@aotter/mantle 0.1.5-alpha.1 → 0.2.0-alpha.2

package/dist/spec/domain/model/SqlIr.d.ts

@@ -0,0 +1,96 @@
+/**
+ * Store SQL and its IR (ADR-0034). The IR is libpg-query's parse tree for the
+ * supported subset, with source locations stripped and every relation tagged
+ * `table` or `cte`. Mantle designs no node types, so nodes are typed loosely on
+ * purpose: the dialect's allowlist (`src/core/sql/allowlist.ts`), not a TypeScript type, constrains
+ * them.
+ *
+ * Pure types and constants only. Nothing here imports the parser.
+ */
+import type { DiagnosticCode } from "../../kernel/diagnostic.js";
+export type SqlNode = Record<string, any>;
+/** The PostgreSQL grammar version a plan records (libpg-query 18: PG 18.0.4). */
+export declare const PG_GRAMMAR = 180004;
+/** The `SQL_*` codes of the diagnostic kernel; each is described in docs/handbook/reference/diagnostics.md. */
+export type SqlDiagnosticCode = Extract<DiagnosticCode, `SQL_${string}`>;
+export interface SqlSchemaDef {
+    /** column that holds the owner; every read and write is filtered on it */
+    readonly scope?: string;
+    /** a declared timestamptz field the author writes; a row is invisible once it is `ttlSeconds` old (a NULL never expires) */
+    readonly ttl?: string;
+    readonly ttlSeconds?: number;
+    /** lifecycle `publishing`: a public caller sees only published rows */
+    readonly publishing?: boolean;
+    /** declared fields and their Mantle types: text integer real bool json timestamptz date numeric(p,s) geo */
+    readonly fields: Readonly<Record<string, string>>;
+}
+/**
+ * What the allowlist reads off every Schema of a context: computed from `schemas` (`schemaColumns`), once per plan by a caller that
+ * checks many programs against one plan, or per program when absent.
+ */
+export interface SchemaColumns {
+    /** every declared column name (a geo field also as its `_lat` and `_lng` columns) */
+    readonly known: ReadonlySet<string>;
+    /** the scope columns, folded */
+    readonly scopes: ReadonlySet<string>;
+    /** column name -> its type, when every Schema that declares it agrees */
+    readonly types: ReadonlyMap<string, string>;
+}
+export interface SqlContext {
+    readonly schemas: Readonly<Record<string, SqlSchemaDef>>;
+    /** `schemaColumns(schemas)`, precomputed; must be of these `schemas` */
+    readonly columns?: SchemaColumns;
+    /** declared input properties and their Mantle types */
+    readonly inputs: Readonly<Record<string, string>>;
+    readonly kind: "view" | "procedure";
+    /** a public View: a caller sees published rows only, even across a join */
+    readonly public?: boolean;
+    /**
+     * The Views a FROM may name (ADR-0037 decision 3), by name with `-` as `_`: an internal View's compiled SELECT, which the
+     * compiler inlines as a subquery, or why that View cannot be read. Compile side only.
+     */
+    readonly views?: Readonly<Record<string, {
+        readonly select?: SqlNode;
+        readonly refusal?: string;
+    }>>;
+}
+/** A refusal of Store SQL. `line` and `column` are 1-based; `token` is the source text there. */
+export interface SqlDiagnostic {
+    readonly code: SqlDiagnosticCode;
+    readonly message: string;
+    readonly offset?: number;
+    readonly line?: number;
+    readonly column?: number;
+    readonly token?: string;
+}
+/** What the plan carries for one SQL source: the grammar it was parsed by, and the IR statements. */
+export interface SqlPlan {
+    readonly grammar: number;
+    readonly stmts: readonly SqlNode[];
+}
+/** Whether an expression holds a subquery, by structure: a string literal 'SubLink' is not one. */
+export declare function hasSubLink(v: unknown): boolean;
+/**
+ * The columns storage creates for a Schema, each with its type: the native ones, the scope field, `status` on a publishing Schema,
+ * and each field (a geo field as its `_lat` and `_lng` columns). `created_at`/`updated_at` are typed per dialect, so `native`.
+ */
+export declare function storageColumns(s: {
+    readonly fields?: Readonly<Record<string, string>>;
+    readonly scope?: string;
+    readonly publishing?: boolean;
+}): Map<string, string>;
+/** A field whose name is a column storage creates for something else (`_rid`, or another geo field's `_lat`/`_lng`), or undefined. */
+export declare function storageColumnClash(fields: Readonly<Record<string, string>>): string | undefined;
+/** The functions a Schema check may call, by their bare name: each takes one argument of a type SQLite and PostgreSQL both accept. */
+export declare const CHECK_FUNCTIONS: ReadonlyMap<string, {
+    readonly takes: readonly string[];
+    readonly returns: "text" | "integer" | "argument";
+}>;
+/**
+ * Why a Schema check cannot run in the table's DDL as written, or undefined. Storage prints a check unlowered into a trigger or
+ * CHECK constraint, so it names only `columns` (`storageColumns` of its own Schema, unqualified) through operators and
+ * `CHECK_FUNCTIONS`: no subquery, no cast, and nothing the runtime binds per request (`auth.uid()`, `now()`) or a dialect spells
+ * its own way. Operand types beyond the functions' arguments are the database's to check at boot.
+ */
+export declare function checkShapeProblem(v: unknown, columns: ReadonlyMap<string, string>): string | undefined;
+//# sourceMappingURL=SqlIr.d.ts.map

