@aotter/mantle 0.1.5-alpha.1 → 0.2.0-alpha.1

package/dist/core/store.d.ts

@@ -0,0 +1,160 @@
+/**
+ * Store: the only path to Mantle-owned entry storage (ADR-0032 decision 1, ADR-0034).
+ * `select` and `write` keep ADR-0030's JSON shape; the runtime turns it into the same SQL IR
+ * as a manifest's SQL, injects scope, TTL, published-only and OCC, then hands it to a StoreExecutor.
+ */
+import type { SqlNode } from "../spec/domain/index.js";
+import type { Caller } from "./caller.js";
+import type { InvocationCause } from "./invocation.js";
+export type StoreScalar = string | number | boolean | null;
+/** `{ select, from, where }`, allowed only as the right side of `in` / `notIn`. */
+export interface StoreSubquery {
+    readonly select: string;
+    readonly from: string;
+    readonly where?: StoreWhere;
+}
+export interface StoreComparison {
+    readonly eq?: StoreScalar;
+    readonly ne?: StoreScalar;
+    readonly gt?: string | number;
+    readonly gte?: string | number;
+    readonly lt?: string | number;
+    readonly lte?: string | number;
+    readonly like?: string;
+    readonly in?: readonly StoreScalar[] | StoreSubquery;
+    readonly notIn?: readonly StoreScalar[] | StoreSubquery;
+    readonly isNull?: boolean;
+}
+/** `{ column: value }` is equality and sibling keys are AND; `and` / `or` take non-empty arrays, `not` one condition. */
+export interface StoreWhere {
+    readonly and?: readonly StoreWhere[];
+    readonly or?: readonly StoreWhere[];
+    readonly not?: StoreWhere;
+    readonly [column: string]: StoreScalar | StoreComparison | StoreWhere | readonly StoreWhere[] | undefined;
+}
+export interface StoreSelect {
+    readonly from: string;
+    /** Projection; omitted returns native columns plus every Schema field. */
+    readonly columns?: readonly string[];
+    readonly where?: StoreWhere;
+    /** At most one column; `id` breaks ties. Defaults to `{ updatedAt: "desc" }`. */
+    readonly orderBy?: Readonly<Record<string, "asc" | "desc">>;
+    /** Default 50, maximum 500. */
+    readonly limit?: number;
+    /** One opaque, versioned format bound to `from` and `orderBy` (ADR-0032 decision 1). */
+    readonly cursor?: string;
+    /** Rows whose declared `searchableFields` contain this text, or whose `id` is it (ADR-0035 decision 7). Ordering stays `orderBy`. */
+    readonly search?: string;
+}
+/** How `store.view` runs a View. `search` and `filters` match only the outputs the View's `uiSchema.list.searchFields` and `filterFields` name (ADR-0032 decision 5). */
+export interface StoreViewOptions {
+    readonly input?: Readonly<Record<string, unknown>>;
+    readonly limit?: number;
+    readonly cursor?: string;
+    /** Text an output in `searchFields` contains (case-insensitive `LIKE`). */
+    readonly search?: string;
+    /** Output name to the value it equals; each name is one of `filterFields`. */
+    readonly filters?: Readonly<Record<string, StoreScalar>>;
+}
+/** A flat row: native columns next to Schema fields. */
+export type StoreRow = Readonly<Record<string, unknown>>;
+export interface StoreSelectResult<R = StoreRow> {
+    readonly rows: readonly R[];
+    readonly nextCursor?: string;
+}
+/** Creates one entry through Schema validation, defaults and hooks; one row of VALUES is a row op. */
+export interface StoreInsert {
+    readonly insert: string;
+    readonly values: Readonly<Record<string, unknown>>;
+    /** Client-generated id (see `store.id()`); omitted generates one. */
+    readonly id?: string;
+    /** An insert ignored or merged by `onConflict` is a set op and returns `{ affected }`. */
+    readonly onConflict?: "ignore" | {
+        readonly columns: readonly string[];
+        readonly update: Readonly<Record<string, unknown>>;
+    };
+}
+/** Row op when `where` pins `id` (may carry `lock`), set op otherwise (ADR-0032 decision 2, ADR-0034 decision 4). */
+export interface StoreUpdate {
+    readonly update: string;
+    readonly set: Readonly<Record<string, unknown>>;
+    readonly where: StoreWhere;
+    /** Caller-observed version; becomes a version predicate plus `expect: 1`. */
+    readonly lock?: number;
+    /** Fail the whole write unless exactly this many rows were affected. */
+    readonly expect?: number;
+}
+export interface StoreDelete {
+    readonly delete: string;
+    readonly where: StoreWhere;
+    readonly lock?: number;
+    readonly expect?: number;
+}
+export type StoreWriteOp = StoreInsert | StoreUpdate | StoreDelete;
+export type StoreWriteResult = {
+    readonly id: string;
+    readonly version: number;
+} | {
+    readonly affected: number;
+};
+export interface SweepExpiredRequest {
+    readonly collection: string;
+    readonly limit?: number;
+    readonly cursor?: string;
+    /** false counts without deleting. */
+    readonly delete?: boolean;
+}
+export interface SweepExpiredResult {
+    readonly scanned: number;
+    readonly removed: number;
+    readonly nextCursor?: string;
+}
+/**
+ * Host-level Store: no caller scope, TTL visibility still applies. Failures throw `DiagnosticError`:
+ * `INPUT_VALIDATION_FAILED`, `CONFLICT` (with `conflict.reason` and an exact `opIndex`; nothing is written),
+ * `RESOURCE_UNAVAILABLE`, `OUTCOME_UNKNOWN`.
+ */
+export interface MantleStore {
+    /** Bind to one request's caller; scope follows the caller. `cause` is the invocation being served, so hooks the Store fires chain to it. */
+    as(caller: Caller, cause?: InvocationCause): CallerStore;
+    select(query: StoreSelect): Promise<StoreSelectResult>;
+    /** Apply every operation or none, in order, as one storage transaction. Results follow operation order. */
+    write(ops: readonly StoreWriteOp[]): Promise<readonly StoreWriteResult[]>;
+    /** Run a named View as REST and MCP would. `input` is the View's declared `input`. */
+    view<R = StoreRow>(name: string, options?: StoreViewOptions): Promise<StoreSelectResult<R>>;
+    /** Host-only maintenance; the only path that sees expired rows. */
+    sweepExpired(request: SweepExpiredRequest): Promise<SweepExpiredResult>;
+    /** A new entry id from the runtime's id generator. */
+    id(): string;
+}
+/**
+ * Procedure-facing Store. Guard Procedures and before hooks get one whose `write` fails. `sweepExpired` is present only
+ * for the system caller (a schedule Trigger's handler, host code): it is the one path that sees expired rows.
+ */
+export type CallerStore = Omit<MantleStore, "as" | "sweepExpired"> & {
+    readonly sweepExpired?: MantleStore["sweepExpired"];
+};
+/** One compiled statement: validated IR with policy already injected, and numbered binds `?1`, `?2`. */
+export interface StoreStatement {
+    readonly ir: SqlNode;
+    readonly binds: readonly unknown[];
+    /** Checked inside the batch with `changes()`; a mismatch is `CONFLICT` naming this statement. */
+    readonly expect?: number;
+}
+/** What one applied statement did. `rows` are its RETURNING rows, hidden `_mantle_id` / `_mantle_version` included. */
+export interface StoreApplied {
+    readonly affected: number;
+    readonly rows: readonly StoreRow[];
+}
+/**
+ * The storage port. Each dialect has one; D1's is SqliteStoreExecutor over a DatabaseDriver (ADR-0035 decision 6).
+ * It runs whatever its dialect accepted, so there are no capability flags.
+ */
+export interface StoreExecutor {
+    /** Bind limit per statement, read by the one Core validator (100 on D1). */
+    readonly maxBindings: number;
+    select(statement: StoreStatement): Promise<readonly StoreRow[]>;
+    /** All or nothing, in order. A failure throws `DiagnosticError` and applies nothing. */
+    apply(batch: readonly StoreStatement[]): Promise<readonly StoreApplied[]>;
+}
+//# sourceMappingURL=store.d.ts.map

