@chipmobilesdk/rn-local-db 0.4.0 → 0.5.0

package/lib/module/query/validate.js

@@ -0,0 +1,173 @@
+"use strict";
+
+/**
+ * Query validation, run before any SQL is built.
+ *
+ * Two things fall out of validating first: FR-034 is satisfied, and no
+ * consumer-supplied string ever reaches SQL construction — field names are
+ * resolved through the schema to a known column, and values bind as
+ * parameters. Injection stops being a thing to remember.
+ */
+
+import { Budgets } from "../contract/config.js";
+import { DiagnosticCodes } from "../contract/errors.js";
+import { raise } from "../diagnostics/errors.js";
+import { sanitizeIdentifier } from "../diagnostics/redact.js";
+import { fieldOf } from "../schema/declare.js";
+function queryInvalid(message, collection) {
+  // The field name is named; its *value* never is (FR-079).
+  raise(DiagnosticCodes.QUERY_INVALID, {
+    message,
+    detail: {
+      collection
+    }
+  });
+}
+const ORDERED_OPERATORS = new Set(['lt', 'lte', 'gt', 'gte', 'between']);
+function typeMatches(type, value) {
+  if (value === null) {
+    return true;
+  }
+  switch (type) {
+    case 'string':
+      return typeof value === 'string';
+    case 'number':
+    case 'timestamp':
+      return typeof value === 'number';
+    case 'boolean':
+      return typeof value === 'boolean';
+    default:
+      return false;
+  }
+}
+function validateField(collection, field) {
+  const declared = fieldOf(collection, field);
+  if (!declared) {
+    // Returning everything or nothing here would be worse than failing:
+    // a typo would silently change what the user sees.
+    queryInvalid(`filter references undeclared field ${sanitizeIdentifier(field)}`, collection.name);
+  }
+  return declared;
+}
+export function validateFilter(collection, node) {
+  switch (node.op) {
+    case 'and':
+    case 'or':
+      {
+        if (!Array.isArray(node.nodes) || node.nodes.length === 0) {
+          queryInvalid(`${node.op} requires at least one child`, collection.name);
+        }
+        for (const child of node.nodes) {
+          validateFilter(collection, child);
+        }
+        return;
+      }
+    case 'not':
+      {
+        if (!node.node) {
+          queryInvalid('not requires a child', collection.name);
+        }
+        validateFilter(collection, node.node);
+        return;
+      }
+    case 'isNull':
+    case 'isNotNull':
+      {
+        validateField(collection, node.field);
+        return;
+      }
+    case 'exists':
+      {
+        validateField(collection, node.field);
+        if (typeof node.value !== 'boolean') {
+          queryInvalid('exists requires a boolean', collection.name);
+        }
+        return;
+      }
+    case 'in':
+    case 'nin':
+      {
+        const declared = validateField(collection, node.field);
+        if (!Array.isArray(node.value) || node.value.length === 0) {
+          queryInvalid(`${node.op} requires a non-empty array`, collection.name);
+        }
+        for (const value of node.value) {
+          if (!typeMatches(declared.type, value)) {
+            queryInvalid(`${node.op} value does not match field type`, collection.name);
+          }
+        }
+        return;
+      }
+    case 'between':
+      {
+        const declared = validateField(collection, node.field);
+        if (!Array.isArray(node.value) || node.value.length !== 2) {
+          queryInvalid('between requires exactly two bounds', collection.name);
+        }
+        for (const value of node.value) {
+          if (!typeMatches(declared.type, value)) {
+            queryInvalid('between bound does not match field type', collection.name);
+          }
+        }
+        return;
+      }
+    case 'eq':
+    case 'ne':
+    case 'lt':
+    case 'lte':
+    case 'gt':
+    case 'gte':
+      {
+        const declared = validateField(collection, node.field);
+        if (declared.type === 'boolean' && ORDERED_OPERATORS.has(node.op)) {
+          queryInvalid('ordered comparison is not defined for a boolean', collection.name);
+        }
+        if (!typeMatches(declared.type, node.value)) {
+          queryInvalid('filter value does not match field type', collection.name);
+        }
+        return;
+      }
+    default:
+      {
+        queryInvalid(`unsupported operator ${sanitizeIdentifier(String(node.op))}`, collection.name);
+      }
+  }
+}
+export function validateSort(collection, sort) {
+  const seen = new Set();
+  for (const key of sort) {
+    validateField(collection, key.field);
+    if (seen.has(key.field)) {
+      queryInvalid(`duplicate sort field ${sanitizeIdentifier(key.field)}`, collection.name);
+    }
+    seen.add(key.field);
+    if (key.direction && key.direction !== 'asc' && key.direction !== 'desc') {
+      queryInvalid('sort direction must be asc or desc', collection.name);
+    }
+  }
+}
+export function validatePageSize(size) {
+  if (!Number.isInteger(size) || size < 1 || size > Budgets.MAX_PAGE_SIZE) {
+    raise(DiagnosticCodes.PAGE_SIZE_INVALID, {
+      message: 'page size out of range',
+      detail: {
+        limit: Budgets.MAX_PAGE_SIZE
+      }
+    });
+  }
+}
+export function validateQuery(collection, query) {
+  if (!query) {
+    return;
+  }
+  if (query.filter) {
+    validateFilter(collection, query.filter);
+  }
+  if (query.sort) {
+    validateSort(collection, query.sort);
+  }
+  if (query.page) {
+    validatePageSize(query.page.size);
+  }
+}
+//# sourceMappingURL=validate.js.map

