cursedbelt 2.7.0 → 3.0.0

package/dist/server/activity/store.d.ts

@@ -1,124 +0,0 @@
-/**
- * The activity store: one append-only table, plus any number of read-only
- * SOURCES projected into the same shape, queried as one stream.
- *
- * ── How an app uses it ──────────────────────────────────────────────────────
- * ```ts
- * const activity = createActivityLog({
- *   db,
- *   app: "family",
- *   // The sharing primitive already audits itself. Read those rows where they
- *   // are instead of copying them — see `shareEventsSource`.
- *   sources: [shareEventsSource()],
- * });
- *
- * activity.record({ actor: viewer.email, action: "person.delete",
- *                   resource: { kind: "person", id }, note: "duplicate" });
- *
- * activity.query({ since, actor, action: "share.", limit: 100 });
- * ```
- *
- * ── 🔴 Four properties this file exists to guarantee ────────────────────────
- *  1. **Append only.** No update verb, no delete verb, no `TRUNCATE`. Ageing
- *     rows out is the fleet retention standard's job, through a declaration the
- *     owner can see (`satellite-kit/retention`) — never a silent cutoff here.
- *  2. **A source is READ, never copied.** `share_events` stays the canonical
- *     sharing trail; this store selects from it. Two tables holding the same
- *     audit rows is two tables that will one day disagree, and the one people
- *     would trust is whichever the screen happened to read.
- *  3. **A missing source table is an empty source, not a 500.** An app may
- *     register `shareEventsSource()` before it has ever created a grant, and a
- *     dashboard must not die on the app that has done nothing yet. (The same
- *     lesson `orch`'s `plainjob_jobs` retention target learned at boot.)
- *  4. **`action` is validated at the write.** An action vocabulary that drifts
- *     cannot be filtered, and filtering is the whole point of the column.
- */
-import type { Database, SQLQueryBindings } from "bun:sqlite";
-import { type ActivityEvent, type ActivityEventInput, type ActivityOutcome } from "../../core/activity/model";
-/**
- * A read-only stream contributor: a SELECT projecting some other table into the
- * union's eleven columns, in this order and with these names —
- *
- *   `source, seq, at, app, actor, action, kind, resource_id, outcome, note, data`
- *
- * `seq` is that table's own row id: it breaks ties within one `at`, and it is
- * what makes the event id (`"<source>:<seq>"`) stable and unique across sources.
- */
-export interface ActivitySource {
-    /** Short, stable, unique within the log — it prefixes every id it produces. */
-    name: string;
-    /** The projection. See the column contract above. */
-    sql: string;
-    /** Bound in order, before any filter parameter. */
-    params?: readonly SQLQueryBindings[];
-    /**
-     * A table this projection needs. When it does not exist the source is skipped
-     * for that call rather than throwing — see property 3 in the header.
-     */
-    requiresTable?: string;
-}
-/** Everything the stream can be narrowed by. Every field is optional; the empty
- *  query is "the newest `limit` events". */
-export interface ActivityQuery {
-    /** ISO-8601, inclusive. */
-    since?: string;
-    /** ISO-8601, inclusive. */
-    until?: string;
-    /** Case-insensitive exact match on the account. */
-    actor?: string;
-    /** Exact, or a PREFIX when it ends in a dot: `"share."` matches `share.grant`. */
-    action?: string;
-    kind?: string;
-    resourceId?: string;
-    outcome?: ActivityOutcome;
-    /** Restrict to one contributor (`"log"`, `"share"`). */
-    source?: string;
-    /** Substring, over actor + action + note + resource id. */
-    q?: string;
-    /** Default 100, hard cap 1000. */
-    limit?: number;
-}
-export interface ActivityPage {
-    events: ActivityEvent[];
-    /** The limit actually applied, after defaulting and capping. */
-    limit: number;
-    /** There is at least one more row older than the last one returned. */
-    truncated: boolean;
-}
-/** One dimension of "what is in this result", for the filter UI. */
-export interface ActivityFacet {
-    value: string;
-    count: number;
-}
-export interface ActivityFacets {
-    actions: ActivityFacet[];
-    actors: ActivityFacet[];
-    kinds: ActivityFacet[];
-}
-export interface ActivityLogOptions {
-    db: Database;
-    /** The satellite this log speaks for. Fixed at construction, so a caller
-     *  cannot write an event under another app's name. */
-    app: string;
-    /** Read-only contributors merged into the stream. */
-    sources?: readonly ActivitySource[];
-    /** Injectable clock, ISO-8601. */
-    now?: () => string;
-}
-export interface ActivityLog {
-    /** The app this log speaks for. */
-    readonly app: string;
-    /** Append one event. Returns it as it will be read back. */
-    record(input: ActivityEventInput): ActivityEvent;
-    /** Newest first, bounded. */
-    query(query?: ActivityQuery): ActivityPage;
-    /** How many events match — the unbounded count behind a bounded page. */
-    count(query?: ActivityQuery): number;
-    /** What is in the result, per dimension, for a filter UI. */
-    facets(query?: ActivityQuery, limit?: number): ActivityFacets;
-    /** Which contributors are live right now (a source whose table is missing is
-     *  absent, which is what the read surface reports). */
-    sources(): string[];
-}
-export declare function createActivityLog(options: ActivityLogOptions): ActivityLog;
-//# sourceMappingURL=store.d.ts.map

