@chipmobilesdk/rn-local-db 0.4.0 → 0.5.0

package/lib/commonjs/platform/backup-android-verify.js

@@ -0,0 +1,76 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.androidPosture = androidPosture;
+exports.coveragePathFor = coveragePathFor;
+exports.effectivePostureFor = effectivePostureFor;
+exports.isAndroid = isAndroid;
+var _reactNative = require("react-native");
+var _location = require("./location.js");
+/**
+ * Android backup posture: verified and reported, never enforced.
+ *
+ * Android decides backup participation from `android:dataExtractionRules` in
+ * the app's manifest. That is build-time and app-owned, and this package
+ * authors no native code, so it cannot contribute an entry and cannot change
+ * the answer at runtime (research.md R5).
+ *
+ * What it can do is check the one thing that silently breaks the documented
+ * fix: the rule the README tells an app to ship addresses the `file` domain,
+ * which is the app's `files/` directory. If the managed root did not land
+ * under that directory, the app can ship the XML exactly as documented and
+ * still have an unprotected database. That mismatch is detectable here, and
+ * an app learning it from this report is the whole point of FR-111 — the
+ * alternative is learning it from an incident.
+ */
+
+function isAndroid() {
+  return _reactNative.Platform.OS === 'android';
+}
+
+/** The `path` an app's exclusion rule must name for the root it actually got. */
+function coveragePathFor(layout) {
+  const root = (0, _location.normalizePath)(layout.root);
+  const marker = `/files/`;
+  const index = root.indexOf(marker);
+  if (index === -1) {
+    return null;
+  }
+  return root.slice(index + marker.length);
+}
+function androidPosture(layout, includeInPlatformBackup) {
+  const requested = includeInPlatformBackup ? 'included' : 'excluded';
+  const coverage = coveragePathFor(layout);
+  if (coverage === null) {
+    return {
+      requested,
+      // Not "excluded" and not "included": the package genuinely does not
+      // know, and saying either would be a claim it cannot support.
+      observed: 'unknown',
+      enforcedBy: 'app-manifest',
+      warning: 'The managed storage area is not under the Android file domain, so the ' + 'documented data_extraction_rules.xml entry will not cover it. Backup ' + 'posture cannot be honoured on this platform until the app supplies a ' + 'rule matching the actual storage location.'
+    };
+  }
+  return {
+    requested,
+    observed: 'unknown',
+    enforcedBy: 'app-manifest',
+    warning: `Android backup participation is declared by the app, not this package. ` + `Confirm android/app/src/main/res/xml/data_extraction_rules.xml contains an ` + `entry for domain="file" path="${_location.MANAGED_ROOT_NAME}/" and that ` + `AndroidManifest.xml references it; the observed posture cannot be verified ` + `from JavaScript.`
+  };
+}
+
+/**
+ * The posture the handle reports (FR-111).
+ *
+ * Split by platform rather than smoothed over, because a consumer writing a
+ * privacy disclosure needs to know which of the two answers it is holding.
+ */
+function effectivePostureFor(layout, includeInPlatformBackup, iosPostureFor) {
+  if (isAndroid()) {
+    return androidPosture(layout, includeInPlatformBackup);
+  }
+  return iosPostureFor(includeInPlatformBackup);
+}
+//# sourceMappingURL=backup-android-verify.js.map

package/lib/commonjs/platform/backup-android-verify.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_reactNative","require","_location","isAndroid","Platform","OS","coveragePathFor","layout","root","normalizePath","marker","index","indexOf","slice","length","androidPosture","includeInPlatformBackup","requested","coverage","observed","enforcedBy","warning","MANAGED_ROOT_NAME","effectivePostureFor","iosPostureFor"],"sourceRoot":"../../../src","sources":["platform/backup-android-verify.ts"],"mappings":";;;;;;;;;AAiBA,IAAAA,YAAA,GAAAC,OAAA;AAGA,IAAAC,SAAA,GAAAD,OAAA;AApBA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAOO,SAASE,SAASA,CAAA,EAAY;EACpC,OAAOC,qBAAQ,CAACC,EAAE,KAAK,SAAS;AACjC;;AAEA;AACO,SAASC,eAAeA,CAACC,MAAqB,EAAiB;EACrE,MAAMC,IAAI,GAAG,IAAAC,uBAAa,EAACF,MAAM,CAACC,IAAI,CAAC;EACvC,MAAME,MAAM,GAAG,SAAS;EACxB,MAAMC,KAAK,GAAGH,IAAI,CAACI,OAAO,CAACF,MAAM,CAAC;EAClC,IAAIC,KAAK,KAAK,CAAC,CAAC,EAAE;IACjB,OAAO,IAAI;EACZ;EACA,OAAOH,IAAI,CAACK,KAAK,CAACF,KAAK,GAAGD,MAAM,CAACI,MAAM,CAAC;AACzC;AAEO,SAASC,cAAcA,CAC7BR,MAAqB,EACrBS,uBAAgC,EACb;EACnB,MAAMC,SAAS,GAAGD,uBAAuB,GAAG,UAAU,GAAG,UAAU;EACnE,MAAME,QAAQ,GAAGZ,eAAe,CAACC,MAAM,CAAC;EAExC,IAAIW,QAAQ,KAAK,IAAI,EAAE;IACtB,OAAO;MACND,SAAS;MACT;MACA;MACAE,QAAQ,EAAE,SAAS;MACnBC,UAAU,EAAE,cAAc;MAC1BC,OAAO,EACN,wEAAwE,GACxE,uEAAuE,GACvE,uEAAuE,GACvE;IACF,CAAC;EACF;EAEA,OAAO;IACNJ,SAAS;IACTE,QAAQ,EAAE,SAAS;IACnBC,UAAU,EAAE,cAAc;IAC1BC,OAAO,EACN,yEAAyE,GACzE,6EAA6E,GAC7E,iCAAiCC,2BAAiB,cAAc,GAChE,6EAA6E,GAC7E;EACF,CAAC;AACF;;AAEA;AACA;AACA;AACA;AACA;AACA;AACO,SAASC,mBAAmBA,CAClChB,MAAqB,EACrBS,uBAAgC,EAChCQ,aAAqD,EAClC;EACnB,IAAIrB,SAAS,CAAC,CAAC,EAAE;IAChB,OAAOY,cAAc,CAACR,MAAM,EAAES,uBAAuB,CAAC;EACvD;EACA,OAAOQ,aAAa,CAACR,uBAAuB,CAAC;AAC9C","ignoreList":[]}

