# ts-libs: the exports of the @spy4x/* packages on JSR, one per line.
# Columns, separated by one tab: name, kind, import specifier, summary.
# Search: git grep -n -i '<word>' origin/main -- llms.txt
# Use: deno add jsr:<package>, then import { <name> } from "<import specifier>".
# Left out: a type or interface that describes the parameters of a listed function or class Foo, foo or createFoo and is named Foo plus Props, Labels, Options, Config, Deps, Input. Its signature: https://jsr.io/<package>/doc
# Usage: each entry point's module doc, https://jsr.io/<package>/doc/<entry>
BalanceFailure	type	@spy4x/bank-statements	One reason a statement did not verify.
DEFAULT_MAX_BYTES	constant	@spy4x/bank-statements	The default `maxBytes`: 10 MiB.
DEFAULT_MAX_ROWS	constant	@spy4x/bank-statements	The default `maxRows`.
ParsedStatement	interface	@spy4x/bank-statements	What a parser read from one file.
PdfColumnRange	interface	@spy4x/bank-statements	The x range of one column on a PDF page, in PDF points from the left edge.
PdfToken	type	@spy4x/bank-statements	One step of a PDF line pattern.
ProfileMatch	interface	@spy4x/bank-statements	A profile and how well a file fits it, from 0 (not at all) to 1 (every header name).
RowError	interface	@spy4x/bank-statements	A row the parser could not read, and why.
StatementBalance	interface	@spy4x/bank-statements	A balance the file states, with the line it is written on.
StatementError	class	@spy4x/bank-statements	Thrown when a whole file is refused.
StatementErrorCode	type	@spy4x/bank-statements	Why a whole file was refused.
StatementFormat	type	@spy4x/bank-statements	A file format detectFormat can name.
StatementLimits	interface	@spy4x/bank-statements	Size limits for a file from a stranger.
StatementPdfLayout	type	@spy4x/bank-statements	How a PDF statement's lines become the columns the rest of the profile names.
StatementProfile	interface	@spy4x/bank-statements	One bank's CSV export format.
StatementRow	interface	@spy4x/bank-statements	One transaction read from a statement.
Verification	type	@spy4x/bank-statements	What verifyStatement found.
builtInProfiles	constant	@spy4x/bank-statements	The profiles this package ships, one per CSV shape, each with a synthetic fixture in `fixtures/` and a test that parses and verifies it.
detectFormat	function	@spy4x/bank-statements	The format of a statement file, decided by its content, never by its name: `"%PDF-"` is a PDF, `OFXHEADER:` or an `<OFX>` element is OFX or QFX, an XML `Document` in a CAMT.053 namespace is CAMT.053, `!Type:` is QIF, `:20:` with a `:60F:` balance is MT940, and text that splits into the same number of columns on most lines is CSV.
foldHeader	function	@spy4x/bank-statements	A header name as profiles compare it: Unicode-normalised, trimmed, lower case, one space.
guessProfile	function	@spy4x/bank-statements	Build a candidate profile for a CSV file from the file alone, for a person to confirm: the delimiter, the header line (the first line with as many columns as most lines), the date column and pattern, the amount as a debit and credit pair or one signed column, the number format, and the balance, payee, description and reference columns by their header names.
matchProfile	function	@spy4x/bank-statements	Rank `profiles` by how well `sample`, the start of a decoded CSV file, fits their fingerprint: the header line split on the profile's delimiter must have its column count, and the score is the share of header names equal in the same place.
parseCamt053	function	@spy4x/bank-statements	Read a CAMT.053 file: its booked entries (`Ntry` with status `BOOK`; pending and informational ones are not in the balances, so they are left out), its opening balance (`OPBD`, or `PRCD`, the previous closing) and its closing balance (`CLBD`).
parseMt940	function	@spy4x/bank-statements	Read an MT940 file.
parseOfx	function	@spy4x/bank-statements	Read an OFX or QFX file: its transactions (`STMTTRN`), in the statement currency (`CURDEF`), and its closing balance (`LEDGERBAL`).
parseQif	function	@spy4x/bank-statements	Read a QIF file's transactions.
parseWithProfile	function	@spy4x/bank-statements	Read CSV text with a profile.
readStatement	function	@spy4x/bank-statements	Read a statement file of any supported format.
statementProfile	constant	@spy4x/bank-statements	The arktype schema of StatementProfile, for a profile read from storage or an AI.
verifyStatement	function	@spy4x/bank-statements	Check a statement against its own balances.
DEFAULT_SAMPLE_ROWS	constant	@spy4x/bank-statements/infer	How many lines a sample has by default.
InferFailure	type	@spy4x/bank-statements/infer	Why no profile was found.
InferredProfile	type	@spy4x/bank-statements/infer	A file that reads and verifies, and where the way to read it came from.
ProfileProposal	type	@spy4x/bank-statements/infer	What the model proposes: the structure of a profile, without the date pattern and the number format, which are read from the real values.
ProfileProposalRequest	interface	@spy4x/bank-statements/infer	What the port is asked: the prompt to send, and the schema the reply's JSON must satisfy.
ProposeProfile	type	@spy4x/bank-statements/infer	The language model, as a port: resolves to the parsed JSON of the reply, or `null` when there is none.
inferProfile	function	@spy4x/bank-statements/infer	Find a profile that reads a statement and makes its balances add up.
maskSample	function	@spy4x/bank-statements/infer	The first `maxRows` of `lines`, masked so that no value leaves the host: every digit (any Unicode number) becomes `9`, every upper- or title-case letter `X`, and every other letter, mark, other symbol (an emoji, a circled letter), format character (invisible tag characters can spell text), lone surrogate, private-use or unassigned code point, and line or paragraph separator `x`.
profilePrompt	function	@spy4x/bank-statements/infer	The prompt that asks a model for a profile's structure from a masked sample: it says how the sample was masked, names each field of the reply, and contains the word "json" and an example reply, as DeepSeek's JSON mode requires.
DEFAULT_MAX_PAGES	constant	@spy4x/bank-statements/pdf	The default `maxPages`.
NO_TEXT_LAYER_MESSAGE	constant	@spy4x/bank-statements/pdf	What a `"no-text-layer"` refusal says.
PdfLine	interface	@spy4x/bank-statements/pdf	The words of one PDF line, left to right.
PdfPage	interface	@spy4x/bank-statements/pdf	One page's lines, top to bottom.
PdfRefusal	interface	@spy4x/bank-statements/pdf	A refused file, with a message a person can act on.
PdfRefusalCode	type	@spy4x/bank-statements/pdf	Why extractPdfLines refused a file.
PdfWord	interface	@spy4x/bank-statements/pdf	A word on a PDF line.
extractPdfLines	function	@spy4x/bank-statements/pdf	The lines of every page of a PDF, top to bottom, each line's words left to right with their x.
parsePdfStatement	function	@spy4x/bank-statements/pdf	Read the lines of a PDF statement with a profile that has a `pdf` layout.
BillingError	interface	@spy4x/billing	A failed request, safe to log: it never carries the secret key.
BillingErrorCode	type	@spy4x/billing	Why a request to the provider failed.
BillingEvent	type	@spy4x/billing	A verified webhook delivery, in provider-neutral terms.
BillingEventRejectReason	type	@spy4x/billing	Why a delivery was refused: the signature check's reasons, or a payload it cannot read.
BillingEventType	enum	@spy4x/billing	What happened, as the discriminant of BillingEvent.
BillingPeriod	enum	@spy4x/billing	How often a price bills.
BillingProvider	interface	@spy4x/billing	One payment provider behind one interface.
CancelAtPeriodEndRequest	interface	@spy4x/billing	What BillingProvider.setCancelAtPeriodEnd needs.
CancelRequest	interface	@spy4x/billing	What BillingProvider.cancelNow needs.
CheckoutRequest	interface	@spy4x/billing	What BillingProvider.createCheckout needs to start a subscription checkout.
CheckoutSession	interface	@spy4x/billing	A hosted checkout page to send the customer to.
LastPaymentRequest	interface	@spy4x/billing	What BillingProvider.readLastPayment needs.
PaidPayment	interface	@spy4x/billing	The newest payment that moved money for a subscription, read from the provider when asked rather than from an event, so it shows refunds made anywhere, the provider's dashboard included.
ParseEventResult	type	@spy4x/billing	Result of BillingProvider.parseEvent.
Payment	interface	@spy4x/billing	A payment, successful or failed, as an event reports it.
PaymentEvent	interface	@spy4x/billing	A payment that went through or failed.
PlanRef	interface	@spy4x/billing	One of the app's plans, mapped to the provider's price that bills it.
PortalRequest	interface	@spy4x/billing	What BillingProvider.createPortalSession needs.
PortalSession	interface	@spy4x/billing	A customer portal page, where the customer changes plan, card or cancels and sees invoices.
QuantityRequest	interface	@spy4x/billing	What BillingProvider.updateQuantity needs to change how many seats a plan bills.
Refund	interface	@spy4x/billing	A refund the provider created.
RefundRequest	interface	@spy4x/billing	What BillingProvider.refundPayment needs to refund a payment in full.
RefundStatus	enum	@spy4x/billing	Where a refund stands.
STRIPE_API_VERSION	constant	@spy4x/billing	The Stripe API version every request is pinned to.
STRIPE_SIGNATURE_HEADER	constant	@spy4x/billing	Stripe's `Stripe-Signature: t=<seconds>,v1=<hex>[,v1=<hex>][,v0=<hex>]` header layout.
Subscription	interface	@spy4x/billing	A subscription as an event reports it.
SubscriptionEvent	interface	@spy4x/billing	A subscription created, changed or ended.
SubscriptionStatus	enum	@spy4x/billing	Where a subscription stands, as every provider reports it.
TrialEndRequest	interface	@spy4x/billing	What BillingProvider.setTrialEnd needs to give a subscription time at no charge.
createStripeBilling	function	@spy4x/billing	A Stripe BillingProvider.
STRIPE_API_VERSION	constant	@spy4x/billing/stripe	The Stripe API version every request is pinned to.
STRIPE_SIGNATURE_HEADER	constant	@spy4x/billing/stripe	Stripe's `Stripe-Signature: t=<seconds>,v1=<hex>[,v1=<hex>][,v0=<hex>]` header layout.
createStripeBilling	function	@spy4x/billing/stripe	A Stripe BillingProvider.
CalDavCalendar	interface	@spy4x/caldav	A calendar collection.
CalDavClient	interface	@spy4x/caldav	A CalDAV client bound to one server and one user.
CalDavDiscovery	interface	@spy4x/caldav	Where the user's calendars live, found by CalDavClient.discover.
CalDavError	interface	@spy4x/caldav	A failed call: the code to branch on, a message for logs and, when there was one, the status.
CalDavErrorCode	enum	@spy4x/caldav	Why a call failed.
CalDavMultiget	interface	@spy4x/caldav	The outcome of CalDavClient.getObjects.
CalDavObject	interface	@spy4x/caldav	One calendar object resource: an iCalendar document and the etag it was read with.
CalDavResult	type	@spy4x/caldav	The outcome of a call: the value, or why it failed.
CalDavSubscriptionEvent	interface	@spy4x/caldav	One event of a calendar subscription, as CalDavClient.readSubscription returns it: every component of the feed with this UID (the master and its `RECURRENCE-ID` overrides) in one `VCALENDAR`, with the `VTIMEZONE`s they name.
CalDavWrite	interface	@spy4x/caldav	The outcome of a write: where the object is and its new etag.
CreateObjectOptions	interface	@spy4x/caldav	Options of CalDavClient.createObject.
ListCalendarsOptions	interface	@spy4x/caldav	Options of CalDavClient.listCalendars.
ListObjectsOptions	interface	@spy4x/caldav	Options of CalDavClient.listObjects.
NewCalendar	interface	@spy4x/caldav	Properties of a new calendar.
createCalDavClient	function	@spy4x/caldav	Create a client for one CalDAV server and one user.
CachedObject	interface	@spy4x/caldav/indexeddb	The part of a cached object the store reads.
IndexedDbCalDavCache	interface	@spy4x/caldav/indexeddb	A calendar and object cache over IndexedDB.
IndexedDbCalDavCacheCustomOptions	interface	@spy4x/caldav/indexeddb	Options for a cache of a richer object type: it must say how to build one.
IndexedDbUnavailableError	class	@spy4x/caldav/indexeddb	Thrown when the cache cannot be opened: IndexedDB missing, blocked or refused (private window).
createIndexedDbCalDavCache	function	@spy4x/caldav/indexeddb	Creates the cache.
CalDavSync	interface	@spy4x/caldav/sync	The engine made by createCalDavSync.
CalDavSyncStore	interface	@spy4x/caldav/sync	Where the copy lives.
CalDavSyncTransport	interface	@spy4x/caldav/sync	How the server is reached.
StoredCalendar	type	@spy4x/caldav/sync	A calendar as the store keeps it: what the server listed, plus how far the copy is in step.
SyncCalendar	interface	@spy4x/caldav/sync	The part of a calendar the engine reads.
SyncChanges	interface	@spy4x/caldav/sync	What a run changes in one calendar.
SyncListOptions	interface	@spy4x/caldav/sync	Options of the transport's object calls.
SyncObject	interface	@spy4x/caldav/sync	One calendar object: the raw iCalendar text and the version it came from.
SyncObjectVersion	interface	@spy4x/caldav/sync	An object's address and version, without its body.
SyncOutcome	interface	@spy4x/caldav/sync	What one CalDavSync.refresh found.
SyncTransportResult	type	@spy4x/caldav/sync	What a transport call reports.
createCalDavSync	function	@spy4x/caldav/sync	Builds the engine over a transport and a store.
createClientTransport	function	@spy4x/caldav/sync	A transport over a CalDavClient, for code that talks CalDAV directly (a server).
childUrl	function	@spy4x/caldav/url	The URL of a new member of `collectionUrl`, named `segment` encoded with `encodeURIComponent`.
isSameOrigin	function	@spy4x/caldav/url	Whether `target` is on the same origin as `serverUrl`: the same scheme, host and port.
resolveHref	function	@spy4x/caldav/url	Resolve an `href` from a multistatus body against the URL of the request that returned it.
sameResource	function	@spy4x/caldav/url	Whether two absolute URLs name the same resource: same origin, same query and the same path segments once each segment is percent-decoded.
CalDavSendFailure	type	@spy4x/caldav/write	How the queue reads a failed send.
CalDavWriteCommand	interface	@spy4x/caldav/write	What the queue sends for one entry.
CalDavWriteError	class	@spy4x/caldav/write	The error CalDavWriteTransport.send throws; carries what the server answered.
CalDavWriteOptions	interface	@spy4x/caldav/write	What an app supplies to turn a queue entry into a CalDAV request.
CalDavWriteTransport	interface	@spy4x/caldav/write	The three outbox ports this module fills.
CalDavWriter	type	@spy4x/caldav/write	The object calls a write transport needs.
classifyCalDavError	function	@spy4x/caldav/write	Reads a failed CalDAV call as the queue needs it.
createCalDavWriteTransport	function	@spy4x/caldav/write	Builds the `send`, `fetchServer` and `classify` ports of an outbox over CalDAV.
isSafeEntityId	function	@spy4x/caldav/write	Whether an entity id can name an object: letters, digits, `.`, `_`, `~` and `-`, and not `.` or `..`.
objectUrl	function	@spy4x/caldav/write	The address createCalDavWriteTransport gives a created entity's object.
APPLE_ICAL_NS	constant	@spy4x/caldav/xml	Apple's iCal namespace, home of `calendar-color` and `calendar-order`.
CALDAV_NS	constant	@spy4x/caldav/xml	The CalDAV namespace (RFC 4791).
CALENDARSERVER_NS	constant	@spy4x/caldav/xml	The CalendarServer namespace, home of `getctag`.
CalendarProps	interface	@spy4x/caldav/xml	Calendar collection properties written by mkcalendarBody and proppatchBody.
CalendarQueryOptions	interface	@spy4x/caldav/xml	Options of calendarQueryBody.
DAV_NS	constant	@spy4x/caldav/xml	The WebDAV namespace (RFC 4918).
DEFAULT_MAX_XML_BYTES	constant	@spy4x/caldav/xml	Default size limit of parseXml and parseMultistatus: 10 MiB of UTF-8.
DEFAULT_MAX_XML_DEPTH	constant	@spy4x/caldav/xml	Default nesting limit of parseXml and parseMultistatus.
DavPropstat	interface	@spy4x/caldav/xml	One `propstat` of a `response`: its HTTP status and the property elements under it.
DavResponse	interface	@spy4x/caldav/xml	One `response` of a multistatus.
XmlAttribute	interface	@spy4x/caldav/xml	An attribute with its namespace resolved.
XmlElement	interface	@spy4x/caldav/xml	An element with its namespace resolved.
XmlError	interface	@spy4x/caldav/xml	A refused document: the code to branch on and a message for logs.
XmlErrorCode	enum	@spy4x/caldav/xml	Why a document was refused.
XmlName	interface	@spy4x/caldav/xml	A namespace-qualified name.
XmlNode	type	@spy4x/caldav/xml	A child of an element: another element, or decoded text.
XmlParseOptions	interface	@spy4x/caldav/xml	Limits for parseXml and parseMultistatus.
XmlResult	type	@spy4x/caldav/xml	The outcome of a parse: the value, or why the document was refused.
calendarMultigetBody	function	@spy4x/caldav/xml	A `calendar-multiget` REPORT body (RFC 4791 §7.9) for `hrefs`, written as given.
calendarQueryBody	function	@spy4x/caldav/xml	A `calendar-query` REPORT body (RFC 4791 §7.8).
childElement	function	@spy4x/caldav/xml	The first child element of `element` named `namespace`/`name`.
childElements	function	@spy4x/caldav/xml	The child elements of `element` named `namespace`/`name`, in document order.
escapeXml	function	@spy4x/caldav/xml	Escape text for an XML element body or a double-quoted attribute value.
getProp	function	@spy4x/caldav/xml	The property `namespace`/`name` from a 2xx propstat of `response`; never from a 404 one.
getPropText	function	@spy4x/caldav/xml	The text of getProp, untrimmed, or `undefined` when the property is not there.
mkcalendarBody	function	@spy4x/caldav/xml	A `MKCALENDAR` body (RFC 4791 §5.3.1).
parseMultistatus	function	@spy4x/caldav/xml	Parse a `207 Multi-Status` body into its responses.
parseXml	function	@spy4x/caldav/xml	Parse an XML document into a tree of elements with resolved namespaces.
propfindBody	function	@spy4x/caldav/xml	A `PROPFIND` body asking for `props`.
proppatchBody	function	@spy4x/caldav/xml	A `PROPPATCH` body that sets the given calendar properties (RFC 4918 §9.2).
serializeXml	function	@spy4x/caldav/xml	Serialise an element tree as an XML document.
textContent	function	@spy4x/caldav/xml	All text under `element`, in document order, with nothing trimmed.
xmlElement	function	@spy4x/caldav/xml	Build an element.
Canonicalization	type	@spy4x/email	Which canonicalization RFC 6376 §3.4 applies to a header or a body.
DARK_HTML_SHELL_THEME	constant	@spy4x/email	The look `htmlWrap` had before HtmlShellOptions.theme existed: a dark navy body with light text and an orange brand link.
DEFAULT_HTML_SHELL_THEME	constant	@spy4x/email	`htmlWrap`'s default look: a neutral light shell with no product association, so a caller gets a plain, readable letter unless it asks for something else.
DEFAULT_MAX_HEADER_FIELDS	constant	@spy4x/email	Default DkimVerifyOptions.maxHeaderFields.
DEFAULT_MAX_MESSAGE_LENGTH	constant	@spy4x/email	Default DkimVerifyOptions.maxMessageLength: 10 MiB of octets, which is above the message size limit relays usually impose and far below anything that takes a noticeable time to canonicalize.
DEFAULT_MAX_SIGNATURES	constant	@spy4x/email	Default DkimVerifyOptions.maxSignatures.
DEFAULT_MAX_SIGNED_HEADER_NAMES	constant	@spy4x/email	Default DkimVerifyOptions.maxSignedHeaderNames.
DkimAlgorithm	type	@spy4x/email	Signature algorithms this verifier implements (RFC 6376 §3.3, RFC 8463).
DkimBodyCoverage	interface	@spy4x/email	How much of the canonicalized body a signature's `bh=` tag actually covers.
DkimKeyAlgorithm	type	@spy4x/email	Key algorithms a DNS TXT record's `k=` tag may name.
DkimParseError	class	@spy4x/email	Thrown for a malformed DKIM-Signature header or DNS key record.
DkimPublicKey	interface	@spy4x/email	A DKIM public key extracted from a DNS TXT record.
DkimSignatureHeader	interface	@spy4x/email	Parsed `DKIM-Signature` header value.
DkimVerificationResult	interface	@spy4x/email	Outcome of verifyDkim.
DkimVerifyOptions	interface	@spy4x/email	Options for verifyDkim and fetchDkimPublicKey.
DnsTxtResolver	interface	@spy4x/email	DNS TXT lookup contract, defaulting to `resolveTxt` of `@spy4x/net/dns`, which works on Deno, Node and Bun and needs `--allow-net` on Deno.
EmailAddress	interface	@spy4x/email	A parsed mailbox: the addr-spec, plus the display name that preceded it.
EmailAttachment	interface	@spy4x/email	One attachment: text content plus the metadata the MIME part needs.
EmailMessage	interface	@spy4x/email	Everything one send needs.
EmailSender	interface	@spy4x/email	The port every transport implements, and the only thing callers depend on.
HtmlShellOptions	interface	@spy4x/email	Everything the shell interpolates around a body.
HtmlShellTheme	interface	@spy4x/email	The four colours htmlWrap draws the shell in.
ListUnsubscribe	interface	@spy4x/email	The `List-Unsubscribe` targets of one message.
MIN_RSA_KEY_BITS	constant	@spy4x/email	RFC 8301 §3.2: "Verifiers MUST NOT consider signatures using RSA keys of less than 1024 bits as valid."
ParsedRecipients	interface	@spy4x/email	The recipient list after parsing: deduplicated, with what was dropped recorded.
REDACTED_CREDENTIAL	constant	@spy4x/email	Placeholder that replaces a credential in any string this module reports.
SendFailure	interface	@spy4x/email	No mail was sent, or some recipient was refused.
SendResult	type	@spy4x/email	Outcome of one send attempt.
SendSuccess	interface	@spy4x/email	Every recipient the transport saw was accepted by the server.
SmtpOptions	interface	@spy4x/email	Connection settings.
SmtpSendInfo	interface	@spy4x/email	The slice of a nodemailer send result this adapter reads.
SmtpTransport	interface	@spy4x/email	The slice of a nodemailer transport this adapter calls.
SmtpTransportFactory	interface	@spy4x/email	Builds a transport from a connection configuration.
TRANSIT_ADDED_HEADER_NAMES	constant	@spy4x/email	Header field names a relay is expected to add to a message in transit.
assertNoControlCharacters	function	@spy4x/email	Reject a value that carries a control character — CR and LF above all.
assertSendableMessage	function	@spy4x/email	Validate a message before any transport sees it.
canonicalizeBody	function	@spy4x/email	Deprecated: An internal step of `verifyDkim`, exported by mistake; it goes in 2.0. Canonicalize a message body per RFC 6376 §3.4.3 (simple) / §3.4.4 (relaxed).
canonicalizeHeader	function	@spy4x/email	Deprecated: An internal step of `verifyDkim`, exported by mistake; it goes in 2.0. Canonicalize one header field per RFC 6376 §3.4.1 (simple) / §3.4.2 (relaxed).
createConsoleSender	function	@spy4x/email	A sender that logs instead of sending, for local runs and for tests that need a port implementation without a mail server.
createSmtpSender	function	@spy4x/email	Create a sender for one SMTP configuration.
emailButton	function	@spy4x/email	A table-based "bulletproof" call-to-action button for the body of a mail.
escapeHtml	function	@spy4x/email	Escape a value for interpolation into HTML element text or a double-quoted attribute.
fetchDkimPublicKey	function	@spy4x/email	Fetch and parse a DKIM public key from DNS, from `<selector>._domainkey.<domain>`.
formatAddress	function	@spy4x/email	Render a mailbox for a log line or a plain-text body.
frameInstantLong	function	@spy4x/email	Render an instant as the recipient's own clock reads it, with the zone spelled out: `"Friday, 28 August 2026 at 04:00 (America/New_York)"`.
frameInstantShort	function	@spy4x/email	frameInstantLong without the zone name, for a subject line: `"Fri 28 Aug 04:00"`.
frameWallClockLong	function	@spy4x/email	Frame a `YYYY-MM-DD` + `HH:MM` wall clock written in `sourceTz` for a recipient in `recipientTz`, falling back to the zone the wall clock was written in.
frameWallClockShort	function	@spy4x/email	frameWallClockLong without the zone name, for a subject line.
hasBody	function	@spy4x/email	Deprecated: An internal step of `assertSendableMessage` and the SMTP sender, exported by mistake; it goes in 2.0. True when a body field carries something worth sending.
htmlWrap	function	@spy4x/email	Wrap a body in the shared letter-shaped shell.
icalAttachment	function	@spy4x/email	Build the ICS attachment for an event.
isAddress	function	@spy4x/email	True when `value` is an addr-spec this module will send to.
isExampleAddress	function	@spy4x/email	True when `address` is on a domain RFC 2606 reserves for examples: `example.com`, `example.net`, `example.org`, a subdomain of one, or the `.example` top-level domain.
parseAddress	function	@spy4x/email	Parse `Name <addr>` or a bare addr-spec into its parts.
parseAddresses	function	@spy4x/email	Parse a recipient list, deduplicating case-insensitively.
parseDkimPublicKey	function	@spy4x/email	Parse a DKIM TXT record's `p=` field into a public key.
parseDkimSignature	function	@spy4x/email	Parse a `DKIM-Signature` header value (without the leading `DKIM-Signature:`) into structured form.
refuseHeaderLineEndings	function	@spy4x/email	Deprecated: An internal step of `verifyDkim`, exported by mistake; it goes in 2.0. Refuse a header block whose line endings are not uniform, and say why.
sha256Base64	function	@spy4x/email	Deprecated: An internal step of `verifyDkim`, exported by mistake; it goes in 2.0. Compute the base64 SHA-256 digest of a string or of raw octets.
splitMessage	function	@spy4x/email	Deprecated: An internal step of `verifyDkim`, exported by mistake; it goes in 2.0. Split a raw RFC 5322 message into raw header lines and a raw body.
verifyDkim	function	@spy4x/email	Verify a message's DKIM signatures and report one verdict.
verifyDkimSignatures	function	@spy4x/email	Verify every `DKIM-Signature` field in the message and return one result each, in the order the fields appear.
EmailAddress	interface	@spy4x/email/address	A parsed mailbox: the addr-spec, plus the display name that preceded it.
MAX_ADDR_SPEC_LENGTH	constant	@spy4x/email/address	Longest addr-spec, in characters, that fits a `RCPT TO` path (RFC 5321 §4.5.3.1.3: 256 with the angle brackets).
ParsedRecipients	interface	@spy4x/email/address	The recipient list after parsing: deduplicated, with what was dropped recorded.
assertNoControlCharacters	function	@spy4x/email/address	Reject a value that carries a control character — CR and LF above all.
formatAddress	function	@spy4x/email/address	Render a mailbox for a log line or a plain-text body.
isAddress	function	@spy4x/email/address	True when `value` is an addr-spec this module will send to.
isExampleAddress	function	@spy4x/email/address	True when `address` is on a domain RFC 2606 reserves for examples: `example.com`, `example.net`, `example.org`, a subdomain of one, or the `.example` top-level domain.
parseAddress	function	@spy4x/email/address	Parse `Name <addr>` or a bare addr-spec into its parts.
parseAddresses	function	@spy4x/email/address	Parse a recipient list, deduplicating case-insensitively.
parseBareAddress	function	@spy4x/email/address	The bare address a form field holds, trimmed and lowercased, or `null` when it holds anything else.
Canonicalization	type	@spy4x/email/dkim-verify	Which canonicalization RFC 6376 §3.4 applies to a header or a body.
DEFAULT_MAX_HEADER_FIELDS	constant	@spy4x/email/dkim-verify	Default DkimVerifyOptions.maxHeaderFields.
DEFAULT_MAX_MESSAGE_LENGTH	constant	@spy4x/email/dkim-verify	Default DkimVerifyOptions.maxMessageLength: 10 MiB of octets, which is above the message size limit relays usually impose and far below anything that takes a noticeable time to canonicalize.
DEFAULT_MAX_SIGNATURES	constant	@spy4x/email/dkim-verify	Default DkimVerifyOptions.maxSignatures.
DEFAULT_MAX_SIGNED_HEADER_NAMES	constant	@spy4x/email/dkim-verify	Default DkimVerifyOptions.maxSignedHeaderNames.
DkimAlgorithm	type	@spy4x/email/dkim-verify	Signature algorithms this verifier implements (RFC 6376 §3.3, RFC 8463).
DkimBodyCoverage	interface	@spy4x/email/dkim-verify	How much of the canonicalized body a signature's `bh=` tag actually covers.
DkimKeyAlgorithm	type	@spy4x/email/dkim-verify	Key algorithms a DNS TXT record's `k=` tag may name.
DkimParseError	class	@spy4x/email/dkim-verify	Thrown for a malformed DKIM-Signature header or DNS key record.
DkimPublicKey	interface	@spy4x/email/dkim-verify	A DKIM public key extracted from a DNS TXT record.
DkimSignatureHeader	interface	@spy4x/email/dkim-verify	Parsed `DKIM-Signature` header value.
DkimVerificationResult	interface	@spy4x/email/dkim-verify	Outcome of verifyDkim.
DkimVerifyOptions	interface	@spy4x/email/dkim-verify	Options for verifyDkim and fetchDkimPublicKey.
DnsTxtResolver	interface	@spy4x/email/dkim-verify	DNS TXT lookup contract, defaulting to `resolveTxt` of `@spy4x/net/dns`, which works on Deno, Node and Bun and needs `--allow-net` on Deno.
MIN_RSA_KEY_BITS	constant	@spy4x/email/dkim-verify	RFC 8301 §3.2: "Verifiers MUST NOT consider signatures using RSA keys of less than 1024 bits as valid."
TRANSIT_ADDED_HEADER_NAMES	constant	@spy4x/email/dkim-verify	Header field names a relay is expected to add to a message in transit.
canonicalizeBody	function	@spy4x/email/dkim-verify	Deprecated: An internal step of `verifyDkim`, exported by mistake; it goes in 2.0. Canonicalize a message body per RFC 6376 §3.4.3 (simple) / §3.4.4 (relaxed).
canonicalizeHeader	function	@spy4x/email/dkim-verify	Deprecated: An internal step of `verifyDkim`, exported by mistake; it goes in 2.0. Canonicalize one header field per RFC 6376 §3.4.1 (simple) / §3.4.2 (relaxed).
fetchDkimPublicKey	function	@spy4x/email/dkim-verify	Fetch and parse a DKIM public key from DNS, from `<selector>._domainkey.<domain>`.
parseDkimPublicKey	function	@spy4x/email/dkim-verify	Parse a DKIM TXT record's `p=` field into a public key.
parseDkimSignature	function	@spy4x/email/dkim-verify	Parse a `DKIM-Signature` header value (without the leading `DKIM-Signature:`) into structured form.
refuseHeaderLineEndings	function	@spy4x/email/dkim-verify	Deprecated: An internal step of `verifyDkim`, exported by mistake; it goes in 2.0. Refuse a header block whose line endings are not uniform, and say why.
sha256Base64	function	@spy4x/email/dkim-verify	Deprecated: An internal step of `verifyDkim`, exported by mistake; it goes in 2.0. Compute the base64 SHA-256 digest of a string or of raw octets.
splitMessage	function	@spy4x/email/dkim-verify	Deprecated: An internal step of `verifyDkim`, exported by mistake; it goes in 2.0. Split a raw RFC 5322 message into raw header lines and a raw body.
verifyDkim	function	@spy4x/email/dkim-verify	Verify a message's DKIM signatures and report one verdict.
verifyDkimSignatures	function	@spy4x/email/dkim-verify	Verify every `DKIM-Signature` field in the message and return one result each, in the order the fields appear.
DARK_HTML_SHELL_THEME	constant	@spy4x/email/html	The look `htmlWrap` had before HtmlShellOptions.theme existed: a dark navy body with light text and an orange brand link.
DEFAULT_HTML_SHELL_THEME	constant	@spy4x/email/html	`htmlWrap`'s default look: a neutral light shell with no product association, so a caller gets a plain, readable letter unless it asks for something else.
HtmlShellOptions	interface	@spy4x/email/html	Everything the shell interpolates around a body.
HtmlShellTheme	interface	@spy4x/email/html	The four colours htmlWrap draws the shell in.
emailButton	function	@spy4x/email/html	A table-based "bulletproof" call-to-action button for the body of a mail.
escapeHtml	function	@spy4x/email/html	Escape a value for interpolation into HTML element text or a double-quoted attribute.
htmlWrap	function	@spy4x/email/html	Wrap a body in the shared letter-shaped shell.
Letter	interface	@spy4x/email/letter	A finished letter: the HTML part and the plain-text part.
LetterBlock	interface	@spy4x/email/letter	The letter's content: the same thing as HTML (already escaped) and as plain text.
LetterInput	interface	@spy4x/email/letter	What renderLetter needs.
UNSUBSCRIBE_PLACEHOLDER	constant	@spy4x/email/letter	Stands where a reader's own unsubscribe link goes in a letter rendered once and sent many times.
bulletList	function	@spy4x/email/letter	A bulleted list.
button	function	@spy4x/email/letter	A filled button.
fillUnsubscribe	function	@spy4x/email/letter	Put a reader's own link where UNSUBSCRIBE_PLACEHOLDER stands: escaped in the HTML part, as it is in the plain-text part.
heading	function	@spy4x/email/letter	A small heading, such as "In short".
linkedImage	function	@spy4x/email/letter	A picture linked to `href`, `width` pixels wide at most (default 600) and as wide as the column below that.
paragraph	function	@spy4x/email/letter	A paragraph of plain prose.
renderLetter	function	@spy4x/email/letter	Wrap the blocks in the letter layout and return both parts.
EmailAttachment	interface	@spy4x/email/message	One attachment: text content plus the metadata the MIME part needs.
EmailMessage	interface	@spy4x/email/message	Everything one send needs.
ListUnsubscribe	interface	@spy4x/email/message	The `List-Unsubscribe` targets of one message.
assertSendableMessage	function	@spy4x/email/message	Validate a message before any transport sees it.
frameInstantLong	function	@spy4x/email/message	Render an instant as the recipient's own clock reads it, with the zone spelled out: `"Friday, 28 August 2026 at 04:00 (America/New_York)"`.
frameInstantShort	function	@spy4x/email/message	frameInstantLong without the zone name, for a subject line: `"Fri 28 Aug 04:00"`.
frameWallClockLong	function	@spy4x/email/message	Frame a `YYYY-MM-DD` + `HH:MM` wall clock written in `sourceTz` for a recipient in `recipientTz`, falling back to the zone the wall clock was written in.
frameWallClockShort	function	@spy4x/email/message	frameWallClockLong without the zone name, for a subject line.
hasBody	function	@spy4x/email/message	Deprecated: An internal step of `assertSendableMessage` and the SMTP sender, exported by mistake; it goes in 2.0. True when a body field carries something worth sending.
icalAttachment	function	@spy4x/email/message	Build the ICS attachment for an event.
listUnsubscribeHeaders	function	@spy4x/email/message	The `List-Unsubscribe` and `List-Unsubscribe-Post` header values for a ListUnsubscribe, ready for the transport's `headers` option.
EmailSender	interface	@spy4x/email/sender	The port every transport implements, and the only thing callers depend on.
SendFailure	interface	@spy4x/email/sender	No mail was sent, or some recipient was refused.
SendResult	type	@spy4x/email/sender	Outcome of one send attempt.
SendSuccess	interface	@spy4x/email/sender	Every recipient the transport saw was accepted by the server.
createConsoleSender	function	@spy4x/email/sender	A sender that logs instead of sending, for local runs and for tests that need a port implementation without a mail server.
EmailSender	interface	@spy4x/email/smtp	The port every transport implements, and the only thing callers depend on.
REDACTED_CREDENTIAL	constant	@spy4x/email/smtp	Placeholder that replaces a credential in any string this module reports.
SendFailure	interface	@spy4x/email/smtp	No mail was sent, or some recipient was refused.
SendResult	type	@spy4x/email/smtp	Outcome of one send attempt.
SendSuccess	interface	@spy4x/email/smtp	Every recipient the transport saw was accepted by the server.
SmtpOptions	interface	@spy4x/email/smtp	Connection settings.
SmtpSendInfo	interface	@spy4x/email/smtp	The slice of a nodemailer send result this adapter reads.
SmtpTransport	interface	@spy4x/email/smtp	The slice of a nodemailer transport this adapter calls.
SmtpTransportFactory	interface	@spy4x/email/smtp	Builds a transport from a connection configuration.
createSmtpSender	function	@spy4x/email/smtp	Create a sender for one SMTP configuration.
BLUESKY_DEFAULT_SERVICE	constant	@spy4x/integrations	Where an account signs in when no `service` is given.
BLUESKY_FEED_PAGES	constant	@spy4x/integrations	Feed pages findBlueskyPostByLink reads by default: the latest 1,000 posts.
BLUESKY_MAX_GRAPHEMES	constant	@spy4x/integrations	The post lexicon's limit on `text`, in graphemes.
BLUESKY_MAX_TEXT_BYTES	constant	@spy4x/integrations	The post lexicon's limit on `text`, in UTF-8 bytes.
BLUESKY_MAX_THUMB_BYTES	constant	@spy4x/integrations	The largest image an external card's `thumb` takes.
BLUESKY_PUBLIC_APPVIEW	constant	@spy4x/integrations	The public AppView, which answers reads without a token.
BackoffFn	type	@spy4x/integrations	Computes a delay.
BlueskyBlob	interface	@spy4x/integrations	An uploaded blob, as the protocol references it from a record.
BlueskyBlobResult	type	@spy4x/integrations	Outcome of uploadBlueskyBlob.
BlueskyFindResult	type	@spy4x/integrations	Outcome of findBlueskyPostByLink: `null` when none of the pages read has the link.
BlueskyHandleResult	type	@spy4x/integrations	Outcome of resolveBlueskyHandle: the account's DID.
BlueskyLinkCard	interface	@spy4x/integrations	The link card.
BlueskyPostRef	interface	@spy4x/integrations	A post: its `at://` address, content id and public page.
BlueskyPostResult	type	@spy4x/integrations	Outcome of postBlueskyLink.
BlueskyPostResults	interface	@spy4x/integrations	ShareResults with Bluesky's own counts: likes are `reactions`, replies `comments`.
BlueskyResultsResult	type	@spy4x/integrations	Outcome of readBlueskyPostResults.
BlueskySession	interface	@spy4x/integrations	A signed-in account.
BlueskySessionResult	type	@spy4x/integrations	Outcome of createBlueskySession.
COINGECKO_COINS	constant	@spy4x/integrations	CoinGecko's ids of common coins, by code.
ChatClient	interface	@spy4x/integrations	A configured client.
ChatJsonRequest	interface	@spy4x/integrations	Options for chatJson.
ChatJsonResult	type	@spy4x/integrations	Outcome of chatJson.
ChatMessage	interface	@spy4x/integrations	One message of a conversation.
Clock	type	@spy4x/integrations	Deprecated: The same type as `NowFn` from `@spy4x/platform/universal/time`, which is now the home for this shape. Millisecond time source.
CloudflarePurgeOptions	interface	@spy4x/integrations	Options for purgeUrls.
CloudflarePurgeResult	interface	@spy4x/integrations	Outcome of a purge: `output` describes what happened on success, `error` on failure.
CoinGeckoPlan	type	@spy4x/integrations	CoinGecko's plans differ in host and key header: the free Demo plan, or a paid one.
CombinedSignatureHeader	interface	@spy4x/integrations	One header that carries the timestamp and the signatures together, as a list of `key=value` pairs: Stripe's `Stripe-Signature: t=1492774577,v1=5257…,v0=6ffb…` is `{ name: "Stripe-Signature", pairSeparator: ",", timestampKey: "t", signatureKey: "v1" }`.
DEFAULT_REQUEST_TIMEOUT_MS	constant	@spy4x/integrations	Bounds a single outgoing request, used by every client in this package unless a caller overrides it.
DEVTO_MAX_PAGES	constant	@spy4x/integrations	Pages the lookup reads at most before it gives up, so a looping answer cannot run forever.
DEVTO_MAX_TAGS	constant	@spy4x/integrations	The most tags Dev.to accepts on one article.
DEVTO_PAGE_SIZE	constant	@spy4x/integrations	Articles asked for per page of the lookup: the API's documented maximum.
DevtoArticleRef	interface	@spy4x/integrations	A Dev.to article: its numeric id and public address.
DevtoClientOptions	interface	@spy4x/integrations	Settings both calls share.
DevtoCreateResult	type	@spy4x/integrations	Outcome of createDevtoArticle: the new article on success, `error` on failure.
DevtoFindResult	type	@spy4x/integrations	Outcome of findDevtoArticleByCanonical: the article, or `null` when none of the key's articles has that canonical address.
DevtoResultsResult	type	@spy4x/integrations	Outcome of readDevtoArticleResults: the article's ShareResults (`score` is always `null`), or `null` when none of the key's articles has that id.
ExchangeRateClientOptions	interface	@spy4x/integrations	Options every client takes.
ExchangeRateSource	interface	@spy4x/integrations	A provider of daily exchange rates.
FRANKFURTER_URL	constant	@spy4x/integrations	Frankfurter's public instance.
HACKERNEWS_SEARCH_LIMIT	constant	@spy4x/integrations	Stories asked for per address search: plenty for one address, cheap to read.
HASHNODE_API	constant	@spy4x/integrations	Hashnode's GraphQL endpoint.
HASHNODE_MAX_TAGS	constant	@spy4x/integrations	The most tags Hashnode accepts on one post.
HackerNewsFindResult	type	@spy4x/integrations	Outcome of findHackerNewsStoriesByUrl; an empty list when nobody submitted it.
HackerNewsResultsResult	type	@spy4x/integrations	Outcome of readHackerNewsItemResults; `output: null` when no such story is indexed.
HackerNewsStoryRef	interface	@spy4x/integrations	A story that links to the address asked for.
HashnodeClientOptions	interface	@spy4x/integrations	Settings every call shares.
HashnodeFindResult	type	@spy4x/integrations	Outcome of findHashnodePostBySlug; a failure never means "not found".
HashnodePostRef	interface	@spy4x/integrations	A Hashnode post: its id and public address.
HashnodePublicationRef	type	@spy4x/integrations	Which publication to look in: its host (`blog.example.com`) or its id.
HashnodePublishResult	type	@spy4x/integrations	Outcome of publishHashnodePost.
HashnodeResultsResult	type	@spy4x/integrations	Outcome of readHashnodePostResults: the post's ShareResults; `null` is a number Hashnode does not report.
HealthchecksClient	class	@spy4x/integrations	healthchecks.io client.
HealthchecksErrorCode	type	@spy4x/integrations	Failure reasons `ping` can report.
HealthchecksFailure	interface	@spy4x/integrations	A ping that could not be delivered after retrying.
HealthchecksOutcome	enum	@spy4x/integrations	Which endpoint a ping targets.
HealthchecksPing	interface	@spy4x/integrations	One ping to send through HealthchecksClient.ping.
HealthchecksResult	type	@spy4x/integrations	Outcome of HealthchecksClient.ping.
HealthchecksRetryOptions	interface	@spy4x/integrations	Overrides for the client's default retry policy.
HealthchecksSuccess	interface	@spy4x/integrations	A ping that reached healthchecks.io and was accepted.
INDEXNOW_MAX_URLS	constant	@spy4x/integrations	The most addresses IndexNow accepts in one submission.
IndexNowOptions	interface	@spy4x/integrations	Options for submitIndexNow.
IndexNowResult	interface	@spy4x/integrations	Outcome of a submission: `output` describes what happened on success, `error` on failure.
LINKEDIN_DEFAULT_SCOPES	constant	@spy4x/integrations	The scopes that sign a member in and let the app post as them.
LINKEDIN_MAX_COMMENTARY	constant	@spy4x/integrations	The longest `commentary` LinkedIn accepts, in characters.
LINKEDIN_VERSION	constant	@spy4x/integrations	The Posts API version sent by default, `YYYYMM`: the newest LinkedIn listed in 2026-10.
LLM_DEFAULT_TIMEOUT_MS	constant	@spy4x/integrations	How long one call may take by default: a model can think for a while before it answers.
LLM_PRESETS	constant	@spy4x/integrations	The OpenAI-compatible endpoints of OpenAI, DeepSeek, Google Gemini and a local Ollama.
LinkedinMember	interface	@spy4x/integrations	The signed-in member.
LinkedinMemberOptions	interface	@spy4x/integrations	Settings the member's calls share.
LinkedinMemberResult	type	@spy4x/integrations	Outcome of readLinkedinMember.
LinkedinPostRef	interface	@spy4x/integrations	A LinkedIn post: its URN and public address.
LinkedinShareLink	interface	@spy4x/integrations	The article a share links to.
LinkedinShareResult	type	@spy4x/integrations	Outcome of postLinkedinShare.
LinkedinTokens	interface	@spy4x/integrations	A member's tokens.
LinkedinTokensResult	type	@spy4x/integrations	Outcome of exchangeLinkedinCode.
LlmEndpoint	interface	@spy4x/integrations	Where a provider's OpenAI-compatible API lives and how it differs from OpenAI's.
LlmError	interface	@spy4x/integrations	A failed call.
LlmErrorCode	type	@spy4x/integrations	Why a call failed.
LlmUsage	interface	@spy4x/integrations	Token counts of one reply, as the provider billed them.
MastodonClientOptions	interface	@spy4x/integrations	Settings both calls share.
MastodonPostResult	type	@spy4x/integrations	Outcome of postMastodonStatus.
MastodonResultsResult	type	@spy4x/integrations	Outcome of readMastodonStatusResults.
MastodonStatusRef	interface	@spy4x/integrations	A posted status: its id on the instance and its public address.
MastodonStatusResults	interface	@spy4x/integrations	ShareResults with Mastodon's own counts.
MastodonVisibility	type	@spy4x/integrations	Who sees a status; Mastodon's four values.
NotificationSeverity	enum	@spy4x/integrations	Severity gate.
NtfyClient	class	@spy4x/integrations	ntfy client.
NtfyErrorCode	type	@spy4x/integrations	Failure reasons `push` can report.
NtfyFailure	interface	@spy4x/integrations	A push that could not be delivered after retrying.
NtfyPriority	enum	@spy4x/integrations	ntfy priority, 1 (min) to 5 (max).
NtfyPush	interface	@spy4x/integrations	One notification to send through NtfyClient.push.
NtfyPushed	interface	@spy4x/integrations	A push that reached ntfy and was accepted.
NtfyResult	type	@spy4x/integrations	Outcome of NtfyClient.push.
NtfyRetryOptions	interface	@spy4x/integrations	Overrides for the client's default retry policy.
NtfySkipped	interface	@spy4x/integrations	A push that was never sent because its severity did not meet the gate.
PURGE_BATCH_SIZE	constant	@spy4x/integrations	Cloudflare's purge-by-URL endpoint accepts at most this many files per call.
REDDIT_INFO_LIMIT	constant	@spy4x/integrations	Submissions asked for at most: the most one `info.json` page holds.
RandomSource	type	@spy4x/integrations	Deprecated: Use `RandomSource` from "@spy4x/platform/universal/async". A source of numbers in `[0, 1)`, the shape `Math.random` has.
Rates	interface	@spy4x/integrations	What a source found for one day.
RatesError	interface	@spy4x/integrations	A failed call: which source, and why.
RatesErrorCode	type	@spy4x/integrations	Why a call failed.
RatesResult	type	@spy4x/integrations	Outcome of ExchangeRateSource.daily.
RedditClientOptions	interface	@spy4x/integrations	Settings both calls share.
RedditFindResult	type	@spy4x/integrations	Outcome of findRedditPostsByUrl; an empty list when nobody submitted the address.
RedditPostRef	interface	@spy4x/integrations	A submission that links to the address asked for.
RedditPostResults	interface	@spy4x/integrations	A post's ShareResults, plus the share of its votes that are upvotes (0 to 1).
RedditResultsResult	type	@spy4x/integrations	Outcome of readRedditPostResults; `output: null` when Reddit lists no such post.
RetryPolicy	interface	@spy4x/integrations	
RetryRunOptions	interface	@spy4x/integrations	
RetryRunResult	interface	@spy4x/integrations	
ShareResults	interface	@spy4x/integrations	How one shared copy did.
Sleeper	type	@spy4x/integrations	Waits a duration.
SpendGuard	interface	@spy4x/integrations	The port an app implements to cap what it spends, for example over `@spy4x/server/quota`'s `QuotaMeter`.
SpendRequest	interface	@spy4x/integrations	What a SpendGuard is asked to allow before a request is sent.
UMAMI_FILTER_NAMES	constant	@spy4x/integrations	The filters Umami's website reports take.
UMAMI_LINK_NAME_MAX	constant	@spy4x/integrations	Umami's limits for a link: a name of 100 characters, a url of 500, a slug of 8 to 100.
UMAMI_LINK_URL_MAX	constant	@spy4x/integrations	
UMAMI_METRIC_TYPES	constant	@spy4x/integrations	What a breakdown can count by, in Umami's names.
UMAMI_SERIES_UNITS	constant	@spy4x/integrations	The units a series can step by.
UMAMI_SLUG_PATTERN	constant	@spy4x/integrations	A slug this client sends: 8 to 100 letters, digits, `-` and `_`, so it is safe in a path.
