@the-40-thieves/obsidian-tc-shared 0.0.1 → 1.0.2

package/dist/config.schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.schema.d.ts","sourceRoot":"","sources":["../src/config.schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAMxB,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;EAKnC,CAAC;AAMH,eAAO,MAAM,wBAAwB;;;;;;;;;;;;EAInC,CAAC;AAMH,eAAO,MAAM,yBAAyB;;;;;;;;;EAGpC,CAAC;AAOH,eAAO,MAAM,uBAAuB;;;;;;EAElC,CAAC;AAOH,eAAO,MAAM,0BAA0B;;;;;;EAErC,CAAC;AAEH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAW5B,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;EASzB,CAAC;AAEL,eAAO,MAAM,aAAa;;;;;;;;;EAGxB,CAAC;AAEH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAW1B,CAAC;AAEH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;EAMjC,CAAC;AAEH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;EAI3B,CAAC;AAEH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAGjC,CAAC;AAEH,eAAO,MAAM,oBAAoB;;;;;;EAE/B,CAAC;AAgBH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAcnB,CAAC;AACf,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AASlE,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA8BpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAU5E,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;EAK3B,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAoB1D,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAS7B,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC"}

package/dist/config.schema.js

@@ -0,0 +1,208 @@
+import { z } from "zod";
+import { isLoopbackHost } from "./net-host";
+// Per-vault plugin-bridge timeouts (M4 / THE-180, G2.2 §3.1 + §6). Inner fields
+// carry defaults; the whole block is optional so a vault that predates M4
+// validates unchanged (consumers read `vault.bridges?.x ?? <default>`).
+export const VaultBridgesConfigSchema = z.object({
+    timeoutMs: z.number().int().positive().default(5000),
+    probeTimeoutMs: z.number().int().positive().default(500),
+    ocrTimeoutMs: z.number().int().positive().default(30000),
+    templaterTimeoutMs: z.number().int().positive().default(30000),
+});
+// Per-vault probe overrides (M4 / THE-180, G2.2 §6). force_enabled/disabled treat
+// a plugin as installed/missing regardless of the probe; probe_skip skips the
+// startup probe entirely (force_enabled is then the source of truth) — the seam
+// CI uses to assert tool behavior without a live Obsidian.
+export const VaultPluginsConfigSchema = z.object({
+    forceEnabled: z.array(z.string()).default([]),
+    forceDisabled: z.array(z.string()).default([]),
+    probeSkip: z.boolean().default(false),
+});
+// Per-vault command-palette execution policy (M4 / THE-180, G2.1 Domain 26).
+// Deny-by-default: execute_command is disabled unless `enabled` is explicitly true,
+// and even then only ids in `allowlist` may be fired (and only with a HITL token —
+// execute:command is a scope floor). Arbitrary command execution is never silent.
+export const VaultCommandsConfigSchema = z.object({
+    enabled: z.boolean().default(false),
+    allowlist: z.array(z.string()).default([]),
+});
+// Per-vault memory-entity materialization config (M5 / THE-181, G2.1 Domain 22).
+// Optional + back-compat: a vault predating M5 validates unchanged (consumers read
+// `vault.memory?.folder ?? "memory"`). `folder` is where create_entity(materialize)
+// writes the regenerable .md projection — a normal vault folder so the [[link]]
+// graph resolves in Obsidian. SQLite stays the source of truth.
+export const VaultMemoryConfigSchema = z.object({
+    folder: z.string().min(1).default("memory"),
+});
+// Per-vault workspace-session trace config (M5 / THE-181, G2.1 Domain 23). Session
+// traces are append-only JSONL written vault-relative (path-safe via resolveVaultPath
+// + ACL-checked via enforcePathAcl) under this folder; default a dot-folder so they
+// stay out of Obsidian's graph view. (G2.3 sketched cache_dir; THE-181's DoD requires
+// ACL-checked, hence vault-relative.)
+export const VaultWorkspaceConfigSchema = z.object({
+    traceFolder: z.string().min(1).default(".obsidian-tc/traces"),
+});
+export const VaultConfigSchema = z.object({
+    id: z.string().min(1),
+    name: z.string().min(1).optional(),
+    path: z.string().min(1),
+    restApiUrl: z.string().url().optional(),
+    restApiKey: z.string().optional(),
+    bridges: VaultBridgesConfigSchema.optional(),
+    plugins: VaultPluginsConfigSchema.optional(),
+    commands: VaultCommandsConfigSchema.optional(),
+    memory: VaultMemoryConfigSchema.optional(),
+    workspace: VaultWorkspaceConfigSchema.optional(),
+});
+export const AuthConfigSchema = z
+    .object({
+    mode: z.enum(["none", "jwt"]).default("none"),
+    jwtSecret: z.string().min(32).optional(),
+    tokenTtlSeconds: z.number().int().positive().default(86400),
+})
+    .refine((c) => c.mode !== "jwt" || !!c.jwtSecret, {
+    message: "jwtSecret (>=32 chars) is required when auth.mode is 'jwt'",
+    path: ["jwtSecret"],
+});
+export const AclRuleSchema = z.object({
+    glob: z.string().min(1),
+    scopes: z.array(z.string()).default([]),
+});
+export const AclConfigSchema = z.object({
+    readOnly: z.boolean().default(false),
+    defaultScopes: z.array(z.string()).default([]),
+    rules: z.array(AclRuleSchema).default([]),
+    // Per-path operation ACL (G2.2 section 5 / G2.4). Optional and back-compatible:
+    // when a field is omitted that operation kind is unrestricted (M0 behavior);
+    // when present it is a glob whitelist — a path must match at least one entry.
+    // camelCase mirrors the rest of the config (readOnly, defaultScopes).
+    readPaths: z.array(z.string()).optional(),
+    writePaths: z.array(z.string()).optional(),
+    deletePaths: z.array(z.string()).optional(),
+});
+export const EmbeddingsConfigSchema = z.object({
+    provider: z.enum(["ollama", "openai", "voyage", "cohere"]).default("ollama"),