package/lib/commonjs/platform/backup-ios.js

@@ -0,0 +1,50 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.ensureManagedRoot = ensureManagedRoot;
+exports.iosPosture = iosPosture;
+exports.isIos = isIos;
+var _reactNative = require("react-native");
+var _fs = require("./fs.js");
+/**
+ * iOS backup exclusion.
+ *
+ * `NSURLIsExcludedFromBackupKey` is set on the managed root at creation, and
+ * the attribute is inherited by everything beneath it — so one call covers
+ * the catalog, every scope database, and every artifact, including ones
+ * created years later. Setting it per file would leave a window in which a
+ * freshly written artifact is backed up before the attribute lands.
+ *
+ * This is the half of FR-109 the package can actually enforce. Android is
+ * manifest-owned; see backup-android-verify.ts and research.md R5.
+ */
+
+function isIos() {
+  return _reactNative.Platform.OS === 'ios';
+}
+
+/**
+ * Create the managed root with the exclusion attribute already on it.
+ *
+ * Idempotent: `mkdir` on an existing directory re-applies the attribute,
+ * which matters because an app that flips the posture between launches must
+ * get the new one without a reinstall.
+ */
+async function ensureManagedRoot(layout, includeInPlatformBackup) {
+  await (0, _fs.fileSystem)().mkdir(layout.root, isIos() ? {
+    NSURLIsExcludedFromBackupKey: !includeInPlatformBackup
+  } : {});
+}
+
+/** What the package can state about iOS, where it enforces rather than reports. */
+function iosPosture(includeInPlatformBackup) {
+  const requested = includeInPlatformBackup ? 'included' : 'excluded';
+  return {
+    requested,
+    observed: requested,
+    enforcedBy: 'package'
+  };
+}
+//# sourceMappingURL=backup-ios.js.map

package/lib/commonjs/platform/backup-ios.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_reactNative","require","_fs","isIos","Platform","OS","ensureManagedRoot","layout","includeInPlatformBackup","fileSystem","mkdir","root","NSURLIsExcludedFromBackupKey","iosPosture","requested","observed","enforcedBy"],"sourceRoot":"../../../src","sources":["platform/backup-ios.ts"],"mappings":";;;;;;;;AAaA,IAAAA,YAAA,GAAAC,OAAA;AAGA,IAAAC,GAAA,GAAAD,OAAA;AAhBA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAQO,SAASE,KAAKA,CAAA,EAAY;EAChC,OAAOC,qBAAQ,CAACC,EAAE,KAAK,KAAK;AAC7B;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,eAAeC,iBAAiBA,CACtCC,MAAqB,EACrBC,uBAAgC,EAChB;EAChB,MAAM,IAAAC,cAAU,EAAC,CAAC,CAACC,KAAK,CACvBH,MAAM,CAACI,IAAI,EACXR,KAAK,CAAC,CAAC,GAAG;IAAES,4BAA4B,EAAE,CAACJ;EAAwB,CAAC,GAAG,CAAC,CACzE,CAAC;AACF;;AAEA;AACO,SAASK,UAAUA,CAACL,uBAAgC,EAAoB;EAC9E,MAAMM,SAAS,GAAGN,uBAAuB,GAAG,UAAU,GAAG,UAAU;EACnE,OAAO;IACNM,SAAS;IACTC,QAAQ,EAAED,SAAS;IACnBE,UAAU,EAAE;EACb,CAAC;AACF","ignoreList":[]}

package/lib/commonjs/platform/bytes.js

@@ -0,0 +1,158 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.asciiAt = asciiAt;
+exports.base64ToBytes = base64ToBytes;
+exports.bytesToBase64 = bytesToBase64;
+exports.concatBytes = concatBytes;
+exports.host = void 0;
+exports.utf8Bytes = utf8Bytes;
+exports.utf8String = utf8String;
+/**
+ * Byte handling without Node's `Buffer`.
+ *
+ * Hermes has no global `Buffer`, and `react-native-quick-crypto` installs one
+ * only when the app calls its `install()` — which nothing in this package or its
+ * documentation asked for. Until 0.2.0 attachment writes and reads used the
+ * global anyway, so on a device every attachment operation threw. Everything
+ * here is plain `Uint8Array` and a self-contained base64 codec, identical on
+ * Hermes and in Node.
+ */
+
+const ALPHABET = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/';
+const LOOKUP = (() => {
+  const table = new Int16Array(128).fill(-1);
+  for (let index = 0; index < ALPHABET.length; index += 1) {
+    table[ALPHABET.charCodeAt(index)] = index;
+  }
+  // The URL-safe variants decode too, since some file APIs return them.
+  table['-'.charCodeAt(0)] = 62;
+  table['_'.charCodeAt(0)] = 63;
+  return table;
+})();
+
+/**
+ * Codecs Hermes and Node provide but React Native's type declarations omit.
+ * Read through this view so the package type-checks without DOM or Node types.
+ */
+
+const host = exports.host = globalThis;
+
+/* eslint-disable no-bitwise -- base64 is bit packing; there is no clearer way to write it. */
+
+/** Characters per `String.fromCharCode` call; large spreads overflow the stack. */
+const CHUNK = 0x8000;
+function base64ToBytes(base64) {
+  if (host.atob) {
+    let binary;
+    try {
+      binary = host.atob(base64.replace(/-/g, '+').replace(/_/g, '/'));
+    } catch {
+      // atob is strict where Buffer was lenient; fall through to the
+      // tolerant decoder rather than turn stray characters into a crash.
+    }
+    if (binary !== undefined) {
+      const bytes = new Uint8Array(binary.length);
+      for (let index = 0; index < binary.length; index += 1) {
+        bytes[index] = binary.charCodeAt(index);
+      }
+      return bytes;
+    }
+  }
+  // Decode directly, skipping padding and anything outside the alphabet.
+  const bytes = new Uint8Array(Math.ceil(base64.length * 3 / 4));
+  let out = 0;
+  let buffer = 0;
+  let bits = 0;
+  for (let index = 0; index < base64.length; index += 1) {
+    const code = base64.charCodeAt(index);
+    const value = code < 128 ? LOOKUP[code] : -1;
+    if (value < 0) continue;
+    buffer = buffer << 6 | value;
+    bits += 6;
+    if (bits >= 8) {
+      bits -= 8;
+      bytes[out++] = buffer >> bits & 0xff;
+    }
+  }
+  return bytes.subarray(0, out);
+}
+function bytesToBase64(bytes) {
+  if (host.btoa) {
+    const parts = [];
+    for (let index = 0; index < bytes.length; index += CHUNK) {
+      parts.push(String.fromCharCode(...bytes.subarray(index, index + CHUNK)));
+    }
+    return host.btoa(parts.join(''));
+  }
+  const parts = [];
+  for (let start = 0; start < bytes.length; start += CHUNK * 3) {
+    let piece = '';
+    const end = Math.min(bytes.length, start + CHUNK * 3);
+    let index = start;
+    for (; index + 2 < end; index += 3) {
+      const triple = bytes[index] << 16 | bytes[index + 1] << 8 | bytes[index + 2];
+      piece += ALPHABET[triple >> 18] + ALPHABET[triple >> 12 & 63] + ALPHABET[triple >> 6 & 63] + ALPHABET[triple & 63];
+    }
+    const remaining = end - index;
+    if (remaining === 1) {
+      const value = bytes[index];
+      piece += `${ALPHABET[value >> 2]}${ALPHABET[(value & 3) << 4]}==`;
+    } else if (remaining === 2) {
+      const value = bytes[index] << 8 | bytes[index + 1];
+      piece += `${ALPHABET[value >> 10]}${ALPHABET[value >> 4 & 63]}${ALPHABET[(value & 15) << 2]}=`;
+    }
+    parts.push(piece);
+  }
+  return parts.join('');
+}
+
+/** UTF-8 encoding. `TextEncoder` is in Hermes and Node; the loop is the fallback. */
+function utf8Bytes(value) {
+  if (host.TextEncoder) {
+    return new host.TextEncoder().encode(value);
+  }
+  const encoded = unescape(encodeURIComponent(value));
+  const bytes = new Uint8Array(encoded.length);
+  for (let index = 0; index < encoded.length; index += 1) {
+    bytes[index] = encoded.charCodeAt(index);
+  }
+  return bytes;
+}
+
+/** UTF-8 decoding, the inverse of `utf8Bytes`. */
+function utf8String(bytes) {
+  if (host.TextDecoder) {
+    return new host.TextDecoder().decode(bytes);
+  }
+  let binary = '';
+  for (const byte of bytes) {
+    binary += String.fromCharCode(byte);
+  }
+  return decodeURIComponent(escape(binary));
+}
+
+/* eslint-enable no-bitwise */
+
+function concatBytes(parts) {
+  const total = parts.reduce((sum, part) => sum + part.length, 0);
+  const joined = new Uint8Array(total);
+  let offset = 0;
+  for (const part of parts) {
+    joined.set(part, offset);
+    offset += part.length;
+  }
+  return joined;
+}
+
+/** The ASCII text of `length` bytes from `start`, for magic numbers. */
+function asciiAt(bytes, start, length) {
+  let text = '';
+  for (let index = start; index < start + length && index < bytes.length; index += 1) {
+    text += String.fromCharCode(bytes[index]);
+  }
+  return text;
+}
+//# sourceMappingURL=bytes.js.map

