@usefragments/core 1.11.0 → 2.0.0

package/dist/preview-runtime.d.ts

@@ -1,6 +1,6 @@
 import * as react_jsx_runtime from 'react/jsx-runtime';
 import { ReactNode } from 'react';
-import { V as VariantRenderOptions, b as VariantLoader } from './governance-BAsy1k2H.js';
+import { V as VariantRenderOptions, b as VariantLoader } from './governance-hOPXGbbs.js';
 import 'zod';
 import './topology/index.js';
 

package/dist/react-types.d.ts

@@ -1,5 +1,5 @@
 import { ComponentType, ReactNode, JSX } from 'react';
-export { F as FragmentDefinition, a as FragmentDefinitionV2 } from './governance-BAsy1k2H.js';
+export { F as FragmentDefinition, a as FragmentDefinitionV2 } from './governance-hOPXGbbs.js';
 import 'zod';
 import './topology/index.js';
 

package/dist/schemas/index.js

@@ -24,7 +24,7 @@ import {
   suppressionDirectiveSchema,
   validatorResultSchema,
   violationSchema
-} from "../chunk-RPSEABY3.js";
+} from "../chunk-BMPYIUZE.js";
 import "../chunk-EIYNNS77.js";
 import "../chunk-PWIJMOI4.js";
 import "../chunk-JNBFJ34I.js";

package/dist/storyAdapter.d.ts

@@ -1,6 +1,6 @@
 import { ReactNode, ComponentType } from 'react';
 import { isExportStory as isExportStory$1, storyNameFromExport as storyNameFromExport$1, toId as toId$1 } from '@storybook/csf';
-import { F as FragmentDefinition } from './governance-BAsy1k2H.js';
+import { F as FragmentDefinition } from './governance-hOPXGbbs.js';
 import 'zod';
 import './topology/index.js';
 

package/dist/test-utils.d.ts

@@ -1,6 +1,6 @@
 import { CompiledBlock, CompiledFragment } from './compiled-types/index.js';
 import './types-xJ2xyp_G.js';
-import './governance-BAsy1k2H.js';
+import './governance-hOPXGbbs.js';
 import 'zod';
 import 'react';
 import './topology/index.js';

package/dist/topology/index.d.ts

@@ -6,7 +6,7 @@
  * preview, cross-repo reconciliation) import it; none reimplements glob/area
  * logic. Pure and browser-safe — no Node, no parser deps.
  *
- * See `apps/cloud/docs/topology/01-architecture.md §1`.
+ * See `docs/fragments-v1/ARCHITECTURE.md §1`.
  */
 type AreaCriticality = "low" | "medium" | "high" | "revenue" | "regulated";
 interface Area {

package/dist/topology/index.js

@@ -1,6 +1,6 @@
 import {
   resolveArea
-} from "../chunk-3LLRNCPX.js";
+} from "../chunk-MZ2FS7U4.js";
 export {
   resolveArea
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@usefragments/core",
-  "version": "1.11.0",
+  "version": "2.0.0",
   "license": "MIT",
   "description": "Core types, schemas, and runtime API for Fragments component definitions",
   "author": "Conan McNicholl",

package/src/approved-contract-tokens.test.ts

@@ -0,0 +1,39 @@
+import { describe, expect, it } from "vitest";
+import {
+  APPROVED_CONTRACT_TOKEN_MAX_NAMES,
+  APPROVED_CONTRACT_TOKEN_MAX_NAME_LENGTH,
+  isApprovedContractTokenNames,
+} from "./approved-contract-tokens.js";
+import { parseComponentGovernancePolicyJson } from "./governance.js";
+
+describe("approved token transport", () => {
+  it("distinguishes absent authority from an explicitly empty vocabulary", () => {
+    expect(isApprovedContractTokenNames(undefined)).toBe(false);
+    expect(isApprovedContractTokenNames(null)).toBe(false);
+    expect(isApprovedContractTokenNames([])).toBe(true);
+    expect(isApprovedContractTokenNames(["--approved"])).toBe(true);
+  });
+  it("enforces the same bounded vocabulary on every consumer", () => {
+    expect(isApprovedContractTokenNames(Array(APPROVED_CONTRACT_TOKEN_MAX_NAMES).fill("--x"))).toBe(
+      true
+    );
+    expect(
+      isApprovedContractTokenNames(Array(APPROVED_CONTRACT_TOKEN_MAX_NAMES + 1).fill("--x"))
+    ).toBe(false);
+    expect(
+      isApprovedContractTokenNames(["--" + "x".repeat(APPROVED_CONTRACT_TOKEN_MAX_NAME_LENGTH - 2)])
+    ).toBe(true);
+    expect(
+      isApprovedContractTokenNames(["--" + "x".repeat(APPROVED_CONTRACT_TOKEN_MAX_NAME_LENGTH - 1)])
+    ).toBe(false);
+    expect(isApprovedContractTokenNames(["--"])).toBe(false);
+    expect(isApprovedContractTokenNames(["local-token"])).toBe(false);
+  });
+});
+
+it("normalizes supported policy envelopes without treating malformed authority as empty rules", () => {
+  for (const payload of ["[]", '{"governance":[]}', '{"rules":[]}'])
+    expect(parseComponentGovernancePolicyJson(payload)).toEqual([]);
+  for (const payload of ["null", "{}", "[{}]", "invalid", '{"governance":false}'])
+    expect(parseComponentGovernancePolicyJson(payload)).toBeNull();
+});