package/lib/module/query/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["Budgets","DiagnosticCodes","raise","sanitizeIdentifier","fieldOf","queryInvalid","message","collection","QUERY_INVALID","detail","ORDERED_OPERATORS","Set","typeMatches","type","value","validateField","field","declared","name","validateFilter","node","op","Array","isArray","nodes","length","child","has","String","validateSort","sort","seen","key","add","direction","validatePageSize","size","Number","isInteger","MAX_PAGE_SIZE","PAGE_SIZE_INVALID","limit","validateQuery","query","filter","page"],"sourceRoot":"../../../src","sources":["query/validate.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,SAASA,OAAO,QAAQ,uBAAoB;AAC5C,SAASC,eAAe,QAAQ,uBAAoB;AAGpD,SAASC,KAAK,QAAQ,0BAAuB;AAC7C,SAASC,kBAAkB,QAAQ,0BAAuB;AAC1D,SAASC,OAAO,QAAQ,sBAAmB;AAE3C,SAASC,YAAYA,CAACC,OAAe,EAAEC,UAAkB,EAAS;EACjE;EACAL,KAAK,CAACD,eAAe,CAACO,aAAa,EAAE;IAAEF,OAAO;IAAEG,MAAM,EAAE;MAAEF;IAAW;EAAE,CAAC,CAAC;AAC1E;AAEA,MAAMG,iBAAiB,GAAG,IAAIC,GAAG,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;AAExE,SAASC,WAAWA,CAACC,IAAe,EAAEC,KAAkB,EAAW;EAClE,IAAIA,KAAK,KAAK,IAAI,EAAE;IACnB,OAAO,IAAI;EACZ;EACA,QAAQD,IAAI;IACX,KAAK,QAAQ;MACZ,OAAO,OAAOC,KAAK,KAAK,QAAQ;IACjC,KAAK,QAAQ;IACb,KAAK,WAAW;MACf,OAAO,OAAOA,KAAK,KAAK,QAAQ;IACjC,KAAK,SAAS;MACb,OAAO,OAAOA,KAAK,KAAK,SAAS;IAClC;MACC,OAAO,KAAK;EACd;AACD;AAEA,SAASC,aAAaA,CAACR,UAA4B,EAAES,KAAa,EAA8B;EAC/F,MAAMC,QAAQ,GAAGb,OAAO,CAACG,UAAU,EAAES,KAAK,CAAC;EAC3C,IAAI,CAACC,QAAQ,EAAE;IACd;IACA;IACAZ,YAAY,CACX,sCAAsCF,kBAAkB,CAACa,KAAK,CAAC,EAAE,EACjET,UAAU,CAACW,IACZ,CAAC;EACF;EACA,OAAOD,QAAQ;AAChB;AAEA,OAAO,SAASE,cAAcA,CAACZ,UAA4B,EAAEa,IAAgB,EAAQ;EACpF,QAAQA,IAAI,CAACC,EAAE;IACd,KAAK,KAAK;IACV,KAAK,IAAI;MAAE;QACV,IAAI,CAACC,KAAK,CAACC,OAAO,CAACH,IAAI,CAACI,KAAK,CAAC,IAAIJ,IAAI,CAACI,KAAK,CAACC,MAAM,KAAK,CAAC,EAAE;UAC1DpB,YAAY,CAAC,GAAGe,IAAI,CAACC,EAAE,8BAA8B,EAAEd,UAAU,CAACW,IAAI,CAAC;QACxE;QACA,KAAK,MAAMQ,KAAK,IAAIN,IAAI,CAACI,KAAK,EAAE;UAC/BL,cAAc,CAACZ,UAAU,EAAEmB,KAAK,CAAC;QAClC;QACA;MACD;IACA,KAAK,KAAK;MAAE;QACX,IAAI,CAACN,IAAI,CAACA,IAAI,EAAE;UACff,YAAY,CAAC,sBAAsB,EAAEE,UAAU,CAACW,IAAI,CAAC;QACtD;QACAC,cAAc,CAACZ,UAAU,EAAEa,IAAI,CAACA,IAAI,CAAC;QACrC;MACD;IACA,KAAK,QAAQ;IACb,KAAK,WAAW;MAAE;QACjBL,aAAa,CAACR,UAAU,EAAEa,IAAI,CAACJ,KAAK,CAAC;QACrC;MACD;IACA,KAAK,QAAQ;MAAE;QACdD,aAAa,CAACR,UAAU,EAAEa,IAAI,CAACJ,KAAK,CAAC;QACrC,IAAI,OAAOI,IAAI,CAACN,KAAK,KAAK,SAAS,EAAE;UACpCT,YAAY,CAAC,2BAA2B,EAAEE,UAAU,CAACW,IAAI,CAAC;QAC3D;QACA;MACD;IACA,KAAK,IAAI;IACT,KAAK,KAAK;MAAE;QACX,MAAMD,QAAQ,GAAGF,aAAa,CAACR,UAAU,EAAEa,IAAI,CAACJ,KAAK,CAAE;QACvD,IAAI,CAACM,KAAK,CAACC,OAAO,CAACH,IAAI,CAACN,KAAK,CAAC,IAAIM,IAAI,CAACN,KAAK,CAACW,MAAM,KAAK,CAAC,EAAE;UAC1DpB,YAAY,CAAC,GAAGe,IAAI,CAACC,EAAE,6BAA6B,EAAEd,UAAU,CAACW,IAAI,CAAC;QACvE;QACA,KAAK,MAAMJ,KAAK,IAAIM,IAAI,CAACN,KAAK,EAAE;UAC/B,IAAI,CAACF,WAAW,CAACK,QAAQ,CAACJ,IAAI,EAAEC,KAAK,CAAC,EAAE;YACvCT,YAAY,CAAC,GAAGe,IAAI,CAACC,EAAE,kCAAkC,EAAEd,UAAU,CAACW,IAAI,CAAC;UAC5E;QACD;QACA;MACD;IACA,KAAK,SAAS;MAAE;QACf,MAAMD,QAAQ,GAAGF,aAAa,CAACR,UAAU,EAAEa,IAAI,CAACJ,KAAK,CAAE;QACvD,IAAI,CAACM,KAAK,CAACC,OAAO,CAACH,IAAI,CAACN,KAAK,CAAC,IAAIM,IAAI,CAACN,KAAK,CAACW,MAAM,KAAK,CAAC,EAAE;UAC1DpB,YAAY,CAAC,qCAAqC,EAAEE,UAAU,CAACW,IAAI,CAAC;QACrE;QACA,KAAK,MAAMJ,KAAK,IAAIM,IAAI,CAACN,KAAK,EAAE;UAC/B,IAAI,CAACF,WAAW,CAACK,QAAQ,CAACJ,IAAI,EAAEC,KAAK,CAAC,EAAE;YACvCT,YAAY,CAAC,yCAAyC,EAAEE,UAAU,CAACW,IAAI,CAAC;UACzE;QACD;QACA;MACD;IACA,KAAK,IAAI;IACT,KAAK,IAAI;IACT,KAAK,IAAI;IACT,KAAK,KAAK;IACV,KAAK,IAAI;IACT,KAAK,KAAK;MAAE;QACX,MAAMD,QAAQ,GAAGF,aAAa,CAACR,UAAU,EAAEa,IAAI,CAACJ,KAAK,CAAE;QACvD,IAAIC,QAAQ,CAACJ,IAAI,KAAK,SAAS,IAAIH,iBAAiB,CAACiB,GAAG,CAACP,IAAI,CAACC,EAAE,CAAC,EAAE;UAClEhB,YAAY,CAAC,iDAAiD,EAAEE,UAAU,CAACW,IAAI,CAAC;QACjF;QACA,IAAI,CAACN,WAAW,CAACK,QAAQ,CAACJ,IAAI,EAAEO,IAAI,CAACN,KAAK,CAAC,EAAE;UAC5CT,YAAY,CAAC,wCAAwC,EAAEE,UAAU,CAACW,IAAI,CAAC;QACxE;QACA;MACD;IACA;MAAS;QACRb,YAAY,CACX,wBAAwBF,kBAAkB,CAACyB,MAAM,CAAER,IAAI,CAAoBC,EAAE,CAAC,CAAC,EAAE,EACjFd,UAAU,CAACW,IACZ,CAAC;MACF;EACD;AACD;AAEA,OAAO,SAASW,YAAYA,CAACtB,UAA4B,EAAEuB,IAAe,EAAQ;EACjF,MAAMC,IAAI,GAAG,IAAIpB,GAAG,CAAS,CAAC;EAC9B,KAAK,MAAMqB,GAAG,IAAIF,IAAI,EAAE;IACvBf,aAAa,CAACR,UAAU,EAAEyB,GAAG,CAAChB,KAAK,CAAC;IACpC,IAAIe,IAAI,CAACJ,GAAG,CAACK,GAAG,CAAChB,KAAK,CAAC,EAAE;MACxBX,YAAY,CAAC,wBAAwBF,kBAAkB,CAAC6B,GAAG,CAAChB,KAAK,CAAC,EAAE,EAAET,UAAU,CAACW,IAAI,CAAC;IACvF;IACAa,IAAI,CAACE,GAAG,CAACD,GAAG,CAAChB,KAAK,CAAC;IACnB,IAAIgB,GAAG,CAACE,SAAS,IAAIF,GAAG,CAACE,SAAS,KAAK,KAAK,IAAIF,GAAG,CAACE,SAAS,KAAK,MAAM,EAAE;MACzE7B,YAAY,CAAC,oCAAoC,EAAEE,UAAU,CAACW,IAAI,CAAC;IACpE;EACD;AACD;AAEA,OAAO,SAASiB,gBAAgBA,CAACC,IAAY,EAAQ;EACpD,IAAI,CAACC,MAAM,CAACC,SAAS,CAACF,IAAI,CAAC,IAAIA,IAAI,GAAG,CAAC,IAAIA,IAAI,GAAGpC,OAAO,CAACuC,aAAa,EAAE;IACxErC,KAAK,CAACD,eAAe,CAACuC,iBAAiB,EAAE;MACxClC,OAAO,EAAE,wBAAwB;MACjCG,MAAM,EAAE;QAAEgC,KAAK,EAAEzC,OAAO,CAACuC;MAAc;IACxC,CAAC,CAAC;EACH;AACD;AAEA,OAAO,SAASG,aAAaA,CAACnC,UAA4B,EAAEoC,KAAwB,EAAQ;EAC3F,IAAI,CAACA,KAAK,EAAE;IACX;EACD;EACA,IAAIA,KAAK,CAACC,MAAM,EAAE;IACjBzB,cAAc,CAACZ,UAAU,EAAEoC,KAAK,CAACC,MAAM,CAAC;EACzC;EACA,IAAID,KAAK,CAACb,IAAI,EAAE;IACfD,YAAY,CAACtB,UAAU,EAAEoC,KAAK,CAACb,IAAI,CAAC;EACrC;EACA,IAAIa,KAAK,CAACE,IAAI,EAAE;IACfV,gBAAgB,CAACQ,KAAK,CAACE,IAAI,CAACT,IAAI,CAAC;EAClC;AACD","ignoreList":[]}

