@beechcms/api 0.6.0-preview.1 → 0.6.0-preview.3

package/src/rate-limit/in-memory-rate-limiter.test.ts

@@ -1,37 +0,0 @@
-// SPDX-License-Identifier: BUSL-1.1
-// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
-// See LICENSE in the repository root for license terms.
-
-import { describe, it, expect } from 'vitest'
-import { InMemoryRateLimiter } from './in-memory-rate-limiter'
-
-describe('InMemoryRateLimiter', () => {
-  it('allows requests up to the configured maximum hit count', async () => {
-    const limiter = new InMemoryRateLimiter(3)
-    expect((await limiter.checkLimit('key')).isAllowed).toBe(true)
-    expect((await limiter.checkLimit('key')).isAllowed).toBe(true)
-    expect((await limiter.checkLimit('key')).isAllowed).toBe(true)
-  })
-
-  it('blocks the very next request after maxAllowedHits is reached', async () => {
-    const limiter = new InMemoryRateLimiter(2)
-    await limiter.checkLimit('key')
-    await limiter.checkLimit('key')
-    expect((await limiter.checkLimit('key')).isAllowed).toBe(false)
-  })
-
-  it('tracks hit counts independently for each key', async () => {
-    const limiter = new InMemoryRateLimiter(1)
-    expect((await limiter.checkLimit('ip-a')).isAllowed).toBe(true)
-    expect((await limiter.checkLimit('ip-b')).isAllowed).toBe(true)
-    // Both keys exhausted independently
-    expect((await limiter.checkLimit('ip-a')).isAllowed).toBe(false)
-    expect((await limiter.checkLimit('ip-b')).isAllowed).toBe(false)
-  })
-
-  it('maxAllowedHits = 1 allows exactly one request before blocking', async () => {
-    const limiter = new InMemoryRateLimiter(1)
-    expect((await limiter.checkLimit('k')).isAllowed).toBe(true)
-    expect((await limiter.checkLimit('k')).isAllowed).toBe(false)
-  })
-})

package/src/rate-limit/in-memory-rate-limiter.ts

@@ -1,17 +0,0 @@
-// SPDX-License-Identifier: BUSL-1.1
-// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
-// See LICENSE in the repository root for license terms.
-
-import type { IRateLimiter, RateLimitResult } from '@beechcms/core'
-
-export class InMemoryRateLimiter implements IRateLimiter {
-  private readonly hitCounts = new Map<string, number>()
-
-  constructor(private readonly maxAllowedHits: number) {}
-
-  async checkLimit(key: string): Promise<RateLimitResult> {
-    const currentHits = (this.hitCounts.get(key) ?? 0) + 1
-    this.hitCounts.set(key, currentHits)
-    return { isAllowed: currentHits <= this.maxAllowedHits }
-  }
-}

package/src/rate-limit/no-op-rate-limiter.test.ts

@@ -1,22 +0,0 @@
-// SPDX-License-Identifier: BUSL-1.1
-// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
-// See LICENSE in the repository root for license terms.
-
-import { describe, it, expect } from 'vitest'
-import { NoOpRateLimiter } from './no-op-rate-limiter'
-
-describe('NoOpRateLimiter', () => {
-  it('always returns isAllowed: true regardless of the key', async () => {
-    const limiter = new NoOpRateLimiter()
-    for (let i = 0; i < 100; i++) {
-      expect((await limiter.checkLimit('any-key')).isAllowed).toBe(true)
-    }
-  })
-
-  it('allows all keys without accumulating state', async () => {
-    const limiter = new NoOpRateLimiter()
-    expect((await limiter.checkLimit('ip-a')).isAllowed).toBe(true)
-    expect((await limiter.checkLimit('ip-b')).isAllowed).toBe(true)
-    expect((await limiter.checkLimit('ip-a')).isAllowed).toBe(true)
-  })
-})

