ts реэкспортит её.
+// Раньше палитр было две — авто-цвет брался отсюда (10 цветов), а редактор
+// рисовал свои 12, и цвет #f59e0b не попадал в пикер: у лейбла с ним ни одна
+// плитка не была выбрана. Набор ниже = набор редактора (без почти-белого
+// #f5f5f5, он сливался на светлой теме).
+// Цвет нового лейбла выводится из имени (djb2-хеш % palette.length),
+// чтобы одно и то же имя всегда давало один и тот же цвет.
+export const LABEL_PALETTE = [
+    "#64748b", // slate
+    "#ef4444", // red
+    "#f97316", // orange
+    "#eab308", // yellow
+    "#84cc16", // lime
+    "#22c55e", // green
+    "#14b8a6", // teal
+    "#3b82f6", // blue
+    "#6366f1", // indigo
+    "#a855f7", // violet
+    "#ec4899", // pink
+    "#94a3b8", // slate-light
+];
+/** Детерминированный hex из палитры по имени лейбла (case-insensitive). */
+export function colorForLabelName(name) {
+    const key = name.trim().toLowerCase();
+    let hash = 5381;
+    for (let i = 0; i < key.length; i++) {
+        hash = ((hash << 5) + hash + key.charCodeAt(i)) | 0;
+    }
+    const idx = Math.abs(hash) % LABEL_PALETTE.length;
+    return LABEL_PALETTE[idx];
+}
+//# sourceMappingURL=labelColors.js.map

package/dist/labelColors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"labelColors.js","sourceRoot":"","sources":["../src/labelColors.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAChF,gFAAgF;AAChF,2EAA2E;AAC3E,6EAA6E;AAC7E,yEAAyE;AACzE,yCAAyC;AACzC,qEAAqE;AACrE,2DAA2D;AAE3D,MAAM,CAAC,MAAM,aAAa,GAAa;IACrC,SAAS,EAAE,QAAQ;IACnB,SAAS,EAAE,MAAM;IACjB,SAAS,EAAE,SAAS;IACpB,SAAS,EAAE,SAAS;IACpB,SAAS,EAAE,OAAO;IAClB,SAAS,EAAE,QAAQ;IACnB,SAAS,EAAE,OAAO;IAClB,SAAS,EAAE,OAAO;IAClB,SAAS,EAAE,SAAS;IACpB,SAAS,EAAE,SAAS;IACpB,SAAS,EAAE,OAAO;IAClB,SAAS,EAAE,cAAc;CAC1B,CAAC;AAEF,2EAA2E;AAC3E,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACtC,IAAI,IAAI,GAAG,IAAI,CAAC;IAChB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACpC,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,IAAI,GAAG,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACtD,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,aAAa,CAAC,MAAM,CAAC;IAClD,OAAO,aAAa,CAAC,GAAG,CAAE,CAAC;AAC7B,CAAC"}

package/dist/notifications.d.ts

@@ -0,0 +1,36 @@
+export interface UserNotification {
+    /** Persisted DB row id, set when the notification was logged via
+     *  `notifyUser`/`notifyUsers`. UI uses it to call mark-read. Optional
+     *  for backwards-compat with legacy callers that don't go through the
+     *  send helpers (none currently, but keeps the type permissive). */
+    id?: string;
+    /** Dotted short code like "call.invite", "room.mention". Used by the
+     *  UI for kind-specific side effects (e.g. bumping a chat badge) and
+     *  for observability. Not shown to the user. */
+    kind: string;
+    /** OS notification title and toast heading. Should stand alone. */
+    title: string;
+    /** Optional body — shown under the title on the OS and as the toast
+     *  description. */
+    body?: string;
+    /** Deep-link to the relevant view. Clicking the OS notification or
+     *  toast lands here. Relative to the app origin. */
+    href?: string;
+    /** Dedup key. A later notification with the same tag replaces the
+     *  previous one instead of stacking. */
+    tag?: string;
+    /** Persistent notification that doesn't auto-close after a few seconds
+     *  — use for mentions / things we really don't want the user to miss. */
+    requireInteraction?: boolean;
+    /** Audible re-ping when replacing an existing tag (chrome only — other
+     *  browsers ignore this). Useful for chat, not for silent updates. */
+    renotify?: boolean;
+    /** Kind-specific structured extras the UI might need (e.g. roomId for
+     *  badge bumping). Not shown to the user. */
+    data?: Record<string, unknown>;
+    /** Bypass the SW's "tab focused → suppress OS notification" dedup. Used
+     *  by the profile page's test-push button so the user can verify the
+     *  end-to-end OS path without alt-tabbing first. Don't set this on
+     *  real notifications — it produces duplicate OS+toast pings. */
+    forceShow?: boolean;
+}

package/dist/notifications.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=notifications.js.map

package/dist/notifications.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notifications.js","sourceRoot":"","sources":["../src/notifications.ts"],"names":[],"mappings":""}