package/lib/commonjs/platform/bytes.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["ALPHABET","LOOKUP","table","Int16Array","fill","index","length","charCodeAt","host","exports","globalThis","CHUNK","base64ToBytes","base64","atob","binary","replace","undefined","bytes","Uint8Array","Math","ceil","out","buffer","bits","code","value","subarray","bytesToBase64","btoa","parts","push","String","fromCharCode","join","start","piece","end","min","triple","remaining","utf8Bytes","TextEncoder","encode","encoded","unescape","encodeURIComponent","utf8String","TextDecoder","decode","byte","decodeURIComponent","escape","concatBytes","total","reduce","sum","part","joined","offset","set","asciiAt","text"],"sourceRoot":"../../../src","sources":["platform/bytes.ts"],"mappings":";;;;;;;;;;;;AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAEA,MAAMA,QAAQ,GAAG,kEAAkE;AACnF,MAAMC,MAAM,GAAG,CAAC,MAAM;EACrB,MAAMC,KAAK,GAAG,IAAIC,UAAU,CAAC,GAAG,CAAC,CAACC,IAAI,CAAC,CAAC,CAAC,CAAC;EAC1C,KAAK,IAAIC,KAAK,GAAG,CAAC,EAAEA,KAAK,GAAGL,QAAQ,CAACM,MAAM,EAAED,KAAK,IAAI,CAAC,EAAE;IACxDH,KAAK,CAACF,QAAQ,CAACO,UAAU,CAACF,KAAK,CAAC,CAAC,GAAGA,KAAK;EAC1C;EACA;EACAH,KAAK,CAAC,GAAG,CAACK,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE;EAC7BL,KAAK,CAAC,GAAG,CAACK,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE;EAC7B,OAAOL,KAAK;AACb,CAAC,EAAE,CAAC;;AAEJ;AACA;AACA;AACA;;AAQO,MAAMM,IAAI,GAAAC,OAAA,CAAAD,IAAA,GAAGE,UAAmC;;AAEvD;;AAEA;AACA,MAAMC,KAAK,GAAG,MAAM;AAEb,SAASC,aAAaA,CAACC,MAAc,EAAc;EACzD,IAAIL,IAAI,CAACM,IAAI,EAAE;IACd,IAAIC,MAA0B;IAC9B,IAAI;MACHA,MAAM,GAAGP,IAAI,CAACM,IAAI,CAACD,MAAM,CAACG,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAACA,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;IACjE,CAAC,CAAC,MAAM;MACP;MACA;IAAA;IAED,IAAID,MAAM,KAAKE,SAAS,EAAE;MACzB,MAAMC,KAAK,GAAG,IAAIC,UAAU,CAACJ,MAAM,CAACT,MAAM,CAAC;MAC3C,KAAK,IAAID,KAAK,GAAG,CAAC,EAAEA,KAAK,GAAGU,MAAM,CAACT,MAAM,EAAED,KAAK,IAAI,CAAC,EAAE;QACtDa,KAAK,CAACb,KAAK,CAAC,GAAGU,MAAM,CAACR,UAAU,CAACF,KAAK,CAAC;MACxC;MACA,OAAOa,KAAK;IACb;EACD;EACA;EACA,MAAMA,KAAK,GAAG,IAAIC,UAAU,CAACC,IAAI,CAACC,IAAI,CAAER,MAAM,CAACP,MAAM,GAAG,CAAC,GAAI,CAAC,CAAC,CAAC;EAChE,IAAIgB,GAAG,GAAG,CAAC;EACX,IAAIC,MAAM,GAAG,CAAC;EACd,IAAIC,IAAI,GAAG,CAAC;EACZ,KAAK,IAAInB,KAAK,GAAG,CAAC,EAAEA,KAAK,GAAGQ,MAAM,CAACP,MAAM,EAAED,KAAK,IAAI,CAAC,EAAE;IACtD,MAAMoB,IAAI,GAAGZ,MAAM,CAACN,UAAU,CAACF,KAAK,CAAC;IACrC,MAAMqB,KAAK,GAAGD,IAAI,GAAG,GAAG,GAAGxB,MAAM,CAACwB,IAAI,CAAC,GAAI,CAAC,CAAC;IAC7C,IAAIC,KAAK,GAAG,CAAC,EAAE;IACfH,MAAM,GAAIA,MAAM,IAAI,CAAC,GAAIG,KAAK;IAC9BF,IAAI,IAAI,CAAC;IACT,IAAIA,IAAI,IAAI,CAAC,EAAE;MACdA,IAAI,IAAI,CAAC;MACTN,KAAK,CAACI,GAAG,EAAE,CAAC,GAAIC,MAAM,IAAIC,IAAI,GAAI,IAAI;IACvC;EACD;EACA,OAAON,KAAK,CAACS,QAAQ,CAAC,CAAC,EAAEL,GAAG,CAAC;AAC9B;AAEO,SAASM,aAAaA,CAACV,KAAiB,EAAU;EACxD,IAAIV,IAAI,CAACqB,IAAI,EAAE;IACd,MAAMC,KAAe,GAAG,EAAE;IAC1B,KAAK,IAAIzB,KAAK,GAAG,CAAC,EAAEA,KAAK,GAAGa,KAAK,CAACZ,MAAM,EAAED,KAAK,IAAIM,KAAK,EAAE;MACzDmB,KAAK,CAACC,IAAI,CAACC,MAAM,CAACC,YAAY,CAAC,GAAGf,KAAK,CAACS,QAAQ,CAACtB,KAAK,EAAEA,KAAK,GAAGM,KAAK,CAAC,CAAC,CAAC;IACzE;IACA,OAAOH,IAAI,CAACqB,IAAI,CAACC,KAAK,CAACI,IAAI,CAAC,EAAE,CAAC,CAAC;EACjC;EACA,MAAMJ,KAAe,GAAG,EAAE;EAC1B,KAAK,IAAIK,KAAK,GAAG,CAAC,EAAEA,KAAK,GAAGjB,KAAK,CAACZ,MAAM,EAAE6B,KAAK,IAAIxB,KAAK,GAAG,CAAC,EAAE;IAC7D,IAAIyB,KAAK,GAAG,EAAE;IACd,MAAMC,GAAG,GAAGjB,IAAI,CAACkB,GAAG,CAACpB,KAAK,CAACZ,MAAM,EAAE6B,KAAK,GAAGxB,KAAK,GAAG,CAAC,CAAC;IACrD,IAAIN,KAAK,GAAG8B,KAAK;IACjB,OAAO9B,KAAK,GAAG,CAAC,GAAGgC,GAAG,EAAEhC,KAAK,IAAI,CAAC,EAAE;MACnC,MAAMkC,MAAM,GAAIrB,KAAK,CAACb,KAAK,CAAC,IAAK,EAAE,GAAKa,KAAK,CAACb,KAAK,GAAG,CAAC,CAAC,IAAK,CAAE,GAAGa,KAAK,CAACb,KAAK,GAAG,CAAC,CAAE;MACnF+B,KAAK,IACJpC,QAAQ,CAACuC,MAAM,IAAI,EAAE,CAAC,GACtBvC,QAAQ,CAAEuC,MAAM,IAAI,EAAE,GAAI,EAAE,CAAE,GAC9BvC,QAAQ,CAAEuC,MAAM,IAAI,CAAC,GAAI,EAAE,CAAE,GAC7BvC,QAAQ,CAACuC,MAAM,GAAG,EAAE,CAAE;IACxB;IACA,MAAMC,SAAS,GAAGH,GAAG,GAAGhC,KAAK;IAC7B,IAAImC,SAAS,KAAK,CAAC,EAAE;MACpB,MAAMd,KAAK,GAAGR,KAAK,CAACb,KAAK,CAAE;MAC3B+B,KAAK,IAAI,GAAGpC,QAAQ,CAAC0B,KAAK,IAAI,CAAC,CAAC,GAAG1B,QAAQ,CAAC,CAAC0B,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI;IAClE,CAAC,MAAM,IAAIc,SAAS,KAAK,CAAC,EAAE;MAC3B,MAAMd,KAAK,GAAIR,KAAK,CAACb,KAAK,CAAC,IAAK,CAAC,GAAIa,KAAK,CAACb,KAAK,GAAG,CAAC,CAAE;MACtD+B,KAAK,IAAI,GAAGpC,QAAQ,CAAC0B,KAAK,IAAI,EAAE,CAAC,GAAG1B,QAAQ,CAAE0B,KAAK,IAAI,CAAC,GAAI,EAAE,CAAC,GAAG1B,QAAQ,CAAC,CAAC0B,KAAK,GAAG,EAAE,KAAK,CAAC,CAAC,GAAG;IACjG;IACAI,KAAK,CAACC,IAAI,CAACK,KAAK,CAAC;EAClB;EACA,OAAON,KAAK,CAACI,IAAI,CAAC,EAAE,CAAC;AACtB;;AAEA;AACO,SAASO,SAASA,CAACf,KAAa,EAAc;EACpD,IAAIlB,IAAI,CAACkC,WAAW,EAAE;IACrB,OAAO,IAAIlC,IAAI,CAACkC,WAAW,CAAC,CAAC,CAACC,MAAM,CAACjB,KAAK,CAAC;EAC5C;EACA,MAAMkB,OAAO,GAAGC,QAAQ,CAACC,kBAAkB,CAACpB,KAAK,CAAC,CAAC;EACnD,MAAMR,KAAK,GAAG,IAAIC,UAAU,CAACyB,OAAO,CAACtC,MAAM,CAAC;EAC5C,KAAK,IAAID,KAAK,GAAG,CAAC,EAAEA,KAAK,GAAGuC,OAAO,CAACtC,MAAM,EAAED,KAAK,IAAI,CAAC,EAAE;IACvDa,KAAK,CAACb,KAAK,CAAC,GAAGuC,OAAO,CAACrC,UAAU,CAACF,KAAK,CAAC;EACzC;EACA,OAAOa,KAAK;AACb;;AAEA;AACO,SAAS6B,UAAUA,CAAC7B,KAAiB,EAAU;EACrD,IAAIV,IAAI,CAACwC,WAAW,EAAE;IACrB,OAAO,IAAIxC,IAAI,CAACwC,WAAW,CAAC,CAAC,CAACC,MAAM,CAAC/B,KAAK,CAAC;EAC5C;EACA,IAAIH,MAAM,GAAG,EAAE;EACf,KAAK,MAAMmC,IAAI,IAAIhC,KAAK,EAAE;IACzBH,MAAM,IAAIiB,MAAM,CAACC,YAAY,CAACiB,IAAI,CAAC;EACpC;EACA,OAAOC,kBAAkB,CAACC,MAAM,CAACrC,MAAM,CAAC,CAAC;AAC1C;;AAEA;;AAEO,SAASsC,WAAWA,CAACvB,KAA4B,EAAc;EACrE,MAAMwB,KAAK,GAAGxB,KAAK,CAACyB,MAAM,CAAC,CAACC,GAAG,EAAEC,IAAI,KAAKD,GAAG,GAAGC,IAAI,CAACnD,MAAM,EAAE,CAAC,CAAC;EAC/D,MAAMoD,MAAM,GAAG,IAAIvC,UAAU,CAACmC,KAAK,CAAC;EACpC,IAAIK,MAAM,GAAG,CAAC;EACd,KAAK,MAAMF,IAAI,IAAI3B,KAAK,EAAE;IACzB4B,MAAM,CAACE,GAAG,CAACH,IAAI,EAAEE,MAAM,CAAC;IACxBA,MAAM,IAAIF,IAAI,CAACnD,MAAM;EACtB;EACA,OAAOoD,MAAM;AACd;;AAEA;AACO,SAASG,OAAOA,CAAC3C,KAAiB,EAAEiB,KAAa,EAAE7B,MAAc,EAAU;EACjF,IAAIwD,IAAI,GAAG,EAAE;EACb,KAAK,IAAIzD,KAAK,GAAG8B,KAAK,EAAE9B,KAAK,GAAG8B,KAAK,GAAG7B,MAAM,IAAID,KAAK,GAAGa,KAAK,CAACZ,MAAM,EAAED,KAAK,IAAI,CAAC,EAAE;IACnFyD,IAAI,IAAI9B,MAAM,CAACC,YAAY,CAACf,KAAK,CAACb,KAAK,CAAE,CAAC;EAC3C;EACA,OAAOyD,IAAI;AACZ","ignoreList":[]}

