cursedbelt 2.8.0 → 3.0.0

package/dist/core/sharing/model.d.ts

@@ -1,196 +0,0 @@
-/**
- * The fleet's ONE sharing/access vocabulary — pure, framework-free, storage-free.
- *
- * ── What this replaces ──────────────────────────────────────────────────────
- * `cursedalchemy` carried a unified `shares` + `group_shares` pair across ~30
- * resource types: per-record read/write, an audit trail and notification hooks,
- * all in one place. That app is superseded, and the fleet has been re-deriving
- * the same idea one app at a time — `apps/family` grew a whole roles model plus
- * a `guards.ts` because it needed "who may change THIS record", and its own
- * `CLAUDE.md` recorded the hole it could not close: *"No per-item ACL.
- * Visibility is still two levels rather than a per-person grant list."*
- *
- * `life`, `money` and `arcade` are queued to need exactly that. So the PATTERN
- * (not ca's code) lands here once:
- *
- *   a **resource** is `(app, kind, id)` — an opaque triple, so nothing in this
- *   module has to know what a person, a budget or a saved game is;
- *   a **grant** is `(subject, resource, level, grantedBy, grantedAt)`;
- *   a **subject** is a user or a GROUP, because "share it with the family" is one
- *   act the owner performs once, not one act per relative;
- *   **revocation and the audit trail are part of the primitive**, never a caller's
- *   concern — an app that has to remember to write the audit row is an app whose
- *   audit trail has holes exactly where somebody was in a hurry.
- *
- * ── Why the vocabulary is separate from the store ────────────────────────────
- * `cursedbelt/server/sharing` owns the SQLite half and `cursedbelt/react/sharing`
- * draws the panel. Both need the same words, and the react half must not pull
- * `bun:sqlite` into a browser bundle. So the types and the precedence rules live
- * here (`cursedbelt/sharing`), which is typechecked with `types: []` — it cannot
- * accidentally depend on a runtime.
- *
- * ── The precedence rule, in one sentence ────────────────────────────────────
- * A subject's access to a resource is the STRONGEST of every grant that reaches
- * them — their own and every group they are in. Grants only ever widen; there is
- * deliberately no "deny" grant. A deny row in a table whose whole job is "who may
- * see this" produces the state nobody can reason about (a user in two groups, one
- * allowed and one denied) and the answer would then depend on row order. An app
- * that needs an exception denies it in its OWN model — `apps/family`'s tri-state
- * `members` columns are exactly that, and they sit ABOVE this layer rather than
- * inside it.
- */
-/** What a grant lets a subject do. Two levels, on purpose: ca had two and used
- *  both; a third ("comment", "admin") is a per-app concept every time. */
-export type ShareLevel = "read" | "write";
-/** The answer to "what may this subject do with this resource" — a level, or
- *  nothing at all. Separate from {@link ShareLevel} so a function returning "no
- *  access" cannot be mistaken for one returning a grant. */
-export type ShareAccess = "none" | ShareLevel;
-/** A grant is made to a person or to a named group of people. */
-export type ShareSubjectType = "user" | "group";
-export interface ShareSubject {
-    type: ShareSubjectType;
-    /** A fleet account address for `user`, a group id for `group`. Normalized —
-     *  see {@link normalizeSubjectId}. */
-    id: string;
-}
-/**
- * What is being shared: `(app, kind, id)`.
- *
- * `app` is the satellite ("family", "life"), `kind` is that app's own word for the
- * sort of record ("person", "budget", "list"), `id` is the row. Nothing here
- * validates the pair against a schema, and that is the point — a new kind is a
- * string an app already has, not a migration in `cursedbelt`.
- */
-export interface ShareResource {
-    app: string;
-    kind: string;
-    id: string;
-}
-/** One grant. `grantedAt` is an ISO-8601 string, matching the fleet's audit
- *  vocabulary (the audit module behind `cursedbelt/server`) rather than the epoch-millis apps use
- *  for their own rows — an audit trail is read by humans far more often than it is
- *  sorted by a machine. */
-export interface ShareGrant {
-    resource: ShareResource;
-    subject: ShareSubject;
-    level: ShareLevel;
-    /** The account that made the grant. Never inferred from the session inside the
-     *  store — the caller passes it, because the store has no session. */
-    grantedBy: string;
-    grantedAt: string;
-    /** Why, for whoever reads the list six months later. */
-    note: string;
-}
-/** Who is asking. `groupIds` may be omitted, in which case a store resolves the
- *  subject's groups itself; passing them is an optimization for a caller that
- *  already knows. */
-export interface ShareViewer {
-    subjectId: string;
-    groupIds?: readonly string[];
-}
-/** A named set of people — "the family", "the trustees". Groups are what make
- *  "share this with everybody who matters" one act instead of eleven. */
-export interface ShareGroup {
-    id: string;
-    name: string;
-    createdBy: string;
-    createdAt: string;
-    note: string;