package/dist/releaseSources.d.ts

@@ -0,0 +1,20 @@
+import { z } from "zod";
+export declare const RELEASE_SOURCES: readonly ["ui", "mcp", "agent"];
+export type ReleaseSource = (typeof RELEASE_SOURCES)[number];
+export declare const ReleaseAllowedSources: z.ZodObject<{
+    ui: z.ZodBoolean;
+    mcp: z.ZodBoolean;
+    agent: z.ZodBoolean;
+}, "strip", z.ZodTypeAny, {
+    ui: boolean;
+    mcp: boolean;
+    agent: boolean;
+}, {
+    ui: boolean;
+    mcp: boolean;
+    agent: boolean;
+}>;
+export type ReleaseAllowedSources = z.infer<typeof ReleaseAllowedSources>;
+export declare const DEFAULT_RELEASE_ALLOWED_SOURCES: ReleaseAllowedSources;
+export declare function resolveReleaseAllowedSources(raw: unknown): ReleaseAllowedSources;
+export declare function isReleaseSourceAllowed(raw: unknown, source: ReleaseSource): boolean;

package/dist/releaseSources.js

@@ -0,0 +1,44 @@
+import { z } from "zod";
+// PRJ4-10: откуда разрешено запускать release/deploy-действия проекта
+// (dispatch_workflow / create_tag / create_github_release / push_branch,
+// плюс объединённый POST /projects/:id/release).
+//
+//   ui    — кнопка в веб-интерфейсе (cookie-сессия живого юзера).
+//   mcp   — внешний MCP-клиент (Claude Code, Cursor и т.п. через OAuth Bearer).
+//   agent — AI-ассистент в чате Taskless, действующий от имени юзера.
+//           Самый рискованный источник — по умолчанию ВЫКЛЮЧЕН.
+//
+// Это второй слой поверх RBAC (role >= admin): даже админ не сможет
+// запустить действие через источник, отключённый на проекте.
+export const RELEASE_SOURCES = ["ui", "mcp", "agent"];
+export const ReleaseAllowedSources = z.object({
+    ui: z.boolean(),
+    mcp: z.boolean(),
+    agent: z.boolean(),
+});
+// Дефолт при releaseAllowedSources === null: UI и MCP разрешены,
+// AI-ассистент — нет (самый рискованный путь, opt-in).
+export const DEFAULT_RELEASE_ALLOWED_SOURCES = {
+    ui: true,
+    mcp: true,
+    agent: false,
+};
+// Нормализация значения из БД (Json?) к строгой форме. Любой мусор/частичный
+// объект/null → дефолт (fail-safe: неизвестное = дефолтная политика, не «всё
+// разрешено» и не «всё запрещено»). Отсутствующие ключи добираются из дефолта.
+export function resolveReleaseAllowedSources(raw) {
+    if (raw && typeof raw === "object" && !Array.isArray(raw)) {
+        const obj = raw;
+        return {
+            ui: typeof obj.ui === "boolean" ? obj.ui : DEFAULT_RELEASE_ALLOWED_SOURCES.ui,
+            mcp: typeof obj.mcp === "boolean" ? obj.mcp : DEFAULT_RELEASE_ALLOWED_SOURCES.mcp,
+            agent: typeof obj.agent === "boolean" ? obj.agent : DEFAULT_RELEASE_ALLOWED_SOURCES.agent,
+        };
+    }
+    return { ...DEFAULT_RELEASE_ALLOWED_SOURCES };
+}
+// Разрешён ли конкретный источник для проекта (raw = Project.releaseAllowedSources).
+export function isReleaseSourceAllowed(raw, source) {
+    return resolveReleaseAllowedSources(raw)[source];
+}
+//# sourceMappingURL=releaseSources.js.map

package/dist/releaseSources.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"releaseSources.js","sourceRoot":"","sources":["../src/releaseSources.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,sEAAsE;AACtE,yEAAyE;AACzE,iDAAiD;AACjD,EAAE;AACF,kEAAkE;AAClE,gFAAgF;AAChF,sEAAsE;AACtE,gEAAgE;AAChE,EAAE;AACF,oEAAoE;AACpE,6DAA6D;AAC7D,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,OAAO,CAAU,CAAC;AAG/D,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE;IACf,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE;IAChB,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE;CACnB,CAAC,CAAC;AAGH,iEAAiE;AACjE,uDAAuD;AACvD,MAAM,CAAC,MAAM,+BAA+B,GAA0B;IACpE,EAAE,EAAE,IAAI;IACR,GAAG,EAAE,IAAI;IACT,KAAK,EAAE,KAAK;CACb,CAAC;AAEF,6EAA6E;AAC7E,6EAA6E;AAC7E,+EAA+E;AAC/E,MAAM,UAAU,4BAA4B,CAAC,GAAY;IACvD,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1D,MAAM,GAAG,GAAG,GAA8B,CAAC;QAC3C,OAAO;YACL,EAAE,EAAE,OAAO,GAAG,CAAC,EAAE,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,+BAA+B,CAAC,EAAE;YAC7E,GAAG,EAAE,OAAO,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,+BAA+B,CAAC,GAAG;YACjF,KAAK,EAAE,OAAO,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,+BAA+B,CAAC,KAAK;SAC1F,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,GAAG,+BAA+B,EAAE,CAAC;AAChD,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,sBAAsB,CAAC,GAAY,EAAE,MAAqB;IACxE,OAAO,4BAA4B,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;AACnD,CAAC"}