cursedbelt 1.0.0 → 2.3.0

package/dist/upload.js

@@ -1,159 +0,0 @@
-// cursedbelt/upload — framework-agnostic upload primitive
-//
-// Sits above the transport (fileUploadClient) and below the UI layer. Provides:
-//   • Client-side validation (MIME type + byte size)
-//   • Progress events during upload
-//   • Drag-and-drop drop-zone wiring (pure DOM, no React)
-//   • HEIC/HEIF mobile-photo detection (conversion is server-side)
-//   • Typed UploadResult contract consumed by MediaUploadControl and app plugins
-//
-// Consumers that want the raw transport client import createFileUploadClient from
-// 'cursedbelt/react/media'; this module layers validation + progress on top.
-// ── MIME / HEIC ──────────────────────────────────────────────────────────────
-/** True for iPhone HEIC/HEIF images — the server converts these to JPEG. */
-export function isHeicFile(file) {
-    const mime = file.type.toLowerCase();
-    if (mime === 'image/heic' || mime === 'image/heif')
-        return true;
-    const name = file.name.toLowerCase();
-    return name.endsWith('.heic') || name.endsWith('.heif');
-}
-function mimeMatches(mime, pattern) {
-    if (pattern === mime)
-        return true;
-    if (pattern.endsWith('/*')) {
-        return mime.startsWith(pattern.slice(0, -1));
-    }
-    return false;
-}
-export function validateFile(file, constraints) {
-    if (constraints.accept?.length) {
-        const mime = file.type || 'application/octet-stream';
-        const ok = constraints.accept.some((p) => mimeMatches(mime, p));
-        if (!ok)
-            return {
-                ok: false,
-                error: { kind: 'type', file: file.name, mime, accept: constraints.accept },
-            };
-    }
-    if (constraints.maxBytes !== undefined && file.size > constraints.maxBytes) {
-        return {
-            ok: false,
-            error: { kind: 'size', file: file.name, bytes: file.size, maxBytes: constraints.maxBytes },
-        };
-    }
-    return { ok: true };
-}
-export function formatValidationError(error) {
-    if (error.kind === 'type') {
-        return `"${error.file}" is not an accepted file type (${error.mime}). Accepted: ${error.accept.join(', ')}.`;
-    }
-    return `"${error.file}" is too large (${(error.bytes / 1024 / 1024).toFixed(1)} MB). Max: ${(error.maxBytes / 1024 / 1024).toFixed(1)} MB.`;
-}
-export async function uploadFile(file, opts) {
-    const { transport, constraints = {}, tags, onProgress } = opts;
-    const emit = (p) => {
-        onProgress?.(p);
-    };
-    emit({ phase: 'validating' });
-    const validation = validateFile(file, constraints);
-    if (!validation.ok) {
-        const msg = formatValidationError(validation.error);
-        emit({ phase: 'error', message: msg });
-        return { ok: false, error: msg, validationError: validation.error };
-    }
-    emit({ phase: 'uploading', loaded: 0, total: file.size });
-    const heic = isHeicFile(file);
-    const res = await transport.uploadAuto(file, { tags }).catch((e) => ({
-        ok: false,
-        error: e instanceof Error ? e.message : 'upload failed',
-    }));
-    if (!res.ok) {
-        emit({ phase: 'error', message: res.error });
-        return { ok: false, error: res.error };
-    }
-    const f = res.file;
-    if (!f) {
-        emit({ phase: 'error', message: 'upload succeeded but no file record returned' });
-        return { ok: false, error: 'upload succeeded but no file record returned' };
-    }
-    emit({ phase: 'done' });
-    return {
-        ok: true,
-        file: {
-            id: f.id,
-            name: f.name,
-            mime: f.mime,
-            size: f.size,
-            fileType: f.fileType,
-            tags: f.tags,
-            processingStatus: f.processingStatus,
-            heicConverted: heic,
-        },
-    };
-}
-/** Upload multiple files sequentially, stopping on the first error. */
-export async function uploadFiles(files, opts) {
-    const results = [];
-    for (const file of files) {
-        const result = await uploadFile(file, opts);
-        results.push(result);
-        if (!result.ok)
-            return { results, firstError: result.error };
-    }
-    return { results, firstError: null };
-}
-/**
- * Returns plain event handler objects that wire a DOM element as a drop zone.
- * Attach them with addEventListener or pass to a React component's onDrag* props.
- *
- * @example
- * const { onDragOver, onDragLeave, onDrop } = createDropZoneHandlers({ onFiles });
- * el.addEventListener('dragover', onDragOver);
- * el.addEventListener('dragleave', onDragLeave);
- * el.addEventListener('drop', onDrop);
- */
-export function createDropZoneHandlers(opts) {
-    const { onFiles, onEnter, onLeave, accept } = opts;
-    const onDragOver = (e) => {
-        e.preventDefault();
-        onEnter?.();
-    };
-    const onDragLeave = (e) => {
-        e.preventDefault();
-        onLeave?.();
-    };
-    const onDrop = (e) => {
-        e.preventDefault();
-        onLeave?.();
-        const items = e.dataTransfer?.files;
-        if (!items?.length)
-            return;
-        let files = Array.from(items);
-        if (accept?.length) {
-            files = files.filter((f) => accept.some((p) => mimeMatches(f.type || '', p)));
-        }
-        if (files.length)
-            onFiles(files);
-    };
-    return { onDragOver, onDragLeave, onDrop };
-}
-/**
- * Mount a drop zone on `el`, returning an unmount function.
- *
- * @example
- * const unmount = mountDropZone(containerEl, { onFiles, accept: ['image/*'] });
- * // later: unmount();
- */
-export function mountDropZone(el, opts) {
-    const { onDragOver, onDragLeave, onDrop } = createDropZoneHandlers(opts);
-    el.addEventListener('dragover', onDragOver);
-    el.addEventListener('dragleave', onDragLeave);
-    el.addEventListener('drop', onDrop);
-    return () => {
-        el.removeEventListener('dragover', onDragOver);
-        el.removeEventListener('dragleave', onDragLeave);
-        el.removeEventListener('drop', onDrop);
-    };
-}
-//# sourceMappingURL=upload.js.map

