cursedbelt-core 1.0.0

package/LICENSE

@@ -0,0 +1,15 @@
+ISC License
+
+Copyright (c) 2026
+
+Permission to use, copy, modify, and/or distribute this software for any
+purpose with or without fee is hereby granted, provided that the above
+copyright notice and this permission notice appear in all copies.
+
+THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.

package/dist/client/wsWire.d.ts

@@ -0,0 +1,49 @@
+/**
+ * The WS hub's WIRE, with no socket attached.
+ *
+ * ── Why this is a module of its own ─────────────────────────────────────────
+ * `./ws` imports `partysocket/ws` at the top of the file to build the
+ * auto-reconnecting socket. `partysocket` is an OPTIONAL peer of cursedbelt, so
+ * a consumer that brings its own socket — because it already has a reconnect
+ * strategy, or because its entry chunk is measured to the byte and it will not
+ * spend it on a reconnect library — could not touch the URL builder or the
+ * envelope helpers without pulling the library in. They are twenty lines of pure
+ * string handling and they were only ever in that file because they were written
+ * on the same afternoon.
+ *
+ * So: the WIRE lives here and is free of dependencies, and `./ws` re-exports it
+ * beside the socket factory. Nothing moved for the callers that already had it —
+ * `cursedbelt-cc/client` still exports all of it from one place — and the split is
+ * what makes `cursedbelt-core/ws-wire` a thing an app can import.
+ *
+ * 🔴 The contract is that the envelope has ONE definition. An app that hand-rolls
+ * `JSON.stringify({ event, data })` is an app whose frames drift from the hub's
+ * the day the envelope gains a field, and the drift presents as a message the
+ * server silently ignores — `createWsHub` returns from `message` rather than
+ * throwing, on purpose. Take the helpers.
+ *
+ * `apps/family` (cursed-satellites) is the first consumer of this subpath.
+ */
+/** The minimal shape of `window.location` {@link buildChannelSocketUrl} needs. Injectable
+ * so the URL builder is pure + testable (no `window` at module scope). */
+export interface WsLocation {
+    protocol: string;
+    host: string;
+}
+/** The hub's wire envelope, mirroring `cursedbelt-server`'s `WsMessage`. Re-declared here
+ * (not imported) because the server module is Bun-typed and must not leak into the browser
+ * surface. */
+export interface WsMessage<T = unknown> {
+    event: string;
+    data: T;
+}
+/** Build the `ws(s)://host/ws/<channel>[?room=<roomId>]` URL the hub upgrades. `wss` is
+ * chosen iff the page is `https`. Pure — pass `loc` in tests. */
+export declare function buildChannelSocketUrl(channel: string, roomId: string | undefined, loc: WsLocation): string;
+/** Send a `{ event, data }` frame the hub understands. */
+export declare function sendWsMessage(socket: {
+    send(data: string): void;
+}, event: string, data: unknown): void;
+/** Parse an inbound frame into a `{ event, data }` envelope, or `null` if it isn't valid
+ * JSON of that shape (so a stray non-envelope frame can't throw in a message handler). */
+export declare function parseWsMessage<T = unknown>(raw: unknown): WsMessage<T> | null;

package/dist/client/wsWire.js

@@ -0,0 +1,57 @@
+/**
+ * The WS hub's WIRE, with no socket attached.
+ *
+ * ── Why this is a module of its own ─────────────────────────────────────────
+ * `./ws` imports `partysocket/ws` at the top of the file to build the
+ * auto-reconnecting socket. `partysocket` is an OPTIONAL peer of cursedbelt, so
+ * a consumer that brings its own socket — because it already has a reconnect
+ * strategy, or because its entry chunk is measured to the byte and it will not
+ * spend it on a reconnect library — could not touch the URL builder or the
+ * envelope helpers without pulling the library in. They are twenty lines of pure
+ * string handling and they were only ever in that file because they were written
+ * on the same afternoon.