package/dist/core/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../src/core/store.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAC;AACvD,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAEvD,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC;AAE3D,mFAAmF;AACnF,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE,UAAU,CAAC;CAC7B;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,CAAC,EAAE,WAAW,CAAC;IAC1B,QAAQ,CAAC,EAAE,CAAC,EAAE,WAAW,CAAC;IAC1B,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC9B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC9B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;IAC/B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE,CAAC,EAAE,SAAS,WAAW,EAAE,GAAG,aAAa,CAAC;IACrD,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,WAAW,EAAE,GAAG,aAAa,CAAC;IACxD,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,yHAAyH;AACzH,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,GAAG,CAAC,EAAE,SAAS,UAAU,EAAE,CAAC;IACrC,QAAQ,CAAC,EAAE,CAAC,EAAE,SAAS,UAAU,EAAE,CAAC;IACpC,QAAQ,CAAC,GAAG,CAAC,EAAE,UAAU,CAAC;IAC1B,QAAQ,EAAE,MAAM,EAAE,MAAM,GAAG,WAAW,GAAG,eAAe,GAAG,UAAU,GAAG,SAAS,UAAU,EAAE,GAAG,SAAS,CAAC;CAC3G;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,0EAA0E;IAC1E,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACrC,QAAQ,CAAC,KAAK,CAAC,EAAE,UAAU,CAAC;IAC5B,iFAAiF;IACjF,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC;IAC5D,+BAA+B;IAC/B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,wFAAwF;IACxF,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,qIAAqI;IACrI,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,yKAAyK;AACzK,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACnD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,2EAA2E;IAC3E,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,8EAA8E;IAC9E,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;CAC1D;AAED,wDAAwD;AACxD,MAAM,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAEzD,MAAM,WAAW,iBAAiB,CAAC,CAAC,GAAG,QAAQ;IAC7C,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;IAC5B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,sGAAsG;AACtG,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACnD,qEAAqE;IACrE,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;IACrB,0FAA0F;IAC1F,QAAQ,CAAC,UAAU,CAAC,EAAE,QAAQ,GAAG;QAAE,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;KAAE,CAAC;CAC9H;AAED,qHAAqH;AACrH,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAChD,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,6EAA6E;IAC7E,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,wEAAwE;IACxE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,MAAM,YAAY,GAAG,WAAW,GAAG,WAAW,GAAG,WAAW,CAAC;AAEnE,MAAM,MAAM,gBAAgB,GAAG;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjH,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,qCAAqC;IACrC,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,4IAA4I;IAC5I,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,eAAe,GAAG,WAAW,CAAC;IACzD,MAAM,CAAC,KAAK,EAAE,WAAW,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACvD,2GAA2G;IAC3G,KAAK,CAAC,GAAG,EAAE,SAAS,YAAY,EAAE,GAAG,OAAO,CAAC,SAAS,gBAAgB,EAAE,CAAC,CAAC;IAC1E,sFAAsF;IACtF,IAAI,CAAC,CAAC,GAAG,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,gBAAgB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC;IAC5F,mEAAmE;IACnE,YAAY,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACxE,sDAAsD;IACtD,EAAE,IAAI,MAAM,CAAC;CACd;AAED;;;GAGG;AACH,MAAM,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,EAAE,IAAI,GAAG,cAAc,CAAC,GAAG;IAAE,QAAQ,CAAC,YAAY,CAAC,EAAE,WAAW,CAAC,cAAc,CAAC,CAAA;CAAE,CAAC;AAE7H,wGAAwG;AACxG,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,KAAK,EAAE,SAAS,OAAO,EAAE,CAAC;IACnC,iGAAiG;IACjG,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,uHAAuH;AACvH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,SAAS,QAAQ,EAAE,CAAC;CACpC;AAED;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,4EAA4E;IAC5E,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,MAAM,CAAC,SAAS,EAAE,cAAc,GAAG,OAAO,CAAC,SAAS,QAAQ,EAAE,CAAC,CAAC;IAChE,wFAAwF;IACxF,KAAK,CAAC,KAAK,EAAE,SAAS,cAAc,EAAE,GAAG,OAAO,CAAC,SAAS,YAAY,EAAE,CAAC,CAAC;CAC3E"}

package/dist/core/store.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=store.js.map

package/dist/core/store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.js","sourceRoot":"","sources":["../../src/core/store.ts"],"names":[],"mappings":""}