package/dist/upload.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"upload.js","sourceRoot":"","sources":["../src/upload.ts"],"names":[],"mappings":"AAAA,0DAA0D;AAC1D,EAAE;AACF,gFAAgF;AAChF,qDAAqD;AACrD,oCAAoC;AACpC,0DAA0D;AAC1D,mEAAmE;AACnE,iFAAiF;AACjF,EAAE;AACF,kFAAkF;AAClF,6EAA6E;AAE7E,gFAAgF;AAEhF,4EAA4E;AAC5E,MAAM,UAAU,UAAU,CAAC,IAAU;IACnC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;IACrC,IAAI,IAAI,KAAK,YAAY,IAAI,IAAI,KAAK,YAAY;QAAE,OAAO,IAAI,CAAC;IAChE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;IACrC,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AAC1D,CAAC;AAiBD,SAAS,WAAW,CAAC,IAAY,EAAE,OAAe;IAChD,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,OAAO,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,IAAU,EAAE,WAA8B;IACrE,IAAI,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;QAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,0BAA0B,CAAC;QACrD,MAAM,EAAE,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAChE,IAAI,CAAC,EAAE;YACL,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE;aAC3E,CAAC;IACN,CAAC;IACD,IAAI,WAAW,CAAC,QAAQ,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC,QAAQ,EAAE,CAAC;QAC3E,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,WAAW,CAAC,QAAQ,EAAE;SAC3F,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,KAAsB;IAC1D,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC1B,OAAO,IAAI,KAAK,CAAC,IAAI,mCAAmC,KAAK,CAAC,IAAI,gBAAgB,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;IAC/G,CAAC;IACD,OAAO,IAAI,KAAK,CAAC,IAAI,mBAAmB,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,KAAK,CAAC,QAAQ,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC;AAC9I,CAAC;AAiFD,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,IAAU,EAAE,IAA2B;IACtE,MAAM,EAAE,SAAS,EAAE,WAAW,GAAG,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;IAC/D,MAAM,IAAI,GAAG,CAAC,CAAiB,EAAQ,EAAE;QACvC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IAEF,IAAI,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;IAC9B,MAAM,UAAU,GAAG,YAAY,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IACnD,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;QACnB,MAAM,GAAG,GAAG,qBAAqB,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;QACpD,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;QACvC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,eAAe,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC;IACtE,CAAC;IAED,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAE9B,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,UAAU,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC;QAC5E,EAAE,EAAE,KAAc;QAClB,KAAK,EAAE,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe;KACxD,CAAC,CAAC,CAAC;IAEJ,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;QACZ,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;QAC7C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;IACzC,CAAC;IAED,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC;IACnB,IAAI,CAAC,CAAC,EAAE,CAAC;QACP,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,8CAA8C,EAAE,CAAC,CAAC;QAClF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,8CAA8C,EAAE,CAAC;IAC9E,CAAC;IAED,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IACxB,OAAO;QACL,EAAE,EAAE,IAAI;QACR,IAAI,EAAE;YACJ,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,IAAI,EAAE,CAAC,CAAC,IAAI;YACZ,gBAAgB,EAAE,CAAC,CAAC,gBAAgB;YACpC,aAAa,EAAE,IAAI;SACpB;KACF,CAAC;AACJ,CAAC;AAED,uEAAuE;AACvE,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,KAAa,EACb,IAA2B;IAE3B,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAC5C,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACrB,IAAI,CAAC,MAAM,CAAC,EAAE;YAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;IAC/D,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;AACvC,CAAC;AAqBD;;;;;;;;;GASG;AACH,MAAM,UAAU,sBAAsB,CAAC,IAAqB;IAC1D,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAEnD,MAAM,UAAU,GAAG,CAAC,CAAY,EAAQ,EAAE;QACxC,CAAC,CAAC,cAAc,EAAE,CAAC;QACnB,OAAO,EAAE,EAAE,CAAC;IACd,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,CAAC,CAAY,EAAQ,EAAE;QACzC,CAAC,CAAC,cAAc,EAAE,CAAC;QACnB,OAAO,EAAE,EAAE,CAAC;IACd,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,CAAC,CAAY,EAAQ,EAAE;QACpC,CAAC,CAAC,cAAc,EAAE,CAAC;QACnB,OAAO,EAAE,EAAE,CAAC;QACZ,MAAM,KAAK,GAAG,CAAC,CAAC,YAAY,EAAE,KAAK,CAAC;QACpC,IAAI,CAAC,KAAK,EAAE,MAAM;YAAE,OAAO;QAC3B,IAAI,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,IAAI,MAAM,EAAE,MAAM,EAAE,CAAC;YACnB,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAChF,CAAC;QACD,IAAI,KAAK,CAAC,MAAM;YAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC,CAAC;IAEF,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC;AAC7C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,EAAe,EAAE,IAAqB;IAClE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,EAAE,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;IACzE,EAAE,CAAC,gBAAgB,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;IAC5C,EAAE,CAAC,gBAAgB,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;IAC9C,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,OAAO,GAAG,EAAE;QACV,EAAE,CAAC,mBAAmB,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;QAC/C,EAAE,CAAC,mBAAmB,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC;QACjD,EAAE,CAAC,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,CAAC,CAAC;AACJ,CAAC"}

