@treenity/core 1.0.47 → 3.0.0

package/dist/schema/test-fixture.types.js

@@ -0,0 +1,19 @@
+// Test fixture type — used by schema.test.ts to verify schema extraction
+// This file is NOT a .test.ts so extract-schemas picks it up
+import { registerType } from '#comp';
+/** Test fixture with properties and methods */
+class TestFixture {
+    /** @title Name */
+    name = '';
+    /** @title Count */
+    count = 0;
+    rename(data) {
+        this.name = data.newName;
+    }
+    clear() {
+        this.name = '';
+        this.count = 0;
+    }
+}
+registerType('test.fixture', TestFixture);
+//# sourceMappingURL=test-fixture.types.js.map

package/dist/schema/test-fixture.types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-fixture.types.js","sourceRoot":"","sources":["../../src/schema/test-fixture.types.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,6DAA6D;AAC7D,OAAO,EAAE,YAAY,EAAE,MAAM,OAAO,CAAC;AAErC,+CAA+C;AAC/C,MAAM,WAAW;IACf,kBAAkB;IAClB,IAAI,GAAG,EAAE,CAAC;IACV,mBAAmB;IACnB,KAAK,GAAG,CAAC,CAAC;IAEV,MAAM,CAAC,IAAyB;QAC9B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC;IAC3B,CAAC;IAED,KAAK;QACH,IAAI,CAAC,IAAI,GAAG,EAAE,CAAC;QACf,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;IACjB,CAAC;CACF;AACD,YAAY,CAAC,cAAc,EAAE,WAAW,CAAC,CAAC"}

package/dist/schema/test-opaque.d.ts

@@ -0,0 +1,3 @@
+#!/usr/bin/env tsx
+export {};
+//# sourceMappingURL=test-opaque.d.ts.map

package/dist/schema/test-opaque.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-opaque.d.ts","sourceRoot":"","sources":["../../src/schema/test-opaque.ts"],"names":[],"mappings":""}

package/dist/schema/test-opaque.js

@@ -0,0 +1,43 @@
+#!/usr/bin/env tsx
+// Quick test: does getAliasedSymbol resolve import to original @opaque decl?
+import * as ts from 'typescript';
+import * as path from 'node:path';
+const tsconfigPath = path.resolve(import.meta.dirname, '../../../tsconfig.json');
+const configFile = ts.readConfigFile(tsconfigPath, ts.sys.readFile);
+const parsed = ts.parseJsonConfigFileContent(configFile.config, ts.sys, path.dirname(tsconfigPath));
+const program = ts.createProgram(parsed.fileNames, parsed.options);
+const checker = program.getTypeChecker();
+for (const sf of program.getSourceFiles()) {
+    if (!sf.fileName.includes('brahman/types'))
+        continue;
+    ts.forEachChild(sf, (node) => {
+        if (!ts.isClassDeclaration(node) || !node.name)
+            return;
+        if (node.name.text !== 'MessageAction')
+            return;
+        for (const member of node.members) {
+            if (!ts.isMethodDeclaration(member) || !member.name || !ts.isIdentifier(member.name))
+                continue;
+            if (member.name.text !== 'run')
+                continue;
+            const param = member.parameters[0];
+            if (!param?.type || !ts.isTypeReferenceNode(param.type)) {
+                console.log('no type ref');
+                return;
+            }
+            let sym = checker.getSymbolAtLocation(param.type.typeName);
+            console.log('sym:', sym?.name, 'flags:', sym?.flags, 'isAlias:', !!(sym?.flags & ts.SymbolFlags.Alias));
+            if (sym?.flags & ts.SymbolFlags.Alias) {
+                sym = checker.getAliasedSymbol(sym);
+                console.log('aliased to:', sym?.name, 'decls:', sym?.declarations?.length);
+                const decl = sym?.declarations?.[0];
+                if (decl) {
+                    console.log('decl kind:', ts.SyntaxKind[decl.kind], 'at', path.basename(decl.getSourceFile().fileName));
+                    console.log('JSDoc tags:', ts.getJSDocTags(decl).map(t => t.tagName.text));
+                }
+            }
+        }
+    });
+    break;
+}
+//# sourceMappingURL=test-opaque.js.map

