cursedbelt 2.7.0 → 3.0.0

package/dist/react/data/AppErrorOverlay.js

@@ -1,78 +0,0 @@
-import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "react/jsx-runtime";
-/**
- * The app-error overlay dispatcher + the `UpgradeDialog` (04 §5f).
- *
- * Billing ENFORCEMENT landed in Phase 3: `requireWithinPlan` raises a typed 402
- * (`USAGE_LIMIT_EXCEEDED`) carrying the metric, the amount used and the ceiling.
- * Its renderer did not exist, so the conversion surface of the whole SaaS
- * profile was a rejected fetch — the user saw a control that did nothing.
- *
- * The dispatcher is deliberately generic: it maps an `AppError.code` to an
- * overlay, so the next code that deserves a real surface is a table entry rather
- * than a second bespoke listener. Today one code has one — anything else falls
- * through to a plain, dismissible notice, because a swallowed error is worse
- * than an ugly one.
- *
- * The dialog names the PLAN, which the error cannot carry (the ceiling is a
- * plan property, not a request property) — so it reads `/api/billing/usage`
- * lazily, only once the dialog is actually open. A dialog that pre-fetched plan
- * data on every app boot would put a billing request in the critical path of an
- * app that may never hit a limit.
- */
-import { useEffect, useState } from 'react';
-import { Z_BANDS } from '../../core/slots';
-import { ActionBar } from '../components/ActionBar';
-import { Alert } from '../components/Alert';
-import { Button } from '../components/Button';
-import { Modal } from '../components/Modal';
-import { useAppError, useEngineData } from './engineDataContext';
-/** The 402 the billing tier raises (mirrors `billing.mixin.ts`'s constant). */
-export const USAGE_LIMIT_EXCEEDED = 'USAGE_LIMIT_EXCEEDED';
-export function UpgradeDialog({ open, onClose, metric, used, limit, upgradeHref }) {
-    const { client } = useEngineData();
-    const [plan, setPlan] = useState(null);
-    const [usage, setUsage] = useState([]);
-    useEffect(() => {
-        if (!open)
-            return;
-        let cancelled = false;
-        void client
-            .request('/api/billing/usage', { silent: true })
-            .then((body) => {
-            if (cancelled)
-                return;
-            setPlan(body.plan ?? null);
-            setUsage(body.usage ?? []);
-        })
-            // The dialog must render WITHOUT the plan lookup: the limit is already
-            // known from the error, and failing to name the plan is a worse outcome
-            // than a dialog that never appears.
-            .catch(() => undefined);
-        return () => {
-            cancelled = true;
-        };
-    }, [open, client]);
-    const row = usage.find((entry) => entry.metric === metric);
-    const shownUsed = used ?? row?.used;
-    const shownLimit = limit ?? row?.limit;
-    return (_jsx(Modal, { open: open, onClose: onClose, size: 'sm', title: 'Plan limit reached', footer: _jsx(ActionBar, { secondary: _jsx(Button, { variant: 'secondary', tooltip: 'Close this dialog and keep working', onClick: onClose, children: "Not now" }), primary: upgradeHref ? (_jsx(Button, { asChild: true, variant: 'primary', tooltip: 'Open the upgrade page', children: _jsx("a", { href: upgradeHref, children: "Upgrade" }) })) : undefined }), children: _jsxs("div", { "data-cc-upgrade-dialog": metric ?? 'unknown', className: 'flex flex-col gap-3 text-sm', children: [_jsxs("p", { className: 'text-foreground', children: [plan ? (_jsxs(_Fragment, { children: ["Your ", _jsx("strong", { children: plan.title }), " plan has no headroom left"] })) : (_jsx(_Fragment, { children: "Your plan has no headroom left" })), metric ? (_jsxs(_Fragment, { children: [' ', "for ", _jsx("code", { "data-cc-upgrade-metric": metric, children: metric }), "."] })) : ('.')] }), shownUsed != null && shownLimit != null ? (_jsxs("p", { className: 'text-muted-foreground', children: [_jsx("span", { className: 'tabular-nums', children: shownUsed }), " of", ' ', _jsx("span", { className: 'tabular-nums', children: shownLimit }), " used."] })) : null] }) }));
-}
-/**
- * Renders whatever the current app error deserves. Mounted by
- * {@link EngineDataProvider} unless the app supplies its own `overlay`.
- */
-export function AppErrorOverlay({ upgradeHref }) {
-    const { error, dismiss } = useAppError();
-    if (!error)
-        return null;
-    if (error.code === USAGE_LIMIT_EXCEEDED) {
-        const context = (error.context ?? {});
-        return (_jsx(UpgradeDialog, { open: true, onClose: dismiss, metric: context.metric, used: context.used, limit: context.limit, upgradeHref: upgradeHref }));
-    }
-    // Unauthenticated is not an app-level failure to shout about: the shell's auth
-    // surface owns it, and an overlay here would cover the login form.
-    if (error.status === 401)
-        return null;
-    return (_jsx("div", { className: 'pointer-events-none fixed inset-x-0 top-0 flex justify-center p-3', style: { zIndex: Z_BANDS.toast }, "data-cc-app-error": error.code ?? 'error', children: _jsx("div", { className: 'pointer-events-auto w-full max-w-md', children: _jsx(Alert, { tone: 'error', title: 'Something went wrong', onDismiss: dismiss, children: error.message }) }) }));
-}
-//# sourceMappingURL=AppErrorOverlay.js.map