package/dist/spec/domain/model/SqlIr.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SqlIr.d.ts","sourceRoot":"","sources":["../../../../src/spec/domain/model/SqlIr.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AACjE,MAAM,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;AAE1C,iFAAiF;AACjF,eAAO,MAAM,UAAU,SAAS,CAAC;AAEjC,+GAA+G;AAC/G,MAAM,MAAM,iBAAiB,GAAG,OAAO,CAAC,cAAc,EAAE,OAAO,MAAM,EAAE,CAAC,CAAC;AAEzE,MAAM,WAAW,YAAY;IAC3B,0EAA0E;IAC1E,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,4HAA4H;IAC5H,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,uEAAuE;IACvE,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC;IAC9B,4GAA4G;IAC5G,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACnD;AAED;;;GAGG;AACH,MAAM,WAAW,aAAa;IAC5B,qFAAqF;IACrF,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACpC,gCAAgC;IAChC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IACrC,yEAAyE;IACzE,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC7C;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,CAAC;IACzD,wEAAwE;IACxE,QAAQ,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC;IACjC,uDAAuD;IACvD,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAClD,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,WAAW,CAAC;IACpC,2EAA2E;IAC3E,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B;;;OAGG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE;QAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC,CAAC;CACrG;AAED,iGAAiG;AACjG,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,qGAAqG;AACrG,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,SAAS,OAAO,EAAE,CAAC;CACpC;AAED,mGAAmG;AACnG,wBAAgB,UAAU,CAAC,CAAC,EAAE,OAAO,GAAG,OAAO,CAG9C;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,CAAC,EAAE;IAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAA;CAAE,GAAG,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CASrK;AAED,sIAAsI;AACtI,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,MAAM,GAAG,SAAS,CAG/F;AAED,sIAAsI;AACtI,eAAO,MAAM,eAAe,EAAE,WAAW,CAAC,MAAM,EAAE;IAAE,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,UAAU,CAAA;CAAE,CAGxI,CAAC;AAEH;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,GAAG,SAAS,CAkCtG"}

package/dist/spec/domain/model/SqlIr.js

@@ -0,0 +1,95 @@
+/** The PostgreSQL grammar version a plan records (libpg-query 18: PG 18.0.4). */
+export const PG_GRAMMAR = 180004;
+/** Whether an expression holds a subquery, by structure: a string literal 'SubLink' is not one. */
+export function hasSubLink(v) {
+    if (!v || typeof v !== "object")
+        return false;
+    return Object.entries(v).some(([k, c]) => k === "SubLink" || hasSubLink(c));
+}
+/**
+ * The columns storage creates for a Schema, each with its type: the native ones, the scope field, `status` on a publishing Schema,
+ * and each field (a geo field as its `_lat` and `_lng` columns). `created_at`/`updated_at` are typed per dialect, so `native`.
+ */
+export function storageColumns(s) {
+    const cols = new Map([["_rid", "integer"], ["id", "text"], ["version", "integer"], ["created_at", "native"], ["updated_at", "native"], ["author_id", "text"]]);
+    if (s.scope)
+        cols.set(s.scope, "text");
+    if (s.publishing)
+        cols.set("status", "text");
+    for (const [f, t] of Object.entries(s.fields ?? {})) {
+        if (f === s.scope)
+            continue;
+        if (t === "geo") {
+            cols.set(`${f}_lat`, "real");
+            cols.set(`${f}_lng`, "real");
+        }
+        else
+            cols.set(f, t);
+    }
+    return cols;
+}
+/** A field whose name is a column storage creates for something else (`_rid`, or another geo field's `_lat`/`_lng`), or undefined. */
+export function storageColumnClash(fields) {
+    const taken = new Set(["_rid", ...Object.entries(fields).filter(([, t]) => t === "geo").flatMap(([f]) => [`${f}_lat`, `${f}_lng`])]);
+    return Object.keys(fields).find((f) => taken.has(f));
+}
+/** The functions a Schema check may call, by their bare name: each takes one argument of a type SQLite and PostgreSQL both accept. */
+export const CHECK_FUNCTIONS = new Map([
+    ["lower", { takes: ["text"], returns: "text" }], ["upper", { takes: ["text"], returns: "text" }],
+    ["length", { takes: ["text"], returns: "integer" }], ["abs", { takes: ["integer", "real"], returns: "argument" }],
+]);
+/**
+ * Why a Schema check cannot run in the table's DDL as written, or undefined. Storage prints a check unlowered into a trigger or
+ * CHECK constraint, so it names only `columns` (`storageColumns` of its own Schema, unqualified) through operators and
+ * `CHECK_FUNCTIONS`: no subquery, no cast, and nothing the runtime binds per request (`auth.uid()`, `now()`) or a dialect spells
+ * its own way. Operand types beyond the functions' arguments are the database's to check at boot.
+ */
+export function checkShapeProblem(v, columns) {
+    const columnOf = (ref) => {
+        const fields = ref?.fields;
+        const name = Array.isArray(fields) && fields.length === 1 ? fields[0]?.String?.sval : undefined;
+        return typeof name === "string" && columns.has(name) ? name : undefined;
+    };
+    // as written: storage prints the call unlowered, so `pg_catalog.lower` is not `lower` to SQLite
+    const fname = (call) => Array.isArray(call?.funcname) ? call.funcname.map((x) => x?.String?.sval).join(".") : "";
+    const typeOf = (n) => {
+        if (n?.ColumnRef)
+            return columns.get(columnOf(n.ColumnRef) ?? "");
+        if (n?.FuncCall) {
+            const f = CHECK_FUNCTIONS.get(fname(n.FuncCall));
+            return f?.returns === "argument" ? typeOf(n.FuncCall.args?.[0]) : f?.returns;
+        }
+        if (n?.A_Const)
+            return n.A_Const.sval ? "text" : n.A_Const.ival ? "integer" : n.A_Const.fval ? "real" : undefined;
+        return undefined;
+    };
+    const walk = (v) => {
+        if (!v || typeof v !== "object")
+            return undefined;
+        for (const [k, c] of Object.entries(v)) {
+            if (k === "SubLink")
+                return "a check reads only the row's own columns: no subquery";
+            if (k === "TypeCast" || k === "SQLValueFunction")
+                return "a check reads only the row's own columns: no cast or SQL value function";
+            if (k === "ColumnRef" && !columnOf(c))
+                return `a check names only its own Schema's columns, unqualified: ${JSON.stringify((c?.fields ?? []).map((x) => x?.String?.sval ?? "*").join("."))} is not one`;
+            if (k === "FuncCall") {
+                const name = fname(c);
+                const takes = CHECK_FUNCTIONS.get(name)?.takes;
+                if (!takes)
+                    return `a check may call only ${[...CHECK_FUNCTIONS.keys()].join(", ")}: ${name || "this call"}() is printed into the table's DDL as written`;
+                if (c.agg_star || c.agg_distinct || c.agg_filter || c.agg_order || c.over || !Array.isArray(c.args) || c.args.length !== 1)
+                    return `${name}() in a check takes one argument, with no DISTINCT, *, FILTER, ORDER BY or OVER`;
+                const t = typeOf(c.args[0]);
+                if (!t || !takes.includes(t))
+                    return `${name}() in a check takes a ${takes.join(" or ")} column, constant or call`;
+            }
+            const inner = walk(c);
+            if (inner)
+                return inner;
+        }
+        return undefined;
+    };
+    return walk(v);
+}
+//# sourceMappingURL=SqlIr.js.map

