@chipmobilesdk/rn-local-db 0.3.0 → 0.5.0

package/lib/commonjs/query/sort.js

@@ -0,0 +1,61 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.ID_SORT_KEY = void 0;
+exports.compareRecords = compareRecords;
+exports.sortRecords = sortRecords;
+exports.sortValueOf = sortValueOf;
+exports.withStableTiebreaker = withStableTiebreaker;
+var _compare = require("./compare.js");
+/**
+ * Sort ordering.
+ *
+ * The record id is always appended as the final sort key (FR-031). Without a
+ * tiebreaker, records with equal sort values come back in whatever order the
+ * engine happens to produce, which makes keyset pagination lose or repeat
+ * rows — the exact failure SC-007 forbids.
+ */
+
+const ID_SORT_KEY = exports.ID_SORT_KEY = {
+  field: 'id',
+  direction: 'asc'
+};
+
+/** Append `id ASC` unless the caller already sorted by it. */
+function withStableTiebreaker(sort) {
+  const keys = sort ? [...sort] : [];
+  if (!keys.some(key => key.field === 'id')) {
+    keys.push(ID_SORT_KEY);
+  }
+  return keys;
+}
+
+/** Sort values come from the record id or from a declared field. */
+function sortValueOf(record, field) {
+  if (field === 'id') {
+    return record.id;
+  }
+  const lookup = (0, _compare.lookupField)(record.data, field);
+  if (!lookup.present) {
+    // Absent sorts alongside null, matching how SQLite treats a NULL
+    // column, so the two adapters agree without special-casing.
+    return null;
+  }
+  return (0, _compare.asFilterValue)(lookup.value) ?? null;
+}
+function compareRecords(a, b, sort) {
+  for (const key of sort) {
+    const direction = key.direction === 'desc' ? -1 : 1;
+    const result = (0, _compare.compareValues)(sortValueOf(a, key.field) ?? null, sortValueOf(b, key.field) ?? null);
+    if (result !== 0) {
+      return result * direction;
+    }
+  }
+  return 0;
+}
+function sortRecords(records, sort) {
+  return [...records].sort((a, b) => compareRecords(a, b, sort));
+}
+//# sourceMappingURL=sort.js.map

package/lib/commonjs/query/sort.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_compare","require","ID_SORT_KEY","exports","field","direction","withStableTiebreaker","sort","keys","some","key","push","sortValueOf","record","id","lookup","lookupField","data","present","asFilterValue","value","compareRecords","a","b","result","compareValues","sortRecords","records"],"sourceRoot":"../../../src","sources":["query/sort.ts"],"mappings":";;;;;;;;;;AAWA,IAAAA,QAAA,GAAAC,OAAA;AAXA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAMO,MAAMC,WAAoB,GAAAC,OAAA,CAAAD,WAAA,GAAG;EAAEE,KAAK,EAAE,IAAI;EAAEC,SAAS,EAAE;AAAM,CAAC;;AAErE;AACO,SAASC,oBAAoBA,CAACC,IAA2B,EAAa;EAC5E,MAAMC,IAAI,GAAGD,IAAI,GAAG,CAAC,GAAGA,IAAI,CAAC,GAAG,EAAE;EAClC,IAAI,CAACC,IAAI,CAACC,IAAI,CAACC,GAAG,IAAIA,GAAG,CAACN,KAAK,KAAK,IAAI,CAAC,EAAE;IAC1CI,IAAI,CAACG,IAAI,CAACT,WAAW,CAAC;EACvB;EACA,OAAOM,IAAI;AACZ;;AAEA;AACO,SAASI,WAAWA,CAACC,MAAoB,EAAET,KAAa,EAAoC;EAClG,IAAIA,KAAK,KAAK,IAAI,EAAE;IACnB,OAAOS,MAAM,CAACC,EAAE;EACjB;EACA,MAAMC,MAAM,GAAG,IAAAC,oBAAW,EAACH,MAAM,CAACI,IAAI,EAAEb,KAAK,CAAC;EAC9C,IAAI,CAACW,MAAM,CAACG,OAAO,EAAE;IACpB;IACA;IACA,OAAO,IAAI;EACZ;EACA,OAAO,IAAAC,sBAAa,EAACJ,MAAM,CAACK,KAAK,CAAC,IAAI,IAAI;AAC3C;AAEO,SAASC,cAAcA,CAACC,CAAe,EAAEC,CAAe,EAAEhB,IAAe,EAAU;EACzF,KAAK,MAAMG,GAAG,IAAIH,IAAI,EAAE;IACvB,MAAMF,SAAS,GAAGK,GAAG,CAACL,SAAS,KAAK,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC;IACnD,MAAMmB,MAAM,GAAG,IAAAC,sBAAa,EAC3Bb,WAAW,CAACU,CAAC,EAAEZ,GAAG,CAACN,KAAK,CAAC,IAAI,IAAI,EACjCQ,WAAW,CAACW,CAAC,EAAEb,GAAG,CAACN,KAAK,CAAC,IAAI,IAC9B,CAAC;IACD,IAAIoB,MAAM,KAAK,CAAC,EAAE;MACjB,OAAOA,MAAM,GAAGnB,SAAS;IAC1B;EACD;EACA,OAAO,CAAC;AACT;AAEO,SAASqB,WAAWA,CAAyBC,OAAY,EAAEpB,IAAe,EAAO;EACvF,OAAO,CAAC,GAAGoB,OAAO,CAAC,CAACpB,IAAI,CAAC,CAACe,CAAC,EAAEC,CAAC,KAAKF,cAAc,CAACC,CAAC,EAAEC,CAAC,EAAEhB,IAAI,CAAC,CAAC;AAC/D","ignoreList":[]}

package/lib/commonjs/query/validate.js

@@ -0,0 +1,180 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.validateFilter = validateFilter;
+exports.validatePageSize = validatePageSize;
+exports.validateQuery = validateQuery;
+exports.validateSort = validateSort;
+var _config = require("../contract/config.js");
+var _errors = require("../contract/errors.js");
+var _errors2 = require("../diagnostics/errors.js");
+var _redact = require("../diagnostics/redact.js");
+var _declare = require("../schema/declare.js");
+/**
+ * Query validation, run before any SQL is built.
+ *
+ * Two things fall out of validating first: FR-034 is satisfied, and no
+ * consumer-supplied string ever reaches SQL construction — field names are
+ * resolved through the schema to a known column, and values bind as
+ * parameters. Injection stops being a thing to remember.
+ */
+
+function queryInvalid(message, collection) {
+  // The field name is named; its *value* never is (FR-079).
+  (0, _errors2.raise)(_errors.DiagnosticCodes.QUERY_INVALID, {
+    message,
+    detail: {
+      collection
+    }
+  });
+}
+const ORDERED_OPERATORS = new Set(['lt', 'lte', 'gt', 'gte', 'between']);
+function typeMatches(type, value) {
+  if (value === null) {
+    return true;
+  }
+  switch (type) {
+    case 'string':
+      return typeof value === 'string';
+    case 'number':
+    case 'timestamp':
+      return typeof value === 'number';
+    case 'boolean':
+      return typeof value === 'boolean';
+    default:
+      return false;
+  }
+}
+function validateField(collection, field) {
+  const declared = (0, _declare.fieldOf)(collection, field);
+  if (!declared) {
+    // Returning everything or nothing here would be worse than failing:
+    // a typo would silently change what the user sees.
+    queryInvalid(`filter references undeclared field ${(0, _redact.sanitizeIdentifier)(field)}`, collection.name);
+  }
+  return declared;
+}
+function validateFilter(collection, node) {
+  switch (node.op) {
+    case 'and':
+    case 'or':
+      {
+        if (!Array.isArray(node.nodes) || node.nodes.length === 0) {
+          queryInvalid(`${node.op} requires at least one child`, collection.name);
+        }
+        for (const child of node.nodes) {
+          validateFilter(collection, child);
+        }
+        return;
+      }
+    case 'not':
+      {
+        if (!node.node) {
+          queryInvalid('not requires a child', collection.name);
+        }
+        validateFilter(collection, node.node);
+        return;
+      }
+    case 'isNull':
+    case 'isNotNull':
+      {
+        validateField(collection, node.field);
+        return;
+      }
+    case 'exists':
+      {
+        validateField(collection, node.field);
+        if (typeof node.value !== 'boolean') {
+          queryInvalid('exists requires a boolean', collection.name);
+        }
+        return;
+      }
+    case 'in':
+    case 'nin':
+      {
+        const declared = validateField(collection, node.field);
+        if (!Array.isArray(node.value) || node.value.length === 0) {
+          queryInvalid(`${node.op} requires a non-empty array`, collection.name);
+        }
+        for (const value of node.value) {
+          if (!typeMatches(declared.type, value)) {
+            queryInvalid(`${node.op} value does not match field type`, collection.name);
+          }
+        }
+        return;
+      }
+    case 'between':
+      {
+        const declared = validateField(collection, node.field);
+        if (!Array.isArray(node.value) || node.value.length !== 2) {
+          queryInvalid('between requires exactly two bounds', collection.name);
+        }
+        for (const value of node.value) {
+          if (!typeMatches(declared.type, value)) {
+            queryInvalid('between bound does not match field type', collection.name);
+          }
+        }
+        return;
+      }
+    case 'eq':
+    case 'ne':
+    case 'lt':
+    case 'lte':
+    case 'gt':
+    case 'gte':
+      {
+        const declared = validateField(collection, node.field);
+        if (declared.type === 'boolean' && ORDERED_OPERATORS.has(node.op)) {
+          queryInvalid('ordered comparison is not defined for a boolean', collection.name);
+        }
+        if (!typeMatches(declared.type, node.value)) {
+          queryInvalid('filter value does not match field type', collection.name);
+        }
+        return;
+      }
+    default:
+      {
+        queryInvalid(`unsupported operator ${(0, _redact.sanitizeIdentifier)(String(node.op))}`, collection.name);
+      }
+  }
+}
+function validateSort(collection, sort) {
+  const seen = new Set();
+  for (const key of sort) {
+    validateField(collection, key.field);
+    if (seen.has(key.field)) {
+      queryInvalid(`duplicate sort field ${(0, _redact.sanitizeIdentifier)(key.field)}`, collection.name);
+    }
+    seen.add(key.field);
+    if (key.direction && key.direction !== 'asc' && key.direction !== 'desc') {
+      queryInvalid('sort direction must be asc or desc', collection.name);
+    }
+  }
+}
+function validatePageSize(size) {
+  if (!Number.isInteger(size) || size < 1 || size > _config.Budgets.MAX_PAGE_SIZE) {
+    (0, _errors2.raise)(_errors.DiagnosticCodes.PAGE_SIZE_INVALID, {
+      message: 'page size out of range',
+      detail: {
+        limit: _config.Budgets.MAX_PAGE_SIZE
+      }
+    });
+  }
+}
+function validateQuery(collection, query) {
+  if (!query) {
+    return;
+  }
+  if (query.filter) {
+    validateFilter(collection, query.filter);
+  }
+  if (query.sort) {
+    validateSort(collection, query.sort);
+  }
+  if (query.page) {
+    validatePageSize(query.page.size);
+  }
+}
+//# sourceMappingURL=validate.js.map