-}
-export interface ShareGroupMember {
-    groupId: string;
-    subjectId: string;
-    addedBy: string;
-    addedAt: string;
-}
-/**
- * Everything that can happen to a grant or a group.
- *
- * `regrade` is its own action rather than a second `grant`: raising somebody from
- * read to write is the change a reader of the trail is looking for, and a trail
- * that records it as another grant makes that invisible.
- */
-export type ShareAction = "grant" | "regrade" | "revoke" | "group.create" | "group.rename" | "group.delete" | "group.join" | "group.leave";
-export declare const SHARE_ACTIONS: readonly ShareAction[];
-/**
- * One line of the audit trail.
- *
- * 🔴 **An event outlives the grant it describes.** Revoking deletes the grant row
- * and appends an event; nothing in this primitive ever deletes an event. An audit
- * trail that is a JOIN onto live grants can only tell you about access that still
- * exists, which is the opposite of the question anybody asks it ("who COULD see
- * this in March?"). That is why `resource`, `subject` and `level` are copied onto
- * the event rather than referenced.
- */
-export interface ShareEvent {
-    id: number;
-    at: string;
-    action: ShareAction;
-    /** Null for a group lifecycle event, which is about no single resource. */
-    resource: ShareResource | null;
-    subject: ShareSubject;
-    /** The level AFTER the action; for a revoke, the level that was taken away. */
-    level: ShareLevel | null;
-    /** Only set by `regrade` — what it was before. */
-    previousLevel: ShareLevel | null;
-    actor: string;
-    note: string;
-}
-export declare const isShareLevel: (value: unknown) => value is ShareLevel;
-export declare const isShareAccess: (value: unknown) => value is ShareAccess;
-export declare const isShareSubjectType: (value: unknown) => value is ShareSubjectType;
-/** The stronger of two answers. Grants only widen, so this is the whole
- *  resolution rule. */
-export declare const strongerAccess: (a: ShareAccess, b: ShareAccess) => ShareAccess;
-/** Does this access cover what is being attempted? `write` covers `read`; nothing
- *  covers a level above itself. */
-export declare const accessMeets: (access: ShareAccess, atLeast: ShareLevel) => boolean;
-/** The levels a grant must carry to satisfy `atLeast`, for a store building an
- *  `IN (…)` list. `read` is satisfied by either level; `write` only by itself. */
-export declare const levelsMeeting: (atLeast: ShareLevel) => readonly ShareLevel[];
-/**
- * 🔴 The one normalization, and it is a security property rather than tidiness.
- *
- * A user subject is a fleet address, and addresses arrive from a form: `"  Ameena@
- * Example.com "`. Storing that verbatim means the grant the owner just made does
- * not match the session that signs in, so the app silently answers "no access"
- * and the owner's only recourse is to guess at whitespace. Lowercasing is also
- * what makes a grant idempotent — one row per (subject, resource), which is what
- * `regrade` depends on.
- *
- * A GROUP id is minted by the app, so it is trimmed but NOT lowercased: doing so
- * would silently collide two ids that differ only in case, and an app is entitled
- * to mint case-sensitive ids.
- */
-export declare const normalizeSubjectId: (type: ShareSubjectType, id: string) => string;
-export declare const normalizeSubject: (subject: ShareSubject) => ShareSubject;
-/** A stable string for a resource — for a map key, a log line or a test name.
- *  Never parsed back: `id` may contain anything, including a slash. */
-export declare const resourceKey: (resource: ShareResource) => string;
-export declare const sameResource: (a: ShareResource, b: ShareResource) => boolean;
-export declare const sameSubject: (a: ShareSubject, b: ShareSubject) => boolean;
-/**
- * The precedence rule as a pure function: the strongest grant that reaches this
- * viewer, across their own grants and their groups'.
- *
- * The SQLite store answers the same question in SQL (it must — a read that
- * filters in JavaScript cannot keep a COUNT honest), so this exists as the ONE
- * written definition both halves are checked against, and as the answer for a
- * caller holding grants in memory. If the two ever disagree, this one is right.
- */
-export declare function resolveAccess(grants: readonly ShareGrant[], resource: ShareResource, viewer: ShareViewer): ShareAccess;
-/**
- * One line of the audit trail, as a sentence.
- *
- * Pure and here rather than in the panel, because the trail is read in two places
- * that must say the same thing: the sharing panel, and whatever notification the
- * `onEvent` hook eventually sends. A subject label may be supplied (a group's name,
- * a person's display name) — without one it falls back to the id, which is an
- * address or a group id and is always at least true.
- */
-export declare function describeShareEvent(event: ShareEvent, subjectLabel?: string): string;
-/** A sentence for a UI: what this access lets somebody do. One wording, so eleven
- *  apps do not invent eleven. */
-export declare const describeAccess: (access: ShareAccess) => string;
-//# sourceMappingURL=model.d.ts.map