package/lib/commonjs/platform/fs.js

@@ -0,0 +1,59 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.fileSystem = fileSystem;
+exports.removeIfPresent = removeIfPresent;
+exports.setFileSystem = setFileSystem;
+var _rnCore = require("@chipmobilesdk/rn-core");
+var _errors = require("../contract/errors.js");
+var _errors2 = require("../diagnostics/errors.js");
+/**
+ * The filesystem peer, behind one lazy accessor.
+ *
+ * Required lazily for the same reason the engine is: a consuming app that
+ * only ever runs the in-memory adapter in tests must not have to install a
+ * native module to import this package. Confining the require to `platform/`
+ * also keeps the native surface four directories wide, which is the layering
+ * rule the ESLint config enforces.
+ */
+
+/**
+ * Only what the package actually uses. The peer's upload and download
+ * helpers are deliberately absent from this type: the package must never
+ * make a network request (FR-084, SC-016), and a surface that cannot express
+ * one is a stronger guarantee than a rule that says not to.
+ */
+
+/** Loaded on first use (rn-core's lazy peer); a missing peer is `STORAGE_ACCESS`. */
+const fs = (0, _rnCore.lazyPeer)('@dr.pogodin/react-native-fs', () => {
+  // Inside `try`, so Metro bundles an app that leaves this optional peer out.
+  try {
+    return require('@dr.pogodin/react-native-fs');
+  } catch (cause) {
+    throw cause;
+  }
+});
+
+/** Swap the peer. Tests and the demo app's in-memory mode only; `null` restores it. */
+function setFileSystem(module) {
+  fs.override(module ?? undefined);
+}
+function fileSystem() {
+  return fs.require((_peer, cause) => new _errors2.StorageError(_errors.DiagnosticCodes.STORAGE_ACCESS, {
+    message: 'filesystem peer is not installed',
+    cause
+  }));
+}
+
+/** Remove a path, treating "already gone" as success (FR-062). */
+async function removeIfPresent(path) {
+  try {
+    await fileSystem().unlink(path);
+    return true;
+  } catch {
+    return false;
+  }
+}
+//# sourceMappingURL=fs.js.map

package/lib/commonjs/platform/fs.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_rnCore","require","_errors","_errors2","fs","lazyPeer","cause","setFileSystem","module","override","undefined","fileSystem","_peer","StorageError","DiagnosticCodes","STORAGE_ACCESS","message","removeIfPresent","path","unlink"],"sourceRoot":"../../../src","sources":["platform/fs.ts"],"mappings":";;;;;;;;AAUA,IAAAA,OAAA,GAAAC,OAAA;AAEA,IAAAC,OAAA,GAAAD,OAAA;AACA,IAAAE,QAAA,GAAAF,OAAA;AAbA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAoBA;AACA;AACA;AACA;AACA;AACA;;AAiBA;AACA,MAAMG,EAAE,GAAG,IAAAC,gBAAQ,EAAC,6BAA6B,EAAE,MAAM;EACxD;EACA,IAAI;IACH,OAAOJ,OAAO,CAAC,6BAA6B,CAAC;EAC9C,CAAC,CAAC,OAAOK,KAAK,EAAE;IACf,MAAMA,KAAK;EACZ;AACD,CAAC,CAAC;;AAEF;AACO,SAASC,aAAaA,CAACC,MAAyB,EAAQ;EAC9DJ,EAAE,CAACK,QAAQ,CAACD,MAAM,IAAIE,SAAS,CAAC;AACjC;AAEO,SAASC,UAAUA,CAAA,EAAe;EACxC,OAAOP,EAAE,CAACH,OAAO,CAChB,CAACW,KAAK,EAAEN,KAAK,KACZ,IAAIO,qBAAY,CAACC,uBAAe,CAACC,cAAc,EAAE;IAChDC,OAAO,EAAE,kCAAkC;IAC3CV;EACD,CAAC,CACH,CAAC;AACF;;AAEA;AACO,eAAeW,eAAeA,CAACC,IAAY,EAAoB;EACrE,IAAI;IACH,MAAMP,UAAU,CAAC,CAAC,CAACQ,MAAM,CAACD,IAAI,CAAC;IAC/B,OAAO,IAAI;EACZ,CAAC,CAAC,MAAM;IACP,OAAO,KAAK;EACb;AACD","ignoreList":[]}