package/dist/core/wire.d.ts

@@ -0,0 +1,20 @@
+/** HTTP plumbing shared by the REST and Admin surfaces: path matching, query coercion, JSON bodies and the error envelope. Not a public name. */
+import { DiagnosticError, type Diagnostic } from "../spec/kernel/index.js";
+import type { JsonSchema, PlanView } from "../spec/domain/index.js";
+export declare const wireError: (code: Diagnostic["code"], message: string, path: string) => DiagnosticError;
+/** Query and path text to the declared JSON type; anything else stays a string. */
+export declare function coerce(raw: string, schema: JsonSchema | undefined, name: string, path: string): unknown;
+/** `/items/{id}` against a request path, or null. Segments are decoded once; a malformed escape is a routing miss. */
+export declare function match(template: string, path: string): Record<string, string> | null;
+/** A View's declared input, `limit` and `cursor` from a query string, as `store.view` takes them. */
+export declare function viewQuery(name: string, v: PlanView, query: URLSearchParams, path: string): {
+    input: Record<string, unknown>;
+    limit?: number;
+    cursor?: string;
+};
+/** The request body as a JSON object; no body is `{}`. */
+export declare function readJsonObject(request: Request, path: string): Promise<Record<string, unknown>>;
+export declare const json: (body: unknown, status?: number, headers?: Record<string, string>) => Response;
+/** A DiagnosticError answers with its own status; anything else is logged and never leaks. */
+export declare function failure(e: unknown, surface: string, headers?: Record<string, string>): Response;
+//# sourceMappingURL=wire.d.ts.map

package/dist/core/wire.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"wire.d.ts","sourceRoot":"","sources":["../../src/core/wire.ts"],"names":[],"mappings":"AAAA,iJAAiJ;AACjJ,OAAO,EAAE,eAAe,EAAgD,KAAK,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACzH,OAAO,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAEpE,eAAO,MAAM,SAAS,GAAI,MAAM,UAAU,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,MAAM,MAAM,oBAAsG,CAAC;AAExL,mFAAmF;AACnF,wBAAgB,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAYvG;AAED,sHAAsH;AACtH,wBAAgB,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAanF;AAED,qGAAqG;AACrG,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAU9J;AAID,0DAA0D;AAC1D,wBAAsB,cAAc,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CASrG;AAED,eAAO,MAAM,IAAI,GAAI,MAAM,OAAO,EAAE,eAAY,EAAE,UAAU,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAG,QAA4E,CAAC;AAElK,8FAA8F;AAC9F,wBAAgB,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,QAAQ,CAI/F"}

package/dist/core/wire.js

@@ -0,0 +1,84 @@
+/** HTTP plumbing shared by the REST and Admin surfaces: path matching, query coercion, JSON bodies and the error envelope. Not a public name. */
+import { DiagnosticError, httpStatusFor, makeDiagnostic, redactForWire } from "../spec/kernel/index.js";
+export const wireError = (code, message, path) => new DiagnosticError(makeDiagnostic({ code, phase: "runtime", severity: "error", path, message }));
+/** Query and path text to the declared JSON type; anything else stays a string. */
+export function coerce(raw, schema, name, path) {
+    const type = [schema?.type].flat().find((t) => t && t !== "null");
+    if (type === "integer" || type === "number") {
+        const n = Number(raw);
+        if (raw.trim() === "" || !Number.isFinite(n) || (type === "integer" && !Number.isInteger(n)))
+            throw wireError("INPUT_VALIDATION_FAILED", `'${name}' must be ${type === "integer" ? "an integer" : "a number"}; got ${JSON.stringify(raw)}.`, path);
+        return n;
+    }
+    if (type === "boolean") {
+        if (raw !== "true" && raw !== "false")
+            throw wireError("INPUT_VALIDATION_FAILED", `'${name}' must be true or false; got ${JSON.stringify(raw)}.`, path);
+        return raw === "true";
+    }
+    return raw;
+}
+/** `/items/{id}` against a request path, or null. Segments are decoded once; a malformed escape is a routing miss. */
+export function match(template, path) {
+    const strip = (p) => (p.length > 1 && p.endsWith("/") ? p.slice(0, -1) : p);
+    const t = strip(template).split("/");
+    const r = strip(path).split("/");
+    if (t.length !== r.length)
+        return null;
+    const params = {};
+    for (const [i, part] of t.entries()) {
+        let seg;
+        try {
+            seg = decodeURIComponent(r[i]);
+        }
+        catch {
+            return null;
+        }
+        if (part.startsWith("{") && part.endsWith("}"))
+            params[part.slice(1, -1)] = seg;
+        else if (part !== seg)
+            return null;
+    }
+    return params;
+}
+/** A View's declared input, `limit` and `cursor` from a query string, as `store.view` takes them. */
+export function viewQuery(name, v, query, path) {
+    const input = {};
+    for (const [k, schema] of Object.entries(v.input?.properties ?? {})) {
+        const raw = query.get(k);
+        if (raw !== null)
+            input[k] = coerce(raw, schema, k, path);
+        else if (v.input?.required?.includes(k))
+            throw wireError("INPUT_VALIDATION_FAILED", `View '${name}' requires query param '${k}'.`, path);
+    }
+    const limit = query.get("limit");
+    const cursor = query.get("cursor");
+    return { input, ...(limit === null ? {} : { limit: coerce(limit, { type: "integer" }, "limit", path) }), ...(cursor ? { cursor } : {}) };
+}
+const MAX_BODY = 1_000_000;
+/** The request body as a JSON object; no body is `{}`. */
+export async function readJsonObject(request, path) {
+    let body = {};
+    if (request.body) {
+        const text = await request.text();
+        if (text.length > MAX_BODY)
+            throw wireError("INPUT_VALIDATION_FAILED", `the request body is larger than ${MAX_BODY} characters`, path);
+        try {
+            body = text.trim() ? JSON.parse(text) : {};
+        }
+        catch {
+            throw wireError("INPUT_VALIDATION_FAILED", "the request body is not valid JSON", path);
+        }
+    }
+    if (typeof body !== "object" || body === null || Array.isArray(body))
+        throw wireError("INPUT_VALIDATION_FAILED", "the request body must be a JSON object", path);
+    return body;
+}
+export const json = (body, status = 200, headers) => Response.json(body, { status, ...(headers ? { headers } : {}) });
+/** A DiagnosticError answers with its own status; anything else is logged and never leaks. */
+export function failure(e, surface, headers) {
+    if (e instanceof DiagnosticError)
+        return json({ error: redactForWire(e.diagnostic) }, httpStatusFor(e.diagnostic), headers);
+    console.error(`[mantle ${surface}] unhandled failure`, e);
+    return json({ error: { code: "INTERNAL_ERROR", message: "An internal error occurred." } }, 500, headers);
+}
+//# sourceMappingURL=wire.js.map