package/lib/commonjs/query/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_config","require","_errors","_errors2","_redact","_declare","queryInvalid","message","collection","raise","DiagnosticCodes","QUERY_INVALID","detail","ORDERED_OPERATORS","Set","typeMatches","type","value","validateField","field","declared","fieldOf","sanitizeIdentifier","name","validateFilter","node","op","Array","isArray","nodes","length","child","has","String","validateSort","sort","seen","key","add","direction","validatePageSize","size","Number","isInteger","Budgets","MAX_PAGE_SIZE","PAGE_SIZE_INVALID","limit","validateQuery","query","filter","page"],"sourceRoot":"../../../src","sources":["query/validate.ts"],"mappings":";;;;;;;;;AASA,IAAAA,OAAA,GAAAC,OAAA;AACA,IAAAC,OAAA,GAAAD,OAAA;AAGA,IAAAE,QAAA,GAAAF,OAAA;AACA,IAAAG,OAAA,GAAAH,OAAA;AACA,IAAAI,QAAA,GAAAJ,OAAA;AAfA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAUA,SAASK,YAAYA,CAACC,OAAe,EAAEC,UAAkB,EAAS;EACjE;EACA,IAAAC,cAAK,EAACC,uBAAe,CAACC,aAAa,EAAE;IAAEJ,OAAO;IAAEK,MAAM,EAAE;MAAEJ;IAAW;EAAE,CAAC,CAAC;AAC1E;AAEA,MAAMK,iBAAiB,GAAG,IAAIC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;AAExE,SAASC,WAAWA,CAACC,IAAe,EAAEC,KAAkB,EAAW;EAClE,IAAIA,KAAK,KAAK,IAAI,EAAE;IACnB,OAAO,IAAI;EACZ;EACA,QAAQD,IAAI;IACX,KAAK,QAAQ;MACZ,OAAO,OAAOC,KAAK,KAAK,QAAQ;IACjC,KAAK,QAAQ;IACb,KAAK,WAAW;MACf,OAAO,OAAOA,KAAK,KAAK,QAAQ;IACjC,KAAK,SAAS;MACb,OAAO,OAAOA,KAAK,KAAK,SAAS;IAClC;MACC,OAAO,KAAK;EACd;AACD;AAEA,SAASC,aAAaA,CAACV,UAA4B,EAAEW,KAAa,EAA8B;EAC/F,MAAMC,QAAQ,GAAG,IAAAC,gBAAO,EAACb,UAAU,EAAEW,KAAK,CAAC;EAC3C,IAAI,CAACC,QAAQ,EAAE;IACd;IACA;IACAd,YAAY,CACX,sCAAsC,IAAAgB,0BAAkB,EAACH,KAAK,CAAC,EAAE,EACjEX,UAAU,CAACe,IACZ,CAAC;EACF;EACA,OAAOH,QAAQ;AAChB;AAEO,SAASI,cAAcA,CAAChB,UAA4B,EAAEiB,IAAgB,EAAQ;EACpF,QAAQA,IAAI,CAACC,EAAE;IACd,KAAK,KAAK;IACV,KAAK,IAAI;MAAE;QACV,IAAI,CAACC,KAAK,CAACC,OAAO,CAACH,IAAI,CAACI,KAAK,CAAC,IAAIJ,IAAI,CAACI,KAAK,CAACC,MAAM,KAAK,CAAC,EAAE;UAC1DxB,YAAY,CAAC,GAAGmB,IAAI,CAACC,EAAE,8BAA8B,EAAElB,UAAU,CAACe,IAAI,CAAC;QACxE;QACA,KAAK,MAAMQ,KAAK,IAAIN,IAAI,CAACI,KAAK,EAAE;UAC/BL,cAAc,CAAChB,UAAU,EAAEuB,KAAK,CAAC;QAClC;QACA;MACD;IACA,KAAK,KAAK;MAAE;QACX,IAAI,CAACN,IAAI,CAACA,IAAI,EAAE;UACfnB,YAAY,CAAC,sBAAsB,EAAEE,UAAU,CAACe,IAAI,CAAC;QACtD;QACAC,cAAc,CAAChB,UAAU,EAAEiB,IAAI,CAACA,IAAI,CAAC;QACrC;MACD;IACA,KAAK,QAAQ;IACb,KAAK,WAAW;MAAE;QACjBP,aAAa,CAACV,UAAU,EAAEiB,IAAI,CAACN,KAAK,CAAC;QACrC;MACD;IACA,KAAK,QAAQ;MAAE;QACdD,aAAa,CAACV,UAAU,EAAEiB,IAAI,CAACN,KAAK,CAAC;QACrC,IAAI,OAAOM,IAAI,CAACR,KAAK,KAAK,SAAS,EAAE;UACpCX,YAAY,CAAC,2BAA2B,EAAEE,UAAU,CAACe,IAAI,CAAC;QAC3D;QACA;MACD;IACA,KAAK,IAAI;IACT,KAAK,KAAK;MAAE;QACX,MAAMH,QAAQ,GAAGF,aAAa,CAACV,UAAU,EAAEiB,IAAI,CAACN,KAAK,CAAE;QACvD,IAAI,CAACQ,KAAK,CAACC,OAAO,CAACH,IAAI,CAACR,KAAK,CAAC,IAAIQ,IAAI,CAACR,KAAK,CAACa,MAAM,KAAK,CAAC,EAAE;UAC1DxB,YAAY,CAAC,GAAGmB,IAAI,CAACC,EAAE,6BAA6B,EAAElB,UAAU,CAACe,IAAI,CAAC;QACvE;QACA,KAAK,MAAMN,KAAK,IAAIQ,IAAI,CAACR,KAAK,EAAE;UAC/B,IAAI,CAACF,WAAW,CAACK,QAAQ,CAACJ,IAAI,EAAEC,KAAK,CAAC,EAAE;YACvCX,YAAY,CAAC,GAAGmB,IAAI,CAACC,EAAE,kCAAkC,EAAElB,UAAU,CAACe,IAAI,CAAC;UAC5E;QACD;QACA;MACD;IACA,KAAK,SAAS;MAAE;QACf,MAAMH,QAAQ,GAAGF,aAAa,CAACV,UAAU,EAAEiB,IAAI,CAACN,KAAK,CAAE;QACvD,IAAI,CAACQ,KAAK,CAACC,OAAO,CAACH,IAAI,CAACR,KAAK,CAAC,IAAIQ,IAAI,CAACR,KAAK,CAACa,MAAM,KAAK,CAAC,EAAE;UAC1DxB,YAAY,CAAC,qCAAqC,EAAEE,UAAU,CAACe,IAAI,CAAC;QACrE;QACA,KAAK,MAAMN,KAAK,IAAIQ,IAAI,CAACR,KAAK,EAAE;UAC/B,IAAI,CAACF,WAAW,CAACK,QAAQ,CAACJ,IAAI,EAAEC,KAAK,CAAC,EAAE;YACvCX,YAAY,CAAC,yCAAyC,EAAEE,UAAU,CAACe,IAAI,CAAC;UACzE;QACD;QACA;MACD;IACA,KAAK,IAAI;IACT,KAAK,IAAI;IACT,KAAK,IAAI;IACT,KAAK,KAAK;IACV,KAAK,IAAI;IACT,KAAK,KAAK;MAAE;QACX,MAAMH,QAAQ,GAAGF,aAAa,CAACV,UAAU,EAAEiB,IAAI,CAACN,KAAK,CAAE;QACvD,IAAIC,QAAQ,CAACJ,IAAI,KAAK,SAAS,IAAIH,iBAAiB,CAACmB,GAAG,CAACP,IAAI,CAACC,EAAE,CAAC,EAAE;UAClEpB,YAAY,CAAC,iDAAiD,EAAEE,UAAU,CAACe,IAAI,CAAC;QACjF;QACA,IAAI,CAACR,WAAW,CAACK,QAAQ,CAACJ,IAAI,EAAES,IAAI,CAACR,KAAK,CAAC,EAAE;UAC5CX,YAAY,CAAC,wCAAwC,EAAEE,UAAU,CAACe,IAAI,CAAC;QACxE;QACA;MACD;IACA;MAAS;QACRjB,YAAY,CACX,wBAAwB,IAAAgB,0BAAkB,EAACW,MAAM,CAAER,IAAI,CAAoBC,EAAE,CAAC,CAAC,EAAE,EACjFlB,UAAU,CAACe,IACZ,CAAC;MACF;EACD;AACD;AAEO,SAASW,YAAYA,CAAC1B,UAA4B,EAAE2B,IAAe,EAAQ;EACjF,MAAMC,IAAI,GAAG,IAAItB,GAAG,CAAS,CAAC;EAC9B,KAAK,MAAMuB,GAAG,IAAIF,IAAI,EAAE;IACvBjB,aAAa,CAACV,UAAU,EAAE6B,GAAG,CAAClB,KAAK,CAAC;IACpC,IAAIiB,IAAI,CAACJ,GAAG,CAACK,GAAG,CAAClB,KAAK,CAAC,EAAE;MACxBb,YAAY,CAAC,wBAAwB,IAAAgB,0BAAkB,EAACe,GAAG,CAAClB,KAAK,CAAC,EAAE,EAAEX,UAAU,CAACe,IAAI,CAAC;IACvF;IACAa,IAAI,CAACE,GAAG,CAACD,GAAG,CAAClB,KAAK,CAAC;IACnB,IAAIkB,GAAG,CAACE,SAAS,IAAIF,GAAG,CAACE,SAAS,KAAK,KAAK,IAAIF,GAAG,CAACE,SAAS,KAAK,MAAM,EAAE;MACzEjC,YAAY,CAAC,oCAAoC,EAAEE,UAAU,CAACe,IAAI,CAAC;IACpE;EACD;AACD;AAEO,SAASiB,gBAAgBA,CAACC,IAAY,EAAQ;EACpD,IAAI,CAACC,MAAM,CAACC,SAAS,CAACF,IAAI,CAAC,IAAIA,IAAI,GAAG,CAAC,IAAIA,IAAI,GAAGG,eAAO,CAACC,aAAa,EAAE;IACxE,IAAApC,cAAK,EAACC,uBAAe,CAACoC,iBAAiB,EAAE;MACxCvC,OAAO,EAAE,wBAAwB;MACjCK,MAAM,EAAE;QAAEmC,KAAK,EAAEH,eAAO,CAACC;MAAc;IACxC,CAAC,CAAC;EACH;AACD;AAEO,SAASG,aAAaA,CAACxC,UAA4B,EAAEyC,KAAwB,EAAQ;EAC3F,IAAI,CAACA,KAAK,EAAE;IACX;EACD;EACA,IAAIA,KAAK,CAACC,MAAM,EAAE;IACjB1B,cAAc,CAAChB,UAAU,EAAEyC,KAAK,CAACC,MAAM,CAAC;EACzC;EACA,IAAID,KAAK,CAACd,IAAI,EAAE;IACfD,YAAY,CAAC1B,UAAU,EAAEyC,KAAK,CAACd,IAAI,CAAC;EACrC;EACA,IAAIc,KAAK,CAACE,IAAI,EAAE;IACfX,gBAAgB,CAACS,KAAK,CAACE,IAAI,CAACV,IAAI,CAAC;EAClC;AACD","ignoreList":[]}