UmamiCheckResult	interface	@spy4x/integrations	Outcome of checkUmami: `output` says what was seen on success, `error` on failure.
UmamiConnection	interface	@spy4x/integrations	Where an Umami instance is, and how to reach it.
UmamiFilterName	type	@spy4x/integrations	One of UMAMI_FILTER_NAMES.
UmamiLink	interface	@spy4x/integrations	A link as Umami stores it.
UmamiLinkCreateOptions	interface	@spy4x/integrations	Options for createUmamiLink.
UmamiLinkResult	type	@spy4x/integrations	Outcome of createUmamiLink: the link on success, why not on failure.
UmamiMetric	interface	@spy4x/integrations	One row of a breakdown: a value (`x`, such as a path or an event name) and its count (`y`).
UmamiMetricType	type	@spy4x/integrations	One of UMAMI_METRIC_TYPES: page views and visits by these, events by `event`.
UmamiPageviews	interface	@spy4x/integrations	UmamiSeries, with the previous period's when `compare` was asked for.
UmamiPoint	interface	@spy4x/integrations	One point of a series: the start of its unit as Umami prints it (`x`), and a count (`y`).
UmamiPropertyValue	interface	@spy4x/integrations	How many events carried one value of a property.
UmamiReadResult	type	@spy4x/integrations	Outcome of a read.
UmamiSeries	interface	@spy4x/integrations	Page views and visitors per unit of time.
UmamiStats	interface	@spy4x/integrations	UmamiTotals of the period and of the period of the same length just before it.
UmamiTotals	interface	@spy4x/integrations	A website's totals over a period: Umami's `/stats`.
UmamiWebsiteCheck	type	@spy4x/integrations	Outcome of checkUmamiWebsite.
UmamiWebsiteProblem	type	@spy4x/integrations	Why checkUmamiWebsite failed: `settings` for options that cannot work (no `http`/`https` base address, an empty token, a bad timeout), `website` for a website id that is no UUID or that the token cannot see, `token` for a token Umami refuses, `unreachable` for anything else.
UmamiWebsiteRead	interface	@spy4x/integrations	What every read of a website's numbers needs.
WebhookRejectReason	type	@spy4x/integrations	Why a delivery was rejected.
WebhookVerifierConfig	interface	@spy4x/integrations	Shared secret and header names verifyWebhookRequest needs to check a delivery.
WebhookVerifyResult	type	@spy4x/integrations	Result of verifyWebhookRequest: the verified body, or why it was rejected.
chatJson	function	@spy4x/integrations	Asks the model for JSON and checks it with `schema`.
checkUmami	function	@spy4x/integrations	Asks Umami's `GET /api/heartbeat` whether the instance answers.
checkUmamiWebsite	function	@spy4x/integrations	Checks that the token is accepted and can view the website, and says which of the two failed: `token` when Umami refuses the token, `website` when the token works but no website with that id is visible to it, `unreachable` for anything else.
createBlueskySession	function	@spy4x/integrations	Signs in with an app password.
createChatClient	function	@spy4x/integrations	Builds a client.
createCoinGeckoRates	function	@spy4x/integrations	Coin prices from CoinGecko's `GET /coins/{id}/history`, a snapshot at 00:00 UTC of the date asked.
createDevtoArticle	function	@spy4x/integrations	Posts `article` to Dev.to and returns its id and address.
createExchangeRateApiRates	function	@spy4x/integrations	Rates from exchangerate-api.com's history endpoint (`GET /v6/{key}/history/{base}/{year}/{month}/{day}`, Pro plan and above).
createExponentialBackoff	function	@spy4x/integrations	Deprecated: Thin wrapper over `backoffDelay` from "@spy4x/platform/universal/async", kept for this module's existing 1-based-attempt, `Retry-After`-aware call shape. Exponential backoff, clamped and optionally jittered.
createFrankfurterRates	function	@spy4x/integrations	Rates from Frankfurter v2 (`GET /v2/rates?date=&base=&quotes=`), which needs no key.
createUmamiLink	function	@spy4x/integrations	Creates an Umami link and returns it.
describeTransportError	function	@spy4x/integrations	Describes a transport failure **without** the request URL.
exchangeLinkedinCode	function	@spy4x/integrations	Trades the callback's `code` for the member's tokens.
findBlueskyPostByLink	function	@spy4x/integrations	Finds the author's own post that links to `uri`, among the latest `maxPages` pages of their feed.
findDevtoArticleByCanonical	function	@spy4x/integrations	Finds the key owner's article whose `canonical_url` is `canonicalUrl`, published or not.
findHackerNewsStoriesByUrl	function	@spy4x/integrations	Lists the Hacker News stories whose address is `url`, ignoring the scheme, a trailing slash, the fragment and `utm_*` parameters, at most HACKERNEWS_SEARCH_LIMIT.
findHashnodePostBySlug	function	@spy4x/integrations	Finds the post with `slug` in a publication, given its host or id.
findRedditPostsByUrl	function	@spy4x/integrations	Lists the Reddit submissions of `url`, newest data Reddit has, at most REDDIT_INFO_LIMIT.
healthchecksConfigFromEnv	function	@spy4x/integrations	Reads a ping URL from an environment reader.
isPermanentStatus	function	@spy4x/integrations	Deprecated: No client in this package uses it; compare `status >= 400 && status < 500` in place. Statuses that will never succeed on a retry: the request itself is wrong.
isRequestTimeout	function	@spy4x/integrations	True when `cause` is the `TimeoutError` an `AbortSignal.timeout()` firing produces.
isTransientStatus	function	@spy4x/integrations	Statuses worth another attempt: rate limiting and upstream faults.
linkedinAuthorizeUrl	function	@spy4x/integrations	Builds the address that asks the member to sign in and grant `scopes`.
ntfyConfigFromEnv	function	@spy4x/integrations	Reads ntfy settings from an environment reader.
parseRetryAfterMs	function	@spy4x/integrations	Parses a `Retry-After` header.
postBlueskyLink	function	@spy4x/integrations	Posts `text` with a link card.
postLinkedinShare	function	@spy4x/integrations	Shares `link` with `commentary` on the member's own profile, visible to everyone.
postMastodonStatus	function	@spy4x/integrations	Posts a status and returns its id and address.
publishHashnodePost	function	@spy4x/integrations	Publishes a post to a Hashnode publication and returns its id and address.
purgeUrls	function	@spy4x/integrations	Purges `urls` from a Cloudflare zone, 30 per call, and reports the outcome.
readBlueskyPostResults	function	@spy4x/integrations	Reads a post's likes, replies, reposts and quotes from the public AppView.
readDevtoArticleResults	function	@spy4x/integrations	Reads how one of the key owner's articles did: views, reactions and comments.
readHackerNewsItemResults	function	@spy4x/integrations	Reads a Hacker News story's points and comment count.
readHashnodePostResults	function	@spy4x/integrations	Reads a post's views, reactions and comments, by its id or by its publication host and slug.
readLinkedinMember	function	@spy4x/integrations	Reads the signed-in member's id and author URN.
readMastodonStatusResults	function	@spy4x/integrations	Reads a status's favourites, reblogs and replies.
readRedditPostResults	function	@spy4x/integrations	Reads a Reddit post's comments, score and upvote ratio.
readUmamiEventValues	function	@spy4x/integrations	Reads how many custom events carried each value of one property, most first, such as the item of an `order-telegram` event (Umami's `GET /api/websites/<id>/event-data/values`).
readUmamiMetrics	function	@spy4x/integrations	Reads a breakdown of a website's period by `type`, largest first (Umami's `GET /api/websites/<id>/metrics`).
readUmamiPageviews	function	@spy4x/integrations	Reads page views and visitors per `unit` of a period, in `timezone` (Umami's `GET /api/websites/<id>/pageviews`).
readUmamiStats	function	@spy4x/integrations	Reads a website's totals over a period, and the same totals over the period of the same length just before it (Umami's `GET /api/websites/<id>/stats`).
releaseResponseBody	function	@spy4x/integrations	Releases a response's body without reading it.
resolveBlueskyHandle	function	@spy4x/integrations	Resolves a handle, such as `name.bsky.social`, to the account's DID.
runWithRetry	function	@spy4x/integrations	Runs `attempt` under `policy`.
settle	function	@spy4x/integrations	Consumes whatever a `Sleeper` returned.
submitIndexNow	function	@spy4x/integrations	Submits `urls` to IndexNow and reports the outcome.
umamiLinkUrl	function	@spy4x/integrations	The public address of a link: `<baseUrl>/q/<slug>`, which counts the visit and redirects.
uploadBlueskyBlob	function	@spy4x/integrations	Uploads an image for a link card.
verifyWebhookRequest	function	@spy4x/integrations	Verifies one inbound delivery.
withFallback	function	@spy4x/integrations	One source made of several: each is asked in turn for the quotes still missing, and the rates are joined.
BLUESKY_DEFAULT_SERVICE	constant	@spy4x/integrations/bluesky	Where an account signs in when no `service` is given.
BLUESKY_FEED_PAGES	constant	@spy4x/integrations/bluesky	Feed pages findBlueskyPostByLink reads by default: the latest 1,000 posts.
BLUESKY_MAX_GRAPHEMES	constant	@spy4x/integrations/bluesky	The post lexicon's limit on `text`, in graphemes.
BLUESKY_MAX_TEXT_BYTES	constant	@spy4x/integrations/bluesky	The post lexicon's limit on `text`, in UTF-8 bytes.
BLUESKY_MAX_THUMB_BYTES	constant	@spy4x/integrations/bluesky	The largest image an external card's `thumb` takes.
BLUESKY_PUBLIC_APPVIEW	constant	@spy4x/integrations/bluesky	The public AppView, which answers reads without a token.
BlueskyBlob	interface	@spy4x/integrations/bluesky	An uploaded blob, as the protocol references it from a record.
BlueskyBlobResult	type	@spy4x/integrations/bluesky	Outcome of uploadBlueskyBlob.
BlueskyFindResult	type	@spy4x/integrations/bluesky	Outcome of findBlueskyPostByLink: `null` when none of the pages read has the link.
BlueskyHandleResult	type	@spy4x/integrations/bluesky	Outcome of resolveBlueskyHandle: the account's DID.
BlueskyLinkCard	interface	@spy4x/integrations/bluesky	The link card.
BlueskyPostRef	interface	@spy4x/integrations/bluesky	A post: its `at://` address, content id and public page.
BlueskyPostResult	type	@spy4x/integrations/bluesky	Outcome of postBlueskyLink.
BlueskyPostResults	interface	@spy4x/integrations/bluesky	ShareResults with Bluesky's own counts: likes are `reactions`, replies `comments`.
BlueskyResultsResult	type	@spy4x/integrations/bluesky	Outcome of readBlueskyPostResults.
BlueskySession	interface	@spy4x/integrations/bluesky	A signed-in account.
BlueskySessionResult	type	@spy4x/integrations/bluesky	Outcome of createBlueskySession.
createBlueskySession	function	@spy4x/integrations/bluesky	Signs in with an app password.
findBlueskyPostByLink	function	@spy4x/integrations/bluesky	Finds the author's own post that links to `uri`, among the latest `maxPages` pages of their feed.
postBlueskyLink	function	@spy4x/integrations/bluesky	Posts `text` with a link card.
readBlueskyPostResults	function	@spy4x/integrations/bluesky	Reads a post's likes, replies, reposts and quotes from the public AppView.
resolveBlueskyHandle	function	@spy4x/integrations/bluesky	Resolves a handle, such as `name.bsky.social`, to the account's DID.
uploadBlueskyBlob	function	@spy4x/integrations/bluesky	Uploads an image for a link card.
CloudflarePurgeOptions	interface	@spy4x/integrations/cloudflare	Options for purgeUrls.
CloudflarePurgeResult	interface	@spy4x/integrations/cloudflare	Outcome of a purge: `output` describes what happened on success, `error` on failure.
PURGE_BATCH_SIZE	constant	@spy4x/integrations/cloudflare	Cloudflare's purge-by-URL endpoint accepts at most this many files per call.
purgeUrls	function	@spy4x/integrations/cloudflare	Purges `urls` from a Cloudflare zone, 30 per call, and reports the outcome.
DEVTO_MAX_PAGES	constant	@spy4x/integrations/devto	Pages the lookup reads at most before it gives up, so a looping answer cannot run forever.
DEVTO_MAX_TAGS	constant	@spy4x/integrations/devto	The most tags Dev.to accepts on one article.
DEVTO_PAGE_SIZE	constant	@spy4x/integrations/devto	Articles asked for per page of the lookup: the API's documented maximum.
DevtoArticleRef	interface	@spy4x/integrations/devto	A Dev.to article: its numeric id and public address.
DevtoClientOptions	interface	@spy4x/integrations/devto	Settings both calls share.
DevtoCreateResult	type	@spy4x/integrations/devto	Outcome of createDevtoArticle: the new article on success, `error` on failure.
DevtoFindResult	type	@spy4x/integrations/devto	Outcome of findDevtoArticleByCanonical: the article, or `null` when none of the key's articles has that canonical address.
DevtoResultsResult	type	@spy4x/integrations/devto	Outcome of readDevtoArticleResults: the article's ShareResults (`score` is always `null`), or `null` when none of the key's articles has that id.
createDevtoArticle	function	@spy4x/integrations/devto	Posts `article` to Dev.to and returns its id and address.
findDevtoArticleByCanonical	function	@spy4x/integrations/devto	Finds the key owner's article whose `canonical_url` is `canonicalUrl`, published or not.
readDevtoArticleResults	function	@spy4x/integrations/devto	Reads how one of the key owner's articles did: views, reactions and comments.
COINGECKO_COINS	constant	@spy4x/integrations/exchange-rates	CoinGecko's ids of common coins, by code.
CoinGeckoPlan	type	@spy4x/integrations/exchange-rates	CoinGecko's plans differ in host and key header: the free Demo plan, or a paid one.
ExchangeRateClientOptions	interface	@spy4x/integrations/exchange-rates	Options every client takes.
ExchangeRateSource	interface	@spy4x/integrations/exchange-rates	A provider of daily exchange rates.
FRANKFURTER_URL	constant	@spy4x/integrations/exchange-rates	Frankfurter's public instance.
FrankfurterSource	interface	@spy4x/integrations/exchange-rates	Frankfurter's rates: a day, or every day of a range.
Rates	interface	@spy4x/integrations/exchange-rates	What a source found for one day.
RatesError	interface	@spy4x/integrations/exchange-rates	A failed call: which source, and why.
RatesErrorCode	type	@spy4x/integrations/exchange-rates	Why a call failed.
RatesResult	type	@spy4x/integrations/exchange-rates	Outcome of ExchangeRateSource.daily.
createCoinGeckoRates	function	@spy4x/integrations/exchange-rates	Coin prices from CoinGecko's `GET /coins/{id}/history`, a snapshot at 00:00 UTC of the date asked.
createExchangeRateApiRates	function	@spy4x/integrations/exchange-rates	Rates from exchangerate-api.com's history endpoint (`GET /v6/{key}/history/{base}/{year}/{month}/{day}`, Pro plan and above).
createFrankfurterRates	function	@spy4x/integrations/exchange-rates	Rates from Frankfurter v2 (`GET /v2/rates?date=&base=&quotes=`), which needs no key.
withFallback	function	@spy4x/integrations/exchange-rates	One source made of several: each is asked in turn for the quotes still missing, and the rates are joined.
HACKERNEWS_SEARCH_LIMIT	constant	@spy4x/integrations/hackernews	Stories asked for per address search: plenty for one address, cheap to read.
HackerNewsFindResult	type	@spy4x/integrations/hackernews	Outcome of findHackerNewsStoriesByUrl; an empty list when nobody submitted it.
HackerNewsResultsResult	type	@spy4x/integrations/hackernews	Outcome of readHackerNewsItemResults; `output: null` when no such story is indexed.
HackerNewsStoryRef	interface	@spy4x/integrations/hackernews	A story that links to the address asked for.
findHackerNewsStoriesByUrl	function	@spy4x/integrations/hackernews	Lists the Hacker News stories whose address is `url`, ignoring the scheme, a trailing slash, the fragment and `utm_*` parameters, at most HACKERNEWS_SEARCH_LIMIT.
readHackerNewsItemResults	function	@spy4x/integrations/hackernews	Reads a Hacker News story's points and comment count.
HASHNODE_API	constant	@spy4x/integrations/hashnode	Hashnode's GraphQL endpoint.
HASHNODE_MAX_TAGS	constant	@spy4x/integrations/hashnode	The most tags Hashnode accepts on one post.
HashnodeClientOptions	interface	@spy4x/integrations/hashnode	Settings every call shares.
HashnodeFindResult	type	@spy4x/integrations/hashnode	Outcome of findHashnodePostBySlug; a failure never means "not found".
HashnodePostRef	interface	@spy4x/integrations/hashnode	A Hashnode post: its id and public address.
HashnodePublicationRef	type	@spy4x/integrations/hashnode	Which publication to look in: its host (`blog.example.com`) or its id.
HashnodePublishResult	type	@spy4x/integrations/hashnode	Outcome of publishHashnodePost.
HashnodeResultsResult	type	@spy4x/integrations/hashnode	Outcome of readHashnodePostResults: the post's ShareResults; `null` is a number Hashnode does not report.
findHashnodePostBySlug	function	@spy4x/integrations/hashnode	Finds the post with `slug` in a publication, given its host or id.
publishHashnodePost	function	@spy4x/integrations/hashnode	Publishes a post to a Hashnode publication and returns its id and address.
readHashnodePostResults	function	@spy4x/integrations/hashnode	Reads a post's views, reactions and comments, by its id or by its publication host and slug.
HealthchecksClient	class	@spy4x/integrations/healthchecks	healthchecks.io client.
HealthchecksErrorCode	type	@spy4x/integrations/healthchecks	Failure reasons `ping` can report.
HealthchecksFailure	interface	@spy4x/integrations/healthchecks	A ping that could not be delivered after retrying.
HealthchecksOutcome	enum	@spy4x/integrations/healthchecks	Which endpoint a ping targets.
HealthchecksPing	interface	@spy4x/integrations/healthchecks	One ping to send through HealthchecksClient.ping.
HealthchecksResult	type	@spy4x/integrations/healthchecks	Outcome of HealthchecksClient.ping.
HealthchecksRetryOptions	interface	@spy4x/integrations/healthchecks	Overrides for the client's default retry policy.
HealthchecksSuccess	interface	@spy4x/integrations/healthchecks	A ping that reached healthchecks.io and was accepted.
healthchecksConfigFromEnv	function	@spy4x/integrations/healthchecks	Reads a ping URL from an environment reader.
INDEXNOW_MAX_URLS	constant	@spy4x/integrations/indexnow	The most addresses IndexNow accepts in one submission.
IndexNowOptions	interface	@spy4x/integrations/indexnow	Options for submitIndexNow.
IndexNowResult	interface	@spy4x/integrations/indexnow	Outcome of a submission: `output` describes what happened on success, `error` on failure.
submitIndexNow	function	@spy4x/integrations/indexnow	Submits `urls` to IndexNow and reports the outcome.
LINKEDIN_DEFAULT_SCOPES	constant	@spy4x/integrations/linkedin	The scopes that sign a member in and let the app post as them.
LINKEDIN_MAX_COMMENTARY	constant	@spy4x/integrations/linkedin	The longest `commentary` LinkedIn accepts, in characters.
LINKEDIN_VERSION	constant	@spy4x/integrations/linkedin	The Posts API version sent by default, `YYYYMM`: the newest LinkedIn listed in 2026-10.
LinkedinMember	interface	@spy4x/integrations/linkedin	The signed-in member.
LinkedinMemberOptions	interface	@spy4x/integrations/linkedin	Settings the member's calls share.
LinkedinMemberResult	type	@spy4x/integrations/linkedin	Outcome of readLinkedinMember.
LinkedinPostRef	interface	@spy4x/integrations/linkedin	A LinkedIn post: its URN and public address.
LinkedinShareLink	interface	@spy4x/integrations/linkedin	The article a share links to.
LinkedinShareResult	type	@spy4x/integrations/linkedin	Outcome of postLinkedinShare.
LinkedinTokens	interface	@spy4x/integrations/linkedin	A member's tokens.
LinkedinTokensResult	type	@spy4x/integrations/linkedin	Outcome of exchangeLinkedinCode.
exchangeLinkedinCode	function	@spy4x/integrations/linkedin	Trades the callback's `code` for the member's tokens.
linkedinAuthorizeUrl	function	@spy4x/integrations/linkedin	Builds the address that asks the member to sign in and grant `scopes`.
postLinkedinShare	function	@spy4x/integrations/linkedin	Shares `link` with `commentary` on the member's own profile, visible to everyone.
readLinkedinMember	function	@spy4x/integrations/linkedin	Reads the signed-in member's id and author URN.
ChatClient	interface	@spy4x/integrations/llm	A configured client.
ChatJsonRequest	interface	@spy4x/integrations/llm	Options for chatJson.
ChatJsonResult	type	@spy4x/integrations/llm	Outcome of chatJson.
ChatMessage	interface	@spy4x/integrations/llm	One message of a conversation.
LLM_DEFAULT_TIMEOUT_MS	constant	@spy4x/integrations/llm	How long one call may take by default: a model can think for a while before it answers.
LLM_PRESETS	constant	@spy4x/integrations/llm	The OpenAI-compatible endpoints of OpenAI, DeepSeek, Google Gemini and a local Ollama.
LlmEndpoint	interface	@spy4x/integrations/llm	Where a provider's OpenAI-compatible API lives and how it differs from OpenAI's.
LlmError	interface	@spy4x/integrations/llm	A failed call.
LlmErrorCode	type	@spy4x/integrations/llm	Why a call failed.
LlmUsage	interface	@spy4x/integrations/llm	Token counts of one reply, as the provider billed them.
SpendGuard	interface	@spy4x/integrations/llm	The port an app implements to cap what it spends, for example over `@spy4x/server/quota`'s `QuotaMeter`.
SpendRequest	interface	@spy4x/integrations/llm	What a SpendGuard is asked to allow before a request is sent.
chatJson	function	@spy4x/integrations/llm	Asks the model for JSON and checks it with `schema`.
createChatClient	function	@spy4x/integrations/llm	Builds a client.
MastodonClientOptions	interface	@spy4x/integrations/mastodon	Settings both calls share.
MastodonPostResult	type	@spy4x/integrations/mastodon	Outcome of postMastodonStatus.
MastodonResultsResult	type	@spy4x/integrations/mastodon	Outcome of readMastodonStatusResults.
MastodonStatusRef	interface	@spy4x/integrations/mastodon	A posted status: its id on the instance and its public address.
MastodonStatusResults	interface	@spy4x/integrations/mastodon	ShareResults with Mastodon's own counts.
MastodonVisibility	type	@spy4x/integrations/mastodon	Who sees a status; Mastodon's four values.
postMastodonStatus	function	@spy4x/integrations/mastodon	Posts a status and returns its id and address.
readMastodonStatusResults	function	@spy4x/integrations/mastodon	Reads a status's favourites, reblogs and replies.
NotificationSeverity	enum	@spy4x/integrations/ntfy	Severity gate.
NtfyClient	class	@spy4x/integrations/ntfy	ntfy client.
NtfyErrorCode	type	@spy4x/integrations/ntfy	Failure reasons `push` can report.
NtfyFailure	interface	@spy4x/integrations/ntfy	A push that could not be delivered after retrying.
NtfyPriority	enum	@spy4x/integrations/ntfy	ntfy priority, 1 (min) to 5 (max).
NtfyPush	interface	@spy4x/integrations/ntfy	One notification to send through NtfyClient.push.
NtfyPushed	interface	@spy4x/integrations/ntfy	A push that reached ntfy and was accepted.
NtfyResult	type	@spy4x/integrations/ntfy	Outcome of NtfyClient.push.
NtfyRetryOptions	interface	@spy4x/integrations/ntfy	Overrides for the client's default retry policy.
NtfySkipped	interface	@spy4x/integrations/ntfy	A push that was never sent because its severity did not meet the gate.
ntfyConfigFromEnv	function	@spy4x/integrations/ntfy	Reads ntfy settings from an environment reader.
MAX_PUSH_PAYLOAD_BYTES	constant	@spy4x/integrations/push	The most bytes a message may take as JSON text in UTF-8; `send` refuses a longer one.
PushDelivery	interface	@spy4x/integrations/push	Outcome for one subscription.
PushOptions	interface	@spy4x/integrations/push	Delivery options of one send.
PushSendResult	interface	@spy4x/integrations/push	Outcome of WebPushSender.send; `success` is false when any delivery `failed`.
PushSubscriptionStore	interface	@spy4x/integrations/push	What the app implements over its own database.
PushUrgency	type	@spy4x/integrations/push	How urgently the push service should deliver (RFC 8030).
VapidKeyPair	interface	@spy4x/integrations/push	A VAPID key pair ready to store and to hand to a browser.
VapidKeys	interface	@spy4x/integrations/push	A VAPID key pair as two JWKs (ECDSA P-256).
WebPushSender	interface	@spy4x/integrations/push	Sends to every stored subscription of a user, or to one given subscription.
createWebPushSender	function	@spy4x/integrations/push	Builds a sender.
generateVapidKeyPair	function	@spy4x/integrations/push	Generates a VAPID key pair with WebCrypto (ECDSA P-256).
vapidPublicKey	function	@spy4x/integrations/push	The public key of stored VAPID keys, base64url, for the endpoint that serves it to browsers.
DEFAULT_MAX_PUSH_SUBSCRIPTIONS_PER_USER	constant	@spy4x/integrations/push-file-store	How many subscriptions one user keeps unless `maxPerUser` says otherwise.
FilePushSubscriptionStore	interface	@spy4x/integrations/push-file-store	A PushSubscriptionStore kept in one JSON file.
FileStateSlot	interface	@spy4x/integrations/push-file-store	One named value kept in the store's file; see FilePushSubscriptionStore.state.
PushFileStoreError	class	@spy4x/integrations/push-file-store	A failure of FilePushSubscriptionStore, safe to log: it carries no endpoint or key.
PushFileStoreErrorCode	type	@spy4x/integrations/push-file-store	Why a call on the store failed: the file cannot be read as this module's document (`corrupt`), or an argument was refused (`invalid-subscription`, `invalid-user`, `invalid-name`).
createFilePushSubscriptionStore	function	@spy4x/integrations/push-file-store	Builds the store.
ReminderForPush	interface	@spy4x/integrations/push-reminders	The parts of a `DueReminder` (`@spy4x/time/ical-tasks-reminders`) a push message is made of.
createReminderNotify	function	@spy4x/integrations/push-reminders	Builds the `notify` of a reminder runner: it pushes each reminder to every device of `userId`.
reminderDeliveryOutcome	function	@spy4x/integrations/push-reminders	What a sender's result means for a reminder runner: `"delivered"` when a device got the push, when there was no device, or when every device was gone and removed; `"retry"` when no device got it and a failure may pass later; `"drop"` when no device got it and every failure is for good.
reminderPushMessage	function	@spy4x/integrations/push-reminders	The push message of one reminder.
REDDIT_INFO_LIMIT	constant	@spy4x/integrations/reddit	Submissions asked for at most: the most one `info.json` page holds.
RedditClientOptions	interface	@spy4x/integrations/reddit	Settings both calls share.
RedditFindResult	type	@spy4x/integrations/reddit	Outcome of findRedditPostsByUrl; an empty list when nobody submitted the address.
RedditPostRef	interface	@spy4x/integrations/reddit	A submission that links to the address asked for.
RedditPostResults	interface	@spy4x/integrations/reddit	A post's ShareResults, plus the share of its votes that are upvotes (0 to 1).
RedditResultsResult	type	@spy4x/integrations/reddit	Outcome of readRedditPostResults; `output: null` when Reddit lists no such post.
findRedditPostsByUrl	function	@spy4x/integrations/reddit	Lists the Reddit submissions of `url`, newest data Reddit has, at most REDDIT_INFO_LIMIT.
readRedditPostResults	function	@spy4x/integrations/reddit	Reads a Reddit post's comments, score and upvote ratio.
ShareResults	interface	@spy4x/integrations/share-results	How one shared copy did.
TELEGRAM_API_BASE_URL	constant	@spy4x/integrations/telegram	Where the Bot API lives unless a config names a local Bot API server.
TELEGRAM_RETRY_POLICY	constant	@spy4x/integrations/telegram	Default retry policy: 3 attempts, 1s doubling, at most 30s per wait (Telegram's `retry_after` on a 429 is honoured up to that), 60s for the whole call, +/-20% jitter.
TelegramAnswerCallbackQuery	interface	@spy4x/integrations/telegram	Parameters of `answerCallbackQuery`, named as in the Bot API.
TelegramBot	class	@spy4x/integrations/telegram	Routes updates to handlers.
TelegramBotCommand	interface	@spy4x/integrations/telegram	One entry of the command menu.
TelegramCallOptions	interface	@spy4x/integrations/telegram	Per-call overrides for TelegramClient.call.
TelegramCallbackQuery	interface	@spy4x/integrations/telegram	A press on an inline keyboard button.
TelegramChat	interface	@spy4x/integrations/telegram	The chat a message belongs to.
TelegramClient	class	@spy4x/integrations/telegram	Calls the Telegram Bot API as one bot.
TelegramContext	interface	@spy4x/integrations/telegram	What a handler gets for one update.
TelegramConversationControl	interface	@spy4x/integrations/telegram	Starts and ends a conversation from inside a handler.
TelegramConversationData	type	@spy4x/integrations/telegram	A conversation's saved answers.
TelegramConversationStore	type	@spy4x/integrations/telegram	Where conversation state lives: the get, set-with-expiry and delete of an `ICacheStorage`.
TelegramEditMessageText	interface	@spy4x/integrations/telegram	Parameters of `editMessageText`, named as in the Bot API.
TelegramErrorCode	type	@spy4x/integrations/telegram	Why a call failed.
TelegramFailure	interface	@spy4x/integrations/telegram	The call failed; `message` is Telegram's `description` when it sent one.
TelegramHandler	type	@spy4x/integrations/telegram	Handles one update.
TelegramInlineButton	interface	@spy4x/integrations/telegram	One inline keyboard button: it sends `callback_data` back to the bot, or opens `url`.
TelegramInlineKeyboard	interface	@spy4x/integrations/telegram	Buttons under a message, as rows.
TelegramMessage	interface	@spy4x/integrations/telegram	A message, with the fields a bot routes on.
TelegramPollingOptions	interface	@spy4x/integrations/telegram	Options of pollTelegramUpdates.
TelegramResult	type	@spy4x/integrations/telegram	What a TelegramClient call resolves with.
TelegramSendMessage	interface	@spy4x/integrations/telegram	Parameters of `sendMessage`, named as in the Bot API.
TelegramSetWebhook	interface	@spy4x/integrations/telegram	Parameters of `setWebhook`, named as in the Bot API.
TelegramStepHandler	type	@spy4x/integrations/telegram	Handles one answer inside a conversation step.
TelegramStepResult	type	@spy4x/integrations/telegram	What a step returns: the next step and the data so far, `{ done: true }`, or nothing to stay.
TelegramSuccess	interface	@spy4x/integrations/telegram	Telegram accepted the call.
TelegramUpdate	interface	@spy4x/integrations/telegram	One update.
TelegramUser	interface	@spy4x/integrations/telegram	A Telegram user or bot.
TelegramWebhookOptions	interface	@spy4x/integrations/telegram	Options of createTelegramWebhookHandler.
createTelegramWebhookHandler	function	@spy4x/integrations/telegram	Builds a webhook endpoint: `(request) => response`, for any server that speaks `Request`.
parseTelegramUpdate	function	@spy4x/integrations/telegram	Checks an untrusted value against TelegramUpdate.
pollTelegramUpdates	function	@spy4x/integrations/telegram	Long polling for development, where Telegram cannot reach a webhook.
UMAMI_FILTER_NAMES	constant	@spy4x/integrations/umami	The filters Umami's website reports take.
UMAMI_LINK_NAME_MAX	constant	@spy4x/integrations/umami	Umami's limits for a link: a name of 100 characters, a url of 500, a slug of 8 to 100.
UMAMI_LINK_URL_MAX	constant	@spy4x/integrations/umami	
UMAMI_METRIC_TYPES	constant	@spy4x/integrations/umami	What a breakdown can count by, in Umami's names.
UMAMI_SERIES_UNITS	constant	@spy4x/integrations/umami	The units a series can step by.
UMAMI_SLUG_PATTERN	constant	@spy4x/integrations/umami	A slug this client sends: 8 to 100 letters, digits, `-` and `_`, so it is safe in a path.
UmamiCheckResult	interface	@spy4x/integrations/umami	Outcome of checkUmami: `output` says what was seen on success, `error` on failure.
UmamiConnection	interface	@spy4x/integrations/umami	Where an Umami instance is, and how to reach it.
UmamiFilterName	type	@spy4x/integrations/umami	One of UMAMI_FILTER_NAMES.
UmamiLink	interface	@spy4x/integrations/umami	A link as Umami stores it.
UmamiLinkCreateOptions	interface	@spy4x/integrations/umami	Options for createUmamiLink.
UmamiLinkResult	type	@spy4x/integrations/umami	Outcome of createUmamiLink: the link on success, why not on failure.
UmamiMetric	interface	@spy4x/integrations/umami	One row of a breakdown: a value (`x`, such as a path or an event name) and its count (`y`).
UmamiMetricType	type	@spy4x/integrations/umami	One of UMAMI_METRIC_TYPES: page views and visits by these, events by `event`.
UmamiPageviews	interface	@spy4x/integrations/umami	UmamiSeries, with the previous period's when `compare` was asked for.
UmamiPoint	interface	@spy4x/integrations/umami	One point of a series: the start of its unit as Umami prints it (`x`), and a count (`y`).
UmamiPropertyValue	interface	@spy4x/integrations/umami	How many events carried one value of a property.
UmamiReadResult	type	@spy4x/integrations/umami	Outcome of a read.
UmamiSeries	interface	@spy4x/integrations/umami	Page views and visitors per unit of time.
UmamiStats	interface	@spy4x/integrations/umami	UmamiTotals of the period and of the period of the same length just before it.
UmamiTotals	interface	@spy4x/integrations/umami	A website's totals over a period: Umami's `/stats`.
UmamiWebsiteCheck	type	@spy4x/integrations/umami	Outcome of checkUmamiWebsite.
UmamiWebsiteProblem	type	@spy4x/integrations/umami	Why checkUmamiWebsite failed: `settings` for options that cannot work (no `http`/`https` base address, an empty token, a bad timeout), `website` for a website id that is no UUID or that the token cannot see, `token` for a token Umami refuses, `unreachable` for anything else.
UmamiWebsiteRead	interface	@spy4x/integrations/umami	What every read of a website's numbers needs.
checkUmami	function	@spy4x/integrations/umami	Asks Umami's `GET /api/heartbeat` whether the instance answers.
checkUmamiWebsite	function	@spy4x/integrations/umami	Checks that the token is accepted and can view the website, and says which of the two failed: `token` when Umami refuses the token, `website` when the token works but no website with that id is visible to it, `unreachable` for anything else.
createUmamiLink	function	@spy4x/integrations/umami	Creates an Umami link and returns it.
readUmamiEventValues	function	@spy4x/integrations/umami	Reads how many custom events carried each value of one property, most first, such as the item of an `order-telegram` event (Umami's `GET /api/websites/<id>/event-data/values`).
readUmamiMetrics	function	@spy4x/integrations/umami	Reads a breakdown of a website's period by `type`, largest first (Umami's `GET /api/websites/<id>/metrics`).
readUmamiPageviews	function	@spy4x/integrations/umami	Reads page views and visitors per `unit` of a period, in `timezone` (Umami's `GET /api/websites/<id>/pageviews`).
readUmamiStats	function	@spy4x/integrations/umami	Reads a website's totals over a period, and the same totals over the period of the same length just before it (Umami's `GET /api/websites/<id>/stats`).
umamiLinkUrl	function	@spy4x/integrations/umami	The public address of a link: `<baseUrl>/q/<slug>`, which counts the visit and redirects.
CombinedSignatureHeader	interface	@spy4x/integrations/webhooks	One header that carries the timestamp and the signatures together, as a list of `key=value` pairs: Stripe's `Stripe-Signature: t=1492774577,v1=5257…,v0=6ffb…` is `{ name: "Stripe-Signature", pairSeparator: ",", timestampKey: "t", signatureKey: "v1" }`.
WebhookRejectReason	type	@spy4x/integrations/webhooks	Why a delivery was rejected.
WebhookVerifierConfig	interface	@spy4x/integrations/webhooks	Shared secret and header names verifyWebhookRequest needs to check a delivery.
WebhookVerifyResult	type	@spy4x/integrations/webhooks	Result of verifyWebhookRequest: the verified body, or why it was rejected.
verifyWebhookRequest	function	@spy4x/integrations/webhooks	Verifies one inbound delivery.
ALLOWED_PROTOCOLS	constant	@spy4x/net	Protocols `normalizeUrlShape` accepts; anything else is rejected.
AddressRecordType	type	@spy4x/net	The address record types a lookup asks for.
BodyReadErrorCode	enum	@spy4x/net	Finite failure kinds a bounded read can raise.
BodyReadOptions	interface	@spy4x/net	Per-call overrides for a bounded body read.
BodyReadTimeoutError	class	@spy4x/net	No chunk arrived within the stall budget.
BodySource	interface	@spy4x/net	The read surface shared by `Request` and `Response`.
CLOUDFLARE_IP_RANGES	constant	@spy4x/net	Cloudflare's published edge ranges, IPv4 then IPv6, from https://www.cloudflare.com/ips-v4 and https://www.cloudflare.com/ips-v6 as of 2026-09-26.
CREDENTIAL_HEADERS	constant	@spy4x/net	Request headers that must not follow a redirect to another origin.
DEFAULT_BODY_TIMEOUT_MS	constant	@spy4x/net	Default stall budget: 10s without a chunk.
DEFAULT_MAX_BYTES	constant	@spy4x/net	Default ceiling for a body read: 5 MiB.
DEFAULT_MAX_REDIRECTS	constant	@spy4x/net	Redirects followed before the chain is refused.
DEFAULT_TIMEOUT_MS	constant	@spy4x/net	Total budget for the whole redirect chain.
DENY_NET_ADDRESSES	constant	@spy4x/net	Addresses to refuse at connection time, in the spelling `--deny-net` takes.
DnsLookupOptions	interface	@spy4x/net	Options of one DNS lookup.
DnsResolutionError	class	@spy4x/net	DNS lookup failure — either the resolver threw or it returned no records.
DnsResolver	interface	@spy4x/net	Resolves a hostname to all A/AAAA addresses.
EXPLICIT_SCHEME	constant	@spy4x/net	Any `scheme:` prefix, with or without `//`, so `javascript:` is caught too.
Fetcher	interface	@spy4x/net	The seam that keeps this module off the network in tests.
INVALID_CHARACTERS	constant	@spy4x/net	Whitespace and control characters that make a URL input invalid.
NormalizeUrlShapeResult	type	@spy4x/net	Outcome of normalizeUrlShape.
PLAIN_HOSTNAME	constant	@spy4x/net	Deprecated: Nothing in this library uses it; write the pattern where it is needed. A hostname that is a plain DNS label run: no `:`, no brackets, no dots.
ParsedIp	interface	@spy4x/net	An address that parseIp accepted.
PayloadTooLargeError	class	@spy4x/net	Body exceeded the byte cap.
SafeFetchMethod	enum	@spy4x/net	Request methods a redirect is allowed to carry unchanged.
SafeFetchResult	interface	@spy4x/net	Successful outcome of safeFetch.
UNKNOWN_DEVICE	constant	@spy4x/net	The name of a device whose user agent says nothing this module recognises.
UrlPolicyErrorCode	type	@spy4x/net	Machine-readable rejection reason.
UrlShapeError	interface	@spy4x/net	Rejected input, with the reason a caller can branch on.
UrlShapeErrorCode	type	@spy4x/net	Machine-readable rejection reason.
UrlShapeOk	interface	@spy4x/net	Accepted input, normalised.
UrlValidationError	class	@spy4x/net	A URL rejected by the policy, with a stable code a caller can branch on.
defaultFetcher	constant	@spy4x/net	Fetcher backed by the platform `fetch`.
defaultResolver	constant	@spy4x/net	The production resolver: system A **and** AAAA lookups, both required.
denyNetFlag	function	@spy4x/net	`DENY_NET_ADDRESSES` as the command-line flag that applies them.
detectScheme	function	@spy4x/net	Split an explicit `scheme:` prefix off the raw input.
deviceName	function	@spy4x/net	A short name a person recognises their device by, such as "Firefox on Linux" or "Safari on iPhone".
ipHint	function	@spy4x/net	The address with only its network part shown, for display in a list of signed-in devices: the first three parts of an IPv4 address (`203.0.113.*`) or the first two groups of an IPv6 one (`2001:db8:*`).
ipInRanges	function	@spy4x/net	True when `ip` lies inside at least one of `cidrs`.
isLocalHostname	function	@spy4x/net	True if the hostname is a special-use name that resolves locally.
isLoopbackHost	function	@spy4x/net	True when `host` names the machine itself the way a browser decides it: `localhost`, any name under `.localhost`, an address in `127.0.0.0/8`, or `::1`.
isPublicAddress	function	@spy4x/net	True if `addr` is a globally routable IPv4 or IPv6 address.
isPublicIpv4	function	@spy4x/net	True if `addr` is a globally routable IPv4 address.
isPublicIpv6	function	@spy4x/net	True if the IPv6 address (with optional embedded IPv4) is globally routable.
isUrlShapeOk	function	@spy4x/net	Deprecated: Read `result.ok` instead: it narrows the result the same way. Narrow a `normalizeUrlShape` result to its success branch.
normalizeIp	function	@spy4x/net	The canonical spelling of `input` (parseIp), or `null` when it is not an address.
normalizeUrlShape	function	@spy4x/net	Normalise the shape of a user-entered URL.
parseBoundedFormData	function	@spy4x/net	Parse a `multipart/form-data` (or url-encoded) request body under the same cap and stall budget as `readBoundedBody`.
parseIp	function	@spy4x/net	Parse one IPv4 or IPv6 address.
parseIpv6Groups	function	@spy4x/net	Parse an IPv6 address into 8 groups of 16-bit unsigned ints.
readBoundedBody	function	@spy4x/net	Read a body into bytes under the hard cap and stall budget.
readBoundedJson	function	@spy4x/net	Read a body as JSON under the same cap and stall budget as `readBoundedText`.
readBoundedText	function	@spy4x/net	Read a body as text, decoding incrementally so the cap is enforced before the whole payload is materialised as one string.
readContentLength	function	@spy4x/net	Read the declared `Content-Length`, if the sender provided a usable one.
resolveDns	function	@spy4x/net	The addresses of `hostname`'s `A` or `AAAA` records: `Deno.resolveDns` on Deno, `node:dns/promises` on Node and Bun.
resolveTxt	function	@spy4x/net	`hostname`'s `TXT` records, one array per record holding its strings as they came, unjoined: `Deno.resolveDns(hostname, "TXT")` on Deno, `node:dns/promises` on Node and Bun, which answer in that same shape.
safeFetch	function	@spy4x/net	Fetch a URL following redirects manually, validating each `Location` through the public-URL policy.
safeRedirectPath	function	@spy4x/net	The path to send a person to next: `value` when it is a path on this origin, `fallback` otherwise.
validatePublicUrl	function	@spy4x/net	Validate a URL and return the canonical form.
BodyReadErrorCode	enum	@spy4x/net/bounded-body	Finite failure kinds a bounded read can raise.
BodyReadOptions	interface	@spy4x/net/bounded-body	Per-call overrides for a bounded body read.
BodyReadTimeoutError	class	@spy4x/net/bounded-body	No chunk arrived within the stall budget.
BodySource	interface	@spy4x/net/bounded-body	The read surface shared by `Request` and `Response`.
DEFAULT_BODY_TIMEOUT_MS	constant	@spy4x/net/bounded-body	Default stall budget: 10s without a chunk.
DEFAULT_MAX_BYTES	constant	@spy4x/net/bounded-body	Default ceiling for a body read: 5 MiB.
PayloadTooLargeError	class	@spy4x/net/bounded-body	Body exceeded the byte cap.
parseBoundedFormData	function	@spy4x/net/bounded-body	Parse a `multipart/form-data` (or url-encoded) request body under the same cap and stall budget as `readBoundedBody`.
readBoundedBody	function	@spy4x/net/bounded-body	Read a body into bytes under the hard cap and stall budget.
readBoundedJson	function	@spy4x/net/bounded-body	Read a body as JSON under the same cap and stall budget as `readBoundedText`.
readBoundedText	function	@spy4x/net/bounded-body	Read a body as text, decoding incrementally so the cap is enforced before the whole payload is materialised as one string.
readContentLength	function	@spy4x/net/bounded-body	Read the declared `Content-Length`, if the sender provided a usable one.
AddressRecordType	type	@spy4x/net/dns	The address record types a lookup asks for.
DnsLookupOptions	interface	@spy4x/net/dns	Options of one DNS lookup.
resolveDns	function	@spy4x/net/dns	The addresses of `hostname`'s `A` or `AAAA` records: `Deno.resolveDns` on Deno, `node:dns/promises` on Node and Bun.
resolveTxt	function	@spy4x/net/dns	`hostname`'s `TXT` records, one array per record holding its strings as they came, unjoined: `Deno.resolveDns(hostname, "TXT")` on Deno, `node:dns/promises` on Node and Bun, which answer in that same shape.
CLOUDFLARE_IP_RANGES	constant	@spy4x/net/ip	Cloudflare's published edge ranges, IPv4 then IPv6, from https://www.cloudflare.com/ips-v4 and https://www.cloudflare.com/ips-v6 as of 2026-09-26.
ParsedIp	interface	@spy4x/net/ip	An address that parseIp accepted.
ipHint	function	@spy4x/net/ip	The address with only its network part shown, for display in a list of signed-in devices: the first three parts of an IPv4 address (`203.0.113.*`) or the first two groups of an IPv6 one (`2001:db8:*`).
ipInRanges	function	@spy4x/net/ip	True when `ip` lies inside at least one of `cidrs`.
isLoopbackHost	function	@spy4x/net/ip	True when `host` names the machine itself the way a browser decides it: `localhost`, any name under `.localhost`, an address in `127.0.0.0/8`, or `::1`.
normalizeIp	function	@spy4x/net/ip	The canonical spelling of `input` (parseIp), or `null` when it is not an address.
parseIp	function	@spy4x/net/ip	Parse one IPv4 or IPv6 address.
safeRedirectPath	function	@spy4x/net/redirect-path	The path to send a person to next: `value` when it is a path on this origin, `fallback` otherwise.
CREDENTIAL_HEADERS	constant	@spy4x/net/safe-fetch	Request headers that must not follow a redirect to another origin.
DEFAULT_MAX_REDIRECTS	constant	@spy4x/net/safe-fetch	Redirects followed before the chain is refused.
DEFAULT_TIMEOUT_MS	constant	@spy4x/net/safe-fetch	Total budget for the whole redirect chain.
Fetcher	interface	@spy4x/net/safe-fetch	The seam that keeps this module off the network in tests.
SafeFetchMethod	enum	@spy4x/net/safe-fetch	Request methods a redirect is allowed to carry unchanged.
SafeFetchResult	interface	@spy4x/net/safe-fetch	Successful outcome of safeFetch.
defaultFetcher	constant	@spy4x/net/safe-fetch	Fetcher backed by the platform `fetch`.
safeFetch	function	@spy4x/net/safe-fetch	Fetch a URL following redirects manually, validating each `Location` through the public-URL policy.
DENY_NET_ADDRESSES	constant	@spy4x/net/url-policy	Addresses to refuse at connection time, in the spelling `--deny-net` takes.
DnsResolutionError	class	@spy4x/net/url-policy	DNS lookup failure — either the resolver threw or it returned no records.
DnsResolver	interface	@spy4x/net/url-policy	Resolves a hostname to all A/AAAA addresses.
HTTP_OPTION_MESSAGE	constant	@spy4x/net/url-policy	Message used when `allowHttp: false` rejects an `http:` URL.
NormalizeUrlShapeResult	type	@spy4x/net/url-policy	Outcome of normalizeUrlShape.
UrlPolicyErrorCode	type	@spy4x/net/url-policy	Machine-readable rejection reason.
UrlShapeError	interface	@spy4x/net/url-policy	Rejected input, with the reason a caller can branch on.
UrlShapeOk	interface	@spy4x/net/url-policy	Accepted input, normalised.
UrlValidationError	class	@spy4x/net/url-policy	A URL rejected by the policy, with a stable code a caller can branch on.
defaultResolver	constant	@spy4x/net/url-policy	The production resolver: system A **and** AAAA lookups, both required.
denyNetFlag	function	@spy4x/net/url-policy	`DENY_NET_ADDRESSES` as the command-line flag that applies them.
isLocalHostname	function	@spy4x/net/url-policy	True if the hostname is a special-use name that resolves locally.
isPublicAddress	function	@spy4x/net/url-policy	True if `addr` is a globally routable IPv4 or IPv6 address.
isPublicIpv4	function	@spy4x/net/url-policy	True if `addr` is a globally routable IPv4 address.
isPublicIpv6	function	@spy4x/net/url-policy	True if the IPv6 address (with optional embedded IPv4) is globally routable.
normalizeUrlShape	function	@spy4x/net/url-policy	Normalise the shape of a user-entered URL.
parseIpv6Groups	function	@spy4x/net/url-policy	Parse an IPv6 address into 8 groups of 16-bit unsigned ints.
validatePublicUrl	function	@spy4x/net/url-policy	Validate a URL and return the canonical form.