package/dist/core/sharing/model.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"model.d.ts","sourceRoot":"","sources":["../../../src/core/sharing/model.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AAEH;0EAC0E;AAC1E,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,OAAO,CAAC;AAE1C;;4DAE4D;AAC5D,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,UAAU,CAAC;AAE9C,iEAAiE;AACjE,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,OAAO,CAAC;AAEhD,MAAM,WAAW,YAAY;IAC5B,IAAI,EAAE,gBAAgB,CAAC;IACvB;0CACsC;IACtC,EAAE,EAAE,MAAM,CAAC;CACX;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,aAAa;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;CACX;AAED;;;2BAG2B;AAC3B,MAAM,WAAW,UAAU;IAC1B,QAAQ,EAAE,aAAa,CAAC;IACxB,OAAO,EAAE,YAAY,CAAC;IACtB,KAAK,EAAE,UAAU,CAAC;IAClB;0EACsE;IACtE,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,wDAAwD;IACxD,IAAI,EAAE,MAAM,CAAC;CACb;AAED;;qBAEqB;AACrB,MAAM,WAAW,WAAW;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC7B;AAED;yEACyE;AACzE,MAAM,WAAW,UAAU;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,gBAAgB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;GAMG;AACH,MAAM,MAAM,WAAW,GACpB,OAAO,GACP,SAAS,GACT,QAAQ,GACR,cAAc,GACd,cAAc,GACd,cAAc,GACd,YAAY,GACZ,aAAa,CAAC;AAEjB,eAAO,MAAM,aAAa,EAAE,SAAS,WAAW,EAS/C,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,WAAW,UAAU;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,WAAW,CAAC;IACpB,2EAA2E;IAC3E,QAAQ,EAAE,aAAa,GAAG,IAAI,CAAC;IAC/B,OAAO,EAAE,YAAY,CAAC;IACtB,+EAA+E;IAC/E,KAAK,EAAE,UAAU,GAAG,IAAI,CAAC;IACzB,kDAAkD;IAClD,aAAa,EAAE,UAAU,GAAG,IAAI,CAAC;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;CACb;AAID,eAAO,MAAM,YAAY,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,UACjB,CAAC;AAEvC,eAAO,MAAM,aAAa,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,WAChB,CAAC;AAEzC,eAAO,MAAM,kBAAkB,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,gBACvB,CAAC;AAEvC;uBACuB;AACvB,eAAO,MAAM,cAAc,GAAI,GAAG,WAAW,EAAE,GAAG,WAAW,KAAG,WACvB,CAAC;AAE1C;mCACmC;AACnC,eAAO,MAAM,WAAW,GAAI,QAAQ,WAAW,EAAE,SAAS,UAAU,KAAG,OAC3B,CAAC;AAE7C;kFACkF;AAClF,eAAO,MAAM,aAAa,GAAI,SAAS,UAAU,KAAG,SAAS,UAAU,EACpB,CAAC;AAEpD;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,kBAAkB,GAAI,MAAM,gBAAgB,EAAE,IAAI,MAAM,KAAG,MAClB,CAAC;AAEvD,eAAO,MAAM,gBAAgB,GAAI,SAAS,YAAY,KAAG,YAGvD,CAAC;AAEH;uEACuE;AACvE,eAAO,MAAM,WAAW,GAAI,UAAU,aAAa,KAAG,MACJ,CAAC;AAEnD,eAAO,MAAM,YAAY,GAAI,GAAG,aAAa,EAAE,GAAG,aAAa,KAAG,OACZ,CAAC;AAEvD,eAAO,MAAM,WAAW,GAAI,GAAG,YAAY,EAAE,GAAG,YAAY,KAAG,OAC5B,CAAC;AAEpC;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAC5B,MAAM,EAAE,SAAS,UAAU,EAAE,EAC7B,QAAQ,EAAE,aAAa,EACvB,MAAM,EAAE,WAAW,GACjB,WAAW,CAab;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,UAAU,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,CAqBnF;AAED;iCACiC;AACjC,eAAO,MAAM,cAAc,GAAI,QAAQ,WAAW,KAAG,MAKrC,CAAC"}