package/dist/verify/runtime/index.d.ts

@@ -1,16 +0,0 @@
-/**
- * `cursedbelt/verify/runtime` — V7: verify-mode boot, the probe suite, and the
- * PID jail that guarantees a run leaves nothing behind (04 §2 V7, §5.7).
- *
- * Server-side only (Bun + Hono); the static V0–V6 compiler in `cursedbelt/verify`
- * has no runtime dependencies and runs anywhere.
- */
-export { type CliOptions, type CliResult, type CorpusFailure, parseArgs, runCli, runCorpus, writeArtifacts, } from './cli';
-export { type HostProbeOptions, probeHostCapabilities } from './hostCapabilities';
-export { createFakeSpawn, createVerifyContext, createVerifyGuard, createVerifyExec, createVerifyJobBroker, createVerifyCognitiveDriver, createVerifyStorage, createVerifyTelemetry, VERIFY_COMMANDS, type VerifyContext, type VerifyContextOptions, type VerifyGuard, } from './verifyContext';
-export { createVerifyAssetService, createVerifyDevService, createVerifyGuardService, createVerifyKnowledgeService, createVerifySystemService, PRIVATE_ITEM_IDS, PUBLIC_ITEM_IDS, } from './verifyServices';
-export { CORE_PROBES, crossTabLockProbe, deepLinkTenantProbe, eventLoopGuardProbe, execJailProbe, injectionGuardProbe, instanceIsolationProbe, integrityTamperProbe, lastGoodProbe, layoutProbe, lifecycleProbe, type Probe, type ProbeContext, privateModeProbe, rbacProbe, reconnectProbe, routeSurfaceProbe, securityHeaderProbe, wireSmokeProbe, } from './probes';
-export { isPortBound, ProcessJail, runJailed, type SweepReport, type TrackedChild } from './processJail';
-export { type ProbeRunResult, type RunProbesOptions, runVerifyProbes, VERIFY_TIMEOUT_MS } from './runner';
-export { createVerifyServer, type Role, type VerifyClaims, type VerifyServer, type VerifyServerOptions } from './verifyServer';
-//# sourceMappingURL=index.d.ts.map