ALLOWED_PROTOCOLS	constant	@spy4x/net/url-shape	Protocols `normalizeUrlShape` accepts; anything else is rejected.
EMPTY_MESSAGE	constant	@spy4x/net/url-shape	Message for UrlShapeErrorCode `"empty"`.
EXPLICIT_SCHEME	constant	@spy4x/net/url-shape	Any `scheme:` prefix, with or without `//`, so `javascript:` is caught too.
INVALID_CHARACTERS	constant	@spy4x/net/url-shape	Whitespace and control characters that make a URL input invalid.
INVALID_CHARACTERS_MESSAGE	constant	@spy4x/net/url-shape	Message for the control-character case of UrlShapeErrorCode `"invalid_format"`.
INVALID_FORMAT_MESSAGE	constant	@spy4x/net/url-shape	Message for UrlShapeErrorCode `"invalid_format"`.
NormalizeUrlShapeResult	type	@spy4x/net/url-shape	Outcome of normalizeUrlShape.
PLAIN_HOSTNAME	constant	@spy4x/net/url-shape	Deprecated: Nothing in this library uses it; write the pattern where it is needed. A hostname that is a plain DNS label run: no `:`, no brackets, no dots.
UNSUPPORTED_PROTOCOL_MESSAGE	constant	@spy4x/net/url-shape	Message for UrlShapeErrorCode `"unsupported_protocol"`.
UrlShapeError	interface	@spy4x/net/url-shape	Rejected input, with the reason a caller can branch on.
UrlShapeErrorCode	type	@spy4x/net/url-shape	Machine-readable rejection reason.
UrlShapeOk	interface	@spy4x/net/url-shape	Accepted input, normalised.
detectScheme	function	@spy4x/net/url-shape	Split an explicit `scheme:` prefix off the raw input.
isUrlShapeOk	function	@spy4x/net/url-shape	Deprecated: Read `result.ok` instead: it narrows the result the same way. Narrow a `normalizeUrlShape` result to its success branch.
normalizeUrlShape	function	@spy4x/net/url-shape	Normalise the shape of a user-entered URL.
UNKNOWN_DEVICE	constant	@spy4x/net/user-agent	The name of a device whose user agent says nothing this module recognises.
deviceName	function	@spy4x/net/user-agent	A short name a person recognises their device by, such as "Firefox on Linux" or "Safari on iPhone".
AnyError	type	@spy4x/platform	Every error Result can carry.
AsyncMutex	class	@spy4x/platform	A fair mutual-exclusion lock for async critical sections.
BackoffJitterMode	type	@spy4x/platform	How backoffDelay spreads a capped delay.
BlogPost	interface	@spy4x/platform	What blogPostingJsonLd describes.
BlogPostingJsonLd	interface	@spy4x/platform	A schema.org `BlogPosting` node.
BoundedIntegerOptions	interface	@spy4x/platform	Options of parseBoundedInteger.
BreadcrumbListItem	interface	@spy4x/platform	A schema.org `ListItem` as it appears inside a `BreadcrumbList`.
BreadcrumbListJsonLd	interface	@spy4x/platform	A schema.org `BreadcrumbList` node.
Clock	interface	@spy4x/platform	Injectable time source, so formatting and relative times are testable without a frozen host.
CommandEnvelope	interface	@spy4x/platform	Outcome of a command: what it produced, or why it failed.
ConnectionError	interface	@spy4x/platform	The request never reached the server.
Crumb	interface	@spy4x/platform	One entry in the breadcrumb trail a page declares.
DAYS_IN_MONTH	constant	@spy4x/platform	Days in one nominal month.
DAYS_IN_WEEK	constant	@spy4x/platform	Days in one week.
DAYS_OF_WEEK	constant	@spy4x/platform	Weekday names indexed Monday-first, matching getDaysOfWeek's bitmask order.
DEFAULT_DEBOUNCE_DELAY	constant	@spy4x/platform	Default trailing-edge debounce delay, in milliseconds.
DEFAULT_FLUSH_INTERVAL_MS	constant	@spy4x/platform	Default window for the throttled JSON saver, in milliseconds.
DayOfWeek	type	@spy4x/platform	Weekday identifier, Monday-first.
Debounced	interface	@spy4x/platform	Trailing-edge debounce.
ERR_MESSAGE	constant	@spy4x/platform	Canonical copy for each category, so the same failure reads the same in every product.
EntryMatch	interface	@spy4x/platform	How well a query matched one entry.
Err	interface	@spy4x/platform	Base shape every error shares: a category and human-readable copy.
ErrType	enum	@spy4x/platform	Kind of a failed operation.
ErrorEventTarget	interface	@spy4x/platform	The target of `install`: `window`, or anything with `addEventListener`.
ErrorReporter	interface	@spy4x/platform	What `createErrorReporter` returns.
FaqItem	interface	@spy4x/platform	One question and its answer, as a page shows them.
FaqPageJsonLd	interface	@spy4x/platform	A schema.org `FAQPage` node.
FaqQuestionJsonLd	interface	@spy4x/platform	A schema.org `Question` inside an `FAQPage`.
HONEYPOT_FIELD_NAME	constant	@spy4x/platform	Default `name` of the honeypot field.
HOURS_IN_DAY	constant	@spy4x/platform	Hours in one day.
InferSchema	type	@spy4x/platform	Value a schema accepts and produces.
ItemListJsonLd	interface	@spy4x/platform	A schema.org `ItemList` of the items a category or catalog page links to.
JsonLdBlog	interface	@spy4x/platform	The blog a post belongs to, described in full so the post's page stands alone.
JsonLdPerson	interface	@spy4x/platform	A person named as a post's author, or as its publisher.
JsonLdPersonNode	interface	@spy4x/platform	A schema.org `Person` or `Organization` node, or a reference to one by `@id`.
KeyValueStore	interface	@spy4x/platform	Minimal synchronous key/value port: the subset of the DOM `Storage` interface a caller needs to persist a small value, and the one shape `@spy4x/platform/browser/storage`'s `StorageLike` and `@spy4x/realtime`'s `KeyValueStore` both alias.
LlmsTxtDocument	interface	@spy4x/platform	What an `llms.txt` says: the site's name, a one-paragraph summary and its sections.
LlmsTxtLink	interface	@spy4x/platform	One link in an `llms.txt` section.
LlmsTxtSection	interface	@spy4x/platform	One `## Section` of an `llms.txt` and its links.
MAX_MASKED_EMAIL_LENGTH	constant	@spy4x/platform	Longest text maskEmail returns, in UTF-16 code units: one code point (at most two units), the three stars, `@`, and a domain of at most 253.
MAX_TICKS	constant	@spy4x/platform	Hard ceiling on generated ticks, and on the iterations the tick loop may spend producing them — see the doc of `ticksForStep` (the private loop behind ticks and stepAxis) for why the loop needs its own bound, not just the output's.
MILLISECONDS_IN_SECOND	constant	@spy4x/platform	Milliseconds in one second.
MINUTES_IN_HOUR	constant	@spy4x/platform	Minutes in one hour.
MIN_PASSWORD_LENGTH	constant	@spy4x/platform	Minimum accepted password length.
MONTHS_IN_YEAR	constant	@spy4x/platform	Months in one year.
NowFn	type	@spy4x/platform	Monotonic millisecond clock, function-shaped rather than object-shaped — the home for the `() => number` clock shape, which cannot be merged into Clock without breaking a 1.x caller of one shape or the other.
ONE_DAY_IN_MILLISECONDS	constant	@spy4x/platform	One day, in milliseconds.
ONE_DAY_IN_SECONDS	constant	@spy4x/platform	One day, in seconds.
ONE_HOUR_IN_MILLISECONDS	constant	@spy4x/platform	One hour, in milliseconds.
ONE_HOUR_IN_SECONDS	constant	@spy4x/platform	One hour, in seconds.
ONE_MINUTE_IN_MILLISECONDS	constant	@spy4x/platform	One minute, in milliseconds.
ONE_MONTH_IN_MILLISECONDS	constant	@spy4x/platform	One month (30 days), in milliseconds.
ONE_MONTH_IN_SECONDS	constant	@spy4x/platform	One month (30 days), in seconds.
ONE_WEEK_IN_MILLISECONDS	constant	@spy4x/platform	One week, in milliseconds.
ONE_WEEK_IN_SECONDS	constant	@spy4x/platform	One week, in seconds.
ONE_YEAR_IN_MILLISECONDS	constant	@spy4x/platform	One year (12 nominal months), in milliseconds.
ONE_YEAR_IN_SECONDS	constant	@spy4x/platform	One year (12 nominal months), in seconds.
OfferJsonLd	interface	@spy4x/platform	A schema.org `Offer` for one item, new, sold by the page's shop.
OperationResult	type	@spy4x/platform	Result of an operation that can fail: exactly one of `result` / `error` is non-null.
OperationState	interface	@spy4x/platform	In-flight state of an operation, for a store or a form to render.
OtherError	interface	@spy4x/platform	An error this package has no category for.
ParsedDsn	interface	@spy4x/platform	Where a report goes: the envelope URL and the public key a DSN carries.
PayloadError	interface	@spy4x/platform	A payload a schema rejected: a response body, or a remote feed item.
ProductGroupJsonLd	interface	@spy4x/platform	A schema.org `ProductGroup` node: an item whose page offers several variants.
ProductJsonLd	interface	@spy4x/platform	A schema.org `Product` node: an item with no variants, or one variant of a group.
ProductPage	interface	@spy4x/platform	What productJsonLd describes: one item page, with or without variants.
ProductVariant	interface	@spy4x/platform	One variant of a product, such as one colour in one size, selectable on the product's page.
QuickAddDue	interface	@spy4x/platform	When the task is due: a calendar date in the given time zone, and a wall-clock time if typed.
QuickAddOptions	interface	@spy4x/platform	Options of parseQuickAdd.
QuickAddPriority	enum	@spy4x/platform	Task priority.
QuickAddResult	interface	@spy4x/platform	The result of parseQuickAdd.
QuickAddSpan	interface	@spy4x/platform	One recognised token, as a half-open range of UTF-16 offsets into the original line.
QuickAddSpanKind	enum	@spy4x/platform	What a recognised token is.
RandomSource	type	@spy4x/platform	A source of numbers in `[0, 1)`, the shape `Math.random` has.
ReportContext	interface	@spy4x/platform	Extra facts one report may carry.
RequestError	type	@spy4x/platform	Errors a request itself can produce.
ResponseError	type	@spy4x/platform	Errors from a response that never reached a usable body.
Result	type	@spy4x/platform	A value or an error, as a discriminated union on `ok`.
RssChannel	interface	@spy4x/platform	The feed itself: what an RSS reader shows as the source of the items.
RssItem	interface	@spy4x/platform	One post in an RSS feed.
SECONDS_IN_MINUTE	constant	@spy4x/platform	Seconds in one minute.
SearchEntry	interface	@spy4x/platform	Something searchEntries can find: a label and, optionally, other names for it.
SearchMatch	interface	@spy4x/platform	One result of searchEntries.
SearchMatchKind	type	@spy4x/platform	How a query matched an entry, from the strongest to the weakest:
ServerError	interface	@spy4x/platform	The server answered with a failure status.
SitemapAlternate	interface	@spy4x/platform	One language version of a page in a `sitemap.xml`.
SitemapEntry	interface	@spy4x/platform	One page in a `sitemap.xml`.
SortDirection	type	@spy4x/platform	Sort direction of one rule.
SortRule	interface	@spy4x/platform	One column in the sort order.
StepAxis	interface	@spy4x/platform	Bounds rounded outward to multiples of a step, and the ticks between them.
StoreError	type	@spy4x/platform	Every error a store operation can settle with.
TimeFormatOptions	interface	@spy4x/platform	Locale and zone applied by formatTime and timeAgo.
TimeFormatter	class	@spy4x/platform	Format an instant for display.
UUID_PATTERN	constant	@spy4x/platform	A lower-case UUID of any version, the form Postgres and the browser's own generator print.
UUID_V7_PATTERN	constant	@spy4x/platform	A lower-case UUID of version 7, as uuidV7 makes it: version digit `7` and the standard variant (`8`, `9`, `a` or `b`).
UnsafeTextOptions	interface	@spy4x/platform	Options of hasUnsafeTextCharacters.
UuidVersion	type	@spy4x/platform	The version digit of a UUID: `4` is the random one, `7` the time-ordered one.
ValidationError	type	@spy4x/platform	A rejected input: its kind, one sentence for the user, the issues per field path, and arktype's own errors.
asciiSlug	function	@spy4x/platform	A slug of only `a-z`, digits and single dashes, for an address that refuses other scripts.
backoffDelay	function	@spy4x/platform	Caps a raw delay and jitters it: the exponential-backoff arithmetic shared by `integrations/retry.ts`'s `createExponentialBackoff` (symmetric jitter around the capped delay) and `realtime/backoff.ts`'s `nextBackoffDelay` (jitter that only ever shortens the wait).
blogPostingJsonLd	function	@spy4x/platform	The schema.org `BlogPosting` node for one post, with the fields Google reads for an article: `headline`, `image`, `datePublished`, `dateModified`, `author` and `publisher`, plus `mainEntityOfPage`, `articleSection`, `inLanguage`, `timeRequired` and `isPartOf`.
breadcrumbItems	function	@spy4x/platform	`itemListElement` for a schema.org `BreadcrumbList`, built from the crumbs the caller stated.
breadcrumbListJsonLd	function	@spy4x/platform	The complete `BreadcrumbList` node, `@id`-anchored to the page it describes.
canonicalUrl	function	@spy4x/platform	Parse a canonical address into the normalised `URL` that will be published.
commandErr	function	@spy4x/platform	Build the failure arm of a CommandEnvelope.
commandFromError	function	@spy4x/platform	Build a CommandEnvelope from a thrown error, keeping the stack out of the payload.
commandOk	function	@spy4x/platform	Build the success arm of a CommandEnvelope.
connectionError	function	@spy4x/platform	Wrap a message the caller already has into a ConnectionError.
convertToKebabCase	function	@spy4x/platform	Convert a free-form identifier to kebab-case.
createErrorReporter	function	@spy4x/platform	Creates the reporter.
cyrillicToLatin	function	@spy4x/platform	Folded text with each Cyrillic letter spelled in Latin letters: `ж` becomes `zh`, `щ` becomes `shch`, and `ь` and `ъ` disappear.
debounce	function	@spy4x/platform	Wrap `fn` in a trailing-edge debounce.
err	function	@spy4x/platform	Wrap a failure.
faqPageJsonLd	function	@spy4x/platform	The `FAQPage` node for the questions a page shows, in the order it shows them.
filterRows	function	@spy4x/platform	Keep the rows that every word of the query matches.
fold	function	@spy4x/platform	Fold text for matching: accents removed and lower-cased.
formatBytes	function	@spy4x/platform	A byte count for display, in binary (1024) steps: `"512 B"`, `"1.5 KB"`, `"2 MB"`.
formatDecimal	function	@spy4x/platform	Format a decimal number to exactly two decimal places.
formatPct	function	@spy4x/platform	Format a fraction in `0..1` as a percentage string with two decimals.
formatTime	function	@spy4x/platform	One-off TimeFormatter#format on the host clock.
getDaysOfWeek	function	@spy4x/platform	Read a weekday bitmask into day names.
hasUnsafeTextCharacters	function	@spy4x/platform	Whether text a person typed holds one of a fixed list of characters that a display name must not: control characters, which a database may refuse, and the common invisible and text-direction characters.
hasUnstorableTextCharacters	function	@spy4x/platform	Whether text holds a character that no database text column can store and give back unchanged: NUL (U+0000) or a lone surrogate, which is half of a surrogate pair without its other half.
honeypotFilled	function	@spy4x/platform	Whether a submitted honeypot field carries a value — a person never types into a field they cannot see, so any value here means whatever posted the form was not one.
idleOperationState	function	@spy4x/platform	Idle state of an operation.
initials	function	@spy4x/platform	Reduce a name to one or two initials, e.g. for an avatar's fallback face.
isRecord	function	@spy4x/platform	True for a plain keyed object: not `null`, not an array.
isSilentError	function	@spy4x/platform	Whether an error should stay quiet.
isUuid	function	@spy4x/platform	True for a lower-case UUID string.
isValidDate	function	@spy4x/platform	Whether the input is a usable date: a `Date` or an ISO `YYYY-MM-DD`-prefixed string that `Date` can parse.
itemListJsonLd	function	@spy4x/platform	The `ItemList` node for a category or catalog page: one `ListItem` per item, with its 1-based `position` and the absolute `url` of the item's own page, in the order the page shows them.
jsonLdText	function	@spy4x/platform	Serialise JSON-LD for a `<script>` body.
levenshtein	function	@spy4x/platform	Levenshtein edit distance between two strings, computed over code points.
llmsTxt	function	@spy4x/platform	The text of an `/llms.txt` in the format llmstxt.org describes: `# Title`, a `> summary` line, then each section as a `## Section` heading followed by `- [Title](url): description` lines.
maskEmail	function	@spy4x/platform	An email address with its local part hidden behind its first character, for showing a person which address they used without spelling it out: `jane.doe@example.com` gives `j***@example.com`.
matchEntry	function	@spy4x/platform	How well `query` matches one entry, or `null` when it does not.
nextUtcHour	function	@spy4x/platform	The next time the clock reads `hour`:00 UTC after `now`: later today when that hour has not come yet, tomorrow when it is now or past.
niceStep	function	@spy4x/platform	Round a span up to a sensible tick step at roughly `target` ticks.
normalizeCalendarDate	function	@spy4x/platform	Normalise `YYYY.MM.DD` or `YYYY-MM-DD` to `YYYY-MM-DD`, rejecting impossible dates.
normalizeCanonical	function	@spy4x/platform	The canonical address as it should be published: one clean `http`/`https` address.
ok	function	@spy4x/platform	Wrap a success.
parseBoundedInteger	function	@spy4x/platform	The whole number `value` spells, or `options.fallback` when `value` is `undefined`, or `null` when it is anything else that is not an integer in `min` to `max`.
parseDsn	function	@spy4x/platform	The DSN's endpoint and key, or `null` when `dsn` is not a valid `https://key@host/project`.
parseQuickAdd	function	@spy4x/platform	Read the tokens out of a quick-add line.
parseSort	function	@spy4x/platform	Read sort rules out of a URL parameter.
pluralize	function	@spy4x/platform	Naive English pluraliser for UI copy.
productJsonLd	function	@spy4x/platform	The schema.org node Google reads for an item page: a `Product` for an item with no variants, or a `ProductGroup` whose `hasVariant` lists one `Product` per variant.
readingMinutes	function	@spy4x/platform	Whole minutes a reader needs for `text`, at least 1.
removeSortRule	function	@spy4x/platform	Removes one sort priority while preserving all remaining priorities.
responseError	function	@spy4x/platform	Turn a failed response into a structured error.
round	function	@spy4x/platform	Round to the nearest 10^-`decimals`.
rssXml	function	@spy4x/platform	The text of an RSS 2.0 feed of `items`, in the order given.
scrubText	function	@spy4x/platform	Free text with the secrets it may carry masked: URLs lose their query, `Bearer` values, and the value of anything named like a password, token, cookie or key.
scrubUrl	function	@spy4x/platform	`url` as origin and path only, with credentials, query and fragment dropped.
search	function	@spy4x/platform	Whether one search word occurs in one value.
searchEntries	function	@spy4x/platform	The entries that `query` matches, the best first (see matchEntry for what matches).
searchWords	function	@spy4x/platform	Split a search box's value into words.
serializeSort	function	@spy4x/platform	Write sort rules into a URL parameter.
similarity	function	@spy4x/platform	Similarity of two strings in `[0, 1]`, derived from levenshtein.
sitemapXml	function	@spy4x/platform	The text of a `sitemap.xml` that lists `entries` in the order given.
sleep	function	@spy4x/platform	Wait `ms` milliseconds.
slugify	function	@spy4x/platform	A URL- and `id`-safe slug of a title or heading, in any script.
sortRows	function	@spy4x/platform	Sort rows by every rule in order.
stepAxis	function	@spy4x/platform	Round `[min, max]` outward to multiples of `step` and return the new bounds with the ticks between them.
swapLayout	function	@spy4x/platform	The text a person meant when they typed `value` in the other keyboard layout, QWERTY and ЙЦУКЕН both ways.
systemClock	constant	@spy4x/platform	The host clock.
systemNow	function	@spy4x/platform	The host clock, function-shaped.
ticks	function	@spy4x/platform	Tick values at multiples of a nice step, kept within half a step of `[min, max]`.
timeAgo	function	@spy4x/platform	One-off TimeFormatter#ago on the host clock.
toggleSort	function	@spy4x/platform	Advance one column through `asc` → `desc` → `off`.
unwrap	function	@spy4x/platform	Narrow a Result to its value, or raise.
unwrapOr	function	@spy4x/platform	Narrow a Result to its value, or fall back.
utf8ByteLength	function	@spy4x/platform	UTF-8 byte length, i.e. what a `Content-Length` or a storage quota counts.
uuidV7	function	@spy4x/platform	Returns a new lower-case UUID version 7.
ApiError	interface	@spy4x/platform/api	One failure `apiFetch` can report: an HTTP status, a message meant to be shown as-is, and the server's machine-readable `code` when the error body carried one.
ApiResult	type	@spy4x/platform/api	Outcome of apiFetch: the parsed body on success, or a typed error on failure.
INVALID_REPLY_CODE	constant	@spy4x/platform/api	The `code` of the error result for a reply that does not match the schema.
OfflineApiResult	type	@spy4x/platform/api	Outcome of OfflineFetch.fetch.
OfflineFetch	interface	@spy4x/platform/api	What createOfflineFetch returns.
apiFetch	function	@spy4x/platform/api	`fetch` a JSON API and report the outcome as an ApiResult instead of throwing.
createOfflineFetch	function	@spy4x/platform/api	Creates one offline-aware fetch with its own "last request failed" flag.
AskOnce	interface	@spy4x/platform/browser	Where requestPersistentStorage remembers that it has asked, so it asks once per device.
BuildEnv	type	@spy4x/platform/browser	The values of a build, as a bundler exposes them.
ClipboardDocument	interface	@spy4x/platform/browser	The document surface the legacy `execCommand("copy")` path needs.
ClipboardWriter	interface	@spy4x/platform/browser	The one clipboard method this helper calls.
DEFAULT_RUNTIME_CONFIG_URL	constant	@spy4x/platform/browser	Where loadRuntimeConfig looks when the caller names no other address.
DataCache	interface	@spy4x/platform/browser	The durable cache: see the module documentation.
DataCacheOp	type	@spy4x/platform/browser	One step of DataCache.batch.
DatabaseSpec	interface	@spy4x/platform/browser	How to open one database.
DownloadDocument	interface	@spy4x/platform/browser	Minimal document surface this helper needs, so the caller passes its own `document`.
DownloadOptions	interface	@spy4x/platform/browser	Everything downloadResponseAsFile needs; all of it injectable.
EMBED_HEIGHT_MESSAGE_TYPE	constant	@spy4x/platform/browser	Default `type` of the message reportHeight posts: `{ type, height }`.
EmbedMeasurable	interface	@spy4x/platform/browser	The measured element: anything with a `getBoundingClientRect`.
EmbedParent	interface	@spy4x/platform/browser	The parent frame: all reportHeight needs from it is `postMessage`.
EmbedResizeObserver	interface	@spy4x/platform/browser	The observer reportHeight uses; a `ResizeObserver` fits.
EmbedWindow	interface	@spy4x/platform/browser	The subset of `Window` reportHeight reads.
GEOLOCATION_FAILED	constant	@spy4x/platform/browser	Message requestGeolocation reports when the browser refused or failed to answer.
GEOLOCATION_UNSUPPORTED	constant	@spy4x/platform/browser	Message requestGeolocation reports when the runtime has no `Geolocation` at all.
GeoCoordinates	interface	@spy4x/platform/browser	A resolved position, reduced to the two numbers a caller stores.
Hotkey	interface	@spy4x/platform/browser	A parsed keyboard combination: one key and the modifiers held with it.
HotkeyBinding	interface	@spy4x/platform/browser	One entry of a createHotkeyMatcher table: the key presses that trigger `id`.
HotkeyEvent	interface	@spy4x/platform/browser	The part of a `KeyboardEvent` that matchesHotkey reads.
HotkeySequenceEvent	interface	@spy4x/platform/browser	The part of a `KeyboardEvent` that createHotkeyMatcher reads.
LastSignIn	interface	@spy4x/platform/browser	How a person last signed in on this browser.
LastSignInStore	interface	@spy4x/platform/browser	A handle over one storage key.
MAX_LAST_SIGN_IN_METHOD_LENGTH	constant	@spy4x/platform/browser	Longest method name LastSignInStore.remember keeps.
MissingBuildEnvError	class	@spy4x/platform/browser	Thrown by readBuildEnvVar for a required variable that is missing or empty.
ObjectUrlAdapter	interface	@spy4x/platform/browser	Object-URL surface, injected so a test never allocates a real blob URL.
OfflineShellOptions	interface	@spy4x/platform/browser	Options of installOfflineShell.
PasskeyBrowser	interface	@spy4x/platform/browser	Where the module finds the browser's passkey API.
PasskeyCallOptions	interface	@spy4x/platform/browser	Options for createPasskey and getPasskey.
PasskeyCredential	interface	@spy4x/platform/browser	A credential `navigator.credentials` returns: only its `toJSON` is used.
PasskeyJSON	interface	@spy4x/platform/browser	A passkey as JSON, ready to send to the server.
PasskeyStatics	interface	@spy4x/platform/browser	The `PublicKeyCredential` statics this module calls.
PersistentStorageManager	interface	@spy4x/platform/browser	The part of a browser's `StorageManager` this module uses.
PlatformNavigator	interface	@spy4x/platform/browser	The part of `navigator` that isApplePlatform reads.
PushClickEvent	interface	@spy4x/platform/browser	The parts of a `NotificationEvent` this module uses.
PushClient	interface	@spy4x/platform/browser	The parts of a `Client` this module uses; a `WindowClient` has all three.
PushNotificationOptions	interface	@spy4x/platform/browser	What this module passes to `showNotification`.
PushNotificationsOptions	interface	@spy4x/platform/browser	Options of installPushNotifications.
PushScope	interface	@spy4x/platform/browser	The parts of the service-worker global scope this module uses; `self` fits.
PushScopeEvent	interface	@spy4x/platform/browser	The parts of a `PushEvent` this module uses.
SKIP_WAITING_MESSAGE	constant	@spy4x/platform/browser	The message `SWUpdater` posts to a waiting worker; installOfflineShell acts on it.
ShellCache	interface	@spy4x/platform/browser	Cache surface this module needs; a real `Cache` fits.
ShellCacheStorage	interface	@spy4x/platform/browser	Cache storage surface; a real `CacheStorage` fits.
ShellEvent	interface	@spy4x/platform/browser	The parts of an `ExtendableEvent` this module uses.
ShellFetchEvent	interface	@spy4x/platform/browser	The parts of a `FetchEvent` this module uses.
ShellMessageEvent	interface	@spy4x/platform/browser	The parts of a `message` event this module uses.
ShellScope	interface	@spy4x/platform/browser	The parts of the service-worker global scope this module uses; `self` fits.
SignedInHint	interface	@spy4x/platform/browser	A handle over one hint key.
StorageLike	type	@spy4x/platform/browser	Deprecated: Use `KeyValueStore` from `@spy4x/platform/universal/key-value-store` — the same three methods, in a file with no import of its own. The subset of the DOM `Storage` interface this module uses.
StorageRead	type	@spy4x/platform/browser	Outcome of a write or a read, so a caller can tell "absent" from "present but rejected".
TimerAdapter	interface	@spy4x/platform/browser	Timer surface, injected so a test never waits on a real delay.
TypedStorage	interface	@spy4x/platform/browser	A namespaced handle over one key.
TypingTarget	interface	@spy4x/platform/browser	The part of an element that isTypingTarget reads.
browserStorage	function	@spy4x/platform/browser	The browser's `localStorage`, made safe to call: it never throws, and a value the browser refuses to keep is remembered in memory until the page closes.
captureTimeZone	function	@spy4x/platform/browser	The visitor's IANA time zone (`Europe/Berlin`), or `undefined` when the runtime reports none.
copyToClipboard	function	@spy4x/platform/browser	Write `text` to the clipboard, and say whether it got there.
createDataCache	function	@spy4x/platform/browser	A data cache over IndexedDB.
createDatabaseOpener	function	@spy4x/platform/browser	Returns a function that opens the database on first use and returns the same connection after.
createHotkeyMatcher	function	@spy4x/platform/browser	Build a matcher for a table of bindings, each one or more key presses (`["g", "t"]`).
createLastSignIn	function	@spy4x/platform/browser	Creates the store for one `key`.
createPasskey	function	@spy4x/platform/browser	Create a passkey from the server's registration options.
createSignedInHint	function	@spy4x/platform/browser	Creates the hint for one `key`.
downloadCsv	function	@spy4x/platform/browser	Write rows as a CSV file and save it: toCsvBytes handed to downloadResponseAsFile.
downloadResponseAsFile	function	@spy4x/platform/browser	Save a response body to disk under `filename`.
fillEmptyTimeZoneField	function	@spy4x/platform/browser	Put the visitor's time zone into a form field, only when the field is still empty — a zone the page already filled in (from a link's `tz` parameter, say) is what the visitor saw on screen, and overwriting it would submit a different one.
getCookie	function	@spy4x/platform/browser	Look up `name` in `doc.cookie`, decoding its value.
getPasskey	function	@spy4x/platform/browser	Sign in with a passkey from the server's authentication options.
idbRequest	function	@spy4x/platform/browser	Resolves a request's result, or rejects with its error.
idbTransactionDone	function	@spy4x/platform/browser	Resolves when a transaction has committed, rejects when it aborts or fails.
installOfflineShell	function	@spy4x/platform/browser	Register the install, activate, fetch and message listeners that keep the app shell offline.
installPushNotifications	function	@spy4x/platform/browser	Register the `push` and `notificationclick` listeners of a service worker.
isApplePlatform	function	@spy4x/platform/browser	Whether the browser runs on macOS, iOS or iPadOS, where `mod` means Command.
isTypingTarget	function	@spy4x/platform/browser	Whether a key press on this element is typing: a text `<input>`, a `<textarea>`, a `<select>` or `contenteditable` content.
isUnderPath	function	@spy4x/platform/browser	Whether `pathname` is `base` or below it (`/api` matches `/api` and `/api/x`, not `/apix`).
linkedPaths	function	@spy4x/platform/browser	Same-origin paths named by `src="..."` and `href="..."` in `html`.
loadRuntimeConfig	function	@spy4x/platform/browser	Fetches `url` and validates the JSON with `schema`.
makeStorage	function	@spy4x/platform/browser	Bind a StorageLike to one key.
matchesHotkey	function	@spy4x/platform/browser	Whether a key press is the combination.
memoryStorage	function	@spy4x/platform/browser	A `Map`-backed StorageLike.
parseHotkey	function	@spy4x/platform/browser	Parse a combination such as `"mod+k"`, `"shift+n"`, `"?"` or `"ctrl+alt+delete"`.
readBuildEnvVar	function	@spy4x/platform/browser	One value of the build's environment: `env[name]`, else `env[prefix + name]`.
reportHeight	function	@spy4x/platform/browser	Post the element's height, in whole CSS pixels, to the parent frame — once the page has loaded, and again each time the element's size changes.
requestGeolocation	function	@spy4x/platform/browser	Ask for the current position and report the result.
requestPersistentStorage	function	@spy4x/platform/browser	Resolves `true` when this site's storage is persistent, asking the browser if it is not yet.
sameOriginUrl	function	@spy4x/platform/browser	`raw` as an absolute URL when it belongs to `origin`, otherwise `undefined`.
signalUnknownPasskey	function	@spy4x/platform/browser	Tell the passkey provider that the server does not know this credential (it was removed), so it stops offering it.
supportsPasskeyAutofill	function	@spy4x/platform/browser	Whether the browser offers passkeys in a field's autofill (`autocomplete="username webauthn"`), so getPasskey with `autofill: true` can run while the sign-in page is open.
supportsPasskeys	function	@spy4x/platform/browser	Whether this browser can create and use passkeys, with the JSON helpers this module needs.
BuildEnv	type	@spy4x/platform/browser/build-env	The values of a build, as a bundler exposes them.
MissingBuildEnvError	class	@spy4x/platform/browser/build-env	Thrown by readBuildEnvVar for a required variable that is missing or empty.
readBuildEnvVar	function	@spy4x/platform/browser/build-env	One value of the build's environment: `env[name]`, else `env[prefix + name]`.
ClipboardDocument	interface	@spy4x/platform/browser/clipboard	The document surface the legacy `execCommand("copy")` path needs.
ClipboardWriter	interface	@spy4x/platform/browser/clipboard	The one clipboard method this helper calls.
copyToClipboard	function	@spy4x/platform/browser/clipboard	Write `text` to the clipboard, and say whether it got there.
getCookie	function	@spy4x/platform/browser/cookie	Look up `name` in `doc.cookie`, decoding its value.
DataCache	interface	@spy4x/platform/browser/data-cache	The durable cache: see the module documentation.
DataCacheOp	type	@spy4x/platform/browser/data-cache	One step of DataCache.batch.
createDataCache	function	@spy4x/platform/browser/data-cache	A data cache over IndexedDB.
DownloadDocument	interface	@spy4x/platform/browser/download	Minimal document surface this helper needs, so the caller passes its own `document`.
DownloadOptions	interface	@spy4x/platform/browser/download	Everything downloadResponseAsFile needs; all of it injectable.
ObjectUrlAdapter	interface	@spy4x/platform/browser/download	Object-URL surface, injected so a test never allocates a real blob URL.
TimerAdapter	interface	@spy4x/platform/browser/download	Timer surface, injected so a test never waits on a real delay.
downloadCsv	function	@spy4x/platform/browser/download	Write rows as a CSV file and save it: toCsvBytes handed to downloadResponseAsFile.
downloadResponseAsFile	function	@spy4x/platform/browser/download	Save a response body to disk under `filename`.
EMBED_HEIGHT_MESSAGE_TYPE	constant	@spy4x/platform/browser/embed	Default `type` of the message reportHeight posts: `{ type, height }`.
EmbedMeasurable	interface	@spy4x/platform/browser/embed	The measured element: anything with a `getBoundingClientRect`.
EmbedParent	interface	@spy4x/platform/browser/embed	The parent frame: all reportHeight needs from it is `postMessage`.
EmbedResizeObserver	interface	@spy4x/platform/browser/embed	The observer reportHeight uses; a `ResizeObserver` fits.
EmbedWindow	interface	@spy4x/platform/browser/embed	The subset of `Window` reportHeight reads.
captureTimeZone	function	@spy4x/platform/browser/embed	The visitor's IANA time zone (`Europe/Berlin`), or `undefined` when the runtime reports none.
fillEmptyTimeZoneField	function	@spy4x/platform/browser/embed	Put the visitor's time zone into a form field, only when the field is still empty — a zone the page already filled in (from a link's `tz` parameter, say) is what the visitor saw on screen, and overwriting it would submit a different one.
reportHeight	function	@spy4x/platform/browser/embed	Post the element's height, in whole CSS pixels, to the parent frame — once the page has loaded, and again each time the element's size changes.
GEOLOCATION_FAILED	constant	@spy4x/platform/browser/geolocation	Message requestGeolocation reports when the browser refused or failed to answer.
GEOLOCATION_UNSUPPORTED	constant	@spy4x/platform/browser/geolocation	Message requestGeolocation reports when the runtime has no `Geolocation` at all.
GeoCoordinates	interface	@spy4x/platform/browser/geolocation	A resolved position, reduced to the two numbers a caller stores.
requestGeolocation	function	@spy4x/platform/browser/geolocation	Ask for the current position and report the result.
Hotkey	interface	@spy4x/platform/browser/hotkeys	A parsed keyboard combination: one key and the modifiers held with it.
HotkeyBinding	interface	@spy4x/platform/browser/hotkeys	One entry of a createHotkeyMatcher table: the key presses that trigger `id`.
HotkeyEvent	interface	@spy4x/platform/browser/hotkeys	The part of a `KeyboardEvent` that matchesHotkey reads.
HotkeySequenceEvent	interface	@spy4x/platform/browser/hotkeys	The part of a `KeyboardEvent` that createHotkeyMatcher reads.
PlatformNavigator	interface	@spy4x/platform/browser/hotkeys	The part of `navigator` that isApplePlatform reads.
TypingTarget	interface	@spy4x/platform/browser/hotkeys	The part of an element that isTypingTarget reads.
createHotkeyMatcher	function	@spy4x/platform/browser/hotkeys	Build a matcher for a table of bindings, each one or more key presses (`["g", "t"]`).
isApplePlatform	function	@spy4x/platform/browser/hotkeys	Whether the browser runs on macOS, iOS or iPadOS, where `mod` means Command.
isTypingTarget	function	@spy4x/platform/browser/hotkeys	Whether a key press on this element is typing: a text `<input>`, a `<textarea>`, a `<select>` or `contenteditable` content.
matchesHotkey	function	@spy4x/platform/browser/hotkeys	Whether a key press is the combination.
parseHotkey	function	@spy4x/platform/browser/hotkeys	Parse a combination such as `"mod+k"`, `"shift+n"`, `"?"` or `"ctrl+alt+delete"`.
DatabaseSpec	interface	@spy4x/platform/browser/indexeddb	How to open one database.
createDatabaseOpener	function	@spy4x/platform/browser/indexeddb	Returns a function that opens the database on first use and returns the same connection after.
idbRequest	function	@spy4x/platform/browser/indexeddb	Resolves a request's result, or rejects with its error.
idbTransactionDone	function	@spy4x/platform/browser/indexeddb	Resolves when a transaction has committed, rejects when it aborts or fails.
LastSignIn	interface	@spy4x/platform/browser/last-sign-in	How a person last signed in on this browser.
LastSignInStore	interface	@spy4x/platform/browser/last-sign-in	A handle over one storage key.
MAX_LAST_SIGN_IN_METHOD_LENGTH	constant	@spy4x/platform/browser/last-sign-in	Longest method name LastSignInStore.remember keeps.
createLastSignIn	function	@spy4x/platform/browser/last-sign-in	Creates the store for one `key`.
OfflineShellOptions	interface	@spy4x/platform/browser/offline-shell	Options of installOfflineShell.
SKIP_WAITING_MESSAGE	constant	@spy4x/platform/browser/offline-shell	The message `SWUpdater` posts to a waiting worker; installOfflineShell acts on it.
ShellCache	interface	@spy4x/platform/browser/offline-shell	Cache surface this module needs; a real `Cache` fits.
ShellCacheStorage	interface	@spy4x/platform/browser/offline-shell	Cache storage surface; a real `CacheStorage` fits.
ShellEvent	interface	@spy4x/platform/browser/offline-shell	The parts of an `ExtendableEvent` this module uses.
ShellFetchEvent	interface	@spy4x/platform/browser/offline-shell	The parts of a `FetchEvent` this module uses.
ShellMessageEvent	interface	@spy4x/platform/browser/offline-shell	The parts of a `message` event this module uses.
ShellScope	interface	@spy4x/platform/browser/offline-shell	The parts of the service-worker global scope this module uses; `self` fits.
installOfflineShell	function	@spy4x/platform/browser/offline-shell	Register the install, activate, fetch and message listeners that keep the app shell offline.
isUnderPath	function	@spy4x/platform/browser/offline-shell	Whether `pathname` is `base` or below it (`/api` matches `/api` and `/api/x`, not `/apix`).
linkedPaths	function	@spy4x/platform/browser/offline-shell	Same-origin paths named by `src="..."` and `href="..."` in `html`.
PasskeyBrowser	interface	@spy4x/platform/browser/passkey	Where the module finds the browser's passkey API.
PasskeyCallOptions	interface	@spy4x/platform/browser/passkey	Options for createPasskey and getPasskey.
PasskeyCredential	interface	@spy4x/platform/browser/passkey	A credential `navigator.credentials` returns: only its `toJSON` is used.
PasskeyJSON	interface	@spy4x/platform/browser/passkey	A passkey as JSON, ready to send to the server.
PasskeyStatics	interface	@spy4x/platform/browser/passkey	The `PublicKeyCredential` statics this module calls.
createPasskey	function	@spy4x/platform/browser/passkey	Create a passkey from the server's registration options.
getPasskey	function	@spy4x/platform/browser/passkey	Sign in with a passkey from the server's authentication options.
signalUnknownPasskey	function	@spy4x/platform/browser/passkey	Tell the passkey provider that the server does not know this credential (it was removed), so it stops offering it.
supportsPasskeyAutofill	function	@spy4x/platform/browser/passkey	Whether the browser offers passkeys in a field's autofill (`autocomplete="username webauthn"`), so getPasskey with `autofill: true` can run while the sign-in page is open.
supportsPasskeys	function	@spy4x/platform/browser/passkey	Whether this browser can create and use passkeys, with the JSON helpers this module needs.
AskOnce	interface	@spy4x/platform/browser/persistent-storage	Where requestPersistentStorage remembers that it has asked, so it asks once per device.
PersistentStorageManager	interface	@spy4x/platform/browser/persistent-storage	The part of a browser's `StorageManager` this module uses.
requestPersistentStorage	function	@spy4x/platform/browser/persistent-storage	Resolves `true` when this site's storage is persistent, asking the browser if it is not yet.
PushClickEvent	interface	@spy4x/platform/browser/push-notifications	The parts of a `NotificationEvent` this module uses.
PushClient	interface	@spy4x/platform/browser/push-notifications	The parts of a `Client` this module uses; a `WindowClient` has all three.
PushNotificationOptions	interface	@spy4x/platform/browser/push-notifications	What this module passes to `showNotification`.
PushNotificationsOptions	interface	@spy4x/platform/browser/push-notifications	Options of installPushNotifications.
PushScope	interface	@spy4x/platform/browser/push-notifications	The parts of the service-worker global scope this module uses; `self` fits.
PushScopeEvent	interface	@spy4x/platform/browser/push-notifications	The parts of a `PushEvent` this module uses.
installPushNotifications	function	@spy4x/platform/browser/push-notifications	Register the `push` and `notificationclick` listeners of a service worker.
sameOriginUrl	function	@spy4x/platform/browser/push-notifications	`raw` as an absolute URL when it belongs to `origin`, otherwise `undefined`.
DEFAULT_RUNTIME_CONFIG_URL	constant	@spy4x/platform/browser/runtime-config	Where loadRuntimeConfig looks when the caller names no other address.
loadRuntimeConfig	function	@spy4x/platform/browser/runtime-config	Fetches `url` and validates the JSON with `schema`.
SignedInHint	interface	@spy4x/platform/browser/signed-in-hint	A handle over one hint key.
createSignedInHint	function	@spy4x/platform/browser/signed-in-hint	Creates the hint for one `key`.
StorageLike	type	@spy4x/platform/browser/storage	Deprecated: Use `KeyValueStore` from `@spy4x/platform/universal/key-value-store` — the same three methods, in a file with no import of its own. The subset of the DOM `Storage` interface this module uses.
StorageRead	type	@spy4x/platform/browser/storage	Outcome of a write or a read, so a caller can tell "absent" from "present but rejected".
TypedStorage	interface	@spy4x/platform/browser/storage	A namespaced handle over one key.
browserStorage	function	@spy4x/platform/browser/storage	The browser's `localStorage`, made safe to call: it never throws, and a value the browser refuses to keep is remembered in memory until the page closes.
makeStorage	function	@spy4x/platform/browser/storage	Bind a StorageLike to one key.
memoryStorage	function	@spy4x/platform/browser/storage	A `Map`-backed StorageLike.
installLocalStorage	function	@spy4x/platform/browser/testing	Puts a `memoryStorage` in place of the runtime's global `localStorage`, for one test, and gives it and the way back.
CacheErrorReporter	type	@spy4x/platform/cache	Called with the operation and the error whenever a cache operation fails.
CacheOperation	type	@spy4x/platform/cache	A cache operation failOpen reports on.
CacheService	class	@spy4x/platform/cache	
CacheWrapOptions	interface	@spy4x/platform/cache	Options accepted by CacheService.wrap.
DEFAULT_CACHE_RECOVERY_MS	constant	@spy4x/platform/cache	How long an untrusted cache waits before the next attempt to clear itself.
ICacheService	interface	@spy4x/platform/cache	A JSON cache in front of an ICacheStorage.
ICacheStorage	interface	@spy4x/platform/cache	Storage backing a CacheService.
PublicAPICacheModel	interface	@spy4x/platform/cache	A namespaced, optionally schema-validated view over one `CacheService`, keyed by `id`.
buildMethods	function	@spy4x/platform/cache	Build a `${prefix}_${id}`-keyed view over `cacheService`, with a fixed TTL and an optional arktype schema that `get` and `wrap` validate a cache hit against before returning it — so a value another version of this code wrote, in a shape the current schema no longer accepts, surfaces as a thrown validation error instead of a silently wrong read.
failOpen	function	@spy4x/platform/cache	Wraps `storage` so an outage of the cache server never fails a request: while it is down every read is a miss (the database answers) and every write is skipped.
reviveIsoDatesEndingInAt	function	@spy4x/platform/cache	`JSON.parse` reviver that turns a string property whose key ends in `At` into a `Date`, when the string looks like an ISO-8601 UTC timestamp.
Command	interface	@spy4x/platform/cqrs	A write intent: `TPayload` in, `TResult` out.
CommandBus	class	@spy4x/platform/cqrs	Routes a command instance to the one handler registered for its class, and infers the returned value's type from the command class alone — no cast at the call site.
CommandConstructor	type	@spy4x/platform/cqrs	A class implementing Command, matched by `CommandBus.register`/`execute`.
CommandHandler	type	@spy4x/platform/cqrs	Handler a CommandBus runs for one command class.
CommandResult	type	@spy4x/platform/cqrs	The result type a Command class carries, extracted from its phantom `__resultType`.
CqrsMiddleware	type	@spy4x/platform/cqrs	A step that runs around every `execute` of a CommandBus or QueryBus, before the handler and whatever transport produced the message.
Event	interface	@spy4x/platform/cqrs	A fact an EventBus distributes to its subscribers.
EventBus	class	@spy4x/platform/cqrs	In-process publish/subscribe bus for one event class per subscription.
EventBusErrorHandler	type	@spy4x/platform/cqrs	Called when a listener fails — throws synchronously or returns a rejected promise — instead of letting the failure propagate.
EventConstructor	type	@spy4x/platform/cqrs	A class implementing Event, matched by `EventBus.on`/`once`/`emit`.
Query	interface	@spy4x/platform/cqrs	A read intent: `TPayload` in, `TResult` out.
QueryBus	class	@spy4x/platform/cqrs	Routes a query instance to the one handler registered for its class, and infers the returned value's type from the query class alone — no cast at the call site.
QueryConstructor	type	@spy4x/platform/cqrs	A class implementing Query, matched by `QueryBus.register`/`execute`.
QueryHandler	type	@spy4x/platform/cqrs	Handler a QueryBus runs for one query class.
QueryResult	type	@spy4x/platform/cqrs	The result type a Query class carries, extracted from its phantom `__resultType`.
KeysetCursorCodec	interface	@spy4x/platform/keyset-cursor	Encodes and decodes one list's cursors.
KeysetCursorError	class	@spy4x/platform/keyset-cursor	The one error every refusal raises.
KeysetCursorErrorCode	enum	@spy4x/platform/keyset-cursor	Why a cursor was refused.
ScopeValue	type	@spy4x/platform/keyset-cursor	A scope value: a string, or a finite number.
UpdatedAtIdPageKey	type	@spy4x/platform/keyset-cursor	The decoded default page key: `{ updatedAt: Date, id: string }`.
createKeysetCursorCodec	function	@spy4x/platform/keyset-cursor	Creates a cursor codec for one list.
deriveCursorSecret	function	@spy4x/platform/keyset-cursor	The cursor signing key for `purpose`: deriveSecret of the master secret under the label `spy4x.keyset-cursor.v1:<purpose>`, 64 hex characters.
updatedAtIdPageKey	constant	@spy4x/platform/keyset-cursor	The default page key, `{ updatedAt, id }`: the last row of a page ordered by `updated_at` then `id`.
BaseModel	type	@spy4x/platform/model	Value BaseModelSchema produces.
BaseModelSchema	constant	@spy4x/platform/model	UndeletableBaseModelSchema plus a nullable `deletedAt`, for a soft-deletable record.
DateNullableSchema	constant	@spy4x/platform/model	dateSchema, also accepting `null` and defaulting to it when the field is absent.
DateType	type	@spy4x/platform/model	Value dateSchema produces: always a `Date`, regardless of which input form it parsed.
ImmutableBaseModelSchema	constant	@spy4x/platform/model	The two fields present on every record: its id and when it was created.
PUSH_SUBSCRIPTION_LIMITS	constant	@spy4x/platform/model	The longest value, in characters, of each text field of a push subscription request.
PushNotificationMessage	type	@spy4x/platform/model	Value pushNotificationMessageSchema produces.
PushSubscribeRequest	type	@spy4x/platform/model	Value pushSubscribeRequestSchema produces.
PushSubscriptionData	type	@spy4x/platform/model	Alias for PushSubscriptionJson used where the wire origin is not the point.
PushSubscriptionJson	type	@spy4x/platform/model	Value pushSubscriptionSchema produces.
PushSubscriptionKeys	type	@spy4x/platform/model	Value pushSubscriptionKeysSchema produces.
PushUnsubscribeRequest	type	@spy4x/platform/model	Value pushUnsubscribeRequestSchema produces.
