@atscript/db 0.1.161 → 0.1.162

package/dist/rel.cjs

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_nested_writer = require("./nested-writer-Bl1SZS7x.cjs");
-const require_relation_loader = require("./relation-loader-DeulLrAw.cjs");
+const require_nested_writer = require("./nested-writer-yCy6wGuN.cjs");
+const require_relation_loader = require("./relation-loader-DujL_Mh9.cjs");
 exports.applyPatchNestedTo = require_nested_writer.applyPatchNestedTo;
 exports.batchInsertNestedFrom = require_nested_writer.batchInsertNestedFrom;
 exports.batchInsertNestedTo = require_nested_writer.batchInsertNestedTo;

package/dist/rel.d.cts

@@ -1,6 +1,6 @@
-import { Jn as TGenericLogger, Jt as TableMetadata, Rt as TTableResolver, Ut as TWriteTableResolver, W as TDbForeignKey, en as BaseDbAdapter, h as AtscriptDbWritable, m as AtscriptDbTableLike, nt as TDbRelation } from "./buckets-B4T_alUe.cjs";
-import { t as DbValidationContext } from "./db-validator-plugin-BWy60OvG.cjs";
-import { n as findRemoteFK, r as resolveRelationTargetTable, t as findFKForRelation } from "./relation-helpers-BLBrLQYi.cjs";
+import { Jt as TTableResolver, K as TDbForeignKey, an as TableMetadata, cr as TGenericLogger, ct as TDbRelation, en as TWriteTableResolver, fn as BaseDbAdapter, h as AtscriptDbWritable, m as AtscriptDbTableLike } from "./buckets-_iZV39Z3.cjs";
+import { t as DbValidationContext } from "./db-validator-plugin-wRqMYNBI.cjs";
+import { n as findRemoteFK, r as resolveRelationTargetTable, t as findFKForRelation } from "./relation-helpers-BAEkP4bH.cjs";
 import { FilterExpr, WithRelation } from "@uniqu/core";
 import { Validator } from "@atscript/typescript/utils";
 

package/dist/rel.d.mts

@@ -1,6 +1,6 @@
-import { Jn as TGenericLogger, Jt as TableMetadata, Rt as TTableResolver, Ut as TWriteTableResolver, W as TDbForeignKey, en as BaseDbAdapter, h as AtscriptDbWritable, m as AtscriptDbTableLike, nt as TDbRelation } from "./buckets-8mG67Mtw.mjs";
-import { t as DbValidationContext } from "./db-validator-plugin-BWy60OvG.mjs";
-import { n as findRemoteFK, r as resolveRelationTargetTable, t as findFKForRelation } from "./relation-helpers-17_2f5hX.mjs";
+import { Jt as TTableResolver, K as TDbForeignKey, an as TableMetadata, cr as TGenericLogger, ct as TDbRelation, en as TWriteTableResolver, fn as BaseDbAdapter, h as AtscriptDbWritable, m as AtscriptDbTableLike } from "./buckets-DUTcrT4Z.mjs";
+import { t as DbValidationContext } from "./db-validator-plugin-wRqMYNBI.mjs";
+import { n as findRemoteFK, r as resolveRelationTargetTable, t as findFKForRelation } from "./relation-helpers-BSYwxOSA.mjs";
 import { Validator } from "@atscript/typescript/utils";
 import { FilterExpr, WithRelation } from "@uniqu/core";
 

package/dist/rel.mjs

@@ -1,3 +1,3 @@
-import { t as loadRelationsImpl } from "./relation-loader-CNBMPfRr.mjs";
-import { B as resolveRelationTargetTable, R as findFKForRelation, a as batchPatchNestedFrom, c as batchReplaceNestedFrom, d as checkDepthOverflow, f as planNestedFromVia, h as validateBatch, i as batchInsertNestedVia, l as batchReplaceNestedTo, m as preValidateNestedFrom, n as batchInsertNestedFrom, o as batchPatchNestedTo, p as planPatchNestedTo, r as batchInsertNestedTo, s as batchPatchNestedVia, t as applyPatchNestedTo, u as batchReplaceNestedVia, z as findRemoteFK } from "./nested-writer-BOj_c_lI.mjs";
+import { t as loadRelationsImpl } from "./relation-loader-Qv3LrQ42.mjs";
+import { B as resolveRelationTargetTable, R as findFKForRelation, a as batchPatchNestedFrom, c as batchReplaceNestedFrom, d as checkDepthOverflow, f as planNestedFromVia, h as validateBatch, i as batchInsertNestedVia, l as batchReplaceNestedTo, m as preValidateNestedFrom, n as batchInsertNestedFrom, o as batchPatchNestedTo, p as planPatchNestedTo, r as batchInsertNestedTo, s as batchPatchNestedVia, t as applyPatchNestedTo, u as batchReplaceNestedVia, z as findRemoteFK } from "./nested-writer-ClUX0DB0.mjs";
 export { applyPatchNestedTo, batchInsertNestedFrom, batchInsertNestedTo, batchInsertNestedVia, batchPatchNestedFrom, batchPatchNestedTo, batchPatchNestedVia, batchReplaceNestedFrom, batchReplaceNestedTo, batchReplaceNestedVia, checkDepthOverflow, findFKForRelation, findRemoteFK, loadRelationsImpl, planNestedFromVia, planPatchNestedTo, preValidateNestedFrom, resolveRelationTargetTable, validateBatch };

package/dist/{relation-helpers-17_2f5hX.d.mts → relation-helpers-BAEkP4bH.d.cts}

@@ -1,4 +1,4 @@
-import { W as TDbForeignKey, nt as TDbRelation } from "./buckets-8mG67Mtw.mjs";
+import { K as TDbForeignKey, ct as TDbRelation } from "./buckets-_iZV39Z3.cjs";
 import { TAtscriptAnnotatedType } from "@atscript/typescript/utils";
 