package/src/approved-contract-tokens.ts

@@ -0,0 +1,18 @@
+/** Portable bounds shared by contract authoring and first-party policy clients. */
+export const APPROVED_CONTRACT_TOKEN_MAX_NAMES = 10_000;
+export const APPROVED_CONTRACT_TOKEN_MAX_NAME_LENGTH = 512;
+
+/** Empty is authored absence; missing is unavailable authority. */
+export function isApprovedContractTokenNames(value: unknown): value is string[] {
+  return (
+    Array.isArray(value) &&
+    value.length <= APPROVED_CONTRACT_TOKEN_MAX_NAMES &&
+    value.every(
+      (name) =>
+        typeof name === "string" &&
+        name.startsWith("--") &&
+        name.length > 2 &&
+        name.length <= APPROVED_CONTRACT_TOKEN_MAX_NAME_LENGTH
+    )
+  );
+}

package/src/codes/__tests__/codes.test.ts

@@ -29,6 +29,10 @@ const SUBSYSTEM_EMITTED_CODES = [
   // extracted component, is refused before any rule has a contract to run on.
   "FUI9010",
   "FUI9011",
+  // Emitted by Cloud's machine contract write path (CLI route + MCP tool) when
+  // the workspace plan does not include contract writes from machines; the CLI
+  // relays it. Not a rule.
+  "FUI9012",
   // Emitted by tokens/css-vars-must-be-defined when the rule is active but the
   // resolved contract vocabulary is empty — a config-level inert diagnostic,
   // not a second rule id in RULES.

package/src/codes/codes.ts

@@ -557,6 +557,16 @@ export const CODES = [
     fixAvailable: false,
     evidenceRequired: false,
   }),
+  code({
+    code: "FUI9012",
+    ruleId: "contract/write-not-entitled",
+    category: "system",
+    defaultSeverity: "critical",
+    title: "Contract write requires a paid workspace",
+    lifecycle: "experimental",
+    fixAvailable: false,
+    evidenceRequired: false,
+  }),
 ] as const satisfies readonly FuiCode[];
 
 export const byCode: ReadonlyMap<string, FuiCode> = new Map(

package/src/domain-ids.test.ts

@@ -3,12 +3,8 @@ import {
   analysisPlanIdFromDigest,
   evaluationReceiptIdFromDigest,
   mintEvaluationReceiptId,
-  featurePlanIdFromEntropy,
-  featureRevisionIdFromDigest,
   parseAnalysisPlanId,
   parseEvaluationReceiptId,
-  parseFeaturePlanId,
-  parseFeatureRevisionId,
 } from "./domain-ids.js";
 
 const DIGEST = "0123456789abcdef".repeat(4);
@@ -18,35 +14,22 @@ describe("V1 domain IDs", () => {
     expect(analysisPlanIdFromDigest(DIGEST)).toBe(`apl_${DIGEST}`);
     expect(evaluationReceiptIdFromDigest(DIGEST)).toBe(`evr_${DIGEST}`);
     expect(mintEvaluationReceiptId(DIGEST)).toBe(`evr_${DIGEST}`);
-    expect(featureRevisionIdFromDigest(DIGEST)).toBe(`fpr_${DIGEST}`);
-  });
-
-  it("keeps feature workflow identity opaque and exactly 128-bit", () => {
-    const entropy = "00112233445566778899aabbccddeeff";
-    expect(featurePlanIdFromEntropy(entropy)).toBe(`fpl_${entropy}`);
   });
 
   it.each([
     [parseAnalysisPlanId, `apl_${DIGEST}`],
     [parseEvaluationReceiptId, `evr_${DIGEST}`],
-    [parseFeatureRevisionId, `fpr_${DIGEST}`],
-    [parseFeaturePlanId, "fpl_00112233445566778899aabbccddeeff"],
   ] as const)("round-trips a valid ID", (parse, value) => {
     expect(parse(value)).toBe(value);
   });
 
