@wrongstack/primitives 0.313.0 → 0.316.1

package/dist/index.d.ts

@@ -6,5 +6,6 @@
  * belong here.
  */
 export { type CompileFail, type CompileResult, type CompileUserRegexResult, capSubject, compileUserRegex, MAX_SUBJECT_LEN, } from './regex-guard.js';
+export { isSystemSessionId, requireSessionId, SESSION_ID_REQUIRED, SessionIdRequiredError, SYSTEM_SESSION_PREFIX, systemSessionId, } from './session-id.js';
 export { nowIso } from './time.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.js

@@ -124,14 +124,43 @@ function capSubject(line) {
   return line.length > MAX_SUBJECT_LEN ? line.slice(0, MAX_SUBJECT_LEN) : line;
 }
 
+// src/session-id.ts
+var SESSION_ID_REQUIRED = "SESSION_ID_REQUIRED";
+var SessionIdRequiredError = class extends Error {
+  code = SESSION_ID_REQUIRED;
+  constructor(operation) {
+    super(`Session id is required for ${operation}`);
+    this.name = "SessionIdRequiredError";
+  }
+};
+function requireSessionId(sessionId, operation) {
+  if (typeof sessionId !== "string" || sessionId.trim().length === 0) {
+    throw new SessionIdRequiredError(operation);
+  }
+  return sessionId;
+}
+var SYSTEM_SESSION_PREFIX = "system:";
+function systemSessionId(actor) {
+  return `${SYSTEM_SESSION_PREFIX}${actor}`;
+}
+function isSystemSessionId(sessionId) {
+  return sessionId.startsWith(SYSTEM_SESSION_PREFIX);
+}
+
 // src/time.ts
 function nowIso() {
   return (/* @__PURE__ */ new Date()).toISOString();
 }
 export {
   MAX_SUBJECT_LEN,
+  SESSION_ID_REQUIRED,
+  SYSTEM_SESSION_PREFIX,
+  SessionIdRequiredError,
   capSubject,
   compileUserRegex,
-  nowIso
+  isSystemSessionId,
+  nowIso,
+  requireSessionId,
+  systemSessionId
 };
 //# sourceMappingURL=index.js.map

package/dist/session-id.d.ts

@@ -0,0 +1,29 @@
+/** Stable machine-readable code for session ownership invariant violations. */
+export declare const SESSION_ID_REQUIRED: 'SESSION_ID_REQUIRED';
+/** Thrown when session-scoped work is attempted without a usable session id. */
+export declare class SessionIdRequiredError extends Error {
+    readonly code: "SESSION_ID_REQUIRED";
+    constructor(operation: string);
+}
+/**
+ * Enforce that session-scoped work has an explicit, non-blank owner.
+ * Returns the original id so slash-containing persisted ids remain unchanged.
+ */
+export declare function requireSessionId(sessionId: string | null | undefined, operation: string): string;
+/** Prefix marking a session id that belongs to a daemon rather than a user tab. */
+export declare const SYSTEM_SESSION_PREFIX: 'system:';
+/**
+ * Owning "session" for work a project-level daemon does on its own initiative
+ * — the Kanban supervisor's stale-lease recovery, a run mirror's projection
+ * refresh. No user tab asked for these, but the events they write still have
+ * to name an owner, and attributing them to whichever tab happened to be
+ * focused would be a lie that "stop this session's work" would then act on.
+ *
+ * The `system:` prefix keeps them filterable: a UI showing one tab's activity
+ * excludes them, and an operator auditing the ledger can see which daemon
+ * acted.
+ */
+export declare function systemSessionId(actor: string): string;
+/** Whether this id names a daemon rather than a user session. */
+export declare function isSystemSessionId(sessionId: string): boolean;
+//# sourceMappingURL=session-id.d.ts.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@wrongstack/primitives",
-  "version": "0.313.0",
+  "version": "0.316.1",
   "license": "MIT",
   "description": "Dependency-leaf primitives shared across WrongStack packages (regex guard, slugs, timestamps).",
   "repository": {