package/dist/schema/test-opaque.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"test-opaque.js","sourceRoot":"","sources":["../../src/schema/test-opaque.ts"],"names":[],"mappings":";AACA,6EAA6E;AAE7E,OAAO,KAAK,EAAE,MAAM,YAAY,CAAC;AACjC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,wBAAwB,CAAC,CAAC;AACjF,MAAM,UAAU,GAAG,EAAE,CAAC,cAAc,CAAC,YAAY,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;AACpE,MAAM,MAAM,GAAG,EAAE,CAAC,0BAA0B,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,EAAE,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;AACpG,MAAM,OAAO,GAAG,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;AACnE,MAAM,OAAO,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;AAEzC,KAAK,MAAM,EAAE,IAAI,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC;IAC1C,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,eAAe,CAAC;QAAE,SAAS;IAErD,EAAE,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE;QAC3B,IAAI,CAAC,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;YAAE,OAAO;QACvD,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,eAAe;YAAE,OAAO;QAE/C,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,IAAI,CAAC,EAAE,CAAC,mBAAmB,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,EAAE,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC;gBAAE,SAAS;YAC/F,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK;gBAAE,SAAS;YAEzC,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;YACnC,IAAI,CAAC,KAAK,EAAE,IAAI,IAAI,CAAC,EAAE,CAAC,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;gBAAC,OAAO;YAAC,CAAC;YAEhG,IAAI,GAAG,GAAG,OAAO,CAAC,mBAAmB,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC3D,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,KAAM,GAAG,EAAE,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;YAEzG,IAAI,GAAG,EAAE,KAAM,GAAG,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;gBACvC,GAAG,GAAG,OAAO,CAAC,gBAAgB,CAAC,GAAI,CAAC,CAAC;gBACrC,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;gBAC3E,MAAM,IAAI,GAAG,GAAG,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,CAAC;gBACpC,IAAI,IAAI,EAAE,CAAC;oBACT,OAAO,CAAC,GAAG,CAAC,YAAY,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;oBACxG,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC7E,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC,CAAC,CAAC;IACH,MAAM;AACR,CAAC"}

package/dist/schema/types.d.ts

@@ -0,0 +1,37 @@
+export type PropertySchema = {
+    type: string;
+    title: string;
+    description?: string;
+    format?: string;
+    refType?: string;
+    readOnly?: boolean;
+    enum?: string[];
+    items?: {
+        type?: string;
+        properties?: Record<string, unknown>;
+    };
+};
+export type MethodSchema = {
+    title?: string;
+    description?: string;
+    streaming?: boolean;
+    arguments: Array<{
+        name: string;
+        type: string;
+        properties?: Record<string, Partial<PropertySchema>>;
+        required?: string[];
+    }>;
+    yields?: {
+        type: string;
+    };
+    return?: {
+        type: string;
+    };
+};
+export type TypeSchema = {
+    title: string;
+    type: 'object';
+    properties: Record<string, PropertySchema>;
+    methods?: Record<string, MethodSchema>;
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/schema/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/schema/types.ts"],"names":[],"mappings":"AAEA,MAAM,MAAM,cAAc,GAAG;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,KAAK,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC;CACjE,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,SAAS,EAAE,KAAK,CAAC;QACf,IAAI,EAAE,MAAM,CAAC;QACb,IAAI,EAAE,MAAM,CAAC;QACb,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC;QACrD,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;KACrB,CAAC,CAAC;IACH,MAAM,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1B,MAAM,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,QAAQ,CAAC;IACf,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IAC3C,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;CACxC,CAAC"}

package/dist/schema/types.js

@@ -0,0 +1,3 @@
+// Schema types — used by SchemaForm, NodeEditor, PageEditor
+export {};
+//# sourceMappingURL=types.js.map

package/dist/schema/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/schema/types.ts"],"names":[],"mappings":"AAAA,4DAA4D"}

package/dist/server/actions.d.ts

@@ -0,0 +1,35 @@
+import { type Chain } from '#chain';
+import { Class, type TypeProxy } from '#comp';
+import { type ExecuteFn, type StreamFn } from '#comp/handle';
+import { type ResolvedDeps } from '#comp/needs';
+import { type ComponentData, type NodeData } from '#core';
+import { type Tree } from '#tree';
+export type NodeHandle = ReturnType<typeof serverNodeHandle>;
+/** @opaque Runtime-injected, not part of public schema */
+export type ActionCtx = {
+    node: NodeData;
+    store: Tree;
+    signal: AbortSignal;
+    /** Typed client for cross-node action calls: ctx.nc(path).get(Type).method(data) */
+    nc: NodeHandle;
+    comp?: ComponentData;
+    deps?: ResolvedDeps;
+};
+export type { ExecuteInput } from '#comp/handle';
+export declare function createNodeHandle(execute: ExecuteFn, stream: StreamFn, getNode?: (path: string) => NodeData | undefined): (path: string) => {
+    get<T extends object>(cls: Class<T>, key?: string): Chain<TypeProxy<T>>;
+};
+export declare function serverNodeHandle(store: Tree): (path: string) => {
+    get<T extends object>(cls: Class<T>, key?: string): Chain<TypeProxy<T>>;
+};
+export { collectSiblings, collectDeps } from '#comp/needs';
+export { registerActionNeeds, getActionNeeds } from '#comp/needs';
+export declare function executeAction(store: Tree, path: string, componentType: string | undefined, componentKey: string | undefined, action: string, data?: unknown): Promise<unknown>;
+export declare function executeStream(store: Tree, path: string, componentType: string | undefined, componentKey: string | undefined, action: string, data?: unknown, signal?: AbortSignal): AsyncGenerator<unknown>;
+export declare function setComponent(store: Tree, path: string, name: string, data: Record<string, unknown>, rev?: number): Promise<void>;
+export declare function applyTemplate(store: Tree, templatePath: string, targetPath: string): Promise<{
+    applied: string;
+    blocks: number;
+}>;
+export declare function registerBuiltinActions(): void;
+//# sourceMappingURL=actions.d.ts.map