-  it.each([
-    `apl_${DIGEST.slice(0, -1)}`,
-    `apl_${DIGEST.toUpperCase()}`,
-    `evr_${DIGEST}extra`,
-    `fpr_${DIGEST.slice(0, 32)}`,
-    "fpl_00112233445566778899AABBCCDDEEFF",
-  ])("rejects truncated, uppercase, or extended IDs: %s", (value) => {
-    expect(() => {
-      if (value.startsWith("apl_")) parseAnalysisPlanId(value);
-      else if (value.startsWith("evr_")) parseEvaluationReceiptId(value);
-      else if (value.startsWith("fpr_")) parseFeatureRevisionId(value);
-      else parseFeaturePlanId(value);
-    }).toThrow();
-  });
+  it.each([`apl_${DIGEST.slice(0, -1)}`, `apl_${DIGEST.toUpperCase()}`, `evr_${DIGEST}extra`])(
+    "rejects truncated, uppercase, or extended IDs: %s",
+    (value) => {
+      expect(() => {
+        if (value.startsWith("apl_")) parseAnalysisPlanId(value);
+        else if (value.startsWith("evr_")) parseEvaluationReceiptId(value);
+      }).toThrow();
+    }
+  );
 });

package/src/domain-ids.ts

@@ -1,23 +1,15 @@
 import { z } from "zod";
 
 const FULL_DIGEST_PATTERN = /^[0-9a-f]{64}$/u;
-const WORKFLOW_ENTROPY_PATTERN = /^[0-9a-f]{32}$/u;
 
 export declare const analysisPlanIdBrand: unique symbol;
 export declare const evaluationReceiptIdBrand: unique symbol;
-export declare const featurePlanIdBrand: unique symbol;
-export declare const featureRevisionIdBrand: unique symbol;
 
 export type DigestHex = string;
 export type AnalysisPlanId = `apl_${string}` & { readonly [analysisPlanIdBrand]: void };
 export type EvaluationReceiptId = `evr_${string}` & {
   readonly [evaluationReceiptIdBrand]: void;
 };
-export type FeaturePlanId = `fpl_${string}` & { readonly [featurePlanIdBrand]: void };
-export type FeatureRevisionId = `fpr_${string}` & {
-  readonly [featureRevisionIdBrand]: void;
-};
-
 export const digestHexStringSchema = z
   .string()
   .regex(FULL_DIGEST_PATTERN, "Expected 64 lowercase hexadecimal characters");
@@ -38,20 +30,6 @@ export const evaluationReceiptIdStringSchema = z
   .string()
   .regex(/^evr_[0-9a-f]{64}$/u, "Invalid evaluation receipt ID");
 
-export const featurePlanIdStringSchema = z
-  .string()
-  .regex(/^fpl_[0-9a-f]{32}$/u, "Invalid feature plan ID");
-export const featurePlanIdSchema = featurePlanIdStringSchema.transform(
-  (value) => value as FeaturePlanId
-);
-
-export const featureRevisionIdStringSchema = z
-  .string()
-  .regex(/^fpr_[0-9a-f]{64}$/u, "Invalid feature revision ID");
-export const featureRevisionIdSchema = featureRevisionIdStringSchema.transform(
-  (value) => value as FeatureRevisionId
-);
-
 export function parseDigestHex(value: string): DigestHex {
   return digestHexSchema.parse(value);
 }
@@ -74,21 +52,6 @@ export function mintEvaluationReceiptId(resultDigest: string): EvaluationReceipt
   return evaluationReceiptIdFromDigest(resultDigest);
 }
 
-export function featureRevisionIdFromDigest(digest: string): FeatureRevisionId {
-  return featureRevisionIdSchema.parse(`fpr_${parseDigestHex(digest)}`);
-}
-
-/**
- * Construct a stable feature-workflow ID from 128 bits supplied by the caller.
- * Core deliberately owns neither a clock nor a random-number generator.
- */
-export function featurePlanIdFromEntropy(entropyHex: string): FeaturePlanId {
-  if (!WORKFLOW_ENTROPY_PATTERN.test(entropyHex)) {
-    throw new TypeError("Feature plan entropy must be exactly 128-bit lowercase hexadecimal");
-  }
-  return featurePlanIdSchema.parse(`fpl_${entropyHex}`);
-}
-
 export function parseAnalysisPlanId(value: string): AnalysisPlanId {
   return analysisPlanIdSchema.parse(value);
 }
@@ -96,11 +59,3 @@ export function parseAnalysisPlanId(value: string): AnalysisPlanId {
 export function parseEvaluationReceiptId(value: string): EvaluationReceiptId {
   return evaluationReceiptIdSchema.parse(value);
 }
-
-export function parseFeaturePlanId(value: string): FeaturePlanId {
-  return featurePlanIdSchema.parse(value);
-}
-
-export function parseFeatureRevisionId(value: string): FeatureRevisionId {
-  return featureRevisionIdSchema.parse(value);
-}

package/src/evaluation/evaluate.ts

@@ -303,7 +303,7 @@ function evaluateV2(rawInput: EvaluationInputV2): EvaluationResultV2 {
       : coverageSummary.requiredByState.analyzed === coverageSummary.requiredRegions
         ? "complete"
         : "incomplete";
-  const integrity = {
+  const integrity: EvaluationResultV2["integrity"] = {
     fcidVerified: compatibilityResult.integrity.fcidVerified === true,
     analysisPlanVerified: true,
     factIntegrity: input.integrity.facts.state,
@@ -324,9 +324,7 @@ function evaluateV2(rawInput: EvaluationInputV2): EvaluationResultV2 {
     verdict = "indeterminate";
   }
 