+    model: z.string().default("nomic-embed-text"),
+    dimensions: z.number().int().positive().default(768),
+    baseUrl: z.string().url().optional(),
+    apiKey: z.string().optional(),
+});
+export const HttpConfigSchema = z.object({
+    enabled: z.boolean().default(false),
+    host: z.string().default("127.0.0.1"),
+    port: z.number().int().min(1).max(65535).default(8765),
+});
+export const TransportsConfigSchema = z.object({
+    stdio: z.boolean().default(true),
+    http: HttpConfigSchema.default({}),
+});
+export const GovernorConfigSchema = z.object({
+    maxResponseBytes: z.number().int().positive().default(1_000_000),
+});
+// Per-scope-class throttle tiers + write-concurrency ceiling (THE-182 / M6, G2.4
+// §Rate limits). Additive + fully defaulted, so a config predating M6 validates
+// unchanged. The M6 bulk tools enforce the `bulk` tier (10/min, burst 3); the
+// other tiers are reported by get_server_config and reserved for the M7
+// dispatch-wide rate-limit gate. get_server_config surfaces these as its `limits`
+// block (non-secret).
+const throttleTier = (perMinute, burst) => z
+    .object({
+    perMinute: z.number().int().positive().default(perMinute),
+    burst: z.number().int().positive().default(burst),
+})
+    .default({});
+export const ThrottleConfigSchema = z
+    .object({
+    enabled: z.boolean().default(true),
+    tiers: z
+        .object({
+        read: throttleTier(600, 100),
+        write: throttleTier(60, 20),
+        bulk: throttleTier(10, 3),
+        execute: throttleTier(5, 1),
+        admin: throttleTier(5, 1),
+    })
+        .default({}),
+    maxConcurrentWritesPerVault: z.number().int().positive().default(16),
+})
+    .default({});
+// Observability config (G2.4 §Observability — finalized in M7/THE-183). Three opt-in
+// export streams plus retention, all fully defaulted so a config predating M7 validates
+// unchanged. OTEL is a no-op unless `otel.endpoint` is set; the Prometheus `/metrics`
+// endpoint stays disabled until `prometheus.enabled`; MORGIANA spools CloudEvents JSONL
+// by default and HTTP-pushes only when `morgiana.httpEndpoint` is set. camelCase mirrors
+// the rest of the config. (M6 shipped a placeholder `otel: boolean` / `morgiana: {mode}`
+// shape; M7 finalizes it to the G2.4 shape before the v1.0 additive-only freeze.)
+export const ObservabilityConfigSchema = z.object({
+    traceDetail: z.enum(["standard", "verbose"]).default("standard"),
+    tracesSampleRate: z.number().min(0).max(1).default(1),
+    otel: z
+        .object({
+        endpoint: z.string().url().optional(),
+        headers: z.record(z.string()).default({}),
+    })
+        .default({}),
+    prometheus: z
+        .object({
+        enabled: z.boolean().default(false),
+        port: z.number().int().min(0).max(65535).default(9464),
+        bind: z.string().default("127.0.0.1"),
+    })
+        .default({}),
+    morgiana: z
+        .object({
+        spool: z.boolean().default(true),
+        httpEndpoint: z.string().url().optional(),
+        httpHeaders: z.record(z.string()).default({}),
+    })
+        .default({}),
+    retention: z
+        .object({
+        morgianaEventsDays: z.number().int().positive().default(90),
+        tracesDays: z.number().int().positive().default(90),
+        eventLogDays: z.number().int().positive().default(30),
+    })
+        .default({}),
+});
+// plur read-API proxy config (M5 / THE-181, G2.1 Domain 24). GLOBAL, not per-vault:
+// the plur engram store is global and the plur tools take no `vault` argument, so
+// this lives at the server root. endpoint/apiKey come from config or the
+// OBSIDIAN_TC_PLUR_ENDPOINT / OBSIDIAN_TC_PLUR_TOKEN env vars (resolved in
+// config/load.ts); the bearer is placed solely in the Authorization header by the
+// bridge transport — never logged, never in an error/audit payload. Optional with
+// inner defaults: when `endpoint` is absent the plur tools degrade to plugin_missing
+// with NO network call.
+export const PlurConfigSchema = z.object({
+    endpoint: z.string().url().optional(),
+    apiKey: z.string().optional(),
+    apiPrefix: z.string().default(""),
+    timeoutMs: z.number().int().positive().default(5000),
+});
+const ServerConfigObject = z.object({
+    cacheDir: z.string().default(".obsidian-tc"),
+    vaults: z.array(VaultConfigSchema).min(1),
+    plur: PlurConfigSchema.optional(),
+    auth: AuthConfigSchema.default({ mode: "none" }),
+    acl: AclConfigSchema.default({}),
+    embeddings: EmbeddingsConfigSchema.default({}),
+    transports: TransportsConfigSchema.default({}),
+    governor: GovernorConfigSchema.default({}),
+    throttle: ThrottleConfigSchema,
+    observability: ObservabilityConfigSchema.default({}),
+    idempotencyTtlSeconds: z.number().int().positive().default(86400),
+    elicitTtlSeconds: z.number().int().positive().default(300),
+});
+// F2 fail-closed interlock: never run an unauthenticated server on a routable host. When the
+// HTTP transport is enabled on a non-loopback host with auth.mode "none", every request would
+// resolve to full wildcard scopes (see transports/http.ts resolveAuth) — refuse the config.
+export const ServerConfigSchema = ServerConfigObject.superRefine((cfg, ctx) => {
+    const http = cfg.transports.http;
+    if (http.enabled && cfg.auth.mode === "none" && !isLoopbackHost(http.host)) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ["transports", "http", "host"],
+            message: `refusing to expose an unauthenticated server: transports.http.enabled is true with host "${http.host}" (non-loopback) while auth.mode is "none". Set auth.mode to "jwt" (with jwtSecret) or bind transports.http.host to a loopback address (127.0.0.1, ::1, localhost).`,
+        });
+    }
+});
+//# sourceMappingURL=config.schema.js.map