package/dist/spec/domain/model/SqlIr.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SqlIr.js","sourceRoot":"","sources":["../../../../src/spec/domain/model/SqlIr.ts"],"names":[],"mappings":"AAYA,iFAAiF;AACjF,MAAM,CAAC,MAAM,UAAU,GAAG,MAAM,CAAC;AA8DjC,mGAAmG;AACnG,MAAM,UAAU,UAAU,CAAC,CAAU;IACnC,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9C,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,SAAS,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,CAAiH;IAC9I,MAAM,IAAI,GAAG,IAAI,GAAG,CAAiB,CAAC,CAAC,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,CAAC,YAAY,EAAE,QAAQ,CAAC,EAAE,CAAC,YAAY,EAAE,QAAQ,CAAC,EAAE,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IAC/K,IAAI,CAAC,CAAC,KAAK;QAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACvC,IAAI,CAAC,CAAC,UAAU;QAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC7C,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,EAAE,CAAC;QACpD,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK;YAAE,SAAS;QAC5B,IAAI,CAAC,KAAK,KAAK,EAAE,CAAC;YAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;YAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,CAAC;;YAAM,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACvG,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,sIAAsI;AACtI,MAAM,UAAU,kBAAkB,CAAC,MAAwC;IACzE,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACrI,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,sIAAsI;AACtI,MAAM,CAAC,MAAM,eAAe,GAAkH,IAAI,GAAG,CAAC;IACpJ,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAChG,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,KAAK,EAAE,CAAC,SAAS,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;CAClH,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,CAAU,EAAE,OAAoC;IAChF,MAAM,QAAQ,GAAG,CAAC,GAAyB,EAAE,EAAE;QAC7C,MAAM,MAAM,GAAG,GAAG,EAAE,MAAM,CAAC;QAC3B,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAE,MAAM,CAAC,CAAC,CAAqC,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QACrI,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1E,CAAC,CAAC;IACF,gGAAgG;IAChG,MAAM,KAAK,GAAG,CAAC,IAA4B,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9I,MAAM,MAAM,GAAG,CAAC,CAAkC,EAAsB,EAAE;QACxE,IAAI,CAAC,EAAE,SAAS;YAAE,OAAO,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC;QAClE,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC;YAAC,MAAM,CAAC,GAAG,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;YAAC,OAAO,CAAC,EAAE,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC;QAAC,CAAC;QACpJ,IAAI,CAAC,EAAE,OAAO;YAAE,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;QAClH,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,CAAC,CAAU,EAAsB,EAAE;QAC9C,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAClD,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAAC,CAAoB,EAAE,CAAC;YAC1D,IAAI,CAAC,KAAK,SAAS;gBAAE,OAAO,uDAAuD,CAAC;YACpF,IAAI,CAAC,KAAK,UAAU,IAAI,CAAC,KAAK,kBAAkB;gBAAE,OAAO,yEAAyE,CAAC;YACnI,IAAI,CAAC,KAAK,WAAW,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;gBAAE,OAAO,6DAA6D,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,aAAa,CAAC;YAC5M,IAAI,CAAC,KAAK,UAAU,EAAE,CAAC;gBACrB,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;gBACtB,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC;gBAC/C,IAAI,CAAC,KAAK;oBAAE,OAAO,yBAAyB,CAAC,GAAG,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,WAAW,+CAA+C,CAAC;gBAC1J,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,YAAY,IAAI,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;oBAAE,OAAO,GAAG,IAAI,iFAAiF,CAAC;gBAC5N,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC5B,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC;oBAAE,OAAO,GAAG,IAAI,yBAAyB,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,2BAA2B,CAAC;YACrH,CAAC;YACD,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;YACtB,IAAI,KAAK;gBAAE,OAAO,KAAK,CAAC;QAC1B,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;IACF,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;AACjB,CAAC"}