package/dist/react/data/AppErrorOverlay.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"AppErrorOverlay.js","sourceRoot":"","sources":["../../../src/react/data/AppErrorOverlay.tsx"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAC5C,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,KAAK,EAAE,MAAM,qBAAqB,CAAC;AAC5C,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEjE,+EAA+E;AAC/E,MAAM,CAAC,MAAM,oBAAoB,GAAG,sBAAsB,CAAC;AAwB3D,MAAM,UAAU,aAAa,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAsB;IACnG,MAAM,EAAE,MAAM,EAAE,GAAG,aAAa,EAAE,CAAC;IACnC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAqB,IAAI,CAAC,CAAC;IAC3D,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAsB,EAAE,CAAC,CAAC;IAE5D,SAAS,CAAC,GAAG,EAAE;QACb,IAAI,CAAC,IAAI;YAAE,OAAO;QAClB,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,KAAK,MAAM;aACR,OAAO,CAA6C,oBAAoB,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;aAC3F,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;YACb,IAAI,SAAS;gBAAE,OAAO;YACtB,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC;YAC3B,QAAQ,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC;QAC7B,CAAC,CAAC;YACF,uEAAuE;YACvE,wEAAwE;YACxE,oCAAoC;aACnC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC1B,OAAO,GAAG,EAAE;YACV,SAAS,GAAG,IAAI,CAAC;QACnB,CAAC,CAAC;IACJ,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAEnB,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;IAC3D,MAAM,SAAS,GAAG,IAAI,IAAI,GAAG,EAAE,IAAI,CAAC;IACpC,MAAM,UAAU,GAAG,KAAK,IAAI,GAAG,EAAE,KAAK,CAAC;IAEvC,OAAO,CACL,KAAC,KAAK,IACJ,IAAI,EAAE,IAAI,EACV,OAAO,EAAE,OAAO,EAChB,IAAI,EAAC,IAAI,EACT,KAAK,EAAC,oBAAoB,EAC1B,MAAM,EACJ,KAAC,SAAS,IACR,SAAS,EACP,KAAC,MAAM,IAAC,OAAO,EAAC,WAAW,EAAC,OAAO,EAAC,oCAAoC,EAAC,OAAO,EAAE,OAAO,wBAEhF,EAEX,OAAO,EACL,WAAW,CAAC,CAAC,CAAC,CACZ,KAAC,MAAM,IAAC,OAAO,QAAC,OAAO,EAAC,SAAS,EAAC,OAAO,EAAC,uBAAuB,YAC/D,YAAG,IAAI,EAAE,WAAW,wBAAa,GAC1B,CACV,CAAC,CAAC,CAAC,SAAS,GAEf,YAGJ,yCAA6B,MAAM,IAAI,SAAS,EAAE,SAAS,EAAC,6BAA6B,aACvF,aAAG,SAAS,EAAC,iBAAiB,aAC3B,IAAI,CAAC,CAAC,CAAC,CACN,uCACO,2BAAS,IAAI,CAAC,KAAK,GAAU,kCACjC,CACJ,CAAC,CAAC,CAAC,CACF,+DAAmC,CACpC,EACA,MAAM,CAAC,CAAC,CAAC,CACR,8BACG,GAAG,UACA,yCAA8B,MAAM,YAAG,MAAM,GAAQ,SACxD,CACJ,CAAC,CAAC,CAAC,CACF,GAAG,CACJ,IACC,EACH,SAAS,IAAI,IAAI,IAAI,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,CACzC,aAAG,SAAS,EAAC,uBAAuB,aAClC,eAAM,SAAS,EAAC,cAAc,YAAE,SAAS,GAAQ,SAAI,GAAG,EACxD,eAAM,SAAS,EAAC,cAAc,YAAE,UAAU,GAAQ,cAChD,CACL,CAAC,CAAC,CAAC,IAAI,IACJ,GACA,CACT,CAAC;AACJ,CAAC;AAOD;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,EAAE,WAAW,EAAwB;IACnE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,WAAW,EAAE,CAAC;IAEzC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAExB,IAAI,KAAK,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;QACxC,MAAM,OAAO,GAAG,CAAC,KAAK,CAAC,OAAO,IAAI,EAAE,CAAuD,CAAC;QAC5F,OAAO,CACL,KAAC,aAAa,IACZ,IAAI,QACJ,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,OAAO,CAAC,MAAM,EACtB,IAAI,EAAE,OAAO,CAAC,IAAI,EAClB,KAAK,EAAE,OAAO,CAAC,KAAK,EACpB,WAAW,EAAE,WAAW,GACxB,CACH,CAAC;IACJ,CAAC;IAED,+EAA+E;IAC/E,mEAAmE;IACnE,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAEtC,OAAO,CAGL,cACE,SAAS,EAAC,mEAAmE,EAC7E,KAAK,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,EAAE,uBACb,KAAK,CAAC,IAAI,IAAI,OAAO,YAExC,cAAK,SAAS,EAAC,qCAAqC,YAClD,KAAC,KAAK,IAAC,IAAI,EAAC,OAAO,EAAC,KAAK,EAAC,sBAAsB,EAAC,SAAS,EAAE,OAAO,YAChE,KAAK,CAAC,OAAO,GACR,GACJ,GACF,CACP,CAAC;AACJ,CAAC"}

package/dist/react/data/EngineDataProvider.d.ts

@@ -1,43 +0,0 @@
-/**
- * `EngineDataProvider` (04 §5a) — the one place a generated app connects its
- * views to its own server.
- *
- * It carries exactly three things, and each is there because the alternative was
- * a per-app copy:
- *
- *   * the {@link EngineClient} every view fetches through;
- *   * the {@link WireHub} the instance stream publishes CDC frames onto, so
- *     {@link useEngineResource} can subscribe to a channel rather than poll;
- *   * the app-error sink — every failed request lands here, which is what turns
- *     the billing tier's 402 into a rendered upgrade path (04 §5f) instead of a
- *     console message.
- *
- * The provider also owns the TanStack `QueryClient`, because `usePagedList` (the
- * landed paging layer these hooks compose over) requires one and an app that
- * forgets it gets a runtime throw from inside a hook it never called directly.
- * Passing your own `queryClient` is supported; nesting is legal (the inner
- * provider wins) so an app that already has one is not forced to restructure.
- */
-import { QueryClient } from '@tanstack/react-query';
-import { type ReactNode } from 'react';
-import type { WireHub } from '../../core/wire/wireHub';
-import { type EngineClient, type EngineClientOptions } from './engineClient';
-export interface EngineDataProviderProps {
-    children: ReactNode;
-    /** Pre-built client. Omit to build one from {@link EngineDataProviderProps.clientOptions}. */
-    client?: EngineClient;
-    clientOptions?: EngineClientOptions;
-    /** The app's wire hub — the same instance `createInstanceStreamHost` publishes onto. */
-    hub?: WireHub | null;
-    /** Reuse an existing QueryClient instead of the provider's own. */
-    queryClient?: QueryClient;
-    /**
-     * Rendered inside the provider, above `children`. Defaults to
-     * `<AppErrorOverlay/>` (04 §5f); pass `null` for an app that renders its own
-     * error surface — but pass something, or a 402 goes back to being invisible.
-     */
-    overlay?: ReactNode;
-}
-export declare function EngineDataProvider({ children, client, clientOptions, hub, queryClient, overlay, }: EngineDataProviderProps): import("react").JSX.Element;
-export { useAppError, useEngineClient, useEngineData, type EngineDataContextValue } from './engineDataContext';
-//# sourceMappingURL=EngineDataProvider.d.ts.map