package/dist/server/actions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"actions.d.ts","sourceRoot":"","sources":["../../src/server/actions.ts"],"names":[],"mappings":"AAIA,OAAO,EAAS,KAAK,KAAK,EAAE,MAAM,QAAQ,CAAC;AAC3C,OAAO,EAAE,KAAK,EAAE,KAAK,SAAS,EAAE,MAAM,OAAO,CAAC;AAC9C,OAAO,EAAkB,KAAK,SAAS,EAAE,KAAK,QAAQ,EAAE,MAAM,cAAc,CAAC;AAC7E,OAAO,EAA+B,KAAK,YAAY,EAAE,MAAM,aAAa,CAAC;AAC7E,OAAO,EAAE,KAAK,aAAa,EAAkC,KAAK,QAAQ,EAAqB,MAAM,OAAO,CAAC;AAC7G,OAAO,EAAE,KAAK,IAAI,EAAE,MAAM,OAAO,CAAC;AAIlC,MAAM,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE7D,0DAA0D;AAC1D,MAAM,MAAM,SAAS,GAAG;IACtB,IAAI,EAAE,QAAQ,CAAC;IACf,KAAK,EAAE,IAAI,CAAC;IACZ,MAAM,EAAE,WAAW,CAAC;IACpB,oFAAoF;IACpF,EAAE,EAAE,UAAU,CAAC;IACf,IAAI,CAAC,EAAE,aAAa,CAAC;IACrB,IAAI,CAAC,EAAE,YAAY,CAAC;CACrB,CAAC;AAIF,YAAY,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAEjD,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,SAAS,EAClB,MAAM,EAAE,QAAQ,EAChB,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,QAAQ,GAAG,SAAS,IAExC,MAAM,MAAM;QACd,CAAC,SAAS,MAAM,OAAO,KAAK,CAAC,CAAC,CAAC,QAAQ,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;EAI1E;AAGD,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,IAAI,UAR5B,MAAM;QACd,CAAC,SAAS,MAAM,OAAO,KAAK,CAAC,CAAC,CAAC,QAAQ,MAAM,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;EAY1E;AAED,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAiFlE,wBAAsB,aAAa,CACjC,KAAK,EAAE,IAAI,EACX,IAAI,EAAE,MAAM,EACZ,aAAa,EAAE,MAAM,GAAG,SAAS,EACjC,YAAY,EAAE,MAAM,GAAG,SAAS,EAChC,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE,OAAO,GACb,OAAO,CAAC,OAAO,CAAC,CAyClB;AAKD,wBAAuB,aAAa,CAClC,KAAK,EAAE,IAAI,EACX,IAAI,EAAE,MAAM,EACZ,aAAa,EAAE,MAAM,GAAG,SAAS,EACjC,YAAY,EAAE,MAAM,GAAG,SAAS,EAChC,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE,OAAO,EACd,MAAM,CAAC,EAAE,WAAW,GACnB,cAAc,CAAC,OAAO,CAAC,CAWzB;AAID,wBAAsB,YAAY,CAChC,KAAK,EAAE,IAAI,EACX,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,GAAG,CAAC,EAAE,MAAM,GACX,OAAO,CAAC,IAAI,CAAC,CASf;AAID,wBAAsB,aAAa,CACjC,KAAK,EAAE,IAAI,EACX,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAiB9C;AAkBD,wBAAgB,sBAAsB,SAKrC"}

