cursedbelt 2.7.0 → 3.0.0

package/dist/config/appConfig.js

@@ -1,309 +0,0 @@
-/**
- * `app-config.json` — the single schema the compiler AND the runtime import
- * (02-MASTER-ENGINES §2). Nothing else may re-declare this shape: a second copy
- * is how `privateMedia` without `guard` parsed as valid for a year (J2-1).
- *
- * Two laws are encoded here rather than in prose:
- *
- * 1. `.strict()` end to end. An unknown key — including inside a per-engine
- *    `features` block — is a parse ERROR (`unknown-config-key`), never silently
- *    stripped. A typo'd flag that gets dropped reads as "the feature is off" at
- *    runtime, which is indistinguishable from a bug in the feature.
- * 2. `.superRefine()` cross-engine dependencies. `privateMedia` needs `guard`,
- *    `oralHistory` needs `asset`, `auth.enabled` needs `guard`, and the saas
- *    profile needs `guard` + `rbac:true`. These are structural: the config
- *    references something that will not exist at runtime, so it dies at V0 —
- *    fail-closed on structure (04 §0).
- *
- * Zod v4 notes: `z.record` requires an explicit key schema, and `addIssue` takes
- * the literal `'custom'` code (the `ZodIssueCode` enum is gone).
- */
-import { z } from 'zod';
-export const ENGINE_IDS = ['asset', 'knowledge', 'dev', 'guard', 'system'];
-export const EngineIdSchema = z.enum(ENGINE_IDS);
-/* ---------- per-engine feature schemas (STRICT: unknown key = V0 error) ---------- */
-export const AssetFeatures = z
-    .object({
-    gallery: z.boolean().default(true),
-    galleryLayouts: z.array(z.enum(['masonry', 'rows', 'columns', 'dense'])).min(1).default(['rows']),
-    video: z.boolean().default(true), // false ⇒ video ports REMOVED (fail-closed, V2)
-    hls: z.boolean().default(true), // false ⇒ ports stay, progressive resolver forced (V2 degrade)
-    editor: z.boolean().default(false), // lazy chunk; joins bundleKey
-    fileBrowser: z.boolean().default(false),
-    taggedFiles: z.boolean().default(false),
-    privateMedia: z.boolean().default(false), // requires guard engine — enforced in superRefine
-    vaultSource: z.boolean().default(false),
-    ocr: z.boolean().default(false),
-    imageStudio: z.boolean().default(false),
-})
-    .strict();
-export const KnowledgeFeatures = z
-    .object({
-    notes: z.boolean().default(true),
-    todos: z.boolean().default(true),
-    airtableStyleLists: z.boolean().default(false),
-    kanban: z.boolean().default(false),
-    contacts: z.boolean().default(false),
-    oralHistory: z.boolean().default(false), // requires asset engine — enforced in superRefine
-    textCompare: z.boolean().default(false),
-    ragChat: z.boolean().default(false),
-    ragDiskIndexing: z.boolean().default(false),
-    aiOrganizer: z.boolean().default(false),
-    bookmarks: z.boolean().default(false),
-    worklog: z.boolean().default(false),
-    family: z.boolean().default(false),
-    habits: z.boolean().default(false),
-    articles: z.boolean().default(false),
-})
-    .strict();
-export const DevFeatures = z
-    .object({
-    appRegistry: z.boolean().default(true),
-    configEditor: z.boolean().default(false), // PRIVILEGED: requires 'infra:write' claim (02 §4.4)
-    deploy: z.boolean().default(false),
-    fleet: z.boolean().default(false),
-    pipelines: z.boolean().default(false),
-    docs: z.boolean().default(true),
-    screenshots: z.boolean().default(false),
-    diskUsage: z.boolean().default(false),
-    dbAdmin: z.boolean().default(false), // PRIVILEGED: requires 'infra:write' claim (02 §4.4)
-    orchestration: z.boolean().default(false),
-})
-    .strict();
-/**
- * Who may create an account (D33 — the commercial-launch gate). Ordered from
- * most open to most closed; `effectiveSignupMode` picks the STRICTEST configured
- * value, so two guard instances can never disagree in the open direction.
- *
- *   - `open`   — anyone signs up (saas: minting their own tenant as OWNER).
- *   - `invite` — a valid invitation token is required; token-less signup is a
- *     403. This is the "coming soon" launch posture: the operator invites
- *     trusted testers while the public sees a closed door.
- *   - `closed` — no signups at all, invitation or not.
- */
-export const SIGNUP_MODES = ['open', 'invite', 'closed'];
-export const GuardFeatures = z
-    .object({
-    privateMode: z.boolean().default(true),
-    secretsPanel: z.boolean().default(false), // station-style credential management UI
-    accounts: z.boolean().default(true), // username/password change (ex-Admin)
-    rbac: z.boolean().default(false), // SaaS profile forces true — superRefine (e)
-    sessionTtlMinutes: z.number().int().min(1).max(720).default(30),
-    signupMode: z.enum(SIGNUP_MODES).default('open'), // D33 launch gate — see SIGNUP_MODES
-    // D36: db-stored marketing-copy overrides + the owner-only editor panel.
-    // OFF by default: an app that is not THE commercial deployment has no
-    // marketing page to feed, and a public copy endpoint on it would be noise.
-    siteCopy: z.boolean().default(false),
-})
-    .strict();
-export const SystemFeatures = z
-    .object({