package/lib/commonjs/platform/location.js

@@ -0,0 +1,129 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.SCOPES_DIR = exports.MANAGED_ROOT_NAME = exports.DATA_FILE = exports.CATALOG_FILE = exports.ARTIFACTS_DIR = void 0;
+exports.assertValidAttachmentId = assertValidAttachmentId;
+exports.assertWithinManagedArea = assertWithinManagedArea;
+exports.createLayout = createLayout;
+exports.layoutFor = layoutFor;
+exports.normalizePath = normalizePath;
+var _errors = require("../contract/errors.js");
+var _errors2 = require("../diagnostics/errors.js");
+var _fs = require("./fs.js");
+/**
+ * The managed storage area, and the single guard every filesystem call routes
+ * through.
+ *
+ * POL-011(b) flags media-and-files as a risk because this package deletes
+ * files from disk on cascade. The mitigation is that there is exactly one
+ * function that turns a caller's intent into a path, and it refuses anything
+ * outside the root. One choke point is what makes SC-013a's filesystem
+ * tracing pass reliably rather than usually.
+ */
+
+const MANAGED_ROOT_NAME = exports.MANAGED_ROOT_NAME = 'chipmobilesdk-localdb';
+const CATALOG_FILE = exports.CATALOG_FILE = 'catalog.db';
+const SCOPES_DIR = exports.SCOPES_DIR = 'scopes';
+const DATA_FILE = exports.DATA_FILE = 'data.db';
+const ARTIFACTS_DIR = exports.ARTIFACTS_DIR = 'artifacts';
+
+/** Normalize separators and collapse redundant segments. No `..` survives. */
+function normalizePath(path) {
+  const unified = path.replace(/\\/g, '/');
+  const segments = [];
+  for (const segment of unified.split('/')) {
+    if (segment === '' || segment === '.') {
+      continue;
+    }
+    if (segment === '..') {
+      segments.pop();
+      continue;
+    }
+    segments.push(segment);
+  }
+  const prefix = unified.startsWith('/') ? '/' : '';
+  return prefix + segments.join('/');
+}
+const SCOPE_KEY = /^[0-9a-f]{64}$/;
+const ARTIFACT_ID = /^[A-Za-z0-9._-]{1,128}$/;
+// `.` and `..` are made entirely of permitted characters and are the two that
+// matter: `artifacts/..` resolves to the scope directory itself, still inside
+// the managed root, so the boundary guard would wave it through and a cascade
+// would unlink the whole scope. A leading dot is refused with them, since no
+// attachment id needs one and hidden files are the package's own.
+const DOT_PREFIXED = /^\./;
+
+/**
+ * An attachment id must be a safe single path segment.
+ *
+ * Shared by both adapters rather than left to the one that touches a
+ * filesystem. The in-memory adapter has no paths to escape, but a consumer
+ * whose tests accept `../../etc/passwd` and whose device build refuses it has
+ * a test suite that stops predicting the device — which is the one thing the
+ * adapter exists to avoid (FR-096).
+ */
+function assertValidAttachmentId(attachmentId) {
+  if (!ARTIFACT_ID.test(attachmentId) || DOT_PREFIXED.test(attachmentId)) {
+    (0, _errors2.raise)(_errors.DiagnosticCodes.ATTACHMENT_OUT_OF_BOUNDS, {
+      message: 'attachment id is not a valid path segment'
+    });
+  }
+}
+function createLayout(documentDirectory, databaseName) {
+  const root = normalizePath(`${documentDirectory}/${MANAGED_ROOT_NAME}/${databaseName}`);
+  const scopePath = scopeKey => {
+    // The scope key is our own SHA-256 output. Validating its shape here
+    // means a caller cannot smuggle a traversal through it even if some
+    // future path reaches this function with unvalidated input.
+    if (!SCOPE_KEY.test(scopeKey)) {
+      (0, _errors2.raise)(_errors.DiagnosticCodes.ATTACHMENT_OUT_OF_BOUNDS, {
+        message: 'scope key is not a valid digest'
+      });
+    }
+    return `${root}/${SCOPES_DIR}/${scopeKey}`;
+  };
+  return {
+    root,
+    catalogPath: `${root}/${CATALOG_FILE}`,
+    scopePath,
+    scopeDataPath: scopeKey => `${scopePath(scopeKey)}/${DATA_FILE}`,
+    scopeArtifactsPath: scopeKey => `${scopePath(scopeKey)}/${ARTIFACTS_DIR}`,
+    artifactPath: (scopeKey, attachmentId) => {
+      assertValidAttachmentId(attachmentId);
+      return `${scopePath(scopeKey)}/${ARTIFACTS_DIR}/${attachmentId}`;
+    }
+  };
+}
+
+/**
+ * The layout for one logical database, rooted at the app's private documents
+ * directory.
+ *
+ * Resolved lazily through the filesystem peer rather than captured at module
+ * load, so importing this package does not require the peer to be installed —
+ * a consumer running only the in-memory adapter never reaches this function.
+ */
+function layoutFor(databaseName) {
+  return createLayout((0, _fs.fileSystem)().DocumentDirectoryPath, databaseName);
+}
+
+/**
+ * The guard. Every read, write, and delete passes through this, and anything
+ * resolving outside the managed root is refused before it reaches the
+ * filesystem (FR-073, FR-073f).
+ */
+function assertWithinManagedArea(layout, candidate) {
+  const normalized = normalizePath(candidate);
+  const root = normalizePath(layout.root);
+  if (normalized !== root && !normalized.startsWith(`${root}/`)) {
+    (0, _errors2.raise)(_errors.DiagnosticCodes.ATTACHMENT_OUT_OF_BOUNDS, {
+      // The offending path is NOT reported: it may contain a scope
+      // component or a user-chosen filename.
+      message: 'path resolves outside the managed storage area'
+    });
+  }
+  return normalized;
+}
+//# sourceMappingURL=location.js.map

