@almadar/runtime 6.56.0 → 6.58.0

package/dist/{OrbitalServerRuntime-Bh4fHBkb.d.ts → OrbitalServerRuntime-Dn9dIwJk.d.ts}

@@ -1,5 +1,5 @@
 import { Router } from 'express';
-import { I as IEventBus, R as RuntimeEvent, a as EventListener, U as Unsubscribe, T as TraitDefinition, b as RuntimeConfig, c as TransitionObserver, d as TraitState, C as ConfigContext, e as TransitionResult, f as EvaluationContextExtensions, E as EffectHandlers } from './types-BWENk-qT.js';
+import { I as IEventBus, R as RuntimeEvent, a as EventListener, U as Unsubscribe, T as TraitDefinition, b as RuntimeConfig, c as TransitionObserver, d as TraitState, C as ConfigContext, e as TransitionResult, f as EvaluationContextExtensions, E as EffectHandlers } from './types-TwQ8Dybu.js';
 import { EventPayload, EventId, EntityRow, UserContext, Orbital, ServiceCallResult, TraitConfig, DeclaredTraitConfig, Entity, OrbitalSchema, Trait, PatternConfig, ResolvedPatternProps, SExpr, BusEventSource, RawUserClaims, OrbitalDefinition, TraitTick } from '@almadar/core';
 
 /**

package/dist/OrbitalServerRuntime.d.ts

@@ -1,4 +1,4 @@
 import 'express';
-export { F as ClientEffectTuple, G as ClientNavigateBackTuple, H as ClientNavigateTuple, J as ClientNotifyTuple, K as ClientRenderUITuple, M as EffectResult, e as InMemoryPersistence, N as LiveBroadcastItem, Q as LoaderConfig, O as OrbitalEventRequest, f as OrbitalEventResponse, T as OrbitalServerRuntime, g as OrbitalServerRuntimeConfig, P as PersistenceAdapter, R as RegisteredOrbital, l as RuntimeOrbital, m as RuntimeOrbitalSchema, n as RuntimeTrait, V as RuntimeTraitTick, p as collectDeclaredConfigDefaults, W as createOrbitalServerRuntime } from './OrbitalServerRuntime-Bh4fHBkb.js';
-import './types-BWENk-qT.js';
+export { F as ClientEffectTuple, G as ClientNavigateBackTuple, H as ClientNavigateTuple, J as ClientNotifyTuple, K as ClientRenderUITuple, M as EffectResult, e as InMemoryPersistence, N as LiveBroadcastItem, Q as LoaderConfig, O as OrbitalEventRequest, f as OrbitalEventResponse, T as OrbitalServerRuntime, g as OrbitalServerRuntimeConfig, P as PersistenceAdapter, R as RegisteredOrbital, l as RuntimeOrbital, m as RuntimeOrbitalSchema, n as RuntimeTrait, V as RuntimeTraitTick, p as collectDeclaredConfigDefaults, W as createOrbitalServerRuntime } from './OrbitalServerRuntime-Dn9dIwJk.js';
+import './types-TwQ8Dybu.js';
 import '@almadar/core';