package/dist/core/sharing/model.js

@@ -1,151 +0,0 @@
-/**
- * The fleet's ONE sharing/access vocabulary — pure, framework-free, storage-free.
- *
- * ── What this replaces ──────────────────────────────────────────────────────
- * `cursedalchemy` carried a unified `shares` + `group_shares` pair across ~30
- * resource types: per-record read/write, an audit trail and notification hooks,
- * all in one place. That app is superseded, and the fleet has been re-deriving
- * the same idea one app at a time — `apps/family` grew a whole roles model plus
- * a `guards.ts` because it needed "who may change THIS record", and its own
- * `CLAUDE.md` recorded the hole it could not close: *"No per-item ACL.
- * Visibility is still two levels rather than a per-person grant list."*
- *
- * `life`, `money` and `arcade` are queued to need exactly that. So the PATTERN
- * (not ca's code) lands here once:
- *
- *   a **resource** is `(app, kind, id)` — an opaque triple, so nothing in this
- *   module has to know what a person, a budget or a saved game is;
- *   a **grant** is `(subject, resource, level, grantedBy, grantedAt)`;
- *   a **subject** is a user or a GROUP, because "share it with the family" is one
- *   act the owner performs once, not one act per relative;
- *   **revocation and the audit trail are part of the primitive**, never a caller's
- *   concern — an app that has to remember to write the audit row is an app whose
- *   audit trail has holes exactly where somebody was in a hurry.
- *
- * ── Why the vocabulary is separate from the store ────────────────────────────
- * `cursedbelt/server/sharing` owns the SQLite half and `cursedbelt/react/sharing`
- * draws the panel. Both need the same words, and the react half must not pull
- * `bun:sqlite` into a browser bundle. So the types and the precedence rules live
- * here (`cursedbelt/sharing`), which is typechecked with `types: []` — it cannot
- * accidentally depend on a runtime.
- *
- * ── The precedence rule, in one sentence ────────────────────────────────────
- * A subject's access to a resource is the STRONGEST of every grant that reaches
- * them — their own and every group they are in. Grants only ever widen; there is
- * deliberately no "deny" grant. A deny row in a table whose whole job is "who may
- * see this" produces the state nobody can reason about (a user in two groups, one
- * allowed and one denied) and the answer would then depend on row order. An app
- * that needs an exception denies it in its OWN model — `apps/family`'s tri-state
- * `members` columns are exactly that, and they sit ABOVE this layer rather than
- * inside it.
- */
-export const SHARE_ACTIONS = [
-    "grant",
-    "regrade",
-    "revoke",
-    "group.create",
-    "group.rename",
-    "group.delete",
-    "group.join",
-    "group.leave",
-];
-const ACCESS_RANK = { none: 0, read: 1, write: 2 };
-export const isShareLevel = (value) => value === "read" || value === "write";
-export const isShareAccess = (value) => value === "none" || isShareLevel(value);
-export const isShareSubjectType = (value) => value === "user" || value === "group";
-/** The stronger of two answers. Grants only widen, so this is the whole
- *  resolution rule. */
-export const strongerAccess = (a, b) => ACCESS_RANK[a] >= ACCESS_RANK[b] ? a : b;
-/** Does this access cover what is being attempted? `write` covers `read`; nothing
- *  covers a level above itself. */
-export const accessMeets = (access, atLeast) => ACCESS_RANK[access] >= ACCESS_RANK[atLeast];
-/** The levels a grant must carry to satisfy `atLeast`, for a store building an
- *  `IN (…)` list. `read` is satisfied by either level; `write` only by itself. */
-export const levelsMeeting = (atLeast) => atLeast === "read" ? ["read", "write"] : ["write"];
-/**
- * 🔴 The one normalization, and it is a security property rather than tidiness.
- *
- * A user subject is a fleet address, and addresses arrive from a form: `"  Ameena@
- * Example.com "`. Storing that verbatim means the grant the owner just made does
- * not match the session that signs in, so the app silently answers "no access"
- * and the owner's only recourse is to guess at whitespace. Lowercasing is also
- * what makes a grant idempotent — one row per (subject, resource), which is what
- * `regrade` depends on.
- *
- * A GROUP id is minted by the app, so it is trimmed but NOT lowercased: doing so
- * would silently collide two ids that differ only in case, and an app is entitled
- * to mint case-sensitive ids.
- */
-export const normalizeSubjectId = (type, id) => type === "user" ? id.trim().toLowerCase() : id.trim();
-export const normalizeSubject = (subject) => ({
-    type: subject.type,
-    id: normalizeSubjectId(subject.type, subject.id),
-});
-/** A stable string for a resource — for a map key, a log line or a test name.
- *  Never parsed back: `id` may contain anything, including a slash. */
-export const resourceKey = (resource) => `${resource.app}/${resource.kind}/${resource.id}`;
-export const sameResource = (a, b) => a.app === b.app && a.kind === b.kind && a.id === b.id;
-export const sameSubject = (a, b) => a.type === b.type && a.id === b.id;
-/**
- * The precedence rule as a pure function: the strongest grant that reaches this
- * viewer, across their own grants and their groups'.
- *
- * The SQLite store answers the same question in SQL (it must — a read that
- * filters in JavaScript cannot keep a COUNT honest), so this exists as the ONE
- * written definition both halves are checked against, and as the answer for a
- * caller holding grants in memory. If the two ever disagree, this one is right.
- */
-export function resolveAccess(grants, resource, viewer) {
-    const subjectId = normalizeSubjectId("user", viewer.subjectId);
-    const groups = new Set((viewer.groupIds ?? []).map((id) => normalizeSubjectId("group", id)));
-    let access = "none";
-    for (const grant of grants) {
-        if (!sameResource(grant.resource, resource))
-            continue;
-        const reaches = grant.subject.type === "user"
-            ? grant.subject.id === subjectId
-            : groups.has(grant.subject.id);
-        if (reaches)
-            access = strongerAccess(access, grant.level);
-    }
-    return access;
-}
-/**
- * One line of the audit trail, as a sentence.
- *
- * Pure and here rather than in the panel, because the trail is read in two places
- * that must say the same thing: the sharing panel, and whatever notification the
- * `onEvent` hook eventually sends. A subject label may be supplied (a group's name,
- * a person's display name) — without one it falls back to the id, which is an
- * address or a group id and is always at least true.
- */
-export function describeShareEvent(event, subjectLabel) {
-    const who = subjectLabel?.trim() || event.subject.id;
-    const target = event.subject.type === "group" ? `the group ${who}` : who;
-    switch (event.action) {
-        case "grant":
-            return `${event.actor} shared this with ${target} (${event.level === "write" ? "can change it" : "view only"})`;
-        case "regrade":
-            return `${event.actor} changed ${target} from ${event.previousLevel} to ${event.level}`;
-        case "revoke":
-            return `${event.actor} stopped sharing this with ${target}${event.note ? ` — ${event.note}` : ""}`;
-        case "group.create":
-            return `${event.actor} created the group ${event.note || who}`;
-        case "group.rename":
-            return `${event.actor} renamed a group to ${event.note}`;
-        case "group.delete":
-            return `${event.actor} deleted the group ${who}`;
-        case "group.join":
-            return `${event.actor} added ${event.note} to the group ${who}`;
-        case "group.leave":
-            return `${event.actor} removed ${event.note} from the group ${who}`;
-    }
-}
-/** A sentence for a UI: what this access lets somebody do. One wording, so eleven
- *  apps do not invent eleven. */
-export const describeAccess = (access) => access === "write"
-    ? "Can view and change it"
-    : access === "read"
-        ? "Can view it"
-        : "No access";
-//# sourceMappingURL=model.js.map