package/lib/commonjs/platform/location.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_errors","require","_errors2","_fs","MANAGED_ROOT_NAME","exports","CATALOG_FILE","SCOPES_DIR","DATA_FILE","ARTIFACTS_DIR","normalizePath","path","unified","replace","segments","segment","split","pop","push","prefix","startsWith","join","SCOPE_KEY","ARTIFACT_ID","DOT_PREFIXED","assertValidAttachmentId","attachmentId","test","raise","DiagnosticCodes","ATTACHMENT_OUT_OF_BOUNDS","message","createLayout","documentDirectory","databaseName","root","scopePath","scopeKey","catalogPath","scopeDataPath","scopeArtifactsPath","artifactPath","layoutFor","fileSystem","DocumentDirectoryPath","assertWithinManagedArea","layout","candidate","normalized"],"sourceRoot":"../../../src","sources":["platform/location.ts"],"mappings":";;;;;;;;;;;AAWA,IAAAA,OAAA,GAAAC,OAAA;AACA,IAAAC,QAAA,GAAAD,OAAA;AACA,IAAAE,GAAA,GAAAF,OAAA;AAbA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;AAMO,MAAMG,iBAAiB,GAAAC,OAAA,CAAAD,iBAAA,GAAG,uBAAuB;AACjD,MAAME,YAAY,GAAAD,OAAA,CAAAC,YAAA,GAAG,YAAY;AACjC,MAAMC,UAAU,GAAAF,OAAA,CAAAE,UAAA,GAAG,QAAQ;AAC3B,MAAMC,SAAS,GAAAH,OAAA,CAAAG,SAAA,GAAG,SAAS;AAC3B,MAAMC,aAAa,GAAAJ,OAAA,CAAAI,aAAA,GAAG,WAAW;;AAExC;AACO,SAASC,aAAaA,CAACC,IAAY,EAAU;EACnD,MAAMC,OAAO,GAAGD,IAAI,CAACE,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;EACxC,MAAMC,QAAkB,GAAG,EAAE;EAC7B,KAAK,MAAMC,OAAO,IAAIH,OAAO,CAACI,KAAK,CAAC,GAAG,CAAC,EAAE;IACzC,IAAID,OAAO,KAAK,EAAE,IAAIA,OAAO,KAAK,GAAG,EAAE;MACtC;IACD;IACA,IAAIA,OAAO,KAAK,IAAI,EAAE;MACrBD,QAAQ,CAACG,GAAG,CAAC,CAAC;MACd;IACD;IACAH,QAAQ,CAACI,IAAI,CAACH,OAAO,CAAC;EACvB;EACA,MAAMI,MAAM,GAAGP,OAAO,CAACQ,UAAU,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,EAAE;EACjD,OAAOD,MAAM,GAAGL,QAAQ,CAACO,IAAI,CAAC,GAAG,CAAC;AACnC;AAYA,MAAMC,SAAS,GAAG,gBAAgB;AAClC,MAAMC,WAAW,GAAG,yBAAyB;AAC7C;AACA;AACA;AACA;AACA;AACA,MAAMC,YAAY,GAAG,KAAK;;AAE1B;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASC,uBAAuBA,CAACC,YAAoB,EAAQ;EACnE,IAAI,CAACH,WAAW,CAACI,IAAI,CAACD,YAAY,CAAC,IAAIF,YAAY,CAACG,IAAI,CAACD,YAAY,CAAC,EAAE;IACvE,IAAAE,cAAK,EAACC,uBAAe,CAACC,wBAAwB,EAAE;MAC/CC,OAAO,EAAE;IACV,CAAC,CAAC;EACH;AACD;AAEO,SAASC,YAAYA,CAACC,iBAAyB,EAAEC,YAAoB,EAAiB;EAC5F,MAAMC,IAAI,GAAGzB,aAAa,CAAC,GAAGuB,iBAAiB,IAAI7B,iBAAiB,IAAI8B,YAAY,EAAE,CAAC;EAEvF,MAAME,SAAS,GAAIC,QAAgB,IAAa;IAC/C;IACA;IACA;IACA,IAAI,CAACf,SAAS,CAACK,IAAI,CAACU,QAAQ,CAAC,EAAE;MAC9B,IAAAT,cAAK,EAACC,uBAAe,CAACC,wBAAwB,EAAE;QAC/CC,OAAO,EAAE;MACV,CAAC,CAAC;IACH;IACA,OAAO,GAAGI,IAAI,IAAI5B,UAAU,IAAI8B,QAAQ,EAAE;EAC3C,CAAC;EAED,OAAO;IACNF,IAAI;IACJG,WAAW,EAAE,GAAGH,IAAI,IAAI7B,YAAY,EAAE;IACtC8B,SAAS;IACTG,aAAa,EAAEF,QAAQ,IAAI,GAAGD,SAAS,CAACC,QAAQ,CAAC,IAAI7B,SAAS,EAAE;IAChEgC,kBAAkB,EAAEH,QAAQ,IAAI,GAAGD,SAAS,CAACC,QAAQ,CAAC,IAAI5B,aAAa,EAAE;IACzEgC,YAAY,EAAEA,CAACJ,QAAQ,EAAEX,YAAY,KAAK;MACzCD,uBAAuB,CAACC,YAAY,CAAC;MACrC,OAAO,GAAGU,SAAS,CAACC,QAAQ,CAAC,IAAI5B,aAAa,IAAIiB,YAAY,EAAE;IACjE;EACD,CAAC;AACF;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACO,SAASgB,SAASA,CAACR,YAAoB,EAAiB;EAC9D,OAAOF,YAAY,CAAC,IAAAW,cAAU,EAAC,CAAC,CAACC,qBAAqB,EAAEV,YAAY,CAAC;AACtE;;AAEA;AACA;AACA;AACA;AACA;AACO,SAASW,uBAAuBA,CAACC,MAAqB,EAAEC,SAAiB,EAAU;EACzF,MAAMC,UAAU,GAAGtC,aAAa,CAACqC,SAAS,CAAC;EAC3C,MAAMZ,IAAI,GAAGzB,aAAa,CAACoC,MAAM,CAACX,IAAI,CAAC;EACvC,IAAIa,UAAU,KAAKb,IAAI,IAAI,CAACa,UAAU,CAAC5B,UAAU,CAAC,GAAGe,IAAI,GAAG,CAAC,EAAE;IAC9D,IAAAP,cAAK,EAACC,uBAAe,CAACC,wBAAwB,EAAE;MAC/C;MACA;MACAC,OAAO,EAAE;IACV,CAAC,CAAC;EACH;EACA,OAAOiB,UAAU;AAClB","ignoreList":[]}

package/lib/commonjs/query/budgets.js

@@ -0,0 +1,95 @@
+"use strict";
+
+Object.defineProperty(exports, "__esModule", {
+  value: true
+});
+exports.assertArtifactWithinBudget = assertArtifactWithinBudget;
+exports.assertBatchWithinBudget = assertBatchWithinBudget;
+exports.assertRecordWithinBudget = assertRecordWithinBudget;
+exports.serializedSize = serializedSize;
+exports.utf8Length = utf8Length;
+var _config = require("../contract/config.js");
+var _errors = require("../contract/errors.js");
+var _errors2 = require("../diagnostics/errors.js");
+/**
+ * Budget enforcement.
+ *
+ * Per-record size, page size, and batch size are HARD limits reported through
+ * typed errors (FR-088a). The rest are soft: exceeding them must not crash,
+ * hang, or drop data silently, and the degraded behavior is documented.
+ */
+
+/**
+ * UTF-8 length of a string, counted rather than encoded: measuring a 256 KB
+ * record used to allocate a 256 KB byte array just to read its length.
+ */
+function utf8Length(value) {
+  let bytes = 0;
+  for (let index = 0; index < value.length; index += 1) {
+    const unit = value.charCodeAt(index);
+    if (unit < 0x80) {
+      bytes += 1;
+    } else if (unit < 0x800) {
+      bytes += 2;
+    } else if (unit >= 0xd800 && unit <= 0xdbff && index + 1 < value.length) {
+      // A surrogate pair is one four-byte code point.
+      bytes += 4;
+      index += 1;
+    } else {
+      bytes += 3;
+    }
+  }
+  return bytes;
+}
+
+/** UTF-8 byte length of the serialized payload — what actually hits disk. */
+function serializedSize(data) {
+  return utf8Length(JSON.stringify(data ?? {}));
+}
+
+/**
+ * Checks the size budget and returns the serialized payload, so the write that
+ * follows stores this string instead of serializing the record a second time.
+ */
+function assertRecordWithinBudget(collection, data) {
+  const payload = JSON.stringify(data ?? {});
+  const size = utf8Length(payload);
+  if (size > _config.Budgets.MAX_RECORD_BYTES) {
+    // Truncating would be silent data loss; failing opaquely would leave
+    // the consumer guessing. The size and the limit are both safe to
+    // report — neither can carry a field value.
+    (0, _errors2.raise)(_errors.DiagnosticCodes.RECORD_TOO_LARGE, {
+      message: 'record exceeds the per-record size budget',
+      detail: {
+        collection,
+        sizeBytes: size,
+        limitBytes: _config.Budgets.MAX_RECORD_BYTES
+      }
+    });
+  }
+  return payload;
+}
+function assertBatchWithinBudget(count) {
+  if (count > _config.Budgets.MAX_BATCH_OPERATIONS) {
+    (0, _errors2.raise)(_errors.DiagnosticCodes.BATCH_TOO_LARGE, {
+      message: 'batch exceeds the operation budget',
+      detail: {
+        count,
+        limit: _config.Budgets.MAX_BATCH_OPERATIONS
+      }
+    });
+  }
+}
+function assertArtifactWithinBudget(id, size) {
+  if (size > _config.Budgets.MAX_ARTIFACT_BYTES) {
+    (0, _errors2.raise)(_errors.DiagnosticCodes.ATTACHMENT_WRITE_FAILED, {
+      message: 'artifact exceeds the size budget',
+      detail: {
+        attachmentId: id,
+        sizeBytes: size,
+        limitBytes: _config.Budgets.MAX_ARTIFACT_BYTES
+      }
+    });
+  }
+}
+//# sourceMappingURL=budgets.js.map