-    dashboard: z.boolean().default(false),
-    calendar: z.boolean().default(false),
-    notifications: z.boolean().default(true),
-    stopwatch: z.boolean().default(false),
-    timeOff: z.boolean().default(false),
-    formatLab: z.boolean().default(false),
-    lineFilter: z.boolean().default(false),
-    httpClient: z.boolean().default(false),
-    budgets: z.boolean().default(false),
-    subscriptions: z.boolean().default(false),
-})
-    .strict();
-export const FeaturesByEngine = {
-    asset: AssetFeatures,
-    knowledge: KnowledgeFeatures,
-    dev: DevFeatures,
-    guard: GuardFeatures,
-    system: SystemFeatures,
-};
-/**
- * The signup gate a whole app enforces (D33). The STRICTEST configured value
- * wins across guard instances — with two instances, `open` beside `invite`
- * must mean invite-only, or adding a second guard instance would silently
- * reopen a closed door. Apps with no guard instance have no signup surface at
- * all, so the returned default is never enforced anywhere.
- */
-export const effectiveSignupMode = (instances) => {
-    let strictest = 'open';
-    for (const instance of instances) {
-        if (instance.engine !== 'guard')
-            continue;
-        const raw = instance.effective.signupMode;
-        const mode = raw === 'invite' || raw === 'closed' ? raw : 'open';
-        if (SIGNUP_MODES.indexOf(mode) > SIGNUP_MODES.indexOf(strictest))
-            strictest = mode;
-    }
-    return strictest;
-};
-/* ---------- instances, wires, routes, fills ---------- */
-/**
- * Client SPA path (03 §3): kebab-case literal segments, camelCase `:params`.
- * `/chat/:conversationId` is the canonical example, so param names must admit
- * capitals while literal segments stay lowercase — a `/Chat` vs `/chat` pair is
- * two routes on a case-sensitive router and one route on a case-insensitive one.
- */
-export const ROUTE_PATH_RE = /^\/(?:[a-z0-9-]+|:[a-zA-Z][a-zA-Z0-9]*)?(?:\/(?:[a-z0-9-]+|:[a-zA-Z][a-zA-Z0-9]*))*$/;
-export const RouteDeclSchema = z
-    .object({
-    path: z.string().regex(ROUTE_PATH_RE),
-    view: z.string().min(1), // engine view id; checked against the export index at V1
-    aliases: z.array(z.string()).default([]),
-    deepLinkEntity: z.string().optional(), // token id whose payloads resolve here (03 §4)
-})
-    .strict();
-export const FillDeclSchema = z
-    .object({
-    slot: z.string().min(1), // must exist in the SlotRegistry — V1 `slot-unknown`
-    component: z.string().min(1), // exported fill id of this instance's engine
-    order: z.number().int().default(0),
-    requiredFeatures: z.array(z.string()).default([]), // J2-3: pure boolean lookup, no predicates
-})
-    .strict();
-export const InstanceSchema = z
-    .object({
-    engine: EngineIdSchema,
-    id: z.string().regex(/^[a-z][a-z0-9-]*$/), // unique per app — V1 `duplicate-instance-id`
-    title: z.string().optional(),
-    features: z.record(z.string(), z.unknown()).default({}), // validated per-engine in superRefine
-    options: z.record(z.string(), z.unknown()).default({}),
-    routes: z.array(RouteDeclSchema).default([]),
-    fills: z.array(FillDeclSchema).default([]),
-    cssIsolation: z.enum(['none', 'scope', 'shadow']).default('none'), // 02 §5.2
-})
-    .strict();
-/** '<instanceId>:<portId>' or 'data:<sourceId>'. */
-export const ENDPOINT_RE = /^[a-z][a-z0-9-]*:[a-z0-9\-:]+$/;
-export const ConnectionSchema = z
-    .object({
-    from: z.string().regex(ENDPOINT_RE),
-    to: z.string().regex(ENDPOINT_RE),
-    cyclic: z.boolean().default(false),
-})
-    .strict();
-/* ---------- the app config ---------- */
-export const AppConfigSchema = z
-    .object({
-    configVersion: z.literal(1), // unknown version ⇒ V0 `config-version-unknown`
-    app: z
-        .object({
-        id: z.string().regex(/^[a-z0-9-]+$/),
-        title: z.string().min(1),
-        port: z.number().int().min(1024).max(65535).optional(), // registry precedence (01 §3.2)
-        kind: z.enum(['app', 'test', 'demo']).default('app'),
-    })
-        .strict(),
-    profile: z.enum(['local', 'saas']).default('local'),
-    deployTarget: z
-        .object({
-        // context-aware capability branching input (04 V2 / J4-B)
-        capabilities: z.record(z.string(), z.boolean()).default({}), // e.g. { ffmpeg: true, mps: true }
-    })
-        .strict()
-        .default({ capabilities: {} }),
-    engines: z.array(EngineIdSchema).min(1), // ACTIVE MASTER ENGINE ARRAY — drives server mixins
-    instances: z.array(InstanceSchema).min(1),
-    connections: z.array(ConnectionSchema).default([]),
-    auth: z
-        .object({
-        enabled: z.boolean().default(false),
-        authUI: z
-            .object({
-            showLogout: z.boolean().default(true),
-            placement: z.enum(['header-right', 'header-left', 'sidebar-footer']).default('header-right'),
-            icon: z.string().default('LogOut'),
-            variant: z.enum(['ghost', 'outline', 'default']).default('ghost'),
-        })
-            .strict()
-            .default({ showLogout: true, placement: 'header-right', icon: 'LogOut', variant: 'ghost' }),