package/lib/module/schema/declare.js

@@ -0,0 +1,37 @@
+"use strict";
+
+/**
+ * Schema lookup helpers shared by both adapters.
+ *
+ * Declaring a field makes it queryable — it does not restrict what a record
+ * may contain. `isQueryable` is the single answer to "may a filter or sort
+ * reference this?", so both adapters reject the same field names (FR-034).
+ */
+
+export function indexSchemas(collections) {
+  return new Map(collections.map(collection => [collection.name, collection]));
+}
+export function fieldOf(collection, name) {
+  return collection.fields?.find(field => field.name === name);
+}
+export function isQueryable(collection, name) {
+  return fieldOf(collection, name) !== undefined;
+}
+export function hasSoftDelete(collection) {
+  return collection.softDelete === true;
+}
+export function hasTimestamps(collection) {
+  return collection.timestamps === true;
+}
+
+/** Column name for a projected queryable field. Prefixed to avoid colliding
+ * with the reserved columns (`id`, `payload`, `created_at`, ...). */
+export function projectedColumn(field) {
+  return `f_${field}`;
+}
+
+/** Table name for a collection, prefixed for the same reason. */
+export function collectionTable(name) {
+  return `c_${name}`;
+}
+//# sourceMappingURL=declare.js.map

package/lib/module/schema/declare.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["indexSchemas","collections","Map","map","collection","name","fieldOf","fields","find","field","isQueryable","undefined","hasSoftDelete","softDelete","hasTimestamps","timestamps","projectedColumn","collectionTable"],"sourceRoot":"../../../src","sources":["schema/declare.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;;AAMA,OAAO,SAASA,YAAYA,CAACC,WAA+B,EAAe;EAC1E,OAAO,IAAIC,GAAG,CAACD,WAAW,CAACE,GAAG,CAACC,UAAU,IAAI,CAACA,UAAU,CAACC,IAAI,EAAED,UAAU,CAAC,CAAC,CAAC;AAC7E;AAEA,OAAO,SAASE,OAAOA,CAACF,UAA4B,EAAEC,IAAY,EAAgC;EACjG,OAAOD,UAAU,CAACG,MAAM,EAAEC,IAAI,CAACC,KAAK,IAAIA,KAAK,CAACJ,IAAI,KAAKA,IAAI,CAAC;AAC7D;AAEA,OAAO,SAASK,WAAWA,CAACN,UAA4B,EAAEC,IAAY,EAAW;EAChF,OAAOC,OAAO,CAACF,UAAU,EAAEC,IAAI,CAAC,KAAKM,SAAS;AAC/C;AAEA,OAAO,SAASC,aAAaA,CAACR,UAA4B,EAAW;EACpE,OAAOA,UAAU,CAACS,UAAU,KAAK,IAAI;AACtC;AAEA,OAAO,SAASC,aAAaA,CAACV,UAA4B,EAAW;EACpE,OAAOA,UAAU,CAACW,UAAU,KAAK,IAAI;AACtC;;AAEA;AACA;AACA,OAAO,SAASC,eAAeA,CAACP,KAAa,EAAU;EACtD,OAAO,KAAKA,KAAK,EAAE;AACpB;;AAEA;AACA,OAAO,SAASQ,eAAeA,CAACZ,IAAY,EAAU;EACrD,OAAO,KAAKA,IAAI,EAAE;AACnB","ignoreList":[]}

package/lib/module/schema/validate-config.js

@@ -0,0 +1,111 @@
+"use strict";
+
+/**
+ * Configuration validation.
+ *
+ * Runs to completion before any write and before any migration executes
+ * (FR-006, FR-053). Order matters: scope first, then collections, then the
+ * migration chain — so a consumer fixes the outermost problem first rather
+ * than chasing a downstream symptom.
+ */
+
+import { Budgets } from "../contract/config.js";
+import { DiagnosticCodes } from "../contract/errors.js";
+import { raise } from "../diagnostics/errors.js";
+import { validateMigrationChain } from "../migration/validate-chain.js";
+import { validateDescriptor } from "../scope/validate.js";
+const IDENTIFIER = /^[A-Za-z][A-Za-z0-9_]{0,62}$/;
+function configInvalid(message, detail) {
+  raise(DiagnosticCodes.CONFIG_INVALID, {
+    message,
+    detail
+  });
+}
+function validateCollection(collection, seen) {
+  if (!IDENTIFIER.test(collection.name)) {
+    configInvalid('collection name is not a valid identifier', {
+      collection: collection.name
+    });
+  }
+  if (seen.has(collection.name)) {
+    configInvalid('duplicate collection name', {
+      collection: collection.name
+    });
+  }
+  seen.add(collection.name);
+  const fieldNames = new Set();
+  for (const field of collection.fields ?? []) {
+    if (!IDENTIFIER.test(field.name)) {
+      configInvalid('field name is not a valid identifier', {
+        collection: collection.name
+      });
+    }
+    if (fieldNames.has(field.name)) {
+      configInvalid('duplicate field name', {
+        collection: collection.name
+      });
+    }
+    fieldNames.add(field.name);
+  }
+  const indexNames = new Set();
+  for (const index of collection.indexes ?? []) {
+    if (!IDENTIFIER.test(index.name)) {
+      configInvalid('index name is not a valid identifier', {
+        collection: collection.name
+      });
+    }
+    if (indexNames.has(index.name)) {
+      configInvalid('duplicate index name', {
+        collection: collection.name
+      });
+    }
+    indexNames.add(index.name);
+    if (!Array.isArray(index.fields) || index.fields.length === 0) {
+      configInvalid('index declares no fields', {
+        collection: collection.name
+      });
+    }
+    for (const field of index.fields) {
+      if (!fieldNames.has(field)) {
+        // The whole point of declaring fields is that the package can
+        // tell a typo from a deliberate choice. Silently creating an
+        // index over a column that will never exist would turn a config
+        // bug into a mysterious full scan at runtime.
+        configInvalid('index references an undeclared field', {
+          collection: collection.name
+        });
+      }
+    }
+  }
+}
+export function validateConfig(config) {
+  if (!config || typeof config !== 'object') {
+    configInvalid('database config is required');
+  }
+  if (typeof config.name !== 'string' || !IDENTIFIER.test(config.name)) {
+    configInvalid('database name is not a valid identifier');
+  }
+  validateDescriptor(config.scope);
+  if (!Array.isArray(config.collections) || config.collections.length === 0) {
+    configInvalid('at least one collection must be declared');
+  }
+  if (config.collections.length > Budgets.MAX_COLLECTIONS_PER_DATABASE) {
+    configInvalid('collection count exceeds the budget', {
+      count: config.collections.length,
+      limit: Budgets.MAX_COLLECTIONS_PER_DATABASE
+    });
+  }
+  const seen = new Set();
+  for (const collection of config.collections) {
+    validateCollection(collection, seen);
+  }
+
+  // The one definition of a valid chain, shared with the executor (LDB-12).
+  validateMigrationChain(config);
+  if (config.encryption && config.encryption.enabled) {
+    if (typeof config.encryption.keyProvider?.getKey !== 'function') {
+      configInvalid('encryption is enabled but no key provider was supplied');
+    }
+  }
+}
+//# sourceMappingURL=validate-config.js.map