package/dist/react/data/EngineDataProvider.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"EngineDataProvider.d.ts","sourceRoot":"","sources":["../../../src/react/data/EngineDataProvider.tsx"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,WAAW,EAAuB,MAAM,uBAAuB,CAAC;AACzE,OAAO,EAAE,KAAK,SAAS,EAAqD,MAAM,OAAO,CAAC;AAE1F,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AAGvD,OAAO,EAEL,KAAK,YAAY,EACjB,KAAK,mBAAmB,EAEzB,MAAM,gBAAgB,CAAC;AAIxB,MAAM,WAAW,uBAAuB;IACtC,QAAQ,EAAE,SAAS,CAAC;IACpB,8FAA8F;IAC9F,MAAM,CAAC,EAAE,YAAY,CAAC;IACtB,aAAa,CAAC,EAAE,mBAAmB,CAAC;IACpC,wFAAwF;IACxF,GAAG,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC;IACrB,mEAAmE;IACnE,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B;;;;OAIG;IACH,OAAO,CAAC,EAAE,SAAS,CAAC;CACrB;AAsBD,wBAAgB,kBAAkB,CAAC,EACjC,QAAQ,EACR,MAAM,EACN,aAAa,EACb,GAAU,EACV,WAAW,EACX,OAAO,GACR,EAAE,uBAAuB,+BAuEzB;AAED,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,aAAa,EAAE,KAAK,sBAAsB,EAAE,MAAM,qBAAqB,CAAC"}

package/dist/react/data/EngineDataProvider.js

@@ -1,109 +0,0 @@
-import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
-/**
- * `EngineDataProvider` (04 §5a) — the one place a generated app connects its
- * views to its own server.
- *
- * It carries exactly three things, and each is there because the alternative was
- * a per-app copy:
- *
- *   * the {@link EngineClient} every view fetches through;
- *   * the {@link WireHub} the instance stream publishes CDC frames onto, so
- *     {@link useEngineResource} can subscribe to a channel rather than poll;
- *   * the app-error sink — every failed request lands here, which is what turns
- *     the billing tier's 402 into a rendered upgrade path (04 §5f) instead of a
- *     console message.
- *
- * The provider also owns the TanStack `QueryClient`, because `usePagedList` (the
- * landed paging layer these hooks compose over) requires one and an app that
- * forgets it gets a runtime throw from inside a hook it never called directly.
- * Passing your own `queryClient` is supported; nesting is legal (the inner
- * provider wins) so an app that already has one is not forced to restructure.
- */
-import { QueryClient, QueryClientProvider } from '@tanstack/react-query';
-import { useCallback, useEffect, useMemo, useRef, useState } from 'react';
-import { isApiError } from '../../shared/errors';
-import { notifyUnauthorized } from '../authSignal';
-import { AppErrorOverlay } from './AppErrorOverlay';
-import { createEngineClient, } from './engineClient';
-import { EngineDataContext } from './engineDataContext';
-import { setWireErrorSink } from './wireEnvelope';
-/**
- * Route an injected client's failures into the app-error sink, honoring the same
- * `silent` opt-out the built-in client honors.
- */
-const withErrorSink = (inner, report) => ({
-    url: (path, query) => inner.url(path, query),
-    request: async (path, init) => {
-        try {
-            return await inner.request(path, init);
-        }
-        catch (error) {
-            if (isApiError(error) && init?.silent !== true)
-                report(error);
-            throw error;
-        }
-    },
-});
-/** Retry is off by default: a 402/401 answered three times is still a 402/401. */
-const defaultQueryClient = () => new QueryClient({ defaultOptions: { queries: { retry: false, refetchOnWindowFocus: false } } });
-export function EngineDataProvider({ children, client, clientOptions, hub = null, queryClient, overlay, }) {
-    const [error, setError] = useState(null);
-    const queries = useRef(null);
-    if (queries.current === null)
-        queries.current = queryClient ?? defaultQueryClient();
-    /**
-     * Every failed request lands here — which makes it the one place that can
-     * tell an app-wide "your session is gone" apart from an ordinary error.
-     *
-     * A 401 is NOT an overlay case (`AppErrorOverlay` deliberately passes it
-     * through — "left to the auth surface"), and until this line there WAS no
-     * auth surface: `notifyUnauthorized` had zero call sites repo-wide, so a
-     * signed-out visitor to a `privateMode` app watched every widget 401 and
-     * render empty, with no way to sign in. Raising the signal here is what
-     * makes `AuthGate` the promised fail-closed backstop.
-     *
-     * It fires in ADDITION to the sink, not instead of it: `silent` requests
-     * never reach this callback at all, so a caller handling a 401 inline is
-     * still untouched.
-     */
-    const reportError = useCallback((next) => {
-        if (next.status === 401)
-            notifyUnauthorized();
-        setError(next);
-    }, []);
-    const dismissError = useCallback(() => setError(null), []);
-    /**
-     * Built once. A client re-created per render would give every `usePagedList`
-     * a new `fetchPage` identity and defeat the query cache it exists to use.
-     *
-     * An INJECTED client is wrapped rather than used bare: the error sink is the
-     * provider's contract, and a host that supplies its own client (a different
-     * transport, a test double) must not silently lose the 402 renderer with it.
-     */
-    const built = useRef(null);
-    if (built.current === null)
-        built.current = client
-            ? withErrorSink(client, reportError)
-            : createEngineClient({ ...clientOptions, onError: reportError });
-    /**
-     * Route malformed-response reports somewhere a human will see them (01 §6).
-     *
-     * `wireEnvelope`'s docstring promised "the generated client wires this to the
-     * app-error surface" and nothing did — the sink was an exported function with
-     * no caller, so in a production bundle a wire-shape defect went to the default
-     * `console.error` and the claim was aspirational. This is the caller.
-     *
-     * It deliberately does NOT feed `reportError`. That surface is the 402/401
-     * overlay a CUSTOMER reads, and "the response has no `items` array" is a
-     * message for whoever ships the app: degrading exists precisely so the screen
-     * keeps working. The prefix is stable so a log drain can alert on it.
-     */
-    useEffect(() => {
-        setWireErrorSink((wireError) => console.error('CC_WIRE_SHAPE', wireError));
-        return () => setWireErrorSink(null);
-    }, []);
-    const value = useMemo(() => ({ client: built.current, hub, error, reportError, dismissError }), [hub, error, reportError, dismissError]);
-    return (_jsx(QueryClientProvider, { client: queries.current, children: _jsxs(EngineDataContext.Provider, { value: value, children: [overlay === undefined ? _jsx(AppErrorOverlay, {}) : overlay, children] }) }));
-}
-export { useAppError, useEngineClient, useEngineData } from './engineDataContext';
-//# sourceMappingURL=EngineDataProvider.js.map