+ *
+ * So: the WIRE lives here and is free of dependencies, and `./ws` re-exports it
+ * beside the socket factory. Nothing moved for the callers that already had it —
+ * `cursedbelt-cc/client` still exports all of it from one place — and the split is
+ * what makes `cursedbelt-core/ws-wire` a thing an app can import.
+ *
+ * 🔴 The contract is that the envelope has ONE definition. An app that hand-rolls
+ * `JSON.stringify({ event, data })` is an app whose frames drift from the hub's
+ * the day the envelope gains a field, and the drift presents as a message the
+ * server silently ignores — `createWsHub` returns from `message` rather than
+ * throwing, on purpose. Take the helpers.
+ *
+ * `apps/family` (cursed-satellites) is the first consumer of this subpath.
+ */
+/** Build the `ws(s)://host/ws/<channel>[?room=<roomId>]` URL the hub upgrades. `wss` is
+ * chosen iff the page is `https`. Pure — pass `loc` in tests. */
+export function buildChannelSocketUrl(channel, roomId, loc) {
+    const scheme = loc.protocol === 'https:' ? 'wss' : 'ws';
+    const base = `${scheme}://${loc.host}/ws/${encodeURIComponent(channel)}`;
+    return roomId ? `${base}?room=${encodeURIComponent(roomId)}` : base;
+}
+/** Send a `{ event, data }` frame the hub understands. */
+export function sendWsMessage(socket, event, data) {
+    socket.send(JSON.stringify({ event, data }));
+}
+/** Parse an inbound frame into a `{ event, data }` envelope, or `null` if it isn't valid
+ * JSON of that shape (so a stray non-envelope frame can't throw in a message handler). */
+export function parseWsMessage(raw) {
+    if (typeof raw !== 'string')
+        return null;
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        return null;
+    }
+    if (parsed &&
+        typeof parsed === 'object' &&
+        'event' in parsed &&
+        typeof parsed.event === 'string') {
+        return parsed;
+    }
+    return null;
+}

package/dist/config/appConfig.d.ts

@@ -0,0 +1,361 @@
+/**
+ * `app-config.json` — the single schema the compiler AND the runtime import
+ * (02-MASTER-ENGINES §2). Nothing else may re-declare this shape: a second copy
+ * is how `privateMedia` without `guard` parsed as valid for a year (J2-1).
+ *
+ * Two laws are encoded here rather than in prose:
+ *
+ * 1. `.strict()` end to end. An unknown key — including inside a per-engine
+ *    `features` block — is a parse ERROR (`unknown-config-key`), never silently
+ *    stripped. A typo'd flag that gets dropped reads as "the feature is off" at
+ *    runtime, which is indistinguishable from a bug in the feature.
+ * 2. `.superRefine()` cross-engine dependencies. `privateMedia` needs `guard`,
+ *    `oralHistory` needs `asset`, `auth.enabled` needs `guard`, and the saas
+ *    profile needs `guard` + `rbac:true`. These are structural: the config
+ *    references something that will not exist at runtime, so it dies at V0 —
+ *    fail-closed on structure (04 §0).
+ *
+ * Zod v4 notes: `z.record` requires an explicit key schema, and `addIssue` takes
+ * the literal `'custom'` code (the `ZodIssueCode` enum is gone).