package/dist/core/wire.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wire.js","sourceRoot":"","sources":["../../src/core/wire.ts"],"names":[],"mappings":"AAAA,iJAAiJ;AACjJ,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,cAAc,EAAE,aAAa,EAAmB,MAAM,yBAAyB,CAAC;AAGzH,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,IAAwB,EAAE,OAAe,EAAE,IAAY,EAAE,EAAE,CAAC,IAAI,eAAe,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;AAExL,mFAAmF;AACnF,MAAM,UAAU,MAAM,CAAC,GAAW,EAAE,MAA8B,EAAE,IAAY,EAAE,IAAY;IAC5F,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,MAAM,CAAC,CAAC;IAClE,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC5C,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;QACtB,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;YAAE,MAAM,SAAS,CAAC,yBAAyB,EAAE,IAAI,IAAI,aAAa,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,SAAS,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACnP,OAAO,CAAC,CAAC;IACX,CAAC;IACD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,OAAO;YAAE,MAAM,SAAS,CAAC,yBAAyB,EAAE,IAAI,IAAI,gCAAgC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACxJ,OAAO,GAAG,KAAK,MAAM,CAAC;IACxB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,sHAAsH;AACtH,MAAM,UAAU,KAAK,CAAC,QAAgB,EAAE,IAAY;IAClD,MAAM,KAAK,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpF,MAAM,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACrC,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACvC,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;QACpC,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YAAC,GAAG,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,IAAI,CAAC;QAAC,CAAC;QAC/D,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC;aAC3E,IAAI,IAAI,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC;IACrC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,CAAW,EAAE,KAAsB,EAAE,IAAY;IACvF,MAAM,KAAK,GAA4B,EAAE,CAAC;IAC1C,KAAK,MAAM,CAAC,CAAC,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,UAAU,IAAI,EAAE,CAAC,EAAE,CAAC;QACpE,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACzB,IAAI,GAAG,KAAK,IAAI;YAAE,KAAK,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,GAAG,EAAE,MAAoB,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;aACnE,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;YAAE,MAAM,SAAS,CAAC,yBAAyB,EAAE,SAAS,IAAI,2BAA2B,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAC3I,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACjC,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACnC,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,IAAI,CAAW,EAAE,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AACrJ,CAAC;AAED,MAAM,QAAQ,GAAG,SAAS,CAAC;AAE3B,0DAA0D;AAC1D,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAgB,EAAE,IAAY;IACjE,IAAI,IAAI,GAAY,EAAE,CAAC;IACvB,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;QAClC,IAAI,IAAI,CAAC,MAAM,GAAG,QAAQ;YAAE,MAAM,SAAS,CAAC,yBAAyB,EAAE,mCAAmC,QAAQ,aAAa,EAAE,IAAI,CAAC,CAAC;QACvI,IAAI,CAAC;YAAC,IAAI,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,SAAS,CAAC,yBAAyB,EAAE,oCAAoC,EAAE,IAAI,CAAC,CAAC;QAAC,CAAC;IACvJ,CAAC;IACD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,MAAM,SAAS,CAAC,yBAAyB,EAAE,wCAAwC,EAAE,IAAI,CAAC,CAAC;IACjK,OAAO,IAA+B,CAAC;AACzC,CAAC;AAED,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,IAAa,EAAE,MAAM,GAAG,GAAG,EAAE,OAAgC,EAAY,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AAElK,8FAA8F;AAC9F,MAAM,UAAU,OAAO,CAAC,CAAU,EAAE,OAAe,EAAE,OAAgC;IACnF,IAAI,CAAC,YAAY,eAAe;QAAE,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,EAAE,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,CAAC;IAC5H,OAAO,CAAC,KAAK,CAAC,WAAW,OAAO,qBAAqB,EAAE,CAAC,CAAC,CAAC;IAC1D,OAAO,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,6BAA6B,EAAE,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;AAC3G,CAAC"}

package/dist/core/withCaller.d.ts

@@ -0,0 +1,16 @@
+import type { CallerResolver } from "./caller.js";
+import type { Surface } from "./service.js";
+export interface WithCallerOptions {
+    /**
+     * The protected-resource metadata URL (RFC 9728). The MCP authorization spec has a client find the authorization server from the
+     * `resource_metadata` parameter of the 401 challenge, so an MCP entry passes it and every challenge carries it.
+     */
+    readonly resourceMetadata?: string;
+}
+/**
+ * The one authentication boundary of a service's entry (ADR-0032 decision 8): resolve the Caller once per request, then run the
+ * surface. An invalid credential is answered here, before any surface runs, and is never treated as anonymous. A cookie session is
+ * ambient authority, so it may not mutate across origins; a bearer token is sent on purpose and is not held to that.
+ */
+export declare function withCaller(resolve: CallerResolver, surface: Surface, options?: WithCallerOptions): (request: Request) => Promise<Response>;
+//# sourceMappingURL=withCaller.d.ts.map

package/dist/core/withCaller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"withCaller.d.ts","sourceRoot":"","sources":["../../src/core/withCaller.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAO5C,MAAM,WAAW,iBAAiB;IAChC;;;OAGG;IACH,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACpC;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,cAAc,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,GAAE,iBAAsB,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAmB9I"}