 //#region src/rel/relation-helpers.d.ts

package/dist/{relation-helpers-BLBrLQYi.d.cts → relation-helpers-BSYwxOSA.d.mts}

@@ -1,4 +1,4 @@
-import { W as TDbForeignKey, nt as TDbRelation } from "./buckets-B4T_alUe.cjs";
+import { K as TDbForeignKey, ct as TDbRelation } from "./buckets-DUTcrT4Z.mjs";
 import { TAtscriptAnnotatedType } from "@atscript/typescript/utils";
 
 //#region src/rel/relation-helpers.d.ts

package/dist/{relation-loader-DeulLrAw.cjs → relation-loader-DujL_Mh9.cjs}

@@ -1,4 +1,4 @@
-const require_nested_writer = require("./nested-writer-Bl1SZS7x.cjs");
+const require_nested_writer = require("./nested-writer-yCy6wGuN.cjs");
 //#region src/rel/relation-loader.ts
 var relation_loader_exports = /* @__PURE__ */ require("./plugin.cjs").__exportAll({
 	ensureSelectIncludesFields: () => ensureSelectIncludesFields,

package/dist/{relation-loader-CNBMPfRr.mjs → relation-loader-Qv3LrQ42.mjs}

@@ -1,4 +1,4 @@
-import { B as resolveRelationTargetTable, E as andFilters, I as compositeKey, P as relationStaticFilter, R as findFKForRelation, V as slicePerGroup, z as findRemoteFK } from "./nested-writer-BOj_c_lI.mjs";
+import { B as resolveRelationTargetTable, E as andFilters, I as compositeKey, P as relationStaticFilter, R as findFKForRelation, V as slicePerGroup, z as findRemoteFK } from "./nested-writer-ClUX0DB0.mjs";
 //#region \0rolldown/runtime.js
 var __defProp = Object.defineProperty;
 var __exportAll = (all, no_symbols) => {

package/dist/{search-fields-CE8cmj9X.mjs → search-fields-0U0FAFGj.mjs}

@@ -30,6 +30,7 @@ const DERIVED_INCOMPATIBLE = [
 	["db.default.uuid", "the value is computed, never defaulted"],
 	["db.default.now", "the value is computed, never defaulted"],
 	["db.onUpdate.now", "a derived column is never written"],
+	["db.onUpdate.inc", "a derived column is never written"],
 	["db.column.version", "the version column is adapter-managed"],
 	["db.column.version.exempt", "a derived column is never written"],
 	["db.encrypted", "the value is a cleartext extraction of its source"],
@@ -73,6 +74,7 @@ const SEARCH_PROBLEM = {
 	now: "is a timestamp (@db.default.now) — filter it by range instead",
 	precision: "has @db.column.precision (stored as a decimal)",
 	float: "is a floating-point number — declare it number.int (or a sized integer), add @expect.int, or use @db.default.increment",
+	floatViewField: "is a floating-point number — declare it number.int (or a sized integer) or add @expect.int",
 	decimal: "is a decimal"
 };
 /** Problem for a primitive of another base type (`boolean`, …). */
@@ -114,5 +116,49 @@ function searchMemberKind(type) {
 		precision: has("db.column.precision")
 	});
 }
+/**
+* Field annotations of the search / index features that cannot work over
+* ciphertext — refused on an `@db.encrypted` field, on any field inside one
+* and on a view field over an encrypted source (compile time and metadata
+* build).
+* @since 0.1.162
+*/
+const ENCRYPTED_SEARCH_FEATURES = [
+	"db.column.searchable",
+	"db.index.fulltext",
+	"db.index.geo",
+	"db.search.vector",
+	"db.search.filter",
+	"db.mongo.search.text",
+	"db.mongo.search.autocomplete"
+];
+/** Why each of {@link ENCRYPTED_SEARCH_FEATURES} cannot sit on an `@db.encrypted` field. */
+const ENCRYPTED_SEARCH_WHY = {
+	"db.column.searchable": "search over ciphertext is impossible",
+	"db.index.fulltext": "indexes over ciphertext are meaningless",
+	"db.index.geo": "geo indexes over ciphertext are meaningless",
+	"db.search.vector": "vector search over ciphertext is impossible",
+	"db.search.filter": "search filters need cleartext equality",
+	"db.mongo.search.text": "Atlas Search over ciphertext is impossible",
+	"db.mongo.search.autocomplete": "Atlas Search over ciphertext is impossible"
+};
+/**
+* Annotations an `@db.encrypted` field cannot carry, with the reason — the
+* compile-time `@db.encrypted` check and the metadata build share it (the
+* search rows are {@link ENCRYPTED_SEARCH_FEATURES}).
+* @since 0.1.162
+*/
+const ENCRYPTED_INCOMPATIBLE = [
+	["meta.id", "the primary key must be addressable"],
+	["db.rel.FK", "joins are impossible over ciphertext"],
+	["db.index.plain", "indexes over ciphertext are meaningless"],
+	["db.index.unique", "indexes over ciphertext are meaningless"],
+	...ENCRYPTED_SEARCH_FEATURES.map((key) => [key, ENCRYPTED_SEARCH_WHY[key]]),
+	["db.column.version", "the OCC filter needs cleartext equality"],
+	["db.default.increment", "engine-side defaults bypass the encryption transform"],
+	["db.default.now", "engine-side defaults bypass the encryption transform"],
+	["db.onUpdate.now", "the update time is set after the encryption transform"],
+	["db.onUpdate.inc", "the counter is incremented by the database"]
+];
 //#endregion
-export { DERIVED_INCOMPATIBLE as a, DB_ENTITY_ANNOTATIONS as i, searchMemberKind as n, JSON_LEAF_TYPES as o, numericTypeProblem as r, isJsonLeafType as s, searchKindOf as t };
+export { searchMemberKind as a, DERIVED_INCOMPATIBLE as c, searchKindOf as i, JSON_LEAF_TYPES as l, ENCRYPTED_SEARCH_FEATURES as n, numericTypeProblem as o, SEARCH_PROBLEM as r, DB_ENTITY_ANNOTATIONS as s, ENCRYPTED_INCOMPATIBLE as t, isJsonLeafType as u };