-    })
-        .strict()
-        .default({
-        enabled: false,
-        authUI: { showLogout: true, placement: 'header-right', icon: 'LogOut', variant: 'ghost' },
-    }),
-    theme: z
-        .object({
-        preset: z.string().default('cc-default'),
-        /**
-         * CSS custom-property map (02 §5.1), emitted into the generated app's
-         * `client/styles.css` as a `:root` block by `emitStylesCss`.
-         *
-         * **Both halves are validated because both are written verbatim into a
-         * stylesheet.** A property name is restricted to `--` plus
-         * word/dash characters, and a value may not contain the characters that
-         * would end the declaration or the rule (`;` `{` `}`) or open a comment.
-         * Without that, an override value of `red; } body { background: url(…)`
-         * escapes its own declaration and appends arbitrary rules to the app's
-         * first-party stylesheet — CSS is not inert (it fetches URLs and can
-         * hide or overlay UI). This is `.strict()`-doctrine fail-closed on
-         * STRUCTURE: an unusable custom property is a malformed config, not a
-         * capability to degrade.
-         */
-        overrides: z
-            .record(z
-            .string()
-            .regex(/^--[A-Za-z0-9_-]+$/, 'a theme override key must be a CSS custom property, e.g. "--accent"'), z
-            .string()
-            .min(1)
-            .refine((value) => !/[;{}]|\/\*|\*\//.test(value), {
-            message: 'a theme override value may not contain ";", "{", "}" or a CSS comment',
-        }))
-            .default({}),
-    })
-        .strict()
-        .default({ preset: 'cc-default', overrides: {} }),
-    ignoreExistingData: z.boolean().default(false), // the ONLY registry bypass; always logs
-})
-    .strict()
-    .superRefine((config, ctx) => {
-    const engineSet = new Set(config.engines);
-    // `ccCode` rides along in params so V0 can map each cross-engine issue onto
-    // its diagnostic code without pattern-matching on English message text.
-    const issue = (path, message, ccCode = 'engine-dependency-missing') => ctx.addIssue({ code: 'custom', path, message, params: { ccCode } });
-    config.instances.forEach((inst, i) => {
-        // (a) instance engine must be activated
-        if (!engineSet.has(inst.engine))
-            issue(['instances', i, 'engine'], `Instance '${inst.id}' uses engine '${inst.engine}' which is absent from engines[].`);
-        // (b) features parse against the FULL per-engine schema — typos die here, not at boot
-        const parsed = FeaturesByEngine[inst.engine].safeParse(inst.features);
-        if (!parsed.success) {
-            for (const e of parsed.error.issues) {
-                const keys = e.code === 'unrecognized_keys' ? e.keys : [];
-                const suffix = keys.length > 0 ? keys.map(String) : e.path.map(String);
-                issue(['instances', i, 'features', ...suffix], e.message, e.code === 'unrecognized_keys' ? 'unknown-config-key' : 'config-invalid-value');
-            }
-            return;
-        }
-        const f = parsed.data;
-        // (c) cross-engine dependencies — hard blocks, not comments (J2-1)
-        if (inst.engine === 'asset' && f.privateMedia === true && !engineSet.has('guard'))
-            issue(['instances', i, 'features', 'privateMedia'], `'privateMedia' requires the 'guard' engine in engines[] (engine-dependency-missing).`);
-        if (inst.engine === 'knowledge' && f.oralHistory === true && !engineSet.has('asset'))
-            issue(['instances', i, 'features', 'oralHistory'], `'oralHistory' requires the 'asset' engine for its media player tier (engine-dependency-missing).`);
-    });
-    // (d) auth requires guard
-    if (config.auth.enabled && !engineSet.has('guard'))
-        issue(['auth', 'enabled'], `auth.enabled requires the 'guard' engine (engine-dependency-missing).`);
-    // (e) SaaS guardrails: guard engine present, rbac on
-    if (config.profile === 'saas') {
-        if (!engineSet.has('guard'))
-            issue(['engines'], `profile 'saas' structurally requires the 'guard' engine (engine-dependency-missing).`);
-        const guardInst = config.instances.find((x) => x.engine === 'guard');
-        if (guardInst && guardInst.features.rbac !== true)
-            issue(['instances', config.instances.indexOf(guardInst), 'features', 'rbac'], `profile 'saas' structurally requires 'features.rbac: true' on the guard instance.`);
-    }
-});
-/**
- * Resolve one instance's declared features through the FULL (non-partial) engine
- * schema — the "full-resolution preview" of V0.3. Defaults land here, so a
- * missing required option surfaces at design time instead of at first boot.
- */
-export function resolveInstanceFeatures(engine, declared) {
-    return FeaturesByEngine[engine].parse(declared);
-}
-/** The declared feature key set of an engine — used by V1 `unknown-required-feature`. */
-export function featureKeysOf(engine) {
-    return Object.keys(FeaturesByEngine[engine].shape);
-}
-//# sourceMappingURL=appConfig.js.map