package/dist/core/sharing/model.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"model.js","sourceRoot":"","sources":["../../../src/core/sharing/model.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AA6FH,MAAM,CAAC,MAAM,aAAa,GAA2B;IACpD,OAAO;IACP,SAAS;IACT,QAAQ;IACR,cAAc;IACd,cAAc;IACd,cAAc;IACd,YAAY;IACZ,aAAa;CACb,CAAC;AA2BF,MAAM,WAAW,GAAgC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;AAEhF,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,KAAc,EAAuB,EAAE,CACnE,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,OAAO,CAAC;AAEvC,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,KAAc,EAAwB,EAAE,CACrE,KAAK,KAAK,MAAM,IAAI,YAAY,CAAC,KAAK,CAAC,CAAC;AAEzC,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,KAAc,EAA6B,EAAE,CAC/E,KAAK,KAAK,MAAM,IAAI,KAAK,KAAK,OAAO,CAAC;AAEvC;uBACuB;AACvB,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAc,EAAE,CAAc,EAAe,EAAE,CAC7E,WAAW,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAE1C;mCACmC;AACnC,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,MAAmB,EAAE,OAAmB,EAAW,EAAE,CAChF,WAAW,CAAC,MAAM,CAAC,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC;AAE7C;kFACkF;AAClF,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,OAAmB,EAAyB,EAAE,CAC3E,OAAO,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;AAEpD;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,IAAsB,EAAE,EAAU,EAAU,EAAE,CAChF,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;AAEvD,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,OAAqB,EAAgB,EAAE,CAAC,CAAC;IACzE,IAAI,EAAE,OAAO,CAAC,IAAI;IAClB,EAAE,EAAE,kBAAkB,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE,CAAC;CAChD,CAAC,CAAC;AAEH;uEACuE;AACvE,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,QAAuB,EAAU,EAAE,CAC9D,GAAG,QAAQ,CAAC,GAAG,IAAI,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;AAEnD,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAgB,EAAE,CAAgB,EAAW,EAAE,CAC3E,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;AAEvD,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAe,EAAE,CAAe,EAAW,EAAE,CACxE,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC;AAEpC;;;;;;;;GAQG;AACH,MAAM,UAAU,aAAa,CAC5B,MAA6B,EAC7B,QAAuB,EACvB,MAAmB;IAEnB,MAAM,SAAS,GAAG,kBAAkB,CAAC,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;IAC/D,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,kBAAkB,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7F,IAAI,MAAM,GAAgB,MAAM,CAAC;IACjC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC5B,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC;YAAE,SAAS;QACtD,MAAM,OAAO,GACZ,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,MAAM;YAC5B,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,KAAK,SAAS;YAChC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACjC,IAAI,OAAO;YAAE,MAAM,GAAG,cAAc,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAiB,EAAE,YAAqB;IAC1E,MAAM,GAAG,GAAG,YAAY,EAAE,IAAI,EAAE,IAAI,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;IACrD,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,aAAa,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;IACzE,QAAQ,KAAK,CAAC,MAAM,EAAE,CAAC;QACtB,KAAK,OAAO;YACX,OAAO,GAAG,KAAK,CAAC,KAAK,qBAAqB,MAAM,KAAK,KAAK,CAAC,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,WAAW,GAAG,CAAC;QACjH,KAAK,SAAS;YACb,OAAO,GAAG,KAAK,CAAC,KAAK,YAAY,MAAM,SAAS,KAAK,CAAC,aAAa,OAAO,KAAK,CAAC,KAAK,EAAE,CAAC;QACzF,KAAK,QAAQ;YACZ,OAAO,GAAG,KAAK,CAAC,KAAK,8BAA8B,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QACpG,KAAK,cAAc;YAClB,OAAO,GAAG,KAAK,CAAC,KAAK,sBAAsB,KAAK,CAAC,IAAI,IAAI,GAAG,EAAE,CAAC;QAChE,KAAK,cAAc;YAClB,OAAO,GAAG,KAAK,CAAC,KAAK,uBAAuB,KAAK,CAAC,IAAI,EAAE,CAAC;QAC1D,KAAK,cAAc;YAClB,OAAO,GAAG,KAAK,CAAC,KAAK,sBAAsB,GAAG,EAAE,CAAC;QAClD,KAAK,YAAY;YAChB,OAAO,GAAG,KAAK,CAAC,KAAK,UAAU,KAAK,CAAC,IAAI,iBAAiB,GAAG,EAAE,CAAC;QACjE,KAAK,aAAa;YACjB,OAAO,GAAG,KAAK,CAAC,KAAK,YAAY,KAAK,CAAC,IAAI,mBAAmB,GAAG,EAAE,CAAC;IACtE,CAAC;AACF,CAAC;AAED;iCACiC;AACjC,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,MAAmB,EAAU,EAAE,CAC7D,MAAM,KAAK,OAAO;IACjB,CAAC,CAAC,wBAAwB;IAC1B,CAAC,CAAC,MAAM,KAAK,MAAM;QAClB,CAAC,CAAC,aAAa;QACf,CAAC,CAAC,WAAW,CAAC"}