package/lib/module/schema/validate-config.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["Budgets","DiagnosticCodes","raise","validateMigrationChain","validateDescriptor","IDENTIFIER","configInvalid","message","detail","CONFIG_INVALID","validateCollection","collection","seen","test","name","has","add","fieldNames","Set","field","fields","indexNames","index","indexes","Array","isArray","length","validateConfig","config","scope","collections","MAX_COLLECTIONS_PER_DATABASE","count","limit","encryption","enabled","keyProvider","getKey"],"sourceRoot":"../../../src","sources":["schema/validate-config.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,SAASA,OAAO,QAA6B,uBAAoB;AACjE,SAASC,eAAe,QAAQ,uBAAoB;AAEpD,SAASC,KAAK,QAAQ,0BAAuB;AAC7C,SAASC,sBAAsB,QAAQ,gCAA6B;AACpE,SAASC,kBAAkB,QAAQ,sBAAmB;AAEtD,MAAMC,UAAU,GAAG,8BAA8B;AAEjD,SAASC,aAAaA,CAACC,OAAe,EAAEC,MAAgC,EAAS;EAChFN,KAAK,CAACD,eAAe,CAACQ,cAAc,EAAE;IAAEF,OAAO;IAAEC;EAAO,CAAC,CAAC;AAC3D;AAEA,SAASE,kBAAkBA,CAACC,UAA4B,EAAEC,IAAiB,EAAQ;EAClF,IAAI,CAACP,UAAU,CAACQ,IAAI,CAACF,UAAU,CAACG,IAAI,CAAC,EAAE;IACtCR,aAAa,CAAC,2CAA2C,EAAE;MAC1DK,UAAU,EAAEA,UAAU,CAACG;IACxB,CAAC,CAAC;EACH;EACA,IAAIF,IAAI,CAACG,GAAG,CAACJ,UAAU,CAACG,IAAI,CAAC,EAAE;IAC9BR,aAAa,CAAC,2BAA2B,EAAE;MAAEK,UAAU,EAAEA,UAAU,CAACG;IAAK,CAAC,CAAC;EAC5E;EACAF,IAAI,CAACI,GAAG,CAACL,UAAU,CAACG,IAAI,CAAC;EAEzB,MAAMG,UAAU,GAAG,IAAIC,GAAG,CAAS,CAAC;EACpC,KAAK,MAAMC,KAAK,IAAIR,UAAU,CAACS,MAAM,IAAI,EAAE,EAAE;IAC5C,IAAI,CAACf,UAAU,CAACQ,IAAI,CAACM,KAAK,CAACL,IAAI,CAAC,EAAE;MACjCR,aAAa,CAAC,sCAAsC,EAAE;QACrDK,UAAU,EAAEA,UAAU,CAACG;MACxB,CAAC,CAAC;IACH;IACA,IAAIG,UAAU,CAACF,GAAG,CAACI,KAAK,CAACL,IAAI,CAAC,EAAE;MAC/BR,aAAa,CAAC,sBAAsB,EAAE;QAAEK,UAAU,EAAEA,UAAU,CAACG;MAAK,CAAC,CAAC;IACvE;IACAG,UAAU,CAACD,GAAG,CAACG,KAAK,CAACL,IAAI,CAAC;EAC3B;EAEA,MAAMO,UAAU,GAAG,IAAIH,GAAG,CAAS,CAAC;EACpC,KAAK,MAAMI,KAAK,IAAIX,UAAU,CAACY,OAAO,IAAI,EAAE,EAAE;IAC7C,IAAI,CAAClB,UAAU,CAACQ,IAAI,CAACS,KAAK,CAACR,IAAI,CAAC,EAAE;MACjCR,aAAa,CAAC,sCAAsC,EAAE;QACrDK,UAAU,EAAEA,UAAU,CAACG;MACxB,CAAC,CAAC;IACH;IACA,IAAIO,UAAU,CAACN,GAAG,CAACO,KAAK,CAACR,IAAI,CAAC,EAAE;MAC/BR,aAAa,CAAC,sBAAsB,EAAE;QAAEK,UAAU,EAAEA,UAAU,CAACG;MAAK,CAAC,CAAC;IACvE;IACAO,UAAU,CAACL,GAAG,CAACM,KAAK,CAACR,IAAI,CAAC;IAC1B,IAAI,CAACU,KAAK,CAACC,OAAO,CAACH,KAAK,CAACF,MAAM,CAAC,IAAIE,KAAK,CAACF,MAAM,CAACM,MAAM,KAAK,CAAC,EAAE;MAC9DpB,aAAa,CAAC,0BAA0B,EAAE;QAAEK,UAAU,EAAEA,UAAU,CAACG;MAAK,CAAC,CAAC;IAC3E;IACA,KAAK,MAAMK,KAAK,IAAIG,KAAK,CAACF,MAAM,EAAE;MACjC,IAAI,CAACH,UAAU,CAACF,GAAG,CAACI,KAAK,CAAC,EAAE;QAC3B;QACA;QACA;QACA;QACAb,aAAa,CAAC,sCAAsC,EAAE;UACrDK,UAAU,EAAEA,UAAU,CAACG;QACxB,CAAC,CAAC;MACH;IACD;EACD;AACD;AAEA,OAAO,SAASa,cAAcA,CAACC,MAAsB,EAAQ;EAC5D,IAAI,CAACA,MAAM,IAAI,OAAOA,MAAM,KAAK,QAAQ,EAAE;IAC1CtB,aAAa,CAAC,6BAA6B,CAAC;EAC7C;EACA,IAAI,OAAOsB,MAAM,CAACd,IAAI,KAAK,QAAQ,IAAI,CAACT,UAAU,CAACQ,IAAI,CAACe,MAAM,CAACd,IAAI,CAAC,EAAE;IACrER,aAAa,CAAC,yCAAyC,CAAC;EACzD;EAEAF,kBAAkB,CAACwB,MAAM,CAACC,KAAK,CAAC;EAEhC,IAAI,CAACL,KAAK,CAACC,OAAO,CAACG,MAAM,CAACE,WAAW,CAAC,IAAIF,MAAM,CAACE,WAAW,CAACJ,MAAM,KAAK,CAAC,EAAE;IAC1EpB,aAAa,CAAC,0CAA0C,CAAC;EAC1D;EACA,IAAIsB,MAAM,CAACE,WAAW,CAACJ,MAAM,GAAG1B,OAAO,CAAC+B,4BAA4B,EAAE;IACrEzB,aAAa,CAAC,qCAAqC,EAAE;MACpD0B,KAAK,EAAEJ,MAAM,CAACE,WAAW,CAACJ,MAAM;MAChCO,KAAK,EAAEjC,OAAO,CAAC+B;IAChB,CAAC,CAAC;EACH;EAEA,MAAMnB,IAAI,GAAG,IAAIM,GAAG,CAAS,CAAC;EAC9B,KAAK,MAAMP,UAAU,IAAIiB,MAAM,CAACE,WAAW,EAAE;IAC5CpB,kBAAkB,CAACC,UAAU,EAAEC,IAAI,CAAC;EACrC;;EAEA;EACAT,sBAAsB,CAACyB,MAAM,CAAC;EAE9B,IAAIA,MAAM,CAACM,UAAU,IAAIN,MAAM,CAACM,UAAU,CAACC,OAAO,EAAE;IACnD,IAAI,OAAOP,MAAM,CAACM,UAAU,CAACE,WAAW,EAAEC,MAAM,KAAK,UAAU,EAAE;MAChE/B,aAAa,CAAC,wDAAwD,CAAC;IACxE;EACD;AACD","ignoreList":[]}