package/dist/OrbitalServerRuntime.js

@@ -1,5 +1,5 @@
-import { createTickScheduler, EventBus, createUnifiedLoader, MockPersistenceAdapter, InMemoryPersistence, preprocessSchema, normalizeCallSiteConfigToValues, StateMachineManager, parseDurationString, validateEventPayload, formatPayloadValidationError, collectDeclaredConfigDefaults, collectDeclaredEntityDefaults, EffectExecutor } from './chunk-XY5BLZKS.js';
-export { InMemoryPersistence, collectDeclaredConfigDefaults } from './chunk-XY5BLZKS.js';
+import { createTickScheduler, EventBus, createUnifiedLoader, MockPersistenceAdapter, InMemoryPersistence, preprocessSchema, normalizeCallSiteConfigToValues, StateMachineManager, parseDurationString, validateEventPayload, formatPayloadValidationError, collectDeclaredConfigDefaults, collectDeclaredEntityDefaults, EffectExecutor } from './chunk-MMVKKLAP.js';
+export { InMemoryPersistence, collectDeclaredConfigDefaults } from './chunk-MMVKKLAP.js';
 import { isValidCronExpression } from './chunk-OU3ITB5S.js';
 import { createContextFromBindings, resolveCallSitePayloadCaptures, applyRowAccess, checkMutationAccess, accessDeniedMessage } from './chunk-ZJ62H3ES.js';
 import './chunk-T4VDAB4C.js';
@@ -1522,7 +1522,8 @@ var OrbitalServerRuntime = class {
             result = await this.config.effectHandlers.callService(
               service,
               action,
-              params
+              params,
+              user ? { principal: user.id, role: user.role } : void 0
             );
           } else if (this.config.mode === "mock") {
             const mockId = `mock_${service}_${action}_${Math.random().toString(36).slice(2, 10)}`;
@@ -1820,6 +1821,24 @@ var OrbitalServerRuntime = class {
         ...callSiteOverride ?? {}
       };
     }
+    if (bindings.config) {
+      const USER_FORWARD = /^@user(?:\.[\w]+)+$/;
+      let changed = false;
+      const resolved = {};
+      for (const [key, value] of Object.entries(bindings.config)) {
+        if (typeof value === "string" && USER_FORWARD.test(value)) {
+          let cur = user;
+          for (const seg of value.slice("@user.".length).split(".")) {
+            cur = cur !== null && typeof cur === "object" ? cur[seg] : void 0;
+          }
+          resolved[key] = typeof cur === "string" || typeof cur === "number" || typeof cur === "boolean" ? cur : "";
+          changed = true;
+        } else {
+          resolved[key] = value;
+        }
+      }
+      if (changed) bindings.config = resolved;
+    }
     const sigilPages = [];
     const seenPaths = /* @__PURE__ */ new Set();
     for (const reg of this.orbitals.values()) {

package/dist/ServerBridge.d.ts

@@ -1,4 +1,4 @@
-import { I as IEventBus } from './types-BWENk-qT.js';
+import { I as IEventBus } from './types-TwQ8Dybu.js';
 import { EventPayload } from '@almadar/core';
 
 /**

package/dist/{chunk-XY5BLZKS.js → chunk-MMVKKLAP.js}

@@ -1935,6 +1935,17 @@ var EffectExecutor = class _EffectExecutor {
         }, emitCfg);
         break;
       }
+      case "browser/push-subscribe": {
+        const [, emitCfg] = this.splitSubstrateEmit(args);
+        await this.runSubstrate(async () => {
+          if (!this.handlers.browserPushSubscribe) {
+            this.logUnsupported("browser/push-subscribe");
+            return null;
+          }
+          return this.handlers.browserPushSubscribe();
+        }, emitCfg);
+        break;
+      }
       default: {
         if (operator.includes("/")) {
           const [positional, emitCfg] = this.splitSubstrateEmit(args);

package/dist/createOsHandlers.d.ts

@@ -1,4 +1,4 @@
-import { E as EffectHandlers } from './types-BWENk-qT.js';
+import { E as EffectHandlers } from './types-TwQ8Dybu.js';
 import { EventPayload } from '@almadar/core';
 