package/dist/core/withCaller.js

@@ -0,0 +1,29 @@
+import { makeDiagnostic, redactForWire } from "../spec/kernel/index.js";
+const SAFE = new Set(["GET", "HEAD", "OPTIONS"]);
+const refuse = (status, code, message, path, challenge) => Response.json({ error: redactForWire(makeDiagnostic({ code, phase: "runtime", severity: "error", path, message })) }, { status, headers: challenge ? { "www-authenticate": challenge } : {} });
+/**
+ * The one authentication boundary of a service's entry (ADR-0032 decision 8): resolve the Caller once per request, then run the
+ * surface. An invalid credential is answered here, before any surface runs, and is never treated as anonymous. A cookie session is
+ * ambient authority, so it may not mutate across origins; a bearer token is sent on purpose and is not held to that.
+ */
+export function withCaller(resolve, surface, options = {}) {
+    return async (request) => {
+        const r = await resolve(request);
+        if ("caller" in r) {
+            if (r.caller.kind === "user" && r.caller.credential === "session" && !SAFE.has(request.method)) {
+                const site = request.headers.get("sec-fetch-site");
+                const origin = request.headers.get("origin");
+                // neither header is what Better Auth refuses too: every browser sends one of them on a mutation
+                if ((!site && !origin) || (site && site !== "same-origin" && site !== "none") || (origin && origin !== new URL(request.url).origin))
+                    return refuse(403, "AUTH_DENIED", "Cross-origin session mutation rejected.", "request:origin");
+            }
+            return surface(request, r.caller);
+        }
+        const status = r.status ?? 401;
+        const challenge = r.challenge && options.resourceMetadata ? `${r.challenge}, resource_metadata="${options.resourceMetadata}"` : r.challenge ?? (options.resourceMetadata ? `Bearer resource_metadata="${options.resourceMetadata}"` : undefined);
+        return status === 401
+            ? refuse(401, "UNAUTHENTICATED", "The presented credential is missing, malformed, expired, revoked, or invalid.", "request:authorization", challenge)
+            : refuse(403, "AUTH_DENIED", "The verified credential lacks a required scope.", "request:authorization", challenge);
+    };
+}
+//# sourceMappingURL=withCaller.js.map

package/dist/core/withCaller.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"withCaller.js","sourceRoot":"","sources":["../../src/core/withCaller.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,aAAa,EAAuB,MAAM,yBAAyB,CAAC;AAI7F,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;AAEjD,MAAM,MAAM,GAAG,CAAC,MAAiB,EAAE,IAAoB,EAAE,OAAe,EAAE,IAAY,EAAE,SAAkB,EAAE,EAAE,CAC5G,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAUjM;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,OAAuB,EAAE,OAAgB,EAAE,UAA6B,EAAE;IACnG,OAAO,KAAK,EAAE,OAAO,EAAE,EAAE;QACvB,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;QACjC,IAAI,QAAQ,IAAI,CAAC,EAAE,CAAC;YAClB,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC/F,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;gBACnD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBAC7C,gGAAgG;gBAChG,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,aAAa,IAAI,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,MAAM,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;oBACjI,OAAO,MAAM,CAAC,GAAG,EAAE,aAAa,EAAE,yCAAyC,EAAE,gBAAgB,CAAC,CAAC;YACnG,CAAC;YACD,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;QACpC,CAAC;QACD,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,IAAI,GAAG,CAAC;QAC/B,MAAM,SAAS,GAAG,CAAC,CAAC,SAAS,IAAI,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,SAAS,wBAAwB,OAAO,CAAC,gBAAgB,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,6BAA6B,OAAO,CAAC,gBAAgB,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACjP,OAAO,MAAM,KAAK,GAAG;YACnB,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,iBAAiB,EAAE,+EAA+E,EAAE,uBAAuB,EAAE,SAAS,CAAC;YACrJ,CAAC,CAAC,MAAM,CAAC,GAAG,EAAE,aAAa,EAAE,iDAAiD,EAAE,uBAAuB,EAAE,SAAS,CAAC,CAAC;IACxH,CAAC,CAAC;AACJ,CAAC"}

package/dist/d1/adapter.d.ts

@@ -0,0 +1,12 @@
+import type { SiteDefaults } from "../spec/domain/index.js";
+import { type RestrictSql } from "../core/dialect.js";
+import type { DatabaseDriver } from "../core/driver.js";
+import type { MantleStorageAdapter } from "../core/service.js";
+/** `restrict`: an operator's own refusals, after the dialect's, on every program (ADR-0037 decision 4). */
+export declare function sqliteStorage(driver: DatabaseDriver, options?: {
+    timeZone?: string;
+    maxBindings?: number;
+    site?: SiteDefaults;
+    restrict?: RestrictSql;
+}): MantleStorageAdapter;
+//# sourceMappingURL=adapter.d.ts.map

package/dist/d1/adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../src/d1/adapter.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAC5D,OAAO,EAAc,KAAK,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAClE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACxD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAM/D,2GAA2G;AAC3G,wBAAgB,aAAa,CAAC,MAAM,EAAE,cAAc,EAAE,OAAO,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,EAAE,WAAW,CAAA;CAAO,GAAG,oBAAoB,CAYlL"}

package/dist/d1/adapter.js

@@ -0,0 +1,23 @@
+/** The MantleStorageAdapter of the SQLite family: converge storage to the plan, then run on one driver (ADR-0033, ADR-0034 decision 6). */
+import { DiagnosticError, makeDiagnostic } from "../spec/kernel/index.js";
+import { restricted } from "../core/dialect.js";
+import { d1Dialect } from "./dialect.js";
+import { SqliteStoreExecutor } from "./executor.js";
+import { prepareSite } from "./site.js";
+import { convergeStorage } from "./storage.js";
+/** `restrict`: an operator's own refusals, after the dialect's, on every program (ADR-0037 decision 4). */
+export function sqliteStorage(driver, options = {}) {
+    return {
+        dialect: restricted(d1Dialect, options.restrict),
+        async prepare(plan) {
+            const report = await convergeStorage(driver, plan.schemas, { fingerprint: plan.fingerprint, timeZone: options.timeZone });
+            if (report.blocked.length)
+                throw new DiagnosticError(report.blocked.map((b) => makeDiagnostic({ code: b.code === "STORAGE_TABLE_NOT_OWNED" ? "STORAGE_TABLE_NOT_OWNED" : "STORAGE_CHANGE_BLOCKED", phase: "boot", severity: "error", path: `storage:${b.schema}`, message: b.message })));
+            for (const u of report.undeclared)
+                console.warn(`[mantle storage] ${u.code}: ${u.message}`);
+            // Core's product tables exist only for a service that selects them
+            return { executor: new SqliteStoreExecutor(driver, options.maxBindings), ...(options.site ? { site: await prepareSite(driver, options.site) } : {}) };
+        },
+    };
+}
+//# sourceMappingURL=adapter.js.map