package/dist/server/activity/store.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../../src/server/activity/store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AACH,OAAO,KAAK,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AAC7D,OAAO,EACN,KAAK,aAAa,EAClB,KAAK,kBAAkB,EACvB,KAAK,eAAe,EAGpB,MAAM,2BAA2B,CAAC;AAInC;;;;;;;;GAQG;AACH,MAAM,WAAW,cAAc;IAC9B,+EAA+E;IAC/E,IAAI,EAAE,MAAM,CAAC;IACb,qDAAqD;IACrD,GAAG,EAAE,MAAM,CAAC;IACZ,mDAAmD;IACnD,MAAM,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;IACrC;;;OAGG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;4CAC4C;AAC5C,MAAM,WAAW,aAAa;IAC7B,2BAA2B;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,2BAA2B;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,mDAAmD;IACnD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kFAAkF;IAClF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,eAAe,CAAC;IAC1B,wDAAwD;IACxD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,2DAA2D;IAC3D,CAAC,CAAC,EAAE,MAAM,CAAC;IACX,kCAAkC;IAClC,KAAK,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,YAAY;IAC5B,MAAM,EAAE,aAAa,EAAE,CAAC;IACxB,gEAAgE;IAChE,KAAK,EAAE,MAAM,CAAC;IACd,uEAAuE;IACvE,SAAS,EAAE,OAAO,CAAC;CACnB;AAED,oEAAoE;AACpE,MAAM,WAAW,aAAa;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,cAAc;IAC9B,OAAO,EAAE,aAAa,EAAE,CAAC;IACzB,MAAM,EAAE,aAAa,EAAE,CAAC;IACxB,KAAK,EAAE,aAAa,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,kBAAkB;IAClC,EAAE,EAAE,QAAQ,CAAC;IACb;0DACsD;IACtD,GAAG,EAAE,MAAM,CAAC;IACZ,qDAAqD;IACrD,OAAO,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IACpC,kCAAkC;IAClC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,WAAW;IAC3B,mCAAmC;IACnC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,4DAA4D;IAC5D,MAAM,CAAC,KAAK,EAAE,kBAAkB,GAAG,aAAa,CAAC;IACjD,6BAA6B;IAC7B,KAAK,CAAC,KAAK,CAAC,EAAE,aAAa,GAAG,YAAY,CAAC;IAC3C,yEAAyE;IACzE,KAAK,CAAC,KAAK,CAAC,EAAE,aAAa,GAAG,MAAM,CAAC;IACrC,6DAA6D;IAC7D,MAAM,CAAC,KAAK,CAAC,EAAE,aAAa,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,cAAc,CAAC;IAC9D;2DACuD;IACvD,OAAO,IAAI,MAAM,EAAE,CAAC;CACpB;AAuDD,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,kBAAkB,GAAG,WAAW,CAgL1E"}