 /**

package/dist/index.d.ts

@@ -1,7 +1,7 @@
-import { g as RuntimePatternValue, B as BindingContext, f as EvaluationContextExtensions, P as PatternProps, E as EffectHandlers, h as EffectContext, i as ExecutionEnvironment, j as EffectResult, T as TraitDefinition } from './types-BWENk-qT.js';
-export { k as BrowserFileMeta, l as BrowserFilePickerOptions, m as BrowserGeolocationOptions, n as BrowserGeolocationPosition, C as ConfigContext, o as Effect, a as EventListener, H as HANDLER_MANIFEST, I as IEventBus, b as RuntimeConfig, R as RuntimeEvent, d as TraitState, c as TransitionObserver, e as TransitionResult, U as Unsubscribe } from './types-BWENk-qT.js';
-import { U as UnifiedLoaderOptions, S as SchemaLoader, I as ImportChainLike, L as LoadResult, a as LoadedSchema, b as LoadedOrbital, P as PersistenceAdapter } from './OrbitalServerRuntime-Bh4fHBkb.js';
-export { E as EntitySharingMap, c as EventBus, d as EventNamespaceMap, e as InMemoryPersistence, O as OrbitalEventRequest, f as OrbitalEventResponse, g as OrbitalServerRuntimeConfig, h as PreprocessOptions, i as PreprocessResult, j as PreprocessedSchema, k as ProcessEventOptions, R as RegisteredOrbital, l as RuntimeOrbital, m as RuntimeOrbitalSchema, n as RuntimeTrait, o as StateMachineManager, p as collectDeclaredConfigDefaults, q as collectDeclaredEntityDefaults, r as createInitialTraitState, s as findInitialState, t as findTransition, u as getIsolatedCollectionName, v as getNamespacedEvent, w as isBrowser, x as isElectron, y as isNamespacedEvent, z as isNode, A as normalizeEventKey, B as parseNamespacedEvent, C as preprocessSchema, D as processEvent } from './OrbitalServerRuntime-Bh4fHBkb.js';
+import { g as RuntimePatternValue, B as BindingContext, f as EvaluationContextExtensions, P as PatternProps, E as EffectHandlers, h as EffectContext, i as ExecutionEnvironment, j as EffectResult, S as ServiceCallContext, T as TraitDefinition } from './types-TwQ8Dybu.js';
+export { k as BrowserFileMeta, l as BrowserFilePickerOptions, m as BrowserGeolocationOptions, n as BrowserGeolocationPosition, C as ConfigContext, o as Effect, a as EventListener, H as HANDLER_MANIFEST, I as IEventBus, b as RuntimeConfig, R as RuntimeEvent, d as TraitState, c as TransitionObserver, e as TransitionResult, U as Unsubscribe } from './types-TwQ8Dybu.js';
+import { U as UnifiedLoaderOptions, S as SchemaLoader, I as ImportChainLike, L as LoadResult, a as LoadedSchema, b as LoadedOrbital, P as PersistenceAdapter } from './OrbitalServerRuntime-Dn9dIwJk.js';
+export { E as EntitySharingMap, c as EventBus, d as EventNamespaceMap, e as InMemoryPersistence, O as OrbitalEventRequest, f as OrbitalEventResponse, g as OrbitalServerRuntimeConfig, h as PreprocessOptions, i as PreprocessResult, j as PreprocessedSchema, k as ProcessEventOptions, R as RegisteredOrbital, l as RuntimeOrbital, m as RuntimeOrbitalSchema, n as RuntimeTrait, o as StateMachineManager, p as collectDeclaredConfigDefaults, q as collectDeclaredEntityDefaults, r as createInitialTraitState, s as findInitialState, t as findTransition, u as getIsolatedCollectionName, v as getNamespacedEvent, w as isBrowser, x as isElectron, y as isNamespacedEvent, z as isNode, A as normalizeEventKey, B as parseNamespacedEvent, C as preprocessSchema, D as processEvent } from './OrbitalServerRuntime-Dn9dIwJk.js';
 import { EvaluationContext, SExpressionEvaluator } from '@almadar/evaluator';
 export { EvaluationContext, createMinimalContext } from '@almadar/evaluator';
 import { RenderBindingMarker, SExpr, TraitConfigObject, EventPayload, PatternConfig, EntityId, EntityField, EntityRow, EntityPersistence, ServiceParams, EntityAccessPolicies, PayloadField, OrbitalDefinition, OrbitalSchema } from '@almadar/core';
@@ -803,7 +803,7 @@ interface CreateServerEffectHandlersOptions {
         trait?: string;
     };
     /** Consumer-supplied `call-service` handler. When absent, calls warn and return null. */
-    callService?: (service: string, action: string, params?: ServiceParams) => Promise<EventPayload | null>;
+    callService?: (service: string, action: string, params?: ServiceParams, context?: ServiceCallContext) => Promise<EventPayload | null>;
     /**
      * The declared `@read`/`@create`/`@update`/`@delete` directives, keyed by
      * entity name. Build it with `entityAccessTable(schema)` from `@almadar/core`.