package/dist/verify/runtime/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/verify/runtime/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EACL,KAAK,UAAU,EACf,KAAK,SAAS,EACd,KAAK,aAAa,EAClB,SAAS,EACT,MAAM,EACN,SAAS,EACT,cAAc,GACf,MAAM,OAAO,CAAC;AACf,OAAO,EAAE,KAAK,gBAAgB,EAAE,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAClF,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,iBAAiB,EACjB,gBAAgB,EAChB,qBAAqB,EACrB,2BAA2B,EAC3B,mBAAmB,EACnB,qBAAqB,EACrB,eAAe,EACf,KAAK,aAAa,EAClB,KAAK,oBAAoB,EACzB,KAAK,WAAW,GACjB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,wBAAwB,EACxB,sBAAsB,EACtB,wBAAwB,EACxB,4BAA4B,EAC5B,yBAAyB,EACzB,gBAAgB,EAChB,eAAe,GAChB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,WAAW,EACX,iBAAiB,EACjB,mBAAmB,EACnB,mBAAmB,EACnB,aAAa,EACb,mBAAmB,EACnB,sBAAsB,EACtB,oBAAoB,EACpB,aAAa,EACb,WAAW,EACX,cAAc,EACd,KAAK,KAAK,EACV,KAAK,YAAY,EACjB,gBAAgB,EAChB,SAAS,EACT,cAAc,EACd,iBAAiB,EACjB,mBAAmB,EACnB,cAAc,GACf,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,WAAW,EAAE,KAAK,YAAY,EAAE,MAAM,eAAe,CAAC;AACzG,OAAO,EAAE,KAAK,cAAc,EAAE,KAAK,gBAAgB,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAC1G,OAAO,EAAE,kBAAkB,EAAE,KAAK,IAAI,EAAE,KAAK,YAAY,EAAE,KAAK,YAAY,EAAE,KAAK,mBAAmB,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/verify/runtime/index.js

@@ -1,16 +0,0 @@
-/**
- * `cursedbelt/verify/runtime` — V7: verify-mode boot, the probe suite, and the
- * PID jail that guarantees a run leaves nothing behind (04 §2 V7, §5.7).
- *
- * Server-side only (Bun + Hono); the static V0–V6 compiler in `cursedbelt/verify`
- * has no runtime dependencies and runs anywhere.
- */
-export { parseArgs, runCli, runCorpus, writeArtifacts, } from './cli';
-export { probeHostCapabilities } from './hostCapabilities';
-export { createFakeSpawn, createVerifyContext, createVerifyGuard, createVerifyExec, createVerifyJobBroker, createVerifyCognitiveDriver, createVerifyStorage, createVerifyTelemetry, VERIFY_COMMANDS, } from './verifyContext';
-export { createVerifyAssetService, createVerifyDevService, createVerifyGuardService, createVerifyKnowledgeService, createVerifySystemService, PRIVATE_ITEM_IDS, PUBLIC_ITEM_IDS, } from './verifyServices';
-export { CORE_PROBES, crossTabLockProbe, deepLinkTenantProbe, eventLoopGuardProbe, execJailProbe, injectionGuardProbe, instanceIsolationProbe, integrityTamperProbe, lastGoodProbe, layoutProbe, lifecycleProbe, privateModeProbe, rbacProbe, reconnectProbe, routeSurfaceProbe, securityHeaderProbe, wireSmokeProbe, } from './probes';
-export { isPortBound, ProcessJail, runJailed } from './processJail';
-export { runVerifyProbes, VERIFY_TIMEOUT_MS } from './runner';
-export { createVerifyServer } from './verifyServer';
-//# sourceMappingURL=index.js.map

package/dist/verify/runtime/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/verify/runtime/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAIL,SAAS,EACT,MAAM,EACN,SAAS,EACT,cAAc,GACf,MAAM,OAAO,CAAC;AACf,OAAO,EAAyB,qBAAqB,EAAE,MAAM,oBAAoB,CAAC;AAClF,OAAO,EACL,eAAe,EACf,mBAAmB,EACnB,iBAAiB,EACjB,gBAAgB,EAChB,qBAAqB,EACrB,2BAA2B,EAC3B,mBAAmB,EACnB,qBAAqB,EACrB,eAAe,GAIhB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACL,wBAAwB,EACxB,sBAAsB,EACtB,wBAAwB,EACxB,4BAA4B,EAC5B,yBAAyB,EACzB,gBAAgB,EAChB,eAAe,GAChB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,WAAW,EACX,iBAAiB,EACjB,mBAAmB,EACnB,mBAAmB,EACnB,aAAa,EACb,mBAAmB,EACnB,sBAAsB,EACtB,oBAAoB,EACpB,aAAa,EACb,WAAW,EACX,cAAc,EAGd,gBAAgB,EAChB,SAAS,EACT,cAAc,EACd,iBAAiB,EACjB,mBAAmB,EACnB,cAAc,GACf,MAAM,UAAU,CAAC;AAClB,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,SAAS,EAAuC,MAAM,eAAe,CAAC;AACzG,OAAO,EAA8C,eAAe,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAC1G,OAAO,EAAE,kBAAkB,EAA6E,MAAM,gBAAgB,CAAC"}