package/lib/module/scope/hash.js

@@ -0,0 +1,102 @@
+"use strict";
+
+/**
+ * Scope key derivation.
+ *
+ * The directory a scope lives in is named by the SHA-256 digest of its
+ * canonical descriptor, never by the components themselves. FR-014 requires
+ * scope components be treated as sensitive, and a directory named after an
+ * email address puts that address in plaintext on disk — visible even when
+ * the database itself is encrypted, and carried into any crash report that
+ * includes a file path.
+ *
+ * Hashing also removes filesystem charset and length limits from the problem,
+ * which is what lets validation reject rather than sanitize (research.md R2).
+ *
+ * Implemented in pure TypeScript rather than over a native crypto peer so the
+ * scope layer stays importable from anywhere in the package, including the
+ * in-memory adapter running under Jest.
+ *
+ * Verified against Node's own SHA-256 in scope-resolution.test.ts — a wrong
+ * digest would silently merge or split scopes, so it is checked against a
+ * reference implementation rather than against a snapshot of this one.
+ */
+
+/* eslint-disable no-bitwise -- SHA-256 is defined in terms of bitwise operations. */
+
+const K = new Uint32Array([0x428a2f98, 0x71374491, 0xb5c0fbcf, 0xe9b5dba5, 0x3956c25b, 0x59f111f1, 0x923f82a4, 0xab1c5ed5, 0xd807aa98, 0x12835b01, 0x243185be, 0x550c7dc3, 0x72be5d74, 0x80deb1fe, 0x9bdc06a7, 0xc19bf174, 0xe49b69c1, 0xefbe4786, 0x0fc19dc6, 0x240ca1cc, 0x2de92c6f, 0x4a7484aa, 0x5cb0a9dc, 0x76f988da, 0x983e5152, 0xa831c66d, 0xb00327c8, 0xbf597fc7, 0xc6e00bf3, 0xd5a79147, 0x06ca6351, 0x14292967, 0x27b70a85, 0x2e1b2138, 0x4d2c6dfc, 0x53380d13, 0x650a7354, 0x766a0abb, 0x81c2c92e, 0x92722c85, 0xa2bfe8a1, 0xa81a664b, 0xc24b8b70, 0xc76c51a3, 0xd192e819, 0xd6990624, 0xf40e3585, 0x106aa070, 0x19a4c116, 0x1e376c08, 0x2748774c, 0x34b0bcb5, 0x391c0cb3, 0x4ed8aa4a, 0x5b9cca4f, 0x682e6ff3, 0x748f82ee, 0x78a5636f, 0x84c87814, 0x8cc70208, 0x90befffa, 0xa4506ceb, 0xbef9a3f7, 0xc67178f2]);
+function rotr(value, bits) {
+  return value >>> bits | value << 32 - bits;
+}
+function utf8Bytes(input) {
+  const out = [];
+  for (let i = 0; i < input.length; i += 1) {
+    let codePoint = input.codePointAt(i);
+    if (codePoint > 0xffff) {
+      i += 1;
+    }
+    if (codePoint < 0x80) {
+      out.push(codePoint);
+    } else if (codePoint < 0x800) {
+      out.push(0xc0 | codePoint >> 6, 0x80 | codePoint & 0x3f);
+    } else if (codePoint < 0x10000) {
+      out.push(0xe0 | codePoint >> 12, 0x80 | codePoint >> 6 & 0x3f, 0x80 | codePoint & 0x3f);
+    } else {
+      out.push(0xf0 | codePoint >> 18, 0x80 | codePoint >> 12 & 0x3f, 0x80 | codePoint >> 6 & 0x3f, 0x80 | codePoint & 0x3f);
+    }
+  }
+  return Uint8Array.from(out);
+}
+export function utf8ByteLength(input) {
+  return utf8Bytes(input).length;
+}
+export function sha256Hex(input) {
+  const bytes = utf8Bytes(input);
+  const bitLength = bytes.length * 8;
+  const paddedLength = (bytes.length + 9 >> 6) + 1 << 6;
+  const padded = new Uint8Array(paddedLength);
+  padded.set(bytes);
+  padded[bytes.length] = 0x80;
+  const view = new DataView(padded.buffer);
+  view.setUint32(paddedLength - 8, Math.floor(bitLength / 0x100000000), false);
+  view.setUint32(paddedLength - 4, bitLength >>> 0, false);
+  const h = new Uint32Array([0x6a09e667, 0xbb67ae85, 0x3c6ef372, 0xa54ff53a, 0x510e527f, 0x9b05688c, 0x1f83d9ab, 0x5be0cd19]);
+  const w = new Uint32Array(64);
+  for (let offset = 0; offset < paddedLength; offset += 64) {
+    for (let i = 0; i < 16; i += 1) {
+      w[i] = view.getUint32(offset + i * 4, false);
+    }
+    for (let i = 16; i < 64; i += 1) {
+      const s0 = rotr(w[i - 15], 7) ^ rotr(w[i - 15], 18) ^ w[i - 15] >>> 3;
+      const s1 = rotr(w[i - 2], 17) ^ rotr(w[i - 2], 19) ^ w[i - 2] >>> 10;
+      w[i] = w[i - 16] + s0 + w[i - 7] + s1 >>> 0;
+    }
+    let [a, b, c, d, e, f, g, hh] = [h[0], h[1], h[2], h[3], h[4], h[5], h[6], h[7]];
+    for (let i = 0; i < 64; i += 1) {
+      const S1 = rotr(e, 6) ^ rotr(e, 11) ^ rotr(e, 25);
+      const ch = e & f ^ ~e & g;
+      const temp1 = hh + S1 + ch + K[i] + w[i] >>> 0;
+      const S0 = rotr(a, 2) ^ rotr(a, 13) ^ rotr(a, 22);
+      const maj = a & b ^ a & c ^ b & c;
+      const temp2 = S0 + maj >>> 0;
+      hh = g;
+      g = f;
+      f = e;
+      e = d + temp1 >>> 0;
+      d = c;
+      c = b;
+      b = a;
+      a = temp1 + temp2 >>> 0;
+    }
+    h[0] = h[0] + a >>> 0;
+    h[1] = h[1] + b >>> 0;
+    h[2] = h[2] + c >>> 0;
+    h[3] = h[3] + d >>> 0;
+    h[4] = h[4] + e >>> 0;
+    h[5] = h[5] + f >>> 0;
+    h[6] = h[6] + g >>> 0;
+    h[7] = h[7] + hh >>> 0;
+  }
+  return Array.from(h, value => value.toString(16).padStart(8, '0')).join('');
+}
+//# sourceMappingURL=hash.js.map