package/dist/config/appConfig.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"appConfig.js","sourceRoot":"","sources":["../../src/config/appConfig.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAU,CAAC;AACpF,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;AAGjD,uFAAuF;AAEvF,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC;KAC3B,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAClC,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC;IACjG,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,gDAAgD;IAClF,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,+DAA+D;IAC/F,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,8BAA8B;IAClE,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACvC,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACvC,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,kDAAkD;IAC5F,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACvC,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC/B,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CACxC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC;KAC/B,MAAM,CAAC;IACN,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAChC,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAChC,kBAAkB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC9C,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAClC,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACpC,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,kDAAkD;IAC3F,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACvC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACnC,eAAe,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAC3C,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACvC,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACrC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACnC,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAClC,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAClC,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CACrC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC;KACzB,MAAM,CAAC;IACN,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACtC,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,qDAAqD;IAC/F,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IAClC,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACjC,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACrC,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IAC/B,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACvC,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACrC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,qDAAqD;IAC1F,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CAC1C,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAU,CAAC;AAGlE,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC;KAC3B,MAAM,CAAC;IACN,WAAW,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACtC,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,yCAAyC;IACnF,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,sCAAsC;IAC3E,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,6CAA6C;IAC/E,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC/D,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,qCAAqC;IACvF,yEAAyE;IACzE,sEAAsE;IACtE,2EAA2E;IAC3E,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CACrC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,MAAM,CAAC;IACN,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACrC,QAAQ,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACpC,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;IACxC,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACrC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACnC,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACrC,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACtC,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACtC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;IACnC,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CAC1C,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,KAAK,EAAE,aAAa;IACpB,SAAS,EAAE,iBAAiB;IAC5B,GAAG,EAAE,WAAW;IAChB,KAAK,EAAE,aAAa;IACpB,MAAM,EAAE,cAAc;CACd,CAAC;AAYX;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CACjC,SAA4F,EAChF,EAAE;IACd,IAAI,SAAS,GAAe,MAAM,CAAC;IACnC,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,IAAI,QAAQ,CAAC,MAAM,KAAK,OAAO;YAAE,SAAS;QAC1C,MAAM,GAAG,GAAG,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC;QAC1C,MAAM,IAAI,GAAe,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;QAC7E,IAAI,YAAY,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC;YAAE,SAAS,GAAG,IAAI,CAAC;IACrF,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC,CAAC;AAEF,2DAA2D;AAE3D;;;;;GAKG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,sFAAsF,CAAC;AAEpH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC;KAC7B,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC;IACrC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,yDAAyD;IAClF,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACxC,cAAc,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,EAAE,+CAA+C;CACvF,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,qDAAqD;IAC9E,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,6CAA6C;IAC3E,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAClC,gBAAgB,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,2CAA2C;CAC/F,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC;KAC5B,MAAM,CAAC;IACN,MAAM,EAAE,cAAc;IACtB,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