package/scripts/demoCheck.ts

@@ -1,42 +0,0 @@
-/**
- * Typechecks the kitchen-sink demo (`demo/`) as part of cursedbelt's own gate — the
- * demo is the component proof surface an e2e suite drives, so its tsc debt must not
- * be able to silently regrow (cbux-71).
- *
- * `demo/` is intentionally NOT a root workspace member (see demo/package.json's
- * `cursedbelt` dependency: a relative `file:..` — worktree-safe, resolves to
- * WHICHEVER checkout this script runs from, never the primary). That means it has
- * its own `node_modules`/`bun.lock`, so a completely fresh clone/worktree needs one
- * `bun install` here before `tsc` can resolve anything. Only pay for that install
- * when it's actually missing: a demo install pulls cursedbelt's full dependency
- * tree (400+ packages, individually file-symlinked — see the `file:` link note in
- * demo/package.json) and reliably takes 60–120s even when nothing changed, so
- * re-running it on every gate invocation would make `bun run done` unusable.
- * `bun run setup` (repo root) also installs this proactively so a fresh worktree's
- * FIRST gate run isn't the one paying that cost.
- */
-import { existsSync } from "node:fs";
-import { resolve } from "node:path";
-
-const demoDir = resolve(import.meta.dir, "..", "demo");
-
-async function run(cmd: string[], cwd: string): Promise<number> {
-	const proc = Bun.spawn(cmd, { cwd, stdout: "inherit", stderr: "inherit" });
-	return await proc.exited;
-}
-
-if (!existsSync(resolve(demoDir, "node_modules", "cursedbelt"))) {
-	console.log("• demo: node_modules missing/stale — installing…");
-	const installExit = await run(["bun", "install"], demoDir);
-	if (installExit !== 0) {
-		console.error("✗ demo install failed — see output above.");
-		process.exit(installExit);
-	}
-}
-
-const tscExit = await run(["bunx", "tsc", "--noEmit", "-p", "tsconfig.json"], demoDir);
-if (tscExit !== 0) {
-	console.error("✗ demo typecheck failed — see output above.");
-	process.exit(tscExit);
-}
-console.log("✓ demo typecheck clean");

