@almadar/runtime 6.45.0 → 6.47.0

package/dist/{OrbitalServerRuntime-A2h0EikK.d.ts → OrbitalServerRuntime-e-5490xl.d.ts}

@@ -1348,6 +1348,15 @@ declare class OrbitalServerRuntime {
     setDefaultUser(user: UserContext | undefined): void;
     /** The viewer a dev host is currently presenting the app as. */
     getDefaultUser(): UserContext | undefined;
+    /**
+     * The registered app's declared persona roster: the live rows of its
+     * `[identity]` entity, mapped onto viewers (`Almadar_LOLO_Identity.md` §4.3).
+     * Live-store rows rather than a re-derivation, so the roster carries the ids
+     * ownership scoping actually compares `@user.id` against. Empty when no
+     * schema is registered or the app declares no `[identity]` entity — there is
+     * no global fallback roster by design.
+     */
+    getIdentityRoster(): Promise<UserContext[]>;
     /**
      * `traitFieldStates` key for one trait: its own name, or — when its linked
      * entity is `[shared]` — `$shared::<entityName>` so every trait bound to

package/dist/OrbitalServerRuntime.d.ts

@@ -1,4 +1,4 @@
 import 'express';
-export { F as ClientEffectTuple, G as ClientNavigateTuple, H as ClientNotifyTuple, J as ClientRenderUITuple, K as EffectResult, e as InMemoryPersistence, M as LiveBroadcastItem, N as LoaderConfig, O as OrbitalEventRequest, f as OrbitalEventResponse, Q as OrbitalServerRuntime, g as OrbitalServerRuntimeConfig, P as PersistenceAdapter, R as RegisteredOrbital, l as RuntimeOrbital, m as RuntimeOrbitalSchema, n as RuntimeTrait, T as RuntimeTraitTick, p as collectDeclaredConfigDefaults, V as createOrbitalServerRuntime } from './OrbitalServerRuntime-A2h0EikK.js';
+export { F as ClientEffectTuple, G as ClientNavigateTuple, H as ClientNotifyTuple, J as ClientRenderUITuple, K as EffectResult, e as InMemoryPersistence, M as LiveBroadcastItem, N as LoaderConfig, O as OrbitalEventRequest, f as OrbitalEventResponse, Q as OrbitalServerRuntime, g as OrbitalServerRuntimeConfig, P as PersistenceAdapter, R as RegisteredOrbital, l as RuntimeOrbital, m as RuntimeOrbitalSchema, n as RuntimeTrait, T as RuntimeTraitTick, p as collectDeclaredConfigDefaults, V as createOrbitalServerRuntime } from './OrbitalServerRuntime-e-5490xl.js';
 import './types-CL03tjGU.js';
 import '@almadar/core';

package/dist/OrbitalServerRuntime.js

@@ -7,8 +7,8 @@ import './chunk-MLKGABMK.js';
 import { createLogger } from '@almadar/logger';
 import * as nodeModule from 'module';
 import { evaluateListenPayloadExpr, evaluateGuard, evaluate } from '@almadar/evaluator';
-import { DEFAULT_VIEWER, buildResolvedTraitConfigs, isInlineTrait, isEntityCall, applyListenPayloadMapping, normalizeUserContext, isRuntimeEntity } from '@almadar/core';
-import { ownerFieldsFromSchema, identityEntityName } from '@almadar/core/mock';
+import { DEFAULT_VIEWER, buildResolvedTraitConfigs, isInlineTrait, isEntityCall, applyListenPayloadMapping, personaFromIdentityRow, normalizeUserContext, isRuntimeEntity } from '@almadar/core';
+import { ownerFieldsFromSchema, identityEntityName, entityAccessPolicies } from '@almadar/core/mock';
 