package/dist/d1/adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../../src/d1/adapter.ts"],"names":[],"mappings":"AAAA,2IAA2I;AAC3I,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAE1E,OAAO,EAAE,UAAU,EAAoB,MAAM,oBAAoB,CAAC;AAGlE,OAAO,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AACzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAE/C,2GAA2G;AAC3G,MAAM,UAAU,aAAa,CAAC,MAAsB,EAAE,UAAoG,EAAE;IAC1J,OAAO;QACL,OAAO,EAAE,UAAU,CAAC,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC;QAChD,KAAK,CAAC,OAAO,CAAC,IAAI;YAChB,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC1H,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM;gBACvB,MAAM,IAAI,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,KAAK,yBAAyB,CAAC,CAAC,CAAC,yBAAyB,CAAC,CAAC,CAAC,wBAAwB,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC;YACjQ,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,UAAU;gBAAE,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YAC5F,mEAAmE;YACnE,OAAO,EAAE,QAAQ,EAAE,IAAI,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC,EAAE,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QACxJ,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/d1/codec.d.ts

@@ -0,0 +1,14 @@
+/** SQLite storage class a Mantle type is bound and CAST as. Every bind goes through `CAST(?n AS <this>)`. */
+export declare function sqliteType(type: string): 'text' | 'integer' | 'real';
+/** '12.34' (or a number) -> 1234n at scale 2. Refuses digits beyond the scale rather than rounding silently. */
+export declare function encodeNumeric(v: string | number, p: number, s: number): number;
+export declare function decodeNumeric(n: number, s: number): string;
+/** ISO-8601 with an explicit offset (or Z) -> microseconds. Refuses a zone-less timestamp. */
+export declare function encodeTimestamptz(v: string | Date | number): number;
+export declare function decodeTimestamptz(us: number): string;
+export declare function encodeDate(v: string | Date): number;
+export declare const decodeDate: (days: number) => string;
+/** JS value -> the value bound for an input of this declared type. */
+export declare function encodeInput(type: string, v: any): unknown;
+export declare function decodeOutput(type: string, v: any): unknown;
+//# sourceMappingURL=codec.d.ts.map

package/dist/d1/codec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codec.d.ts","sourceRoot":"","sources":["../../src/d1/codec.ts"],"names":[],"mappings":"AAQA,6GAA6G;AAC7G,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,GAAG,MAAM,CAQpE;AAED,gHAAgH;AAChH,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAU9E;AACD,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAK1D;AAED,8FAA8F;AAC9F,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,GAAG,MAAM,CAgBnE;AACD,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAGpD;AACD,wBAAgB,UAAU,CAAC,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CASnD;AACD,eAAO,MAAM,UAAU,GAAI,MAAM,MAAM,WAA2D,CAAC;AAQnG,sEAAsE;AACtE,wBAAgB,WAAW,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,GAAG,OAAO,CAiBzD;AACD,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,EAAE,GAAG,GAAG,OAAO,CAW1D"}