package/src/core/duplicates/index.spec.ts

@@ -1,116 +0,0 @@
-/**
- * The shared duplicate rules, proved against the cases that produced them.
- *
- * Every assertion here is a measured incident from `binary-server` or `music`, not an
- * invented example — see the module header for which.
- */
-import { describe, expect, it } from "bun:test";
-import {
-	DURATION_TOLERANCE,
-	durationsClose,
-	isGenericName,
-	likelyTheSameFile,
-	normalizeName,
-	SIZE_TOLERANCE,
-	sizesClose,
-} from "./index";
-
-describe("normalizeName", () => {
-	it("reduces the marks a copy picks up to the same stem", () => {
-		expect(normalizeName("My Video (1).mp4")).toBe("myvideo");
-		expect(normalizeName("my_video.MP4")).toBe("myvideo");
-		expect(normalizeName("My-Video copy 2.mov")).toBe("myvideo");
-	});
-
-	it("strips the extension, so a re-encode still pairs with its source", () => {
-		expect(normalizeName("Song.wma")).toBe(normalizeName("Song.mp3"));
-	});
-
-	it("🔴 keeps a four-digit camera sequence — the 2026-08-14 flood", () => {
-		// `IMG_4595` and `IMG_4646` must NOT collapse onto each other.
-		expect(normalizeName("IMG_4595.MOV")).not.toBe(normalizeName("IMG_4646.MOV"));
-		// …while a two-digit copy marker still does.
-		expect(normalizeName("mix_2.mp3")).toBe(normalizeName("mix.mp3"));
-	});
-
-	it("drops the directory", () => {
-		expect(normalizeName("Main 1/rap/Song.mp3")).toBe("song");
-	});
-});
-
-describe("isGenericName", () => {
-	it("rejects the stems that name a device rather than a file", () => {
-		expect(isGenericName(normalizeName("IMG_1.MOV"))).toBe(true);
-		expect(isGenericName(normalizeName("Track01.mp3"))).toBe(true);
-		expect(isGenericName(normalizeName("Between U.mp3"))).toBe(false);
-	});
-});
-
-describe("sizesClose", () => {
-	it("accepts a re-encode and refuses a different file", () => {
-		expect(sizesClose(10_000_000, 10_400_000)).toBe(true);
-		expect(sizesClose(10_000_000, 20_000_000)).toBe(false);
-	});
-
-	it("🔴 two zero-byte files are not close — nothing is known about either", () => {
-		expect(sizesClose(0, 0)).toBe(false);
-	});
-
-	it("is bounded by the exported tolerance", () => {
-		expect(sizesClose(100, 100 * (1 + SIZE_TOLERANCE))).toBe(true);
-		expect(sizesClose(100, 100 * (1 + SIZE_TOLERANCE * 2))).toBe(false);
-	});
-});
-
-describe("durationsClose", () => {
-	it("🔴 answers null when nobody has measured, never false", () => {
-		expect(durationsClose(null, 200)).toBeNull();
-		expect(durationsClose(0, 200)).toBeNull();
-		expect(durationsClose(undefined, undefined)).toBeNull();
-	});
-
-	it("refuses the owner's 3:56-vs-1:52 pair", () => {
-		expect(durationsClose(236, 112)).toBe(false);
-		expect(durationsClose(236, 236 * (1 + DURATION_TOLERANCE / 2))).toBe(true);
-	});
-});
-
-describe("likelyTheSameFile", () => {
-	const facts = (name: string, sizeBytes: number, duration?: number | null) => ({
-		name,
-		sizeBytes,
-		...(duration === undefined ? {} : { duration }),
-	});
-
-	it("pairs a re-encode of the same song", () => {
-		const verdict = likelyTheSameFile(
-			facts("Between U.mp3", 8_000_000, 312),
-			facts("Between U.wma", 7_800_000, 312),
-		);
-		expect(verdict.match).toBe(true);
-		expect(verdict.reason).toContain("same name");
-	});
-
-	it("does not pair two different songs of a similar size", () => {
-		expect(likelyTheSameFile(facts("A.mp3", 8_000_000), facts("B.mp3", 8_010_000)).match).toBe(
-			false,
-		);
-	});
-
-	it("🔴 a length that disagrees kills a name+size match", () => {
-		expect(
-			likelyTheSameFile(facts("Set.mp3", 8_000_000, 236), facts("Set.mp3", 8_100_000, 112)).match,
-		).toBe(false);
-	});
-
-	it("🔴 an unmeasured length does not — that would find nothing in an unprobed library", () => {
-		expect(
-			likelyTheSameFile(facts("Set.mp3", 8_000_000, null), facts("Set.mp3", 8_100_000, null)).match,
-		).toBe(true);
-	});
-
-	it("refuses a generic stem, and refuses two nameless files", () => {
-		expect(likelyTheSameFile(facts("IMG_1.MOV", 500), facts("IMG_1.MOV", 500)).match).toBe(false);
-		expect(likelyTheSameFile(facts("", 500), facts("", 500)).match).toBe(false);
-	});
-});