 // src/identity/routing.ts
 function eventRouteKey(eventName, eventId) {
@@ -33,6 +33,41 @@ function buildSourceMatcher(src, listenerOrbital) {
   const wantedTrait = src.trait;
   return (source) => !!source && source.orbital === wantedOrbital && source.trait === wantedTrait;
 }
+function applyRowAccess(rows, policy, filter, bindings) {
+  if (policy === void 0 && filter === void 0) {
+    return rows;
+  }
+  const predicates = [policy, filter].filter((p) => p !== void 0);
+  return rows.filter((entity) => {
+    const ctx = createContextFromBindings(
+      { entity, payload: bindings.payload, current: entity, user: bindings.user, config: bindings.config },
+      false
+    );
+    return predicates.every((predicate) => {
+      try {
+        return Boolean(evaluate(predicate, ctx));
+      } catch {
+        return false;
+      }
+    });
+  });
+}
+function checkMutationAccess(row, policy, bindings) {
+  if (policy === void 0) {
+    return true;
+  }
+  const ctx = createContextFromBindings(
+    { entity: row, payload: bindings.payload, current: row, user: bindings.user, config: bindings.config },
+    false
+  );
+  try {
+    return Boolean(evaluate(policy, ctx));
+  } catch {
+    return false;
+  }
+}
+
+// src/OrbitalServerRuntime.ts
 var _resolvedNodeRequire = null;
 function nodeRequire(modulePath) {
   if (!_resolvedNodeRequire) {
@@ -922,6 +957,22 @@ var OrbitalServerRuntime = class {
   getDefaultUser() {
     return this.config.defaultUser;
   }
+  /**
+   * The registered app's declared persona roster: the live rows of its
+   * `[identity]` entity, mapped onto viewers (`Almadar_LOLO_Identity.md` §4.3).
+   * Live-store rows rather than a re-derivation, so the roster carries the ids
+   * ownership scoping actually compares `@user.id` against. Empty when no
+   * schema is registered or the app declares no `[identity]` entity — there is
+   * no global fallback roster by design.
+   */
+  async getIdentityRoster() {
+    const schema = this.resolvedSchema;
+    if (!schema) return [];
+    const entityName = identityEntityName(schema);
+    if (!entityName) return [];
+    const rows = await this.persistence.list(entityName);
+    return rows.map((row) => personaFromIdentityRow(row)).filter((p) => p !== void 0);
+  }
   // ==========================================================================
   // Event Processing
   // ==========================================================================
@@ -1134,6 +1185,15 @@ var OrbitalServerRuntime = class {
    */
   async executeEffects(registered, traitName, effects, payload, entityData, entityId, emittedEvents, fetchedData, clientEffects, effectResults, user, clientEffectsByTrait, onPush, originClientId) {
     const entityType = registered.entity.name;
+    for (const eff of effects) {
+      if (Array.isArray(eff) && eff[0] === "fetch") {
+        xOrbitalLog.debug("fetch:pre-exec-keys", () => ({
+          trait: traitName,
+          entity: String(eff[1]),
+          optKeys: Object.keys(eff[2] ?? {}).join("+")
+        }));
+      }
+    }
     const pushClientEffect = (effect) => {
       clientEffects.push(effect);
       clientEffectsByTrait?.push({ traitName, effect });
@@ -1291,8 +1351,15 @@ var OrbitalServerRuntime = class {
           if (action === "create" || action === "update") {
             this.validateRelationCardinality(type, data || {});
           }
+          const accessBindings = { user: bindingsRef?.user, payload: bindingsRef?.payload, config: bindingsRef?.config };
+          const mutationPolicy = this.resolvedSchema ? entityAccessPolicies(this.resolvedSchema, type)?.[action === "create" ? "create" : action === "update" ? "update" : "delete"] : void 0;
           switch (action) {
             case "create": {
+              if (!checkMutationAccess(data || {}, mutationPolicy, accessBindings)) {
+                throw new Error(
+                  `@create denied: the declared access policy for '${type}' rejected this row`
+                );
+              }
               const { id } = await this.persistence.create(type, data || {});
               resultData = { id, ...data || {} };
               break;
@@ -1300,6 +1367,14 @@ var OrbitalServerRuntime = class {
             case "update":
               if (data?.id || entityId) {