package/src/rate-limit/no-op-rate-limiter.ts

@@ -1,11 +0,0 @@
-// SPDX-License-Identifier: BUSL-1.1
-// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
-// See LICENSE in the repository root for license terms.
-
-import type { IRateLimiter, RateLimitResult } from '@beechcms/core'
-
-export class NoOpRateLimiter implements IRateLimiter {
-  async checkLimit(_key: string): Promise<RateLimitResult> {
-    return { isAllowed: true }
-  }
-}

package/src/search-utils.test.ts

@@ -1,211 +0,0 @@
-// SPDX-License-Identifier: BUSL-1.1
-// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
-// See LICENSE in the repository root for license terms.
-
-import { describe, it, expect } from 'vitest'
-import { encodeCursor, decodeCursor, buildFtsQuery, mapFtsRow } from './search-utils'
-import type { Seed } from '@beechcms/core'
-
-const TEXT_SEED = {
-  slug: 'articoli',
-  displayNameAlias: 'title',
-  branches: [
-    { id: 'br_01', alias: 'title', type: 'text', policies: { search: true } },
-  ],
-} as unknown as Seed
-
-const SECOND_SEED = {
-  slug: 'team',
-  displayNameAlias: 'name',
-  branches: [
-    { id: 'br_01', alias: 'name', type: 'text', policies: { search: true } },
-  ],
-} as unknown as Seed
-
-const NO_FTS_SEED = {
-  slug: 'prodotti',
-  displayNameAlias: 'nome',
-  branches: [
-    { id: 'br_01', alias: 'price', type: 'number' },
-  ],
-} as unknown as Seed
-
-// ─── encodeCursor / decodeCursor ─────────────────────────────────────────────
-
-describe('encodeCursor / decodeCursor', () => {
-  it('roundtrip preserves rank and entryId', () => {
-    const cursor = encodeCursor(-1.23456, 'entry-abc')
-    const decoded = decodeCursor(cursor)
-    expect(decoded?.rank).toBeCloseTo(-1.23456)
-    expect(decoded?.entryId).toBe('entry-abc')
-  })
-
-  it('entryId without colons roundtrips correctly (UUID-style IDs)', () => {
-    const entryId = 'f47ac10b-58cc-4372-a567-0e02b2c3d479'
-    const cursor = encodeCursor(-3.7, entryId)
-    const decoded = decodeCursor(cursor)
-    expect(decoded?.rank).toBeCloseTo(-3.7)
-    expect(decoded?.entryId).toBe(entryId)
-  })
-
-  it('returns null for invalid base64', () => {
-    expect(decodeCursor('!!!not-base64!!!')).toBeNull()
-  })
-
-  it('returns null when decoded string has no colon separator', () => {
-    expect(decodeCursor(btoa('noseparator'))).toBeNull()
-  })
-})
-
-// ─── buildFtsQuery ───────────────────────────────────────────────────────────
-
-describe('buildFtsQuery', () => {
-  it('returns empty-result query when no seed has a searchable FTS branch', () => {
-    const result = buildFtsQuery(
-      { q: 'hello', schemaSlug: null, status: null, limit: 20, cursor: null },
-      [NO_FTS_SEED],
-    )
-    expect(result.sql).toContain('WHERE 1=0')
-    expect(result.binds).toHaveLength(0)
-    expect(result.countSql).toContain('SELECT 0 as total')
-  })
-
-  it('throws EMPTY_QUERY when all terms are stripped or too short (single chars)', () => {
-    expect(() =>
-      buildFtsQuery({ q: 'a b', schemaSlug: null, status: null, limit: 20, cursor: null }, [TEXT_SEED]),
-    ).toThrow('EMPTY_QUERY')
-  })
-
-  it('generates a query referencing the seed FTS and content tables', () => {
-    const result = buildFtsQuery(
-      { q: 'hello', schemaSlug: null, status: null, limit: 20, cursor: null },
-      [TEXT_SEED],
-    )
-    expect(result.sql).toContain('fts_articoli')
-    expect(result.sql).toContain('content_articoli')
-    expect(result.sql).toContain('LIMIT ?')
-    expect(result.binds.at(-1)).toBe(21) // limit + 1 for has-more detection
-  })
-
-  it('UNION ALLs multiple seeds when no schemaSlug filter is set', () => {
-    const result = buildFtsQuery(
-      { q: 'test', schemaSlug: null, status: null, limit: 10, cursor: null },
-      [TEXT_SEED, SECOND_SEED],
-    )
-    expect(result.sql).toContain('UNION ALL')
-    expect(result.sql).toContain('fts_articoli')
-    expect(result.sql).toContain('fts_team')
-  })
-
-  it('limits query to the requested schemaSlug when provided', () => {