-  const inputDigest = sha256Hex(
-    canonicalPreimage(normalizeInputV2ForDigest(input, coverageSummary))
-  );
+  const inputDigest = evaluationInputDigestV2(input);
   const partial = {
     schemaVersion: 2 as const,
     verdict,
@@ -340,12 +338,24 @@ function evaluateV2(rawInput: EvaluationInputV2): EvaluationResultV2 {
     coverageSummary,
     integrity,
   };
-  const resultDigest = sha256Hex(
-    canonicalPreimage({ schema: "evaluation-result:v2", ...partial, inputDigest })
-  );
+  const resultDigest = evaluationResultDigestV2({ ...partial, inputDigest });
   return evaluationResultV2Schema.parse({ ...partial, inputDigest, resultDigest });
 }
 
+/** Hash captured input identity without re-running the rule engine. */
+export function evaluationInputDigestV2(input: EvaluationInputV2): string {
+  return sha256Hex(
+    canonicalPreimage(
+      normalizeInputV2ForDigest(input, deriveCoverageSummaryV1(input.analysisPlan, input.coverage))
+    )
+  );
+}
+
+/** Validate stored result identity using the same algorithm as evaluation. */
+export function evaluationResultDigestV2(result: Omit<EvaluationResultV2, "resultDigest">): string {
+  return sha256Hex(canonicalPreimage({ schema: "evaluation-result:v2", ...result }));
+}
+
 function normalizeInputV2ForDigest(
   input: EvaluationInputV2,
   coverageSummary: ReturnType<typeof deriveCoverageSummaryV1>

package/src/evaluation/evaluation-v2-receipt-v1.test.ts

@@ -9,6 +9,8 @@ import { repositoryBindingDigestV1 } from "../repository-binding.js";
 import {
   EVALUATOR_VERSION_V2,
   evaluate,
+  evaluationInputDigestV2,
+  evaluationResultDigestV2,
   evaluationInputV2Schema,
   evaluationReceiptDigestV1,
   evaluationReceiptMintInputV1Schema,
@@ -550,6 +552,18 @@ describe("EvaluationResultV2", () => {
 });
 
 describe("evaluate V2", () => {
+  it("validates stored semantic digests without a second evaluation", () => {
+    const input = evaluationInput();
+    const result = evaluate(input);
+    const { resultDigest, ...semantic } = result;
+    expect(evaluationInputDigestV2(input)).toBe(result.inputDigest);
+    expect(evaluationResultDigestV2(semantic)).toBe(resultDigest);
+    expect(evaluationResultDigestV2({ ...semantic, verdict: "block" })).not.toBe(resultDigest);
+    expect(evaluationInputDigestV2({ ...input, evaluatedAt: input.evaluatedAt + 1 })).not.toBe(
+      result.inputDigest
+    );
+  });
+
   it("produces the checked-in deterministic pass result for complete healthy evidence", () => {
     const result = evaluate(evaluationInput());
 
@@ -741,14 +755,12 @@ describe("EvaluationReceiptV1", () => {
       resultDigest: A,
       evaluatorVersion: "evaluation-kernel:v2",
     } satisfies EvaluationReceiptMintInputV1;
-    if (false) {
-      // @ts-expect-error Source-verified trust is derived with provider proof by the application.
-      const sourceVerifiedMintInput: EvaluationReceiptMintInputV1 = {
-        ...external,
-        trust: "source_verified",
-      };
-      void sourceVerifiedMintInput;
-    }
+    // @ts-expect-error Source-verified trust is derived with provider proof by the application.
+    const sourceVerifiedMintInput: EvaluationReceiptMintInputV1 = {
+      ...external,
+      trust: "source_verified",
+    };
+    void sourceVerifiedMintInput;
     expect(evaluationReceiptMintInputV1Schema.parse(external)).toEqual(external);
     expect(() =>
       evaluationReceiptMintInputV1Schema.parse({ ...external, authority: "enforcement_eligible" })

package/src/evaluation/index.ts

@@ -3,7 +3,7 @@
  * Adapters: `packages/cli/src/govern/evaluation.ts` and
  * `apps/cloud/src/lib/govern/evaluation-adapter.ts`.
  */
-export { evaluate } from "./evaluate.js";
+export { evaluate, evaluationInputDigestV2, evaluationResultDigestV2 } from "./evaluate.js";
 export { EVALUATOR_VERSION, EVALUATOR_VERSION_V2 } from "./types.js";
 export {
   EVALUATION_MAX_FINDINGS_V2,

package/src/governance.ts

@@ -172,6 +172,24 @@ export const componentGovernanceRecordSchema = z.discriminatedUnion("kind", [
 
 export const componentGovernanceRecordsSchema = z.array(componentGovernanceRecordSchema);
 