package/dist/react/data/EngineDataProvider.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"EngineDataProvider.js","sourceRoot":"","sources":["../../../src/react/data/EngineDataProvider.tsx"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AACzE,OAAO,EAAkB,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAC;AAC1F,OAAO,EAAiB,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAEhE,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EACL,kBAAkB,GAInB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,iBAAiB,EAA+B,MAAM,qBAAqB,CAAC;AACrF,OAAO,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAmBlD;;;GAGG;AACH,MAAM,aAAa,GAAG,CAAC,KAAmB,EAAE,MAAiC,EAAgB,EAAE,CAAC,CAAC;IAC/F,GAAG,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC;IAC5C,OAAO,EAAE,KAAK,EAAM,IAAY,EAAE,IAAwB,EAAc,EAAE;QACxE,IAAI,CAAC;YACH,OAAO,MAAM,KAAK,CAAC,OAAO,CAAI,IAAI,EAAE,IAAI,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,MAAM,KAAK,IAAI;gBAAE,MAAM,CAAC,KAAK,CAAC,CAAC;YAC9D,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;CACF,CAAC,CAAC;AAEH,kFAAkF;AAClF,MAAM,kBAAkB,GAAG,GAAgB,EAAE,CAC3C,IAAI,WAAW,CAAC,EAAE,cAAc,EAAE,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;AAElG,MAAM,UAAU,kBAAkB,CAAC,EACjC,QAAQ,EACR,MAAM,EACN,aAAa,EACb,GAAG,GAAG,IAAI,EACV,WAAW,EACX,OAAO,GACiB;IACxB,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAkB,IAAI,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,MAAM,CAAqB,IAAI,CAAC,CAAC;IACjD,IAAI,OAAO,CAAC,OAAO,KAAK,IAAI;QAAE,OAAO,CAAC,OAAO,GAAG,WAAW,IAAI,kBAAkB,EAAE,CAAC;IAEpF;;;;;;;;;;;;;;OAcG;IACH,MAAM,WAAW,GAAG,WAAW,CAAC,CAAC,IAAc,EAAE,EAAE;QACjD,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG;YAAE,kBAAkB,EAAE,CAAC;QAC9C,QAAQ,CAAC,IAAI,CAAC,CAAC;IACjB,CAAC,EAAE,EAAE,CAAC,CAAC;IACP,MAAM,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;IAE3D;;;;;;;OAOG;IACH,MAAM,KAAK,GAAG,MAAM,CAAsB,IAAI,CAAC,CAAC;IAChD,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI;QACxB,KAAK,CAAC,OAAO,GAAG,MAAM;YACpB,CAAC,CAAC,aAAa,CAAC,MAAM,EAAE,WAAW,CAAC;YACpC,CAAC,CAAC,kBAAkB,CAAC,EAAE,GAAG,aAAa,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;IAErE;;;;;;;;;;;;OAYG;IACH,SAAS,CAAC,GAAG,EAAE;QACb,gBAAgB,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,eAAe,EAAE,SAAS,CAAC,CAAC,CAAC;QAC3E,OAAO,GAAG,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACtC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEP,MAAM,KAAK,GAAG,OAAO,CACnB,GAAG,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,OAAuB,EAAE,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC,EACxF,CAAC,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,YAAY,CAAC,CACxC,CAAC;IAEF,OAAO,CACL,KAAC,mBAAmB,IAAC,MAAM,EAAE,OAAO,CAAC,OAAO,YAC1C,MAAC,iBAAiB,CAAC,QAAQ,IAAC,KAAK,EAAE,KAAK,aACrC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,KAAC,eAAe,KAAG,CAAC,CAAC,CAAC,OAAO,EACrD,QAAQ,IACkB,GACT,CACvB,CAAC;AACJ,CAAC;AAED,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,aAAa,EAA+B,MAAM,qBAAqB,CAAC"}