package/dist/spec/domain/model/index.d.ts

@@ -0,0 +1,14 @@
+/**
+ * `domain/model/` — pure types describing the manifest grammar +
+ * entry concepts + site config + locale shape. No
+ * behavior. No external imports beyond the spec's own kernel.
+ */
+export * from "./ManifestGrammar.js";
+export * from "./Entry.js";
+export * from "./ContentState.js";
+export * from "./SiteConfig.js";
+export * from "./MediaMimeAccept.js";
+export * from "./Locale.js";
+export * from "./SqlIr.js";
+export * from "./RuntimePlan.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/spec/domain/model/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/spec/domain/model/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,cAAc,sBAAsB,CAAC;AACrC,cAAc,YAAY,CAAC;AAC3B,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAChC,cAAc,sBAAsB,CAAC;AACrC,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,kBAAkB,CAAC"}

package/dist/spec/domain/model/index.js

@@ -0,0 +1,14 @@
+/**
+ * `domain/model/` — pure types describing the manifest grammar +
+ * entry concepts + site config + locale shape. No
+ * behavior. No external imports beyond the spec's own kernel.
+ */
+export * from "./ManifestGrammar.js";
+export * from "./Entry.js";
+export * from "./ContentState.js";
+export * from "./SiteConfig.js";
+export * from "./MediaMimeAccept.js";
+export * from "./Locale.js";
+export * from "./SqlIr.js";
+export * from "./RuntimePlan.js";
+//# sourceMappingURL=index.js.map

package/dist/spec/domain/model/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/spec/domain/model/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,cAAc,sBAAsB,CAAC;AACrC,cAAc,YAAY,CAAC;AAC3B,cAAc,mBAAmB,CAAC;AAClC,cAAc,iBAAiB,CAAC;AAChC,cAAc,sBAAsB,CAAC;AACrC,cAAc,aAAa,CAAC;AAC5B,cAAc,YAAY,CAAC;AAC3B,cAAc,kBAAkB,CAAC"}

package/dist/spec/domain/service/CloudflareCron.d.ts

@@ -0,0 +1,2 @@
+export declare function toCloudflareCron(cron: string): string;
+//# sourceMappingURL=CloudflareCron.d.ts.map

package/dist/spec/domain/service/CloudflareCron.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CloudflareCron.d.ts","sourceRoot":"","sources":["../../../../src/spec/domain/service/CloudflareCron.ts"],"names":[],"mappings":"AAWA,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAuCrD"}

package/dist/spec/domain/service/CloudflareCron.js

@@ -0,0 +1,63 @@
+/**
+ * `toCloudflareCron` (ADR-0032 decision 5 and amendment "the service preset"): a five-field POSIX cron (weekday 0 = Sunday) as
+ * Cloudflare's cron triggers spell it (weekday 1 = Sunday through 7 = Saturday). Only explicit weekday numbers move. It lives in
+ * spec, outside the barrel, so the CLI can write `wrangler.jsonc` with it; `@aotter/mantle/cloudflare` is its public home.
+ */
+const PART = /^(\*|\d+|[A-Za-z]{3})(?:-(\d+|[A-Za-z]{3}))?(?:\/(\d+))?$/;
+const MONTHS = ["JAN", "FEB", "MAR", "APR", "MAY", "JUN", "JUL", "AUG", "SEP", "OCT", "NOV", "DEC"];
+const DAYS = ["SUN", "MON", "TUE", "WED", "THU", "FRI", "SAT"];
+/** label, lowest, highest, names (by value from `lowest`) */
+const FIELDS = [["minute", 0, 59, null], ["hour", 0, 23, null], ["day of month", 1, 31, null], ["month", 1, 12, MONTHS], ["weekday", 0, 6, DAYS]];
+export function toCloudflareCron(cron) {
+    const refuse = (why) => {
+        throw new Error(`Cannot map the cron '${cron}' to Cloudflare: ${why}`);
+    };
+    const fields = cron.trim().split(/\s+/);
+    if (fields.length !== 5)
+        refuse("a cron has five fields (minute hour day-of-month month weekday)");
+    const weekday = [];
+    fields.forEach((field, i) => {
+        const [label, min, max, names] = FIELDS[i];
+        // a value as a number: a name counts as its number, and a number must be written plainly (`01` and `1` are one value)
+        const value = (token) => {
+            if (/^\d+$/.test(token)) {
+                if (token.length > 1 && token.startsWith("0"))
+                    refuse(`'${token}' has a leading zero`);
+                if (i === 4 && Number(token) > 6)
+                    refuse(`weekday ${token} is not POSIX (0-6, 0 = Sunday)`);
+                if (Number(token) < min || Number(token) > max)
+                    refuse(`${label} ${token} is outside ${min}-${max}`);
+                return Number(token);
+            }
+            const at = names?.indexOf(token.toUpperCase()) ?? -1;
+            if (at < 0)
+                refuse(`'${token}' is not a valid ${label}`);
+            return at + min;
+        };
+        const day = (token) => (i === 4 && token !== undefined && /^\d+$/.test(token) ? String(Number(token) + 1) : token);
+        const out = field.split(",").map((p) => {
+            const [, start, end, step] = PART.exec(p) ?? refuse(`'${p}' is not a number, name, *, range or step`);
+            if (start === "*") {
+                if (end)
+                    refuse(`'${p}' is not a range`);
+            }
+            else {
+                const a = value(start);
+                if (end && value(end) < a)
+                    refuse(`'${p}' is a range that runs backwards`);
+                if (step !== undefined && !end && !/^\d+$/.test(start))
+                    refuse(`'${p}' is a name with a step`);
+            }
+            if (step !== undefined && (/^0\d/.test(step) || Number(step) < 1))
+                refuse(`'${p}' has a step of '${step}'`);
+            return `${day(start)}${end ? `-${day(end)}` : ""}${step ? `/${step}` : ""}`;
+        });
+        if (i === 4)
+            weekday.push(...out);
+    });
+    // POSIX runs on either day when both are restricted; Cloudflare does not document that rule, so only one may be
+    if (fields[2] !== "*" && fields[4] !== "*")
+        refuse("restrict the day of month or the weekday, not both");
+    return [...fields.slice(0, 4), weekday.join(",")].join(" ");
+}
+//# sourceMappingURL=CloudflareCron.js.map