package/dist/d1/codec.js

@@ -0,0 +1,136 @@
+// Type encodings (ADR-0034 decision 5) and the boundary codec.
+//   timestamptz -> INTEGER microseconds since the epoch (exact to 2255: 2^53 us)
+//   date        -> INTEGER days since 1970-01-01
+//   numeric(p,s)-> INTEGER scaled by 10^s, p <= 15 (D1 rounds integers past 2^53)
+import { SqlRefusal as Refused, parseNumeric } from '../spec/domain/index.js';
+const US_PER_DAY = 86_400_000_000;
+/** SQLite storage class a Mantle type is bound and CAST as. Every bind goes through `CAST(?n AS <this>)`. */
+export function sqliteType(type) {
+    if (parseNumeric(type))
+        return 'integer';
+    switch (type) {
+        case 'text':
+        case 'json':
+        case 'geo': return 'text';
+        case 'int4':
+        case 'int8':
+        case 'integer':
+        case 'bool':
+        case 'timestamptz':
+        case 'date': return 'integer';
+        case 'float8':
+        case 'real': return 'real';
+    }
+    throw new Refused('SQL_TYPE', `unknown type ${type}`);
+}
+/** '12.34' (or a number) -> 1234n at scale 2. Refuses digits beyond the scale rather than rounding silently. */
+export function encodeNumeric(v, p, s) {
+    const str = typeof v === 'number' ? v.toString() : v.trim();
+    const m = /^(-?)(\d+)(?:\.(\d+))?$/.exec(str);
+    if (!m)
+        throw new Refused('SQL_TYPE', `${str} is not a decimal number`);
+    const frac = m[3] ?? '';
+    if (frac.length > s)
+        throw new Refused('SQL_TYPE', `${str} has more than ${s} fractional digits`);
+    const digits = m[2] + frac.padEnd(s, '0');
+    if (digits.replace(/^0+/, '').length > p)
+        throw new Refused('SQL_TYPE', `${str} does not fit numeric(${p}, ${s})`);
+    const n = Number(digits);
+    return m[1] ? -n : n;
+}
+export function decodeNumeric(n, s) {
+    const neg = n < 0;
+    const d = Math.abs(n).toString().padStart(s + 1, '0');
+    const out = s ? `${d.slice(0, -s)}.${d.slice(-s)}` : d;
+    return neg ? `-${out}` : out;
+}
+/** ISO-8601 with an explicit offset (or Z) -> microseconds. Refuses a zone-less timestamp. */
+export function encodeTimestamptz(v) {
+    if (v instanceof Date)
+        return v.getTime() * 1000;
+    if (typeof v === 'number') {
+        if (!Number.isSafeInteger(v))
+            throw new Refused('SQL_TYPE', `${v} is not a whole number of microseconds within 2^53`);
+        return v;
+    }
+    const m = /^(\d{4}-\d\d-\d\d)[T ](\d\d:\d\d(?::\d\d)?)(?:\.(\d{1,6}))?(Z|[+-]\d\d(?::?\d\d)?)$/.exec(v.trim());
+    if (!m)
+        throw new Refused('SQL_TYPE', `'${v}' is not a timestamp with an explicit offset`);
+    const [, day, time, fraction, offset] = m;
+    const frac = (fraction ?? '').padEnd(6, '0');
+    const zone = offset === 'Z' ? 'Z' : offset.length === 3 ? `${offset}:00` : offset.includes(':') ? offset : `${offset.slice(0, 3)}:${offset.slice(3)}`;
+    const secs = Date.parse(`${day}T${time.length === 5 ? time + ':00' : time}${zone}`);
+    encodeDate(day); // Date.parse rolls 2026-02-30 over to March; a day that does not exist is refused
+    const micros = secs * 1000 + Number(frac);
+    if (Number.isNaN(secs) || !Number.isSafeInteger(micros))
+        throw new Refused('SQL_TYPE', `'${v}' is not a valid timestamp`);
+    return micros;
+}
+export function decodeTimestamptz(us) {
+    const ms = Math.floor(us / 1000), rest = us - ms * 1000;
+    return new Date(ms).toISOString().replace('Z', String(rest).padStart(3, '0') + 'Z');
+}
+export function encodeDate(v) {
+    const m = /^(\d{4})-(\d\d)-(\d\d)$/.exec(typeof v === 'string' ? v : v.toISOString().slice(0, 10));
+    if (!m)
+        throw new Refused('SQL_TYPE', `'${v}' is not a date`);
+    const [, y, mo, d] = m;
+    const dt = new Date(0);
+    dt.setUTCFullYear(+y, +mo - 1, +d); // Date.UTC would read years 0 to 99 as 1900 to 1999
+    const days = dt.getTime() / (US_PER_DAY / 1000);
+    if (dt.getUTCDate() !== +d)
+        throw new Refused('SQL_TYPE', `'${v}' is not a valid date`);
+    return days;
+}
+export const decodeDate = (days) => new Date(days * 86_400_000).toISOString().slice(0, 10);
+/** A json column's text as its value. Text that is not JSON (a bare string a SQL literal wrote) reads back as that string, never a throw. */
+function decodeJson(v) {
+    if (typeof v !== 'string')
+        return v;
+    try {
+        return JSON.parse(v);
+    }
+    catch {
+        return v;
+    }
+}
+/** JS value -> the value bound for an input of this declared type. */
+export function encodeInput(type, v) {
+    if (v === null || v === undefined)
+        return null;
+    const num = parseNumeric(type);
+    if (num)
+        return encodeNumeric(v, num.p, num.s);
+    switch (type) {
+        case 'int4':
+        case 'int8':
+        case 'integer':
+            if (!Number.isSafeInteger(v))
+                throw new Refused('SQL_TYPE', `${v} is not a safe integer: D1 rounds integers past 2^53`);
+            return v;
+        case 'float8':
+        case 'real': return v;
+        case 'bool': return v ? 1 : 0;
+        case 'text': return String(v);
+        // every value is stored as its JSON text, a string included, so decodeOutput reads back what was written
+        case 'json': return JSON.stringify(v);
+        case 'timestamptz': return encodeTimestamptz(v);
+        case 'date': return encodeDate(v);
+    }
+    throw new Refused('SQL_TYPE', `cannot encode ${type}`);
+}
+export function decodeOutput(type, v) {
+    if (v === null || v === undefined)
+        return null;
+    const num = parseNumeric(type);
+    if (num)
+        return decodeNumeric(v, num.s);
+    switch (type) {
+        case 'bool': return v === 1;
+        case 'timestamptz': return decodeTimestamptz(v);
+        case 'date': return decodeDate(v);
+        case 'json': return decodeJson(v);
+    }
+    return v;
+}
+//# sourceMappingURL=codec.js.map