-    const result = buildFtsQuery(
-      { q: 'test', schemaSlug: 'articoli', status: null, limit: 20, cursor: null },
-      [TEXT_SEED, SECOND_SEED],
-    )
-    expect(result.sql).toContain('fts_articoli')
-    expect(result.sql).not.toContain('fts_team')
-  })
-
-  it('adds status filter to WHERE clause and bind values', () => {
-    const result = buildFtsQuery(
-      { q: 'hello', schemaSlug: null, status: 'published', limit: 20, cursor: null },
-      [TEXT_SEED],
-    )
-    expect(result.sql).toContain('ce.status = ?')
-    expect(result.binds).toContain('published')
-  })
-
-  it('adds cursor-based pagination condition when cursor is valid', () => {
-    const cursor = encodeCursor(-1.5, 'entry-123')
-    const result = buildFtsQuery(
-      { q: 'hello', schemaSlug: null, status: null, limit: 20, cursor },
-      [TEXT_SEED],
-    )
-    expect(result.sql).toContain('bm25')
-    expect(result.binds).toContain('entry-123')
-  })
-
-  it('ignores an invalid cursor and produces no pagination condition', () => {
-    const result = buildFtsQuery(
-      { q: 'hello', schemaSlug: null, status: null, limit: 20, cursor: 'bad-cursor' },
-      [TEXT_SEED],
-    )
-    expect(result.binds).not.toContain('entry-123')
-  })
-
-  it('countSql wraps each seed count in a SUM', () => {
-    const result = buildFtsQuery(
-      { q: 'test', schemaSlug: null, status: null, limit: 10, cursor: null },
-      [TEXT_SEED, SECOND_SEED],
-    )
-    expect(result.countSql).toContain('SUM')
-    expect(result.countSql).toContain('fts_articoli')
-    expect(result.countSql).toContain('fts_team')
-  })
-
-  it('count binds do not include the limit+1 sentinel', () => {
-    const result = buildFtsQuery(
-      { q: 'hello', schemaSlug: null, status: null, limit: 5, cursor: null },
-      [TEXT_SEED],
-    )
-    expect(result.countBinds).not.toContain(6) // limit + 1 must not appear in count binds
-  })
-
-  it('single-character terms (length < 2) are filtered out', () => {
-    // 'a b c' — single-char terms discarded; result depends on remaining terms
-    expect(() =>
-      buildFtsQuery({ q: 'a b c', schemaSlug: null, status: null, limit: 20, cursor: null }, [TEXT_SEED]),
-    ).toThrow('EMPTY_QUERY')
-  })
-
-  it('numeric terms are quoted without prefix expansion', () => {
-    const result = buildFtsQuery(
-      { q: '2024', schemaSlug: null, status: null, limit: 20, cursor: null },
-      [TEXT_SEED],
-    )
-    expect(result.binds[0]).toContain('"2024"')
-  })
-})
-
-// ─── mapFtsRow ───────────────────────────────────────────────────────────────
-
-describe('mapFtsRow', () => {
-  it('maps all FtsRow fields to SearchResultItem', () => {
-    const row = {
-      entry_id: 'e1', schema_slug: 'articoli', slug: 'my-post',
-      status: 'published', title: 'My Post', excerpt: 'A snippet', rank: -1,
-    }
-    const result = mapFtsRow(row)
-    expect(result.id).toBe('e1')
-    expect(result.schema_slug).toBe('articoli')
-    expect(result.slug).toBe('my-post')
-    expect(result.status).toBe('published')
-    expect(result.title).toBe('My Post')
-    expect(result.excerpt).toBe('A snippet')
-    expect(result.data).toEqual({})
-  })
-
-  it('strips HTML tags from excerpt but preserves <mark> and </mark>', () => {
-    const row = {
-      entry_id: 'e1', schema_slug: 'a', slug: null, status: 'draft',
-      title: null, excerpt: '<p>A <mark>word</mark> here</p>', rank: 0,
-    }
-    expect(mapFtsRow(row).excerpt).toBe('A <mark>word</mark> here')
-  })
-
-  it('collapses multiple whitespace characters in excerpt', () => {
-    const row = {
-      entry_id: 'e1', schema_slug: 'a', slug: null, status: 'draft',
-      title: null, excerpt: '<p>  lots   of  space  </p>', rank: 0,
-    }
-    expect(mapFtsRow(row).excerpt).toBe('lots of space')
-  })
-
-  it('returns empty string for null title', () => {
-    const row = {
-      entry_id: 'e1', schema_slug: 'a', slug: null, status: 'draft',
-      title: null, excerpt: '', rank: 0,
-    }
-    expect(mapFtsRow(row).title).toBe('')
-  })
-})