+ */
+import { z } from 'zod';
+export declare const ENGINE_IDS: readonly ["asset", "knowledge", "dev", "guard", "system"];
+export declare const EngineIdSchema: z.ZodEnum<{
+    asset: "asset";
+    knowledge: "knowledge";
+    dev: "dev";
+    guard: "guard";
+    system: "system";
+}>;
+export type EngineId = (typeof ENGINE_IDS)[number];
+export declare const AssetFeatures: z.ZodObject<{
+    gallery: z.ZodDefault<z.ZodBoolean>;
+    galleryLayouts: z.ZodDefault<z.ZodArray<z.ZodEnum<{
+        masonry: "masonry";
+        rows: "rows";
+        columns: "columns";
+        dense: "dense";
+    }>>>;
+    video: z.ZodDefault<z.ZodBoolean>;
+    hls: z.ZodDefault<z.ZodBoolean>;
+    editor: z.ZodDefault<z.ZodBoolean>;
+    fileBrowser: z.ZodDefault<z.ZodBoolean>;
+    taggedFiles: z.ZodDefault<z.ZodBoolean>;
+    privateMedia: z.ZodDefault<z.ZodBoolean>;
+    vaultSource: z.ZodDefault<z.ZodBoolean>;
+    ocr: z.ZodDefault<z.ZodBoolean>;
+    imageStudio: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strict>;
+export declare const KnowledgeFeatures: z.ZodObject<{
+    notes: z.ZodDefault<z.ZodBoolean>;
+    todos: z.ZodDefault<z.ZodBoolean>;
+    airtableStyleLists: z.ZodDefault<z.ZodBoolean>;
+    kanban: z.ZodDefault<z.ZodBoolean>;
+    contacts: z.ZodDefault<z.ZodBoolean>;
+    oralHistory: z.ZodDefault<z.ZodBoolean>;
+    textCompare: z.ZodDefault<z.ZodBoolean>;
+    ragChat: z.ZodDefault<z.ZodBoolean>;
+    ragDiskIndexing: z.ZodDefault<z.ZodBoolean>;
+    aiOrganizer: z.ZodDefault<z.ZodBoolean>;
+    bookmarks: z.ZodDefault<z.ZodBoolean>;
+    worklog: z.ZodDefault<z.ZodBoolean>;
+    family: z.ZodDefault<z.ZodBoolean>;
+    habits: z.ZodDefault<z.ZodBoolean>;
+    articles: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strict>;
+export declare const DevFeatures: z.ZodObject<{
+    appRegistry: z.ZodDefault<z.ZodBoolean>;
+    configEditor: z.ZodDefault<z.ZodBoolean>;
+    deploy: z.ZodDefault<z.ZodBoolean>;
+    fleet: z.ZodDefault<z.ZodBoolean>;
+    pipelines: z.ZodDefault<z.ZodBoolean>;
+    docs: z.ZodDefault<z.ZodBoolean>;
+    screenshots: z.ZodDefault<z.ZodBoolean>;
+    diskUsage: z.ZodDefault<z.ZodBoolean>;
+    dbAdmin: z.ZodDefault<z.ZodBoolean>;
+    orchestration: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strict>;
+/**
+ * Who may create an account (D33 — the commercial-launch gate). Ordered from
+ * most open to most closed; `effectiveSignupMode` picks the STRICTEST configured
+ * value, so two guard instances can never disagree in the open direction.
+ *
+ *   - `open`   — anyone signs up (saas: minting their own tenant as OWNER).
+ *   - `invite` — a valid invitation token is required; token-less signup is a
+ *     403. This is the "coming soon" launch posture: the operator invites
+ *     trusted testers while the public sees a closed door.
+ *   - `closed` — no signups at all, invitation or not.