,mBAAmB,CAAC,EAAE,8CAA8C;IACzF,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC5B,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,sCAAsC;IAC/F,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACtD,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC5C,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1C,YAAY,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,UAAU;CAC9E,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,oDAAoD;AACpD,MAAM,CAAC,MAAM,WAAW,GAAG,gCAAgC,CAAC;AAE5D,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC;KAC9B,MAAM,CAAC;IACN,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC;IACnC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC;IACjC,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CACnC,CAAC;KACD,MAAM,EAAE,CAAC;AAGZ,0CAA0C;AAE1C,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC;KAC7B,MAAM,CAAC;IACN,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,gDAAgD;IAC7E,GAAG,EAAE,CAAC;SACH,MAAM,CAAC;QACN,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC;QACpC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;QACxB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,EAAE,gCAAgC;QACxF,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;KACrD,CAAC;SACD,MAAM,EAAE;IACX,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACnD,YAAY,EAAE,CAAC;SACZ,MAAM,CAAC;QACN,0DAA0D;QAC1D,YAAY,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,mCAAmC;KACjG,CAAC;SACD,MAAM,EAAE;SACR,OAAO,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;IAChC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,oDAAoD;IAC7F,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACzC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAClD,IAAI,EAAE,CAAC;SACJ,MAAM,CAAC;QACN,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;QACnC,MAAM,EAAE,CAAC;aACN,MAAM,CAAC;YACN,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;YACrC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,aAAa,EAAE,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;YAC5F,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC;YAClC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;SAClE,CAAC;aACD,MAAM,EAAE;aACR,OAAO,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,cAAc,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;KAC9F,CAAC;SACD,MAAM,EAAE;SACR,OAAO,CAAC;QACP,OAAO,EAAE,KAAK;QACd,MAAM,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,cAAc,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE;KAC1F,CAAC;IACJ,KAAK,EAAE,CAAC;SACL,MAAM,CAAC;QACN,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC;QACxC;;;;;;;;;;;;;;WAcG;QACH,SAAS,EAAE,CAAC;aACT,MAAM,CACL,CAAC;aACE,MAAM,EAAE;aACR,KAAK,CAAC,oBAAoB,EAAE,qEAAqE,CAAC,EACrG,CAAC;aACE,MAAM,EAAE;aACR,GAAG,CAAC,CAAC,CAAC;aACN,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;YACjD,OAAO,EAAE,uEAAuE;SACjF,CAAC,CACL;aACA,OAAO,CAAC,EAAE,CAAC;KACf,CAAC;SACD,MAAM,EAAE;SACR,OAAO,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IACnD,kBAAkB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,wCAAwC;CACzF,CAAC;KACD,MAAM,EAAE;KACR,WAAW,CAAC,CAAC,MAAM,EAAE,GAAG,EAAE,EAAE;IAC3B,MAAM,SAAS,GAAG,IAAI,GAAG,CAAW,MAAM,CAAC,OAAO,CAAC,CAAC;IACpD,4EAA4E;IAC5E,wEAAwE;IACxE,MAAM,KAAK,GAAG,CAAC,IAAyB,EAAE,OAAe,EAAE,MAAM,GAAG,2BAA2B,EAAE,EAAE,CACjG,GAAG,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC;IAEtE,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE;QACnC,wCAAwC;QACxC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC;YAC7B,KAAK,CACH,CAAC,WAAW,EAAE,CAAC,EAAE,QAAQ,CAAC,EAC1B,aAAa,IAAI,CAAC,EAAE,kBAAkB,IAAI,CAAC,MAAM,mCAAmC,CACrF,CAAC;QAEJ,sFAAsF;QACtF,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACtE,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;gBACpC,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,KAAK,mBAAmB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;gBACvE,KAAK,CACH,CAAC,WAAW,EAAE,CAAC,EAAE,UAAU,EAAE,GAAG,MAAM,CAAC,EACvC,CAAC,CAAC,OAAO,EACT,CAAC,CAAC,IAAI,KAAK,mBAAmB,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,sBAAsB,CAC/E,CAAC;YACJ,CAAC;YACD,OAAO;QACT,CAAC;QACD,MAAM,CAAC,GAAG,MAAM,CAAC,IAA+B,CAAC;QAEjD,mEAAmE;QACnE,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,IAAI,CAAC,CAAC,YAAY,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC;YAC/E,KAAK,CACH,CAAC,WAAW,EAAE,CAAC,EAAE,UAAU,EAAE,cAAc,CAAC,EAC5C,sFAAsF,CACvF,CAAC;QACJ,IAAI,IAAI,CAAC,MAAM,KAAK,WAAW,IAAI,CAAC,CAAC,WAAW,KAAK,IAAI,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC;YAClF,KAAK,CACH,CAAC,WAAW,EAAE,CAAC,EAAE,UAAU,EAAE,aAAa,CAAC,EAC3C,kGAAkG,CACnG,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,0BAA0B;IAC1B,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC;QAChD,KAAK,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,uEAAuE,CAAC,CAAC;IAEtG,qDAAqD;IACrD,IAAI,MAAM,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;QAC9B,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC;YACzB,KAAK,CAAC,CAAC,SAAS,CAAC,EAAE,sFAAsF,CAAC,CAAC;QAC7G,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC;QACrE,IAAI,SAAS,IAAI,SAAS,CAAC,QAAQ,CAAC,IAAI,KAAK,IAAI;YAC/C,KAAK,CACH,CAAC,WAAW,EAAE,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,EACtE,mFAAmF,CACpF,CAAC;IACN,CAAC;AACH,CAAC,CAAC,CAAC;AAIL;;;;GAIG;AACH,MAAM,UAAU,uBAAuB,CAAC,MAAgB,EAAE,QAAiC;IACzF,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAsB,CAAC;AACvE,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,aAAa,CAAC,MAAgB;IAC5C,OAAO,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC;AACrD,CAAC"}