package/dist/server/actions.js

@@ -0,0 +1,170 @@
+// Treenity Actions — Layer 4
+// Server-specific: ActionCtx, SchemaHandler, client proxy
+// Component registration lives in @/comp
+import { chain } from '#chain';
+import { makeTypedProxy } from '#comp/handle';
+import { collectDeps as _collectDeps } from '#comp/needs';
+import { getComponentField, isComponent, register, resolve } from '#core';
+import { createDraft, enablePatches, finishDraft } from 'immer';
+import { OpError } from './errors';
+export function createNodeHandle(execute, stream, getNode) {
+    return (path) => ({
+        get(cls, key) {
+            return chain(makeTypedProxy(getNode?.(path), cls, path, execute, stream, key));
+        },
+    });
+}
+// Server-side typed node client: wraps executeAction/executeStream into createNodeHandle.
+// Usage: const nc = serverNodeHandle(store); await nc(path).get(MyComp).myMethod();
+export function serverNodeHandle(store) {
+    return createNodeHandle((input) => executeAction(store, input.path, input.type, input.key, input.action, input.data), (input) => executeStream(store, input.path, input.type, input.key, input.action, input.data));
+}
+export { collectSiblings, collectDeps } from '#comp/needs';
+export { registerActionNeeds, getActionNeeds } from '#comp/needs';
+// ── Server-side operations ──
+// Single entry point for tRPC, MCP, cook-bot, services — no boilerplate.
+// All ops throw OpError for domain errors (NOT_FOUND, BAD_REQUEST, CONFLICT).
+enablePatches();
+// Action timeout: env-configurable, default 5 min (was 30s)
+const ACTION_TIMEOUT = Number(process.env.ACTION_TIMEOUT) || 300_000;
+const STREAM_TIMEOUT = Number(process.env.STREAM_TIMEOUT) || 600_000;
+// Dynamic actions: load from /sys/types/{ns}/{name} node's `actions` component.
+// Code is compiled with new Function, registered for future calls.
+// Format: actions.{name} = "const node = ...; return result;"  (async function body)
+async function loadDynamicAction(store, type, action) {
+    if (!type.includes('.'))
+        return null;
+    const typePath = `/sys/types/${type.replace(/\./g, '/')}`;
+    const typeNode = await store.get(typePath);
+    const actionCode = typeNode?.actions?.[action];
+    if (!actionCode || typeof actionCode !== 'string')
+        return null;
+    try {
+        const fn = new Function('ctx', 'data', `return (async () => { ${actionCode} })()`);
+        register(type, `action:${action}`, fn);
+        console.log(`[uix] loaded dynamic action "${action}" for "${type}"`);
+        return fn;
+    }
+    catch (err) {
+        console.warn(`[uix] failed to compile action "${action}" for "${type}":`, err.message);
+        return null;
+    }
+}
+async function resolveActionHandler(store, path, componentType, componentKey, action) {
+    const node = await store.get(path);
+    if (!node)
+        throw new OpError('NOT_FOUND', `Node not found: ${path}`);
+    const [comp, fieldKey] = getComponentField(node, componentType ?? 't.any', componentKey) ?? [];
+    if (!isComponent(comp))
+        throw new OpError('NOT_FOUND', `Component "${componentKey ?? componentType}" not found on ${path}`);
+    const type = comp.$type;
+    let deps = await _collectDeps(node, fieldKey, action, store);
+    let handler = resolve(comp, `action:${action}`);
+    // Fallback: try loading dynamic action from type definition node
+    if (!handler)
+        handler = await loadDynamicAction(store, type, action);
+    if (!handler)
+        throw new OpError('BAD_REQUEST', `No action "${action}" for type "${type}"`);
+    return { node, handler, type, comp, deps, fieldKey };
+}
+// ── executeAction: mutating action with Immer draft + patch collection ──
+// Patches attached as $patches for subscription layer (CDC Matrix in sub.ts).
+// Pure actions (no state changes) skip persist — patches.length === 0.
+export async function executeAction(store, path, componentType, componentKey, action, data) {
+    const { node, handler, type, deps, fieldKey } = await resolveActionHandler(store, path, componentType, componentKey, action);
+    // Pre/post condition checking (Design by Contract)
+    const schemaHandler = resolve(type, 'schema');
+    const methodSchema = schemaHandler?.()?.methods?.[action];
+    const preFields = methodSchema?.pre ?? [];
+    const postFields = methodSchema?.post ?? [];
+    const target = fieldKey ? node[fieldKey] : node;
+    for (const f of preFields) {
+        const v = target[f];
+        if (v === undefined || v === null || v === '' || v === 0) {
+            console.warn(`[pre] ${type}.${action}: field "${f}" is empty`);
+        }
+    }
+    const postSnap = Object.fromEntries(postFields.map(f => [f, target[f]]));
+    const draft = createDraft(node);
+    // comp must be the draft version so Immer captures mutations via `this.*`
+    const dc = fieldKey ? draft[fieldKey] : undefined;
+    const draftComp = isComponent(dc) ? dc : undefined;
+    const nc = serverNodeHandle(store);
+    const actx = { node: draft, comp: draftComp, deps, store, signal: AbortSignal.timeout(ACTION_TIMEOUT), nc };
+    const result = await handler(actx, data ?? {});
+    let patches = [];
+    const nextNode = finishDraft(draft, (p) => { patches = p; });
+    const postTarget = fieldKey ? nextNode[fieldKey] : nextNode;
+    for (const f of postFields) {
+        if (postTarget[f] === postSnap[f]) {
+            console.warn(`[post] ${type}.${action}: field "${f}" unchanged`);
+        }
+    }
+    if (patches.length > 0)
+        await store.set({ ...nextNode, $patches: patches });
+    return result;
+}
+// ── executeStream: generator action — yields multiple values, no Immer draft ──
+// Generator actions persist via store.set() directly inside the generator body.
+export async function* executeStream(store, path, componentType, componentKey, action, data, signal) {
+    const { node, handler, comp, deps } = await resolveActionHandler(store, path, componentType, componentKey, action);
+    // comp is already node[fieldKey] from resolution — no Immer draft needed for generators
+    const nc = serverNodeHandle(store);
+    const actx = { node, comp, deps, store, signal: signal ?? AbortSignal.timeout(STREAM_TIMEOUT), nc };
+    const result = handler(actx, data ?? {});
+    if (!result || typeof result[Symbol.asyncIterator] !== 'function')
+        throw new OpError('BAD_REQUEST', `Action "${action}" is not a generator`);
+    yield* result;
+}
+// ── setComponent: single component update with OCC ──
+export async function setComponent(store, path, name, data, rev) {
+    const node = await store.get(path);
+    if (!node)
+        throw new OpError('NOT_FOUND', `Node not found: ${path}`);
+    if (rev != null && node.$rev != null && rev !== node.$rev)
+        throw new OpError('CONFLICT', `Stale revision: expected ${rev}, got ${node.$rev}`);
+    node[name] = data;
+    await store.set(node);
+}
+// ── applyTemplate: copy template children to target path ──
+export async function applyTemplate(store, templatePath, targetPath) {
+    const tmpl = await store.get(templatePath);
+    if (!tmpl)
+        throw new OpError('NOT_FOUND', `Template not found: ${templatePath}`);
+    const { items: blocks } = await store.getChildren(templatePath);
+    const { items: existing } = await store.getChildren(targetPath);
+    for (const child of existing)
+        await store.remove(child.$path);
+    for (const block of blocks) {
+        const bname = block.$path.slice(block.$path.lastIndexOf('/') + 1);
+        const bpath = targetPath === '/' ? `/${bname}` : `${targetPath}/${bname}`;
+        const { $rev, ...rest } = block;
+        await store.set({ ...rest, $path: bpath });
+    }
+    return { applied: tmpl.$path, blocks: blocks.length };
+}
+// ── Generic patch action — deep merge data into node (Immer draft) ──
+// Registered on 'default' so every type inherits it via resolve fallback.
+// Guards $ fields. Deep-merges objects, replaces arrays/primitives.
+function deepAssign(target, source) {
+    for (const [k, v] of Object.entries(source)) {
+        if (k.startsWith('$'))
+            continue;
+        if (v && typeof v === 'object' && !Array.isArray(v)
+            && target[k] && typeof target[k] === 'object' && !Array.isArray(target[k])) {
+            deepAssign(target[k], v);
+        }
+        else {
+            target[k] = v;
+        }
+    }
+}
+export function registerBuiltinActions() {
+    register('default', 'action:patch', (ctx, data) => {
+        if (!data || typeof data !== 'object')
+            throw new OpError('BAD_REQUEST', 'patch: data must be an object');
+        deepAssign(ctx.node, data);
+    });
+}
+registerBuiltinActions();
+//# sourceMappingURL=actions.js.map