+ */
+export declare const SIGNUP_MODES: readonly ["open", "invite", "closed"];
+export type SignupMode = (typeof SIGNUP_MODES)[number];
+export declare const GuardFeatures: z.ZodObject<{
+    privateMode: z.ZodDefault<z.ZodBoolean>;
+    secretsPanel: z.ZodDefault<z.ZodBoolean>;
+    accounts: z.ZodDefault<z.ZodBoolean>;
+    rbac: z.ZodDefault<z.ZodBoolean>;
+    sessionTtlMinutes: z.ZodDefault<z.ZodNumber>;
+    signupMode: z.ZodDefault<z.ZodEnum<{
+        open: "open";
+        invite: "invite";
+        closed: "closed";
+    }>>;
+    siteCopy: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strict>;
+export declare const SystemFeatures: z.ZodObject<{
+    dashboard: z.ZodDefault<z.ZodBoolean>;
+    calendar: z.ZodDefault<z.ZodBoolean>;
+    notifications: z.ZodDefault<z.ZodBoolean>;
+    stopwatch: z.ZodDefault<z.ZodBoolean>;
+    timeOff: z.ZodDefault<z.ZodBoolean>;
+    formatLab: z.ZodDefault<z.ZodBoolean>;
+    lineFilter: z.ZodDefault<z.ZodBoolean>;
+    httpClient: z.ZodDefault<z.ZodBoolean>;
+    budgets: z.ZodDefault<z.ZodBoolean>;
+    subscriptions: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strict>;
+export declare const FeaturesByEngine: {
+    readonly asset: z.ZodObject<{
+        gallery: z.ZodDefault<z.ZodBoolean>;
+        galleryLayouts: z.ZodDefault<z.ZodArray<z.ZodEnum<{
+            masonry: "masonry";
+            rows: "rows";
+            columns: "columns";
+            dense: "dense";
+        }>>>;
+        video: z.ZodDefault<z.ZodBoolean>;
+        hls: z.ZodDefault<z.ZodBoolean>;
+        editor: z.ZodDefault<z.ZodBoolean>;
+        fileBrowser: z.ZodDefault<z.ZodBoolean>;
+        taggedFiles: z.ZodDefault<z.ZodBoolean>;
+        privateMedia: z.ZodDefault<z.ZodBoolean>;
+        vaultSource: z.ZodDefault<z.ZodBoolean>;
+        ocr: z.ZodDefault<z.ZodBoolean>;
+        imageStudio: z.ZodDefault<z.ZodBoolean>;
+    }, z.core.$strict>;
+    readonly knowledge: z.ZodObject<{
+        notes: z.ZodDefault<z.ZodBoolean>;
+        todos: z.ZodDefault<z.ZodBoolean>;
+        airtableStyleLists: z.ZodDefault<z.ZodBoolean>;
+        kanban: z.ZodDefault<z.ZodBoolean>;
+        contacts: z.ZodDefault<z.ZodBoolean>;
+        oralHistory: z.ZodDefault<z.ZodBoolean>;
+        textCompare: z.ZodDefault<z.ZodBoolean>;
+        ragChat: z.ZodDefault<z.ZodBoolean>;
+        ragDiskIndexing: z.ZodDefault<z.ZodBoolean>;
+        aiOrganizer: z.ZodDefault<z.ZodBoolean>;
+        bookmarks: z.ZodDefault<z.ZodBoolean>;
+        worklog: z.ZodDefault<z.ZodBoolean>;
+        family: z.ZodDefault<z.ZodBoolean>;
+        habits: z.ZodDefault<z.ZodBoolean>;
+        articles: z.ZodDefault<z.ZodBoolean>;
+    }, z.core.$strict>;
+    readonly dev: z.ZodObject<{
+        appRegistry: z.ZodDefault<z.ZodBoolean>;
+        configEditor: z.ZodDefault<z.ZodBoolean>;
+        deploy: z.ZodDefault<z.ZodBoolean>;
+        fleet: z.ZodDefault<z.ZodBoolean>;
+        pipelines: z.ZodDefault<z.ZodBoolean>;
+        docs: z.ZodDefault<z.ZodBoolean>;
+        screenshots: z.ZodDefault<z.ZodBoolean>;
+        diskUsage: z.ZodDefault<z.ZodBoolean>;
+        dbAdmin: z.ZodDefault<z.ZodBoolean>;
+        orchestration: z.ZodDefault<z.ZodBoolean>;
+    }, z.core.$strict>;
+    readonly guard: z.ZodObject<{
+        privateMode: z.ZodDefault<z.ZodBoolean>;
+        secretsPanel: z.ZodDefault<z.ZodBoolean>;
+        accounts: z.ZodDefault<z.ZodBoolean>;
+        rbac: z.ZodDefault<z.ZodBoolean>;
+        sessionTtlMinutes: z.ZodDefault<z.ZodNumber>;
+        signupMode: z.ZodDefault<z.ZodEnum<{
+            open: "open";
+            invite: "invite";
+            closed: "closed";
+        }>>;
+        siteCopy: z.ZodDefault<z.ZodBoolean>;
+    }, z.core.$strict>;
+    readonly system: z.ZodObject<{
+        dashboard: z.ZodDefault<z.ZodBoolean>;