package/lib/module/scope/hash.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["K","Uint32Array","rotr","value","bits","utf8Bytes","input","out","i","length","codePoint","codePointAt","push","Uint8Array","from","utf8ByteLength","sha256Hex","bytes","bitLength","paddedLength","padded","set","view","DataView","buffer","setUint32","Math","floor","h","w","offset","getUint32","s0","s1","a","b","c","d","e","f","g","hh","S1","ch","temp1","S0","maj","temp2","Array","toString","padStart","join"],"sourceRoot":"../../../src","sources":["scope/hash.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA;;AAEA,MAAMA,CAAC,GAAG,IAAIC,WAAW,CAAC,CACzB,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAC9F,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAC9F,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAC9F,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAC9F,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAC9F,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAC9F,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAC9F,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,CAC9F,CAAC;AAEF,SAASC,IAAIA,CAACC,KAAa,EAAEC,IAAY,EAAU;EAClD,OAAQD,KAAK,KAAKC,IAAI,GAAKD,KAAK,IAAK,EAAE,GAAGC,IAAM;AACjD;AAEA,SAASC,SAASA,CAACC,KAAa,EAAc;EAC7C,MAAMC,GAAa,GAAG,EAAE;EACxB,KAAK,IAAIC,CAAC,GAAG,CAAC,EAAEA,CAAC,GAAGF,KAAK,CAACG,MAAM,EAAED,CAAC,IAAI,CAAC,EAAE;IACzC,IAAIE,SAAS,GAAGJ,KAAK,CAACK,WAAW,CAACH,CAAC,CAAE;IACrC,IAAIE,SAAS,GAAG,MAAM,EAAE;MACvBF,CAAC,IAAI,CAAC;IACP;IACA,IAAIE,SAAS,GAAG,IAAI,EAAE;MACrBH,GAAG,CAACK,IAAI,CAACF,SAAS,CAAC;IACpB,CAAC,MAAM,IAAIA,SAAS,GAAG,KAAK,EAAE;MAC7BH,GAAG,CAACK,IAAI,CAAC,IAAI,GAAIF,SAAS,IAAI,CAAE,EAAE,IAAI,GAAIA,SAAS,GAAG,IAAK,CAAC;IAC7D,CAAC,MAAM,IAAIA,SAAS,GAAG,OAAO,EAAE;MAC/BH,GAAG,CAACK,IAAI,CACP,IAAI,GAAIF,SAAS,IAAI,EAAG,EACxB,IAAI,GAAKA,SAAS,IAAI,CAAC,GAAI,IAAK,EAChC,IAAI,GAAIA,SAAS,GAAG,IACrB,CAAC;IACF,CAAC,MAAM;MACNH,GAAG,CAACK,IAAI,CACP,IAAI,GAAIF,SAAS,IAAI,EAAG,EACxB,IAAI,GAAKA,SAAS,IAAI,EAAE,GAAI,IAAK,EACjC,IAAI,GAAKA,SAAS,IAAI,CAAC,GAAI,IAAK,EAChC,IAAI,GAAIA,SAAS,GAAG,IACrB,CAAC;IACF;EACD;EACA,OAAOG,UAAU,CAACC,IAAI,CAACP,GAAG,CAAC;AAC5B;AAEA,OAAO,SAASQ,cAAcA,CAACT,KAAa,EAAU;EACrD,OAAOD,SAAS,CAACC,KAAK,CAAC,CAACG,MAAM;AAC/B;AAEA,OAAO,SAASO,SAASA,CAACV,KAAa,EAAU;EAChD,MAAMW,KAAK,GAAGZ,SAAS,CAACC,KAAK,CAAC;EAC9B,MAAMY,SAAS,GAAGD,KAAK,CAACR,MAAM,GAAG,CAAC;EAClC,MAAMU,YAAY,GAAI,CAAEF,KAAK,CAACR,MAAM,GAAG,CAAC,IAAK,CAAC,IAAI,CAAC,IAAK,CAAC;EACzD,MAAMW,MAAM,GAAG,IAAIP,UAAU,CAACM,YAAY,CAAC;EAC3CC,MAAM,CAACC,GAAG,CAACJ,KAAK,CAAC;EACjBG,MAAM,CAACH,KAAK,CAACR,MAAM,CAAC,GAAG,IAAI;EAE3B,MAAMa,IAAI,GAAG,IAAIC,QAAQ,CAACH,MAAM,CAACI,MAAM,CAAC;EACxCF,IAAI,CAACG,SAAS,CAACN,YAAY,GAAG,CAAC,EAAEO,IAAI,CAACC,KAAK,CAACT,SAAS,GAAG,WAAW,CAAC,EAAE,KAAK,CAAC;EAC5EI,IAAI,CAACG,SAAS,CAACN,YAAY,GAAG,CAAC,EAAED,SAAS,KAAK,CAAC,EAAE,KAAK,CAAC;EAExD,MAAMU,CAAC,GAAG,IAAI3B,WAAW,CAAC,CACzB,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,CAC9F,CAAC;EACF,MAAM4B,CAAC,GAAG,IAAI5B,WAAW,CAAC,EAAE,CAAC;EAE7B,KAAK,IAAI6B,MAAM,GAAG,CAAC,EAAEA,MAAM,GAAGX,YAAY,EAAEW,MAAM,IAAI,EAAE,EAAE;IACzD,KAAK,IAAItB,CAAC,GAAG,CAAC,EAAEA,CAAC,GAAG,EAAE,EAAEA,CAAC,IAAI,CAAC,EAAE;MAC/BqB,CAAC,CAACrB,CAAC,CAAC,GAAGc,IAAI,CAACS,SAAS,CAACD,MAAM,GAAGtB,CAAC,GAAG,CAAC,EAAE,KAAK,CAAC;IAC7C;IACA,KAAK,IAAIA,CAAC,GAAG,EAAE,EAAEA,CAAC,GAAG,EAAE,EAAEA,CAAC,IAAI,CAAC,EAAE;MAChC,MAAMwB,EAAE,GAAG9B,IAAI,CAAC2B,CAAC,CAACrB,CAAC,GAAG,EAAE,CAAC,EAAG,CAAC,CAAC,GAAGN,IAAI,CAAC2B,CAAC,CAACrB,CAAC,GAAG,EAAE,CAAC,EAAG,EAAE,CAAC,GAAIqB,CAAC,CAACrB,CAAC,GAAG,EAAE,CAAC,KAAM,CAAE;MAC1E,MAAMyB,EAAE,GAAG/B,IAAI,CAAC2B,CAAC,CAACrB,CAAC,GAAG,CAAC,CAAC,EAAG,EAAE,CAAC,GAAGN,IAAI,CAAC2B,CAAC,CAACrB,CAAC,GAAG,CAAC,CAAC,EAAG,EAAE,CAAC,GAAIqB,CAAC,CAACrB,CAAC,GAAG,CAAC,CAAC,KAAM,EAAG;MACzEqB,CAAC,CAACrB,CAAC,CAAC,GAAIqB,CAAC,CAACrB,CAAC,GAAG,EAAE,CAAC,GAAIwB,EAAE,GAAGH,CAAC,CAACrB,CAAC,GAAG,CAAC,CAAE,GAAGyB,EAAE,KAAM,CAAC;IAChD;IAEA,IAAI,CAACC,CAAC,EAAEC,CAAC,EAAEC,CAAC,EAAEC,CAAC,EAAEC,CAAC,EAAEC,CAAC,EAAEC,CAAC,EAAEC,EAAE,CAAC,GAAG,CAACb,CAAC,CAAC,CAAC,CAAC,EAAGA,CAAC,CAAC,CAAC,CAAC,EAAGA,CAAC,CAAC,CAAC,CAAC,EAAGA,CAAC,CAAC,CAAC,CAAC,EAAGA,CAAC,CAAC,CAAC,CAAC,EAAGA,CAAC,CAAC,CAAC,CAAC,EAAGA,CAAC,CAAC,CAAC,CAAC,EAAGA,CAAC,CAAC,CAAC,CAAC,CAAE;IAExF,KAAK,IAAIpB,CAAC,GAAG,CAAC,EAAEA,CAAC,GAAG,EAAE,EAAEA,CAAC,IAAI,CAAC,EAAE;MAC/B,MAAMkC,EAAE,GAAGxC,IAAI,CAACoC,CAAC,EAAE,CAAC,CAAC,GAAGpC,IAAI,CAACoC,CAAC,EAAE,EAAE,CAAC,GAAGpC,IAAI,CAACoC,CAAC,EAAE,EAAE,CAAC;MACjD,MAAMK,EAAE,GAAIL,CAAC,GAAGC,CAAC,GAAK,CAACD,CAAC,GAAGE,CAAE;MAC7B,MAAMI,KAAK,GAAIH,EAAE,GAAGC,EAAE,GAAGC,EAAE,GAAG3C,CAAC,CAACQ,CAAC,CAAE,GAAGqB,CAAC,CAACrB,CAAC,CAAE,KAAM,CAAC;MAClD,MAAMqC,EAAE,GAAG3C,IAAI,CAACgC,CAAC,EAAE,CAAC,CAAC,GAAGhC,IAAI,CAACgC,CAAC,EAAE,EAAE,CAAC,GAAGhC,IAAI,CAACgC,CAAC,EAAE,EAAE,CAAC;MACjD,MAAMY,GAAG,GAAIZ,CAAC,GAAGC,CAAC,GAAKD,CAAC,GAAGE,CAAE,GAAID,CAAC,GAAGC,CAAE;MACvC,MAAMW,KAAK,GAAIF,EAAE,GAAGC,GAAG,KAAM,CAAC;MAE9BL,EAAE,GAAGD,CAAC;MACNA,CAAC,GAAGD,CAAC;MACLA,CAAC,GAAGD,CAAC;MACLA,CAAC,GAAID,CAAC,GAAGO,KAAK,KAAM,CAAC;MACrBP,CAAC,GAAGD,CAAC;MACLA,CAAC,GAAGD,CAAC;MACLA,CAAC,GAAGD,CAAC;MACLA,CAAC,GAAIU,KAAK,GAAGG,KAAK,KAAM,CAAC;IAC1B;IAEAnB,CAAC,CAAC,CAAC,CAAC,GAAIA,CAAC,CAAC,CAAC,CAAC,GAAIM,CAAC,KAAM,CAAC;IACxBN,CAAC,CAAC,CAAC,CAAC,GAAIA,CAAC,CAAC,CAAC,CAAC,GAAIO,CAAC,KAAM,CAAC;IACxBP,CAAC,CAAC,CAAC,CAAC,GAAIA,CAAC,CAAC,CAAC,CAAC,GAAIQ,CAAC,KAAM,CAAC;IACxBR,CAAC,CAAC,CAAC,CAAC,GAAIA,CAAC,CAAC,CAAC,CAAC,GAAIS,CAAC,KAAM,CAAC;IACxBT,CAAC,CAAC,CAAC,CAAC,GAAIA,CAAC,CAAC,CAAC,CAAC,GAAIU,CAAC,KAAM,CAAC;IACxBV,CAAC,CAAC,CAAC,CAAC,GAAIA,CAAC,CAAC,CAAC,CAAC,GAAIW,CAAC,KAAM,CAAC;IACxBX,CAAC,CAAC,CAAC,CAAC,GAAIA,CAAC,CAAC,CAAC,CAAC,GAAIY,CAAC,KAAM,CAAC;IACxBZ,CAAC,CAAC,CAAC,CAAC,GAAIA,CAAC,CAAC,CAAC,CAAC,GAAIa,EAAE,KAAM,CAAC;EAC1B;EAEA,OAAOO,KAAK,CAAClC,IAAI,CAACc,CAAC,EAAEzB,KAAK,IAAIA,KAAK,CAAC8C,QAAQ,CAAC,EAAE,CAAC,CAACC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAACC,IAAI,CAAC,EAAE,CAAC;AAC5E","ignoreList":[]}