package/src/core/duplicates/index.ts

@@ -1,203 +0,0 @@
-/**
- * "Are these two files the same thing?" — the fleet's ONE answer, with no I/O in it.
- *
- * ── Why this is here and not in an app ──────────────────────────────────────────────────
- * `binary-server` wrote these rules first (2026-08-13, the owner: *"make strategy to always
- * check for duplicate binaries in same app for same user … mark likely the duplicates for
- * users to confirm"*), and they were measured against a real store: the copy-counter cap, the
- * camera-generic stem list and the 5% size window each exist because a wider rule proposed
- * thousands of pairs nobody could ever review. `music` then needed the same question asked of
- * a 5,400-track library — *"I want to see a duplicate next to the file that it is a possible
- * duplicate of … The 'binary-server' app (bs) already has this feature for checking duplicate
- * files. We can reuse it and enhance the customizability if needed so the main strategy is
- * shared."*
- *
- * So the strategy lives once, here, and both consume it. What each app keeps for itself is the
- * evidence only it has: bs's perceptual frame hashes, music's artist/title key.
- *
- * ── What is NOT here, deliberately ──────────────────────────────────────────────────────
- * Anything that needs a database, a filesystem, a fetch or a picture decoder. This module is
- * pure so both consumers can prove their behaviour with `bun test` instead of against a live
- * store, and so a browser bundle may import it (music renders the pair side by side).
- */
-
-/**
- * How far two sizes may differ and still be called the same thing.
- *
- * A re-encode at a different quality is the case this exists for, and those land within a few
- * percent. Zero would make a name match a strict subset of "same name AND same size", which
- * misses precisely the files worth asking about; much larger starts pairing a clip with its
- * own trailer.
- */
-export const SIZE_TOLERANCE = 0.05;
-
-/**
- * How far two playing times may differ and still be the same recording.
- *
- * Wide enough for a re-encode (a trim of a trailing black frame, a container that rounds), far
- * too narrow for the owner's 2026-08-14 report of a 3:56 video paired with a 1:52 one.
- */
-export const DURATION_TOLERANCE = 0.05;
-
-/**
- * The name to compare, reduced to what a human means by "the same file".
- *
- * Strips the directory, the extension, and the marks a copy picks up along the way —
- * `Finder`'s ` copy`/` copy 2`, a browser's ` (1)`, a script's `_1`/`-1` — then collapses
- * everything that is not a letter or a digit. `My Video (1).mp4`, `my_video.MP4` and
- * `My-Video copy 2.mov` all reduce to `myvideo`.
- *
- * 🔴 The extension is stripped ON PURPOSE, so a re-encode (`.mov` → `.mp4`, `.wma` → `.mp3`)
- * still pairs with its source. That is the single most common likely-duplicate in this fleet's
- * stores and a rule that kept the extension would never see one.
- *
- * 🔴 **The copy-counter strip is capped at two digits**, and that cap is a measured bug fix
- * (bs, 2026-08-14). It used to be `[-_]\d+$`, which eats a CAMERA SEQUENCE as readily as a copy
- * marker: `IMG_4595` and `IMG_4646` both reduced to `img`, so every iPhone capture in a tenant
- * shared one bucket and paired with every other one whose size was within 5%. `_1`…`_99` is
- * what a copy marker actually looks like; four digits is a photo's identity, and it must
- * survive.
- */
-export function normalizeName(name: string | null | undefined): string {
-	if (!name) return "";
-	const leaf = name.split(/[\\/]/).pop() ?? "";
-	const stem = leaf.replace(/\.[a-z0-9]{1,5}$/i, "");
-	return stem
-		.toLowerCase()
-		.replace(/\s*\(\d+\)\s*$/, "")
-		.replace(/\s+copy(\s+\d+)?\s*$/, "")
-		.replace(/[-_]\d{1,2}\s*$/, "")
-		.replace(/[^a-z0-9]+/g, "");
-}
-
-/**
- * Stems that name a CAMERA, not a file.
- *
- * `IMG`, `DSC`, `PXL`, `VID` are what a device calls everything it produces; two files whose
- * names reduce to one of these have told us nothing except that they came from a phone. Even
- * with the counter cap above, `IMG_1.MOV` still reduces to `img`, and a bucket called "img" is
- * every photo the owner has ever taken.
- *
- * 🔴 This rejects a MATCH, never a file. Both copies stay wherever they are, and an
- * identical-bytes pair is unaffected — a checksum match never consults the name.
- */
-export const GENERIC_STEMS: ReadonlySet<string> = new Set([
-	"img",
-	"image",
-	"images",
-	"dsc",
-	"dscf",
-	"dscn",
-	"pxl",
-	"vid",
-	"video",
-	"movie",
-	"mov",
-	"photo",
-	"pic",
-	"picture",
-	"screenshot",
-	"screenrecording",
-	"untitled",
-	"unknown",
-	"file",
-	"download",
-	"scan",
-	"capture",
-	"copy",
-	"new",
-	"temp",
-	"tmp",
-	// Music's own version of the same problem: an untagged rip is called this by every ripper
-	// ever written, and `track01` from two albums is two different songs.
-	"track",
-	"audiotrack",
-	"unknownartist",
-]);
-
-/**
- * A name that could belong to any file from that device tells us nothing about identity.
- *
- * 🔴 The trailing digit run is stripped BEFORE the lookup, and only here — never in
- * {@link normalizeName}, where removing it is what made every camera capture one bucket. The
- * two are asked at different moments: `normalizeName` decides whether two names are the SAME
- * (so `img4595` and `img4646` must stay apart), and this decides whether a name that already
- * matched is worth anything (so two files both called `Track01` have told us nothing, and a
- * ripper names half a library that).
- */
-export const isGenericName = (normalized: string): boolean =>
-	normalized.length < 3 ||
-	GENERIC_STEMS.has(normalized) ||
-	GENERIC_STEMS.has(normalized.replace(/\d+$/, ""));
-
-/** Within {@link SIZE_TOLERANCE} of each other. Two zero-byte files are not "close" — they
- *  are two files nothing is known about. */
-export function sizesClose(a: number, b: number, tolerance = SIZE_TOLERANCE): boolean {
-	if (a === b && a > 0) return true;
-	const larger = Math.max(a, b);
-	if (larger <= 0) return false;
-	return Math.abs(a - b) / larger <= tolerance;
-}
-
-/**
- * Within {@link DURATION_TOLERANCE} of each other.
- *
- * 🔴 A missing or zero duration answers `null`, never `false`: "nobody has measured this yet"
- * and "these are different lengths" are opposite answers, and collapsing them makes an
- * unprobed library look like a library with no duplicates in it.
- */
-export function durationsClose(
-	a: number | null | undefined,
-	b: number | null | undefined,
-	tolerance = DURATION_TOLERANCE,
-): boolean | null {
-	if (!a || !b || a <= 0 || b <= 0) return null;
-	return Math.abs(a - b) / Math.max(a, b) <= tolerance;
-}
-
-/** One file, reduced to what this module can reason about. Units are the caller's — pass
- *  both durations in the same unit or not at all. */
-export interface NamedFileFacts {
-	/** The name a person would recognise: a display title, else the last path segment. */
-	name: string | null | undefined;
-	sizeBytes: number;
-	/** Playing time, in whatever unit the caller uses consistently. Null = never measured. */
-	duration?: number | null;
-}
-
-export interface NameMatchVerdict {
-	match: boolean;
-	/** Written for the owner reading a review queue, never for a log. Empty when `match` is
-	 *  false — a non-match has nothing to explain. */
-	reason: string;
-}
-
-/**
- * The shared "these look like the same thing" test: the NAME agrees after normalization, the
- * sizes are close, and nothing about the length says otherwise.
- *
- * It is deliberately a QUESTION and never an action. Both consumers act only on a checksum,
- * which is proof; this decides what is worth showing a person side by side.
- */
-export function likelyTheSameFile(a: NamedFileFacts, b: NamedFileFacts): NameMatchVerdict {
-	const na = normalizeName(a.name);
-	const nb = normalizeName(b.name);
-	// Two empty names are not a match with each other — it means neither file has a name worth
-	// comparing (a bare digest key, an untitled upload), and pairing those proposes every
-	// unnamed object as a duplicate of every other.
-	if (!na || na !== nb) return { match: false, reason: "" };
-	if (isGenericName(na)) return { match: false, reason: "" };
-	if (!sizesClose(a.sizeBytes, b.sizeBytes)) return { match: false, reason: "" };
-	if (durationsClose(a.duration, b.duration) === false) return { match: false, reason: "" };
-
-	const pct = Math.round(
-		(Math.abs(a.sizeBytes - b.sizeBytes) / Math.max(a.sizeBytes, b.sizeBytes, 1)) * 100,
-	);
-	return {
-		match: true,
-		reason:
-			a.sizeBytes === b.sizeBytes
-				? "same name, same size, different bytes"
-				: `same name, size within ${pct}%, different bytes`,
-	};
-}