package/dist/core/site/siteCopy.d.ts

@@ -1,93 +0,0 @@
-/**
- * The marketing-site copy contract — owner decision **D36** (2026-07-27).
- *
- * ## What D36 actually asked for
- *
- * The owner's answer to "give me the words" was: *"I want to see it first, use
- * your judgment for now. Make an admin section where I can edit them. Put in
- * placeholders or good values now. Values I edit are in the db. I potentially
- * switch to hardcoding them if this is too slow for the page loads to get and
- * fill in the text, caching may help."*
- *
- * That decomposes into one contract with three consumers, and this module is
- * the single source all three import so they can never disagree about what a
- * key is or what its default says:
- *
- *   1. **The static site build** (`site/build.ts`) BAKES every default into the
- *      emitted HTML. Crawlers, Lighthouse and a JS-disabled visitor see a
- *      complete page; SEO never depends on a fetch.
- *   2. **The server** (`guard.mixin.ts` + `drivers/siteCopy.ts`) stores the
- *      owner's EDITS — only the overridden keys — and serves them from a
- *      cacheable public endpoint.
- *   3. **The admin panel** lists every key with its default beside the stored
- *      value, so "reset" is a visible diff rather than a guess.
- *
- * The owner's "switch to hardcoding" exit ramp is already built: the bake step
- * IS the hardcoding; deleting the page's overlay fetch is the whole switch.
- *
- * ## Why a closed key list rather than free-form KV
- *
- * Every key here has a home in the page template. A free-form store would let
- * an edit succeed against a key nothing renders — a silent no-op the owner
- * would read as "editing is broken". `setSiteCopyValue` refuses unknown keys,
- * so a typo is a 400 naming the valid keys, not a row nobody reads.
- *
- * `seo.*` keys are baked-only by nature: the runtime overlay swaps visible
- * text nodes, and a crawler never runs it — so an edited `seo.title` takes
- * effect at the NEXT site build. The admin panel says so per key
- * ({@link SITE_COPY_BAKED_ONLY}).
- */
-/** Ceiling on one stored value. The longest default is ~400 chars; 4000 leaves
- *  room for a generous rewrite while refusing a pasted novel (the value rides
- *  an HTTP header-cached JSON body every visitor may fetch). */
-export declare const SITE_COPY_MAX_VALUE_LENGTH = 4000;
-/**
- * Every editable string on the marketing page, with the shipped default.
- * Ordered as the page reads, because this order is also the admin panel's.
- */
-export declare const SITE_COPY_DEFAULTS: {
-    readonly 'product.name': "Cursed Alchemy";
-    readonly 'product.tagline': "Build real, multi-user web applications visually. Identity, data, and media included.";
-    readonly 'seo.title': "Cursed Alchemy — Build visual architectures. Deploy production apps.";
-    readonly 'seo.description': "A visual studio engineered for resilient web applications. Combine core modules — user auth, document databases, media storage — on a live canvas that validates your architecture and deploys production-ready apps.";
-    readonly 'hero.title': "Build visual architectures. Deploy production apps.";
-    readonly 'hero.subtitle': "A visual studio engineered for building resilient web applications. Combine core modules—like user auth, databases, and media storage—on a live canvas that validates and deploys your stack automatically.";
-    readonly 'hero.cta': "Coming soon — sign-ups open shortly.";
-    readonly 'feature.studio.kicker': "Infrastructure Engine";
-    readonly 'feature.studio.title': "Orchestrated for Production";
-    readonly 'feature.studio.body': "Drag core infrastructure onto a live canvas and connect it seamlessly. The studio analyzes structural dependencies in real time, catching broken configurations instantly — before they ever reach production.";
-    readonly 'feature.engines.kicker': "Unified Ecosystem";
-    readonly 'feature.engines.title': "Sovereign Infrastructure, Built In";
-    readonly 'feature.engines.body': "Native authentication, relational databases, media vaults, and productivity tooling ship as one unified ecosystem — maintained centrally, running at peak performance, with no brittle third-party plugins to babysit.";
-    readonly 'feature.ownership.kicker': "Data Governance";
-    readonly 'feature.ownership.title': "Complete Ownership of Your Architecture";
-    readonly 'feature.ownership.body': "Every workspace runs in strict multi-tenant isolation with comprehensive change logs, automated backups, and total data portability. Your environment belongs to you — zero vendor lock-in. Ever.";
-    readonly 'modules.kicker': "Batteries Included";
-    readonly 'modules.title': "Every core module. One canvas.";
-    readonly 'modules.body': "User accounts, document databases, media vaults, scheduling, email, and staging sandboxes — first-party engines that snap together and ship as one verified stack.";
-    readonly 'plans.heading': "Plans";
-    readonly 'plans.note': "Pricing is being finalized. Join today as an early tester to secure free access and help shape the product roadmap.";
-    readonly 'plan.free.name': "Explorer";
-    readonly 'plan.free.price': "Free";
-    readonly 'plan.free.body': "• Build and host one workspace\n• Access to foundational modules";
-    readonly 'plan.pro.name': "Alchemist";
-    readonly 'plan.pro.price': "Coming soon";
-    readonly 'plan.pro.body': "• Unlock all advanced modules\n• Expanded storage limits\n• Priority developer support";
-    readonly 'plan.team.name': "Guild";
-    readonly 'plan.team.price': "Coming soon";
-    readonly 'plan.team.body': "• Collaborative team workspaces\n• Role-based access control (RBAC)\n• Full system audit logs";
-    readonly 'about.heading': "About";
-    readonly 'about.body': "Cursed Alchemy is built independently with an uncompromising focus on core infrastructure—authentication, isolation, secure backups, and audit trails. We master the complex foundational architecture so you can focus entirely on your unique user experience.";
-    readonly 'signin.label': "Sign in";
-    readonly 'footer.note': "© Cursed Alchemy. All rights reserved.";
-};
-export type SiteCopyKey = keyof typeof SITE_COPY_DEFAULTS;
-export declare const SITE_COPY_KEYS: readonly SiteCopyKey[];
-export declare const isSiteCopyKey: (value: string) => value is SiteCopyKey;
-/**
- * Keys the runtime overlay cannot apply (they live in `<head>`, which only a
- * rebuild re-emits). The admin panel labels these "applies at next site
- * publish" instead of pretending the edit is live.
- */
-export declare const SITE_COPY_BAKED_ONLY: readonly SiteCopyKey[];
-//# sourceMappingURL=siteCopy.d.ts.map

package/dist/core/site/siteCopy.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"siteCopy.d.ts","sourceRoot":"","sources":["../../../src/core/site/siteCopy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAEH;;gEAEgE;AAChE,eAAO,MAAM,0BAA0B,OAAO,CAAC;AAE/C;;;GAGG;AACH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmDrB,CAAC;AAEX,MAAM,MAAM,WAAW,GAAG,MAAM,OAAO,kBAAkB,CAAC;AAE1D,eAAO,MAAM,cAAc,EAAqD,SAAS,WAAW,EAAE,CAAC;AAEvG,eAAO,MAAM,aAAa,GAAI,OAAO,MAAM,KAAG,KAAK,IAAI,WACb,CAAC;AAE3C;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,EAAE,SAAS,WAAW,EAAoD,CAAC"}