package/dist/server/actions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"actions.js","sourceRoot":"","sources":["../../src/server/actions.ts"],"names":[],"mappings":"AAAA,6BAA6B;AAC7B,0DAA0D;AAC1D,yCAAyC;AAEzC,OAAO,EAAE,KAAK,EAAc,MAAM,QAAQ,CAAC;AAE3C,OAAO,EAAE,cAAc,EAAiC,MAAM,cAAc,CAAC;AAC7E,OAAO,EAAE,WAAW,IAAI,YAAY,EAAqB,MAAM,aAAa,CAAC;AAC7E,OAAO,EAAsB,iBAAiB,EAAE,WAAW,EAAiB,QAAQ,EAAE,OAAO,EAAE,MAAM,OAAO,CAAC;AAE7G,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,WAAW,EAAc,MAAM,OAAO,CAAC;AAC5E,OAAO,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AAmBnC,MAAM,UAAU,gBAAgB,CAC9B,OAAkB,EAClB,MAAgB,EAChB,OAAgD;IAEhD,OAAO,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC;QACxB,GAAG,CAAmB,GAAa,EAAE,GAAY;YAC/C,OAAO,KAAK,CAAC,cAAc,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,CAAwB,CAAC;QACxG,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AACD,0FAA0F;AAC1F,oFAAoF;AACpF,MAAM,UAAU,gBAAgB,CAAC,KAAW;IAC1C,OAAO,gBAAgB,CACrB,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,EAC5F,CAAC,KAAK,EAAE,EAAE,CAAC,aAAa,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAC7F,CAAC;AACJ,CAAC;AAED,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAElE,+BAA+B;AAC/B,yEAAyE;AACzE,8EAA8E;AAC9E,aAAa,EAAE,CAAC;AAEhB,4DAA4D;AAC5D,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,OAAO,CAAC;AACrE,MAAM,cAAc,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,OAAO,CAAC;AAiBrE,gFAAgF;AAChF,mEAAmE;AACnE,qFAAqF;AACrF,KAAK,UAAU,iBAAiB,CAC9B,KAAW,EAAE,IAAY,EAAE,MAAc;IAEzC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAErC,MAAM,QAAQ,GAAG,cAAc,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC;IAC1D,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC3C,MAAM,UAAU,GAAI,QAAgB,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC;IACxD,IAAI,CAAC,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAE/D,IAAI,CAAC;QACH,MAAM,EAAE,GAAG,IAAI,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,yBAAyB,UAAU,OAAO,CACrC,CAAC;QAC7C,QAAQ,CAAC,IAAI,EAAE,UAAU,MAAM,EAAE,EAAE,EAAE,CAAC,CAAC;QACvC,OAAO,CAAC,GAAG,CAAC,gCAAgC,MAAM,UAAU,IAAI,GAAG,CAAC,CAAC;QACrE,OAAO,EAAE,CAAC;IACZ,CAAC;IAAC,OAAO,GAAQ,EAAE,CAAC;QAClB,OAAO,CAAC,IAAI,CAAC,mCAAmC,MAAM,UAAU,IAAI,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;QACvF,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,KAAK,UAAU,oBAAoB,CACjC,KAAW,EACX,IAAY,EACZ,aAAiC,EACjC,YAAgC,EAChC,MAAc;IAEd,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,OAAO,CAAC,WAAW,EAAE,mBAAmB,IAAI,EAAE,CAAC,CAAC;IAErE,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,iBAAiB,CAAC,IAAI,EAAE,aAAa,IAAI,OAAO,EAAE,YAAY,CAAC,IAAI,EAAE,CAAC;IAC/F,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,OAAO,CAAC,WAAW,EAAE,cAAc,YAAY,IAAI,aAAa,kBAAkB,IAAI,EAAE,CAAC,CAAC;IAE5H,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC;IAExB,IAAI,IAAI,GAAiB,MAAM,YAAY,CAAC,IAAI,EAAE,QAAS,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IAE5E,IAAI,OAAO,GAAG,OAAO,CAAC,IAAI,EAAE,UAAU,MAAM,EAAE,CAAC,CAAC;IAEhD,iEAAiE;IACjE,IAAI,CAAC,OAAO;QAAE,OAAO,GAAG,MAAM,iBAAiB,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACrE,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,OAAO,CAAC,aAAa,EAAE,cAAc,MAAM,eAAe,IAAI,GAAG,CAAC,CAAC;IAE3F,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AACvD,CAAC;AAED,2EAA2E;AAC3E,8EAA8E;AAC9E,uEAAuE;AAEvE,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,KAAW,EACX,IAAY,EACZ,aAAiC,EACjC,YAAgC,EAChC,MAAc,EACd,IAAc;IAEd,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,MAAM,oBAAoB,CACxE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,CACjD,CAAC;IAEF,mDAAmD;IACnD,MAAM,aAAa,GAAG,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAuB,CAAC;IACpE,MAAM,YAAY,GAAG,aAAa,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC;IAC1D,MAAM,SAAS,GAAa,YAAY,EAAE,GAAG,IAAI,EAAE,CAAC;IACpD,MAAM,UAAU,GAAa,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC;IACtD,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAA4B,CAAC,CAAC,CAAC,IAA+B,CAAC;IAEtG,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACpB,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACzD,OAAO,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,MAAM,YAAY,CAAC,YAAY,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