package/dist/server/activity/store.js

@@ -1,179 +0,0 @@
-import { isActivityAction, isActivityOutcome, } from "../../core/activity/model";
-import { runMigrations } from "../migration/runner";
-import { ACTIVITY_EVENTS_TABLE, ACTIVITY_MIGRATIONS } from "./migrations";
-const DEFAULT_LIMIT = 100;
-const MAX_LIMIT = 1000;
-const MAX_FACET = 25;
-/** `%` and `_` are wildcards and `\` is the escape — a note containing any of
- *  them must still search literally. */
-const likeContains = (value) => `%${value.replace(/[\\%_]/g, (ch) => `\\${ch}`)}%`;
-const toEvent = (row) => ({
-    id: `${row.source}:${row.seq}`,
-    source: row.source,
-    at: row.at,
-    app: row.app,
-    actor: row.actor,
-    action: row.action,
-    resource: row.kind === null || row.resource_id === null
-        ? null
-        : { app: row.app, kind: row.kind, id: row.resource_id },
-    outcome: isActivityOutcome(row.outcome) ? row.outcome : "ok",
-    note: row.note ?? "",
-    data: parseData(row.data),
-});
-/** A row whose `data` is unreadable must not take the page down with it — the
- *  event still says who did what, which is the part that matters. */
-function parseData(raw) {
-    if (!raw)
-        return null;
-    try {
-        const parsed = JSON.parse(raw);
-        return parsed && typeof parsed === "object" && !Array.isArray(parsed)
-            ? parsed
-            : { value: parsed };
-    }
-    catch {
-        return { unparsed: raw };
-    }
-}
-export function createActivityLog(options) {
-    const { db, app } = options;
-    const now = options.now ?? (() => new Date().toISOString());
-    const registered = options.sources ?? [];
-    runMigrations(db, ACTIVITY_MIGRATIONS);
-    const insert = db.query(`INSERT INTO ${ACTIVITY_EVENTS_TABLE}
-		   (at, app, actor, action, kind, resource_id, outcome, note, data)
-		 VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`);
-    const tableExists = (name) => !!db
-        .query("SELECT 1 AS ok FROM sqlite_master WHERE type = 'table' AND name = ?")
-        .get(name);
-    /** The contributors that can actually answer right now. */
-    const liveSources = () => registered.filter((source) => !source.requiresTable || tableExists(source.requiresTable));
-    const OWN_SELECT = `SELECT 'log' AS source, event_id AS seq, at, app, actor, action,
-	                           kind, resource_id, outcome, note, data
-	                      FROM ${ACTIVITY_EVENTS_TABLE}`;
-    /** The union, plus the WHERE the caller asked for, plus their parameters in
-     *  bind order (sources first — they are inside the FROM). */
-    const stream = (query) => {
-        const params = [];
-        const selects = [OWN_SELECT];
-        for (const source of liveSources()) {
-            if (query.source && query.source !== source.name)
-                continue;
-            selects.push(source.sql);
-            params.push(...(source.params ?? []));
-        }
-        const where = [];
-        if (query.source) {
-            where.push("source = ?");
-            params.push(query.source);
-        }
-        if (query.since) {
-            where.push("at >= ?");
-            params.push(query.since);
-        }
-        if (query.until) {
-            where.push("at <= ?");
-            params.push(query.until);
-        }
-        if (query.actor) {
-            where.push("LOWER(actor) = LOWER(?)");
-            params.push(query.actor);
-        }
-        if (query.action) {
-            if (query.action.endsWith(".")) {
-                where.push("action LIKE ? ESCAPE '\\'");
-                params.push(`${query.action.replace(/[\\%_]/g, (ch) => `\\${ch}`)}%`);
-            }
-            else {
-                where.push("action = ?");
-                params.push(query.action);
-            }
-        }
-        if (query.kind) {
-            where.push("kind = ?");
-            params.push(query.kind);
-        }
-        if (query.resourceId) {
-            where.push("resource_id = ?");
-            params.push(query.resourceId);
-        }
-        if (query.outcome) {
-            where.push("outcome = ?");
-            params.push(query.outcome);
-        }
-        if (query.q) {
-            where.push("(actor LIKE ? ESCAPE '\\' OR action LIKE ? ESCAPE '\\' OR note LIKE ? ESCAPE '\\' OR IFNULL(resource_id, '') LIKE ? ESCAPE '\\')");
-            const like = likeContains(query.q);
-            params.push(like, like, like, like);
-        }
-        // `query.source` naming a contributor that is not live leaves only the own
-        // select, filtered to a source it cannot be — an empty result, which is the
-        // honest answer rather than every row.
-        const sql = `SELECT * FROM (${selects.join("\n UNION ALL\n")}) AS stream${where.length ? ` WHERE ${where.join(" AND ")}` : ""}`;
-        return { sql, params };
-    };
-    return {
-        app,
-        record(input) {
-            if (!isActivityAction(input.action)) {
-                throw new Error(`activity: "${input.action}" is not an action — use lowercase subject.verb, e.g. "backup.delete"`);
-            }
-            const actor = input.actor?.trim();
-            if (!actor) {
-                // An event that cannot say who is a log line, not an audit trail.
-                throw new Error(`activity: ${input.action} has no actor`);
-            }
-            const at = input.at ?? now();
-            const outcome = input.outcome ?? "ok";
-            const data = input.data ? JSON.stringify(input.data) : null;
-            const info = insert.run(at, app, actor, input.action, input.resource?.kind ?? null, input.resource?.id ?? null, outcome, input.note ?? "", data);
-            return {
-                id: `log:${Number(info.lastInsertRowid)}`,
-                source: "log",
-                at,
-                app,
-                actor,
-                action: input.action,
-                resource: input.resource ? { app, ...input.resource } : null,
-                outcome,
-                note: input.note ?? "",
-                data: input.data ?? null,
-            };
-        },
-        query(query = {}) {
-            const limit = Math.min(MAX_LIMIT, Math.max(1, Math.floor(query.limit ?? DEFAULT_LIMIT)));
-            const { sql, params } = stream(query);
-            // One row past the limit, so "there is more" is a fact rather than a
-            // guess made from `rows.length === limit`.
-            const rows = db
-                .query(`${sql} ORDER BY at DESC, seq DESC LIMIT ?`)
-                .all(...params, limit + 1);
-            const truncated = rows.length > limit;
-            return { events: rows.slice(0, limit).map(toEvent), limit, truncated };
-        },
-        count(query = {}) {
-            const { sql, params } = stream(query);
-            const row = db.query(`SELECT COUNT(*) AS n FROM (${sql})`).get(...params);
-            return row?.n ?? 0;
-        },
-        facets(query = {}, limit = MAX_FACET) {
-            const { sql, params } = stream(query);
-            const capped = Math.min(MAX_FACET, Math.max(1, Math.floor(limit)));
-            const dimension = (column) => db
-                .query(`SELECT ${column} AS value, COUNT(*) AS count FROM (${sql})
-							  WHERE ${column} IS NOT NULL AND ${column} <> ''
-							  GROUP BY ${column} ORDER BY count DESC, value ASC LIMIT ?`)
-                .all(...params, capped).map((row) => ({ value: row.value, count: row.count }));
-            return {
-                actions: dimension("action"),
-                actors: dimension("actor"),
-                kinds: dimension("kind"),
-            };
-        },
-        sources() {
-            return ["log", ...liveSources().map((source) => source.name)];
-        },
-    };
-}
-//# sourceMappingURL=store.js.map