package/dist/core/site/siteCopy.js

@@ -1,92 +0,0 @@
-/**
- * The marketing-site copy contract — owner decision **D36** (2026-07-27).
- *
- * ## What D36 actually asked for
- *
- * The owner's answer to "give me the words" was: *"I want to see it first, use
- * your judgment for now. Make an admin section where I can edit them. Put in
- * placeholders or good values now. Values I edit are in the db. I potentially
- * switch to hardcoding them if this is too slow for the page loads to get and
- * fill in the text, caching may help."*
- *
- * That decomposes into one contract with three consumers, and this module is
- * the single source all three import so they can never disagree about what a
- * key is or what its default says:
- *
- *   1. **The static site build** (`site/build.ts`) BAKES every default into the
- *      emitted HTML. Crawlers, Lighthouse and a JS-disabled visitor see a
- *      complete page; SEO never depends on a fetch.
- *   2. **The server** (`guard.mixin.ts` + `drivers/siteCopy.ts`) stores the
- *      owner's EDITS — only the overridden keys — and serves them from a
- *      cacheable public endpoint.
- *   3. **The admin panel** lists every key with its default beside the stored
- *      value, so "reset" is a visible diff rather than a guess.
- *
- * The owner's "switch to hardcoding" exit ramp is already built: the bake step
- * IS the hardcoding; deleting the page's overlay fetch is the whole switch.
- *
- * ## Why a closed key list rather than free-form KV
- *
- * Every key here has a home in the page template. A free-form store would let
- * an edit succeed against a key nothing renders — a silent no-op the owner
- * would read as "editing is broken". `setSiteCopyValue` refuses unknown keys,
- * so a typo is a 400 naming the valid keys, not a row nobody reads.
- *
- * `seo.*` keys are baked-only by nature: the runtime overlay swaps visible
- * text nodes, and a crawler never runs it — so an edited `seo.title` takes
- * effect at the NEXT site build. The admin panel says so per key
- * ({@link SITE_COPY_BAKED_ONLY}).
- */
-/** Ceiling on one stored value. The longest default is ~400 chars; 4000 leaves
- *  room for a generous rewrite while refusing a pasted novel (the value rides
- *  an HTTP header-cached JSON body every visitor may fetch). */
-export const SITE_COPY_MAX_VALUE_LENGTH = 4000;
-/**
- * Every editable string on the marketing page, with the shipped default.
- * Ordered as the page reads, because this order is also the admin panel's.
- */
-export const SITE_COPY_DEFAULTS = {
-    'product.name': 'Cursed Alchemy',
-    'product.tagline': 'Build real, multi-user web applications visually. Identity, data, and media included.',
-    'seo.title': 'Cursed Alchemy — Build visual architectures. Deploy production apps.',
-    'seo.description': 'A visual studio engineered for resilient web applications. Combine core modules — user auth, document databases, media storage — on a live canvas that validates your architecture and deploys production-ready apps.',
-    'hero.title': 'Build visual architectures. Deploy production apps.',
-    'hero.subtitle': 'A visual studio engineered for building resilient web applications. Combine core modules—like user auth, databases, and media storage—on a live canvas that validates and deploys your stack automatically.',
-    'hero.cta': 'Coming soon — sign-ups open shortly.',
-    'feature.studio.kicker': 'Infrastructure Engine',
-    'feature.studio.title': 'Orchestrated for Production',
-    'feature.studio.body': 'Drag core infrastructure onto a live canvas and connect it seamlessly. The studio analyzes structural dependencies in real time, catching broken configurations instantly — before they ever reach production.',
-    'feature.engines.kicker': 'Unified Ecosystem',
-    'feature.engines.title': 'Sovereign Infrastructure, Built In',
-    'feature.engines.body': 'Native authentication, relational databases, media vaults, and productivity tooling ship as one unified ecosystem — maintained centrally, running at peak performance, with no brittle third-party plugins to babysit.',
-    'feature.ownership.kicker': 'Data Governance',
-    'feature.ownership.title': 'Complete Ownership of Your Architecture',
-    'feature.ownership.body': 'Every workspace runs in strict multi-tenant isolation with comprehensive change logs, automated backups, and total data portability. Your environment belongs to you — zero vendor lock-in. Ever.',
-    'modules.kicker': 'Batteries Included',
-    'modules.title': 'Every core module. One canvas.',
-    'modules.body': 'User accounts, document databases, media vaults, scheduling, email, and staging sandboxes — first-party engines that snap together and ship as one verified stack.',
-    'plans.heading': 'Plans',
-    'plans.note': 'Pricing is being finalized. Join today as an early tester to secure free access and help shape the product roadmap.',
-    'plan.free.name': 'Explorer',
-    'plan.free.price': 'Free',
-    'plan.free.body': '• Build and host one workspace\n• Access to foundational modules',
-    'plan.pro.name': 'Alchemist',
-    'plan.pro.price': 'Coming soon',
-    'plan.pro.body': '• Unlock all advanced modules\n• Expanded storage limits\n• Priority developer support',
-    'plan.team.name': 'Guild',
-    'plan.team.price': 'Coming soon',
-    'plan.team.body': '• Collaborative team workspaces\n• Role-based access control (RBAC)\n• Full system audit logs',
-    'about.heading': 'About',
-    'about.body': 'Cursed Alchemy is built independently with an uncompromising focus on core infrastructure—authentication, isolation, secure backups, and audit trails. We master the complex foundational architecture so you can focus entirely on your unique user experience.',
-    'signin.label': 'Sign in',
-    'footer.note': '© Cursed Alchemy. All rights reserved.',
-};
-export const SITE_COPY_KEYS = Object.freeze(Object.keys(SITE_COPY_DEFAULTS));
-export const isSiteCopyKey = (value) => Object.hasOwn(SITE_COPY_DEFAULTS, value);
-/**
- * Keys the runtime overlay cannot apply (they live in `<head>`, which only a
- * rebuild re-emits). The admin panel labels these "applies at next site
- * publish" instead of pretending the edit is live.
- */
-export const SITE_COPY_BAKED_ONLY = Object.freeze(['seo.title', 'seo.description']);
-//# sourceMappingURL=siteCopy.js.map