package/dist/core/activity/index.d.ts

@@ -1,9 +0,0 @@
-/**
- * `cursedbelt/activity` — the fleet's activity/audit vocabulary, pure.
- *
- * The storage + query half is `cursedbelt/server/activity`; this entry is what a
- * browser, a spec or a wire type can import without pulling `bun:sqlite` in.
- */
-export { ACTIVITY_OUTCOMES, activityFromShareEvent, activitySubject, describeActivityEvent, describeActivityResource, isActivityAction, isActivityOutcome, } from "./model";
-export type { ActivityEvent, ActivityEventInput, ActivityOutcome, ActivityResource, } from "./model";
-//# sourceMappingURL=index.d.ts.map

package/dist/core/activity/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/activity/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EACN,iBAAiB,EACjB,sBAAsB,EACtB,eAAe,EACf,qBAAqB,EACrB,wBAAwB,EACxB,gBAAgB,EAChB,iBAAiB,GACjB,MAAM,SAAS,CAAC;AACjB,YAAY,EACX,aAAa,EACb,kBAAkB,EAClB,eAAe,EACf,gBAAgB,GAChB,MAAM,SAAS,CAAC"}

package/dist/core/activity/index.js

@@ -1,8 +0,0 @@
-/**
- * `cursedbelt/activity` — the fleet's activity/audit vocabulary, pure.
- *
- * The storage + query half is `cursedbelt/server/activity`; this entry is what a
- * browser, a spec or a wire type can import without pulling `bun:sqlite` in.
- */
-export { ACTIVITY_OUTCOMES, activityFromShareEvent, activitySubject, describeActivityEvent, describeActivityResource, isActivityAction, isActivityOutcome, } from "./model";
-//# sourceMappingURL=index.js.map

package/dist/core/activity/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/core/activity/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EACN,iBAAiB,EACjB,sBAAsB,EACtB,eAAe,EACf,qBAAqB,EACrB,wBAAwB,EACxB,gBAAgB,EAChB,iBAAiB,GACjB,MAAM,SAAS,CAAC"}

package/dist/core/activity/model.d.ts

@@ -1,116 +0,0 @@
-/**
- * The fleet's ACTIVITY vocabulary — who did what, to which record, when, and how
- * it went. One shape, so twelve apps' event streams can be read as one.
- *
- * ── Why this is not a second audit shape ────────────────────────────────────
- * `cursedbelt/sharing` already had to answer this question for grants, and its
- * `ShareEvent` is the shape that survived review: an ISO-8601 `at`, an `actor`
- * that is always an account and never a session, a `(app, kind, id)` resource
- * triple, a dotted `action`, and a free `note` for whoever reads it six months
- * later. This vocabulary is deliberately the SAME five fields plus an outcome —
- * `activityFromShareEvent` below is the proof, and it is a total function.
- *
- * So a consumer never has to choose between two audit trails:
- *  - a sharing grant is `share.grant` in the stream, projected out of
- *    `share_events` by `cursedbelt/server/activity`'s `shareEventsSource` — the
- *    same rows, never a copy, so the two can never disagree;
- *  - everything else an app wants remembered is `record()`d into
- *    `activity_events`.
- *
- * ── The rules the shape enforces ────────────────────────────────────────────
- *  - **`at` is an ISO-8601 string**, matching `share_events` and the fleet's
- *    audit vocabulary. An audit trail is read by humans far more often than it
- *    is sorted by a machine, and a sortable string is both.
- *  - **`actor` is required and is never optional.** An event that cannot say who
- *    is a log line, not an audit trail. Apps with no session pass a label that
- *    says so (`"curt@… (dev-open)"`), which is honest rather than empty.
- *  - **`action` is `subject.verb`**, lowercase and dotted — `note.create`,
- *    `backup.delete`, `share.grant`. The prefix is what makes "everything that
- *    happened to backups" a filter rather than a regex.
- *  - **`id` is source-qualified** (`log:41`, `share:12`), because the stream is a
- *    UNION over more than one table and two tables' autoincrements collide at 1.
- */
-import type { ShareEvent } from "../sharing/model";
-/** How it went. `denied` is its own outcome rather than an `error`: a refused
- *  action is the single most interesting row in an audit trail, and one that
- *  reads as a crash gets triaged as one. */
-export type ActivityOutcome = "ok" | "denied" | "error";
-export declare const ACTIVITY_OUTCOMES: readonly ActivityOutcome[];
-export declare const isActivityOutcome: (value: unknown) => value is ActivityOutcome;
-/**
- * What was acted on: `(app, kind, id)` — deliberately identical to
- * {@link import("../sharing/model").ShareResource}, so a resource can be handed
- * from one primitive to the other without a translation layer.
- */
-export interface ActivityResource {
-    app: string;
-    kind: string;
-    id: string;
-}
-/** One line of the stream, as read. */
-export interface ActivityEvent {
-    /** `"<source>:<row id>"`. Stable, and unique across the union. */
-    id: string;
-    /** Which table it came from — `log`, `share`, or a source an app registered. */
-    source: string;
-    /** ISO-8601, UTC. */
-    at: string;
-    /** The satellite. Present on every row so a fleet-wide merge stays labeled. */
-    app: string;
-    actor: string;
-    /** `subject.verb`, lowercase. */
-    action: string;
-    /** Null when the action is about no single record (a sign-in, a sweep). */
-    resource: ActivityResource | null;
-    outcome: ActivityOutcome;
-    /** Why, in the words of whoever did it. */
-    note: string;
-    /** Anything else worth keeping, as JSON. Never indexed, never queried on. */
-    data: Record<string, unknown> | null;
-}
-/** One line of the stream, as written. The store supplies `app`, `id` and `source`. */
-export interface ActivityEventInput {
-    actor: string;
-    action: string;
-    /** The `app` half is supplied by the store, so a caller cannot write an event
-     *  into another app's name. */
-    resource?: {
-        kind: string;
-        id: string;
-    } | null;
-    outcome?: ActivityOutcome;
-    note?: string;
-    data?: Record<string, unknown> | null;
-    /** ISO-8601. Defaults to now — passed explicitly only by tests and importers. */
-    at?: string;
-}
-/** `note.create` → `note`. The half a filter groups on. */
-export declare const activitySubject: (action: string) => string;
-export declare const isActivityAction: (value: unknown) => value is string;
-/** `family · person 3f2` — the resource, for a row that has one. */
-export declare const describeActivityResource: (resource: ActivityResource | null) => string;
-/**
- * One sentence for a person. Deliberately generic — an app that wants its own
- * wording for its own actions renders it itself; this is what the fleet-wide
- * board shows for an action it has never seen before, and it must never be
- * empty.
- */
-export declare function describeActivityEvent(event: ActivityEvent): string;
-/**
- * 🔴 THE coordination point with `cursedbelt/sharing`.
- *
- * A sharing grant is already audited, in `share_events`, by a store that
- * guarantees no grant can be made without one. This maps that row into the
- * activity vocabulary so the fleet's event stream can INCLUDE it rather than
- * ask every consumer to write a second copy — the "coordinate the shape rather
- * than invent a second one" rule, as code.
- *
- * `cursedbelt/server/activity`'s `shareEventsSource` is the SQL form of exactly
- * this mapping, and `store.spec.ts` asserts the two agree field for field. This
- * function is the one to use from a `ShareStore`'s `onEvent` hook when an app
- * genuinely wants a copy (a different database, say); an app whose share events
- * live beside its activity table should register the SQL source instead and
- * keep one row.
- */
-export declare function activityFromShareEvent(event: ShareEvent): ActivityEventInput;
-//# sourceMappingURL=model.d.ts.map