package/dist/config.schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.schema.js","sourceRoot":"","sources":["../src/config.schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,cAAc,EAAE,MAAM,YAAY,CAAC;AAE5C,gFAAgF;AAChF,0EAA0E;AAC1E,wEAAwE;AACxE,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACpD,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;IACxD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACxD,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CAC/D,CAAC,CAAC;AAEH,kFAAkF;AAClF,8EAA8E;AAC9E,gFAAgF;AAChF,2DAA2D;AAC3D,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC/C,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC7C,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9C,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CACtC,CAAC,CAAC;AAEH,6EAA6E;AAC7E,oFAAoF;AACpF,mFAAmF;AACnF,kFAAkF;AAClF,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACnC,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CAC3C,CAAC,CAAC;AAEH,iFAAiF;AACjF,mFAAmF;AACnF,oFAAoF;AACpF,gFAAgF;AAChF,gEAAgE;AAChE,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;CAC5C,CAAC,CAAC;AAEH,mFAAmF;AACnF,sFAAsF;AACtF,oFAAoF;AACpF,sFAAsF;AACtF,sCAAsC;AACtC,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC;CAC9D,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAClC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACvC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,OAAO,EAAE,wBAAwB,CAAC,QAAQ,EAAE;IAC5C,OAAO,EAAE,wBAAwB,CAAC,QAAQ,EAAE;IAC5C,QAAQ,EAAE,yBAAyB,CAAC,QAAQ,EAAE;IAC9C,MAAM,EAAE,uBAAuB,CAAC,QAAQ,EAAE;IAC1C,SAAS,EAAE,0BAA0B,CAAC,QAAQ,EAAE;CACjD,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC;KAC9B,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;IAC7C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IACxC,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CAC5D,CAAC;KACD,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE;IAChD,OAAO,EAAE,4DAA4D;IACrE,IAAI,EAAE,CAAC,WAAW,CAAC;CACpB,CAAC,CAAC;AAEL,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACxC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACpC,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9C,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACzC,gFAAgF;IAChF,6EAA6E;IAC7E,8EAA8E;IAC9E,sEAAsE;IACtE,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IACzC,UAAU,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC1C,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC5C,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IAC5E,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,kBAAkB,CAAC;IAC7C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;IACpD,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACpC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACnC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC;IACrC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;CACvD,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAChC,IAAI,EAAE,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC;CACnC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3C,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC;CACjE,CAAC,CAAC;AAEH,iFAAiF;AACjF,gFAAgF;AAChF,8EAA8E;AAC9E,wEAAwE;AACxE,kFAAkF;AAClF,sBAAsB;AACtB,MAAM,YAAY,GAAG,CAAC,SAAiB,EAAE,KAAa,EAAE,EAAE,CACxD,CAAC;KACE,MAAM,CAAC;IACN,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,SAAS,CAAC;IACzD,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CAClD,CAAC;KACD,OAAO,CAAC,EAAE,CAAC,CAAC;AAEjB,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KAClC,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAClC,KAAK,EAAE,CAAC;SACL,MAAM,CAAC;QACN,IAAI,EAAE,YAAY,CAAC,GAAG,EAAE,GAAG,CAAC;QAC5B,KAAK,EAAE,YAAY,CAAC,EAAE,EAAE,EAAE,CAAC;QAC3B,IAAI,EAAE,YAAY,CAAC,EAAE,EAAE,CAAC,CAAC;QACzB,OAAO,EAAE,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC;QAC3B,KAAK,EAAE,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC;KAC1B,CAAC;SACD,OAAO,CAAC,EAAE,CAAC;IACd,2BAA2B,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;CACrE,CAAC;KACD,OAAO,CAAC,EAAE,CAAC,CAAC;AAGf,qFAAqF;AACrF,wFAAwF;AACxF,sFAAsF;AACtF,wFAAwF;AACxF,yFAAyF;AACzF,yFAAyF;AACzF,kFAAkF;AAClF,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,WAAW,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC;IAChE,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IACrD,IAAI,EAAE,CAAC;SACJ,MAAM,CAAC;QACN,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QACrC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;KAC1C,CAAC;SACD,OAAO,CAAC,EAAE,CAAC;IACd,UAAU,EAAE,CAAC;SACV,MAAM,CAAC;QACN,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;QACnC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;QACtD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC;KACtC,CAAC;SACD,OAAO,CAAC,EAAE,CAAC;IACd,QAAQ,EAAE,CAAC;SACR,MAAM,CAAC;QACN,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;QAChC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QACzC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;KAC9C,CAAC;SACD,OAAO,CAAC,EAAE,CAAC;IACd,SAAS,EAAE,CAAC;SACT,MAAM,CAAC;QACN,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3D,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;QACnD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;KACtD,CAAC;SACD,OAAO,CAAC,EAAE,CAAC;CACf,CAAC,CAAC;AAGH,oFAAoF;AACpF,kFAAkF;AAClF,yEAAyE;AACzE,2EAA2E;AAC3E,kFAAkF;AAClF,kFAAkF;AAClF,qFAAqF;AACrF,wBAAwB;AACxB,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;IACrC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;IACjC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;CACrD,CAAC,CAAC;AAGH,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,cAAc,CAAC;IAC5C,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACzC,IAAI,EAAE,gBAAgB,CAAC,QAAQ,EAAE;IACjC,IAAI,EAAE,gBAAgB,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAChD,GAAG,EAAE,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;IAChC,UAAU,EAAE,sBAAsB,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9C,UAAU,EAAE,sBAAsB,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9C,QAAQ,EAAE,oBAAoB,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1C,QAAQ,EAAE,oBAAoB;IAC9B,aAAa,EAAE,yBAAyB,CAAC,OAAO,CAAC,EAAE,CAAC;IACpD,qBAAqB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACjE,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;CAC3D,CAAC,CAAC;AAEH,6FAA6F;AAC7F,8FAA8F;AAC9F,4FAA4F;AAC5F,MAAM,CAAC,MAAM,kBAAkB,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;IAC5E,MAAM,IAAI,GAAG,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC;IACjC,IAAI,IAAI,CAAC,OAAO,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3E,GAAG,CAAC,QAAQ,CAAC;YACX,IAAI,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM;YAC3B,IAAI,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC;YACpC,OAAO,EAAE,4FAA4F,IAAI,CAAC,IAAI,qKAAqK;SACpR,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/errors.d.ts