+/** Parse portable component policy records; malformed authority is unavailable, never empty. */
+export function parseComponentGovernancePolicyJson(
+  policyJson: string
+): ComponentGovernanceRecord[] | null {
+  try {
+    const parsed: unknown = JSON.parse(policyJson);
+    const record =
+      parsed && typeof parsed === "object" && !Array.isArray(parsed)
+        ? (parsed as Record<string, unknown>)
+        : null;
+    const candidate = Array.isArray(parsed) ? parsed : (record?.governance ?? record?.rules);
+    const result = componentGovernanceRecordsSchema.safeParse(candidate);
+    return result.success ? result.data : null;
+  } catch {
+    return null;
+  }
+}
+
 const componentPolicyMatchSchema = z
   .object({
     componentKey: z.string().min(1).optional(),

package/src/index.ts

@@ -508,6 +508,7 @@ export type { InferProps } from "./defineFragment.js";
 export {
   componentGovernanceRecordSchema,
   componentGovernanceRecordsSchema,
+  parseComponentGovernancePolicyJson,
   canonicalBridgeV1Schema,
   g,
   globalGovernanceRecordSchema,
@@ -1060,25 +1061,11 @@ export {
   mintEvaluationReceiptId,
   evaluationReceiptIdSchema,
   evaluationReceiptIdStringSchema,
-  featurePlanIdFromEntropy,
-  featurePlanIdSchema,
-  featurePlanIdStringSchema,
-  featureRevisionIdFromDigest,
-  featureRevisionIdSchema,
-  featureRevisionIdStringSchema,
   parseAnalysisPlanId,
   parseDigestHex,
   parseEvaluationReceiptId,
-  parseFeaturePlanId,
-  parseFeatureRevisionId,
-} from "./domain-ids.js";
-export type {
-  AnalysisPlanId,
-  DigestHex,
-  EvaluationReceiptId,
-  FeaturePlanId,
-  FeatureRevisionId,
 } from "./domain-ids.js";
+export type { AnalysisPlanId, DigestHex, EvaluationReceiptId } from "./domain-ids.js";
 export {
   PROVIDER_ID_MAX_BYTES_V1,
   REPOSITORY_BINDING_ID_MAX_BYTES_V1,
@@ -1118,70 +1105,6 @@ export type {
   CoverageSummaryV1,
 } from "./analysis-plan/index.js";
 
-export {
-  AGENT_FEATURE_CONTEXT_MAX_BYTES_V1,
-  FEATURE_PLAN_MAX_ACCEPTANCE_ITEMS_V1,
-  FEATURE_PLAN_MAX_DECISIONS_V1,
-  FEATURE_PLAN_MAX_EVIDENCE_REFS_V1,
-  FEATURE_PLAN_MAX_GAPS_V1,
-  FEATURE_PLAN_MAX_SCENARIOS_V1,
-  FEATURE_PLAN_MAX_TEXT_BYTES_V1,
-  FEATURE_PLAN_MAX_USES_PER_KIND_V1,
-  agentFeatureContextV1Schema,
-  approvedFeatureManifestInputV1Schema,
-  approvedFeatureManifestRevisionDigestV1,
-  approvedFeatureManifestV1Schema,
-  buildApprovedFeatureManifestV1,
-  buildFeatureProposalV1,
-  capabilityGapV1Schema,
-  componentUseDecisionV1Schema,
-  decisionRequestV1Schema,
-  decisionResolutionV1Schema,
-  evidenceRefV1Schema,
-  featureAcceptanceItemV1Schema,
-  featurePinsV1Schema,
-  featureProposalInputV1Schema,
-  featureProposalRevisionDigestV1,
-  featureProposalV1Schema,
-  gapDispositionV1Schema,
-  layoutConcernV1Schema,
-  layoutOwnershipV1Schema,
-  normalizeApprovedFeatureManifestInputV1,
-  normalizeFeatureProposalInputV1,
-  parseAgentFeatureContextV1,
-  parseApprovedFeatureManifestV1,
-  parseFeatureProposalV1,
-  patternStatusV1Schema,
-  patternUseDecisionV1Schema,
-  placementDecisionV1Schema,
-  responsiveDecisionV1Schema,
-  scenarioRequirementV1Schema,
-  tokenUseDecisionV1Schema,
-} from "./feature-plan/index.js";
-export type {
-  AgentFeatureContextV1,
-  ApprovedFeatureManifestInputV1,
-  ApprovedFeatureManifestV1,
-  CapabilityGapV1,
-  ComponentUseDecisionV1,
-  DecisionRequestV1,
-  DecisionResolutionV1,
-  EvidenceRefV1,
-  FeatureAcceptanceItemV1,
-  FeaturePinsV1,
-  FeatureProposalInputV1,
-  FeatureProposalV1,
-  GapDispositionV1,
-  LayoutConcernV1,
-  LayoutOwnershipV1,
-  PatternStatusV1,
-  PatternUseDecisionV1,
-  PlacementDecisionV1,
-  ResponsiveDecisionV1,
-  ScenarioRequirementV1,
-  TokenUseDecisionV1,
-} from "./feature-plan/index.js";
-
 // Topology — map file paths to product areas (area-scoped governance).
 // Also available at the `@usefragments/core/topology` subpath.
 export { resolveArea } from "./topology/index.js";
@@ -1203,6 +1126,8 @@ export {
   EVALUATOR_VERSION_V2,
   effectiveEvaluationWaiverV2Schema,
   evaluate,
+  evaluationInputDigestV2,
+  evaluationResultDigestV2,
   evaluationInputV2Schema,
   evaluationReceiptDigestV1,
   evaluationReceiptMintInputV1Schema,
@@ -1245,3 +1170,9 @@ export type {
   ProviderProofSemanticV1,
   ProviderProofV1,
 } from "./evaluation/index.js";
+
+export {
+  APPROVED_CONTRACT_TOKEN_MAX_NAMES,
+  APPROVED_CONTRACT_TOKEN_MAX_NAME_LENGTH,
+  isApprovedContractTokenNames,
+} from "./approved-contract-tokens.js";