package/dist/core/activity/model.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"model.d.ts","sourceRoot":"","sources":["../../../src/core/activity/model.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEnD;;4CAE4C;AAC5C,MAAM,MAAM,eAAe,GAAG,IAAI,GAAG,QAAQ,GAAG,OAAO,CAAC;AAExD,eAAO,MAAM,iBAAiB,EAAE,SAAS,eAAe,EAA8B,CAAC;AAEvF,eAAO,MAAM,iBAAiB,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,eACF,CAAC;AAE3D;;;;GAIG;AACH,MAAM,WAAW,gBAAgB;IAChC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;CACX;AAED,uCAAuC;AACvC,MAAM,WAAW,aAAa;IAC7B,kEAAkE;IAClE,EAAE,EAAE,MAAM,CAAC;IACX,gFAAgF;IAChF,MAAM,EAAE,MAAM,CAAC;IACf,qBAAqB;IACrB,EAAE,EAAE,MAAM,CAAC;IACX,+EAA+E;IAC/E,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;IACd,iCAAiC;IACjC,MAAM,EAAE,MAAM,CAAC;IACf,2EAA2E;IAC3E,QAAQ,EAAE,gBAAgB,GAAG,IAAI,CAAC;IAClC,OAAO,EAAE,eAAe,CAAC;IACzB,2CAA2C;IAC3C,IAAI,EAAE,MAAM,CAAC;IACb,6EAA6E;IAC7E,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;CACrC;AAED,uFAAuF;AACvF,MAAM,WAAW,kBAAkB;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf;mCAC+B;IAC/B,QAAQ,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,EAAE,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC/C,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAC;IACtC,iFAAiF;IACjF,EAAE,CAAC,EAAE,MAAM,CAAC;CACZ;AAED,2DAA2D;AAC3D,eAAO,MAAM,eAAe,GAAI,QAAQ,MAAM,KAAG,MAAwC,CAAC;AAY1F,eAAO,MAAM,gBAAgB,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,MACc,CAAC;AAE1E,oEAAoE;AACpE,eAAO,MAAM,wBAAwB,GAAI,UAAU,gBAAgB,GAAG,IAAI,KAAG,MAC1B,CAAC;AAEpD;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,aAAa,GAAG,MAAM,CASlE;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,UAAU,GAAG,kBAAkB,CAe5E"}

package/dist/core/activity/model.js

@@ -1,64 +0,0 @@
-export const ACTIVITY_OUTCOMES = ["ok", "denied", "error"];
-export const isActivityOutcome = (value) => value === "ok" || value === "denied" || value === "error";
-/** `note.create` → `note`. The half a filter groups on. */
-export const activitySubject = (action) => action.split(".")[0] ?? action;
-/**
- * A well-formed action: `subject.verb`, optionally deeper (`share.group.create`),
- * lowercase, dots and dashes only.
- *
- * Enforced at the WRITE (see the store), not merely documented — an action
- * vocabulary that drifts to `Note Created` on one screen and `note.create` on
- * another cannot be filtered, and a filter is the whole point of the column.
- */
-const ACTION_RE = /^[a-z0-9-]+(\.[a-z0-9-]+)+$/;
-export const isActivityAction = (value) => typeof value === "string" && value.length <= 64 && ACTION_RE.test(value);
-/** `family · person 3f2` — the resource, for a row that has one. */
-export const describeActivityResource = (resource) => resource ? `${resource.kind} ${resource.id}` : "—";
-/**
- * One sentence for a person. Deliberately generic — an app that wants its own
- * wording for its own actions renders it itself; this is what the fleet-wide
- * board shows for an action it has never seen before, and it must never be
- * empty.
- */
-export function describeActivityEvent(event) {
-    const what = event.resource
-        ? `${event.resource.kind} ${event.resource.id}`
-        : `${event.app}`;
-    const verb = event.action.replace(/\./g, " ");
-    const how = event.outcome === "ok" ? "" : event.outcome === "denied" ? " — refused" : " — failed";
-    const why = event.note ? ` (${event.note})` : "";
-    return `${event.actor} ${verb} ${what}${how}${why}`;
-}
-/**
- * 🔴 THE coordination point with `cursedbelt/sharing`.
- *
- * A sharing grant is already audited, in `share_events`, by a store that
- * guarantees no grant can be made without one. This maps that row into the
- * activity vocabulary so the fleet's event stream can INCLUDE it rather than
- * ask every consumer to write a second copy — the "coordinate the shape rather
- * than invent a second one" rule, as code.
- *
- * `cursedbelt/server/activity`'s `shareEventsSource` is the SQL form of exactly
- * this mapping, and `store.spec.ts` asserts the two agree field for field. This
- * function is the one to use from a `ShareStore`'s `onEvent` hook when an app
- * genuinely wants a copy (a different database, say); an app whose share events
- * live beside its activity table should register the SQL source instead and
- * keep one row.
- */
-export function activityFromShareEvent(event) {
-    return {
-        at: event.at,
-        actor: event.actor,
-        action: `share.${event.action}`,
-        resource: event.resource ? { kind: event.resource.kind, id: event.resource.id } : null,
-        outcome: "ok",
-        note: event.note,
-        data: {
-            subjectType: event.subject.type,
-            subjectId: event.subject.id,
-            level: event.level,
-            previousLevel: event.previousLevel,
-        },
-    };
-}
-//# sourceMappingURL=model.js.map