package/src/search-utils.ts

@@ -1,213 +0,0 @@
-// SPDX-License-Identifier: BUSL-1.1
-// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
-// See LICENSE in the repository root for license terms.
-
-// apps/api/src/search-utils.ts
-// Pure functions — zero Hono dependencies, importable from Vitest.
-// v0.4.0: FTS is per-seed (fts_{slug}), joined with content_{slug} for metadata.
-
-import type { Seed, SearchResultRow } from "@beechcms/core"
-
-// ─── Types ───────────────────────────────────────────────────────────────────
-
-// Row returned by UNION ALL query across fts_{slug} JOIN content_{slug}
-export interface FtsRow {
-  entry_id:    string
-  schema_slug: string
-  slug:        string | null
-  status:      string
-  title:       string | null
-  excerpt:     string
-  rank:        number
-}
-
-export interface SearchResultItem {
-  id:          string
-  schema_slug: string
-  slug:        string | null
-  status:      string
-  title:       string
-  excerpt:     string
-  data:        Record<string, unknown>
-}
-
-export interface SearchResponse {
-  items:      SearchResultItem[]
-  nextCursor: string | null
-  total:      number
-}
-
-export interface SearchQueryParams {
-  q:          string
-  schemaSlug: string | null
-  status:     string | null
-  limit:      number         // already clamped 1–50 by handler
-  cursor:     string | null
-}
-
-// ─── Cursor ──────────────────────────────────────────────────────────────────
-
-export function encodeCursor(rank: number, entryId: string): string {
-  return btoa(`${rank}:${entryId}`)
-}
-
-export function decodeCursor(cursor: string): { rank: number; entryId: string } | null {
-  try {
-    const decoded = atob(cursor)
-    const sep     = decoded.lastIndexOf(":")
-    if (sep === -1) return null
-    return {
-      rank:    Number.parseFloat(decoded.slice(0, sep)),
-      entryId: decoded.slice(sep + 1),
-    }
-  } catch {
-    return null
-  }
-}
-
-// ─── Helpers ─────────────────────────────────────────────────────────────────
-
-function hasSearchableFts(seed: Seed): boolean {
-  return seed.branches.some(b =>
-    (b.type === 'text' || b.type === 'richtext') && b.policies?.search !== false
-  )
-}
-
-function buildMatchExpr(q: string): string {
-  const MIN_PREFIX = 3
-  const safeQ = q.replace(/["*^()]/g, " ").trim()
-  const terms = safeQ.split(/\s+/).filter(t => t.length >= 2)
-  if (terms.length === 0) throw new Error("EMPTY_QUERY")
-
-  return terms
-    .map(t => {
-      if (/^\d+$/.test(t)) return `"${t}"`
-      if (t.length <= MIN_PREFIX) return `"${t}"*`
-      const prefixes: string[] = []
-      for (let i = MIN_PREFIX; i <= t.length; i++) {
-        prefixes.push(`"${t.slice(0, i)}"*`)
-      }
-      return `(${prefixes.join(" OR ")})`
-    })
-    .join(" ")
-}
-
-// ─── Query builder ───────────────────────────────────────────────────────────
-
-/**
- * Builds a UNION ALL query across all per-seed fts_{slug} tables (v0.4.0).
- * Each SELECT joins fts_{slug} with content_{slug} to fetch title, slug, status.
- * Seeds param: full registry — filtered internally by schemaSlug and FTS availability.
- */
-export function buildFtsQuery(
-  params: SearchQueryParams,
-  seeds: Seed[],
-): {
-  sql:        string
-  binds:      unknown[]
-  countSql:   string
-  countBinds: unknown[]
-} {
