@feltdb/core 0.4.15 → 0.4.17

package/dist/cli/index.js

@@ -23,7 +23,7 @@ import * as path from 'path';
 import * as readline from 'readline';
 import { getClient } from './api-client.js';
 import { loadFeltDBConfig, createDefaultConfig, validateModel, } from './config.js';
-const VERSION = '0.4.15';
+const VERSION = '0.4.17';
 function prompt(question) {
     const rl = readline.createInterface({
         input: process.stdin,

package/dist/collection.d.ts

@@ -94,6 +94,17 @@ export declare class Collection<T> {
      * Check if a record exists.
      */
     exists(id: string | number): Promise<boolean>;
+    /**
+     * Atomically insert a record only if the key does not already exist.
+     * Process-safe across independent Node.js processes.
+     *
+     * @returns {inserted: true, value: newRecord} if this call created the record
+     * @returns {inserted: false, value: existingRecord} if record already existed
+     */
+    putIfAbsent(id: string | number, data: Partial<T>): Promise<{
+        inserted: boolean;
+        value: T;
+    }>;
     /**
      * Subscribe to changes in this collection using reactive dependency graph.
      * Returns an unsubscribe function.

package/dist/collection.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"collection.d.ts","sourceRoot":"","sources":["../src/collection.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAIxC,OAAO,KAAK,EAAE,WAAW,EAAc,MAAM,kBAAkB,CAAC;AAEhE,MAAM,MAAM,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,OAAO,CAAC;AAChD,MAAM,MAAM,UAAU,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,KAAK,IAAI,CAAC;AAEjD;;;;;GAKG;AACH,qBAAa,UAAU,CAAC,CAAC;IACvB,OAAO,CAAC,EAAE,CAAO;IACjB,OAAO,CAAC,IAAI,CAAS;IACrB,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,SAAS,CAA6B;IAC9C,OAAO,CAAC,KAAK,CAAW;IACxB,OAAO,CAAC,WAAW,CAAiC;IACpD,OAAO,CAAC,MAAM,CAA8B;IAC5C,OAAO,CAAC,QAAQ,CAAuB;IACvC,OAAO,CAAC,aAAa,CAAS;IAC9B,OAAO,CAAC,oBAAoB,CAA8B;IAC1D,OAAO,CAAC,gBAAgB,CAA6B;IACrD,OAAO,CAAC,kBAAkB,CAA6B;IACvD,OAAO,CAAC,YAAY,CAAoC;IACxD,OAAO,CAAC,UAAU,CAAa;IAC/B,OAAO,CAAC,aAAa,CAAS;gBAElB,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC;IAmBpF;;OAEG;YACW,oBAAoB;IAalC;;;OAGG;IACG,GAAG,IAAI,OAAO,CAAC,CAAC,EAAE,CAAC;IAKzB,0DAA0D;IACpD,IAAI,CAAC,KAAK,GAAE,OAAO,CAAC,CAAC,CAAM,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC;IAQhD;;;;;OAKG;IACH,WAAW,CAAC,MAAM,EAAE,WAAW,GAAG,IAAI;IAWtC;;OAEG;IACH,WAAW,IAAI,WAAW,EAAE;IAI5B;;;OAGG;IACG,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC;IAYrC;;OAEG;IACG,eAAe,IAAI,OAAO,CAAC,OAAO,CAAC;IAazC;;OAEG;IACG,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IAajD;;;OAGG;IACH,KAAK,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC;IAO7C;;OAEG;IACG,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IA4BrE;;OAEG;IACG,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IA8BrE;;OAEG;IACG,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA2BhD;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC;IAK9B;;OAEG;IACG,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAKnD;;;OAGG;IACH,SAAS,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,MAAM,IAAI;IA6CxE,mEAAmE;IACnE,KAAK,IAAI,IAAI;IASb;;OAEG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAgC/B;AAED;;GAEG;AACH,qBAAa,YAAY,CAAC,MAAM,EAAE,KAAK;IACrC,OAAO,CAAC,QAAQ,CAAO;IACvB,OAAO,CAAC,OAAO,CAAO;IACtB,OAAO,CAAC,eAAe,CAAS;IAChC,OAAO,CAAC,UAAU,CAAoC;gBAGpD,QAAQ,EAAE,IAAI,EACd,OAAO,EAAE,IAAI,EACb,eAAe,EAAE,MAAM,EACvB,UAAU,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,MAAM,GAAG,MAAM;IAQ/C;;OAEG;IACG,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC;CAoBxD"}
+{"version":3,"file":"collection.d.ts","sourceRoot":"","sources":["../src/collection.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAIxC,OAAO,KAAK,EAAE,WAAW,EAAc,MAAM,kBAAkB,CAAC;AAEhE,MAAM,MAAM,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,OAAO,CAAC;AAChD,MAAM,MAAM,UAAU,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,EAAE,KAAK,IAAI,CAAC;AAEjD;;;;;GAKG;AACH,qBAAa,UAAU,CAAC,CAAC;IACvB,OAAO,CAAC,EAAE,CAAO;IACjB,OAAO,CAAC,IAAI,CAAS;IACrB,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,SAAS,CAA6B;IAC9C,OAAO,CAAC,KAAK,CAAW;IACxB,OAAO,CAAC,WAAW,CAAiC;IACpD,OAAO,CAAC,MAAM,CAA8B;IAC5C,OAAO,CAAC,QAAQ,CAAuB;IACvC,OAAO,CAAC,aAAa,CAAS;IAC9B,OAAO,CAAC,oBAAoB,CAA8B;IAC1D,OAAO,CAAC,gBAAgB,CAA6B;IACrD,OAAO,CAAC,kBAAkB,CAA6B;IACvD,OAAO,CAAC,YAAY,CAAoC;IACxD,OAAO,CAAC,UAAU,CAAa;IAC/B,OAAO,CAAC,aAAa,CAAS;gBAElB,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC;IAmBpF;;OAEG;YACW,oBAAoB;IAalC;;;OAGG;IACG,GAAG,IAAI,OAAO,CAAC,CAAC,EAAE,CAAC;IAKzB,0DAA0D;IACpD,IAAI,CAAC,KAAK,GAAE,OAAO,CAAC,CAAC,CAAM,GAAG,OAAO,CAAC,CAAC,EAAE,CAAC;IAQhD;;;;;OAKG;IACH,WAAW,CAAC,MAAM,EAAE,WAAW,GAAG,IAAI;IAWtC;;OAEG;IACH,WAAW,IAAI,WAAW,EAAE;IAI5B;;;OAGG;IACG,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC;IAYrC;;OAEG;IACG,eAAe,IAAI,OAAO,CAAC,OAAO,CAAC;IAazC;;OAEG;IACG,GAAG,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IAajD;;;OAGG;IACH,KAAK,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC,CAAC;IAO7C;;OAEG;IACG,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IA4BrE;;OAEG;IACG,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IA8BrE;;OAEG;IACG,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA2BhD;;OAEG;IACG,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC;IAK9B;;OAEG;IACG,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAKnD;;;;;;OAMG;IACG,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC;QAAE,QAAQ,EAAE,OAAO,CAAC;QAAC,KAAK,EAAE,CAAC,CAAA;KAAE,CAAC;IAmClG;;;OAGG;IACH,SAAS,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,MAAM,IAAI;IA6CxE,mEAAmE;IACnE,KAAK,IAAI,IAAI;IASb;;OAEG;IACG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAgC/B;AAED;;GAEG;AACH,qBAAa,YAAY,CAAC,MAAM,EAAE,KAAK;IACrC,OAAO,CAAC,QAAQ,CAAO;IACvB,OAAO,CAAC,OAAO,CAAO;IACtB,OAAO,CAAC,eAAe,CAAS;IAChC,OAAO,CAAC,UAAU,CAAoC;gBAGpD,QAAQ,EAAE,IAAI,EACd,OAAO,EAAE,IAAI,EACb,eAAe,EAAE,MAAM,EACvB,UAAU,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,MAAM,GAAG,MAAM;IAQ/C;;OAEG;IACG,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC;CAoBxD"}