package/dist/react/data/accountClient.d.ts

@@ -1,137 +0,0 @@
-/**
- * The client half of the GuardEngine account surface (02 §5) — every
- * `/api/guard/*` account verb as one typed module over {@link EngineClient}.
- *
- * It exists because the wire format of these routes is deliberately unusual, and
- * "unusual, re-derived per call site" is how a credential ends up in a log:
- *
- *   * **The password IS the request body, as bytes.** The server reads it off
- *     the stream and zeroizes it (01 §3.4); `JSON.stringify` would materialise a
- *     second, immutable, unwipeable copy on the way out. So every password verb
- *     here posts a `rawBody`, and the email — not a secret — rides the query.
- *   * **A change-password body is length-framed** (2-byte big-endian current
- *     length, then current, then next), because two passwords have to arrive in
- *     one body that never becomes a string.
- *   * **An invitation token rides `x-cc-invitation`**, never the query string: a
- *     query string lands in access logs, proxy logs and `Referer`, and a logged
- *     invite is a free membership in someone else's tenant.
- *
- * The honest limitation, stated rather than hidden: in a browser the password
- * arrives from a form as a JS **string**, which cannot be zeroized. This module
- * converts it to bytes at the earliest possible point and keeps no copy — that
- * is the whole of what a client can do, and it is why the SERVER is where the
- * custody law is actually enforced.
- */
-import type { CCRole, CCUserClaims } from '../../core/session/claims';
-import type { EngineClient } from './engineClient';
-/** A member row as the members panel renders it (mirrors the server `MemberView`). */
-export interface AccountMember {
-    tenantId: string;
-    userId: string;
-    email?: string;
-    role: CCRole;
-    /** The explicit per-membership grants — what an admin edits. */
-    grants: readonly string[];
-    /** `role` ∪ `grants` — what a session minted for this member would carry. */
-    permissions: readonly string[];
-    status: string;
-}
-/** A live session of the calling account ("your devices"). Carries no token. */
-export interface AccountSession {
-    jti: string;
-    tenantId: string;
-    deviceLabel?: string;
-    issuedAt: string;
-    expiresAt: string;
-    current: boolean;
-}
-export interface AccountTenant {
-    tenantId: string;
-    title: string;
-    status: 'active' | 'suspended' | 'deleted';
-    planId: string;
-}
-/** The single-use invite secret, returned to the inviting admin exactly once. */
-export interface AccountInvitation {
-    tenantId: string;
-    email: string;
-    role: CCRole;
-    expiresAt: string;
-    token: string;
-}
-export interface AccountIdentity {
-    userId: string;
-    email?: string;
-    tenantId: string;
-    role: CCRole;
-}
-/** A minted session — the token the client presents from here on. */
-export interface MintedSession {
-    token: string;
-    claims: CCUserClaims;
-}
-export interface SignupInput {
-    email: string;
-    password: string;
-    /** saas: the new tenant's title. Ignored on an invited signup (the inviter decided). */
-    tenantTitle?: string;
-    /** An invitation token — makes this signup JOIN the inviting tenant. */
-    inviteToken?: string;
-}
-export interface LoginInput {
-    email: string;
-    password: string;
-    /** What this device calls itself, for the sessions panel (02 §4). */
-    deviceLabel?: string;
-}
-/**
- * Frame `current` + `next` the way `readFramedPasswords` on the server expects:
- * a 2-byte big-endian length of `current` (0 ⇒ omitted, an admin reset), the
- * current password, then the new one as the remainder.
- */
-export declare const framePasswordChange: (next: string, current?: string) => Uint8Array<ArrayBuffer>;
-/**
- * The account API, bound to one {@link EngineClient}. Built per client (cheap,
- * stateless) so a caller never re-derives a route string or a body format.
- */
-export interface AccountClient {
-    signup(input: SignupInput): Promise<AccountIdentity>;
-    login(input: LoginInput): Promise<MintedSession>;
-    /** Self-change (send `current`) or an ADMIN/OWNER reset of another account. */
-    changePassword(userId: string, next: string, current?: string): Promise<void>;
-    listSessions(): Promise<readonly AccountSession[]>;
-    /** Exchange the presented token for a fresh one; the old jti dies server-side. */
-    refresh(): Promise<MintedSession>;
-    /** End ONE of the caller's own sessions. */
-    endSession(jti: string): Promise<boolean>;
-    /** End this device's session. */
-    logout(): Promise<void>;
-    /** End every session of this account, including this one. */
-    logoutEverywhere(): Promise<{
-        revoked: number;
-    }>;
-    getTenant(tenantId: string): Promise<AccountTenant>;
-    updateTenant(tenantId: string, patch: {
-        title?: string;
-        status?: AccountTenant['status'];
-    }): Promise<AccountTenant>;
-    /** Assign a tenant's plan (P2). Platform-tenant callers only — the server
-     *  refuses everyone else (`PLAN_PLATFORM_ONLY`). */
-    setTenantPlan(tenantId: string, planId: string): Promise<AccountTenant>;
-    listMembers(tenantId: string): Promise<readonly AccountMember[]>;
-    inviteMember(tenantId: string, input: {
-        email: string;
-        role: CCRole;
-        ttlMinutes?: number;
-    }): Promise<AccountInvitation>;
-    /** Spend an invitation as the CURRENT account (its email must match). */
-    acceptInvitation(token: string): Promise<AccountMember>;
-    updateMember(tenantId: string, userId: string, patch: {
-        role?: CCRole;
-        grants?: readonly string[];
-        status?: string;
-    }): Promise<AccountMember>;
-    removeMember(tenantId: string, userId: string): Promise<boolean>;
-}
-export declare function createAccountClient(client: EngineClient): AccountClient;
-//# sourceMappingURL=accountClient.d.ts.map

package/dist/react/data/accountClient.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"accountClient.d.ts","sourceRoot":"","sources":["../../../src/react/data/accountClient.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AACtE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAEnD,sFAAsF;AACtF,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;IACb,gEAAgE;IAChE,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1B,6EAA6E;IAC7E,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/B,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,gFAAgF;AAChF,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,QAAQ,GAAG,WAAW,GAAG,SAAS,CAAC;IAC3C,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,iFAAiF;AACjF,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,qEAAqE;AACrE,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,YAAY,CAAC;CACtB;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,wFAAwF;IACxF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,wEAAwE;IACxE,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,UAAU;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,qEAAqE;IACrE,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAOD;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,GAAI,MAAM,MAAM,EAAE,UAAU,MAAM,KAAG,UAAU,CAAC,WAAW,CAS1F,CAAC;AAEF;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;IACrD,KAAK,CAAC,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACjD,+EAA+E;IAC/E,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAG9E,YAAY,IAAI,OAAO,CAAC,SAAS,cAAc,EAAE,CAAC,CAAC;IACnD,kFAAkF;IAClF,OAAO,IAAI,OAAO,CAAC,aAAa,CAAC,CAAC;IAClC,4CAA4C;IAC5C,UAAU,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC1C,iCAAiC;IACjC,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACxB,6DAA6D;IAC7D,gBAAgB,IAAI,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAGjD,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACpD,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,aAAa,CAAC,QAAQ,CAAC,CAAA;KAAE,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACpH;wDACoD;IACpD,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACxE,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,aAAa,EAAE,CAAC,CAAC;IACjE,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACxH,yEAAyE;IACzE,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACxD,YAAY,CACV,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,KAAK,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GACpE,OAAO,CAAC,aAAa,CAAC,CAAC;IAC1B,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAClE;AAID,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,YAAY,GAAG,aAAa,CA+GvE"}