,WAAW,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAEzE,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAChC,0EAA0E;IAC1E,MAAM,EAAE,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAClD,MAAM,SAAS,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAmB,CAAC,CAAC,CAAC,SAAS,CAAC;IACpE,MAAM,EAAE,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACnC,MAAM,IAAI,GAAc,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,EAAE,EAAE,CAAC;IACvH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IAE/C,IAAI,OAAO,GAAY,EAAE,CAAC;IAC1B,MAAM,QAAQ,GAAG,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,GAAG,OAAO,GAAG,CAAC,CAAA,CAAC,CAAC,CAAC,CAAC;IAE5D,MAAM,UAAU,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAA4B,CAAC,CAAC,CAAC,QAAmC,CAAC;IAClH,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,IAAI,UAAU,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YAClC,OAAO,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,MAAM,YAAY,CAAC,aAAa,CAAC,CAAC;QACnE,CAAC;IACH,CAAC;IAED,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAc,CAAC,CAAC;IACxF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,iFAAiF;AACjF,gFAAgF;AAEhF,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,aAAa,CAClC,KAAW,EACX,IAAY,EACZ,aAAiC,EACjC,YAAgC,EAChC,MAAc,EACd,IAAc,EACd,MAAoB;IAEpB,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,MAAM,oBAAoB,CAC9D,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,CACjD,CAAC;IACF,wFAAwF;IACxF,MAAM,EAAE,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACnC,MAAM,IAAI,GAAc,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,IAAI,WAAW,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,EAAE,EAAE,CAAC;IAC/G,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzC,IAAI,CAAC,MAAM,IAAI,OAAQ,MAAc,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,UAAU;QACxE,MAAM,IAAI,OAAO,CAAC,aAAa,EAAE,WAAW,MAAM,sBAAsB,CAAC,CAAC;IAC5E,KAAK,CAAC,CAAC,MAAgC,CAAC;AAC1C,CAAC;AAED,uDAAuD;AAEvD,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,KAAW,EACX,IAAY,EACZ,IAAY,EACZ,IAA6B,EAC7B,GAAY;IAEZ,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,OAAO,CAAC,WAAW,EAAE,mBAAmB,IAAI,EAAE,CAAC,CAAC;IAErE,IAAI,GAAG,IAAI,IAAI,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,IAAI,GAAG,KAAK,IAAI,CAAC,IAAI;QACvD,MAAM,IAAI,OAAO,CAAC,UAAU,EAAE,4BAA4B,GAAG,SAAS,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAErF,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAClB,MAAM,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACxB,CAAC;AAED,6DAA6D;AAE7D,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,KAAW,EACX,YAAoB,EACpB,UAAkB;IAElB,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC3C,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,OAAO,CAAC,WAAW,EAAE,uBAAuB,YAAY,EAAE,CAAC,CAAC;IAEjF,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC;IAChE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,GAAG,MAAM,KAAK,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;IAEhE,KAAK,MAAM,KAAK,IAAI,QAAQ;QAAE,MAAM,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAE9D,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;QAClE,MAAM,KAAK,GAAG,UAAU,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,UAAU,IAAI,KAAK,EAAE,CAAC;QAC1E,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,GAAG,KAAK,CAAC;QAChC,MAAM,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC;AACxD,CAAC;AAED,uEAAuE;AACvE,0EAA0E;AAC1E,oEAAoE;AAEpE,SAAS,UAAU,CAAC,MAAW,EAAE,MAA+B;IAC9D,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5C,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAChC,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;eAC9C,MAAM,CAAC,CAAC,CAAC,IAAI,OAAO,MAAM,CAAC,CAAC,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7E,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAA4B,CAAC,CAAC;QACtD,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAChB,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,sBAAsB;IACpC,QAAQ,CAAC,SAAS,EAAE,cAAc,EAAE,CAAC,GAAc,EAAE,IAAa,EAAE,EAAE;QACpE,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,MAAM,IAAI,OAAO,CAAC,aAAa,EAAE,+BAA+B,CAAC,CAAC;QACzG,UAAU,CAAC,GAAG,CAAC,IAAI,EAAE,IAA+B,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,sBAAsB,EAAE,CAAC"}