package/lib/commonjs/schema/declare.js

@@ -0,0 +1,47 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.collectionTable = collectionTable;
+exports.fieldOf = fieldOf;
+exports.hasSoftDelete = hasSoftDelete;
+exports.hasTimestamps = hasTimestamps;
+exports.indexSchemas = indexSchemas;
+exports.isQueryable = isQueryable;
+exports.projectedColumn = projectedColumn;
+/**
+ * Schema lookup helpers shared by both adapters.
+ *
+ * Declaring a field makes it queryable — it does not restrict what a record
+ * may contain. `isQueryable` is the single answer to "may a filter or sort
+ * reference this?", so both adapters reject the same field names (FR-034).
+ */
+
+function indexSchemas(collections) {
+  return new Map(collections.map(collection => [collection.name, collection]));
+}
+function fieldOf(collection, name) {
+  return collection.fields?.find(field => field.name === name);
+}
+function isQueryable(collection, name) {
+  return fieldOf(collection, name) !== undefined;
+}
+function hasSoftDelete(collection) {
+  return collection.softDelete === true;
+}
+function hasTimestamps(collection) {
+  return collection.timestamps === true;
+}
+
+/** Column name for a projected queryable field. Prefixed to avoid colliding
+ * with the reserved columns (`id`, `payload`, `created_at`, ...). */
+function projectedColumn(field) {
+  return `f_${field}`;
+}
+
+/** Table name for a collection, prefixed for the same reason. */
+function collectionTable(name) {
+  return `c_${name}`;
+}
+//# sourceMappingURL=declare.js.map

package/lib/commonjs/schema/declare.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["indexSchemas","collections","Map","map","collection","name","fieldOf","fields","find","field","isQueryable","undefined","hasSoftDelete","softDelete","hasTimestamps","timestamps","projectedColumn","collectionTable"],"sourceRoot":"../../../src","sources":["schema/declare.ts"],"mappings":";;;;;;;;;;;;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;;AAMO,SAASA,YAAYA,CAACC,WAA+B,EAAe;EAC1E,OAAO,IAAIC,GAAG,CAACD,WAAW,CAACE,GAAG,CAACC,UAAU,IAAI,CAACA,UAAU,CAACC,IAAI,EAAED,UAAU,CAAC,CAAC,CAAC;AAC7E;AAEO,SAASE,OAAOA,CAACF,UAA4B,EAAEC,IAAY,EAAgC;EACjG,OAAOD,UAAU,CAACG,MAAM,EAAEC,IAAI,CAACC,KAAK,IAAIA,KAAK,CAACJ,IAAI,KAAKA,IAAI,CAAC;AAC7D;AAEO,SAASK,WAAWA,CAACN,UAA4B,EAAEC,IAAY,EAAW;EAChF,OAAOC,OAAO,CAACF,UAAU,EAAEC,IAAI,CAAC,KAAKM,SAAS;AAC/C;AAEO,SAASC,aAAaA,CAACR,UAA4B,EAAW;EACpE,OAAOA,UAAU,CAACS,UAAU,KAAK,IAAI;AACtC;AAEO,SAASC,aAAaA,CAACV,UAA4B,EAAW;EACpE,OAAOA,UAAU,CAACW,UAAU,KAAK,IAAI;AACtC;;AAEA;AACA;AACO,SAASC,eAAeA,CAACP,KAAa,EAAU;EACtD,OAAO,KAAKA,KAAK,EAAE;AACpB;;AAEA;AACO,SAASQ,eAAeA,CAACZ,IAAY,EAAU;EACrD,OAAO,KAAKA,IAAI,EAAE;AACnB","ignoreList":[]}

package/lib/commonjs/schema/validate-config.js

@@ -0,0 +1,115 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.validateConfig = validateConfig;
+var _config = require("../contract/config.js");
+var _errors = require("../contract/errors.js");
+var _errors2 = require("../diagnostics/errors.js");
+var _validateChain = require("../migration/validate-chain.js");
+var _validate = require("../scope/validate.js");
+/**
+ * Configuration validation.
+ *
+ * Runs to completion before any write and before any migration executes
+ * (FR-006, FR-053). Order matters: scope first, then collections, then the
+ * migration chain — so a consumer fixes the outermost problem first rather
+ * than chasing a downstream symptom.
+ */
+
+const IDENTIFIER = /^[A-Za-z][A-Za-z0-9_]{0,62}$/;
+function configInvalid(message, detail) {
+  (0, _errors2.raise)(_errors.DiagnosticCodes.CONFIG_INVALID, {
+    message,
+    detail
+  });
+}
+function validateCollection(collection, seen) {
+  if (!IDENTIFIER.test(collection.name)) {
+    configInvalid('collection name is not a valid identifier', {
+      collection: collection.name
+    });
+  }
+  if (seen.has(collection.name)) {
+    configInvalid('duplicate collection name', {
+      collection: collection.name
+    });
+  }
+  seen.add(collection.name);
+  const fieldNames = new Set();
+  for (const field of collection.fields ?? []) {
+    if (!IDENTIFIER.test(field.name)) {
+      configInvalid('field name is not a valid identifier', {
+        collection: collection.name
+      });
+    }
+    if (fieldNames.has(field.name)) {
+      configInvalid('duplicate field name', {
+        collection: collection.name
+      });
+    }
+    fieldNames.add(field.name);
+  }
+  const indexNames = new Set();
+  for (const index of collection.indexes ?? []) {
+    if (!IDENTIFIER.test(index.name)) {
+      configInvalid('index name is not a valid identifier', {
+        collection: collection.name
+      });
+    }
+    if (indexNames.has(index.name)) {
+      configInvalid('duplicate index name', {
+        collection: collection.name
+      });
+    }
+    indexNames.add(index.name);
+    if (!Array.isArray(index.fields) || index.fields.length === 0) {
+      configInvalid('index declares no fields', {
+        collection: collection.name
+      });
+    }
+    for (const field of index.fields) {
+      if (!fieldNames.has(field)) {
+        // The whole point of declaring fields is that the package can
+        // tell a typo from a deliberate choice. Silently creating an
+        // index over a column that will never exist would turn a config
+        // bug into a mysterious full scan at runtime.
+        configInvalid('index references an undeclared field', {
+          collection: collection.name
+        });
+      }
+    }
+  }
+}
+function validateConfig(config) {
+  if (!config || typeof config !== 'object') {
+    configInvalid('database config is required');
+  }
+  if (typeof config.name !== 'string' || !IDENTIFIER.test(config.name)) {
+    configInvalid('database name is not a valid identifier');
+  }
+  (0, _validate.validateDescriptor)(config.scope);
+  if (!Array.isArray(config.collections) || config.collections.length === 0) {
+    configInvalid('at least one collection must be declared');
+  }
+  if (config.collections.length > _config.Budgets.MAX_COLLECTIONS_PER_DATABASE) {
+    configInvalid('collection count exceeds the budget', {
+      count: config.collections.length,
+      limit: _config.Budgets.MAX_COLLECTIONS_PER_DATABASE
+    });
+  }
+  const seen = new Set();
+  for (const collection of config.collections) {
+    validateCollection(collection, seen);
+  }
+
+  // The one definition of a valid chain, shared with the executor (LDB-12).
+  (0, _validateChain.validateMigrationChain)(config);
+  if (config.encryption && config.encryption.enabled) {
+    if (typeof config.encryption.keyProvider?.getKey !== 'function') {
+      configInvalid('encryption is enabled but no key provider was supplied');
+    }
+  }
+}
+//# sourceMappingURL=validate-config.js.map