package/dist/server/activity/store.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"store.js","sourceRoot":"","sources":["../../../src/server/activity/store.ts"],"names":[],"mappings":"AAoCA,OAAO,EAIN,gBAAgB,EAChB,iBAAiB,GACjB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AA4G1E,MAAM,aAAa,GAAG,GAAG,CAAC;AAC1B,MAAM,SAAS,GAAG,IAAI,CAAC;AACvB,MAAM,SAAS,GAAG,EAAE,CAAC;AAErB;wCACwC;AACxC,MAAM,YAAY,GAAG,CAAC,KAAa,EAAU,EAAE,CAC9C,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC;AAEpD,MAAM,OAAO,GAAG,CAAC,GAAc,EAAiB,EAAE,CAAC,CAAC;IACnD,EAAE,EAAE,GAAG,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,GAAG,EAAE;IAC9B,MAAM,EAAE,GAAG,CAAC,MAAM;IAClB,EAAE,EAAE,GAAG,CAAC,EAAE;IACV,GAAG,EAAE,GAAG,CAAC,GAAG;IACZ,KAAK,EAAE,GAAG,CAAC,KAAK;IAChB,MAAM,EAAE,GAAG,CAAC,MAAM;IAClB,QAAQ,EACP,GAAG,CAAC,IAAI,KAAK,IAAI,IAAI,GAAG,CAAC,WAAW,KAAK,IAAI;QAC5C,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,EAAE,EAAE,GAAG,CAAC,WAAW,EAAE;IACzD,OAAO,EAAE,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI;IAC5D,IAAI,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE;IACpB,IAAI,EAAE,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC;CACzB,CAAC,CAAC;AAEH;qEACqE;AACrE,SAAS,SAAS,CAAC,GAAkB;IACpC,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;QAC1C,OAAO,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YACpE,CAAC,CAAE,MAAkC;YACrC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;IAC1B,CAAC;AACF,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAA2B;IAC5D,MAAM,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC;IAC5B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;IAC5D,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;IAEzC,aAAa,CAAC,EAAE,EAAE,mBAAmB,CAAC,CAAC;IAEvC,MAAM,MAAM,GAAG,EAAE,CAAC,KAAK,CACtB,eAAe,qBAAqB;;sCAEA,CACpC,CAAC;IAEF,MAAM,WAAW,GAAG,CAAC,IAAY,EAAW,EAAE,CAC7C,CAAC,CAAC,EAAE;SACF,KAAK,CAAC,qEAAqE,CAAC;SAC5E,GAAG,CAAC,IAAI,CAAC,CAAC;IAEb,2DAA2D;IAC3D,MAAM,WAAW,GAAG,GAAqB,EAAE,CAC1C,UAAU,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,aAAa,IAAI,WAAW,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC;IAE3F,MAAM,UAAU,GAAG;;8BAEU,qBAAqB,EAAE,CAAC;IAErD;iEAC6D;IAC7D,MAAM,MAAM,GAAG,CAAC,KAAoB,EAA+C,EAAE;QACpF,MAAM,MAAM,GAAuB,EAAE,CAAC;QACtC,MAAM,OAAO,GAAG,CAAC,UAAU,CAAC,CAAC;QAC7B,KAAK,MAAM,MAAM,IAAI,WAAW,EAAE,EAAE,CAAC;YACpC,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,IAAI;gBAAE,SAAS;YAC3D,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC;QACvC,CAAC;QACD,MAAM,KAAK,GAAa,EAAE,CAAC;QAC3B,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YAClB,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC3B,CAAC;QACD,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YACjB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;QACD,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YACjB,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACtB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;QACD,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;YACjB,KAAK,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;YACtC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;QACD,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;YAClB,IAAI,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAChC,KAAK,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC;gBACxC,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC;YACvE,CAAC;iBAAM,CAAC;gBACP,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;gBACzB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YAC3B,CAAC;QACF,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;YAChB,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YACvB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACzB,CAAC;QACD,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;YACtB,KAAK,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;YAC9B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;QAC/B,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;YACnB,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YAC1B,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC5B,CAAC;QACD,IAAI,KAAK,CAAC,CAAC,EAAE,CAAC;YACb,KAAK,CAAC,IAAI,CACT,kIAAkI,CAClI,CAAC;YACF,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACnC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;QACrC,CAAC;QACD,2EAA2E;QAC3E,4EAA4E;QAC5E,uCAAuC;QACvC,MAAM,GAAG,GAAG,kBAAkB,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC,cAC3D,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAClD,EAAE,CAAC;QACH,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC;IACxB,CAAC,CAAC;IAEF,OAAO;QACN,GAAG;QAEH,MAAM,CAAC,KAAyB;YAC/B,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;gBACrC,MAAM,IAAI,KAAK,CACd,cAAc,KAAK,CAAC,MAAM,uEAAuE,CACjG,CAAC;YACH,CAAC;YACD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC;YAClC,IAAI,CAAC,KAAK,EAAE,CAAC;gBACZ,kEAAkE;gBAClE,MAAM,IAAI,KAAK,CAAC,aAAa,KAAK,CAAC,MAAM,eAAe,CAAC,CAAC;YAC3D,CAAC;YACD,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,IAAI,GAAG,EAAE,CAAC;YAC7B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC;YACtC,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;YAC5D,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CACtB,EAAE,EACF,GAAG,EACH,KAAK,EACL,KAAK,CAAC,MAAM,EACZ,KAAK,CAAC,QAAQ,EAAE,IAAI,IAAI,IAAI,EAC5B,KAAK,CAAC,QAAQ,EAAE,EAAE,IAAI,IAAI,EAC1B,OAAO,EACP,KAAK,CAAC,IAAI,IAAI,EAAE,EAChB,IAAI,CACJ,CAAC;YACF,OAAO;gBACN,EAAE,EAAE,OAAO,MAAM,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE;gBACzC,MAAM,EAAE,KAAK;gBACb,EAAE;gBACF,GAAG;gBACH,KAAK;gBACL,MAAM,EAAE,KAAK,CAAC,MAAM;gBACpB,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI;gBAC5D,OAAO;gBACP,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,EAAE;gBACtB,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,IAAI;aACxB,CAAC;QACH,CAAC;QAED,KAAK,CAAC,QAAuB,EAAE;YAC9B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,IAAI,aAAa,CAAC,CAAC,CAAC,CAAC;YACzF,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YACtC,qEAAqE;YACrE,2CAA2C;YAC3C,MAAM,IAAI,GAAG,EAAE;iBACb,KAAK,CAAC,GAAG,GAAG,qCAAqC,CAAC;iBAClD,GAAG,CAAC,GAAG,MAAM,EAAE,KAAK,GAAG,CAAC,CAAgB,CAAC;YAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;YACtC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;QACxE,CAAC;QAED,KAAK,CAAC,QAAuB,EAAE;YAC9B,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YACtC,MAAM,GAAG,GAAG,EAAE,CAAC,KAAK,CAAC,8BAA8B,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,MAAM,CAEhE,CAAC;YACT,OAAO,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;QAED,MAAM,CAAC,QAAuB,EAAE,EAAE,KAAK,GAAG,SAAS;YAClD,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;YACtC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACnE,MAAM,SAAS,GAAG,CAAC,MAAc,EAAmB,EAAE,CAEpD,EAAE;iBACA,KAAK,CACL,UAAU,MAAM,sCAAsC,GAAG;iBAC/C,MAAM,oBAAoB,MAAM;oBAC7B,MAAM,yCAAyC,CAC5D;iBACA,GAAG,CAAC,GAAG,MAAM,EAAE,MAAM,CACvB,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAC1D,OAAO;gBACN,OAAO,EAAE,SAAS,CAAC,QAAQ,CAAC;gBAC5B,MAAM,EAAE,SAAS,CAAC,OAAO,CAAC;gBAC1B,KAAK,EAAE,SAAS,CAAC,MAAM,CAAC;aACxB,CAAC;QACH,CAAC;QAED,OAAO;YACN,OAAO,CAAC,KAAK,EAAE,GAAG,WAAW,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/D,CAAC;KACD,CAAC;AACH,CAAC"}