package/dist/{search-fields-CT_UZ9fg.cjs → search-fields-Bi1n-pB1.cjs}

@@ -30,6 +30,7 @@ const DERIVED_INCOMPATIBLE = [
 	["db.default.uuid", "the value is computed, never defaulted"],
 	["db.default.now", "the value is computed, never defaulted"],
 	["db.onUpdate.now", "a derived column is never written"],
+	["db.onUpdate.inc", "a derived column is never written"],
 	["db.column.version", "the version column is adapter-managed"],
 	["db.column.version.exempt", "a derived column is never written"],
 	["db.encrypted", "the value is a cleartext extraction of its source"],
@@ -73,6 +74,7 @@ const SEARCH_PROBLEM = {
 	now: "is a timestamp (@db.default.now) — filter it by range instead",
 	precision: "has @db.column.precision (stored as a decimal)",
 	float: "is a floating-point number — declare it number.int (or a sized integer), add @expect.int, or use @db.default.increment",
+	floatViewField: "is a floating-point number — declare it number.int (or a sized integer) or add @expect.int",
 	decimal: "is a decimal"
 };
 /** Problem for a primitive of another base type (`boolean`, …). */
@@ -114,6 +116,50 @@ function searchMemberKind(type) {
 		precision: has("db.column.precision")
 	});
 }
+/**
+* Field annotations of the search / index features that cannot work over
+* ciphertext — refused on an `@db.encrypted` field, on any field inside one
+* and on a view field over an encrypted source (compile time and metadata
+* build).
+* @since 0.1.162
+*/
+const ENCRYPTED_SEARCH_FEATURES = [
+	"db.column.searchable",
+	"db.index.fulltext",
+	"db.index.geo",
+	"db.search.vector",
+	"db.search.filter",
+	"db.mongo.search.text",
+	"db.mongo.search.autocomplete"
+];
+/** Why each of {@link ENCRYPTED_SEARCH_FEATURES} cannot sit on an `@db.encrypted` field. */
+const ENCRYPTED_SEARCH_WHY = {
+	"db.column.searchable": "search over ciphertext is impossible",
+	"db.index.fulltext": "indexes over ciphertext are meaningless",
+	"db.index.geo": "geo indexes over ciphertext are meaningless",
+	"db.search.vector": "vector search over ciphertext is impossible",
+	"db.search.filter": "search filters need cleartext equality",
+	"db.mongo.search.text": "Atlas Search over ciphertext is impossible",
+	"db.mongo.search.autocomplete": "Atlas Search over ciphertext is impossible"
+};
+/**
+* Annotations an `@db.encrypted` field cannot carry, with the reason — the
+* compile-time `@db.encrypted` check and the metadata build share it (the
+* search rows are {@link ENCRYPTED_SEARCH_FEATURES}).
+* @since 0.1.162
+*/
+const ENCRYPTED_INCOMPATIBLE = [
+	["meta.id", "the primary key must be addressable"],
+	["db.rel.FK", "joins are impossible over ciphertext"],
+	["db.index.plain", "indexes over ciphertext are meaningless"],
+	["db.index.unique", "indexes over ciphertext are meaningless"],
+	...ENCRYPTED_SEARCH_FEATURES.map((key) => [key, ENCRYPTED_SEARCH_WHY[key]]),
+	["db.column.version", "the OCC filter needs cleartext equality"],
+	["db.default.increment", "engine-side defaults bypass the encryption transform"],
+	["db.default.now", "engine-side defaults bypass the encryption transform"],
+	["db.onUpdate.now", "the update time is set after the encryption transform"],
+	["db.onUpdate.inc", "the counter is incremented by the database"]
+];
 //#endregion
 Object.defineProperty(exports, "DB_ENTITY_ANNOTATIONS", {
 	enumerable: true,
@@ -127,12 +173,30 @@ Object.defineProperty(exports, "DERIVED_INCOMPATIBLE", {
 		return DERIVED_INCOMPATIBLE;
 	}
 });
+Object.defineProperty(exports, "ENCRYPTED_INCOMPATIBLE", {
+	enumerable: true,
+	get: function() {
+		return ENCRYPTED_INCOMPATIBLE;
+	}
+});
+Object.defineProperty(exports, "ENCRYPTED_SEARCH_FEATURES", {
+	enumerable: true,
+	get: function() {
+		return ENCRYPTED_SEARCH_FEATURES;
+	}
+});
 Object.defineProperty(exports, "JSON_LEAF_TYPES", {
 	enumerable: true,
 	get: function() {
 		return JSON_LEAF_TYPES;
 	}
 });
+Object.defineProperty(exports, "SEARCH_PROBLEM", {
+	enumerable: true,
+	get: function() {
+		return SEARCH_PROBLEM;
+	}
+});
 Object.defineProperty(exports, "isJsonLeafType", {
 	enumerable: true,
 	get: function() {

package/dist/search-fields-CHqqcC3W.d.cts

@@ -0,0 +1,30 @@
+import { TAtscriptAnnotatedType } from "@atscript/typescript/utils";
+
+//#region src/shared/search-fields.d.ts
+/** How a field takes part in `$search`: matched as text, or by whole-number equality / decimal text. */
+type TSearchMemberKind = "text" | "integer";
+/**
+ * Runtime mirror of the plugin's verdict: how the annotated type takes part
+ * in `$search`. Structures, arrays, unions and unresolved types keep their
+ * legacy `"text"` treatment.
+ */
+declare function searchMemberKind(type: TAtscriptAnnotatedType | undefined): TSearchMemberKind | {
+  problem: string;
+};
+/**
+ * Field annotations of the search / index features that cannot work over
+ * ciphertext — refused on an `@db.encrypted` field, on any field inside one
+ * and on a view field over an encrypted source (compile time and metadata
+ * build).
+ * @since 0.1.162
+ */
+declare const ENCRYPTED_SEARCH_FEATURES: readonly ["db.column.searchable", "db.index.fulltext", "db.index.geo", "db.search.vector", "db.search.filter", "db.mongo.search.text", "db.mongo.search.autocomplete"];
+/**
+ * Annotations an `@db.encrypted` field cannot carry, with the reason — the
+ * compile-time `@db.encrypted` check and the metadata build share it (the
+ * search rows are {@link ENCRYPTED_SEARCH_FEATURES}).
+ * @since 0.1.162
+ */
+declare const ENCRYPTED_INCOMPATIBLE: ReadonlyArray<[annotation: string, why: string]>;
+//#endregion
+export { searchMemberKind as i, ENCRYPTED_SEARCH_FEATURES as n, TSearchMemberKind as r, ENCRYPTED_INCOMPATIBLE as t };