package/lib/module/scope/normalize.js

@@ -0,0 +1,67 @@
+"use strict";
+
+/**
+ * Scope descriptor normalization.
+ *
+ * The package normalizes and validates; it never repairs. A component it
+ * cannot represent safely is an error (FR-013), because silently sanitizing
+ * one is how two different descriptors end up sharing a directory — which
+ * would be a cross-scope leak dressed up as a convenience.
+ */
+
+/**
+ * Separates components in the canonical form.
+ *
+ * NUL rather than a printable character: a component containing the separator
+ * could forge another descriptor's canonical string, and every printable
+ * candidate occurs in legitimate identity data. Tenant names contain spaces,
+ * identifiers contain colons and slashes, emails contain "@" and ".". NUL
+ * occurs in none of them, so reserving it costs consumers nothing.
+ */
+export const COMPONENT_SEPARATOR = '\u0000';
+
+/**
+ * Control characters are rejected wholesale rather than only the separator.
+ * They have no place in an identity component, and they would be trouble in a
+ * log line or a diagnostic even where they could not forge a canonical
+ * string.
+ */
+// eslint-disable-next-line no-control-regex
+export const CONTROL_CHARACTER = /[\u0000-\u001f\u007f]/;
+export const MAX_COMPONENT_BYTES = 512;
+
+/** Fixed order, so the canonical form is stable across callers. */
+export const COMPONENT_ORDER = ['kind', 'id', 'tenant', 'app', 'environment', 'namespace'];
+export const SCOPE_KINDS = ['guest', 'identity', 'tenant', 'workspace', 'custom'];
+
+/**
+ * NFC, trimmed, case preserved.
+ *
+ * Case is preserved deliberately: the package does not know whether a
+ * consumer's identity system is case-sensitive, and folding case would merge
+ * two scopes the app considers distinct.
+ */
+export function normalizeComponent(value) {
+  return value.normalize('NFC').trim();
+}
+/** Normalize without validating. Callers must validate first. */
+export function normalizeDescriptor(descriptor) {
+  const components = {};
+  const parts = [];
+  for (const key of COMPONENT_ORDER) {
+    const raw = descriptor[key];
+    if (typeof raw !== 'string' || raw.length === 0) {
+      parts.push('');
+      continue;
+    }
+    const normalized = normalizeComponent(raw);
+    components[key] = normalized;
+    parts.push(normalized);
+  }
+  return {
+    kind: descriptor.kind,
+    components,
+    canonical: parts.join(COMPONENT_SEPARATOR)
+  };
+}
+//# sourceMappingURL=normalize.js.map

package/lib/module/scope/normalize.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["COMPONENT_SEPARATOR","CONTROL_CHARACTER","MAX_COMPONENT_BYTES","COMPONENT_ORDER","SCOPE_KINDS","normalizeComponent","value","normalize","trim","normalizeDescriptor","descriptor","components","parts","key","raw","length","push","normalized","kind","canonical","join"],"sourceRoot":"../../../src","sources":["scope/normalize.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAIA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMA,mBAAmB,GAAG,QAAQ;;AAE3C;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMC,iBAAiB,GAAG,uBAAuB;AAExD,OAAO,MAAMC,mBAAmB,GAAG,GAAG;;AAEtC;AACA,OAAO,MAAMC,eAAe,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,aAAa,EAAE,WAAW,CAAU;AAEnG,OAAO,MAAMC,WAAiC,GAAG,CAChD,OAAO,EACP,UAAU,EACV,QAAQ,EACR,WAAW,EACX,QAAQ,CACR;;AAED;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASC,kBAAkBA,CAACC,KAAa,EAAU;EACzD,OAAOA,KAAK,CAACC,SAAS,CAAC,KAAK,CAAC,CAACC,IAAI,CAAC,CAAC;AACrC;AAQA;AACA,OAAO,SAASC,mBAAmBA,CAACC,UAA2B,EAAmB;EACjF,MAAMC,UAAkC,GAAG,CAAC,CAAC;EAC7C,MAAMC,KAAe,GAAG,EAAE;EAE1B,KAAK,MAAMC,GAAG,IAAIV,eAAe,EAAE;IAClC,MAAMW,GAAG,GAAGJ,UAAU,CAACG,GAAG,CAA0B;IACpD,IAAI,OAAOC,GAAG,KAAK,QAAQ,IAAIA,GAAG,CAACC,MAAM,KAAK,CAAC,EAAE;MAChDH,KAAK,CAACI,IAAI,CAAC,EAAE,CAAC;MACd;IACD;IACA,MAAMC,UAAU,GAAGZ,kBAAkB,CAACS,GAAG,CAAC;IAC1CH,UAAU,CAACE,GAAG,CAAC,GAAGI,UAAU;IAC5BL,KAAK,CAACI,IAAI,CAACC,UAAU,CAAC;EACvB;EAEA,OAAO;IACNC,IAAI,EAAER,UAAU,CAACQ,IAAI;IACrBP,UAAU;IACVQ,SAAS,EAAEP,KAAK,CAACQ,IAAI,CAACpB,mBAAmB;EAC1C,CAAC;AACF","ignoreList":[]}