UndeletableBaseModelSchema	constant	@spy4x/platform/model	ImmutableBaseModelSchema plus `updatedAt`, for a record that can be edited.
dateSchema	constant	@spy4x/platform/model	`Date`, or an ISO 8601 date string naming a real calendar date, parsed to a `Date`.
pushNotificationMessageSchema	constant	@spy4x/platform/model	A notification the server sends through a push subscription.
pushSubscribeRequestSchema	constant	@spy4x/platform/model	Request body to register a device's push subscription.
pushSubscriptionKeysSchema	constant	@spy4x/platform/model	The two keys a `PushSubscription`'s `getKey` calls produce, base64url-encoded.
pushSubscriptionSchema	constant	@spy4x/platform/model	A browser's `PushSubscription`, as `JSON.stringify`d by `PushSubscription.toJSON()`.
pushUnsubscribeRequestSchema	constant	@spy4x/platform/model	Request body to drop a device's push subscription.
Clock	type	@spy4x/platform/rate-limit	Deprecated: The same type as `NowFn` from `@spy4x/platform/universal/time`, which is now the home for this shape. Monotonic millisecond clock.
DEFAULT_IDLE_MS	constant	@spy4x/platform/rate-limit	How long a bucket survives after it stops being active.
DenoKvLike	interface	@spy4x/platform/rate-limit	The three `Deno.Kv` operations this adapter needs.
FORWARDED_HEADERS	constant	@spy4x/platform/rate-limit	The three headers in which a request names the client it came from, and which clientIp reads when told to trust a proxy.
KeyResolver	type	@spy4x/platform/rate-limit	Key the current request.
MemoryRateLimiter	class	@spy4x/platform/rate-limit	In-process sliding-window limiter.
RATE_LIMIT_HEADERS	constant	@spy4x/platform/rate-limit	Default draft-6 header names.
REJECTION_STATUSES	constant	@spy4x/platform/rate-limit	The same set at runtime, so a bad status is refused at startup rather than at first rejection.
RateLimitConsumeResult	interface	@spy4x/platform/rate-limit	Outcome of RateLimitStore.consume.
RateLimitContext	interface	@spy4x/platform/rate-limit	The framework context handed to a key resolver and to a RemoteAddrResolver.
RateLimitDecision	interface	@spy4x/platform/rate-limit	Outcome of one `check`.
RateLimitErrorBody	interface	@spy4x/platform/rate-limit	JSON-safe response body for a rejected request.
RateLimitHeaderNames	interface	@spy4x/platform/rate-limit	Header names, overridable for callers that need a prefixed variant.
RateLimitHonoContext	type	@spy4x/platform/rate-limit	Hono's `Context` for whichever environment the caller uses.
RateLimitKind	enum	@spy4x/platform/rate-limit	Which identity a limiter buckets on.
RateLimitKv	interface	@spy4x/platform/rate-limit	Minimal key/value port.
RateLimitKvEntry	interface	@spy4x/platform/rate-limit	One key's recorded window, with the moment it stops mattering.
RateLimitMiddleware	type	@spy4x/platform/rate-limit	Middleware shape as Hono types it, exported so a caller can store one in an object literal.
RateLimitOptions	interface	@spy4x/platform/rate-limit	Configuration shared by every limiter implementation.
RateLimitStore	interface	@spy4x/platform/rate-limit	The `RateLimitStore` port: the only surface a limiter needs from a shared backend.
RateLimitStoreOverKv	class	@spy4x/platform/rate-limit	`RateLimitStore` implementation backed by a RateLimitKv.
RateLimiter	interface	@spy4x/platform/rate-limit	Limiter shape the middleware accepts, sync or async.
RejectionStatus	type	@spy4x/platform/rate-limit	Statuses a rejection may use.
RemoteAddrResolver	type	@spy4x/platform/rate-limit	Resolve a client's peer address from a runtime handle, for RateLimitMiddlewareOptions.
SWEEP_EVERY_CHECKS	constant	@spy4x/platform/rate-limit	How many requests may arrive between two sweeps before one is forced.
StoreRateLimiter	class	@spy4x/platform/rate-limit	Store-backed sliding window over any RateLimitStore.
TrustedProxyHeader	type	@spy4x/platform/rate-limit	A single proxy header clientIp may be told to trust, in place of the default all-three-headers order.
UNKNOWN_CLIENT_IP	constant	@spy4x/platform/rate-limit	Fallback when no header and no peer address is available.
clientIp	function	@spy4x/platform/rate-limit	Resolve the client IP for a request.
clientIpBucket	function	@spy4x/platform/rate-limit	The rate-limit identity of a client address: an IPv6 address reduced to its /64 network (`2001:db8:1:2::/64`), or to the network `options.ipv6Prefix` names, anything else unchanged.
createKvStore	function	@spy4x/platform/rate-limit	Build a `RateLimitStore` over any RateLimitKv.
createMemoryRateLimiter	function	@spy4x/platform/rate-limit	Build an in-process limiter.
createRateLimitMiddleware	function	@spy4x/platform/rate-limit	Build the middleware for a limiter.
createStoreLimiter	function	@spy4x/platform/rate-limit	Build a limiter over a shared store.
decisionHeaders	function	@spy4x/platform/rate-limit	Draft-6 headers for one decision.
denoKvBackend	function	@spy4x/platform/rate-limit	Deno KV adapter.
denoServeRemoteAddr	function	@spy4x/platform/rate-limit	The same resolver as serveRemoteAddr, under the name it had while only Deno filled `remoteAddr` in.
failOpenLimiter	function	@spy4x/platform/rate-limit	Wrap a limiter so that a failing backend lets requests through instead of failing them.
humanRetry	function	@spy4x/platform/rate-limit	Milliseconds as a human retry hint: `"1 second"`, `"45 seconds"`, `"2 minutes"`.
rateLimitKey	function	@spy4x/platform/rate-limit	Build a limiter key from an identity.
serveRemoteAddr	function	@spy4x/platform/rate-limit	The RemoteAddrResolver for an app run by `serve` from `@spy4x/platform/server/serve`, on Deno, Node or Bun, or by `deno serve` (or handed to `Deno.serve` as `app.fetch`): each passes the connection's info to Hono as `env`, and this reads its `remoteAddr.hostname`, the peer's IP address, taken from the connection and never from a header.
systemClock	function	@spy4x/platform/rate-limit	Deprecated: Delegates to, and should be replaced by, `systemNow` from `@spy4x/platform/universal/time`. Default: real time.
userThenIp	function	@spy4x/platform/rate-limit	Key a request on the authenticated user when the caller can find one, else on the client IP.
FORWARDED_HEADERS	constant	@spy4x/platform/rate-limit/client-ip	The three headers in which a request names the client it came from, and which clientIp reads when told to trust a proxy.
TrustedProxyHeader	type	@spy4x/platform/rate-limit/client-ip	A single proxy header clientIp may be told to trust, in place of the default all-three-headers order.
UNKNOWN_CLIENT_IP	constant	@spy4x/platform/rate-limit/client-ip	Fallback when no header and no peer address is available.
clientIp	function	@spy4x/platform/rate-limit/client-ip	Resolve the client IP for a request.
clientIpBucket	function	@spy4x/platform/rate-limit/client-ip	The rate-limit identity of a client address: an IPv6 address reduced to its /64 network (`2001:db8:1:2::/64`), or to the network `options.ipv6Prefix` names, anything else unchanged.
humanRetry	function	@spy4x/platform/rate-limit/client-ip	Milliseconds as a human retry hint: `"1 second"`, `"45 seconds"`, `"2 minutes"`.
KeyResolver	type	@spy4x/platform/rate-limit/hono	Key the current request.
RATE_LIMIT_HEADERS	constant	@spy4x/platform/rate-limit/hono	Default draft-6 header names.
REJECTION_STATUSES	constant	@spy4x/platform/rate-limit/hono	The same set at runtime, so a bad status is refused at startup rather than at first rejection.
RateLimitContext	interface	@spy4x/platform/rate-limit/hono	The framework context handed to a key resolver and to a RemoteAddrResolver.
RateLimitErrorBody	interface	@spy4x/platform/rate-limit/hono	JSON-safe response body for a rejected request.
RateLimitHeaderNames	interface	@spy4x/platform/rate-limit/hono	Header names, overridable for callers that need a prefixed variant.
RateLimitHonoContext	type	@spy4x/platform/rate-limit/hono	Hono's `Context` for whichever environment the caller uses.
RateLimitMiddleware	type	@spy4x/platform/rate-limit/hono	Middleware shape as Hono types it, exported so a caller can store one in an object literal.
RejectionStatus	type	@spy4x/platform/rate-limit/hono	Statuses a rejection may use.
RemoteAddrResolver	type	@spy4x/platform/rate-limit/hono	Resolve a client's peer address from a runtime handle, for RateLimitMiddlewareOptions.
createRateLimitMiddleware	function	@spy4x/platform/rate-limit/hono	Build the middleware for a limiter.
decisionHeaders	function	@spy4x/platform/rate-limit/hono	Draft-6 headers for one decision.
denoServeRemoteAddr	function	@spy4x/platform/rate-limit/hono	The same resolver as serveRemoteAddr, under the name it had while only Deno filled `remoteAddr` in.
serveRemoteAddr	function	@spy4x/platform/rate-limit/hono	The RemoteAddrResolver for an app run by `serve` from `@spy4x/platform/server/serve`, on Deno, Node or Bun, or by `deno serve` (or handed to `Deno.serve` as `app.fetch`): each passes the connection's info to Hono as `env`, and this reads its `remoteAddr.hostname`, the peer's IP address, taken from the connection and never from a header.
userThenIp	function	@spy4x/platform/rate-limit/hono	Key a request on the authenticated user when the caller can find one, else on the client IP.
DenoKvLike	interface	@spy4x/platform/rate-limit/kv	The three `Deno.Kv` operations this adapter needs.
RateLimitKv	interface	@spy4x/platform/rate-limit/kv	Minimal key/value port.
RateLimitKvEntry	interface	@spy4x/platform/rate-limit/kv	One key's recorded window, with the moment it stops mattering.
RateLimitStoreOverKv	class	@spy4x/platform/rate-limit/kv	`RateLimitStore` implementation backed by a RateLimitKv.
createKvStore	function	@spy4x/platform/rate-limit/kv	Build a `RateLimitStore` over any RateLimitKv.
denoKvBackend	function	@spy4x/platform/rate-limit/kv	Deno KV adapter.
Clock	type	@spy4x/platform/rate-limit/memory	Deprecated: The same type as `NowFn` from `@spy4x/platform/universal/time`, which is now the home for this shape. Monotonic millisecond clock.
DEFAULT_IDLE_MS	constant	@spy4x/platform/rate-limit/memory	How long a bucket survives after it stops being active.
MemoryRateLimiter	class	@spy4x/platform/rate-limit/memory	In-process sliding-window limiter.
RateLimitConsumeResult	interface	@spy4x/platform/rate-limit/memory	Outcome of RateLimitStore.consume.
RateLimitDecision	interface	@spy4x/platform/rate-limit/memory	Outcome of one `check`.
RateLimitKind	enum	@spy4x/platform/rate-limit/memory	Which identity a limiter buckets on.
RateLimitOptions	interface	@spy4x/platform/rate-limit/memory	Configuration shared by every limiter implementation.
RateLimitStore	interface	@spy4x/platform/rate-limit/memory	The `RateLimitStore` port: the only surface a limiter needs from a shared backend.
RateLimiter	interface	@spy4x/platform/rate-limit/memory	Limiter shape the middleware accepts, sync or async.
SWEEP_EVERY_CHECKS	constant	@spy4x/platform/rate-limit/memory	How many requests may arrive between two sweeps before one is forced.
StoreRateLimiter	class	@spy4x/platform/rate-limit/memory	Store-backed sliding window over any RateLimitStore.
createMemoryRateLimiter	function	@spy4x/platform/rate-limit/memory	Build an in-process limiter.
createStoreLimiter	function	@spy4x/platform/rate-limit/memory	Build a limiter over a shared store.
failOpenLimiter	function	@spy4x/platform/rate-limit/memory	Wrap a limiter so that a failing backend lets requests through instead of failing them.
rateLimitKey	function	@spy4x/platform/rate-limit/memory	Build a limiter key from an identity.
systemClock	function	@spy4x/platform/rate-limit/memory	Deprecated: Delegates to, and should be replaced by, `systemNow` from `@spy4x/platform/universal/time`. Default: real time.
RequestInfo	interface	@spy4x/platform/request-info	Request metadata worth attaching to a log line or an error report.
RequestInfoOptions	interface	@spy4x/platform/request-info	Options for requestInfoFromContext.
TrustedProxyHeader	type	@spy4x/platform/request-info	A single proxy header clientIp may be told to trust, in place of the default all-three-headers order.
requestInfoFromContext	function	@spy4x/platform/request-info	Build a RequestInfo from a Hono request: its request id (when the app's middleware set one), its client IP (see the module doc for the trust boundary), and its user agent.
ByteReader	interface	@spy4x/platform/server	Chunked byte source for streaming hashing.
ClockPort	type	@spy4x/platform/server	Deprecated: Identical shape to `Clock` from `@spy4x/platform/universal/time`, which is now the one home for this shape. Clock injection point, so throttling is testable without sleeping.
CommandSpawner	type	@spy4x/platform/server	A `Deno.Command`-shaped factory: builds a command whose `output()` runs it to completion.
DEFAULT_FILE_LOCK_WAIT_MS	constant	@spy4x/platform/server	How long a FileLock.runExclusive call waits for an earlier one on the same instance.
DEFAULT_REMINDER_CATCH_UP_MS	constant	@spy4x/platform/server	How far back the runner catches up unless `catchUpMs` says otherwise: one hour.
DEFAULT_REMINDER_INTERVAL_MS	constant	@spy4x/platform/server	How often the runner ticks unless `intervalMs` says otherwise: once a minute.
DEFAULT_REMINDER_TICK_TIMEOUT_MS	constant	@spy4x/platform/server	How long one tick may take unless `tickTimeoutMs` says otherwise: two minutes.
EnvReader	interface	@spy4x/platform/server	Reads environment values.
FileLock	class	@spy4x/platform/server	One held lock.
FileLockWaitError	class	@spy4x/platform/server	Raised when a FileLock.runExclusive call waited FileLockOptions.waitMs for an earlier `runExclusive` on the same instance and gave up.
FileStat	interface	@spy4x/platform/server	What FileSystemPort.stat reports about a path, following symbolic links.
FileSystemPort	interface	@spy4x/platform/server	Storage primitives a server helper needs.
FsErrorKind	type	@spy4x/platform/server	A file-system failure that `fsError` makes and `isFsError` recognises on every runtime.
IntervalRunnerOptions	interface	@spy4x/platform/server	Options of startIntervalRunner.
JsonlLogger	class	@spy4x/platform/server	Append-only JSONL writer over a FileSystemPort.
LockHandle	interface	@spy4x/platform/server	A held file lock.
LockState	enum	@spy4x/platform/server	Lock state, so a check can distinguish "held" from "held by me".
LockUnavailableError	class	@spy4x/platform/server	Raised when another holder owns the lock.
LogRecord	type	@spy4x/platform/server	One log record: the caller's event plus a timestamp.
MkdirOptions	interface	@spy4x/platform/server	Options of FileSystemPort.mkdirp.
NodeChildProcess	interface	@spy4x/platform/server	The subset of `node:child_process` and `node:os` that nodeSpawner uses.
NodeNet	interface	@spy4x/platform/server	`node:net`, as far as nodeTcpConnect uses it.
NodeSocket	interface	@spy4x/platform/server	One `node:net` socket, as far as nodeTcpConnect uses it.
OsSignal	type	@spy4x/platform/server	An operating-system signal name.
ReadBytesOptions	interface	@spy4x/platform/server	Options of FileSystemPort.readBytes: which bytes to read.
ReadJsonOptions	interface	@spy4x/platform/server	Options of readJsonFile.
ReadJsonResult	type	@spy4x/platform/server	Result of reading a JSON document.
ReminderNotifyResult	type	@spy4x/platform/server	What `notify` says about one reminder:
ReminderRunner	interface	@spy4x/platform/server	A runner built by createReminderRunner.
ReminderRunnerState	interface	@spy4x/platform/server	What the runner remembers between ticks and across restarts.
ReminderRunnerStep	type	@spy4x/platform/server	Which part of a tick failed, as ReminderRunnerOptions.onError is told.
ReminderStatePort	interface	@spy4x/platform/server	Where the runner keeps its ReminderRunnerState.
RunCommandOutput	interface	@spy4x/platform/server	What a finished child process reports; the subset of `Deno.CommandOutput` this module reads.
RunCommandResult	interface	@spy4x/platform/server	The outcome of runCommand.
RunCommandStdin	type	@spy4x/platform/server	Where the child's standard input comes from: the caller's own (`"inherit"`) or nothing (`"null"`, so a read gets end-of-file at once).
ShutdownSignalError	class	@spy4x/platform/server	The reason a shutdownSignal carries when an operating-system signal aborted it.
SpawnOptions	interface	@spy4x/platform/server	The subset of `Deno.CommandOptions` runCommand passes to its spawner.
StandardInput	interface	@spy4x/platform/server	The process's standard input, for a command-line script: a hidden password prompt in raw mode, or text piped in.
TcpConnect	type	@spy4x/platform/server	A function that opens a TcpConnection.
TcpConnectOptions	interface	@spy4x/platform/server	What connectTcp opens.
TcpConnection	interface	@spy4x/platform/server	An open TCP connection, narrowed to what a protocol client needs.
TempPathOptions	interface	@spy4x/platform/server	Where a temporary file should live, given the document it will replace.
ThrottledJsonSaver	class	@spy4x/platform/server	Coalescing writer for one JSON document.
TimerPort	interface	@spy4x/platform/server	Scheduling primitives a ThrottledJsonSaver needs.
WalkEntry	interface	@spy4x/platform/server	A single directory entry, as returned by a directory listing.
WriteTextOptions	interface	@spy4x/platform/server	Options of FileSystemPort.writeText, `writeBytes` and `writeStream`.
atomicWriteJson	function	@spy4x/platform/server	Serialise `value` and replace `path` with it atomically.
connectTcp	function	@spy4x/platform/server	Opens a TCP connection to `hostname:port`: `Deno.connect` on Deno, nodeTcpConnect on Node and Bun.
createReminderRunner	function	@spy4x/platform/server	Builds a runner; nothing runs until ReminderRunner.start or ReminderRunner.tick.
denoByteReader	function	@spy4x/platform/server	ByteReader over one file, read in chunks so a large file never lands in memory at once.
denoFileSystem	constant	@spy4x/platform/server	FileSystemPort backed by Deno's filesystem APIs.
exitProcess	function	@spy4x/platform/server	End the process now with exit `code`: `Deno.exit` on Deno, `process.exit` on Node and Bun.
formatLogLine	function	@spy4x/platform/server	Serialise a log record to one line, stamped with the clock at append time.
fsError	function	@spy4x/platform/server	A file-system error of `kind` for the running runtime, for code that reports a failure the way the platform would.
isFsError	function	@spy4x/platform/server	Whether `error` is a file-system error of `kind` from any runtime: one fsError made, one Deno threw (its `name` is the kind), or one Node or Bun threw (its `code`, such as `ENOENT`).
nodeFileSystem	constant	@spy4x/platform/server	FileSystemPort over `node:fs/promises`, for Node and Bun.
nodeSpawner	function	@spy4x/platform/server	A CommandSpawner over `node:child_process`, for Node and Bun.
nodeTcpConnect	function	@spy4x/platform/server	A TcpConnect over `node:net`, for Node and Bun.
parseLogLines	function	@spy4x/platform/server	Parse JSONL text, skipping blank lines and reporting the lines that do not parse.
processArgs	function	@spy4x/platform/server	The command-line arguments after the script: `Deno.args` on Deno, `process.argv` without the runtime and script paths on Node and Bun.
processEnv	constant	@spy4x/platform/server	The process environment, read through `Deno.env` on Deno and `process.env` on Node and Bun.
processId	function	@spy4x/platform/server	The id of the running process: `Deno.pid` on Deno, `process.pid` on Node and Bun, `undefined` where there is none (a browser).
processStdin	constant	@spy4x/platform/server	Standard input: `Deno.stdin` on Deno, `process.stdin` on Node and Bun.
readEnvRecord	function	@spy4x/platform/server	Read the named variables into a record, for a parser that takes one, such as `parseStorageEnv` in `@spy4x/server/storage`.
readJsonFile	function	@spy4x/platform/server	Read and parse a JSON document.
runCommand	function	@spy4x/platform/server	Run `command` (the program, then its arguments) and resolve with its outcome.
runtimeFileSystem	constant	@spy4x/platform/server	The file system of the running runtime: `denoFileSystem` on Deno, nodeFileSystem on Node and Bun.
shutdownSignal	function	@spy4x/platform/server	Return an `AbortSignal` that aborts on the first of `options.signals` (default `SIGINT` and `SIGTERM`).
startIntervalRunner	function	@spy4x/platform/server	Runs `task` every `intervalMs` until the returned function is called.
systemClockPort	constant	@spy4x/platform/server	Deprecated: Use `systemClock` from `@spy4x/platform/universal/time`. The host clock.
systemTimerPort	constant	@spy4x/platform/server	Real timers.
tempPathFor	function	@spy4x/platform/server	Build the temp path for an atomic write: `<path>.<pid>.<sequence>.tmp`.
workingDirectory	function	@spy4x/platform/server	The process's working directory: `Deno.cwd()` on Deno, `process.cwd()` on Node and Bun.
writeStderr	function	@spy4x/platform/server	Write `text` to standard error as it is, with no line break added: for a prompt, where `console.error` would end the line.
ReadJsonOptions	interface	@spy4x/platform/server/atomic-json	Options of readJsonFile.
ReadJsonResult	type	@spy4x/platform/server/atomic-json	Result of reading a JSON document.
TempPathOptions	interface	@spy4x/platform/server/atomic-json	Where a temporary file should live, given the document it will replace.
atomicWriteJson	function	@spy4x/platform/server/atomic-json	Serialise `value` and replace `path` with it atomically.
readJsonFile	function	@spy4x/platform/server/atomic-json	Read and parse a JSON document.
tempPathFor	function	@spy4x/platform/server/atomic-json	Build the temp path for an atomic write: `<path>.<pid>.<sequence>.tmp`.
denoByteReader	function	@spy4x/platform/server/deno-fs	ByteReader over one file, read in chunks so a large file never lands in memory at once.
denoFileSystem	constant	@spy4x/platform/server/deno-fs	FileSystemPort backed by Deno's filesystem APIs.
DEFAULT_FILE_LOCK_WAIT_MS	constant	@spy4x/platform/server/file-lock	How long a FileLock.runExclusive call waits for an earlier one on the same instance.
FileLock	class	@spy4x/platform/server/file-lock	One held lock.
FileLockWaitError	class	@spy4x/platform/server/file-lock	Raised when a FileLock.runExclusive call waited FileLockOptions.waitMs for an earlier `runExclusive` on the same instance and gave up.
LockState	enum	@spy4x/platform/server/file-lock	Lock state, so a check can distinguish "held" from "held by me".
LockUnavailableError	class	@spy4x/platform/server/file-lock	Raised when another holder owns the lock.
IntervalRunnerOptions	interface	@spy4x/platform/server/interval-runner	Options of startIntervalRunner.
startIntervalRunner	function	@spy4x/platform/server/interval-runner	Runs `task` every `intervalMs` until the returned function is called.
JsonlLogger	class	@spy4x/platform/server/jsonl-logger	Append-only JSONL writer over a FileSystemPort.
LogRecord	type	@spy4x/platform/server/jsonl-logger	One log record: the caller's event plus a timestamp.
formatLogLine	function	@spy4x/platform/server/jsonl-logger	Serialise a log record to one line, stamped with the clock at append time.
parseLogLines	function	@spy4x/platform/server/jsonl-logger	Parse JSONL text, skipping blank lines and reporting the lines that do not parse.
ByteReader	interface	@spy4x/platform/server/ports	Chunked byte source for streaming hashing.
ClockPort	type	@spy4x/platform/server/ports	Deprecated: Identical shape to `Clock` from `@spy4x/platform/universal/time`, which is now the one home for this shape. Clock injection point, so throttling is testable without sleeping.
FileStat	interface	@spy4x/platform/server/ports	What FileSystemPort.stat reports about a path, following symbolic links.
FileSystemPort	interface	@spy4x/platform/server/ports	Storage primitives a server helper needs.
LockHandle	interface	@spy4x/platform/server/ports	A held file lock.
MkdirOptions	interface	@spy4x/platform/server/ports	Options of FileSystemPort.mkdirp.
ReadBytesOptions	interface	@spy4x/platform/server/ports	Options of FileSystemPort.readBytes: which bytes to read.
WalkEntry	interface	@spy4x/platform/server/ports	A single directory entry, as returned by a directory listing.
WriteTextOptions	interface	@spy4x/platform/server/ports	Options of FileSystemPort.writeText, `writeBytes` and `writeStream`.
systemClockPort	constant	@spy4x/platform/server/ports	Deprecated: Use `systemClock` from `@spy4x/platform/universal/time`. The host clock.
EnvReader	interface	@spy4x/platform/server/process	Reads environment values.
OsSignal	type	@spy4x/platform/server/process	An operating-system signal name.
StandardInput	interface	@spy4x/platform/server/process	The process's standard input, for a command-line script: a hidden password prompt in raw mode, or text piped in.
exitProcess	function	@spy4x/platform/server/process	End the process now with exit `code`: `Deno.exit` on Deno, `process.exit` on Node and Bun.
processArgs	function	@spy4x/platform/server/process	The command-line arguments after the script: `Deno.args` on Deno, `process.argv` without the runtime and script paths on Node and Bun.
processEnv	constant	@spy4x/platform/server/process	The process environment, read through `Deno.env` on Deno and `process.env` on Node and Bun.
processId	function	@spy4x/platform/server/process	The id of the running process: `Deno.pid` on Deno, `process.pid` on Node and Bun, `undefined` where there is none (a browser).
processStdin	constant	@spy4x/platform/server/process	Standard input: `Deno.stdin` on Deno, `process.stdin` on Node and Bun.
readEnvRecord	function	@spy4x/platform/server/process	Read the named variables into a record, for a parser that takes one, such as `parseStorageEnv` in `@spy4x/server/storage`.
workingDirectory	function	@spy4x/platform/server/process	The process's working directory: `Deno.cwd()` on Deno, `process.cwd()` on Node and Bun.
writeStderr	function	@spy4x/platform/server/process	Write `text` to standard error as it is, with no line break added: for a prompt, where `console.error` would end the line.
DEFAULT_REMINDER_CATCH_UP_MS	constant	@spy4x/platform/server/reminder-runner	Deprecated: Import from `@spy4x/tasks/reminder-runner`. How far back the runner catches up unless `catchUpMs` says otherwise: one hour.
DEFAULT_REMINDER_INTERVAL_MS	constant	@spy4x/platform/server/reminder-runner	Deprecated: Import from `@spy4x/tasks/reminder-runner`. How often the runner ticks unless `intervalMs` says otherwise: once a minute.
DEFAULT_REMINDER_TICK_TIMEOUT_MS	constant	@spy4x/platform/server/reminder-runner	Deprecated: Import from `@spy4x/tasks/reminder-runner`. How long one tick may take unless `tickTimeoutMs` says otherwise: two minutes.
ReminderNotifyResult	type	@spy4x/platform/server/reminder-runner	Deprecated: Import from `@spy4x/tasks/reminder-runner`. What `notify` says about one reminder:
ReminderRunner	interface	@spy4x/platform/server/reminder-runner	Deprecated: Import from `@spy4x/tasks/reminder-runner`. A runner built by createReminderRunner.
ReminderRunnerState	interface	@spy4x/platform/server/reminder-runner	Deprecated: Import from `@spy4x/tasks/reminder-runner`. What the runner remembers between ticks and across restarts.
ReminderRunnerStep	type	@spy4x/platform/server/reminder-runner	Deprecated: Import from `@spy4x/tasks/reminder-runner`. Which part of a tick failed, as ReminderRunnerOptions.onError is told.
ReminderStatePort	interface	@spy4x/platform/server/reminder-runner	Deprecated: Import from `@spy4x/tasks/reminder-runner`. Where the runner keeps its ReminderRunnerState.
createReminderRunner	function	@spy4x/platform/server/reminder-runner	Deprecated: Import from `@spy4x/tasks/reminder-runner`. Builds a runner; nothing runs until ReminderRunner.start or ReminderRunner.tick.
CommandSpawner	type	@spy4x/platform/server/run-command	A `Deno.Command`-shaped factory: builds a command whose `output()` runs it to completion.
NodeChildProcess	interface	@spy4x/platform/server/run-command	The subset of `node:child_process` and `node:os` that nodeSpawner uses.
RunCommandOutput	interface	@spy4x/platform/server/run-command	What a finished child process reports; the subset of `Deno.CommandOutput` this module reads.
RunCommandResult	interface	@spy4x/platform/server/run-command	The outcome of runCommand.
RunCommandStdin	type	@spy4x/platform/server/run-command	Where the child's standard input comes from: the caller's own (`"inherit"`) or nothing (`"null"`, so a read gets end-of-file at once).
SpawnOptions	interface	@spy4x/platform/server/run-command	The subset of `Deno.CommandOptions` runCommand passes to its spawner.
nodeSpawner	function	@spy4x/platform/server/run-command	A CommandSpawner over `node:child_process`, for Node and Bun.
runCommand	function	@spy4x/platform/server/run-command	Run `command` (the program, then its arguments) and resolve with its outcome.
FsErrorKind	type	@spy4x/platform/server/runtime-fs	A file-system failure that `fsError` makes and `isFsError` recognises on every runtime.
fsError	function	@spy4x/platform/server/runtime-fs	A file-system error of `kind` for the running runtime, for code that reports a failure the way the platform would.
isFsError	function	@spy4x/platform/server/runtime-fs	Whether `error` is a file-system error of `kind` from any runtime: one fsError made, one Deno threw (its `name` is the kind), or one Node or Bun threw (its `code`, such as `ENOENT`).
nodeFileSystem	constant	@spy4x/platform/server/runtime-fs	FileSystemPort over `node:fs/promises`, for Node and Bun.
runtimeFileSystem	constant	@spy4x/platform/server/runtime-fs	The file system of the running runtime: `denoFileSystem` on Deno, nodeFileSystem on Node and Bun.
ServeHandler	type	@spy4x/platform/server/serve	A fetch handler: Hono's `app.fetch` is one.
ServeInfo	interface	@spy4x/platform/server/serve	The connection a request came in on.
Server	interface	@spy4x/platform/server/serve	A running server.
ServerWebSocket	interface	@spy4x/platform/server/serve	The server's end of a WebSocket: the members of a standard `WebSocket` it needs.
WebSocketUpgrade	interface	@spy4x/platform/server/serve	What upgradeWebSocket returns: the socket, and the response the handler must return.
serve	function	@spy4x/platform/server/serve	Listens on `options.hostname` and `options.port` and answers every request with `handler`.
upgradeWebSocket	function	@spy4x/platform/server/serve	Upgrades a request that serve handed to the handler, the way `Deno.upgradeWebSocket` does: the handler returns `response`, and `socket` opens once the handshake completes.
ShutdownSignalError	class	@spy4x/platform/server/shutdown-signal	The reason a shutdownSignal carries when an operating-system signal aborted it.
shutdownSignal	function	@spy4x/platform/server/shutdown-signal	Return an `AbortSignal` that aborts on the first of `options.signals` (default `SIGINT` and `SIGTERM`).
NodeNet	interface	@spy4x/platform/server/tcp	`node:net`, as far as nodeTcpConnect uses it.
NodeSocket	interface	@spy4x/platform/server/tcp	One `node:net` socket, as far as nodeTcpConnect uses it.
TcpConnect	type	@spy4x/platform/server/tcp	A function that opens a TcpConnection.
TcpConnectOptions	interface	@spy4x/platform/server/tcp	What connectTcp opens.
TcpConnection	interface	@spy4x/platform/server/tcp	An open TCP connection, narrowed to what a protocol client needs.
connectTcp	function	@spy4x/platform/server/tcp	Opens a TCP connection to `hostname:port`: `Deno.connect` on Deno, nodeTcpConnect on Node and Bun.
nodeTcpConnect	function	@spy4x/platform/server/tcp	A TcpConnect over `node:net`, for Node and Bun.
ThrottledJsonSaver	class	@spy4x/platform/server/throttled-saver	Coalescing writer for one JSON document.
TimerPort	interface	@spy4x/platform/server/throttled-saver	Scheduling primitives a ThrottledJsonSaver needs.
systemTimerPort	constant	@spy4x/platform/server/throttled-saver	Real timers.
MAX_SIGNED_PAYLOAD_LENGTH	constant	@spy4x/platform/signed-payload	Longest token, in characters, that `verify` will decode.
SignOptions	interface	@spy4x/platform/signed-payload	Per-token settings for SignedPayloadCodec.sign.
SignedPayloadCodec	interface	@spy4x/platform/signed-payload	Signs and verifies one purpose's payloads.
SignedPayloadError	class	@spy4x/platform/signed-payload	Thrown by SignedPayloadCodec.sign when it would mint a token that `verify` refuses: `InvalidPayload` for a payload that is not JSON or does not survive a JSON round trip through the schema, `Malformed` for a token longer than MAX_SIGNED_PAYLOAD_LENGTH.
SignedPayloadErrorCode	enum	@spy4x/platform/signed-payload	Why a token was refused.
VerifyOptions	interface	@spy4x/platform/signed-payload	Per-token settings for SignedPayloadCodec.verify.
createSignedPayloadCodec	function	@spy4x/platform/signed-payload	Creates a codec for one purpose, version and schema.
DEFAULT_TOKEN_BYTES	constant	@spy4x/platform/tokens	Default raw-token width: 128 bits, which base64url renders as 22 characters.
MIN_SECRET_LENGTH	constant	@spy4x/platform/tokens	Smallest accepted secret length, in characters, measured on the trimmed value.
TokenError	class	@spy4x/platform/tokens	Typed error for token primitives.
TokenErrorCode	enum	@spy4x/platform/tokens	Failure kind of a `TokenError`.
ULID_LENGTH	constant	@spy4x/platform/tokens	Length of a ULID string: 26 Crockford base32 characters.
constantTimeEquals	function	@spy4x/platform/tokens	Compares two hex digests in constant time.
constantTimeEqualsText	function	@spy4x/platform/tokens	Compares two arbitrary strings in constant time.
deriveSecret	function	@spy4x/platform/tokens	A subordinate secret derived from a master secret: HKDF-SHA-256 (RFC 5869) with `secret` as the input key material, the fixed salt `spy4x.derive-secret.v1` and `label` as `info`, 32 bytes as lower-case hex, 64 characters.
monotonicUlid	function	@spy4x/platform/tokens	Deprecated: Every new id is a version 7 UUID: use `uuidV7` from `@spy4x/platform/universal/uuid`. Monotonic ULID generator, the one from `@std/ulid`.
newOpaqueToken	function	@spy4x/platform/tokens	Mints an opaque token: `raw` goes to the caller, `hash` is what the server stores.
randomBase64Url	function	@spy4x/platform/tokens	Cryptographically random bytes, base64url, unpadded.
sha256Hex	function	@spy4x/platform/tokens	SHA-256 digest of one UTF-8 string, as lower-case hex, 64 characters.
verifyOpaqueToken	function	@spy4x/platform/tokens	Recomputes `sha256Hex(raw + secret)` and compares it to the stored hash via `constantTimeEquals` — never `===` or `!==`, which leak timing.
BackoffJitterMode	type	@spy4x/platform/universal/async	How backoffDelay spreads a capped delay.
Debounced	interface	@spy4x/platform/universal/async	Trailing-edge debounce.
RandomSource	type	@spy4x/platform/universal/async	A source of numbers in `[0, 1)`, the shape `Math.random` has.
backoffDelay	function	@spy4x/platform/universal/async	Caps a raw delay and jitters it: the exponential-backoff arithmetic shared by `integrations/retry.ts`'s `createExponentialBackoff` (symmetric jitter around the capped delay) and `realtime/backoff.ts`'s `nextBackoffDelay` (jitter that only ever shortens the wait).
debounce	function	@spy4x/platform/universal/async	Wrap `fn` in a trailing-edge debounce.
sleep	function	@spy4x/platform/universal/async	Wait `ms` milliseconds.
MAX_TICKS	constant	@spy4x/platform/universal/axis	Hard ceiling on generated ticks, and on the iterations the tick loop may spend producing them — see the doc of `ticksForStep` (the private loop behind ticks and stepAxis) for why the loop needs its own bound, not just the output's.
StepAxis	interface	@spy4x/platform/universal/axis	Bounds rounded outward to multiples of a step, and the ticks between them.
niceStep	function	@spy4x/platform/universal/axis	Round a span up to a sensible tick step at roughly `target` ticks.
stepAxis	function	@spy4x/platform/universal/axis	Round `[min, max]` outward to multiples of `step` and return the new bounds with the ticks between them.
ticks	function	@spy4x/platform/universal/axis	Tick values at multiples of a nice step, kept within half a step of `[min, max]`.
BoundedIntegerOptions	interface	@spy4x/platform/universal/bounded-integer	Options of parseBoundedInteger.
parseBoundedInteger	function	@spy4x/platform/universal/bounded-integer	The whole number `value` spells, or `options.fallback` when `value` is `undefined`, or `null` when it is anything else that is not an integer in `min` to `max`.
contrastRatio	function	@spy4x/platform/universal/color	The WCAG 2.x contrast ratio of two hex colours, from 1 (the same) to 21 (black on white).
hexColor	constant	@spy4x/platform/universal/color	A `string` that isHexColor accepts, for an arktype schema.
isHexColor	function	@spy4x/platform/universal/color	True for a six-digit hex colour, `#rrggbb`, in lower or upper case.
readableTextColor	function	@spy4x/platform/universal/color	Black or white, whichever has the higher contrast ratio on `background`.
relativeLuminance	function	@spy4x/platform/universal/color	The WCAG 2.x relative luminance of a hex colour: 0 for black, 1 for white.
contrastRatio	function	@spy4x/platform/universal/color-core	The WCAG 2.x contrast ratio of two hex colours, from 1 (the same) to 21 (black on white).
isHexColor	function	@spy4x/platform/universal/color-core	True for a six-digit hex colour, `#rrggbb`, in lower or upper case.
readableTextColor	function	@spy4x/platform/universal/color-core	Black or white, whichever has the higher contrast ratio on `background`.
relativeLuminance	function	@spy4x/platform/universal/color-core	The WCAG 2.x relative luminance of a hex colour: 0 for black, 1 for white.
AsyncMutex	class	@spy4x/platform/universal/concurrency	A fair mutual-exclusion lock for async critical sections.
DEFAULT_DEBOUNCE_DELAY	constant	@spy4x/platform/universal/constants	Default trailing-edge debounce delay, in milliseconds.
DEFAULT_FLUSH_INTERVAL_MS	constant	@spy4x/platform/universal/constants	Default window for the throttled JSON saver, in milliseconds.
MIN_PASSWORD_LENGTH	constant	@spy4x/platform/universal/constants	Minimum accepted password length.
CONTACT_KINDS	constant	@spy4x/platform/universal/contact	Every kind of contact channel, in the order a form offers them.
CONTACT_KIND_NAMES	constant	@spy4x/platform/universal/contact	Each kind's name as a person reads it, such as in a form's select or a link without a label.
CONTACT_URL_MAX_LENGTH	constant	@spy4x/platform/universal/contact	The longest web page address contactValueProblem accepts.
ContactJsonLd	interface	@spy4x/platform/universal/contact	The contact properties of a schema.org `Organization`; a key with nothing to say is left out.
ContactKind	type	@spy4x/platform/universal/contact	One kind of contact channel.
ContactLink	interface	@spy4x/platform/universal/contact	One contact channel: its kind and its normalised value.
ContactPointJsonLd	interface	@spy4x/platform/universal/contact	A schema.org `ContactPoint`: one way to reach an organization.
contactHref	function	@spy4x/platform/universal/contact	The link that opens the channel: `https://t.me/<username>`, `https://zalo.me/<digits>`, `https://wa.me/<digits>`, the Instagram or Facebook profile, `tel:`, `mailto:`, or the web page itself.
contactJsonLd	function	@spy4x/platform/universal/contact	The properties of a schema.org `Organization` that `links` describe, to spread into the node.
contactKind	constant	@spy4x/platform/universal/contact	The arktype type of a ContactKind, for a request body.
contactText	function	@spy4x/platform/universal/contact	The words a link shows: its label, else its channel and value.
contactValueProblem	function	@spy4x/platform/universal/contact	Why `value` is no ContactKind `kind`, as one sentence for the form field, or `null` when it is one.
normalizeContactValue	function	@spy4x/platform/universal/contact	What an operator typed, in the form contactValueProblem checks and a store keeps: trimmed; a profile link such as `https://t.me/my_shop` reduced to `my_shop`; a leading `@` dropped; a phone number without spaces, dashes, dots and brackets (and, for Zalo and WhatsApp, without its `+`); an e-mail address lowercased.
CSV_BYTE_ORDER_MARK	constant	@spy4x/platform/universal/csv	UTF-8 byte-order mark.
CSV_DEFAULT_LIMITS	constant	@spy4x/platform/universal/csv	The default CsvLimits, applied when an option is left out.
CSV_DELIMITERS	constant	@spy4x/platform/universal/csv	The delimiters sniffCsv considers, in the order it prefers them on a tie.
CsvCellValue	type	@spy4x/platform/universal/csv	What a `format` function, or an unformatted field, may hand back for one cell.
CsvColumn	interface	@spy4x/platform/universal/csv	One column of a CSV export: the row field to read, its header text, and how to render a value.
CsvDelimiter	type	@spy4x/platform/universal/csv	A delimiter sniffCsv can find.
CsvLimits	interface	@spy4x/platform/universal/csv	Size limits for parseCsv.
CsvParseError	type	@spy4x/platform/universal/csv	Why parseCsv refused a file.
CsvSniff	interface	@spy4x/platform/universal/csv	What sniffCsv guessed about a CSV sample.
DecodedTextFile	interface	@spy4x/platform/universal/csv	What decodeTextFile read.
SINGLE_BYTE_ENCODINGS	constant	@spy4x/platform/universal/csv	Every single-byte encoding decodeTextFile can fall back to.
SingleByteEncoding	type	@spy4x/platform/universal/csv	A single-byte encoding a file without a byte-order mark and not valid UTF-8 may be in.
TextFileEncoding	type	@spy4x/platform/universal/csv	An encoding decodeTextFile reads, as a `TextDecoder` label.
csvField	function	@spy4x/platform/universal/csv	Render one value as an RFC 4180 CSV cell.
csvHeaderRow	function	@spy4x/platform/universal/csv	The header row, escaped the same way a data row is.
csvRow	function	@spy4x/platform/universal/csv	One data row, rendered and escaped, comma-joined.
decodeTextFile	function	@spy4x/platform/universal/csv	Decode an uploaded text file.
parseCsv	function	@spy4x/platform/universal/csv	Parse CSV text into rows of fields, within size limits.
sniffCsv	function	@spy4x/platform/universal/csv	Guess the delimiter of a CSV sample and whether its first row is a header.
toCsvBytes	function	@spy4x/platform/universal/csv	toCsvText, encoded as UTF-8 bytes with a leading CSV_BYTE_ORDER_MARK.
toCsvText	function	@spy4x/platform/universal/csv	Render every row as RFC 4180 CSV text: a header row, one line per row of `rows`, each terminated by LINE_ENDING — including the last line, which the RFC leaves optional but which every row here carries for one uniform rule instead of a special case for the final row.
ErrorEventTarget	interface	@spy4x/platform/universal/error-reporter	The target of `install`: `window`, or anything with `addEventListener`.
ErrorReporter	interface	@spy4x/platform/universal/error-reporter	What `createErrorReporter` returns.
ParsedDsn	interface	@spy4x/platform/universal/error-reporter	Where a report goes: the envelope URL and the public key a DSN carries.
ReportContext	interface	@spy4x/platform/universal/error-reporter	Extra facts one report may carry.
createErrorReporter	function	@spy4x/platform/universal/error-reporter	Creates the reporter.
parseDsn	function	@spy4x/platform/universal/error-reporter	The DSN's endpoint and key, or `null` when `dsn` is not a valid `https://key@host/project`.
scrubText	function	@spy4x/platform/universal/error-reporter	Free text with the secrets it may carry masked: URLs lose their query, `Bearer` values, and the value of anything named like a password, token, cookie or key.
scrubUrl	function	@spy4x/platform/universal/error-reporter	`url` as origin and path only, with credentials, query and fragment dropped.
AnyError	type	@spy4x/platform/universal/errors	Every error Result can carry.
ConnectionError	interface	@spy4x/platform/universal/errors	The request never reached the server.
ERR_MESSAGE	constant	@spy4x/platform/universal/errors	Canonical copy for each category, so the same failure reads the same in every product.
Err	interface	@spy4x/platform/universal/errors	Base shape every error shares: a category and human-readable copy.
ErrType	enum	@spy4x/platform/universal/errors	Kind of a failed operation.
OperationResult	type	@spy4x/platform/universal/errors	Result of an operation that can fail: exactly one of `result` / `error` is non-null.
OperationState	interface	@spy4x/platform/universal/errors	In-flight state of an operation, for a store or a form to render.
OtherError	interface	@spy4x/platform/universal/errors	An error this package has no category for.
PayloadError	interface	@spy4x/platform/universal/errors	A payload a schema rejected: a response body, or a remote feed item.
RequestError	type	@spy4x/platform/universal/errors	Errors a request itself can produce.
ResponseError	type	@spy4x/platform/universal/errors	Errors from a response that never reached a usable body.
ServerError	interface	@spy4x/platform/universal/errors	The server answered with a failure status.
StoreError	type	@spy4x/platform/universal/errors	Every error a store operation can settle with.
ValidationError	type	@spy4x/platform/universal/errors	A rejected input: its kind, one sentence for the user, the issues per field path, and arktype's own errors.
connectionError	function	@spy4x/platform/universal/errors	Wrap a message the caller already has into a ConnectionError.
idleOperationState	function	@spy4x/platform/universal/errors	Idle state of an operation.
isSilentError	function	@spy4x/platform/universal/errors	Whether an error should stay quiet.
responseError	function	@spy4x/platform/universal/errors	Turn a failed response into a structured error.
formatBytes	function	@spy4x/platform/universal/format-number	A byte count for display, in binary (1024) steps: `"512 B"`, `"1.5 KB"`, `"2 MB"`.
formatDecimal	function	@spy4x/platform/universal/format-number	Format a decimal number to exactly two decimal places.
formatPct	function	@spy4x/platform/universal/format-number	Format a fraction in `0..1` as a percentage string with two decimals.
round	function	@spy4x/platform/universal/format-number	Round to the nearest 10^-`decimals`.
HONEYPOT_FIELD_NAME	constant	@spy4x/platform/universal/honeypot	Default `name` of the honeypot field.
honeypotFilled	function	@spy4x/platform/universal/honeypot	Whether a submitted honeypot field carries a value — a person never types into a field they cannot see, so any value here means whatever posted the form was not one.
Catalog	type	@spy4x/platform/universal/i18n	A flat catalog: message key to message.
CatalogPair	interface	@spy4x/platform/universal/i18n	One namespace of messages: its English source and, for any other language, its translation.
CatalogProblem	interface	@spy4x/platform/universal/i18n	One problem checkCatalogs found.
CatalogProblemKind	type	@spy4x/platform/universal/i18n	What is wrong with one key in one language.
Message	type	@spy4x/platform/universal/i18n	One catalog entry: plain text, or text per plural category.
MessagePart	type	@spy4x/platform/universal/i18n	A span of a rich message: plain text, or text the caller wraps in the element named `tag`.
MessageValues	type	@spy4x/platform/universal/i18n	Values for a message's `{name}` placeholders.
PluralCategory	type	@spy4x/platform/universal/i18n	A CLDR plural category, as `Intl.PluralRules` names it.
PluralMessage	type	@spy4x/platform/universal/i18n	A message with one text per plural category the language uses.
TextDirection	type	@spy4x/platform/universal/i18n	Text direction of a language.
Translator	interface	@spy4x/platform/universal/i18n	What createTranslator returns.
automaticLocale	function	@spy4x/platform/universal/i18n	The locale an "Automatic" region format means for a person who reads `language`: the first of `deviceLocales` (`navigator.languages`) in that language, else `fallback`, which defaults to the language with its likely region (`de` → `de-DE`).
checkCatalogs	function	@spy4x/platform/universal/i18n	Check translated catalogs against the English source and its locks.
createTranslator	function	@spy4x/platform/universal/i18n	Make a translator for one interface language.
findUnusedKeys	function	@spy4x/platform/universal/i18n	The keys of `catalog` that appear in none of `sourceTexts` as a quoted literal (`"key"`, `'key'` or a backtick string).
negotiateLanguage	function	@spy4x/platform/universal/i18n	Pick the supported language that best matches the requested ones, taken in order: for each, an exact tag wins, then a supported tag of the same language (`pt-PT` → `pt-BR`, `en-US` → `en`).
parseAcceptLanguage	function	@spy4x/platform/universal/i18n	The language tags of an `Accept-Language` header, most preferred first.
pseudoLocalize	function	@spy4x/platform/universal/i18n	The `en-XA` pseudo-language of a catalog: letters accented, every message wrapped in `⟦ ⟧` and about 40 % longer, placeholders and tags kept.
stampLocks	function	@spy4x/platform/universal/i18n	The new lock text of every language: one `key<TAB>hash` line per key the language translates, sorted by key, where the hash is a SHA-256 prefix of the English message.
textDirection	function	@spy4x/platform/universal/i18n	`rtl` for a language written right to left (Arabic, Hebrew, Thaana, Syriac, N'Ko or Adlam script), `ltr` for any other, including a tag `Intl` cannot parse.