package/lib/commonjs/query/budgets.js.map

@@ -0,0 +1 @@
+{"version":3,"names":["_config","require","_errors","_errors2","utf8Length","value","bytes","index","length","unit","charCodeAt","serializedSize","data","JSON","stringify","assertRecordWithinBudget","collection","payload","size","Budgets","MAX_RECORD_BYTES","raise","DiagnosticCodes","RECORD_TOO_LARGE","message","detail","sizeBytes","limitBytes","assertBatchWithinBudget","count","MAX_BATCH_OPERATIONS","BATCH_TOO_LARGE","limit","assertArtifactWithinBudget","id","MAX_ARTIFACT_BYTES","ATTACHMENT_WRITE_FAILED","attachmentId"],"sourceRoot":"../../../src","sources":["query/budgets.ts"],"mappings":";;;;;;;;;;AAQA,IAAAA,OAAA,GAAAC,OAAA;AACA,IAAAC,OAAA,GAAAD,OAAA;AAEA,IAAAE,QAAA,GAAAF,OAAA;AAXA;AACA;AACA;AACA;AACA;AACA;AACA;;AAOA;AACA;AACA;AACA;AACO,SAASG,UAAUA,CAACC,KAAa,EAAU;EACjD,IAAIC,KAAK,GAAG,CAAC;EACb,KAAK,IAAIC,KAAK,GAAG,CAAC,EAAEA,KAAK,GAAGF,KAAK,CAACG,MAAM,EAAED,KAAK,IAAI,CAAC,EAAE;IACrD,MAAME,IAAI,GAAGJ,KAAK,CAACK,UAAU,CAACH,KAAK,CAAC;IACpC,IAAIE,IAAI,GAAG,IAAI,EAAE;MAChBH,KAAK,IAAI,CAAC;IACX,CAAC,MAAM,IAAIG,IAAI,GAAG,KAAK,EAAE;MACxBH,KAAK,IAAI,CAAC;IACX,CAAC,MAAM,IAAIG,IAAI,IAAI,MAAM,IAAIA,IAAI,IAAI,MAAM,IAAIF,KAAK,GAAG,CAAC,GAAGF,KAAK,CAACG,MAAM,EAAE;MACxE;MACAF,KAAK,IAAI,CAAC;MACVC,KAAK,IAAI,CAAC;IACX,CAAC,MAAM;MACND,KAAK,IAAI,CAAC;IACX;EACD;EACA,OAAOA,KAAK;AACb;;AAEA;AACO,SAASK,cAAcA,CAACC,IAAwB,EAAU;EAChE,OAAOR,UAAU,CAACS,IAAI,CAACC,SAAS,CAACF,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC;AAC9C;;AAEA;AACA;AACA;AACA;AACO,SAASG,wBAAwBA,CAACC,UAAkB,EAAEJ,IAAwB,EAAU;EAC9F,MAAMK,OAAO,GAAGJ,IAAI,CAACC,SAAS,CAACF,IAAI,IAAI,CAAC,CAAC,CAAC;EAC1C,MAAMM,IAAI,GAAGd,UAAU,CAACa,OAAO,CAAC;EAChC,IAAIC,IAAI,GAAGC,eAAO,CAACC,gBAAgB,EAAE;IACpC;IACA;IACA;IACA,IAAAC,cAAK,EAACC,uBAAe,CAACC,gBAAgB,EAAE;MACvCC,OAAO,EAAE,2CAA2C;MACpDC,MAAM,EAAE;QAAET,UAAU;QAAEU,SAAS,EAAER,IAAI;QAAES,UAAU,EAAER,eAAO,CAACC;MAAiB;IAC7E,CAAC,CAAC;EACH;EACA,OAAOH,OAAO;AACf;AAEO,SAASW,uBAAuBA,CAACC,KAAa,EAAQ;EAC5D,IAAIA,KAAK,GAAGV,eAAO,CAACW,oBAAoB,EAAE;IACzC,IAAAT,cAAK,EAACC,uBAAe,CAACS,eAAe,EAAE;MACtCP,OAAO,EAAE,oCAAoC;MAC7CC,MAAM,EAAE;QAAEI,KAAK;QAAEG,KAAK,EAAEb,eAAO,CAACW;MAAqB;IACtD,CAAC,CAAC;EACH;AACD;AAEO,SAASG,0BAA0BA,CAACC,EAAU,EAAEhB,IAAY,EAAQ;EAC1E,IAAIA,IAAI,GAAGC,eAAO,CAACgB,kBAAkB,EAAE;IACtC,IAAAd,cAAK,EAACC,uBAAe,CAACc,uBAAuB,EAAE;MAC9CZ,OAAO,EAAE,kCAAkC;MAC3CC,MAAM,EAAE;QACPY,YAAY,EAAEH,EAAE;QAChBR,SAAS,EAAER,IAAI;QACfS,UAAU,EAAER,eAAO,CAACgB;MACrB;IACD,CAAC,CAAC;EACH;AACD","ignoreList":[]}