package/dist/spec/domain/service/CloudflareCron.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CloudflareCron.js","sourceRoot":"","sources":["../../../../src/spec/domain/service/CloudflareCron.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,IAAI,GAAG,2DAA2D,CAAC;AACzE,MAAM,MAAM,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;AACpG,MAAM,IAAI,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;AAC/D,6DAA6D;AAC7D,MAAM,MAAM,GAA6E,CAAC,CAAC,QAAQ,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,cAAc,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;AAE5N,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,MAAM,GAAG,CAAC,GAAW,EAAS,EAAE;QACpC,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,oBAAoB,GAAG,EAAE,CAAC,CAAC;IACzE,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACxC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,CAAC,iEAAiE,CAAC,CAAC;IACnG,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;QAC1B,MAAM,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC;QAC5C,sHAAsH;QACtH,MAAM,KAAK,GAAG,CAAC,KAAa,EAAU,EAAE;YACtC,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;gBACxB,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;oBAAE,MAAM,CAAC,IAAI,KAAK,sBAAsB,CAAC,CAAC;gBACvF,IAAI,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC;oBAAE,MAAM,CAAC,WAAW,KAAK,iCAAiC,CAAC,CAAC;gBAC5F,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,GAAG;oBAAE,MAAM,CAAC,GAAG,KAAK,IAAI,KAAK,eAAe,GAAG,IAAI,GAAG,EAAE,CAAC,CAAC;gBACrG,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;YACvB,CAAC;YACD,MAAM,EAAE,GAAG,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;YACrD,IAAI,EAAE,GAAG,CAAC;gBAAE,MAAM,CAAC,IAAI,KAAK,oBAAoB,KAAK,EAAE,CAAC,CAAC;YACzD,OAAO,EAAE,GAAG,GAAG,CAAC;QAClB,CAAC,CAAC;QACF,MAAM,GAAG,GAAG,CAAC,KAAyB,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACvI,MAAM,GAAG,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACrC,MAAM,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;YACtG,IAAI,KAAK,KAAK,GAAG,EAAE,CAAC;gBAClB,IAAI,GAAG;oBAAE,MAAM,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;YAC3C,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,GAAG,KAAK,CAAC,KAAM,CAAC,CAAC;gBACxB,IAAI,GAAG,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;oBAAE,MAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC,CAAC;gBAC3E,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAM,CAAC;oBAAE,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;YAClG,CAAC;YACD,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAAE,MAAM,CAAC,IAAI,CAAC,oBAAoB,IAAI,GAAG,CAAC,CAAC;YAC5G,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAC9E,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;IACH,gHAAgH;IAChH,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG;QAAE,MAAM,CAAC,oDAAoD,CAAC,CAAC;IACzG,OAAO,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC9D,CAAC"}

package/dist/spec/domain/service/CrossSchemaChecker.d.ts

@@ -0,0 +1,34 @@
+import type { SchemaManifest } from "../model/ManifestGrammar.js";
+import { type ManifestFilePaths } from "./ManifestPathDiagnoser.js";
+import { type Diagnostic, type Phase } from "../../kernel/diagnostic.js";
+/**
+ * Cross-Schema checks for the locale + translates grammar additions
+ * introduced in ADR-0010. Runs in both the validate phase (CLI,
+ * pre-deploy) and the boot phase (Worker init, post-deploy). The
+ * static parts (parent existence, join-field membership in both
+ * Schemas, translates-implies-localized) don't need any environment.
+ * The site-locales check needs the runtime config, so it runs only
+ * when `siteLocales` is provided.
+ *
+ * Caller passes the phase tag so diagnostics surface as
+ * `validate/<code>` or `boot/<code>` per ADR-0008.
+ */
+export interface CrossSchemaCheckInput {
+    readonly schemas: ReadonlyArray<SchemaManifest>;
+    readonly phase: Extract<Phase, "validate" | "boot">;
+    /** Site config locales (ordered, first is canonical). When absent,
+     *  the SCHEMA_LOCALIZED_REQUIRES_SITE_LOCALES check is skipped —
+     *  validate-from-CLI flows can't reach the runtime DB to read this.
+     *  Boot always has access and should pass it. */
+    readonly siteLocales?: ReadonlyArray<string>;
+    /** Optional file-path index for nicer diagnostic paths in the
+     *  validate phase. See {@link ManifestFilePaths}. */
+    readonly filePaths?: ManifestFilePaths;
+}
+/** Compatibility composition; production stages call their single owned check. */
+export declare function checkLocaleAndTranslates(input: CrossSchemaCheckInput): Diagnostic[];
+/** Deployment-dependent locale availability; parse/link never call this. */
+export declare function checkSiteLocales(input: CrossSchemaCheckInput): Diagnostic[];
+/** Cross-Schema translation references. Atom-local translation shape lives in the parser. */
+export declare function checkTranslatesReferences(schemas: readonly SchemaManifest[], phase: Extract<Phase, "validate" | "boot">, filePaths?: ManifestFilePaths): Diagnostic[];
+//# sourceMappingURL=CrossSchemaChecker.d.ts.map