-  const { q, schemaSlug, status, limit, cursor } = params
-
-  const matchExpr = buildMatchExpr(q)  // throws EMPTY_QUERY if needed
-
-  const targetSeeds = seeds.filter(s =>
-    hasSearchableFts(s) && (schemaSlug === null || s.slug === schemaSlug)
-  )
-
-  if (targetSeeds.length === 0) {
-    return {
-      sql:        "SELECT NULL as entry_id, NULL as schema_slug, NULL as slug, NULL as status, NULL as title, '' as excerpt, 0 as rank WHERE 1=0",
-      binds:      [],
-      countSql:   "SELECT 0 as total",
-      countBinds: [],
-    }
-  }
-
-  const decoded = cursor ? decodeCursor(cursor) : null
-
-  const parts:       string[]  = []
-  const binds:       unknown[] = []
-  const countParts:  string[]  = []
-  const countBinds:  unknown[] = []
-
-  for (const seed of targetSeeds) {
-    const fts   = `fts_${seed.slug}`
-    const table = `content_${seed.slug}`
-    const title = seed.displayNameAlias
-
-    // Main query per seed
-    const where: string[]  = [`${fts} MATCH ?`]
-    const lb:    unknown[] = [matchExpr]
-
-    if (status) { where.push("ce.status = ?"); lb.push(status) }
-
-    if (decoded) {
-      where.push(`(bm25(${fts}) > ? OR (bm25(${fts}) = ? AND f.entry_id > ?))`)
-      lb.push(decoded.rank, decoded.rank, decoded.entryId)
-    }
-
-    parts.push(
-      `SELECT f.entry_id, '${seed.slug}' AS schema_slug, ce.slug, ce.status,` +
-      ` ce.${title} AS title,` +
-      ` snippet(${fts}, 1, '<mark>', '</mark>', '…', 16) AS excerpt,` +
-      ` bm25(${fts}) AS rank` +
-      ` FROM ${fts} f JOIN ${table} ce ON ce.id = f.entry_id` +
-      ` WHERE ${where.join(' AND ')}`
-    )
-    binds.push(...lb)
-
-    // Count per seed (no cursor, no limit)
-    const cw: string[]  = [`${fts} MATCH ?`]
-    const cb: unknown[] = [matchExpr]
-    if (status) { cw.push("ce.status = ?"); cb.push(status) }
-
-    countParts.push(
-      `SELECT COUNT(*) as c FROM ${fts} f JOIN ${table} ce ON ce.id = f.entry_id WHERE ${cw.join(' AND ')}`
-    )
-    countBinds.push(...cb)
-  }
-
-  const sql      = `${parts.join(' UNION ALL ')} ORDER BY rank, entry_id LIMIT ?`
-  binds.push(limit + 1)
-
-  const countSql = `SELECT SUM(c) as total FROM (${countParts.join(' UNION ALL ')})`
-
-  return { sql, binds, countSql, countBinds }
-}
-
-// ─── Mapper ──────────────────────────────────────────────────────────────────
-
-function stripHtmlPreserveMark(html: string): string {
-  return html.replace(/<(?!\/?mark\b)[^>]*>/gi, ' ').replace(/\s+/g, ' ').trim()
-}
-
-export function mapFtsRow(row: FtsRow): SearchResultItem {
-  return {
-    id:          row.entry_id,
-    schema_slug: row.schema_slug,
-    slug:        row.slug,
-    status:      row.status,
-    title:       row.title ?? "",
-    excerpt:     stripHtmlPreserveMark(row.excerpt ?? ""),
-    data:        {},
-  }
-}
-
-/**
- * Maps a repository-shaped SearchResultRow (camelCase) to the wire-format
- * SearchResultItem returned by the /api/search route. Keeps the HTML
- * stripping behaviour previously inlined inside mapFtsRow.
- */
-export function mapSearchResultRow(row: SearchResultRow): SearchResultItem {
-  return {
-    id:          row.entryId,
-    schema_slug: row.schemaSlug,
-    slug:        row.slug,
-    status:      row.status,
-    title:       row.title ?? "",
-    excerpt:     stripHtmlPreserveMark(row.excerpt ?? ""),
-    data:        {},
-  }
-}