package/dist/core/activity/model.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"model.js","sourceRoot":"","sources":["../../../src/core/activity/model.ts"],"names":[],"mappings":"AAuCA,MAAM,CAAC,MAAM,iBAAiB,GAA+B,CAAC,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;AAEvF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,KAAc,EAA4B,EAAE,CAC7E,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,OAAO,CAAC;AAiD3D,2DAA2D;AAC3D,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,MAAc,EAAU,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC;AAE1F;;;;;;;GAOG;AACH,MAAM,SAAS,GAAG,6BAA6B,CAAC;AAEhD,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,KAAc,EAAmB,EAAE,CACnE,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,IAAI,EAAE,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAE1E,oEAAoE;AACpE,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,QAAiC,EAAU,EAAE,CACrF,QAAQ,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;AAEpD;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,KAAoB;IACzD,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ;QAC1B,CAAC,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,IAAI,IAAI,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE;QAC/C,CAAC,CAAC,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;IAClB,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC9C,MAAM,GAAG,GACR,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,CAAC;IACvF,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACjD,OAAO,GAAG,KAAK,CAAC,KAAK,IAAI,IAAI,IAAI,IAAI,GAAG,GAAG,GAAG,GAAG,EAAE,CAAC;AACrD,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAiB;IACvD,OAAO;QACN,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,MAAM,EAAE,SAAS,KAAK,CAAC,MAAM,EAAE;QAC/B,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,EAAE,EAAE,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI;QACtF,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE;YACL,WAAW,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI;YAC/B,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE;YAC3B,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,aAAa,EAAE,KAAK,CAAC,aAAa;SAClC;KACD,CAAC;AACH,CAAC"}

package/dist/core/analytics/index.d.ts

@@ -1,19 +0,0 @@
-/**
- * `cursedbelt/analytics` — the framework-free half of an analytics surface.
- *
- * Framework-free because BOTH sides need it: a server buckets a series before it
- * ships it, and the browser renders the same buckets. They must agree exactly or
- * a chart's x-axis disagrees with its own tooltip — so this half must not pull
- * React in.
- *
- * - `range` — the time vocabulary (today/week/…/custom), local-day bucketing,
- *   and the baseline window every comparison is measured against.
- * - `schedule` — list scheduling with resource exclusion and a contention term:
- *   how long a backlog takes to drain, whether another worker helps, and when a
- *   budget runs out at each fleet size.
- *
- * The React furniture that renders it lives in `cursedbelt/react/analytics`.
- */
-export * from './range';
-export * from './schedule';
-//# sourceMappingURL=index.d.ts.map

package/dist/core/analytics/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/core/analytics/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,cAAc,SAAS,CAAC;AACxB,cAAc,YAAY,CAAC"}

package/dist/core/analytics/index.js

@@ -1,19 +0,0 @@
-/**
- * `cursedbelt/analytics` — the framework-free half of an analytics surface.
- *
- * Framework-free because BOTH sides need it: a server buckets a series before it
- * ships it, and the browser renders the same buckets. They must agree exactly or
- * a chart's x-axis disagrees with its own tooltip — so this half must not pull
- * React in.
- *
- * - `range` — the time vocabulary (today/week/…/custom), local-day bucketing,
- *   and the baseline window every comparison is measured against.
- * - `schedule` — list scheduling with resource exclusion and a contention term:
- *   how long a backlog takes to drain, whether another worker helps, and when a
- *   budget runs out at each fleet size.
- *
- * The React furniture that renders it lives in `cursedbelt/react/analytics`.
- */
-export * from './range';
-export * from './schedule';
-//# sourceMappingURL=index.js.map

package/dist/core/analytics/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/core/analytics/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,cAAc,SAAS,CAAC;AACxB,cAAc,YAAY,CAAC"}