package/dist/search-fields-CHqqcC3W.d.mts

@@ -0,0 +1,30 @@
+import { TAtscriptAnnotatedType } from "@atscript/typescript/utils";
+
+//#region src/shared/search-fields.d.ts
+/** How a field takes part in `$search`: matched as text, or by whole-number equality / decimal text. */
+type TSearchMemberKind = "text" | "integer";
+/**
+ * Runtime mirror of the plugin's verdict: how the annotated type takes part
+ * in `$search`. Structures, arrays, unions and unresolved types keep their
+ * legacy `"text"` treatment.
+ */
+declare function searchMemberKind(type: TAtscriptAnnotatedType | undefined): TSearchMemberKind | {
+  problem: string;
+};
+/**
+ * Field annotations of the search / index features that cannot work over
+ * ciphertext — refused on an `@db.encrypted` field, on any field inside one
+ * and on a view field over an encrypted source (compile time and metadata
+ * build).
+ * @since 0.1.162
+ */
+declare const ENCRYPTED_SEARCH_FEATURES: readonly ["db.column.searchable", "db.index.fulltext", "db.index.geo", "db.search.vector", "db.search.filter", "db.mongo.search.text", "db.mongo.search.autocomplete"];
+/**
+ * Annotations an `@db.encrypted` field cannot carry, with the reason — the
+ * compile-time `@db.encrypted` check and the metadata build share it (the
+ * search rows are {@link ENCRYPTED_SEARCH_FEATURES}).
+ * @since 0.1.162
+ */
+declare const ENCRYPTED_INCOMPATIBLE: ReadonlyArray<[annotation: string, why: string]>;
+//#endregion
+export { searchMemberKind as i, ENCRYPTED_SEARCH_FEATURES as n, TSearchMemberKind as r, ENCRYPTED_INCOMPATIBLE as t };

package/dist/shared.cjs

@@ -1,30 +1,46 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+const require_search_fields = require("./search-fields-Bi1n-pB1.cjs");
+const require_object = require("./object-GjsuPNqo.cjs");
 const require_aggregate_rules = require("./aggregate-rules-D_bsCpUI.cjs");
-const require_validation_utils = require("./validation-utils-CtLNlBtB.cjs");
+const require_view_validation = require("./view-validation-D50KWU7O.cjs");
+exports.ENCRYPTED_INCOMPATIBLE = require_search_fields.ENCRYPTED_INCOMPATIBLE;
+exports.ENCRYPTED_SEARCH_FEATURES = require_search_fields.ENCRYPTED_SEARCH_FEATURES;
+exports.NAV_ANNOTATIONS = require_view_validation.NAV_ANNOTATIONS;
 exports.NOT_DIMENSION_REASON = require_aggregate_rules.NOT_DIMENSION_REASON;
-exports.earlierJoinTargets = require_validation_utils.earlierJoinTargets;
-exports.findFKFieldsPointingTo = require_validation_utils.findFKFieldsPointingTo;
-exports.findViewCycle = require_validation_utils.findViewCycle;
-exports.forEachFieldRef = require_validation_utils.forEachFieldRef;
-exports.getAnnotationAlias = require_validation_utils.getAnnotationAlias;
-exports.getDbTableOwner = require_validation_utils.getDbTableOwner;
-exports.getNavTargetTypeName = require_validation_utils.getNavTargetTypeName;
-exports.getParentStruct = require_validation_utils.getParentStruct;
-exports.getParentTypeName = require_validation_utils.getParentTypeName;
-exports.hasAnyViewAnnotation = require_validation_utils.hasAnyViewAnnotation;
-exports.integerMemberIndexProblem = require_validation_utils.integerMemberIndexProblem;
-exports.isAliasDecl = require_validation_utils.isAliasDecl;
-exports.isDbSourceDecl = require_validation_utils.isDbSourceDecl;
-exports.isNullableUnion = require_validation_utils.isNullableUnion;
+exports.earlierJoinTargets = require_view_validation.earlierJoinTargets;
+exports.effectiveAnnotationNames = require_view_validation.effectiveAnnotationNames;
+exports.encryptedAncestorName = require_view_validation.encryptedAncestorName;
+exports.encryptedSearchProblem = require_view_validation.encryptedSearchProblem;
+exports.encryptedTypeSearchProblem = require_view_validation.encryptedTypeSearchProblem;
+exports.findFKFieldsPointingTo = require_view_validation.findFKFieldsPointingTo;
+exports.findStoredField = require_view_validation.findStoredField;
+exports.findViewCycle = require_view_validation.findViewCycle;
+exports.forEachFieldRef = require_view_validation.forEachFieldRef;
+exports.getAnnotationAlias = require_view_validation.getAnnotationAlias;
+exports.getDbTableOwner = require_view_validation.getDbTableOwner;
+exports.getNavTargetTypeName = require_view_validation.getNavTargetTypeName;
+exports.getParentStruct = require_view_validation.getParentStruct;
+exports.getParentTypeName = require_view_validation.getParentTypeName;
+exports.hasAnyViewAnnotation = require_view_validation.hasAnyViewAnnotation;
+exports.integerMemberIndexProblem = require_view_validation.integerMemberIndexProblem;
+exports.isAliasDecl = require_view_validation.isAliasDecl;
+exports.isDbSourceDecl = require_view_validation.isDbSourceDecl;
+exports.isNavProp = require_view_validation.isNavProp;
+exports.isNullableUnion = require_view_validation.isNullableUnion;
 exports.isStrictAggregateStruct = require_aggregate_rules.isStrictAggregateStruct;
-exports.joinTargets = require_validation_utils.joinTargets;
-exports.primitiveBaseType = require_validation_utils.primitiveBaseType;
-exports.refActionAnnotation = require_validation_utils.refActionAnnotation;
-exports.searchFieldVerdict = require_validation_utils.searchFieldVerdict;
-exports.validateExclusiveWith = require_validation_utils.validateExclusiveWith;
-exports.validateFieldBaseType = require_validation_utils.validateFieldBaseType;
-exports.validateQueryScope = require_validation_utils.validateQueryScope;
-exports.validateRefArgument = require_validation_utils.validateRefArgument;
-exports.validateSiblingStringField = require_validation_utils.validateSiblingStringField;
-exports.viewJoins = require_validation_utils.viewJoins;
-exports.viewScopeTypes = require_validation_utils.viewScopeTypes;
+exports.isViewField = require_view_validation.isViewField;
+exports.joinTargets = require_view_validation.joinTargets;
+exports.primitiveBaseType = require_view_validation.primitiveBaseType;
+exports.refActionAnnotation = require_view_validation.refActionAnnotation;
+exports.refuseCiphertext = require_view_validation.refuseCiphertext;
+exports.searchFieldVerdict = require_view_validation.searchFieldVerdict;
+exports.stableJson = require_object.stableJson;
+exports.validateExclusiveWith = require_view_validation.validateExclusiveWith;
+exports.validateFieldBaseType = require_view_validation.validateFieldBaseType;
+exports.validateIncompatible = require_view_validation.validateIncompatible;
+exports.validateQueryScope = require_view_validation.validateQueryScope;
+exports.validateRefArgument = require_view_validation.validateRefArgument;
+exports.validateSiblingStringField = require_view_validation.validateSiblingStringField;
+exports.viewFieldSeals = require_view_validation.viewFieldSeals;
+exports.viewJoins = require_view_validation.viewJoins;
+exports.viewScopeTypes = require_view_validation.viewScopeTypes;