                 const updateId = data?.id || entityId;
+                if (mutationPolicy !== void 0) {
+                  const existing = await this.persistence.getById(type, updateId);
+                  if (!existing || !checkMutationAccess(existing, mutationPolicy, accessBindings)) {
+                    throw new Error(
+                      `@update denied: the declared access policy for '${type}' rejected this row`
+                    );
+                  }
+                }
                 await this.persistence.update(type, updateId, data || {});
                 const updated = await this.persistence.getById(type, updateId);
                 resultData = updated || { id: updateId, ...data || {} };
@@ -1310,6 +1385,14 @@ var OrbitalServerRuntime = class {
               const nestedId = typeof data === "object" && data !== null ? data.id : void 0;
               const deleteId = directId ?? nestedId ?? entityId;
               if (deleteId) {
+                if (mutationPolicy !== void 0) {
+                  const existing = await this.persistence.getById(type, deleteId);
+                  if (!existing || !checkMutationAccess(existing, mutationPolicy, accessBindings)) {
+                    throw new Error(
+                      `@delete denied: the declared access policy for '${type}' rejected this row`
+                    );
+                  }
+                }
                 await this.enforceOnDeleteRules(type, deleteId);
                 await this.persistence.delete(type, deleteId);
                 resultData = { id: deleteId, deleted: true };
@@ -1396,20 +1479,13 @@ var OrbitalServerRuntime = class {
       },
       fetch: async (fetchEntityType, options) => {
         try {
-          xOrbitalLog.info("fetch:enter", () => ({
-            entityType: fetchEntityType,
-            hasOptions: options !== void 0 && options !== null,
-            optionsKeys: options ? Object.keys(options).join(",") : "",
-            filterType: typeof options?.filter,
-            filterIsArray: Array.isArray(options?.filter),
-            filterJson: JSON.stringify(options?.filter ?? null).slice(0, 300),
-            payloadJson: JSON.stringify(bindingsRef?.payload ?? null).slice(0, 300)
-          }));
           let result = null;
           let total = 0;
+          const readPolicy = this.resolvedSchema ? entityAccessPolicies(this.resolvedSchema, fetchEntityType)?.read : void 0;
+          const accessBindings = { user: bindingsRef?.user, payload: bindingsRef?.payload, config: bindingsRef?.config };
           if (options?.id) {
             const entity = await this.persistence.getById(fetchEntityType, options.id);
-            if (entity) {
+            if (entity && applyRowAccess([entity], readPolicy, void 0, accessBindings).length > 0) {
               if (options?.include && options.include.length > 0) {
                 await this.populateRelations([entity], fetchEntityType, options.include);
               }
@@ -1419,24 +1495,12 @@ var OrbitalServerRuntime = class {
             }
           } else {
             let entities = await this.persistence.list(fetchEntityType);
-            if (options?.filter !== void 0 && options.filter !== null) {
-              const predicate = options.filter;
-              entities = entities.filter((entity) => {
-                const ctx = createContextFromBindings(
-                  { entity, payload: bindingsRef?.payload, current: entity, user: bindingsRef?.user },
-                  false
-                );
-                try {
-                  return Boolean(evaluate(predicate, ctx));
-                } catch (err) {
-                  effectLog.error("fetch:filter-eval-error", {
-                    entityType: fetchEntityType,
-                    error: err instanceof Error ? err : String(err)
-                  });
-                  return false;
-                }
-              });
-            }
+            entities = applyRowAccess(
+              entities,
+              readPolicy,
+              options?.filter !== void 0 && options.filter !== null ? options.filter : void 0,
+              accessBindings
+            );
             total = entities.length;
             if (options?.offset && options.offset > 0) {
               entities = entities.slice(options.offset);