package/lib/commonjs/schema/validate-config.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_config","require","_errors","_errors2","_validateChain","_validate","IDENTIFIER","configInvalid","message","detail","raise","DiagnosticCodes","CONFIG_INVALID","validateCollection","collection","seen","test","name","has","add","fieldNames","Set","field","fields","indexNames","index","indexes","Array","isArray","length","validateConfig","config","validateDescriptor","scope","collections","Budgets","MAX_COLLECTIONS_PER_DATABASE","count","limit","validateMigrationChain","encryption","enabled","keyProvider","getKey"],"sourceRoot":"../../../src","sources":["schema/validate-config.ts"],"mappings":";;;;;;AASA,IAAAA,OAAA,GAAAC,OAAA;AACA,IAAAC,OAAA,GAAAD,OAAA;AAEA,IAAAE,QAAA,GAAAF,OAAA;AACA,IAAAG,cAAA,GAAAH,OAAA;AACA,IAAAI,SAAA,GAAAJ,OAAA;AAdA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AASA,MAAMK,UAAU,GAAG,8BAA8B;AAEjD,SAASC,aAAaA,CAACC,OAAe,EAAEC,MAAgC,EAAS;EAChF,IAAAC,cAAK,EAACC,uBAAe,CAACC,cAAc,EAAE;IAAEJ,OAAO;IAAEC;EAAO,CAAC,CAAC;AAC3D;AAEA,SAASI,kBAAkBA,CAACC,UAA4B,EAAEC,IAAiB,EAAQ;EAClF,IAAI,CAACT,UAAU,CAACU,IAAI,CAACF,UAAU,CAACG,IAAI,CAAC,EAAE;IACtCV,aAAa,CAAC,2CAA2C,EAAE;MAC1DO,UAAU,EAAEA,UAAU,CAACG;IACxB,CAAC,CAAC;EACH;EACA,IAAIF,IAAI,CAACG,GAAG,CAACJ,UAAU,CAACG,IAAI,CAAC,EAAE;IAC9BV,aAAa,CAAC,2BAA2B,EAAE;MAAEO,UAAU,EAAEA,UAAU,CAACG;IAAK,CAAC,CAAC;EAC5E;EACAF,IAAI,CAACI,GAAG,CAACL,UAAU,CAACG,IAAI,CAAC;EAEzB,MAAMG,UAAU,GAAG,IAAIC,GAAG,CAAS,CAAC;EACpC,KAAK,MAAMC,KAAK,IAAIR,UAAU,CAACS,MAAM,IAAI,EAAE,EAAE;IAC5C,IAAI,CAACjB,UAAU,CAACU,IAAI,CAACM,KAAK,CAACL,IAAI,CAAC,EAAE;MACjCV,aAAa,CAAC,sCAAsC,EAAE;QACrDO,UAAU,EAAEA,UAAU,CAACG;MACxB,CAAC,CAAC;IACH;IACA,IAAIG,UAAU,CAACF,GAAG,CAACI,KAAK,CAACL,IAAI,CAAC,EAAE;MAC/BV,aAAa,CAAC,sBAAsB,EAAE;QAAEO,UAAU,EAAEA,UAAU,CAACG;MAAK,CAAC,CAAC;IACvE;IACAG,UAAU,CAACD,GAAG,CAACG,KAAK,CAACL,IAAI,CAAC;EAC3B;EAEA,MAAMO,UAAU,GAAG,IAAIH,GAAG,CAAS,CAAC;EACpC,KAAK,MAAMI,KAAK,IAAIX,UAAU,CAACY,OAAO,IAAI,EAAE,EAAE;IAC7C,IAAI,CAACpB,UAAU,CAACU,IAAI,CAACS,KAAK,CAACR,IAAI,CAAC,EAAE;MACjCV,aAAa,CAAC,sCAAsC,EAAE;QACrDO,UAAU,EAAEA,UAAU,CAACG;MACxB,CAAC,CAAC;IACH;IACA,IAAIO,UAAU,CAACN,GAAG,CAACO,KAAK,CAACR,IAAI,CAAC,EAAE;MAC/BV,aAAa,CAAC,sBAAsB,EAAE;QAAEO,UAAU,EAAEA,UAAU,CAACG;MAAK,CAAC,CAAC;IACvE;IACAO,UAAU,CAACL,GAAG,CAACM,KAAK,CAACR,IAAI,CAAC;IAC1B,IAAI,CAACU,KAAK,CAACC,OAAO,CAACH,KAAK,CAACF,MAAM,CAAC,IAAIE,KAAK,CAACF,MAAM,CAACM,MAAM,KAAK,CAAC,EAAE;MAC9DtB,aAAa,CAAC,0BAA0B,EAAE;QAAEO,UAAU,EAAEA,UAAU,CAACG;MAAK,CAAC,CAAC;IAC3E;IACA,KAAK,MAAMK,KAAK,IAAIG,KAAK,CAACF,MAAM,EAAE;MACjC,IAAI,CAACH,UAAU,CAACF,GAAG,CAACI,KAAK,CAAC,EAAE;QAC3B;QACA;QACA;QACA;QACAf,aAAa,CAAC,sCAAsC,EAAE;UACrDO,UAAU,EAAEA,UAAU,CAACG;QACxB,CAAC,CAAC;MACH;IACD;EACD;AACD;AAEO,SAASa,cAAcA,CAACC,MAAsB,EAAQ;EAC5D,IAAI,CAACA,MAAM,IAAI,OAAOA,MAAM,KAAK,QAAQ,EAAE;IAC1CxB,aAAa,CAAC,6BAA6B,CAAC;EAC7C;EACA,IAAI,OAAOwB,MAAM,CAACd,IAAI,KAAK,QAAQ,IAAI,CAACX,UAAU,CAACU,IAAI,CAACe,MAAM,CAACd,IAAI,CAAC,EAAE;IACrEV,aAAa,CAAC,yCAAyC,CAAC;EACzD;EAEA,IAAAyB,4BAAkB,EAACD,MAAM,CAACE,KAAK,CAAC;EAEhC,IAAI,CAACN,KAAK,CAACC,OAAO,CAACG,MAAM,CAACG,WAAW,CAAC,IAAIH,MAAM,CAACG,WAAW,CAACL,MAAM,KAAK,CAAC,EAAE;IAC1EtB,aAAa,CAAC,0CAA0C,CAAC;EAC1D;EACA,IAAIwB,MAAM,CAACG,WAAW,CAACL,MAAM,GAAGM,eAAO,CAACC,4BAA4B,EAAE;IACrE7B,aAAa,CAAC,qCAAqC,EAAE;MACpD8B,KAAK,EAAEN,MAAM,CAACG,WAAW,CAACL,MAAM;MAChCS,KAAK,EAAEH,eAAO,CAACC;IAChB,CAAC,CAAC;EACH;EAEA,MAAMrB,IAAI,GAAG,IAAIM,GAAG,CAAS,CAAC;EAC9B,KAAK,MAAMP,UAAU,IAAIiB,MAAM,CAACG,WAAW,EAAE;IAC5CrB,kBAAkB,CAACC,UAAU,EAAEC,IAAI,CAAC;EACrC;;EAEA;EACA,IAAAwB,qCAAsB,EAACR,MAAM,CAAC;EAE9B,IAAIA,MAAM,CAACS,UAAU,IAAIT,MAAM,CAACS,UAAU,CAACC,OAAO,EAAE;IACnD,IAAI,OAAOV,MAAM,CAACS,UAAU,CAACE,WAAW,EAAEC,MAAM,KAAK,UAAU,EAAE;MAChEpC,aAAa,CAAC,wDAAwD,CAAC;IACxE;EACD;AACD","ignoreList":[]}