package/dist/shared.d.cts

@@ -1,11 +1,35 @@
-import { AnnotationSpec, AtscriptDoc, SemanticInterfaceNode, SemanticNode, SemanticPropNode, SemanticQueryExprNode, SemanticQueryFieldRefNode, SemanticStructureNode, TAnnotationTokens, TMessages, TQueryScope, Token } from "@atscript/core";
+import { s as stableJson } from "./object-Czia_qD4.cjs";
+import { n as ENCRYPTED_SEARCH_FEATURES, t as ENCRYPTED_INCOMPATIBLE } from "./search-fields-CHqqcC3W.cjs";
+import { AnnotationSpec, AtscriptDoc, SemanticInterfaceNode, SemanticNode, SemanticPropNode, SemanticQueryExprNode, SemanticQueryFieldRefNode, SemanticStructureNode, TAnnotationSpecConfig, TAnnotationTokens, TMessages, TQueryScope, Token } from "@atscript/core";
 
 //#region src/shared/annotation-utils.d.ts
-/** Asserts the field carrying this annotation does not also carry any of `others`. */
+/**
+ * Names of a field's effective annotations: its own plus the ones it inherits
+ * through its type ref (`price: Order.price`), with the `passedWhenReferred:
+ * false` ones dropped — the set codegen writes into the field's runtime
+ * metadata (`AtscriptDoc.evalAnnotationsForNode`). Compile checks that mirror
+ * a runtime metadata check read this, not the own-only `countAnnotations`.
+ * @since 0.1.162
+ */
+declare function effectiveAnnotationNames(field: SemanticNode, doc: AtscriptDoc): Set<string>;
+/**
+ * Asserts the field carrying this annotation does not also carry any of
+ * `others` — its own or inherited through its type ref (since 0.1.162).
+ */
 declare function validateExclusiveWith(token: Token, selfName: string, others: Array<{
   key: string;
   displayName?: string;
-}>): TMessages;
+}>, doc: AtscriptDoc): TMessages;
+/**
+ * Reports each of `pairs` (`[annotation, why]`) the field carrying `token`
+ * also carries — its own or inherited through its type ref (the field's
+ * effective annotations, what the runtime mirror reads off the metadata):
+ * `${tag} cannot coexist with @${annotation} — ${why}`.
+ * @since 0.1.162
+ */
+declare function validateIncompatible(token: Token, tag: string, pairs: ReadonlyArray<readonly [annotation: string, why: string]>, doc: AtscriptDoc): TMessages;
+/** Whether a prop is a field of a view interface (`@db.view` / `@db.view.for`). */
+declare function isViewField(field: SemanticNode): boolean;
 /** Primitive base type (`string`, `number`, `decimal`, …) of a resolved definition, if it is a primitive. */
 declare function primitiveBaseType(def: SemanticNode | undefined): string | undefined;
 /**
@@ -164,4 +188,74 @@ declare const NOT_DIMENSION_REASON = "not a dimension";
  */
 declare function isStrictAggregateStruct(struct: SemanticStructureNode): boolean;
 //#endregion
-export { NOT_DIMENSION_REASON, TFKFieldMatch, TRefArgumentOptions, earlierJoinTargets, findFKFieldsPointingTo, findViewCycle, forEachFieldRef, getAnnotationAlias, getDbTableOwner, getNavTargetTypeName, getParentStruct, getParentTypeName, hasAnyViewAnnotation, integerMemberIndexProblem, isAliasDecl, isDbSourceDecl, isNullableUnion, isStrictAggregateStruct, joinTargets, primitiveBaseType, refActionAnnotation, searchFieldVerdict, validateExclusiveWith, validateFieldBaseType, validateQueryScope, validateRefArgument, validateSiblingStringField, viewJoins, viewScopeTypes };
+//#region src/shared/view-validation.d.ts
+/** Read seals of a view field ({@link viewFieldSeals}). @since 0.1.162 */
+interface TViewFieldSeals {
+  writeOnly: boolean;
+  encrypted: boolean;
+}
+/**
+ * The read seals a view field takes from the source field it reads, as the
+ * compiler sees them (compile-time mirror of the runtime `sourceFieldSeals`,
+ * which stamps them onto the view column — these annotations are
+ * `passedWhenReferred: false`, so they are not in the field's own metadata):
+ * - `writeOnly` — the source path or an ancestor object is `@db.writeOnly`;
+ * - `encrypted` — the source path or an ancestor object is `@db.encrypted`.
+ *
+ * (A `@db.json` source is no seal: a view reads a primitive JSON column's
+ * typed value, and an object one needs its own `@db.json`.)
+ *
+ * The source is the chain ref (`pin?: Account.pin`), or else the entry table's
+ * same-named field (or an aggregate's field) of a `@db.view.for` view. A source
+ * field that is itself a view field passes on its own seals. Computed fields