package/dist/spec/domain/service/CrossSchemaChecker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"CrossSchemaChecker.d.ts","sourceRoot":"","sources":["../../../../src/spec/domain/service/CrossSchemaChecker.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAGL,KAAK,iBAAiB,EACvB,MAAM,4BAA4B,CAAC;AAEpC,OAAO,EAGL,KAAK,UAAU,EACf,KAAK,KAAK,EACX,MAAM,4BAA4B,CAAC;AAEpC;;;;;;;;;;;GAWG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC,cAAc,CAAC,CAAC;IAChD,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAAC,CAAC;IACpD;;;qDAGiD;IACjD,QAAQ,CAAC,WAAW,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAC7C;yDACqD;IACrD,QAAQ,CAAC,SAAS,CAAC,EAAE,iBAAiB,CAAC;CACxC;AAED,kFAAkF;AAClF,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,qBAAqB,GAAG,UAAU,EAAE,CAKnF;AAED,4EAA4E;AAC5E,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,qBAAqB,GAAG,UAAU,EAAE,CA6C3E;AAED,6FAA6F;AAC7F,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,SAAS,cAAc,EAAE,EAClC,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,UAAU,GAAG,MAAM,CAAC,EAC1C,SAAS,CAAC,EAAE,iBAAiB,GAC5B,UAAU,EAAE,CA8Dd"}

package/dist/spec/domain/service/CrossSchemaChecker.js

@@ -0,0 +1,114 @@
+import { bestMatch, manifestPath, } from "./ManifestPathDiagnoser.js";
+import { canonicalizeLocaleList } from "./LocaleCanonicalizer.js";
+import { bootDiagnostic, validateDiagnostic, } from "../../kernel/diagnostic.js";
+/** Compatibility composition; production stages call their single owned check. */
+export function checkLocaleAndTranslates(input) {
+    return [
+        ...checkSiteLocales(input),
+        ...checkTranslatesReferences(input.schemas, input.phase, input.filePaths),
+    ];
+}
+/** Deployment-dependent locale availability; parse/link never call this. */
+export function checkSiteLocales(input) {
+    const { schemas, phase, siteLocales, filePaths } = input;
+    const out = [];
+    const siteLocalesGiven = siteLocales !== undefined;
+    // Canonicalize the site locales the caller passed before any
+    // schema-vs-locales check uses them.
+    let validSiteLocalesCount = siteLocalesGiven ? siteLocales.length : 0;
+    if (siteLocalesGiven && siteLocales.length > 0) {
+        const { valid, invalid } = canonicalizeLocaleList(siteLocales);
+        validSiteLocalesCount = valid.length;
+        if (invalid.length > 0) {
+            out.push(emit(phase, {
+                code: "INVALID_LOCALE",
+                severity: "error",
+                path: "site_config/locales",
+                value: invalid,
+                expected: "Mantle v0.1 locale tags (e.g. 'en' or 'zh-TW', case-insensitive; script subtags are unsupported)",
+                message: `site_config.locales contains invalid entries: ${invalid.map((s) => `'${s}'`).join(", ")}. Use language plus optional 2-letter region (for example 'zh-TW', not 'zh-Hant') and fix via the Settings page or DB directly.`,
+            }));
+        }
+    }
+    const siteLocalesEmpty = siteLocalesGiven && validSiteLocalesCount === 0;
+    for (const s of schemas) {
+        const path = (jsonPointer) => manifestPath("Schema", s.metadata.name, jsonPointer, filePaths);
+        if (s.spec.localized === true && siteLocalesGiven && siteLocalesEmpty) {
+            out.push(emit(phase, {
+                code: "SCHEMA_LOCALIZED_REQUIRES_SITE_LOCALES",
+                severity: "error",
+                path: path("/spec/localized"),
+                value: true,
+                expected: "site_config.locales to declare at least one BCP 47 locale before any Schema can be localized",
+                message: `Schema '${s.metadata.name}' is localized but the site has no locales configured. Set site_config.locales (e.g. ['en'] or ['zh-TW']) or remove localized: true.`,
+            }));
+        }
+    }
+    return out;
+}
+/** Cross-Schema translation references. Atom-local translation shape lives in the parser. */
+export function checkTranslatesReferences(schemas, phase, filePaths) {
+    const out = [];
+    const schemasByName = new Map(schemas.map((schema) => [schema.metadata.name, schema]));
+    for (const s of schemas) {
+        const translates = s.spec.translates;
+        if (!translates)
+            continue;
+        const path = (jsonPointer) => manifestPath("Schema", s.metadata.name, jsonPointer, filePaths);
+        const parent = schemasByName.get(translates.parent);
+        if (!parent) {
+            out.push(emit(phase, {
+                code: "TRANSLATES_PARENT_UNKNOWN",
+                severity: "error",
+                path: path("/spec/translates/parent"),
+                value: translates.parent,
+                expected: "name of a declared Schema",
+                candidates: [...schemasByName.keys()],
+                suggestion: bestMatch(translates.parent, [...schemasByName.keys()]),
+                message: `Schema '${s.metadata.name}' translates.parent references unknown Schema '${translates.parent}'.`,
+            }));
+            continue;
+        }
+        if (s.spec.ttl || parent.spec.ttl) {
+            out.push(emit(phase, {
+                code: "SCHEMA_TTL_TRANSLATION_UNSUPPORTED",
+                severity: "error",
+                path: path("/spec/translates"),
+                message: `Schema '${s.metadata.name}' cannot translate TTL Schema '${parent.metadata.name}' or declare TTL itself; joined translations cannot guarantee expiry across both Schemas.`,
+                expected: "TTL only on Schemas outside a translation relationship",
+            }));
+        }
+        if (parent.spec.localized === true) {
+            out.push(emit(phase, {
+                code: "TRANSLATES_PARENT_IS_LOCALIZED",
+                severity: "error",
+                path: path("/spec/translates/parent"),
+                value: translates.parent,
+                expected: "parent Schema must NOT be localized (it carries the non-translatable facts; translation rows are this Schema)",
+                message: `Schema '${s.metadata.name}' translates.parent '${translates.parent}' is itself localized. The parent should hold non-translatable facts (e.g. sku, price); the localized child holds the translatable fields.`,
+            }));
+        }
+        const parentProps = propertyKeys(parent);
+        if (!parentProps.has(translates.on)) {
+            out.push(emit(phase, {
+                code: "TRANSLATES_FIELD_NOT_IN_PARENT",
+                severity: "error",
+                path: path("/spec/translates/on"),
+                value: translates.on,
+                expected: `field declared in Schema '${parent.metadata.name}' spec.schema.properties`,
+                candidates: [...parentProps].sort(),
+                suggestion: bestMatch(translates.on, [...parentProps]),
+                message: `Schema '${s.metadata.name}' translates.on field '${translates.on}' is not declared on parent Schema '${parent.metadata.name}'.`,
+            }));
+        }
+    }
+    return out;
+}
+function emit(phase, payload) {
+    return phase === "validate" ? validateDiagnostic(payload) : bootDiagnostic(payload);
+}
+function propertyKeys(s) {
+    const props = s.spec.schema.properties ?? {};
+    return new Set(Object.keys(props));
+}
+//# sourceMappingURL=CrossSchemaChecker.js.map