package/dist/server/app.d.ts

@@ -1,57 +0,0 @@
-import type { Database } from 'bun:sqlite';
-import type { Server, TLSOptions, WebSocketHandler } from 'bun';
-import { Hono } from 'hono';
-import type { CursedbeltEnv } from './context';
-import { type CorsOpts } from './middleware/corsAllowlist';
-import { type RateLimitOpts } from './middleware/rateLimit';
-import { type SecurityHeadersOpts } from './middleware/securityHeaders';
-export interface CreateAppOpts {
-    /** When provided, the request logger writes metrics/events to this DB. */
-    db?: Database;
-    /**
-     * CORS for a split deploy (SPA origin ≠ API origin). Pass `{ siteDomain }` /
-     * `{ origins }` (see {@link CorsOpts}) or `corsOptsFromEnv()` to read the
-     * conventional `CORS_SITE_DOMAIN` / `CORS_ORIGINS` env vars. Omit for a
-     * same-origin deploy. Mounted FIRST so every response — preflight, rate-limit
-     * 429, error envelope — carries the CORS headers a browser needs to read it.
-     */
-    cors?: CorsOpts;
-    /** Security-header options, or `false` to skip the security-headers middleware. */
-    security?: SecurityHeadersOpts | false;
-    /** Mount a global rate limiter. (Per-route limiters: use `createRateLimiter` directly.) */
-    rateLimit?: RateLimitOpts;
-    /**
-     * How many trusted reverse proxies sit in front of this app, for the client-IP
-     * rate-limit key. Default `0` — `x-forwarded-for` is caller-controlled, so
-     * believing it by default let anyone mint a fresh rate-limit bucket per
-     * request. Set to the real hop count you operate (nginx in front ⇒ `1`).
-     */
-    trustedProxyHops?: number;
-    /** Mount the default `GET /health` liveness route. Default: true. */
-    health?: boolean;
-}
-/**
- * Build the configured cursedbelt Hono app: correlation id → (optional) CORS →
- * security headers →
- * (optional) rate limit → (optional) request logger, a default `/health`, and the
- * canonical error-envelope `onError`. The caller mounts feature routers on the
- * returned app (`app.route('/api/v1', notesRouter)`).
- */
-export declare function createApp(opts?: CreateAppOpts): Hono<CursedbeltEnv>;
-export interface ServeBunOpts<T = unknown> {
-    /** Listen port. Default: 3000. */
-    port?: number;
-    /** Bind hostname (e.g. `'127.0.0.1'`). Default: Bun's default (all interfaces). */
-    hostname?: string;
-    /** WebSocket handler from the WS hub (task 28). Only set when the app upgrades. */
-    websocket?: WebSocketHandler<T>;
-    /** TLS options for HTTPS. */
-    tls?: TLSOptions;
-}
-/**
- * Serve a Hono app on `Bun.serve` (`fetch: app.fetch`, zero adapter). Pass
- * `websocket` only when the app actually calls `server.upgrade()` (task 28) — Bun
- * rejects a `websocket` handler that is never used.
- */
-export declare function serveBun<T = unknown>(app: Hono<CursedbeltEnv>, opts?: ServeBunOpts<T>): Server<T>;
-//# sourceMappingURL=app.d.ts.map