package/src/search.ts

@@ -1,65 +0,0 @@
-// SPDX-License-Identifier: BUSL-1.1
-// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
-// See LICENSE in the repository root for license terms.
-
-// apps/api/src/search.ts
-
-import { Hono }              from "hono"
-import type { Env, Variables } from "./types"
-import { authMiddleware }    from "./middleware"
-import {
-  encodeCursor,
-  mapSearchResultRow,
-  type SearchResponse,
-} from "./search-utils"
-
-export const searchRouter = new Hono<{ Bindings: Env; Variables: Variables }>()
-
-searchRouter.use("*", authMiddleware())
-
-// GET /api/search?q=...&schema_slug=...&status=...&limit=20&cursor=...
-searchRouter.get("/", async (c) => {
-  const queryText  = c.req.query("q")?.trim() ?? ""
-  const schemaSlug = c.req.query("schema_slug") ?? null
-  const status     = c.req.query("status") ?? null
-  const rawLimit   = Number.parseInt(c.req.query("limit") ?? "20", 10)
-  const limit      = Math.min(Math.max(rawLimit, 1), 50)
-  const cursor     = c.req.query("cursor") ?? null
-
-  if (queryText.length < 2) {
-    return c.json({ error: "Il parametro 'q' deve avere almeno 2 caratteri." }, 400)
-  }
-
-  const seeds = c.get('seedRegistry').all()
-  const searchRepository = c.get('searchRepository')
-
-  const queryOptions = {
-    queryText,
-    schemaSlug,
-    statusFilter: status,
-    limit,
-    cursor,
-  }
-  const countOptions = { queryText, schemaSlug, statusFilter: status }
-
-  const [rawRows, countResult] = await Promise.all([
-    searchRepository.search(queryOptions, seeds),
-    searchRepository.count(countOptions, seeds),
-  ])
-
-  const hasMore  = rawRows.length > limit
-  const pageRows = hasMore ? rawRows.slice(0, limit) : rawRows
-
-  const lastRow = pageRows.at(-1)
-  const nextCursor = hasMore && lastRow
-    ? encodeCursor(lastRow.rank, lastRow.entryId)
-    : null
-
-  if (pageRows.length === 0) {
-    return c.json({ items: [], nextCursor: null, total: countResult.total } satisfies SearchResponse)
-  }
-
-  const items = pageRows.map(mapSearchResultRow)
-
-  return c.json({ items, nextCursor, total: countResult.total } satisfies SearchResponse)
-})