package/lib/module/scope/validate.js

@@ -0,0 +1,76 @@
+"use strict";
+
+/**
+ * Scope validation and resolution.
+ *
+ * Validate, never repair (FR-013). The package never invents, derives, or
+ * defaults an identity of its own (FR-008).
+ */
+
+import { DiagnosticCodes } from "../contract/errors.js";
+import { raise } from "../diagnostics/errors.js";
+import { sha256Hex, utf8ByteLength } from "./hash.js";
+import { COMPONENT_ORDER, CONTROL_CHARACTER, MAX_COMPONENT_BYTES, SCOPE_KINDS, normalizeComponent, normalizeDescriptor } from "./normalize.js";
+function invalid(reason) {
+  // The reason names the *component*, never its value — naming the value
+  // would put a scope component into an error, which FR-014 forbids.
+  raise(DiagnosticCodes.INVALID_SCOPE, {
+    message: reason
+  });
+}
+function validateComponent(key, raw) {
+  if (raw === undefined || raw === null) {
+    return;
+  }
+  if (typeof raw !== 'string') {
+    invalid(`scope component ${key} must be a string`);
+  }
+  const normalized = normalizeComponent(raw);
+  if (normalized.length === 0) {
+    invalid(`scope component ${key} is empty after normalization`);
+  }
+  if (CONTROL_CHARACTER.test(normalized)) {
+    invalid(`scope component ${key} contains a control character`);
+  }
+  if (utf8ByteLength(normalized) > MAX_COMPONENT_BYTES) {
+    invalid(`scope component ${key} exceeds the maximum length`);
+  }
+}
+export function validateDescriptor(descriptor) {
+  if (!descriptor || typeof descriptor !== 'object') {
+    invalid('scope descriptor is required');
+  }
+  if (!SCOPE_KINDS.includes(descriptor.kind)) {
+    invalid('scope kind is not recognised');
+  }
+
+  // Guest is the one kind with no identity, by design: an anonymous session
+  // still gets its own isolated scope rather than sharing a default.
+  if (descriptor.kind !== 'guest') {
+    const id = descriptor.id;
+    if (typeof id !== 'string' || normalizeComponent(id).length === 0) {
+      invalid('scope id is required for this kind');
+    }
+  }
+  for (const key of COMPONENT_ORDER) {
+    if (key === 'kind') {
+      continue;
+    }
+    validateComponent(key, descriptor[key]);
+  }
+}
+
+/**
+ * Deterministic: identical descriptors always resolve to the same scope, and
+ * descriptors differing in any component always resolve to different ones
+ * (FR-010).
+ */
+export function resolveScope(descriptor) {
+  validateDescriptor(descriptor);
+  const normalized = normalizeDescriptor(descriptor);
+  return {
+    key: sha256Hex(normalized.canonical),
+    kind: descriptor.kind
+  };
+}
+//# sourceMappingURL=validate.js.map

package/lib/module/scope/validate.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["DiagnosticCodes","raise","sha256Hex","utf8ByteLength","COMPONENT_ORDER","CONTROL_CHARACTER","MAX_COMPONENT_BYTES","SCOPE_KINDS","normalizeComponent","normalizeDescriptor","invalid","reason","INVALID_SCOPE","message","validateComponent","key","raw","undefined","normalized","length","test","validateDescriptor","descriptor","includes","kind","id","resolveScope","canonical"],"sourceRoot":"../../../src","sources":["scope/validate.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;;AAEA,SAASA,eAAe,QAAQ,uBAAoB;AAEpD,SAASC,KAAK,QAAQ,0BAAuB;AAC7C,SAASC,SAAS,EAAEC,cAAc,QAAQ,WAAQ;AAClD,SACCC,eAAe,EACfC,iBAAiB,EACjBC,mBAAmB,EACnBC,WAAW,EACXC,kBAAkB,EAClBC,mBAAmB,QACb,gBAAa;AAEpB,SAASC,OAAOA,CAACC,MAAc,EAAS;EACvC;EACA;EACAV,KAAK,CAACD,eAAe,CAACY,aAAa,EAAE;IAAEC,OAAO,EAAEF;EAAO,CAAC,CAAC;AAC1D;AAEA,SAASG,iBAAiBA,CAACC,GAAW,EAAEC,GAAY,EAAQ;EAC3D,IAAIA,GAAG,KAAKC,SAAS,IAAID,GAAG,KAAK,IAAI,EAAE;IACtC;EACD;EACA,IAAI,OAAOA,GAAG,KAAK,QAAQ,EAAE;IAC5BN,OAAO,CAAC,mBAAmBK,GAAG,mBAAmB,CAAC;EACnD;EACA,MAAMG,UAAU,GAAGV,kBAAkB,CAACQ,GAAG,CAAC;EAC1C,IAAIE,UAAU,CAACC,MAAM,KAAK,CAAC,EAAE;IAC5BT,OAAO,CAAC,mBAAmBK,GAAG,+BAA+B,CAAC;EAC/D;EACA,IAAIV,iBAAiB,CAACe,IAAI,CAACF,UAAU,CAAC,EAAE;IACvCR,OAAO,CAAC,mBAAmBK,GAAG,+BAA+B,CAAC;EAC/D;EACA,IAAIZ,cAAc,CAACe,UAAU,CAAC,GAAGZ,mBAAmB,EAAE;IACrDI,OAAO,CAAC,mBAAmBK,GAAG,6BAA6B,CAAC;EAC7D;AACD;AAEA,OAAO,SAASM,kBAAkBA,CAACC,UAA8C,EAAQ;EACxF,IAAI,CAACA,UAAU,IAAI,OAAOA,UAAU,KAAK,QAAQ,EAAE;IAClDZ,OAAO,CAAC,8BAA8B,CAAC;EACxC;EACA,IAAI,CAACH,WAAW,CAACgB,QAAQ,CAACD,UAAU,CAACE,IAAI,CAAC,EAAE;IAC3Cd,OAAO,CAAC,8BAA8B,CAAC;EACxC;;EAEA;EACA;EACA,IAAIY,UAAU,CAACE,IAAI,KAAK,OAAO,EAAE;IAChC,MAAMC,EAAE,GAAGH,UAAU,CAACG,EAAE;IACxB,IAAI,OAAOA,EAAE,KAAK,QAAQ,IAAIjB,kBAAkB,CAACiB,EAAE,CAAC,CAACN,MAAM,KAAK,CAAC,EAAE;MAClET,OAAO,CAAC,oCAAoC,CAAC;IAC9C;EACD;EAEA,KAAK,MAAMK,GAAG,IAAIX,eAAe,EAAE;IAClC,IAAIW,GAAG,KAAK,MAAM,EAAE;MACnB;IACD;IACAD,iBAAiB,CAACC,GAAG,EAAEO,UAAU,CAACP,GAAG,CAA0B,CAAC;EACjE;AACD;;AAEA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASW,YAAYA,CAACJ,UAA2B,EAAiB;EACxED,kBAAkB,CAACC,UAAU,CAAC;EAC9B,MAAMJ,UAAU,GAAGT,mBAAmB,CAACa,UAAU,CAAC;EAClD,OAAO;IACNP,GAAG,EAAEb,SAAS,CAACgB,UAAU,CAACS,SAAS,CAAC;IACpCH,IAAI,EAAEF,UAAU,CAACE;EAClB,CAAC;AACF","ignoreList":[]}

package/lib/module/sqlite/adapter.js

@@ -0,0 +1,27 @@
+"use strict";
+
+/**
+ * The on-device adapter.
+ *
+ * Deliberately a seam rather than an implementation. Everything it composes
+ * lives in `adapter/`, `migration/`, `artifacts/`, and this directory, so the
+ * in-memory adapter can be held to the same contract by the same conformance
+ * suite (FR-092) without either one being the "real" version the other
+ * approximates.
+ *
+ * Reached only through the lazy require in `adapter/index.ts`, so a consumer
+ * that runs the in-memory adapter in tests never loads the native peers.
+ */
+
+import { deleteDatabase, deleteScopeData, resetScope } from "../adapter/deletion.js";
+import { openSqliteDatabase } from "../adapter/lifecycle.js";
+export function createSqliteAdapter(options = {}) {
+  return {
+    name: 'sqlite',
+    open: config => openSqliteDatabase(config, options),
+    deleteScopeData,
+    deleteDatabase,
+    resetScope
+  };
+}
+//# sourceMappingURL=adapter.js.map

package/lib/module/sqlite/adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["deleteDatabase","deleteScopeData","resetScope","openSqliteDatabase","createSqliteAdapter","options","name","open","config"],"sourceRoot":"../../../src","sources":["sqlite/adapter.ts"],"mappings":";;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAGA,SAASA,cAAc,EAAEC,eAAe,EAAEC,UAAU,QAAQ,wBAAqB;AACjF,SAASC,kBAAkB,QAA0B,yBAAsB;AAE3E,OAAO,SAASC,mBAAmBA,CAACC,OAAoB,GAAG,CAAC,CAAC,EAAkB;EAC9E,OAAO;IACNC,IAAI,EAAE,QAAQ;IACdC,IAAI,EAAEC,MAAM,IAAIL,kBAAkB,CAACK,MAAM,EAAEH,OAAO,CAAC;IACnDJ,eAAe;IACfD,cAAc;IACdE;EACD,CAAC;AACF","ignoreList":[]}