package/src/topology/resolve-area.ts

@@ -6,7 +6,7 @@
  * preview, cross-repo reconciliation) import it; none reimplements glob/area
  * logic. Pure and browser-safe — no Node, no parser deps.
  *
- * See `apps/cloud/docs/topology/01-architecture.md §1`.
+ * See `docs/fragments-v1/ARCHITECTURE.md §1`.
  */
 
 export type AreaCriticality = "low" | "medium" | "high" | "revenue" | "regulated";

package/src/types.ts

@@ -922,9 +922,6 @@ export interface ThemeSeeds {
   /** Neutral palette name */
   neutral?: "stone" | "ice" | "earth" | "sand" | "fire" | "fragments";
 
-  /** Spacing density scale */
-  density?: "compact" | "default" | "relaxed";
-
   /** Border radius style */
   radiusStyle?: "sharp" | "subtle" | "default" | "rounded" | "pill";
 

package/dist/chunk-3LLRNCPX.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/topology/resolve-area.ts"],"sourcesContent":["/**\n * Topology — map a repo-relative file path to its product area.\n *\n * This is the DRY keystone of the topology layer: the ONLY area-matching\n * implementation in the monorepo. Consumers (CLI scan, Cloud managed-editor\n * preview, cross-repo reconciliation) import it; none reimplements glob/area\n * logic. Pure and browser-safe — no Node, no parser deps.\n *\n * See `apps/cloud/docs/topology/01-architecture.md §1`.\n */\n\nexport type AreaCriticality = \"low\" | \"medium\" | \"high\" | \"revenue\" | \"regulated\";\n\nexport interface Area {\n  id: string;\n  name: string;\n  criticality: AreaCriticality;\n  owners: string[];\n  /** Globs matched against repo-relative file paths in v0. */\n  files: string[];\n  /** Stored for later route-topology adapters; NOT matched in v0. */\n  routes?: string[];\n  /** Tie-break: higher wins. Defaults to declaration order. */\n  priority?: number;\n}\n\nexport interface Topology {\n  /** Bump signals \"re-tag\" to consumers that cache. */\n  version: number;\n  /** Whether area file globs are matched relative to app.path or repo root. Defaults to \"app\". */\n  base?: \"app\" | \"repo\";\n  /** Array (not a keyed record) so precedence is deterministic. */\n  areas: Area[];\n}\n\nexport interface AreaMatch {\n  areaId: string;\n  areaName: string;\n  criticality: AreaCriticality;\n  owners: string[];\n  /** The winning pattern — surfaced in reports for transparency. */\n  matchedGlob: string;\n}\n\n/**\n * Compile a minimal glob to an anchored RegExp. We intentionally do NOT depend\n * on picomatch: core stays lean, the surface we need is small, and we want\n * exact control over Next.js route-group parens (`(marketing)` is a literal\n * path segment here, not an extglob group).\n *\n * Semantics:\n *   - `/**` at a segment boundary (end-of-glob or before `/`) → \"this directory\n *     and everything under it\": the leading slash is optional, so\n *     `src/app/checkout/**` matches `src/app/checkout` AND any descendant.\n *   - a bare/leading `**` → matches across path separators (`.*`). Note a\n *     leading globstar-then-slash does NOT match the root (use a lone `**`\n *     for \"everything\").\n *   - `*`   → matches within a single segment (`[^/]*`)\n *   - `?`   → a single non-separator char\n *   - `{a,b}` → alternation `(?:a|b)`\n *   - every other regex-significant char (`.