package/dist/react/data/accountClient.js

@@ -1,109 +0,0 @@
-const encoder = new TextEncoder();
-/** Password string → owned bytes. The one place a credential crosses that line. */
-const passwordBytes = (password) => encoder.encode(password);
-/**
- * Frame `current` + `next` the way `readFramedPasswords` on the server expects:
- * a 2-byte big-endian length of `current` (0 ⇒ omitted, an admin reset), the
- * current password, then the new one as the remainder.
- */
-export const framePasswordChange = (next, current) => {
-    const currentBytes = current === undefined ? new Uint8Array(0) : passwordBytes(current);
-    const nextBytes = passwordBytes(next);
-    const framed = new Uint8Array(2 + currentBytes.byteLength + nextBytes.byteLength);
-    framed[0] = (currentBytes.byteLength >> 8) & 0xff;
-    framed[1] = currentBytes.byteLength & 0xff;
-    framed.set(currentBytes, 2);
-    framed.set(nextBytes, 2 + currentBytes.byteLength);
-    return framed;
-};
-const tenantPath = (tenantId) => `/api/guard/tenants/${encodeURIComponent(tenantId)}`;
-export function createAccountClient(client) {
-    return {
-        async signup(input) {
-            const body = await client.request('/api/guard/accounts', {
-                method: 'POST',
-                query: { email: input.email, tenantTitle: input.tenantTitle },
-                // A bearer secret in a header, never in the query (see the module note).
-                ...(input.inviteToken ? { headers: { 'x-cc-invitation': input.inviteToken } } : {}),
-                rawBody: passwordBytes(input.password),
-            });
-            return body.account;
-        },
-        async login(input) {
-            const body = await client.request('/api/guard/login', {
-                method: 'POST',
-                query: { email: input.email },
-                ...(input.deviceLabel ? { headers: { 'x-cc-device': input.deviceLabel } } : {}),
-                rawBody: passwordBytes(input.password),
-            });
-            return body.session;
-        },
-        async changePassword(userId, next, current) {
-            await client.request(`/api/guard/accounts/${encodeURIComponent(userId)}/password`, {
-                method: 'POST',
-                rawBody: framePasswordChange(next, current),
-            });
-        },
-        async listSessions() {
-            const body = await client.request('/api/guard/sessions');
-            return body.sessions ?? [];
-        },
-        async refresh() {
-            const body = await client.request('/api/guard/session/refresh', { method: 'POST' });
-            return body.session;
-        },
-        async endSession(jti) {
-            const body = await client.request(`/api/guard/sessions/${encodeURIComponent(jti)}`, {
-                method: 'DELETE',
-            });
-            return body.ended === true;
-        },
-        async logout() {
-            await client.request('/api/guard/logout', { method: 'POST' });
-        },
-        async logoutEverywhere() {
-            const body = await client.request('/api/guard/logout-all', { method: 'POST' });
-            return { revoked: body.revoked ?? 0 };
-        },
-        async getTenant(tenantId) {
-            return (await client.request(tenantPath(tenantId))).tenant;
-        },
-        async updateTenant(tenantId, patch) {
-            return (await client.request(tenantPath(tenantId), { method: 'PATCH', body: patch }))
-                .tenant;
-        },
-        async setTenantPlan(tenantId, planId) {
-            return (await client.request(`${tenantPath(tenantId)}/plan`, {
-                method: 'PUT',
-                body: { planId },
-            })).tenant;
-        },
-        async listMembers(tenantId) {
-            const body = await client.request(`${tenantPath(tenantId)}/members`);
-            return body.members ?? [];
-        },
-        async inviteMember(tenantId, input) {
-            const body = await client.request(`${tenantPath(tenantId)}/invitations`, {
-                method: 'POST',
-                body: input,
-            });
-            return body.invitation;
-        },
-        async acceptInvitation(token) {
-            const body = await client.request('/api/guard/invitations/accept', {
-                method: 'POST',
-                body: { token },
-            });
-            return body.member;
-        },
-        async updateMember(tenantId, userId, patch) {
-            const body = await client.request(`${tenantPath(tenantId)}/members/${encodeURIComponent(userId)}`, { method: 'PATCH', body: patch });
-            return body.member;
-        },
-        async removeMember(tenantId, userId) {
-            const body = await client.request(`${tenantPath(tenantId)}/members/${encodeURIComponent(userId)}`, { method: 'DELETE' });
-            return body.removed === true;
-        },
-    };
-}
-//# sourceMappingURL=accountClient.js.map