package/src/shared/apply-policies.test.ts

@@ -1,81 +0,0 @@
-// SPDX-License-Identifier: BUSL-1.1
-// Copyright (c) 2024–2026 Flavio De Musso. All rights reserved.
-// See LICENSE in the repository root for license terms.
-
-import { describe, it, expect } from 'vitest'
-import { applyPrivacy, applyVisibility, PrivacyPolicyError } from './apply-policies'
-import type { Seed } from '@beechcms/core'
-
-function makeSeed(branches: any[]): Seed {
-  return { slug: 'test', displayNameAlias: 'title', branches } as unknown as Seed
-}
-
-// ─── applyPrivacy ─────────────────────────────────────────────────────────────
-
-describe('applyPrivacy', () => {
-  it('passes through fields with no privacy policy (default: public)', async () => {
-    const seed = makeSeed([{ id: 'br_01', alias: 'title', type: 'text' }])
-    const result = await applyPrivacy({ title: 'Hello' }, seed)
-    expect(result.title).toBe('Hello')
-  })
-
-  it('hashes the value when branch privacy is "hash"', async () => {
-    const seed = makeSeed([{ id: 'br_01', alias: 'email', type: 'text', policies: { privacy: 'hash' } }])
-    const result = await applyPrivacy({ email: 'user@test.com' }, seed)
-    // sha256 produces a 64-char hex string
-    expect(typeof result.email).toBe('string')
-    expect((result.email as string).length).toBe(64)
-    expect(result.email).not.toBe('user@test.com')
-  })
-
-  it('leaves null/undefined values unhashed even when privacy is "hash"', async () => {
-    const seed = makeSeed([{ id: 'br_01', alias: 'email', type: 'text', policies: { privacy: 'hash' } }])
-    const result = await applyPrivacy({ email: null }, seed)
-    expect(result.email).toBeNull()
-  })
-
-  it('throws PrivacyPolicyError for "encrypt" privacy (not yet implemented)', async () => {
-    const seed = makeSeed([{ id: 'br_01', alias: 'secret', type: 'text', policies: { privacy: 'encrypt' } }])
-    await expect(applyPrivacy({ secret: 'value' }, seed)).rejects.toBeInstanceOf(PrivacyPolicyError)
-  })
-
-  it('passes through fields not present in the seed branches unchanged', async () => {
-    const seed = makeSeed([{ id: 'br_01', alias: 'title', type: 'text' }])
-    const result = await applyPrivacy({ title: 'Hi', extraField: 'extra' }, seed)
-    expect(result.extraField).toBe('extra')
-  })
-})
-
-// ─── applyVisibility ──────────────────────────────────────────────────────────
-
-describe('applyVisibility', () => {
-  it('includes fields with default (visible) visibility', () => {
-    const seed = makeSeed([{ id: 'br_01', alias: 'title', type: 'text' }])
-    const result = applyVisibility({ title: 'Hello' }, seed)
-    expect(result.title).toBe('Hello')
-  })
-
-  it('omits fields with visibility "hidden"', () => {
-    const seed = makeSeed([{ id: 'br_01', alias: 'internal', type: 'text', policies: { visibility: 'hidden' } }])
-    const result = applyVisibility({ internal: 'secret' }, seed)
-    expect(result).not.toHaveProperty('internal')
-  })
-
-  it('masks non-empty string fields with visibility "masked"', () => {
-    const seed = makeSeed([{ id: 'br_01', alias: 'password', type: 'text', policies: { visibility: 'masked' } }])
-    const result = applyVisibility({ password: 'secret123' }, seed)
-    expect(result.password).toBe('••••••••')
-  })
-
-  it('returns null for empty string fields with visibility "masked"', () => {
-    const seed = makeSeed([{ id: 'br_01', alias: 'password', type: 'text', policies: { visibility: 'masked' } }])
-    const result = applyVisibility({ password: '' }, seed)
-    expect(result.password).toBeNull()
-  })
-
-  it('passes through fields not present in the seed branches', () => {
-    const seed = makeSeed([{ id: 'br_01', alias: 'title', type: 'text' }])
-    const result = applyVisibility({ title: 'Hi', extraField: 'pass' }, seed)
-    expect(result.extraField).toBe('pass')
-  })
-})