package/src/core/namespace/helpers.ts

@@ -1,31 +0,0 @@
-import type { Namespace } from './types';
-
-/** Irrational angle (in degrees) whose repeated steps around a 360° wheel
- * never re-align on a short cycle, so successive hues stay maximally spread
- * regardless of how many namespaces already exist. */
-const GOLDEN_ANGLE = 137.50776405003785;
-
-/**
- * Picks the next hue (0–359) for a new namespace by stepping around the color
- * wheel by the golden angle once per existing namespace, then nudging past
- * any exact collision with a hue already in use. Golden-angle stepping keeps
- * consecutive hues far apart without tracking gaps explicitly.
- */
-export function nextHue(existing: Namespace[]): number {
-  const used = new Set(existing.map((n) => n.hue));
-  let hue = Math.round((existing.length * GOLDEN_ANGLE) % 360);
-  while (used.has(hue)) {
-    hue = (hue + 1) % 360;
-  }
-  return hue;
-}
-
-/**
- * Trims and collapses internal whitespace in a namespace label, caps it at 40
- * characters, and rejects a label that is empty/blank after normalization.
- */
-export function normalizeNamespaceLabel(label: string): string {
-  const normalized = label.trim().replace(/\s+/g, ' ').slice(0, 40);
-  if (!normalized) throw new Error('namespace label must not be empty');
-  return normalized;
-}

package/src/core/namespace/index.ts

@@ -1,12 +0,0 @@
-// `cursedbelt/namespace` — reusable flat namespace/workspace model. Pure and
-// React-free (the switcher/picker UI lives in the consuming app), so servers
-// can import the contract + store without pulling any UI runtime.
-
-export type {
-  Namespace,
-  NamespaceCreateInput,
-  NamespaceStore,
-  NamespaceUpdateInput,
-} from './types';
-export { nextHue, normalizeNamespaceLabel } from './helpers';
-export { createMemoryNamespaceStore } from './memoryStore';