SortMode	enum	@spy4x/platform/universal/ical-tasks-view	Deprecated: Import from `@spy4x/tasks/view`. How a list shows its tasks.
SortOrderChange	interface	@spy4x/platform/universal/ical-tasks-view	Deprecated: Import from `@spy4x/tasks/view`. A new `X-APPLE-SORT-ORDER` to write for one task.
TodayView	interface	@spy4x/platform/universal/ical-tasks-view	Deprecated: Import from `@spy4x/tasks/view`. The Today view.
TreeRow	interface	@spy4x/platform/universal/ical-tasks-view	Deprecated: Import from `@spy4x/tasks/view`. A task and how deep it sits, for a screen that draws the tree as indented rows.
UPCOMING_DAYS	constant	@spy4x/platform/universal/ical-tasks-view	Deprecated: Import from `@spy4x/tasks/view`. How many days after today the Upcoming view reaches.
UpcomingDay	interface	@spy4x/platform/universal/ical-tasks-view	Deprecated: Import from `@spy4x/tasks/view`. The tasks due on one day of the Upcoming view.
buildTree	function	@spy4x/platform/universal/ical-tasks-view	Deprecated: Import from `@spy4x/tasks/view`. Nests each task under its parent (`parentUid`).
flattenTree	function	@spy4x/platform/universal/ical-tasks-view	Deprecated: Import from `@spy4x/tasks/view`. The tree as rows, parents before their children.
isOverdue	function	@spy4x/platform/universal/ical-tasks-view	Deprecated: Import from `@spy4x/tasks/view`. Whether a due value has passed.
reorderTask	function	@spy4x/platform/universal/ical-tasks-view	Deprecated: Import from `@spy4x/tasks/view`. The `X-APPLE-SORT-ORDER` values to write so that task `uid` sits at `toIndex` among its siblings, as the manual order of sortTasks shows it, without touching more tasks than needed.
searchTasks	function	@spy4x/platform/universal/ical-tasks-view	Deprecated: Import from `@spy4x/tasks/view`. The tasks that match `query`, in their input order.
sortTasks	function	@spy4x/platform/universal/ical-tasks-view	Deprecated: Import from `@spy4x/tasks/view`. The tasks in the order `mode` names, as a viewer in `zone` sees them.
todayView	function	@spy4x/platform/universal/ical-tasks-view	Deprecated: Import from `@spy4x/tasks/view`. Overdue above today.
upcomingView	function	@spy4x/platform/universal/ical-tasks-view	Deprecated: Import from `@spy4x/tasks/view`. Tomorrow through UPCOMING_DAYS days after today, one entry per day that has tasks, in date order.
isRecord	function	@spy4x/platform/universal/is-record	True for a plain keyed object: not `null`, not an array.
KeyValueStore	interface	@spy4x/platform/universal/key-value-store	Minimal synchronous key/value port: the subset of the DOM `Storage` interface a caller needs to persist a small value, and the one shape `@spy4x/platform/browser/storage`'s `StorageLike` and `@spy4x/realtime`'s `KeyValueStore` both alias.
MarkdownComponent	interface	@spy4x/platform/universal/markdown	A component tag as written in the Markdown: its name, its props and where it is.
MarkdownHeading	interface	@spy4x/platform/universal/markdown	One heading of a rendered document, for its table of contents.
MarkdownProblem	interface	@spy4x/platform/universal/markdown	A component tag line that could not be read.
MarkdownProblemCode	type	@spy4x/platform/universal/markdown	What kind of problem a MarkdownProblem is, so an editor can word it in its own language: `nested` for a tag inside a list or a quote, `syntax` for a tag line that does not read.
MarkdownSegment	type	@spy4x/platform/universal/markdown	A piece of a rendered document: a chunk of HTML, or a component tag between two chunks.
RenderedMarkdown	interface	@spy4x/platform/universal/markdown	What renderMarkdown returns.
RenderedMarkdownSegments	interface	@spy4x/platform/universal/markdown	What renderMarkdownSegments returns.
renderMarkdown	function	@spy4x/platform/universal/markdown	Render Markdown to HTML that is safe to put on a public page, plus its headings.
renderMarkdownSegments	function	@spy4x/platform/universal/markdown	Render Markdown like renderMarkdown, split into HTML chunks around component tags.
Counter	interface	@spy4x/platform/universal/metrics	A monotonically increasing count, kept separately for every distinct set of labels.
MetricLabels	type	@spy4x/platform/universal/metrics	The labels of one series, for example `{ event: "UserSignedOut", listener: "close" }`.
createCounter	function	@spy4x/platform/universal/metrics	Creates a counter.
renderPrometheus	function	@spy4x/platform/universal/metrics	The counters in the Prometheus text exposition format (version 0.0.4), ready to serve with `Content-Type: text/plain; version=0.0.4`.
CURRENCIES_PUBLISHED	constant	@spy4x/platform/universal/money	The publication date of the ISO 4217 list this table was generated from.
ConvertError	type	@spy4x/platform/universal/money	Why convertMoney gave no amount: no rate at all, a rate for another pair of currencies, or a result past `Number.MAX_SAFE_INTEGER`.
CurrencyOption	interface	@spy4x/platform/universal/money	One row of a currency picker, from currencyOptions.
CustomCurrency	interface	@spy4x/platform/universal/money	A currency ISO 4217 does not list, such as a crypto coin, that a person adds to a picker.
ExchangeRate	interface	@spy4x/platform/universal/money	One `base` buys `rate` of `quote`, as published by `source` for `date`.
Money	interface	@spy4x/platform/universal/money	An amount in `currency`'s smallest unit: `{ amount: 1250, currency: "EUR" }` is €12.50.
MoneyOptions	interface	@spy4x/platform/universal/money	Optional, additive overrides for formatMoney, formatMoneyParts, parseMoney and currencyDecimals.
NEGATIVE_STYLES	constant	@spy4x/platform/universal/money	Every way a negative amount can be written, in the order NegativeStyle lists them.
NUMBER_FORMATS	constant	@spy4x/platform/universal/money	Every format detectNumberFormat tries, in the order it lists them.
NegativeStyle	type	@spy4x/platform/universal/money	How a negative amount is written: `-12.50`, `(12.50)` or `12.50-`.
NumberFormatGuess	interface	@spy4x/platform/universal/money	How a column writes its numbers: the decimal mark, and the grouping mark (`""` for none).
ParseMoneyError	type	@spy4x/platform/universal/money	Why parseMoney could not turn the typed text into a smallest-unit amount.
SumMoneyError	type	@spy4x/platform/universal/money	Why sumMoney gave no total: an item in another currency, or a total past `Number.MAX_SAFE_INTEGER` (either sign), which a `number` could no longer hold exactly.
allocate	function	@spy4x/platform/universal/money	Split `amount` into parts proportional to `weights`, by largest remainder: each part is its share rounded down, then the units left over go one each to the parts with the largest remainders, ties to the earlier part.
convertMoney	function	@spy4x/platform/universal/money	`amount` in `from`'s smallest unit, converted to `to`'s smallest unit with `rate`, which may be quoted either way round (`EUR`→`VND` also converts `VND` to `EUR`).
crossRate	function	@spy4x/platform/universal/money	The rate between the two other currencies of two rates that share one: from `EUR`→`USD` and `EUR`→`VND` it derives `USD`→`VND`, `left`'s other currency as the base and `right`'s as the quote.
currencies	constant	@spy4x/platform/universal/money	ISO 4217 code → decimals, 165 codes, from the list published on 2026-09-17.
currencyCode	constant	@spy4x/platform/universal/money	A `string` that isCurrencyCode accepts, for an arktype schema.
currencyDecimals	function	@spy4x/platform/universal/money	How many fraction digits `currency` uses, in `locale`'s own currency display rules.
currencyOptions	function	@spy4x/platform/universal/money	Every ISO 4217 currency in currencies as a picker row, plus `extra`, sorted by name in `displayLocale`.
detectNumberFormat	function	@spy4x/platform/universal/money	Every format in NUMBER_FORMATS that reads all `samples` as numbers, negatives in any NegativeStyle included.
formatMoney	function	@spy4x/platform/universal/money	Format an amount in `currency`'s smallest unit as display text — `formatMoney(12345, "EUR")` is `"€123.45"`, `formatMoney(12345, "JPY")` is `"¥12,345"`, `formatMoney(12345, "KWD")` is `"KWD 12.345"`.
formatMoneyParts	function	@spy4x/platform/universal/money	formatMoney's output as `Intl.NumberFormatPart`s, for a caller that renders the currency symbol, the grouped digits and the sign as separate pieces instead of one string.
isCurrencyCode	function	@spy4x/platform/universal/money	Whether `code` is an ISO 4217 currency code in currencies: `"RSD"` is, `"XYZ"`, `"usd"` and `"XAU"` (gold, which has no minor unit) are not.
isDebitCreditPair	function	@spy4x/platform/universal/money	Whether two columns are a debit and a credit column: on every row exactly one of them holds an amount, and the other is blank or zero (`0,00`).
moneyDecimalString	function	@spy4x/platform/universal/money	`amount`, in `currency`'s smallest unit, as the exact base-ten string `Intl.NumberFormat` should format — `moneyDecimalString(12345, 2)` is `"123.45"`, `moneyDecimalString(-500, 0)` is `"-500"`, `moneyDecimalString(0, 2)` is `"0.00"`, `moneyDecimalString(0, 0)` is `"0"` — a zero amount gets `decimals` zero digits after the point, same as any other amount, never a bare `"0"` for a currency that has decimals.
parseAmount	function	@spy4x/platform/universal/money	Read an amount from a file column written in `format` as a whole number of `currency`'s smallest unit, like parseMoney does for typed text: `parseAmount("(1.234,56)", "EUR", { decimal: ",", group: "." }, { negatives: ["parentheses"] })` is `ok(-123456)`.
parseMoney	function	@spy4x/platform/universal/money	Parse text typed in `locale` into a whole number of `currency`'s smallest unit — `parseMoney("12,5", "EUR", "de")` is `ok(1250)`, `parseMoney("1.234,56", "EUR", "de")` is `ok(123456)`.
sumMoney	function	@spy4x/platform/universal/money	The total of `items`, all in `currency`.
CURRENCIES_PUBLISHED	constant	@spy4x/platform/universal/money-core	The publication date of the ISO 4217 list this table was generated from.
ConvertError	type	@spy4x/platform/universal/money-core	Why convertMoney gave no amount: no rate at all, a rate for another pair of currencies, or a result past `Number.MAX_SAFE_INTEGER`.
CurrencyOption	interface	@spy4x/platform/universal/money-core	One row of a currency picker, from currencyOptions.
CustomCurrency	interface	@spy4x/platform/universal/money-core	A currency ISO 4217 does not list, such as a crypto coin, that a person adds to a picker.
ExchangeRate	interface	@spy4x/platform/universal/money-core	One `base` buys `rate` of `quote`, as published by `source` for `date`.
Money	interface	@spy4x/platform/universal/money-core	An amount in `currency`'s smallest unit: `{ amount: 1250, currency: "EUR" }` is €12.50.
MoneyOptions	interface	@spy4x/platform/universal/money-core	Optional, additive overrides for formatMoney, formatMoneyParts, parseMoney and currencyDecimals.
NEGATIVE_STYLES	constant	@spy4x/platform/universal/money-core	Every way a negative amount can be written, in the order NegativeStyle lists them.
NUMBER_FORMATS	constant	@spy4x/platform/universal/money-core	Every format detectNumberFormat tries, in the order it lists them.
NegativeStyle	type	@spy4x/platform/universal/money-core	How a negative amount is written: `-12.50`, `(12.50)` or `12.50-`.
NumberFormatGuess	interface	@spy4x/platform/universal/money-core	How a column writes its numbers: the decimal mark, and the grouping mark (`""` for none).
ParseMoneyError	type	@spy4x/platform/universal/money-core	Why parseMoney could not turn the typed text into a smallest-unit amount.
SumMoneyError	type	@spy4x/platform/universal/money-core	Why sumMoney gave no total: an item in another currency, or a total past `Number.MAX_SAFE_INTEGER` (either sign), which a `number` could no longer hold exactly.
allocate	function	@spy4x/platform/universal/money-core	Split `amount` into parts proportional to `weights`, by largest remainder: each part is its share rounded down, then the units left over go one each to the parts with the largest remainders, ties to the earlier part.
convertMoney	function	@spy4x/platform/universal/money-core	`amount` in `from`'s smallest unit, converted to `to`'s smallest unit with `rate`, which may be quoted either way round (`EUR`→`VND` also converts `VND` to `EUR`).
crossRate	function	@spy4x/platform/universal/money-core	The rate between the two other currencies of two rates that share one: from `EUR`→`USD` and `EUR`→`VND` it derives `USD`→`VND`, `left`'s other currency as the base and `right`'s as the quote.
currencies	constant	@spy4x/platform/universal/money-core	ISO 4217 code → decimals, 165 codes, from the list published on 2026-09-17.
currencyDecimals	function	@spy4x/platform/universal/money-core	How many fraction digits `currency` uses, in `locale`'s own currency display rules.
currencyOptions	function	@spy4x/platform/universal/money-core	Every ISO 4217 currency in currencies as a picker row, plus `extra`, sorted by name in `displayLocale`.
detectNumberFormat	function	@spy4x/platform/universal/money-core	Every format in NUMBER_FORMATS that reads all `samples` as numbers, negatives in any NegativeStyle included.
formatMoney	function	@spy4x/platform/universal/money-core	Format an amount in `currency`'s smallest unit as display text — `formatMoney(12345, "EUR")` is `"€123.45"`, `formatMoney(12345, "JPY")` is `"¥12,345"`, `formatMoney(12345, "KWD")` is `"KWD 12.345"`.
formatMoneyParts	function	@spy4x/platform/universal/money-core	formatMoney's output as `Intl.NumberFormatPart`s, for a caller that renders the currency symbol, the grouped digits and the sign as separate pieces instead of one string.
isCurrencyCode	function	@spy4x/platform/universal/money-core	Whether `code` is an ISO 4217 currency code in currencies: `"RSD"` is, `"XYZ"`, `"usd"` and `"XAU"` (gold, which has no minor unit) are not.
isDebitCreditPair	function	@spy4x/platform/universal/money-core	Whether two columns are a debit and a credit column: on every row exactly one of them holds an amount, and the other is blank or zero (`0,00`).
moneyDecimalString	function	@spy4x/platform/universal/money-core	`amount`, in `currency`'s smallest unit, as the exact base-ten string `Intl.NumberFormat` should format — `moneyDecimalString(12345, 2)` is `"123.45"`, `moneyDecimalString(-500, 0)` is `"-500"`, `moneyDecimalString(0, 2)` is `"0.00"`, `moneyDecimalString(0, 0)` is `"0"` — a zero amount gets `decimals` zero digits after the point, same as any other amount, never a bare `"0"` for a currency that has decimals.
parseAmount	function	@spy4x/platform/universal/money-core	Read an amount from a file column written in `format` as a whole number of `currency`'s smallest unit, like parseMoney does for typed text: `parseAmount("(1.234,56)", "EUR", { decimal: ",", group: "." }, { negatives: ["parentheses"] })` is `ok(-123456)`.
parseMoney	function	@spy4x/platform/universal/money-core	Parse text typed in `locale` into a whole number of `currency`'s smallest unit — `parseMoney("12,5", "EUR", "de")` is `ok(1250)`, `parseMoney("1.234,56", "EUR", "de")` is `ok(123456)`.
sumMoney	function	@spy4x/platform/universal/money-core	The total of `items`, all in `currency`.
QuickAddDue	interface	@spy4x/platform/universal/quick-add	Deprecated: Import from `@spy4x/tasks/quick-add`. When the task is due: a calendar date in the given time zone, and a wall-clock time if typed.
QuickAddOptions	interface	@spy4x/platform/universal/quick-add	Deprecated: Import from `@spy4x/tasks/quick-add`. Options of parseQuickAdd.
QuickAddPriority	enum	@spy4x/platform/universal/quick-add	Deprecated: Import from `@spy4x/tasks/quick-add`. Task priority.
QuickAddResult	interface	@spy4x/platform/universal/quick-add	Deprecated: Import from `@spy4x/tasks/quick-add`. The result of parseQuickAdd.
QuickAddSpan	interface	@spy4x/platform/universal/quick-add	Deprecated: Import from `@spy4x/tasks/quick-add`. One recognised token, as a half-open range of UTF-16 offsets into the original line.
QuickAddSpanKind	enum	@spy4x/platform/universal/quick-add	Deprecated: Import from `@spy4x/tasks/quick-add`. What a recognised token is.
parseQuickAdd	function	@spy4x/platform/universal/quick-add	Deprecated: Import from `@spy4x/tasks/quick-add`. Read the tokens out of a quick-add line.
CommandEnvelope	interface	@spy4x/platform/universal/result	Outcome of a command: what it produced, or why it failed.
Result	type	@spy4x/platform/universal/result	A value or an error, as a discriminated union on `ok`.
commandErr	function	@spy4x/platform/universal/result	Build the failure arm of a CommandEnvelope.
commandFromError	function	@spy4x/platform/universal/result	Build a CommandEnvelope from a thrown error, keeping the stack out of the payload.
commandOk	function	@spy4x/platform/universal/result	Build the success arm of a CommandEnvelope.
err	function	@spy4x/platform/universal/result	Wrap a failure.
ok	function	@spy4x/platform/universal/result	Wrap a success.
unwrap	function	@spy4x/platform/universal/result	Narrow a Result to its value, or raise.
unwrapOr	function	@spy4x/platform/universal/result	Narrow a Result to its value, or fall back.
InferSchema	type	@spy4x/platform/universal/schema	Value a schema accepts and produces.
BlogPost	interface	@spy4x/platform/universal/seo	What blogPostingJsonLd describes.
BlogPostingJsonLd	interface	@spy4x/platform/universal/seo	A schema.org `BlogPosting` node.
BreadcrumbListItem	interface	@spy4x/platform/universal/seo	A schema.org `ListItem` as it appears inside a `BreadcrumbList`.
BreadcrumbListJsonLd	interface	@spy4x/platform/universal/seo	A schema.org `BreadcrumbList` node.
Crumb	interface	@spy4x/platform/universal/seo	One entry in the breadcrumb trail a page declares.
FaqItem	interface	@spy4x/platform/universal/seo	One question and its answer, as a page shows them.
FaqPageJsonLd	interface	@spy4x/platform/universal/seo	A schema.org `FAQPage` node.
FaqQuestionJsonLd	interface	@spy4x/platform/universal/seo	A schema.org `Question` inside an `FAQPage`.
ItemListJsonLd	interface	@spy4x/platform/universal/seo	A schema.org `ItemList` of the items a category or catalog page links to.
JsonLdBlog	interface	@spy4x/platform/universal/seo	The blog a post belongs to, described in full so the post's page stands alone.
JsonLdPerson	interface	@spy4x/platform/universal/seo	A person named as a post's author, or as its publisher.
JsonLdPersonNode	interface	@spy4x/platform/universal/seo	A schema.org `Person` or `Organization` node, or a reference to one by `@id`.
LlmsTxtDocument	interface	@spy4x/platform/universal/seo	What an `llms.txt` says: the site's name, a one-paragraph summary and its sections.
LlmsTxtLink	interface	@spy4x/platform/universal/seo	One link in an `llms.txt` section.
LlmsTxtSection	interface	@spy4x/platform/universal/seo	One `## Section` of an `llms.txt` and its links.
OfferJsonLd	interface	@spy4x/platform/universal/seo	A schema.org `Offer` for one item, new, sold by the page's shop.
ProductGroupJsonLd	interface	@spy4x/platform/universal/seo	A schema.org `ProductGroup` node: an item whose page offers several variants.
ProductJsonLd	interface	@spy4x/platform/universal/seo	A schema.org `Product` node: an item with no variants, or one variant of a group.
ProductPage	interface	@spy4x/platform/universal/seo	What productJsonLd describes: one item page, with or without variants.
ProductVariant	interface	@spy4x/platform/universal/seo	One variant of a product, such as one colour in one size, selectable on the product's page.
RssChannel	interface	@spy4x/platform/universal/seo	The feed itself: what an RSS reader shows as the source of the items.
RssItem	interface	@spy4x/platform/universal/seo	One post in an RSS feed.
SitemapAlternate	interface	@spy4x/platform/universal/seo	One language version of a page in a `sitemap.xml`.
SitemapEntry	interface	@spy4x/platform/universal/seo	One page in a `sitemap.xml`.
blogPostingJsonLd	function	@spy4x/platform/universal/seo	The schema.org `BlogPosting` node for one post, with the fields Google reads for an article: `headline`, `image`, `datePublished`, `dateModified`, `author` and `publisher`, plus `mainEntityOfPage`, `articleSection`, `inLanguage`, `timeRequired` and `isPartOf`.
breadcrumbItems	function	@spy4x/platform/universal/seo	`itemListElement` for a schema.org `BreadcrumbList`, built from the crumbs the caller stated.
breadcrumbListJsonLd	function	@spy4x/platform/universal/seo	The complete `BreadcrumbList` node, `@id`-anchored to the page it describes.
canonicalUrl	function	@spy4x/platform/universal/seo	Parse a canonical address into the normalised `URL` that will be published.
faqPageJsonLd	function	@spy4x/platform/universal/seo	The `FAQPage` node for the questions a page shows, in the order it shows them.
itemListJsonLd	function	@spy4x/platform/universal/seo	The `ItemList` node for a category or catalog page: one `ListItem` per item, with its 1-based `position` and the absolute `url` of the item's own page, in the order the page shows them.
jsonLdText	function	@spy4x/platform/universal/seo	Serialise JSON-LD for a `<script>` body.
llmsTxt	function	@spy4x/platform/universal/seo	The text of an `/llms.txt` in the format llmstxt.org describes: `# Title`, a `> summary` line, then each section as a `## Section` heading followed by `- [Title](url): description` lines.
normalizeCanonical	function	@spy4x/platform/universal/seo	The canonical address as it should be published: one clean `http`/`https` address.
productJsonLd	function	@spy4x/platform/universal/seo	The schema.org node Google reads for an item page: a `Product` for an item with no variants, or a `ProductGroup` whose `hasVariant` lists one `Product` per variant.
rssXml	function	@spy4x/platform/universal/seo	The text of an RSS 2.0 feed of `items`, in the order given.
sitemapXml	function	@spy4x/platform/universal/seo	The text of a `sitemap.xml` that lists `entries` in the order given.
DEFAULT_SETTINGS_MAX_BYTES	constant	@spy4x/platform/universal/settings	The default cap on a saved value: 4 KiB of UTF-8 JSON, plenty for a handful of preferences.
SettingsDefinition	interface	@spy4x/platform/universal/settings	One app's settings: its schema, defaults and cap, with the checks built on them.
SettingsOptions	interface	@spy4x/platform/universal/settings	Options for defineSettings.
SettingsParseResult	type	@spy4x/platform/universal/settings	Outcome of SettingsDefinition.parse.
SettingsRefusal	type	@spy4x/platform/universal/settings	Why a value or a save was refused.
SettingsSaveResult	type	@spy4x/platform/universal/settings	Outcome of SettingsDefinition.save and saveSettings.
SettingsStore	interface	@spy4x/platform/universal/settings	Where an app keeps one owner's settings record: a row, a key, a file.
StoredSettings	interface	@spy4x/platform/universal/settings	A record as the store hands it back: the value is unchecked JSON until it is resolved.
VersionedSettings	interface	@spy4x/platform/universal/settings	A settings value and the version it was saved as.
defineSettings	function	@spy4x/platform/universal/settings	Define one app's settings from an arktype object schema and its defaults.
saveSettings	function	@spy4x/platform/universal/settings	Read, check and write one save request against a store.
shellQuote	function	@spy4x/platform/universal/shell	Quotes `value` as one word for a POSIX shell: the shell reads it back as exactly `value`, with no expansion, globbing or word splitting.
SortDirection	type	@spy4x/platform/universal/sort	Sort direction of one rule.
SortRule	interface	@spy4x/platform/universal/sort	One column in the sort order.
parseSort	function	@spy4x/platform/universal/sort	Read sort rules out of a URL parameter.
removeSortRule	function	@spy4x/platform/universal/sort	Removes one sort priority while preserving all remaining priorities.
serializeSort	function	@spy4x/platform/universal/sort	Write sort rules into a URL parameter.
sortRows	function	@spy4x/platform/universal/sort	Sort rows by every rule in order.
toggleSort	function	@spy4x/platform/universal/sort	Advance one column through `asc` → `desc` → `off`.
ResponsiveImage	interface	@spy4x/platform/universal/srcset	What responsiveImage answers: a `<source>` per preferred type, and the `<img>`'s own.
ResponsiveImageSource	interface	@spy4x/platform/universal/srcset	One `<source>` of a `<picture>`: a type and its `srcset`.
ResponsiveImageVariant	interface	@spy4x/platform/universal/srcset	One stored width of an image: where it is, its size in pixels and its `Content-Type`.
responsiveImage	function	@spy4x/platform/universal/srcset	The `<picture>` and `<img>` attributes for `variants`.
Interval	interface	@spy4x/platform/universal/statistics	A statistic's value on the data and its bootstrap interval.
bootstrap	function	@spy4x/platform/universal/statistics	Percentile bootstrap interval of `statistic` over `values`.
bootstrapDifference	function	@spy4x/platform/universal/statistics	Bootstrap interval of `statistic(b) - statistic(a)`, resampling each group on its own, so the two groups may differ in size.
crossesZero	function	@spy4x/platform/universal/statistics	True when the interval contains zero, so the data do not show a difference.
mean	function	@spy4x/platform/universal/statistics	Arithmetic mean; `undefined` for an empty list.
median	function	@spy4x/platform/universal/statistics	Median of `values`; `undefined` for an empty list.
quantileSorted	function	@spy4x/platform/universal/statistics	The `p`-th quantile (0 to 1) of an ascending-sorted list, by linear interpolation between the two nearest ranks (the default of NumPy and R).
seededRandom	function	@spy4x/platform/universal/statistics	A seeded random number generator returning floats in [0, 1): mulberry32.
EntryMatch	interface	@spy4x/platform/universal/text	How well a query matched one entry.
MAX_MASKED_EMAIL_LENGTH	constant	@spy4x/platform/universal/text	Longest text maskEmail returns, in UTF-16 code units: one code point (at most two units), the three stars, `@`, and a domain of at most 253.
SearchEntry	interface	@spy4x/platform/universal/text	Something searchEntries can find: a label and, optionally, other names for it.
SearchMatch	interface	@spy4x/platform/universal/text	One result of searchEntries.
SearchMatchKind	type	@spy4x/platform/universal/text	How a query matched an entry, from the strongest to the weakest:
UnsafeTextOptions	interface	@spy4x/platform/universal/text	Options of hasUnsafeTextCharacters.
asciiSlug	function	@spy4x/platform/universal/text	A slug of only `a-z`, digits and single dashes, for an address that refuses other scripts.
convertToKebabCase	function	@spy4x/platform/universal/text	Convert a free-form identifier to kebab-case.
cyrillicToLatin	function	@spy4x/platform/universal/text	Folded text with each Cyrillic letter spelled in Latin letters: `ж` becomes `zh`, `щ` becomes `shch`, and `ь` and `ъ` disappear.
filterRows	function	@spy4x/platform/universal/text	Keep the rows that every word of the query matches.
fold	function	@spy4x/platform/universal/text	Fold text for matching: accents removed and lower-cased.
hasUnsafeTextCharacters	function	@spy4x/platform/universal/text	Whether text a person typed holds one of a fixed list of characters that a display name must not: control characters, which a database may refuse, and the common invisible and text-direction characters.
hasUnstorableTextCharacters	function	@spy4x/platform/universal/text	Whether text holds a character that no database text column can store and give back unchanged: NUL (U+0000) or a lone surrogate, which is half of a surrogate pair without its other half.
initials	function	@spy4x/platform/universal/text	Reduce a name to one or two initials, e.g. for an avatar's fallback face.
levenshtein	function	@spy4x/platform/universal/text	Levenshtein edit distance between two strings, computed over code points.
maskEmail	function	@spy4x/platform/universal/text	An email address with its local part hidden behind its first character, for showing a person which address they used without spelling it out: `jane.doe@example.com` gives `j***@example.com`.
matchEntry	function	@spy4x/platform/universal/text	How well `query` matches one entry, or `null` when it does not.
pluralize	function	@spy4x/platform/universal/text	Naive English pluraliser for UI copy.
readingMinutes	function	@spy4x/platform/universal/text	Whole minutes a reader needs for `text`, at least 1.
search	function	@spy4x/platform/universal/text	Whether one search word occurs in one value.
searchEntries	function	@spy4x/platform/universal/text	The entries that `query` matches, the best first (see matchEntry for what matches).
searchWords	function	@spy4x/platform/universal/text	Split a search box's value into words.
similarity	function	@spy4x/platform/universal/text	Similarity of two strings in `[0, 1]`, derived from levenshtein.
slugify	function	@spy4x/platform/universal/text	A URL- and `id`-safe slug of a title or heading, in any script.
swapLayout	function	@spy4x/platform/universal/text	The text a person meant when they typed `value` in the other keyboard layout, QWERTY and ЙЦУКЕН both ways.
utf8ByteLength	function	@spy4x/platform/universal/text	UTF-8 byte length, i.e. what a `Content-Length` or a storage quota counts.
Clock	interface	@spy4x/platform/universal/time	Injectable time source, so formatting and relative times are testable without a frozen host.
DAYS_OF_WEEK	constant	@spy4x/platform/universal/time	Weekday names indexed Monday-first, matching getDaysOfWeek's bitmask order.
DayOfWeek	type	@spy4x/platform/universal/time	Weekday identifier, Monday-first.
NowFn	type	@spy4x/platform/universal/time	Monotonic millisecond clock, function-shaped rather than object-shaped — the home for the `() => number` clock shape, which cannot be merged into Clock without breaking a 1.x caller of one shape or the other.
TimeFormatOptions	interface	@spy4x/platform/universal/time	Locale and zone applied by formatTime and timeAgo.
TimeFormatter	class	@spy4x/platform/universal/time	Format an instant for display.
formatTime	function	@spy4x/platform/universal/time	One-off TimeFormatter#format on the host clock.
getDaysOfWeek	function	@spy4x/platform/universal/time	Read a weekday bitmask into day names.
isValidDate	function	@spy4x/platform/universal/time	Whether the input is a usable date: a `Date` or an ISO `YYYY-MM-DD`-prefixed string that `Date` can parse.
nextUtcHour	function	@spy4x/platform/universal/time	The next time the clock reads `hour`:00 UTC after `now`: later today when that hour has not come yet, tomorrow when it is now or past.
normalizeCalendarDate	function	@spy4x/platform/universal/time	Normalise `YYYY.MM.DD` or `YYYY-MM-DD` to `YYYY-MM-DD`, rejecting impossible dates.
systemClock	constant	@spy4x/platform/universal/time	The host clock.
systemNow	function	@spy4x/platform/universal/time	The host clock, function-shaped.
timeAgo	function	@spy4x/platform/universal/time	One-off TimeFormatter#ago on the host clock.
DAYS_IN_MONTH	constant	@spy4x/platform/universal/time-constants	Days in one nominal month.
DAYS_IN_WEEK	constant	@spy4x/platform/universal/time-constants	Days in one week.
HOURS_IN_DAY	constant	@spy4x/platform/universal/time-constants	Hours in one day.
MILLISECONDS_IN_SECOND	constant	@spy4x/platform/universal/time-constants	Milliseconds in one second.
MINUTES_IN_HOUR	constant	@spy4x/platform/universal/time-constants	Minutes in one hour.
MONTHS_IN_YEAR	constant	@spy4x/platform/universal/time-constants	Months in one year.
ONE_DAY_IN_MILLISECONDS	constant	@spy4x/platform/universal/time-constants	One day, in milliseconds.
ONE_DAY_IN_SECONDS	constant	@spy4x/platform/universal/time-constants	One day, in seconds.
ONE_HOUR_IN_MILLISECONDS	constant	@spy4x/platform/universal/time-constants	One hour, in milliseconds.
ONE_HOUR_IN_SECONDS	constant	@spy4x/platform/universal/time-constants	One hour, in seconds.
ONE_MINUTE_IN_MILLISECONDS	constant	@spy4x/platform/universal/time-constants	One minute, in milliseconds.
ONE_MONTH_IN_MILLISECONDS	constant	@spy4x/platform/universal/time-constants	One month (30 days), in milliseconds.
ONE_MONTH_IN_SECONDS	constant	@spy4x/platform/universal/time-constants	One month (30 days), in seconds.
ONE_WEEK_IN_MILLISECONDS	constant	@spy4x/platform/universal/time-constants	One week, in milliseconds.
ONE_WEEK_IN_SECONDS	constant	@spy4x/platform/universal/time-constants	One week, in seconds.
ONE_YEAR_IN_MILLISECONDS	constant	@spy4x/platform/universal/time-constants	One year (12 nominal months), in milliseconds.
ONE_YEAR_IN_SECONDS	constant	@spy4x/platform/universal/time-constants	One year (12 nominal months), in seconds.
SECONDS_IN_MINUTE	constant	@spy4x/platform/universal/time-constants	Seconds in one minute.
UUID_PATTERN	constant	@spy4x/platform/universal/uuid	A lower-case UUID of any version, the form Postgres and the browser's own generator print.
UUID_V7_PATTERN	constant	@spy4x/platform/universal/uuid	A lower-case UUID of version 7, as uuidV7 makes it: version digit `7` and the standard variant (`8`, `9`, `a` or `b`).
UuidVersion	type	@spy4x/platform/universal/uuid	The version digit of a UUID: `4` is the random one, `7` the time-ordered one.
isUuid	function	@spy4x/platform/universal/uuid	True for a lower-case UUID string.
uuidV7	function	@spy4x/platform/universal/uuid	Returns a new lower-case UUID version 7.
DEL_CODE_POINT	constant	@spy4x/platform/validation/predicates	ASCII `DEL`.
HEADER_MAX_CODE_POINT	constant	@spy4x/platform/validation/predicates	Highest ASCII control code point, inclusive: the C0 block.
HeaderSafeString	type	@spy4x/platform/validation/predicates	
HoneypotField	type	@spy4x/platform/validation/predicates	
TEXT_ALLOWED_CODE_POINTS	constant	@spy4x/platform/validation/predicates	Control code points free text is allowed to keep: TAB, LF and CR.
TextSafeString	type	@spy4x/platform/validation/predicates	
TimeZoneName	type	@spy4x/platform/validation/predicates	
ValidEmailAddress	type	@spy4x/platform/validation/predicates	
emailAddress	constant	@spy4x/platform/validation/predicates	A bare email address isEmailAddress accepts.
hasHeaderControlCharacters	function	@spy4x/platform/validation/predicates	True when `value` contains a code point ≤ 31 or 127 — unsafe in any HTTP header.
hasTextControlCharacters	function	@spy4x/platform/validation/predicates	True when `value` contains a code point ≤ 31 other than TAB/LF/CR, or 127 — unsafe in stored free text.
headerSafeString	constant	@spy4x/platform/validation/predicates	`string` that is safe to place in a header value (no control characters at all).
honeypotField	constant	@spy4x/platform/validation/predicates	The honeypot field: present and an empty string.
isEmailAddress	function	@spy4x/platform/validation/predicates	True when `value` is a bare email address (`jane@example.com`, no display name) that `@spy4x/email` would send to: a dot-atom local part and a dotted domain of at least two labels (`user@localhost` is refused), a local part of at most 64 characters, and at most `MAX_ADDR_SPEC_LENGTH` (254) characters in all, the limit `@spy4x/email/address` exports.
isHoneypotFilled	function	@spy4x/platform/validation/predicates	True when a honeypot field was filled in, i.e. the submission is very likely automated.
isValidTimeZoneName	function	@spy4x/platform/validation/predicates	Deprecated: Use `isValidTimeZone` from `@spy4x/time/tz`. True when `Intl.DateTimeFormat` accepts `value` as a time zone.
textSafeString	constant	@spy4x/platform/validation/predicates	`string` that is safe as free text: TAB, LF and CR are allowed.
timeZoneName	constant	@spy4x/platform/validation/predicates	A time zone name `Intl` accepts.
AckTimeoutError	class	@spy4x/realtime	Timed out waiting for an acknowledgement.
AggregateChange	interface	@spy4x/realtime	A committed, group-scoped change, reduced to what a hint needs.
AggregateNotifier	class	@spy4x/realtime	Maps a committed change to a hint, and the hint to the users entitled to see it.
AppliedHint	interface	@spy4x/realtime	A `change.hint` that was contiguous with the cursor and therefore applied.
ApplyOutcome	type	@spy4x/realtime	Outcome of applying one pushed sequence.
ApplyStatus	enum	@spy4x/realtime	What the cursor tracker decided about one pushed sequence.
AuthGateError	class	@spy4x/realtime	The reconnect gate refused.
AvailableCallPort	interface	@spy4x/realtime	A CallPort that can say whether it can carry a call right now.
BackoffConfig	interface	@spy4x/realtime	Shape of the backoff schedule.
BackoffOptions	interface	@spy4x/realtime	One call's inputs.
CALL_ERROR_STATUS	constant	@spy4x/realtime	The HTTP status createCallHandler answers with for each error code.
CallErrorContext	interface	@spy4x/realtime	What CallHandlerOptions.onError is told about the call that failed.
CallHandler	type	@spy4x/realtime	A web-standard request handler: mount it in Hono with `(c) => handler(c.req.raw)`.
CallOptions	interface	@spy4x/realtime	Options for one ClientTransport.query.
CallPort	interface	@spy4x/realtime	The two calls a page makes.
CallPortCommandOptions	interface	@spy4x/realtime	Options for one CallPort.command.
CallPortOptions	interface	@spy4x/realtime	Options for one CallPort.query.
ChangeHint	interface	@spy4x/realtime	A hint that a group moved to `sequence`.
ClientCommandMessage	interface	@spy4x/realtime	A request for the server to do something: change state.
ClientMessage	type	@spy4x/realtime	Frames a client sends: liveness, the sync handshake, and requests.
ClientQueryMessage	interface	@spy4x/realtime	A request to read.
ClientRequestMessage	type	@spy4x/realtime	A request frame, either kind.
ClientTransport	class	@spy4x/realtime	A reconnecting client transport over an injected socket factory.
Clock	type	@spy4x/realtime	Deprecated: Use `TimerClock`. The old name of TimerClock.
CloseHandler	type	@spy4x/realtime	
CloseReason	enum	@spy4x/realtime	Why a connection left the registry.
CommandOptions	interface	@spy4x/realtime	Options for one ClientTransport.command.
ConnectTimeoutError	class	@spy4x/realtime	A socket did not open inside the connect-attempt timeout.
ConnectionHandle	interface	@spy4x/realtime	Identifies one socket of one user.
ConnectionLostError	class	@spy4x/realtime	The socket closed while a request was outstanding, or a send was attempted while closed.
ConnectionRegistry	class	@spy4x/realtime	Every live socket, indexed by user and by socket id.
CursorPort	interface	@spy4x/realtime	Durable cursors: what to advertise on connect, and where a hint lands.
CursorSnapshot	interface	@spy4x/realtime	One group's applied sequence.
CursorTracker	class	@spy4x/realtime	In-memory per-group cursor arithmetic.
DEFAULT_BACKOFF	constant	@spy4x/realtime	Defaults used when a caller does not override them.
DEFAULT_MAX_CALL_BYTES	constant	@spy4x/realtime	The default cap on a call's body, the same as the socket's default frame cap.
DecodeResult	type	@spy4x/realtime	Outcome of decoding one text frame.
EncodeFailure	interface	@spy4x/realtime	The frame ConnectionRegistryOptions.onEncodeError is told about.
FrameContext	interface	@spy4x/realtime	A client frame the registry does not own, handed to the application.
FrameHandler	type	@spy4x/realtime	
GapReport	interface	@spy4x/realtime	A non-contiguous sequence, with the cursor a pull must resume from.
GateResult	interface	@spy4x/realtime	Outcome of the reconnect gate — typically `GET /api/auth/me`.
HandshakeAcknowledgedEvent	interface	@spy4x/realtime	Delivered to `onHandshakeAcknowledged` listeners.
IDEMPOTENCY_KEY_HEADER	constant	@spy4x/realtime	The header that carries a command's idempotency key.
KeyValueStore	type	@spy4x/realtime	Deprecated: Use `KeyValueStore` from `@spy4x/platform/universal/key-value-store` — the same three methods, homed there since this package has no dependency of its own to protect either way and `@spy4x/platform` cannot depend on `@spy4x/realtime` without a publish-time dependency cycle (`realtime/backoff.ts` imports `@spy4x/platform/universal/async`). Minimal synchronous key/value store.
MalformedFrame	interface	@spy4x/realtime	A frame that could not be decoded, or arrived in the wrong direction.
MalformedFrameHandler	type	@spy4x/realtime	
ManagedSocket	type	@spy4x/realtime	What this package requires of a socket.
MemoryKeyValueStore	class	@spy4x/realtime	In-memory KeyValueStore.
MessageCodec	interface	@spy4x/realtime	Encodes and decodes frames.
NativeSocketLike	interface	@spy4x/realtime	The subset of the platform `WebSocket` this adapter needs.
NotifyOutcome	interface	@spy4x/realtime	Result of one AggregateNotifier.notify call.
NotifyStatus	enum	@spy4x/realtime	What happened to one notification.
OpenHandler	type	@spy4x/realtime	
Operation	interface	@spy4x/realtime	One named operation.
OperationCall	interface	@spy4x/realtime	What an operation is given for one call, whichever adapter received it.
OperationErrorMapper	type	@spy4x/realtime	Turns an error a handler threw into the typed error the client sees, or `null` for one the client must not be told about.
Operations	type	@spy4x/realtime	The operations an app serves, by name (`note.create`).
PersistentCursorStore	class	@spy4x/realtime	A CursorTracker whose state survives a reload.
PongTimeoutError	class	@spy4x/realtime	The peer stopped answering pings.
REALTIME_ERROR_CODES	constant	@spy4x/realtime	Every error code a `server.error` frame may carry.
REALTIME_USER_HEADER	constant	@spy4x/realtime	The header that carries the id of the user the page was started for.
RealtimeErrorCode	type	@spy4x/realtime	One of REALTIME_ERROR_CODES.
RealtimeRequestError	class	@spy4x/realtime	A request that failed with a typed code.
RecipientResolver	type	@spy4x/realtime	Resolves the users entitled to see one change.
RegistryCloseInfo	interface	@spy4x/realtime	What a close handler is told.
RequestContext	interface	@spy4x/realtime	A request handed to the dispatcher.
RequestDispatcher	type	@spy4x/realtime	Answers one request.
RequestOptions	interface	@spy4x/realtime	Options for one ack-tracked ClientTransport.request.
RequestTimeoutError	class	@spy4x/realtime	No answer to a command or query arrived in time.
RetryOptions	interface	@spy4x/realtime	Options of sendCommand and sendQuery.
SEQUENCE_START	constant	@spy4x/realtime	The empty cursor, and the "from the beginning" floor.
SequenceChange	interface	@spy4x/realtime	A pushed change, reduced to the only fields correctness depends on.
ServerErrorMessage	interface	@spy4x/realtime	A failed answer to a request, correlated by `requestId`.
ServerMessage	type	@spy4x/realtime	Frames a server sends.
ServerResultMessage	interface	@spy4x/realtime	A successful answer to a request, correlated by `requestId`.
SocketCallTransport	interface	@spy4x/realtime	The part of ClientTransport the socket port needs.
SocketCloseInfo	interface	@spy4x/realtime	Why and how a socket stopped.
SocketFactory	type	@spy4x/realtime	Creates a socket for a URL.
SocketObserverPort	interface	@spy4x/realtime	The inbound half of a socket, as a subscription API rather than `on*` properties.
SocketPort	interface	@spy4x/realtime	The outbound half of a socket.
SocketState	enum	@spy4x/realtime	Lifecycle state of a socket: the platform `WebSocket`'s four states, numbered 1-4 (the platform uses 0-3).
SyncRequest	interface	@spy4x/realtime	What a client tells the server on connect, and what a pull resumes from.
TimerClock	interface	@spy4x/realtime	Time source and timer factory.
TimerHandle	interface	@spy4x/realtime	Opaque handle to a scheduled callback.
TransportStatus	enum	@spy4x/realtime	Where the transport is in its lifecycle.
TransportStatusSnapshot	interface	@spy4x/realtime	Snapshot of transport state, delivered to `onStatus` listeners.
Unsubscribe	type	@spy4x/realtime	Removes a handler registered through one of the `on*` port methods.
UserFanout	interface	@spy4x/realtime	The only fan-out capability the notify path is given: explicit recipients.
WireMessage	type	@spy4x/realtime	Any frame in either direction.
adaptWebSocket	function	@spy4x/realtime	Wraps a platform `WebSocket` (or anything shaped like one) so it satisfies ManagedSocket.
createCallHandler	function	@spy4x/realtime	The HTTP adapter: answers `POST <basePath>/<name>` from an Operations table.
createComposedCallPort	function	@spy4x/realtime	Prefers the socket while it is open and uses HTTP otherwise.
createError	function	@spy4x/realtime	Build the failure answer to request `requestId`.
createHint	function	@spy4x/realtime	Build the hint a committed change is announced with.
createHttpCallPort	function	@spy4x/realtime	Fills the port with `fetch`: `POST <baseUrl>/<name>` with the payload as JSON.
createJsonCodec	function	@spy4x/realtime	JSON codec over the arktype schemas above.
createOperationDispatcher	function	@spy4x/realtime	The socket adapter: a dispatcher for `ConnectionRegistry.onRequest` that serves an Operations table.
createResult	function	@spy4x/realtime	Build the success answer to request `requestId`.
createSocketCallPort	function	@spy4x/realtime	Fills the port with a client transport.
createSystemClock	function	@spy4x/realtime	Clock backed by the platform timers.
createWebSocketFactory	function	@spy4x/realtime	SocketFactory over the platform `WebSocket` constructor.
describeError	function	@spy4x/realtime	What to tell the person about a failed request: the server's own message when it answered with one, otherwise `fallback`.
expectNoPayload	function	@spy4x/realtime	Refuses a payload on a request that takes none, so a client cannot smuggle fields past it.
findUndeclaredKey	function	@spy4x/realtime	First own string key of `value` that `declared` does not list, or `null`.
isBoundToUser	function	@spy4x/realtime	Whether a call is bound to the authenticated user.
isChangeHint	function	@spy4x/realtime	Whether a frame is a change hint, narrowing it for a caller that has already decoded.
isForeignAnswer	function	@spy4x/realtime	Whether an answer that is not `ok` was written by something in front of the API, not by the API: a status of 500 or more, a 404 or a 429, with no error code in the body.
isRealtimeErrorCode	function	@spy4x/realtime	Whether an unknown value is one of the closed error codes.
isRetryable	function	@spy4x/realtime	Whether the outcome of a call is unknown or the server was busy, so trying again can help: the answer did not arrive in time, the connection dropped, the server gave up (`timeout`), it refused the call as `rate_limited` before running it, or it is still running the first try of the same command.
isUnknownOutcome	function	@spy4x/realtime	Whether the outcome of a call is unknown: the network is down (`fetch` rejects with a `TypeError`) or the call is isRetryable.
mapReadyState	function	@spy4x/realtime	Maps one native `readyState` value to this package's SocketState.
nextBackoffDelay	function	@spy4x/realtime	Deprecated: Thin wrapper over `backoffDelay` from "@spy4x/platform/universal/async", kept for this module's existing 0-based-attempt, `factor`-parameterised call shape. Delay before retry `attempt`, in milliseconds.
parsePayload	function	@spy4x/realtime	Checks a request payload with an arktype schema and returns the parsed value.
sendCommand	function	@spy4x/realtime	Sends a command with a fresh idempotency key and, when the outcome is unknown, sends it again with the same key.
sendQuery	function	@spy4x/realtime	Sends a query, trying again when the connection is down or the answer is late.
toWireCursors	function	@spy4x/realtime	Snapshot of the cursors a handshake advertises, in wire form.
withUnauthorizedHook	function	@spy4x/realtime	Wraps any port so that a call answered with `unauthorized` calls `onUnauthorized` once, then rejects with the same error.
AvailableCallPort	interface	@spy4x/realtime/calls	A CallPort that can say whether it can carry a call right now.
CallPort	interface	@spy4x/realtime/calls	The two calls a page makes.
CallPortCommandOptions	interface	@spy4x/realtime/calls	Options for one CallPort.command.
CallPortOptions	interface	@spy4x/realtime/calls	Options for one CallPort.query.
FirstOpenWait	interface	@spy4x/realtime/calls	Makes the first calls of a page wait for a socket that is still opening, so they travel over it and not over HTTP beside it.
RetryOptions	interface	@spy4x/realtime/calls	Options of sendCommand and sendQuery.
SocketCallTransport	interface	@spy4x/realtime/calls	The part of ClientTransport the socket port needs.
createComposedCallPort	function	@spy4x/realtime/calls	Prefers the socket while it is open and uses HTTP otherwise.
createHttpCallPort	function	@spy4x/realtime/calls	Fills the port with `fetch`: `POST <baseUrl>/<name>` with the payload as JSON.
createSocketCallPort	function	@spy4x/realtime/calls	Fills the port with a client transport.
isForeignAnswer	function	@spy4x/realtime/calls	Whether an answer that is not `ok` was written by something in front of the API, not by the API: a status of 500 or more, a 404 or a 429, with no error code in the body.
isRetryable	function	@spy4x/realtime/calls	Whether the outcome of a call is unknown or the server was busy, so trying again can help: the answer did not arrive in time, the connection dropped, the server gave up (`timeout`), it refused the call as `rate_limited` before running it, or it is still running the first try of the same command.
isUnknownOutcome	function	@spy4x/realtime/calls	Whether the outcome of a call is unknown: the network is down (`fetch` rejects with a `TypeError`) or the call is isRetryable.
sendCommand	function	@spy4x/realtime/calls	Sends a command with a fresh idempotency key and, when the outcome is unknown, sends it again with the same key.
sendQuery	function	@spy4x/realtime/calls	Sends a query, trying again when the connection is down or the answer is late.
withUnauthorizedHook	function	@spy4x/realtime/calls	Wraps any port so that a call answered with `unauthorized` calls `onUnauthorized` once, then rejects with the same error.