package/dist/server/app.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"app.d.ts","sourceRoot":"","sources":["../../src/server/app.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,KAAK,CAAC;AAChE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAC5B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAE/C,OAAO,EAAE,KAAK,QAAQ,EAAiB,MAAM,4BAA4B,CAAC;AAE1E,OAAO,EAAqB,KAAK,aAAa,EAAE,MAAM,wBAAwB,CAAC;AAE/E,OAAO,EAAE,KAAK,mBAAmB,EAAmB,MAAM,8BAA8B,CAAC;AAEzF,MAAM,WAAW,aAAa;IAC5B,0EAA0E;IAC1E,EAAE,CAAC,EAAE,QAAQ,CAAC;IACd;;;;;;OAMG;IACH,IAAI,CAAC,EAAE,QAAQ,CAAC;IAChB,mFAAmF;IACnF,QAAQ,CAAC,EAAE,mBAAmB,GAAG,KAAK,CAAC;IACvC,2FAA2F;IAC3F,SAAS,CAAC,EAAE,aAAa,CAAC;IAC1B;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,qEAAqE;IACrE,MAAM,CAAC,EAAE,OAAO,CAAC;CAClB;AAED;;;;;;GAMG;AACH,wBAAgB,SAAS,CAAC,IAAI,GAAE,aAAkB,GAAG,IAAI,CAAC,aAAa,CAAC,CAevE;AAED,MAAM,WAAW,YAAY,CAAC,CAAC,GAAG,OAAO;IACvC,kCAAkC;IAClC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,mFAAmF;IACnF,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,mFAAmF;IACnF,SAAS,CAAC,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC;IAChC,6BAA6B;IAC7B,GAAG,CAAC,EAAE,UAAU,CAAC;CAClB;AAED;;;;GAIG;AACH,wBAAgB,QAAQ,CAAC,CAAC,GAAG,OAAO,EAClC,GAAG,EAAE,IAAI,CAAC,aAAa,CAAC,EACxB,IAAI,GAAE,YAAY,CAAC,CAAC,CAAM,GACzB,MAAM,CAAC,CAAC,CAAC,CAQX"}

package/dist/server/app.js

@@ -1,46 +0,0 @@
-import { Hono } from 'hono';
-import { correlationId } from './middleware/correlationId';
-import { corsAllowlist } from './middleware/corsAllowlist';
-import { errorEnvelope } from './middleware/errorEnvelope';
-import { createRateLimiter } from './middleware/rateLimit';
-import { requestLogger } from './middleware/requestLogger';
-import { securityHeaders } from './middleware/securityHeaders';
-/**
- * Build the configured cursedbelt Hono app: correlation id → (optional) CORS →
- * security headers →
- * (optional) rate limit → (optional) request logger, a default `/health`, and the
- * canonical error-envelope `onError`. The caller mounts feature routers on the
- * returned app (`app.route('/api/v1', notesRouter)`).
- */
-export function createApp(opts = {}) {
-    const app = new Hono();
-    app.use('*', correlationId());
-    if (opts.cors)
-        app.use('*', corsAllowlist(opts.cors));
-    if (opts.security !== false)
-        app.use('*', securityHeaders(opts.security ?? {}));
-    if (opts.rateLimit) {
-        app.use('*', createRateLimiter({ trustedProxyHops: opts.trustedProxyHops ?? 0, ...opts.rateLimit }));
-    }
-    if (opts.db)
-        app.use('*', requestLogger(opts.db));
-    if (opts.health !== false)
-        app.get('/health', (c) => c.json({ status: 'ok' }));
-    app.onError(errorEnvelope);
-    return app;
-}
-/**
- * Serve a Hono app on `Bun.serve` (`fetch: app.fetch`, zero adapter). Pass
- * `websocket` only when the app actually calls `server.upgrade()` (task 28) — Bun
- * rejects a `websocket` handler that is never used.
- */
-export function serveBun(app, opts = {}) {
-    const port = opts.port ?? 3000;
-    const { hostname, tls, websocket } = opts;
-    // Two concrete call shapes (not a spread) so Bun.serve picks the right overload.
-    if (websocket) {
-        return Bun.serve({ port, hostname, fetch: app.fetch, tls, websocket });
-    }
-    return Bun.serve({ port, hostname, fetch: app.fetch, tls });
-}
-//# sourceMappingURL=app.js.map

package/dist/server/app.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"app.js","sourceRoot":"","sources":["../../src/server/app.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAE5B,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAiB,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC1E,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,iBAAiB,EAAsB,MAAM,wBAAwB,CAAC;AAC/E,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAA4B,eAAe,EAAE,MAAM,8BAA8B,CAAC;AA4BzF;;;;;;GAMG;AACH,MAAM,UAAU,SAAS,CAAC,OAAsB,EAAE;IAChD,MAAM,GAAG,GAAG,IAAI,IAAI,EAAiB,CAAC;IAEtC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,aAAa,EAAE,CAAC,CAAC;IAC9B,IAAI,IAAI,CAAC,IAAI;QAAE,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACtD,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK;QAAE,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,eAAe,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC;IAChF,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACnB,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,iBAAiB,CAAC,EAAE,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,IAAI,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC;IACvG,CAAC;IACD,IAAI,IAAI,CAAC,EAAE;QAAE,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IAElD,IAAI,IAAI,CAAC,MAAM,KAAK,KAAK;QAAE,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAE/E,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAC3B,OAAO,GAAG,CAAC;AACb,CAAC;AAaD;;;;GAIG;AACH,MAAM,UAAU,QAAQ,CACtB,GAAwB,EACxB,OAAwB,EAAE;IAE1B,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC;IAC/B,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,IAAI,CAAC;IAC1C,iFAAiF;IACjF,IAAI,SAAS,EAAE,CAAC;QACd,OAAO,GAAG,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,GAAG,CAAC,KAAK,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,GAAG,EAAE,CAAc,CAAC;AAC3E,CAAC"}

package/dist/server/audit/index.d.ts

@@ -1,3 +0,0 @@
-export { AUDIT_LOG_MIGRATIONS } from './migrations';
-export { auditStateAt, auditStateAtVersion, auditStep, createSqliteAuditSink } from './sqliteSink';
-//# sourceMappingURL=index.d.ts.map

package/dist/server/audit/index.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/server/audit/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAE,SAAS,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC"}

package/dist/server/audit/index.js

@@ -1,3 +0,0 @@
-export { AUDIT_LOG_MIGRATIONS } from './migrations';
-export { auditStateAt, auditStateAtVersion, auditStep, createSqliteAuditSink } from './sqliteSink';
-//# sourceMappingURL=index.js.map