package/dist/index.js

@@ -1,5 +1,5 @@
-import { EffectExecutor } from './chunk-XY5BLZKS.js';
-export { EffectExecutor, EventBus, HANDLER_MANIFEST, InMemoryPersistence, MockPersistenceAdapter, StateMachineManager, TickScheduler, buildEmitsFromTraits, collectDeclaredConfigDefaults, collectDeclaredEntityDefaults, createInitialTraitState, createMockPersistence, createTestExecutor, createTickScheduler, createUnifiedLoader, findInitialState, findTransition, formatPayloadValidationError, getIsolatedCollectionName, getNamespacedEvent, isBrowser, isElectron, isNamespacedEvent, isNode, isValidDurationString, normalizeCallSiteConfigToValues, normalizeEventKey, parseDurationString, parseNamespacedEvent, preprocessSchema, processEvent, validateEventPayload, validatePayloadShapes } from './chunk-XY5BLZKS.js';
+import { EffectExecutor } from './chunk-MMVKKLAP.js';
+export { EffectExecutor, EventBus, HANDLER_MANIFEST, InMemoryPersistence, MockPersistenceAdapter, StateMachineManager, TickScheduler, buildEmitsFromTraits, collectDeclaredConfigDefaults, collectDeclaredEntityDefaults, createInitialTraitState, createMockPersistence, createTestExecutor, createTickScheduler, createUnifiedLoader, findInitialState, findTransition, formatPayloadValidationError, getIsolatedCollectionName, getNamespacedEvent, isBrowser, isElectron, isNamespacedEvent, isNode, isValidDurationString, normalizeCallSiteConfigToValues, normalizeEventKey, parseDurationString, parseNamespacedEvent, preprocessSchema, processEvent, validateEventPayload, validatePayloadShapes } from './chunk-MMVKKLAP.js';
 export { cronMatches, cronMinuteKey, isValidCronExpression, parseCron, parseCronField } from './chunk-OU3ITB5S.js';
 import { createContextFromBindings, applyRowAccess, checkMutationAccess, accessDeniedMessage } from './chunk-ZJ62H3ES.js';
 export { CALLSITE_PAYLOAD_PREFIX, applyRowAccess, checkMutationAccess, containsBindings, createContextFromBindings, createMinimalContext, deferEntityBindings, extractBindings, interpolateProps, interpolateValue, resolveCallSitePayloadCaptures } from './chunk-ZJ62H3ES.js';
@@ -40,6 +40,17 @@ function getOrOpenWs() {
   }
   return _ws;
 }
+function urlBase64ToArrayBuffer(base64Url) {
+  const padding = "=".repeat((4 - base64Url.length % 4) % 4);
+  const base64 = (base64Url + padding).replace(/-/g, "+").replace(/_/g, "/");
+  const raw = atob(base64);
+  const buffer = new ArrayBuffer(raw.length);
+  const view = new Uint8Array(buffer);
+  for (let i = 0; i < raw.length; i++) {
+    view[i] = raw.charCodeAt(i);
+  }
+  return buffer;
+}
 function sendServerEvent(orbital, event, payload) {
   const msg = JSON.stringify({
     type: "ORBITAL_EVENT",
@@ -130,6 +141,29 @@ function createClientEffectHandlers(options) {
       await navigator.clipboard.writeText(text);
       return { text };
     },
+    browserPushSubscribe: async () => {
+      if (typeof navigator === "undefined" || !("serviceWorker" in navigator) || typeof window === "undefined" || !("PushManager" in window)) {
+        throw new Error("Push API is not available in this environment");
+      }
+      const keyResponse = await fetch("/api/push/vapid-public-key");
+      if (!keyResponse.ok) {
+        throw new Error("Push is not configured on this host (no VAPID public key)");
+      }
+      const { publicKey } = await keyResponse.json();
+      const registration = await navigator.serviceWorker.register("/almadar-push-sw.js");
+      const subscription = await registration.pushManager.subscribe({
+        userVisibleOnly: true,
+        applicationServerKey: urlBase64ToArrayBuffer(publicKey)
+      });
+      const json = subscription.toJSON();
+      const endpoint = json.endpoint ?? "";
+      const p256dh = json.keys?.p256dh ?? "";
+      const auth = json.keys?.auth ?? "";
+      if (!endpoint || !p256dh || !auth) {
+        throw new Error("Push subscription resolved without endpoint/keys");
+      }
+      return { endpoint, p256dh, auth };
+    },
     browserGeolocationCurrent: async (options2) => {
       if (typeof navigator === "undefined" || !navigator.geolocation) {
         throw new Error("Geolocation API is not available in this environment");
@@ -401,7 +435,13 @@ function createServerEffectHandlers(opts) {
       try {
         let result = null;
         if (consumerCallService) {
-          result = await consumerCallService(service, action, params);
+          const viewer = bindings?.user;
+          result = await consumerCallService(
+            service,
+            action,
+            params,
+            viewer ? { principal: viewer.id, role: viewer.role } : void 0
+          );
         } else {
           const mockId = `mock_${service}_${action}_${Math.random().toString(36).slice(2, 10)}`;
           const paramsEcho = {};