ChangesAnswer	type	@spy4x/realtime/changes	The answer to a changes request.
ChangesApply	interface	@spy4x/realtime/changes	One checked page, as the copy applies it.
ChangesCopy	interface	@spy4x/realtime/changes	The device's copy of each group's rows and the sequence they are complete through.
ChangesKind	interface	@spy4x/realtime/changes	How the device reads one kind of row.
ChangesKinds	type	@spy4x/realtime/changes	Every kind an app pulls, by name: the names the server uses in `upserts` and tombstones.
ChangesPage	interface	@spy4x/realtime/changes	One page of the changes of a group after a sequence.
ChangesPagePlan	type	@spy4x/realtime/changes	What one page covers, or that the cursor cannot be answered.
ChangesPagePlanInput	interface	@spy4x/realtime/changes	What planChangesPage is given: three numbers the app reads in one snapshot.
ChangesPullResult	interface	@spy4x/realtime/changes	What one pull did.
CursorTooOld	interface	@spy4x/realtime/changes	The server cannot say what changed after this cursor: read the group in full.
RowsByKind	type	@spy4x/realtime/changes	Rows by kind.
Tombstone	interface	@spy4x/realtime/changes	A row that was deleted, or left the group, after the cursor: its kind and id, nothing else.
changesAfterSchema	constant	@spy4x/realtime/changes	Reads the `after` of a request (a query parameter): a non-negative safe integer written in plain digits, without a sign, a fraction, an exponent or a leading zero.
changesAnswerSchema	constant	@spy4x/realtime/changes	The wire shape of ChangesAnswer.
createChangesCopy	function	@spy4x/realtime/changes	A ChangesCopy over IndexedDB (`createDataCache`): one scope per kind and group, and the cursors in a scope of their own, so rows and cursor land in one transaction.
createChangesPull	function	@spy4x/realtime/changes	The client side of the cursor pull: see the module documentation.
planChangesPage	function	@spy4x/realtime/changes	Decides the window of one page: `(after, through]`.
AckTimeoutError	class	@spy4x/realtime/client	Timed out waiting for an acknowledgement.
AppliedHint	interface	@spy4x/realtime/client	A `change.hint` that was contiguous with the cursor and therefore applied.
AuthGateError	class	@spy4x/realtime/client	The reconnect gate refused.
CallOptions	interface	@spy4x/realtime/client	Options for one ClientTransport.query.
ClientTransport	class	@spy4x/realtime/client	A reconnecting client transport over an injected socket factory.
CommandOptions	interface	@spy4x/realtime/client	Options for one ClientTransport.command.
ConnectTimeoutError	class	@spy4x/realtime/client	A socket did not open inside the connect-attempt timeout.
ConnectionLostError	class	@spy4x/realtime/client	The socket closed while a request was outstanding, or a send was attempted while closed.
CursorPort	interface	@spy4x/realtime/client	Durable cursors: what to advertise on connect, and where a hint lands.
GateResult	interface	@spy4x/realtime/client	Outcome of the reconnect gate — typically `GET /api/auth/me`.
HandshakeAcknowledgedEvent	interface	@spy4x/realtime/client	Delivered to `onHandshakeAcknowledged` listeners.
PongTimeoutError	class	@spy4x/realtime/client	The peer stopped answering pings.
RequestOptions	interface	@spy4x/realtime/client	Options for one ack-tracked ClientTransport.request.
RequestTimeoutError	class	@spy4x/realtime/client	No answer to a command or query arrived in time.
TransportStatus	enum	@spy4x/realtime/client	Where the transport is in its lifecycle.
TransportStatusSnapshot	interface	@spy4x/realtime/client	Snapshot of transport state, delivered to `onStatus` listeners.
Collection	interface	@spy4x/realtime/collections	A collection as the app uses it.
CollectionCall	interface	@spy4x/realtime/collections	A call to make: the name and payload the calls port is given.
CollectionDefinition	interface	@spy4x/realtime/collections	How one aggregate becomes an offline-writable collection.
Collections	interface	@spy4x/realtime/collections	Several collections behind one ordered flush.
EntityRef	interface	@spy4x/realtime/collections	An entity of a registered collection: what a child entry refers to.
ErrorCodes	interface	@spy4x/realtime/collections	Options of classifyByCode: the `details.code` of each refusal the server makes.
ReferenceRemoved	interface	@spy4x/realtime/collections	What the layer tells the app when it removed a reference to a parent that will never exist.
WaitingEntry	interface	@spy4x/realtime/collections	A queued entry that is not sent because a parent entry is still ahead of it.
classifyByCode	function	@spy4x/realtime/collections	A `classify` for the common case: an error that is not a server answer, or that is worth a retry (`isRetryable`), means unreachable; a RealtimeRequestError whose `details.code` is one of `codes` is that kind of refusal; any other refusal is `rejected` with its message.
createCollections	function	@spy4x/realtime/collections	Puts the collections behind one flush.
defineCollection	function	@spy4x/realtime/collections	Gives a definition its types.
ApplyOutcome	type	@spy4x/realtime/cursor	Outcome of applying one pushed sequence.
ApplyStatus	enum	@spy4x/realtime/cursor	What the cursor tracker decided about one pushed sequence.
CursorSnapshot	interface	@spy4x/realtime/cursor	One group's applied sequence.
CursorTracker	class	@spy4x/realtime/cursor	In-memory per-group cursor arithmetic.
GapReport	interface	@spy4x/realtime/cursor	A non-contiguous sequence, with the cursor a pull must resume from.
PersistentCursorStore	class	@spy4x/realtime/cursor	A CursorTracker whose state survives a reload.
SEQUENCE_START	constant	@spy4x/realtime/cursor	The empty cursor, and the "from the beginning" floor.
SequenceChange	interface	@spy4x/realtime/cursor	A pushed change, reduced to the only fields correctness depends on.
SyncRequest	interface	@spy4x/realtime/cursor	What a client tells the server on connect, and what a pull resumes from.
AggregateChange	interface	@spy4x/realtime/notify	A committed, group-scoped change, reduced to what a hint needs.
AggregateNotifier	class	@spy4x/realtime/notify	Maps a committed change to a hint, and the hint to the users entitled to see it.
NotifyOutcome	interface	@spy4x/realtime/notify	Result of one AggregateNotifier.notify call.
NotifyStatus	enum	@spy4x/realtime/notify	What happened to one notification.
RecipientResolver	type	@spy4x/realtime/notify	Resolves the users entitled to see one change.
UserFanout	interface	@spy4x/realtime/notify	The only fan-out capability the notify path is given: explicit recipients.
CALL_ERROR_STATUS	constant	@spy4x/realtime/operations	The HTTP status createCallHandler answers with for each error code.
CallErrorContext	interface	@spy4x/realtime/operations	What CallHandlerOptions.onError is told about the call that failed.
CallHandler	type	@spy4x/realtime/operations	A web-standard request handler: mount it in Hono with `(c) => handler(c.req.raw)`.
DEFAULT_MAX_CALL_BYTES	constant	@spy4x/realtime/operations	The default cap on a call's body, the same as the socket's default frame cap.
IDEMPOTENCY_KEY_HEADER	constant	@spy4x/realtime/operations	The header that carries a command's idempotency key.
Operation	interface	@spy4x/realtime/operations	One named operation.
OperationCall	interface	@spy4x/realtime/operations	What an operation is given for one call, whichever adapter received it.
OperationErrorMapper	type	@spy4x/realtime/operations	Turns an error a handler threw into the typed error the client sees, or `null` for one the client must not be told about.
Operations	type	@spy4x/realtime/operations	The operations an app serves, by name (`note.create`).
REALTIME_USER_HEADER	constant	@spy4x/realtime/operations	The header that carries the id of the user the page was started for.
createCallHandler	function	@spy4x/realtime/operations	The HTTP adapter: answers `POST <basePath>/<name>` from an Operations table.
createOperationDispatcher	function	@spy4x/realtime/operations	The socket adapter: a dispatcher for `ConnectionRegistry.onRequest` that serves an Operations table.
expectNoPayload	function	@spy4x/realtime/operations	Refuses a payload on a request that takes none, so a client cannot smuggle fields past it.
isBoundToUser	function	@spy4x/realtime/operations	Whether a call is bound to the authenticated user.
parsePayload	function	@spy4x/realtime/operations	Checks a request payload with an arktype schema and returns the parsed value.
AbandonReason	type	@spy4x/realtime/outbox	How a queued create left the queue unsent: - `withdrawn`: the person took it back (`withdraw`); - `dropped`: the entity was deleted before any send, so the two cancelled out; - `discarded`: the server refused it and the person chose the server's side (`useTheirs`) or deleted the entity while the server holds no such entity, or a change that stood alone was refused (`submit` answered `failed`).
Change	type	@spy4x/realtime/outbox	What a person did to an entity.
ConflictReason	type	@spy4x/realtime/outbox	Why a write stopped the queue for its entity and now waits for a person: - `version`: the entity changed on the server since this write was based on it; - `gone`: the entity was deleted on the server; - `rejected`: the server refused the write (for example the role no longer allows it).
ConflictRef	interface	@spy4x/realtime/outbox	The conflict a person was shown: an OutboxEntry from `entries()` fits.
LockManagerLike	interface	@spy4x/realtime/outbox	The part of a browser's `LockManager` the outbox uses.
Outbox	interface	@spy4x/realtime/outbox	The outbox as the app uses it.
OutboxCommand	interface	@spy4x/realtime/outbox	The command the app sends for one entry.
OutboxEntry	interface	@spy4x/realtime/outbox	One write made while offline, waiting to be sent.
OutboxEntrySnapshot	interface	@spy4x/realtime/outbox	The parts of an OutboxEntry that an edit merged into it changes.
OutboxKind	type	@spy4x/realtime/outbox	What an outgoing write does to an entity.
OutboxLock	type	@spy4x/realtime/outbox	Runs `work` while no other caller holds the queue.
OutboxPorts	interface	@spy4x/realtime/outbox	What the outbox needs from the outside.
OutboxStore	interface	@spy4x/realtime/outbox	Where the queue is kept.
Outcome	type	@spy4x/realtime/outbox	How a change ended for the person who made it.
SendFailure	type	@spy4x/realtime/outbox	How the outbox reads a failed send: - `unreachable`: the outcome is unknown or the server was busy; keep the entry and stop; - `version`: the write was based on a version the server has moved past; - `not-found`: the entity does not exist on the server; - `already-exists`: a create hit an id that is taken; - `rejected`: the server refused it for good; `message` says why.
createMemoryOutboxStore	function	@spy4x/realtime/outbox	A store in memory, with the behaviour of the IndexedDB one that the queue relies on.
createOutbox	function	@spy4x/realtime/outbox	The queue: see the module documentation for the rules it keeps.
createPromiseLock	function	@spy4x/realtime/outbox	A lock for one tab: runs the work one piece at a time, in the order asked.
createWebLock	function	@spy4x/realtime/outbox	A lock shared by every tab of one browser, through Web Locks.
createIndexedDbOutboxStore	function	@spy4x/realtime/outbox-indexeddb	An outbox store over IndexedDB.
PageLifecycleTarget	interface	@spy4x/realtime/page-lifecycle	The parts of `window` and `document` the watcher uses, so a test or a worker can supply them.
watchPageResume	function	@spy4x/realtime/page-lifecycle	Calls `onResume` when the page becomes visible, the browser goes online, or a page is restored from the back-forward cache (`pageshow` with `persisted`).
ChangeHint	interface	@spy4x/realtime/protocol	A hint that a group moved to `sequence`.
ClientCommandMessage	interface	@spy4x/realtime/protocol	A request for the server to do something: change state.
ClientLivenessMessage	interface	@spy4x/realtime/protocol	A client liveness frame.
ClientMessage	type	@spy4x/realtime/protocol	Frames a client sends: liveness, the sync handshake, and requests.
ClientQueryMessage	interface	@spy4x/realtime/protocol	A request to read.
ClientRequestMessage	type	@spy4x/realtime/protocol	A request frame, either kind.
ClientSyncMessage	interface	@spy4x/realtime/protocol	The sync handshake: the cursors the client holds, or an explicit cold start.
DecodeResult	type	@spy4x/realtime/protocol	Outcome of decoding one text frame.
MessageCodec	interface	@spy4x/realtime/protocol	Encodes and decodes frames.
ServerAckMessage	interface	@spy4x/realtime/protocol	An acknowledgement, correlated to the `id` of the frame being acknowledged.
ServerErrorMessage	interface	@spy4x/realtime/protocol	A failed answer to a request, correlated by `requestId`.
ServerHintMessage	type	@spy4x/realtime/protocol	A server frame announcing a committed change.
ServerLivenessMessage	interface	@spy4x/realtime/protocol	A server liveness frame.
ServerMessage	type	@spy4x/realtime/protocol	Frames a server sends.
ServerResultMessage	interface	@spy4x/realtime/protocol	A successful answer to a request, correlated by `requestId`.
WireMessage	type	@spy4x/realtime/protocol	Any frame in either direction.
clientMessageSchema	constant	@spy4x/realtime/protocol	Client half of the protocol.
createError	function	@spy4x/realtime/protocol	Build the failure answer to request `requestId`.
createHint	function	@spy4x/realtime/protocol	Build the hint a committed change is announced with.
createJsonCodec	function	@spy4x/realtime/protocol	JSON codec over the arktype schemas above.
createResult	function	@spy4x/realtime/protocol	Build the success answer to request `requestId`.
findUndeclaredKey	function	@spy4x/realtime/protocol	First own string key of `value` that `declared` does not list, or `null`.
isChangeHint	function	@spy4x/realtime/protocol	Whether a frame is a change hint, narrowing it for a caller that has already decoded.
serverMessageSchema	constant	@spy4x/realtime/protocol	Server half of the protocol.
toWireCursors	function	@spy4x/realtime/protocol	Snapshot of the cursors a handshake advertises, in wire form.
LocalReads	interface	@spy4x/realtime/read-cache	The read copies of the offline-readable lists, as a store uses them.
ReadCache	interface	@spy4x/realtime/read-cache	The copies of one user: see the module documentation.
ReadRefused	class	@spy4x/realtime/read-cache	Carries an answer of the server that is not the list out of a REST read, so a read through LocalReads neither keeps it nor hides it behind the copy.
ReadResult	interface	@spy4x/realtime/read-cache	What a read answered, and how old it is.
cachedRead	function	@spy4x/realtime/read-cache	Asks the server with `read`, keeps the answer under `key` and returns it as fresh.
createLocalReads	function	@spy4x/realtime/read-cache	LocalReads over the cache `current` names at the moment of each read, or over none.
createReadCache	function	@spy4x/realtime/read-cache	A read cache over IndexedDB (`createDataCache`), one entry per key.
isProxyAnswer	function	@spy4x/realtime/read-cache	Whether a REST read's answer is taken for a proxy's, such as a 502 during a deploy: a ReadRefused that `isForeignAnswer` (`@spy4x/realtime/calls`) takes for foreign.
isRefusal	function	@spy4x/realtime/read-cache	Whether the server answered that this person may not read the list, or that it is gone: a socket read refused with `unauthorized`, `forbidden` or `not_found`, or a REST read answered 401, 403 or 404.
isUnreachable	function	@spy4x/realtime/read-cache	Whether a failure means the server could not be reached, as opposed to it having answered.
readCopy	function	@spy4x/realtime/read-cache	Returns the saved copy under `key`, or `undefined` when there is none, the cache is `undefined` or the device cannot read it.
CloseHandler	type	@spy4x/realtime/registry	
CloseReason	enum	@spy4x/realtime/registry	Why a connection left the registry.
ConnectionHandle	interface	@spy4x/realtime/registry	Identifies one socket of one user.
ConnectionRegistry	class	@spy4x/realtime/registry	Every live socket, indexed by user and by socket id.
EncodeFailure	interface	@spy4x/realtime/registry	The frame ConnectionRegistryOptions.onEncodeError is told about.
FrameContext	interface	@spy4x/realtime/registry	A client frame the registry does not own, handed to the application.
FrameHandler	type	@spy4x/realtime/registry	
MalformedFrame	interface	@spy4x/realtime/registry	A frame that could not be decoded, or arrived in the wrong direction.
MalformedFrameHandler	type	@spy4x/realtime/registry	
OpenHandler	type	@spy4x/realtime/registry	
RegistryCloseInfo	interface	@spy4x/realtime/registry	What a close handler is told.
RequestContext	interface	@spy4x/realtime/registry	A request handed to the dispatcher.
RequestDispatcher	type	@spy4x/realtime/registry	Answers one request.
SyncFlushResult	type	@spy4x/realtime/sync-runner	What a flush answers.
SyncRunner	interface	@spy4x/realtime/sync-runner	The runner as the app uses it.
SyncRunnerState	interface	@spy4x/realtime/sync-runner	What a UI may show about the runner.
SyncRunnerTarget	interface	@spy4x/realtime/sync-runner	The parts of `window` and `document` the runner listens to.
createSyncRunner	function	@spy4x/realtime/sync-runner	The runner: see the module documentation for the rules it keeps.
flushOutbox	function	@spy4x/realtime/sync-runner	A flush for createSyncRunner that sends an outbox.
FakeClock	class	@spy4x/realtime/testing	Clock that only moves when a test moves it.
FakeSocket	class	@spy4x/realtime/testing	In-memory socket: what a test drives, with no network and no WebSocket global.
FakeSocketFactory	class	@spy4x/realtime/testing	Creates FakeSockets and keeps them, so a test can act as the server.
KeyValueStore	type	@spy4x/realtime/testing	Deprecated: Use `KeyValueStore` from `@spy4x/platform/universal/key-value-store` — the same three methods, homed there since this package has no dependency of its own to protect either way and `@spy4x/platform` cannot depend on `@spy4x/realtime` without a publish-time dependency cycle (`realtime/backoff.ts` imports `@spy4x/platform/universal/async`). Minimal synchronous key/value store.
MemoryKeyValueStore	class	@spy4x/realtime/testing	In-memory KeyValueStore.
RecordingFanout	class	@spy4x/realtime/testing	Fan-out that records what it was asked to deliver.
createMemoryReadCache	function	@spy4x/realtime/testing	A ReadCache in memory, for tests that have no IndexedDB.
drainMicrotasks	function	@spy4x/realtime/testing	Let queued microtasks run, so an awaited chain settles inside a test's own tick.
sequenceRandom	function	@spy4x/realtime/testing	Uniform source in `[0, 1)` that replays fixed values.
NativeSocketLike	interface	@spy4x/realtime/web-socket	The subset of the platform `WebSocket` this adapter needs.
adaptWebSocket	function	@spy4x/realtime/web-socket	Wraps a platform `WebSocket` (or anything shaped like one) so it satisfies ManagedSocket.
createWebSocketFactory	function	@spy4x/realtime/web-socket	SocketFactory over the platform `WebSocket` constructor.
mapReadyState	function	@spy4x/realtime/web-socket	Maps one native `readyState` value to this package's SocketState.
SearchEntry	interface	@spy4x/search	One thing a person can find: a page, a section, a setting, an action.
SearchHit	interface	@spy4x/search	One entry the query found, with its text ready to draw.
SearchIndex	interface	@spy4x/search	A built or loaded index.
SearchIndexJSON	interface	@spy4x/search	The plain object SearchIndex.toJSON returns and loadIndex reads.
SearchOptions	interface	@spy4x/search	Options of SearchIndex.search.
SearchResults	interface	@spy4x/search	What SearchIndex.search returns.
TextPart	interface	@spy4x/search	A run of text, marked when it is a word the query matched.
createIndex	function	@spy4x/search	Builds an index over `entries`.
loadIndex	function	@spy4x/search	Loads an index that createIndex built, from its JSON text or the parsed object.
AUTH_STORE_METHODS	constant	@spy4x/server/auth	Deprecated: No app needs it: the `AuthStore` interface is the list, and TypeScript checks a store against it. The names of the required methods of AuthStore, sorted.
AttemptChallengeInput	interface	@spy4x/server/auth	Input of AuthStore.attemptChallenge.
AuthConflictError	class	@spy4x/server/auth	Thrown by the store when a write would break a uniqueness rule.
AuthConflictReason	type	@spy4x/server/auth	Which uniqueness rule a refused write would have broken.
AuthKey	interface	@spy4x/server/auth	One way of signing in.
AuthSessionRecord	interface	@spy4x/server/auth	Session row: `SessionRecord` from `@spy4x/server/sign-in` plus the key that created it.
AuthStore	interface	@spy4x/server/auth	Users, keys and challenges.
AuthUser	interface	@spy4x/server/auth	A signed-in person.
ChallengeOutcome	enum	@spy4x/server/auth	What AuthStore.attemptChallenge found.
IssueChallengeInput	interface	@spy4x/server/auth	Input of AuthStore.issueChallenge.
MAX_EMAIL_LENGTH	constant	@spy4x/server/auth	Longest address normalizeEmail accepts: the limit of an SMTP forward path (RFC 5321).
NewAuthKey	interface	@spy4x/server/auth	The fields a caller supplies for a new key.
ProviderDeps	interface	@spy4x/server/auth	What every provider needs, injected by the app.
SignInResult	interface	@spy4x/server/auth	What a provider returns after a successful sign-up or sign-in.
normalizeEmail	function	@spy4x/server/auth	Trims an address, checks its shape, then lower-cases it; null when it is not an address.
DEFAULT_CODE_MAX_ATTEMPTS	constant	@spy4x/server/auth/email-code	Default number of guesses one challenge allows.
DEFAULT_CODE_TTL_MINUTES	constant	@spy4x/server/auth/email-code	Default lifetime of a code.
EMAIL_CODE_BYTES	constant	@spy4x/server/auth/email-code	Random bytes in a code: 48 bits, rendered as 8 base64url characters.
EMAIL_CODE_METHOD	constant	@spy4x/server/auth/email-code	The `AuthKey.method` of an email-code key.
EMAIL_CODE_PURPOSE	constant	@spy4x/server/auth/email-code	The challenge purpose `requestCode` issues and `verifyCode` checks.
EMAIL_PROOF_PURPOSE	constant	@spy4x/server/auth/email-code	The challenge purpose createEmailProof issues and checks.
EmailCodeError	class	@spy4x/server/auth/email-code	Thrown by EmailCodeSignIn.
EmailCodeErrorReason	type	@spy4x/server/auth/email-code	Why EmailCodeSignIn refused a request.
EmailCodeSignIn	interface	@spy4x/server/auth/email-code	The email-code sign-in provider.
EmailProof	interface	@spy4x/server/auth/email-code	Codes a signed-in user proves an address with, for their own account.
VerifyCodeOptions	interface	@spy4x/server/auth/email-code	Options of EmailCodeSignIn.verifyCode.
createEmailCodeSignIn	function	@spy4x/server/auth/email-code	Creates the email-code sign-in provider.
createEmailProof	function	@spy4x/server/auth/email-code	Creates the codes a signed-in user proves an address with.
MemoryAuthStore	class	@spy4x/server/auth/memory-store	An in-memory AuthStore with the same constraints and atomicity as the Postgres store.
ConfirmableOAuthSignIn	interface	@spy4x/server/auth/oauth	Sign-in with one provider, created with `signUp: "confirm"`.
ConfirmableOAuthSignInOptions	interface	@spy4x/server/auth/oauth	Options of createOAuthSignIn for a sign-in that asks before it creates a user.
DEFAULT_OAUTH_FLOW_KEY_PREFIX	constant	@spy4x/server/auth/oauth	The key prefix createKvOAuthFlowStore writes under by default.
MAX_OAUTH_AVATAR_URL_LENGTH	constant	@spy4x/server/auth/oauth	Longest OAuthProfile.avatarUrl kept, in characters; a longer URL is dropped.
MAX_OAUTH_NAME_LENGTH	constant	@spy4x/server/auth/oauth	Longest OAuthProfile.name kept, in UTF-16 code units; a longer name is cut.
MAX_PENDING_OAUTH_FLOWS	constant	@spy4x/server/auth/oauth	Most flows the memory store keeps pending at once; the oldest is dropped beyond this.
OAuthAuthorization	interface	@spy4x/server/auth/oauth	A started flow: send the browser to `url`, and keep `state` in an HttpOnly cookie until the callback.
OAuthCallbackInput	interface	@spy4x/server/auth/oauth	What the app passes from the callback request.
OAuthConnectCallbackInput	interface	@spy4x/server/auth/oauth	What the app passes from the callback request of a flow started with `connectUrl`.
OAuthConnectResult	interface	@spy4x/server/auth/oauth	A successful connect callback: the user the flow was started for and this provider's key on it.
OAuthFailure	type	@spy4x/server/auth/oauth	Why a callback was refused.
OAuthFlowKv	interface	@spy4x/server/auth/oauth	The key-value client createKvOAuthFlowStore needs.
OAuthFlowStore	interface	@spy4x/server/auth/oauth	Keeps started flows until their callback.
OAuthOutcome	enum	@spy4x/server/auth/oauth	How a successful callback resolved the person.
OAuthPendingFlow	interface	@spy4x/server/auth/oauth	What a started flow needs at its callback.
OAuthPendingSignUp	interface	@spy4x/server/auth/oauth	A callback that would have created a user, with `signUp: "confirm"`.
OAuthProfile	interface	@spy4x/server/auth/oauth	What a provider says about the person who signed in, read from its user-info response.
OAuthProfileContext	interface	@spy4x/server/auth/oauth	What OAuthProviderConfig.completeProfile may use.
OAuthProviderConfig	interface	@spy4x/server/auth/oauth	One provider, supplied by the app.
OAuthSignIn	interface	@spy4x/server/auth/oauth	Sign-in with one provider.
OAuthSignInError	class	@spy4x/server/auth/oauth	Thrown by OAuthSignIn.handleCallback, `confirmSignUp`, `connectUrl` and `handleConnectCallback`.
OAuthSignInResult	interface	@spy4x/server/auth/oauth	A successful callback: the session, plus how the person was resolved and what the provider said.
OAuthTakenFlow	interface	@spy4x/server/auth/oauth	A flow OAuthFlowStore.take returns: the flow as it was put, and its expiry.
createKvOAuthFlowStore	function	@spy4x/server/auth/oauth	A flow store on a shared key-value client, so a callback can land on any process that shares it.
createMemoryOAuthFlowStore	function	@spy4x/server/auth/oauth	The in-process store `createOAuthSignIn` uses when it is given none.
createOAuthSignIn	function	@spy4x/server/auth/oauth	Creates sign-in with one provider.
pkceChallenge	function	@spy4x/server/auth/oauth	The S256 code challenge: base64url (unpadded) of the SHA-256 of the verifier (RFC 7636).
GITHUB_AUTHORIZATION_ENDPOINT	constant	@spy4x/server/auth/oauth-github	GitHub's authorization endpoint.
GITHUB_DEFAULT_SCOPES	constant	@spy4x/server/auth/oauth-github	The scopes that let GitHub answer the person and their addresses.
GITHUB_EMAILS_ENDPOINT	constant	@spy4x/server/auth/oauth-github	GitHub's REST endpoint listing the signed-in person's addresses.
GITHUB_TOKEN_ENDPOINT	constant	@spy4x/server/auth/oauth-github	GitHub's token endpoint.
GITHUB_USER_ENDPOINT	constant	@spy4x/server/auth/oauth-github	GitHub's REST endpoint for the signed-in person.
GitHubOAuthOptions	interface	@spy4x/server/auth/oauth-github	Options of createGitHubOAuthProvider.
createGitHubOAuthProvider	function	@spy4x/server/auth/oauth-github	GitHub as an OAuthProviderConfig, method `oauth:github`.
readGitHubPrimaryEmail	function	@spy4x/server/auth/oauth-github	Reads GitHub's `GET /user/emails` answer: the address marked both `primary: true` and `verified: true`, or null when there is none or the body is not a list of addresses.
readGitHubUser	function	@spy4x/server/auth/oauth-github	Reads GitHub's `GET /user` answer: the numeric `id` as the subject, as a decimal string.
GOOGLE_AUTHORIZATION_ENDPOINT	constant	@spy4x/server/auth/oauth-google	Google's authorization endpoint.
GOOGLE_DEFAULT_SCOPES	constant	@spy4x/server/auth/oauth-google	The scopes that make Google answer `sub`, `email` and `email_verified` (`openid`, `email`), and the person's `name` and `picture` (`profile`).
GOOGLE_TOKEN_ENDPOINT	constant	@spy4x/server/auth/oauth-google	Google's token endpoint.
GOOGLE_USERINFO_ENDPOINT	constant	@spy4x/server/auth/oauth-google	Google's OpenID Connect user-info endpoint.
GoogleOAuthOptions	interface	@spy4x/server/auth/oauth-google	Options of createGoogleOAuthProvider.
createGoogleOAuthProvider	function	@spy4x/server/auth/oauth-google	Google as an OAuthProviderConfig, method `oauth:google`.
readGoogleProfile	function	@spy4x/server/auth/oauth-google	Reads Google's user-info answer.
ChangePasswordInput	interface	@spy4x/server/auth/password	Input of PasswordSignIn.changePassword.
ChangePasswordKeepingSessionsInput	interface	@spy4x/server/auth/password	Input of PasswordSignIn.changePassword for a person who chose to stay signed in on their other devices.
CheckedCredentials	interface	@spy4x/server/auth/password	What PasswordSignIn.checkCredentials returns: whose password matched, and its key.
CompleteResetInput	interface	@spy4x/server/auth/password	Input of PasswordSignIn.completeReset.
CompleteVerificationInput	interface	@spy4x/server/auth/password	Input of PasswordSignIn.completeVerification.
DEFAULT_MAX_RESET_ATTEMPTS	constant	@spy4x/server/auth/password	Guesses allowed per verification code by default.
DEFAULT_MIN_PASSWORD_LENGTH	constant	@spy4x/server/auth/password	Shortest new password accepted by default, in characters (code points).
DEFAULT_RESET_TTL_MINUTES	constant	@spy4x/server/auth/password	How long a reset code lives by default, in minutes.
IssuedReset	interface	@spy4x/server/auth/password	A reset code for the app to deliver to `email`.
IssuedVerification	interface	@spy4x/server/auth/password	A verification code for the app to deliver to `email`.
PASSWORD_METHOD	constant	@spy4x/server/auth/password	The `AuthKey.method` of every key this provider writes.
PASSWORD_RESET_PURPOSE	constant	@spy4x/server/auth/password	The challenge purpose of a password-reset code.
PASSWORD_VERIFY_PURPOSE	constant	@spy4x/server/auth/password	The challenge purpose of an address-verification code.
PasswordCredentials	interface	@spy4x/server/auth/password	Input of PasswordSignIn.signUp and PasswordSignIn.signIn.
PasswordSignIn	interface	@spy4x/server/auth/password	The password provider.
PasswordSignInError	class	@spy4x/server/auth/password	Thrown by every method of PasswordSignIn on a refusal.
PasswordSignInFailure	type	@spy4x/server/auth/password	Why a password operation was refused.
RequestVerificationInput	interface	@spy4x/server/auth/password	Input of PasswordSignIn.requestVerification.
createPasswordSignIn	function	@spy4x/server/auth/password	Creates the password provider.
AUTH_POSTGRES_SCHEMA	constant	@spy4x/server/auth/postgres	The tables, constraints and indexes, as SQL text the app runs as a migration.
AUTH_POSTGRES_SESSION_DEVICES_UPGRADE	constant	@spy4x/server/auth/postgres	Adds `device_name`, `ip_hint` and `last_used_at` to an `auth_sessions` table created from an AUTH_POSTGRES_SCHEMA that did not have them yet (`@spy4x/server` 1.55.0 and earlier).
createPostgresAuthStore	function	@spy4x/server/auth/postgres	Creates an AuthStore over the `AUTH_POSTGRES_SCHEMA` tables.
createPostgresSessionStore	function	@spy4x/server/auth/postgres	Creates a `SessionStore` over the `auth_sessions` table of `AUTH_POSTGRES_SCHEMA`.
ConfigError	class	@spy4x/server/config	Raised by loadConfig when one or more environment variables are missing, blank, or fail the schema.
ConfigIssue	interface	@spy4x/server/config	Why one environment variable was rejected.
EnvReader	interface	@spy4x/server/config	Reads environment values.
MissingEnvError	class	@spy4x/server/config	Raised when a required environment variable is missing or blank.
createEnvReader	function	@spy4x/server/config	An `EnvReader` over a fixed record — what a unit test injects instead of the process environment, so a config or middleware test runs under `--allow-read --allow-env` without any environment variable actually being set.
loadConfig	function	@spy4x/server/config	Read every environment variable `schema` declares and validate them together, once.
readEnvVar	function	@spy4x/server/config	Read one required value now, outside a schema — for the one variable a caller needs before the rest of its configuration can even be assembled (`ENV`, deciding which schema to validate against, for example).
readOptionalEnvVar	function	@spy4x/server/config	Read one value that may be absent: the value, or `undefined` when `name` is unset or blank.
stringBoolean	constant	@spy4x/server/config	`"true"` or `"false"`, exactly — an environment boolean written by a person or a deploy script, not inferred from `"1"`, `"yes"` or an empty string.
systemEnv	constant	@spy4x/server/config	The process environment, read on each call and never at module scope: `Deno.env` on Deno, `process.env` on Node and Bun.
EnvReader	interface	@spy4x/server/config/env	Reads environment values.
MissingEnvError	class	@spy4x/server/config/env	Raised when a required environment variable is missing or blank.
createEnvReader	function	@spy4x/server/config/env	An `EnvReader` over a fixed record — what a unit test injects instead of the process environment, so a config or middleware test runs under `--allow-read --allow-env` without any environment variable actually being set.
readEnvVar	function	@spy4x/server/config/env	Read one required value now, outside a schema — for the one variable a caller needs before the rest of its configuration can even be assembled (`ENV`, deciding which schema to validate against, for example).
readOptionalEnvVar	function	@spy4x/server/config/env	Read one value that may be absent: the value, or `undefined` when `name` is unset or blank.
systemEnv	constant	@spy4x/server/config/env	The process environment, read on each call and never at module scope: `Deno.env` on Deno, `process.env` on Node and Bun.
AES_ALGORITHM	constant	@spy4x/server/crypto	WebCrypto algorithm name.
AES_KEY_BYTES	constant	@spy4x/server/crypto	Key size in bytes.
CryptoError	class	@spy4x/server/crypto	The one error this module throws.
CryptoErrorCode	enum	@spy4x/server/crypto	Failure classes of this module.
CryptoService	class	@spy4x/server/crypto	AES-256-GCM cipher with two entry points that produce **different** keys from the same characters:
DEFAULT_MASK_VISIBLE	constant	@spy4x/server/crypto	Default number of trailing code points maskKey is asked to leave visible.
HEX_KEY_LENGTH	constant	@spy4x/server/crypto	Length of a hex-encoded AES_KEY_BYTES-byte key.
IV_LENGTH	constant	@spy4x/server/crypto	IV size in bytes: 96 bits, the size recommended for GCM.
KEY_BITS	constant	@spy4x/server/crypto	Key size in bits, passed to `crypto.subtle.importKey`.
MASK_LENGTH	constant	@spy4x/server/crypto	Code points in every non-empty hint maskKey returns, whatever the key is.
MASK_VISIBLE_DIVISOR	constant	@spy4x/server/crypto	A hint shows at most one trailing code point per this many code points of the key, so a short key reveals proportionally less than a long one.
MAX_MASK_VISIBLE	constant	@spy4x/server/crypto	Trailing code points maskKey may ever show, whatever a caller asks for.
SecretCipher	interface	@spy4x/server/crypto	The port `server/user-secrets.ts` depends on: any cipher (this AES-GCM one, a KV-backed one, a KMS or HSM client) satisfies the shape, so the caller never names a concrete implementation.
isHexKey	function	@spy4x/server/crypto	True when `hex` is exactly HEX_KEY_LENGTH hex characters.
maskKey	function	@spy4x/server/crypto	Display hint for a key: MASK_LENGTH code points, a run of asterisks followed by a few trailing code points of the key, so a user recognises which key is stored without the hint standing in for the key.
AppliedMigration	interface	@spy4x/server/db	One row of the history table, as a driver reads it back.
DEFAULT_MIGRATIONS_TABLE	constant	@spy4x/server/db	Default history table name, matching the Postgres adapter's.
DEFAULT_MIGRATION_LOCK_RETRY_MS	constant	@spy4x/server/db	How long a runner waits between attempts to take the lock, in milliseconds.
DEFAULT_MIGRATION_LOCK_WAIT_MS	constant	@spy4x/server/db	How long a runner waits for another runner's lock before giving up, in milliseconds.
DEFAULT_POOL_OPTIONS	constant	@spy4x/server/db	Pool defaults.
DEFAULT_SQLITE_FILE	constant	@spy4x/server/db	Default file name, used when no path option and no environment variable are set.
DEFAULT_TRANSACTION_STATEMENTS	constant	@spy4x/server/db	SQLite's own `BEGIN`/`COMMIT`/`ROLLBACK`, which both drivers accept.
DEFAULT_TRANSACTION_WAIT_MS	constant	@spy4x/server/db	How long a statement waits for an open transaction before it gives up.
DbServiceBase	class	@spy4x/server/db	
ENV_NAME	constant	@spy4x/server/db	The environment variable that names the deployment.
FindOneParams	interface	@spy4x/server/db	Arguments to RowMethods.findOne.
MEMORY_PATH	constant	@spy4x/server/db	The SQLite path that names an in-memory database.
Migration	interface	@spy4x/server/db	One pending migration, resolved from disk.
MigrationDelay	type	@spy4x/server/db	A delay, so a test of the bound does not have to sleep through it.
MigrationDriver	interface	@spy4x/server/db	The per-driver half of the runner.
MigrationEditedError	class	@spy4x/server/db	Thrown when a migration file changed after it was applied.
MigrationRenamedError	class	@spy4x/server/db	Thrown when a pending file carries the body of an applied migration whose file is gone.
MigrationReport	interface	@spy4x/server/db	What one run did.
NO_TRANSACTION_SUFFIX	constant	@spy4x/server/db	Suffix that marks a migration which must run outside a transaction.
PROD_FLAG	constant	@spy4x/server/db	The argument that overrides the guard.
PoolOptions	interface	@spy4x/server/db	The pool options createSql applies when a caller overrides nothing.
PostgresConnectionConfig	interface	@spy4x/server/db	Connection fields, read from the caller's environment rather than from `Deno.env` here.
PostgresEnvName	enum	@spy4x/server/db	The environment variable names this module's helpers read.
PostgresIdentifierTransformError	class	@spy4x/server/db	Thrown when the client's own column-name transform would send a table or schema name to Postgres spelled differently than this driver — or purgeDatabase in `postgres-purge.ts` — was given it, before any statement runs.
PostgresMigrationDriver	class	@spy4x/server/db	Applies migrations to Postgres, one transaction per migration.
PostgresMigrationLockError	class	@spy4x/server/db	Thrown when a runner waited out its bound without taking the migration lock.
PostgresMigrationRunInProgressError	class	@spy4x/server/db	Thrown when a second run is started on a driver object that is already running one.
PostgresScopeEndedError	class	@spy4x/server/db	Thrown when a transaction clone is used after its transaction has ended.
PostgresUnexpectedRowError	class	@spy4x/server/db	Thrown when a result row this driver or purgeDatabase (in `postgres-purge.ts`) read back through expectRowShape is not what the query expects.
PurgeOptions	interface	@spy4x/server/db	Options for purgeDatabase.
PurgeResult	interface	@spy4x/server/db	What a purge did, or why it refused.
RowCache	interface	@spy4x/server/db	The cache a DbServiceBase may be given.
RowMethods	interface	@spy4x/server/db	What DbServiceBase.buildMethods returns.
SAFE_ENV_VALUES	constant	@spy4x/server/db	The values of ENV_NAME a purge runs for without PROD_FLAG.
Sql	type	@spy4x/server/db	The tag function `postgres` exposes, narrowed to what this package reads from it.
SqliteDb	class	@spy4x/server/db	A SQLite connection with the pragmas applied and statements prepared on demand.
SqliteDelay	type	@spy4x/server/db	A cancellable delay.
SqliteDriver	interface	@spy4x/server/db	The database handle this adapter drives.
SqliteDriverFactory	type	@spy4x/server/db	Opens a driver.
SqliteEnvName	enum	@spy4x/server/db	Environment variable names this module reads.
SqliteMigrationDriver	class	@spy4x/server/db	The SQLite half of the migration runner.
SqliteOpenOptions	interface	@spy4x/server/db	Options accepted by a driver factory.
SqliteRunResult	interface	@spy4x/server/db	What a write reports back: the driver's own counts, unconverted.
SqliteSchema	interface	@spy4x/server/db	One schema, applied either once or through a caller-supplied upgrade.
SqliteScopeEndedError	class	@spy4x/server/db	Thrown when a handle is used after the transaction it belongs to has ended.
SqliteStatement	interface	@spy4x/server/db	One prepared statement.
SqliteTransactionWaitError	class	@spy4x/server/db	Thrown when a statement waited out SqliteDbOptions.transactionWaitMs.
Transaction	type	@spy4x/server/db	A transaction handle, as `sql.begin` hands it to its callback.
TransactionStatements	interface	@spy4x/server/db	How a transaction is opened and closed, per driver dialect.
applySqliteSchema	function	@spy4x/server/db	Apply `schema` idempotently.
buildPostgresOptions	function	@spy4x/server/db	The driver options createSql passes, as a plain object.
checksumOf	function	@spy4x/server/db	SHA-256 of a migration body, as lower-case hex.
createSql	function	@spy4x/server/db	Build a Postgres client with DEFAULT_POOL_OPTIONS applied.
createSqlFromEnv	function	@spy4x/server/db	Build a client from an environment record, or `undefined` when `DB_HOST` is unset.
discoverMigrations	function	@spy4x/server/db	A file that is not a migration is skipped, not reported: `.gitkeep` is common.
likeContains	function	@spy4x/server/db	`value` with every `\`, `%` and `_` escaped by a backslash, wrapped in `%…%`: a `LIKE` pattern that matches any text containing `value` as it is written.
openSqliteDb	function	@spy4x/server/db	Open a connection, create its directory, and apply the two pragmas.
parseMigrationName	function	@spy4x/server/db	Turn a file name into a Migration: strip the extension, then the `.no_transaction` suffix.
parsePostgresEnv	function	@spy4x/server/db	Parse the Postgres connection settings from an explicit environment record.
purgeDatabase	function	@spy4x/server/db	Drop every base table in `options.schema`, `CASCADE`.
removeSqliteFiles	function	@spy4x/server/db	Delete a database file and its `-wal`/`-shm` sidecars.
resolveSqlitePath	function	@spy4x/server/db	Resolve the database path.
runMigrations	function	@spy4x/server/db	Apply every pending migration under `options.folder`, in sorted file-name order.
AppliedMigration	interface	@spy4x/server/db/migrate	One row of the history table, as a driver reads it back.
Migration	interface	@spy4x/server/db/migrate	One pending migration, resolved from disk.
MigrationDriver	interface	@spy4x/server/db/migrate	The per-driver half of the runner.
MigrationEditedError	class	@spy4x/server/db/migrate	Thrown when a migration file changed after it was applied.
MigrationReader	interface	@spy4x/server/db/migrate	Disk access, as a port.
MigrationRenamedError	class	@spy4x/server/db/migrate	Thrown when a pending file carries the body of an applied migration whose file is gone.
MigrationReport	interface	@spy4x/server/db/migrate	What one run did.
NO_TRANSACTION_SUFFIX	constant	@spy4x/server/db/migrate	Suffix that marks a migration which must run outside a transaction.
checksumOf	function	@spy4x/server/db/migrate	SHA-256 of a migration body, as lower-case hex.
denoMigrationReader	constant	@spy4x/server/db/migrate	Deprecated: Use fileMigrationReader, the same reader, which runs on every runtime.
discoverMigrations	function	@spy4x/server/db/migrate	A file that is not a migration is skipped, not reported: `.gitkeep` is common.
fileMigrationReader	constant	@spy4x/server/db/migrate	MigrationReader over the real filesystem, on Deno, Node and Bun.
parseMigrationName	function	@spy4x/server/db/migrate	Turn a file name into a Migration: strip the extension, then the `.no_transaction` suffix.
runMigrations	function	@spy4x/server/db/migrate	Apply every pending migration under `options.folder`, in sorted file-name order.
JsonListenerOptions	interface	@spy4x/server/db/notify	Options of listenJson.
MAX_NOTIFY_CHANNEL_BYTES	constant	@spy4x/server/db/notify	The longest channel name, in UTF-8 bytes.
MAX_NOTIFY_PAYLOAD_BYTES	constant	@spy4x/server/db/notify	The longest payload, in UTF-8 bytes of its JSON text, announceJson sends.
NotifyPayloadTooLargeError	class	@spy4x/server/db/notify	The payload is over MAX_NOTIFY_PAYLOAD_BYTES.
announceJson	function	@spy4x/server/db/notify	Sends `payload` as JSON to everyone listening on `channel`.
listenJson	function	@spy4x/server/db/notify	Calls `onMessage` for every JSON payload announced on `channel` that `schema` accepts, and resolves once the channel is subscribed, with a function that stops listening.
DEFAULT_POOL_OPTIONS	constant	@spy4x/server/db/postgres	Pool defaults.
PoolOptions	interface	@spy4x/server/db/postgres	The pool options createSql applies when a caller overrides nothing.
PostgresConnectionConfig	interface	@spy4x/server/db/postgres	Connection fields, read from the caller's environment rather than from `Deno.env` here.
PostgresEnvName	enum	@spy4x/server/db/postgres	The environment variable names this module's helpers read.
buildPostgresOptions	function	@spy4x/server/db/postgres	The driver options createSql passes, as a plain object.
createSql	function	@spy4x/server/db/postgres	Build a Postgres client with DEFAULT_POOL_OPTIONS applied.
createSqlFromEnv	function	@spy4x/server/db/postgres	Build a client from an environment record, or `undefined` when `DB_HOST` is unset.
parsePostgresEnv	function	@spy4x/server/db/postgres	Parse the Postgres connection settings from an explicit environment record.
DEFAULT_MIGRATIONS_TABLE	constant	@spy4x/server/db/sqlite	Default history table name, matching the Postgres adapter's.
DEFAULT_SQLITE_FILE	constant	@spy4x/server/db/sqlite	Default file name, used when no path option and no environment variable are set.
DEFAULT_TRANSACTION_STATEMENTS	constant	@spy4x/server/db/sqlite	SQLite's own `BEGIN`/`COMMIT`/`ROLLBACK`, which both drivers accept.
DEFAULT_TRANSACTION_WAIT_MS	constant	@spy4x/server/db/sqlite	How long a statement waits for an open transaction before it gives up.
MEMORY_PATH	constant	@spy4x/server/db/sqlite	The SQLite path that names an in-memory database.
SqliteDb	class	@spy4x/server/db/sqlite	A SQLite connection with the pragmas applied and statements prepared on demand.
SqliteDelay	type	@spy4x/server/db/sqlite	A cancellable delay.
SqliteDriver	interface	@spy4x/server/db/sqlite	The database handle this adapter drives.
SqliteDriverFactory	type	@spy4x/server/db/sqlite	Opens a driver.
SqliteEnvName	enum	@spy4x/server/db/sqlite	Environment variable names this module reads.
SqliteMigrationDriver	class	@spy4x/server/db/sqlite	The SQLite half of the migration runner.
SqliteOpenOptions	interface	@spy4x/server/db/sqlite	Options accepted by a driver factory.
SqliteRunResult	interface	@spy4x/server/db/sqlite	What a write reports back: the driver's own counts, unconverted.
SqliteSchema	interface	@spy4x/server/db/sqlite	One schema, applied either once or through a caller-supplied upgrade.
SqliteScopeEndedError	class	@spy4x/server/db/sqlite	Thrown when a handle is used after the transaction it belongs to has ended.
SqliteStatement	interface	@spy4x/server/db/sqlite	One prepared statement.
SqliteTransactionWaitError	class	@spy4x/server/db/sqlite	Thrown when a statement waited out SqliteDbOptions.transactionWaitMs.
TransactionStatements	interface	@spy4x/server/db/sqlite	How a transaction is opened and closed, per driver dialect.
applySqliteSchema	function	@spy4x/server/db/sqlite	Apply `schema` idempotently.
openSqliteDb	function	@spy4x/server/db/sqlite	Open a connection, create its directory, and apply the two pragmas.
removeSqliteFiles	function	@spy4x/server/db/sqlite	Delete a database file and its `-wal`/`-shm` sidecars.
resolveSqlitePath	function	@spy4x/server/db/sqlite	Resolve the database path.
TEST_CONNECT_TIMEOUT_SECONDS	constant	@spy4x/server/db/testing	Seconds a test waits for the database; the driver's own default made a dead host look hung.
requireDbConnection	function	@spy4x/server/db/testing	Postgres connection settings for an integration test, read from `DB_HOST`, `DB_PORT`, `DB_USER`, `DB_PASS` and `DB_NAME`.
AGE64_PREFIX	constant	@spy4x/server/env-age64	Prefix every encrypted value carries: `KEY=age64:<base64>`.
AgeKey	interface	@spy4x/server/env-age64	`.age/key.txt`'s two pieces once resolved for a root: where it is, and what it decrypts with.