package/lib/commonjs/scope/hash.js

@@ -0,0 +1,107 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.sha256Hex = sha256Hex;
+exports.utf8ByteLength = utf8ByteLength;
+/**
+ * Scope key derivation.
+ *
+ * The directory a scope lives in is named by the SHA-256 digest of its
+ * canonical descriptor, never by the components themselves. FR-014 requires
+ * scope components be treated as sensitive, and a directory named after an
+ * email address puts that address in plaintext on disk — visible even when
+ * the database itself is encrypted, and carried into any crash report that
+ * includes a file path.
+ *
+ * Hashing also removes filesystem charset and length limits from the problem,
+ * which is what lets validation reject rather than sanitize (research.md R2).
+ *
+ * Implemented in pure TypeScript rather than over a native crypto peer so the
+ * scope layer stays importable from anywhere in the package, including the
+ * in-memory adapter running under Jest.
+ *
+ * Verified against Node's own SHA-256 in scope-resolution.test.ts — a wrong
+ * digest would silently merge or split scopes, so it is checked against a
+ * reference implementation rather than against a snapshot of this one.
+ */
+
+/* eslint-disable no-bitwise -- SHA-256 is defined in terms of bitwise operations. */
+
+const K = new Uint32Array([0x428a2f98, 0x71374491, 0xb5c0fbcf, 0xe9b5dba5, 0x3956c25b, 0x59f111f1, 0x923f82a4, 0xab1c5ed5, 0xd807aa98, 0x12835b01, 0x243185be, 0x550c7dc3, 0x72be5d74, 0x80deb1fe, 0x9bdc06a7, 0xc19bf174, 0xe49b69c1, 0xefbe4786, 0x0fc19dc6, 0x240ca1cc, 0x2de92c6f, 0x4a7484aa, 0x5cb0a9dc, 0x76f988da, 0x983e5152, 0xa831c66d, 0xb00327c8, 0xbf597fc7, 0xc6e00bf3, 0xd5a79147, 0x06ca6351, 0x14292967, 0x27b70a85, 0x2e1b2138, 0x4d2c6dfc, 0x53380d13, 0x650a7354, 0x766a0abb, 0x81c2c92e, 0x92722c85, 0xa2bfe8a1, 0xa81a664b, 0xc24b8b70, 0xc76c51a3, 0xd192e819, 0xd6990624, 0xf40e3585, 0x106aa070, 0x19a4c116, 0x1e376c08, 0x2748774c, 0x34b0bcb5, 0x391c0cb3, 0x4ed8aa4a, 0x5b9cca4f, 0x682e6ff3, 0x748f82ee, 0x78a5636f, 0x84c87814, 0x8cc70208, 0x90befffa, 0xa4506ceb, 0xbef9a3f7, 0xc67178f2]);
+function rotr(value, bits) {
+  return value >>> bits | value << 32 - bits;
+}
+function utf8Bytes(input) {
+  const out = [];
+  for (let i = 0; i < input.length; i += 1) {
+    let codePoint = input.codePointAt(i);
+    if (codePoint > 0xffff) {
+      i += 1;
+    }
+    if (codePoint < 0x80) {
+      out.push(codePoint);
+    } else if (codePoint < 0x800) {
+      out.push(0xc0 | codePoint >> 6, 0x80 | codePoint & 0x3f);
+    } else if (codePoint < 0x10000) {
+      out.push(0xe0 | codePoint >> 12, 0x80 | codePoint >> 6 & 0x3f, 0x80 | codePoint & 0x3f);
+    } else {
+      out.push(0xf0 | codePoint >> 18, 0x80 | codePoint >> 12 & 0x3f, 0x80 | codePoint >> 6 & 0x3f, 0x80 | codePoint & 0x3f);
+    }
+  }
+  return Uint8Array.from(out);
+}
+function utf8ByteLength(input) {
+  return utf8Bytes(input).length;
+}
+function sha256Hex(input) {
+  const bytes = utf8Bytes(input);
+  const bitLength = bytes.length * 8;
+  const paddedLength = (bytes.length + 9 >> 6) + 1 << 6;
+  const padded = new Uint8Array(paddedLength);
+  padded.set(bytes);
+  padded[bytes.length] = 0x80;
+  const view = new DataView(padded.buffer);
+  view.setUint32(paddedLength - 8, Math.floor(bitLength / 0x100000000), false);
+  view.setUint32(paddedLength - 4, bitLength >>> 0, false);
+  const h = new Uint32Array([0x6a09e667, 0xbb67ae85, 0x3c6ef372, 0xa54ff53a, 0x510e527f, 0x9b05688c, 0x1f83d9ab, 0x5be0cd19]);
+  const w = new Uint32Array(64);
+  for (let offset = 0; offset < paddedLength; offset += 64) {
+    for (let i = 0; i < 16; i += 1) {
+      w[i] = view.getUint32(offset + i * 4, false);
+    }
+    for (let i = 16; i < 64; i += 1) {
+      const s0 = rotr(w[i - 15], 7) ^ rotr(w[i - 15], 18) ^ w[i - 15] >>> 3;
+      const s1 = rotr(w[i - 2], 17) ^ rotr(w[i - 2], 19) ^ w[i - 2] >>> 10;
+      w[i] = w[i - 16] + s0 + w[i - 7] + s1 >>> 0;
+    }
+    let [a, b, c, d, e, f, g, hh] = [h[0], h[1], h[2], h[3], h[4], h[5], h[6], h[7]];
+    for (let i = 0; i < 64; i += 1) {
+      const S1 = rotr(e, 6) ^ rotr(e, 11) ^ rotr(e, 25);
+      const ch = e & f ^ ~e & g;
+      const temp1 = hh + S1 + ch + K[i] + w[i] >>> 0;
+      const S0 = rotr(a, 2) ^ rotr(a, 13) ^ rotr(a, 22);
+      const maj = a & b ^ a & c ^ b & c;
+      const temp2 = S0 + maj >>> 0;
+      hh = g;
+      g = f;
+      f = e;
+      e = d + temp1 >>> 0;
+      d = c;
+      c = b;
+      b = a;
+      a = temp1 + temp2 >>> 0;
+    }
+    h[0] = h[0] + a >>> 0;
+    h[1] = h[1] + b >>> 0;
+    h[2] = h[2] + c >>> 0;
+    h[3] = h[3] + d >>> 0;
+    h[4] = h[4] + e >>> 0;
+    h[5] = h[5] + f >>> 0;
+    h[6] = h[6] + g >>> 0;
+    h[7] = h[7] + hh >>> 0;
+  }
+  return Array.from(h, value => value.toString(16).padStart(8, '0')).join('');
+}
+//# sourceMappingURL=hash.js.map