package/dist/index.d.ts

@@ -1,7 +1,7 @@
 import { g as RuntimePatternValue, B as BindingContext, f as EvaluationContextExtensions, P as PatternProps, E as EffectHandlers, h as EffectContext, i as ExecutionEnvironment, j as EffectResult, T as TraitDefinition } from './types-CL03tjGU.js';
 export { k as BrowserFileMeta, l as BrowserFilePickerOptions, m as BrowserGeolocationOptions, n as BrowserGeolocationPosition, C as ConfigContext, o as Effect, a as EventListener, H as HANDLER_MANIFEST, I as IEventBus, b as RuntimeConfig, R as RuntimeEvent, d as TraitState, c as TransitionObserver, e as TransitionResult, U as Unsubscribe } from './types-CL03tjGU.js';
-import { U as UnifiedLoaderOptions, S as SchemaLoader, I as ImportChainLike, L as LoadResult, a as LoadedSchema, b as LoadedOrbital, P as PersistenceAdapter } from './OrbitalServerRuntime-A2h0EikK.js';
-export { E as EntitySharingMap, c as EventBus, d as EventNamespaceMap, e as InMemoryPersistence, O as OrbitalEventRequest, f as OrbitalEventResponse, g as OrbitalServerRuntimeConfig, h as PreprocessOptions, i as PreprocessResult, j as PreprocessedSchema, k as ProcessEventOptions, R as RegisteredOrbital, l as RuntimeOrbital, m as RuntimeOrbitalSchema, n as RuntimeTrait, o as StateMachineManager, p as collectDeclaredConfigDefaults, q as collectDeclaredEntityDefaults, r as createInitialTraitState, s as findInitialState, t as findTransition, u as getIsolatedCollectionName, v as getNamespacedEvent, w as isBrowser, x as isElectron, y as isNamespacedEvent, z as isNode, A as normalizeEventKey, B as parseNamespacedEvent, C as preprocessSchema, D as processEvent } from './OrbitalServerRuntime-A2h0EikK.js';
+import { U as UnifiedLoaderOptions, S as SchemaLoader, I as ImportChainLike, L as LoadResult, a as LoadedSchema, b as LoadedOrbital, P as PersistenceAdapter } from './OrbitalServerRuntime-e-5490xl.js';
+export { E as EntitySharingMap, c as EventBus, d as EventNamespaceMap, e as InMemoryPersistence, O as OrbitalEventRequest, f as OrbitalEventResponse, g as OrbitalServerRuntimeConfig, h as PreprocessOptions, i as PreprocessResult, j as PreprocessedSchema, k as ProcessEventOptions, R as RegisteredOrbital, l as RuntimeOrbital, m as RuntimeOrbitalSchema, n as RuntimeTrait, o as StateMachineManager, p as collectDeclaredConfigDefaults, q as collectDeclaredEntityDefaults, r as createInitialTraitState, s as findInitialState, t as findTransition, u as getIsolatedCollectionName, v as getNamespacedEvent, w as isBrowser, x as isElectron, y as isNamespacedEvent, z as isNode, A as normalizeEventKey, B as parseNamespacedEvent, C as preprocessSchema, D as processEvent } from './OrbitalServerRuntime-e-5490xl.js';
 import { EvaluationContext, SExpressionEvaluator } from '@almadar/evaluator';
 export { EvaluationContext, createMinimalContext } from '@almadar/evaluator';
 import { RenderBindingMarker, SExpr, TraitConfigObject, EventPayload, PatternConfig, EntityId, EntityField, EntityRow, EntityPersistence, ServiceParams, PayloadField, OrbitalDefinition, OrbitalSchema } from '@almadar/core';

package/dist/index.js

@@ -409,15 +409,6 @@ function createServerEffectHandlers(opts) {
     },
     fetch: async (fetchEntityType, options) => {
       try {
-        effectLog.info("clientFetch:enter", () => ({
-          entityType: fetchEntityType,
-          hasOptions: options !== void 0 && options !== null,
-          optionsKeys: options ? Object.keys(options).join(",") : "",
-          filterType: typeof options?.filter,
-          filterIsArray: Array.isArray(options?.filter),
-          filterJson: JSON.stringify(options?.filter ?? null).slice(0, 300),
-          payloadJson: JSON.stringify(bindings?.payload ?? null).slice(0, 300)
-        }));
         let result = null;
         let total = 0;
         if (options?.id) {
@@ -433,7 +424,7 @@ function createServerEffectHandlers(opts) {
             const predicate = options.filter;
             entities = entities.filter((entity) => {
               const ctx = createContextFromBindings(
-                { entity, payload: bindings?.payload, current: entity },
+                { entity, payload: bindings?.payload, current: entity, user: bindings?.user, config: bindings?.config },
                 false
               );
               try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@almadar/runtime",
-  "version": "6.45.0",
+  "version": "6.47.0",
   "description": "Interpreted runtime for Almadar orbital applications (OrbitalServerRuntime)",
   "type": "module",
   "main": "./dist/index.js",
@@ -52,11 +52,11 @@
     "access": "public"
   },
   "dependencies": {
-    "@almadar/core": "^10.43.0",
+    "@almadar/core": "^10.45.0",
     "@almadar/evaluator": "^2.38.0",
     "@almadar/logger": "^1.10.0",
-    "@almadar/server": "^2.29.0",
-    "@almadar/std": "^16.153.0"
+    "@almadar/server": "^2.30.0",
+    "@almadar/std": "^16.155.0"
   },
   "peerDependencies": {
     "express": "^5.0.0"