@@ -0,0 +1,49 @@
+export type ErrorCode = "unauthorized" | "forbidden" | "validation_error" | "not_found" | "vault_not_found" | "conflict" | "idempotency_key_mismatch" | "idempotency_in_flight" | "elicit_required" | "elicit_invalid" | "overflow" | "throttled" | "read_only" | "plugin_unavailable" | "internal" | "note_not_found" | "path_invalid" | "path_ambiguous" | "acl_denied" | "read_only_mode" | "note_exists" | "concurrent_modification" | "invalid_input" | "internal_error" | "embedding_provider_error" | "operation_timeout" | "dql_error" | "jsonlogic_error" | "plugin_missing" | "plugin_unreachable" | "bases_syntax_error" | "execute_command_disabled" | "command_not_allowlisted";
+export interface ErrorJSON {
+    code: ErrorCode;
+    message: string;
+    retryable: boolean;
+    details?: Record<string, unknown>;
+}
+export declare class ObsidianTcError extends Error {
+    readonly code: ErrorCode;
+    readonly details?: Record<string, unknown>;
+    readonly retryable: boolean;
+    constructor(code: ErrorCode, message: string, details?: Record<string, unknown>);
+    toJSON(): ErrorJSON;
+}
+type Mk = (message?: string, details?: Record<string, unknown>) => ObsidianTcError;
+export declare const err: {
+    readonly unauthorized: Mk;
+    readonly forbidden: Mk;
+    readonly validation: Mk;
+    readonly notFound: Mk;
+    readonly vaultNotFound: Mk;
+    readonly conflict: Mk;
+    readonly elicitRequired: Mk;
+    readonly elicitInvalid: Mk;
+    readonly overflow: Mk;
+    readonly throttled: Mk;
+    readonly readOnly: Mk;
+    readonly internal: Mk;
+    readonly noteNotFound: Mk;
+    readonly pathInvalid: Mk;
+    readonly pathAmbiguous: Mk;
+    readonly aclDenied: Mk;
+    readonly readOnlyMode: Mk;
+    readonly noteExists: Mk;
+    readonly concurrentModification: Mk;
+    readonly invalidInput: Mk;
+    readonly internalError: Mk;
+    readonly embeddingProviderError: Mk;
+    readonly operationTimeout: Mk;
+    readonly dqlError: Mk;
+    readonly jsonlogicError: Mk;
+    readonly pluginMissing: Mk;
+    readonly pluginUnreachable: Mk;
+    readonly basesSyntaxError: Mk;
+    readonly executeCommandDisabled: Mk;
+    readonly commandNotAllowlisted: Mk;
+};
+export {};
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,SAAS,GAEjB,cAAc,GACd,WAAW,GACX,kBAAkB,GAClB,WAAW,GACX,iBAAiB,GACjB,UAAU,GACV,0BAA0B,GAC1B,uBAAuB,GACvB,iBAAiB,GACjB,gBAAgB,GAChB,UAAU,GACV,WAAW,GACX,WAAW,GACX,oBAAoB,GACpB,UAAU,GAEV,gBAAgB,GAChB,cAAc,GACd,gBAAgB,GAChB,YAAY,GACZ,gBAAgB,GAChB,aAAa,GACb,yBAAyB,GACzB,eAAe,GACf,gBAAgB,GAEhB,0BAA0B,GAC1B,mBAAmB,GACnB,WAAW,GACX,iBAAiB,GACjB,gBAAgB,GAChB,oBAAoB,GAEpB,oBAAoB,GAEpB,0BAA0B,GAC1B,yBAAyB,CAAC;AAe9B,MAAM,WAAW,SAAS;IACxB,IAAI,EAAE,SAAS,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,qBAAa,eAAgB,SAAQ,KAAK;IACxC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3C,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;gBAEhB,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAS/E,MAAM,IAAI,SAAS;CAQpB;AAED,KAAK,EAAE,GAAG,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,eAAe,CAAC;AAMnF,eAAO,MAAM,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAuCN,CAAC"}