package/dist/core/site/siteCopy.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"siteCopy.js","sourceRoot":"","sources":["../../../src/core/site/siteCopy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAEH;;gEAEgE;AAChE,MAAM,CAAC,MAAM,0BAA0B,GAAG,IAAI,CAAC;AAE/C;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,cAAc,EAAE,gBAAgB;IAChC,iBAAiB,EAAE,uFAAuF;IAE1G,WAAW,EAAE,sEAAsE;IACnF,iBAAiB,EACf,uNAAuN;IAEzN,YAAY,EAAE,qDAAqD;IACnE,eAAe,EACb,6MAA6M;IAC/M,UAAU,EAAE,sCAAsC;IAElD,uBAAuB,EAAE,uBAAuB;IAChD,sBAAsB,EAAE,6BAA6B;IACrD,qBAAqB,EACnB,gNAAgN;IAClN,wBAAwB,EAAE,mBAAmB;IAC7C,uBAAuB,EAAE,oCAAoC;IAC7D,sBAAsB,EACpB,wNAAwN;IAC1N,0BAA0B,EAAE,iBAAiB;IAC7C,yBAAyB,EAAE,yCAAyC;IACpE,wBAAwB,EACtB,mMAAmM;IAErM,gBAAgB,EAAE,oBAAoB;IACtC,eAAe,EAAE,gCAAgC;IACjD,cAAc,EACZ,oKAAoK;IAEtK,eAAe,EAAE,OAAO;IACxB,YAAY,EACV,qHAAqH;IACvH,gBAAgB,EAAE,UAAU;IAC5B,iBAAiB,EAAE,MAAM;IACzB,gBAAgB,EAAE,kEAAkE;IACpF,eAAe,EAAE,WAAW;IAC5B,gBAAgB,EAAE,aAAa;IAC/B,eAAe,EAAE,wFAAwF;IACzG,gBAAgB,EAAE,OAAO;IACzB,iBAAiB,EAAE,aAAa;IAChC,gBAAgB,EACd,+FAA+F;IAEjG,eAAe,EAAE,OAAO;IACxB,YAAY,EACV,kQAAkQ;IAEpQ,cAAc,EAAE,SAAS;IACzB,aAAa,EAAE,wCAAwC;CAC/C,CAAC;AAIX,MAAM,CAAC,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAA2B,CAAC;AAEvG,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,KAAa,EAAwB,EAAE,CACnE,MAAM,CAAC,MAAM,CAAC,kBAAkB,EAAE,KAAK,CAAC,CAAC;AAE3C;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAA2B,MAAM,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,iBAAiB,CAAC,CAAC,CAAC"}

package/dist/core/slots.d.ts

@@ -1,23 +0,0 @@
-/**
- * The Slot registry (02 §6.1) — a closed set. A fill targeting anything else is
- * V1 `slot-unknown`, which is the difference between "my panel silently never
- * rendered" and a build error naming the typo.
- */
-export declare const SLOTS: readonly ["HeaderLeft", "HeaderRight", "SidebarTop", "SidebarFooter", "InspectorTab", "DashboardWidget", "ItemContextMenu", "EditorToolbar", "StatusBar"];
-export type SlotId = (typeof SLOTS)[number];
-export declare const isSlotId: (value: string) => value is SlotId;
-/**
- * Fixed z-index bands (02 §6.2). Literal z-index values anywhere else are a lint
- * error; the Portal Provider assigns `bandBase + stackDepth` inside the band so
- * two engines opening dialogs at once stack deterministically.
- */
-export declare const Z_BANDS: {
-    readonly content: 0;
-    readonly sticky: 100;
-    readonly overlay: 1000;
-    readonly popover: 1100;
-    readonly toast: 1200;
-    readonly critical: 1300;
-};
-export type ZBand = keyof typeof Z_BANDS;
-//# sourceMappingURL=slots.d.ts.map

package/dist/core/slots.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"slots.d.ts","sourceRoot":"","sources":["../../src/core/slots.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,eAAO,MAAM,KAAK,2JAUR,CAAC;AAEX,MAAM,MAAM,MAAM,GAAG,CAAC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC;AAI5C,eAAO,MAAM,QAAQ,GAAI,OAAO,MAAM,KAAG,KAAK,IAAI,MAA6B,CAAC;AAEhF;;;;GAIG;AACH,eAAO,MAAM,OAAO;;;;;;;CAOV,CAAC;AAEX,MAAM,MAAM,KAAK,GAAG,MAAM,OAAO,OAAO,CAAC"}

package/dist/core/slots.js

@@ -1,32 +0,0 @@
-/**
- * The Slot registry (02 §6.1) — a closed set. A fill targeting anything else is
- * V1 `slot-unknown`, which is the difference between "my panel silently never
- * rendered" and a build error naming the typo.
- */
-export const SLOTS = [
-    'HeaderLeft',
-    'HeaderRight', // app chrome (auth UI renders here by default)
-    'SidebarTop',
-    'SidebarFooter',
-    'InspectorTab', // fills add tabs: {tabTitle, panel}
-    'DashboardWidget', // SystemUtility dashboard grid cells
-    'ItemContextMenu',
-    'EditorToolbar',
-    'StatusBar',
-];
-const SLOT_SET = new Set(SLOTS);
-export const isSlotId = (value) => SLOT_SET.has(value);
-/**
- * Fixed z-index bands (02 §6.2). Literal z-index values anywhere else are a lint
- * error; the Portal Provider assigns `bandBase + stackDepth` inside the band so
- * two engines opening dialogs at once stack deterministically.
- */
-export const Z_BANDS = {
-    content: 0,
-    sticky: 100,
-    overlay: 1000,
-    popover: 1100,
-    toast: 1200,
-    critical: 1300, // GuardEngine lock screen — always wins
-};
-//# sourceMappingURL=slots.js.map

package/dist/core/slots.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"slots.js","sourceRoot":"","sources":["../../src/core/slots.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,CAAC,MAAM,KAAK,GAAG;IACnB,YAAY;IACZ,aAAa,EAAE,+CAA+C;IAC9D,YAAY;IACZ,eAAe;IACf,cAAc,EAAE,oCAAoC;IACpD,iBAAiB,EAAE,qCAAqC;IACxD,iBAAiB;IACjB,eAAe;IACf,WAAW;CACH,CAAC;AAIX,MAAM,QAAQ,GAAwB,IAAI,GAAG,CAAS,KAAK,CAAC,CAAC;AAE7D,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,KAAa,EAAmB,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAEhF;;;;GAIG;AACH,MAAM,CAAC,MAAM,OAAO,GAAG;IACrB,OAAO,EAAE,CAAC;IACV,MAAM,EAAE,GAAG;IACX,OAAO,EAAE,IAAI;IACb,OAAO,EAAE,IAAI;IACb,KAAK,EAAE,IAAI;IACX,QAAQ,EAAE,IAAI,EAAE,wCAAwC;CAChD,CAAC"}