@almadar/core 10.44.0 → 10.45.0

package/dist/mock/index.d.ts

@@ -1,7 +1,7 @@
-import { O as OrbitalSchema } from '../schema-DdcBBHkb.js';
-import { a as EntityPersistence, E as EntityField, F as FieldValue, f as EntityRow } from '../effect-NbTgX2yB.js';
-import '../trait-DdBiEffx.js';
-import '../expression-Yf7qvvOs.js';
+import { O as OrbitalSchema } from '../schema-CZNILCHD.js';
+import { S as SExpr } from '../expression-Yf7qvvOs.js';
+import { a as EntityPersistence, E as EntityField, F as FieldValue, f as EntityRow } from '../effect-BZ1nzN3q.js';
+import '../trait-1V3odk0y.js';
 import 'zod';
 
 /**
@@ -84,6 +84,35 @@ declare function identityEntityName(schema: OrbitalSchema): string | undefined;
  */
 declare function ownerFieldsFromSchema(schema: OrbitalSchema): string[];
 
+/**
+ * Entity access policies — the declared `@read`/`@create`/`@update`/`@delete`
+ * directives, keyed by entity name.
+ *
+ * The JS mirror of `orbital-core/src/runtime/entity_access.rs`'s
+ * `EntityAccessPolicies`/`EntityAccessTable`. Both paths must agree: a
+ * directive is a per-row predicate (`@entity` = the candidate row, or for
+ * `@create` the incoming data; `@user` = the viewer), enforced once for
+ * every trait that touches the entity — the un-bypassable twin of a
+ * call-site `filter:`, which sibling traits can skip simply by not
+ * declaring one.
+ *
+ * @packageDocumentation
+ */
+
+/** An entity's four declared directives. Any may be absent — an absent
+ * directive means "no restriction" for that operation, exactly like an
+ * absent fetch `filter:`. */
+interface EntityAccessPolicies {
+    read?: SExpr;
+    create?: SExpr;
+    update?: SExpr;
+    delete?: SExpr;
+}
+/** Every entity's access policies, keyed by entity name. */
+declare function entityAccessTable(schema: OrbitalSchema): Map<string, EntityAccessPolicies>;
+/** One entity's access policies, or `undefined` when it declares none. */
+declare function entityAccessPolicies(schema: OrbitalSchema, entityName: string): EntityAccessPolicies | undefined;
+
 /**
  * The one owner of mock-seed value synthesis.
  *
@@ -146,4 +175,4 @@ declare function sampleRow(entity: SampleEntity, ctx: Omit<SampleContext, 'entit
 /** `count` rows, 1-based, honoring the runtime-singleton gate. */
 declare function sampleRows(entity: SampleEntity, count: number, strategy: SampleStrategy): EntityRow[];
 
-export { IMAGE_FIELD_NAMES, type SampleContext, type SampleEntity, type SampleStrategy, identityEntityName, isDeclaredDefaultHonored, ownerFieldsFromSchema, randomAnytimeDate, randomArrayElement, randomBoolean, randomColor, randomEmail, randomFloat, randomInt, randomPassword, randomPastDate, randomPhone, randomRecentDate, randomSentence, randomUrl, randomUuid, randomWords, sampleFieldValue, sampleImageUrl, sampleRow, sampleRowCount, sampleRows, seedRandom, shuffleArray };
+export { type EntityAccessPolicies, IMAGE_FIELD_NAMES, type SampleContext, type SampleEntity, type SampleStrategy, entityAccessPolicies, entityAccessTable, identityEntityName, isDeclaredDefaultHonored, ownerFieldsFromSchema, randomAnytimeDate, randomArrayElement, randomBoolean, randomColor, randomEmail, randomFloat, randomInt, randomPassword, randomPastDate, randomPhone, randomRecentDate, randomSentence, randomUrl, randomUuid, randomWords, sampleFieldValue, sampleImageUrl, sampleRow, sampleRowCount, sampleRows, seedRandom, shuffleArray };