package/dist/errors.js

@@ -0,0 +1,72 @@
+const RETRYABLE = new Set([
+    "idempotency_in_flight",
+    "throttled",
+    "internal",
+    "internal_error",
+    // G2.1: a CAS miss is retryable after the caller re-reads the note.
+    "concurrent_modification",
+    // M2: transient embedding-backend, timeout, and plugin-unreachable failures are retryable.
+    "embedding_provider_error",
+    "operation_timeout",
+    "plugin_unreachable",
+]);
+export class ObsidianTcError extends Error {
+    code;
+    details;
+    retryable;
+    constructor(code, message, details) {
+        super(message);
+        this.name = "ObsidianTcError";
+        this.code = code;
+        this.details = details;
+        this.retryable = RETRYABLE.has(code);
+        Object.setPrototypeOf(this, ObsidianTcError.prototype);
+    }
+    toJSON() {
+        return {
+            code: this.code,
+            message: this.message,
+            retryable: this.retryable,
+            ...(this.details ? { details: this.details } : {}),
+        };
+    }
+}
+const mk = (code, fallback) => (message = fallback, details) => new ObsidianTcError(code, message, details);
+export const err = {
+    // M0
+    unauthorized: mk("unauthorized", "authentication required"),
+    forbidden: mk("forbidden", "scope or ACL denied"),
+    validation: mk("validation_error", "input validation failed"),
+    notFound: mk("not_found", "not found"),
+    vaultNotFound: mk("vault_not_found", "vault not found"),
+    conflict: mk("conflict", "conflict"),
+    elicitRequired: mk("elicit_required", "human confirmation required"),
+    elicitInvalid: mk("elicit_invalid", "elicit token invalid or expired"),
+    overflow: mk("overflow", "response exceeds byte budget"),
+    throttled: mk("throttled", "rate limit exceeded"),
+    readOnly: mk("read_only", "server is in read-only mode"),
+    internal: mk("internal", "internal error"),
+    // M1
+    noteNotFound: mk("note_not_found", "note not found"),
+    pathInvalid: mk("path_invalid", "path is invalid"),
+    pathAmbiguous: mk("path_ambiguous", "path resolves to multiple notes"),
+    aclDenied: mk("acl_denied", "path denied by folder ACL"),
+    readOnlyMode: mk("read_only_mode", "vault is in read-only mode"),
+    noteExists: mk("note_exists", "note already exists"),
+    concurrentModification: mk("concurrent_modification", "note changed since it was read"),
+    invalidInput: mk("invalid_input", "invalid input"),
+    internalError: mk("internal_error", "internal error"),
+    // M2 — G2.1 Domain 6 search + retrieval substrate.
+    embeddingProviderError: mk("embedding_provider_error", "embedding provider failed"),
+    operationTimeout: mk("operation_timeout", "operation timed out"),
+    dqlError: mk("dql_error", "Dataview DQL error"),
+    jsonlogicError: mk("jsonlogic_error", "JSONLogic expression invalid"),
+    pluginMissing: mk("plugin_missing", "required Obsidian plugin not detected"),
+    pluginUnreachable: mk("plugin_unreachable", "plugin detected but REST endpoint failed"),
+    // M3 — G2.1 structured-format domains (Bases).