`, `(`, `)`, `+`, …) is literal\n *\n * Throws on a malformed pattern (e.g. an unbalanced `{`). Callers compile via\n * `compile()`, which catches the throw so a config typo degrades one glob to a\n * non-match instead of aborting the whole scan.\n */\nfunction globToRegExp(glob: string): RegExp {\n  let out = \"\";\n  let braceDepth = 0;\n  let i = 0;\n  while (i < glob.length) {\n    const ch = glob[i];\n\n    // `/**` at a segment boundary → optional slash + anything-below. Matches\n    // the directory itself (`a/**` ⇒ `a`) and every descendant.\n    if (\n      ch === \"/\" &&\n      glob[i + 1] === \"*\" &&\n      glob[i + 2] === \"*\" &&\n      (glob[i + 3] === undefined || glob[i + 3] === \"/\")\n    ) {\n      out += \"(?:/.*)?\";\n      i += 3; // consume `/**`; a trailing `/` (in `a/**/b`) is handled next pass\n      continue;\n    }\n\n    // Bare/leading globstar — crosses path separators.\n    if (ch === \"*\" && glob[i + 1] === \"*\") {\n      out += \".*\";\n      i += 2;\n      continue;\n    }\n\n    switch (ch) {\n      case \"*\":\n        out += \"[^/]*\"; // single segment\n        break;\n      case \"?\":\n        out += \"[^/]\";\n        break;\n      case \"{\":\n        braceDepth += 1;\n        out += \"(?:\";\n        break;\n      case \"}\":\n        if (braceDepth > 0) {\n          braceDepth -= 1;\n          out += \")\";\n        } else {\n          out += \"\\\\}\";\n        }\n        break;\n      case \",\":\n        out += braceDepth > 0 ? \"|\" : \",\";\n        break;\n      // Regex-significant chars kept literal (parens cover route groups).\n      case \".\":\n      case \"(\":\n      case \")\":\n      case \"+\":\n      case \"^\":\n      case \"$\":\n      case \"|\":\n      case \"[\":\n      case \"]\":\n      case \"\\\\\":\n        out += `\\\\${ch}`;\n        break;\n      default:\n        out += ch;\n    }\n    i += 1;\n  }\n  return new RegExp(`^${out}$`);\n}\n\ninterface CompiledArea {\n  area: Area;\n  matchers: { glob: string; re: RegExp }[];\n}\n\n/**\n * Cache compiled matchers per topology object. Consumers pass the same\n * `topology` for every finding in a run, so this turns N×globs recompiles into\n * one. A reloaded config is a new object → fresh entry, so `version` bumps need\n * no manual invalidation.\n */\nconst compiledCache = new WeakMap<Topology, CompiledArea[]>();\n\nfunction compile(topology: Topology): CompiledArea[] {\n  const cached = compiledCache.get(topology);\n  if (cached) return cached;\n\n  // Order by (priority desc, declaration order). Decorate-sort-undecorate keeps\n  // the sort stable across engines.\n  const ordered = topology.areas\n    .map((area, index) => ({ area, index }))\n    .sort((a, b) => {\n      const pa = a.area.priority ?? 0;\n      const pb = b.area.priority ?? 0;\n      if (pa !== pb) return pb - pa;\n      return a.index - b.index;\n    })\n    .map(({ area }) => ({\n      area,\n      matchers: area.files.flatMap((glob) => {\n        try {\n          return [{ glob, re: globToRegExp(glob) }];\n        } catch {\n          // A malformed glob (e.g. unbalanced `{`) compiles to an invalid\n          // RegExp. Skip it rather than aborting the entire scan — topology\n          // config is user-authored, so one typo must not take down\n          // `fragments check`. Its files simply fall through to \"Unassigned\".