package/dist/mock/index.js

@@ -191,6 +191,35 @@ function ownerFieldsFromSchema(schema) {
   }
   return out;
 }
+
+// src/access/entityAccess.ts
+function inlineEntities2(schema) {
+  const out = [];
+  for (const orbital of schema.orbitals ?? []) {
+    const refs = [orbital.entity, ...orbital.auxiliaryEntities ?? []];
+    for (const ref of refs) {
+      if (typeof ref === "object" && ref !== null && "fields" in ref) {
+        out.push(ref);
+      }
+    }
+  }
+  return out;
+}
+function entityAccessTable(schema) {
+  const table = /* @__PURE__ */ new Map();
+  for (const def of inlineEntities2(schema)) {
+    table.set(def.name, {
+      read: def.read_policy,
+      create: def.create_policy,
+      update: def.update_policy,
+      delete: def.delete_policy
+    });
+  }
+  return table;
+}
+function entityAccessPolicies(schema, entityName) {
+  return entityAccessTable(schema).get(entityName);
+}
 var ID_PREFIXES = {
   orbital: "orb_",
   entity: "ent_",
@@ -506,6 +535,26 @@ z.object({
   fov: z.number().optional(),
   mode: CameraModeSchema.optional()
 });
+var SExprDataSchema = z.lazy(
+  () => z.union([SExprAtomSchema, z.array(SExprDataSchema)])
+);
+var SExprAtomSchema = z.union([
+  z.string(),
+  z.number(),
+  z.boolean(),
+  z.null(),
+  z.record(SExprDataSchema)
+  // Objects for payload data
+]);
+var SExprSchema = z.lazy(
+  () => z.union([
+    SExprAtomSchema,
+    z.array(z.lazy(() => SExprSchema)).min(1).refine(
+      (arr) => typeof arr[0] === "string",
+      { message: "S-expression array must have a string operator as first element" }
+    )
+  ])
+);
 
 // src/types/entity.ts
 var EntityPersistenceSchema = z.enum([
@@ -521,6 +570,16 @@ z.object({
   // than rejecting them, so a Rust-only field works on the compiled path and
   // silently vanishes on the interpreter path.
   identity: z.boolean().optional(),
+  // Same "must stay in step with Rust serde" hazard as `identity` above —
+  // these four mirror `EntityDefinition.{read,create,update,delete}_policy`.
+  // Rust has no `rename_all` on this struct, so the wire key IS snake_case
+  // (unlike this file's other camelCase fields, which are Rust-side-absent
+  // and so never hit this cross-language constraint — see `visual_prompt`
+  // just below for the existing precedent).
+  read_policy: SExprSchema.optional(),
+  create_policy: SExprSchema.optional(),
+  update_policy: SExprSchema.optional(),
+  delete_policy: SExprSchema.optional(),
   collection: z.string().optional(),
   fields: z.array(EntityFieldSchema).min(1, "At least one field is required"),
   instances: z.array(z.record(JsonValueSchema)).optional(),
@@ -725,6 +784,6 @@ function sampleRows(entity, count, strategy) {
   return rows;
 }
 
-export { IMAGE_FIELD_NAMES, identityEntityName, isDeclaredDefaultHonored, ownerFieldsFromSchema, randomAnytimeDate, randomArrayElement, randomBoolean, randomColor, randomEmail, randomFloat, randomInt, randomPassword, randomPastDate, randomPhone, randomRecentDate, randomSentence, randomUrl, randomUuid, randomWords, sampleFieldValue, sampleImageUrl, sampleRow, sampleRowCount, sampleRows, seedRandom, shuffleArray };
+export { IMAGE_FIELD_NAMES, entityAccessPolicies, entityAccessTable, identityEntityName, isDeclaredDefaultHonored, ownerFieldsFromSchema, randomAnytimeDate, randomArrayElement, randomBoolean, randomColor, randomEmail, randomFloat, randomInt, randomPassword, randomPastDate, randomPhone, randomRecentDate, randomSentence, randomUrl, randomUuid, randomWords, sampleFieldValue, sampleImageUrl, sampleRow, sampleRowCount, sampleRows, seedRandom, shuffleArray };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map