+    basesSyntaxError: mk("bases_syntax_error", "invalid .base YAML or filter syntax"),
+    // M4 — G2.1 Domain 26 command palette (deny-by-default command execution).
+    executeCommandDisabled: mk("execute_command_disabled", "command execution is disabled for this vault"),
+    commandNotAllowlisted: mk("command_not_allowlisted", "command is not in the vault allowlist"),
+};
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAwCA,MAAM,SAAS,GAA2B,IAAI,GAAG,CAAY;IAC3D,uBAAuB;IACvB,WAAW;IACX,UAAU;IACV,gBAAgB;IAChB,oEAAoE;IACpE,yBAAyB;IACzB,2FAA2F;IAC3F,0BAA0B;IAC1B,mBAAmB;IACnB,oBAAoB;CACrB,CAAC,CAAC;AASH,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAC/B,IAAI,CAAY;IAChB,OAAO,CAA2B;IAClC,SAAS,CAAU;IAE5B,YAAY,IAAe,EAAE,OAAe,EAAE,OAAiC;QAC7E,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;QAC9B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC;IACzD,CAAC;IAED,MAAM;QACJ,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACnD,CAAC;IACJ,CAAC;CACF;AAGD,MAAM,EAAE,GACN,CAAC,IAAe,EAAE,QAAgB,EAAM,EAAE,CAC1C,CAAC,OAAO,GAAG,QAAQ,EAAE,OAAQ,EAAE,EAAE,CAC/B,IAAI,eAAe,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAEhD,MAAM,CAAC,MAAM,GAAG,GAAG;IACjB,KAAK;IACL,YAAY,EAAE,EAAE,CAAC,cAAc,EAAE,yBAAyB,CAAC;IAC3D,SAAS,EAAE,EAAE,CAAC,WAAW,EAAE,qBAAqB,CAAC;IACjD,UAAU,EAAE,EAAE,CAAC,kBAAkB,EAAE,yBAAyB,CAAC;IAC7D,QAAQ,EAAE,EAAE,CAAC,WAAW,EAAE,WAAW,CAAC;IACtC,aAAa,EAAE,EAAE,CAAC,iBAAiB,EAAE,iBAAiB,CAAC;IACvD,QAAQ,EAAE,EAAE,CAAC,UAAU,EAAE,UAAU,CAAC;IACpC,cAAc,EAAE,EAAE,CAAC,iBAAiB,EAAE,6BAA6B,CAAC;IACpE,aAAa,EAAE,EAAE,CAAC,gBAAgB,EAAE,iCAAiC,CAAC;IACtE,QAAQ,EAAE,EAAE,CAAC,UAAU,EAAE,8BAA8B,CAAC;IACxD,SAAS,EAAE,EAAE,CAAC,WAAW,EAAE,qBAAqB,CAAC;IACjD,QAAQ,EAAE,EAAE,CAAC,WAAW,EAAE,6BAA6B,CAAC;IACxD,QAAQ,EAAE,EAAE,CAAC,UAAU,EAAE,gBAAgB,CAAC;IAC1C,KAAK;IACL,YAAY,EAAE,EAAE,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IACpD,WAAW,EAAE,EAAE,CAAC,cAAc,EAAE,iBAAiB,CAAC;IAClD,aAAa,EAAE,EAAE,CAAC,gBAAgB,EAAE,iCAAiC,CAAC;IACtE,SAAS,EAAE,EAAE,CAAC,YAAY,EAAE,2BAA2B,CAAC;IACxD,YAAY,EAAE,EAAE,CAAC,gBAAgB,EAAE,4BAA4B,CAAC;IAChE,UAAU,EAAE,EAAE,CAAC,aAAa,EAAE,qBAAqB,CAAC;IACpD,sBAAsB,EAAE,EAAE,CAAC,yBAAyB,EAAE,gCAAgC,CAAC;IACvF,YAAY,EAAE,EAAE,CAAC,eAAe,EAAE,eAAe,CAAC;IAClD,aAAa,EAAE,EAAE,CAAC,gBAAgB,EAAE,gBAAgB,CAAC;IACrD,mDAAmD;IACnD,sBAAsB,EAAE,EAAE,CAAC,0BAA0B,EAAE,2BAA2B,CAAC;IACnF,gBAAgB,EAAE,EAAE,CAAC,mBAAmB,EAAE,qBAAqB,CAAC;IAChE,QAAQ,EAAE,EAAE,CAAC,WAAW,EAAE,oBAAoB,CAAC;IAC/C,cAAc,EAAE,EAAE,CAAC,iBAAiB,EAAE,8BAA8B,CAAC;IACrE,aAAa,EAAE,EAAE,CAAC,gBAAgB,EAAE,uCAAuC,CAAC;IAC5E,iBAAiB,EAAE,EAAE,CAAC,oBAAoB,EAAE,0CAA0C,CAAC;IACvF,+CAA+C;IAC/C,gBAAgB,EAAE,EAAE,CAAC,oBAAoB,EAAE,qCAAqC,CAAC;IACjF,2EAA2E;IAC3E,sBAAsB,EAAE,EAAE,CACxB,0BAA0B,EAC1B,8CAA8C,CAC/C;IACD,qBAAqB,EAAE,EAAE,CAAC,yBAAyB,EAAE,uCAAuC,CAAC;CACrF,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,8 @@
+export * from "./errors";
+export * from "./scopes";
+export * from "./result";
+export * from "./config.schema";
+export * from "./net-host";
+export * from "./morgiana.schema";
+export * from "./schemas/primitives";
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC;AACzB,cAAc,iBAAiB,CAAC;AAChC,cAAc,YAAY,CAAC;AAC3B,cAAc,mBAAmB,CAAC;AAClC,cAAc,sBAAsB,CAAC"}