\n          if (typeof console !== \"undefined\") {\n            console.warn(\n              `[topology] ignoring invalid glob in area \"${area.id}\": ${JSON.stringify(glob)}`\n            );\n          }\n          return [];\n        }\n      }),\n    }));\n\n  compiledCache.set(topology, ordered);\n  return ordered;\n}\n\n/** Normalize to a POSIX, repo-relative path before matching. */\nfunction normalizePath(repoRelPath: string): string {\n  return repoRelPath.replace(/\\\\/g, \"/\").replace(/^\\.\\//, \"\").replace(/^\\/+/, \"\");\n}\n\n/**\n * Resolve the product area for a repo-relative path. First match by\n * `(priority desc, declaration order)`. Returns `null` when nothing matches —\n * the caller buckets that as the explicit \"Unassigned\" area (never dropped;\n * dropping unmatched evidence would make coverage lie).\n */\nexport function resolveArea(repoRelPath: string, topology: Topology): AreaMatch | null {\n  const path = normalizePath(repoRelPath);\n  for (const { area, matchers } of compile(topology)) {\n    for (const { glob, re } of matchers) {\n      if (re.test(path)) {\n        return {\n          areaId: area.id,\n          areaName: area.name,\n          criticality: area.criticality,\n          owners: area.owners,\n          matchedGlob: glob,\n        };\n      }\n    }\n  }\n  return null;\n}\n"],"mappings":";AAkEA,SAAS,aAAa,MAAsB;AAC1C,MAAI,MAAM;AACV,MAAI,aAAa;AACjB,MAAI,IAAI;AACR,SAAO,IAAI,KAAK,QAAQ;AACtB,UAAM,KAAK,KAAK,CAAC;AAIjB,QACE,OAAO,OACP,KAAK,IAAI,CAAC,MAAM,OAChB,KAAK,IAAI,CAAC,MAAM,QACf,KAAK,IAAI,CAAC,MAAM,UAAa,KAAK,IAAI,CAAC,MAAM,MAC9C;AACA,aAAO;AACP,WAAK;AACL;AAAA,IACF;AAGA,QAAI,OAAO,OAAO,KAAK,IAAI,CAAC,MAAM,KAAK;AACrC,aAAO;AACP,WAAK;AACL;AAAA,IACF;AAEA,YAAQ,IAAI;AAAA,MACV,KAAK;AACH,eAAO;AACP;AAAA,MACF,KAAK;AACH,eAAO;AACP;AAAA,MACF,KAAK;AACH,sBAAc;AACd,eAAO;AACP;AAAA,MACF,KAAK;AACH,YAAI,aAAa,GAAG;AAClB,wBAAc;AACd,iBAAO;AAAA,QACT,OAAO;AACL,iBAAO;AAAA,QACT;AACA;AAAA,MACF,KAAK;AACH,eAAO,aAAa,IAAI,MAAM;AAC9B;AAAA;AAAA,MAEF,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AAAA,MACL,KAAK;AACH,eAAO,KAAK,EAAE;AACd;AAAA,MACF;AACE,eAAO;AAAA,IACX;AACA,SAAK;AAAA,EACP;AACA,SAAO,IAAI,OAAO,IAAI,GAAG,GAAG;AAC9B;AAaA,IAAM,gBAAgB,oBAAI,QAAkC;AAE5D,SAAS,QAAQ,UAAoC;AACnD,QAAM,SAAS,cAAc,IAAI,QAAQ;AACzC,MAAI,OAAQ,QAAO;AAInB,QAAM,UAAU,SAAS,MACtB,IAAI,CAAC,MAAM,WAAW,EAAE,MAAM,MAAM,EAAE,EACtC,KAAK,CAAC,GAAG,MAAM;AACd,UAAM,KAAK,EAAE,KAAK,YAAY;AAC9B,UAAM,KAAK,EAAE,KAAK,YAAY;AAC9B,QAAI,OAAO,GAAI,QAAO,KAAK;AAC3B,WAAO,EAAE,QAAQ,EAAE;AAAA,EACrB,CAAC,EACA,IAAI,CAAC,EAAE,KAAK,OAAO;AAAA,IAClB;AAAA,IACA,UAAU,KAAK,MAAM,QAAQ,CAAC,SAAS;AACrC,UAAI;AACF,eAAO,CAAC,EAAE,MAAM,IAAI,aAAa,IAAI,EAAE,CAAC;AAAA,MAC1C,QAAQ;AAKN,YAAI,OAAO,YAAY,aAAa;AAClC,kBAAQ;AAAA,YACN,6CAA6C,KAAK,EAAE,MAAM,KAAK,UAAU,IAAI,CAAC;AAAA,UAChF;AAAA,QACF;AACA,eAAO,CAAC;AAAA,MACV;AAAA,IACF,CAAC;AAAA,EACH,EAAE;AAEJ,gBAAc,IAAI,UAAU,OAAO;AACnC,SAAO;AACT;AAGA,SAAS,cAAc,aAA6B;AAClD,SAAO,YAAY,QAAQ,OAAO,GAAG,EAAE,QAAQ,SAAS,EAAE,EAAE,QAAQ,QAAQ,EAAE;AAChF;AAQO,SAAS,YAAY,aAAqB,UAAsC;AACrF,QAAM,OAAO,cAAc,WAAW;AACtC,aAAW,EAAE,MAAM,SAAS,KAAK,QAAQ,QAAQ,GAAG;AAClD,eAAW,EAAE,MAAM,GAAG,KAAK,UAAU;AACnC,UAAI,GAAG,KAAK,IAAI,GAAG;AACjB,eAAO;AAAA,UACL,QAAQ,KAAK;AAAA,UACb,UAAU,KAAK;AAAA,UACf,aAAa,KAAK;AAAA,UAClB,QAAQ,KAAK;AAAA,UACb,aAAa;AAAA,QACf;AAAA,MACF;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;","names":[]}