package/dist/server/agent.d.ts

@@ -0,0 +1,6 @@
+export declare const AGENT_SESSION_TTL: number;
+/** SHA-256 hex hash — fast, sufficient for high-entropy agent keys */
+export declare function hashAgentKey(key: string): string;
+/** Constant-time comparison of two hex hashes */
+export declare function timingSafeCompare(a: string, b: string): boolean;
+//# sourceMappingURL=agent.d.ts.map

package/dist/server/agent.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent.d.ts","sourceRoot":"","sources":["../../src/server/agent.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,iBAAiB,QAA0B,CAAC;AAEzD,sEAAsE;AACtE,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED,iDAAiD;AACjD,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAG/D"}

package/dist/server/agent.js

@@ -0,0 +1,15 @@
+// Agent Port — TOFU (Trust On First Use) connection system
+// Utilities for agent key hashing and session management.
+import { createHash, timingSafeEqual } from 'node:crypto';
+export const AGENT_SESSION_TTL = 7 * 24 * 60 * 60 * 1000; // 7 days
+/** SHA-256 hex hash — fast, sufficient for high-entropy agent keys */
+export function hashAgentKey(key) {
+    return createHash('sha256').update(key).digest('hex');
+}
+/** Constant-time comparison of two hex hashes */
+export function timingSafeCompare(a, b) {
+    if (a.length !== b.length)
+        return false;
+    return timingSafeEqual(Buffer.from(a, 'hex'), Buffer.from(b, 'hex'));
+}
+//# sourceMappingURL=agent.js.map