package/dist/index.js

@@ -0,0 +1,8 @@
+export * from "./errors";
+export * from "./scopes";
+export * from "./result";
+export * from "./config.schema";
+export * from "./net-host";
+export * from "./morgiana.schema";
+export * from "./schemas/primitives";
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC;AACzB,cAAc,UAAU,CAAC;AACzB,cAAc,iBAAiB,CAAC;AAChC,cAAc,YAAY,CAAC;AAC3B,cAAc,mBAAmB,CAAC;AAClC,cAAc,sBAAsB,CAAC"}

package/dist/morgiana.schema.d.ts

@@ -0,0 +1,180 @@
+import { z } from "zod";
+/** The nine CloudEvents `type` values MORGIANA recognizes (G2.4 §Event types). */
+export declare const MORGIANA_EVENT_TYPES: readonly ["tc.tool.call.completed", "tc.acl.denied", "tc.elicit.requested", "tc.elicit.consumed", "tc.rate_limit.hit", "tc.governor.overflow", "tc.vault.cache_reset", "tc.server.start", "tc.server.shutdown"];
+export declare const MorgianaEventType: z.ZodEnum<["tc.tool.call.completed", "tc.acl.denied", "tc.elicit.requested", "tc.elicit.consumed", "tc.rate_limit.hit", "tc.governor.overflow", "tc.vault.cache_reset", "tc.server.start", "tc.server.shutdown"]>;
+export type MorgianaEventType = z.infer<typeof MorgianaEventType>;
+/**
+ * The CloudEvents `data` payload (G2.4 §Data shape). One uniform shape across all event types:
+ * tool-call events fill the rich fields; lifecycle/admin events fill only what applies. Bulk
+ * operations emit ONE event per batch with `count` set (no per-row emission in hot loops).
+ */
+export declare const MorgianaEventDataSchema: z.ZodObject<{
+    vault_id: z.ZodString;
+    tool: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    caller_hash: z.ZodDefault<z.ZodString>;
+    scopes_required: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    status: z.ZodDefault<z.ZodNullable<z.ZodEnum<["ok", "denied", "error"]>>>;
+    duration_ms: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
+    elicit_token: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    idempotency_key: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+    result_size: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
+    overflow_bytes: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
+    error: z.ZodDefault<z.ZodNullable<z.ZodObject<{
+        code: z.ZodString;
+        message: z.ZodString;
+    }, "strip", z.ZodTypeAny, {
+        code: string;
+        message: string;
+    }, {
+        code: string;
+        message: string;
+    }>>>;
+    count: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
+}, "strip", z.ZodTypeAny, {
+    status: "ok" | "denied" | "error" | null;
+    vault_id: string;
+    tool: string | null;
+    caller_hash: string;
+    scopes_required: string[];
+    error: {
+        code: string;
+        message: string;
+    } | null;
+    duration_ms: number | null;
+    elicit_token: string | null;
+    idempotency_key: string | null;
+    result_size: number | null;
+    overflow_bytes: number | null;
+    count: number | null;
+}, {
+    vault_id: string;
+    status?: "ok" | "denied" | "error" | null | undefined;
+    tool?: string | null | undefined;
+    caller_hash?: string | undefined;
+    scopes_required?: string[] | undefined;
+    error?: {
+        code: string;
+        message: string;
+    } | null | undefined;
+    duration_ms?: number | null | undefined;
+    elicit_token?: string | null | undefined;
+    idempotency_key?: string | null | undefined;
+    result_size?: number | null | undefined;
+    overflow_bytes?: number | null | undefined;
+    count?: number | null | undefined;
+}>;
+export type MorgianaEventData = z.infer<typeof MorgianaEventDataSchema>;
+/** CloudEvents 1.0 envelope (G2.4 §Envelope). `source` is `obsidian-tc/<vault_id>`. */
+export declare const CloudEventSchema: z.ZodObject<{
+    specversion: z.ZodLiteral<"1.0">;
+    id: z.ZodString;
+    source: z.ZodString;
+    type: z.ZodEnum<["tc.tool.call.completed", "tc.acl.denied", "tc.elicit.requested", "tc.elicit.consumed", "tc.rate_limit.hit", "tc.governor.overflow", "tc.vault.cache_reset", "tc.server.start", "tc.server.shutdown"]>;
+    datacontenttype: z.ZodDefault<z.ZodLiteral<"application/json">>;
+    time: z.ZodString;
+    data: z.ZodObject<{
+        vault_id: z.ZodString;
+        tool: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        caller_hash: z.ZodDefault<z.ZodString>;
+        scopes_required: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+        status: z.ZodDefault<z.ZodNullable<z.ZodEnum<["ok", "denied", "error"]>>>;
+        duration_ms: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
+        elicit_token: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        idempotency_key: z.ZodDefault<z.ZodNullable<z.ZodString>>;
+        result_size: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
+        overflow_bytes: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
+        error: z.ZodDefault<z.ZodNullable<z.ZodObject<{
+            code: z.ZodString;
+            message: z.ZodString;
+        }, "strip", z.ZodTypeAny, {
+            code: string;
+            message: string;
+        }, {
+            code: string;
+            message: string;
+        }>>>;
+        count: z.ZodDefault<z.ZodNullable<z.ZodNumber>>;
+    }, "strip", z.ZodTypeAny, {
+        status: "ok" | "denied" | "error" | null;
+        vault_id: string;
+        tool: string | null;
+        caller_hash: string;
+        scopes_required: string[];
+        error: {
+            code: string;
+            message: string;
+        } | null;
+        duration_ms: number | null;
+        elicit_token: string | null;
+        idempotency_key: string | null;
+        result_size: number | null;
+        overflow_bytes: number | null;
+        count: number | null;
+    }, {
+        vault_id: string;
+        status?: "ok" | "denied" | "error" | null | undefined;
+        tool?: string | null | undefined;
+        caller_hash?: string | undefined;
+        scopes_required?: string[] | undefined;
+        error?: {
+            code: string;
+            message: string;
+        } | null | undefined;
+        duration_ms?: number | null | undefined;
+        elicit_token?: string | null | undefined;
+        idempotency_key?: string | null | undefined;
+        result_size?: number | null | undefined;
+        overflow_bytes?: number | null | undefined;
+        count?: number | null | undefined;
+    }>;
+}, "strip", z.ZodTypeAny, {
+    type: "tc.tool.call.completed" | "tc.acl.denied" | "tc.elicit.requested" | "tc.elicit.consumed" | "tc.rate_limit.hit" | "tc.governor.overflow" | "tc.vault.cache_reset" | "tc.server.start" | "tc.server.shutdown";
+    time: string;
+    id: string;
+    specversion: "1.0";
+    source: string;
+    datacontenttype: "application/json";
+    data: {
+        status: "ok" | "denied" | "error" | null;
+        vault_id: string;
+        tool: string | null;
+        caller_hash: string;
+        scopes_required: string[];
+        error: {
+            code: string;
+            message: string;
+        } | null;
+        duration_ms: number | null;
+        elicit_token: string | null;
+        idempotency_key: string | null;
+        result_size: number | null;
+        overflow_bytes: number | null;
+        count: number | null;
+    };
+}, {
+    type: "tc.tool.call.completed" | "tc.acl.denied" | "tc.elicit.requested" | "tc.elicit.consumed" | "tc.rate_limit.hit" | "tc.governor.overflow" | "tc.vault.cache_reset" | "tc.server.start" | "tc.server.shutdown";
+    time: string;
+    id: string;
+    specversion: "1.0";
+    source: string;
+    data: {
+        vault_id: string;
+        status?: "ok" | "denied" | "error" | null | undefined;
+        tool?: string | null | undefined;
+        caller_hash?: string | undefined;
+        scopes_required?: string[] | undefined;
+        error?: {
+            code: string;
+            message: string;
+        } | null | undefined;
+        duration_ms?: number | null | undefined;
+        elicit_token?: string | null | undefined;
+        idempotency_key?: string | null | undefined;
+        result_size?: number | null | undefined;
+        overflow_bytes?: number | null | undefined;
+        count?: number | null | undefined;
+    };
+    datacontenttype?: "application/json" | undefined;
+}>;
+export type CloudEvent = z.infer<typeof CloudEventSchema>;
+//# sourceMappingURL=morgiana.schema.d.ts.map