+ * and fields of anything but a view report no seal.
+ * @since 0.1.162
+ */
+declare function viewFieldSeals(field: SemanticNode, doc: AtscriptDoc, depth?: number): TViewFieldSeals;
+/**
+ * A search / index feature (`@db.column.searchable`, `@db.index.fulltext`,
+ * `@db.index.geo`, `@db.search.vector`, `@db.search.filter`) on a field that
+ * would read ciphertext: a field inside an `@db.encrypted` object, or a view
+ * field over an encrypted source — or `undefined`. The field's own
+ * `@db.encrypted` is reported by that spec.
+ * @since 0.1.162
+ */
+declare function encryptedSearchProblem(token: Token, doc: AtscriptDoc, annotation: string): TMessages[number] | undefined;
+/**
+ * An annotation's `validate` refusing it on a field that reads ciphertext
+ * ({@link encryptedSearchProblem}) — for the search features of sibling
+ * adapter plugins too.
+ * @since 0.1.162
+ */
+declare function refuseCiphertext(annotation: string): TAnnotationSpecConfig["validate"];
+/**
+ * Navigation relation annotations — a navigation field holds another table's
+ * rows, never part of this table's stored value.
+ * @since 0.1.162
+ */
+declare const NAV_ANNOTATIONS: readonly ["db.rel.to", "db.rel.from", "db.rel.via"];
+/** Whether a prop is a navigation field ({@link NAV_ANNOTATIONS}). */
+declare function isNavProp(prop: SemanticNode): boolean;
+/**
+ * Walks the fields stored in `root` (an interface, a structure or a type ref)
+ * depth-first — nested objects and type refs included, navigation fields and
+ * arrays skipped — and returns the first non-`undefined` result of `visit`.
+ * `path` is the field's dotted path below `prefix`; `viaRef` tells whether
+ * a type ref was followed to reach it.
+ * @since 0.1.162
+ */
+declare function findStoredField<T>(root: SemanticNode | undefined, doc: AtscriptDoc, visit: (prop: SemanticNode, path: string, viaRef: boolean) => T | undefined, prefix?: string): T | undefined;
+/**
+ * A search feature ({@link ENCRYPTED_SEARCH_FEATURES}) declared inside the
+ * TYPE of the `@db.encrypted` field carrying `token`, reached through a type
+ * ref (`@db.encrypted profile: Address`, where `Address` has
+ * `@db.index.fulltext city`) — the shared type's own annotations cannot see
+ * that this use encrypts them. Fields declared inline are reported by their
+ * own annotation (see {@link encryptedSearchProblem}).
+ * @since 0.1.162
+ */
+declare function encryptedTypeSearchProblem(token: Token, doc: AtscriptDoc): TMessages[number] | undefined;
+/** Name of the nearest `@db.encrypted` prop enclosing `field` (inline nested objects), if any. */
+declare function encryptedAncestorName(field: SemanticNode): string | undefined;
+//#endregion
+export { ENCRYPTED_INCOMPATIBLE, ENCRYPTED_SEARCH_FEATURES, NAV_ANNOTATIONS, NOT_DIMENSION_REASON, TFKFieldMatch, TRefArgumentOptions, type TViewFieldSeals, earlierJoinTargets, effectiveAnnotationNames, encryptedAncestorName, encryptedSearchProblem, encryptedTypeSearchProblem, findFKFieldsPointingTo, findStoredField, findViewCycle, forEachFieldRef, getAnnotationAlias, getDbTableOwner, getNavTargetTypeName, getParentStruct, getParentTypeName, hasAnyViewAnnotation, integerMemberIndexProblem, isAliasDecl, isDbSourceDecl, isNavProp, isNullableUnion, isStrictAggregateStruct, isViewField, joinTargets, primitiveBaseType, refActionAnnotation, refuseCiphertext, searchFieldVerdict, stableJson, validateExclusiveWith, validateFieldBaseType, validateIncompatible, validateQueryScope, validateRefArgument, validateSiblingStringField, viewFieldSeals, viewJoins, viewScopeTypes };

package/dist/shared.d.mts

@@ -1,11 +1,35 @@
-import { AnnotationSpec, AtscriptDoc, SemanticInterfaceNode, SemanticNode, SemanticPropNode, SemanticQueryExprNode, SemanticQueryFieldRefNode, SemanticStructureNode, TAnnotationTokens, TMessages, TQueryScope, Token } from "@atscript/core";
+import { s as stableJson } from "./object-Czia_qD4.mjs";
+import { n as ENCRYPTED_SEARCH_FEATURES, t as ENCRYPTED_INCOMPATIBLE } from "./search-fields-CHqqcC3W.mjs";
+import { AnnotationSpec, AtscriptDoc, SemanticInterfaceNode, SemanticNode, SemanticPropNode, SemanticQueryExprNode, SemanticQueryFieldRefNode, SemanticStructureNode, TAnnotationSpecConfig, TAnnotationTokens, TMessages, TQueryScope, Token } from "@atscript/core";
 