package/dist/react/data/accountClient.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"accountClient.js","sourceRoot":"","sources":["../../../src/react/data/accountClient.ts"],"names":[],"mappings":"AA+FA,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAElC,mFAAmF;AACnF,MAAM,aAAa,GAAG,CAAC,QAAgB,EAA2B,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AAE9F;;;;GAIG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,IAAY,EAAE,OAAgB,EAA2B,EAAE;IAC7F,MAAM,YAAY,GAAG,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IACxF,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,CAAC,GAAG,YAAY,CAAC,UAAU,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;IAClF,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,UAAU,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;IAClD,MAAM,CAAC,CAAC,CAAC,GAAG,YAAY,CAAC,UAAU,GAAG,IAAI,CAAC;IAC3C,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;IAC5B,MAAM,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,GAAG,YAAY,CAAC,UAAU,CAAC,CAAC;IACnD,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAyCF,MAAM,UAAU,GAAG,CAAC,QAAgB,EAAU,EAAE,CAAC,sBAAsB,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;AAEtG,MAAM,UAAU,mBAAmB,CAAC,MAAoB;IACtD,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,KAAK;YAChB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,CAA+B,qBAAqB,EAAE;gBACrF,MAAM,EAAE,MAAM;gBACd,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE;gBAC7D,yEAAyE;gBACzE,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,iBAAiB,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACnF,OAAO,EAAE,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC;aACvC,CAAC,CAAC;YACH,OAAO,IAAI,CAAC,OAAO,CAAC;QACtB,CAAC;QAED,KAAK,CAAC,KAAK,CAAC,KAAK;YACf,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,CAA6B,kBAAkB,EAAE;gBAChF,MAAM,EAAE,MAAM;gBACd,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE;gBAC7B,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC/E,OAAO,EAAE,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC;aACvC,CAAC,CAAC;YACH,OAAO,IAAI,CAAC,OAAO,CAAC;QACtB,CAAC;QAED,KAAK,CAAC,cAAc,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO;YACxC,MAAM,MAAM,CAAC,OAAO,CAAC,uBAAuB,kBAAkB,CAAC,MAAM,CAAC,WAAW,EAAE;gBACjF,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,mBAAmB,CAAC,IAAI,EAAE,OAAO,CAAC;aAC5C,CAAC,CAAC;QACL,CAAC;QAED,KAAK,CAAC,YAAY;YAChB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,CAA0C,qBAAqB,CAAC,CAAC;YAClG,OAAO,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC;QAC7B,CAAC;QAED,KAAK,CAAC,OAAO;YACX,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,CAA6B,4BAA4B,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;YAChH,OAAO,IAAI,CAAC,OAAO,CAAC;QACtB,CAAC;QAED,KAAK,CAAC,UAAU,CAAC,GAAG;YAClB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,CAAqB,uBAAuB,kBAAkB,CAAC,GAAG,CAAC,EAAE,EAAE;gBACtG,MAAM,EAAE,QAAQ;aACjB,CAAC,CAAC;YACH,OAAO,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC;QAC7B,CAAC;QAED,KAAK,CAAC,MAAM;YACV,MAAM,MAAM,CAAC,OAAO,CAAC,mBAAmB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAChE,CAAC;QAED,KAAK,CAAC,gBAAgB;YACpB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,CAAsB,uBAAuB,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;YACpG,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,CAAC,EAAE,CAAC;QACxC,CAAC;QAED,KAAK,CAAC,SAAS,CAAC,QAAQ;YACtB,OAAO,CAAC,MAAM,MAAM,CAAC,OAAO,CAA4B,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QACxF,CAAC;QAED,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,KAAK;YAChC,OAAO,CAAC,MAAM,MAAM,CAAC,OAAO,CAA4B,UAAU,CAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;iBAC7G,MAAM,CAAC;QACZ,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,QAAQ,EAAE,MAAM;YAClC,OAAO,CACL,MAAM,MAAM,CAAC,OAAO,CAA4B,GAAG,UAAU,CAAC,QAAQ,CAAC,OAAO,EAAE;gBAC9E,MAAM,EAAE,KAAK;gBACb,IAAI,EAAE,EAAE,MAAM,EAAE;aACjB,CAAC,CACH,CAAC,MAAM,CAAC;QACX,CAAC;QAED,KAAK,CAAC,WAAW,CAAC,QAAQ;YACxB,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,CAAwC,GAAG,UAAU,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;YAC5G,OAAO,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;QAC5B,CAAC;QAED,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,KAAK;YAChC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,CAAoC,GAAG,UAAU,CAAC,QAAQ,CAAC,cAAc,EAAE;gBAC1G,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,KAAK;aACZ,CAAC,CAAC;YACH,OAAO,IAAI,CAAC,UAAU,CAAC;QACzB,CAAC;QAED,KAAK,CAAC,gBAAgB,CAAC,KAAK;YAC1B,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,CAA4B,+BAA+B,EAAE;gBAC5F,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,EAAE,KAAK,EAAE;aAChB,CAAC,CAAC;YACH,OAAO,IAAI,CAAC,MAAM,CAAC;QACrB,CAAC;QAED,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK;YACxC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,CAC/B,GAAG,UAAU,CAAC,QAAQ,CAAC,YAAY,kBAAkB,CAAC,MAAM,CAAC,EAAE,EAC/D,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CACjC,CAAC;YACF,OAAO,IAAI,CAAC,MAAM,CAAC;QACrB,CAAC;QAED,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,MAAM;YACjC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,OAAO,CAC/B,GAAG,UAAU,CAAC,QAAQ,CAAC,YAAY,kBAAkB,CAAC,MAAM,CAAC,EAAE,EAC/D,EAAE,MAAM,EAAE,QAAQ,EAAE,CACrB,CAAC;YACF,OAAO,IAAI,CAAC,OAAO,KAAK,IAAI,CAAC;QAC/B,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/react/data/categoryTree.d.ts

@@ -1,17 +0,0 @@
-import type { ReactNode } from 'react';
-import { type Category, type CategoryNode } from '../../core/category';
-import type { TreeNode } from '../components/TreeView';
-/** Per-node presentation overrides when adapting a category forest to
- * {@link TreeView} nodes. Defaults render the category's own `label` and no
- * icon; pass `icon`/`label` (e.g. to append a note count) to customize. */
-export interface CategoryTreeOptions {
-    icon?: (node: CategoryNode) => ReactNode;
-    label?: (node: CategoryNode) => ReactNode;
-    disabled?: (node: CategoryNode) => boolean;
-}
-/** Adapt an already-built category forest into cursedbelt {@link TreeNode}s. */
-export declare function categoryForestToTreeNodes(forest: CategoryNode[], opts?: CategoryTreeOptions): TreeNode[];
-/** Convenience: build the forest from a flat category list and adapt it to
- * {@link TreeView} nodes in one call. */
-export declare function categoriesToTreeNodes(cats: Category[], opts?: CategoryTreeOptions): TreeNode[];
-//# sourceMappingURL=categoryTree.d.ts.map