package/lib/commonjs/scope/hash.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["K","Uint32Array","rotr","value","bits","utf8Bytes","input","out","i","length","codePoint","codePointAt","push","Uint8Array","from","utf8ByteLength","sha256Hex","bytes","bitLength","paddedLength","padded","set","view","DataView","buffer","setUint32","Math","floor","h","w","offset","getUint32","s0","s1","a","b","c","d","e","f","g","hh","S1","ch","temp1","S0","maj","temp2","Array","toString","padStart","join"],"sourceRoot":"../../../src","sources":["scope/hash.ts"],"mappings":";;;;;;;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;;AAEA,MAAMA,CAAC,GAAG,IAAIC,WAAW,CAAC,CACzB,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAC9F,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAC9F,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAC9F,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAC9F,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAC9F,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAC9F,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAC9F,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,CAC9F,CAAC;AAEF,SAASC,IAAIA,CAACC,KAAa,EAAEC,IAAY,EAAU;EAClD,OAAQD,KAAK,KAAKC,IAAI,GAAKD,KAAK,IAAK,EAAE,GAAGC,IAAM;AACjD;AAEA,SAASC,SAASA,CAACC,KAAa,EAAc;EAC7C,MAAMC,GAAa,GAAG,EAAE;EACxB,KAAK,IAAIC,CAAC,GAAG,CAAC,EAAEA,CAAC,GAAGF,KAAK,CAACG,MAAM,EAAED,CAAC,IAAI,CAAC,EAAE;IACzC,IAAIE,SAAS,GAAGJ,KAAK,CAACK,WAAW,CAACH,CAAC,CAAE;IACrC,IAAIE,SAAS,GAAG,MAAM,EAAE;MACvBF,CAAC,IAAI,CAAC;IACP;IACA,IAAIE,SAAS,GAAG,IAAI,EAAE;MACrBH,GAAG,CAACK,IAAI,CAACF,SAAS,CAAC;IACpB,CAAC,MAAM,IAAIA,SAAS,GAAG,KAAK,EAAE;MAC7BH,GAAG,CAACK,IAAI,CAAC,IAAI,GAAIF,SAAS,IAAI,CAAE,EAAE,IAAI,GAAIA,SAAS,GAAG,IAAK,CAAC;IAC7D,CAAC,MAAM,IAAIA,SAAS,GAAG,OAAO,EAAE;MAC/BH,GAAG,CAACK,IAAI,CACP,IAAI,GAAIF,SAAS,IAAI,EAAG,EACxB,IAAI,GAAKA,SAAS,IAAI,CAAC,GAAI,IAAK,EAChC,IAAI,GAAIA,SAAS,GAAG,IACrB,CAAC;IACF,CAAC,MAAM;MACNH,GAAG,CAACK,IAAI,CACP,IAAI,GAAIF,SAAS,IAAI,EAAG,EACxB,IAAI,GAAKA,SAAS,IAAI,EAAE,GAAI,IAAK,EACjC,IAAI,GAAKA,SAAS,IAAI,CAAC,GAAI,IAAK,EAChC,IAAI,GAAIA,SAAS,GAAG,IACrB,CAAC;IACF;EACD;EACA,OAAOG,UAAU,CAACC,IAAI,CAACP,GAAG,CAAC;AAC5B;AAEO,SAASQ,cAAcA,CAACT,KAAa,EAAU;EACrD,OAAOD,SAAS,CAACC,KAAK,CAAC,CAACG,MAAM;AAC/B;AAEO,SAASO,SAASA,CAACV,KAAa,EAAU;EAChD,MAAMW,KAAK,GAAGZ,SAAS,CAACC,KAAK,CAAC;EAC9B,MAAMY,SAAS,GAAGD,KAAK,CAACR,MAAM,GAAG,CAAC;EAClC,MAAMU,YAAY,GAAI,CAAEF,KAAK,CAACR,MAAM,GAAG,CAAC,IAAK,CAAC,IAAI,CAAC,IAAK,CAAC;EACzD,MAAMW,MAAM,GAAG,IAAIP,UAAU,CAACM,YAAY,CAAC;EAC3CC,MAAM,CAACC,GAAG,CAACJ,KAAK,CAAC;EACjBG,MAAM,CAACH,KAAK,CAACR,MAAM,CAAC,GAAG,IAAI;EAE3B,MAAMa,IAAI,GAAG,IAAIC,QAAQ,CAACH,MAAM,CAACI,MAAM,CAAC;EACxCF,IAAI,CAACG,SAAS,CAACN,YAAY,GAAG,CAAC,EAAEO,IAAI,CAACC,KAAK,CAACT,SAAS,GAAG,WAAW,CAAC,EAAE,KAAK,CAAC;EAC5EI,IAAI,CAACG,SAAS,CAACN,YAAY,GAAG,CAAC,EAAED,SAAS,KAAK,CAAC,EAAE,KAAK,CAAC;EAExD,MAAMU,CAAC,GAAG,IAAI3B,WAAW,CAAC,CACzB,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,CAC9F,CAAC;EACF,MAAM4B,CAAC,GAAG,IAAI5B,WAAW,CAAC,EAAE,CAAC;EAE7B,KAAK,IAAI6B,MAAM,GAAG,CAAC,EAAEA,MAAM,GAAGX,YAAY,EAAEW,MAAM,IAAI,EAAE,EAAE;IACzD,KAAK,IAAItB,CAAC,GAAG,CAAC,EAAEA,CAAC,GAAG,EAAE,EAAEA,CAAC,IAAI,CAAC,EAAE;MAC/BqB,CAAC,CAACrB,CAAC,CAAC,GAAGc,IAAI,CAACS,SAAS,CAACD,MAAM,GAAGtB,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC;IAC7C;IACA,KAAK,IAAIA,CAAC,GAAG,EAAE,EAAEA,CAAC,GAAG,EAAE,EAAEA,CAAC,IAAI,CAAC,EAAE;MAChC,MAAMwB,EAAE,GAAG9B,IAAI,CAAC2B,CAAC,CAACrB,CAAC,GAAG,EAAE,CAAC,EAAG,CAAC,CAAC,GAAGN,IAAI,CAAC2B,CAAC,CAACrB,CAAC,GAAG,EAAE,CAAC,EAAG,EAAE,CAAC,GAAIqB,CAAC,CAACrB,CAAC,GAAG,EAAE,CAAC,KAAM,CAAE;MAC1E,MAAMyB,EAAE,GAAG/B,IAAI,CAAC2B,CAAC,CAACrB,CAAC,GAAG,CAAC,CAAC,EAAG,EAAE,CAAC,GAAGN,IAAI,CAAC2B,CAAC,CAACrB,CAAC,GAAG,CAAC,CAAC,EAAG,EAAE,CAAC,GAAIqB,CAAC,CAACrB,CAAC,GAAG,CAAC,CAAC,KAAM,EAAG;MACzEqB,CAAC,CAACrB,CAAC,CAAC,GAAIqB,CAAC,CAACrB,CAAC,GAAG,EAAE,CAAC,GAAIwB,EAAE,GAAGH,CAAC,CAACrB,CAAC,GAAG,CAAC,CAAE,GAAGyB,EAAE,KAAM,CAAC;IAChD;IAEA,IAAI,CAACC,CAAC,EAAEC,CAAC,EAAEC,CAAC,EAAEC,CAAC,EAAEC,CAAC,EAAEC,CAAC,EAAEC,CAAC,EAAEC,EAAE,CAAC,GAAG,CAACb,CAAC,CAAC,CAAC,CAAC,EAAGA,CAAC,CAAC,CAAC,CAAC,EAAGA,CAAC,CAAC,CAAC,CAAC,EAAGA,CAAC,CAAC,CAAC,CAAC,EAAGA,CAAC,CAAC,CAAC,CAAC,EAAGA,CAAC,CAAC,CAAC,CAAC,EAAGA,CAAC,CAAC,CAAC,CAAC,EAAGA,CAAC,CAAC,CAAC,CAAC,CAAE;IAExF,KAAK,IAAIpB,CAAC,GAAG,CAAC,EAAEA,CAAC,GAAG,EAAE,EAAEA,CAAC,IAAI,CAAC,EAAE;MAC/B,MAAMkC,EAAE,GAAGxC,IAAI,CAACoC,CAAC,EAAE,CAAC,CAAC,GAAGpC,IAAI,CAACoC,CAAC,EAAE,EAAE,CAAC,GAAGpC,IAAI,CAACoC,CAAC,EAAE,EAAE,CAAC;MACjD,MAAMK,EAAE,GAAIL,CAAC,GAAGC,CAAC,GAAK,CAACD,CAAC,GAAGE,CAAE;MAC7B,MAAMI,KAAK,GAAIH,EAAE,GAAGC,EAAE,GAAGC,EAAE,GAAG3C,CAAC,CAACQ,CAAC,CAAE,GAAGqB,CAAC,CAACrB,CAAC,CAAE,KAAM,CAAC;MAClD,MAAMqC,EAAE,GAAG3C,IAAI,CAACgC,CAAC,EAAE,CAAC,CAAC,GAAGhC,IAAI,CAACgC,CAAC,EAAE,EAAE,CAAC,GAAGhC,IAAI,CAACgC,CAAC,EAAE,EAAE,CAAC;MACjD,MAAMY,GAAG,GAAIZ,CAAC,GAAGC,CAAC,GAAKD,CAAC,GAAGE,CAAE,GAAID,CAAC,GAAGC,CAAE;MACvC,MAAMW,KAAK,GAAIF,EAAE,GAAGC,GAAG,KAAM,CAAC;MAE9BL,EAAE,GAAGD,CAAC;MACNA,CAAC,GAAGD,CAAC;MACLA,CAAC,GAAGD,CAAC;MACLA,CAAC,GAAID,CAAC,GAAGO,KAAK,KAAM,CAAC;MACrBP,CAAC,GAAGD,CAAC;MACLA,CAAC,GAAGD,CAAC;MACLA,CAAC,GAAGD,CAAC;MACLA,CAAC,GAAIU,KAAK,GAAGG,KAAK,KAAM,CAAC;IAC1B;IAEAnB,CAAC,CAAC,CAAC,CAAC,GAAIA,CAAC,CAAC,CAAC,CAAC,GAAIM,CAAC,KAAM,CAAC;IACxBN,CAAC,CAAC,CAAC,CAAC,GAAIA,CAAC,CAAC,CAAC,CAAC,GAAIO,CAAC,KAAM,CAAC;IACxBP,CAAC,CAAC,CAAC,CAAC,GAAIA,CAAC,CAAC,CAAC,CAAC,GAAIQ,CAAC,KAAM,CAAC;IACxBR,CAAC,CAAC,CAAC,CAAC,GAAIA,CAAC,CAAC,CAAC,CAAC,GAAIS,CAAC,KAAM,CAAC;IACxBT,CAAC,CAAC,CAAC,CAAC,GAAIA,CAAC,CAAC,CAAC,CAAC,GAAIU,CAAC,KAAM,CAAC;IACxBV,CAAC,CAAC,CAAC,CAAC,GAAIA,CAAC,CAAC,CAAC,CAAC,GAAIW,CAAC,KAAM,CAAC;IACxBX,CAAC,CAAC,CAAC,CAAC,GAAIA,CAAC,CAAC,CAAC,CAAC,GAAIY,CAAC,KAAM,CAAC;IACxBZ,CAAC,CAAC,CAAC,CAAC,GAAIA,CAAC,CAAC,CAAC,CAAC,GAAIa,EAAE,KAAM,CAAC;EAC1B;EAEA,OAAOO,KAAK,CAAClC,IAAI,CAACc,CAAC,EAAEzB,KAAK,IAAIA,KAAK,CAAC8C,QAAQ,CAAC,EAAE,CAAC,CAACC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAACC,IAAI,CAAC,EAAE,CAAC;AAC5E","ignoreList":[]}