+        calendar: z.ZodDefault<z.ZodBoolean>;
+        notifications: z.ZodDefault<z.ZodBoolean>;
+        stopwatch: z.ZodDefault<z.ZodBoolean>;
+        timeOff: z.ZodDefault<z.ZodBoolean>;
+        formatLab: z.ZodDefault<z.ZodBoolean>;
+        lineFilter: z.ZodDefault<z.ZodBoolean>;
+        httpClient: z.ZodDefault<z.ZodBoolean>;
+        budgets: z.ZodDefault<z.ZodBoolean>;
+        subscriptions: z.ZodDefault<z.ZodBoolean>;
+    }, z.core.$strict>;
+};
+export type FeaturesFor<E extends EngineId> = z.infer<(typeof FeaturesByEngine)[E]>;
+/**
+ * A fully-resolved feature block: every key of the engine's schema present, no
+ * `undefined`. Numeric feature values (`sessionTtlMinutes`) and string values
+ * (`signupMode`) are part of the record, so consumers narrow with `=== true`
+ * rather than truthiness.
+ */
+export type EffectiveFeatures = Readonly<Record<string, boolean | number | string | readonly string[]>>;
+/**
+ * The signup gate a whole app enforces (D33). The STRICTEST configured value
+ * wins across guard instances — with two instances, `open` beside `invite`
+ * must mean invite-only, or adding a second guard instance would silently
+ * reopen a closed door. Apps with no guard instance have no signup surface at
+ * all, so the returned default is never enforced anywhere.
+ */
+export declare const effectiveSignupMode: (instances: ReadonlyArray<{
+    readonly engine: string;
+    readonly effective: EffectiveFeatures;
+}>) => SignupMode;
+/**
+ * Client SPA path (03 §3): kebab-case literal segments, camelCase `:params`.
+ * `/chat/:conversationId` is the canonical example, so param names must admit
+ * capitals while literal segments stay lowercase — a `/Chat` vs `/chat` pair is
+ * two routes on a case-sensitive router and one route on a case-insensitive one.
+ */
+export declare const ROUTE_PATH_RE: RegExp;
+export declare const RouteDeclSchema: z.ZodObject<{
+    path: z.ZodString;
+    view: z.ZodString;
+    aliases: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    deepLinkEntity: z.ZodOptional<z.ZodString>;
+}, z.core.$strict>;
+export type RouteDecl = z.infer<typeof RouteDeclSchema>;
+export declare const FillDeclSchema: z.ZodObject<{
+    slot: z.ZodString;
+    component: z.ZodString;
+    order: z.ZodDefault<z.ZodNumber>;
+    requiredFeatures: z.ZodDefault<z.ZodArray<z.ZodString>>;
+}, z.core.$strict>;
+export type FillDecl = z.infer<typeof FillDeclSchema>;
+export declare const InstanceSchema: z.ZodObject<{
+    engine: z.ZodEnum<{
+        asset: "asset";
+        knowledge: "knowledge";
+        dev: "dev";
+        guard: "guard";
+        system: "system";
+    }>;
+    id: z.ZodString;
+    title: z.ZodOptional<z.ZodString>;
+    features: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    options: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    routes: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        path: z.ZodString;
+        view: z.ZodString;
+        aliases: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        deepLinkEntity: z.ZodOptional<z.ZodString>;
+    }, z.core.$strict>>>;
+    fills: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        slot: z.ZodString;
+        component: z.ZodString;
+        order: z.ZodDefault<z.ZodNumber>;
+        requiredFeatures: z.ZodDefault<z.ZodArray<z.ZodString>>;
+    }, z.core.$strict>>>;
+    cssIsolation: z.ZodDefault<z.ZodEnum<{
+        none: "none";
+        scope: "scope";
+        shadow: "shadow";
+    }>>;
+}, z.core.$strict>;
+export type ConfigInstance = z.infer<typeof InstanceSchema>;
+/** '<instanceId>:<portId>' or 'data:<sourceId>'. */
+export declare const ENDPOINT_RE: RegExp;
+export declare const ConnectionSchema: z.ZodObject<{
+    from: z.ZodString;
+    to: z.ZodString;
+    cyclic: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strict>;