AgeStatus	interface	@spy4x/server/env-age64	A project's env-encryption posture: what files exist and whether a key is available.
CrlfNotSupportedError	class	@spy4x/server/env-age64	Thrown by parseEnvFile when the content uses CRLF line endings.
EnvAssignment	interface	@spy4x/server/env-age64	One `KEY=value` (or `export KEY=value`) assignment.
EnvEntry	interface	@spy4x/server/env-age64	One line of a parsed env file.
GenerateAgeKeyResult	interface	@spy4x/server/env-age64	Result of generateAgeKey: where the key landed, and its recipient (safe to share).
UnsupportedEnvSyntaxError	class	@spy4x/server/env-age64	Thrown by parseEnvFile on anything it can't safely round-trip.
ageStatus	function	@spy4x/server/env-age64	Inspect `root`'s env files and key, without decrypting anything.
decodeEnvValue	function	@spy4x/server/env-age64	Applies Docker Compose's value rules to the raw text after `=` (an EnvAssignment's `value`): surrounding quotes are removed and a ` # comment` after a closing quote is dropped; an unquoted value ends before ` #` (a space, then `#`), while a `#` after anything else stays (`abc#def`).
decryptEnvFiles	function	@spy4x/server/env-age64	Decrypt every `.env*.age` and `*.env.age` file under `root` to its plaintext sibling, mode `0600`.
decryptValue	function	@spy4x/server/env-age64	Decrypt an `age64:<base64>` value with `identity` (an `AGE-SECRET-KEY-1...` string).
encryptEnvFiles	function	@spy4x/server/env-age64	Re-encrypt every `.env*` and `*.env` file under `root` to its `.age` sibling, mode `0644`, reusing unchanged ciphertext byte-for-byte.
encryptValue	function	@spy4x/server/env-age64	Encrypt one value for `recipient` (an `age1...` string).
generateAgeKey	function	@spy4x/server/env-age64	Generate a fresh identity and write it to `<root>/.age/key.txt`, mode `0600`.
isAge64Value	function	@spy4x/server/env-age64	True when `value` is an `age64:...` ciphertext rather than plaintext.
parseEnvFile	function	@spy4x/server/env-age64	Parse an env file's content into entries.
parseEnvValues	function	@spy4x/server/env-age64	Parses env-file content into `{ KEY: value }` with decodeEnvValue applied; a later line wins over an earlier one.
readAgeKey	function	@spy4x/server/env-age64	Read and parse the `.age/key.txt` that applies to `root` (see resolveKeyFile).
EXPORT_VERSION	constant	@spy4x/server/export	Format version of the envelope.
ExportCollection	interface	@spy4x/server/export	A named collection to include in the envelope.
ExportEnvelope	interface	@spy4x/server/export	The envelope written to the download.
ExportInput	interface	@spy4x/server/export	Input for buildExportEnvelope, all of it caller-supplied.
buildExportEnvelope	function	@spy4x/server/export	Build the versioned export envelope.
exportDownloadHeaders	function	@spy4x/server/export	Build the response headers that make a browser download the body.
exportDownloadResponse	function	@spy4x/server/export	Serialise an envelope and build the download response in one step.
exportFileName	function	@spy4x/server/export	Build `<name>-YYYY-MM-DD.json`, dropping anything that cannot be in a header.
formatLocalDate	function	@spy4x/server/export	Format the calendar day of a date as `YYYY-MM-DD` from the **local** getters.
DEFAULT_PORT	constant	@spy4x/server/healthcheck	Default service port when neither `PORT` nor `HEALTHCHECK_PORT` is set.
DEFAULT_TIMEOUT_MS	constant	@spy4x/server/healthcheck	Default per-step deadline: short enough for a container probe, long enough for a busy loop.
ExitAdapter	interface	@spy4x/server/healthcheck	Process surface used to exit; injected so a test never ends the test runner.
HealthcheckOptions	interface	@spy4x/server/healthcheck	Everything probeLoopback needs.
HealthcheckTimeoutError	class	@spy4x/server/healthcheck	Deadline exceeded.
LOOPBACK_HOSTS	constant	@spy4x/server/healthcheck	The only hosts a probe may target.
ProbeConnection	interface	@spy4x/server/healthcheck	A connected socket, narrowed to what a probe needs: closing it again.
ProbeConnector	interface	@spy4x/server/healthcheck	Opens a socket.
ProbeFailure	type	@spy4x/server/healthcheck	Why a probe failed: a TCP connect that was refused or timed out (`connect_failed`), an HTTP request that got no answer in time (`request_failed`), or an HTTP answer with another status than the expected one (`unexpected_status`).
ProbeFetcher	interface	@spy4x/server/healthcheck	Sends the HTTP request of an HTTP probe.
ProbeResult	interface	@spy4x/server/healthcheck	Probe outcome, kept as data so the caller — not the probe — decides what to do.
ProbeTimer	interface	@spy4x/server/healthcheck	Timer used for deadlines.
denoConnector	constant	@spy4x/server/healthcheck	Adapter over `Deno.connect`.
healthcheckExitCode	function	@spy4x/server/healthcheck	Exit code for the probe: `0` healthy, `1` unhealthy.
nodeConnector	constant	@spy4x/server/healthcheck	Adapter over `node:net`, for Node and Bun, through `@spy4x/platform/server/tcp`'s `nodeTcpConnect`.
probeLoopback	function	@spy4x/server/healthcheck	Probe a loopback port: connect and close again, or, with a `path`, `GET` that path and compare the status.
resolveHealthcheckPort	function	@spy4x/server/healthcheck	Port the healthcheck should probe, from the process environment.
runHealthcheck	function	@spy4x/server/healthcheck	Compute the exit code and terminate the process.
runtimeConnector	constant	@spy4x/server/healthcheck	The connector for the running runtime, used when none is injected: denoConnector on Deno, nodeConnector on Node and Bun.
withDeadline	function	@spy4x/server/healthcheck	Race a step against a deadline, clearing the timer on every path.
AUTHORIZATION_HEADER	constant	@spy4x/server/http/bearer-auth	The header a token is read from.
REDACTED_TOKEN	constant	@spy4x/server/http/bearer-auth	The canonical redaction marker.
TokenVerifier	interface	@spy4x/server/http/bearer-auth	Verifies a bearer token presented by a client.
bearerTokenFromEnv	function	@spy4x/server/http/bearer-auth	Read a bearer token from the environment.
bearerTokenFromHeaders	function	@spy4x/server/http/bearer-auth	Extract the token from `Authorization`.
constantTimeEquals	function	@spy4x/server/http/bearer-auth	Deprecated: Use `constantTimeEqualsText` from `@spy4x/platform/tokens` instead. Compare two tokens in constant time.
createTokenVerifier	function	@spy4x/server/http/bearer-auth	Build a verifier over one configured token.
formatLogLine	function	@spy4x/server/http/bearer-auth	Format a log line with every argument redacted.
redactor	function	@spy4x/server/http/bearer-auth	Redact every occurrence of `secrets` in one log line.
BodySource	interface	@spy4x/server/http/bounded-body	The read surface shared by `Request` and `Response`.
BoundedBodyTimeout	type	@spy4x/server/http/bounded-body	The stall budget, kept under this package's historical name so an existing `import type { BoundedBodyTimeout }` keeps compiling.
FORM_BODY_INVALID	constant	@spy4x/server/http/bounded-body	Message of the 400 readFormBody throws when the body is not a form.
FORM_BODY_TIMEOUT	constant	@spy4x/server/http/bounded-body	Message of the 408 readFormBody throws when the body stalls.
FORM_BODY_TOO_LARGE	constant	@spy4x/server/http/bounded-body	Message of the 413 readFormBody throws when the body is over the cap.
JSON_BODY_INVALID	constant	@spy4x/server/http/bounded-body	Message of the 400 readJsonBody throws when the body is not JSON.
JSON_BODY_TIMEOUT	constant	@spy4x/server/http/bounded-body	Message of the 408 readJsonBody throws when the body stalls.
JSON_BODY_TOO_LARGE	constant	@spy4x/server/http/bounded-body	Message of the 413 readJsonBody throws when the body is over the cap.
JSON_BODY_WRONG_TYPE	constant	@spy4x/server/http/bounded-body	Message of the 415 readJsonBody throws when the request is not declared as JSON.
JsonBodyFailure	interface	@spy4x/server/http/bounded-body	One way a request's JSON body was refused, as ReadJsonBodyOptions.toError receives it.
PayloadTooLargeError	class	@spy4x/server/http/bounded-body	Body exceeded the byte cap.
parseBoundedFormData	function	@spy4x/server/http/bounded-body	Parse a `multipart/form-data` (or url-encoded) request body under the same cap and stall budget as `readBoundedBody`.
readBoundedBody	function	@spy4x/server/http/bounded-body	Read a body into bytes under the hard cap and stall budget.
readBoundedText	function	@spy4x/server/http/bounded-body	Read a body as text, decoding incrementally so the cap is enforced before the whole payload is materialised as one string.
readContentLength	function	@spy4x/server/http/bounded-body	Read the declared `Content-Length`, if the sender provided a usable one.
readFormBody	function	@spy4x/server/http/bounded-body	Read a form post (`application/x-www-form-urlencoded` or `multipart/form-data`) under the byte cap and stall budget, and turn each way it can fail into the HTTP status a client should see.
readJsonBody	function	@spy4x/server/http/bounded-body	Read a Hono request's body as JSON under the byte cap and stall budget, and turn each way it can fail into the HTTP status a client should see.
CORS_ALLOW_HEADERS	constant	@spy4x/server/http/cors	Request headers allow-listed for browser CORS preflight.
CORS_ALLOW_METHODS	constant	@spy4x/server/http/cors	Methods allow-listed for browser CORS preflight.
CorsOriginOptions	interface	@spy4x/server/http/cors	Options for createCorsOriginResolver and resolveAllowedOrigin.
DEV_ORIGIN_HOSTS	constant	@spy4x/server/http/cors	Loopback and wildcard-bind hosts, for `devHosts` in a development build.
createCorsOriginResolver	function	@spy4x/server/http/cors	Build the origin callback `hono/cors` expects.
resolveAllowedOrigin	function	@spy4x/server/http/cors	Decide whether an `Origin` header value may call the API.
HealthCheck	type	@spy4x/server/http/health	One check: resolves `true` when the dependency works.
HealthHandler	type	@spy4x/server/http/health	The handler createHealthHandler returns.
HealthReport	interface	@spy4x/server/http/health	The JSON body of the answer.
HealthStatus	type	@spy4x/server/http/health	What the endpoint says about the service as a whole.
createHealthHandler	function	@spy4x/server/http/health	Builds the handler of a health endpoint.
SAFE_METHODS	constant	@spy4x/server/http/same-origin	Methods that must not change state, and so pass the guard unchecked.
SAME_ORIGIN_REFUSED	constant	@spy4x/server/http/same-origin	Body `error` of the default 403 response.
SameOriginGuardOptions	interface	@spy4x/server/http/same-origin	Options for createSameOriginMutationGuard and createSameOriginUpgradeGuard.
SameOriginRefusal	type	@spy4x/server/http/same-origin	Why the guard refused a request, passed to SameOriginGuardOptions.onReject:
createSameOriginCheck	function	@spy4x/server/http/same-origin	Build the mutation guard's rule as a plain function over a standard `Request`, for a server that is not Hono.
createSameOriginMutationGuard	function	@spy4x/server/http/same-origin	Build a Hono middleware that refuses cross-site mutations.
createSameOriginUpgradeGuard	function	@spy4x/server/http/same-origin	Build a Hono middleware that refuses a WebSocket upgrade from another site.
ExtraSources	type	@spy4x/server/http/security-headers	CSP directives a consumer may widen.
inlineBlockHashes	function	@spy4x/server/http/security-headers	The base64 SHA-256 CSP source of each inline `<script>` or `<style>` block in `html`.
nginxAddHeaders	function	@spy4x/server/http/security-headers	Renders headers as nginx configuration for an `include` file: one `add_header <name> "<value>" always;` line each, every line ended by a newline, so nginx sends them with error pages too.
securityHeaderList	function	@spy4x/server/http/security-headers	The headers securityHeaders sets, as `[name, value]` pairs with the names in lower case, for a server the middleware cannot run in: pass the list to `new Headers(list)`, set each pair on a response, or render it with nginxAddHeaders.
securityHeaders	function	@spy4x/server/http/security-headers	Middleware that sets the headers on every response.
withScriptNonce	function	@spy4x/server/http/security-headers	A copy of `headers` whose Content-Security-Policy also allows scripts that carry `nonce`, for a page rendered with a nonce made for that render (Fresh puts one on each inline script it writes).
withSecurityHeaders	function	@spy4x/server/http/security-headers	A copy of `response` that carries `headers`, for a server securityHeaders cannot run in (Fresh, `Deno.serve`, a worker).
FORWARDED_HEADERS	constant	@spy4x/server/http/trusted-proxy	The three headers in which a request names the client it came from, and which clientIp reads when told to trust a proxy.
IsProxyPeer	type	@spy4x/server/http/trusted-proxy	Tells whether a connection's peer address is one of the trusted proxies.
PROXY_ADDRESS_HARD_MAX_AGE_MS	constant	@spy4x/server/http/trusted-proxy	How long a name's addresses stay trusted after its last successful lookup while later lookups fail or hang.
PROXY_ADDRESS_MAX_AGE_MS	constant	@spy4x/server/http/trusted-proxy	How long looked-up addresses of a proxy answer without a new lookup.
PROXY_LOOKUP_DEADLINE_MS	constant	@spy4x/server/http/trusted-proxy	The longest a call waits for a lookup before it answers from the last good addresses.
PROXY_LOOKUP_RETRY_MS	constant	@spy4x/server/http/trusted-proxy	The least time between the end of a lookup and the next one that an unknown peer starts.
PROXY_LOOKUP_TIMEOUT_MS	constant	@spy4x/server/http/trusted-proxy	The longest a lookup may run.
RequireProxyOptions	interface	@spy4x/server/http/trusted-proxy	Options for requireProxyForForwardedHeaders.
createProxyPeers	function	@spy4x/server/http/trusted-proxy	The trusted proxies, by address.
requireProxyForForwardedHeaders	function	@spy4x/server/http/trusted-proxy	Hono middleware that refuses, with 403 and `{ error: message }`, a request that carries one of the FORWARDED_HEADERS and whose peer is not a trusted proxy (or is unknown).
BeginOutcome	type	@spy4x/server/idempotency	What IdempotencyStore.begin found for a key.
IDEMPOTENCY_LEASE_SECONDS	constant	@spy4x/server/idempotency	Default for how long an unfinished run keeps its claim.
IDEMPOTENCY_POSTGRES_CLAIM_TOKEN_TEXT	constant	@spy4x/server/idempotency	Deprecated: Not needed since 1.64.1: PostgresIdempotencyStore works on a `uuid` column and on a `text` column. The migration release 1.64.0 needed, as SQL text: it widens `claim_token` from `uuid` to `text`.
IDEMPOTENCY_POSTGRES_SCHEMA	constant	@spy4x/server/idempotency	The table and index, as SQL text the app runs as a migration.
IDEMPOTENCY_POSTGRES_USER_ID_TEXT	constant	@spy4x/server/idempotency	A migration, as SQL text, for an app whose user ids are strings (a version 7 UUID, say): it widens `user_id` from `integer` to `text`.
IDEMPOTENCY_RETENTION_DAYS	constant	@spy4x/server/idempotency	Default for how long a stored key stays usable: the longest a client may be offline.
IdempotencyClaim	interface	@spy4x/server/idempotency	The user, key and input a command was sent with.
IdempotencyError	class	@spy4x/server/idempotency	Why a command with an idempotency key was refused before it ran.
IdempotencyErrorCode	type	@spy4x/server/idempotency	
IdempotencyOptions	interface	@spy4x/server/idempotency	What createIdempotencyMiddleware needs.
IdempotencyStore	interface	@spy4x/server/idempotency	Keeps the outcome of every command that carried an idempotency key.
IdempotencyUserId	type	@spy4x/server/idempotency	A user id as the stores key on it: a number, or a string such as a version 7 UUID.
MAX_IDEMPOTENCY_COMMAND_NAME_LENGTH	constant	@spy4x/server/idempotency	The longest command name the stores accept; the Postgres column is `VARCHAR(100)`.
MAX_IDEMPOTENCY_KEY_LENGTH	constant	@spy4x/server/idempotency	The longest key the stores accept; the Postgres column is `VARCHAR(128)`.
MemoryIdempotencyStore	class	@spy4x/server/idempotency	An IdempotencyStore that keeps rows in memory, for tests and single-process tools.
PostgresIdempotencyStore	class	@spy4x/server/idempotency	IdempotencyStore over the `idempotency_keys` table (IDEMPOTENCY_POSTGRES_SCHEMA).
createIdempotencyMiddleware	function	@spy4x/server/idempotency	Makes a command safe to send twice.
fingerprint	function	@spy4x/server/idempotency	A stable SHA-256 hex fingerprint of a command's name and input.
isIdempotencyKey	function	@spy4x/server/idempotency	Whether `key` is usable: 1 to 128 printable ASCII characters.
IMAGE_MAX_PIXELS	constant	@spy4x/server/images	The largest image read unless the caller names another limit: 100 megapixels.
IMAGE_WIDTHS	constant	@spy4x/server/images	The widths made unless the caller names others.
ImageRefusal	enum	@spy4x/server/images	Why an image was not processed.
ImageResult	type	@spy4x/server/images	`{ success, output, error }`: the variants, AVIF then WebP, narrowest first, or the refusal.
ImageVariant	interface	@spy4x/server/images	One stored variant: its file, `Content-Type` and size in pixels.
processImage	function	@spy4x/server/images	Makes the variants of the image at `input` in `outputDir`, named `<width>.avif` and `<width>.webp`, and answers them, or why the image was refused.
RateLimitRedisScriptStore	interface	@spy4x/server/kv	The part of RedisKvStore the store needs.
RateLimitRedisStore	interface	@spy4x/server/kv	The part of RedisKvStore the adapter needs.
RedisKvStore	class	@spy4x/server/kv	A key-value store scoped to one Redis connection and one key prefix.
RedisKvStoreAuthError	class	@spy4x/server/kv	Thrown by RedisKvStore.connect when the server refuses the credentials or demands ones that were not given.
RedisKvStoreClosedError	class	@spy4x/server/kv	Thrown by every method once RedisKvStore.close has been called.
RedisKvStoreConnectionError	class	@spy4x/server/kv	Thrown when a call cannot get its command answered over a live connection: a fresh connection could not be opened in place of a dead one (Redis is still unreachable, or still refuses `PING`), the one resend after a reconnect failed too, or Redis did not answer within the store's fixed command bound.
createRedisRateLimitStore	function	@spy4x/server/kv	Build an atomic `RateLimitStore` over a `RedisKvStore` (the caller keeps ownership and closes it).
redisRateLimitKv	function	@spy4x/server/kv	Turn a Redis store into the `RateLimitKv` port that `createKvStore` from `@spy4x/platform/rate-limit/kv` takes.
DEFAULT_LOCKOUT_POLICY	constant	@spy4x/server/lockout	5 free failures, then 15 minutes doubling up to one day; 7 quiet days reset the count.
Lockout	interface	@spy4x/server/lockout	The begin, fail and refund flow over one store and one policy.
LockoutCheckOptions	interface	@spy4x/server/lockout	Per-check options for Lockout.begin, Lockout.refund and Lockout.fail.
LockoutPolicy	interface	@spy4x/server/lockout	The numbers that decide when a subject is locked and for how long.
LockoutState	interface	@spy4x/server/lockout	One subject's counter, as a store holds it.
LockoutStore	interface	@spy4x/server/lockout	Where counters live: `@spy4x/server/lockout/memory-store` and `@spy4x/server/lockout/postgres`.
LockoutSubject	type	@spy4x/server/lockout	The caller's key for whatever is being guessed: a user id, an e-mail address, a device.
MAX_LOCK_LIMIT_MS	constant	@spy4x/server/lockout	The longest LockoutPolicy.maxLockMs accepted: one year, far inside a `Date`'s range.
beginCheck	function	@spy4x/server/lockout	The state after Lockout.begin counted a check at `now`, and the wait it returns.
createLockout	function	@spy4x/server/lockout	Builds the Lockout flow.
lockDelayMs	function	@spy4x/server/lockout	How long a subject is locked after its `failures`-th wrong guess in a row: nothing up to LockoutPolicy.freeFailures, then LockoutPolicy.firstLockMs doubling per failure, capped at LockoutPolicy.maxLockMs.
resolveLockoutPolicy	function	@spy4x/server/lockout	DEFAULT_LOCKOUT_POLICY with `overrides` applied.
LockoutStoreFullError	class	@spy4x/server/lockout/memory-store	Thrown by MemoryLockoutStore.track, and rejected by `update`, when a new subject meets a full store (see MemoryLockoutStoreOptions.maxEntries).
MemoryLockoutStore	class	@spy4x/server/lockout/memory-store	Counters in a `Map`.
DEFAULT_LOCKOUT_COLUMNS	constant	@spy4x/server/lockout/postgres	`subject`, `failed_attempts`, `locked_until`, `last_failure_at`.
LockoutColumns	interface	@spy4x/server/lockout/postgres	The column names the store reads and writes.
createPostgresLockoutStore	function	@spy4x/server/lockout/postgres	Builds the store.
APPROVAL_CODE_PREFIX	constant	@spy4x/server/mcp-oauth	What every approval code starts with, so a typed password is never taken for one.
APPROVAL_CODE_SHAPE	constant	@spy4x/server/mcp-oauth	The shape of every approval code: APPROVAL_CODE_PREFIX and 43 base64url characters (256 random bits).
AUTHORIZATION_SERVER_METADATA_PATH	constant	@spy4x/server/mcp-oauth	Path of the authorization server metadata document (RFC 8414).
AUTHORIZE_PATH	constant	@spy4x/server/mcp-oauth	Path of the authorization endpoint.
AccessTokenRecord	interface	@spy4x/server/mcp-oauth	An issued access token.
AccessTokenVerifier	interface	@spy4x/server/mcp-oauth	Looks up an access token.
ApprovalCode	interface	@spy4x/server/mcp-oauth	A code createApprovalCode made.
ApprovalCodeRecord	interface	@spy4x/server/mcp-oauth	A one-time approval code the owner made from a shell with `createApprovalCode`.
AuthorizationServer	interface	@spy4x/server/mcp-oauth	What createAuthorizationServer returns.
AuthorizationServerMetadata	interface	@spy4x/server/mcp-oauth	The authorization server metadata document (RFC 8414).
CLAUDE_REDIRECT_URI	constant	@spy4x/server/mcp-oauth	The callback of the hosted Claude apps (claude.ai, Desktop, mobile, Cowork).
ClientMetadata	interface	@spy4x/server/mcp-oauth	What the server keeps from a client's metadata document.
ClientMetadataSource	interface	@spy4x/server/mcp-oauth	Resolves a `client_id` to its metadata.
CodeRecord	interface	@spy4x/server/mcp-oauth	An issued authorization code.
ConsentDetails	interface	@spy4x/server/mcp-oauth	What the consent page shows and submits.
DEFAULT_APPROVAL_CODE_TTL_MS	constant	@spy4x/server/mcp-oauth	Default ApprovalCodeOptions.ttlMs: 5 minutes.
DEFAULT_REDIRECT_URIS	constant	@spy4x/server/mcp-oauth	The default redirect allowlist: the hosted Claude apps' callback, plus the two loopback callbacks Claude Code declares in its client metadata document.
GrantRecord	interface	@spy4x/server/mcp-oauth	One client the owner approved: what `listGrants` shows, so the owner can see who is connected and revoke one without signing every client out.
MAX_APPROVAL_CODE_TTL_MS	constant	@spy4x/server/mcp-oauth	Longest ApprovalCodeOptions.ttlMs allowed: 15 minutes, so a code is never a standing key.
OAuthStore	interface	@spy4x/server/mcp-oauth	Where the authorization server keeps its state.
OAuthStoreContentionError	class	@spy4x/server/mcp-oauth	Thrown by a store that gave up on a write because other writes to the same key kept winning, as `KvOAuthStore` does after 32 conflicts.
OFFLINE_ACCESS_SCOPE	constant	@spy4x/server/mcp-oauth	The scope some clients ask for to get a refresh token.
OWNER_PASSWORD_FIELD	constant	@spy4x/server/mcp-oauth	Name of the password input the consent page sends when `ownerPassword` is set.
OwnerPassword	interface	@spy4x/server/mcp-oauth	The owner password the consent page asks for.
PROTECTED_RESOURCE_METADATA_PATH	constant	@spy4x/server/mcp-oauth	The well-known path prefix of a protected resource metadata document.
PendingAuthorization	interface	@spy4x/server/mcp-oauth	An authorization request that passed every check and waits for the owner's click.
ProtectedResourceMetadata	interface	@spy4x/server/mcp-oauth	The protected resource metadata document (RFC 9728).
REVOKE_PATH	constant	@spy4x/server/mcp-oauth	Path of the token revocation endpoint (RFC 7009).
RefreshTokenRecord	interface	@spy4x/server/mcp-oauth	An issued refresh token.
ResourceGuardEnv	interface	@spy4x/server/mcp-oauth	Hono variables the guard sets.
ResourceServer	interface	@spy4x/server/mcp-oauth	What createResourceServer returns.
TOKEN_PATH	constant	@spy4x/server/mcp-oauth	Path of the token endpoint.
VerifiedAccessToken	interface	@spy4x/server/mcp-oauth	What a valid access token grants.
assertRedirectAllowlist	function	@spy4x/server/mcp-oauth	Check a redirect allowlist at startup: every entry must be an absolute `https:` URL or an `http:` loopback URL, without a fragment or user info.
assertScopes	function	@spy4x/server/mcp-oauth	Check a configured scope list at startup.
canonicalResource	function	@spy4x/server/mcp-oauth	The canonical form of a resource URL (RFC 8707, as the MCP spec uses it): parsed by `URL`, so scheme and host are lower case and a default port is dropped, and without the trailing `/` of a bare origin.
createAccessTokenVerifier	function	@spy4x/server/mcp-oauth	Build an AccessTokenVerifier over the authorization server's store.
createApprovalCode	function	@spy4x/server/mcp-oauth	Make a one-time approval code for an authorization server that asks for the owner password.
createAuthorizationServer	function	@spy4x/server/mcp-oauth	Build the authorization server.
createClientMetadataFetcher	function	@spy4x/server/mcp-oauth	Build a ClientMetadataSource that fetches each document over HTTPS through the SSRF guard, follows no redirect, reads at most `maxBytes`, and accepts the document only when it is valid JSON whose `client_id` equals its URL, lists at least one redirect URI, and declares no token endpoint authentication other than `none` (this server has public clients only).
createResourceServer	function	@spy4x/server/mcp-oauth	Build the metadata document and the guard for one MCP server.
defaultConsentPage	function	@spy4x/server/mcp-oauth	The built-in consent page: what asks, where the code goes, and two buttons.
isClientIdUrl	function	@spy4x/server/mcp-oauth	Is this a well-formed `client_id` URL?
isLoopbackRedirect	function	@spy4x/server/mcp-oauth	True for an `http:` URL on `localhost`, `127.0.0.1` or `[::1]`.
redirectUriMatches	function	@spy4x/server/mcp-oauth	Does a requested `redirect_uri` match a registered one?
KvOAuthStore	class	@spy4x/server/mcp-oauth/kv-store	Keeps every record in Deno KV under `[...prefix, kind, key]`, with `expireIn` set from the record's `expiresAt`, so the database drops it once it has expired.
OAuthKv	interface	@spy4x/server/mcp-oauth/kv-store	The part of a `Deno.Kv` handle that KvOAuthStore uses.
OAuthKvAtomic	interface	@spy4x/server/mcp-oauth/kv-store	The part of a `Deno.AtomicOperation` that KvOAuthStore uses.
OAuthKvEntry	interface	@spy4x/server/mcp-oauth/kv-store	One read from OAuthKv.get: `versionstamp` is `null` when the key is absent.
DEFAULT_MAX_PENDING	constant	@spy4x/server/mcp-oauth/memory-store	Default MemoryOAuthStoreOptions.maxPending: at most about 5 MB of pending consents.
MemoryOAuthStore	class	@spy4x/server/mcp-oauth/memory-store	Keeps every record in a `Map`.
DrainResult	interface	@spy4x/server/outbox	What one `drainOnce` did.
EnsureScheduledOptions	interface	@spy4x/server/outbox	Options of ensureScheduledOutboxEvent.
JobHandler	type	@spy4x/server/outbox	What runs when a job's time has come.
JobPublisher	class	@spy4x/server/outbox	An OutboxPublisher for an outbox that holds two kinds of rows: jobs (the delayed and repeating rows `scheduleOutboxEvent` writes) and everything else.
JobStep	type	@spy4x/server/outbox	One step of a stepsJob: a name for the log, and the work.
LoggingOutboxPublisher	class	@spy4x/server/outbox	
LostOutboxEvent	interface	@spy4x/server/outbox	An event OutboxRepository.findLost returns.
OutboxAttemptFailure	interface	@spy4x/server/outbox	One failed attempt, as `OutboxProcessorOptions.onAttemptFailed` gets it.
OutboxEvent	interface	@spy4x/server/outbox	One outbox row.
OutboxFailureStage	type	@spy4x/server/outbox	Where an attempt failed.
OutboxKindFilter	type	@spy4x/server/outbox	The event kinds a repository claims: only the listed ones, or every kind except the listed ones.
OutboxLeaseExpiredError	class	@spy4x/server/outbox	The `error` of a failure in the `lease` stage: the event's last attempt ended with no outcome reported.
OutboxNextRun	type	@spy4x/server/outbox	When a repeating event runs next: a number of seconds from the database's now, or a moment.
OutboxProcessor	class	@spy4x/server/outbox	
OutboxPublisher	interface	@spy4x/server/outbox	
OutboxRepository	interface	@spy4x/server/outbox	
OutboxSchedule	type	@spy4x/server/outbox	When the job first runs: at a moment, or a number of milliseconds from now.
PostgresOutboxRepository	class	@spy4x/server/outbox	
ReplacedOutboxEvent	interface	@spy4x/server/outbox	A row ensureScheduledOutboxEvent closed because it had used up its attempts.
ScheduledOutboxEvent	interface	@spy4x/server/outbox	The row a job is: what it is called and what it is about.
attemptFailureLine	function	@spy4x/server/outbox	The log line for one failed attempt of an outbox row, for `OutboxProcessorOptions.onAttemptFailed`:
ensureScheduledOutboxEvent	function	@spy4x/server/outbox	Starts a repeating job, once.
errorCodeOf	function	@spy4x/server/outbox	Short, stable label recorded on the row so failures are greppable.
retryDelayMs	function	@spy4x/server/outbox	Exponential backoff on the attempt just made, so the first failure waits `baseMs` and each later one doubles up to `maxMs`.
scheduleOutboxEvent	function	@spy4x/server/outbox	Writes one outbox row that becomes claimable at the given time and returns its id.
stepsJob	function	@spy4x/server/outbox	A job made of independent steps, such as a nightly cleanup that purges several tables.
QuotaDecision	enum	@spy4x/server/quota	What a caller should do with a check: proceed, stop, or turn the feature off.
QuotaError	class	@spy4x/server/quota	The only error a caller has to catch to answer a misconfigured or ill-formed metering call.
QuotaErrorCode	enum	@spy4x/server/quota	Why a quota operation was refused.
QuotaKey	interface	@spy4x/server/quota	The identity of a counter: one principal inside one window.
QuotaMeter	interface	@spy4x/server/quota	The metering surface.
QuotaPolicy	interface	@spy4x/server/quota	The budget a principal is entitled to.
QuotaPrincipal	interface	@spy4x/server/quota	The identity a counter is billed to.
QuotaPrincipalKind	enum	@spy4x/server/quota	Who owns a counter.
QuotaReservation	interface	@spy4x/server/quota	What QuotaStore.reserve answers: whether the units were taken, and the counter after.
QuotaState	interface	@spy4x/server/quota	The metered budget as the UI needs to render it.
QuotaStore	interface	@spy4x/server/quota	The injected persistence port — no DB driver, no KV client, no clock.
SESSION_POOL_PRINCIPAL	constant	@spy4x/server/quota	The principal half of the counter every session principal shares.
createQuotaMeter	function	@spy4x/server/quota	Build a QuotaMeter over an injected policy, store and clock.
quotaKey	function	@spy4x/server/quota	Derive the counter identity for a principal inside the window containing `nowMs`.
quotaStatusCode	function	@spy4x/server/quota	200 for Allowed, 429 for Exhausted, 503 for Unavailable — the status a caller answers with, as a value.
resolveQuotaPrincipal	function	@spy4x/server/quota	Resolve the principal a counter is billed to.
sessionPoolKey	function	@spy4x/server/quota	The key of the shared session pool inside the window containing `nowMs`.
RequestLogWriter	type	@spy4x/server/request-log	Called once per logged line.
requestLog	function	@spy4x/server/request-log	Build the request-log middleware.
BaseMiddlewareOptions	interface	@spy4x/server/request-log/base-middleware	What applyBaseMiddleware needs.
DEFAULT_REQUEST_ID_MAX_LENGTH	constant	@spy4x/server/request-log/base-middleware	Longest `X-Request-Id` kept when BaseMiddlewareOptions.requestIdMaxLength is unset.
MIN_REQUEST_ID_MAX_LENGTH	constant	@spy4x/server/request-log/base-middleware	Smallest `requestIdMaxLength` allowed: the length of the shortest generated id.
applyBaseMiddleware	function	@spy4x/server/request-log/base-middleware	Installs the base middleware on `app`, in this order: `contextStorage`, the request id (the caller's up to the length cap, otherwise 8 random base64url characters), failure reporting, the request log, then `parseAuth`.
Auth	interface	@spy4x/server/sign-in	The middleware and request helpers createAuth returns.
AuthEnv	interface	@spy4x/server/sign-in	The Hono environment the middleware reads and writes.
AuthState	interface	@spy4x/server/sign-in	What `parseAuth` stores under `c.get("auth")` for a valid session.
CreatedSession	interface	@spy4x/server/sign-in	A newly created session and the cookie value that proves it.
DEFAULT_PASSWORD_ITERATIONS	constant	@spy4x/server/sign-in	Default PBKDF2-HMAC-SHA-256 iteration count: 600 000, the figure the OWASP Password Storage Cheat Sheet gives for this function.
MAX_DEVICE_NAME_LENGTH	constant	@spy4x/server/sign-in	Longest stored device name, in UTF-16 units.
MAX_IP_HINT_LENGTH	constant	@spy4x/server/sign-in	Longest stored address hint: the longest spelling of an IP address.
MAX_PASSWORD_BYTES	constant	@spy4x/server/sign-in	Longest password accepted, in UTF-8 bytes.
MAX_SESSION_MINUTES	constant	@spy4x/server/sign-in	Longest session: 400 days, the most a browser keeps a cookie and the most Hono's cookie helper accepts.
NOT_AUTHENTICATED	constant	@spy4x/server/sign-in	Body of the 401 response when there is no valid session.
NOT_AUTHORIZED	constant	@spy4x/server/sign-in	Body of the 403 response when the app's check refuses.
NewSessionDevice	interface	@spy4x/server/sign-in	A SessionDevice and the moment its session was created, as the store receives them.
NewSessionFields	type	@spy4x/server/sign-in	What an app supplies to create a session: its own fields, without what the manager sets.
PasswordCheck	interface	@spy4x/server/sign-in	Outcome of PasswordHasher.verify.
PasswordHasher	interface	@spy4x/server/sign-in	Hashes and verifies passwords under one pepper and iteration count.
SECOND_FACTOR_REQUIRED	constant	@spy4x/server/sign-in	Body of the 401 response when the second factor is still owed.
SESSION_COOKIE_NAME	constant	@spy4x/server/sign-in	Default name of the signed session cookie, as in the template.
SESSION_TOUCH_INTERVAL_MS	constant	@spy4x/server/sign-in	How stale a session's `lastUsedAt` may get before SessionManager.touch writes it again: five minutes.
SecondFactorStatus	enum	@spy4x/server/sign-in	Second-factor state of a session.
SessionCookie	class	@spy4x/server/sign-in	Reads, writes and clears the session cookie on a Hono context.
SessionDevice	interface	@spy4x/server/sign-in	What a session remembers about the device that signed in, for a "signed-in devices" list.
SessionListEntry	interface	@spy4x/server/sign-in	One live session of a user, as SessionManager.listForUser returns it.
SessionManager	class	@spy4x/server/sign-in	Creates, validates, extends and ends sessions over an app-supplied SessionStore.
SessionRecord	interface	@spy4x/server/sign-in	The fields the session logic reads.
SessionStatus	enum	@spy4x/server/sign-in	Lifecycle of a stored session.
SessionStore	interface	@spy4x/server/sign-in	Persistence for sessions, implemented by the app.
TOTP_DIGITS	constant	@spy4x/server/sign-in	Digits in a code.
TOTP_PERIOD_SECONDS	constant	@spy4x/server/sign-in	Seconds per time step.
TOTP_WINDOW	constant	@spy4x/server/sign-in	Steps accepted on either side of the current one, to absorb clock drift.
TotpAccount	interface	@spy4x/server/sign-in	How the account appears in the authenticator app.
TotpEnrolment	interface	@spy4x/server/sign-in	What a user needs to add the account to an authenticator app.
TotpVerifyOptions	interface	@spy4x/server/sign-in	Options for verifyTotp.
USER_ID_COOKIE_NAME	constant	@spy4x/server/sign-in	Default name of the readable user-id cookie, as in the template.
ValidSession	interface	@spy4x/server/sign-in	A session that passed SessionManager.validate.
cleanSessionDevice	function	@spy4x/server/sign-in	A SessionDevice that any store can hold, from whatever the app passed: control characters removed, lone surrogates replaced, the name cut to MAX_DEVICE_NAME_LENGTH and the hint to MAX_IP_HINT_LENGTH.
createAuth	function	@spy4x/server/sign-in	Builds the session middleware and guards over one SessionManager and SessionCookie.
createPasswordHasher	function	@spy4x/server/sign-in	Creates a PasswordHasher.
generateTotpSecret	function	@spy4x/server/sign-in	A new random secret: 20 bytes, base32 without padding (32 characters).
isPasswordHash	function	@spy4x/server/sign-in	True when `stored` is a value PasswordHasher.verify can match: exactly one of the two formats, with an iteration count in the accepted range.
secondFactorSatisfied	function	@spy4x/server/sign-in	Whether a session's second-factor status lets a request through.
totpEnrolment	function	@spy4x/server/sign-in	The enrolment link and QR code for a secret.
verifyTotp	function	@spy4x/server/sign-in	Checks a code against a secret at the current time.
HiddenLine	class	@spy4x/server/sign-in/password-hash	A line typed at the hidden prompt, fed one byte at a time.
KeyResult	enum	@spy4x/server/sign-in/password-hash	What one byte typed at the hidden prompt does.
PasswordHashInput	interface	@spy4x/server/sign-in/password-hash	Where runPasswordHash gets its two inputs.
PasswordHashResult	interface	@spy4x/server/sign-in/password-hash	What runPasswordHash prints: the hash on success, otherwise a message without secrets.
eraseLastCharacter	function	@spy4x/server/sign-in/password-hash	Removes the last character from UTF-8 `bytes`, however many bytes it takes: the continuation bytes (`10xxxxxx`) and the byte that starts it.
passwordFromInput	function	@spy4x/server/sign-in/password-hash	The password in piped input: everything but one trailing `\n` or `\r\n`.
runPasswordHash	function	@spy4x/server/sign-in/password-hash	Hashes the password `input` reads under its pepper.
KNOWN_EXTENSIONS	constant	@spy4x/server/static	Every extension the MIME table knows, for docs and for tests.
StaticFileHandle	interface	@spy4x/server/static	A file opened for streaming, returned by StaticFs.open.
StaticFileInfo	interface	@spy4x/server/static	Statistics the adapter needs from a filesystem entry.
StaticFs	interface	@spy4x/server/static	Filesystem surface the static handler needs; injected so tests need no files.
StaticPathResolution	type	@spy4x/server/static	Result of resolving a request path against the static root.
StaticRejection	type	@spy4x/server/static	Why a request path was refused.
contentTypeFor	function	@spy4x/server/static	Content type for a path, from its extension, case-insensitively.
denoStaticFs	constant	@spy4x/server/static	Filesystem implementation backed by `Deno.*`, the default on Deno.
isPathInsideRoot	function	@spy4x/server/static	True when `candidate` is inside `root`.
nodeStaticFs	constant	@spy4x/server/static	Filesystem implementation over `node:fs/promises`, for Node and Bun (Bun implements Node's `fs`).
resolveStaticPath	function	@spy4x/server/static	Join a request pathname to a static root, refusing anything that could escape it.
runtimeStaticFs	constant	@spy4x/server/static	The files of the running runtime: denoStaticFs on Deno, nodeStaticFs on Node and Bun.
serveFile	function	@spy4x/server/static	Answer `request` with the file at `path`, on Deno, Node and Bun: the runtime-neutral counterpart of `serveFile` from `@std/http/file-server`.
serveStatic	function	@spy4x/server/static	Serve one request path from the static root.
BucketStorage	interface	@spy4x/server/storage	A `FileStorage` provider bound to one bucket, with the bucket argument removed.
DEFAULT_EXPIRES_IN_SECONDS	constant	@spy4x/server/storage	Fallback URL lifetime, and the ceiling S3 itself enforces.
DEFAULT_LOCAL_BASE_PATH	constant	@spy4x/server/storage	Default base directory, relative to the process working directory.
DEFAULT_S3_REGION	constant	@spy4x/server/storage	Default AWS region; overridden by configuration, never read from the environment here.
DefaultBucketStorage	class	@spy4x/server/storage	Bind a provider to one bucket.
FileStorage	interface	@spy4x/server/storage	Wire-level object storage provider.
LocalStorage	class	@spy4x/server/storage	Local-filesystem provider for development.
MAX_PRESIGN_EXPIRES_IN_SECONDS	constant	@spy4x/server/storage	
ObjectFs	interface	@spy4x/server/storage	Minimal object-store filesystem port.
PresignCredentials	interface	@spy4x/server/storage	Credentials for one presign.
PresignGetOptions	interface	@spy4x/server/storage	Options of `S3Storage.presignGet`: how the store labels the file it sends back.
PresignOptions	interface	@spy4x/server/storage	Per-call presign overrides.
PresignPutOptions	interface	@spy4x/server/storage	Options of `S3Storage.presignPut`: the one type and the one size the upload may have.
PresignRequest	interface	@spy4x/server/storage	Everything SigV4 needs to describe the request being signed.
S3ListOptions	interface	@spy4x/server/storage	Options of `S3Storage.list`.
S3ListPage	interface	@spy4x/server/storage	One page of `S3Storage.list`.
S3ListedObject	interface	@spy4x/server/storage	One object in a `S3Storage.list` page.
S3ObjectInfo	interface	@spy4x/server/storage	What `S3Storage.head` reports about one object.
S3Storage	class	@spy4x/server/storage	S3-compatible provider and client: presigned PUT and GET URLs for browsers, head, ranged read, copy, delete and list, for AWS, MinIO and Garage.
SNIFFABLE_CONTENT_TYPES	constant	@spy4x/server/storage	Every type matchesContentType can confirm.
SNIFF_BYTES	constant	@spy4x/server/storage	How many leading bytes matchesContentType looks at; more are ignored.
StorageEnvName	enum	@spy4x/server/storage	Environment variable names this package reads.
StorageError	class	@spy4x/server/storage	Storage failure carrying a machine-readable `code`, the operation that failed and any HTTP status the backend returned, so a caller can retry or re-map the failure without parsing the message.
StorageErrorCode	type	@spy4x/server/storage	Error codes a caller can branch on without matching on a message string.
StorageProviderKey	type	@spy4x/server/storage	The two selectable backends, as the wire name used in `FILE_STORAGE_PROVIDER`.
UploadBody	type	@spy4x/server/storage	Object payload accepted by `FileStorage.upload`.
assertBucket	function	@spy4x/server/storage	Validate a bucket name.
createBucketStorage	function	@spy4x/server/storage	Build a bucket-bound storage from an already-constructed provider.
createDenoObjectFs	function	@spy4x/server/storage	`ObjectFs` backed by `Deno`.
createMemoryObjectFs	function	@spy4x/server/storage	In-memory `ObjectFs`.
createStorage	function	@spy4x/server/storage	Read the environment, then build the configured storage.
createStorageFrom	function	@spy4x/server/storage	Build the configured storage from an explicit configuration.
defaultS3Endpoint	function	@spy4x/server/storage	AWS's regional S3 endpoint, used when `config.endpoint` is not set.
encodeRfc3986	function	@spy4x/server/storage	Percent-encode per RFC 3986.
encodeS3Path	function	@spy4x/server/storage	Encode an object key for the canonical URI, keeping `/` as the separator.
ensureFileDirectory	function	@spy4x/server/storage	Create the directory holding `filePath`, with every missing parent.
formatAmzDate	function	@spy4x/server/storage	`YYYYMMDDTHHMMSSZ`, the only timestamp format SigV4 accepts.
isSafeObjectPath	function	@spy4x/server/storage	Report whether one path is safe to join onto a bucket: relative, free of a scheme, a backslash or a NUL byte, and free of a `..` segment.
loadStorageProvider	function	@spy4x/server/storage	Load and construct a provider by dynamic `import()`.
matchesContentType	function	@spy4x/server/storage	Whether `bytes`, the start of a file, are what `contentType` says.
parseExpiresIn	function	@spy4x/server/storage	Parse an expiry from either a number or an environment string.
parseStorageEnv	function	@spy4x/server/storage	Parse storage configuration from an explicit environment record.
resolveObjectKey	function	@spy4x/server/storage	Validate a bucket and an object key and return them joined.
resolveStoragePath	function	@spy4x/server/storage	Build `${basePath}/${bucket}/${path}` for the local provider.
signS3Request	function	@spy4x/server/storage	Build a SigV4 query-string presigned URL for one S3 request.
storageEnvNames	function	@spy4x/server/storage	Every variable this package reads, for a startup configuration check.
AddSubscriberInput	interface	@spy4x/server/subscribers	The input of SubscriberStore.add.
AddSubscriberResult	type	@spy4x/server/subscribers	What SubscriberStore.add did: stored the address, found it already there, or refused a confirm link issued before the address last unsubscribed.
CONFIRM_TTL_MS	constant	@spy4x/server/subscribers	How long a confirm link works: three days.
ConfirmOutcome	type	@spy4x/server/subscribers	What confirming led to.
ConfirmPreview	type	@spy4x/server/subscribers	What a confirm link leads to, before anything is stored.
ConfirmTokenResult	type	@spy4x/server/subscribers	What SubscriptionCrypto.verifyConfirmToken found.
FinishSendInput	interface	@spy4x/server/subscribers	The input of SendLog.finish.
FlowDeps	interface	@spy4x/server/subscribers	Everything the flows need.
FlowRequest	interface	@spy4x/server/subscribers	What the app knows about the request.
MailOutcome	type	@spy4x/server/subscribers	What a mail callback may answer: nothing (it throws on failure) or a sender's result, such as `@spy4x/email`'s `SendResult`.
RemoveSubscriberInput	interface	@spy4x/server/subscribers	The input of SubscriberStore.remove.
SendIssueLog	interface	@spy4x/server/subscribers	Where a send writes.
SendIssueResult	type	@spy4x/server/subscribers	What a sendIssue run did.
SendLock	interface	@spy4x/server/subscribers	A held send lock.
SendLog	interface	@spy4x/server/subscribers	Where a send remembers what it did, so a repeated run mails nobody twice and a rerun after a partial failure mails only the people it missed.
SendLogEntry	interface	@spy4x/server/subscribers	One issue's record in a SendLog: who was meant to get it and who already did.
StartSendInput	interface	@spy4x/server/subscribers	The input of SendLog.start.
SubscribeRequestOutcome	interface	@spy4x/server/subscribers	The answer to a subscribe request.
Subscriber	interface	@spy4x/server/subscribers	One address on a mailing list.
SubscriberLimits	interface	@spy4x/server/subscribers	Optional rate limits, any `@spy4x/platform/rate-limit` limiter.
SubscriberLog	interface	@spy4x/server/subscribers	Where the flows write.
SubscriberMail	type	@spy4x/server/subscribers	A mail the flows ask the app to send.
SubscriberStore	interface	@spy4x/server/subscribers	Where a mailing list lives.
SubscriptionCrypto	interface	@spy4x/server/subscribers	Tokens and keyed hashes for one mailing list.
TOKEN_PAGE_HEADERS	constant	@spy4x/server/subscribers	Headers for every page that a token opens or a token form posts to.
UNSUBSCRIBE_FORM_MAX_BYTES	constant	@spy4x/server/subscribers	The form-body cap unsubscribeTokenFrom applies by default: a token is a few hundred bytes, so 4 KiB fits any real form and nothing more.
UnsubscribeLookup	type	@spy4x/server/subscribers	The lookups SubscriptionCrypto.verifyUnsubscribeToken needs.
UnsubscribeOutcome	type	@spy4x/server/subscribers	What unsubscribing led to.
UnsubscribePreview	type	@spy4x/server/subscribers	What an unsubscribe link leads to, before anything is removed.