package/lib/commonjs/scope/normalize.js

@@ -0,0 +1,73 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.SCOPE_KINDS = exports.MAX_COMPONENT_BYTES = exports.CONTROL_CHARACTER = exports.COMPONENT_SEPARATOR = exports.COMPONENT_ORDER = void 0;
+exports.normalizeComponent = normalizeComponent;
+exports.normalizeDescriptor = normalizeDescriptor;
+/**
+ * Scope descriptor normalization.
+ *
+ * The package normalizes and validates; it never repairs. A component it
+ * cannot represent safely is an error (FR-013), because silently sanitizing
+ * one is how two different descriptors end up sharing a directory — which
+ * would be a cross-scope leak dressed up as a convenience.
+ */
+
+/**
+ * Separates components in the canonical form.
+ *
+ * NUL rather than a printable character: a component containing the separator
+ * could forge another descriptor's canonical string, and every printable
+ * candidate occurs in legitimate identity data. Tenant names contain spaces,
+ * identifiers contain colons and slashes, emails contain "@" and ".". NUL
+ * occurs in none of them, so reserving it costs consumers nothing.
+ */
+const COMPONENT_SEPARATOR = exports.COMPONENT_SEPARATOR = '\u0000';
+
+/**
+ * Control characters are rejected wholesale rather than only the separator.
+ * They have no place in an identity component, and they would be trouble in a
+ * log line or a diagnostic even where they could not forge a canonical
+ * string.
+ */
+// eslint-disable-next-line no-control-regex
+const CONTROL_CHARACTER = exports.CONTROL_CHARACTER = /[\u0000-\u001f\u007f]/;
+const MAX_COMPONENT_BYTES = exports.MAX_COMPONENT_BYTES = 512;
+
+/** Fixed order, so the canonical form is stable across callers. */
+const COMPONENT_ORDER = exports.COMPONENT_ORDER = ['kind', 'id', 'tenant', 'app', 'environment', 'namespace'];
+const SCOPE_KINDS = exports.SCOPE_KINDS = ['guest', 'identity', 'tenant', 'workspace', 'custom'];
+
+/**
+ * NFC, trimmed, case preserved.
+ *
+ * Case is preserved deliberately: the package does not know whether a
+ * consumer's identity system is case-sensitive, and folding case would merge
+ * two scopes the app considers distinct.
+ */
+function normalizeComponent(value) {
+  return value.normalize('NFC').trim();
+}
+/** Normalize without validating. Callers must validate first. */
+function normalizeDescriptor(descriptor) {
+  const components = {};
+  const parts = [];
+  for (const key of COMPONENT_ORDER) {
+    const raw = descriptor[key];
+    if (typeof raw !== 'string' || raw.length === 0) {
+      parts.push('');
+      continue;
+    }
+    const normalized = normalizeComponent(raw);
+    components[key] = normalized;
+    parts.push(normalized);
+  }
+  return {
+    kind: descriptor.kind,
+    components,
+    canonical: parts.join(COMPONENT_SEPARATOR)
+  };
+}
+//# sourceMappingURL=normalize.js.map

package/lib/commonjs/scope/normalize.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["COMPONENT_SEPARATOR","exports","CONTROL_CHARACTER","MAX_COMPONENT_BYTES","COMPONENT_ORDER","SCOPE_KINDS","normalizeComponent","value","normalize","trim","normalizeDescriptor","descriptor","components","parts","key","raw","length","push","normalized","kind","canonical","join"],"sourceRoot":"../../../src","sources":["scope/normalize.ts"],"mappings":";;;;;;;;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAIA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,MAAMA,mBAAmB,GAAAC,OAAA,CAAAD,mBAAA,GAAG,QAAQ;;AAE3C;AACA;AACA;AACA;AACA;AACA;AACA;AACO,MAAME,iBAAiB,GAAAD,OAAA,CAAAC,iBAAA,GAAG,uBAAuB;AAEjD,MAAMC,mBAAmB,GAAAF,OAAA,CAAAE,mBAAA,GAAG,GAAG;;AAEtC;AACO,MAAMC,eAAe,GAAAH,OAAA,CAAAG,eAAA,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,aAAa,EAAE,WAAW,CAAU;AAE5F,MAAMC,WAAiC,GAAAJ,OAAA,CAAAI,WAAA,GAAG,CAChD,OAAO,EACP,UAAU,EACV,QAAQ,EACR,WAAW,EACX,QAAQ,CACR;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASC,kBAAkBA,CAACC,KAAa,EAAU;EACzD,OAAOA,KAAK,CAACC,SAAS,CAAC,KAAK,CAAC,CAACC,IAAI,CAAC,CAAC;AACrC;AAQA;AACO,SAASC,mBAAmBA,CAACC,UAA2B,EAAmB;EACjF,MAAMC,UAAkC,GAAG,CAAC,CAAC;EAC7C,MAAMC,KAAe,GAAG,EAAE;EAE1B,KAAK,MAAMC,GAAG,IAAIV,eAAe,EAAE;IAClC,MAAMW,GAAG,GAAGJ,UAAU,CAACG,GAAG,CAA0B;IACpD,IAAI,OAAOC,GAAG,KAAK,QAAQ,IAAIA,GAAG,CAACC,MAAM,KAAK,CAAC,EAAE;MAChDH,KAAK,CAACI,IAAI,CAAC,EAAE,CAAC;MACd;IACD;IACA,MAAMC,UAAU,GAAGZ,kBAAkB,CAACS,GAAG,CAAC;IAC1CH,UAAU,CAACE,GAAG,CAAC,GAAGI,UAAU;IAC5BL,KAAK,CAACI,IAAI,CAACC,UAAU,CAAC;EACvB;EAEA,OAAO;IACNC,IAAI,EAAER,UAAU,CAACQ,IAAI;IACrBP,UAAU;IACVQ,SAAS,EAAEP,KAAK,CAACQ,IAAI,CAACrB,mBAAmB;EAC1C,CAAC;AACF","ignoreList":[]}