package/dist/{types-BWENk-qT.d.ts → types-TwQ8Dybu.d.ts}

@@ -121,6 +121,16 @@ interface TraitDefinition {
  * Client: React hooks, DOM, router
  * Server: Express, database, integrators
  */
+/**
+ * Caller identity forwarded with a call-service dispatch (I-25) — the id and
+ * roster role of the SAME normalized viewer entity ACL enforces against.
+ * Absent when no viewer is bound (ticks, anonymous); role-gated services
+ * fail closed on absence.
+ */
+interface ServiceCallContext {
+    principal?: string;
+    role?: string;
+}
 interface EffectHandlers {
     /**
      * Emit an event to the event bus.
@@ -143,8 +153,10 @@ interface EffectHandlers {
     persist: (action: 'create' | 'update' | 'delete' | 'batch', entityType: string, data?: EntityRow) => Promise<void>;
     /** Set a field value on an entity */
     set: (entityId: string, field: string, value: FieldValue) => void;
-    /** Call an external service */
-    callService: (service: string, action: string, params?: ServiceParams) => Promise<EventPayload | null>;
+    /** Call an external service. `context` carries the caller's identity
+     * (the same viewer entity ACL enforces against) so role-gated services
+     * can enforce server-side; hosts forward it to the integration factory. */
+    callService: (service: string, action: string, params?: ServiceParams, context?: ServiceCallContext) => Promise<EventPayload | null>;
     /** Fetch entity data (server only) - returns data for client-side rendering.
      *
      * Always returns a `FetchResult` (`{rows, total}`) on success. `total`
@@ -271,6 +283,12 @@ interface EffectHandlers {
     }>;
     /** browser/geolocation-current — resolves with the position inside `result` */
     browserGeolocationCurrent?: (options?: BrowserGeolocationOptions) => Promise<BrowserGeolocationPosition>;
+    /** browser/push-subscribe — resolves with the flat Web Push subscription credentials inside `result` */
+    browserPushSubscribe?: () => Promise<{
+        endpoint: string;
+        p256dh: string;
+        auth: string;
+    }>;
     /** compose/compose-all — compose multiple orbitals into one schema */
     substrateComposeAll?: (config: {
         appName: string;
@@ -483,4 +501,4 @@ interface TransitionObserver {
  */
 declare const HANDLER_MANIFEST: Record<ExecutionEnvironment, string[]>;
 
-export { type BindingContext as B, type ConfigContext as C, type EffectHandlers as E, HANDLER_MANIFEST as H, type IEventBus as I, type PatternProps as P, type RuntimeEvent as R, type TraitDefinition as T, type Unsubscribe as U, type EventListener as a, type RuntimeConfig as b, type TransitionObserver as c, type TraitState as d, type TransitionResult as e, type EvaluationContextExtensions as f, type RuntimePatternValue as g, type EffectContext as h, type ExecutionEnvironment as i, type EffectResult as j, type BrowserFileMeta as k, type BrowserFilePickerOptions as l, type BrowserGeolocationOptions as m, type BrowserGeolocationPosition as n, type Effect as o };
+export { type BindingContext as B, type ConfigContext as C, type EffectHandlers as E, HANDLER_MANIFEST as H, type IEventBus as I, type PatternProps as P, type RuntimeEvent as R, type ServiceCallContext as S, type TraitDefinition as T, type Unsubscribe as U, type EventListener as a, type RuntimeConfig as b, type TransitionObserver as c, type TraitState as d, type TransitionResult as e, type EvaluationContextExtensions as f, type RuntimePatternValue as g, type EffectContext as h, type ExecutionEnvironment as i, type EffectResult as j, type BrowserFileMeta as k, type BrowserFilePickerOptions as l, type BrowserGeolocationOptions as m, type BrowserGeolocationPosition as n, type Effect as o };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@almadar/runtime",
-  "version": "6.56.0",
+  "version": "6.58.0",
   "description": "Interpreted runtime for Almadar orbital applications (OrbitalServerRuntime)",
   "type": "module",
   "main": "./dist/index.js",
@@ -57,11 +57,11 @@
     "access": "public"
   },
   "dependencies": {
-    "@almadar/core": "^10.64.0",
+    "@almadar/core": "^10.67.0",
     "@almadar/evaluator": "^2.41.0",
     "@almadar/logger": "^1.11.0",
-    "@almadar/server": "^2.35.0",
-    "@almadar/std": "^16.180.0"
+    "@almadar/server": "^2.37.0",
+    "@almadar/std": "^16.183.0"
   },
   "peerDependencies": {
     "express": "^5.0.0"