package/dist/spec/domain/service/CrossSchemaChecker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"CrossSchemaChecker.js","sourceRoot":"","sources":["../../../../src/spec/domain/service/CrossSchemaChecker.ts"],"names":[],"mappings":"AACA,OAAO,EACL,SAAS,EACT,YAAY,GAEb,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,sBAAsB,EAAE,MAAM,0BAA0B,CAAC;AAClE,OAAO,EACL,cAAc,EACd,kBAAkB,GAGnB,MAAM,4BAA4B,CAAC;AA2BpC,kFAAkF;AAClF,MAAM,UAAU,wBAAwB,CAAC,KAA4B;IACnE,OAAO;QACL,GAAG,gBAAgB,CAAC,KAAK,CAAC;QAC1B,GAAG,yBAAyB,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,SAAS,CAAC;KAC1E,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,gBAAgB,CAAC,KAA4B;IAC3D,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;IACzD,MAAM,GAAG,GAAiB,EAAE,CAAC;IAC7B,MAAM,gBAAgB,GAAG,WAAW,KAAK,SAAS,CAAC;IAEnD,6DAA6D;IAC7D,qCAAqC;IACrC,IAAI,qBAAqB,GAAG,gBAAgB,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACtE,IAAI,gBAAgB,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/C,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,sBAAsB,CAAC,WAAW,CAAC,CAAC;QAC/D,qBAAqB,GAAG,KAAK,CAAC,MAAM,CAAC;QACrC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,GAAG,CAAC,IAAI,CACN,IAAI,CAAC,KAAK,EAAE;gBACV,IAAI,EAAE,gBAAgB;gBACtB,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,qBAAqB;gBAC3B,KAAK,EAAE,OAAO;gBACd,QAAQ,EAAE,kGAAkG;gBAC5G,OAAO,EAAE,iDAAiD,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,iIAAiI;aACnO,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC;IACD,MAAM,gBAAgB,GAAG,gBAAgB,IAAI,qBAAqB,KAAK,CAAC,CAAC;IAEzE,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,IAAI,GAAG,CAAC,WAAmB,EAAE,EAAE,CACnC,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;QAElE,IAAI,CAAC,CAAC,IAAI,CAAC,SAAS,KAAK,IAAI,IAAI,gBAAgB,IAAI,gBAAgB,EAAE,CAAC;YACtE,GAAG,CAAC,IAAI,CACN,IAAI,CAAC,KAAK,EAAE;gBACV,IAAI,EAAE,wCAAwC;gBAC9C,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,IAAI,CAAC,iBAAiB,CAAC;gBAC7B,KAAK,EAAE,IAAI;gBACX,QAAQ,EAAE,8FAA8F;gBACxG,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,IAAI,sIAAsI;aAC1K,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,GAAG,CAAC;AACb,CAAC;AAED,6FAA6F;AAC7F,MAAM,UAAU,yBAAyB,CACvC,OAAkC,EAClC,KAA0C,EAC1C,SAA6B;IAE7B,MAAM,GAAG,GAAiB,EAAE,CAAC;IAC7B,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IACvF,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,MAAM,UAAU,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC;QACrC,IAAI,CAAC,UAAU;YAAE,SAAS;QAC1B,MAAM,IAAI,GAAG,CAAC,WAAmB,EAAE,EAAE,CACnC,YAAY,CAAC,QAAQ,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;QAClE,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QACpD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,GAAG,CAAC,IAAI,CACN,IAAI,CAAC,KAAK,EAAE;gBACV,IAAI,EAAE,2BAA2B;gBACjC,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,IAAI,CAAC,yBAAyB,CAAC;gBACrC,KAAK,EAAE,UAAU,CAAC,MAAM;gBACxB,QAAQ,EAAE,2BAA2B;gBACrC,UAAU,EAAE,CAAC,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC;gBACrC,UAAU,EAAE,SAAS,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,GAAG,aAAa,CAAC,IAAI,EAAE,CAAC,CAAC;gBACnE,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,IAAI,kDAAkD,UAAU,CAAC,MAAM,IAAI;aAC3G,CAAC,CACH,CAAC;YACF,SAAS;QACX,CAAC;QACD,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;YAClC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE;gBACnB,IAAI,EAAE,oCAAoC;gBAC1C,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,IAAI,CAAC,kBAAkB,CAAC;gBAC9B,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,IAAI,kCAAkC,MAAM,CAAC,QAAQ,CAAC,IAAI,2FAA2F;gBACpL,QAAQ,EAAE,wDAAwD;aACnE,CAAC,CAAC,CAAC;QACN,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;YACnC,GAAG,CAAC,IAAI,CACN,IAAI,CAAC,KAAK,EAAE;gBACV,IAAI,EAAE,gCAAgC;gBACtC,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,IAAI,CAAC,yBAAyB,CAAC;gBACrC,KAAK,EAAE,UAAU,CAAC,MAAM;gBACxB,QAAQ,EAAE,+GAA+G;gBACzH,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,IAAI,wBAAwB,UAAU,CAAC,MAAM,4IAA4I;aACzN,CAAC,CACH,CAAC;QACJ,CAAC;QACD,MAAM,WAAW,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;QACzC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC;YACpC,GAAG,CAAC,IAAI,CACN,IAAI,CAAC,KAAK,EAAE;gBACV,IAAI,EAAE,gCAAgC;gBACtC,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,IAAI,CAAC,qBAAqB,CAAC;gBACjC,KAAK,EAAE,UAAU,CAAC,EAAE;gBACpB,QAAQ,EAAE,6BAA6B,MAAM,CAAC,QAAQ,CAAC,IAAI,0BAA0B;gBACrF,UAAU,EAAE,CAAC,GAAG,WAAW,CAAC,CAAC,IAAI,EAAE;gBACnC,UAAU,EAAE,SAAS,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,GAAG,WAAW,CAAC,CAAC;gBACtD,OAAO,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,IAAI,0BAA0B,UAAU,CAAC,EAAE,uCAAuC,MAAM,CAAC,QAAQ,CAAC,IAAI,IAAI;aAC1I,CAAC,CACH,CAAC;QACJ,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,IAAI,CACX,KAA0C,EAC1C,OAAiD;IAEjD,OAAO,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,kBAAkB,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;AACtF,CAAC;AAED,SAAS,YAAY,CAAC,CAAiB;IACrC,MAAM,KAAK,GAAI,CAAC,CAAC,IAAI,CAAC,MAAmD,CAAC,UAAU,IAAI,EAAE,CAAC;IAC3F,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;AACrC,CAAC"}