package/dist/react/data/categoryTree.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"categoryTree.d.ts","sourceRoot":"","sources":["../../../src/react/data/categoryTree.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AACvC,OAAO,EAAuB,KAAK,QAAQ,EAAE,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAC5F,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAEvD;;2EAE2E;AAC3E,MAAM,WAAW,mBAAmB;IAClC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,YAAY,KAAK,SAAS,CAAC;IACzC,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,YAAY,KAAK,SAAS,CAAC;IAC1C,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,YAAY,KAAK,OAAO,CAAC;CAC5C;AAED,gFAAgF;AAChF,wBAAgB,yBAAyB,CACvC,MAAM,EAAE,YAAY,EAAE,EACtB,IAAI,GAAE,mBAAwB,GAC7B,QAAQ,EAAE,CAQZ;AAED;yCACyC;AACzC,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,IAAI,CAAC,EAAE,mBAAmB,GAAG,QAAQ,EAAE,CAE9F"}

package/dist/react/data/categoryTree.js

@@ -1,17 +0,0 @@
-import { buildCategoryForest } from '../../core/category';
-/** Adapt an already-built category forest into cursedbelt {@link TreeNode}s. */
-export function categoryForestToTreeNodes(forest, opts = {}) {
-    return forest.map((node) => ({
-        id: node.id,
-        label: opts.label ? opts.label(node) : node.label,
-        icon: opts.icon?.(node),
-        disabled: opts.disabled?.(node),
-        children: node.children.length ? categoryForestToTreeNodes(node.children, opts) : undefined,
-    }));
-}
-/** Convenience: build the forest from a flat category list and adapt it to
- * {@link TreeView} nodes in one call. */
-export function categoriesToTreeNodes(cats, opts) {
-    return categoryForestToTreeNodes(buildCategoryForest(cats), opts);
-}
-//# sourceMappingURL=categoryTree.js.map

package/dist/react/data/categoryTree.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"categoryTree.js","sourceRoot":"","sources":["../../../src/react/data/categoryTree.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAoC,MAAM,qBAAqB,CAAC;AAY5F,gFAAgF;AAChF,MAAM,UAAU,yBAAyB,CACvC,MAAsB,EACtB,OAA4B,EAAE;IAE9B,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QAC3B,EAAE,EAAE,IAAI,CAAC,EAAE;QACX,KAAK,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK;QACjD,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC;QACvB,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC;QAC/B,QAAQ,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,yBAAyB,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS;KAC5F,CAAC,CAAC,CAAC;AACN,CAAC;AAED;yCACyC;AACzC,MAAM,UAAU,qBAAqB,CAAC,IAAgB,EAAE,IAA0B;IAChF,OAAO,yBAAyB,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;AACpE,CAAC"}

package/dist/react/data/engineClient.d.ts

@@ -1,77 +0,0 @@
-/**
- * `EngineClient` (04 §5a) — the ONE way a generated client talks to its own
- * engine API.
- *
- * Everything on the wire is already decided by the server tier: mixin routes
- * answer `{ success: true, … }` and every failure funnels through the canonical
- * envelope (`{ error: { name, message, code?, status?, context? } }`,
- * `middleware/errorEnvelope.ts`). What did not exist was the client half — so
- * each app would have re-derived "read the envelope, branch on `error.code`",
- * and the 402 the billing tier throws would have been a raw fetch rejection in
- * five different shapes.
- *
- * Three rules the shape encodes:
- *
- * 1. **The failure is an {@link ApiError}, always** — rebuilt from the envelope
- *    with its `code`/`status`/`context` intact, so `USAGE_LIMIT_EXCEEDED` is a
- *    value the upgrade dialog can render rather than a string to match.
- * 2. **The client never invents a base URL.** Same-origin relative paths are the
- *    default (the app is served BY the runtime that owns the API — 02 §1.3), and
- *    a host that puts the API elsewhere passes `baseUrl` explicitly. A library
- *    that reads `window.location` to guess would be wrong exactly when it
- *    matters.
- * 3. **Credentials ride the cookie by default.** The generated app's session
- *    cookie is HttpOnly, so `credentials: 'include'` is the working path and a
- *    `token()` provider is the opt-in for a Bearer deployment. There is no
- *    "read the cookie in JS" path here — that one is unreadable by design.
- */
-import { ApiError } from '../../shared/errors';
-export interface EngineClientOptions {
-    /** Absolute API origin. Omit for same-origin (the generated app's own server). */
-    baseUrl?: string;
-    /** Bearer token provider, for deployments that do not use the session cookie. */
-    token?: () => string | null | undefined;
-    /** Cookie mode. Default `same-origin`; the generated app's session is a cookie. */
-    credentials?: RequestCredentials;
-    /** Injected for tests and for a host with its own instrumented fetch. */
-    fetchImpl?: typeof fetch;
-    /**
-     * Called with every failure before it is thrown. The provider wires this to
-     * the app-error overlay (04 §5f) so a 402 renders as an upgrade path rather
-     * than as an unhandled rejection nobody sees.
-     */
-    onError?: (error: ApiError) => void;
-}
-export interface EngineRequestInit {
-    method?: string;
-    /** Query parameters; `undefined` values are dropped rather than sent as "undefined". */
-    query?: Readonly<Record<string, string | number | boolean | undefined>>;
-    /** JSON body. Serialized here so no call site re-derives the content type. */
-    body?: unknown;
-    /**
-     * A body sent AS IS, with no JSON serialization and no content type.
-     *
-     * Exists for exactly one route: `/api/guard/unlock`, whose wire format is
-     * "the body IS the passphrase" (`guardService.ts` reads it as bytes and
-     * zeroizes them — `JSON.stringify` would materialise the passphrase as a
-     * second, immutable, unzeroizable string on the way out).
-     */
-    rawBody?: BodyInit;
-    signal?: AbortSignal;
-    headers?: Readonly<Record<string, string>>;
-    /**
-     * Keep this request's failure OUT of the app-error sink — the caller handles it
-     * inline. For background enrichment only (the upgrade dialog's own plan
-     * lookup): a failed enrichment must never replace the error that opened the
-     * surface it is enriching.
-     */
-    silent?: boolean;
-}
-export interface EngineClient {
-    /** Perform a request and return the parsed body (already envelope-checked). */
-    request<T>(path: string, init?: EngineRequestInit): Promise<T>;
-    /** The absolute/relative URL a path resolves to — used for media URLs and links. */
-    url(path: string, query?: EngineRequestInit['query']): string;
-}
-export declare function createEngineClient(options?: EngineClientOptions): EngineClient;
-//# sourceMappingURL=engineClient.d.ts.map