package/dist/server/audit/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/server/audit/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,EAAE,YAAY,EAAE,mBAAmB,EAAE,SAAS,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC"}

package/dist/server/audit/migrations.d.ts

@@ -1,3 +0,0 @@
-import type { Migration } from '../migration/types';
-export declare const AUDIT_LOG_MIGRATIONS: readonly Migration[];
-//# sourceMappingURL=migrations.d.ts.map

package/dist/server/audit/migrations.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"migrations.d.ts","sourceRoot":"","sources":["../../../src/server/audit/migrations.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AASpD,eAAO,MAAM,oBAAoB,EAAE,SAAS,SAAS,EA6EpD,CAAC"}

package/dist/server/audit/migrations.js

@@ -1,80 +0,0 @@
-// ONE shared append-only table backs every namespace's audit trail — not a
-// shadow table per business table. cursedshell's `defineService` mutations
-// are dispatched against host-injected Store interfaces (`NotesStore`,
-// `AliasStore`, …), never raw SQL the host's DB owns, so there is no single
-// business table a `CREATE TRIGGER` could attach to. `(namespace, target_id)`
-// plays the role a per-table shadow table would: history for cursedshell's
-// `todo` plugin and an app's own `todo` table can coexist without collision.
-export const AUDIT_LOG_MIGRATIONS = [
-    {
-        name: '0001_audit_log',
-        up(db) {
-            db.run(`
-        CREATE TABLE IF NOT EXISTS audit_log (
-          audit_id     INTEGER PRIMARY KEY AUTOINCREMENT,
-          namespace    TEXT NOT NULL,
-          mutation_key TEXT NOT NULL,
-          target_id    TEXT NOT NULL,
-          version_key  INTEGER NOT NULL,
-          operation    TEXT NOT NULL CHECK (operation IN ('insert', 'update', 'delete')),
-          tenant_id    TEXT NOT NULL,
-          changed_by   TEXT,
-          changed_at   TEXT NOT NULL,
-          snapshot_data TEXT,
-          UNIQUE(tenant_id, namespace, target_id, version_key)
-        )
-      `);
-            // Time-travel + timeline() reads key on (tenant_id, namespace, target_id);
-            // changed_at additionally covers the "state as of a timestamp" query.
-            db.run(`CREATE INDEX IF NOT EXISTS idx_audit_log_lookup ON audit_log(tenant_id, namespace, target_id, changed_at)`);
-        },
-    },
-    {
-        // 05 §A1, the repair half. `0001` above was corrected in place so a fresh
-        // database is right from the start — but `CREATE TABLE IF NOT EXISTS` means
-        // an EXISTING `audit_log` keeps the old `UNIQUE(namespace, target_id,
-        // version_key)`, which is cross-tenant: two tenants whose ids collide
-        // (`target_id` is namespace-scoped, not minted per tenant — a plugin's
-        // `todo` row "5" is "5" for everybody) contend for the same version
-        // sequence, and one tenant's write fails against a row it cannot read.
-        //
-        // A table-level UNIQUE cannot be altered in SQLite, so this rebuilds. It is
-        // ordered AFTER `0001` and guarded on the old constraint actually being
-        // present, so on a fresh database it is a no-op rather than a needless copy
-        // of the whole audit trail.
-        name: '0002_tenant_scoped_version',
-        up(db) {
-            const schema = db
-                .query("SELECT sql FROM sqlite_master WHERE type = 'table' AND name = 'audit_log'")
-                .get()?.sql;
-            if (!schema || !/UNIQUE\s*\(\s*namespace/i.test(schema))
-                return;
-            db.run(`
-        CREATE TABLE audit_log_0002 (
-          audit_id     INTEGER PRIMARY KEY AUTOINCREMENT,
-          namespace    TEXT NOT NULL,
-          mutation_key TEXT NOT NULL,
-          target_id    TEXT NOT NULL,
-          version_key  INTEGER NOT NULL,
-          operation    TEXT NOT NULL CHECK (operation IN ('insert', 'update', 'delete')),
-          tenant_id    TEXT NOT NULL,
-          changed_by   TEXT,
-          changed_at   TEXT NOT NULL,
-          snapshot_data TEXT,
-          UNIQUE(tenant_id, namespace, target_id, version_key)
-        )
-      `);
-            db.run(`
-        INSERT INTO audit_log_0002
-          (audit_id, namespace, mutation_key, target_id, version_key, operation, tenant_id, changed_by, changed_at, snapshot_data)
-        SELECT audit_id, namespace, mutation_key, target_id, version_key, operation, tenant_id, changed_by, changed_at, snapshot_data
-          FROM audit_log
-      `);
-            db.run('DROP TABLE audit_log');
-            db.run('ALTER TABLE audit_log_0002 RENAME TO audit_log');
-            // The rename does not carry the index — it was dropped with the old table.
-            db.run(`CREATE INDEX IF NOT EXISTS idx_audit_log_lookup ON audit_log(tenant_id, namespace, target_id, changed_at)`);
-        },
-    },
-];
-//# sourceMappingURL=migrations.js.map