 //#region src/shared/annotation-utils.d.ts
-/** Asserts the field carrying this annotation does not also carry any of `others`. */
+/**
+ * Names of a field's effective annotations: its own plus the ones it inherits
+ * through its type ref (`price: Order.price`), with the `passedWhenReferred:
+ * false` ones dropped — the set codegen writes into the field's runtime
+ * metadata (`AtscriptDoc.evalAnnotationsForNode`). Compile checks that mirror
+ * a runtime metadata check read this, not the own-only `countAnnotations`.
+ * @since 0.1.162
+ */
+declare function effectiveAnnotationNames(field: SemanticNode, doc: AtscriptDoc): Set<string>;
+/**
+ * Asserts the field carrying this annotation does not also carry any of
+ * `others` — its own or inherited through its type ref (since 0.1.162).
+ */
 declare function validateExclusiveWith(token: Token, selfName: string, others: Array<{
   key: string;
   displayName?: string;
-}>): TMessages;
+}>, doc: AtscriptDoc): TMessages;
+/**
+ * Reports each of `pairs` (`[annotation, why]`) the field carrying `token`
+ * also carries — its own or inherited through its type ref (the field's
+ * effective annotations, what the runtime mirror reads off the metadata):
+ * `${tag} cannot coexist with @${annotation} — ${why}`.
+ * @since 0.1.162
+ */
+declare function validateIncompatible(token: Token, tag: string, pairs: ReadonlyArray<readonly [annotation: string, why: string]>, doc: AtscriptDoc): TMessages;
+/** Whether a prop is a field of a view interface (`@db.view` / `@db.view.for`). */
+declare function isViewField(field: SemanticNode): boolean;
 /** Primitive base type (`string`, `number`, `decimal`, …) of a resolved definition, if it is a primitive. */
 declare function primitiveBaseType(def: SemanticNode | undefined): string | undefined;
 /**
@@ -164,4 +188,74 @@ declare const NOT_DIMENSION_REASON = "not a dimension";
  */
 declare function isStrictAggregateStruct(struct: SemanticStructureNode): boolean;
 //#endregion
-export { NOT_DIMENSION_REASON, TFKFieldMatch, TRefArgumentOptions, earlierJoinTargets, findFKFieldsPointingTo, findViewCycle, forEachFieldRef, getAnnotationAlias, getDbTableOwner, getNavTargetTypeName, getParentStruct, getParentTypeName, hasAnyViewAnnotation, integerMemberIndexProblem, isAliasDecl, isDbSourceDecl, isNullableUnion, isStrictAggregateStruct, joinTargets, primitiveBaseType, refActionAnnotation, searchFieldVerdict, validateExclusiveWith, validateFieldBaseType, validateQueryScope, validateRefArgument, validateSiblingStringField, viewJoins, viewScopeTypes };
+//#region src/shared/view-validation.d.ts
+/** Read seals of a view field ({@link viewFieldSeals}). @since 0.1.162 */
+interface TViewFieldSeals {
+  writeOnly: boolean;
+  encrypted: boolean;
+}
+/**
+ * The read seals a view field takes from the source field it reads, as the
+ * compiler sees them (compile-time mirror of the runtime `sourceFieldSeals`,
+ * which stamps them onto the view column — these annotations are
+ * `passedWhenReferred: false`, so they are not in the field's own metadata):
+ * - `writeOnly` — the source path or an ancestor object is `@db.writeOnly`;
+ * - `encrypted` — the source path or an ancestor object is `@db.encrypted`.
+ *
+ * (A `@db.json` source is no seal: a view reads a primitive JSON column's
+ * typed value, and an object one needs its own `@db.json`.)
+ *
+ * The source is the chain ref (`pin?: Account.pin`), or else the entry table's
+ * same-named field (or an aggregate's field) of a `@db.view.for` view. A source
+ * field that is itself a view field passes on its own seals. Computed fields
+ * and fields of anything but a view report no seal.
+ * @since 0.1.162
+ */
+declare function viewFieldSeals(field: SemanticNode, doc: AtscriptDoc, depth?: number): TViewFieldSeals;
+/**
+ * A search / index feature (`@db.column.searchable`, `@db.index.fulltext`,
+ * `@db.index.geo`, `@db.search.vector`, `@db.search.filter`) on a field that
+ * would read ciphertext: a field inside an `@db.encrypted` object, or a view
+ * field over an encrypted source — or `undefined`. The field's own
+ * `@db.encrypted` is reported by that spec.
+ * @since 0.1.162
+ */
+declare function encryptedSearchProblem(token: Token, doc: AtscriptDoc, annotation: string): TMessages[number] | undefined;
+/**
+ * An annotation's `validate` refusing it on a field that reads ciphertext
+ * ({@link encryptedSearchProblem}) — for the search features of sibling
+ * adapter plugins too.
+ * @since 0.1.162
+ */
+declare function refuseCiphertext(annotation: string): TAnnotationSpecConfig["validate"];
+/**
+ * Navigation relation annotations — a navigation field holds another table's
+ * rows, never part of this table's stored value.
+ * @since 0.1.162
+ */
+declare const NAV_ANNOTATIONS: readonly ["db.rel.to", "db.rel.from", "db.rel.via"];
+/** Whether a prop is a navigation field ({@link NAV_ANNOTATIONS}). */
+declare function isNavProp(prop: SemanticNode): boolean;
+/**
+ * Walks the fields stored in `root` (an interface, a structure or a type ref)
+ * depth-first — nested objects and type refs included, navigation fields and
+ * arrays skipped — and returns the first non-`undefined` result of `visit`.
+ * `path` is the field's dotted path below `prefix`; `viaRef` tells whether
+ * a type ref was followed to reach it.
+ * @since 0.1.162
+ */
+declare function findStoredField<T>(root: SemanticNode | undefined, doc: AtscriptDoc, visit: (prop: SemanticNode, path: string, viaRef: boolean) => T | undefined, prefix?: string): T | undefined;
+/**
+ * A search feature ({@link ENCRYPTED_SEARCH_FEATURES}) declared inside the
+ * TYPE of the `@db.encrypted` field carrying `token`, reached through a type
+ * ref (`@db.encrypted profile: Address`, where `Address` has
+ * `@db.index.fulltext city`) — the shared type's own annotations cannot see
+ * that this use encrypts them. Fields declared inline are reported by their
+ * own annotation (see {@link encryptedSearchProblem}).
+ * @since 0.1.162
+ */
+declare function encryptedTypeSearchProblem(token: Token, doc: AtscriptDoc): TMessages[number] | undefined;
+/** Name of the nearest `@db.encrypted` prop enclosing `field` (inline nested objects), if any. */
+declare function encryptedAncestorName(field: SemanticNode): string | undefined;
+//#endregion
+export { ENCRYPTED_INCOMPATIBLE, ENCRYPTED_SEARCH_FEATURES, NAV_ANNOTATIONS, NOT_DIMENSION_REASON, TFKFieldMatch, TRefArgumentOptions, type TViewFieldSeals, earlierJoinTargets, effectiveAnnotationNames, encryptedAncestorName, encryptedSearchProblem, encryptedTypeSearchProblem, findFKFieldsPointingTo, findStoredField, findViewCycle, forEachFieldRef, getAnnotationAlias, getDbTableOwner, getNavTargetTypeName, getParentStruct, getParentTypeName, hasAnyViewAnnotation, integerMemberIndexProblem, isAliasDecl, isDbSourceDecl, isNavProp, isNullableUnion, isStrictAggregateStruct, isViewField, joinTargets, primitiveBaseType, refActionAnnotation, refuseCiphertext, searchFieldVerdict, stableJson, validateExclusiveWith, validateFieldBaseType, validateIncompatible, validateQueryScope, validateRefArgument, validateSiblingStringField, viewFieldSeals, viewJoins, viewScopeTypes };