package/dist/morgiana.schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"morgiana.schema.d.ts","sourceRoot":"","sources":["../src/morgiana.schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB,kFAAkF;AAClF,eAAO,MAAM,oBAAoB,iNAUvB,CAAC;AAEX,eAAO,MAAM,iBAAiB,mNAA+B,CAAC;AAC9D,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAElE;;;;GAIG;AACH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAalC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC;AAExE,uFAAuF;AACvF,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAQ3B,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC"}

package/dist/morgiana.schema.js

@@ -0,0 +1,48 @@
+import { z } from "zod";
+// MORGIANA event schema (G2.4 §MORGIANA events — THE-183). CloudEvents 1.0 envelope plus the
+// shared data shape. Lives in @the-40-thieves/obsidian-tc-shared so the server emitter AND MORGIANA itself
+// validate against one source of truth; the `specversion` field is the schema version, so a
+// breaking change bumps it. Spool/HTTP transport + emission live server-side (src/morgiana/).
+/** The nine CloudEvents `type` values MORGIANA recognizes (G2.4 §Event types). */
+export const MORGIANA_EVENT_TYPES = [
+    "tc.tool.call.completed",
+    "tc.acl.denied",
+    "tc.elicit.requested",
+    "tc.elicit.consumed",
+    "tc.rate_limit.hit",
+    "tc.governor.overflow",
+    "tc.vault.cache_reset",
+    "tc.server.start",
+    "tc.server.shutdown",
+];
+export const MorgianaEventType = z.enum(MORGIANA_EVENT_TYPES);
+/**
+ * The CloudEvents `data` payload (G2.4 §Data shape). One uniform shape across all event types:
+ * tool-call events fill the rich fields; lifecycle/admin events fill only what applies. Bulk
+ * operations emit ONE event per batch with `count` set (no per-row emission in hot loops).
+ */
+export const MorgianaEventDataSchema = z.object({
+    vault_id: z.string(),
+    tool: z.string().nullable().default(null),
+    caller_hash: z.string().default("system"),
+    scopes_required: z.array(z.string()).default([]),
+    status: z.enum(["ok", "denied", "error"]).nullable().default(null),
+    duration_ms: z.number().nullable().default(null),
+    elicit_token: z.string().nullable().default(null),
+    idempotency_key: z.string().nullable().default(null),
+    result_size: z.number().nullable().default(null),
+    overflow_bytes: z.number().nullable().default(null),
+    error: z.object({ code: z.string(), message: z.string() }).nullable().default(null),
+    count: z.number().nullable().default(null),
+});
+/** CloudEvents 1.0 envelope (G2.4 §Envelope). `source` is `obsidian-tc/<vault_id>`. */
+export const CloudEventSchema = z.object({
+    specversion: z.literal("1.0"),
+    id: z.string().min(1),
+    source: z.string().min(1),
+    type: MorgianaEventType,
+    datacontenttype: z.literal("application/json").default("application/json"),
+    time: z.string().min(1),
+    data: MorgianaEventDataSchema,
+});
+//# sourceMappingURL=morgiana.schema.js.map

package/dist/morgiana.schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"morgiana.schema.js","sourceRoot":"","sources":["../src/morgiana.schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,6FAA6F;AAC7F,2GAA2G;AAC3G,4FAA4F;AAC5F,8FAA8F;AAE9F,kFAAkF;AAClF,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,wBAAwB;IACxB,eAAe;IACf,qBAAqB;IACrB,oBAAoB;IACpB,mBAAmB;IACnB,sBAAsB;IACtB,sBAAsB;IACtB,iBAAiB;IACjB,oBAAoB;CACZ,CAAC;AAEX,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC;AAG9D;;;;GAIG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;IACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACzC,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC;IACzC,eAAe,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAChD,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAClE,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAChD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACjD,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACpD,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAChD,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACnD,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACnF,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;CAC3C,CAAC,CAAC;AAGH,uFAAuF;AACvF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,WAAW,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IAC7B,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,IAAI,EAAE,iBAAiB;IACvB,eAAe,EAAE,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC;IAC1E,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,IAAI,EAAE,uBAAuB;CAC9B,CAAC,CAAC"}