+export type Connection = z.infer<typeof ConnectionSchema>;
+export declare const AppConfigSchema: z.ZodObject<{
+    configVersion: z.ZodLiteral<1>;
+    app: z.ZodObject<{
+        id: z.ZodString;
+        title: z.ZodString;
+        port: z.ZodOptional<z.ZodNumber>;
+        kind: z.ZodDefault<z.ZodEnum<{
+            app: "app";
+            test: "test";
+            demo: "demo";
+        }>>;
+    }, z.core.$strict>;
+    profile: z.ZodDefault<z.ZodEnum<{
+        local: "local";
+        saas: "saas";
+    }>>;
+    deployTarget: z.ZodDefault<z.ZodObject<{
+        capabilities: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodBoolean>>;
+    }, z.core.$strict>>;
+    engines: z.ZodArray<z.ZodEnum<{
+        asset: "asset";
+        knowledge: "knowledge";
+        dev: "dev";
+        guard: "guard";
+        system: "system";
+    }>>;
+    instances: z.ZodArray<z.ZodObject<{
+        engine: z.ZodEnum<{
+            asset: "asset";
+            knowledge: "knowledge";
+            dev: "dev";
+            guard: "guard";
+            system: "system";
+        }>;
+        id: z.ZodString;
+        title: z.ZodOptional<z.ZodString>;
+        features: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        options: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        routes: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            path: z.ZodString;
+            view: z.ZodString;
+            aliases: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            deepLinkEntity: z.ZodOptional<z.ZodString>;
+        }, z.core.$strict>>>;
+        fills: z.ZodDefault<z.ZodArray<z.ZodObject<{
+            slot: z.ZodString;
+            component: z.ZodString;
+            order: z.ZodDefault<z.ZodNumber>;
+            requiredFeatures: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        }, z.core.$strict>>>;
+        cssIsolation: z.ZodDefault<z.ZodEnum<{
+            none: "none";
+            scope: "scope";
+            shadow: "shadow";
+        }>>;
+    }, z.core.$strict>>;
+    connections: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        from: z.ZodString;
+        to: z.ZodString;
+        cyclic: z.ZodDefault<z.ZodBoolean>;
+    }, z.core.$strict>>>;
+    auth: z.ZodDefault<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        authUI: z.ZodDefault<z.ZodObject<{
+            showLogout: z.ZodDefault<z.ZodBoolean>;
+            placement: z.ZodDefault<z.ZodEnum<{
+                "header-right": "header-right";
+                "header-left": "header-left";
+                "sidebar-footer": "sidebar-footer";
+            }>>;
+            icon: z.ZodDefault<z.ZodString>;
+            variant: z.ZodDefault<z.ZodEnum<{
+                default: "default";
+                ghost: "ghost";
+                outline: "outline";
+            }>>;
+        }, z.core.$strict>>;
+    }, z.core.$strict>>;
+    theme: z.ZodDefault<z.ZodObject<{
+        preset: z.ZodDefault<z.ZodString>;
+        overrides: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodString>>;
+    }, z.core.$strict>>;
+    ignoreExistingData: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strict>;
+export type AppConfig = z.infer<typeof AppConfigSchema>;
+/**
+ * Resolve one instance's declared features through the FULL (non-partial) engine
+ * schema — the "full-resolution preview" of V0.3. Defaults land here, so a
+ * missing required option surfaces at design time instead of at first boot.
+ */
+export declare function resolveInstanceFeatures(engine: EngineId, declared: Record<string, unknown>): EffectiveFeatures;
+/** The declared feature key set of an engine — used by V1 `unknown-required-feature`. */
+export declare function featureKeysOf(engine: EngineId): readonly string[];