package/dist/shared.mjs

@@ -1,3 +1,5 @@
+import { n as ENCRYPTED_SEARCH_FEATURES, t as ENCRYPTED_INCOMPATIBLE } from "./search-fields-0U0FAFGj.mjs";
+import { s as stableJson } from "./object-PQ1J8jri.mjs";
 import { n as isStrictAggregateStruct, t as NOT_DIMENSION_REASON } from "./aggregate-rules-jdPrxqWa.mjs";
-import { C as validateExclusiveWith, S as searchFieldVerdict, T as validateSiblingStringField, _ as getParentTypeName, a as hasAnyViewAnnotation, b as primitiveBaseType, c as joinTargets, d as viewJoins, f as viewScopeTypes, g as getParentStruct, h as getNavTargetTypeName, i as forEachFieldRef, l as validateQueryScope, m as getDbTableOwner, n as findFKFieldsPointingTo, o as isAliasDecl, p as getAnnotationAlias, r as findViewCycle, s as isDbSourceDecl, t as earlierJoinTargets, u as validateRefArgument, v as integerMemberIndexProblem, w as validateFieldBaseType, x as refActionAnnotation, y as isNullableUnion } from "./validation-utils-BGjqc2jU.mjs";
-export { NOT_DIMENSION_REASON, earlierJoinTargets, findFKFieldsPointingTo, findViewCycle, forEachFieldRef, getAnnotationAlias, getDbTableOwner, getNavTargetTypeName, getParentStruct, getParentTypeName, hasAnyViewAnnotation, integerMemberIndexProblem, isAliasDecl, isDbSourceDecl, isNullableUnion, isStrictAggregateStruct, joinTargets, primitiveBaseType, refActionAnnotation, searchFieldVerdict, validateExclusiveWith, validateFieldBaseType, validateQueryScope, validateRefArgument, validateSiblingStringField, viewJoins, viewScopeTypes };
+import { A as getParentTypeName, B as validateSiblingStringField, C as viewJoins, D as getDbTableOwner, E as getAnnotationAlias, F as refActionAnnotation, I as searchFieldVerdict, L as validateExclusiveWith, M as isNullableUnion, N as isViewField, O as getNavTargetTypeName, P as primitiveBaseType, R as validateFieldBaseType, S as validateRefArgument, T as effectiveAnnotationNames, _ as hasAnyViewAnnotation, a as findStoredField, b as joinTargets, c as refuseCiphertext, d as viewFieldSeals, g as forEachFieldRef, h as findViewCycle, i as encryptedTypeSearchProblem, j as integerMemberIndexProblem, k as getParentStruct, m as findFKFieldsPointingTo, n as encryptedAncestorName, o as isNavProp, p as earlierJoinTargets, r as encryptedSearchProblem, t as NAV_ANNOTATIONS, v as isAliasDecl, w as viewScopeTypes, x as validateQueryScope, y as isDbSourceDecl, z as validateIncompatible } from "./view-validation-QbqqXEAM.mjs";
+export { ENCRYPTED_INCOMPATIBLE, ENCRYPTED_SEARCH_FEATURES, NAV_ANNOTATIONS, NOT_DIMENSION_REASON, earlierJoinTargets, effectiveAnnotationNames, encryptedAncestorName, encryptedSearchProblem, encryptedTypeSearchProblem, findFKFieldsPointingTo, findStoredField, findViewCycle, forEachFieldRef, getAnnotationAlias, getDbTableOwner, getNavTargetTypeName, getParentStruct, getParentTypeName, hasAnyViewAnnotation, integerMemberIndexProblem, isAliasDecl, isDbSourceDecl, isNavProp, isNullableUnion, isStrictAggregateStruct, isViewField, joinTargets, primitiveBaseType, refActionAnnotation, refuseCiphertext, searchFieldVerdict, stableJson, validateExclusiveWith, validateFieldBaseType, validateIncompatible, validateQueryScope, validateRefArgument, validateSiblingStringField, viewFieldSeals, viewJoins, viewScopeTypes };