package/dist/collection.js

@@ -246,6 +246,40 @@ export class Collection {
         const item = await this.get(id);
         return item !== null;
     }
+    /**
+     * Atomically insert a record only if the key does not already exist.
+     * Process-safe across independent Node.js processes.
+     *
+     * @returns {inserted: true, value: newRecord} if this call created the record
+     * @returns {inserted: false, value: existingRecord} if record already existed
+     */
+    async putIfAbsent(id, data) {
+        const key = `${this.name}:${id}`;
+        const stored = typeof data === 'object' && data !== null
+            ? { ...data, id }
+            : data;
+        const stringValue = JSON.stringify(stored);
+        if (!this.db.putIfAbsent) {
+            throw new Error(`putIfAbsent is not supported by this FeltDB runtime. ` +
+                `Only FileJsDb (Node.js) supports durable atomic conditional creation.`);
+        }
+        const result = await this.db.putIfAbsent(key, stringValue);
+        // Emit change through reactive dependency graph if this was a new insert
+        if (result.inserted) {
+            const change = {
+                type: 'insert',
+                key,
+                value: stored,
+                timestamp: Date.now(),
+            };
+            const graph = getReactiveDependencyGraph();
+            await graph.emitChange(this.name, change);
+        }
+        return {
+            inserted: result.inserted,
+            value: JSON.parse(result.value)
+        };
+    }
     /**
      * Subscribe to changes in this collection using reactive dependency graph.
      * Returns an unsubscribe function.