package/dist/server/agent.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent.js","sourceRoot":"","sources":["../../src/server/agent.ts"],"names":[],"mappings":"AAAA,2DAA2D;AAC3D,0DAA0D;AAE1D,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAE1D,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC,SAAS;AAEnE,sEAAsE;AACtE,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACxD,CAAC;AAED,iDAAiD;AACjD,MAAM,UAAU,iBAAiB,CAAC,CAAS,EAAE,CAAS;IACpD,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,OAAO,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;AACvE,CAAC"}

package/dist/server/auth.d.ts

@@ -0,0 +1,39 @@
+import { type ComponentData, type GroupPerm, type NodeData } from '#core';
+import { type Tree } from '#tree';
+export type AclHandler = () => GroupPerm[];
+declare module '#core/context' {
+    interface ContextHandlers {
+        acl: AclHandler;
+    }
+}
+export type Session = {
+    userId: string;
+    claims?: string[];
+};
+export declare function createSession(store: Tree, userId: string, opts?: {
+    ttlMs?: number;
+    claims?: string[];
+}): Promise<string>;
+export declare function resolveToken(store: Tree, token: string): Promise<Session | null>;
+export declare function revokeSession(store: Tree, token: string): Promise<boolean>;
+export declare function hashPassword(password: string): Promise<string>;
+export declare const DUMMY_HASH: string;
+export declare function verifyPassword(password: string, hash: string): Promise<boolean>;
+export declare function ancestorPaths(path: string): string[];
+type AclState = {
+    groupPerms: Map<string, number>;
+    denied: Set<string>;
+    deniedBits: Map<string, number>;
+    owner: string | undefined;
+};
+export declare function resolvePermission(store: Tree, path: string, userId: string | null, claims: string[], cache?: Map<string, number>, nodeCache?: Map<string, NodeData | null>, stateCache?: Map<string, AclState>): Promise<number>;
+export declare function componentPerm(comp: ComponentData, userId: string | null, claims: string[], owner: string | undefined): number;
+export declare function stripComponents(node: NodeData, userId: string | null, claims: string[]): NodeData;
+export declare function buildClaims(store: Tree, userId: string): Promise<string[]>;
+export type AclStore = Tree & {
+    /** Cached after get/getChildren — O(1) for already-resolved paths */
+    getPerm(path: string): Promise<number>;
+};
+export declare function withAcl(rawStore: Tree, userId: string | null, claims: string[]): AclStore;
+export {};
+//# sourceMappingURL=auth.d.ts.map

package/dist/server/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/server/auth.ts"],"names":[],"mappings":"AAIA,OAAO,EAEL,KAAK,aAAa,EAClB,KAAK,SAAS,EAEd,KAAK,QAAQ,EAId,MAAM,OAAO,CAAC;AACf,OAAO,EAAY,KAAK,IAAI,EAAE,MAAM,OAAO,CAAC;AAG5C,MAAM,MAAM,UAAU,GAAG,MAAM,SAAS,EAAE,CAAC;AAE3C,OAAO,QAAQ,eAAe,CAAC;IAC7B,UAAU,eAAe;QACvB,GAAG,EAAE,UAAU,CAAC;KACjB;CACF;AAID,MAAM,MAAM,OAAO,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,CAAC;AAS5D,wBAAsB,aAAa,CACjC,KAAK,EAAE,IAAI,EACX,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,GAC3C,OAAO,CAAC,MAAM,CAAC,CAUjB;AAED,wBAAsB,YAAY,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAatF;AAED,wBAAsB,aAAa,CAAC,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAEhF;AAID,wBAAsB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAMpE;AAGD,eAAO,MAAM,UAAU,QAA0E,CAAC;AAElG,wBAAsB,cAAc,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CASrF;AAID,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAUpD;AAMD,KAAK,QAAQ,GAAG;IACd,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACpB,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3B,CAAC;AAkBF,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,IAAI,EACX,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,GAAG,IAAI,EACrB,MAAM,EAAE,MAAM,EAAE,EAChB,KAAK,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,EAC3B,SAAS,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,QAAQ,GAAG,IAAI,CAAC,EACxC,UAAU,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,GACjC,OAAO,CAAC,MAAM,CAAC,CAkEjB;AAID,wBAAgB,aAAa,CAC3B,IAAI,EAAE,aAAa,EACnB,MAAM,EAAE,MAAM,GAAG,IAAI,EACrB,MAAM,EAAE,MAAM,EAAE,EAChB,KAAK,EAAE,MAAM,GAAG,SAAS,GACxB,MAAM,CAiCR;AAED,wBAAgB,eAAe,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,QAAQ,CAajG;AAID,wBAAsB,WAAW,CAAC,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAShF;AAID,MAAM,MAAM,QAAQ,GAAG,IAAI,GAAG;IAC5B,qEAAqE;IACrE,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;CACxC,CAAC;AAEF,wBAAgB,OAAO,CAAC,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,QAAQ,CAgGzF"}