UnsubscribeTokenOptions	interface	@spy4x/server/subscribers	Options of unsubscribeTokenFrom.
confirmSubscription	function	@spy4x/server/subscribers	Adds the address a confirm token carries, then asks for the welcome mail.
createListSubscriptionCrypto	function	@spy4x/server/subscribers	createSubscriptionCrypto for one of several lists over one secret.
createSubscriptionCrypto	function	@spy4x/server/subscribers	Creates the tokens and keyed hashes of one mailing list over one secret.
previewConfirmation	function	@spy4x/server/subscribers	Checks a confirm token without storing anything: the page a link opens shows this and asks for a click, so a mail scanner that follows links subscribes no one.
previewUnsubscribe	function	@spy4x/server/subscribers	Finds whom an unsubscribe token names without removing anything: the page a link opens shows this and asks for a click.
requestSubscription	function	@spy4x/server/subscribers	Mails a confirm link to the address in `field` (a form's raw email field).
sendIssue	function	@spy4x/server/subscribers	Mails one issue to the list, one mail each, with the recipient's own unsubscribe link in the body and in the one-click `List-Unsubscribe` header.
unsubscribe	function	@spy4x/server/subscribers	Removes the address an unsubscribe token names and records the unsubscribe, so a confirm link issued earlier cannot bring it back.
unsubscribeTokenFrom	function	@spy4x/server/subscribers	The unsubscribe token of a request: the `token` query parameter first, as a mail client's one-click POST (RFC 8058) keeps it on the URL with an unrelated body, then the `token` field of a form body read under `maxBytes`.
FileSubscriberStore	interface	@spy4x/server/subscribers/file	A SubscriberStore on disk, plus the one-time key backfill.
LockUnavailableError	class	@spy4x/server/subscribers/file	Raised when another holder owns the lock.
SubscriberFileError	class	@spy4x/server/subscribers/file	A list or unsubscribe record on disk that this store cannot use.
createFileSendLog	function	@spy4x/server/subscribers/file	A SendLog kept in one JSON file, reading antonshubin.com's `newsletter-log.json` unchanged: an array with one object per issue, keyed by `slug`.
createFileSubscriberStore	function	@spy4x/server/subscribers/file	A SubscriberStore in a JSON file, for a single server or a few processes on one disk.
AddSubscriberInput	interface	@spy4x/server/subscribers/memory	The input of SubscriberStore.add.
AddSubscriberResult	type	@spy4x/server/subscribers/memory	What SubscriberStore.add did: stored the address, found it already there, or refused a confirm link issued before the address last unsubscribed.
RemoveSubscriberInput	interface	@spy4x/server/subscribers/memory	The input of SubscriberStore.remove.
Subscriber	interface	@spy4x/server/subscribers/memory	One address on a mailing list.
SubscriberStore	interface	@spy4x/server/subscribers/memory	Where a mailing list lives.
createMemorySendLog	function	@spy4x/server/subscribers/memory	A SendLog held in this process, for tests and single-process prototypes.
createMemorySubscriberStore	function	@spy4x/server/subscribers/memory	A SubscriberStore held in this process, for tests and single-process prototypes.
PostgresSubscribersOptions	interface	@spy4x/server/subscribers/postgres	What the Postgres subscriber store and send log are created for.
SUBSCRIBERS_POSTGRES_SCHEMA	constant	@spy4x/server/subscribers/postgres	The three tables, as SQL text the app runs as a migration.
createPostgresSendLog	function	@spy4x/server/subscribers/postgres	A SendLog over the `subscriber_sends` table (SUBSCRIBERS_POSTGRES_SCHEMA) for the list `listId`.
createPostgresSubscriberStore	function	@spy4x/server/subscribers/postgres	A SubscriberStore over the `subscribers` and `subscriber_unsubscribes` tables (SUBSCRIBERS_POSTGRES_SCHEMA) for the list `listId`.
MAX_API_KEY_LENGTH	constant	@spy4x/server/user-secrets	Longest accepted api key: an unbounded string is an unbounded cipher row and an unbounded request body.
MAX_MODEL_LENGTH	constant	@spy4x/server/user-secrets	Longest accepted model name.
MAX_PROVIDER_LENGTH	constant	@spy4x/server/user-secrets	Longest accepted provider name — long enough for `azure-openai-eu-west`, short enough to key on.
MIN_API_KEY_LENGTH	constant	@spy4x/server/user-secrets	Shortest accepted api key.
PROVIDER_PATTERN	constant	@spy4x/server/user-secrets	Shape of a provider name an adapter can actually match.
SaveUserSecretInput	interface	@spy4x/server/user-secrets	
StoredUserSecret	interface	@spy4x/server/user-secrets	A stored row, as the port sees it.
UserSecretError	class	@spy4x/server/user-secrets	The only error this module throws — a code, a constant message and a rejection type identity.
UserSecretErrorCode	enum	@spy4x/server/user-secrets	Failure codes, stable integers so a caller can switch without string matching.
UserSecretPort	interface	@spy4x/server/user-secrets	The injected persistence port.
UserSecretStore	interface	@spy4x/server/user-secrets	
UserSecretSummary	interface	@spy4x/server/user-secrets	What a list/UI may see: metadata plus a hint.
createUserSecretStore	function	@spy4x/server/user-secrets	Builds a store over an injected port and cipher.
AuthenticatedPasskey	interface	@spy4x/server/webauthn	What verifyAuthentication returns on success.
AuthenticationResponse	interface	@spy4x/server/webauthn	An authentication response that passed authenticationResponseSchema.
AuthenticatorTransport	type	@spy4x/server/webauthn	How a browser can reach an authenticator, as `AuthenticatorAttestationResponse.getTransports()` says.
PublicKeyCredentialCreationOptionsJSON	interface	@spy4x/server/webauthn	A variant of PublicKeyCredentialCreationOptions suitable for JSON transmission to the browser to (eventually) get passed into navigator.credentials.create(...) in the browser.
PublicKeyCredentialRequestOptionsJSON	interface	@spy4x/server/webauthn	A variant of PublicKeyCredentialRequestOptions suitable for JSON transmission to the browser to (eventually) get passed into navigator.credentials.get(...) in the browser.
RegisteredPasskey	interface	@spy4x/server/webauthn	What verifyRegistration returns on success: store all of it.
RegistrationResponse	interface	@spy4x/server/webauthn	A registration response that passed registrationResponseSchema.
WEBAUTHN_ALGORITHMS	constant	@spy4x/server/webauthn	COSE algorithm ids accepted for a passkey's key: ES256 (-7) and RS256 (-257).
WEBAUTHN_CHALLENGE_TTL_MS	constant	@spy4x/server/webauthn	How long a challenge stays valid, and the `timeout` the browser is given: five minutes.
WebAuthnChallenge	interface	@spy4x/server/webauthn	A challenge the caller stores between the options and the response.
WebAuthnCredential	interface	@spy4x/server/webauthn	A stored passkey, as verifyRegistration returned it and the caller kept it.
WebAuthnOptions	interface	@spy4x/server/webauthn	What registrationOptions and authenticationOptions produce.
WebAuthnRefusal	type	@spy4x/server/webauthn	Why a response was refused.
WebAuthnRelyingParty	interface	@spy4x/server/webauthn	Who the passkeys belong to: the site, as the browser sees it.
WebAuthnResult	type	@spy4x/server/webauthn	The result of a `verify` function.
authenticationOptions	function	@spy4x/server/webauthn	Options for `navigator.credentials.get()`, requiring user verification.
authenticationResponseSchema	constant	@spy4x/server/webauthn	An authentication response, as `PublicKeyCredential.toJSON()` makes it after `get()`.
registrationOptions	function	@spy4x/server/webauthn	Options for `navigator.credentials.create()`, asking for a discoverable passkey with user verification, ES256 or RS256, and no attestation.
registrationResponseSchema	constant	@spy4x/server/webauthn	A registration response, as `PublicKeyCredential.toJSON()` makes it after `create()`.
verifyAuthentication	function	@spy4x/server/webauthn	Checks an authentication response against the challenge taken from the store and the stored credential whose id is `response.id`.
verifyRegistration	function	@spy4x/server/webauthn	Checks a registration response against the challenge taken from the store.
COMPLETE_REFUSED_BY_RULE	constant	@spy4x/tasks/edit	The codes that mean the repeat rule or the dates are outside what can be reproduced, as opposed to a broken text.
CompleteError	interface	@spy4x/tasks/edit	Why completeTask or reopenTask refused.
CompleteKind	enum	@spy4x/tasks/edit	What a successful change did to the task.
CompleteOutput	interface	@spy4x/tasks/edit	A completed, advanced or reopened task, its text and the text that undoes it.
CompleteResult	type	@spy4x/tasks/edit	The result of completeTask and reopenTask.
CreateOutput	interface	@spy4x/tasks/edit	A new task's text and where to create it.
CreateResult	type	@spy4x/tasks/edit	The result of createTask.
EditField	enum	@spy4x/tasks/edit	The task fields the editor changes.
EditOutput	interface	@spy4x/tasks/edit	An edited task, its patched text and, for a move, the list it goes to.
EditResult	type	@spy4x/tasks/edit	The result of editTask.
KeepMineError	interface	@spy4x/tasks/edit	Why keepMineText refused, and at which step.
KeepMineOutput	interface	@spy4x/tasks/edit	The server's task with my changes on it, and its text.
KeepMineResult	type	@spy4x/tasks/edit	The result of keepMineText.
KeepMineStep	enum	@spy4x/tasks/edit	The step of keepMineText that refused.
NewTaskContext	interface	@spy4x/tasks/edit	What createTask needs besides the fields: the identity, the clock and the list.
NewTaskFields	interface	@spy4x/tasks/edit	The fields a new task can start with.
RebaseKind	enum	@spy4x/tasks/edit	Whether rebaseEdit applied the edit or found a collision.
RebaseResult	type	@spy4x/tasks/edit	The result of rebaseEdit: the applied edit, or the fields that collided.
TaskEdit	interface	@spy4x/tasks/edit	What the editor changed.
collisions	function	@spy4x/tasks/edit	The fields both sides changed, to different values.
completeTask	function	@spy4x/tasks/edit	Completes `task`; a repeating task moves to its next occurrence instead.
createTask	function	@spy4x/tasks/edit	Builds the text for a new task.
editTask	function	@spy4x/tasks/edit	Patches `task.ics` with `edit`.
keepMine	function	@spy4x/tasks/edit	"Keep mine": applies the fields `edit` really changed (against `base`) to `theirs`, overwriting the server's value where both changed the same field and leaving every other server change alone.
keepMineText	function	@spy4x/tasks/edit	"Keep mine" for a change that is stored as whole text: a write that waited in a queue while the server's copy changed.
rebaseEdit	function	@spy4x/tasks/edit	Re-applies `edit`, made on `base`, to `theirs`, the fresh copy from the server.
reopenTask	function	@spy4x/tasks/edit	Reopens a completed task.
ParseTaskResult	type	@spy4x/tasks/model	The result of parseTask: the task, or a message that says why there is none.
PriorityBand	enum	@spy4x/tasks/model	How Tasks.org groups the iCalendar priority numbers 1 to 9 (0 is none).
RepeatFrom	enum	@spy4x/tasks/model	Which date the next occurrence of a repeating task is counted from when it is completed.
Task	interface	@spy4x/tasks/model	One task as a screen shows it.
TaskDate	type	@spy4x/tasks/model	A due or start value.
TaskList	interface	@spy4x/tasks/model	A task list: a CalDAV calendar that holds tasks.
TaskNode	interface	@spy4x/tasks/model	A task with its subtasks, for the tree a list shows.
TaskReminder	interface	@spy4x/tasks/model	A reminder the task carries; `editTask` changes them.
TaskSource	interface	@spy4x/tasks/model	What the CalDAV server hands over for one task.
TaskStatus	enum	@spy4x/tasks/model	The STATUS of a task.
dateDay	function	@spy4x/tasks/model	The calendar day (`YYYY-MM-DD`) on which a due or start value falls for a viewer in `zone`.
dateInstant	function	@spy4x/tasks/model	The instant a due or start value denotes for a viewer in `zone`.
isOpen	function	@spy4x/tasks/model	Whether the task still needs doing: not completed and not cancelled.
parseTask	function	@spy4x/tasks/model	Reads one task.
priorityBand	function	@spy4x/tasks/model	Tasks.org's grouping of the iCalendar priority: 1 to 4 high, 5 medium, 6 to 9 low, 0 none.
QuickAddDue	interface	@spy4x/tasks/quick-add	When the task is due: a calendar date in the given time zone, and a wall-clock time if typed.
QuickAddOptions	interface	@spy4x/tasks/quick-add	Options of parseQuickAdd.
QuickAddPriority	enum	@spy4x/tasks/quick-add	Task priority.
QuickAddResult	interface	@spy4x/tasks/quick-add	The result of parseQuickAdd.
QuickAddSpan	interface	@spy4x/tasks/quick-add	One recognised token, as a half-open range of UTF-16 offsets into the original line.
QuickAddSpanKind	enum	@spy4x/tasks/quick-add	What a recognised token is.
parseQuickAdd	function	@spy4x/tasks/quick-add	Read the tokens out of a quick-add line.
DEFAULT_REMINDER_CATCH_UP_MS	constant	@spy4x/tasks/reminder-runner	How far back the runner catches up unless `catchUpMs` says otherwise: one hour.
DEFAULT_REMINDER_INTERVAL_MS	constant	@spy4x/tasks/reminder-runner	How often the runner ticks unless `intervalMs` says otherwise: once a minute.
DEFAULT_REMINDER_TICK_TIMEOUT_MS	constant	@spy4x/tasks/reminder-runner	How long one tick may take unless `tickTimeoutMs` says otherwise: two minutes.
ReminderNotifyResult	type	@spy4x/tasks/reminder-runner	What `notify` says about one reminder:
ReminderRunner	interface	@spy4x/tasks/reminder-runner	A runner built by createReminderRunner.
ReminderRunnerState	interface	@spy4x/tasks/reminder-runner	What the runner remembers between ticks and across restarts.
ReminderRunnerStep	type	@spy4x/tasks/reminder-runner	Which part of a tick failed, as ReminderRunnerOptions.onError is told.
ReminderStatePort	interface	@spy4x/tasks/reminder-runner	Where the runner keeps its ReminderRunnerState.
createReminderRunner	function	@spy4x/tasks/reminder-runner	Builds a runner; nothing runs until ReminderRunner.start or ReminderRunner.tick.
DueReminder	interface	@spy4x/tasks/reminders	One reminder of one task, placed in time.
ReminderWindow	interface	@spy4x/tasks/reminders	A half-open stretch of time: after `after`, up to and including `upTo`.
dueReminders	function	@spy4x/tasks/reminders	The reminders of the task in `ics` whose moment falls in `window`: after `window.after`, up to and including `window.upTo`, earliest first.
SortMode	enum	@spy4x/tasks/view	How a list shows its tasks.
SortOrderChange	interface	@spy4x/tasks/view	A new `X-APPLE-SORT-ORDER` to write for one task.
TodayView	interface	@spy4x/tasks/view	The Today view.
TreeRow	interface	@spy4x/tasks/view	A task and how deep it sits, for a screen that draws the tree as indented rows.
UPCOMING_DAYS	constant	@spy4x/tasks/view	How many days after today the Upcoming view reaches.
UpcomingDay	interface	@spy4x/tasks/view	The tasks due on one day of the Upcoming view.
buildTree	function	@spy4x/tasks/view	Nests each task under its parent (`parentUid`).
flattenTree	function	@spy4x/tasks/view	The tree as rows, parents before their children.
isOverdue	function	@spy4x/tasks/view	Whether a due value has passed.
reorderTask	function	@spy4x/tasks/view	The `X-APPLE-SORT-ORDER` values to write so that task `uid` sits at `toIndex` among its siblings, as the manual order of sortTasks shows it, without touching more tasks than needed.
searchTasks	function	@spy4x/tasks/view	The tasks that match `query`, in their input order.
sortTasks	function	@spy4x/tasks/view	The tasks in the order `mode` names, as a viewer in `zone` sees them.
todayView	function	@spy4x/tasks/view	Overdue above today.
upcomingView	function	@spy4x/tasks/view	Tomorrow through UPCOMING_DAYS days after today, one entry per day that has tasks, in date order.
CronSchedule	interface	@spy4x/time/cron	A parsed cron expression: the values each field allows, sorted and without repeats.
describeCron	function	@spy4x/time/cron	An English label for a cron expression, for an admin screen: `Every day at 03:00 UTC`, `Every Monday to Friday at 09:00 UTC`, `Every 15 minutes`, `On day 1 of the month at 00:00 UTC`.
nextCronRun	function	@spy4x/time/cron	The first minute that matches `schedule`, strictly after `after`, in UTC.
parseCron	function	@spy4x/time/cron	Parses a five-field cron expression or an alias.
DATE_PATTERNS	constant	@spy4x/time/date	Every date layout detectDatePatterns and parseDateWithPattern know, in the order `detectDatePatterns` lists them: day-first before month-first, so a select's first option is the reading most of the world uses.
DatePattern	type	@spy4x/time/date	How a column writes its dates, such as `"DD.MM.YYYY"`: one of DATE_PATTERNS.
DateRange	interface	@spy4x/time/date	Inclusive calendar range; both ends are `YYYY-MM-DD`.
dayInMonth	function	@spy4x/time/date	The same day number in the month `date` falls in, clipped to that month's length.
daysInMonth	function	@spy4x/time/date	How many days the month `date` falls in has.
detectDatePatterns	function	@spy4x/time/date	Every pattern under which all `samples` read as real dates, in DATE_PATTERNS order.
endOfMonth	function	@spy4x/time/date	Last day of the month `date` falls in — 28, 29, 30 or 31, leap year included.
endOfQuarter	function	@spy4x/time/date	Last day of the calendar quarter `date` falls in.
endOfYear	function	@spy4x/time/date	Last day of the calendar year `date` falls in.
formatIsoDate	function	@spy4x/time/date	The `YYYY-MM-DD` calendar date of midnight-UTC milliseconds.
isSameDay	function	@spy4x/time/date	Whether two values name the same calendar day.
isValidDateRange	function	@spy4x/time/date	Whether a range is two real dates in order.
monthFirstWeekday	function	@spy4x/time/date	Weekday of the first of `date`'s month, counted from the week's own first day.
parseDateWithPattern	function	@spy4x/time/date	Read `text` written in `pattern` as a `YYYY-MM-DD` date, or `null` when it does not fit the pattern or names a day the calendar lacks: `parseDateWithPattern("31.02.2026", "DD.MM.YYYY")` is `null`, never 3 March.
parseIsoDate	function	@spy4x/time/date	Midnight UTC of a calendar date, in milliseconds.
recentIsoDates	function	@spy4x/time/date	The `count` UTC calendar days that end on `now`'s UTC day, oldest first: a chart's x-axis of the last week or month, with today last.
shiftMonth	function	@spy4x/time/date	The first day of the month `months` away from `date`.
startOfMonth	function	@spy4x/time/date	First day of the month `date` falls in.
startOfQuarter	function	@spy4x/time/date	First day of the calendar quarter `date` falls in.
startOfWeek	function	@spy4x/time/date	First day of the week `date` falls in: the Monday, or whichever day the week opens on.
startOfYear	function	@spy4x/time/date	First day of the calendar year `date` falls in.
DateInput	type	@spy4x/time/format	A value a formatter accepts: a `Date`, epoch milliseconds or a string `Date` can parse.
DateLength	type	@spy4x/time/format	A date's length, as `Intl.DateTimeFormat`'s `dateStyle`: `17/10/2026` … `Saturday 17 October 2026`.
DeviceFormat	interface	@spy4x/time/format	What "automatic" resolves to.
FormatSettings	interface	@spy4x/time/format	A person's display settings.
Formatters	interface	@spy4x/time/format	The formatters for one person's settings.
HourCycle	type	@spy4x/time/format	A clock: `h12` shows `3:45 PM`, `h23` shows `15:45`.
createFormatters	function	@spy4x/time/format	Build the formatters for a person's settings.
deviceFormat	function	@spy4x/time/format	The device's locale and zone, as this runtime's `Intl` reports them.
regionHourCycle	function	@spy4x/time/format	The clock a region format uses on its own: `h12` (`3:45 PM`) for `en-US`, `h23` (`15:45`) for `de-DE`.
IcalComponent	interface	@spy4x/time/ical	A `BEGIN:…`/`END:…` block with its properties and nested components.
IcalDateKind	enum	@spy4x/time/ical	Whether a date value is a date, a floating time, a UTC time or a time in a named zone.
IcalDateValue	interface	@spy4x/time/ical	A DATE or DATE-TIME value in a form that keeps its kind through a round trip.
IcalError	interface	@spy4x/time/ical	The error half of IcalResult.
IcalErrorCode	enum	@spy4x/time/ical	Why an operation of this module failed.
IcalParameter	interface	@spy4x/time/ical	One parameter of a property, such as `TZID=Europe/Berlin`.
IcalParseOptions	interface	@spy4x/time/ical	Limits for parseIcal.
IcalProperty	interface	@spy4x/time/ical	One content line: a name, its parameters and its raw (still escaped) value.
IcalResolveOptions	interface	@spy4x/time/ical	Options for resolveInstant.
IcalResult	type	@spy4x/time/ical	`{ success, output, error }`: the output, or why there is none.
IcalWriteDateOptions	interface	@spy4x/time/ical	Options for writeDate.
getParameter	function	@spy4x/time/ical	The first parameter named `name` (any case) of a property, or `undefined`.
getProperties	function	@spy4x/time/ical	Every property named `name` (any case), in document order.
getProperty	function	@spy4x/time/ical	The first property named `name` (any case), or `undefined`.
parseIcal	function	@spy4x/time/ical	Parse one iCalendar object (normally a `VCALENDAR`) into a component tree.
readDate	function	@spy4x/time/ical	Read a DATE or DATE-TIME property as an IcalDateValue, or `undefined` when its value is not a valid date.
readList	function	@spy4x/time/ical	Every item of every property named `name`, such as all CATEGORIES across several lines.
readText	function	@spy4x/time/ical	The unescaped TEXT value of a property (RFC 5545 §3.3.11).
removeProperty	function	@spy4x/time/ical	Remove every property named `name` (any case).
resolveInstant	function	@spy4x/time/ical	The instant a date value denotes, or `undefined` when it has none.
serializeIcal	function	@spy4x/time/ical	Serialise a component tree to iCalendar text with CRLF line breaks, the last line included.
setProperty	function	@spy4x/time/ical	Set the raw value of the first property named `name`, in place, or append a new property.
writeDate	function	@spy4x/time/ical	Write `value` to the property `name` of `component`, keeping its kind: a date gets `VALUE=DATE`, a zoned time gets `TZID`, a UTC time a trailing `Z`.
writeList	function	@spy4x/time/ical	Replace every property named `name` with one line listing `items`, each escaped as TEXT.
writeText	function	@spy4x/time/ical	Escape `text` as TEXT and set it with setProperty, keeping existing parameters.
Duration	interface	@spy4x/time/ical-duration	A duration split into its parts.
durationMs	function	@spy4x/time/ical-duration	A read duration in milliseconds.
readDuration	function	@spy4x/time/ical-duration	A duration as written by another app, or `undefined` when it is not one.
Alarm	interface	@spy4x/time/ical-tasks	A reminder (VALARM) as read.
AlarmInput	interface	@spy4x/time/ical-tasks	A reminder (VALARM) to write.
AlarmOwner	enum	@spy4x/time/ical-tasks	What owns a reminder.
AlarmRelated	enum	@spy4x/time/ical-tasks	What a relative trigger is counted from (`RELATED`, default `START`).
AlarmTrigger	type	@spy4x/time/ical-tasks	The trigger of a reminder.
AlarmTriggerInput	type	@spy4x/time/ical-tasks	The trigger of a reminder to write: `related` defaults to AlarmRelated.Start.
AlarmTriggerKind	enum	@spy4x/time/ical-tasks	Whether a reminder's trigger is an offset or a moment.
CalendarEvent	interface	@spy4x/time/ical-tasks	The fields of an event that apps read.
CompleteTodoError	interface	@spy4x/time/ical-tasks	The error half of CompleteTodoResult.
CompleteTodoErrorCode	enum	@spy4x/time/ical-tasks	Why completeTodo or reopenTodo refused.
CompleteTodoKind	enum	@spy4x/time/ical-tasks	What completeTodo did.
CompleteTodoOutput	interface	@spy4x/time/ical-tasks	What a successful completeTodo reports.
CompleteTodoResult	type	@spy4x/time/ical-tasks	`{ success, output, error }`: the output, or why there is none.
EventPatch	interface	@spy4x/time/ical-tasks	Changes to an event.
EventStatus	enum	@spy4x/time/ical-tasks	The STATUS of an event.
NewOptions	interface	@spy4x/time/ical-tasks	Caller-supplied inputs for a new object.
PatchOptions	interface	@spy4x/time/ical-tasks	Caller-supplied inputs: the clock is never read here.
RelatedTo	interface	@spy4x/time/ical-tasks	A link to another task (RELATED-TO).
RepeatFrom	enum	@spy4x/time/ical-tasks	Which date the next occurrence of a repeating task is counted from when it is completed.
Todo	interface	@spy4x/time/ical-tasks	The fields of a task that apps read.
TodoPatch	interface	@spy4x/time/ical-tasks	Changes to a task.
TodoStatus	enum	@spy4x/time/ical-tasks	The STATUS of a task.
completeTodo	function	@spy4x/time/ical-tasks	Complete the first VTODO of `root` in place, as Tasks.org does.
describeAlarmTrigger	function	@spy4x/time/ical-tasks	An English phrase for a reminder's trigger, such as `15 minutes before due`, `1 hour 30 minutes after start`, `at end` or `Friday, 28 August 2026 at 10:00`.
findMaster	function	@spy4x/time/ical-tasks	The component an app edits: `root` itself, or the first child of that name that is not an override.
newEvent	function	@spy4x/time/ical-tasks	Build a new calendar object holding one VEVENT; see newTodo.
newTodo	function	@spy4x/time/ical-tasks	Build a new calendar object holding one VTODO from `fields`, with UID, DTSTAMP, CREATED and LAST-MODIFIED from `options`.
patchEvent	function	@spy4x/time/ical-tasks	Patch the first VEVENT of `root` in place and return the event as it now reads.
patchTodo	function	@spy4x/time/ical-tasks	Patch the first VTODO of `root` in place and return the task as it now reads.
readEvent	function	@spy4x/time/ical-tasks	Read the first VEVENT of `root` that is not a recurrence override.
readTodo	function	@spy4x/time/ical-tasks	Read the first VTODO of `root` that is not a recurrence override.
reopenTodo	function	@spy4x/time/ical-tasks	Reopen a completed task in place: STATUS becomes `NEEDS-ACTION`, COMPLETED and a `PERCENT-COMPLETE` of 100 are removed.
COMPLETE_REFUSED_BY_RULE	constant	@spy4x/time/ical-tasks-edit	The codes that mean the repeat rule or the dates are outside what can be reproduced, as opposed to a broken text.
CompleteError	interface	@spy4x/time/ical-tasks-edit	Why completeTask or reopenTask refused.
CompleteKind	enum	@spy4x/time/ical-tasks-edit	What a successful change did to the task.
CompleteOutput	interface	@spy4x/time/ical-tasks-edit	A completed, advanced or reopened task, its text and the text that undoes it.
CompleteResult	type	@spy4x/time/ical-tasks-edit	The result of completeTask and reopenTask.
CreateOutput	interface	@spy4x/time/ical-tasks-edit	A new task's text and where to create it.
CreateResult	type	@spy4x/time/ical-tasks-edit	The result of createTask.
EditField	enum	@spy4x/time/ical-tasks-edit	The task fields the editor changes.
EditOutput	interface	@spy4x/time/ical-tasks-edit	An edited task, its patched text and, for a move, the list it goes to.
EditResult	type	@spy4x/time/ical-tasks-edit	The result of editTask.
KeepMineError	interface	@spy4x/time/ical-tasks-edit	Why keepMineText refused, and at which step.
KeepMineOutput	interface	@spy4x/time/ical-tasks-edit	The server's task with my changes on it, and its text.
KeepMineResult	type	@spy4x/time/ical-tasks-edit	The result of keepMineText.
KeepMineStep	enum	@spy4x/time/ical-tasks-edit	The step of keepMineText that refused.
NewTaskContext	interface	@spy4x/time/ical-tasks-edit	What createTask needs besides the fields: the identity, the clock and the list.
NewTaskFields	interface	@spy4x/time/ical-tasks-edit	The fields a new task can start with.
RebaseKind	enum	@spy4x/time/ical-tasks-edit	Whether rebaseEdit applied the edit or found a collision.
RebaseResult	type	@spy4x/time/ical-tasks-edit	The result of rebaseEdit: the applied edit, or the fields that collided.
TaskEdit	interface	@spy4x/time/ical-tasks-edit	What the editor changed.
collisions	function	@spy4x/time/ical-tasks-edit	The fields both sides changed, to different values.
completeTask	function	@spy4x/time/ical-tasks-edit	Completes `task`; a repeating task moves to its next occurrence instead.
createTask	function	@spy4x/time/ical-tasks-edit	Builds the text for a new task.
editTask	function	@spy4x/time/ical-tasks-edit	Patches `task.ics` with `edit`.
keepMine	function	@spy4x/time/ical-tasks-edit	"Keep mine": applies the fields `edit` really changed (against `base`) to `theirs`, overwriting the server's value where both changed the same field and leaving every other server change alone.
keepMineText	function	@spy4x/time/ical-tasks-edit	"Keep mine" for a change that is stored as whole text: a write that waited in a queue while the server's copy changed.
rebaseEdit	function	@spy4x/time/ical-tasks-edit	Re-applies `edit`, made on `base`, to `theirs`, the fresh copy from the server.
reopenTask	function	@spy4x/time/ical-tasks-edit	Reopens a completed task.
ParseTaskResult	type	@spy4x/time/ical-tasks-model	Deprecated: Import from `@spy4x/tasks/model`. The result of parseTask: the task, or a message that says why there is none.
PriorityBand	enum	@spy4x/time/ical-tasks-model	Deprecated: Import from `@spy4x/tasks/model`. How Tasks.org groups the iCalendar priority numbers 1 to 9 (0 is none).
RepeatFrom	enum	@spy4x/time/ical-tasks-model	Deprecated: Import from `@spy4x/tasks/model`. Which date the next occurrence of a repeating task is counted from when it is completed.
Task	interface	@spy4x/time/ical-tasks-model	Deprecated: Import from `@spy4x/tasks/model`. One task as a screen shows it.
TaskDate	type	@spy4x/time/ical-tasks-model	Deprecated: Import from `@spy4x/tasks/model`. A due or start value.
TaskList	interface	@spy4x/time/ical-tasks-model	Deprecated: Import from `@spy4x/tasks/model`. A task list: a CalDAV calendar that holds tasks.
TaskNode	interface	@spy4x/time/ical-tasks-model	Deprecated: Import from `@spy4x/tasks/model`. A task with its subtasks, for the tree a list shows.
TaskReminder	interface	@spy4x/time/ical-tasks-model	Deprecated: Import from `@spy4x/tasks/model`. A reminder the task carries; `editTask` changes them.
TaskSource	interface	@spy4x/time/ical-tasks-model	Deprecated: Import from `@spy4x/tasks/model`. What the CalDAV server hands over for one task.
TaskStatus	enum	@spy4x/time/ical-tasks-model	Deprecated: Import from `@spy4x/tasks/model`. The STATUS of a task.
dateDay	function	@spy4x/time/ical-tasks-model	Deprecated: Import from `@spy4x/tasks/model`. The calendar day (`YYYY-MM-DD`) on which a due or start value falls for a viewer in `zone`.
dateInstant	function	@spy4x/time/ical-tasks-model	Deprecated: Import from `@spy4x/tasks/model`. The instant a due or start value denotes for a viewer in `zone`.
isOpen	function	@spy4x/time/ical-tasks-model	Deprecated: Import from `@spy4x/tasks/model`. Whether the task still needs doing: not completed and not cancelled.
parseTask	function	@spy4x/time/ical-tasks-model	Deprecated: Import from `@spy4x/tasks/model`. Reads one task.
priorityBand	function	@spy4x/time/ical-tasks-model	Deprecated: Import from `@spy4x/tasks/model`. Tasks.org's grouping of the iCalendar priority: 1 to 4 high, 5 medium, 6 to 9 low, 0 none.
DueReminder	interface	@spy4x/time/ical-tasks-reminders	One reminder of one task, placed in time.
ReminderWindow	interface	@spy4x/time/ical-tasks-reminders	A half-open stretch of time: after `after`, up to and including `upTo`.
dueReminders	function	@spy4x/time/ical-tasks-reminders	The reminders of the task in `ics` whose moment falls in `window`: after `window.after`, up to and including `window.upTo`, earliest first.
IcsAddress	interface	@spy4x/time/ics	A calendar address: a bare mailbox address, e.g. `jane@example.com`.
IcsAttendee	interface	@spy4x/time/ics	One `ATTENDEE` property with its optional iTIP parameters.
IcsEvent	interface	@spy4x/time/ics	The single VEVENT to serialise.
IcsEventStatus	enum	@spy4x/time/ics	RFC 5545 §3.8.1.11 `STATUS` property for a VEVENT.
IcsMethod	enum	@spy4x/time/ics	RFC 5545 §3.7.2 iTIP method carried by the `METHOD` property.
IcsOptions	interface	@spy4x/time/ics	Calendar-level properties and the values this writer cannot infer.
IcsPartStat	enum	@spy4x/time/ics	RFC 5545 §3.2.12 `PARTSTAT` participation status.
IcsRole	enum	@spy4x/time/ics	RFC 5545 §3.2.16 `ROLE` parameter values for an attendee.
attendeeLine	function	@spy4x/time/ics	Build the `ATTENDEE` property for an attendee, including whichever of `CN`, `ROLE`, `PARTSTAT` and `RSVP` the caller supplied.
buildVEventLines	function	@spy4x/time/ics	Build the VEVENT property lines, in RFC 5545 §3.6.1 order.
generateIcs	function	@spy4x/time/ics	Serialise one event into a complete iCalendar document.
organizerLine	function	@spy4x/time/ics	Build the `ORGANIZER` property for an address, quoting `CN` per RFC 5545 §3.2.5 and escaping it per RFC 6868.
CONTINUATION_LIMIT	constant	@spy4x/time/ics-core	Octets available to a continuation line: a continuation is prefixed with one SPACE (RFC 5545 §3.1), and that SPACE counts toward the 75-octet limit.
CRLF	constant	@spy4x/time/ics-core	RFC 5545 §3.1 requires CRLF as the content-line separator.
FOLD_LIMIT	constant	@spy4x/time/ics-core	Maximum octets of a content line *excluding* its CRLF line break, per RFC 5545 §3.1 ("Lines of text SHOULD NOT be longer than 75 octets, excluding the line break").
LF	constant	@spy4x/time/ics-core	Bare LF.
assertFoldable	function	@spy4x/time/ics-core	Assert that a logical line fits one physical content line.
foldLine	function	@spy4x/time/ics-core	Fold one logical content line to at most FOLD_LIMIT octets per physical line, per RFC 5545 §3.1.
formatIcsUtc	function	@spy4x/time/ics-core	Format a `Date` as an RFC 5545 UTC DATE-TIME value, `YYYYMMDDTHHMMSSZ`.
icsEscape	function	@spy4x/time/ics-core	Escape a TEXT property value per RFC 5545 §3.3.11.
icsEscapeParameter	function	@spy4x/time/ics-core	Escape a quoted parameter value per RFC 6868.
icsUnescape	function	@spy4x/time/ics-core	Reverse icsEscape.
icsUnescapeParameter	function	@spy4x/time/ics-core	Reverse icsEscapeParameter per RFC 6868 §3.1: `^n` becomes a newline, `^'` a double quote, `^^` a single caret.
joinContentLines	function	@spy4x/time/ics-core	Fold each logical line and terminate every one with CRLF, including the last.
stripControlCharacters	function	@spy4x/time/ics-core	Remove characters RFC 5545 does not allow in content lines: C0 controls except HTAB, LF and CR, plus DEL.
unfoldLines	function	@spy4x/time/ics-core	Unfold every content line in an iCalendar document: a CRLF (or bare LF) followed by SPACE or HTAB continues the previous line (RFC 5545 §3.1).
LocaleOption	interface	@spy4x/time/locale	One entry of a region format picker, from localeOptions.
MonthLabel	interface	@spy4x/time/locale	One month's names in a locale.
REGION_FORMAT_LOCALES	constant	@spy4x/time/locale	Region formats a picker offers: a language with a country, the way people choose how numbers and dates are written.
WeekdayLabel	interface	@spy4x/time/locale	One weekday header: what its column shows, and what that abbreviation stands for.
dayLabel	function	@spy4x/time/locale	Localised "23 August 2026", the date as a person reads it.
localeFirstWeekday	function	@spy4x/time/locale	The day the locale's week starts on, `1` = Monday … `7` = Sunday.
localeOptions	function	@spy4x/time/locale	Region formats as options for a searchable picker, sorted by their name in `displayLocale`.
monthLabel	function	@spy4x/time/locale	Localised "August 2026" for the month `date` falls in.
monthLabels	function	@spy4x/time/locale	Twelve localised month names, January first, as `Intl` writes a month on its own (without a day, so Russian gives the nominative `сентябрь`, not `сентября`).
relativeDayLabel	function	@spy4x/time/locale	A day as a person says it: "Yesterday", "Today", "Tomorrow", otherwise shortDayLabel.
shortDayLabel	function	@spy4x/time/locale	Localised "Thu 15 Oct": weekday, day and month, no year.
weekdayLabels	function	@spy4x/time/locale	Seven localised weekday labels, starting on the locale's own first day.
Period	interface	@spy4x/time/period	A week or a month: an inclusive range of `YYYY-MM-DD` dates and the unit it spans.
PeriodNow	interface	@spy4x/time/period	The instant and the zone that decide which calendar date "today" is.
PeriodOptions	interface	@spy4x/time/period	How a week is laid out.
PeriodUnit	enum	@spy4x/time/period	The length of a period.
currentPeriod	function	@spy4x/time/period	The week or month that contains today in `timeZone`.
periodLabel	function	@spy4x/time/period	The period as a person reads it in their region format: "November 2026" for a month, and "2–8 Nov 2026" or "26 Oct – 1 Nov 2026" for a week, through `Intl.DateTimeFormat`'s `formatRange`, which drops the parts both ends share.
periodOf	function	@spy4x/time/period	The week or month that contains a calendar date.
periodSoFar	function	@spy4x/time/period	The part of `period` up to and including today in `timeZone`: "this month so far".
samePartOf	function	@spy4x/time/period	The same number of days as `soFar` at the start of `other`, to compare like with like: 1 to 3 November against 1 to 3 October.
shiftPeriod	function	@spy4x/time/period	The period `steps` before or after `period`, of the same unit.
Rrule	interface	@spy4x/time/rrule	A parsed repeat rule.
RruleDay	interface	@spy4x/time/rrule	One `BYDAY` entry: a weekday, with an ordinal in a month (`2MO` is 2, `-1FR` is -1).
RruleError	interface	@spy4x/time/rrule	The error half of RruleResult.
RruleErrorCode	enum	@spy4x/time/rrule	Why an operation of this module failed.
RruleFreq	enum	@spy4x/time/rrule	How often the rule repeats.
RruleMonthEnd	enum	@spy4x/time/rrule	How a plain monthly rule treats a month shorter than its day.
RruleResult	type	@spy4x/time/rrule	`{ success, output, error }`: the output, or why there is none.
RruleWeekday	enum	@spy4x/time/rrule	A day of the week, numbered like ISO 8601: Monday is 1, Sunday is 7.
RruleWordKey	type	@spy4x/time/rrule	A key of the catalogs in `./rrule-words/`, which `describeRrule` asks its words for.
RruleWords	interface	@spy4x/time/rrule	The words describeRrule writes in.
describeRrule	function	@spy4x/time/rrule	A label for the rule, such as `Every 2 weeks on Mon, Thu`, `Monthly on the last Friday` or `Daily, 5 times`.
formatRrule	function	@spy4x/time/rrule	Write `rule` as the value of an `RRULE` property (no `RRULE:` prefix), so that parseRrule reads it back to an equal rule.
nextOccurrence	function	@spy4x/time/rrule	The first occurrence of `rule` strictly after `options.after`, as a value of the same kind (and zone) as `options.start`, with the start's time of day.
occurrencesBetween	function	@spy4x/time/rrule	Every occurrence of `rule` from `options.from` to `options.to`, both included, in order, each a value of the same kind (and zone) as `options.start` with the start's time of day.
parseRrule	function	@spy4x/time/rrule	Parse the value of an `RRULE` property (a leading `RRULE:` is accepted).
default	constant	@spy4x/time/rrule-words/ar	The words of `describeRrule` in ar, translated from `./en.ts`, which explains every key.
default	constant	@spy4x/time/rrule-words/de	The words of `describeRrule` in de, translated from `./en.ts`, which explains every key.
default	constant	@spy4x/time/rrule-words/en	The words of `describeRrule` in English, the source every translation is checked against.
default	constant	@spy4x/time/rrule-words/es	The words of `describeRrule` in es, translated from `./en.ts`, which explains every key.
default	constant	@spy4x/time/rrule-words/fr	The words of `describeRrule` in fr, translated from `./en.ts`, which explains every key.
default	constant	@spy4x/time/rrule-words/ja	The words of `describeRrule` in ja, translated from `./en.ts`, which explains every key.
default	constant	@spy4x/time/rrule-words/pt-BR	The words of `describeRrule` in pt-BR, translated from `./en.ts`, which explains every key.
default	constant	@spy4x/time/rrule-words/ru	The words of `describeRrule` in ru, translated from `./en.ts`, which explains every key.
default	constant	@spy4x/time/rrule-words/zh-CN	The words of `describeRrule` in zh-CN, translated from `./en.ts`, which explains every key.
TimeZoneOption	interface	@spy4x/time/tz	One entry of a time zone picker, from timeZoneOptions.
WallClockKind	enum	@spy4x/time/tz	How often a wall clock occurs in a zone on its date.
WallClockResolution	interface	@spy4x/time/tz	The answer of resolveWallClock.
ZoneLabelParts	interface	@spy4x/time/tz	The parts zoneLabel joins, for a caller that writes them in another order.
addDays	function	@spy4x/time/tz	Add `n` days to a `YYYY-MM-DD` date, in `tz` when one is given.
canonicalTimeZone	function	@spy4x/time/tz	`tz` with its spelling normalised where that is safe: only a name with no `/` becomes another zone name.
canonicalTimeZoneOr	function	@spy4x/time/tz	canonicalTimeZone of `value` when it is a real zone, `fallback` otherwise.
canonicalValidTimeZoneOrNull	function	@spy4x/time/tz	canonicalTimeZone of `value`, or `null` when it is missing or not a zone this runtime knows.
dayOfWeek	function	@spy4x/time/tz	Abbreviated weekday name in `tz`, uppercased: `"FRI"`.
formatDateLong	function	@spy4x/time/tz	Format a date as `"Friday, 28 August 2026"` — the date-only row of a confirmation view.
formatDateTimeLong	function	@spy4x/time/tz	Format the wall clock `date` + `time` in `tz` as a long human string.
formatDateTimeShort	function	@spy4x/time/tz	Compact form for email subjects and buttons: `"Fri 28 Aug 04:00"`.
formatInstantLong	function	@spy4x/time/tz	Format an instant in `tz` as a long human string: `"Friday, 28 August 2026 at 04:00"`.
formatInstantShort	function	@spy4x/time/tz	Compact form of an instant in `tz`: `"Fri 28 Aug 04:00"`.
formatTimeOfDay	function	@spy4x/time/tz	Format a wall clock as 24-hour time-of-day, `"11:00"`.
hhmmInTz	function	@spy4x/time/tz	`HH:MM` as `tz` reads the instant `instant`.
isValidTimeZone	function	@spy4x/time/tz	True when `tz` is a zone this runtime's tzdata knows.
isoDateInTz	function	@spy4x/time/tz	`YYYY-MM-DD` as `tz` reads the instant `instant`.
minToHHMM	function	@spy4x/time/tz	Minutes since midnight to a zero-padded `"HH:MM"`.
resolveWallClock	function	@spy4x/time/tz	Tells whether `tz`'s wall clock reads `date` + `time` once, never or twice, and gives the instants.
timeZoneOptions	function	@spy4x/time/tz	Every time zone as an option for a searchable picker, west to east, then by city.
todayInTz	function	@spy4x/time/tz	`YYYY-MM-DD` for today in `tz`.
tzOffsetMinutes	function	@spy4x/time/tz	Minutes east of UTC for `tz` at the instant `instant`.
validTimeZoneOr	function	@spy4x/time/tz	`tz` when it is a real IANA zone, `fallback` otherwise.
zoneCity	function	@spy4x/time/tz	The last path segment of an IANA zone name with underscores as spaces: `America/New_York` is `New York`, `Asia/Ho_Chi_Minh` is `Ho Chi Minh`, `UTC` is `UTC`.
zoneLabel	function	@spy4x/time/tz	A zone as a person reads it, with the offset it has at `at`: `Berlin, Europe · GMT+2`.
zoneOffsetLabel	function	@spy4x/time/tz	The offset of `tz` at `at` as `UTC+7`, `UTC-4`, `UTC+5:30` or `UTC+0`.
zonedDateTime	function	@spy4x/time/tz	The instant at which `tz`'s wall clock reads `date` + `time`.
ErrType	enum	@spy4x/validation	Kind of a failed operation.
FORM_FIELD	constant	@spy4x/validation	Key an issue with no single field is reported under.
FieldError	interface	@spy4x/validation	Why one field failed: arktype's code, and the rule its message quotes.
FieldErrors	type	@spy4x/validation	Failed fields keyed by path as arktype prints it (`"title"`, `"address.city"`, `"items[1]"`).
FieldIssue	interface	@spy4x/validation	One issue on one field.
FieldValidation	type	@spy4x/validation	Issues of one field, keyed by issue type.
SchemaInput	type	@spy4x/validation	Value a schema accepts as input, before parsing.
SchemaOutput	type	@spy4x/validation	Value a schema produces after parsing, morphs applied.
VALIDATION_MESSAGE	constant	@spy4x/validation	The sentence every ValidationError shows the user, whatever the fields said.
ValidationError	interface	@spy4x/validation	Submitted data the schema rejected.
ValidationIssue	interface	@spy4x/validation	One schema issue, flattened for display next to a form field.
ValidationIssues	type	@spy4x/validation	Issues keyed by field path.
ValidationModel	type	@spy4x/validation	Issues of a whole model, keyed by field name.
ValidationResult	type	@spy4x/validation	Outcome of validate: the parsed value, or the error that rejected it.
ValidationType	enum	@spy4x/validation	Issue kinds the schema itself reports.
fieldErrors	function	@spy4x/validation	The failed fields of an arktype rejection, one entry per path.
fieldErrorsSchema	constant	@spy4x/validation	The arktype type of FieldErrors, for a client that reads them off the wire.
firstIssueMessage	function	@spy4x/validation	First issue message in a validation error, in the order arktype reports them.
isArkErrors	function	@spy4x/validation	Whether a value is an arktype rejection, without relying on `instanceof`.
isValid	function	@spy4x/validation	Whether no field carries an issue.
sameValidation	function	@spy4x/validation	Whether two validation models carry the same issues.
schemaIssues	function	@spy4x/validation	The issues arktype reported for a value, keyed by the model field they belong to.
setFieldIssue	function	@spy4x/validation	Set or clear one issue on one field, leaving that field's other issue types alone.
toValidationError	function	@spy4x/validation	Build a ValidationError from arktype's issues.
validate	function	@spy4x/validation	Parse `value` with an arktype schema exactly once.
validateSchema	function	@spy4x/validation	Validate a model against its schema and fold the result into a validation model.
FORM_FIELD	constant	@spy4x/validation/model	Key an issue with no single field is reported under.
FieldIssue	interface	@spy4x/validation/model	One issue on one field.
FieldValidation	type	@spy4x/validation/model	Issues of one field, keyed by issue type.
ValidationModel	type	@spy4x/validation/model	Issues of a whole model, keyed by field name.
ValidationType	enum	@spy4x/validation/model	Issue kinds the schema itself reports.
isValid	function	@spy4x/validation/model	Whether no field carries an issue.
sameValidation	function	@spy4x/validation/model	Whether two validation models carry the same issues.
schemaIssues	function	@spy4x/validation/model	The issues arktype reported for a value, keyed by the model field they belong to.
setFieldIssue	function	@spy4x/validation/model	Set or clear one issue on one field, leaving that field's other issue types alone.
validateSchema	function	@spy4x/validation/model	Validate a model against its schema and fold the result into a validation model.
ErrType	enum	@spy4x/validation/validate	Kind of a failed operation.
SchemaInput	type	@spy4x/validation/validate	Value a schema accepts as input, before parsing.
SchemaOutput	type	@spy4x/validation/validate	Value a schema produces after parsing, morphs applied.
VALIDATION_MESSAGE	constant	@spy4x/validation/validate	The sentence every ValidationError shows the user, whatever the fields said.
ValidationError	interface	@spy4x/validation/validate	Submitted data the schema rejected.
ValidationIssue	interface	@spy4x/validation/validate	One schema issue, flattened for display next to a form field.
ValidationIssues	type	@spy4x/validation/validate	Issues keyed by field path.
ValidationResult	type	@spy4x/validation/validate	Outcome of validate: the parsed value, or the error that rejected it.
firstIssueMessage	function	@spy4x/validation/validate	First issue message in a validation error, in the order arktype reports them.
isArkErrors	function	@spy4x/validation/validate	Whether a value is an arktype rejection, without relying on `instanceof`.
toValidationError	function	@spy4x/validation/validate	Build a ValidationError from arktype's issues.
validate	function	@spy4x/validation/validate	Parse `value` with an arktype schema exactly once.
# export surface: sha256 e82983462e7e85ea27a32f28360d20d4897e2d04dd71c832da2abc58a9931985