package/dist/create/package-versions.js

@@ -1,4 +1,4 @@
 // One release train keeps generated applications installable. The repository
 // validation script checks these values against every workspace manifest.
-export const FELTDB_PACKAGE_VERSION = '0.4.15';
+export const FELTDB_PACKAGE_VERSION = '0.4.17';
 export const feltdbPackageRange = `^${FELTDB_PACKAGE_VERSION}`;

package/dist/create/server-source/crates/feltdb/Cargo.toml

@@ -15,7 +15,7 @@ rand = "0.8"
 bincode = "1"
 
 [target.'cfg(not(target_arch = "wasm32"))'.dependencies]
-tokio = { version = "1", features = ["net", "io-util"] }
+tokio = { version = "1", features = ["net", "io-util", "rt-multi-thread"] }
 
 [dev-dependencies]
 criterion = { version = "0.5", features = ["html_reports"] }

package/dist/create/server-source/crates/feltdb/src/application.rs

@@ -152,6 +152,10 @@ pub struct PolicyDefinition {
     pub name: String,
     pub resource: String,
     #[serde(default)]
+    pub read: Option<String>,
+    #[serde(default)]
+    pub write: Option<String>,
+    #[serde(default)]
     pub capabilities: Vec<String>,
 }
 #[derive(Debug, Clone, Serialize, Deserialize, PartialEq, Eq)]
@@ -363,6 +367,10 @@ pub struct ValidationReport {
     pub issues: Vec<ValidationIssue>,
 }
 
+fn is_valid_policy_subject(subject: &str) -> bool {
+    matches!(subject, "authenticated" | "owner" | "member")
+}
+
 fn unique(
     issues: &mut Vec<ValidationIssue>,
     category: &str,
@@ -734,6 +742,24 @@ pub fn validate_manifest(
                 ));
             }
         }
+        if let Some(ref read_subject) = policy.read {
+            if !is_valid_policy_subject(read_subject) {
+                issues.push(issue(
+                    "semantic",
+                    format!("policies.{}.read", policy.name),
+                    &format!("invalid policy subject '{}'", read_subject),
+                ));
+            }
+        }
+        if let Some(ref write_subject) = policy.write {
+            if !is_valid_policy_subject(write_subject) {
+                issues.push(issue(
+                    "semantic",
+                    format!("policies.{}.write", policy.name),
+                    &format!("invalid policy subject '{}'", write_subject),
+                ));
+            }
+        }
     }
     let state_schema = crate::state_contract::schema_from_manifest(manifest, "validation");
     let schema_validation = crate::state_contract::validate_schema(&state_schema);
@@ -2241,4 +2267,71 @@ mod tests {
             Some(promotion.diff_hash.as_str())
         );
     }
+
+    #[test]
+    fn policy_with_valid_authenticated_subject() {
+        let mut manifest = ApplicationManifest::empty("tenant", "app", "test");
+        manifest.policies.push(PolicyDefinition {
+            name: "TodoPolicy".into(),
+            resource: "Todo".into(),
+            read: Some("authenticated".into()),
+            write: Some("authenticated".into()),
+            capabilities: vec![],
+        });
+
+        let report = validate_manifest(&manifest, "tenant", "app", None);
+        assert!(report.valid, "Policy with authenticated subject should be valid: {:?}", report.issues);
+    }
+
+    #[test]
+    fn policy_with_valid_owner_subject() {
+        let mut manifest = ApplicationManifest::empty("tenant", "app", "test");
+        manifest.policies.push(PolicyDefinition {
+            name: "ProjectPolicy".into(),
+            resource: "Project".into(),
+            read: Some("authenticated".into()),
+            write: Some("owner".into()),
+            capabilities: vec![],
+        });
+
+        let report = validate_manifest(&manifest, "tenant", "app", None);
+        assert!(report.valid, "Policy with owner subject should be valid: {:?}", report.issues);
+    }
+
+    #[test]
+    fn policy_with_invalid_subject_rejected() {
+        let mut manifest = ApplicationManifest::empty("tenant", "app", "test");
+        manifest.policies.push(PolicyDefinition {
+            name: "BadPolicy".into(),
+            resource: "BadCollection".into(),
+            read: Some("unknown_subject".into()),
+            write: None,
+            capabilities: vec![],
+        });
+
+        let report = validate_manifest(&manifest, "tenant", "app", None);
+        assert!(!report.valid, "Policy with unknown subject should be invalid");
+        assert!(
+            report.issues.iter().any(|i|
+                i.path.contains("BadPolicy") && i.path.contains("read") &&
+                i.message.contains("invalid policy subject")
+            ),
+            "Should have error about invalid policy subject"
+        );
+    }
+
+    #[test]
+    fn policy_without_subjects_is_valid() {
+        let mut manifest = ApplicationManifest::empty("tenant", "app", "test");
+        manifest.policies.push(PolicyDefinition {
+            name: "LegacyPolicy".into(),
+            resource: "SomeCollection".into(),
+            read: None,
+            write: None,
+            capabilities: vec!["some:capability".into()],
+        });
+
+        let report = validate_manifest(&manifest, "tenant", "app", None);
+        assert!(report.valid, "Policy without subjects should be valid (backward compatible)");
+    }
 }