package/dist/server/audit/migrations.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"migrations.js","sourceRoot":"","sources":["../../../src/server/audit/migrations.ts"],"names":[],"mappings":"AAGA,2EAA2E;AAC3E,2EAA2E;AAC3E,uEAAuE;AACvE,4EAA4E;AAC5E,8EAA8E;AAC9E,2EAA2E;AAC3E,6EAA6E;AAC7E,MAAM,CAAC,MAAM,oBAAoB,GAAyB;IACxD;QACE,IAAI,EAAE,gBAAgB;QACtB,EAAE,CAAC,EAAY;YACb,EAAE,CAAC,GAAG,CAAC;;;;;;;;;;;;;;OAcN,CAAC,CAAC;YACH,2EAA2E;YAC3E,sEAAsE;YACtE,EAAE,CAAC,GAAG,CACJ,2GAA2G,CAC5G,CAAC;QACJ,CAAC;KACF;IACD;QACE,0EAA0E;QAC1E,4EAA4E;QAC5E,sEAAsE;QACtE,sEAAsE;QACtE,uEAAuE;QACvE,oEAAoE;QACpE,uEAAuE;QACvE,EAAE;QACF,4EAA4E;QAC5E,wEAAwE;QACxE,4EAA4E;QAC5E,4BAA4B;QAC5B,IAAI,EAAE,4BAA4B;QAClC,EAAE,CAAC,EAAY;YACb,MAAM,MAAM,GACV,EAAE;iBACC,KAAK,CAAC,2EAA2E,CAAC;iBAClF,GAAG,EACP,EAAE,GAAG,CAAC;YACP,IAAI,CAAC,MAAM,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,MAAM,CAAC;gBAAE,OAAO;YAEhE,EAAE,CAAC,GAAG,CAAC;;;;;;;;;;;;;;OAcN,CAAC,CAAC;YACH,EAAE,CAAC,GAAG,CAAC;;;;;OAKN,CAAC,CAAC;YACH,EAAE,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;YAC/B,EAAE,CAAC,GAAG,CAAC,gDAAgD,CAAC,CAAC;YACzD,2EAA2E;YAC3E,EAAE,CAAC,GAAG,CACJ,2GAA2G,CAC5G,CAAC;QACJ,CAAC;KACF;CACF,CAAC"}

package/dist/server/audit/sqliteSink.d.ts

@@ -1,37 +0,0 @@
-import type { Database } from 'bun:sqlite';
-import type { AuditEntryInput, AuditRecord } from 'cwip/audit';
-/**
- * The persistent audit sink: one shared `audit_log` table (see `./migrations`),
- * versioned per `(namespace, targetId)`. Runs its migration on first
- * construction (idempotent — safe to call once per boot per `db`).
- *
- *   const sink = createSqliteAuditSink(db);
- *   const router = buildServerRouter(runtime, config, { verifyToken, audit: { sink } });
- *
- * Deliberately NOT annotated `: AuditSink` — see `cwip/audit`'s
- * `createMemoryAuditSink` for why (this sink is fully synchronous under the
- * hood; the interface's async-capable signature would erase that at every
- * call site). Structurally assignable to `AuditSink` wherever one is expected.
- */
-export declare function createSqliteAuditSink(db: Database): {
-    record(entry: AuditEntryInput): AuditRecord;
-    timeline(tenantId: string, namespace: string, targetId: string): AuditRecord[];
-};
-/**
- * Every read below takes `tenantId` FIRST and as a required argument (05 §A1).
- *
- * `audit_log` is ONE shared table across every namespace and every tenant, and
- * its lookup key `(namespace, targetId)` is a business key a plugin chose — not a
- * minted id. So a read that omits the tenant is not merely broad: it returns
- * another tenant's snapshot for the same row number, which is the whole audit
- * trail's contents. Making the parameter optional (defaulting to "all tenants")
- * would put that one keystroke away, so it is required and positioned where a
- * mistaken call fails to typecheck rather than silently widening.
- */
-/** Query 1: the record's state as of a given moment (last version at or before `at`). */
-export declare function auditStateAt(db: Database, tenantId: string, namespace: string, targetId: string, at: string): AuditRecord | null;
-/** Query 2: jump directly to a specific `versionKey`. */
-export declare function auditStateAtVersion(db: Database, tenantId: string, namespace: string, targetId: string, versionKey: number): AuditRecord | null;
-/** Query 3: step one version back/forward from `currentVersion` (for a UI "prev/next" control). */
-export declare function auditStep(db: Database, tenantId: string, namespace: string, targetId: string, currentVersion: number, direction: 'back' | 'forward'): AuditRecord | null;
-//# sourceMappingURL=sqliteSink.d.ts.map

package/dist/server/audit/sqliteSink.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"sqliteSink.d.ts","sourceRoot":"","sources":["../../../src/server/audit/sqliteSink.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAC3C,OAAO,KAAK,EAAE,eAAe,EAAkB,WAAW,EAAE,MAAM,YAAY,CAAC;AA8B/E;;;;;;;;;;;;GAYG;AACH,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,QAAQ;kBAoBhC,eAAe,GAAG,WAAW;uBAwBxB,MAAM,aAAa,MAAM,YAAY,MAAM,GAAG,WAAW,EAAE;EAKjF;AAED;;;;;;;;;;GAUG;AAEH,yFAAyF;AACzF,wBAAgB,YAAY,CAC1B,EAAE,EAAE,QAAQ,EACZ,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,EAAE,EAAE,MAAM,GACT,WAAW,GAAG,IAAI,CAOpB;AAED,yDAAyD;AACzD,wBAAgB,mBAAmB,CACjC,EAAE,EAAE,QAAQ,EACZ,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,UAAU,EAAE,MAAM,GACjB,WAAW,GAAG,IAAI,CAOpB;AAED,mGAAmG;AACnG,wBAAgB,SAAS,CACvB,EAAE,EAAE,QAAQ,EACZ,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,QAAQ,EAAE,MAAM,EAChB,cAAc,EAAE,MAAM,EACtB,SAAS,EAAE,MAAM,GAAG,SAAS,GAC5B,WAAW,GAAG,IAAI,CAcpB"}