package/dist/d1/codec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codec.js","sourceRoot":"","sources":["../../src/d1/codec.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAC/D,iFAAiF;AACjF,iDAAiD;AACjD,kFAAkF;AAClF,OAAO,EAAE,UAAU,IAAI,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAE9E,MAAM,UAAU,GAAG,cAAc,CAAC;AAElC,6GAA6G;AAC7G,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,IAAI,YAAY,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IACzC,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,MAAM,CAAC;QAAC,KAAK,MAAM,CAAC;QAAC,KAAK,KAAK,CAAC,CAAC,OAAO,MAAM,CAAC;QACpD,KAAK,MAAM,CAAC;QAAC,KAAK,MAAM,CAAC;QAAC,KAAK,SAAS,CAAC;QAAC,KAAK,MAAM,CAAC;QAAC,KAAK,aAAa,CAAC;QAAC,KAAK,MAAM,CAAC,CAAC,OAAO,SAAS,CAAC;QACzG,KAAK,QAAQ,CAAC;QAAC,KAAK,MAAM,CAAC,CAAC,OAAO,MAAM,CAAC;IAC5C,CAAC;IACD,MAAM,IAAI,OAAO,CAAC,UAAU,EAAE,gBAAgB,IAAI,EAAE,CAAC,CAAC;AACxD,CAAC;AAED,gHAAgH;AAChH,MAAM,UAAU,aAAa,CAAC,CAAkB,EAAE,CAAS,EAAE,CAAS;IACpE,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5D,MAAM,CAAC,GAAG,yBAAyB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,OAAO,CAAC,UAAU,EAAE,GAAG,GAAG,0BAA0B,CAAC,CAAC;IACxE,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACxB,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,OAAO,CAAC,UAAU,EAAE,GAAG,GAAG,kBAAkB,CAAC,oBAAoB,CAAC,CAAC;IAClG,MAAM,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC1C,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,OAAO,CAAC,UAAU,EAAE,GAAG,GAAG,yBAAyB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnH,MAAM,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;IACzB,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACvB,CAAC;AACD,MAAM,UAAU,aAAa,CAAC,CAAS,EAAE,CAAS;IAChD,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IAClB,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC;IACtD,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACvD,OAAO,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC;AAC/B,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,iBAAiB,CAAC,CAAyB;IACzD,IAAI,CAAC,YAAY,IAAI;QAAE,OAAO,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC;IACjD,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAC1B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC;YAAE,MAAM,IAAI,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,oDAAoD,CAAC,CAAC;QACtH,OAAO,CAAC,CAAC;IACX,CAAC;IACD,MAAM,CAAC,GAAG,qFAAqF,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/G,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,8CAA8C,CAAC,CAAC;IAC3F,MAAM,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAwB,CAAC;IACjE,MAAM,IAAI,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC7C,MAAM,IAAI,GAAG,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,KAAK,CAAC,CAAC,CAAC,MAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAO,CAAC,CAAC,CAAC,GAAG,MAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3J,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,IAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC;IACrF,UAAU,CAAC,GAAI,CAAC,CAAC,CAAC,kFAAkF;IACpG,MAAM,MAAM,GAAG,IAAI,GAAG,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,4BAA4B,CAAC,CAAC;IAC1H,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,MAAM,UAAU,iBAAiB,CAAC,EAAU;IAC1C,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,EAAE,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IACxD,OAAO,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC;AACtF,CAAC;AACD,MAAM,UAAU,UAAU,CAAC,CAAgB;IACzC,MAAM,CAAC,GAAG,yBAAyB,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IACnG,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,iBAAiB,CAAC,CAAC;IAC9D,MAAM,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,GAAG,CAAwB,CAAC;IAC9C,MAAM,EAAE,GAAG,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;IACvB,EAAE,CAAC,cAAc,CAAC,CAAC,CAAE,EAAE,CAAC,EAAG,GAAG,CAAC,EAAE,CAAC,CAAE,CAAC,CAAC,CAAC,oDAAoD;IAC3F,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,EAAE,GAAG,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IAChD,IAAI,EAAE,CAAC,UAAU,EAAE,KAAK,CAAC,CAAE;QAAE,MAAM,IAAI,OAAO,CAAC,UAAU,EAAE,IAAI,CAAC,uBAAuB,CAAC,CAAC;IACzF,OAAO,IAAI,CAAC;AACd,CAAC;AACD,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAEnG,6IAA6I;AAC7I,SAAS,UAAU,CAAC,CAAU;IAC5B,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC;IACpC,IAAI,CAAC;QAAC,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,CAAC,CAAC;IAAC,CAAC;AACnD,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,WAAW,CAAC,IAAY,EAAE,CAAM;IAC9C,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC/C,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,GAAG;QAAE,OAAO,aAAa,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAC/C,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,MAAM,CAAC;QAAC,KAAK,MAAM,CAAC;QAAC,KAAK,SAAS;YACtC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC;gBAAE,MAAM,IAAI,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,sDAAsD,CAAC,CAAC;YACxH,OAAO,CAAC,CAAC;QACX,KAAK,QAAQ,CAAC;QAAC,KAAK,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC;QACrC,KAAK,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC9B,KAAK,MAAM,CAAC,CAAC,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;QAC9B,yGAAyG;QACzG,KAAK,MAAM,CAAC,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;QACtC,KAAK,aAAa,CAAC,CAAC,OAAO,iBAAiB,CAAC,CAAC,CAAC,CAAC;QAChD,KAAK,MAAM,CAAC,CAAC,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC;IACpC,CAAC;IACD,MAAM,IAAI,OAAO,CAAC,UAAU,EAAE,iBAAiB,IAAI,EAAE,CAAC,CAAC;AACzD,CAAC;AACD,MAAM,UAAU,YAAY,CAAC,IAAY,EAAE,CAAM;IAC/C,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC/C,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,GAAG;QAAE,OAAO,aAAa,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IACxC,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC5B,KAAK,aAAa,CAAC,CAAC,OAAO,iBAAiB,CAAC,CAAC,CAAC,CAAC;QAChD,KAAK,MAAM,CAAC,CAAC,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC;QAClC,KAAK,MAAM,CAAC,CAAC,OAAO,UAAU,CAAC,CAAC,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/d1/compile/index.d.ts

@@ -0,0 +1,9 @@
+/**
+ * `@aotter/mantle/d1/compile`: the D1 dialect's compile side (ADR-0035 decision 3). Loaded only by the CLI, after the shared
+ * front end has parsed the source and tagged its relations. `accepts` throws the first refusal (`SqlRefusal`, with its offset).
+ */
+/** The D1 dialect as a plan records it (ADR-0035 decision 5). `version` changes when what a D1 plan means changes. */
+export declare const name = "@aotter/mantle/d1";
+export declare const version = "1";
+export { validateProgram as accepts } from "../validator.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/d1/compile/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/d1/compile/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,sHAAsH;AACtH,eAAO,MAAM,IAAI,sBAAsB,CAAC;AACxC,eAAO,MAAM,OAAO,MAAM,CAAC;AAC3B,OAAO,EAAE,eAAe,IAAI,OAAO,EAAE,MAAM,iBAAiB,CAAC"}

package/dist/d1/compile/index.js

@@ -0,0 +1,9 @@
+/**
+ * `@aotter/mantle/d1/compile`: the D1 dialect's compile side (ADR-0035 decision 3). Loaded only by the CLI, after the shared
+ * front end has parsed the source and tagged its relations. `accepts` throws the first refusal (`SqlRefusal`, with its offset).
+ */
+/** The D1 dialect as a plan records it (ADR-0035 decision 5). `version` changes when what a D1 plan means changes. */
+export const name = "@aotter/mantle/d1";
+export const version = "1";
+export { validateProgram as accepts } from "../validator.js";
+//# sourceMappingURL=index.js.map

package/dist/d1/compile/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/d1/compile/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,sHAAsH;AACtH,MAAM,CAAC,MAAM,IAAI,GAAG,mBAAmB,CAAC;AACxC,MAAM,CAAC,MAAM,OAAO,GAAG,GAAG,CAAC;AAC3B,OAAO,EAAE,eAAe,IAAI,OAAO,EAAE,MAAM,iBAAiB,CAAC"}

package/dist/d1/dialect.d.ts

@@ -0,0 +1,4 @@
+/** The D1 dialect's runtime side (ADR-0035 decision 6): ADR-0034's subset, SQLite encodings and lowering, and Core's injected policy. */
+import type { MantleDialect } from "../core/dialect.js";
+export declare const d1Dialect: MantleDialect;
+//# sourceMappingURL=dialect.d.ts.map

package/dist/d1/dialect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dialect.d.ts","sourceRoot":"","sources":["../../src/d1/dialect.ts"],"names":[],"mappings":"AAAA,yIAAyI;AACzI,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAMxD,eAAO,MAAM,SAAS,EAAE,aAOvB,CAAC"}