package/dist/spec/domain/service/EntryDataValidator.d.ts

@@ -0,0 +1,56 @@
+import { type Diagnostic } from "../../kernel/diagnostic.js";
+import type { SchemaManifest } from "../model/ManifestGrammar.js";
+/**
+ * Per-collection entry-data validator.
+ *
+ * Given a parsed `SchemaManifest` and an entry payload, runs zod
+ * validation against the manifest's `spec.schema` and returns
+ * Diagnostics. Compiled zod schemas are cached per `metadata.name` so
+ * repeated `validate()` calls are cheap; the cache is content-
+ * addressed-ish — calling `validate` with two different
+ * SchemaManifests that share a `metadata.name` will reuse the first
+ * compile, which is correct because manifest names are unique within a
+ * deployment.
+ *
+ * Switched from Ajv to zod (POC issue #70) because Ajv's runtime
+ * `compile()` calls `new Function()`, which CF Workers blocks under
+ * V8's codegen-from-strings policy. zod composes builders into a
+ * plain object tree and runs them through its interpreter at parse
+ * time — no codegen, Workers-safe.
+ *
+ * The `x-mantle-ref` and `x-mcp-hint` extension keywords
+ * are tolerated (the converter ignores unknown keywords; they pass
+ * through unmodified).
+ *
+ * Output shape is `Diagnostic[]` — empty array means "valid". The
+ * dispatcher and admin-write paths surface the array directly; the
+ * `phase: "runtime"` stamp is correct for entry-write validation,
+ * which always happens at request-handling time.
+ */
+export declare class EntryDataValidator {
+    private readonly compiled;
+    /**
+     * Validate `data` against `manifest.spec.schema`. Returns the empty
+     * array on success; on failure, returns one or more Diagnostics
+     * with `code: "INPUT_VALIDATION_FAILED"` and `path` set to the
+     * RFC 6901 JSON Pointer of the offending field (`""` = root).
+     *
+     * `opts.partial` drops the schema's top-level `required` so a
+     * work-in-progress draft can be saved with fields still blank. Types
+     * of whatever IS present are still checked. Completeness is enforced
+     * at publish time, which validates without `partial`.
+     */
+    validate(manifest: SchemaManifest, data: unknown, opts?: {
+        partial?: boolean;
+    }): readonly Diagnostic[];
+    /**
+     * Test-only escape hatch: peek at whether a given Schema has been
+     * compiled yet. The cache is otherwise an internal implementation
+     * detail. Not part of the package's public API surface.
+     *
+     * @internal
+     */
+    hasCompiled(name: string): boolean;
+    private compileFor;
+}
+//# sourceMappingURL=EntryDataValidator.d.ts.map

package/dist/spec/domain/service/EntryDataValidator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"EntryDataValidator.d.ts","sourceRoot":"","sources":["../../../../src/spec/domain/service/EntryDataValidator.ts"],"names":[],"mappings":"AAKA,OAAO,EAAqB,KAAK,UAAU,EAAE,MAAM,4BAA4B,CAAC;AAChF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAElE;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,qBAAa,kBAAkB;IAC7B,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmC;IAE5D;;;;;;;;;;OAUG;IACH,QAAQ,CACN,QAAQ,EAAE,cAAc,EACxB,IAAI,EAAE,OAAO,EACb,IAAI,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAA;KAAE,GAC3B,SAAS,UAAU,EAAE;IAcxB;;;;;;OAMG;IACH,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO;IAIlC,OAAO,CAAC,UAAU;CAUnB"}